Merge "sepolicy: gs101: allow usf_reg_edit to run" into sc-dev

This commit is contained in:
Chris Kuiper 2021-05-04 22:33:57 +00:00 committed by Android (Google) Code Review
commit d0d0304443
3 changed files with 3 additions and 0 deletions

View file

@ -48,6 +48,7 @@ type sysfs_acpm_stats, sysfs_type, fs_type;
# Vendor tools
type vendor_usf_stats, vendor_file_type, file_type;
type vendor_usf_reg_edit, vendor_file_type, file_type;
type vendor_dumpsys, vendor_file_type, file_type;
# Sensors

View file

@ -16,6 +16,7 @@
/(vendor|system/vendor)/lib(64)?/libgpudataproducer\.so u:object_r:same_process_hal_file:s0
/vendor/bin/usf_stats u:object_r:vendor_usf_stats:s0
/vendor/bin/usf_reg_edit u:object_r:vendor_usf_reg_edit:s0
/vendor/bin/dumpsys u:object_r:vendor_dumpsys:s0
#

View file

@ -26,6 +26,7 @@ allow hal_dumpstate_default vendor_rfsd_log_file:file r_file_perms;
allow hal_dumpstate_default vendor_log_file:dir search;
allow hal_dumpstate_default vendor_usf_stats:file execute_no_trans;
allow hal_dumpstate_default vendor_usf_reg_edit:file execute_no_trans;
allow hal_dumpstate_default vendor_dumpsys:file execute_no_trans;
allow hal_dumpstate_default sscoredump_vendor_data_crashinfo_file:dir r_dir_perms;