Associate the sysfs_block_type attribute with sysfs SCSI device information
Patch https://android-review.googlesource.com/c/platform/system/sepolicy/+/1783947
("Allow the init and apexd processes to read all block device properties")
associates the sysfs_block_type attribute with the files under
/sys/class/block. SCSI device information needs to be labeled separately
because it exists elsewhere:
# ls -ld /sys/class/block/sda
lrwxrwxrwx 1 root root 0 2021-08-17 14:49 /sys/class/block/sda -> ../../devices/platform/14700000.ufs/host0/target0:0:0/0:0:0:0/block/sda
Hence this patch that associates the sysfs_block_type attribute with SCSI
device information in sysfs.
Bug: 196982345
Test: Untested.
Change-Id: I1d1e543bfccda5457298bcd4943c29e95bad38e4
Signed-off-by: Bart Van Assche <bvanassche@google.com>
diff --git a/vendor/qcom/common/file.te b/vendor/qcom/common/file.te
index e7af955..f5544b1 100644
--- a/vendor/qcom/common/file.te
+++ b/vendor/qcom/common/file.te
@@ -13,7 +13,7 @@
type sysfs_poweroff, sysfs_type, fs_type;
type sysfs_rmtfs, sysfs_type, fs_type;
type sysfs_soc, sysfs_type, fs_type;
-type sysfs_scsi_devices_0000, sysfs_type, fs_type;
+type sysfs_scsi_devices_0000, sysfs_type, fs_type, sysfs_block_type;
type sysfs_scsi_devices_other, sysfs_type, fs_type;
type sysfs_mmc, sysfs_type, fs_type;
type sysfs_system_sleep_stats, sysfs_type, fs_type;
