Add sepolicy of dumping LED file in dumpstate am: aa55cb6f2e
am: 9a70ccc6d6
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/19893210 Change-Id: I5d13a2d75fd6bdc939a101b0178922a36d87f38a Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
This commit is contained in:
commit
5ea1982643
4 changed files with 13 additions and 0 deletions
|
@ -80,6 +80,7 @@ type persist_sensor_reg_file, file_type, vendor_persist_type;
|
|||
type persist_ss_file, file_type, vendor_persist_type;
|
||||
type persist_uwb_file, file_type, vendor_persist_type;
|
||||
type persist_display_file, file_type, vendor_persist_type;
|
||||
type persist_leds_file, file_type, vendor_persist_type;
|
||||
|
||||
# CHRE
|
||||
type chre_socket, file_type;
|
||||
|
|
|
@ -220,6 +220,7 @@
|
|||
/mnt/vendor/persist/ss(/.*)? u:object_r:persist_ss_file:s0
|
||||
/mnt/vendor/persist/uwb(/.*)? u:object_r:persist_uwb_file:s0
|
||||
/mnt/vendor/persist/display(/.*)? u:object_r:persist_display_file:s0
|
||||
/mnt/vendor/persist/led(/.*)? u:object_r:persist_leds_file:s0
|
||||
|
||||
# Extra mount images
|
||||
/mnt/vendor/modem_img(/.*)? u:object_r:modem_img_file:s0
|
||||
|
|
|
@ -414,3 +414,7 @@ genfscon sysfs /module/trusty_core/parameters/use_high_wq u:obje
|
|||
|
||||
# EM Profile
|
||||
genfscon sysfs /kernel/pixel_em/active_profile u:object_r:sysfs_em_profile:s0
|
||||
|
||||
# Privacy LED
|
||||
genfscon sysfs /devices/platform/pwmleds/leds/green/brightness u:object_r:sysfs_leds:s0
|
||||
genfscon sysfs /devices/platform/pwmleds/leds/green/max_brightness u:object_r:sysfs_leds:s0
|
||||
|
|
|
@ -98,6 +98,13 @@ allow hal_dumpstate_default vendor_shell_exec:file execute_no_trans;
|
|||
allow hal_dumpstate_default proc_vendor_sched:dir r_dir_perms;
|
||||
allow hal_dumpstate_default proc_vendor_sched:file r_file_perms;
|
||||
|
||||
userdebug_or_eng(`
|
||||
allow hal_dumpstate_default sysfs_leds:dir search;
|
||||
allow hal_dumpstate_default sysfs_leds:file rw_file_perms;
|
||||
allow hal_dumpstate_default persist_file:dir search;
|
||||
r_dir_file(hal_dumpstate_default, persist_leds_file);
|
||||
')
|
||||
|
||||
get_prop(hal_dumpstate_default, vendor_camera_debug_prop);
|
||||
get_prop(hal_dumpstate_default, boottime_public_prop)
|
||||
get_prop(hal_dumpstate_default, vendor_camera_prop)
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue