tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Merge "Allow system server read binderfs stats" into main

Browse source
This commit is contained in:
Li Li 2023-10-20 23:57:19 +00:00 committed by Gerrit Code Review
commit 87fa0f9f77
5 changed files with 8 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
private/compat/34.0/34.0.ignore.cil
View file

@ -20,4 +20,5 @@
proc_memhealth
virtual_device_native_service
next_boot_prop
binderfs_logs_stats
))

1
private/genfs_contexts
View file

@ -392,6 +392,7 @@ genfscon binder /hwbinder u:object_r:hwbinder_device:s0
genfscon binder /vndbinder u:object_r:vndbinder_device:s0
genfscon binder /binder_logs u:object_r:binderfs_logs:s0
genfscon binder /binder_logs/proc u:object_r:binderfs_logs_proc:s0
genfscon binder /binder_logs/stats u:object_r:binderfs_logs_stats:s0
genfscon binder /features u:object_r:binderfs_features:s0
genfscon inotifyfs / u:object_r:inotify:s0

4
private/system_server.te
View file

@ -1539,3 +1539,7 @@ allow system_server system_font_fallback_file:file r_file_perms;
# Allow system server to set dynamic ART properties.
set_prop(system_server, dalvik_dynamic_config_prop)
# Allow system server to read binderfs
allow system_server binderfs_logs:dir r_dir_perms;
allow system_server binderfs_logs_stats:file r_file_perms;

1
public/dumpstate.te
View file

@ -379,6 +379,7 @@ allow dumpstate snapshotctl_log_data_file:file r_file_perms;
allow dumpstate binderfs_logs:dir r_dir_perms;
allow dumpstate binderfs_logs:file r_file_perms;
allow dumpstate binderfs_logs_proc:file r_file_perms;
allow dumpstate binderfs_logs_stats:file r_file_perms;
use_apex_info(dumpstate)

1
public/file.te
View file

@ -7,6 +7,7 @@ type proc, fs_type, proc_type;
type binderfs, fs_type;
type binderfs_logs, fs_type;
type binderfs_logs_proc, fs_type;
type binderfs_logs_stats, fs_type;
type binderfs_features, fs_type;
# Security-sensitive proc nodes that should not be writable to most.
type proc_security, fs_type, proc_type;