From 3062ac34cd79454bc3854404e0aa650aa90c0324 Mon Sep 17 00:00:00 2001
From: Adam Shih <adamshih@google.com>
Date: Thu, 20 Jan 2022 14:43:24 +0800
Subject: [PATCH] allow storageproxyd to set itself to system

Bug: 205904330
Test: boot to home under enforcing mode
Change-Id: I48272f6507f6cdb930f734b86d3b21b0e553cac0
---
 tracking_denials/tee.te | 5 ++---
 1 file changed, 2 insertions(+), 3 deletions(-)

diff --git a/tracking_denials/tee.te b/tracking_denials/tee.te
index e20f6584..9a1070ab 100644
--- a/tracking_denials/tee.te
+++ b/tracking_denials/tee.te
@@ -1,3 +1,2 @@
-# b/205904330
-dontaudit tee tee:capability { setgid };
-dontaudit tee tee:capability { setuid };
+# TODO(b/205904330): avoid using setuid, setgid permission
+allow tee tee:capability { setuid setgid };