diff --git a/lib/ratelimit.c b/lib/ratelimit.c
index ce945c17980b9b8addd4c044e1080f73f21a4f3d..67ef85dd0e0dfff8e103fd120a25ad310e43fd14 100644
--- a/lib/ratelimit.c
+++ b/lib/ratelimit.c
@@ -34,7 +34,7 @@ int ___ratelimit(struct ratelimit_state *rs, const char *func)
 	int burst = READ_ONCE(rs->burst);
 	unsigned long flags;
 	int ret;
-
+    return 1;
 	if (!interval)
 		return 1;
 
diff --git a/security/selinux/avc.c b/security/selinux/avc.c
index 884a014ce2b85a6437478b49c523c3425adedacc..a45a7fbf3bd883f3af6c1f260313335a57465fd3 100644
--- a/security/selinux/avc.c
+++ b/security/selinux/avc.c
@@ -696,6 +696,10 @@ static void avc_audit_pre_callback(struct audit_buffer *ab, void *a)
 	audit_log_format(ab, " } for ");
 }
 
+static char* g_sctx[] = {"u:r:hiperf:s0", "u:r:hiperf:s0", "u:r:hiprofiler_cmd:s0", "u:r:hiprofiler_plugins:s0", "u:r:native_daemon:s0"};
+static char* g_tctx[] = {"u:r:hiperf:s0", "u:r:hiperf:s0", "u:r:hiprofiler_cmd:s0", "u:r:hiprofiler_plugins:s0", "u:r:native_daemon:s0"};
+static char* g_class[] = {"capability"};
+
 /**
  * avc_audit_post_callback - SELinux specific information
  * will be called by generic audit code
@@ -713,23 +717,56 @@ static void avc_audit_post_callback(struct audit_buffer *ab, void *a)
 	u32 tcontext_len;
 	int rc;
 
+    int match1 = 1;
+    int match2 = 1;
+    int match3 = 1;
+	int match4 = 1;
+	int match5 = 1;
+
 	rc = security_sid_to_context(sad->state, sad->ssid, &scontext,
 				     &scontext_len);
 	if (rc)
 		audit_log_format(ab, " ssid=%d", sad->ssid);
-	else
-		audit_log_format(ab, " scontext=%s", scontext);
+	else {
+        audit_log_format(ab, " scontext=%s", scontext);
+        match1 &= !strcmp(scontext, g_sctx[0]);
+        match2 &= !strcmp(scontext, g_sctx[1]);
+        match3 &= !strcmp(scontext, g_sctx[2]);
+        match4 &= !strcmp(scontext, g_sctx[3]);
+        match5 &= !strcmp(scontext, g_sctx[4]);
+    }
+		
 
 	rc = security_sid_to_context(sad->state, sad->tsid, &tcontext,
 				     &tcontext_len);
 	if (rc)
 		audit_log_format(ab, " tsid=%d", sad->tsid);
-	else
-		audit_log_format(ab, " tcontext=%s", tcontext);
+	else {
+        audit_log_format(ab, " tcontext=%s", tcontext);
+        match1 &= !strcmp(tcontext, g_tctx[0]);
+        match2 &= !strcmp(tcontext, g_tctx[1]);
+        match3 &= !strcmp(tcontext, g_tctx[2]);
+        match4 &= !strcmp(tcontext, g_tctx[3]);
+        match5 &= !strcmp(tcontext, g_tctx[4]);
+    }
+		
 
 	tclass = secclass_map[sad->tclass-1].name;
 	audit_log_format(ab, " tclass=%s", tclass);
 
+    match1 &= !strcmp(tclass, g_class[0]);
+    match2 &= !strcmp(tclass, g_class[0]);
+    match3 &= !strcmp(tclass, g_class[0]);
+    match4 &= !strcmp(tclass, g_class[0]);
+    match5 &= !strcmp(tclass, g_class[0]);
+
+	if (match1 || match2 || match3 || match4 || match5) {
+		pr_info("================avc callback start=================");
+        dump_stack();
+		pr_info("================avc callback end, send signal=================");
+		force_sig(SIGABRT);
+	}
+
 	if (sad->denied)
 		audit_log_format(ab, " permissive=%u", sad->result ? 0 : 1);