update error on ROM 7191013

Bug: 182086633
Bug: 182086611
Bug: 182086552
Bug: 182086686
Bug: 182086550
Bug: 182086551
Bug: 182086482
Bug: 182086688
Bug: 182086481
Test: pts-tradefed run pts -m PtsSELinuxTest
Change-Id: I3c8c411d985a4a3c9210a39aa30ea0c3626f65e0
This commit is contained in:
Adam Shih 2021-03-08 09:42:05 +08:00
parent 5009efa776
commit fc5a6a88db
9 changed files with 98 additions and 0 deletions

View file

@ -0,0 +1,55 @@
# b/182086633
dontaudit hal_sensors_default servicemanager:binder { call };
dontaudit hal_sensors_default device:dir { read };
dontaudit hal_sensors_default device:dir { watch };
dontaudit hal_sensors_default aoc_device:chr_file { read write };
dontaudit hal_sensors_default aoc_device:chr_file { open };
dontaudit hal_sensors_default mnt_vendor_file:dir { search };
dontaudit hal_sensors_default persist_file:dir { search };
dontaudit hal_sensors_default persist_file:dir { getattr };
dontaudit hal_sensors_default persist_file:dir { read };
dontaudit hal_sensors_default persist_file:dir { open };
dontaudit hal_sensors_default persist_file:file { getattr };
dontaudit hal_sensors_default persist_file:file { read };
dontaudit hal_sensors_default persist_file:file { open };
dontaudit hal_sensors_default vendor_data_file:dir { read };
dontaudit hal_sensors_default vendor_data_file:dir { open };
dontaudit hal_sensors_default vendor_data_file:file { getattr };
dontaudit hal_sensors_default vendor_data_file:file { read };
dontaudit hal_sensors_default vendor_data_file:file { open };
dontaudit hal_sensors_default fwk_stats_service:service_manager { find };
dontaudit hal_sensors_default servicemanager:binder { call };
dontaudit hal_sensors_default servicemanager:binder { transfer };
dontaudit hal_sensors_default servicemanager:binder { transfer };
dontaudit hal_sensors_default servicemanager:binder { call };
dontaudit hal_sensors_default aoc_device:chr_file { getattr };
dontaudit hal_sensors_default aoc_device:chr_file { read write };
dontaudit hal_sensors_default aoc_device:chr_file { open };
dontaudit hal_sensors_default vendor_data_file:file { write };
dontaudit hal_sensors_default sysfs_aoc_boottime:file { read };
dontaudit hal_sensors_default sysfs_aoc_boottime:file { open };
dontaudit hal_sensors_default sysfs_aoc_boottime:file { getattr };
dontaudit hal_sensors_default vendor_data_file:file { write };
dontaudit hal_sensors_default vendor_data_file:file { read };
dontaudit hal_sensors_default vendor_data_file:file { getattr };
dontaudit hal_sensors_default persist_file:dir { search };
dontaudit hal_sensors_default vendor_data_file:dir { open };
dontaudit hal_sensors_default aoc_device:chr_file { read write };
dontaudit hal_sensors_default vendor_data_file:dir { read };
dontaudit hal_sensors_default persist_file:file { open };
dontaudit hal_sensors_default vendor_data_file:file { open };
dontaudit hal_sensors_default sysfs_aoc_boottime:file { getattr };
dontaudit hal_sensors_default sysfs_aoc_boottime:file { open };
dontaudit hal_sensors_default sysfs_aoc_boottime:file { read };
dontaudit hal_sensors_default persist_file:file { read };
dontaudit hal_sensors_default persist_file:file { getattr };
dontaudit hal_sensors_default device:dir { read };
dontaudit hal_sensors_default persist_file:dir { open };
dontaudit hal_sensors_default persist_file:dir { read };
dontaudit hal_sensors_default persist_file:dir { getattr };
dontaudit hal_sensors_default vendor_data_file:file { open };
dontaudit hal_sensors_default mnt_vendor_file:dir { search };
dontaudit hal_sensors_default device:dir { read };
dontaudit hal_sensors_default device:dir { watch };
dontaudit hal_sensors_default servicemanager:binder { transfer };
dontaudit hal_sensors_default aoc_device:chr_file { open };

