update error on ROM 7904131

Bug: 205904432
Bug: 205904322
Bug: 205904438
Bug: 205904406
Bug: 205904310
Bug: 205904436
Bug: 205904402
Bug: 205904552
Bug: 205904323
Bug: 205904442
Bug: 205904367
Bug: 205904452
Bug: 205904403
Bug: 205904379
Bug: 205904328
Bug: 205904286
Bug: 205904380
Bug: 205904401
Bug: 205904381
Bug: 205904208
Bug: 205904433
Bug: 205904327
Bug: 205904553
Bug: 205904361
Bug: 205904441
Bug: 205904324
Bug: 205904207
Bug: 205904404
Bug: 205904330
Bug: 205904439
Bug: 205904435
Bug: 205904384
Test: pts-tradefed run pts -m PtsSELinuxTest
Change-Id: I64432a24d562d5868f21a317e5bfd6f25ad24900
This commit is contained in:
Adam Shih 2021-11-11 09:47:32 +08:00
parent e3bb63ab1b
commit ab13d5a1f7
32 changed files with 110 additions and 0 deletions

View file

@ -1,2 +1,4 @@
# b/205779872
dontaudit cbd persist_file:dir { search };
# b/205904432
dontaudit cbd cbd:capability { setuid };

View file

@ -8,3 +8,9 @@ dontaudit citadeld vndbinder_device:chr_file { map };
dontaudit citadeld vndbinder_device:chr_file { open };
dontaudit citadeld vndbinder_device:chr_file { read };
dontaudit citadeld vndbinder_device:chr_file { write };
# b/205904322
dontaudit citadeld servicemanager:binder { call };
dontaudit citadeld servicemanager:binder { transfer };
dontaudit citadeld system_server:binder { call };
dontaudit citadeld vndservicemanager:binder { call };
dontaudit citadeld vndservicemanager:binder { transfer };

View file

@ -12,3 +12,5 @@ dontaudit convert-to-f2fs-sh toolbox_exec:file { execute };
dontaudit convert-to-f2fs-sh toolbox_exec:file { execute_no_trans };
dontaudit convert-to-f2fs-sh toolbox_exec:file { getattr };
dontaudit convert-to-f2fs-sh toolbox_exec:file { read open };
# b/205904438
dontaudit convert-to-f2fs-sh toolbox_exec:file { map };

View file

@ -41,3 +41,12 @@ dontaudit hal_camera_default vendor_camera_data_file:dir { read };
dontaudit hal_camera_default vendor_camera_data_file:dir { search };
dontaudit hal_camera_default vendor_camera_data_file:file { open };
dontaudit hal_camera_default vendor_camera_data_file:file { read };
# b/205904406
dontaudit hal_camera_default hal_camera_default:capability { sys_nice };
dontaudit hal_camera_default hal_power_default:binder { call };
dontaudit hal_camera_default hal_radioext_default:binder { call };
dontaudit hal_camera_default init:unix_stream_socket { connectto };
dontaudit hal_camera_default property_socket:sock_file { write };
dontaudit hal_camera_default servicemanager:binder { call };
dontaudit hal_camera_default servicemanager:binder { transfer };
dontaudit hal_camera_default system_server:binder { call };

View file

@ -17,3 +17,7 @@ dontaudit hal_fingerprint_default fingerprint_device:chr_file { read write };
dontaudit hal_fingerprint_default tee_device:chr_file { ioctl };
dontaudit hal_fingerprint_default tee_device:chr_file { open };
dontaudit hal_fingerprint_default tee_device:chr_file { read write };
# b/205904310
dontaudit hal_fingerprint_default hal_fingerprint_default:netlink_socket { bind };
dontaudit hal_fingerprint_default hal_fingerprint_default:netlink_socket { create };
dontaudit hal_fingerprint_default hal_fingerprint_default:netlink_socket { write };

View file

@ -12,3 +12,9 @@ dontaudit hal_graphics_composer_default vndbinder_device:chr_file { write };
# b/205779906
dontaudit hal_graphics_composer_default mnt_vendor_file:dir { search };
dontaudit hal_graphics_composer_default persist_file:dir { search };
# b/205904436
dontaudit hal_graphics_composer_default hal_graphics_composer_default:netlink_kobject_uevent_socket { bind };
dontaudit hal_graphics_composer_default hal_graphics_composer_default:netlink_kobject_uevent_socket { create };
dontaudit hal_graphics_composer_default hal_graphics_composer_default:netlink_kobject_uevent_socket { read };
dontaudit hal_graphics_composer_default vndservicemanager:binder { call };
dontaudit hal_graphics_composer_default vndservicemanager:binder { transfer };

