Allow system_server to read /vendor/usr/idc directory
Before this CL, system_server was not allowed to read the contents of the directory, which led to unpredictable results. Occasionally, there were sepolicy denials for InputReader thread.
To fix it, allow system_server to access the entire directory.
Bug: 366252028
Test: presubmit only
Flag: EXEMPT bugfix
Change-Id: I3f3ef251af0b1067a1fc83b26553ea3da0e48e83
diff --git a/private/file_contexts b/private/file_contexts
index e26fb4e..ecade7a 100644
--- a/private/file_contexts
+++ b/private/file_contexts
@@ -466,8 +466,11 @@
/(odm|vendor/odm|vendor|system/vendor)/apex(/[^/]+){0,2} u:object_r:vendor_apex_file:s0
# Input configuration
+/(odm|vendor/odm|vendor|system/vendor)/usr/keylayout(/.*)? u:object_r:vendor_keylayout_file:s0
/(odm|vendor/odm|vendor|system/vendor)/usr/keylayout(/.*)?\.kl u:object_r:vendor_keylayout_file:s0
+/(odm|vendor/odm|vendor|system/vendor)/usr/keychars(/.*)? u:object_r:vendor_keychars_file:s0
/(odm|vendor/odm|vendor|system/vendor)/usr/keychars(/.*)?\.kcm u:object_r:vendor_keychars_file:s0
+/(odm|vendor/odm|vendor|system/vendor)/usr/idc(/.*)? u:object_r:vendor_idc_file:s0
/(odm|vendor/odm|vendor|system/vendor)/usr/idc(/.*)?\.idc u:object_r:vendor_idc_file:s0
/oem(/.*)? u:object_r:oemfs:s0