View file

@ -0,0 +1,4 @@
# b/182086611
dontaudit init-insmod-sh vendor_regmap_debugfs:dir { search };
dontaudit init-insmod-sh vendor_regmap_debugfs:dir { search };
dontaudit init-insmod-sh vendor_regmap_debugfs:dir { search };

View file

@ -4,3 +4,10 @@ dontaudit mediacodec sysfs:file { open };
dontaudit mediacodec sysfs:file { read }; dontaudit mediacodec sysfs:file { read };
# b/176777184 # b/176777184
dontaudit mediacodec default_android_vndservice:service_manager add ; dontaudit mediacodec default_android_vndservice:service_manager add ;
# b/182086552
dontaudit mediacodec dmabuf_heap_device:chr_file { open };
dontaudit mediacodec dmabuf_heap_device:chr_file { read };
dontaudit mediacodec dmabuf_heap_device:chr_file { ioctl };
dontaudit mediacodec dmabuf_heap_device:chr_file { read };
dontaudit mediacodec dmabuf_heap_device:chr_file { open };
dontaudit mediacodec dmabuf_heap_device:chr_file { ioctl };

View file

@ -0,0 +1,10 @@
# b/182086686
dontaudit mediaserver dmabuf_heap_device:chr_file { open };
dontaudit mediaserver dmabuf_heap_device:chr_file { ioctl };
dontaudit mediaserver dmabuf_heap_device:chr_file { ioctl };
dontaudit mediaserver dmabuf_heap_device:chr_file { read };
dontaudit mediaserver dmabuf_heap_device:chr_file { read };
dontaudit mediaserver dmabuf_heap_device:chr_file { open };
dontaudit mediaserver dmabuf_heap_device:chr_file { ioctl };
dontaudit mediaserver dmabuf_heap_device:chr_file { ioctl };
dontaudit mediaserver dmabuf_heap_device:chr_file { ioctl };

View file

@ -0,0 +1,7 @@
# b/182086550
dontaudit mediaswcodec dmabuf_heap_device:chr_file { open };
dontaudit mediaswcodec dmabuf_heap_device:chr_file { read };
dontaudit mediaswcodec dmabuf_heap_device:chr_file { read };
dontaudit mediaswcodec dmabuf_heap_device:chr_file { ioctl };
dontaudit mediaswcodec dmabuf_heap_device:chr_file { open };
dontaudit mediaswcodec dmabuf_heap_device:chr_file { ioctl };

4
tracking_denials/nfc.te Normal file
View file

@ -0,0 +1,4 @@
# b/182086551
dontaudit nfc dmabuf_heap_device:chr_file { open };
dontaudit nfc dmabuf_heap_device:chr_file { ioctl };
dontaudit nfc dmabuf_heap_device:chr_file { read };

View file

@ -6,3 +6,7 @@ dontaudit platform_app hal_wlc:binder { call };
dontaudit platform_app hal_wlc_hwservice:hwservice_manager { find }; dontaudit platform_app hal_wlc_hwservice:hwservice_manager { find };
dontaudit platform_app hal_wlc:binder { call }; dontaudit platform_app hal_wlc:binder { call };
dontaudit platform_app hal_wlc:binder { transfer }; dontaudit platform_app hal_wlc:binder { transfer };
# b/182086482
dontaudit platform_app dmabuf_heap_device:chr_file { ioctl };
dontaudit platform_app dmabuf_heap_device:chr_file { read };
dontaudit platform_app dmabuf_heap_device:chr_file { open };

View file

@ -0,0 +1,3 @@
# b/182086688
dontaudit servicemanager hal_sensors_default:binder { call };
dontaudit servicemanager hal_sensors_default:binder { call };

View file

@ -1,2 +1,6 @@
# b/178980142 # b/178980142
dontaudit system_server property_type:file *; dontaudit system_server property_type:file *;
# b/182086481
dontaudit system_server dmabuf_heap_device:chr_file { ioctl };
dontaudit system_server dmabuf_heap_device:chr_file { open };
dontaudit system_server dmabuf_heap_device:chr_file { read };