priv_app: dontaudit read access to default sysfs label
Suppress selinux logspam for non-API files in /sys.
Bug: 110914297
Test: build
Change-Id: I9b3bcf2dbf80f282ae5c74b61df360c85d02483c
diff --git a/private/priv_app.te b/private/priv_app.te
index 37d864f..a952769 100644
--- a/private/priv_app.te
+++ b/private/priv_app.te
@@ -173,6 +173,7 @@
dontaudit priv_app proc_stat:file read;
dontaudit priv_app proc_version:file read;
dontaudit priv_app sysfs:dir read;
+dontaudit priv_app sysfs:file read;
dontaudit priv_app sysfs_android_usb:file read;
dontaudit priv_app wifi_prop:file read;
dontaudit priv_app { wifi_prop exported_wifi_prop }:file read;