diff --git a/tracking_denials/hal_dumpstate_default.te b/tracking_denials/hal_dumpstate_default.te deleted file mode 100644 index cfc9c4eb..00000000 --- a/tracking_denials/hal_dumpstate_default.te +++ /dev/null @@ -1,2 +0,0 @@ -# b/188752787 -dontaudit hal_dumpstate_default sysfs_aoc:dir search; diff --git a/whitechapel/vendor/google/file.te b/whitechapel/vendor/google/file.te index 36948935..a7eeea53 100644 --- a/whitechapel/vendor/google/file.te +++ b/whitechapel/vendor/google/file.te @@ -93,6 +93,7 @@ type proc_touch, proc_type, fs_type, mlstrustedobject; type sysfs_touch, sysfs_type, fs_type; # AOC +type sysfs_aoc_dumpstate, sysfs_type, fs_type; type sysfs_aoc_boottime, sysfs_type, fs_type; type sysfs_aoc_firmware, sysfs_type, fs_type; type sysfs_aoc, sysfs_type, fs_type; diff --git a/whitechapel/vendor/google/genfs_contexts b/whitechapel/vendor/google/genfs_contexts index 610e4cc2..d83ae199 100644 --- a/whitechapel/vendor/google/genfs_contexts +++ b/whitechapel/vendor/google/genfs_contexts @@ -4,6 +4,10 @@ genfscon sysfs /devices/platform/19000000.aoc/firmware u:ob genfscon sysfs /devices/platform/19000000.aoc u:object_r:sysfs_aoc:s0 genfscon sysfs /devices/platform/19000000.aoc/reset u:object_r:sysfs_aoc_reset:s0 +genfscon sysfs /devices/platform/19000000.aoc/services u:object_r:sysfs_aoc_dumpstate:s0 +genfscon sysfs /devices/platform/19000000.aoc/restart_count u:object_r:sysfs_aoc_dumpstate:s0 +genfscon sysfs /devices/platform/19000000.aoc/coredump_count u:object_r:sysfs_aoc_dumpstate:s0 + # WiFi genfscon sysfs /wifi u:object_r:sysfs_wifi:s0 # Battery diff --git a/whitechapel/vendor/google/hal_dumpstate_default.te b/whitechapel/vendor/google/hal_dumpstate_default.te index 10f9c0cd..b9385364 100644 --- a/whitechapel/vendor/google/hal_dumpstate_default.te +++ b/whitechapel/vendor/google/hal_dumpstate_default.te @@ -39,6 +39,9 @@ allow hal_dumpstate_default sscoredump_vendor_data_crashinfo_file:file r_file_pe allow hal_dumpstate_default sysfs_acpm_stats:dir r_dir_perms; allow hal_dumpstate_default sysfs_acpm_stats:file r_file_perms; +allow hal_dumpstate_default sysfs_aoc:dir r_dir_perms; +allow hal_dumpstate_default sysfs_aoc_dumpstate:file r_file_perms; + allow hal_dumpstate_default sysfs_spi:dir search; allow hal_dumpstate_default sysfs_spi:file rw_file_perms;