summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorsukiliu <sukiliu@google.com>2021-04-23 16:37:32 +0800
committersukiliu <sukiliu@google.com>2021-04-23 16:37:48 +0800
commit538b84d61eb4259d8050a3d49f6382d177b8feb8 (patch)
treeef169238d5a6b1fc33e2315438c48207d6f879ce
parentd1ecb399c6ede673524ade52c466d1386b94bc9a (diff)
downloadbonito-sepolicy-538b84d61eb4259d8050a3d49f6382d177b8feb8.tar.gz
Update avc error on ROM 7306716
avc: denied { read } for name="bufinfo" dev="debugfs" ino=2465 scontext=u:r:dumpstate:s0 tcontext=u:object_r:debugfs_dma_bufinfo:s0 tclass=file permissive=0 avc: denied { search } for name="c440000.qcom,spmi" dev="sysfs" ino=24019 scontext=u:r:incidentd:s0 tcontext=u:object_r:sysfs_msm_subsys:s0 tclass=dir permissive=0 Bug: 186176982 Bug: 186177103 Bug: 186070602 Test: PTS PtsSELinuxTestCases Change-Id: Ib5d73f43cf1f2e4b3613fd9f8f4254a807de718d
-rw-r--r--tracking_denials/dumpstate.te2
-rw-r--r--tracking_denials/incidentd.te2
2 files changed, 4 insertions, 0 deletions
diff --git a/tracking_denials/dumpstate.te b/tracking_denials/dumpstate.te
new file mode 100644
index 00000000..a3416dd9
--- /dev/null
+++ b/tracking_denials/dumpstate.te
@@ -0,0 +1,2 @@
+# b/186177103
+dontaudit dumpstate debugfs_dma_bufinfo:file read;
diff --git a/tracking_denials/incidentd.te b/tracking_denials/incidentd.te
new file mode 100644
index 00000000..ea92c4e3
--- /dev/null
+++ b/tracking_denials/incidentd.te
@@ -0,0 +1,2 @@
+# b/186176982
+dontaudit incidentd sysfs_msm_subsys:dir search;