commit 4949b4a7b792552ab5a164f4510967e0e7cf1e4d
author Kirt_Hsieh <kirt_hsieh@asus.com> Tue Jun 16 14:10:34 2015 +0800
committer Jeffrey Vander Stoep <jeffv@google.com> Mon Jun 22 22:41:45 2015 +0000
tree e6ebfbd8381934b14434a7fb3f81bcf146bf56f7
parent 29a6b022a60291f820567552311ded36a49183df

Allow system_server to access factory file

avc: denied { search } for pid=512 comm="WifiStateMachin" name="/" dev="mmcblk0p4" ino=2 scontext=u:r:system_server:s0 tcontext=u:object_r:efs_file:s0 tclass=dir permissive=0

Bug: 21815582
Bug: 21979298

Change-Id: I7232e12930cd37ab3f499eb714fafd0dacef6166
Signed-off-by: Kirt_Hsieh <kirt_hsieh@asus.com>

sepolicy/system_server.te

diff --git a/sepolicy/system_server.te b/sepolicy/system_server.te
new file mode 100644
index 0000000..02e07fd
--- /dev/null
+++ b/sepolicy/system_server.te
@@ -0,0 +1,3 @@
+# Allow system server factory file access
+allow system_server efs_file:dir search;
+allow system_server efs_file:file r_file_perms;