tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Merge "Don't audit data_mirror in dumpstate"

Browse source 
am: c639fb6607

Change-Id: Ie4b54df5f7562967ffb239c9772d62c4b20ef65a
This commit is contained in:
Alan Stokes 2019-12-20 02:18:37 -08:00 committed by android-build-merger
commit 1c28900c79
1 changed files with 8 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

10
public/dumpstate.te
View file

@ -295,8 +295,14 @@ allow dumpstate self:netlink_generic_socket create_socket_perms_no_ioctl;
allow dumpstate { domain pdx_channel_socket_type pdx_endpoint_socket_type }:socket_class_set getattr; allow dumpstate { domain pdx_channel_socket_type pdx_endpoint_socket_type }:socket_class_set getattr;
# For when dumpstate runs df # For when dumpstate runs df
dontaudit dumpstate mnt_vendor_file:dir search; dontaudit dumpstate {
dontaudit dumpstate apex_mnt_dir:dir getattr; mnt_vendor_file
mirror_data_file
}:dir search;
dontaudit dumpstate {
apex_mnt_dir
mirror_data_file
}:dir getattr;
# Allow dumpstate to talk to bufferhubd over binder # Allow dumpstate to talk to bufferhubd over binder
binder_call(dumpstate, bufferhubd); binder_call(dumpstate, bufferhubd);