From bb8b462d7a8bf465fba5aefd35e1a6a1d2b2f33a Mon Sep 17 00:00:00 2001 From: sukiliu Date: Mon, 7 Jun 2021 14:05:42 +0800 Subject: [PATCH] Update avc error on ROM 7432667 Bug: b/190337281 Bug: b/190337282 Bug: b/190336524 Bug: b/190337295 Bug: b/190337296 Bug: b/190337283 Bug: b/190336723 Bug: b/190336841 Bug: b/190337297 Bug: b/190336525 Test: PtsSELinuxTestCases Change-Id: I2edda1bf554c0239953b8a31152a09045fb1f15a --- tracking_denials/dumpstate.te | 2 ++ tracking_denials/incidentd.te | 2 ++ tracking_denials/logger_app.te | 2 ++ tracking_denials/mediaprovider.te | 2 ++ tracking_denials/shell.te | 2 ++ tracking_denials/untrusted_app.te | 2 ++ tracking_denials/untrusted_app_29.te | 2 ++ tracking_denials/vendor_init.te | 4 ++++ vendor/google/bug_map | 2 ++ 9 files changed, 20 insertions(+) create mode 100644 tracking_denials/logger_app.te create mode 100644 tracking_denials/mediaprovider.te create mode 100644 tracking_denials/shell.te create mode 100644 tracking_denials/untrusted_app_29.te create mode 100644 vendor/google/bug_map diff --git a/tracking_denials/dumpstate.te b/tracking_denials/dumpstate.te index 513736b9..1a3571bf 100644 --- a/tracking_denials/dumpstate.te +++ b/tracking_denials/dumpstate.te @@ -2,3 +2,5 @@ dontaudit dumpstate hal_power_stats_vendor_service:service_manager { find }; # b/187795940 dontaudit dumpstate twoshay:binder call; +# b/190337283 +dontaudit dumpstate debugfs_wakeup_sources:file read; diff --git a/tracking_denials/incidentd.te b/tracking_denials/incidentd.te index a998712f..2187eab4 100644 --- a/tracking_denials/incidentd.te +++ b/tracking_denials/incidentd.te @@ -1,2 +1,4 @@ # b/187015816 dontaudit incidentd apex_info_file:file getattr; +# b/190337296 +dontaudit incidentd debugfs_wakeup_sources:file read; diff --git a/tracking_denials/logger_app.te b/tracking_denials/logger_app.te new file mode 100644 index 00000000..c927c3a5 --- /dev/null +++ b/tracking_denials/logger_app.te @@ -0,0 +1,2 @@ +# b/190337281 +dontaudit logger_app sysfs_vendor_sched:dir search; diff --git a/tracking_denials/mediaprovider.te b/tracking_denials/mediaprovider.te new file mode 100644 index 00000000..db311ea3 --- /dev/null +++ b/tracking_denials/mediaprovider.te @@ -0,0 +1,2 @@ +# b/190336723 +dontaudit mediaprovider sysfs_vendor_sched:dir search; diff --git a/tracking_denials/shell.te b/tracking_denials/shell.te new file mode 100644 index 00000000..dd01cb38 --- /dev/null +++ b/tracking_denials/shell.te @@ -0,0 +1,2 @@ +# b/190336524 +dontaudit shell sysfs_vendor_sched:dir search; diff --git a/tracking_denials/untrusted_app.te b/tracking_denials/untrusted_app.te index 9b098f88..d81c48d3 100644 --- a/tracking_denials/untrusted_app.te +++ b/tracking_denials/untrusted_app.te @@ -2,3 +2,5 @@ dontaudit untrusted_app vendor_camera_prop:file { read }; dontaudit untrusted_app vendor_camera_prop:file { read }; dontaudit untrusted_app vendor_camera_prop:file { read }; +# b/190337295 +dontaudit untrusted_app sysfs_vendor_sched:dir search; diff --git a/tracking_denials/untrusted_app_29.te b/tracking_denials/untrusted_app_29.te new file mode 100644 index 00000000..bf68b841 --- /dev/null +++ b/tracking_denials/untrusted_app_29.te @@ -0,0 +1,2 @@ +# b/190336841 +dontaudit untrusted_app_29 sysfs_vendor_sched:dir search; diff --git a/tracking_denials/vendor_init.te b/tracking_denials/vendor_init.te index d2c20fe1..70579511 100644 --- a/tracking_denials/vendor_init.te +++ b/tracking_denials/vendor_init.te @@ -1,2 +1,6 @@ # b/176528557 dontaudit vendor_init debugfs_trace_marker:file { getattr }; +# b/190337297 +dontaudit vendor_init vendor_maxfg_debugfs:file setattr; +dontaudit vendor_init vendor_page_pinner_debugfs:file setattr; +dontaudit vendor_init vendor_regmap_debugfs:file setattr; diff --git a/vendor/google/bug_map b/vendor/google/bug_map new file mode 100644 index 00000000..370a3354 --- /dev/null +++ b/vendor/google/bug_map @@ -0,0 +1,2 @@ +bluetooth sysfs_vendor_sched file b/190336525 +mediaprovider_app sysfs_vendor_sched file b/190336723