From ab6df9cc18d886cf4741ceb8105f4480a729bfdd Mon Sep 17 00:00:00 2001 From: Qinchen Gu Date: Mon, 10 May 2021 17:06:01 -0700 Subject: [PATCH] Add SELinux policy for allowing dumping GSC info Bug: 185939493 Test: adb bugreport. Look for GSC-related info. Change-Id: I30dbb51781526d763205594283ca3b808f45d28f --- whitechapel/vendor/google/hal_dumpstate_default.te | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/whitechapel/vendor/google/hal_dumpstate_default.te b/whitechapel/vendor/google/hal_dumpstate_default.te index c0871bb2..7d6d55df 100644 --- a/whitechapel/vendor/google/hal_dumpstate_default.te +++ b/whitechapel/vendor/google/hal_dumpstate_default.te @@ -77,6 +77,10 @@ allow hal_dumpstate_default debugfs_f2fs:file r_file_perms; allow hal_dumpstate_default sysfs_scsi_devices_0000:dir r_dir_perms; allow hal_dumpstate_default sysfs_scsi_devices_0000:file r_file_perms; +allow hal_dumpstate_default citadeld_service:service_manager find; +allow hal_dumpstate_default citadel_updater_exec:file execute_no_trans; +binder_call(hal_dumpstate_default, citadeld); + allow hal_dumpstate_default vendor_displaycolor_service:service_manager find; binder_call(hal_dumpstate_default, hal_graphics_composer_default);