summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorXin Li <delphij@google.com>2023-01-11 22:46:27 -0800
committerXin Li <delphij@google.com>2023-01-11 22:46:27 -0800
commit1927c198a392b08e041c9360f401636763da5f19 (patch)
tree0d88b806bd262cc4d3fc938487a77bcc4d4d71a3
parent4914414330d82c40097f8dfe060d1b4e15be0e44 (diff)
parent3fb25c3f5ac24627c7520746de56919465040960 (diff)
downloadpantah-sepolicy-1927c198a392b08e041c9360f401636763da5f19.tar.gz
Merge tm-qpr-dev-plus-aosp-without-vendor@9467136temp_273316506_tm-qpr2
Bug: 264720040 Merged-In: Ic5545995b5dc38e4b5fecd70dabf5bcd6de2368d Change-Id: I97b302f7541240a7bda655ee01e1810a52af49ce
-rw-r--r--cheetah-sepolicy.mk2
-rw-r--r--cloudripper-sepolicy.mk2
-rw-r--r--panther-sepolicy.mk1
-rw-r--r--ravenclaw-sepolicy.mk1
-rw-r--r--tracking_denials/hal_dumpstate_default.te2
5 files changed, 6 insertions, 2 deletions
diff --git a/cheetah-sepolicy.mk b/cheetah-sepolicy.mk
index 650b3af..3c342fa 100644
--- a/cheetah-sepolicy.mk
+++ b/cheetah-sepolicy.mk
@@ -1,3 +1,3 @@
# sepolicy that are shared among devices using whitechapel
BOARD_SEPOLICY_DIRS += device/google/pantah-sepolicy/cheetah
-
+BOARD_SEPOLICY_DIRS += device/google/pantah-sepolicy/tracking_denials
diff --git a/cloudripper-sepolicy.mk b/cloudripper-sepolicy.mk
index 98a403c..ae2ac7f 100644
--- a/cloudripper-sepolicy.mk
+++ b/cloudripper-sepolicy.mk
@@ -1,3 +1,3 @@
# sepolicy that are shared among devices using whitechapel
BOARD_SEPOLICY_DIRS += device/google/pantah-sepolicy/cloudripper
-
+BOARD_SEPOLICY_DIRS += device/google/pantah-sepolicy/tracking_denials
diff --git a/panther-sepolicy.mk b/panther-sepolicy.mk
index bdfe7db..4168459 100644
--- a/panther-sepolicy.mk
+++ b/panther-sepolicy.mk
@@ -1,2 +1,3 @@
# sepolicy that are shared among devices using whitechapel
BOARD_SEPOLICY_DIRS += device/google/pantah-sepolicy/panther
+BOARD_SEPOLICY_DIRS += device/google/pantah-sepolicy/tracking_denials
diff --git a/ravenclaw-sepolicy.mk b/ravenclaw-sepolicy.mk
index d41bbae..acc1bd3 100644
--- a/ravenclaw-sepolicy.mk
+++ b/ravenclaw-sepolicy.mk
@@ -1,2 +1,3 @@
# sepolicy that are shared among devices using whitechapel
BOARD_SEPOLICY_DIRS += device/google/pantah-sepolicy/ravenclaw
+BOARD_SEPOLICY_DIRS += device/google/pantah-sepolicy/tracking_denials
diff --git a/tracking_denials/hal_dumpstate_default.te b/tracking_denials/hal_dumpstate_default.te
new file mode 100644
index 0000000..2a33551
--- /dev/null
+++ b/tracking_denials/hal_dumpstate_default.te
@@ -0,0 +1,2 @@
+# b/263548298
+dontaudit hal_dumpstate_default sysfs:dir { read };