diff --git a/kernel/selinux/rules.c b/kernel/selinux/rules.c index 5242d563..c1dadf55 100644 --- a/kernel/selinux/rules.c +++ b/kernel/selinux/rules.c @@ -47,7 +47,7 @@ void ksu_apply_kernelsu_rules() } mutex_lock(&ksu_rules); - + db = get_policydb(); ksu_permissive(db, KERNEL_SU_DOMAIN); @@ -140,6 +140,9 @@ void ksu_apply_kernelsu_rules() ksu_allow(db, "system_server", KERNEL_SU_DOMAIN, "process", "getpgid"); ksu_allow(db, "system_server", KERNEL_SU_DOMAIN, "process", "sigkill"); + // https://android-review.googlesource.com/c/platform/system/logging/+/3725346 + ksu_dontaudit(db, ALL, KERNEL_SU_DOMAIN, "dir", "getattr"); + #ifdef CONFIG_KSU_SUSFS // Allow umount in zygote process without installing zygisk ksu_allow(db, "zygote", "labeledfs", "filesystem", "unmount");