From ff9251342bbc0b854cd536dcfc75da1a25252ca5 Mon Sep 17 00:00:00 2001 From: leochuang Date: Wed, 15 Feb 2023 12:07:32 +0800 Subject: [PATCH] Update SELinux error Bug: 269370035 Bug: 269369858 Test: SELinuxUncheckedDenialBootTest Change-Id: I39c074a1fb8b1ace17f249d14783879e990a9dbe --- tracking_denials/bug_map | 2 ++ tracking_denials/shell.te | 10 ++++++++++ 2 files changed, 12 insertions(+) create mode 100644 tracking_denials/shell.te diff --git a/tracking_denials/bug_map b/tracking_denials/bug_map index ca2d09e..7537c74 100644 --- a/tracking_denials/bug_map +++ b/tracking_denials/bug_map @@ -1,7 +1,9 @@ +adbd sysfs_msm_subsys dir b/269369858 derive_sdk system_app dir b/269044764 dumpstate hal_input_processor_default process b/238263647 dumpstate incident process b/238263647 dumpstate system_data_file dir b/264600011 hal_camera_default graphics_config_prop file b/268147541 hal_drm_widevine default_prop file b/238263747 +shell build_attestation_prop file b/269370035 system_server vendor_incremental_module file b/264483807 diff --git a/tracking_denials/shell.te b/tracking_denials/shell.te new file mode 100644 index 0000000..8bbbda7 --- /dev/null +++ b/tracking_denials/shell.te @@ -0,0 +1,10 @@ +# b/269370035 +dontaudit shell incident_service:service_manager { find }; +dontaudit shell installd_service:service_manager { find }; +dontaudit shell mdns_service:service_manager { find }; +dontaudit shell netd_service:service_manager { find }; +dontaudit shell system_suspend_control_service:service_manager { find }; +dontaudit shell system_suspend_control_internal_service:service_manager { find }; +dontaudit shell vold_service:service_manager { find }; +dontaudit shell dnsresolver_service:service_manager { find }; +dontaudit shell gatekeeper_service:service_manager { find };