Merge "Suppress safetynet denials" into oc-dr1-dev am: 1468f85f

am: 3c7156b5

Change-Id: I20743966a8eedb8a5168356d6af3907234431e31

private/priv_app.te

@@ -127,6 +127,9 @@ allow priv_app selinuxfs:file r_file_perms;
 
 read_runtime_log_tags(priv_app)
 
+# suppress denials when safetynet scans /system
+dontaudit priv_app exec_type:file getattr;
+
 ###
 ### neverallow rules
 ###