Merge "Keystore 2.0: Add keystore2 to llkd ignore list."

This commit is contained in:
Treehugger Robot 2021-03-17 01:41:31 +00:00 committed by Gerrit Code Review
commit 8a8bde07f5
3 changed files with 4 additions and 4 deletions

View file

@ -207,7 +207,7 @@ Comma-separated list of uid numbers or names. Default is empty or false.
The `llkd` does not monitor the specified subset of processes for live lock stack The `llkd` does not monitor the specified subset of processes for live lock stack
signatures. Default is process names signatures. Default is process names
`init,lmkd.llkd,llkd,keystore,ueventd,apexd,logd`. Prevents the sepolicy `init,lmkd.llkd,llkd,keystore,keystore2,ueventd,apexd,logd`. Prevents the sepolicy
violation associated with processes that block `ptrace` (as these can't be violation associated with processes that block `ptrace` (as these can't be
checked). **Active only on userdebug and eng builds**. For details on build checked). **Active only on userdebug and eng builds**. For details on build
types, refer to [Building Android](/setup/build/building#choose-a-target). types, refer to [Building Android](/setup/build/building#choose-a-target).

View file

@ -60,7 +60,7 @@ unsigned llkCheckMilliseconds(void);
#define LLK_IGNORELIST_UID_PROPERTY "ro.llk.ignorelist.uid" #define LLK_IGNORELIST_UID_PROPERTY "ro.llk.ignorelist.uid"
#define LLK_IGNORELIST_UID_DEFAULT "" #define LLK_IGNORELIST_UID_DEFAULT ""
#define LLK_IGNORELIST_STACK_PROPERTY "ro.llk.ignorelist.process.stack" #define LLK_IGNORELIST_STACK_PROPERTY "ro.llk.ignorelist.process.stack"
#define LLK_IGNORELIST_STACK_DEFAULT "init,lmkd.llkd,llkd,keystore,ueventd,apexd" #define LLK_IGNORELIST_STACK_DEFAULT "init,lmkd.llkd,llkd,keystore,keystore2,ueventd,apexd"
/* clang-format on */ /* clang-format on */
__END_DECLS __END_DECLS

View file

@ -115,8 +115,8 @@ std::unordered_map<std::string, std::unordered_set<std::string>> llkIgnorelistPa
// list of uids, and uid names, to skip, default nothing // list of uids, and uid names, to skip, default nothing
std::unordered_set<std::string> llkIgnorelistUid; std::unordered_set<std::string> llkIgnorelistUid;
#ifdef __PTRACE_ENABLED__ #ifdef __PTRACE_ENABLED__
// list of names to skip stack checking. "init", "lmkd", "llkd", "keystore" or // list of names to skip stack checking. "init", "lmkd", "llkd", "keystore",
// "logd" (if not userdebug). // "keystore2", or "logd" (if not userdebug).
std::unordered_set<std::string> llkIgnorelistStack; std::unordered_set<std::string> llkIgnorelistStack;
#endif #endif