diff --git a/tracking_denials/citadeld.te b/tracking_denials/citadeld.te new file mode 100644 index 00000000..f90320d5 --- /dev/null +++ b/tracking_denials/citadeld.te @@ -0,0 +1,2 @@ +# b/204718569 +dontaudit citadeld citadeld_service:service_manager { add }; diff --git a/tracking_denials/hal_camera_default.te b/tracking_denials/hal_camera_default.te new file mode 100644 index 00000000..44c2fe58 --- /dev/null +++ b/tracking_denials/hal_camera_default.te @@ -0,0 +1,3 @@ +# b/204718762 +dontaudit hal_camera_default edgetpu_vendor_service:service_manager { find }; +dontaudit hal_camera_default hal_power_service:service_manager { find }; diff --git a/tracking_denials/hal_sensors_default.te b/tracking_denials/hal_sensors_default.te new file mode 100644 index 00000000..116d6d80 --- /dev/null +++ b/tracking_denials/hal_sensors_default.te @@ -0,0 +1,2 @@ +# b/204718449 +dontaudit hal_sensors_default fwk_stats_service:service_manager { find }; diff --git a/tracking_denials/hal_uwb_vendor_default.te b/tracking_denials/hal_uwb_vendor_default.te new file mode 100644 index 00000000..2aa2dea0 --- /dev/null +++ b/tracking_denials/hal_uwb_vendor_default.te @@ -0,0 +1,2 @@ +# b/204718220 +dontaudit hal_uwb_vendor_default default_android_service:service_manager { add }; diff --git a/tracking_denials/hal_vibrator_default.te b/tracking_denials/hal_vibrator_default.te new file mode 100644 index 00000000..09a5a853 --- /dev/null +++ b/tracking_denials/hal_vibrator_default.te @@ -0,0 +1,3 @@ +# b/204718450 +dontaudit hal_vibrator_default input_device:dir { open }; +dontaudit hal_vibrator_default input_device:dir { read }; diff --git a/tracking_denials/hbmsvmanager_app.te b/tracking_denials/hbmsvmanager_app.te new file mode 100644 index 00000000..22a8102e --- /dev/null +++ b/tracking_denials/hbmsvmanager_app.te @@ -0,0 +1,2 @@ +# b/204718757 +dontaudit hbmsvmanager_app hal_pixel_display_service:service_manager { find }; diff --git a/tracking_denials/mediacodec_samsung.te b/tracking_denials/mediacodec_samsung.te new file mode 100644 index 00000000..1fa99a1b --- /dev/null +++ b/tracking_denials/mediacodec_samsung.te @@ -0,0 +1,3 @@ +# b/204718809 +dontaudit mediacodec_samsung system_server:fifo_file { append }; +dontaudit mediacodec_samsung system_server:fifo_file { write }; diff --git a/tracking_denials/platform_app.te b/tracking_denials/platform_app.te new file mode 100644 index 00000000..6e1b0e1c --- /dev/null +++ b/tracking_denials/platform_app.te @@ -0,0 +1,2 @@ +# b/204718221 +dontaudit platform_app touch_service:service_manager { find }; diff --git a/tracking_denials/priv_app.te b/tracking_denials/priv_app.te new file mode 100644 index 00000000..6276e04d --- /dev/null +++ b/tracking_denials/priv_app.te @@ -0,0 +1,2 @@ +# b/204718782 +dontaudit priv_app hal_exynos_rild_hwservice:hwservice_manager { find }; diff --git a/tracking_denials/thermal_link_device.te b/tracking_denials/thermal_link_device.te new file mode 100644 index 00000000..d79bfe60 --- /dev/null +++ b/tracking_denials/thermal_link_device.te @@ -0,0 +1,2 @@ +# b/204718864 +dontaudit thermal_link_device sysfs:filesystem { associate }; diff --git a/tracking_denials/vendor_qualifiednetworks_app.te b/tracking_denials/vendor_qualifiednetworks_app.te new file mode 100644 index 00000000..ec4ed9dc --- /dev/null +++ b/tracking_denials/vendor_qualifiednetworks_app.te @@ -0,0 +1,2 @@ +# b/204718865 +dontaudit vendor_qualifiednetworks_app radio_service:service_manager { find }; diff --git a/tracking_denials/zygote.te b/tracking_denials/zygote.te new file mode 100644 index 00000000..c9fd8bba --- /dev/null +++ b/tracking_denials/zygote.te @@ -0,0 +1,8 @@ +# b/204717520 +dontaudit zygote activity_service:service_manager { find }; +dontaudit zygote content_capture_service:service_manager { find }; +dontaudit zygote default_android_service:service_manager { add }; +dontaudit zygote default_android_service:service_manager { find }; +dontaudit zygote game_service:service_manager { find }; +dontaudit zygote nfc_service:service_manager { find }; +dontaudit zygote radio_service:service_manager { find };