drgreen/android_device_google_gs-common
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Don't audit any system_app_data_file:dir access

Browse Source 
Lab devices don't do factory reset. So we see 'avc: denied' logs
everynow and then. The fix disables the related audits to avoid any
false negatives.

Bug: 287069860
Test: m && flashall && check for 'avc: denied { write }'
Change-Id: I4f98af849b99f4ece737c85a23e22b817677d917
This commit is contained in:
Utku Utkan 2023-07-18 14:59:17 -07:00
parent d77ddb4c15
commit be42c5b12c
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
camera/sepolicy/vendor_pbcs_app.te
View File

@ -2,7 +2,7 @@ type vendor_pbcs_app, domain, coredomain;
app_domain(vendor_pbcs_app);
allow vendor_pbcs_app system_app_data_file:dir search;
dontaudit vendor_pbcs_app system_app_data_file:dir *;
allow vendor_pbcs_app app_api_service:service_manager find;