dumpstate: touch: Add touch_predump for focaltech

10-01 21:39:00.372 11262 11262 I sh      : type=1400 audit(0.0:20): avc:
denied  { write } for  name="driver_test" dev="proc" ino=4026536282
scontext=u:r:predump_touch:s0 tcontext=u:object_r:proc_touch:s0
tclass=file permissive=1

10-01 21:40:03.076  6244  6244 I sh      : type=1400 audit(0.0:21): avc:
denied  { search } for  name="focaltech_touch" dev="proc" ino=4026535873
scontext=u:r:predump_touch:s0 tcontext=u:object_r:proc_touch:s0
tclass=dir permissive=1

Test: b/318578275
Test: Flash on dogfood device and check touch dump logs
Bug: 287907308
Flag: EXEMPT bugfix
Change-Id: I1652ecc1054b50946159d4c3c0f3995cefa896f5
This commit is contained in:
Ravi Jain 2024-03-08 09:14:09 +00:00
parent 7d245967c1
commit 297158486d
6 changed files with 21 additions and 0 deletions

View file

@ -9,3 +9,11 @@ sh_binary {
vendor: true,
sub_dir: "dump",
}
sh_binary {
name: "predump_focaltech.sh",
src: "dump_focaltech.sh",
init_rc: ["init.touch.rc"],
vendor: true,
sub_dir: "dump_touch",
}

View file

@ -0,0 +1,3 @@
BOARD_VENDOR_SEPOLICY_DIRS += device/google/gs-common/touch/focaltech/predump_sepolicy
PRODUCT_PACKAGES += predump_focaltech.sh

View file

@ -0,0 +1,2 @@
# touch predump script
type proc_touch, proc_type, fs_type;

View file

@ -0,0 +1,2 @@
/vendor/bin/dump/predump_focaltech\.sh u:object_r:predump_touch_exec:s0

View file

@ -0,0 +1,3 @@
genfscon proc /focaltech_touch u:object_r:proc_touch:s0

View file

@ -0,0 +1,3 @@
# touch predump script
allow predump_touch proc_touch:dir search;
allow predump_touch proc_touch:file rw_file_perms;