Dontaudit denials caused by race with labeling.
These denials seem to be caused by a race with the process that labels
the files. While we work on fixing them, hide the denials.
Bug: 68864350
Bug: 70180742
Test: Built policy.
Change-Id: I58a32e38e6384ca55e865e9575dcfe7c46b2ed3c
diff --git a/private/surfaceflinger.te b/private/surfaceflinger.te
index 694bb2f..e64b8de 100644
--- a/private/surfaceflinger.te
+++ b/private/surfaceflinger.te
@@ -115,3 +115,6 @@
# Do not allow accessing SDcard files as unsafe ejection could
# cause the kernel to kill the process.
neverallow surfaceflinger sdcard_type:file rw_file_perms;
+
+# b/68864350
+dontaudit surfaceflinger unlabeled:dir search;