device_google_zuma/tracking_denials/kernel.te
Wilson Sung da09093d88 Enforce kernel domain
Bug: 264490052
Test: boot-to-home
Change-Id: I383b689b5c26c08d66307b677e36b28f2ab6f7dd
2023-02-21 19:29:15 +08:00

10 lines
429 B
Text

# b/260522245
allow kernel same_process_hal_file:file r_file_perms;
dontaudit kernel vendor_regmap_debugfs:dir { search };
# b/262794429
dontaudit kernel sepolicy_file:file { getattr };
dontaudit kernel system_bootstrap_lib_file:dir { getattr };
dontaudit kernel system_bootstrap_lib_file:file { getattr };
dontaudit kernel system_dlkm_file:dir { getattr };
# b/263185161
dontaudit kernel kernel:capability { net_bind_service };