diff --git a/private/systemui_app.te b/private/systemui_app.te new file mode 100644 index 0000000..cfd0862 --- /dev/null +++ b/private/systemui_app.te @@ -0,0 +1,3 @@ +# b/308381668 +dontaudit systemui_app statsmanager_service:service_manager { find }; + diff --git a/tracking_denials/con_monitor_app.te b/tracking_denials/con_monitor_app.te index 9075c28..ffd9bec 100644 --- a/tracking_denials/con_monitor_app.te +++ b/tracking_denials/con_monitor_app.te @@ -1,4 +1,8 @@ # b/307468771 userdebug_or_eng(` permissive con_monitor_app; -') \ No newline at end of file +')# b/308381432 +dontaudit con_monitor_app activity_service:service_manager { find }; +dontaudit con_monitor_app content_capture_service:service_manager { find }; +dontaudit con_monitor_app game_service:service_manager { find }; +dontaudit con_monitor_app netstats_service:service_manager { find }; diff --git a/tracking_denials/dmd.te b/tracking_denials/dmd.te new file mode 100644 index 0000000..ac62949 --- /dev/null +++ b/tracking_denials/dmd.te @@ -0,0 +1,2 @@ +# b/308381409 +dontaudit dmd servicemanager:binder { call }; diff --git a/tracking_denials/hal_graphics_composer_default.te b/tracking_denials/hal_graphics_composer_default.te new file mode 100644 index 0000000..6754f57 --- /dev/null +++ b/tracking_denials/hal_graphics_composer_default.te @@ -0,0 +1,2 @@ +# b/308381451 +dontaudit hal_graphics_composer_default sysfs:file { read }; diff --git a/tracking_denials/hal_health_default.te b/tracking_denials/hal_health_default.te index aef0929..3da4968 100644 --- a/tracking_denials/hal_health_default.te +++ b/tracking_denials/hal_health_default.te @@ -1,4 +1,7 @@ # b/307468788 userdebug_or_eng(` permissive hal_health_default; -') \ No newline at end of file +')# b/308380763 +dontaudit hal_health_default sysfs:file { getattr }; +dontaudit hal_health_default sysfs:file { open }; +dontaudit hal_health_default sysfs:file { read }; diff --git a/tracking_denials/hal_sensors_default.te b/tracking_denials/hal_sensors_default.te new file mode 100644 index 0000000..db925a3 --- /dev/null +++ b/tracking_denials/hal_sensors_default.te @@ -0,0 +1,2 @@ +# b/308381687 +dontaudit hal_sensors_default sysfs_leds:file { write }; diff --git a/tracking_denials/kernel.te b/tracking_denials/kernel.te index 8160c1f..3dda63e 100644 --- a/tracking_denials/kernel.te +++ b/tracking_denials/kernel.te @@ -1,4 +1,5 @@ # b/307468756 userdebug_or_eng(` permissive kernel; -') \ No newline at end of file +')# b/308381222 +dontaudit kernel kernel:capability { net_bind_service }; diff --git a/tracking_denials/modem_ml_svc_sit.te b/tracking_denials/modem_ml_svc_sit.te new file mode 100644 index 0000000..f517366 --- /dev/null +++ b/tracking_denials/modem_ml_svc_sit.te @@ -0,0 +1,2 @@ +# b/308381747 +dontaudit modem_ml_svc_sit statsdw_socket:sock_file { write }; diff --git a/tracking_denials/rebalance_interrupts_vendor.te b/tracking_denials/rebalance_interrupts_vendor.te new file mode 100644 index 0000000..fa7f82b --- /dev/null +++ b/tracking_denials/rebalance_interrupts_vendor.te @@ -0,0 +1,2 @@ +# b/308381263 +dontaudit rebalance_interrupts_vendor rebalance_interrupts_vendor:capability { dac_override }; diff --git a/tracking_denials/shell.te b/tracking_denials/shell.te new file mode 100644 index 0000000..729e8b0 --- /dev/null +++ b/tracking_denials/shell.te @@ -0,0 +1,2 @@ +# b/308381279 +dontaudit shell sysfs:file { getattr }; diff --git a/tracking_denials/system_server.te b/tracking_denials/system_server.te index dd6e930..837b5f8 100644 --- a/tracking_denials/system_server.te +++ b/tracking_denials/system_server.te @@ -1,4 +1,5 @@ # b/307468690 userdebug_or_eng(` permissive system_server; -') \ No newline at end of file +')# b/308381611 +dontaudit system_server vendor_public_lib_file:dir { search }; diff --git a/tracking_denials/system_suspend.te b/tracking_denials/system_suspend.te new file mode 100644 index 0000000..006eb47 --- /dev/null +++ b/tracking_denials/system_suspend.te @@ -0,0 +1,16 @@ +# b/308381292 +dontaudit system_suspend_server sysfs:dir { open }; +dontaudit system_suspend_server sysfs:dir { read }; +dontaudit system_suspend_server sysfs:file { getattr }; +dontaudit system_suspend_server sysfs:file { open }; +dontaudit system_suspend_server sysfs:file { read }; +dontaudit system_suspend_server sysfs_batteryinfo:dir { open }; +dontaudit system_suspend_server sysfs_batteryinfo:dir { read }; +dontaudit system_suspend_server sysfs_batteryinfo:file { getattr }; +dontaudit system_suspend_server sysfs_batteryinfo:file { open }; +dontaudit system_suspend_server sysfs_batteryinfo:file { read }; +dontaudit system_suspend_server sysfs_wlc:dir { open }; +dontaudit system_suspend_server sysfs_wlc:dir { read }; +dontaudit system_suspend_server sysfs_wlc:file { getattr }; +dontaudit system_suspend_server sysfs_wlc:file { open }; +dontaudit system_suspend_server sysfs_wlc:file { read }; diff --git a/tracking_denials/systemui_app.te b/tracking_denials/systemui_app.te index b9967a6..9b32ff4 100644 --- a/tracking_denials/systemui_app.te +++ b/tracking_denials/systemui_app.te @@ -1,4 +1,4 @@ # b/307468867 userdebug_or_eng(` permissive systemui_app; -') \ No newline at end of file +') diff --git a/tracking_denials/vendor_cccdktimesync_app.te b/tracking_denials/vendor_cccdktimesync_app.te new file mode 100644 index 0000000..885c6c6 --- /dev/null +++ b/tracking_denials/vendor_cccdktimesync_app.te @@ -0,0 +1,2 @@ +# b/308381394 +dontaudit vendor_cccdktimesync_app hal_bluetooth_coexistence_service:service_manager { find }; diff --git a/tracking_denials/vendor_init.te b/tracking_denials/vendor_init.te index 2ae4665..4f3bce5 100644 --- a/tracking_denials/vendor_init.te +++ b/tracking_denials/vendor_init.te @@ -1,4 +1,6 @@ # b/307468733 userdebug_or_eng(` permissive vendor_init; -') \ No newline at end of file +')# b/308381748 +dontaudit vendor_init debugfs_trace_marker:file { getattr }; +dontaudit vendor_init default_prop:property_service { set };