Merge "audit mtp sync permission" am: 6fc134e3e5
am: 4c445999d1
* commit '4c445999d1e60bdae8961ffc0c3ec4a9c0269aa0':
audit mtp sync permission
diff --git a/kernel.te b/kernel.te
index ffefdf3..31da2af 100644
--- a/kernel.te
+++ b/kernel.te
@@ -43,6 +43,9 @@
# MTP sync (b/15835289)
# kernel thread "loop0", used by the loop block device, for ASECs (b/17158723)
allow kernel { priv_app untrusted_app }:fd use;
+# privileged apps have moved to the priv_app domain. Determine
+# if this permission is still needed. b/25331459
+auditallow kernel untrusted_app:fd use;
allow kernel sdcard_type:file { read write };
# Allow the kernel to read OBB files from app directories. (b/17428116)