diff --git a/private/zygote.te b/private/zygote.te index f27005ec7..5f08f8d6b 100644 --- a/private/zygote.te +++ b/private/zygote.te @@ -187,6 +187,10 @@ get_prop(zygote, device_config_window_manager_native_boot_prop) # ingore spurious denials dontaudit zygote self:global_capability_class_set sys_resource; +# Ignore spurious denials calling access() on fuse +# TODO(b/151316657): avoid the denials +dontaudit zygote media_rw_data_file:dir setattr; + # Allow zygote to use ashmem fds from system_server. allow zygote system_server:fd use;