ps:运行时的操作就是命令行下的,最简单,重启失效
$getenforce
$setenforce 0
'修改测略':
log:01-01 00:00:20.828 3665 3665 W sh : type=1400 audit(0.0:12): avc: denied { write } for name="core_pattern" dev="proc" ino=11742 scontext=u:r:brlinkd:s0 tcontext=u:object_r:usermodehelper:s0 tclass=file permissive=0
分析: scontext=u:r:brlinkd
tcontext=u:object_r:usermodehelper
tclass=file
avc:denied{write}
解析:在brlinkd.te里面写
allow brlinkd usermodehelper:file write;
src:
device/xxfslxx/xxvinsonxx/sepolicy
system/sepolicy
define:
system/sepolicy/*/global_macros