summary | shortlog | log | commit | commitdiff | tree
raw | patch | inline | side by side (parent: f7a7f7d)
raw | patch | inline | side by side (parent: f7a7f7d)
author | Jeff Vander Stoep <jeffv@google.com> | |
Wed, 11 Apr 2018 19:06:01 +0000 (12:06 -0700) | ||
committer | Jeff Vander Stoep <jeffv@google.com> | |
Wed, 11 Apr 2018 19:20:32 +0000 (12:20 -0700) |
Addresses:
avc: denied { sys_resource } scontext=u:r:zygote:s0
tcontext=u:r:zygote:s0 tclass=capability
Bug: 77905989
Test: build and flash taimen-userdebug
Change-Id: If2413c3005df02a70661464d695211acbcda4094
(cherry picked from commit 816e744d998cb327fbd20f3124b22398bea2b8e4)
avc: denied { sys_resource } scontext=u:r:zygote:s0
tcontext=u:r:zygote:s0 tclass=capability
Bug: 77905989
Test: build and flash taimen-userdebug
Change-Id: If2413c3005df02a70661464d695211acbcda4094
(cherry picked from commit 816e744d998cb327fbd20f3124b22398bea2b8e4)
private/zygote.te | patch | blob | history |
diff --git a/private/zygote.te b/private/zygote.te
index 4ea401dceed56d711362b40a602d956b06a74954..0a1a7c6b97a8d446d3074abf547c12f9a82669bd 100644 (file)
--- a/private/zygote.te
+++ b/private/zygote.te
get_prop(zygote, overlay_prop)
get_prop(zygote, exported_overlay_prop)
+# ingore spurious denials
+dontaudit zygote self:capability sys_resource;
+
###
### neverallow rules
###