Fix rlsservice sepolicy

Allows bugreport generation

Bug: 315255760
Bug: 309379465
Test: abd bugreport & ensure lack of rls avc denied logs
Change-Id: Ic390d6ddd6bac78e5979c78bc6d02262f08b3468
This commit is contained in:
Boon Jun Soh 2023-12-08 18:54:45 +08:00 committed by Treehugger Robot
parent c118ee96ab
commit a4fa4427bc
3 changed files with 5 additions and 2 deletions

View file

@ -1,4 +1,3 @@
dumpstate rlsservice binder b/309379465
hal_face_default traced_producer_socket sock_file b/305600808
hal_power_default hal_power_default capability b/237492146
incidentd debugfs_wakeup_sources file b/282626428

View file

@ -13,4 +13,4 @@ allow dumpstate modem_efs_file:dir r_dir_perms;
allow dumpstate modem_userdata_file:dir r_dir_perms;
allow dumpstate modem_img_file:dir r_dir_perms;
allow dumpstate fuse:dir search;
allow dumpstate rlsservice:binder call;

View file

@ -32,3 +32,7 @@ allow rlsservice apex_info_file:file r_file_perms;
# Allow read camera property
get_prop(rlsservice, vendor_camera_prop);
# Allow rlsservice bugreport generation
allow rlsservice dumpstate:fd use;
allow rlsservice dumpstate:fifo_file write;