device_google_gs101/whitechapel/vendor/google/dumpstate.te
Hridya Valsaraju 70551d2bc9 Let debugfs be accessed only for non-user builds
Since production devices(with user builds) must not mount debugfs,
provide dumpstate HAL permission to access debugfs only in userdebug/eng
builds.

Also, delete dumpstate domain's access to
vendor_dmabuf_debugfs(/d/dma_buf/bufinfo) since dumpstate now obtains
the same information from /sys/kernel/dmabuf.

Test: build
Bug: 186500818
Change-Id: I17007d495fba6332bbf17dc7d030e5c6e4d5248b
2021-05-11 17:35:20 -07:00

16 lines
468 B
Text

dump_hal(hal_telephony)
dump_hal(hal_graphics_composer)
userdebug_or_eng(`
allow dumpstate media_rw_data_file:file append;
')
allow dumpstate sysfs_scsi_devices_0000:file r_file_perms;
allow dumpstate persist_file:dir r_dir_perms;
allow dumpstate modem_efs_file:dir getattr;
allow dumpstate modem_img_file:dir getattr;
allow dumpstate modem_userdata_file:dir getattr;
allow dumpstate fuse:dir search;
dontaudit dumpstate vendor_dmabuf_debugfs:file r_file_perms;