diff options
| -rw-r--r-- | redfin-sepolicy.mk | 1 | ||||
| -rw-r--r-- | tracking_denials/dumpstate.te | 5 | ||||
| -rw-r--r-- | tracking_denials/hal_power_default.te | 3 |
3 files changed, 9 insertions, 0 deletions
diff --git a/redfin-sepolicy.mk b/redfin-sepolicy.mk index a52d988..30ba5ce 100644 --- a/redfin-sepolicy.mk +++ b/redfin-sepolicy.mk @@ -1,2 +1,3 @@ # vendors BOARD_SEPOLICY_DIRS += device/google/redfin-sepolicy/vendor/google +BOARD_SEPOLICY_DIRS += device/google/redfin-sepolicy/tracking_denials diff --git a/tracking_denials/dumpstate.te b/tracking_denials/dumpstate.te new file mode 100644 index 0000000..f94efaa --- /dev/null +++ b/tracking_denials/dumpstate.te @@ -0,0 +1,5 @@ +# b/179095566 +dontaudit dumpstate incident:process signal ; +dontaudit dumpstate incident:process sigkill ; +dontaudit dumpstate incident:process signal ; +dontaudit dumpstate incident:process sigkill ; diff --git a/tracking_denials/hal_power_default.te b/tracking_denials/hal_power_default.te new file mode 100644 index 0000000..37f09d2 --- /dev/null +++ b/tracking_denials/hal_power_default.te @@ -0,0 +1,3 @@ +# b/178988508 +dontaudit hal_power_default hal_power_default:capability dac_override ; +dontaudit hal_power_default hal_power_default:capability dac_override ; |