summaryrefslogtreecommitdiff
path: root/tracking_denials
diff options
context:
space:
mode:
Diffstat (limited to 'tracking_denials')
-rw-r--r--tracking_denials/bug_map9
-rw-r--r--tracking_denials/dumpstate.te2
-rw-r--r--tracking_denials/shell.te10
3 files changed, 21 insertions, 0 deletions
diff --git a/tracking_denials/bug_map b/tracking_denials/bug_map
new file mode 100644
index 0000000..7537c74
--- /dev/null
+++ b/tracking_denials/bug_map
@@ -0,0 +1,9 @@
+adbd sysfs_msm_subsys dir b/269369858
+derive_sdk system_app dir b/269044764
+dumpstate hal_input_processor_default process b/238263647
+dumpstate incident process b/238263647
+dumpstate system_data_file dir b/264600011
+hal_camera_default graphics_config_prop file b/268147541
+hal_drm_widevine default_prop file b/238263747
+shell build_attestation_prop file b/269370035
+system_server vendor_incremental_module file b/264483807
diff --git a/tracking_denials/dumpstate.te b/tracking_denials/dumpstate.te
new file mode 100644
index 0000000..87e51ff
--- /dev/null
+++ b/tracking_denials/dumpstate.te
@@ -0,0 +1,2 @@
+# b/277155912
+dontaudit dumpstate default_android_service:service_manager { find };
diff --git a/tracking_denials/shell.te b/tracking_denials/shell.te
new file mode 100644
index 0000000..8bbbda7
--- /dev/null
+++ b/tracking_denials/shell.te
@@ -0,0 +1,10 @@
+# b/269370035
+dontaudit shell incident_service:service_manager { find };
+dontaudit shell installd_service:service_manager { find };
+dontaudit shell mdns_service:service_manager { find };
+dontaudit shell netd_service:service_manager { find };
+dontaudit shell system_suspend_control_service:service_manager { find };
+dontaudit shell system_suspend_control_internal_service:service_manager { find };
+dontaudit shell vold_service:service_manager { find };
+dontaudit shell dnsresolver_service:service_manager { find };
+dontaudit shell gatekeeper_service:service_manager { find };