commit c568cedd4ee8a8b9063cd04fe23ab7f460abe09a
author Kelvin Zhang <zhangkelvin@google.com> Tue Oct 22 15:35:34 2024 -0700
committer Kelvin Zhang <zhangkelvin@google.com> Tue Oct 22 22:53:29 2024 +0000
tree f60946659d4abecc6a96050c8052766219543383
parent 2fd6f3c64d03b052513a36579d9ed1cb1cfd5c1c

Silence rawio denial for vold

Getting selinux denials when booting up aosp_oriole target, add
necessary sepolicy changes to silence it

Test: boot device
Bug: 359414718
Change-Id: Ia1dff6db214c7c615faa0127f13a8703e9961f6d

private/vold.te

diff --git a/private/vold.te b/private/vold.te
index 339877d..c242040 100644
--- a/private/vold.te
+++ b/private/vold.te
@@ -364,6 +364,8 @@
 
 dontaudit vold self:global_capability_class_set sys_resource;
 
+dontaudit vold self:capability sys_rawio;
+
 # Allow ReadDefaultFstab().
 read_fstab(vold)