diff --git a/sepolicy/ohos_policy/filemanagement/app_file_service/system/backup_sa.te b/sepolicy/ohos_policy/filemanagement/app_file_service/system/backup_sa.te index b23dbd35cefa473ed39b866bd1d39d93e419ba38..6dc1143c4249d7ab8fd6502d4768867835c94d16 100644 --- a/sepolicy/ohos_policy/filemanagement/app_file_service/system/backup_sa.te +++ b/sepolicy/ohos_policy/filemanagement/app_file_service/system/backup_sa.te @@ -91,3 +91,4 @@ allow backup_sa dev_block_file:dir { search }; allow backup_sa dev_block_file:lnk_file { read }; allow backup_sa dev_block_volfile:dir { search }; allow backup_sa labeledfs:filesystem { quotaget }; +allow backup_sa devinfo_type_param:file { open read map }; diff --git a/sepolicy/ohos_policy/startup/init/public/parameter.te b/sepolicy/ohos_policy/startup/init/public/parameter.te index 4cccaa4a1cfe5f06e7cb7cb24c9211a388299fe9..562e90a9085aaa15f334d519d8b812d6d3494ef2 100644 --- a/sepolicy/ohos_policy/startup/init/public/parameter.te +++ b/sepolicy/ohos_policy/startup/init/public/parameter.te @@ -38,6 +38,7 @@ typeattribute telephony_sa devinfo_type_allow_attr; typeattribute wifi_manager_service devinfo_type_allow_attr; typeattribute usb_service devinfo_type_allow_attr; typeattribute bootanimation devinfo_type_allow_attr; +typeattribute backup_sa devinfo_type_allow_attr; neverallow {sadomain -devinfo_type_allow_attr} devinfo_type_param:file {open read map}; allow {domain -sadomain } devinfo_type_param:file {open read map};