Evolution-X-Tensor/device_google_gs201
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Add dontaudit statements to camera HAL policy.

Browse source 
The autogenerated dontaudit statements in tracking_denials are
actually the correct policy. Move them to the correct file and
add comments.

Bug: 218585004
Test: build & camera check
Change-Id: Ie0338f0d2a6fd0c589777a82c22a014e462bd5c2
(cherry picked from commit 26b2d2e33e)
This commit is contained in:
Krzysztof Kosiński 2022-05-10 05:35:27 +00:00
parent 0d81b693cf
commit 2d44b5d5d0
2 changed files with 8 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

5
tracking_denials/hal_camera_default.te
View file

@ -1,5 +0,0 @@
# b/205780065
dontaudit hal_camera_default system_data_file:dir { search };
# b/218585004
dontaudit hal_camera_default traced:unix_stream_socket { connectto };
dontaudit hal_camera_default traced_producer_socket:sock_file { write };

8
whitechapel_pro/hal_camera_default.te
View file

@ -91,3 +91,11 @@ allow hal_camera_default sysfs_leds:file r_file_perms;
# Allow camera HAL to send trace packets to Perfetto
userdebug_or_eng(`perfetto_producer(hal_camera_default)')
# Some file searches attempt to access system data and are denied.
# This is benign and can be ignored.
dontaudit hal_camera_default system_data_file:dir { search };
# google3 prebuilts attempt to connect to the wrong trace socket, ignore them.
dontaudit hal_camera_default traced:unix_stream_socket { connectto };
dontaudit hal_camera_default traced_producer_socket:sock_file { write };