commit cdc1a840ea273155a5d5ffb92f01e19fdafccee8
author Treehugger Robot <treehugger-gerrit@google.com> Tue Mar 31 11:52:32 2020 +0000
committer Gerrit Code Review <noreply-gerritcodereview@google.com> Tue Mar 31 11:52:32 2020 +0000
tree ded2457d9ac0ce91e5d1463b4c19dfab44afb15a
parent e432c093b77d5687562861144af7c9d39d675f19
parent 35c2f102f29a0f9d73e526f1fa6fdb163f75b48c

Merge "Ignore the denial when system_other is erased"

private/cppreopts.te

diff --git a/private/cppreopts.te b/private/cppreopts.te
index 1a8fa0b..1192ba6 100644
--- a/private/cppreopts.te
+++ b/private/cppreopts.te
@@ -25,3 +25,7 @@
 # Allow running the cp command using cppreopts permissions. Needed so we can
 # write into dalvik-cache
 allow cppreopts toolbox_exec:file rx_file_perms;
+
+# Silence the denial when /postinstall cannot be mounted, e.g., system_other
+# is wiped, but cppreopts.sh still runs.
+dontaudit cppreopts postinstall_mnt_dir:dir search;

private/preloads_copy.te

diff --git a/private/preloads_copy.te b/private/preloads_copy.te
index 7177839..ba54b70 100644
--- a/private/preloads_copy.te
+++ b/private/preloads_copy.te
@@ -12,3 +12,7 @@
 
 # Allow to copy from /postinstall
 allow preloads_copy system_file:dir r_dir_perms;
+
+# Silence the denial when /postinstall cannot be mounted, e.g., system_other
+# is wiped, but preloads_copy.sh still runs.
+dontaudit preloads_copy postinstall_mnt_dir:dir search;