device_google_zuma/vendor/file.te
Dinesh Yadav 100dd2387d Add sepolicy for gxp_logging service to report metrics [RESTRICT AUTOMERGE]
gxp_logging service will periodically check the sysfs files exposed by
the gxp kernel driver and report stats to Suez framework.
These policies are needed to report the metrics.

Tested:
Found no violation with these policies on a P23 device

Bug: 278514198
Change-Id: I8c3e57dfe4e9a6caab425f2424d07e83f5e7b9c6
Signed-off-by: Dinesh Yadav <dkyadav@google.com>
2023-06-13 03:37:56 +00:00

57 lines
1.7 KiB
Text

# persist
type persist_display_file, file_type, vendor_persist_type;
type persist_battery_file, file_type, vendor_persist_type;
type persist_camera_file, file_type, vendor_persist_type;
type persist_sensor_reg_file, file_type, vendor_persist_type;
type persist_uwb_file, file_type, vendor_persist_type;
#sysfs
type sysfs_power_dump, sysfs_type, fs_type;
type sysfs_acpm_stats, sysfs_type, fs_type;
type sysfs_write_leds, sysfs_type, fs_type;
type sysfs_pca, sysfs_type, fs_type;
type sysfs_aoc_udfps, sysfs_type, fs_type;
# Trusty
type sysfs_trusty, sysfs_type, fs_type;
# Gxp sysfs file
type sysfs_gxp, sysfs_type, fs_type;
# mount FS
allow proc_vendor_sched proc:filesystem associate;
allow bootdevice_sysdev sysfs:filesystem associate;
# debugfs
type vendor_charger_debugfs, fs_type, debugfs_type;
type vendor_votable_debugfs, fs_type, debugfs_type;
type vendor_battery_debugfs, fs_type, debugfs_type;
type vendor_pm_genpd_debugfs, fs_type, debugfs_type;
type vendor_usb_debugfs, fs_type, debugfs_type;
type vendor_maxfg_debugfs, fs_type, debugfs_type;
# WLC
type sysfs_wlc, sysfs_type, fs_type;
# CHRE
type chre_socket, file_type;
# BT
type vendor_bt_data_file, file_type, data_file_type;
# Data
type sensor_reg_data_file, file_type, data_file_type;
type uwb_vendor_data_file, file_type, data_file_type, app_data_file_type;
type uwb_data_vendor, file_type, data_file_type;
# Vendor sched files
userdebug_or_eng(`
typeattribute proc_vendor_sched mlstrustedobject;
')
# sysfs
type sysfs_fabric, sysfs_type, fs_type;
type sysfs_em_profile, sysfs_type, fs_type;
type sysfs_ota, sysfs_type, fs_type;
type sysfs_ospm, sysfs_type, fs_type;
type sysfs_gsa_log, sysfs_type, fs_type;