diff --git a/tracking_denials/hal_dumpstate_default.te b/tracking_denials/hal_dumpstate_default.te index cfc11268..2b9e0faa 100644 --- a/tracking_denials/hal_dumpstate_default.te +++ b/tracking_denials/hal_dumpstate_default.te @@ -2,9 +2,6 @@ # b/208909124 dontaudit hal_dumpstate_default boottime_public_prop:file { open }; dontaudit hal_dumpstate_default boottime_public_prop:file { read }; -dontaudit hal_dumpstate_default citadeld:binder call; -dontaudit hal_dumpstate_default citadeld_service:service_manager { find }; -dontaudit hal_dumpstate_default citadel_updater:file execute_no_trans; dontaudit hal_dumpstate_default debugfs:dir { open read }; dontaudit hal_dumpstate_default debugfs_f2fs:dir { search }; dontaudit hal_dumpstate_default debugfs_f2fs:file { open }; diff --git a/whitechapel_pro/hal_dumpstate_default.te b/whitechapel_pro/hal_dumpstate_default.te index 8d747b6b..7416f8a2 100644 --- a/whitechapel_pro/hal_dumpstate_default.te +++ b/whitechapel_pro/hal_dumpstate_default.te @@ -1,3 +1,7 @@ +allow hal_dumpstate_default citadeld_service:service_manager find; +allow hal_dumpstate_default citadel_updater:file execute_no_trans; +binder_call(hal_dumpstate_default, citadeld); + allow hal_dumpstate_default device:dir r_dir_perms; allow hal_dumpstate_default aoc_device:chr_file rw_file_perms;