summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorXin Li <delphij@google.com>2023-08-14 15:32:41 -0700
committerXin Li <delphij@google.com>2023-08-24 00:14:11 -0700
commit65a3b8fa81a95242573bd40cdd7409b6162b3a52 (patch)
tree43e58fc5e631e2db62e39af64f5457138e773059
parent481ef0226152f3646a890198c6b5a0be547c6006 (diff)
parentad0b17de7e7339f82c2727879ed9fddf7c9026e5 (diff)
downloadbarbet-sepolicy-65a3b8fa81a95242573bd40cdd7409b6162b3a52.tar.gz
Merge Android U (ab/10368041)tmp_amf_298295554
Bug: 291102124 Merged-In: Ieb5e09f3477fed89da492a0689999ef74e0c4c3b Change-Id: I2ee6dbfcd8cc46af543f9f3f28150bcc28777394
-rw-r--r--tracking_denials/bug_map2
-rw-r--r--tracking_denials/dumpstate.te2
-rw-r--r--tracking_denials/hal_dumpstate_impl.te2
-rw-r--r--tracking_denials/mediacodec.te4
-rw-r--r--tracking_denials/mediaserver.te4
-rw-r--r--tracking_denials/pixelstats_vendor.te2
-rw-r--r--tracking_denials/platform_app.te2
-rw-r--r--vendor/google/pixelstats_vendor.te3
8 files changed, 6 insertions, 15 deletions
diff --git a/tracking_denials/bug_map b/tracking_denials/bug_map
index 5c95b54..11c183f 100644
--- a/tracking_denials/bug_map
+++ b/tracking_denials/bug_map
@@ -1,2 +1,4 @@
dumpstate incident process b/238571134
+dumpstate system_data_file dir b/264600045
hal_drm_widevine default_prop file b/238263941
+system_server vendor_incremental_module file b/264483452
diff --git a/tracking_denials/dumpstate.te b/tracking_denials/dumpstate.te
new file mode 100644
index 0000000..21e2bf1
--- /dev/null
+++ b/tracking_denials/dumpstate.te
@@ -0,0 +1,2 @@
+# b/277155697
+dontaudit dumpstate default_android_service:service_manager { find };
diff --git a/tracking_denials/hal_dumpstate_impl.te b/tracking_denials/hal_dumpstate_impl.te
deleted file mode 100644
index 8fa3265..0000000
--- a/tracking_denials/hal_dumpstate_impl.te
+++ /dev/null
@@ -1,2 +0,0 @@
-# b/193476528
-dontaudit hal_dumpstate_impl sysfs:file getattr;
diff --git a/tracking_denials/mediacodec.te b/tracking_denials/mediacodec.te
deleted file mode 100644
index ea4b461..0000000
--- a/tracking_denials/mediacodec.te
+++ /dev/null
@@ -1,4 +0,0 @@
-# b/170356952
-dontaudit mediacodec sysfs_msm_subsys:file read ;
-dontaudit mediacodec sysfs_msm_subsys:file open ;
-dontaudit mediacodec sysfs_msm_subsys:file getattr ;
diff --git a/tracking_denials/mediaserver.te b/tracking_denials/mediaserver.te
deleted file mode 100644
index 619c271..0000000
--- a/tracking_denials/mediaserver.te
+++ /dev/null
@@ -1,4 +0,0 @@
-# b/170356968
-dontaudit mediaserver sysfs_msm_subsys:file read ;
-dontaudit mediaserver sysfs_msm_subsys:file open ;
-dontaudit mediaserver sysfs_msm_subsys:file getattr ;
diff --git a/tracking_denials/pixelstats_vendor.te b/tracking_denials/pixelstats_vendor.te
deleted file mode 100644
index 0f6e3a3..0000000
--- a/tracking_denials/pixelstats_vendor.te
+++ /dev/null
@@ -1,2 +0,0 @@
-# b/182338901
-dontaudit pixelstats_vendor servicemanager:binder call;
diff --git a/tracking_denials/platform_app.te b/tracking_denials/platform_app.te
new file mode 100644
index 0000000..0988014
--- /dev/null
+++ b/tracking_denials/platform_app.te
@@ -0,0 +1,2 @@
+# b/265359406
+dontaudit platform_app hal_wireless_charger_service:service_manager { find };
diff --git a/vendor/google/pixelstats_vendor.te b/vendor/google/pixelstats_vendor.te
index 48be89f..ffd2388 100644
--- a/vendor/google/pixelstats_vendor.te
+++ b/vendor/google/pixelstats_vendor.te
@@ -14,9 +14,6 @@ r_dir_file(pixelstats_vendor, sysfs_batteryinfo)
# UeventListener
allow pixelstats_vendor self:netlink_kobject_uevent_socket create_socket_perms_no_ioctl;
-# wlc
-allow pixelstats_vendor sysfs_wlc:dir search;
-
# OrientationCollector
# HIDL sensorservice
allow pixelstats_vendor fwk_sensor_hwservice:hwservice_manager find;