commit 1f627f9b01ba84d00e1969288172ee3a52701ee4
author Nick Kralevich <nnk@google.com> Sat Oct 07 06:06:56 2017 +0000
committer android-build-merger <android-build-merger@google.com> Sat Oct 07 06:06:56 2017 +0000
tree 7523b295de98483b6e77d36828090f541c59ce71
parent fd18e3c48fcb1ffb118f9d58686166aafc0f74d0
parent 39946a5dfaf7977fe076422873168a2579ff5e4d

Merge "Suppress denials from sdcardfs (b/67454004)" am: 73b11f8799 am: ad2a86d6ee
am: 39946a5dfa

Change-Id: Ic09b99d2416d19636cf70ec0ad2342cdbaa11908

public/mediaextractor.te

diff --git a/public/mediaextractor.te b/public/mediaextractor.te
index 05e65bf..915d478 100644
--- a/public/mediaextractor.te
+++ b/public/mediaextractor.te
@@ -22,6 +22,9 @@
 
 crash_dump_fallback(mediaextractor)
 
+# Suppress denials from sdcardfs (b/67454004)
+dontaudit mediaextractor sdcardfs:file read;
+
 # allow mediaextractor read permissions for file sources
 allow mediaextractor media_rw_data_file:file { getattr read };
 allow mediaextractor app_data_file:file { getattr read };