Add sepolicy of dumping LED file in dumpstate am: aa55cb6f2e
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/19893210 Change-Id: Idb5424850f53d62e971faa9a208eaaf9e8731942 Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
This commit is contained in:
commit
9a70ccc6d6
4 changed files with 13 additions and 0 deletions
|
@ -83,6 +83,7 @@ type persist_sensor_reg_file, file_type, vendor_persist_type;
|
|||
type persist_ss_file, file_type, vendor_persist_type;
|
||||
type persist_uwb_file, file_type, vendor_persist_type;
|
||||
type persist_display_file, file_type, vendor_persist_type;
|
||||
type persist_leds_file, file_type, vendor_persist_type;
|
||||
|
||||
# CHRE
|
||||
type chre_socket, file_type;
|
||||
|
|
|
@ -223,6 +223,7 @@
|
|||
/mnt/vendor/persist/ss(/.*)? u:object_r:persist_ss_file:s0
|
||||
/mnt/vendor/persist/uwb(/.*)? u:object_r:persist_uwb_file:s0
|
||||
/mnt/vendor/persist/display(/.*)? u:object_r:persist_display_file:s0
|
||||
/mnt/vendor/persist/led(/.*)? u:object_r:persist_leds_file:s0
|
||||
|
||||
# Extra mount images
|
||||
/mnt/vendor/modem_img(/.*)? u:object_r:modem_img_file:s0
|
||||
|
|
|
@ -416,3 +416,7 @@ genfscon sysfs /module/trusty_core/parameters/use_high_wq u:obje
|
|||
|
||||
# EM Profile
|
||||
genfscon sysfs /kernel/pixel_em/active_profile u:object_r:sysfs_em_profile:s0
|
||||
|
||||
# Privacy LED
|
||||
genfscon sysfs /devices/platform/pwmleds/leds/green/brightness u:object_r:sysfs_leds:s0
|
||||
genfscon sysfs /devices/platform/pwmleds/leds/green/max_brightness u:object_r:sysfs_leds:s0
|
||||
|
|
|
@ -99,6 +99,13 @@ allow hal_dumpstate_default vendor_shell_exec:file execute_no_trans;
|
|||
allow hal_dumpstate_default proc_vendor_sched:dir r_dir_perms;
|
||||
allow hal_dumpstate_default proc_vendor_sched:file r_file_perms;
|
||||
|
||||
userdebug_or_eng(`
|
||||
allow hal_dumpstate_default sysfs_leds:dir search;
|
||||
allow hal_dumpstate_default sysfs_leds:file rw_file_perms;
|
||||
allow hal_dumpstate_default persist_file:dir search;
|
||||
r_dir_file(hal_dumpstate_default, persist_leds_file);
|
||||
')
|
||||
|
||||
get_prop(hal_dumpstate_default, vendor_camera_debug_prop);
|
||||
get_prop(hal_dumpstate_default, boottime_public_prop)
|
||||
get_prop(hal_dumpstate_default, vendor_camera_prop)
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue