aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorJeff Vander Stoep2017-11-13 10:08:17 -0600
committerJeff Vander Stoep2017-11-13 10:08:17 -0600
commit29666d125f99266afb408553fc9b4bb00da2373c (patch)
tree09aaf4099da70407423c01a7a577ae52934f8126 /private/bug_map
parent07ff6107689f17c8e6188f5e49e3d2a441bef23e (diff)
downloadsystem-sepolicy-29666d125f99266afb408553fc9b4bb00da2373c.tar.gz
system-sepolicy-29666d125f99266afb408553fc9b4bb00da2373c.tar.xz
system-sepolicy-29666d125f99266afb408553fc9b4bb00da2373c.zip
Add tracking bugs to denials
These denials should not be allowed. Adding a bug number to the denial properly attributes them to a bug. Bug: 69197466 avc: denied { fsetid } for comm="update_engine" capability=4 scontext=u:r:update_engine:s0 tcontext=u:r:update_engine:s0 tclass=capability Bug: 62140539 avc: denied { open } path="/data/system_de/0/spblob/17a358cf8dff62ea.weaver" scontext=u:r:vold:s0 tcontext=u:object_r:system_data_file:s0 tclass=file avc: denied { unlink } for name="17a358cf8dff62ea.weaver" scontext=u:r:vold:s0 tcontext=u:object_r:system_data_file:s0 tclass=file Bug: 69175449 avc: denied { read } for name="pipe-max-size" dev="proc" scontext=u:r:system_server:s0 tcontext=u:object_r:proc:s0 tclass=file Test: build Change-Id: I62dc26a9076ab90ea4d4ce1f22e9b195f33ade16
Diffstat (limited to 'private/bug_map')
-rw-r--r--private/bug_map4
1 files changed, 4 insertions, 0 deletions
diff --git a/private/bug_map b/private/bug_map
index 8f28a660..26d25e7d 100644
--- a/private/bug_map
+++ b/private/bug_map
@@ -1 +1,5 @@
1priv_app firstboot_prop file 63801215 1priv_app firstboot_prop file 63801215
2update_engine update_engine capability 69197466
3vold system_data_file file 62140539
4system_server proc file 69175449
5system_server vendor_framework_file dir 68826235