hikey_defconfig: disable devtmpfs
Selinux file labeling of /dev is done by ueventd. Devtmpfs may also create
files in /dev without properly labeling - leading to a race condition
where files are accessed before labeling or created after labeling.
Disabling devtmpfs such that all file creation in /dev is done by ueventd
resolves these issues.
Addresses:
avc: denied { write } for name="/" dev="devtmpfs" ino=1025 scontext=u:r:kernel:s0 tcontext=u:object_r:device:s0 tclass=dir
avc: denied { mknod } for capability=27 scontext=u:r:kernel:s0 tcontext=u:r:kernel:s0 tclass=capability
avc: denied { add_name } for name="usb_accessory" scontext=u:r:kernel:s0 tcontext=u:object_r:device:s0 tclass=dir
avc: denied { create } for name="usb_accessory" scontext=u:r:kernel:s0 tcontext=u:object_r:device:s0 tclass=chr_file
avc: denied { setattr } for name="usb_accessory" dev="devtmpfs" ino=2082 scontext=u:r:kernel:s0 tcontext=u:object_r:device:s0 tclass=chr_file
Change-Id: Iccc06afb035339ba82a9bdd323b14a17d6ee864f
1 file changed
