allow hal_dumpstate_default to access cma debugfs am: 4bc7128afe

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/18843535

Change-Id: Ia0997d18fdae581c82b9a80e84e518e1311d1887
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
This commit is contained in:
Minchan Kim 2022-06-13 23:04:10 +00:00 committed by Automerger Merge Worker
commit 10398a5cbb
3 changed files with 6 additions and 0 deletions

View file

@ -67,6 +67,7 @@ type vendor_battery_debugfs, fs_type, debugfs_type;
type vendor_dmabuf_debugfs, fs_type, debugfs_type;
type vendor_dri_debugfs, fs_type, debugfs_type;
type vendor_page_pinner_debugfs, fs_type, debugfs_type;
type vendor_cma_debugfs, fs_type, debugfs_type;
# vendor extra images
type modem_img_file, contextmount_type, file_type, vendor_file_type;

View file

@ -180,6 +180,7 @@ genfscon debugfs /gvotables u:object
genfscon debugfs /google_battery u:object_r:vendor_battery_debugfs:s0
genfscon debugfs /dri/0/crtc- u:object_r:vendor_dri_debugfs:s0
genfscon debugfs /page_pinner u:object_r:vendor_page_pinner_debugfs:s0
genfscon debugfs /cma u:object_r:vendor_cma_debugfs:s0
# Battery
genfscon sysfs /devices/platform/google,battery/power_supply/battery u:object_r:sysfs_batteryinfo:s0

View file

@ -124,6 +124,8 @@ userdebug_or_eng(`
allow hal_dumpstate_default vendor_dri_debugfs:file r_file_perms;
allow hal_dumpstate_default vendor_page_pinner_debugfs:dir search;
allow hal_dumpstate_default vendor_page_pinner_debugfs:file r_file_perms;
allow hal_dumpstate_default vendor_cma_debugfs:dir r_dir_perms;
allow hal_dumpstate_default vendor_cma_debugfs:file r_file_perms;
')
dontaudit hal_dumpstate_default mnt_vendor_file:dir search;
@ -146,3 +148,5 @@ dontaudit hal_dumpstate_default sysfs_bcl:dir r_dir_perms;
dontaudit hal_dumpstate_default sysfs_bcl:file r_file_perms;
dontaudit hal_dumpstate_default vendor_page_pinner_debugfs:dir search;
dontaudit hal_dumpstate_default vendor_page_pinner_debugfs:file r_file_perms;
dontaudit hal_dumpstate_default vendor_cma_debugfs:dir r_dir_perms;
dontaudit hal_dumpstate_default vendor_cma_debugfs:file r_file_perms;