diff --git a/tracking_denials/google_camera_app.te b/tracking_denials/google_camera_app.te index de0ab028..d944037b 100644 --- a/tracking_denials/google_camera_app.te +++ b/tracking_denials/google_camera_app.te @@ -19,3 +19,7 @@ userdebug_or_eng(` permissive google_camera_app; ')# b/264483456 dontaudit google_camera_app backup_service:service_manager { find }; +# b/264600171 +dontaudit google_camera_app audio_service:service_manager { find }; +dontaudit google_camera_app legacy_permission_service:service_manager { find }; +dontaudit google_camera_app permission_checker_service:service_manager { find }; diff --git a/tracking_denials/hal_dumpstate_default.te b/tracking_denials/hal_dumpstate_default.te index 074f1ebf..551517ad 100644 --- a/tracking_denials/hal_dumpstate_default.te +++ b/tracking_denials/hal_dumpstate_default.te @@ -20,4 +20,5 @@ dontaudit hal_dumpstate_default vndservicemanager:binder { call }; # b/264489795 userdebug_or_eng(` permissive hal_dumpstate_default; -') \ No newline at end of file +')# b/264972626 +dontaudit hal_dumpstate_default vendor_displaycolor_service:service_manager { find }; diff --git a/tracking_denials/untrusted_app.te b/tracking_denials/untrusted_app.te index 90270786..bbbc5090 100644 --- a/tracking_denials/untrusted_app.te +++ b/tracking_denials/untrusted_app.te @@ -1,4 +1,5 @@ # b/264489642 userdebug_or_eng(` permissive untrusted_app; -') \ No newline at end of file +')# b/264972745 +dontaudit untrusted_app default_android_service:service_manager { find }; diff --git a/tracking_denials/vold.te b/tracking_denials/vold.te index 3051d813..a61a2be5 100644 --- a/tracking_denials/vold.te +++ b/tracking_denials/vold.te @@ -6,3 +6,5 @@ dontaudit vold modem_userdata_file:dir { ioctl }; dontaudit vold modem_userdata_file:dir { open }; dontaudit vold modem_userdata_file:dir { read }; dontaudit vold sysfs_scsi_devices_0000:file { write }; +# b/264972759 +dontaudit vold dumpstate:fd { use };