tree f169244028ab5e14c8916d53cdfcb5f859fbc561
parent 20fe64e73d9eb7c8ba266bbe9ada85070b03ad47
author Jerry Zhang <zhangjerry@google.com> 1492041025 -0700
committer Jerry Zhang <zhangjerry@google.com> 1492105056 +0000

Add configfs file permissions to init.

These were previously in device specific sepolicies.
They should be in core sepolicy to reflect their
use by a core init file, init.usb.configfs.rc.

Addresses denial:

init    : type=1400 audit(0.0:135): avc: denied { unlink } for name="f1"
dev="configfs" ino=10923 scontext=u:r:init:s0
tcontext=u:object_r:configfs:s0 tclass=lnk_file permissive=0

Test: denial addressed
Change-Id: I869892f9d0c311b727462fb380f4160feb986215