diff options
| author | Steven Moreland <smoreland@google.com> | 2019-08-20 12:42:03 -0700 |
|---|---|---|
| committer | Steven Moreland <smoreland@google.com> | 2019-08-22 08:49:54 -0700 |
| commit | 93a9d01e208a881023751e828814a9b978ad8466 (patch) | |
| tree | 8fe22ffc2f210105a0f8f958c473507d06fe23c0 | |
| parent | 090fc0cbfaeca5a853195105934d1e1074da624d (diff) | |
| download | marlin-93a9d01e208a881023751e828814a9b978ad8466.tar.gz | |
Don't audit hwservice add -> find.
Since an additional check related to getting the transport of a service
before registering it is more visible (this is moving a VTS test failure
to boot time for more visibility).
When adding a 'find' check on the 'add' path, this triggered some logs
here. 'find' has always been given with 'add' for other services, but
for a dontaudit, find has to be manually added.
Bug: 139274536
Fixes: 139822884
Test: TH
Change-Id: Ica4266dfaf17acc8c7bc8bd83054aa02811a4a37
(cherry picked from commit 56078dad4484836059a00510522480acf242cc81)
| -rw-r--r-- | sepolicy/hal_nfc_default.te | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/sepolicy/hal_nfc_default.te b/sepolicy/hal_nfc_default.te index 2858e652..36b06a7f 100644 --- a/sepolicy/hal_nfc_default.te +++ b/sepolicy/hal_nfc_default.te @@ -12,4 +12,4 @@ allow hal_nfc_default nfc_data_file:dir create_dir_perms; allow hal_nfc_default nfc_data_file:{ file lnk_file fifo_file } create_file_perms; dontaudit hal_nfc_default nxpese_hwservice:hwservice_manager find; -dontaudit hal_nfc_default nxpnfc_hwservice:hwservice_manager add; +dontaudit hal_nfc_default nxpnfc_hwservice:hwservice_manager { find add }; |