Skip to content
Snippets Groups Projects
Commit e9cb7638 authored by Paul Lawrence's avatar Paul Lawrence
Browse files

Remove selinux denial

Don't audit directory writes to sysfs since they cannot succees
and therefore cannot be a security issue

Bug: 35303861
Test: Make sure denial is no longer shown
Change-Id: I1f31d35aa01e28e3eb7371b1a75fc4090ea40464
parent 6ebcfe47
No related branches found
No related tags found
No related merge requests found
...@@ -17,3 +17,8 @@ domain_trans(init, init_exec, watchdogd) ...@@ -17,3 +17,8 @@ domain_trans(init, init_exec, watchdogd)
userdebug_or_eng(` userdebug_or_eng(`
domain_auto_trans(init, logcat_exec, logpersist) domain_auto_trans(init, logcat_exec, logpersist)
') ')
# Creating files on sysfs is impossible so this isn't a threat
# Sometimes we have to write to non-existent files to avoid conditional
# init behavior. See b/35303861 for an example.
dontaudit init sysfs:dir write;
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment