Add sepolicy to suppress the denials for vendor_persist_camera_prop

vendor_persist_camera_prop is not necessary for 3rd party apps, so
don't audit it for appdomain to suppress the denial logs.

vendor_persist_camera_prop is the context of below prop, which are
added to standard Android SDK APIs, so all app may touch it.
 - vendor.camera.aux.packagelist
 - persist.vendor.camera.privapp.list

Change-Id: I1198ed3c3441aec5a33f2b781d29100b9d4648af
CRs-Fixed: 3027102
This commit is contained in:
Qimeng Pan
2021-09-06 16:21:14 +08:00
committed by Gerrit - the friendly Code Review server
parent d4135c5b49
commit ff33021ea5

4
generic/private/app.te Normal file → Executable file
View File

@@ -27,3 +27,7 @@
get_prop(appdomain, vendor_persist_dpm_prop)
get_prop(appdomain, vendor_persist_rcs_prop)
# vendor_persist_camera_prop is not used by 3rd party apps, so don't
# audit it to suppress the denials
dontaudit appdomain vendor_persist_camera_prop:file r_file_perms;