This repository has been archived on 2025-09-03. You can view files and clone it. You cannot open issues or pull requests or push a commit.
Files
hardware_oplus-CherishOS/sepolicy/qti/vendor/fsck.te
ekkusa e2dc36f2c6 sepolicy: qti: Address fsck denial
type=1400 audit(1662729171.862:3274): avc: denied { sys_admin } for comm="e2fsck" capability=21 scontext=u:r:fsck:s0 tcontext=u:r:fsck:s0 tclass=capability permissive=0
type=1400 audit(0.0:9): avc:  denied  { kill } for  capability=5  scontext=u:r:fsck:s0 tcontext=u:r:fsck:s0 tclass=capability permissive=0
2023-10-27 18:50:38 +05:30

3 lines
112 B
Plaintext

allow fsck self:capability { sys_admin kill };
dontaudit fsck self:capability { dac_override dac_read_search };