meta-qti-sepolicy: Add search permission for mount_copybind.

Change-Id: I10aaca670c66a48a3b2fb4d96934398d60a88dcd

meta-qti-sepolicy: Add search permission for mount_copybind.
Change-Id: I10aaca670c66a48a3b2fb4d96934398d60a88dcd
e2e43c4d · Shoudi Li · 7e6e507a · e2e43c4d
Commit e2e43c4d authored 5 months ago by Shoudi Li
--- a/recipes-security/sepolicy/common/system/mount.te
+++ b/recipes-security/sepolicy/common/system/mount.te
@@ -60,7 +60,7 @@ gen_require(`
    type var_t;
 ')
 allow mount_copybind_t var_t:dir { write add_name create };
-allow mount_copybind_t var_lib_t:dir { getattr };
+allow mount_copybind_t var_lib_t:dir { getattr search write read };


 # Do not allow access to mount-copybind from a vendor domain