tree d2cc747576b9b45709b2f78b0ab7b0bab65c60d3
parent b8a60a6f933ccb0a6a349bc0534da0ff08c65430
author Luca Weiss <luca.weiss@fairphone.com> 1648109830 +0100
committer Caleb Connolly <caleb.connolly@protonmail.com> 1648124991 +0000

sepolicy: allow rmtfs to read sysfs_remoteproc

The new rmtfs version tries to read the 'modalias' file in sysfs and
causes this following selinux denial. Allow it.

I auditd  : type=1400 audit(0.0:37): avc: denied { read } for comm=rmtfs name=remoteproc0 dev=sysfs ino=21783 scontext=u:r:rmtfs:s0 tcontext=u:object_r:sysfs:s0 tclass=dir permissive=0
W rmtfs   : type=1400 audit(0.0:37): avc: denied { read } for name=remoteproc0 dev=sysfs ino=21783 scontext=u:r:rmtfs:s0 tcontext=u:object_r:sysfs:s0 tclass=dir permissive=0
I auditd  : type=1400 audit(0.0:38): avc: denied { read } for comm=rmtfs name=modalias dev=sysfs ino=3163 scontext=u:r:rmtfs:s0 tcontext=u:object_r:sysfs_remoteproc:s0 tclass=file permissive=0
W rmtfs   : type=1400 audit(0.0:38): avc: denied { read } for name=modalias dev=sysfs ino=3163 scontext=u:r:rmtfs:s0 tcontext=u:object_r:sysfs_remoteproc:s0 tclass=file permissive=0