device_google_zuma/tracking_denials/kernel.te
Wilson Sung ac3c24c4f2 dontaudit kernel search allow debugfs
Bug: 261650972
Change-Id: I39b0feb01c592c7beb30d7aa1610c39a75bb3481
2023-02-08 13:21:48 +08:00

20 lines
756 B
Text

# b/260522245
dontaudit kernel same_process_hal_file:file { open };
dontaudit kernel same_process_hal_file:file { read };
dontaudit kernel vendor_regmap_debugfs:dir { search };
# b/261933155
dontaudit kernel vendor_fw_file:file { getattr };
# b/262794429
dontaudit kernel same_process_hal_file:file { getattr };
dontaudit kernel sepolicy_file:file { getattr };
dontaudit kernel system_bootstrap_lib_file:dir { getattr };
dontaudit kernel system_bootstrap_lib_file:file { getattr };
dontaudit kernel system_dlkm_file:dir { getattr };
dontaudit kernel vendor_fw_file:dir { getattr };
dontaudit kernel vendor_fw_file:dir { read };
# b/263185161
dontaudit kernel kernel:capability { net_bind_service };
# b/264490052
userdebug_or_eng(`
permissive kernel;
')