Fix rlsservice sepolicy
Allows bugreport generation Bug: 315255760 Bug: 309379598 Test: abd bugreport & ensure lack of rls avc denied logs Change-Id: Ib3fc7b089c7aea4aea69f219d4c19847d39b0729
This commit is contained in:
parent
422638059a
commit
548c2f184d
3 changed files with 5 additions and 2 deletions
|
@ -1,6 +1,5 @@
|
|||
chre vendor_data_file dir b/301948771
|
||||
dump_modem device chr_file b/305600375
|
||||
dumpstate rlsservice binder b/309379598
|
||||
dumpstate virtual_camera binder b/312894628
|
||||
dumpstate virtual_camera process b/312894628
|
||||
hal_power_default hal_power_default capability b/240632824
|
||||
|
|
2
whitechapel/vendor/google/dumpstate.te
vendored
2
whitechapel/vendor/google/dumpstate.te
vendored
|
@ -13,4 +13,4 @@ allow dumpstate modem_efs_file:dir getattr;
|
|||
allow dumpstate modem_img_file:dir getattr;
|
||||
allow dumpstate modem_userdata_file:dir getattr;
|
||||
allow dumpstate fuse:dir search;
|
||||
|
||||
allow dumpstate rlsservice:binder call;
|
4
whitechapel/vendor/google/rlsservice.te
vendored
4
whitechapel/vendor/google/rlsservice.te
vendored
|
@ -36,3 +36,7 @@ allow rlsservice apex_info_file:file r_file_perms;
|
|||
|
||||
# Allow read camera property
|
||||
get_prop(rlsservice, vendor_camera_prop);
|
||||
|
||||
# Allow rlsservice bugreport generation
|
||||
allow rlsservice dumpstate:fd use;
|
||||
allow rlsservice dumpstate:fifo_file write;
|
Loading…
Add table
Add a link
Reference in a new issue