update error on ROM 9336524
Bug: 260522279 Bug: 260522435 Bug: 260522413 Bug: 260522434 Bug: 260522436 Bug: 260522378 Bug: 260522202 Bug: 260522245 Bug: 260522268 Bug: 260522282 Bug: 260522040 Bug: 260522041 Bug: 260522244 Bug: 260522203 Test: pts-tradefed run pts -m PtsSELinuxTest Change-Id: Ib61f9c376c1351e1619621c79506396f6c291eed
This commit is contained in:
parent
8282a5abd2
commit
ec17f1a125
14 changed files with 97 additions and 0 deletions
2
tracking_denials/bootanim.te
Normal file
2
tracking_denials/bootanim.te
Normal file
|
@ -0,0 +1,2 @@
|
||||||
|
# b/260522279
|
||||||
|
dontaudit bootanim system_data_file:dir { search };
|
7
tracking_denials/chre.te
Normal file
7
tracking_denials/chre.te
Normal file
|
@ -0,0 +1,7 @@
|
||||||
|
# b/260522435
|
||||||
|
dontaudit chre aoc_device:chr_file { getattr };
|
||||||
|
dontaudit chre aoc_device:chr_file { open };
|
||||||
|
dontaudit chre aoc_device:chr_file { read write };
|
||||||
|
dontaudit chre chre:capability2 { block_suspend };
|
||||||
|
dontaudit chre device:dir { read };
|
||||||
|
dontaudit chre device:dir { watch };
|
37
tracking_denials/euiccpixel_app.te
Normal file
37
tracking_denials/euiccpixel_app.te
Normal file
|
@ -0,0 +1,37 @@
|
||||||
|
# b/260522413
|
||||||
|
dontaudit euiccpixel_app activity_service:service_manager { find };
|
||||||
|
dontaudit euiccpixel_app data_file_type:dir *;
|
||||||
|
dontaudit euiccpixel_app data_file_type:file *;
|
||||||
|
dontaudit euiccpixel_app content_capture_service:service_manager { find };
|
||||||
|
dontaudit euiccpixel_app dalvikcache_data_file:dir { getattr };
|
||||||
|
dontaudit euiccpixel_app dalvikcache_data_file:dir { search };
|
||||||
|
dontaudit euiccpixel_app game_service:service_manager { find };
|
||||||
|
dontaudit euiccpixel_app graphics_config_prop:file { getattr };
|
||||||
|
dontaudit euiccpixel_app graphics_config_prop:file { map };
|
||||||
|
dontaudit euiccpixel_app graphics_config_prop:file { open };
|
||||||
|
dontaudit euiccpixel_app graphics_config_prop:file { read };
|
||||||
|
dontaudit euiccpixel_app mnt_expand_file:dir { getattr };
|
||||||
|
dontaudit euiccpixel_app netstats_service:service_manager { find };
|
||||||
|
dontaudit euiccpixel_app resourcecache_data_file:dir { search };
|
||||||
|
dontaudit euiccpixel_app resourcecache_data_file:file { getattr };
|
||||||
|
dontaudit euiccpixel_app resourcecache_data_file:file { map };
|
||||||
|
dontaudit euiccpixel_app resourcecache_data_file:file { open };
|
||||||
|
dontaudit euiccpixel_app resourcecache_data_file:file { read };
|
||||||
|
dontaudit euiccpixel_app servicemanager:binder { call };
|
||||||
|
dontaudit euiccpixel_app statsd:unix_dgram_socket { sendto };
|
||||||
|
dontaudit euiccpixel_app statsdw_socket:sock_file { write };
|
||||||
|
dontaudit euiccpixel_app system_file:file { execute };
|
||||||
|
dontaudit euiccpixel_app system_file:file { getattr };
|
||||||
|
dontaudit euiccpixel_app system_file:file { map };
|
||||||
|
dontaudit euiccpixel_app system_file:file { open };
|
||||||
|
dontaudit euiccpixel_app system_file:file { read };
|
||||||
|
dontaudit euiccpixel_app system_server:binder { call };
