diff options
author | Stephen Smalley <sds@tycho.nsa.gov> | 2014-04-03 08:51:38 -0400 |
---|---|---|
committer | Stephen Smalley <sds@tycho.nsa.gov> | 2014-04-03 08:51:38 -0400 |
commit | e8c9fdac46c2ae972fd9e0f97b442d59b349e718 (patch) | |
tree | 07b4d852471258117f0acbfa47e9aaac84042e92 /tools | |
parent | 888d283c30784bb61d4bd10878c85634b31da1d3 (diff) | |
download | android_external_sepolicy-e8c9fdac46c2ae972fd9e0f97b442d59b349e718.tar.gz android_external_sepolicy-e8c9fdac46c2ae972fd9e0f97b442d59b349e718.tar.bz2 android_external_sepolicy-e8c9fdac46c2ae972fd9e0f97b442d59b349e718.zip |
Exclude audit-related capabilities from unconfined domains.
Require them to be explicitly granted by specific allow rules.
audit_write is required to write an audit message from userspace.
audit_control is required to configure the audit subsystem.
Change-Id: I5aa4e3228f9b0bde3570689fe7a0d68e56861a17
Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
Diffstat (limited to 'tools')
0 files changed, 0 insertions, 0 deletions