Fix rlsservice sepolicy
Allows bugreport generation Bug: 315255760 Bug: 309379465 Test: abd bugreport & ensure lack of rls avc denied logs Change-Id: Ic390d6ddd6bac78e5979c78bc6d02262f08b3468
This commit is contained in:
parent
c118ee96ab
commit
a4fa4427bc
3 changed files with 5 additions and 2 deletions
|
@ -1,4 +1,3 @@
|
|||
dumpstate rlsservice binder b/309379465
|
||||
hal_face_default traced_producer_socket sock_file b/305600808
|
||||
hal_power_default hal_power_default capability b/237492146
|
||||
incidentd debugfs_wakeup_sources file b/282626428
|
||||
|
|
|
@ -13,4 +13,4 @@ allow dumpstate modem_efs_file:dir r_dir_perms;
|
|||
allow dumpstate modem_userdata_file:dir r_dir_perms;
|
||||
allow dumpstate modem_img_file:dir r_dir_perms;
|
||||
allow dumpstate fuse:dir search;
|
||||
|
||||
allow dumpstate rlsservice:binder call;
|
|
@ -32,3 +32,7 @@ allow rlsservice apex_info_file:file r_file_perms;
|
|||
|
||||
# Allow read camera property
|
||||
get_prop(rlsservice, vendor_camera_prop);
|
||||
|
||||
# Allow rlsservice bugreport generation
|
||||
allow rlsservice dumpstate:fd use;
|
||||
allow rlsservice dumpstate:fifo_file write;
|
Loading…
Add table
Add a link
Reference in a new issue