From 3496931400313534f098f03d3a15d9263d56820d Mon Sep 17 00:00:00 2001 From: Minchan Kim Date: Fri, 25 Mar 2022 12:49:41 -0700 Subject: [PATCH] sepolicy: allow dump page_pinner Provide necessary sepolicy for dumpreport to access page_pinner information in /sys/kernel/debug/page_pinner/{longterm_pinner, alloc_contig_failed} Bug: 226956571 Test: Run "adb bugreport " and verify it contains the output from page_pinner. Signed-off-by: Minchan Kim Change-Id: I7b00d4930fbaa2061537cd8c84616c1053c829cf --- whitechapel_pro/file.te | 1 + whitechapel_pro/genfs_contexts | 1 + whitechapel_pro/hal_dumpstate_default.te | 4 ++++ 3 files changed, 6 insertions(+) diff --git a/whitechapel_pro/file.te b/whitechapel_pro/file.te index 75f16663..c16169b8 100644 --- a/whitechapel_pro/file.te +++ b/whitechapel_pro/file.te @@ -58,6 +58,7 @@ type vendor_votable_debugfs, fs_type, debugfs_type; type vendor_battery_debugfs, fs_type, debugfs_type; type vendor_dmabuf_debugfs, fs_type, debugfs_type; type vendor_dri_debugfs, fs_type, debugfs_type; +type vendor_page_pinner_debugfs, fs_type, debugfs_type; # vendor extra images type modem_img_file, contextmount_type, file_type, vendor_file_type; diff --git a/whitechapel_pro/genfs_contexts b/whitechapel_pro/genfs_contexts index af411701..ed884251 100644 --- a/whitechapel_pro/genfs_contexts +++ b/whitechapel_pro/genfs_contexts @@ -150,6 +150,7 @@ genfscon debugfs /google_charger u:object genfscon debugfs /gvotables u:object_r:vendor_votable_debugfs:s0 genfscon debugfs /google_battery u:object_r:vendor_battery_debugfs:s0 genfscon debugfs /dri/0/crtc- u:object_r:vendor_dri_debugfs:s0 +genfscon debugfs /page_pinner u:object_r:vendor_page_pinner_debugfs:s0 # Battery genfscon sysfs /devices/platform/google,battery/power_supply/battery u:object_r:sysfs_batteryinfo:s0 diff --git a/whitechapel_pro/hal_dumpstate_default.te b/whitechapel_pro/hal_dumpstate_default.te index 0e4c34cf..c32f7ba9 100644 --- a/whitechapel_pro/hal_dumpstate_default.te +++ b/whitechapel_pro/hal_dumpstate_default.te @@ -109,6 +109,8 @@ userdebug_or_eng(` allow hal_dumpstate_default vendor_pm_genpd_debugfs:file r_file_perms; allow hal_dumpstate_default vendor_dri_debugfs:dir r_dir_perms; allow hal_dumpstate_default vendor_dri_debugfs:file r_file_perms; + allow hal_dumpstate_default vendor_page_pinner_debugfs:dir search; + allow hal_dumpstate_default vendor_page_pinner_debugfs:file r_file_perms; ') dontaudit hal_dumpstate_default mnt_vendor_file:dir search; @@ -129,3 +131,5 @@ dontaudit hal_dumpstate_default vendor_maxfg_debugfs:file r_file_perms; dontaudit hal_dumpstate_default vendor_pm_genpd_debugfs:file r_file_perms; dontaudit hal_dumpstate_default sysfs_bcl:dir r_dir_perms; dontaudit hal_dumpstate_default sysfs_bcl:file r_file_perms; +dontaudit hal_dumpstate_default vendor_page_pinner_debugfs:dir search; +dontaudit hal_dumpstate_default vendor_page_pinner_debugfs:file r_file_perms;