crashdump: cleanup logs
Suppress WAI denials from crashdump.
Test: build/flash Taimen. Verify no new denials.
Bug: 68319037
Change-Id: If39d057cb020def7afe89fd95e049e45cce2ae16
(cherry picked from commit cc0304cfc2ca307595108bb8ccafeb363e0103a0)
diff --git a/private/bug_map b/private/bug_map
index 9bc5154..73cd3b4 100644
--- a/private/bug_map
+++ b/private/bug_map
@@ -1,8 +1,3 @@
-crash_dump app_data_file dir 68319037
-crash_dump bluetooth_data_file dir 68319037
-crash_dump resourcecache_data_file dir 68319037
-crash_dump system_data_file file 68319037
-crash_dump vendor_overlay_file dir 68319037
platform_app nfc_data_file dir 74331887
priv_app sysfs dir 72749888
priv_app sysfs_android_usb file 72749888
diff --git a/public/crash_dump.te b/public/crash_dump.te
index 74bff80..6b6b986 100644
--- a/public/crash_dump.te
+++ b/public/crash_dump.te
@@ -56,6 +56,16 @@
read_logd(crash_dump)
+# Crash dump is not intended to access the following data types. Since these
+# are WAI, suppress the denials to clean up the logs.
+dontaudit crash_dump {
+ app_data_file
+ bluetooth_data_file
+ resourcecache_data_file
+ vendor_overlay_file
+}:dir search;
+dontaudit crash_dump system_data_file:file read;
+
###
### neverallow assertions
###