tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Merge "Ensure taking a bugreport generates no denials." into pi-dev

Browse source 
am: 7cfabb12be

Change-Id: Ia17fd3f2a7c8c980fc52603219a7f52d6f4d16d2
This commit is contained in:
Joel Galenson 2018-03-12 21:02:16 +00:00 committed by android-build-merger
commit d75445acdd
4 changed files with 18 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
private/dumpstate.te
View file

@ -38,3 +38,10 @@ get_prop(dumpstate, boottime_prop)
allow dumpstate {
statsd
}:process signal;
# For collecting bugreports.
allow dumpstate debugfs_wakeup_sources:file r_file_perms;
allow dumpstate dev_type:blk_file getattr;
allow dumpstate webview_zygote:process signal;
dontaudit dumpstate perfprofd:binder call;
dontaudit dumpstate update_engine:binder call;

4
private/installd.te
View file

@ -16,3 +16,7 @@ domain_auto_trans(installd, idmap_exec, idmap)
# Create /data/.layout_version.* file
type_transition installd system_data_file:file install_data_file;
# For collecting bugreports.
allow installd dumpstate:fd use;
allow installd dumpstate:fifo_file r_file_perms;

3
private/storaged.te
View file

@ -51,6 +51,9 @@ allow storaged package_native_service:service_manager find;
# running as root. See b/35323867 #3.
dontaudit storaged self:global_capability_class_set dac_override;
# For collecting bugreports.
allow storaged dumpstate:fifo_file write;
###
### neverallow
###

4
vendor/hal_camera_default.te vendored
View file

@ -5,3 +5,7 @@ type hal_camera_default_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(hal_camera_default)
allow hal_camera_default fwk_sensor_hwservice:hwservice_manager find;
# For collecting bugreports.
allow hal_camera_default dumpstate:fd use;
allow hal_camera_default dumpstate:fifo_file write;