diff --git a/tracking_denials/hal_dumpstate_default.te b/tracking_denials/hal_dumpstate_default.te deleted file mode 100644 index 551517ad..00000000 --- a/tracking_denials/hal_dumpstate_default.te +++ /dev/null @@ -1,24 +0,0 @@ -# b/259302023 -dontaudit hal_dumpstate_default file_type:file *; -dontaudit hal_dumpstate_default fs_type:file *; -dontaudit hal_dumpstate_default file_type:dir *; -dontaudit hal_dumpstate_default fs_type:dir *; -dontaudit hal_dumpstate_default property_type:file *; -# b/261933251 -dontaudit hal_dumpstate_default hal_dumpstate_default:lockdown { integrity }; -dontaudit hal_dumpstate_default logbuffer_device:chr_file { getattr }; -dontaudit hal_dumpstate_default logbuffer_device:chr_file { open }; -dontaudit hal_dumpstate_default logbuffer_device:chr_file { read }; -dontaudit hal_dumpstate_default vndbinder_device:chr_file { ioctl }; -dontaudit hal_dumpstate_default vndbinder_device:chr_file { map }; -dontaudit hal_dumpstate_default vndbinder_device:chr_file { open }; -dontaudit hal_dumpstate_default vndbinder_device:chr_file { read }; -dontaudit hal_dumpstate_default vndbinder_device:chr_file { write }; -# b/262178702 -dontaudit hal_dumpstate_default hal_graphics_composer_default:binder { call }; -dontaudit hal_dumpstate_default vndservicemanager:binder { call }; -# b/264489795 -userdebug_or_eng(` - permissive hal_dumpstate_default; -')# b/264972626 -dontaudit hal_dumpstate_default vendor_displaycolor_service:service_manager { find }; diff --git a/vendor/hal_dumpstate_default.te b/vendor/hal_dumpstate_default.te new file mode 100644 index 00000000..3e4db459 --- /dev/null +++ b/vendor/hal_dumpstate_default.te @@ -0,0 +1,5 @@ +allow hal_dumpstate_default vendor_toolbox_exec:file execute_no_trans; +allow hal_dumpstate_default radio_vendor_data_file:dir create_dir_perms; +allow hal_dumpstate_default radio_vendor_data_file:file create_file_perms; +allow hal_dumpstate_default shell_data_file:file getattr; +