Merge "crash_dump: supress denials for files in /proc"

This commit is contained in:
Treehugger Robot 2021-03-30 14:03:10 +00:00 committed by Gerrit Code Review
commit d64e4f4fd1

View file

@ -65,6 +65,10 @@ dontaudit crash_dump {
dontaudit crash_dump system_data_file:{ lnk_file file } read; dontaudit crash_dump system_data_file:{ lnk_file file } read;
dontaudit crash_dump property_type:file read; dontaudit crash_dump property_type:file read;
# Suppress denials for files in /proc that are passed
# across exec().
dontaudit crash_dump proc_type:file rw_file_perms;
### ###
### neverallow assertions ### neverallow assertions
### ###