From ebbbe6dd36c69e366fb8fabaff272c2863d4b3dd Mon Sep 17 00:00:00 2001
From: Jeff Vander Stoep <jeffv@google.com>
Date: Thu, 23 Feb 2017 15:08:13 -0800
Subject: [PATCH] app: remove logspam on ion ioctls
Apps definitely need access to ion ioctls. Remove audit statement.
Test: build marlin
Bug: 35715385
Change-Id: I777d3e9a88065a5f711315a7da6d63587744b408
---
private/app.te | 2 --
1 file changed, 2 deletions(-)
diff --git a/private/app.te b/private/app.te
index 98fcce0f1..4097bfc53 100644
--- a/private/app.te
+++ b/private/app.te
@@ -249,8 +249,6 @@ allowxperm { appdomain -bluetooth } self:{ rawip_socket tcp_socket udp_socket }
allow { appdomain -isolated_app } ion_device:chr_file rw_file_perms;
# TODO is write really necessary ?
auditallow { appdomain userdebug_or_eng(`-su') } ion_device:chr_file { write append };
-# TODO audit ion ioctl usage by apps
-auditallow { appdomain userdebug_or_eng(`-su') } ion_device:chr_file ioctl;
allow { appdomain -isolated_app } hal_graphics_allocator:fd use;
--
GitLab