From db03875ebe433a7431887d010e4222ab27836d07 Mon Sep 17 00:00:00 2001 From: Chris Kuiper Date: Mon, 3 May 2021 14:25:53 -0700 Subject: [PATCH] sepolicy: gs101: allow usf_reg_edit to run Provide necessary permissions to run usf_reg_edit from bugreport. Bug: 187081112 Test: Run "adb bugreport " and verify it contains the output from "usf_reg_edit save -". Change-Id: Iade132d93105d461d51273d19fe570d48cce46fe --- whitechapel/vendor/google/file.te | 1 + whitechapel/vendor/google/file_contexts | 1 + whitechapel/vendor/google/hal_dumpstate_default.te | 1 + 3 files changed, 3 insertions(+) diff --git a/whitechapel/vendor/google/file.te b/whitechapel/vendor/google/file.te index a2b0a4fd..8fcba17d 100644 --- a/whitechapel/vendor/google/file.te +++ b/whitechapel/vendor/google/file.te @@ -48,6 +48,7 @@ type sysfs_acpm_stats, sysfs_type, fs_type; # Vendor tools type vendor_usf_stats, vendor_file_type, file_type; +type vendor_usf_reg_edit, vendor_file_type, file_type; type vendor_dumpsys, vendor_file_type, file_type; # Sensors diff --git a/whitechapel/vendor/google/file_contexts b/whitechapel/vendor/google/file_contexts index fe5e846e..bd148ba7 100644 --- a/whitechapel/vendor/google/file_contexts +++ b/whitechapel/vendor/google/file_contexts @@ -16,6 +16,7 @@ /(vendor|system/vendor)/lib(64)?/libgpudataproducer\.so u:object_r:same_process_hal_file:s0 /vendor/bin/usf_stats u:object_r:vendor_usf_stats:s0 +/vendor/bin/usf_reg_edit u:object_r:vendor_usf_reg_edit:s0 /vendor/bin/dumpsys u:object_r:vendor_dumpsys:s0 # diff --git a/whitechapel/vendor/google/hal_dumpstate_default.te b/whitechapel/vendor/google/hal_dumpstate_default.te index c0871bb2..3b779998 100644 --- a/whitechapel/vendor/google/hal_dumpstate_default.te +++ b/whitechapel/vendor/google/hal_dumpstate_default.te @@ -26,6 +26,7 @@ allow hal_dumpstate_default vendor_rfsd_log_file:file r_file_perms; allow hal_dumpstate_default vendor_log_file:dir search; allow hal_dumpstate_default vendor_usf_stats:file execute_no_trans; +allow hal_dumpstate_default vendor_usf_reg_edit:file execute_no_trans; allow hal_dumpstate_default vendor_dumpsys:file execute_no_trans; allow hal_dumpstate_default sscoredump_vendor_data_crashinfo_file:dir r_dir_perms;