Merge "Don't audit storageproxyd unlabeled access" am: fbf92e2ada
Original change: https://android-review.googlesource.com/c/device/google/gs101-sepolicy/+/2007441 Change-Id: I7b9186af0cb135241e23504fa9d6f7c3d6718c7c
This commit is contained in:
commit
22f2ffcbee
1 changed files with 4 additions and 0 deletions
4
whitechapel/vendor/google/storageproxyd.te
vendored
4
whitechapel/vendor/google/storageproxyd.te
vendored
|
@ -15,3 +15,7 @@ allow tee self:capability { setgid setuid };
|
|||
|
||||
# Allow storageproxyd access to gsi_public_metadata_file
|
||||
read_fstab(tee)
|
||||
|
||||
# storageproxyd starts before /data is mounted. It handles /data not being there
|
||||
# gracefully. However, attempts to access /data trigger a denial.
|
||||
dontaudit tee unlabeled:dir { search };
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue