commit ed88246c57a3e8a65b73a65b5084e67b2fd315d7
author Yabin Cui <yabinc@google.com> Tue Jun 20 19:59:55 2017 +0000
committer android-build-merger <android-build-merger@google.com> Tue Jun 20 19:59:55 2017 +0000
tree 383b8e710645f6c6dd3827b75651f0f005736728
parent 29713c8da67e96bf2494464761b4d7bdf38e3f31
parent 6e46ccdf57dcb301ff2e1a740f7a393547194534

Avoid audit when running `adb shell -t run-as xxx`. am: 3b7d9e49df
am: 6e46ccdf57

Change-Id: I5241333ec9099c7db3154cfcdb41003c65e235a0

private/domain_deprecated.te

diff --git a/private/domain_deprecated.te b/private/domain_deprecated.te
index 43f1135..5973485 100644
--- a/private/domain_deprecated.te
+++ b/private/domain_deprecated.te
@@ -25,7 +25,7 @@
 # This is used for e.g. adb backup/restore.
 allow domain_deprecated adbd:fd use;
 userdebug_or_eng(`
-auditallow { domain_deprecated -appdomain -system_server } adbd:fd use;
+auditallow { domain_deprecated -appdomain -system_server -runas } adbd:fd use;
 ')
 
 # Root fs.

public/runas.te

diff --git a/public/runas.te b/public/runas.te
index 7a7febf..12c4181 100644
--- a/public/runas.te
+++ b/public/runas.te
@@ -1,6 +1,7 @@
 type runas, domain, mlstrustedsubject;
 type runas_exec, exec_type, file_type;
 
+allow runas adbd:fd use;
 allow runas adbd:process sigchld;
 allow runas adbd:unix_stream_socket { read write };
 allow runas shell:fd use;