From 0440e82770dee2bbba5d5860a3452035c7cf3044 Mon Sep 17 00:00:00 2001
From: Randall Huang <huangrandall@google.com>
Date: Thu, 5 Sep 2024 15:56:26 +0800
Subject: [PATCH] storage: fix vendor_init avc denied

avc:  denied  { write } for  comm="init" name="swappiness" dev="proc" ino=207356 scontext=u:r:vendor_init:s0 tcontext=u:object_r:proc_dirty:s0 tclass=file permissive=1

Bug: 361093041
Test: local build
Change-Id: I595008f957c322aedbdf383c4e50c0e0ce30b9dc
Signed-off-by: Randall Huang <huangrandall@google.com>
---
 storage/sepolicy/vendor_init.te | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/storage/sepolicy/vendor_init.te b/storage/sepolicy/vendor_init.te
index f5f17e4..73eb527 100644
--- a/storage/sepolicy/vendor_init.te
+++ b/storage/sepolicy/vendor_init.te
@@ -1,3 +1,6 @@
 # vendor_init
 allow vendor_init sg_device:chr_file r_file_perms;
 
+# dirty swappiness
+allow vendor_init proc_dirty:file w_file_perms;
+