|
||||||
|
dontaudit euiccpixel_app system_server:binder { transfer };
|
||||||
|
dontaudit euiccpixel_app system_server:fd { use };
|
||||||
|
dontaudit euiccpixel_app system_userdir_file:dir { search };
|
||||||
|
dontaudit euiccpixel_app tmpfs:file { execute };
|
||||||
|
dontaudit euiccpixel_app tmpfs:file { map };
|
||||||
|
dontaudit euiccpixel_app tmpfs:file { read };
|
||||||
|
dontaudit euiccpixel_app tmpfs:file { write };
|
||||||
|
dontaudit euiccpixel_app user_profile_data_file:dir { search };
|
||||||
|
dontaudit euiccpixel_app user_profile_data_file:file { getattr };
|
|
@ -2,3 +2,5 @@
|
||||||
dontaudit gmscore_app property_type:file *;
|
dontaudit gmscore_app property_type:file *;
|
||||||
# b/260365725
|
# b/260365725
|
||||||
dontaudit gmscore_app property_type:file *;
|
dontaudit gmscore_app property_type:file *;
|
||||||
|
# b/260522434
|
||||||
|
dontaudit gmscore_app modem_img_file:filesystem { getattr };
|
||||||
|
|
3
tracking_denials/hal_bootctl_default.te
Normal file
3
tracking_denials/hal_bootctl_default.te
Normal file
|
@ -0,0 +1,3 @@
|
||||||
|
# b/260522436
|
||||||
|
dontaudit hal_bootctl_default devinfo_block_device:blk_file { open };
|
||||||
|
dontaudit hal_bootctl_default devinfo_block_device:blk_file { read };
|
|
@ -1,3 +1,5 @@
|
||||||
# b/260366066
|
# b/260366066
|
||||||
dontaudit insmod-sh insmod-sh:capability { sys_nice };
|
dontaudit insmod-sh insmod-sh:capability { sys_nice };
|
||||||
dontaudit insmod-sh kernel:process { setsched };
|
dontaudit insmod-sh kernel:process { setsched };
|
||||||
|
# b/260522378
|
||||||
|
dontaudit insmod-sh vendor_regmap_debugfs:dir { search };
|
||||||
|
|
2
tracking_denials/installd.te
Normal file
2
tracking_denials/installd.te
Normal file
|
@ -0,0 +1,2 @@
|
||||||
|
# b/260522202
|
||||||
|
dontaudit installd modem_img_file:filesystem { quotaget };
|
8
tracking_denials/kernel.te
Normal file
8
tracking_denials/kernel.te
Normal file
|
@ -0,0 +1,8 @@
|
||||||
|
# b/260522245
|
||||||
|
dontaudit kernel per_boot_file:file { read };
|
||||||
|
dontaudit kernel same_process_hal_file:file { open };
|
||||||
|
dontaudit kernel same_process_hal_file:file { read };
|
||||||
|
dontaudit kernel vendor_fw_file:dir { search };
|
||||||
|
dontaudit kernel vendor_fw_file:file { open };
|
||||||
|
dontaudit kernel vendor_fw_file:file { read };
|
||||||
|
dontaudit kernel vendor_regmap_debugfs:dir { search };
|
|
@ -4,3 +4,12 @@ dontaudit logger_app vendor_ssrdump_prop:file { getattr };
|
||||||
dontaudit logger_app vendor_ssrdump_prop:file { map };
|
dontaudit logger_app vendor_ssrdump_prop:file { map };
|
||||||
dontaudit logger_app vendor_ssrdump_prop:file { open };
|
dontaudit logger_app vendor_ssrdump_prop:file { open };
|
||||||
dontaudit logger_app vendor_ssrdump_prop:file { read };
|
dontaudit logger_app vendor_ssrdump_prop:file { read };
|
||||||
|
# b/260522268
|
||||||
|
dontaudit logger_app radio_vendor_data_file:dir { getattr };
|
||||||
|
dontaudit logger_app radio_vendor_data_file:dir { open };
|
||||||
|
dontaudit logger_app radio_vendor_data_file:dir { read };
|
||||||
|
dontaudit logger_app radio_vendor_data_file:dir { setattr };
