diff --git a/tracking_denials/vendor_telephony_app.te b/tracking_denials/vendor_telephony_app.te deleted file mode 100644 index 9100149a..00000000 --- a/tracking_denials/vendor_telephony_app.te +++ /dev/null @@ -1,4 +0,0 @@ -# b/185723694 -dontaudit vendor_telephony_app system_app_data_file:dir { getattr }; -dontaudit vendor_telephony_app system_app_data_file:dir { search }; -dontaudit vendor_telephony_app system_app_data_file:dir { search }; diff --git a/whitechapel/vendor/google/vendor_telephony_app.te b/whitechapel/vendor/google/vendor_telephony_app.te index 5b4c4604..7d515a8a 100644 --- a/whitechapel/vendor/google/vendor_telephony_app.te +++ b/whitechapel/vendor/google/vendor_telephony_app.te @@ -6,10 +6,6 @@ set_prop(vendor_telephony_app, vendor_persist_sys_default_prop) set_prop(vendor_telephony_app, vendor_modem_prop) set_prop(vendor_telephony_app, vendor_slog_prop) -# [TODO] Need to check further about the system data permission -# allow vendor_telephony_app system_app_data_file:dir create_dir_perms; -# allow vendor_telephony_app system_app_data_file:file create_file_perms; - allow vendor_telephony_app vendor_slog_file:dir create_dir_perms; allow vendor_telephony_app vendor_slog_file:file create_file_perms; @@ -17,3 +13,10 @@ allow vendor_telephony_app app_api_service:service_manager find; allow vendor_telephony_app hal_vendor_oem_hwservice:hwservice_manager find; binder_call(vendor_telephony_app, dmd) binder_call(vendor_telephony_app, sced) + +userdebug_or_eng(` +# Silent Logging +dontaudit vendor_telephony_app system_app_data_file:dir create_dir_perms; +dontaudit vendor_telephony_app system_app_data_file:file create_file_perms; +dontaudit vendor_telephony_app default_prop:file { getattr open read map }; +')