Evolution-X-Tensor/device_google_gs101
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Merge "allow df to collect partition info" into sc-dev

Browse source
This commit is contained in:
TreeHugger Robot 2021-03-17 01:52:43 +00:00 • committed by Android (Google) Code Review
commit 23017e956d
2 changed files with 9 additions and 34 deletions
Download patch file Download diff file Expand all files Collapse all files

38
tracking_denials/dumpstate.te
View file

@ -1,35 +1,5 @@
# ag/13067824
dontaudit dumpstate fuse:dir r_dir_perms;
# b/174618507
dontaudit dumpstate default_android_service:service_manager { find };
dontaudit dumpstate vold:binder { call };
dontaudit dumpstate modem_userdata_file:dir { getattr };
dontaudit dumpstate modem_efs_file:dir { getattr };
dontaudit dumpstate vold:binder { call };
dontaudit dumpstate modem_userdata_file:dir { getattr };
dontaudit dumpstate hal_drm_clearkey:process { signal };
dontaudit dumpstate hal_drm_clearkey:process { signal };
dontaudit dumpstate modem_efs_file:dir { getattr };
# b/177778645
dontaudit dumpstate ramdump_vendor_mnt_file:filesystem { getattr };
dontaudit dumpstate ramdump_vendor_mnt_file:filesystem { getattr };
dontaudit dumpstate ramdump_vendor_mnt_file:dir { getattr };
dontaudit dumpstate ramdump_vendor_mnt_file:dir { getattr };
# b/177860804
dontaudit dumpstate incident:process { sigkill };
dontaudit dumpstate incident:process { signal };
dontaudit dumpstate incident:process { sigkill };
dontaudit dumpstate incident:process { signal };
# b/179310854 # b/179310854
dontaudit dumpstate unlabeled:dir { getattr }; dontaudit dumpstate hal_neuralnetworks_armnn:process signal;
dontaudit dumpstate unlabeled:dir { getattr }; dontaudit dumpstate hal_power_stats_vendor_service:service_manager find;
# b/180963249 dontaudit dumpstate vendor_dmabuf_debugfs:file { getattr open read };
dontaudit dumpstate hal_neuralnetworks_armnn:process { signal }; dontaudit dumpstate vold:binder call;
dontaudit dumpstate hal_neuralnetworks_armnn:process { signal };
# b/181915316
dontaudit dumpstate vendor_dmabuf_debugfs:file { read };
dontaudit dumpstate vendor_dmabuf_debugfs:file { open };
dontaudit dumpstate vendor_dmabuf_debugfs:file { getattr };
dontaudit dumpstate vendor_dmabuf_debugfs:file { getattr };
dontaudit dumpstate vendor_dmabuf_debugfs:file { read };
dontaudit dumpstate vendor_dmabuf_debugfs:file { open };

5
whitechapel/vendor/google/dumpstate.te vendored
View file

@ -2,3 +2,8 @@ dump_hal(hal_telephony)
allow dumpstate sysfs_scsi_devices_0000:file r_file_perms; allow dumpstate sysfs_scsi_devices_0000:file r_file_perms;
allow dumpstate persist_file:dir r_dir_perms; allow dumpstate persist_file:dir r_dir_perms;
allow dumpstate modem_efs_file:dir getattr;
allow dumpstate modem_img_file:dir getattr;
allow dumpstate modem_userdata_file:dir getattr;
allow dumpstate fuse:dir search;