From 4b829da526193dfbbe62bdd4c543d008b37c0372 Mon Sep 17 00:00:00 2001 From: Tri Vo Date: Mon, 23 Oct 2017 11:22:21 -0700 Subject: [PATCH] shell: grant access to /proc/version Addresses this denial during CtsBionicTestCases: avc: denied { getattr } for path="/proc/version" dev="proc" ino=4026532359 scontext=u:r:shell:s0 tcontext=u:object_r:proc_version:s0 tclass=file permissive=0 Bug: 68067856 Test: cts-tradefed run commandAndExit cts -m CtsBionicTestCases --skip-all-system-status-check --primary-abi-only --skip-preconditions No more denials to /proc/version Change-Id: I7e927fbaf1a8ce3637e09452cbd50f475176838e --- public/shell.te | 1 + 1 file changed, 1 insertion(+) diff --git a/public/shell.te b/public/shell.te index 44d812130..3ef14866c 100644 --- a/public/shell.te +++ b/public/shell.te @@ -115,6 +115,7 @@ allow shell proc_meminfo:file r_file_perms; allow shell proc_modules:file r_file_perms; allow shell proc_stat:file r_file_perms; allow shell proc_timer:file r_file_perms; +allow shell proc_version:file r_file_perms; allow shell proc_zoneinfo:file r_file_perms; r_dir_file(shell, cgroup) allow shell domain:dir { search open read getattr };