kernel: selinux: dontaudit * su dir getattr
* Likely a detection point for newer android. * I am not sure about this, but a module try to address this: https://github.com/aviraxp/ZN-AuditPatch * Need more testing. Suggested-by: fatalcoder524 <11532648+fatalcoder524@users.noreply.github.com> Tested-by: rsuntk <rsuntk@yukiprjkt.my.id> Signed-off-by: rsuntk <rsuntk@yukiprjkt.my.id>
This commit is contained in:
@@ -122,6 +122,9 @@ void apply_kernelsu_rules()
|
||||
ksu_allow(db, "system_server", KERNEL_SU_DOMAIN, "process", "getpgid");
|
||||
ksu_allow(db, "system_server", KERNEL_SU_DOMAIN, "process", "sigkill");
|
||||
|
||||
// https://android-review.googlesource.com/c/platform/system/logging/+/3725346
|
||||
ksu_dontaudit(db, ALL, KERNEL_SU_DOMAIN, "dir", "getattr");
|
||||
|
||||
rcu_read_unlock();
|
||||
}
|
||||
|
||||
|
||||
Reference in New Issue
Block a user