Revert "SEPolicy: dontaudit attempts to create marker files."

This reverts commit a9b718a1ed.

Reason for revert: No longer be necessary after
http://r.android.com/1120246 lands as this causes BoringSSL to only write
flag files if a particular environment variable is set, and this variable
will only be set for the self test binaries which have permission to
write to /dev/boringssl.

Bug: 140918050
Test: Manually observed audit log after change
Change-Id: I851f4aea991d91c67b64535829eea5b9594a3e2c
This commit is contained in:
Pete Bentley 2019-09-12 16:12:05 +00:00
parent 726150eda4
commit aada820069

View File

@ -25,14 +25,3 @@ neverallow {
-init
-vendor_init
} boringssl_self_test_marker:dir write;
# If those other processes attempt to create the marker files
# (which starts with :dir write), that's not a big deal.
# Don't log about it.
dontaudit {
domain
-boringssl_self_test
-init
-vendor_init
} boringssl_self_test_marker:dir write;