tree a2995eeb41815d7c165352aa46843347314c72a2
parent 489d88b95b1ee0d9b74a26a6f16f6c3966fea6d5
author Adam Shih <adamshih@google.com> 1581501397 +0800
committer Adam Shih <adamshih@google.com> 1581502000 +0800

grant init permission on persist and firmware

persist:
[    1.477398] audit: type=1400 audit(38535916.876:4): avc:  denied  { relabelto } for  pid=1 comm="init" name="persist" dev="tmpfs" ino=14000 scontext=u:r:init:s0 tcontext=u:object_r:persist_block_device:s0 tclass=lnk_file permissive=0
[    1.477418] selinux: SELinux: Could not set context for /dev/block/platform/soc/7c4000.sdhci/by-name/persist:  Permission denied

firmware:
[    2.365050] type=1400 audit(38535917.763:5): avc: denied { getattr } for comm="init" name="/" dev="mmcblk0p21" ino=1 scontext=u:r:init:s0 tcontext=u:object_r:vendor_firmware_file:s0 tclass=filesystem permissive=0

Bug: 149063688
Test: boot and find no related error after flashing selinux modules to
device

Change-Id: I380b315037e2dc34e3a33b181aebb17a72d64a73