Evolution-X-Tensor/device_google_pantah
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Suppress avc denials of sysfs [DO NOT MERGE]

Browse source 
Bug: 263548298
Test: TreeHugger build.
Signed-off-by: Mason Wang <masonwang@google.com>
Change-Id: Ic5545995b5dc38e4b5fecd70dabf5bcd6de2368d
This commit is contained in:
Mason Wang 2023-01-03 16:05:31 +08:00
parent 4914414330
commit fcc3c266e6
5 changed files with 6 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

2
cheetah-sepolicy.mk
View file

@ -1,3 +1,3 @@
# sepolicy that are shared among devices using whitechapel # sepolicy that are shared among devices using whitechapel
BOARD_SEPOLICY_DIRS += device/google/pantah-sepolicy/cheetah BOARD_SEPOLICY_DIRS += device/google/pantah-sepolicy/cheetah
BOARD_SEPOLICY_DIRS += device/google/pantah-sepolicy/tracking_denials

2
cloudripper-sepolicy.mk
View file

@ -1,3 +1,3 @@
# sepolicy that are shared among devices using whitechapel # sepolicy that are shared among devices using whitechapel
BOARD_SEPOLICY_DIRS += device/google/pantah-sepolicy/cloudripper BOARD_SEPOLICY_DIRS += device/google/pantah-sepolicy/cloudripper
BOARD_SEPOLICY_DIRS += device/google/pantah-sepolicy/tracking_denials

1
panther-sepolicy.mk
View file

@ -1,2 +1,3 @@
# sepolicy that are shared among devices using whitechapel # sepolicy that are shared among devices using whitechapel
BOARD_SEPOLICY_DIRS += device/google/pantah-sepolicy/panther BOARD_SEPOLICY_DIRS += device/google/pantah-sepolicy/panther
BOARD_SEPOLICY_DIRS += device/google/pantah-sepolicy/tracking_denials

1
ravenclaw-sepolicy.mk
View file

@ -1,2 +1,3 @@
# sepolicy that are shared among devices using whitechapel # sepolicy that are shared among devices using whitechapel
BOARD_SEPOLICY_DIRS += device/google/pantah-sepolicy/ravenclaw BOARD_SEPOLICY_DIRS += device/google/pantah-sepolicy/ravenclaw
BOARD_SEPOLICY_DIRS += device/google/pantah-sepolicy/tracking_denials

2
tracking_denials/hal_dumpstate_default.te Normal file
View file

@ -0,0 +1,2 @@
# b/263548298
dontaudit hal_dumpstate_default sysfs:dir { read };