From 2fd322f630fb6ca6511785314eb8097eafbb30df Mon Sep 17 00:00:00 2001 From: Yiming Jing Date: Thu, 30 Jul 2020 15:31:41 -0700 Subject: [PATCH] Allow dumpstate to dump auto hal servers audiocontrol_hal, vehicle_hal and evs_hal were added to dump_util.cpp in b/148098383. But the coresponding dumpstate.te is not updated to relfect the changes, causing denials when dumpstate attempts to dump auto hal servers. This CL updates dumpstate.te to allow dumpstate to access auto hal servers. Bug: 162537916 Test: sesearch -A -s dumpstate -t hal_audiocontrol_server -p signal sepolicy Test: sesearch -A -s dumpstate -t hal_vehicle_server -p signal sepolicy Test: sesearch -A -s dumpstate -t hal_evs_server -p signal sepolicy Change-Id: If6d6e4d9c547da17817f2668dc4f2a093bddd632 --- prebuilts/api/30.0/public/dumpstate.te | 3 +++ public/dumpstate.te | 3 +++ 2 files changed, 6 insertions(+) diff --git a/prebuilts/api/30.0/public/dumpstate.te b/prebuilts/api/30.0/public/dumpstate.te index 1724b70ae..65634619d 100644 --- a/prebuilts/api/30.0/public/dumpstate.te +++ b/prebuilts/api/30.0/public/dumpstate.te @@ -76,10 +76,12 @@ allow dumpstate { # This list comes from hal_interfaces_to_dump in dumputils/dump_utils.c hal_audio_server + hal_audiocontrol_server hal_bluetooth_server hal_camera_server hal_codec2_server hal_drm_server + hal_evs_server hal_face_server hal_fingerprint_server hal_graphics_allocator_server @@ -91,6 +93,7 @@ allow dumpstate { hal_power_stats_server hal_sensors_server hal_thermal_server + hal_vehicle_server hal_vr_server system_suspend_server }:process signal; diff --git a/public/dumpstate.te b/public/dumpstate.te index 63eb1e993..a86621391 100644 --- a/public/dumpstate.te +++ b/public/dumpstate.te @@ -76,10 +76,12 @@ allow dumpstate { # This list comes from hal_interfaces_to_dump in dumputils/dump_utils.c hal_audio_server + hal_audiocontrol_server hal_bluetooth_server hal_camera_server hal_codec2_server hal_drm_server + hal_evs_server hal_face_server hal_fingerprint_server hal_graphics_allocator_server @@ -91,6 +93,7 @@ allow dumpstate { hal_power_stats_server hal_sensors_server hal_thermal_server + hal_vehicle_server hal_vr_server system_suspend_server }:process signal;