Skip to content
Commit acd62758 authored by Aayush Gupta's avatar Aayush Gupta
Browse files

non_plat: Label /dev/*rpmb* and grant tee permissions to manage it



/dev/*rpmb* devices are accessed by tee. Label it and allow tee required
permissions to manage it.

Denial observed without this change:
[   46.559953] .(2)[399:logd.auditd]type=1400 audit(1609128921.644:391): avc: denied { ioctl } for comm="teei_daemon" path="/dev/rpmb0" dev="tmpfs" ino=17454 ioctlcmd=0x6 scontext=u:r:init:s0 tcontext=u:object_r:device:s0 tclass=chr_file permissive=1

Test: Boot and observe that denial no longer appears

Signed-off-by: default avatarAayush Gupta <[email protected]>
Change-Id: I3499e2a3ba177b8e69d8cdbb76939daf3f8bbc7b
parent 03fc01b6
Loading
Loading
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment