tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Merge "Ensure taking a bugreport generates no denials."

Browse source 
am: dc60253988

Change-Id: I51c93e4078163807129fdefa6d108d7acc4e5a26
This commit is contained in:
Joel Galenson 2018-09-11 09:48:40 -07:00 committed by android-build-merger
commit 48aa3f548c
1 changed files with 6 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
public/dumpstate.te
View file

@ -264,6 +264,12 @@ allow dumpstate self:netlink_socket create_socket_perms_no_ioctl;
# newer kernels (e.g. 4.4) have a new class for sockets # newer kernels (e.g. 4.4) have a new class for sockets
allow dumpstate self:netlink_generic_socket create_socket_perms_no_ioctl; allow dumpstate self:netlink_generic_socket create_socket_perms_no_ioctl;
# Allow dumpstate to run ss
allow dumpstate { domain pdx_channel_socket_type pdx_endpoint_socket_type }:socket_class_set getattr;
# For when dumpstate runs df
dontaudit dumpstate mnt_vendor_file:dir search;
# Allow dumpstate to kill vendor dumpstate service by init # Allow dumpstate to kill vendor dumpstate service by init
set_prop(dumpstate, ctl_dumpstate_prop) set_prop(dumpstate, ctl_dumpstate_prop)