commit ac00e4e4350d718b7652f8ad5f57bcba49e28d4b
author Jie Song <jies@google.com> Tue May 02 14:41:55 2017 -0700
committer Jeff Vander Stoep <jeffv@google.com> Thu Jul 27 12:44:09 2017 -0700
tree 15898e4a04425928574257e68cb18f6c0c0435b2
parent 40d2796a7f673102462f217e794cb3efb18e8dff

Fix Nexus Logger denials

avc: denied { create } for comm="oid.nexuslogger" name="cfg"
scontext=u:r:platform_app:s0:c512,c768
tcontext=u:object_r:diag_logs:s0:c512,c768 tclass=dir permissive=0

Bug: 37426758
Test: No permission issue with Nexus Logger
Change-Id: Idf7679f254448733e8a47d699b76c686f91939b1
(cherry picked from commit a03f0aa3285656732e8dfc215268c251b13e622d)

sepolicy/platform_app.te

diff --git a/sepolicy/platform_app.te b/sepolicy/platform_app.te
index 7510eed..1bb447c 100644
--- a/sepolicy/platform_app.te
+++ b/sepolicy/platform_app.te
@@ -1,8 +1,8 @@
 userdebug_or_eng(`
    # qxdmlogger rundiag perms
-   allow platform_app diag_logs:dir rw_dir_perms;
+   allow platform_app diag_logs:dir create_dir_perms;
    allow platform_app diag_logs:file create_file_perms;
    allow platform_app diag_device:chr_file rw_file_perms;
 ')
 
-allow platform_app oem_qmi_server:unix_stream_socket connectto;
\ No newline at end of file
+allow platform_app oem_qmi_server:unix_stream_socket connectto;