summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorAndroid Build Coastguard Worker <android-build-coastguard-worker@google.com>2023-01-06 00:03:40 +0000
committerAndroid Build Coastguard Worker <android-build-coastguard-worker@google.com>2023-01-06 00:03:40 +0000
commitdc34e410e06097b6bf4b5270edeb90b7709907d8 (patch)
tree0d88b806bd262cc4d3fc938487a77bcc4d4d71a3
parent4914414330d82c40097f8dfe060d1b4e15be0e44 (diff)
parentfcc3c266e62889b2cd6071695f4a16f28e2825e9 (diff)
downloadpantah-sepolicy-android-13.0.0_r36.tar.gz
Change-Id: I4b87ce457bfe98b67bd422a9c23f2de322694abb
-rw-r--r--cheetah-sepolicy.mk2
-rw-r--r--cloudripper-sepolicy.mk2
-rw-r--r--panther-sepolicy.mk1
-rw-r--r--ravenclaw-sepolicy.mk1
-rw-r--r--tracking_denials/hal_dumpstate_default.te2
5 files changed, 6 insertions, 2 deletions
diff --git a/cheetah-sepolicy.mk b/cheetah-sepolicy.mk
index 650b3af..3c342fa 100644
--- a/cheetah-sepolicy.mk
+++ b/cheetah-sepolicy.mk
@@ -1,3 +1,3 @@
# sepolicy that are shared among devices using whitechapel
BOARD_SEPOLICY_DIRS += device/google/pantah-sepolicy/cheetah
-
+BOARD_SEPOLICY_DIRS += device/google/pantah-sepolicy/tracking_denials
diff --git a/cloudripper-sepolicy.mk b/cloudripper-sepolicy.mk
index 98a403c..ae2ac7f 100644
--- a/cloudripper-sepolicy.mk
+++ b/cloudripper-sepolicy.mk
@@ -1,3 +1,3 @@
# sepolicy that are shared among devices using whitechapel
BOARD_SEPOLICY_DIRS += device/google/pantah-sepolicy/cloudripper
-
+BOARD_SEPOLICY_DIRS += device/google/pantah-sepolicy/tracking_denials
diff --git a/panther-sepolicy.mk b/panther-sepolicy.mk
index bdfe7db..4168459 100644
--- a/panther-sepolicy.mk
+++ b/panther-sepolicy.mk
@@ -1,2 +1,3 @@
# sepolicy that are shared among devices using whitechapel
BOARD_SEPOLICY_DIRS += device/google/pantah-sepolicy/panther
+BOARD_SEPOLICY_DIRS += device/google/pantah-sepolicy/tracking_denials
diff --git a/ravenclaw-sepolicy.mk b/ravenclaw-sepolicy.mk
index d41bbae..acc1bd3 100644
--- a/ravenclaw-sepolicy.mk
+++ b/ravenclaw-sepolicy.mk
@@ -1,2 +1,3 @@
# sepolicy that are shared among devices using whitechapel
BOARD_SEPOLICY_DIRS += device/google/pantah-sepolicy/ravenclaw
+BOARD_SEPOLICY_DIRS += device/google/pantah-sepolicy/tracking_denials
diff --git a/tracking_denials/hal_dumpstate_default.te b/tracking_denials/hal_dumpstate_default.te
new file mode 100644
index 0000000..2a33551
--- /dev/null
+++ b/tracking_denials/hal_dumpstate_default.te
@@ -0,0 +1,2 @@
+# b/263548298
+dontaudit hal_dumpstate_default sysfs:dir { read };