tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Merge "Don't audit shell_test_data_file for runas_app" into main am: a1beaa570b am: f045f05f40

Browse source 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2684453

Change-Id: If4220e1f759e53d1eb3acc2da8936d648d83d32a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
This commit is contained in:
Treehugger Robot 2023-08-04 01:19:46 +00:00 committed by Automerger Merge Worker
commit 47bef7e7ae
1 changed files with 3 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
private/runas_app.te
View file

@ -30,3 +30,6 @@ dontaudit runas_app domain:dir search;
# processes, but not the whole system. # processes, but not the whole system.
allow runas_app self:perf_event { open read write kernel }; allow runas_app self:perf_event { open read write kernel };
neverallow runas_app self:perf_event ~{ open read write kernel }; neverallow runas_app self:perf_event ~{ open read write kernel };
# Suppress bionic loader denial /data/local/tests directories.
dontaudit runas_app shell_test_data_file:dir search;