PWN-Hunter/android_system_sepolicy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge "Allow dumpstate to open and read linkerconfig directory"

Browse Source
This commit is contained in:
Kiyoung Kim 2020-02-05 07:58:12 +00:00 committed by Gerrit Code Review
commit 7be9b32fdb
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
public/dumpstate.te
View File

@ -295,6 +295,9 @@ allow dumpstate self:netlink_generic_socket create_socket_perms_no_ioctl;
# Allow dumpstate to run ss # Allow dumpstate to run ss
allow dumpstate { domain pdx_channel_socket_type pdx_endpoint_socket_type }:socket_class_set getattr; allow dumpstate { domain pdx_channel_socket_type pdx_endpoint_socket_type }:socket_class_set getattr;
# Allow dumpstate to read linkerconfig directory
allow dumpstate linkerconfig_file:dir { read open };
# For when dumpstate runs df # For when dumpstate runs df
dontaudit dumpstate { dontaudit dumpstate {
mnt_vendor_file mnt_vendor_file