Supress kernel avc log before SELinux initialized

Bug: 288049349
Fix: 288049229
Change-Id: I5087a77e65ecdbaa868a7257342f5d99f424880a
This commit is contained in:
Wilson Sung 2023-06-21 15:26:38 +08:00
parent 8818dd2de5
commit 0b77875c4a
3 changed files with 5 additions and 5 deletions

View file

@ -1 +0,0 @@
vendor_init device_config_configuration_prop property_service b/267843409

View file

@ -6,10 +6,6 @@ incidentd debugfs_wakeup_sources file b/288049561
incidentd incidentd anon_inode b/288049561
insmod-sh insmod-sh key b/274374722
insmod-sh vendor_regmap_debugfs dir b/274727542
kernel sepolicy_file file b/288049229
kernel system_bootstrap_lib_file dir b/288049229
kernel system_bootstrap_lib_file file b/288049349
kernel system_dlkm_file dir b/288049229
kernel vendor_fw_file dir b/288049349
mtectrl unlabeled dir b/264483752
systemui_app wm_trace_data_file dir b/288049075

5
vendor/kernel.te vendored
View file

@ -13,4 +13,9 @@ no_debugfs_restriction(`
')
dontaudit kernel vendor_maxfg_debugfs:dir search;
dontaudit kernel sepolicy_file:file getattr;
dontaudit kernel system_bootstrap_lib_file:dir getattr;
dontaudit kernel system_bootstrap_lib_file:file getattr;
dontaudit kernel system_dlkm_file:dir getattr;
allow kernel vendor_regmap_debugfs:dir search;