Don't audit storageproxyd unlabeled access am: 9fe6aa97af
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/17072560 Change-Id: Ied191c3251cbfddeb9acb4c952d83d897c5c7ecd
This commit is contained in:
@@ -11,3 +11,7 @@ allow tee sg_device:chr_file rw_file_perms;
|
||||
|
||||
# Allow storageproxyd access to gsi_public_metadata_file
|
||||
read_fstab(tee)
|
||||
|
||||
# storageproxyd starts before /data is mounted. It handles /data not being there
|
||||
# gracefully. However, attempts to access /data trigger a denial.
|
||||
dontaudit tee unlabeled:dir { search };
|
||||
|
||||
Reference in New Issue
Block a user