sepolicy: allow rmtfs to read sysfs_remoteproc
The new rmtfs version tries to read the 'modalias' file in sysfs and
causes this following selinux denial. Allow it.
I auditd : type=1400 audit(0.0:37): avc: denied { read } for comm=rmtfs name=remoteproc0 dev=sysfs ino=21783 scontext=u:r:rmtfs:s0 tcontext=u:object_r:sysfs:s0 tclass=dir permissive=0
W rmtfs : type=1400 audit(0.0:37): avc: denied { read } for name=remoteproc0 dev=sysfs ino=21783 scontext=u:r:rmtfs:s0 tcontext=u:object_r:sysfs:s0 tclass=dir permissive=0
I auditd : type=1400 audit(0.0:38): avc: denied { read } for comm=rmtfs name=modalias dev=sysfs ino=3163 scontext=u:r:rmtfs:s0 tcontext=u:object_r:sysfs_remoteproc:s0 tclass=file permissive=0
W rmtfs : type=1400 audit(0.0:38): avc: denied { read } for name=modalias dev=sysfs ino=3163 scontext=u:r:rmtfs:s0 tcontext=u:object_r:sysfs_remoteproc:s0 tclass=file permissive=0
diff --git a/sepolicy/rmtfs.te b/sepolicy/rmtfs.te
index 7cef38f..b35b940 100644
--- a/sepolicy/rmtfs.te
+++ b/sepolicy/rmtfs.te
@@ -10,6 +10,6 @@
allow rmtfs self:qipcrtr_socket { bind create getattr read setopt write };
allow rmtfs sysfs_mss:dir { open read search };
allow rmtfs sysfs_remoteproc:dir { open read search };
-allow rmtfs sysfs_remoteproc:file { open write };
+allow rmtfs sysfs_remoteproc:file { open read write };
allow rmtfs sysfs_rmtfs:dir search;
allow rmtfs sysfs_rmtfs:file { open read };