tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Merge "sepolicy: dontaudit cap_sys_admin on userdebug/eng"

Browse source
This commit is contained in:
Treehugger Robot 2019-08-29 18:40:40 +00:00 committed by Gerrit Code Review
commit 845e04ba73
1 changed files with 5 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
private/fsverity_init.te
View file

@ -23,3 +23,8 @@ allow fsverity_init proc_fs_verity:file w_file_perms;
# already registered algorithm with that name. If it fails, the kernel creates
# an implementation of the algorithm from templates.
dontaudit fsverity_init kernel:system module_request;
# TODO(b/132323675): remove once kernel bug is fixed.
userdebug_or_eng(`
dontaudit fsverity_init self:capability sys_admin;
')