Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 30a532a1 authored by Tri Vo's avatar Tri Vo
Browse files

healthd: fix /sys denials. 

Label /sys/class/power_supply/* appropriately and give healthd read
permissions to that directory.

Fixes this denial:
avc: denied { read } for pid=1386 comm="healthd" name="power_supply"
dev="sysfs" ino=2562 scontext=u:r:healthd:s0
tcontext=u:object_r:sysfs:s0 tclass=dir permissive=0

Bug: 72437093
Test: emulator boots with no denials from healthd
Change-Id: Ie3853cb5e9167fcd70f393ff589971ad6212c580
parent 37cc632f

target/board/generic/sepolicy/genfs_contexts

+4 −0
Original line number Diff line number Diff line
@@ -2,3 +2,7 @@ 
# /sys/bus/platform/devices/ANDR0001:00/properties/android/ which is a symlink to

# /sys/devices/platform/ANDR0001:00/properties/android/

genfscon sysfs /devices/platform/ANDR0001:00/properties/android u:object_r:sysfs_dt_firmware_android:s0



# We expect /sys/class/power_supply/* and everything it links to to be labeled

# as sysfs_batteryinfo.

genfscon sysfs /devices/platform/GFSH0001:00/power_supply u:object_r:sysfs_batteryinfo:s0

target/board/generic/sepolicy/healthd.te

0 → 100644
+2 −0
Original line number Diff line number Diff line 
# Allow to read /sys/class/power_supply directory

allow healthd sysfs:dir r_dir_perms;