Skip to content
Snippets Groups Projects
Commit 708aa90d authored by Alan Stokes's avatar Alan Stokes
Browse files

Temporarily add auditing of execmod by apps.

This is so we can get data on which apps are actually doing this.

Bug: 111544476
Test: Device boots. No audits seen on test device.
Change-Id: I5f72200ed8606775904d353c4d3d790373fe7dea
parent 13e60ed1
No related branches found
No related tags found
No related merge requests found
......@@ -151,6 +151,10 @@ userdebug_or_eng(`
}:{ dir file lnk_file } { getattr open read };
')
# Temporary auditing to get data on what apps use execmod.
# TODO(b/111544476) Remove this and deny the permission if feasible.
auditallow untrusted_app_all { apk_data_file app_data_file asec_public_file }:file execmod;
# Attempts to write to system_data_file is generally a sign
# that apps are attempting to access encrypted storage before
# the ACTION_USER_UNLOCKED intent is delivered. Suppress this
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment