Evolution-X-Tensor/device_google_zuma
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Merge changes I9868bdfd,I1085decf into udc-d1-dev

Browse source 
* changes:
  Enforce insmod-sh
  Allow insmod-sh lockdown in userdebug
This commit is contained in:
Wilson Sung 2023-03-13 04:26:34 +00:00 • committed by Android (Google) Code Review
commit 6b9e3f74b6
2 changed files with 2 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

1
tracking_denials/bug_map
View file

@ -19,7 +19,6 @@ hal_secure_element_uicc hidl_base_hwservice hwservice_manager b/264483151
hal_thermal_default sysfs file b/272166722 hal_thermal_default sysfs file b/272166722
hal_thermal_default sysfs file b/272166987 hal_thermal_default sysfs file b/272166987
hal_usb_gadget_impl sysfs_batteryinfo dir b/272166827 hal_usb_gadget_impl sysfs_batteryinfo dir b/272166827
insmod-sh insmod-sh lockdown b/272166723
kernel vendor_fw_file dir b/272166737 kernel vendor_fw_file dir b/272166737
kernel vendor_fw_file dir b/272166787 kernel vendor_fw_file dir b/272166787
mtectrl unlabeled dir b/264483752 mtectrl unlabeled dir b/264483752

4
tracking_denials/insmod-sh.te
View file

@ -1,6 +1,6 @@
# b/260522378 # b/260522378
dontaudit insmod-sh vendor_regmap_debugfs:dir { search }; dontaudit insmod-sh vendor_regmap_debugfs:dir { search };
# b/264490091 # b/272166723
userdebug_or_eng(` userdebug_or_eng(`
permissive insmod-sh; allow insmod-sh self:lockdown integrity;
') ')