Add sepolicy rule to allow dump battery maxfg history

android.hardwar: type=1400 audit(0.0:7): avc: denied { getattr } for path="/dev/maxfg_history" dev="tmpfs" ino=580 scontext=u:r:hal_dumpstate_default:s0 tcontext=u:object_r:device:s0 tclass=chr_file permissive=0 bug=b/240632721

Bug: 254164096
Change-Id: I64ff95ba8db62a8f831d012b4cdf4e6ec973f086
Signed-off-by: Jenny Ho <hsiufangho@google.com>
This commit is contained in:
Jenny Ho 2022-12-14 15:11:13 +08:00
parent 810a7c5988
commit f5a88c35a4
2 changed files with 3 additions and 0 deletions

View file

@ -213,6 +213,7 @@
/data/vendor/sensors/debug(/.*)? u:object_r:sensor_debug_data_file:s0 /data/vendor/sensors/debug(/.*)? u:object_r:sensor_debug_data_file:s0
/data/vendor/sensors/registry(/.*)? u:object_r:sensor_reg_data_file:s0 /data/vendor/sensors/registry(/.*)? u:object_r:sensor_reg_data_file:s0
/data/vendor/uwb(/.*)? u:object_r:uwb_data_vendor:s0 /data/vendor/uwb(/.*)? u:object_r:uwb_data_vendor:s0
/dev/maxfg_history u:object_r:battery_history_device:s0
/dev/battery_history u:object_r:battery_history_device:s0 /dev/battery_history u:object_r:battery_history_device:s0
/data/vendor/powerstats(/.*)? u:object_r:powerstats_vendor_data_file:s0 /data/vendor/powerstats(/.*)? u:object_r:powerstats_vendor_data_file:s0
/data/vendor/mitigation(/.*)? u:object_r:mitigation_vendor_data_file:s0 /data/vendor/mitigation(/.*)? u:object_r:mitigation_vendor_data_file:s0

View file

@ -102,6 +102,8 @@ allow hal_dumpstate_default vendor_shell_exec:file execute_no_trans;
allow hal_dumpstate_default proc_vendor_sched:dir r_dir_perms; allow hal_dumpstate_default proc_vendor_sched:dir r_dir_perms;
allow hal_dumpstate_default proc_vendor_sched:file r_file_perms; allow hal_dumpstate_default proc_vendor_sched:file r_file_perms;
allow hal_dumpstate_default battery_history_device:chr_file r_file_perms;
userdebug_or_eng(` userdebug_or_eng(`
allow hal_dumpstate_default sysfs_leds:dir search; allow hal_dumpstate_default sysfs_leds:dir search;
allow hal_dumpstate_default sysfs_leds:file rw_file_perms; allow hal_dumpstate_default sysfs_leds:file rw_file_perms;