diff options
| author | leochuang <leochuang@google.com> | 2023-02-15 12:07:32 +0800 |
|---|---|---|
| committer | leochuang <leochuang@google.com> | 2023-02-15 17:31:22 +0800 |
| commit | ff9251342bbc0b854cd536dcfc75da1a25252ca5 (patch) | |
| tree | 5f72ce6d70dbc5ddabd292170b445813841a5f2a | |
| parent | ccfd8c0d77ca67413ebf28ce8c4f820fa8819d18 (diff) | |
| download | redfin-sepolicy-ff9251342bbc0b854cd536dcfc75da1a25252ca5.tar.gz | |
Update SELinux error
Bug: 269370035
Bug: 269369858
Test: SELinuxUncheckedDenialBootTest
Change-Id: I39c074a1fb8b1ace17f249d14783879e990a9dbe
| -rw-r--r-- | tracking_denials/bug_map | 2 | ||||
| -rw-r--r-- | tracking_denials/shell.te | 10 |
2 files changed, 12 insertions, 0 deletions
diff --git a/tracking_denials/bug_map b/tracking_denials/bug_map index ca2d09e..7537c74 100644 --- a/tracking_denials/bug_map +++ b/tracking_denials/bug_map @@ -1,7 +1,9 @@ +adbd sysfs_msm_subsys dir b/269369858 derive_sdk system_app dir b/269044764 dumpstate hal_input_processor_default process b/238263647 dumpstate incident process b/238263647 dumpstate system_data_file dir b/264600011 hal_camera_default graphics_config_prop file b/268147541 hal_drm_widevine default_prop file b/238263747 +shell build_attestation_prop file b/269370035 system_server vendor_incremental_module file b/264483807 diff --git a/tracking_denials/shell.te b/tracking_denials/shell.te new file mode 100644 index 0000000..8bbbda7 --- /dev/null +++ b/tracking_denials/shell.te @@ -0,0 +1,10 @@ +# b/269370035 +dontaudit shell incident_service:service_manager { find }; +dontaudit shell installd_service:service_manager { find }; +dontaudit shell mdns_service:service_manager { find }; +dontaudit shell netd_service:service_manager { find }; +dontaudit shell system_suspend_control_service:service_manager { find }; +dontaudit shell system_suspend_control_internal_service:service_manager { find }; +dontaudit shell vold_service:service_manager { find }; +dontaudit shell dnsresolver_service:service_manager { find }; +dontaudit shell gatekeeper_service:service_manager { find }; |