From 9e0d3af6cefbccbb5f091f9dbde1ca93e67af5d1 Mon Sep 17 00:00:00 2001
From: Joel Galenson <jgalenson@google.com>
Date: Mon, 11 Mar 2019 08:06:17 -0700
Subject: [PATCH] Hide denials seen during user bugreports.

Bug: 116711254
Bug: 123540375
Test: Build
Change-Id: If5a6d12f596b3d6b8e9ddfe3b63cf5a23afec64c
---
 sepolicy/vendor/hal_dumpstate_impl.te | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/sepolicy/vendor/hal_dumpstate_impl.te b/sepolicy/vendor/hal_dumpstate_impl.te
index ccd39691..60c781bd 100644
--- a/sepolicy/vendor/hal_dumpstate_impl.te
+++ b/sepolicy/vendor/hal_dumpstate_impl.te
@@ -46,6 +46,8 @@ allow hal_dumpstate_impl debugfs_icnss:file r_file_perms;
 allow hal_dumpstate_impl debugfs_ipc:dir r_dir_perms;
 allow hal_dumpstate_impl debugfs_ipc:file r_file_perms;
 allow hal_dumpstate_impl proc_stat:file r_file_perms;
+dontaudit hal_dumpstate_impl debugfs_tzdbg:dir search;
+dontaudit hal_dumpstate_impl debugfs_tzdbg:file r_file_perms;
 allow hal_dumpstate_impl debugfs_ufs:dir r_dir_perms;
 allow hal_dumpstate_impl debugfs_ufs:file r_file_perms;