Merge "Add insmod-sh policy" into main

This commit is contained in:
Treehugger Robot 2023-12-08 01:09:35 +00:00 committed by Android (Google) Code Review
commit c4e14e8ffa
3 changed files with 3 additions and 7 deletions

View file

@ -1,2 +0,0 @@
allow insmod-sh self:capability sys_nice;
allow insmod-sh kernel:process setsched;

View file

@ -1,5 +0,0 @@
# b/307468923
userdebug_or_eng(`
permissive insmod-sh;
')# b/312372936
dontaudit insmod-sh insmod-sh:key { write };

3
vendor/insmod-sh.te vendored
View file

@ -1 +1,4 @@
allow insmod-sh self:capability sys_nice;
allow insmod-sh kernel:process setsched;
allow insmod-sh vendor_regmap_debugfs:dir search; allow insmod-sh vendor_regmap_debugfs:dir search;
dontaudit insmod-sh insmod-sh:key write;