coral-sepolicy: dontaudit citadel_provision denials

These denials wouldn't impact functionality of lazy
provisioning.

avc: denied { search } for comm="CitadelProvisio" name="esoc" dev="sysfs" ino=51388 scontext=u:r:citadel_provision:s0 tcontext=u:object_r:sysfs_esoc:s0 tclass=dir permissive=1
avc: denied { read } for comm="CitadelProvisio" name="devices" dev="sysfs" ino=51390 scontext=u:r:citadel_provision:s0 tcontext=u:object_r:sysfs_esoc:s0 tclass=dir permissive=1
avc: denied { open } for comm="CitadelProvisio" path="/sys/bus/esoc/devices" dev="sysfs" ino=51390 scontext=u:r:citadel_provision:s0 tcontext=u:object_r:sysfs_esoc:s0 tclass=dir permissive=1
avc: denied { read } for comm="CitadelProvisio" name="esoc_name" dev="sysfs" ino=70491 scontext=u:r:citadel_provision:s0 tcontext=u:object_r:sysfs_esoc:s0 tclass=file permissive=1
avc: denied { open } for comm="CitadelProvisio" path="/sys/devices/platform/soc/soc:qcom,mdm3/esoc0/esoc_name" dev="sysfs" ino=70491 scontext=u:r:citadel_provision:s0 tcontext=u:object_r:sysfs_esoc:s0 tclass=file permissive=1
avc: denied { search } for comm="CitadelProvisio" name="msm_subsys" dev="sysfs" ino=30307 scontext=u:r:citadel_provision:s0 tcontext=u:object_r:sysfs_msm_subsys:s0 tclass=dir permissive=1
avc: denied { read } for comm="CitadelProvisio" name="devices" dev="sysfs" ino=30309 scontext=u:r:citadel_provision:s0 tcontext=u:object_r:sysfs_msm_subsys:s0 tclass=dir permissive=1
avc: denied { open } for comm="CitadelProvisio" path="/sys/bus/msm_subsys/devices" dev="sysfs" ino=30309 scontext=u:r:citadel_provision:s0 tcontext=u:object_r:sysfs_msm_subsys:s0 tclass=dir permissive=1
avc: denied { read } for comm="CitadelProvisio" name="name" dev="sysfs" ino=56852 scontext=u:r:citadel_provision:s0 tcontext=u:object_r:sysfs_ssr:s0 tclass=file permissive=1
avc: denied { open } for comm="CitadelProvisio" path="/sys/devices/platform/soc/soc:qcom,kgsl-hyp/subsys8/name" dev="sysfs" ino=56852 scontext=u:r:citadel_provision:s0 tcontext=u:object_r:sysfs_ssr:s0 tclass=file permissive=1
avc: denied { read } for comm="CitadelProvisio" name="name" dev="sysfs" ino=70524 scontext=u:r:citadel_provision:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=1
avc: denied { open } for comm="CitadelProvisio" path="/sys/devices/platform/soc/soc:qcom,mdm3/subsys12/name" dev="sysfs" ino=70524 scontext=u:r:citadel_provision:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=1
avc: denied { search } for comm="CitadelProvisio" name="soc:qcom,faceauth_fws_b" dev="sysfs" ino=42748 scontext=u:r:citadel_provision:s0 tcontext=u:object_r:sysfs_faceauth:s0 tclass=dir permissive=1
avc: denied { read } for comm="CitadelProvisio" name="name" dev="sysfs" ino=57035 scontext=u:r:citadel_provision:s0 tcontext=u:object_r:sysfs_faceauth:s0 tclass=file permissive=1
avc: denied { open } for comm="CitadelProvisio" path="/sys/devices/platform/soc/soc:qcom,faceauth_fws_b/subsys11/name" dev="sysfs" ino=57035 scontext=u:r:citadel_provision:s0 tcontext=u:object_r:sysfs_faceauth:s0 tclass=file permissive=1

Bug: 135295587
Bug: 139459446
Change-Id: I0dbeed51ebfdc24ab869e2d07ff930cbd8378a10
1 file changed
tree: 9ea0134c147deb55fc71e897161a594290a1c926
  1. private/
  2. public/
  3. vendor/
  4. coral-sepolicy.mk
  5. OWNERS