dexoptanalyzer: suppress access(2) denial am: 06aee357

am: e8bf363d

Change-Id: Ic3e7a595e2878becc5ecf81631e8088f487c51e2

private/dexoptanalyzer.te

@@ -21,6 +21,10 @@ allow dexoptanalyzer installd:fd use;
 # package manager.
 allow dexoptanalyzer app_data_file:dir { getattr search };
 allow dexoptanalyzer app_data_file:file r_file_perms;
+# dexoptanalyzer calls access(2) with W_OK flag on app data. We can use the
+# "dontaudit...audit_access" policy line to suppress the audit access without
+# suppressing denial on actual access.
+dontaudit dexoptanalyzer app_data_file:dir audit_access;
 
 # Allow testing /data/user/0 which symlinks to /data/data
 allow dexoptanalyzer system_data_file:lnk_file { getattr };