Evolution-X-Tensor/device_google_gs201
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Grant hal_dumpstate_default access

Browse source 
Bug: 208721677
Bug: 208909124
Test: pts-tradefed run pts -m PtsSELinuxTest -t com.google.android.selinux.pts.SELinuxTest#scanBugreport
Change-Id: Ie5463e96958a95431630941c19b7888a3eea2e3e
This commit is contained in:
Alex Hong 2022-01-21 17:35:54 +08:00
parent 7b7394be79
commit cd4f508c92
2 changed files with 15 additions and 11 deletions
Download patch file Download diff file Expand all files Collapse all files

11
tracking_denials/hal_dumpstate_default.te
View file

@ -1,11 +0,0 @@
# b/208721677
# b/208909124
dontaudit hal_dumpstate_default boottime_public_prop:file { open };
dontaudit hal_dumpstate_default boottime_public_prop:file { read };
dontaudit hal_dumpstate_default property_type:file *;
dontaudit hal_dumpstate_default shell_data_file:file { getattr };
dontaudit hal_dumpstate_default vendor_dumpsys:file { execute_no_trans };
dontaudit hal_dumpstate_default vendor_log_file:dir search;
dontaudit hal_dumpstate_default vendor_shell_exec:file { execute_no_trans };
dontaudit hal_dumpstate_default vendor_toolbox_exec:file { execute_no_trans };

15
whitechapel_pro/hal_dumpstate_default.te
View file

@ -68,6 +68,21 @@ allow hal_dumpstate_default vendor_displaycolor_service:service_manager find;
binder_call(hal_dumpstate_default, hal_graphics_composer_default);
vndbinder_use(hal_dumpstate_default)
allow hal_dumpstate_default shell_data_file:file getattr;
allow hal_dumpstate_default vendor_log_file:dir search;
allow hal_dumpstate_default vendor_dumpsys:file execute_no_trans;
allow hal_dumpstate_default vendor_toolbox_exec:file execute_no_trans;
allow hal_dumpstate_default vendor_shell_exec:file execute_no_trans;
get_prop(hal_dumpstate_default, boottime_public_prop)
get_prop(hal_dumpstate_default, vendor_camera_prop)
get_prop(hal_dumpstate_default, vendor_gps_prop)
set_prop(hal_dumpstate_default, vendor_modem_prop)
get_prop(hal_dumpstate_default, vendor_rild_prop)
get_prop(hal_dumpstate_default, vendor_tcpdump_log_prop)
userdebug_or_eng(`
allow hal_dumpstate_default mnt_vendor_file:dir search;
allow hal_dumpstate_default ramdump_vendor_mnt_file:dir search;