diff options
| author | Nick Kralevich <nnk@google.com> | 2013-07-12 15:38:41 -0700 |
|---|---|---|
| committer | Nick Kralevich <nnk@google.com> | 2013-07-12 15:38:41 -0700 |
| commit | 08f01a335dbf98778ef443e504d975857607d439 (patch) | |
| tree | 33ea0e30d48bf9546a131cfc12e47969b4f9dabe | |
| parent | 5bfdf340e4dd34d30dff52039ca5a5c425a670d7 (diff) | |
| download | sepolicy-08f01a335dbf98778ef443e504d975857607d439.tar.gz | |
debuggerd.te: Fix relabelto policy denial
In 0c9708b2af4ea345277a47ae7bc1ce890e90d2bc, we removed relabelto
from unconfined.te. This broke debuggerd. Fixed.
type=1400 audit(1373668537.550:5): avc: denied { relabelto } for pid=44 comm="debuggerd" name="tombstones" dev="mtdblock1" ino=71 scontext=u:r:debuggerd:s0 tcontext=u:object_r:tombstone_data_file:s0 tclass=dir
Change-Id: Ic025cbc030d6e776d9d87b1df3240fdc5f0b53d5
| -rw-r--r-- | debuggerd.te | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/debuggerd.te b/debuggerd.te index f78b902..31453c9 100644 --- a/debuggerd.te +++ b/debuggerd.te @@ -5,3 +5,5 @@ type debuggerd_exec, exec_type, file_type; init_daemon_domain(debuggerd) unconfined_domain(debuggerd) +relabelto_domain(debuggerd) +allow debuggerd tombstone_data_file:dir relabelto; |