From 3e1197bafbe0943da26820d4c279754ddbc069f4 Mon Sep 17 00:00:00 2001
From: Wilson Sung <wilsonsung@google.com>
Date: Fri, 2 Aug 2024 09:17:28 +0000
Subject: [PATCH] Add kernel vendor_fw_file dir read permission

07-31 05:35:39.208 885 885 W binder:885_5: type=1400 audit(0.0:125): avc: denied { read } for name="firmware" dev="dm-7" ino=48 scontext=u:r:kernel:s0 tcontext=u:object_r:vendor_fw_file:s0 tclass=dir

Fix: 356530883
Flag: EXEMPT bugfix
Change-Id: I1bb8fcfc952c69c991fd978a617eb92558817267
---
 whitechapel_pro/kernel.te | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/whitechapel_pro/kernel.te b/whitechapel_pro/kernel.te
index d44eed68..1af0a9a4 100644
--- a/whitechapel_pro/kernel.te
+++ b/whitechapel_pro/kernel.te
@@ -1,4 +1,4 @@
-allow kernel vendor_fw_file:dir search;
+allow kernel vendor_fw_file:dir r_dir_perms;
 allow kernel vendor_fw_file:file r_file_perms;
 
 # ZRam