From 560d12c3f15ec96b33045cb65b0a48ef24186d38 Mon Sep 17 00:00:00 2001 From: Ken Huang Date: Tue, 18 May 2021 16:51:30 +0800 Subject: [PATCH] dumpstate: add sepolicy for hal_dumpstate to access sysfs_display Allow dumpstate to read panel extra info. Bug: 183061481 Test: adb bugreport Change-Id: I1902f28c2edceeb5b74ce655f83c8aea7c60825b --- whitechapel/vendor/google/genfs_contexts | 10 ++++++---- whitechapel/vendor/google/hal_dumpstate_default.te | 2 ++ 2 files changed, 8 insertions(+), 4 deletions(-) diff --git a/whitechapel/vendor/google/genfs_contexts b/whitechapel/vendor/google/genfs_contexts index 84388ff0..ae081e4a 100644 --- a/whitechapel/vendor/google/genfs_contexts +++ b/whitechapel/vendor/google/genfs_contexts @@ -168,10 +168,12 @@ genfscon sysfs /kernel/vendor_sched/util_threshold u genfscon sysfs /devices/platform/10940000.spi/spi_master/spi5/spi5.0/nstandby u:object_r:sysfs_gps:s0 # Display -genfscon sysfs /devices/platform/1c2c0000.drmdsim/1c2c0000.drmdsim.0/gamma u:object_r:sysfs_display:s0 -genfscon sysfs /devices/platform/1c2d0000.drmdsim/1c2d0000.drmdsim.0/gamma u:object_r:sysfs_display:s0 -genfscon sysfs /devices/platform/1c2c0000.drmdsim/hs_clock u:object_r:sysfs_display:s0 -genfscon sysfs /devices/platform/1c2d0000.drmdsim/hs_clock u:object_r:sysfs_display:s0 +genfscon sysfs /devices/platform/1c2c0000.drmdsim/1c2c0000.drmdsim.0/gamma u:object_r:sysfs_display:s0 +genfscon sysfs /devices/platform/1c2d0000.drmdsim/1c2d0000.drmdsim.0/gamma u:object_r:sysfs_display:s0 +genfscon sysfs /devices/platform/1c2c0000.drmdsim/1c2c0000.drmdsim.0/panel_extinfo u:object_r:sysfs_display:s0 +genfscon sysfs /devices/platform/1c2d0000.drmdsim/1c2d0000.drmdsim.0/panel_extinfo u:object_r:sysfs_display:s0 +genfscon sysfs /devices/platform/1c2c0000.drmdsim/hs_clock u:object_r:sysfs_display:s0 +genfscon sysfs /devices/platform/1c2d0000.drmdsim/hs_clock u:object_r:sysfs_display:s0 # TODO(b/184768835): remove this once the bug is fixed # Display / LHBM (Local High Brightness Mode) diff --git a/whitechapel/vendor/google/hal_dumpstate_default.te b/whitechapel/vendor/google/hal_dumpstate_default.te index 38381b15..b109a5f8 100644 --- a/whitechapel/vendor/google/hal_dumpstate_default.te +++ b/whitechapel/vendor/google/hal_dumpstate_default.te @@ -90,6 +90,8 @@ binder_call(hal_dumpstate_default, citadeld); allow hal_dumpstate_default vendor_displaycolor_service:service_manager find; binder_call(hal_dumpstate_default, hal_graphics_composer_default); +allow hal_dumpstate_default sysfs_display:dir r_dir_perms; +allow hal_dumpstate_default sysfs_display:file r_file_perms; userdebug_or_eng(` allow hal_dumpstate_default mnt_vendor_file:dir search;