commit 446c8c08373a0dd7c70fc9b61a7639f20dcb21a2
author Maciej Żenczykowski <maze@google.com> Thu Mar 14 10:47:30 2024 +0000
committer Maciej Żenczykowski <maze@google.com> Thu Mar 14 10:47:45 2024 +0000
tree 52e6ab03d9e8d2f07fead68a7df104b1a6fb2393
parent 43c2a181d0687c37c6ce5c1010494cdd0d5bbc49

bpfloader: allowing reading proc_bpf:file

(so we can check if we need to change it)

Test: TreeHugger
Signed-off-by: Maciej Żenczykowski <maze@google.com>
Change-Id: I229a772ec6ecebcd8826730af568980f578842ee

private/bpfloader.te

diff --git a/private/bpfloader.te b/private/bpfloader.te
index 87fed1a..609cbae 100644
--- a/private/bpfloader.te
+++ b/private/bpfloader.te
@@ -18,7 +18,7 @@
 
 allow bpfloader sysfs_fs_fuse_bpf:file r_file_perms;
 
-allow bpfloader proc_bpf:file w_file_perms;
+allow bpfloader proc_bpf:file rw_file_perms;
 
 set_prop(bpfloader, bpf_progs_loaded_prop)