commit ebb5879ca8cfed501e6a82bc8f50f01ebb3caa57
author Chong Zhang <chz@google.com> Wed Oct 30 17:10:57 2019 -0700
committer Chong Zhang <chz@google.com> Wed Oct 30 17:10:57 2019 -0700
tree 738b89a0f5103a70e8dd4e1fc3e239b55a3165f7
parent 6f25c068a4bb95b2a11dc1a2310197d1a9e12d81

mediaserver: dontaudit various domains for read/search sysfs_msm_subsys

mediaserver uses renderengine for thumbnail tonemapping.
Need the dontaudit similarly to surfaceflinger.

bug: 135717526
test: presubmit and boot test shouldn't show avc denials.
Change-Id: I1480893eb399ef4ed77ab8ff4396c36c12fac534

vendor/qcom/common/mediaserver.te

diff --git a/vendor/qcom/common/mediaserver.te b/vendor/qcom/common/mediaserver.te
index 4b0a3d5..a69bbec 100644
--- a/vendor/qcom/common/mediaserver.te
+++ b/vendor/qcom/common/mediaserver.te
@@ -1,2 +1,4 @@
 dontaudit mediaserver vendor_display_prop:file r_file_perms;
+dontaudit mediaserver sysfs_msm_subsys:dir search;
+dontaudit mediaserver sysfs_msm_subsys:file r_file_perms;