From 1d379dfbc9b4fcb9843051f3eb6f9cfdbefda085 Mon Sep 17 00:00:00 2001 From: Chris Fries Date: Thu, 8 Apr 2021 09:34:26 -0500 Subject: [PATCH] Give hal_dumpstate_default read access to slog files Bug: 184821900 Bugreports require access to "silent log" files. cp : type=1400 audit(0.0:20): avc: denied { getattr } for path="/data/vendor/radio/logs/always-on/sbuff_20210408191538.sdm" dev="dm-11" ino=9075 scontext=u:r:hal_dumpstate_default:s0 tcontext=u:object_r:vendor_slog_file:s0 tclass=file permissive=0 Change-Id: Iacc4778d1242f304e9519180437ceb0f0e9d350d --- whitechapel/vendor/google/hal_dumpstate_default.te | 2 ++ 1 file changed, 2 insertions(+) diff --git a/whitechapel/vendor/google/hal_dumpstate_default.te b/whitechapel/vendor/google/hal_dumpstate_default.te index 061dcf8e..16d925de 100644 --- a/whitechapel/vendor/google/hal_dumpstate_default.te +++ b/whitechapel/vendor/google/hal_dumpstate_default.te @@ -53,9 +53,11 @@ allow hal_dumpstate_default sysfs_thermal:dir r_dir_perms; allow hal_dumpstate_default sysfs_thermal:file r_file_perms; allow hal_dumpstate_default sysfs_thermal:lnk_file read; +# Modem logs allow hal_dumpstate_default modem_efs_file:dir search; allow hal_dumpstate_default modem_efs_file:file r_file_perms; allow hal_dumpstate_default modem_stat_data_file:file r_file_perms; +allow hal_dumpstate_default vendor_slog_file:file r_file_perms; allow hal_dumpstate_default block_device:dir r_dir_perms;