commit e5ca391bb7f3aa34cecf122979147d05968c82eb
author Jeff Vander Stoep <jeffv@google.com> Fri Oct 23 18:16:50 2015 +0000
committer android-build-merger <android-build-merger@google.com> Fri Oct 23 18:16:50 2015 +0000
tree 0f3f009513f917a0ca8956648b7fb070fb4e16ca
parent a78f614ce40d1dd9231415c6ba22cd31dd7f1b93
parent ad32785689beec1939f215e1947bac0ee12b099d

audit untrusted_app access to mtp_device am: 7b8f9f153e am: 775dda1fb3
am: ad32785689

* commit 'ad32785689beec1939f215e1947bac0ee12b099d':
  audit untrusted_app access to mtp_device

untrusted_app.te

diff --git a/untrusted_app.te b/untrusted_app.te
index e41616a..7422fb2 100644
--- a/untrusted_app.te
+++ b/untrusted_app.te
@@ -60,7 +60,11 @@
 #
 
 # Access /dev/mtp_usb.
+# TODO android.process.media moved to priv_app domain. Does
+# untrusted_app still require these permissions? Can "open"
+# be removed?
 allow untrusted_app mtp_device:chr_file rw_file_perms;
+auditallow untrusted_app mtp_device:chr_file rw_file_perms;
 
 # Access to /data/media.
 allow untrusted_app media_rw_data_file:dir create_dir_perms;