diff options
| author | Jorge Lucangeli Obes <jorgelo@google.com> | 2015-11-20 13:21:36 -0800 |
|---|---|---|
| committer | Jorge Lucangeli Obes <jorgelo@google.com> | 2015-11-20 13:21:36 -0800 |
| commit | b8bb4649eef8d5d58ddc97ded681ef51f22ea803 (patch) | |
| tree | 872fba9530efa3f339aee942b634eb7b5bef0c4f | |
| parent | e655ac44850ca7488b8dcf486f648bc2d9bbe6b2 (diff) | |
| download | brillo-b8bb4649eef8d5d58ddc97ded681ef51f22ea803.tar.gz | |
Fix 'weaved' SELinux policy.
This fixes:
denied { search } for name="zoneinfo" dev="mmcblk0p12" ino=53
scontext=u:r:weaved:s0 tcontext=u:object_r:zoneinfo_data_file:s0
tclass=dir permissive=0
Bug: 25598928
Change-Id: I7e7e992e90d5f42e2d265495cb9cf01e25790be3
| -rw-r--r-- | sepolicy/weave.te | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/sepolicy/weave.te b/sepolicy/weave.te index d4cbe9f..a238067 100644 --- a/sepolicy/weave.te +++ b/sepolicy/weave.te @@ -21,6 +21,7 @@ allow weaved webservd_data_file:file r_file_perms; allow weaved debugfs:dir search; allow weaved system_file:dir r_file_perms; +allow weaved zoneinfo_data_file:dir search; # Allow reading os-release.d properties. r_dir_file(weaved, os_release_file); |