aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorJeff Vander Stoep2018-04-11 14:06:01 -0500
committerJeff Vander Stoep2018-04-11 14:20:32 -0500
commit7e5ec2bc3d1d1b45471898f446f1ba1d66b7d046 (patch)
treecfd19bdc167f89cebd279f243f801e912b888584
parentf7a7f7d1382129b79cd5efce00554a4eeaab024e (diff)
downloadsystem-sepolicy-7e5ec2bc3d1d1b45471898f446f1ba1d66b7d046.tar.gz
system-sepolicy-7e5ec2bc3d1d1b45471898f446f1ba1d66b7d046.tar.xz
system-sepolicy-7e5ec2bc3d1d1b45471898f446f1ba1d66b7d046.zip
Suppress spurious denial
Addresses: avc: denied { sys_resource } scontext=u:r:zygote:s0 tcontext=u:r:zygote:s0 tclass=capability Bug: 77905989 Test: build and flash taimen-userdebug Change-Id: If2413c3005df02a70661464d695211acbcda4094 (cherry picked from commit 816e744d998cb327fbd20f3124b22398bea2b8e4)
-rw-r--r--private/zygote.te3
1 files changed, 3 insertions, 0 deletions
diff --git a/private/zygote.te b/private/zygote.te
index 4ea401dc..0a1a7c6b 100644
--- a/private/zygote.te
+++ b/private/zygote.te
@@ -114,6 +114,9 @@ allow zygote tmpfs:dir r_dir_perms;
114get_prop(zygote, overlay_prop) 114get_prop(zygote, overlay_prop)
115get_prop(zygote, exported_overlay_prop) 115get_prop(zygote, exported_overlay_prop)
116 116
117# ingore spurious denials
118dontaudit zygote self:capability sys_resource;
119
117### 120###
118### neverallow rules 121### neverallow rules
119### 122###