27f55d7da7
Add exclusion to fix issue with SELinuxUncheckedDenialBootTest Bug: 241072524 Signed-off-by: Konstantin Vyshetsky <vkon@google.com> Change-Id: Id9088f728c34d3c764e1aef66a5e1a126f6243e9
34 lines
1.8 KiB
Text
34 lines
1.8 KiB
Text
type convert-to-ext4-sh, domain, coredomain;
|
|
type convert-to-ext4-sh_exec, system_file_type, exec_type, file_type;
|
|
|
|
userdebug_or_eng(`
|
|
permissive convert-to-ext4-sh;
|
|
|
|
init_daemon_domain(convert-to-ext4-sh)
|
|
|
|
allow convert-to-ext4-sh block_device:dir search;
|
|
allow convert-to-ext4-sh e2fs_exec:file rx_file_perms;
|
|
allow convert-to-ext4-sh efs_block_device:blk_file rw_file_perms;
|
|
allow convert-to-ext4-sh kernel:process setsched;
|
|
allow convert-to-ext4-sh kmsg_device:chr_file rw_file_perms;
|
|
allow convert-to-ext4-sh persist_block_device:blk_file { getattr ioctl open read write };
|
|
allow convert-to-ext4-sh shell_exec:file rx_file_perms;
|
|
allow convert-to-ext4-sh sysfs_fs_ext4_features:dir { read search };
|
|
allow convert-to-ext4-sh sysfs_fs_ext4_features:file read;
|
|
allow convert-to-ext4-sh tmpfs:dir { add_name create mounton open };
|
|
allow convert-to-ext4-sh tmpfs:dir { remove_name rmdir rw_file_perms setattr };
|
|
allow convert-to-ext4-sh tmpfs:file { create rw_file_perms unlink };
|
|
allow convert-to-ext4-sh toolbox_exec:file rx_file_perms;
|
|
allow convert-to-ext4-sh vendor_persist_type:dir { rw_file_perms search };
|
|
allow convert-to-ext4-sh vendor_persist_type:file rw_file_perms;
|
|
|
|
allowxperm convert-to-ext4-sh { efs_block_device persist_block_device}:blk_file ioctl {
|
|
BLKDISCARD BLKPBSZGET BLKDISCARDZEROES BLKROGET LOOP_CLR_FD
|
|
};
|
|
|
|
dontaudit convert-to-ext4-sh labeledfs:filesystem { mount unmount };
|
|
dontaudit convert-to-ext4-sh self:capability { chown fowner fsetid dac_read_search sys_admin sys_rawio };
|
|
dontaudit convert-to-ext4-sh unlabeled:dir { add_name create mounton open rw_file_perms search setattr };
|
|
dontaudit convert-to-ext4-sh unlabeled:file { create rw_file_perms setattr };
|
|
dontaudit convert-to-ext4-sh convert-to-ext4-sh:capability { dac_override };
|
|
')
|