commit 807cd7203468e71f195a9e2b8c42103bc4298d9e
author Victor Hsieh <victorhsieh@google.com> Thu Nov 02 14:47:30 2023 +0000
committer Gerrit Code Review <noreply-gerritcodereview@google.com> Thu Nov 02 14:47:30 2023 +0000
tree 02da655676d9353d9081c173a681e53b699fb2e8
parent daa1cec849d77ea7e548e094234fe5dfc7e3a7c5
parent 5d102ffeb1358be6556e0203be669d0733a205a7

Merge "Allow system_server to read sepolicy from sysfs" into main

private/system_server.te

diff --git a/private/system_server.te b/private/system_server.te
index 0229e6c..8a294e3 100644
--- a/private/system_server.te
+++ b/private/system_server.te
@@ -928,6 +928,9 @@
 allow system_server sysfs_zram:dir search;
 allow system_server sysfs_zram:file rw_file_perms;
 
+# Read /sys/fs/selinux/policy
+allow system_server kernel:security read_policy;
+
 add_service(system_server, system_server_service);
 allow system_server artd_service:service_manager find;
 allow system_server audioserver_service:service_manager find;