|
||||||
|
dontaudit logger_app vendor_modem_prop:file { getattr };
|
||||||
|
dontaudit logger_app vendor_modem_prop:file { map };
|
||||||
|
dontaudit logger_app vendor_modem_prop:file { open };
|
||||||
|
dontaudit logger_app vendor_modem_prop:file { read };
|
||||||
|
|
|
@ -4,3 +4,6 @@ dontaudit priv_app privapp_data_file:dir { search };
|
||||||
dontaudit priv_app vendor_default_prop:file { getattr };
|
dontaudit priv_app vendor_default_prop:file { getattr };
|
||||||
dontaudit priv_app vendor_default_prop:file { map };
|
dontaudit priv_app vendor_default_prop:file { map };
|
||||||
dontaudit priv_app vendor_default_prop:file { open };
|
dontaudit priv_app vendor_default_prop:file { open };
|
||||||
|
# b/260522282
|
||||||
|
dontaudit priv_app privapp_data_file:file { open };
|
||||||
|
dontaudit priv_app privapp_data_file:file { setattr };
|
||||||
|
|
|
@ -2,3 +2,7 @@
|
||||||
dontaudit system_server sysfs:file { getattr };
|
dontaudit system_server sysfs:file { getattr };
|
||||||
dontaudit system_server sysfs:file { open };
|
dontaudit system_server sysfs:file { open };
|
||||||
dontaudit system_server sysfs:file { read };
|
dontaudit system_server sysfs:file { read };
|
||||||
|
# b/260522040
|
||||||
|
dontaudit system_server euiccpixel_app:binder { call };
|
||||||
|
dontaudit system_server euiccpixel_app:binder { transfer };
|
||||||
|
dontaudit system_server euiccpixel_app:process { setsched };
|
||||||
|
|
14
tracking_denials/toolbox.te
Normal file
14
tracking_denials/toolbox.te
Normal file
|
@ -0,0 +1,14 @@
|
||||||
|
# b/260522041
|
||||||
|
dontaudit toolbox per_boot_file:dir { getattr };
|
||||||
|
dontaudit toolbox per_boot_file:dir { open };
|
||||||
|
dontaudit toolbox per_boot_file:dir { read };
|
||||||
|
dontaudit toolbox per_boot_file:dir { remove_name };
|
||||||
|
dontaudit toolbox per_boot_file:dir { rmdir };
|
||||||
|
dontaudit toolbox per_boot_file:dir { search };
|
||||||
|
dontaudit toolbox per_boot_file:dir { write };
|
||||||
|
dontaudit toolbox per_boot_file:file { getattr };
|
||||||
|
dontaudit toolbox per_boot_file:file { unlink };
|
||||||
|
dontaudit toolbox ram_device:blk_file { getattr };
|
||||||
|
dontaudit toolbox ram_device:blk_file { ioctl };
|
||||||
|
dontaudit toolbox ram_device:blk_file { open };
|
||||||
|
dontaudit toolbox ram_device:blk_file { read write };
|
|
@ -2,3 +2,5 @@
|
||||||
dontaudit vendor_init debugfs_trace_marker:file { getattr };
|
dontaudit vendor_init debugfs_trace_marker:file { getattr };
|
||||||
dontaudit vendor_init vendor_init:capability2 { block_suspend };
|
dontaudit vendor_init vendor_init:capability2 { block_suspend };
|
||||||
dontaudit vendor_init vendor_init:lockdown { integrity };
|
dontaudit vendor_init vendor_init:lockdown { integrity };
|
||||||
|
# b/260522244
|
||||||
|
dontaudit vendor_init sg_device:chr_file { getattr };
|
||||||
|
|
2
tracking_denials/zygote.te
Normal file
2
tracking_denials/zygote.te
Normal file
|
@ -0,0 +1,2 @@
|
||||||
|
# b/260522203
|
||||||
|
dontaudit zygote euiccpixel_app:process { dyntransition };
|
Loading…
Add table
Add a link
Reference in a new issue