commit | 4ca508c12c4bfaa432ce8689c68f2c709fcb1f9a | [log] [tgz] |
---|---|---|
author | Alistair Delva <adelva@google.com> | Tue Apr 13 21:53:42 2021 +0000 |
committer | Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com> | Tue Apr 13 21:53:42 2021 +0000 |
tree | 5ab60cdccf9b5d41157450aa6dd85774bd6a42a9 | |
parent | 75c7c80abb41c3fbb255d4a4d741dff853d61951 [diff] | |
parent | 7a157d03d20bdeee81a803c8e1477557ff966e99 [diff] |
Merge "Suppress some su capability2 related denials" am: 5bbeaa39d8 am: 7a157d03d2 Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/1673589 Change-Id: I356fc2ae3bb170987986774a5b4eff5baa66989e
diff --git a/public/su.te b/public/su.te index cefc44d..074ff2e 100644 --- a/public/su.te +++ b/public/su.te
@@ -18,6 +18,7 @@ vndbinder_use(su) dontaudit su self:capability_class_set *; + dontaudit su self:capability2 *; dontaudit su kernel:security *; dontaudit su { kernel file_type }:system *; dontaudit su self:memprotect *;