device_google_zuma/tracking_denials/system_server.te
Ernie Hsu f7adc840df Fix sepolicy for mediacodec_google and mediacodec_samsung
mediacodec_google and mediacodec_samsung could be audited

Test: atest-dev com.google.android.selinux.pts.SELinuxTest#scanAvcDeniedLogRightAfterReboot
      No fail associated with mediacodec_google and mediacodec_samsung
Bug: 262794938
Bug: 262794428
Bug: 262793919
Change-Id: I0ebac8c5c25ae89ecc8907f0f141f5ec1d8aaa0b
2023-02-07 05:48:58 +00:00

27 lines
1.1 KiB
Text

# b/260366030
dontaudit system_server sysfs:file { getattr };
dontaudit system_server sysfs:file { open };
dontaudit system_server sysfs:file { read };
# b/260522040
dontaudit system_server euiccpixel_app:binder { call };
dontaudit system_server euiccpixel_app:binder { transfer };
dontaudit system_server euiccpixel_app:process { setsched };
# b/261519050
dontaudit system_server con_monitor_app:binder { call };
dontaudit system_server con_monitor_app:binder { transfer };
# b/261651009
dontaudit system_server hal_usb_gadget_impl:binder { call };
dontaudit system_server hal_usb_gadget_impl:binder { transfer };
dontaudit system_server hal_usb_impl:binder { call };
dontaudit system_server hal_usb_impl:binder { transfer };
# b/262455682
dontaudit system_server con_monitor_app:process { setsched };
# b/263184920
dontaudit system_server hal_camera_default:binder { transfer };
# b/263305107
dontaudit system_server hal_camera_default:binder { call };
# b/264489786
userdebug_or_eng(`
permissive system_server;
')# b/264483754
dontaudit system_server default_android_service:service_manager { find };