summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorThiƩbaud Weksteen <tweek@google.com>2023-02-14 05:37:36 +0000
committerAutomerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>2023-02-14 05:37:36 +0000
commitc5d1fd8636f41ca781e17cea19fa2a6b2687f750 (patch)
tree56b72cfecfa569f7b253061b6425bd069249cc74
parentcc2c4f377895bf694b6b2927474dd0e3a3ad123c (diff)
parentd11c1f0a11c60f5d5f67c2861faad7fbe5cf8ba2 (diff)
downloadsunfish-sepolicy-c5d1fd8636f41ca781e17cea19fa2a6b2687f750.tar.gz
Ignore access to firmware_file as a filesystem am: d11c1f0a11
Original change: https://android-review.googlesource.com/c/device/google/sunfish-sepolicy/+/2428572 Change-Id: Iefcf54556ee38160e40e0ecffcb5edbf3086cf99 Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
-rw-r--r--tracking_denials/bug_map2
-rw-r--r--vendor/google/su.te2
2 files changed, 2 insertions, 2 deletions
diff --git a/tracking_denials/bug_map b/tracking_denials/bug_map
index 44d67c3..4a346c1 100644
--- a/tracking_denials/bug_map
+++ b/tracking_denials/bug_map
@@ -3,7 +3,5 @@ dumpstate incident process b/238571326
hal_drm_widevine default_prop file b/238263762
netutils_wrapper netutils_wrapper capability b/239887215
shell qemu_sf_lcd_density_prop file b/238837292
-su firmware_file filesystem b/238837404
-su ramdump_vendor_fs filesystem b/240632971
untrusted_app app_data_file dir b/238954121
vendor_per_mgr hal_gnss_qti binder b/239887289
diff --git a/vendor/google/su.te b/vendor/google/su.te
new file mode 100644
index 0000000..917c2b3
--- /dev/null
+++ b/vendor/google/su.te
@@ -0,0 +1,2 @@
+# Ignore access to firmware_file (may be triggered by tradefed).
+dontaudit su firmware_file:filesystem *;