Log app access to sysfs for removal. am: f226b0c9

am: 36dabd96 * commit '36dabd96': Log app access to sysfs for removal.

Log app access to sysfs for removal. am: f226b0c9
fea761b4 · dcashman · android-build-merger · ccc8e4f9 · 36dabd96 · fea761b4
Commit fea761b4 authored 9 years ago by dcashman Committed by android-build-merger 9 years ago
--- a/app.te
+++ b/app.te
@@ -219,6 +219,10 @@ allow appdomain runas_exec:file getattr;
 selinux_check_access(appdomain)
 selinux_check_context(appdomain)

+# appdomain should not be accessing information on /sys
+auditallow appdomain sysfs:dir { open getattr read ioctl };
+auditallow appdomain sysfs:file r_file_perms;
+
 ###
 ### Neverallow rules
 ###