Log app access to sysfs for removal.

am: f226b0c9 * commit 'f226b0c9': Log app access to sysfs for removal.

Log app access to sysfs for removal.
am: f226b0c9 * commit 'f226b0c9': Log app access to sysfs for removal.
36dabd96 · dcashman · android-build-merger · b16fc899 · f226b0c9 · 36dabd96
Commit 36dabd96 authored 9 years ago by dcashman Committed by android-build-merger 9 years ago
--- a/app.te
+++ b/app.te
@@ -219,6 +219,10 @@ allow appdomain runas_exec:file getattr;
 selinux_check_access(appdomain)
 selinux_check_context(appdomain)

+# appdomain should not be accessing information on /sys
+auditallow appdomain sysfs:dir { open getattr read ioctl };
+auditallow appdomain sysfs:file r_file_perms;
+
 ###
 ### Neverallow rules
 ###