Merge "Don't audit audit_access denials to /dev/binder"

2019-03-26 19:51:01 +00:00 · 2019-03-26 19:51:01 +00:00 · f3e8dce5d4
commit f3e8dce5d4
parent b9be03d63a 786b973c96
1 changed files with 5 additions and 0 deletions
--- a/public/domain.te
+++ b/public/domain.te
@ -643,6 +643,11 @@ full_treble_only(`
    -binder_in_vendor_violators # TODO(b/35870313): Remove once all violations are gone
  } binder_device:chr_file rw_file_perms;
 ')
+
+# libcutils can probe for /dev/binder permissions with access(). Ignore
+# generated denials. See b/129073672 for details.
+dontaudit domain binder_device:chr_file audit_access;
+
 full_treble_only(`
  neverallow {
    domain