diff --git a/tracking_denials/google_camera_app.te b/tracking_denials/google_camera_app.te new file mode 100644 index 00000000..a4661e61 --- /dev/null +++ b/tracking_denials/google_camera_app.te @@ -0,0 +1,10 @@ +# b/209889068 +dontaudit google_camera_app cameraserver_service:service_manager { find }; +dontaudit google_camera_app edgetpu_app_service:service_manager { find }; +dontaudit google_camera_app edgetpu_device:chr_file { ioctl }; +dontaudit google_camera_app edgetpu_device:chr_file { map }; +dontaudit google_camera_app edgetpu_device:chr_file { read write }; +dontaudit google_camera_app mediaserver_service:service_manager { find }; +dontaudit google_camera_app vendor_default_prop:file { getattr }; +dontaudit google_camera_app vendor_default_prop:file { map }; +dontaudit google_camera_app vendor_default_prop:file { open }; diff --git a/tracking_denials/hal_graphics_composer_default.te b/tracking_denials/hal_graphics_composer_default.te index 71e93ce4..88c6aaba 100644 --- a/tracking_denials/hal_graphics_composer_default.te +++ b/tracking_denials/hal_graphics_composer_default.te @@ -35,3 +35,6 @@ dontaudit hal_graphics_composer_default dumpstate:fifo_file { write }; dontaudit hal_graphics_composer_default sysfs_sensors:file { getattr }; dontaudit hal_graphics_composer_default sysfs_sensors:file { open }; dontaudit hal_graphics_composer_default sysfs_sensors:file { write }; +# b/209890345 +dontaudit hal_graphics_composer_default sysfs_display:file { getattr }; +dontaudit hal_graphics_composer_default sysfs_display:file { open };