Allow write for restorecon

[ 8345.125689] type=1400 audit(1737841652.160:245): avc:  denied  { write } for  comm="kworker/u16:2" path="/dev/block/sda34" dev="tmpfs" ino=1060 scontext=u:r:kernel:s0 tcontext=u:object_r:userdata_exp_block_device:s0 tclass=blk_file permissive=0

Bug: 361093433
Flag: EXEMPT bugfix
Change-Id: Ia03cddd6eebe9b8875bdbd1a8eb3a67f51269032
Signed-off-by: Jaegeuk Kim <jaegeuk@google.com>
This commit is contained in:
Jaegeuk Kim 2025-01-25 13:50:16 -08:00
parent 7bd70d06d7
commit b1072785ba

View file

@ -1,3 +1,3 @@
# for intelligence service
allow kernel userdata_exp_block_device:blk_file read;
allow kernel userdata_exp_block_device:blk_file { read write };