tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Merge changes from topic 'crash_dump_append'

Browse source 
* changes:
  crash_dump: allow appending to pipes.
  Revert "crash_dump: temporarily make permissive."
This commit is contained in:
Josh Gao 2017-02-16 22:43:58 +00:00 committed by Gerrit Code Review
commit cce8513c40
2 changed files with 4 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
private/crash_dump.te
View file

@ -1,4 +0,0 @@
### HACK: Make crash_dump permissive temporarily to catch denials without breaking backtraces.
userdebug_or_eng(`
permissive crash_dump;
')

5
public/crash_dump.te
View file

@ -19,7 +19,10 @@ userdebug_or_eng(`
# Use inherited file descriptors
allow crash_dump domain:fd use;
allow crash_dump domain:fifo_file write;
# Write to the IPC pipe inherited from crashing processes.
# Append to pipes given to us by processes requesting dumps (e.g. dumpstate)
allow crash_dump domain:fifo_file { write append };
r_dir_file(crash_dump, domain)
allow crash_dump exec_type:file r_file_perms;