Skip to content
Snippets Groups Projects
Commit d04a2dd0 authored by Josh Gao's avatar Josh Gao Committed by android-build-merger
Browse files

crash_dump: dontaudit CAP_SYS_PTRACE denial. 

am: 943d7ed5

Change-Id: I4b3e10c0001e61c9ca93f3834342131b1a834a2a
parents d583a833 943d7ed5
Branches
Tags
No related merge requests found
Show whitespace changes
Inline Side-by-side
Showing
with 5 additions and 0 deletions
public/crash_dump.te
+ 5
− 0
View file @ d04a2dd0
...@@ -8,6 +8,11 @@ allow crash_dump { ...@@ -8,6 +8,11 @@ allow crash_dump {
-keystore -keystore
-logd -logd
}:process { ptrace signal sigchld sigstop sigkill }; }:process { ptrace signal sigchld sigstop sigkill };
# crash_dump might inherit CAP_SYS_PTRACE from a privileged process,
# which will result in an audit log even when it's allowed to trace.
dontaudit crash_dump self:capability { sys_ptrace };
userdebug_or_eng(` userdebug_or_eng(`
allow crash_dump logd:process { ptrace signal sigchld sigstop sigkill }; allow crash_dump logd:process { ptrace signal sigchld sigstop sigkill };
') ')
......
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment