Skip to content
Snippets Groups Projects
Commit c25c474c authored by Jeff Vander Stoep's avatar Jeff Vander Stoep Committed by android-build-merger
Browse files

Merge "Suppress denials for non-API access" 

am: ec4d4a5e

Change-Id: I17d84198a6c0f5dfe556d5b688f9d92e5f2238b1
parents 2a415167 ec4d4a5e
Branches
Tags
No related merge requests found
Hide whitespace changes
Inline Side-by-side
Showing
with 4 additions and 1 deletion
private/priv_app.te
+ 4
− 1
View file @ c25c474c
...@@ -122,11 +122,14 @@ allow priv_app traced:fd use; ...@@ -122,11 +122,14 @@ allow priv_app traced:fd use;
allow priv_app traced_tmpfs:file { read write getattr map }; allow priv_app traced_tmpfs:file { read write getattr map };
unix_socket_connect(priv_app, traced_producer, traced) unix_socket_connect(priv_app, traced_producer, traced)
# suppress denials when safetynet scans /system # suppress denials for non-API accesses.
dontaudit priv_app exec_type:file getattr; dontaudit priv_app exec_type:file getattr;
dontaudit priv_app device:dir read; dontaudit priv_app device:dir read;
dontaudit priv_app proc_interrupts:file read; dontaudit priv_app proc_interrupts:file read;
dontaudit priv_app proc_modules:file read; dontaudit priv_app proc_modules:file read;
dontaudit priv_app proc_version:file read;
dontaudit priv_app wifi_prop:file read;
dontaudit priv_app net_dns_prop:file read;
# allow privileged apps to use UDP sockets provided by the system server but not # allow privileged apps to use UDP sockets provided by the system server but not
# modify them other than to connect # modify them other than to connect
......
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment