Don't audit storageproxyd unlabeled access am: 9fe6aa97af
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/17072560 Change-Id: I61b7cabc61d1e6aa286390a90c0b5b8d04f6c35a
This commit is contained in:
commit
c4e4e45c43
1 changed files with 4 additions and 0 deletions
|
@ -11,3 +11,7 @@ allow tee sg_device:chr_file rw_file_perms;
|
|||
|
||||
# Allow storageproxyd access to gsi_public_metadata_file
|
||||
read_fstab(tee)
|
||||
|
||||
# storageproxyd starts before /data is mounted. It handles /data not being there
|
||||
# gracefully. However, attempts to access /data trigger a denial.
|
||||
dontaudit tee unlabeled:dir { search };
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue