diff --git a/tracking_denials/hal_bluetooth_btlinux.te b/tracking_denials/hal_bluetooth_btlinux.te new file mode 100644 index 00000000..7a2c4f88 --- /dev/null +++ b/tracking_denials/hal_bluetooth_btlinux.te @@ -0,0 +1,2 @@ +# b/182320300 +dontaudit hal_bluetooth_btlinux default_android_service:service_manager { find }; diff --git a/tracking_denials/hal_power_stats_default.te b/tracking_denials/hal_power_stats_default.te index 866c5176..a3e7430e 100644 --- a/tracking_denials/hal_power_stats_default.te +++ b/tracking_denials/hal_power_stats_default.te @@ -10,3 +10,5 @@ dontaudit hal_power_stats_default sysfs:dir { open }; dontaudit hal_power_stats_default sysfs:file { read }; dontaudit hal_power_stats_default sysfs:file { open }; dontaudit hal_power_stats_default sysfs:file { open }; +# b/182320246 +dontaudit hal_power_stats_default default_android_service:service_manager { add }; diff --git a/tracking_denials/rild.te b/tracking_denials/rild.te index 10680da3..405763e2 100644 --- a/tracking_denials/rild.te +++ b/tracking_denials/rild.te @@ -14,3 +14,12 @@ dontaudit rild unlabeled:file { open }; dontaudit rild unlabeled:file { read }; dontaudit rild unlabeled:file { getattr }; dontaudit rild unlabeled:file { lock }; +# b/182320172 +dontaudit rild sota_prop:file { map }; +dontaudit rild sota_prop:file { getattr }; +dontaudit rild sota_prop:file { open }; +dontaudit rild sota_prop:file { read }; +dontaudit rild sota_prop:file { read }; +dontaudit rild sota_prop:file { open }; +dontaudit rild sota_prop:file { getattr }; +dontaudit rild sota_prop:file { map }; diff --git a/whitechapel/vendor/google/file_contexts b/whitechapel/vendor/google/file_contexts index 68bcf67f..5c3908d6 100644 --- a/whitechapel/vendor/google/file_contexts +++ b/whitechapel/vendor/google/file_contexts @@ -356,6 +356,7 @@ # Vendor_kernel_modules /vendor/lib/modules/.*\.ko u:object_r:vendor_kernel_modules:s0 +/vendor_dlkm/lib/modules/.*\.ko u:object_r:vendor_kernel_modules:s0 # Display /vendor/lib(64)?/libion_google\.so u:object_r:same_process_hal_file:s0 diff --git a/whitechapel/vendor/google/hal_bluetooth_btlinux.te b/whitechapel/vendor/google/hal_bluetooth_btlinux.te index 4e61c620..f7096836 100644 --- a/whitechapel/vendor/google/hal_bluetooth_btlinux.te +++ b/whitechapel/vendor/google/hal_bluetooth_btlinux.te @@ -4,6 +4,7 @@ allow hal_bluetooth_btlinux sysfs_bluetooth_writable:file rw_file_perms; allow hal_bluetooth_btlinux proc_bluetooth_writable:file rw_file_perms; allow hal_bluetooth_btlinux hci_attach_dev:chr_file rw_file_perms; allow hal_bluetooth_btlinux wb_coexistence_dev:chr_file rw_file_perms; +binder_call(hal_bluetooth_btlinux, servicemanager) # power stats vndbinder_use(hal_bluetooth_btlinux)