PWN-Hunter/android_system_sepolicy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Suppress spurious denial

Browse Source 
Addresses:
avc: denied { sys_resource } scontext=u:r:zygote:s0
tcontext=u:r:zygote:s0 tclass=capability

Bug: 77905989
Test: build and flash taimen-userdebug
Change-Id: If2413c3005df02a70661464d695211acbcda4094
(cherry picked from commit 816e744d998cb327fbd20f3124b22398bea2b8e4)
This commit is contained in:
Jeff Vander Stoep 2018-04-11 12:06:01 -07:00
parent f7a7f7d138
commit 7e5ec2bc3d
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
private/zygote.te
View File

@ -114,6 +114,9 @@ allow zygote tmpfs:dir r_dir_perms;
get_prop(zygote, overlay_prop)
get_prop(zygote, exported_overlay_prop)
# ingore spurious denials
dontaudit zygote self:capability sys_resource;
###
### neverallow rules
###