Evolution-X-Tensor/device_google_gs201
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

reject mnt_vendor_file access in user ROM

Browse source 
Bug: 224429437
Test: android.security.cts.SELinuxHostTest#testNoBugreportDenials
Change-Id: I318f11866f7b9c6cc0b7ecf151f789f35ab290cd
This commit is contained in:
Adam Shih 2022-03-16 14:08:09 +08:00
parent 38c2803c54
commit bedd866505
1 changed files with 1 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

1
whitechapel_pro/hal_dumpstate_default.te
View file

@ -111,6 +111,7 @@ userdebug_or_eng(`
allow hal_dumpstate_default vendor_dri_debugfs:file r_file_perms;
')
dontaudit hal_dumpstate_default mnt_vendor_file:dir search;
dontaudit hal_dumpstate_default vendor_dri_debugfs:dir r_dir_perms;
dontaudit hal_dumpstate_default vendor_dri_debugfs:file r_file_perms;
dontaudit hal_dumpstate_default debugfs:dir r_dir_perms;