commit 14c7bc0f065bbdcc42c678d5bd92ebebb652e225
author Nick Kralevich <nnk@google.com> Mon Apr 21 11:06:17 2014 -0700
committer Amit Pundir <amit.pundir@linaro.org> Tue Jul 12 17:12:52 2016 +0530
tree 0056e51ecfee6766b5042aeace3501e24b82ad31
parent 9a67d91cc3931702e597708142fb0de30426e318

suppress netd sys_module denial

Netd triggers sys_module denials, but the kernel has
CONFIG_MODULES=n. This denial is harmless, and is likely a result
of a permission check before verifying whether the kernel even has
module support.

Suppress these denials.

Change-Id: I8b2a7e3a1cdd7ae2f064ba952c110e0e2ead7fcc

sepolicy/netd.te

diff --git a/sepolicy/netd.te b/sepolicy/netd.te
new file mode 100644
index 0000000..86fe108
--- /dev/null
+++ b/sepolicy/netd.te
@@ -0,0 +1,2 @@
+# Triggers a sys_module denial, but kernel has CONFIG_MODULES=n.
+dontaudit netd self:capability sys_module;