device_google_gs-common/storage/sepolicy/kernel.te
Jaegeuk Kim b1072785ba Allow write for restorecon
[ 8345.125689] type=1400 audit(1737841652.160:245): avc:  denied  { write } for  comm="kworker/u16:2" path="/dev/block/sda34" dev="tmpfs" ino=1060 scontext=u:r:kernel:s0 tcontext=u:object_r:userdata_exp_block_device:s0 tclass=blk_file permissive=0

Bug: 361093433
Flag: EXEMPT bugfix
Change-Id: Ia03cddd6eebe9b8875bdbd1a8eb3a67f51269032
Signed-off-by: Jaegeuk Kim <jaegeuk@google.com>
2025-01-25 16:27:47 -08:00

3 lines
92 B
Text

# for intelligence service
allow kernel userdata_exp_block_device:blk_file { read write };