diff --git a/private/system_server.te b/private/system_server.te index da06de032f244cdc1fd10b730d6e09983f8f0274..bdf0f24d78d25e566984b4c12a701c84f72d49c4 100644 --- a/private/system_server.te +++ b/private/system_server.te @@ -137,6 +137,7 @@ allow system_server stats_data_file:file unlink; # Read /sys/kernel/debug/wakeup_sources. allow system_server debugfs:file r_file_perms; +auditallow system_server debugfs:file r_file_perms; allow system_server debugfs_wakeup_sources:file r_file_perms; # The DhcpClient and WifiWatchdog use packet_sockets diff --git a/public/dumpstate.te b/public/dumpstate.te index 2602552ba6c1bcf2ed69102815e7b8ababcaae2a..2857caef8de32c411c397d618dbe393c0d7f8343 100644 --- a/public/dumpstate.te +++ b/public/dumpstate.te @@ -93,6 +93,7 @@ allow dumpstate { # Other random bits of data we want to collect allow dumpstate debugfs:file r_file_perms; +auditallow dumpstate debugfs:file r_file_perms; # df for allow dumpstate {