commit f2a108663aa32bdc5ead67598231ffba99ab24d6
author sukiliu <sukiliu@google.com> Mon Jul 12 10:25:56 2021 +0800
committer sukiliu <sukiliu@google.com> Mon Jul 12 10:25:56 2021 +0800
tree 0b222f7cca9c2855dfeb6fbe4a106ddb7dc0bad9
parent 6725015431e41054f25cd82859467bd6ee404d68

Update avc error on ROM 7539329

avc: denied { dac_override } for comm="rm" capability=1 scontext=u:r:toolbox:s0 tcontext=u:r:toolbox:s0 tclass=capability permissive=0
avc: denied { dac_read_search } for comm="rm" capability=2 scontext=u:r:toolbox:s0 tcontext=u:r:toolbox:s0 tclass=capability permissive=0
avc: denied { fowner } for comm="rm" capability=3 scontext=u:r:toolbox:s0 tcontext=u:r:toolbox:s0 tclass=capability permissive=0

Bug: 193366323
Test: PtsSELinuxTestCases
Change-Id: I5c8310283d3874c43e88c55afe3a5279174ab7ed

private/toolbox.te

diff --git a/private/toolbox.te b/private/toolbox.te
index ceb0a0b..0c9f4e7 100644
--- a/private/toolbox.te
+++ b/private/toolbox.te
@@ -1,2 +1,6 @@
 # b/192320719
 dontaudit toolbox virtualizationservice_data_file:dir getattr;
+# b/193366323
+dontaudit toolbox toolbox:capability dac_override;
+dontaudit toolbox toolbox:capability dac_read_search;
+dontaudit toolbox toolbox:capability fowner;