Skip to content
Snippets Groups Projects
Commit 36dabd96 authored by dcashman's avatar dcashman Committed by android-build-merger
Browse files

Log app access to sysfs for removal. 

am: f226b0c9

* commit 'f226b0c9':
  Log app access to sysfs for removal.
parents b16fc899 f226b0c9
No related branches found
No related tags found
No related merge requests found
Hide whitespace changes
Inline Side-by-side
Showing
with 4 additions and 0 deletions
app.te
+ 4
− 0
View file @ 36dabd96
...@@ -219,6 +219,10 @@ allow appdomain runas_exec:file getattr; ...@@ -219,6 +219,10 @@ allow appdomain runas_exec:file getattr;
selinux_check_access(appdomain) selinux_check_access(appdomain)
selinux_check_context(appdomain) selinux_check_context(appdomain)
# appdomain should not be accessing information on /sys
auditallow appdomain sysfs:dir { open getattr read ioctl };
auditallow appdomain sysfs:file r_file_perms;
### ###
### Neverallow rules ### Neverallow rules
### ###
......
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment