update error on ROM 7961148

Bug: 208721809
Bug: 208721525
Bug: 208721677
Bug: 208721526
Bug: 208721638
Bug: 208721505
Bug: 208721729
Bug: 208721710
Bug: 208721673
Bug: 208721679
Bug: 208721707
Bug: 208721808
Bug: 208721636
Bug: 208721768
Test: pts-tradefed run pts -m PtsSELinuxTest
Change-Id: Ida37756678645dea41d343ede41868ce717fe9da
This commit is contained in:
Adam Shih 2021-12-02 11:19:39 +08:00
parent 390b8cfa91
commit cfbef530da
14 changed files with 115 additions and 0 deletions

View file

@ -0,0 +1,9 @@
# b/208721809
dontaudit dumpstate fuse:dir { search };
dontaudit dumpstate hal_graphics_composer_default:binder { call };
dontaudit dumpstate hal_power_stats_vendor_service:service_manager { find };
dontaudit dumpstate hal_uwb_vendor_default:binder { call };
dontaudit dumpstate modem_img_file:filesystem { getattr };
dontaudit dumpstate vendor_dmabuf_debugfs:file { open };
dontaudit dumpstate vendor_dmabuf_debugfs:file { read };
dontaudit dumpstate vold:binder { call };

View file

@ -2,3 +2,5 @@
dontaudit hal_bluetooth_btlinux device:chr_file { ioctl }; dontaudit hal_bluetooth_btlinux device:chr_file { ioctl };
dontaudit hal_bluetooth_btlinux device:chr_file { open }; dontaudit hal_bluetooth_btlinux device:chr_file { open };
dontaudit hal_bluetooth_btlinux device:chr_file { read write }; dontaudit hal_bluetooth_btlinux device:chr_file { read write };
# b/208721525
dontaudit hal_bluetooth_btlinux device:chr_file { getattr };

View file

@ -0,0 +1,51 @@
# b/208721677
dontaudit hal_dumpstate_default boottime_public_prop:file { open };
dontaudit hal_dumpstate_default boottime_public_prop:file { read };
dontaudit hal_dumpstate_default citadeld_service:service_manager { find };
dontaudit hal_dumpstate_default debugfs:file { open };
dontaudit hal_dumpstate_default debugfs:file { read };
dontaudit hal_dumpstate_default debugfs_f2fs:dir { search };
dontaudit hal_dumpstate_default debugfs_f2fs:file { open };
dontaudit hal_dumpstate_default debugfs_f2fs:file { read };
dontaudit hal_dumpstate_default logbuffer_device:chr_file { getattr };
dontaudit hal_dumpstate_default logbuffer_device:chr_file { open };
dontaudit hal_dumpstate_default logbuffer_device:chr_file { read };
dontaudit hal_dumpstate_default modem_stat_data_file:file { open };
dontaudit hal_dumpstate_default modem_stat_data_file:file { read };
dontaudit hal_dumpstate_default radio_vendor_data_file:dir { getattr };
dontaudit hal_dumpstate_default radio_vendor_data_file:dir { open };
dontaudit hal_dumpstate_default radio_vendor_data_file:dir { read };
dontaudit hal_dumpstate_default radio_vendor_data_file:dir { search };
dontaudit hal_dumpstate_default radio_vendor_data_file:dir { write };
dontaudit hal_dumpstate_default radio_vendor_data_file:file { getattr };
dontaudit hal_dumpstate_default radio_vendor_data_file:file { open };
dontaudit hal_dumpstate_default radio_vendor_data_file:file { read };
dontaudit hal_dumpstate_default radio_vendor_data_file:file { setattr };
dontaudit hal_dumpstate_default sysfs:file { read };
dontaudit hal_dumpstate_default sysfs_acpm_stats:dir { open };
dontaudit hal_dumpstate_default sysfs_acpm_stats:dir { read };
dontaudit hal_dumpstate_default sysfs_acpm_stats:dir { search };
dontaudit hal_dumpstate_default sysfs_acpm_stats:file { open };
dontaudit hal_dumpstate_default sysfs_acpm_stats:file { read };
dontaudit hal_dumpstate_default sysfs_bcl:dir { open };
dontaudit hal_dumpstate_default sysfs_bcl:dir { read };
dontaudit hal_dumpstate_default sysfs_bcl:dir { search };
dontaudit hal_dumpstate_default sysfs_bcl:file { getattr };
dontaudit hal_dumpstate_default sysfs_bcl:file { read };
dontaudit hal_dumpstate_default sysfs_chip_id:file { open };
dontaudit hal_dumpstate_default sysfs_chip_id:file { read };
dontaudit hal_dumpstate_default sysfs_thermal:dir { open };
dontaudit hal_dumpstate_default sysfs_thermal:dir { read };
dontaudit hal_dumpstate_default sysfs_thermal:dir { search };
dontaudit hal_dumpstate_default sysfs_thermal:file { open };
dontaudit hal_dumpstate_default sysfs_thermal:file { read };
dontaudit hal_dumpstate_default sysfs_wifi:dir { search };
dontaudit hal_dumpstate_default sysfs_wifi:file { open };
dontaudit hal_dumpstate_default sysfs_wifi:file { read };
dontaudit hal_dumpstate_default vendor_displaycolor_service:service_manager { find };
dontaudit hal_dumpstate_default vendor_dmabuf_debugfs:file { open };
dontaudit hal_dumpstate_default vendor_dmabuf_debugfs:file { read };
dontaudit hal_dumpstate_default vendor_dumpsys:file { execute_no_trans };
dontaudit hal_dumpstate_default vendor_shell_exec:file { execute_no_trans };
dontaudit hal_dumpstate_default vendor_toolbox_exec:file { execute_no_trans };
dontaudit hal_dumpstate_default vndbinder_device:chr_file { read };

