tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Merge "Ignore access to /proc/zoneinfo for apps"

Browse source
This commit is contained in:
Thiébaud Weksteen 2022-10-26 22:52:22 +00:00 committed by Gerrit Code Review
commit 685cc43e62
1 changed files with 6 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

9
private/untrusted_app_all.te
View file

@ -153,9 +153,12 @@ dontaudit untrusted_app_all net_dns_prop:file read;
# These have been disallowed since Android O.
# For P, we assume that apps are safely handling the denial.
dontaudit untrusted_app_all proc_stat:file read;
dontaudit untrusted_app_all proc_vmstat:file read;
dontaudit untrusted_app_all proc_uptime:file read;
dontaudit untrusted_app_all {
proc_stat
proc_uptime
proc_vmstat
proc_zoneinfo
}:file read;
# Allow the allocation and use of ptys
# Used by: https://play.google.com/store/apps/details?id=jackpal.androidterm