summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rw-r--r--tracking_denials/bug_map2
-rw-r--r--tracking_denials/shell.te10
2 files changed, 12 insertions, 0 deletions
diff --git a/tracking_denials/bug_map b/tracking_denials/bug_map
index ca2d09e..7537c74 100644
--- a/tracking_denials/bug_map
+++ b/tracking_denials/bug_map
@@ -1,7 +1,9 @@
+adbd sysfs_msm_subsys dir b/269369858
derive_sdk system_app dir b/269044764
dumpstate hal_input_processor_default process b/238263647
dumpstate incident process b/238263647
dumpstate system_data_file dir b/264600011
hal_camera_default graphics_config_prop file b/268147541
hal_drm_widevine default_prop file b/238263747
+shell build_attestation_prop file b/269370035
system_server vendor_incremental_module file b/264483807
diff --git a/tracking_denials/shell.te b/tracking_denials/shell.te
new file mode 100644
index 0000000..8bbbda7
--- /dev/null
+++ b/tracking_denials/shell.te
@@ -0,0 +1,10 @@
+# b/269370035
+dontaudit shell incident_service:service_manager { find };
+dontaudit shell installd_service:service_manager { find };
+dontaudit shell mdns_service:service_manager { find };
+dontaudit shell netd_service:service_manager { find };
+dontaudit shell system_suspend_control_service:service_manager { find };
+dontaudit shell system_suspend_control_internal_service:service_manager { find };
+dontaudit shell vold_service:service_manager { find };
+dontaudit shell dnsresolver_service:service_manager { find };
+dontaudit shell gatekeeper_service:service_manager { find };