Skip to content
Snippets Groups Projects
Commit cf6b51dd authored by android-build-prod (mdb)'s avatar android-build-prod (mdb) Committed by android-build-merger
Browse files

Merge "Audit generic debugfs access for removal" am: 65352c90 am: 810ad5f2 

am: 5afce150

Change-Id: I95d2ce2aee7712c69d9b63c1ad08036d0e92007c
parents 06fe7d7c 5afce150
Branches
No related tags found
No related merge requests found
Show whitespace changes
Inline Side-by-side
private/system_server.te
+ 1
− 0
View file @ cf6b51dd
...@@ -139,6 +139,7 @@ allow system_server stats_data_file:file unlink; ...@@ -139,6 +139,7 @@ allow system_server stats_data_file:file unlink;
# Read /sys/kernel/debug/wakeup_sources. # Read /sys/kernel/debug/wakeup_sources.
allow system_server debugfs:file r_file_perms; allow system_server debugfs:file r_file_perms;
auditallow system_server debugfs:file r_file_perms;
allow system_server debugfs_wakeup_sources:file r_file_perms; allow system_server debugfs_wakeup_sources:file r_file_perms;
# Delete /data/misc/stats-data/ and /data/misc/stats-service/ directories. # Delete /data/misc/stats-data/ and /data/misc/stats-service/ directories.
......
public/dumpstate.te
+ 1
− 0
View file @ cf6b51dd
...@@ -94,6 +94,7 @@ allow dumpstate { ...@@ -94,6 +94,7 @@ allow dumpstate {
# Other random bits of data we want to collect # Other random bits of data we want to collect
allow dumpstate debugfs:file r_file_perms; allow dumpstate debugfs:file r_file_perms;
auditallow dumpstate debugfs:file r_file_perms;
# df for # df for
allow dumpstate { allow dumpstate {
......
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment