commit 77c00a68fe1115cafa79dc0fcf7ab9adb98e37f0
author Nick Kralevich <nnk@google.com> Tue May 20 15:59:25 2014 +0000
committer Gerrit Code Review <noreply-gerritcodereview@google.com> Tue May 20 15:59:25 2014 +0000
tree 34d718c069fcc9ad14ba3932ed7e19674cbce979
parent fa34d47185d6431394ffdfbc85d435653e54256a
parent 7a186b3fa80000acf0d7d2e9ad7d597433aebc82

Merge "Suppress installd auditallow"

domain.te

diff --git a/domain.te b/domain.te
index 0bd9ad0..029d20a 100644
--- a/domain.te
+++ b/domain.te
@@ -150,9 +150,11 @@
 #
 allow domain unlabeled:notdevfile_class_set { create_file_perms relabelfrom };
 allow domain unlabeled:dir { create_dir_perms relabelfrom };
-auditallow { domain -init } unlabeled:notdevfile_class_set { create_file_perms relabelfrom };
-auditallow { domain -init -kernel } unlabeled:dir { create_dir_perms relabelfrom };
+auditallow { domain -init -installd } unlabeled:notdevfile_class_set { create_file_perms relabelfrom };
+auditallow { domain -init -kernel -installd } unlabeled:dir { create_dir_perms relabelfrom };
 auditallow kernel unlabeled:dir ~search;
+auditallow installd unlabeled:dir ~{ getattr search relabelfrom };
+auditallow installd unlabeled:notdevfile_class_set ~{ getattr relabelfrom };
 
 ###
 ### neverallow rules