From 00dfece0e4db5d66a448d0eb544440b44221dd39 Mon Sep 17 00:00:00 2001 From: Spade Lee Date: Thu, 18 Jul 2024 09:56:41 +0000 Subject: [PATCH 1/2] sepolicy: add permission for dump_power avc: denied { read } for name="maxfg_history" dev="tmpfs" ino=1144 scontext=u:r:dump_power:s0 tcontext=u:object_r:battery_history_device:s0 tclass=chr_file permissive=0 Bug: 353418158 Test: atest-dev com.google.android.selinux.pts.SELinuxTest#scanBugreport => PASS Flag: EXEMPT bugfix Change-Id: Ie14081f5614c0667e47b474f11198cd633971326 Signed-off-by: Spade Lee --- vendor/dump_power.te | 1 + 1 file changed, 1 insertion(+) create mode 100644 vendor/dump_power.te diff --git a/vendor/dump_power.te b/vendor/dump_power.te new file mode 100644 index 0000000..6a0aaad --- /dev/null +++ b/vendor/dump_power.te @@ -0,0 +1 @@ +allow dump_power battery_history_device:chr_file r_file_perms; From 8dc3a904d6e68bb22a804fa088108d6b7f0f268c Mon Sep 17 00:00:00 2001 From: attis Date: Mon, 26 Aug 2024 15:21:10 +0800 Subject: [PATCH 2/2] Label sysfs node power_mode as sysfs_display. Label power_mode to sysfs_panel to let it be allowed in dumpstate. avc log: 08-26 13:08:28.376 12321 12321 W dump_second_dis: type=1400 audit(0.0:13): avc: denied { read } for name="power_mode" dev="sysfs" ino=83663 scontext=u:r:dump_second_display:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=0 Test: ls -Z, adb bugreport. Flag: EXEMPT bugfix Bug: 358505990 Change-Id: Iaba56ff4025b5403a148bde6daad5f29c9c7f5b3 Signed-off-by: attis --- vendor/genfs_contexts | 1 + 1 file changed, 1 insertion(+) diff --git a/vendor/genfs_contexts b/vendor/genfs_contexts index da67863..88abf5e 100644 --- a/vendor/genfs_contexts +++ b/vendor/genfs_contexts @@ -19,6 +19,7 @@ genfscon sysfs /devices/platform/19450000.drmdsim/19450000.drmdsim.0/panel_model genfscon sysfs /devices/platform/19450000.drmdsim/19450000.drmdsim.0/backlight/panel0-backlight/als_table u:object_r:sysfs_write_leds:s0 genfscon sysfs /devices/platform/19450000.drmdsim/19450000.drmdsim.0/error_count_te u:object_r:sysfs_display:s0 genfscon sysfs /devices/platform/19450000.drmdsim/19450000.drmdsim.0/error_count_unknown u:object_r:sysfs_display:s0 +genfscon sysfs /devices/platform/19450000.drmdsim/19450000.drmdsim.0/power_mode u:object_r:sysfs_display:s0 genfscon sysfs /devices/platform/19471000.drmdecon/dqe1/atc u:object_r:sysfs_display:s0 # Battery