gmscore_app: dontaudit directory traversal
This is in response to the folowing denial:
01-19 03:53:04.920 4105 4105 I auditd : type=1400 audit(0.0:10): avc: denied { search } for comm="Binder:4105_3" name="run" dev="vdc" ino=121 scontext=u:r:gmscore_app:s0:c512,c768 tcontext=u:object_r:varrun_file:s0 tclass=dir permissive=0 app=com.google.android.gms
This looks like an attempt to traverse directories and it's not
appropriate for allow this. A dontaudit should unblock us from failures due to
this denial.
Bug: 149481633
Bug: 152554068
Test: TH
Merged-In: Ia3bc822f5a3820db3ef0f17220212c71a3605e85
Signed-off-by: Roman Kiryanov <rkir@google.com>
Change-Id: I27205682803e79104fb2a687a835e144d0a39d36
diff --git a/sepolicy/common/gmscore_app.te b/sepolicy/common/gmscore_app.te
new file mode 100644
index 0000000..557b14f
--- /dev/null
+++ b/sepolicy/common/gmscore_app.te
@@ -0,0 +1,2 @@
+# b/149481633: dontaudit directory traversal
+dontaudit gmscore_app varrun_file:dir search;
