PWN-Hunter/android_system_sepolicy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Allow system settings to read /proc/version

Browse Source 
Used to display kernel version in settings app.

avc: denied { read } for name="version" dev="proc"
scontext=u:r:system_app:s0 tcontext=u:object_r:proc_version:s0
tclass=file permissive=0

Bug: 66985744
Test: kernel version now displayed in settings app.
Change-Id: I53f92f63362b900347fd393a40d70ccf5d220d30
This commit is contained in:
Jeff Vander Stoep 2017-09-27 12:27:03 -07:00 committed by Jeffrey Vander Stoep
parent 91d398d802
commit c975bd904f
1 changed files with 4 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
private/system_app.te
View File

@ -92,7 +92,10 @@ allow system_app keystore:keystore_key {
r_dir_file(system_app, sysfs_type)
# settings app reads /proc/version and /proc/pagetypeinfo
allow system_app proc:file r_file_perms;
allow system_app {
proc
proc_version
}:file r_file_perms;
control_logd(system_app)
read_runtime_log_tags(system_app)