We're using a new kernel that has the map permission We're seeing denials on apps in/using the tmpfs_domain() macro.
I *think* that this was just missed in: https://android-review.googlesource.com/#/c/platform/system/sepolicy/+/432339/ I have an RFC patch here: https://android-review.googlesource.com/526419 -- Respectfully, William C Roberts