PWN-Hunter/android_system_sepolicy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Remove dumpstate selinux spam from logs

Browse Source 
am: f4ce8f6c06

Change-Id: Ie0bc01a5b8acc6b79a3a31d5807f46f1e1df8c6c
This commit is contained in:
Jeff Vander Stoep 2017-07-10 16:43:47 +00:00 committed by android-build-merger
commit 4e6f67fb37
2 changed files with 5 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
private/domain_deprecated.te
View File

@ -149,6 +149,7 @@ allow domain_deprecated proc_meminfo:file r_file_perms;
userdebug_or_eng(`
auditallow {
domain_deprecated
-dumpstate
-fsck
-fsck_untrusted
-sdcardd
@ -158,6 +159,7 @@ auditallow {
} proc:file r_file_perms;
auditallow {
domain_deprecated
-dumpstate
-fsck
-fsck_untrusted
-system_server
@ -165,6 +167,7 @@ auditallow {
} proc:lnk_file { open ioctl lock }; # getattr read granted in domain
auditallow {
domain_deprecated
-dumpstate
-fingerprintd
-healthd
-netd

3
public/dumpstate.te
View File

@ -137,8 +137,9 @@ read_logd(dumpstate)
control_logd(dumpstate)
read_runtime_log_tags(dumpstate)
# Read /proc/net
# Read /proc and /proc/net
allow dumpstate proc_net:file r_file_perms;
r_dir_file(dumpstate, proc)
# Read network state info files.
allow dumpstate net_data_file:dir search;