Merge "Add SE policies for HWC logs"

This commit is contained in:
TreeHugger Robot 2022-09-07 12:28:32 +00:00 committed by Android (Google) Code Review
commit ae2feed036
4 changed files with 9 additions and 0 deletions

View file

@ -7,6 +7,7 @@ type vendor_media_data_file, file_type, data_file_type;
type vendor_log_file, file_type, data_file_type;
type vendor_cbd_log_file, file_type, data_file_type;
type vendor_dmd_log_file, file_type, data_file_type;
type vendor_hwc_log_file, file_type, data_file_type;
type vendor_rfsd_log_file, file_type, data_file_type;
type vendor_dump_log_file, file_type, data_file_type;
type vendor_rild_log_file, file_type, data_file_type;

View file

@ -154,6 +154,7 @@
/data/vendor/log(/.*)? u:object_r:vendor_log_file:s0
/data/vendor/log/cbd(/.*)? u:object_r:vendor_cbd_log_file:s0
/data/vendor/log/dmd(/.*)? u:object_r:vendor_dmd_log_file:s0
/data/vendor/log/hwc(/.*)? u:object_r:vendor_hwc_log_file:s0
/data/vendor/log/rfsd(/.*)? u:object_r:vendor_rfsd_log_file:s0
/data/vendor/log/dump(/.*)? u:object_r:vendor_dump_log_file:s0
/data/vendor/log/rild(/.*)? u:object_r:vendor_rild_log_file:s0

View file

@ -20,6 +20,9 @@ allow hal_dumpstate_default shell_data_file:file getattr;
allow hal_dumpstate_default radio_vendor_data_file:dir create_dir_perms;
allow hal_dumpstate_default radio_vendor_data_file:file create_file_perms;
allow hal_dumpstate_default vendor_hwc_log_file:dir r_dir_perms;
allow hal_dumpstate_default vendor_hwc_log_file:file r_file_perms;
allow hal_dumpstate_default vendor_rfsd_log_file:dir r_dir_perms;
allow hal_dumpstate_default vendor_rfsd_log_file:file r_file_perms;

View file

@ -4,3 +4,7 @@ allow hal_graphics_composer_default sysfs_display:file rw_file_perms;
# allow HWC to access power hal
binder_call(hal_graphics_composer_default, hal_power_default);
hal_client_domain(hal_graphics_composer_default, hal_power);
# allow HWC to write log file
allow hal_graphics_composer_default vendor_hwc_log_file:dir rw_dir_perms;
allow hal_graphics_composer_default vendor_hwc_log_file:file create_file_perms;