diff options
author | Android Build Coastguard Worker <android-build-coastguard-worker@google.com> | 2024-05-10 15:33:46 +0000 |
---|---|---|
committer | Android Build Coastguard Worker <android-build-coastguard-worker@google.com> | 2024-05-10 15:33:46 +0000 |
commit | 696897a9b44eedfadb3e09e4e36b2be1833ef40b (patch) | |
tree | 1baef9bf0672e6fee5df5b6867192ccd227a05df | |
parent | 45298610236d6b1f0558c74c078e98eb7af7e6a7 (diff) | |
parent | 14db48b18ba7bd3f0aec33c8136b54372928771e (diff) | |
download | sunfish-sepolicy-696897a9b44eedfadb3e09e4e36b2be1833ef40b.tar.gz |
Snap for 11819167 from 14db48b18ba7bd3f0aec33c8136b54372928771e to busytown-mac-infra-releasebusytown-mac-infra-release
Change-Id: I08e7221ca8b48cb246aa33a6d0aa01fc6cbab51f
-rw-r--r-- | system_ext/private/property_contexts | 5 | ||||
-rw-r--r-- | tracking_denials/platform_app.te | 2 | ||||
-rw-r--r-- | vendor/google/bug_map | 5 | ||||
-rw-r--r-- | vendor/google/e2fs.te | 2 | ||||
-rw-r--r-- | vendor/google/fsck.te | 2 | ||||
-rw-r--r-- | vendor/qcom/common/file_contexts | 2 |
6 files changed, 8 insertions, 10 deletions
diff --git a/system_ext/private/property_contexts b/system_ext/private/property_contexts deleted file mode 100644 index abcdd41..0000000 --- a/system_ext/private/property_contexts +++ /dev/null @@ -1,5 +0,0 @@ -# Boot animation dynamic colors -persist.bootanim.color1 u:object_r:bootanim_system_prop:s0 exact int -persist.bootanim.color2 u:object_r:bootanim_system_prop:s0 exact int -persist.bootanim.color3 u:object_r:bootanim_system_prop:s0 exact int -persist.bootanim.color4 u:object_r:bootanim_system_prop:s0 exact int diff --git a/tracking_denials/platform_app.te b/tracking_denials/platform_app.te index df7e700..e69de29 100644 --- a/tracking_denials/platform_app.te +++ b/tracking_denials/platform_app.te @@ -1,2 +0,0 @@ -# b/162700611 -dontaudit platform_app default_android_hwservice:hwservice_manager find; diff --git a/vendor/google/bug_map b/vendor/google/bug_map index acb3f80..813bd61 100644 --- a/vendor/google/bug_map +++ b/vendor/google/bug_map @@ -1,3 +1,4 @@ +audioserver vendor_file file b/310991726 cnd wifi_hal_prop file b/162700455 google_camera_app selinuxfs file b/175910397 hal_health_default unlabeled file b/156200409 @@ -9,7 +10,5 @@ platform_app default_android_hwservice hwservice_manager b/156059972 shell debugfs file b/175106535 shell device_config_runtime_native_boot_prop file b/175106535 shell sysfs file b/175106535 +system_server sysfs_batteryinfo file b/311220612 tee tee capability2 b/156045688 -mediaswcodec gpu_device chr_file b/194313013 -mediaswcodec sysfs_msm_subsys dir b/194313013 -mediaserver sysfs_msm_subsys dir b/194313013 diff --git a/vendor/google/e2fs.te b/vendor/google/e2fs.te new file mode 100644 index 0000000..4d2b596 --- /dev/null +++ b/vendor/google/e2fs.te @@ -0,0 +1,2 @@ +allow e2fs sysfs_scsi_devices_0000:dir r_dir_perms; +allow e2fs sysfs_scsi_devices_0000:file r_file_perms; diff --git a/vendor/google/fsck.te b/vendor/google/fsck.te index 1500b5f..7d94ea1 100644 --- a/vendor/google/fsck.te +++ b/vendor/google/fsck.te @@ -1 +1,3 @@ allow fsck persist_block_device:blk_file rw_file_perms; +allow fsck sysfs_scsi_devices_0000:dir r_dir_perms; +allow fsck sysfs_scsi_devices_0000:file r_file_perms; diff --git a/vendor/qcom/common/file_contexts b/vendor/qcom/common/file_contexts index a360e5a..9f29f95 100644 --- a/vendor/qcom/common/file_contexts +++ b/vendor/qcom/common/file_contexts @@ -53,6 +53,8 @@ /(vendor|system/vendor)/bin/hw/qcrild u:object_r:rild_exec:s0 /(vendor|system/vendor)/bin/hw/android\.hardware\.drm@[0-9]+\.[0-9]+-service\.clearkey u:object_r:hal_drm_clearkey_exec:s0 /(vendor|system/vendor)/bin/hw/android\.hardware\.drm(@[0-9]+\.[0-9]+)?-service\.widevine u:object_r:hal_drm_widevine_exec:s0 +/(vendor|system/vendor)/bin/hw/android\.hardware\.drm@[0-9]+\.[0-9]+-service-lazy\.clearkey u:object_r:hal_drm_widevine_exec:s0 +/(vendor|system/vendor)/bin/hw/android\.hardware\.drm@[0-9]+\.[0-9]+-service-lazy\.widevine u:object_r:hal_drm_widevine_exec:s0 /(vendor|system/vendor)/bin/hw/android\.hardware\.gnss@.*-service-qti u:object_r:hal_gnss_qti_exec:s0 /(vendor|system/vendor)/bin/hw/vendor\.qti\.gnss@.*-service u:object_r:hal_gnss_qti_exec:s0 /(vendor|system/vendor)/bin/hw/android\.hardware\.bluetooth@1\.0-service-qti u:object_r:hal_bluetooth_default_exec:s0 |