sepolicy: Address kernel denials
Change-Id: Ie506bd769173d1c5780cfbf8b2740b5c5d66d8c5 Signed-off-by: DennySPb <dennyspb@gmail.com>
This commit is contained in:
parent
933e39f1c8
commit
7f69622f6f
1 changed files with 7 additions and 0 deletions
7
sepolicy/vendor/kernel.te
vendored
Normal file
7
sepolicy/vendor/kernel.te
vendored
Normal file
|
@ -0,0 +1,7 @@
|
|||
allow kernel self:system syslog_read;
|
||||
|
||||
# Allow kernel to read kmsg_device
|
||||
allow kernel kmsg_device:chr_file r_file_perms;
|
||||
|
||||
# Allow kernel to search in block_device
|
||||
allow kernel block_device:dir search;
|
Loading…
Reference in a new issue