From 3377f79b53e27e03190f3e393bbcb18f12c4e5cc Mon Sep 17 00:00:00 2001 From: "Kevin F. Haggerty" Date: Sat, 5 Sep 2020 05:26:22 -0600 Subject: [PATCH] msm8974-common: sepolicy: Allow system_app to access zram sysfs nodes avc: denied { search } for name="zram0" dev="sysfs" ino=20744 scontext=u:r:system_app:s0 tcontext=u:object_r:sysfs_zram:s0 tclass=dir permissive=0 avc: denied { open } for name="mem_used_total" dev="sysfs" ino=20804 scontext=u:r:system_app:s0 tcontext=u:object_r:sysfs_zram:s0 tclass=file permissive=0 avc: denied { read } for name="mem_used_total" dev="sysfs" ino=20804 scontext=u:r:system_app:s0 tcontext=u:object_r:sysfs_zram:s0 tclass=file permissive=0 Change-Id: Ide9b1a9488b26fa69e7a2c8e73a8e657c8b28beb --- sepolicy/common/system_app.te | 3 +++ 1 file changed, 3 insertions(+) diff --git a/sepolicy/common/system_app.te b/sepolicy/common/system_app.te index 9aa08bc..42c8c4f 100644 --- a/sepolicy/common/system_app.te +++ b/sepolicy/common/system_app.te @@ -1,2 +1,5 @@ allow system_app sysfs_mdnie:dir search; allow system_app sysfs_mdnie:file rw_file_perms; + +allow system_app sysfs_zram:dir search; +allow system_app sysfs_zram:file r_file_perms;