diff --git a/tracking_denials/con_monitor_app.te b/tracking_denials/con_monitor_app.te index e37a9775..f0e7a439 100644 --- a/tracking_denials/con_monitor_app.te +++ b/tracking_denials/con_monitor_app.te @@ -6,3 +6,12 @@ dontaudit con_monitor_app netstats_service:service_manager { find }; dontaudit con_monitor_app system_server:binder { call }; dontaudit con_monitor_app system_server:binder { transfer }; dontaudit con_monitor_app system_server:fd { use }; +# b/261783158 +dontaudit con_monitor_app system_file:file { getattr }; +dontaudit con_monitor_app system_file:file { map }; +dontaudit con_monitor_app system_file:file { open }; +dontaudit con_monitor_app system_file:file { read }; +dontaudit con_monitor_app tmpfs:file { execute }; +dontaudit con_monitor_app tmpfs:file { map }; +dontaudit con_monitor_app tmpfs:file { read }; +dontaudit con_monitor_app tmpfs:file { write }; diff --git a/tracking_denials/hal_power_stats_default.te b/tracking_denials/hal_power_stats_default.te index 4c1f2eb6..7eab6375 100644 --- a/tracking_denials/hal_power_stats_default.te +++ b/tracking_denials/hal_power_stats_default.te @@ -43,3 +43,14 @@ dontaudit hal_power_stats_default device:chr_file { open }; dontaudit hal_power_stats_default device:chr_file { read }; dontaudit hal_power_stats_default sysfs_acpm_stats:file { getattr }; dontaudit hal_power_stats_default sysfs_acpm_stats:file { open }; +# b/261783107 +dontaudit hal_power_stats_default device:chr_file { ioctl }; +dontaudit hal_power_stats_default hal_bluetooth_btlinux:binder { call }; +dontaudit hal_power_stats_default sysfs_scsi_devices_0000:dir { search }; +dontaudit hal_power_stats_default sysfs_scsi_devices_0000:file { getattr }; +dontaudit hal_power_stats_default sysfs_scsi_devices_0000:file { open }; +dontaudit hal_power_stats_default sysfs_scsi_devices_0000:file { read }; +dontaudit hal_power_stats_default sysfs_wifi:dir { search }; +dontaudit hal_power_stats_default sysfs_wifi:file { getattr }; +dontaudit hal_power_stats_default sysfs_wifi:file { open }; +dontaudit hal_power_stats_default sysfs_wifi:file { read }; diff --git a/tracking_denials/logger_app.te b/tracking_denials/logger_app.te index 03e0e69c..05167629 100644 --- a/tracking_denials/logger_app.te +++ b/tracking_denials/logger_app.te @@ -30,3 +30,5 @@ dontaudit logger_app vendor_gps_file:dir { read }; dontaudit logger_app vendor_gps_file:dir { search }; dontaudit logger_app vendor_gps_prop:property_service { set }; dontaudit logger_app vendor_logger_prop:property_service { set }; +# b/261783031 +dontaudit logger_app vendor_gps_file:dir { open }; diff --git a/tracking_denials/zygote.te b/tracking_denials/zygote.te index d9733764..e3d11012 100644 --- a/tracking_denials/zygote.te +++ b/tracking_denials/zygote.te @@ -12,3 +12,5 @@ dontaudit zygote vendor_file:file { getattr }; dontaudit zygote vendor_file:file { map }; dontaudit zygote vendor_file:file { open }; dontaudit zygote vendor_file:file { read }; +# b/261782930 +dontaudit zygote con_monitor_app:process { dyntransition };