diff --git a/tracking_denials/bug_map b/tracking_denials/bug_map index 694ca9e6..6a1f594c 100644 --- a/tracking_denials/bug_map +++ b/tracking_denials/bug_map @@ -19,7 +19,6 @@ hal_secure_element_uicc hidl_base_hwservice hwservice_manager b/264483151 hal_thermal_default sysfs file b/272166722 hal_thermal_default sysfs file b/272166987 hal_usb_gadget_impl sysfs_batteryinfo dir b/272166827 -insmod-sh insmod-sh lockdown b/272166723 kernel vendor_fw_file dir b/272166737 kernel vendor_fw_file dir b/272166787 mtectrl unlabeled dir b/264483752 diff --git a/tracking_denials/insmod-sh.te b/tracking_denials/insmod-sh.te index d9e52eff..04c00fe8 100644 --- a/tracking_denials/insmod-sh.te +++ b/tracking_denials/insmod-sh.te @@ -4,3 +4,7 @@ dontaudit insmod-sh vendor_regmap_debugfs:dir { search }; userdebug_or_eng(` permissive insmod-sh; ') +# b/272166723 +userdebug_or_eng(` + allow insmod-sh self:lockdown integrity; +')