diff --git a/untrusted_app.te b/untrusted_app.te index 7a9e2dd3da37a800ea4850ca1d0611197051976b..4e783f13ebf75781004498a0c9348fea29ca126a 100644 --- a/untrusted_app.te +++ b/untrusted_app.te @@ -111,6 +111,11 @@ userdebug_or_eng(` allow untrusted_app perfprofd_data_file:file r_file_perms; allow untrusted_app perfprofd_data_file:dir r_dir_perms; ') + +# Programs routinely attempt to scan through /system, looking +# for files. Suppress the denials when they occur. +dontaudit untrusted_app exec_type:file getattr; + ### ### neverallow rules ###