PWN-Hunter/android_system_sepolicy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge "Don't audit dumpstate reading /mnt/user, /mnt/installer."

Browse Source
This commit is contained in:
Martijn Coenen 2020-02-06 12:37:24 +00:00 committed by Gerrit Code Review
commit 55b7ccd989
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
public/dumpstate.te
View File

@ -302,11 +302,13 @@ allow dumpstate linkerconfig_file:dir { read open };
dontaudit dumpstate { dontaudit dumpstate {
mnt_vendor_file mnt_vendor_file
mirror_data_file mirror_data_file
mnt_user_file
}:dir search; }:dir search;
dontaudit dumpstate { dontaudit dumpstate {
apex_mnt_dir apex_mnt_dir
linkerconfig_file linkerconfig_file
mirror_data_file mirror_data_file
mnt_user_file
}:dir getattr; }:dir getattr;
# Allow dumpstate to talk to bufferhubd over binder # Allow dumpstate to talk to bufferhubd over binder