sepolicy: allow dump page_pinner
Provide necessary sepolicy for dumpreport to access page_pinner
information in /sys/kernel/debug/page_pinner/{longterm_pinner,
alloc_contig_failed}
Bug: 226956571
Test: Run "adb bugreport <zip>" and verify it contains the output
from page_pinner.
Signed-off-by: Minchan Kim <minchan@google.com>
Change-Id: I7b00d4930fbaa2061537cd8c84616c1053c829cf
This commit is contained in:
committed by
TreeHugger Robot
parent
5cc8837eb6
commit
3496931400
@@ -58,6 +58,7 @@ type vendor_votable_debugfs, fs_type, debugfs_type;
|
||||
type vendor_battery_debugfs, fs_type, debugfs_type;
|
||||
type vendor_dmabuf_debugfs, fs_type, debugfs_type;
|
||||
type vendor_dri_debugfs, fs_type, debugfs_type;
|
||||
type vendor_page_pinner_debugfs, fs_type, debugfs_type;
|
||||
|
||||
# vendor extra images
|
||||
type modem_img_file, contextmount_type, file_type, vendor_file_type;
|
||||
|
||||
@@ -150,6 +150,7 @@ genfscon debugfs /google_charger u:object
|
||||
genfscon debugfs /gvotables u:object_r:vendor_votable_debugfs:s0
|
||||
genfscon debugfs /google_battery u:object_r:vendor_battery_debugfs:s0
|
||||
genfscon debugfs /dri/0/crtc- u:object_r:vendor_dri_debugfs:s0
|
||||
genfscon debugfs /page_pinner u:object_r:vendor_page_pinner_debugfs:s0
|
||||
|
||||
# Battery
|
||||
genfscon sysfs /devices/platform/google,battery/power_supply/battery u:object_r:sysfs_batteryinfo:s0
|
||||
|
||||
@@ -109,6 +109,8 @@ userdebug_or_eng(`
|
||||
allow hal_dumpstate_default vendor_pm_genpd_debugfs:file r_file_perms;
|
||||
allow hal_dumpstate_default vendor_dri_debugfs:dir r_dir_perms;
|
||||
allow hal_dumpstate_default vendor_dri_debugfs:file r_file_perms;
|
||||
allow hal_dumpstate_default vendor_page_pinner_debugfs:dir search;
|
||||
allow hal_dumpstate_default vendor_page_pinner_debugfs:file r_file_perms;
|
||||
')
|
||||
|
||||
dontaudit hal_dumpstate_default mnt_vendor_file:dir search;
|
||||
@@ -129,3 +131,5 @@ dontaudit hal_dumpstate_default vendor_maxfg_debugfs:file r_file_perms;
|
||||
dontaudit hal_dumpstate_default vendor_pm_genpd_debugfs:file r_file_perms;
|
||||
dontaudit hal_dumpstate_default sysfs_bcl:dir r_dir_perms;
|
||||
dontaudit hal_dumpstate_default sysfs_bcl:file r_file_perms;
|
||||
dontaudit hal_dumpstate_default vendor_page_pinner_debugfs:dir search;
|
||||
dontaudit hal_dumpstate_default vendor_page_pinner_debugfs:file r_file_perms;
|
||||
|
||||
Reference in New Issue
Block a user