Merge "Suppress safetynet denials" into oc-dr1-dev

1468f85f · TreeHugger Robot · Android (Google) Code Review · 39c4f76b · 6e88ebf4 · 1468f85f
Commit 1468f85f authored 7 years ago by TreeHugger Robot Committed by Android (Google) Code Review 7 years ago
--- a/private/priv_app.te
+++ b/private/priv_app.te
@@ -127,6 +127,9 @@ allow priv_app selinuxfs:file r_file_perms;

 read_runtime_log_tags(priv_app)

+# suppress denials when safetynet scans /system
+dontaudit priv_app exec_type:file getattr;
+
 ###
 ### neverallow rules
 ###