Evolution-X-Tensor/device_google_gs101
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

gs101: Add dontaudit statements to camera HAL policy. am: fbcf66a04a am: fd0bf19589

Browse source 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18817845

Change-Id: Ib9af5b903bd9a70cd27448af38a167659c6bc867
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
This commit is contained in:
Krzysztof Kosiński 2022-06-10 21:38:34 +00:00 • committed by Automerger Merge Worker
commit 17b9e03aa4
2 changed files with 8 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

5
tracking_denials/hal_camera_default.te
View file

@ -1,5 +0,0 @@
# b/178980085
dontaudit hal_camera_default system_data_file:dir { search };
# b/180567725
dontaudit hal_camera_default traced:unix_stream_socket { connectto };
dontaudit hal_camera_default traced_producer_socket:sock_file { write };

8
whitechapel/vendor/google/hal_camera_default.te vendored
View file

@ -96,3 +96,11 @@ allow hal_camera_default proc_interrupts:file r_file_perms;
# Allow camera HAL to send trace packets to Perfetto
userdebug_or_eng(`perfetto_producer(hal_camera_default)')
# Some file searches attempt to access system data and are denied.
# This is benign and can be ignored.
dontaudit hal_camera_default system_data_file:dir { search };
# google3 prebuilts attempt to connect to the wrong trace socket, ignore them.
dontaudit hal_camera_default traced:unix_stream_socket { connectto };
dontaudit hal_camera_default traced_producer_socket:sock_file { write };