commit c6dc0891a3b117441654ad42ebb800d04e42ef03
author Treehugger Robot <android-test-infra-autosubmit@system.gserviceaccount.com> Thu Oct 05 09:22:22 2023 +0000
committer Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com> Thu Oct 05 09:22:22 2023 +0000
tree 63a2a6ff88738c8ffcb012533dcf3b40ba7bed9b
parent 91c06fcea123ad4f647df778ecd482713fd4a7a9
parent e63aa486644cf2da9aeabc771edaa9032cf5c838

Merge "Ignore non-API access by gmscore_app" into main am: e63aa48664

Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2773824

Change-Id: Ia4dccb7864a7a0fcb7db4c948d0df67e882acbdf
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>

private/gmscore_app.te

diff --git a/private/gmscore_app.te b/private/gmscore_app.te
index 46b90c6..b662f4f 100644
--- a/private/gmscore_app.te
+++ b/private/gmscore_app.te
@@ -46,6 +46,7 @@
 dontaudit gmscore_app exec_type:file r_file_perms;
 dontaudit gmscore_app device:dir r_dir_perms;
 dontaudit gmscore_app fs_bpf:dir r_dir_perms;
+dontaudit gmscore_app kernel:security *;
 dontaudit gmscore_app net_dns_prop:file r_file_perms;
 dontaudit gmscore_app proc:file r_file_perms;
 dontaudit gmscore_app proc_interrupts:file r_file_perms;