device_google_zuma/vendor/kernel.te
Wilson Sung 2d2ec40c1a Supress kernel avc log before SELinux initialized
Fix: 281814849
Fix: 292059050
Change-Id: Ie83557668ded8ab17bf77e60ed21db33e9f4f580
2023-08-04 07:32:39 +00:00

23 lines
730 B
Text

allow kernel vendor_fw_file:dir r_dir_perms;
allow kernel vendor_fw_file:file r_file_perms;
# ZRam
allow kernel per_boot_file:file r_file_perms;
# memlat needs permision to create/delete perf events when hotplug on/off
allow kernel self:capability2 perfmon;
allow kernel self:perf_event cpu;
no_debugfs_restriction(`
allow kernel vendor_battery_debugfs:dir search;
')
dontaudit kernel vendor_maxfg_debugfs:dir search;
dontaudit kernel sepolicy_file:file getattr;
dontaudit kernel system_bootstrap_lib_file:dir getattr;
dontaudit kernel system_bootstrap_lib_file:file getattr;
dontaudit kernel system_dlkm_file:dir getattr;
dontaudit kernel vendor_battery_debugfs:dir search;
allow kernel vendor_regmap_debugfs:dir search;