Add sepolicy of dumping LED file in dumpstate

Bug: 242300919
Change-Id: I14b0af18244c4a71fd7908fdb35e2e86354e02e0
This commit is contained in:
Chungjui Fan 2022-09-08 09:50:57 +00:00 committed by TreeHugger Robot
parent a658683689
commit aa55cb6f2e
4 changed files with 13 additions and 0 deletions

View file

@ -83,6 +83,7 @@ type persist_sensor_reg_file, file_type, vendor_persist_type;
type persist_ss_file, file_type, vendor_persist_type;
type persist_uwb_file, file_type, vendor_persist_type;
type persist_display_file, file_type, vendor_persist_type;
type persist_leds_file, file_type, vendor_persist_type;
# CHRE
type chre_socket, file_type;

View file

@ -223,6 +223,7 @@
/mnt/vendor/persist/ss(/.*)? u:object_r:persist_ss_file:s0
/mnt/vendor/persist/uwb(/.*)? u:object_r:persist_uwb_file:s0
/mnt/vendor/persist/display(/.*)? u:object_r:persist_display_file:s0
/mnt/vendor/persist/led(/.*)? u:object_r:persist_leds_file:s0
# Extra mount images
/mnt/vendor/modem_img(/.*)? u:object_r:modem_img_file:s0

View file

@ -416,3 +416,7 @@ genfscon sysfs /module/trusty_core/parameters/use_high_wq u:obje
# EM Profile
genfscon sysfs /kernel/pixel_em/active_profile u:object_r:sysfs_em_profile:s0
# Privacy LED
genfscon sysfs /devices/platform/pwmleds/leds/green/brightness u:object_r:sysfs_leds:s0
genfscon sysfs /devices/platform/pwmleds/leds/green/max_brightness u:object_r:sysfs_leds:s0

View file

@ -99,6 +99,13 @@ allow hal_dumpstate_default vendor_shell_exec:file execute_no_trans;
allow hal_dumpstate_default proc_vendor_sched:dir r_dir_perms;
allow hal_dumpstate_default proc_vendor_sched:file r_file_perms;
userdebug_or_eng(`
allow hal_dumpstate_default sysfs_leds:dir search;
allow hal_dumpstate_default sysfs_leds:file rw_file_perms;
allow hal_dumpstate_default persist_file:dir search;
r_dir_file(hal_dumpstate_default, persist_leds_file);
')
get_prop(hal_dumpstate_default, vendor_camera_debug_prop);
get_prop(hal_dumpstate_default, boottime_public_prop)
get_prop(hal_dumpstate_default, vendor_camera_prop)