Evolution-X-Tensor/device_google_gs101
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Fix sepolicies for hal_power_stats_default

Browse source 
Bug: 182320246
Test: No more avc denied log messages for hal_power_stats_default
Change-Id: I1cd801bb4823e80bd5ea112fb0b7bdfaeabbdef5
This commit is contained in:
Benjamin Schwartz 2021-03-15 11:57:21 -07:00
parent 96d0c28dc4
commit ed8fdc9997
3 changed files with 9 additions and 12 deletions
Download patch file Download diff file Expand all files Collapse all files

12
tracking_denials/hal_power_stats_default.te
View file

@ -1,12 +0,0 @@
# b/171760721
dontaudit hal_power_stats_default sysfs:file { read };
dontaudit hal_power_stats_default sysfs:file { getattr };
dontaudit hal_power_stats_default sysfs:file { read };
dontaudit hal_power_stats_default sysfs:file { getattr };
dontaudit hal_power_stats_default sysfs:file { open };
dontaudit hal_power_stats_default sysfs:file { getattr };
dontaudit hal_power_stats_default sysfs:dir { read };
dontaudit hal_power_stats_default sysfs:dir { open };
dontaudit hal_power_stats_default sysfs:file { read };
dontaudit hal_power_stats_default sysfs:file { open };
dontaudit hal_power_stats_default sysfs:file { open };

7
whitechapel/vendor/google/genfs_contexts vendored
View file

@ -171,6 +171,7 @@ genfscon sysfs /devices/platform/17000020.devfreq_int/devfreq/17000020.devfreq_i
genfscon sysfs /devices/platform/17000040.devfreq_disp/devfreq/17000040.devfreq_disp/time_in_state u:object_r:sysfs_cpu:s0 genfscon sysfs /devices/platform/17000040.devfreq_disp/devfreq/17000040.devfreq_disp/time_in_state u:object_r:sysfs_cpu:s0
genfscon sysfs /devices/platform/17000050.devfreq_cam/devfreq/17000050.devfreq_cam/time_in_state u:object_r:sysfs_cpu:s0 genfscon sysfs /devices/platform/17000050.devfreq_cam/devfreq/17000050.devfreq_cam/time_in_state u:object_r:sysfs_cpu:s0
genfscon sysfs /devices/platform/1c500000.mali/time_in_state u:object_r:sysfs_cpu:s0 genfscon sysfs /devices/platform/1c500000.mali/time_in_state u:object_r:sysfs_cpu:s0
genfscon sysfs /devices/platform/1c500000.mali/uid_time_in_state u:object_r:sysfs_cpu:s0
genfscon sysfs /devices/platform/17000080.devfreq_bo/devfreq/17000080.devfreq_bo/time_in_state u:object_r:sysfs_cpu:s0 genfscon sysfs /devices/platform/17000080.devfreq_bo/devfreq/17000080.devfreq_bo/time_in_state u:object_r:sysfs_cpu:s0
genfscon sysfs /devices/platform/17000060.devfreq_tnr/devfreq/17000060.devfreq_tnr/time_in_state u:object_r:sysfs_cpu:s0 genfscon sysfs /devices/platform/17000060.devfreq_tnr/devfreq/17000060.devfreq_tnr/time_in_state u:object_r:sysfs_cpu:s0
genfscon sysfs /devices/platform/17000070.devfreq_mfc/devfreq/17000070.devfreq_mfc/time_in_state u:object_r:sysfs_cpu:s0 genfscon sysfs /devices/platform/17000070.devfreq_mfc/devfreq/17000070.devfreq_mfc/time_in_state u:object_r:sysfs_cpu:s0
@ -181,6 +182,12 @@ genfscon sysfs /devices/platform/10970000.hsi2c/i2c-4/4-0050/4-00500/nvmem
# Broadcom # Broadcom
genfscon sysfs /module/bcmdhd4389 u:object_r:sysfs_bcmdhd:s0 genfscon sysfs /module/bcmdhd4389 u:object_r:sysfs_bcmdhd:s0
# Power Stats
genfscon sysfs /devices/platform/cpif/modem/power_stats u:object_r:sysfs_power_stats:s0
genfscon sysfs /devices/platform/10960000.hsi2c/i2c-3/3-0008/power_stats u:object_r:sysfs_power_stats:s0
genfscon sysfs /devices/platform/11920000.pcie/power_stats u:object_r:sysfs_power_stats:s0
genfscon sysfs /devices/platform/14520000.pcie/power_stats u:object_r:sysfs_power_stats:s0
# debugfs # debugfs
genfscon debugfs /maxfg u:object_r:vendor_maxfg_debugfs:s0 genfscon debugfs /maxfg u:object_r:vendor_maxfg_debugfs:s0

2
whitechapel/vendor/google/hal_power_stats_default.te vendored
View file

@ -4,6 +4,7 @@ allow hal_power_stats_default sysfs_scsi_devices_0000:file r_file_perms;
# getStats AIDL callback to each power entry # getStats AIDL callback to each power entry
binder_call(hal_power_stats_default, hal_bluetooth_btlinux) binder_call(hal_power_stats_default, hal_bluetooth_btlinux)
r_dir_file(hal_power_stats_default, sysfs_iio_devices)
allow hal_power_stats_default odpm_config_file:dir search; allow hal_power_stats_default odpm_config_file:dir search;
allow hal_power_stats_default odpm_config_file:file r_file_perms; allow hal_power_stats_default odpm_config_file:file r_file_perms;
allow hal_power_stats_default sysfs_odpm:dir search; allow hal_power_stats_default sysfs_odpm:dir search;
@ -11,6 +12,7 @@ allow hal_power_stats_default sysfs_odpm:file rw_file_perms;
binder_call(hal_power_stats_default, citadeld) binder_call(hal_power_stats_default, citadeld)
r_dir_file(hal_power_stats_default, sysfs_aoc) r_dir_file(hal_power_stats_default, sysfs_aoc)
r_dir_file(hal_power_stats_default, sysfs_cpu)
r_dir_file(hal_power_stats_default, sysfs_leds) r_dir_file(hal_power_stats_default, sysfs_leds)
r_dir_file(hal_power_stats_default, sysfs_acpm_stats) r_dir_file(hal_power_stats_default, sysfs_acpm_stats)
r_dir_file(hal_power_stats_default, sysfs_wifi) r_dir_file(hal_power_stats_default, sysfs_wifi)