diff --git a/tracking_denials/dumpstate.te b/tracking_denials/dumpstate.te new file mode 100644 index 00000000..1b424e58 --- /dev/null +++ b/tracking_denials/dumpstate.te @@ -0,0 +1,4 @@ +# b/221384768 +dontaudit dumpstate app_zygote:process { signal }; +dontaudit dumpstate hal_power_stats_vendor_service:service_manager { find }; +dontaudit dumpstate sysfs:file { read }; diff --git a/tracking_denials/hal_dumpstate_default.te b/tracking_denials/hal_dumpstate_default.te new file mode 100644 index 00000000..dac6fba0 --- /dev/null +++ b/tracking_denials/hal_dumpstate_default.te @@ -0,0 +1,2 @@ +# b/221384770 +dontaudit hal_dumpstate_default vendor_camera_debug_prop:file { read }; diff --git a/tracking_denials/hal_power_default.te b/tracking_denials/hal_power_default.te index a426fa0d..731d4baa 100644 --- a/tracking_denials/hal_power_default.te +++ b/tracking_denials/hal_power_default.te @@ -1,2 +1,4 @@ # b/208909174 dontaudit hal_power_default hal_power_default:capability { dac_read_search }; +# b/221384860 +dontaudit hal_power_default hal_power_default:capability { dac_override }; diff --git a/tracking_denials/init.te b/tracking_denials/init.te new file mode 100644 index 00000000..2dac3b47 --- /dev/null +++ b/tracking_denials/init.te @@ -0,0 +1,2 @@ +# b/221384981 +dontaudit init overlayfs_file:file { rename }; diff --git a/tracking_denials/vendor_init.te b/tracking_denials/vendor_init.te index ea8ff1e4..462f3986 100644 --- a/tracking_denials/vendor_init.te +++ b/tracking_denials/vendor_init.te @@ -1,2 +1,4 @@ # b/205656950 dontaudit vendor_init thermal_link_device:file { create }; +# b/221384939 +dontaudit vendor_init vendor_battery_defender_prop:property_service { set }; diff --git a/tracking_denials/vendor_telephony_silentlogging_app.te b/tracking_denials/vendor_telephony_silentlogging_app.te new file mode 100644 index 00000000..a74e3e3a --- /dev/null +++ b/tracking_denials/vendor_telephony_silentlogging_app.te @@ -0,0 +1,3 @@ +# b/221384996 +dontaudit vendor_telephony_silentlogging_app system_app_data_file:dir { getattr }; +dontaudit vendor_telephony_silentlogging_app system_app_data_file:dir { search };