For sched nodes, "proc_vendor_sched" and "sysfs_vendor_sched", their type definition is in product sepolicy, while genfs_contexts is in vendor sepolicy. In this case, genfs_contexts cannot be resolved after product sepolicy is replaced by Dynamic System Update. Need to keep the type definition and genfs_contexts in the same partition. Now move genfs_contexts because the type definition has to be in product for now since other private domains are accessing these sched nodes. Test: $ make selinux_policy The device can boot to home after replacing with GSI. Bug: 191236468 Change-Id: I02ea78b04dfcade4ceb426ff6ebf498daa81ac32
3 lines
244 B
Text
3 lines
244 B
Text
# Vendor sched files
|
|
genfscon sysfs /kernel/vendor_sched u:object_r:sysfs_vendor_sched:s0
|
|
genfscon proc /vendor_sched u:object_r:proc_vendor_sched:s0
|