commit ebc11f6a990eb3e92b7b73373fc7cc435821aafe
author Inseob Kim <inseob@google.com> Tue Aug 03 02:19:15 2021 +0000
committer Gerrit Code Review <noreply-gerritcodereview@google.com> Tue Aug 03 02:19:15 2021 +0000
tree daa68627704de10c9b1079e167b4b7864cd8c998
parent 87441ca5f9619d694dd6f1215395897ef6aa4cbc
parent 6b5eafedf98f07f3c8ebdf8d57a46bb5707dfb67

Merge "Suppress keystore F2FS related audit"

microdroid/system/private/keystore.te

diff --git a/microdroid/system/private/keystore.te b/microdroid/system/private/keystore.te
index ac3ada1..be211a3 100644
--- a/microdroid/system/private/keystore.te
+++ b/microdroid/system/private/keystore.te
@@ -13,3 +13,6 @@
 
 # microdroid doesn't use keymaster HAL
 dontaudit keystore hal_keymaster_hwservice:hwservice_manager find;
+
+# microdroid isn't related to F2FS, but sqlite3 tries to query F2FS features.
+dontauditxperm keystore keystore_data_file:file ioctl F2FS_IOC_GET_FEATURES;