commit 8c617be05f35d15a0f774fcf3d57f92b2a7f67fc
author Tri Vo <trong@google.com> Sat Apr 13 17:46:48 2019 -0700
committer Tri Vo <trong@google.com> Wed May 08 15:52:01 2019 -0700
tree f5230046dcf47792b3b24533975ba02649d625a5
parent c8aa75946c452714a701609ebbcbc232778def35

ueventd: allow /metadata dir search

avc: denied { search } for name="metadata" dev="vda" ino=31
scontext=u:r:ueventd:s0 tcontext=u:object_r:metadata_file:s0 tclass=dir
permissive=0

Bug: 129497117
Test: boot cuttlefish without above denial
Change-Id: I4baf54d2cfb58935c3d7452c2c5e8a27d9073d06
Merged-In: I4baf54d2cfb58935c3d7452c2c5e8a27d9073d06
(cherry picked from commit 4385ee7441f4add63e189486566237a52805e219)

shared/sepolicy/ueventd.te

diff --git a/shared/sepolicy/ueventd.te b/shared/sepolicy/ueventd.te
new file mode 100644
index 0000000..985c8ec
--- /dev/null
+++ b/shared/sepolicy/ueventd.te
@@ -0,0 +1 @@
+allow ueventd metadata_file:dir search;