LenovoZ5s/device_lenovo_sdm710-common
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

sdm710-common: sepolicy: allow tee to read persist_file link for qseecomd

Browse source 
* W qseecomd: type=1400 audit(0.0:26131): avc: denied { read } for name="persist" dev="mmcblk0p27" ino=43
  scontext=u:r:tee:s0 tcontext=u:object_r:persist_file:s0 tclass=lnk_file permissive=0

Change-Id: If830be30b4f8c64c7d0260c0a009149e3aba8668
This commit is contained in:
tImIbreakdown 2021-07-05 11:43:49 +03:00 committed by CakesTwix
parent 60d42efd08
commit e4c27418ef
Signed by: CakesTwix
GPG key ID: 7B11051D5CE19825
1 changed files with 2 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
sepolicy/vendor/tee.te vendored
View file

@ -1 +1,2 @@
allow tee tmpfs:dir r_dir_perms;
allow tee tmpfs:dir r_dir_perms;
allow tee persist_file:lnk_file read;