View file

@ -28,3 +28,6 @@ dontaudit hal_graphics_composer_default sysfs:file { open };
dontaudit hal_graphics_composer_default sysfs:file { read }; dontaudit hal_graphics_composer_default sysfs:file { read };
dontaudit hal_graphics_composer_default sysfs:file { write }; dontaudit hal_graphics_composer_default sysfs:file { write };
dontaudit hal_graphics_composer_default sysfs_display:file { write }; dontaudit hal_graphics_composer_default sysfs_display:file { write };
# b/208721526
dontaudit hal_graphics_composer_default dumpstate:fd { use };
dontaudit hal_graphics_composer_default dumpstate:fifo_file { write };

View file

@ -0,0 +1,5 @@
# b/208721638
dontaudit hal_health_default sysfs_thermal:dir { search };
dontaudit hal_health_default sysfs_thermal:file { open };
dontaudit hal_health_default sysfs_thermal:file { write };
dontaudit hal_health_default thermal_link_device:dir { search };

View file

@ -4,3 +4,6 @@ dontaudit hal_uwb_vendor_default default_android_service:service_manager { add }
dontaudit hal_uwb_vendor_default hal_uwb_vendor_default:capability { net_admin }; dontaudit hal_uwb_vendor_default hal_uwb_vendor_default:capability { net_admin };
dontaudit hal_uwb_vendor_default zygote:binder { call }; dontaudit hal_uwb_vendor_default zygote:binder { call };
dontaudit hal_uwb_vendor_default zygote:binder { transfer }; dontaudit hal_uwb_vendor_default zygote:binder { transfer };
# b/208721505
dontaudit hal_uwb_vendor_default dumpstate:fd { use };
dontaudit hal_uwb_vendor_default dumpstate:fifo_file { write };