View file

@ -7,3 +7,6 @@ dontaudit hal_health_default vendor_battery_defender_prop:property_service { set
# b/205779737
dontaudit hal_health_default mnt_vendor_file:dir { search };
dontaudit hal_health_default persist_file:dir { search };
# b/205904402
dontaudit hal_health_default init:unix_stream_socket { connectto };
dontaudit hal_health_default property_socket:sock_file { write };

View file

@ -4,3 +4,5 @@ dontaudit hal_identity_citadel vndbinder_device:chr_file { map };
dontaudit hal_identity_citadel vndbinder_device:chr_file { open };
dontaudit hal_identity_citadel vndbinder_device:chr_file { read };
dontaudit hal_identity_citadel vndbinder_device:chr_file { write };
# b/205904552
dontaudit hal_identity_citadel vndservicemanager:binder { call };

View file

@ -9,3 +9,6 @@ dontaudit hal_keymint_citadel vndbinder_device:chr_file { map };
dontaudit hal_keymint_citadel vndbinder_device:chr_file { open };
dontaudit hal_keymint_citadel vndbinder_device:chr_file { read };
dontaudit hal_keymint_citadel vndbinder_device:chr_file { write };
# b/205904323
dontaudit hal_keymint_citadel citadeld:binder { call };
dontaudit hal_keymint_citadel vndservicemanager:binder { call };

View file

@ -0,0 +1,2 @@
# b/205904442
dontaudit hal_power_default hal_camera_default:binder { transfer };

View file

@ -0,0 +1,2 @@
# b/205904367
dontaudit hal_power_stats_default hal_bluetooth_btlinux:binder { call };

View file

@ -3,3 +3,6 @@ dontaudit hal_secure_element_gto vendor_secure_element_prop:property_service { s
# b/205656951
dontaudit hal_secure_element_gto secure_element_device:chr_file { open };
dontaudit hal_secure_element_gto secure_element_device:chr_file { read write };
# b/205904452
dontaudit hal_secure_element_gto init:unix_stream_socket { connectto };
dontaudit hal_secure_element_gto property_socket:sock_file { write };

View file

@ -0,0 +1,3 @@
# b/205904403
dontaudit hal_secure_element_uicc rild:binder { call };
dontaudit hal_secure_element_uicc rild:binder { transfer };

View file

@ -9,3 +9,7 @@ dontaudit hal_sensors_default persist_file:dir { search };
dontaudit hal_sensors_default sensor_reg_data_file:dir { getattr };
dontaudit hal_sensors_default sensor_reg_data_file:dir { open };
dontaudit hal_sensors_default sensor_reg_data_file:dir { read };
# b/205904379
dontaudit hal_sensors_default chre:unix_stream_socket { connectto };
dontaudit hal_sensors_default chre_socket:sock_file { write };
dontaudit hal_sensors_default system_server:binder { call };

View file

@ -0,0 +1,7 @@
# b/205904328
dontaudit hal_thermal_default hal_thermal_default:netlink_generic_socket { bind };
dontaudit hal_thermal_default hal_thermal_default:netlink_generic_socket { create };
dontaudit hal_thermal_default hal_thermal_default:netlink_generic_socket { getattr };
dontaudit hal_thermal_default hal_thermal_default:netlink_generic_socket { read };
dontaudit hal_thermal_default hal_thermal_default:netlink_generic_socket { setopt };
dontaudit hal_thermal_default hal_thermal_default:netlink_generic_socket { write };

View file

@ -4,3 +4,6 @@ dontaudit hal_weaver_citadel vndbinder_device:chr_file { map };
dontaudit hal_weaver_citadel vndbinder_device:chr_file { open };
dontaudit hal_weaver_citadel vndbinder_device:chr_file { read };
dontaudit hal_weaver_citadel vndbinder_device:chr_file { write };
# b/205904286
dontaudit hal_weaver_citadel citadeld:binder { call };
dontaudit hal_weaver_citadel vndservicemanager:binder { call };

View file

@ -1,2 +1,4 @@
# b/204718757
dontaudit hbmsvmanager_app hal_pixel_display_service:service_manager { find };
# b/205904380
dontaudit hbmsvmanager_app hal_graphics_composer_default:binder { call };

