Fix rlsservice sepolicy

Allows bugreport generation

Bug: 315255760
Bug: 309379598
Test: abd bugreport & ensure lack of rls avc denied logs
Change-Id: Ib3fc7b089c7aea4aea69f219d4c19847d39b0729
This commit is contained in:
Boon Jun Soh 2023-12-08 19:00:04 +08:00
parent 422638059a
commit 548c2f184d
3 changed files with 5 additions and 2 deletions

View file

@ -1,6 +1,5 @@
chre vendor_data_file dir b/301948771
dump_modem device chr_file b/305600375
dumpstate rlsservice binder b/309379598
dumpstate virtual_camera binder b/312894628
dumpstate virtual_camera process b/312894628
hal_power_default hal_power_default capability b/240632824

View file

@ -13,4 +13,4 @@ allow dumpstate modem_efs_file:dir getattr;
allow dumpstate modem_img_file:dir getattr;
allow dumpstate modem_userdata_file:dir getattr;
allow dumpstate fuse:dir search;
allow dumpstate rlsservice:binder call;

View file

@ -36,3 +36,7 @@ allow rlsservice apex_info_file:file r_file_perms;
# Allow read camera property
get_prop(rlsservice, vendor_camera_prop);
# Allow rlsservice bugreport generation
allow rlsservice dumpstate:fd use;
allow rlsservice dumpstate:fifo_file write;