Skip to content
Snippets Groups Projects
Commit 85416e06 authored by Nick Kralevich's avatar Nick Kralevich
Browse files

su.te: add filesystem dontaudit rule

Addresses su denials which occur when mounting filesystems not
defined by policy.

Addresses denials similar to:

  avc: denied { mount } for pid=12361 comm="mount" name="/" dev="binfmt_misc" ino=1 scontext=u:r:su:s0 tcontext=u:object_r:unlabeled:s0 tclass=filesystem permissive=1

Change-Id: Ifa0d7c781152f9ebdda9534ac3a04da151f8d78e
parent e96c3abe
No related branches found
No related tags found
No related merge requests found
...@@ -49,5 +49,6 @@ userdebug_or_eng(` ...@@ -49,5 +49,6 @@ userdebug_or_eng(`
dontaudit su keystore:keystore_key *; dontaudit su keystore:keystore_key *;
dontaudit su domain:debuggerd *; dontaudit su domain:debuggerd *;
dontaudit su domain:drmservice *; dontaudit su domain:drmservice *;
dontaudit su unlabeled:filesystem *;
service_manager_local_audit_domain(su) service_manager_local_audit_domain(su)
') ')
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment