Evolution-X-Tensor/device_google_gs201
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Add dontaudit statements to camera HAL policy. am: 2d44b5d5d0 am: c580359e1a

Browse source 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/18806796

Change-Id: Iba99e34c7ec4342dc9ad90c2a2598fd467e5269e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
This commit is contained in:
Krzysztof Kosiński 2022-06-10 21:38:41 +00:00 • committed by Automerger Merge Worker
commit 527ccb7e0c
2 changed files with 8 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

5
tracking_denials/hal_camera_default.te
View file

@ -1,5 +0,0 @@
# b/205780065
dontaudit hal_camera_default system_data_file:dir { search };
# b/218585004
dontaudit hal_camera_default traced:unix_stream_socket { connectto };
dontaudit hal_camera_default traced_producer_socket:sock_file { write };

8
whitechapel_pro/hal_camera_default.te
View file

@ -91,3 +91,11 @@ allow hal_camera_default sysfs_leds:file r_file_perms;
# Allow camera HAL to send trace packets to Perfetto
userdebug_or_eng(`perfetto_producer(hal_camera_default)')
# Some file searches attempt to access system data and are denied.
# This is benign and can be ignored.
dontaudit hal_camera_default system_data_file:dir { search };
# google3 prebuilts attempt to connect to the wrong trace socket, ignore them.
dontaudit hal_camera_default traced:unix_stream_socket { connectto };
dontaudit hal_camera_default traced_producer_socket:sock_file { write };