Add insmod-sh policy

Fix: 260366066
Change-Id: I0874c1f476b47a9ad3cee344986404958c96fd25
This commit is contained in:
Wilson Sung 2023-03-10 01:57:36 +08:00
parent 055b52e584
commit aa90037844
2 changed files with 3 additions and 4 deletions

View file

@ -1,6 +1,3 @@
# b/260366066
dontaudit insmod-sh insmod-sh:capability { sys_nice };
dontaudit insmod-sh kernel:process { setsched };
# b/260522378 # b/260522378
dontaudit insmod-sh vendor_regmap_debugfs:dir { search }; dontaudit insmod-sh vendor_regmap_debugfs:dir { search };
# b/264490091 # b/264490091

2
vendor/insmod-sh.te vendored Normal file
View file

@ -0,0 +1,2 @@
allow insmod-sh self:capability sys_nice;
allow insmod-sh kernel:process setsched;