android 10 system app 读取sysfs_leds avc修改

/device/qcom/sepolicy/generic/vendor/common/system_app.te

+allow system_app sysfs_leds:dir r_dir_perms; +allow system_app sysfs_leds:file rw_file_perms; +allow system_app sysfs_leds:lnk_file read;

device/qcom/sepolicy/generic/vendor/common/genfs_contexts

+genfscon sysfs /devices/platform/soc/4a84000.i2c/i2c-0/0-0045/leds               u:object_r:sysfs_leds:s0
+genfscon sysfs /devices/platform/soc/soc:gpio-leds/leds                          u:object_r:sysfs_leds:s

/system/sepolicy/prebuilts/api/29.0/private/coredomain.te

@@ -11,6 +11,8 @@ neverallow { # generic access to sysfs_type -ueventd
     -vold
+    -system_app } sysfs_leds:file *; ') 

/system/sepolicy/private/coredomain.te

@@ -11,6 +11,8 @@ neverallow { # generic access to sysfs_type -ueventd
     -vold
+ # meig:jicong.wang add for cit +    -system_app } sysfs_leds:file *; ') 

本文地址：https://blog.csdn.net/wangjicong_215/article/details/107911810