View file

@ -9,3 +9,9 @@ dontaudit hal_vibrator_default proc_asound:file { read };
dontaudit hal_vibrator_default sysfs:file { getattr }; dontaudit hal_vibrator_default sysfs:file { getattr };
dontaudit hal_vibrator_default sysfs:file { open }; dontaudit hal_vibrator_default sysfs:file { open };
dontaudit hal_vibrator_default sysfs:file { read write }; dontaudit hal_vibrator_default sysfs:file { read write };
# b/208721729
#dontaudit hal_vibrator_default fastbootd_protocol_prop:file { getattr };
#dontaudit hal_vibrator_default fastbootd_protocol_prop:file { map };
#dontaudit hal_vibrator_default fastbootd_protocol_prop:file { open };
dontaudit hal_vibrator_default ffs_config_prop:file { getattr };
dontaudit hal_vibrator_default ffs_config_prop:file { open };

View file

@ -0,0 +1,4 @@
# b/208721710
dontaudit hardware_info_app sysfs:file { getattr };
dontaudit hardware_info_app sysfs:file { open };
dontaudit hardware_info_app sysfs:file { read };

View file

@ -0,0 +1,7 @@
# b/208721673
dontaudit incidentd aac_drc_prop:file { getattr };
dontaudit incidentd aac_drc_prop:file { map };
dontaudit incidentd aac_drc_prop:file { open };
dontaudit incidentd ab_update_gki_prop:file { getattr };
dontaudit incidentd ab_update_gki_prop:file { map };
dontaudit incidentd ab_update_gki_prop:file { open };

View file

@ -32,3 +32,12 @@ dontaudit logger_app sysfs_vendor_sched:dir { search };
dontaudit logger_app vendor_gps_file:dir { remove_name }; dontaudit logger_app vendor_gps_file:dir { remove_name };
dontaudit logger_app vendor_gps_file:dir { write }; dontaudit logger_app vendor_gps_file:dir { write };
dontaudit logger_app vendor_gps_file:file { unlink }; dontaudit logger_app vendor_gps_file:file { unlink };
# b/208721679
dontaudit logger_app vendor_default_prop:file { getattr };
dontaudit logger_app vendor_default_prop:file { map };
dontaudit logger_app vendor_default_prop:file { open };
dontaudit logger_app vendor_modem_prop:file { getattr };
dontaudit logger_app vendor_modem_prop:file { map };
dontaudit logger_app vendor_modem_prop:file { open };
dontaudit logger_app vendor_modem_prop:file { read };
dontaudit logger_app vendor_modem_prop:property_service { set };

View file

@ -0,0 +1,2 @@
# b/208721707
#dontaudit permissioncontroller_app sysfs_vendor_sched:dir { search };

View file

@ -4,3 +4,5 @@ dontaudit surfaceflinger kernel:process { setsched };
dontaudit surfaceflinger vendor_fw_file:dir { search }; dontaudit surfaceflinger vendor_fw_file:dir { search };
dontaudit surfaceflinger vendor_fw_file:file { open }; dontaudit surfaceflinger vendor_fw_file:file { open };
dontaudit surfaceflinger vendor_fw_file:file { read }; dontaudit surfaceflinger vendor_fw_file:file { read };
# b/208721808
dontaudit surfaceflinger hal_graphics_composer_default:dir { search };

View file

@ -0,0 +1,9 @@
# b/208721636
dontaudit system_app sysfs_vendor_sched:dir { search };
dontaudit system_app vendor_default_prop:file { getattr };
dontaudit system_app vendor_default_prop:file { map };
dontaudit system_app vendor_default_prop:file { open };
dontaudit system_app vendor_slog_file:dir { search };
dontaudit system_app vendor_slog_prop:file { getattr };
dontaudit system_app vendor_slog_prop:file { map };
dontaudit system_app vendor_slog_prop:file { open };

3
tracking_denials/vold.te Normal file
View file

@ -0,0 +1,3 @@
# b/208721768
dontaudit vold dumpstate:fd { use };
dontaudit vold dumpstate:fifo_file { write };