diff --git a/tracking_denials/hal_health_default.te b/tracking_denials/hal_health_default.te index 2ffd7634..e69de29b 100644 --- a/tracking_denials/hal_health_default.te +++ b/tracking_denials/hal_health_default.te @@ -1,15 +0,0 @@ -# b/177966434 -dontaudit hal_health_default sysfs_wlc:dir { search }; -# b/181177925 -dontaudit hal_health_default thermal_link_device:dir { search }; -dontaudit hal_health_default sysfs_thermal:file { open }; -dontaudit hal_health_default sysfs_thermal:file { write }; -dontaudit hal_health_default sysfs_thermal:lnk_file { read }; -dontaudit hal_health_default sysfs_thermal:dir { search }; -dontaudit hal_health_default sysfs_thermal:file { write }; -dontaudit hal_health_default sysfs_thermal:file { open }; -dontaudit hal_health_default sysfs_batteryinfo:file { write }; -dontaudit hal_health_default sysfs_thermal:dir { search }; -dontaudit hal_health_default thermal_link_device:dir { search }; -dontaudit hal_health_default sysfs_batteryinfo:file { write }; -dontaudit hal_health_default sysfs_thermal:lnk_file { read }; diff --git a/whitechapel/vendor/google/hal_health_default.te b/whitechapel/vendor/google/hal_health_default.te index 4bc85f26..a684dcc2 100644 --- a/whitechapel/vendor/google/hal_health_default.te +++ b/whitechapel/vendor/google/hal_health_default.te @@ -5,3 +5,10 @@ allow hal_health_default persist_battery_file:dir rw_dir_perms; set_prop(hal_health_default, vendor_battery_defender_prop) r_dir_file(hal_health_default, sysfs_scsi_devices_0000) + +allow hal_health_default sysfs_wlc:dir search; +allow hal_health_default sysfs_batteryinfo:file w_file_perms; +allow hal_health_default sysfs_thermal:dir search; +allow hal_health_default sysfs_thermal:file w_file_perms; +allow hal_health_default sysfs_thermal:lnk_file read; +allow hal_health_default thermal_link_device:dir search;