From bca54e3e3925982462e3038e87b0700fbd289569 Mon Sep 17 00:00:00 2001 From: Nick Kralevich <nnk@google.com> Date: Sat, 16 Apr 2016 07:07:13 -0700 Subject: [PATCH] drop untrusted_app exec_type getattr SafetyNet is in the priv_app domain. Suppressing this isn't necessary anymore. Change-Id: Icbcb75d3b2ebde657bd16b336b252aaec4d0d252 --- untrusted_app.te | 4 ---- 1 file changed, 4 deletions(-) diff --git a/untrusted_app.te b/untrusted_app.te index 47ccb554f..9e9bddc1f 100644 --- a/untrusted_app.te +++ b/untrusted_app.te @@ -84,10 +84,6 @@ userdebug_or_eng(` # gdbserver for ndk-gdb ptrace attaches to app process. allow untrusted_app self:process ptrace; -# Programs routinely attempt to scan through /system, looking -# for files. Suppress the denials when they occur. -dontaudit untrusted_app exec_type:file getattr; - # TODO: switch to meminfo service allow untrusted_app proc_meminfo:file r_file_perms; -- GitLab