| Inseob Kim | ff43be2 | 2021-06-07 16:56:56 +0900 | [diff] [blame] | 1 | userdebug_or_eng(` |
| 2 | typeattribute su coredomain; | ||||
| 3 | |||||
| 4 | domain_auto_trans(shell, su_exec, su) | ||||
| Inseob Kim | ff43be2 | 2021-06-07 16:56:56 +0900 | [diff] [blame] | 5 | |
| 6 | # su is also permissive to permit setenforce. | ||||
| 7 | permissive su; | ||||
| 8 | |||||
| Inseob Kim | ff43be2 | 2021-06-07 16:56:56 +0900 | [diff] [blame] | 9 | # Do not audit accesses to keystore2 namespace for the su domain. |
| 10 | dontaudit su keystore2_key_type:{ keystore2 keystore2_key } *; | ||||
| 11 | |||||
| 12 | ') | ||||