Add insmod-sh policy

Fix: 307468923
Fix: 312372936
Test: make selinux_policy
Change-Id: Icd42c4a74b44b7e593dc7c0598f3d23c3f251a2c
This commit is contained in:
Wilson Sung 2023-12-07 03:59:52 +00:00
parent 9c9376de63
commit bf85d96523
3 changed files with 3 additions and 7 deletions

View file

@ -1,2 +0,0 @@
allow insmod-sh self:capability sys_nice;
allow insmod-sh kernel:process setsched;

View file

@ -1,5 +0,0 @@
# b/307468923
userdebug_or_eng(`
permissive insmod-sh;
')# b/312372936
dontaudit insmod-sh insmod-sh:key { write };

3
vendor/insmod-sh.te vendored
View file

@ -1 +1,4 @@
allow insmod-sh self:capability sys_nice;
allow insmod-sh kernel:process setsched;
allow insmod-sh vendor_regmap_debugfs:dir search;
dontaudit insmod-sh insmod-sh:key write;