sepolicy: gs101: allow duump page_pinner

Provide necessary sepolicy for dumpreport to access page_pinner
information in /sys/kernel/debug/page_pinner/{longterm_pinner,
alloc_contig_failed}

Bug: 187552095
Test: Run "adb bugreport <zip>" and verify it contains the output
      from page_pinner.
Signed-off-by: Minchan Kim <minchan@google.com>
Change-Id: I2abc48f2a156718fd4bed3b51bdd285c6bf9f175
This commit is contained in:
Minchan Kim 2021-05-07 12:59:26 -07:00
parent bfbf29c18c
commit 304a32c17e
3 changed files with 8 additions and 0 deletions

View file

@ -25,6 +25,7 @@ type vendor_rpmbmock_data_file, file_type, data_file_type;
# Exynos debugfs # Exynos debugfs
type vendor_ion_debugfs, fs_type, debugfs_type; type vendor_ion_debugfs, fs_type, debugfs_type;
type vendor_dmabuf_debugfs, fs_type, debugfs_type; type vendor_dmabuf_debugfs, fs_type, debugfs_type;
type vendor_page_pinner_debugfs, fs_type, debugfs_type, sysfs_type;
type vendor_mali_debugfs, fs_type, debugfs_type; type vendor_mali_debugfs, fs_type, debugfs_type;
type vendor_dri_debugfs, fs_type, debugfs_type; type vendor_dri_debugfs, fs_type, debugfs_type;
type vendor_pm_genpd_debugfs, fs_type, debugfs_type; type vendor_pm_genpd_debugfs, fs_type, debugfs_type;

View file

@ -327,6 +327,7 @@ genfscon debugfs /maxfg_flip
genfscon debugfs /dma_buf/bufinfo u:object_r:vendor_dmabuf_debugfs:s0 genfscon debugfs /dma_buf/bufinfo u:object_r:vendor_dmabuf_debugfs:s0
genfscon debugfs /dri/0/crtc- u:object_r:vendor_dri_debugfs:s0 genfscon debugfs /dri/0/crtc- u:object_r:vendor_dri_debugfs:s0
genfscon debugfs /ion u:object_r:vendor_ion_debugfs:s0 genfscon debugfs /ion u:object_r:vendor_ion_debugfs:s0
genfscon debugfs /page_pinner u:object_r:vendor_page_pinner_debugfs:s0
genfscon debugfs /pm_genpd/pm_genpd_summary u:object_r:vendor_pm_genpd_debugfs:s0 genfscon debugfs /pm_genpd/pm_genpd_summary u:object_r:vendor_pm_genpd_debugfs:s0
genfscon debugfs /regmap u:object_r:vendor_regmap_debugfs:s0 genfscon debugfs /regmap u:object_r:vendor_regmap_debugfs:s0
genfscon debugfs /usb u:object_r:vendor_usb_debugfs:s0 genfscon debugfs /usb u:object_r:vendor_usb_debugfs:s0

View file

@ -102,6 +102,9 @@ userdebug_or_eng(`
allow hal_dumpstate_default vendor_ion_debugfs:dir r_dir_perms; allow hal_dumpstate_default vendor_ion_debugfs:dir r_dir_perms;
allow hal_dumpstate_default vendor_ion_debugfs:file r_file_perms; allow hal_dumpstate_default vendor_ion_debugfs:file r_file_perms;
allow hal_dumpstate_default vendor_page_pinner_debugfs:dir search;
allow hal_dumpstate_default vendor_page_pinner_debugfs:file r_file_perms;
allow hal_dumpstate_default vendor_dri_debugfs:file r_file_perms; allow hal_dumpstate_default vendor_dri_debugfs:file r_file_perms;
allow hal_dumpstate_default vendor_dri_debugfs:dir search; allow hal_dumpstate_default vendor_dri_debugfs:dir search;
@ -142,6 +145,9 @@ userdebug_or_eng(`
dontaudit hal_dumpstate_default vendor_ion_debugfs:dir r_dir_perms; dontaudit hal_dumpstate_default vendor_ion_debugfs:dir r_dir_perms;
dontaudit hal_dumpstate_default vendor_ion_debugfs:file r_file_perms; dontaudit hal_dumpstate_default vendor_ion_debugfs:file r_file_perms;
dontaudit hal_dumpstate_default vendor_page_pinner_debugfs:dir search;
dontaudit hal_dumpstate_default vendor_page_pinner_debugfs:file r_file_perms;
dontaudit hal_dumpstate_default vendor_dri_debugfs:file r_file_perms; dontaudit hal_dumpstate_default vendor_dri_debugfs:file r_file_perms;
dontaudit hal_dumpstate_default vendor_dri_debugfs:dir search; dontaudit hal_dumpstate_default vendor_dri_debugfs:dir search;