From 4894d9fde8dc5a83cabd876d6fe0a74b86af190d Mon Sep 17 00:00:00 2001
From: Jeff Vander Stoep <jeffv@google.com>
Date: Fri, 29 Jun 2018 11:04:24 -0700
Subject: [PATCH] priv_app: dontaudit read access to default sysfs label
Suppress selinux logspam for non-API files in /sys.
Bug: 110914297
Test: build
Change-Id: I9b3bcf2dbf80f282ae5c74b61df360c85d02483c
---
private/priv_app.te | 1 +
1 file changed, 1 insertion(+)
diff --git a/private/priv_app.te b/private/priv_app.te
index 37d864f80..a95276982 100644
--- a/private/priv_app.te
+++ b/private/priv_app.te
@@ -173,6 +173,7 @@ dontaudit priv_app proc_modules:file read;
dontaudit priv_app proc_stat:file read;
dontaudit priv_app proc_version:file read;
dontaudit priv_app sysfs:dir read;
+dontaudit priv_app sysfs:file read;
dontaudit priv_app sysfs_android_usb:file read;
dontaudit priv_app wifi_prop:file read;
dontaudit priv_app { wifi_prop exported_wifi_prop }:file read;
--
GitLab