commit 362f7d6bda118fd11a19dc8fb523a9ac6ef82f3d
author Treehugger Robot <treehugger-gerrit@google.com> Thu Apr 12 22:34:40 2018 +0000
committer Gerrit Code Review <noreply-gerritcodereview@google.com> Thu Apr 12 22:34:40 2018 +0000
tree 297a24466e177df4c70e4345ceff051444a20206
parent 45c72ddfcf2eb6f40b4b77600533576c8b02e452
parent c1384ba0d0b66e74a2df77b796b1085256b740ac

Merge "Allow vendor-init-readable for sys.boot_completed and dev.bootcomplete"

private/bug_map

diff --git a/private/bug_map b/private/bug_map
index eee9eaa..8022d04 100644
--- a/private/bug_map
+++ b/private/bug_map
@@ -1,6 +1,4 @@
 platform_app nfc_data_file dir 74331887
-priv_app sysfs dir 72749888
-priv_app sysfs_android_usb file 72749888
 priv_app system_data_file dir 72811052
 storaged storaged capability 77634061
 system_server crash_dump process 73128755

private/priv_app.te

diff --git a/private/priv_app.te b/private/priv_app.te
index 887f5be..0841c41 100644
--- a/private/priv_app.te
+++ b/private/priv_app.te
@@ -140,13 +140,15 @@
 # suppress denials for non-API accesses.
 dontaudit priv_app exec_type:file getattr;
 dontaudit priv_app device:dir read;
+dontaudit priv_app net_dns_prop:file read;
 dontaudit priv_app proc:file read;
 dontaudit priv_app proc_interrupts:file read;
 dontaudit priv_app proc_modules:file read;
 dontaudit priv_app proc_stat:file read;
 dontaudit priv_app proc_version:file read;
+dontaudit priv_app sysfs:dir read;
+dontaudit priv_app sysfs_android_usb:file read;
 dontaudit priv_app wifi_prop:file read;
-dontaudit priv_app net_dns_prop:file read;
 
 # allow privileged apps to use UDP sockets provided by the system server but not
 # modify them other than to connect