Evolution-x-devices/device_google_gs201
2
0
Fork 0
mirror of https://github.com/Evolution-X-Devices/device_google_gs201 synced 2026-02-02 06:35:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Add dontaudit statements to camera HAL policy.

Browse Source 
The autogenerated dontaudit statements in tracking_denials are
actually the correct policy. Move them to the correct file and
add comments.

Bug: 218585004
Test: build & camera check
Change-Id: Ie0338f0d2a6fd0c589777a82c22a014e462bd5c2
(cherry picked from commit 26b2d2e33e)
This commit is contained in:
Krzysztof Kosiński
2022-05-10 05:35:27 +00:00
parent 0d81b693cf
commit 2d44b5d5d0
2 changed files with 8 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
tracking_denials/hal_camera_default.te
View File

@@ -1,5 +0,0 @@
# b/205780065
dontaudit hal_camera_default system_data_file:dir { search };
# b/218585004
dontaudit hal_camera_default traced:unix_stream_socket { connectto };
dontaudit hal_camera_default traced_producer_socket:sock_file { write };

8
whitechapel_pro/hal_camera_default.te
View File

@@ -91,3 +91,11 @@ allow hal_camera_default sysfs_leds:file r_file_perms;
# Allow camera HAL to send trace packets to Perfetto
userdebug_or_eng(`perfetto_producer(hal_camera_default)')
# Some file searches attempt to access system data and are denied.
# This is benign and can be ignored.
dontaudit hal_camera_default system_data_file:dir { search };
# google3 prebuilts attempt to connect to the wrong trace socket, ignore them.
dontaudit hal_camera_default traced:unix_stream_socket { connectto };
dontaudit hal_camera_default traced_producer_socket:sock_file { write };