Merge "Suppress su access to pdx sockets" into oc-dr1-dev
diff --git a/public/te_macros b/public/te_macros
index d65eb88..2d1ec03 100644
--- a/public/te_macros
+++ b/public/te_macros
@@ -101,6 +101,10 @@
typeattribute $2 pdx_$1_endpoint_dir_type;
type pdx_$1_endpoint_socket, pdx_$1_endpoint_socket_type, pdx_endpoint_socket_type, file_type, coredomain_socket, mlstrustedobject, mlstrustedsubject;
type pdx_$1_channel_socket, pdx_$1_channel_socket_type, pdx_channel_socket_type, coredomain_socket;
+userdebug_or_eng(`
+dontaudit su pdx_$1_endpoint_socket:unix_stream_socket *;
+dontaudit su pdx_$1_channel_socket:unix_stream_socket *;
+')
')
#####################################