diff --git a/tracking_denials/flags_health_check.te b/tracking_denials/flags_health_check.te new file mode 100644 index 00000000..30e802b0 --- /dev/null +++ b/tracking_denials/flags_health_check.te @@ -0,0 +1,19 @@ +# b/183338483 +dontaudit flags_health_check aac_drc_prop:file { open }; +dontaudit flags_health_check adbd_config_prop:file { map }; +dontaudit flags_health_check adbd_config_prop:file { getattr }; +dontaudit flags_health_check adbd_config_prop:file { open }; +dontaudit flags_health_check ab_update_gki_prop:file { map }; +dontaudit flags_health_check ab_update_gki_prop:file { getattr }; +dontaudit flags_health_check aac_drc_prop:file { open }; +dontaudit flags_health_check aac_drc_prop:file { getattr }; +dontaudit flags_health_check aac_drc_prop:file { map }; +dontaudit flags_health_check ab_update_gki_prop:file { open }; +dontaudit flags_health_check ab_update_gki_prop:file { getattr }; +dontaudit flags_health_check ab_update_gki_prop:file { map }; +dontaudit flags_health_check adbd_config_prop:file { open }; +dontaudit flags_health_check adbd_config_prop:file { getattr }; +dontaudit flags_health_check adbd_config_prop:file { map }; +dontaudit flags_health_check ab_update_gki_prop:file { open }; +dontaudit flags_health_check aac_drc_prop:file { map }; +dontaudit flags_health_check aac_drc_prop:file { getattr }; diff --git a/tracking_denials/hal_fingerprint_default.te b/tracking_denials/hal_fingerprint_default.te new file mode 100644 index 00000000..ed92cf9e --- /dev/null +++ b/tracking_denials/hal_fingerprint_default.te @@ -0,0 +1,13 @@ +# b/183338543 +dontaudit hal_fingerprint_default system_data_root_file:file { read }; +dontaudit hal_fingerprint_default default_prop:file { getattr }; +dontaudit hal_fingerprint_default default_prop:file { map }; +dontaudit hal_fingerprint_default default_prop:file { open }; +dontaudit hal_fingerprint_default default_prop:file { read }; +dontaudit hal_fingerprint_default system_data_root_file:file { open }; +dontaudit hal_fingerprint_default system_data_root_file:file { read }; +dontaudit hal_fingerprint_default default_prop:file { map }; +dontaudit hal_fingerprint_default default_prop:file { getattr }; +dontaudit hal_fingerprint_default default_prop:file { open }; +dontaudit hal_fingerprint_default default_prop:file { read }; +dontaudit hal_fingerprint_default system_data_root_file:file { open }; diff --git a/tracking_denials/pixelstats_vendor.te b/tracking_denials/pixelstats_vendor.te new file mode 100644 index 00000000..150de52c --- /dev/null +++ b/tracking_denials/pixelstats_vendor.te @@ -0,0 +1,5 @@ +# b/183338421 +dontaudit pixelstats_vendor sysfs_dma_heap:dir { search }; +dontaudit pixelstats_vendor sysfs_dma_heap:file { read }; +dontaudit pixelstats_vendor sysfs_dma_heap:file { open }; +dontaudit pixelstats_vendor sysfs_dma_heap:file { getattr };