diff --git a/sepolicy/vendor/dontaudit.te b/sepolicy/vendor/dontaudit.te
new file mode 100644
index 0000000..2b1c4e1
--- /dev/null
+++ b/sepolicy/vendor/dontaudit.te
@@ -0,0 +1,3 @@
+# Apps are no longer allowed open access to /dev/ashmem, unless they
+# target API level < Q.
+dontaudit untrusted_app ashmem_device:chr_file open;