From 60633eef542c331ba2427566b2e6965bedd3282b Mon Sep 17 00:00:00 2001 From: Adam Shih Date: Thu, 9 Dec 2021 11:02:26 +0800 Subject: [PATCH] update error on ROM 7982728 Bug: 209889068 Bug: 209890345 Test: pts-tradefed run pts -m PtsSELinuxTest Change-Id: I6177759eeaf641c0515db9f070a20c343ee740ac --- tracking_denials/google_camera_app.te | 10 ++++++++++ tracking_denials/hal_graphics_composer_default.te | 3 +++ 2 files changed, 13 insertions(+) create mode 100644 tracking_denials/google_camera_app.te diff --git a/tracking_denials/google_camera_app.te b/tracking_denials/google_camera_app.te new file mode 100644 index 00000000..a4661e61 --- /dev/null +++ b/tracking_denials/google_camera_app.te @@ -0,0 +1,10 @@ +# b/209889068 +dontaudit google_camera_app cameraserver_service:service_manager { find }; +dontaudit google_camera_app edgetpu_app_service:service_manager { find }; +dontaudit google_camera_app edgetpu_device:chr_file { ioctl }; +dontaudit google_camera_app edgetpu_device:chr_file { map }; +dontaudit google_camera_app edgetpu_device:chr_file { read write }; +dontaudit google_camera_app mediaserver_service:service_manager { find }; +dontaudit google_camera_app vendor_default_prop:file { getattr }; +dontaudit google_camera_app vendor_default_prop:file { map }; +dontaudit google_camera_app vendor_default_prop:file { open }; diff --git a/tracking_denials/hal_graphics_composer_default.te b/tracking_denials/hal_graphics_composer_default.te index 71e93ce4..88c6aaba 100644 --- a/tracking_denials/hal_graphics_composer_default.te +++ b/tracking_denials/hal_graphics_composer_default.te @@ -35,3 +35,6 @@ dontaudit hal_graphics_composer_default dumpstate:fifo_file { write }; dontaudit hal_graphics_composer_default sysfs_sensors:file { getattr }; dontaudit hal_graphics_composer_default sysfs_sensors:file { open }; dontaudit hal_graphics_composer_default sysfs_sensors:file { write }; +# b/209890345 +dontaudit hal_graphics_composer_default sysfs_display:file { getattr }; +dontaudit hal_graphics_composer_default sysfs_display:file { open };