From 963717e00066ce0742f6835c9ad9815072efc653 Mon Sep 17 00:00:00 2001 From: rsuntk Date: Tue, 12 Aug 2025 00:01:34 +0700 Subject: [PATCH] Revert "kernel: selinux: dontaudit * su dir getattr" * Maybe there's much better solution than this. This reverts commit 438bd5fd6dac74ba63ef627124f0d2f552b1cb31. Signed-off-by: rsuntk --- kernel/selinux/rules.c | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/kernel/selinux/rules.c b/kernel/selinux/rules.c index ac3d10bf..230b2fc7 100644 --- a/kernel/selinux/rules.c +++ b/kernel/selinux/rules.c @@ -46,7 +46,7 @@ void apply_kernelsu_rules() } mutex_lock(&ksu_rules); - + db = get_policydb(); ksu_permissive(db, KERNEL_SU_DOMAIN); @@ -139,8 +139,6 @@ void apply_kernelsu_rules() ksu_allow(db, "system_server", KERNEL_SU_DOMAIN, "process", "getpgid"); ksu_allow(db, "system_server", KERNEL_SU_DOMAIN, "process", "sigkill"); - // https://android-review.googlesource.com/c/platform/system/logging/+/3725346 - ksu_dontaudit(db, ALL, KERNEL_SU_DOMAIN, "dir", "getattr"); mutex_unlock(&ksu_rules); }