Grant logwrapper domain read permission for sysfs dirs/files

logwrapper domain need read the /sys/class/udc dir to check the dwc status. However the file label for this dir changed in the GSI image, this cause logwrapper lose the read permission. Grant a more generic sysfs file access permission for logwrapper to resolve this issue. Tracked-On: OAM-128815 Signed-off-by: Zhenlong Z Ji <[email protected]>
projectceladon · Dec 24, 2024 · fd1cb69 · fd1cb69
1 parent dc7123a
commit fd1cb69
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/vendor/logwrapper.te b/vendor/logwrapper.te
@@ -4,3 +4,4 @@ type logwrapper_exec, exec_type, file_type, vendor_file_type;
 init_daemon_domain(logwrapper)
 
 allow logwrapper devpts:chr_file rw_file_perms;
+r_dir_file(logwrapper, sysfs_type)