Skip to content
Snippets Groups Projects
Commit f28860e5 authored by Josh Gao's avatar Josh Gao Committed by android-build-merger
Browse files

crash_dump: dontaudit CAP_SYS_PTRACE denial. am: 943d7ed5 am: d04a2dd0 

am: c4bc8992

Change-Id: I3b18e5ac428349baf2ee5b3cc305fd378c08adca
parents fc24757a c4bc8992
No related branches found
No related tags found
No related merge requests found
Hide whitespace changes
Inline Side-by-side
Showing
with 5 additions and 0 deletions
public/crash_dump.te
+ 5
− 0
View file @ f28860e5
...@@ -8,6 +8,11 @@ allow crash_dump { ...@@ -8,6 +8,11 @@ allow crash_dump {
-keystore -keystore
-logd -logd
}:process { ptrace signal sigchld sigstop sigkill }; }:process { ptrace signal sigchld sigstop sigkill };
# crash_dump might inherit CAP_SYS_PTRACE from a privileged process,
# which will result in an audit log even when it's allowed to trace.
dontaudit crash_dump self:capability { sys_ptrace };
userdebug_or_eng(` userdebug_or_eng(`
allow crash_dump logd:process { ptrace signal sigchld sigstop sigkill }; allow crash_dump logd:process { ptrace signal sigchld sigstop sigkill };
') ')
......
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment