diff --git a/private/bug_map b/private/bug_map index 6bc55e5b9bc3885720774025e995b39178b82a4b..2b970dd64144043e19102391a038601be9da77f0 100644 --- a/private/bug_map +++ b/private/bug_map @@ -9,4 +9,3 @@ hal_graphics_allocator_default unlabeled dir 70180742 surfaceflinger unlabeled dir 68864350 hal_graphics_composer_default unlabeled dir 68864350 bootanim unlabeled dir 68864350 -idmap installd file 72444813 diff --git a/public/idmap.te b/public/idmap.te index 1c32f8fd54ce8721c21dc09f539865368aa47275..3f336a32dfd2f2a4740a372056385f9eb45a3994 100644 --- a/public/idmap.te +++ b/public/idmap.te @@ -6,6 +6,9 @@ type idmap_exec, exec_type, file_type; allow idmap installd:fd use; allow idmap resourcecache_data_file:file { getattr read write }; +# Ignore reading /proc/<pid>/maps after a fork. +dontaudit idmap installd:file read; + # Open and read from target and overlay apk files passed by argument. allow idmap apk_data_file:file r_file_perms; allow idmap apk_data_file:dir search;