diff --git a/tracking_denials/hal_camera_default.te b/tracking_denials/hal_camera_default.te new file mode 100644 index 00000000..a6d3eecc --- /dev/null +++ b/tracking_denials/hal_camera_default.te @@ -0,0 +1,2 @@ +# b/264204392 +dontaudit hal_camera_default hal_radioext_default:binder { call }; diff --git a/tracking_denials/hal_thermal_default.te b/tracking_denials/hal_thermal_default.te index 72ff75d8..18b51a3a 100644 --- a/tracking_denials/hal_thermal_default.te +++ b/tracking_denials/hal_thermal_default.te @@ -6,3 +6,7 @@ dontaudit hal_thermal_default sysfs:file { read }; dontaudit hal_thermal_default sysfs_iio_devices:dir { open }; dontaudit hal_thermal_default sysfs_iio_devices:dir { read }; dontaudit hal_thermal_default sysfs_iio_devices:dir { search }; +# b/264204525 +dontaudit hal_thermal_default sysfs_odpm:file { getattr }; +dontaudit hal_thermal_default sysfs_odpm:file { open }; +dontaudit hal_thermal_default sysfs_odpm:file { read }; diff --git a/tracking_denials/hal_usb_impl.te b/tracking_denials/hal_usb_impl.te index 558d48f7..f1bfa28b 100644 --- a/tracking_denials/hal_usb_impl.te +++ b/tracking_denials/hal_usb_impl.te @@ -26,3 +26,8 @@ dontaudit hal_usb_impl system_server:binder { call }; # b/263048760 dontaudit hal_usb_impl dumpstate:fd { use }; dontaudit hal_usb_impl dumpstate:fifo_file { write }; +# b/264204023 +dontaudit hal_usb_impl sysfs_batteryinfo:dir { search }; +dontaudit hal_usb_impl sysfs_batteryinfo:file { getattr }; +dontaudit hal_usb_impl sysfs_batteryinfo:file { open }; +dontaudit hal_usb_impl sysfs_batteryinfo:file { read }; diff --git a/tracking_denials/system_suspend.te b/tracking_denials/system_suspend.te index c9a3f336..2f92afdc 100644 --- a/tracking_denials/system_suspend.te +++ b/tracking_denials/system_suspend.te @@ -13,3 +13,9 @@ dontaudit system_suspend_server sysfs_aoc:file { read }; dontaudit system_suspend_server chre:binder { transfer }; # b/263305203 dontaudit system_suspend_server tee:binder { transfer }; +# b/264204215 +dontaudit system_suspend_server sysfs_batteryinfo:dir { open }; +dontaudit system_suspend_server sysfs_batteryinfo:dir { read }; +dontaudit system_suspend_server sysfs_batteryinfo:file { getattr }; +dontaudit system_suspend_server sysfs_batteryinfo:file { open }; +dontaudit system_suspend_server sysfs_batteryinfo:file { read };