From f4bf916b05d4275bf949b8b5c46f5763d117fdaa Mon Sep 17 00:00:00 2001 From: Wilson Sung Date: Tue, 17 Oct 2023 04:02:26 +0000 Subject: [PATCH] Supress kernel avc log before SELinux initialized Fix: 305600863 Change-Id: I795c7cd3b1df318a9164d0e3ec15d2930ecd7e21 --- tracking_denials/bug_map | 3 +-- vendor/kernel.te | 3 +++ 2 files changed, 4 insertions(+), 2 deletions(-) create mode 100644 vendor/kernel.te diff --git a/tracking_denials/bug_map b/tracking_denials/bug_map index 72c60a3..7836967 100644 --- a/tracking_denials/bug_map +++ b/tracking_denials/bug_map @@ -1,4 +1,3 @@ -kernel vendor_usb_debugfs dir b/305600863 -kernel vendor_votable_debugfs dir b/305600863 platform_app system_data_file dir b/289358324 shell sysfs_touch dir b/264823366 + diff --git a/vendor/kernel.te b/vendor/kernel.te new file mode 100644 index 0000000..ead4d43 --- /dev/null +++ b/vendor/kernel.te @@ -0,0 +1,3 @@ +dontaudit kernel vendor_usb_debugfs:dir search; +dontaudit kernel vendor_votable_debugfs:dir search; +