Skip to content
Snippets Groups Projects
Commit f44002b3 authored by Jeff Vander Stoep's avatar Jeff Vander Stoep
Browse files

Remove dumpstate selinux spam from logs

Addresses:
avc: granted { read } for name="pipe-max-size" dev="proc" ino=470942 scontext=u:r:dumpstate:s0 tcontext=u:object_r:proc:s0 tclass=file
avc: granted { read open } for path="/proc/sys/fs/pipe-max-size" dev="proc" ino=470942 scontext=u:r:dumpstate:s0 tcontext=u:object_r:proc:s0 tclass=file

Test: build policy
Change-Id: I7d8721c73c4f3c51b3885a97c697510e61d1221b
parent e5fe6a33
No related branches found
No related tags found
No related merge requests found
...@@ -190,6 +190,7 @@ allow domain_deprecated proc_meminfo:file r_file_perms; ...@@ -190,6 +190,7 @@ allow domain_deprecated proc_meminfo:file r_file_perms;
userdebug_or_eng(` userdebug_or_eng(`
auditallow { auditallow {
domain_deprecated domain_deprecated
-dumpstate
-fsck -fsck
-fsck_untrusted -fsck_untrusted
-sdcardd -sdcardd
...@@ -199,6 +200,7 @@ auditallow { ...@@ -199,6 +200,7 @@ auditallow {
} proc:file r_file_perms; } proc:file r_file_perms;
auditallow { auditallow {
domain_deprecated domain_deprecated
-dumpstate
-fsck -fsck
-fsck_untrusted -fsck_untrusted
-system_server -system_server
...@@ -206,6 +208,7 @@ auditallow { ...@@ -206,6 +208,7 @@ auditallow {
} proc:lnk_file { open ioctl lock }; # getattr read granted in domain } proc:lnk_file { open ioctl lock }; # getattr read granted in domain
auditallow { auditallow {
domain_deprecated domain_deprecated
-dumpstate
-fingerprintd -fingerprintd
-healthd -healthd
-netd -netd
......
...@@ -137,8 +137,9 @@ read_logd(dumpstate) ...@@ -137,8 +137,9 @@ read_logd(dumpstate)
control_logd(dumpstate) control_logd(dumpstate)
read_runtime_log_tags(dumpstate) read_runtime_log_tags(dumpstate)
# Read /proc/net # Read /proc and /proc/net
allow dumpstate proc_net:file r_file_perms; allow dumpstate proc_net:file r_file_perms;
r_dir_file(dumpstate, proc)
# Read network state info files. # Read network state info files.
allow dumpstate net_data_file:dir search; allow dumpstate net_data_file:dir search;
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment