Skip to content
Snippets Groups Projects
  • Alan Stokes's avatar
    cf71a5ae
    Suppress noisy performanced denials in permissive mode. · cf71a5ae
    Alan Stokes authored
    The sheer volume of these can cause confusion.
    
    Sample denials (repeated for many processes):
    denied { getattr } for path="/proc/1/status" dev="proc" ino=24427 scontext=u:r:performanced:s0 tcontext=u:r:init:s0 tclass=file permissive=1
    denied { open } for path="/proc/1" dev="proc" ino=18608 scontext=u:r:performanced:s0 tcontext=u:r:init:s0 tclass=dir permissive=1
    denied { open } for path="/proc/1/status" dev="proc" ino=24427 scontext=u:r:performanced:s0 tcontext=u:r:init:s0 tclass=file permissive=1
    denied { read } for name="status" dev="proc" ino=24427 scontext=u:r:performanced:s0 tcontext=u:r:init:s0 tclass=file permissive=1
    
    Bug: 72643420
    Test: Denials no longer present in permissive mode.
    Change-Id: Ic07b9b0b59ca2122c4843095b63075ab8fd2c70b
    cf71a5ae
    History
    Suppress noisy performanced denials in permissive mode.
    Alan Stokes authored
    The sheer volume of these can cause confusion.
    
    Sample denials (repeated for many processes):
    denied { getattr } for path="/proc/1/status" dev="proc" ino=24427 scontext=u:r:performanced:s0 tcontext=u:r:init:s0 tclass=file permissive=1
    denied { open } for path="/proc/1" dev="proc" ino=18608 scontext=u:r:performanced:s0 tcontext=u:r:init:s0 tclass=dir permissive=1
    denied { open } for path="/proc/1/status" dev="proc" ino=24427 scontext=u:r:performanced:s0 tcontext=u:r:init:s0 tclass=file permissive=1
    denied { read } for name="status" dev="proc" ino=24427 scontext=u:r:performanced:s0 tcontext=u:r:init:s0 tclass=file permissive=1
    
    Bug: 72643420
    Test: Denials no longer present in permissive mode.
    Change-Id: Ic07b9b0b59ca2122c4843095b63075ab8fd2c70b