diff options
author | Vishal Mahaveer | 2017-10-05 17:27:28 -0500 |
---|---|---|
committer | Vishal Mahaveer | 2017-10-05 17:30:18 -0500 |
commit | 39ccc7699884ad8e6895b134f20d984110cc193a (patch) | |
tree | 681b8a31007dbd469e8f3158ddf66102735c846b | |
parent | befa47ebea7ec6175c6e568ac60594cae5eb2e70 (diff) | |
download | device-ti-jacinto6evm-39ccc7699884ad8e6895b134f20d984110cc193a.tar.gz device-ti-jacinto6evm-39ccc7699884ad8e6895b134f20d984110cc193a.tar.xz device-ti-jacinto6evm-39ccc7699884ad8e6895b134f20d984110cc193a.zip |
jacinto6evm: sepolicy: update for pvrsrvkm move to vendor partition
sepolicy update for recent move of pvr kernel module to vendor
partition. This change fixes the below selinux warning
[ 7.682370] type=1400 audit(7.679:4): avc: denied { module_load }
for pid=187 comm="pvrsrvinit" path="/vendor/lib/modules/pvrsrvkm.ko"
dev="mmcblk0p11" ino=160 scontext=u:r:pvr:s0 tcontext=u:object_r:vendor_file:s0
tclass=system permissive=1
Change-Id: Id137852d626c2e5ee0ef8fdb40d7934c484c0ec9
Signed-off-by: Vishal Mahaveer <vishalm@ti.com>
-rw-r--r-- | sepolicy/pvr.te | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/sepolicy/pvr.te b/sepolicy/pvr.te index 747ee36..820e734 100644 --- a/sepolicy/pvr.te +++ b/sepolicy/pvr.te | |||
@@ -9,7 +9,7 @@ allow pvr gpu_device:chr_file rw_file_perms; | |||
9 | 9 | ||
10 | # allow graphics driver initialization | 10 | # allow graphics driver initialization |
11 | allow pvr self:capability sys_module; | 11 | allow pvr self:capability sys_module; |
12 | allow pvr system_file:system module_load; | 12 | allow pvr vendor_file:system module_load; |
13 | 13 | ||
14 | # allow reading /sys/devices/soc0/machine | 14 | # allow reading /sys/devices/soc0/machine |
15 | allow pvr sysfs:file { r_file_perms }; | 15 | allow pvr sysfs:file { r_file_perms }; |