diff --git a/non_plat/file.te b/non_plat/file.te index ab973a7..6ca32cb 100644 --- a/non_plat/file.te +++ b/non_plat/file.te @@ -431,3 +431,8 @@ type sysfs_pages_volatile, fs_type, sysfs_type; # Date : 2019/10/22 # Purpose : allow aee_aedv write /sys/module/mrdump/parameters/lbaooo type sysfs_mrdump_lbaooo, fs_type, sysfs_type; + +# Date : 2019/10/25 +# Purpose : To avoid using the SELabel of u:object_r:proc:s0 or u:object_r:sysfs:s0 +# to access /proc/device-tree/chosen/atag,chipid or /sysfs/firmware/devicetree/base/chosen/atag,chipid +type sysfs_chipid, fs_type, sysfs_type; diff --git a/non_plat/genfs_contexts b/non_plat/genfs_contexts index edf72ff..cb30065 100644 --- a/non_plat/genfs_contexts +++ b/non_plat/genfs_contexts @@ -263,3 +263,8 @@ genfscon sysfs /kernel/mm/ksm/pages_shared u:object_r:sysfs_pages_shared:s0 genfscon sysfs /kernel/mm/ksm/pages_sharing u:object_r:sysfs_pages_sharing:s0 genfscon sysfs /kernel/mm/ksm/pages_unshared u:object_r:sysfs_pages_unshared:s0 genfscon sysfs /kernel/mm/ksm/pages_volatile u:object_r:sysfs_pages_volatile:s0 + +# Date : 2019/10/25 +# Purpose : To avoid using the SELabel of u:object_r:proc:s0 or u:object_r:sysfs:s0 +# to access /proc/device-tree/chosen/atag,chipid or /sysfs/firmware/devicetree/base/chosen/atag,chipid +genfscon sysfs /firmware/devicetree/base/chosen/atag,chipid u:object_r:sysfs_chipid:s0