summary | shortlog | log | commit | commitdiff | tree
raw | patch | inline | side by side (parent: d4dd2f5)
raw | patch | inline | side by side (parent: d4dd2f5)
author | Joel Galenson <jgalenson@google.com> | |
Tue, 10 Apr 2018 16:55:11 +0000 (09:55 -0700) | ||
committer | Joel Galenson <jgalenson@google.com> | |
Tue, 10 Apr 2018 16:55:11 +0000 (09:55 -0700) |
We have seen crash_dump denials for radio_data_file,
shared_relro_file, shell_data_file, and vendor_app_file. This commit
widens an existing dontaudit to include them as well as others that we
might see.
Test: Boot device.
Change-Id: I9ad2a2dafa8e73b13c08d0cc6886274a7c0e3bac
shared_relro_file, shell_data_file, and vendor_app_file. This commit
widens an existing dontaudit to include them as well as others that we
might see.
Test: Boot device.
Change-Id: I9ad2a2dafa8e73b13c08d0cc6886274a7c0e3bac
public/crash_dump.te | patch | blob | history |
diff --git a/public/crash_dump.te b/public/crash_dump.te
index 6b6b986ee146b19e67835a8482862986eec186da..f778d2818eb3f0bfc6c88803a25f457f908c0608 100644 (file)
--- a/public/crash_dump.te
+++ b/public/crash_dump.te
# Crash dump is not intended to access the following data types. Since these
# are WAI, suppress the denials to clean up the logs.
dontaudit crash_dump {
- app_data_file
- bluetooth_data_file
- resourcecache_data_file
- vendor_overlay_file
+ core_data_file_type
+ vendor_file_type
}:dir search;
dontaudit crash_dump system_data_file:file read;