diff --git a/tracking_denials/hal_dumpstate_default.te b/tracking_denials/hal_dumpstate_default.te index 66e10a91..80494570 100644 --- a/tracking_denials/hal_dumpstate_default.te +++ b/tracking_denials/hal_dumpstate_default.te @@ -2,8 +2,6 @@ dontaudit hal_dumpstate_default aac_drc_prop:file { open }; dontaudit hal_dumpstate_default sysfs:dir { read }; dontaudit hal_dumpstate_default sysfs:dir { open }; -dontaudit hal_dumpstate_default vendor_displaycolor_service:service_manager { find }; -dontaudit hal_dumpstate_default hal_graphics_composer_default:binder { call }; dontaudit hal_dumpstate_default aac_drc_prop:file { getattr }; dontaudit hal_dumpstate_default aac_drc_prop:file { map }; dontaudit hal_dumpstate_default aac_drc_prop:file { open }; @@ -13,4 +11,3 @@ dontaudit hal_dumpstate_default ab_update_gki_prop:file { open }; dontaudit hal_dumpstate_default ab_update_gki_prop:file { open }; dontaudit hal_dumpstate_default sysfs:dir { read }; dontaudit hal_dumpstate_default sysfs:dir { open }; -dontaudit hal_dumpstate_default hal_graphics_composer_default:binder { call }; diff --git a/whitechapel/vendor/google/hal_dumpstate_default.te b/whitechapel/vendor/google/hal_dumpstate_default.te index d590a06d..4b3b4e4a 100644 --- a/whitechapel/vendor/google/hal_dumpstate_default.te +++ b/whitechapel/vendor/google/hal_dumpstate_default.te @@ -70,6 +70,9 @@ allow hal_dumpstate_default debugfs_f2fs:file r_file_perms; allow hal_dumpstate_default sysfs_scsi_devices_0000:dir r_dir_perms; allow hal_dumpstate_default sysfs_scsi_devices_0000:file r_file_perms; +allow hal_dumpstate_default vendor_displaycolor_service:service_manager find; +binder_call(hal_dumpstate_default, hal_graphics_composer_default); + userdebug_or_eng(` allow hal_dumpstate_default mnt_vendor_file:dir search; allow hal_dumpstate_default ramdump_vendor_mnt_file:dir search;