Skip to content

Instantly share code, notes, and snippets.

View Goayandi's full-sized avatar

Goayandi

  • Essen, Germany
View GitHub Profile
@Goayandi
Goayandi / gist:642246ac18431bc9c88135ba8113617d
Created April 25, 2018 19:46 — forked from msfjarvis/sepolicy.md
How to write sepolicy to fix a denial

Denial in question

avc: denied { read write } for pid=29059 comm="i.tetherservice" name="ipa" dev="tmpfs" ino=11991 scontext=u:r:system_app:s0 tcontext=u:object_r:ipa_dev:s0 tclass=chr_file permissive=0

sepolicy fix

allow system_app ipa_dev:chr_file {read write};