diff --git a/tracking_denials/tee.te b/tracking_denials/tee.te index 9a1070ab..3a56e037 100644 --- a/tracking_denials/tee.te +++ b/tracking_denials/tee.te @@ -1,2 +1,5 @@ # TODO(b/205904330): avoid using setuid, setgid permission allow tee tee:capability { setuid setgid }; +# b/215649571 +dontaudit tee gsi_metadata_file:dir { search }; +dontaudit tee metadata_file:dir { search };