db845c|rb5: Fix wakeup selinux denials
Label more wakeup nodes for the VTS
SuspendSepolicyTests#SuspendSepolicyTests test.
Othewise the following error message will be printed:
Unlabeled wakeup nodes found, your device is likely missing
device/oem specific selinux genfscon rules for suspend.
Please review and add the following generated rules to the
device specific genfs_contexts:
genfscon sysfs devices/platform/remoteproc-adsp/wakeup u:object_r:sysfs_wakeup:s0
genfscon sysfs devices/platform/remoteproc-cdsp/wakeup u:object_r:sysfs_wakeup:s0
genfscon sysfs devices/platform/soc@0/c440000.spmi/spmi-0/0-00/c440000.spmi:pmic@0:rtc@6000/rtc/rtc0/alarmtimer.1.auto/wakeup u:object_r:sysfs_wakeup:s0
Missing sysfs_wakeup labels
Exit Code: 1
Fixes: 183f6a7cc351 ("db845c: bump PRODUCT_SHIPPING_API_LEVEL to 33")
Test: vts -m SuspendSepolicyTests
Suggested-by: Yongqin Liu <yongqin.liu@linaro.org>
Signed-off-by: Yongqin Liu <yongqin.liu@linaro.org>
Signed-off-by: Amit Pundir <amit.pundir@linaro.org>
Change-Id: I0a8a64711a7706a543230c9dfc5943259fa7da03
diff --git a/sepolicy/system_server.te b/sepolicy/system_server.te
index e801436..5e0af39 100644
--- a/sepolicy/system_server.te
+++ b/sepolicy/system_server.te
@@ -1,3 +1,4 @@
gpu_access(system_server)
allow system_server wifi_hal_prop:file {open read getattr map};
allow system_server vendor_file:dir read;
+allow system_server sysfs_wakeup:file { getattr open read };