Verified Commit 090ff7fb authored Apr 15, 2022 by Ahmed Harhash

avicii: sepolicy: Allow kernel to read and write to block device

* 04-13 06:26:43.988   480   480 W kworker/7:4: type=1400
  audit(0.0:3137): avc: denied { read write } for name="sde67"
  dev="tmpfs" ino=15438 scontext=u:r:kernel:s0
  tcontext=u:object_r:block_device:s0 tclass=blk_file permissive=0

parent 22ad11aa

sepolicy/vendor/kernel.te

+3 −0

Original line number	Diff line number	Diff line
		@@ -11,3 +11,6 @@ allow kernel oem_block_device:blk_file rw_file_perms;

		# Allow kernel to read and write to param_block_device
		allow kernel param_block_device:blk_file rw_file_perms;

		# Allow kernel to read and write to block device
		allow kernel block_device:blk_file rw_file_perms;