One thing to keep in mind is that only denials from the kernel and init
are directly logged to the kernel log (i.e. dmesg or cat /proc/kmsg
output).  Any other denials (e.g. from servicemanager, keystore, or
debuggerd) will only appear in the Android logs (i.e. logcat output).

If you aren't going to run logd, are you still using the Android logger
kernel driver?  If so, you have to make sure that your policy still
allow access; that has been removed in AOSP master.

On 03/10/2015 10:38 PM, William Roberts wrote:
> Logd muxes the logs from the netlink socket into the other logs. If its
> not running the kernel just printks it.
> 
> On Mar 10, 2015 6:36 PM, "신재진" <[email protected]
> <mailto:[email protected]>> wrote:
> 
>     Dear Nick
> 
>     My device already has the commit
>     
> (https://android.googlesource.com/platform/system/core/+/83d85563c51fa39cb61b836302a8c26fe0e2ace6)
> 
>     I want to disable the Logd in order to decrease the booting time
>     (0.2s~0.5s reduction).
> 
>     But If I make the Logd disable, the denial logs don't appear in the
>     system.log and main.log.
> 
>     Do the all disappeared denial logs in the system.log are main.log
>     are always in the kernel.log ?
> 
>     Thank you
>     Best regards
> 
>     2015-03-11 9:55 GMT+09:00 Nick Kralevich <[email protected]
>     <mailto:[email protected]>>:
> 
>         Can you clarify what performance issues you're hitting? On a
>         properly running system, SELinux denials will be a small
>         fraction of the log messages on the device.
> 
>         I've seen some problems where a process crawling /sys could
>         generate a flood of SELinux
>         denials. 
> https://android.googlesource.com/platform/system/core/+/83d85563c51fa39cb61b836302a8c26fe0e2ace6
>         was committed to prevent flooding the logs with denials. Android
>         5.1 (just released) has that patch.
> 
>         -- Nick
> 
>         On Tue, Mar 10, 2015 at 4:28 PM, Jaejyn Shin
>         <[email protected] <mailto:[email protected]>> wrote:
> 
>             Dear SEAndroid developers
> 
>             In the current Android 5.0 (L OS), the denial logs appear in
>             the kernel.log, system.log and main.log.
> 
>             But I want to block the denial logs from system.log and main
>             log due to the performance issue.
> 
>             My question is...
>             The denial logs in the system.log, in the kernel.log and in
>             the main.log are are always same?
>             Is there any logs appeared only system.log? 
>             Or is there any logs appeared only main.log? 
> 
>             Thank you
>             Best regards
> 
>             _______________________________________________
>             Seandroid-list mailing list
>             [email protected]
>             <mailto:[email protected]>
>             To unsubscribe, send email to
>             [email protected]
>             <mailto:[email protected]>.
>             To get help, send an email containing "help" to
>             [email protected]
>             <mailto:[email protected]>.
> 
> 
> 
> 
>         -- 
>         Nick Kralevich | Android Security | [email protected]
>         <mailto:[email protected]> | 650.214.4037 <tel:650.214.4037>
> 
>         _______________________________________________
>         Seandroid-list mailing list
>         [email protected] <mailto:[email protected]>
>         To unsubscribe, send email to [email protected]
>         <mailto:[email protected]>.
>         To get help, send an email containing "help" to
>         [email protected]
>         <mailto:[email protected]>.
> 
> 
> 
>     _______________________________________________
>     Seandroid-list mailing list
>     [email protected] <mailto:[email protected]>
>     To unsubscribe, send email to [email protected]
>     <mailto:[email protected]>.
>     To get help, send an email containing "help" to
>     [email protected]
>     <mailto:[email protected]>.
> 
> 
> 
> _______________________________________________
> Seandroid-list mailing list
> [email protected]
> To unsubscribe, send email to [email protected].
> To get help, send an email containing "help" to 
> [email protected].
> 

_______________________________________________
Seandroid-list mailing list
[email protected]
To unsubscribe, send email to [email protected].
To get help, send an email containing "help" to 
[email protected].

Reply via email to