Temporarily switching all profiles to "complain" mode in order to work out policy...

diff --git a/data/configs/adbd b/data/configs/adbd
index 714e6729d17f80ae7107c6a3dc5fc3391cbd19b7..6b5741031eedfe401ab7c98ac809063fbb4a53af 100644 (file)
--- a/data/configs/adbd
+++ b/data/configs/adbd
@@ -1,6 +1,6 @@
 #include <tunables/global>
 
 #include <tunables/global>
 

-profile adbd flags=(attach_disconnected,mediate_deleted) {
+profile adbd flags=(attach_disconnected,mediate_deleted,complain) {

   #include <abstractions/base>
   /** ix,
   /dev** rw,
   #include <abstractions/base>
   /** ix,
   /dev** rw,

diff --git a/data/configs/android_app b/data/configs/android_app
index 4ac9883804c8a8362aa0b014a9f11bf24ed62bc6..7adc67e7b9564a0a5334778e08308779f0a6f74b 100644 (file)
--- a/data/configs/android_app
+++ b/data/configs/android_app
@@ -1,6 +1,6 @@
 #include <tunables/global>
 
 #include <tunables/global>
 

-profile android_app flags=(mediate_deleted,attach_disconnected) {
+profile android_app flags=(mediate_deleted,attach_disconnected,complain) {

   #include <abstractions/base>
   /** ix,
   /dev** rw,
   #include <abstractions/base>
   /** ix,
   /dev** rw,

diff --git a/data/configs/lxc-waydroid b/data/configs/lxc-waydroid
index 45f6d77810b1e03f4ef50f82bfb46f17b7d37a24..b82d318ab4a5ddbb60ee227bcf702507d1af2109 100644 (file)
--- a/data/configs/lxc-waydroid
+++ b/data/configs/lxc-waydroid
@@ -1,6 +1,6 @@
 #include <tunables/global>
 
 #include <tunables/global>
 

-profile lxc-waydroid flags=(mediate_deleted,attach_disconnected) {
+profile lxc-waydroid flags=(mediate_deleted,attach_disconnected,complain) {

   #include <abstractions/base>
   /** ix,
   /system/bin/app_process Pix -> lxc-waydroid//&android_app,
   #include <abstractions/base>
   /** ix,
   /system/bin/app_process Pix -> lxc-waydroid//&android_app,