Inseob Kim | ff43be2 | 2021-06-07 16:56:56 +0900 | [diff] [blame] | 1 | userdebug_or_eng(` |
2 | typeattribute su coredomain; | ||||
3 | |||||
4 | domain_auto_trans(shell, su_exec, su) | ||||
Inseob Kim | ff43be2 | 2021-06-07 16:56:56 +0900 | [diff] [blame] | 5 | |
6 | # su is also permissive to permit setenforce. | ||||
7 | permissive su; | ||||
8 | |||||
Inseob Kim | ff43be2 | 2021-06-07 16:56:56 +0900 | [diff] [blame] | 9 | # Do not audit accesses to keystore2 namespace for the su domain. |
10 | dontaudit su keystore2_key_type:{ keystore2 keystore2_key } *; | ||||
11 | |||||
12 | ') |