From 722b181dd36f666a6551c760f6371d35c3e4f260 Mon Sep 17 00:00:00 2001 From: Adam Shih Date: Mon, 3 May 2021 15:48:46 +0800 Subject: [PATCH] update error on ROM 7331131 Bug: 187016929 Bug: 187016930 Bug: 187016910 Test: pts-tradefed run pts -m PtsSELinuxTest Change-Id: I294a27fd272f73cc371a4a8dc9783ba5f60203ff --- private/dex2oat.te | 59 +++++++++++++++++++++++++++++++ tracking_denials/priv_app.te | 2 ++ tracking_denials/update_engine.te | 2 ++ 3 files changed, 63 insertions(+) create mode 100644 private/dex2oat.te create mode 100644 tracking_denials/priv_app.te create mode 100644 tracking_denials/update_engine.te diff --git a/private/dex2oat.te b/private/dex2oat.te new file mode 100644 index 00000000..50d7852c --- /dev/null +++ b/private/dex2oat.te @@ -0,0 +1,59 @@ +# b/187016929 +dontaudit dex2oat vendor_overlay_file:file read ; +dontaudit dex2oat vendor_overlay_file:file read ; +dontaudit dex2oat proc_filesystems:file read ; +dontaudit dex2oat postinstall_apex_mnt_dir:file getattr ; +dontaudit dex2oat vendor_overlay_file:file read ; +dontaudit dex2oat vendor_overlay_file:file read ; +dontaudit dex2oat vendor_overlay_file:file read ; +dontaudit dex2oat vendor_overlay_file:file read ; +dontaudit dex2oat vendor_overlay_file:file read ; +dontaudit dex2oat vendor_overlay_file:file read ; +dontaudit dex2oat vendor_overlay_file:file read ; +dontaudit dex2oat vendor_overlay_file:file read ; +dontaudit dex2oat vendor_overlay_file:file read ; +dontaudit dex2oat vendor_overlay_file:file read ; +dontaudit dex2oat vendor_overlay_file:file read ; +dontaudit dex2oat vendor_overlay_file:file read ; +dontaudit dex2oat vendor_overlay_file:file read ; +dontaudit dex2oat vendor_overlay_file:file read ; +dontaudit dex2oat vendor_overlay_file:file read ; +dontaudit dex2oat vendor_overlay_file:file read ; +dontaudit dex2oat vendor_overlay_file:file read ; +dontaudit dex2oat vendor_overlay_file:file read ; +dontaudit dex2oat vendor_overlay_file:file read ; +dontaudit dex2oat vendor_overlay_file:file read ; +dontaudit dex2oat vendor_overlay_file:file read ; +dontaudit dex2oat vendor_overlay_file:file read ; +dontaudit dex2oat vendor_overlay_file:file read ; +dontaudit dex2oat vendor_overlay_file:file read ; +dontaudit dex2oat vendor_overlay_file:file read ; +dontaudit dex2oat vendor_overlay_file:file read ; +dontaudit dex2oat vendor_overlay_file:file read ; +dontaudit dex2oat vendor_overlay_file:file read ; +dontaudit dex2oat vendor_overlay_file:file read ; +dontaudit dex2oat vendor_overlay_file:file read ; +dontaudit dex2oat vendor_overlay_file:file read ; +dontaudit dex2oat vendor_overlay_file:file read ; +dontaudit dex2oat vendor_overlay_file:file read ; +dontaudit dex2oat vendor_overlay_file:file read ; +dontaudit dex2oat vendor_overlay_file:file read ; +dontaudit dex2oat vendor_overlay_file:file read ; +dontaudit dex2oat vendor_overlay_file:file read ; +dontaudit dex2oat proc_filesystems:file read ; +dontaudit dex2oat postinstall_apex_mnt_dir:file getattr ; +dontaudit dex2oat vendor_overlay_file:file read ; +dontaudit dex2oat vendor_overlay_file:file read ; +dontaudit dex2oat vendor_overlay_file:file read ; +dontaudit dex2oat vendor_overlay_file:file read ; +dontaudit dex2oat vendor_overlay_file:file read ; +dontaudit dex2oat vendor_overlay_file:file read ; +dontaudit dex2oat vendor_overlay_file:file read ; +dontaudit dex2oat vendor_overlay_file:file read ; +dontaudit dex2oat vendor_overlay_file:file read ; +dontaudit dex2oat vendor_overlay_file:file read ; +dontaudit dex2oat vendor_overlay_file:file read ; +dontaudit dex2oat vendor_overlay_file:file read ; +dontaudit dex2oat vendor_overlay_file:file read ; +dontaudit dex2oat vendor_overlay_file:file read ; +dontaudit dex2oat vendor_overlay_file:file read ; diff --git a/tracking_denials/priv_app.te b/tracking_denials/priv_app.te new file mode 100644 index 00000000..bebe3936 --- /dev/null +++ b/tracking_denials/priv_app.te @@ -0,0 +1,2 @@ +# b/187016930 +dontaudit priv_app fwk_stats_service:service_manager find ; diff --git a/tracking_denials/update_engine.te b/tracking_denials/update_engine.te new file mode 100644 index 00000000..98e7b851 --- /dev/null +++ b/tracking_denials/update_engine.te @@ -0,0 +1,2 @@ +# b/187016910 +dontaudit update_engine mnt_vendor_file:dir search ;