Merge "Don't audit dumpstate reading /mnt/user, /mnt/installer."

2020-02-06 12:37:24 +00:00 · 2020-02-06 12:37:24 +00:00 · 55b7ccd989
commit 55b7ccd989
parent 9788ca1738 722026676b
1 changed files with 2 additions and 0 deletions
--- a/public/dumpstate.te
+++ b/public/dumpstate.te
@ -302,11 +302,13 @@ allow dumpstate linkerconfig_file:dir { read open };
 dontaudit dumpstate {
  mnt_vendor_file
  mirror_data_file
+  mnt_user_file
 }:dir search;
 dontaudit dumpstate {
  apex_mnt_dir
  linkerconfig_file
  mirror_data_file
+  mnt_user_file
 }:dir getattr;

 # Allow dumpstate to talk to bufferhubd over binder