commit f261c7f5e752e50a6237bde0a4546b0ca1bf404b
author Dongwon Kang <dwkang@google.com> Wed May 09 00:08:17 2018 +0000
committer Gerrit Code Review <noreply-gerritcodereview@google.com> Wed May 09 00:08:17 2018 +0000
tree a8b704dbfc78f61b38159e028ceaa63eb3c88abf
parent 81bb3c6e1836f4414ade147665d8246ff2f38a7c
parent 322ba93e9b2dc7b99b7de7b979cf057bd0510f58

Merge "Allow sdcardfs:file read access on mediaextractor"

public/mediaextractor.te

diff --git a/public/mediaextractor.te b/public/mediaextractor.te
index 44387fd..b055462 100644
--- a/public/mediaextractor.te
+++ b/public/mediaextractor.te
@@ -22,10 +22,8 @@
 
 crash_dump_fallback(mediaextractor)
 
-# Suppress denials from sdcardfs (b/67454004)
-dontaudit mediaextractor sdcardfs:file read;
-
 # allow mediaextractor read permissions for file sources
+allow mediaextractor sdcardfs:file { getattr read };
 allow mediaextractor media_rw_data_file:file { getattr read };
 allow mediaextractor app_data_file:file { getattr read };