Clean up Google Camera App tracking_denials. am: 3758cdb733 am: aabbf32bdd

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/21938179

Change-Id: I267b5fee06f77d08648e759babcb64b3b45c1819
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
This commit is contained in:
Krzysztof Kosiński 2023-03-10 02:17:35 +00:00 committed by Automerger Merge Worker
commit 0a472be148
2 changed files with 3 additions and 8 deletions

View file

@ -1,8 +0,0 @@
# b/209889068
dontaudit google_camera_app edgetpu_app_service:service_manager { find };
dontaudit google_camera_app edgetpu_device:chr_file { ioctl };
dontaudit google_camera_app edgetpu_device:chr_file { map };
dontaudit google_camera_app edgetpu_device:chr_file { read write };
dontaudit google_camera_app vendor_default_prop:file { getattr };
dontaudit google_camera_app vendor_default_prop:file { map };
dontaudit google_camera_app vendor_default_prop:file { open };

View file

@ -21,3 +21,6 @@ hal_client_domain(google_camera_app, hal_power)
# Allows GCA to find and access the EdgeTPU.
allow google_camera_app edgetpu_app_service:service_manager find;
allow google_camera_app edgetpu_device:chr_file { getattr read write ioctl map };
# Library code may try to access vendor properties, but should be denied
dontaudit google_camera_app vendor_default_prop:file { getattr map open };