diff --git a/non_plat/nvram_agent_binder.te b/non_plat/nvram_agent_binder.te index 9c6a26b..ebb46fa 100644 --- a/non_plat/nvram_agent_binder.te +++ b/non_plat/nvram_agent_binder.te @@ -71,3 +71,4 @@ get_prop(nvram_daemon, tel_switch_prop) # Purpose: Allow to search /mnt/vendor/nvdata when using nvram function allow nvram_agent_binder mnt_vendor_file:dir search; +allow nvram_agent_binder sysfs_boot_mode:file r_file_perms; \ No newline at end of file diff --git a/non_plat/nvram_daemon.te b/non_plat/nvram_daemon.te index 8930615..731d6ce 100644 --- a/non_plat/nvram_daemon.te +++ b/non_plat/nvram_daemon.te @@ -89,3 +89,5 @@ get_prop(nvram_daemon, tel_switch_prop) allow nvram_daemon mnt_vendor_file:dir search; allow nvram_daemon self:capability { fowner chown fsetid }; +allow nvram_daemon sysfs_boot_mode:file r_file_perms; +