From b82a5ab98bb498d3c3c30d8967a9fc0467e3ac19 Mon Sep 17 00:00:00 2001
From: sukiliu <sukiliu@google.com>
Date: Tue, 8 Mar 2022 17:28:55 +0800
Subject: [PATCH] Update avc error on ROM 8268341

Bug: 223332748
Bug: 208721808
Test: PtsSELinuxTestCases
Change-Id: Ie3c6fdb9c8f29cac41db2750e71d3163132d4951
---
 tracking_denials/dumpstate.te      | 2 ++
 tracking_denials/surfaceflinger.te | 2 ++
 2 files changed, 4 insertions(+)

diff --git a/tracking_denials/dumpstate.te b/tracking_denials/dumpstate.te
index 1b424e58..dbc612ce 100644
--- a/tracking_denials/dumpstate.te
+++ b/tracking_denials/dumpstate.te
@@ -2,3 +2,5 @@
 dontaudit dumpstate app_zygote:process { signal };
 dontaudit dumpstate hal_power_stats_vendor_service:service_manager { find };
 dontaudit dumpstate sysfs:file { read };
+# b/223332748
+dontaudit dumpstate system_dlkm_file:dir { getattr };
diff --git a/tracking_denials/surfaceflinger.te b/tracking_denials/surfaceflinger.te
index 92d4c155..cd7b63d9 100644
--- a/tracking_denials/surfaceflinger.te
+++ b/tracking_denials/surfaceflinger.te
@@ -1,2 +1,4 @@
 # b/215042694
 dontaudit surfaceflinger kernel:process { setsched };
+# b/208721808
+dontaudit surfaceflinger hal_graphics_composer_default:dir { search };