Update error on ROM 11021299

Bug: 308380763
Bug: 308381394
Bug: 308381432
Bug: 308381409
Bug: 308381338
Bug: 308381747
Bug: 308381292
Bug: 308381668
Bug: 308381451
Bug: 308381687
Bug: 308381222
Bug: 308381263
Bug: 308381279
Bug: 308381611
Bug: 308381748
Test: SELinuxUncheckedDenialBootTest
Change-Id: If24f3fcb5a1830ef834119d05e49f23193ae132e
This commit is contained in:
Wilson Sung 2023-10-30 11:23:26 +00:00
parent 0bbc562d41
commit 94b82378b6
15 changed files with 50 additions and 6 deletions

3
private/systemui_app.te Normal file
View file

@ -0,0 +1,3 @@
# b/308381668
dontaudit systemui_app statsmanager_service:service_manager { find };

View file

@ -1,4 +1,8 @@
# b/307468771
userdebug_or_eng(`
permissive con_monitor_app;
')
')# b/308381432
dontaudit con_monitor_app activity_service:service_manager { find };
dontaudit con_monitor_app content_capture_service:service_manager { find };
dontaudit con_monitor_app game_service:service_manager { find };
dontaudit con_monitor_app netstats_service:service_manager { find };

2
tracking_denials/dmd.te Normal file
View file

@ -0,0 +1,2 @@
# b/308381409
dontaudit dmd servicemanager:binder { call };

View file

@ -0,0 +1,2 @@
# b/308381451
dontaudit hal_graphics_composer_default sysfs:file { read };

View file

@ -1,4 +1,7 @@
# b/307468788
userdebug_or_eng(`
permissive hal_health_default;
')
')# b/308380763
dontaudit hal_health_default sysfs:file { getattr };
dontaudit hal_health_default sysfs:file { open };
dontaudit hal_health_default sysfs:file { read };

View file

@ -0,0 +1,2 @@
# b/308381687
dontaudit hal_sensors_default sysfs_leds:file { write };

View file

@ -1,4 +1,5 @@
# b/307468756
userdebug_or_eng(`
permissive kernel;
')
')# b/308381222
dontaudit kernel kernel:capability { net_bind_service };

View file

@ -0,0 +1,2 @@
# b/308381747
dontaudit modem_ml_svc_sit statsdw_socket:sock_file { write };

View file

@ -0,0 +1,2 @@
# b/308381263
dontaudit rebalance_interrupts_vendor rebalance_interrupts_vendor:capability { dac_override };

View file

@ -0,0 +1,2 @@
# b/308381279
dontaudit shell sysfs:file { getattr };

View file

@ -1,4 +1,5 @@
# b/307468690
userdebug_or_eng(`
permissive system_server;
')
')# b/308381611
dontaudit system_server vendor_public_lib_file:dir { search };

View file

@ -0,0 +1,16 @@
# b/308381292
dontaudit system_suspend_server sysfs:dir { open };
dontaudit system_suspend_server sysfs:dir { read };
dontaudit system_suspend_server sysfs:file { getattr };
dontaudit system_suspend_server sysfs:file { open };
dontaudit system_suspend_server sysfs:file { read };
dontaudit system_suspend_server sysfs_batteryinfo:dir { open };
dontaudit system_suspend_server sysfs_batteryinfo:dir { read };
dontaudit system_suspend_server sysfs_batteryinfo:file { getattr };
dontaudit system_suspend_server sysfs_batteryinfo:file { open };
dontaudit system_suspend_server sysfs_batteryinfo:file { read };
dontaudit system_suspend_server sysfs_wlc:dir { open };
dontaudit system_suspend_server sysfs_wlc:dir { read };
dontaudit system_suspend_server sysfs_wlc:file { getattr };
dontaudit system_suspend_server sysfs_wlc:file { open };
dontaudit system_suspend_server sysfs_wlc:file { read };

View file

@ -0,0 +1,2 @@
# b/308381394
dontaudit vendor_cccdktimesync_app hal_bluetooth_coexistence_service:service_manager { find };

View file

@ -1,4 +1,6 @@
# b/307468733
userdebug_or_eng(`
permissive vendor_init;
')
')# b/308381748
dontaudit vendor_init debugfs_trace_marker:file { getattr };
dontaudit vendor_init default_prop:property_service { set };