zenfone8: sepolicy allow system_app to access zram sysfs nodes
04-22 09:15:37.459 19569 19569 I auditd : type=1400 audit(0.0:570): avc: denied { search } for comm="pool-2-thread-1" name="zram0" dev="sysfs" ino=48559 scontext=u:r:system_app:s0 tcontext=u:object_r:sysfs_zram:s0 tclass=dir permissive=0
04-22 09:15:37.459 19569 19569 I auditd : type=1400 audit(0.0:571): avc: denied { search } for comm="pool-2-thread-1" name="zram0" dev="sysfs" ino=48559 scontext=u:r:system_app:s0 tcontext=u:object_r:sysfs_zram:s0 tclass=dir permissive=0
Change-Id: Ide9b1a9488b26fa69e7a2c8e73a8e657c8b28beb
Signed-off-by: Ivan Vecera <ivan@cera.cz>
diff --git a/sepolicy/vendor/system_app.te b/sepolicy/vendor/system_app.te
index 62b0cd8..271504c 100644
--- a/sepolicy/vendor/system_app.te
+++ b/sepolicy/vendor/system_app.te
@@ -1,3 +1,5 @@
allow system_app proc_pagetypeinfo:file r_file_perms;
+allow system_app sysfs_zram:dir search;
+allow system_app sysfs_zram:file r_file_perms;
allow system_app vendor_proc_graphics:file { rw_file_perms setattr };