Temporarily add auditing of execmod by apps. am: 708aa90d am: a55f637a am: 9563a64d

am: 7b377b1f

Change-Id: I695ea7d06cd3edddf1c692db5f4a04e3b6a614bb

private/untrusted_app_all.te

@@ -151,6 +151,10 @@ userdebug_or_eng(`
   }:{ dir file lnk_file } { getattr open read };
 ')
 
+# Temporary auditing to get data on what apps use execmod.
+# TODO(b/111544476) Remove this and deny the permission if feasible.
+auditallow untrusted_app_all { apk_data_file app_data_file asec_public_file }:file execmod;
+
 # Attempts to write to system_data_file is generally a sign
 # that apps are attempting to access encrypted storage before
 # the ACTION_USER_UNLOCKED intent is delivered. Suppress this