Update error on ROM 9423786

Bug: 263304957
Bug: 263305034
Bug: 263305106
Bug: 263305225
Bug: 263305107
Bug: 263305203
Test: scanAvcDeniedLogRightAfterReboot
Change-Id: Iea85cf823b04f73d58ffab84f4b06dce39e80fc9
This commit is contained in:
Adam Shih 2022-12-21 08:15:48 +08:00
parent 293813afed
commit f0d101b3e7
6 changed files with 33 additions and 0 deletions

View file

@ -23,3 +23,5 @@ dontaudit system_server mediacodec_samsung:binder { call };
dontaudit system_server mediacodec_samsung:binder { transfer };
# b/263184920
dontaudit system_server hal_camera_default:binder { transfer };
# b/263305107
dontaudit system_server hal_camera_default:binder { call };

View file

@ -11,3 +11,5 @@ dontaudit system_suspend_server sysfs_aoc:file { open };
dontaudit system_suspend_server sysfs_aoc:file { read };
# b/261105356
dontaudit system_suspend_server chre:binder { transfer };
# b/263305203
dontaudit system_suspend_server tee:binder { transfer };

18
tracking_denials/tee.te Normal file
View file

@ -0,0 +1,18 @@
# b/263304957
dontaudit tee gsi_metadata_file:dir { search };
dontaudit tee hal_system_suspend_service:service_manager { find };
dontaudit tee init:unix_stream_socket { connectto };
dontaudit tee metadata_file:dir { search };
dontaudit tee mnt_vendor_file:dir { search };
dontaudit tee persist_file:dir { search };
dontaudit tee persist_ss_file:dir { search };
dontaudit tee persist_ss_file:file { open };
dontaudit tee persist_ss_file:file { read write };
dontaudit tee property_socket:sock_file { write };
dontaudit tee servicemanager:binder { call };
dontaudit tee sg_device:chr_file { ioctl };
dontaudit tee sg_device:chr_file { open };
dontaudit tee sg_device:chr_file { read write };
dontaudit tee system_suspend_server:binder { call };
dontaudit tee tee_data_file:lnk_file { read };
dontaudit tee vendor_trusty_storage_prop:property_service { set };

View file

@ -0,0 +1,7 @@
# b/263305034
dontaudit trusty_apploader dmabuf_system_heap_device:chr_file { ioctl };
dontaudit trusty_apploader dmabuf_system_heap_device:chr_file { open };
dontaudit trusty_apploader dmabuf_system_heap_device:chr_file { read };
dontaudit trusty_apploader tee_device:chr_file { ioctl };
dontaudit trusty_apploader tee_device:chr_file { open };
dontaudit trusty_apploader tee_device:chr_file { read write };

View file

@ -9,3 +9,5 @@ dontaudit vendor_init bootdevice_sysdev:file { create };
dontaudit vendor_init modem_img_file:filesystem { getattr };
dontaudit vendor_init proc_dirty:file { write };
dontaudit vendor_init proc_sched:file { write };
# b/263305106
dontaudit vendor_init vendor_battery_defender_prop:property_service { set };

2
tracking_denials/vold.te Normal file
View file

@ -0,0 +1,2 @@
# b/263305225
dontaudit vold sysfs_scsi_devices_0000:file { write };