Add insmod-sh policy

Fix: 260366066 Change-Id: I0874c1f476b47a9ad3cee344986404958c96fd25
2023-03-10 01:57:36 +08:00
parent 055b52e584
commit aa90037844
2 changed files with 3 additions and 4 deletions
--- a/tracking_denials/insmod-sh.te
+++ b/tracking_denials/insmod-sh.te
@@ -1,9 +1,6 @@
-# b/260366066
-dontaudit insmod-sh insmod-sh:capability { sys_nice };
-dontaudit insmod-sh kernel:process { setsched };
 # b/260522378
 dontaudit insmod-sh vendor_regmap_debugfs:dir { search };
 # b/264490091
 userdebug_or_eng(`
  permissive insmod-sh;
-')
+')
--- a/vendor/insmod-sh.te
+++ b/vendor/insmod-sh.te
@@ -0,0 +1,2 @@
+allow insmod-sh self:capability sys_nice;
+allow insmod-sh kernel:process setsched;