Since production devices(with user builds) must not mount debugfs, provide dumpstate HAL permission to access debugfs only in userdebug/eng builds. Also, delete dumpstate domain's access to vendor_dmabuf_debugfs(/d/dma_buf/bufinfo) since dumpstate now obtains the same information from /sys/kernel/dmabuf. Test: build Bug: 186500818 Change-Id: I17007d495fba6332bbf17dc7d030e5c6e4d5248b
16 lines
468 B
Text
16 lines
468 B
Text
dump_hal(hal_telephony)
|
|
dump_hal(hal_graphics_composer)
|
|
|
|
userdebug_or_eng(`
|
|
allow dumpstate media_rw_data_file:file append;
|
|
')
|
|
|
|
allow dumpstate sysfs_scsi_devices_0000:file r_file_perms;
|
|
allow dumpstate persist_file:dir r_dir_perms;
|
|
|
|
allow dumpstate modem_efs_file:dir getattr;
|
|
allow dumpstate modem_img_file:dir getattr;
|
|
allow dumpstate modem_userdata_file:dir getattr;
|
|
allow dumpstate fuse:dir search;
|
|
|
|
dontaudit dumpstate vendor_dmabuf_debugfs:file r_file_perms;
|