allow kernel to access firmware and zram

Bug: 205780090
Test: boot with no relevant error log
Change-Id: I272d9babfb0283e46cfc2e65e0bb85323bf8b7a2
This commit is contained in:
Adam Shih 2021-11-15 13:44:23 +08:00
parent d66ba1bd25
commit af53f729cf
2 changed files with 6 additions and 5 deletions

View file

@ -1,5 +0,0 @@
# b/205780090
dontaudit kernel per_boot_file:file { read };
dontaudit kernel vendor_fw_file:dir { search };
dontaudit kernel vendor_fw_file:file { open };
dontaudit kernel vendor_fw_file:file { read };

View file

@ -0,0 +1,6 @@
allow kernel vendor_fw_file:dir search;
allow kernel vendor_fw_file:file r_file_perms;
# ZRam
allow kernel per_boot_file:file r_file_perms;