summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorandroid-build-team Robot <android-build-team-robot@google.com>2021-02-03 04:14:29 +0000
committerandroid-build-team Robot <android-build-team-robot@google.com>2021-02-03 04:14:29 +0000
commit3a09e9d4ee3a256282e5b18dc70e970d80bce67d (patch)
tree6f7f4308efc19166f9cb629567910951e87ab6c6
parentba7a3146f68d87da75428dbd5a9e39025cb32027 (diff)
parent0a3702c2b4933f22a11c583dafec63b721420a28 (diff)
downloadredfin-sepolicy-3a09e9d4ee3a256282e5b18dc70e970d80bce67d.tar.gz
Snap for 7120117 from 0a3702c2b4933f22a11c583dafec63b721420a28 to tm-release
Change-Id: Ibe02b09923d206cf0cb754804a423805d2f402a9
-rw-r--r--redfin-sepolicy.mk1
-rw-r--r--tracking_denials/dumpstate.te5
-rw-r--r--tracking_denials/hal_power_default.te3
3 files changed, 9 insertions, 0 deletions
diff --git a/redfin-sepolicy.mk b/redfin-sepolicy.mk
index a52d988..30ba5ce 100644
--- a/redfin-sepolicy.mk
+++ b/redfin-sepolicy.mk
@@ -1,2 +1,3 @@
# vendors
BOARD_SEPOLICY_DIRS += device/google/redfin-sepolicy/vendor/google
+BOARD_SEPOLICY_DIRS += device/google/redfin-sepolicy/tracking_denials
diff --git a/tracking_denials/dumpstate.te b/tracking_denials/dumpstate.te
new file mode 100644
index 0000000..f94efaa
--- /dev/null
+++ b/tracking_denials/dumpstate.te
@@ -0,0 +1,5 @@
+# b/179095566
+dontaudit dumpstate incident:process signal ;
+dontaudit dumpstate incident:process sigkill ;
+dontaudit dumpstate incident:process signal ;
+dontaudit dumpstate incident:process sigkill ;
diff --git a/tracking_denials/hal_power_default.te b/tracking_denials/hal_power_default.te
new file mode 100644
index 0000000..37f09d2
--- /dev/null
+++ b/tracking_denials/hal_power_default.te
@@ -0,0 +1,3 @@
+# b/178988508
+dontaudit hal_power_default hal_power_default:capability dac_override ;
+dontaudit hal_power_default hal_power_default:capability dac_override ;