device_google_gs201/whitechapel_pro/kernel.te
Ted Lin 9748ae74c2 Using dontaudit to fix the avc on boot test
[    1.950092] audit: type=1400 audit(1641787406.988:2): avc:  denied  { search } for  pid=49 comm="kworker/7:0" name="google_battery" dev="debugfs" ino=36095 scontext=u:r:kernel:s0 tcontext=u:object_r:vendor_battery_debugfs:s0 tclass=dir permissive=1

Bug: 213817227
Test: check bugreport
Change-Id: Ia056856476a17feb40c20c21cf1515e0feddfc17
Signed-off-by: Ted Lin <tedlin@google.com>
2022-01-25 05:18:18 +00:00

11 lines
342 B
Text

allow kernel vendor_fw_file:dir search;
allow kernel vendor_fw_file:file r_file_perms;
# ZRam
allow kernel per_boot_file:file r_file_perms;
# memlat needs permision to create/delete perf events when hotplug on/off
allow kernel self:capability2 perfmon;
allow kernel self:perf_event cpu;
dontaudit kernel vendor_battery_debugfs:dir search;