View file

@ -7,3 +7,6 @@ dontaudit init_citadel vndbinder_device:chr_file { write };
# b/205779736
dontaudit init_citadel citadel_updater:file { execute_no_trans };
dontaudit init_citadel vendor_toolbox_exec:file { execute_no_trans };
# b/205904401
dontaudit init_citadel citadeld:binder { call };
dontaudit init_citadel vndservicemanager:binder { call };

View file

@ -8,3 +8,6 @@ dontaudit mediacodec_samsung vndbinder_device:chr_file { map };
dontaudit mediacodec_samsung vndbinder_device:chr_file { open };
dontaudit mediacodec_samsung vndbinder_device:chr_file { read };
dontaudit mediacodec_samsung vndbinder_device:chr_file { write };
# b/205904381
dontaudit mediacodec_samsung vndservicemanager:binder { call };
dontaudit mediacodec_samsung vndservicemanager:binder { transfer };

2
tracking_denials/nfc.te Normal file
View file

@ -0,0 +1,2 @@
# b/205904208
dontaudit nfc zygote:binder { transfer };

View file

@ -0,0 +1,2 @@
# b/205904433
dontaudit pixelstats_vendor servicemanager:binder { call };

View file

@ -1,2 +1,4 @@
# b/204718221
dontaudit platform_app touch_service:service_manager { find };
# b/205904327
dontaudit platform_app hal_wlc:binder { call };

View file

@ -4,3 +4,6 @@ dontaudit priv_app hal_exynos_rild_hwservice:hwservice_manager { find };
dontaudit priv_app vendor_default_prop:file { getattr };
dontaudit priv_app vendor_default_prop:file { map };
dontaudit priv_app vendor_default_prop:file { open };
# b/205904553
dontaudit priv_app rild:binder { call };
dontaudit priv_app rild:binder { transfer };

3
tracking_denials/rfsd.te Normal file
View file

@ -0,0 +1,3 @@
# b/205904361
dontaudit rfsd rfsd:capability { chown };
dontaudit rfsd rfsd:capability { setuid };

View file

@ -4,3 +4,8 @@ dontaudit rild vendor_persist_config_default_prop:file { getattr };
dontaudit rild vendor_persist_config_default_prop:file { map };
dontaudit rild vendor_persist_config_default_prop:file { open };
dontaudit rild vendor_persist_config_default_prop:file { read };
# b/205904441
dontaudit rild hal_secure_element_uicc:binder { call };
dontaudit rild priv_app:binder { call };
dontaudit rild vendor_ims_app:binder { call };
dontaudit rild vendor_rcs_app:binder { call };

View file

@ -14,3 +14,6 @@ dontaudit rlsservice apex_info_file:file { getattr };
dontaudit rlsservice apex_info_file:file { open };
dontaudit rlsservice apex_info_file:file { read };
dontaudit rlsservice apex_info_file:file { watch };
# b/205904324
dontaudit rlsservice vndservicemanager:binder { call };
dontaudit rlsservice vndservicemanager:binder { transfer };

View file

@ -0,0 +1,4 @@
# b/205904207
dontaudit servicemanager citadeld:binder { call };
dontaudit servicemanager hal_camera_default:binder { call };
dontaudit servicemanager hal_fingerprint_default:binder { call };

View file

@ -0,0 +1,2 @@
# b/205904404
dontaudit system_server zygote:binder { call };

3
tracking_denials/tee.te Normal file
View file

@ -0,0 +1,3 @@
# b/205904330
dontaudit tee tee:capability { setgid };
dontaudit tee tee:capability { setuid };

View file

@ -1,2 +1,5 @@
# b/205780067
dontaudit vendor_ims_app radio_service:service_manager { find };
# b/205904439
dontaudit vendor_ims_app rild:binder { call };
dontaudit vendor_ims_app rild:binder { transfer };

View file

@ -1,2 +1,5 @@
# b/205779581
dontaudit vendor_rcs_app radio_service:service_manager { find };
# b/205904435
dontaudit vendor_rcs_app rild:binder { call };
dontaudit vendor_rcs_app rild:binder { transfer };

View file

@ -6,3 +6,9 @@ dontaudit zygote default_android_service:service_manager { find };
dontaudit zygote game_service:service_manager { find };
dontaudit zygote nfc_service:service_manager { find };
dontaudit zygote radio_service:service_manager { find };
# b/205904384
dontaudit zygote adbd:unix_stream_socket { connectto };
dontaudit zygote nfc:binder { call };
dontaudit zygote servicemanager:binder { call };
dontaudit zygote system_server:binder { call };
dontaudit zygote system_server:binder { transfer };