Label and allow access to /sys/kernel/debug/nvmap
system_server needs read access to /sys/kernel/debug/nvmap.
Allow it.
Other random processes need search access within the directory.
Allow it. This isn't a regression from older Android releases,
since we've always allowed search access to debugfs. This makes
it no worse.
Addresses the following denial:
avc: denied { read } for comm="android.bg" name="nvmap" dev="debugfs" ino=4658 scontext=u:r:system_server:s0 tcontext=u:object_r:debugfs:s0 tclass=dir permissive=0
Change-Id: Ie55808f1d52086b15bbf04ed85e9a11d5f559acb
4 files changed
