commit ad2a86d6ee14328f37dde91a08a9af96fcb64412
author Nick Kralevich <nnk@google.com> Sat Oct 07 05:59:42 2017 +0000
committer android-build-merger <android-build-merger@google.com> Sat Oct 07 05:59:42 2017 +0000
tree 27770429af7426c29e32406f5c27efee4b5a3887
parent 95153a8a160f17db372cdea38e7e5b90bb7d078b
parent 73b11f8799eb7de93e55b11b3cdcea9bb456c399

Merge "Suppress denials from sdcardfs (b/67454004)"
am: 73b11f8799

Change-Id: Ica074d96cc7372195b807b9b715ffcad09bcf040

public/mediaextractor.te

diff --git a/public/mediaextractor.te b/public/mediaextractor.te
index 05e65bf..915d478 100644
--- a/public/mediaextractor.te
+++ b/public/mediaextractor.te
@@ -22,6 +22,9 @@
 
 crash_dump_fallback(mediaextractor)
 
+# Suppress denials from sdcardfs (b/67454004)
+dontaudit mediaextractor sdcardfs:file read;
+
 # allow mediaextractor read permissions for file sources
 allow mediaextractor media_rw_data_file:file { getattr read };
 allow mediaextractor app_data_file:file { getattr read };