From 430591849579584860ea4cabfde7cf13d842e03b Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Thi=C3=A9baud=20Weksteen?= <tweek@google.com>
Date: Thu, 9 Feb 2023 13:47:59 +1100
Subject: [PATCH] Ignore access to firmware_file as a filesystem

Bug: 238837441
Bug: 238971088
Test: presubmit boot test
Change-Id: I65c026345e3abed00f34f2e170002247dc5fa398
---
 tracking_denials/bug_map | 2 --
 vendor/google/su.te      | 2 ++
 2 files changed, 2 insertions(+), 2 deletions(-)
 create mode 100644 vendor/google/su.te

diff --git a/tracking_denials/bug_map b/tracking_denials/bug_map
index 4090d70b..016afc63 100644
--- a/tracking_denials/bug_map
+++ b/tracking_denials/bug_map
@@ -1,5 +1,3 @@
 hal_drm_widevine default_prop file b/238263416
 hal_googlebattery dumpstate fd b/238263849
 shell qemu_sf_lcd_density_prop file b/238953936
-su firmware_file filesystem b/238837441
-su ramdump_vendor_fs filesystem b/238971088
diff --git a/vendor/google/su.te b/vendor/google/su.te
new file mode 100644
index 00000000..917c2b3c
--- /dev/null
+++ b/vendor/google/su.te
@@ -0,0 +1,2 @@
+# Ignore access to firmware_file (may be triggered by tradefed).
+dontaudit su firmware_file:filesystem *;