extra: sepolicy: Silence useless denials

3 months ago · 95ce8cfc17
parent d1d70fa8b8
commit 95ce8cfc17
6 changed files with 7 additions and 1 deletions
--- a/BoardConfigExtra.mk
+++ b/BoardConfigExtra.mk
@ -12,4 +12,5 @@ ifndef TARGET_COPY_OUT_SYSTEM_EXT
 endif

 ## SELinux
-BOARD_VENDOR_SEPOLICY_DIRS += vendor/extra/sepolicy
+PRODUCT_PRIVATE_SEPOLICY_DIRS += vendor/extra/sepolicy/private
+BOARD_VENDOR_SEPOLICY_DIRS += vendor/extra/sepolicy/vendor
--- a/sepolicy/private/linkerconfig.te
+++ b/sepolicy/private/linkerconfig.te
@ -0,0 +1 @@
+dontaudit linkerconfig self:capability kill;
--- a/sepolicy/vendor/fsck.te
+++ b/sepolicy/vendor/fsck.te
@ -0,0 +1 @@
+dontaudit fsck self:capability kill;
--- a/sepolicy/vendor/init.te
+++ b/sepolicy/vendor/init.te
@ -0,0 +1 @@
+dontaudit init debugfs_tracing_debug:dir mounton;
--- a/sepolicy/vendor/toolbox.te
+++ b/sepolicy/vendor/toolbox.te
@ -0,0 +1 @@
+dontaudit toolbox self:capability kill;
--- a/sepolicy/vendor/vdc.te
+++ b/sepolicy/vendor/vdc.te
@ -0,0 +1 @@
+dontaudit vdc self:capability kill;
				`@ -0,0 +1 @@`
				`dontaudit linkerconfig self:capability kill;`
				`@ -0,0 +1 @@`
				`dontaudit init debugfs_tracing_debug:dir mounton;`