diff --git a/lynx-sepolicy.mk b/lynx-sepolicy.mk index 6efe95c..4c770e4 100644 --- a/lynx-sepolicy.mk +++ b/lynx-sepolicy.mk @@ -1,2 +1,3 @@ # sepolicy that are shared among devices using whitechapel BOARD_SEPOLICY_DIRS += device/google/lynx-sepolicy/vendor +BOARD_SEPOLICY_DIRS += device/google/lynx-sepolicy/tracking_denials diff --git a/tracking_denials/bug_map b/tracking_denials/bug_map index 47b165b..a51827c 100644 --- a/tracking_denials/bug_map +++ b/tracking_denials/bug_map @@ -1,3 +1,2 @@ -hal_health_default sysfs file b/234311757 hal_radioext_default hal_bluetooth_default binder b/234311798 init-insmod-sh init-insmod-sh capability b/234311675 diff --git a/tracking_denials/lowi_server.te b/tracking_denials/lowi_server.te new file mode 100644 index 0000000..d3c1bd5 --- /dev/null +++ b/tracking_denials/lowi_server.te @@ -0,0 +1,2 @@ +# b/235281415 +dontaudit lowi_server vendor_location:unix_dgram_socket { read write };