release-request-246e64d3-fe62-449f-83e1-f1857b6e0c39-for-git_nyc-iot-release-4...

release-request-246e64d3-fe62-449f-83e1-f1857b6e0c39-for-git_nyc-iot-release-4313836 snap-temp-L77800000099233659

Change-Id: Ie644cd3061b51a77ddeb229b339ae9c17335ed8e

file_contexts

@@ -29,6 +29,7 @@
 /sys                u:object_r:sysfs:s0
 
 # Symlinks
+/bugreports         u:object_r:rootfs:s0
 /d                  u:object_r:rootfs:s0
 /etc                u:object_r:rootfs:s0
 /sdcard             u:object_r:rootfs:s0

system_server.te

@@ -54,16 +54,13 @@ allow system_server self:capability {
     net_raw
     sys_boot
     sys_nice
-    sys_resource
+    sys_ptrace
     sys_time
     sys_tty_config
 };
 
 wakelock_use(system_server)
 
-# Triggered by /proc/pid accesses, not allowed.
-dontaudit system_server self:capability sys_ptrace;
-
 # Trigger module auto-load.
 allow system_server kernel:system module_request;