diff --git a/tracking_denials/hal_dumpstate_default.te b/tracking_denials/hal_dumpstate_default.te deleted file mode 100644 index 72668cfe..00000000 --- a/tracking_denials/hal_dumpstate_default.te +++ /dev/null @@ -1,11 +0,0 @@ -# b/208721677 -# b/208909124 -dontaudit hal_dumpstate_default boottime_public_prop:file { open }; -dontaudit hal_dumpstate_default boottime_public_prop:file { read }; -dontaudit hal_dumpstate_default property_type:file *; -dontaudit hal_dumpstate_default shell_data_file:file { getattr }; -dontaudit hal_dumpstate_default vendor_dumpsys:file { execute_no_trans }; -dontaudit hal_dumpstate_default vendor_log_file:dir search; -dontaudit hal_dumpstate_default vendor_shell_exec:file { execute_no_trans }; -dontaudit hal_dumpstate_default vendor_toolbox_exec:file { execute_no_trans }; - diff --git a/whitechapel_pro/hal_dumpstate_default.te b/whitechapel_pro/hal_dumpstate_default.te index bce77139..cad7c3a1 100644 --- a/whitechapel_pro/hal_dumpstate_default.te +++ b/whitechapel_pro/hal_dumpstate_default.te @@ -68,6 +68,21 @@ allow hal_dumpstate_default vendor_displaycolor_service:service_manager find; binder_call(hal_dumpstate_default, hal_graphics_composer_default); vndbinder_use(hal_dumpstate_default) +allow hal_dumpstate_default shell_data_file:file getattr; + +allow hal_dumpstate_default vendor_log_file:dir search; +allow hal_dumpstate_default vendor_dumpsys:file execute_no_trans; + +allow hal_dumpstate_default vendor_toolbox_exec:file execute_no_trans; +allow hal_dumpstate_default vendor_shell_exec:file execute_no_trans; + +get_prop(hal_dumpstate_default, boottime_public_prop) +get_prop(hal_dumpstate_default, vendor_camera_prop) +get_prop(hal_dumpstate_default, vendor_gps_prop) +set_prop(hal_dumpstate_default, vendor_modem_prop) +get_prop(hal_dumpstate_default, vendor_rild_prop) +get_prop(hal_dumpstate_default, vendor_tcpdump_log_prop) + userdebug_or_eng(` allow hal_dumpstate_default mnt_vendor_file:dir search; allow hal_dumpstate_default ramdump_vendor_mnt_file:dir search;