Skip to content
Snippets Groups Projects
Commit f226b0c9 authored by dcashman's avatar dcashman
Browse files

Log app access to sysfs for removal. 

Bug: 22032619
Change-Id: Ic160e0beef353c6dc5fb5e2d6a09a5628f067fe3
parent 549ccf77
No related branches found
No related tags found
No related merge requests found
Hide whitespace changes
Inline Side-by-side
Showing
with 4 additions and 0 deletions
app.te
+ 4
− 0
View file @ f226b0c9
...@@ -219,6 +219,10 @@ allow appdomain runas_exec:file getattr; ...@@ -219,6 +219,10 @@ allow appdomain runas_exec:file getattr;
selinux_check_access(appdomain) selinux_check_access(appdomain)
selinux_check_context(appdomain) selinux_check_context(appdomain)
# appdomain should not be accessing information on /sys
auditallow appdomain sysfs:dir { open getattr read ioctl };
auditallow appdomain sysfs:file r_file_perms;
### ###
### Neverallow rules ### Neverallow rules
### ###
......
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment