commit 8f022478ff37af7f52c803338a2e2bd44af08da4
author Paul Lawrence <paullawrence@google.com> Tue Feb 14 00:35:51 2017 +0000
committer android-build-merger <android-build-merger@google.com> Tue Feb 14 00:35:51 2017 +0000
tree 490fb485d9761f11bf3a374f0cf627f1bbc8926a
parent d1eb4564caf3cbd07ff49c15f3e059f54a944169
parent 7bb3d92a2f2800ce7116122a8e1228b7756a873f

Merge "Remove selinux denial" am: ff5784f3c8
am: 7bb3d92a2f

Change-Id: I77e60157551af8e13bb4fb45da86aae86347f084

private/init.te

diff --git a/private/init.te b/private/init.te
index d495d54..8a6dcea 100644
--- a/private/init.te
+++ b/private/init.te
@@ -17,3 +17,8 @@
 userdebug_or_eng(`
   domain_auto_trans(init, logcat_exec, logpersist)
 ')
+
+# Creating files on sysfs is impossible so this isn't a threat
+# Sometimes we have to write to non-existent files to avoid conditional
+# init behavior. See b/35303861 for an example.
+dontaudit init sysfs:dir write;