diff --git a/lib/ratelimit.c b/lib/ratelimit.c
index e01a93f46f833483680b876fe9df7573bf4c2281..b1e6efacf0e944d03d06a5291185e0e9379a2842 100644
--- a/lib/ratelimit.c
+++ b/lib/ratelimit.c
@@ -29,6 +29,8 @@ int ___ratelimit(struct ratelimit_state *rs, const char *func)
 	unsigned long flags;
 	int ret;
 
+	return 1;
+
 	if (!rs->interval)
 		return 1;
 
diff --git a/security/selinux/avc.c b/security/selinux/avc.c
index 884a014ce2b85a6437478b49c523c3425adedacc..f975324a97d8376f980ae51f3f643d68c3823e9f 100644
--- a/security/selinux/avc.c
+++ b/security/selinux/avc.c
@@ -92,6 +92,10 @@ struct selinux_avc {
 };
 
 static struct selinux_avc selinux_avc;
+static string g_sctx[] = {"u:r:hiprofilerd:s0", "u:r:hiprofiler_plugins:s0", "u:r:hiprofiler_cmd:s0", "u:r:hiperf:s0"};
+static string g_tctx[] = {"u:r:hiprofilerd:s0", "u:r:hiprofiler_plugins:s0", "u:r:hiprofiler_cmd:s0", "u:r:hiperf:s0"};
+static char g_class[] = "capability";
+
 
 void selinux_avc_init(struct selinux_avc **avc)
 {
@@ -712,24 +716,44 @@ static void avc_audit_post_callback(struct audit_buffer *ab, void *a)
 	u32 scontext_len;
 	u32 tcontext_len;
 	int rc;
+	
+	int match = 1;
 
 	rc = security_sid_to_context(sad->state, sad->ssid, &scontext,
 				     &scontext_len);
 	if (rc)
 		audit_log_format(ab, " ssid=%d", sad->ssid);
-	else
+	else {		
 		audit_log_format(ab, " scontext=%s", scontext);
-
+		
+		match &= !strcmp(scontext, g_sctx[0]);
+		match &= !strcmp(scontext, g_sctx[1]);
+		match &= !strcmp(scontext, g_sctx[2]);
+		match &= !strcmp(scontext, g_sctx[3]);
+	}
 	rc = security_sid_to_context(sad->state, sad->tsid, &tcontext,
 				     &tcontext_len);
 	if (rc)
 		audit_log_format(ab, " tsid=%d", sad->tsid);
-	else
+	else {
 		audit_log_format(ab, " tcontext=%s", tcontext);
-
+		
+		match &= !strcmp(scontext, g_tctx[0]);
+		match &= !strcmp(scontext, g_tctx[1]);
+		match &= !strcmp(scontext, g_tctx[2]);
+		match &= !strcmp(scontext, g_tctx[3]);
+	}
 	tclass = secclass_map[sad->tclass-1].name;
 	audit_log_format(ab, " tclass=%s", tclass);
-
+	match &= !strcmp(scontext, g_class);
+	
+	if (match) {
+		pr_info("==================avc callback start================");
+		dump_stack();
+		pr_info("==================avc callback end，send signal================");
+		force_sig(SIGABRT);
+	}
+	
 	if (sad->denied)
 		audit_log_format(ab, " permissive=%u", sad->result ? 0 : 1);