Skip to content
This repository was archived by the owner on Nov 3, 2021. It is now read-only.

Commit

Permalink
uncrypt: allow /dev/block directory access.
Browse files Browse the repository at this point in the history
Uncrypt needs search in /dev/block to open block devices.
Allow it.

Addresses the following denial:

[11105.601711] type=1400 audit(1393550350.528:30): avc:  denied  { search } for  pid=14597 comm="uncrypt" name="block" dev="tmpfs" ino=7200 scontext=u:r:uncrypt:s0 tcontext=u:object_r:block_device:s0 tclass=dir

Change-Id: I4592784135a04ff5bff2715e1250661744f12aa1
  • Loading branch information
nickkral committed Feb 28, 2014
1 parent 0296b94 commit 0a5f561
Showing 1 changed file with 1 addition and 0 deletions.
1 change: 1 addition & 0 deletions uncrypt.te
Original file line number Diff line number Diff line change
Expand Up @@ -27,3 +27,4 @@ allow uncrypt powerctl_prop:property_service set;
# Raw writes to block device
allow uncrypt self:capability sys_rawio;
allow uncrypt block_device:blk_file w_file_perms;
allow uncrypt block_device:dir r_dir_perms;

0 comments on commit 0a5f561

Please sign in to comment.