diff --git a/tracking_denials/dumpstate.te b/tracking_denials/dumpstate.te index ffb8518c..05b010e0 100644 --- a/tracking_denials/dumpstate.te +++ b/tracking_denials/dumpstate.te @@ -1,2 +1,4 @@ # b/185723618 dontaudit dumpstate hal_power_stats_vendor_service:service_manager { find }; +# b/187014717 +dontaudit dumpstate twoshay:binder call; diff --git a/tracking_denials/hal_fingerprint_default.te b/tracking_denials/hal_fingerprint_default.te index ed92cf9e..e9c6ff2a 100644 --- a/tracking_denials/hal_fingerprint_default.te +++ b/tracking_denials/hal_fingerprint_default.te @@ -11,3 +11,5 @@ dontaudit hal_fingerprint_default default_prop:file { getattr }; dontaudit hal_fingerprint_default default_prop:file { open }; dontaudit hal_fingerprint_default default_prop:file { read }; dontaudit hal_fingerprint_default system_data_root_file:file { open }; +# b/187015705 +dontaudit hal_fingerprint_default property_socket:sock_file write; diff --git a/tracking_denials/incidentd.te b/tracking_denials/incidentd.te new file mode 100644 index 00000000..a998712f --- /dev/null +++ b/tracking_denials/incidentd.te @@ -0,0 +1,2 @@ +# b/187015816 +dontaudit incidentd apex_info_file:file getattr;