sepolicy: change the sepolicy for cnss_diag
cnss_diag: type=1400 audit(0.0:65):
avc: denied { search } for name="diagchar" dev="sysfs" ino=27415
scontext=u:r:wcnss_service:s0 tcontext=u:object_r:sysfs_diag:s0
tclass=dir permissive=0
audit(1502477202.513:37783): avc: denied { read
} for pid=989 comm="cnss_diag" name="timestamp_switch" dev="sysfs"
ino=27761 scontext=u:r:wcnss_service:s0
tcontext=u:object_r:sysfs_timestamp_switch:s0 tclass=file permissive=0
Bug:64604240
Change-Id: I1b882b15908241c18d694947b8de11136e6afee2
Merged-In: I1b882b15908241c18d694947b8de11136e6afee2
Signed-off-by: Ecco Park <eccopark@google.com>
(cherry picked from commit d024c1334a1900aba407174ade6aa2f196e4fbfc)
diff --git a/sepolicy/vendor/wcnss_service.te b/sepolicy/vendor/wcnss_service.te
index 15a3cac..aebd86f 100644
--- a/sepolicy/vendor/wcnss_service.te
+++ b/sepolicy/vendor/wcnss_service.te
@@ -29,6 +29,8 @@
# pkt logging for cnss_diag
userdebug_or_eng(`
r_dir_file(wcnss_service, proc_wifi_dbg)
+ r_dir_file(wcnss_service, sysfs_diag)
+ allow wcnss_service sysfs_timestamp_switch:file r_file_perms;
')
allow wcnss_service sysfs_soc:dir search;
