diff --git a/private/bug_map b/private/bug_map index eee9eaae2eb87fc0bf1cd5de7d3b48eaf55677d3..8022d044e5e9083bf79fbe48a60689ad6827619a 100644 --- a/private/bug_map +++ b/private/bug_map @@ -1,6 +1,4 @@ platform_app nfc_data_file dir 74331887 -priv_app sysfs dir 72749888 -priv_app sysfs_android_usb file 72749888 priv_app system_data_file dir 72811052 storaged storaged capability 77634061 system_server crash_dump process 73128755 diff --git a/private/priv_app.te b/private/priv_app.te index 887f5be0f2677097187c0ab4615ac74e814fbe20..0841c41f6aeb0a7b3aa349b7af789c2056001b4e 100644 --- a/private/priv_app.te +++ b/private/priv_app.te @@ -140,13 +140,15 @@ unix_socket_connect(priv_app, traced_producer, traced) # suppress denials for non-API accesses. dontaudit priv_app exec_type:file getattr; dontaudit priv_app device:dir read; +dontaudit priv_app net_dns_prop:file read; dontaudit priv_app proc:file read; dontaudit priv_app proc_interrupts:file read; dontaudit priv_app proc_modules:file read; dontaudit priv_app proc_stat:file read; dontaudit priv_app proc_version:file read; +dontaudit priv_app sysfs:dir read; +dontaudit priv_app sysfs_android_usb:file read; dontaudit priv_app wifi_prop:file read; -dontaudit priv_app net_dns_prop:file read; # allow privileged apps to use UDP sockets provided by the system server but not # modify them other than to connect