commit 0a6c2ee101ad8ba9895ae30d3047c8b108f6ec1d
author Tri Vo <trong@google.com> Sat Oct 13 17:34:23 2018 -0700
committer Tri Vo <trong@google.com> Sun Oct 14 00:36:29 2018 +0000
tree 0ff4430eed2e8588e847b9fa0350e101b5d001a0
parent f3f20b27144a27d05a1d2bc15a7bd93d1d60573e

b1c1: explicit vendor app access to cgroup

The set of vendor apps touching cgroup is from go/sedenials.

Bug: 110043362
Test: build with aosp/788639, boot blueline without cgroup denials/audit
messages.
Change-Id: Ifb5e6024e249868e0a6db5430db9a076e40f23c7

vendor/qcom/common/ssr_detector.te

diff --git a/vendor/qcom/common/ssr_detector.te b/vendor/qcom/common/ssr_detector.te
index a5ffd3b..0fd4cc7 100644
--- a/vendor/qcom/common/ssr_detector.te
+++ b/vendor/qcom/common/ssr_detector.te
@@ -19,3 +19,5 @@
 allow ssr_detector_app sysfs:lnk_file r_file_perms;
 
 r_dir_file(ssr_detector_app, sysfs_msm_subsys)
+
+allow ssr_detector_app cgroup:file w_file_perms;