extra: sepolicy: Silence useless denials

3 months ago · 95ce8cfc17
parent d1d70fa8b8
commit 95ce8cfc17
6 changed files with 7 additions and 1 deletions
--- a/BoardConfigExtra.mk
+++ b/BoardConfigExtra.mk
@ -12,4 +12,5 @@ ifndef TARGET_COPY_OUT_SYSTEM_EXT
 endif
 ## SELinux
-BOARD_VENDOR_SEPOLICY_DIRS += vendor/extra/sepolicy
+PRODUCT_PRIVATE_SEPOLICY_DIRS += vendor/extra/sepolicy/private
 BOARD_VENDOR_SEPOLICY_DIRS += vendor/extra/sepolicy/vendor
--- a/sepolicy/private/linkerconfig.te
+++ b/sepolicy/private/linkerconfig.te
@ -0,0 +1 @@
 dontaudit linkerconfig self:capability kill;
--- a/sepolicy/vendor/fsck.te
+++ b/sepolicy/vendor/fsck.te
@ -0,0 +1 @@
 dontaudit fsck self:capability kill;
--- a/sepolicy/vendor/init.te
+++ b/sepolicy/vendor/init.te
@ -0,0 +1 @@
 dontaudit init debugfs_tracing_debug:dir mounton;
--- a/sepolicy/vendor/toolbox.te
+++ b/sepolicy/vendor/toolbox.te
@ -0,0 +1 @@
 dontaudit toolbox self:capability kill;
--- a/sepolicy/vendor/vdc.te
+++ b/sepolicy/vendor/vdc.te
@ -0,0 +1 @@
 dontaudit vdc self:capability kill;
		`@ -0,0 +1 @@`
							`dontaudit linkerconfig self:capability kill;`
		`@ -0,0 +1 @@`
							`dontaudit init debugfs_tracing_debug:dir mounton;`