From cf29787f8db8377222eaa5c7862606cdd5a8b7a4 Mon Sep 17 00:00:00 2001
From: Richard Chang <richardycc@google.com>
Date: Mon, 16 Dec 2024 07:10:02 +0000
Subject: [PATCH] sepolicy: update init.te for zram device

Sync patch from zuma: ag/21578379, but move to gs-common.

Avc denied log:
avc:  denied  { write } for  comm="init" name="zram0" dev="tmpfs" ino=1306 scontext=u:r:init:s0 tcontext=u:object_r:ram_device:s0 tclass=blk_file permissive=1

Verify on PBuilds:
https://android-build.corp.google.com/abtd/run/L32800030008398424/

Bug: 370643878
Test: Boot and check avc denied logs
Flag: EXEMPT sepolicy
Change-Id: I90ea0b248835fa51fe07cfa23e5f819fd8422c08
---
 performance/sepolicy/init.te | 2 ++
 1 file changed, 2 insertions(+)
 create mode 100644 performance/sepolicy/init.te

diff --git a/performance/sepolicy/init.te b/performance/sepolicy/init.te
new file mode 100644
index 0000000..5d1d13f
--- /dev/null
+++ b/performance/sepolicy/init.te
@@ -0,0 +1,2 @@
+# zram
+allow init ram_device:blk_file w_file_perms;