commit | 36acb81b92b074d6511db571d254ee4cb6c1810e | [log] [tgz] |
---|---|---|
author | Treehugger Robot <android-test-infra-autosubmit@system.gserviceaccount.com> | Sun Dec 29 18:09:16 2024 -0800 |
committer | Gerrit Code Review <noreply-gerritcodereview@google.com> | Sun Dec 29 18:09:16 2024 -0800 |
tree | 75e3743a47f021b3a16713690bcbbe19384530a9 | |
parent | 0d8a410398ec343a68092533bef04be074d7faca [diff] | |
parent | 91653c0580e5e6d95a497f67eec31587600abbd0 [diff] |
Merge "sepolicy: dontaudit dumpstate to talk with virtualizationservice" into main
diff --git a/private/dumpstate.te b/private/dumpstate.te index 5e3bce5..1020088 100644 --- a/private/dumpstate.te +++ b/private/dumpstate.te
@@ -539,6 +539,9 @@ vm_data_file }:dir getattr; +#suppress denials for dumpstate to call vitualizationservice. +dontaudit dumpstate virtualizationservice:binder { call }; + # Allow dumpstate to talk to bufferhubd over binder binder_call(dumpstate, bufferhubd);