From 56df08e495bf2dac78d90a12670bf5c5454e5b50 Mon Sep 17 00:00:00 2001 From: Adam Shih Date: Mon, 17 Jan 2022 14:54:54 +0800 Subject: [PATCH] fix dumpstate permission Bug: 208721809 Test: run bugreport under enforcing mode and found no relevant errors Change-Id: I106d95fd01b321af815ef8e580305702be716021 --- tracking_denials/dumpstate.te | 6 ------ whitechapel_pro/dumpstate.te | 3 +++ 2 files changed, 3 insertions(+), 6 deletions(-) delete mode 100644 tracking_denials/dumpstate.te diff --git a/tracking_denials/dumpstate.te b/tracking_denials/dumpstate.te deleted file mode 100644 index b709173a..00000000 --- a/tracking_denials/dumpstate.te +++ /dev/null @@ -1,6 +0,0 @@ -# b/208721809 -dontaudit dumpstate fuse:dir { search }; -dontaudit dumpstate hal_power_stats_vendor_service:service_manager { find }; -dontaudit dumpstate hal_uwb_vendor_default:binder { call }; -dontaudit dumpstate modem_img_file:filesystem { getattr }; -dontaudit dumpstate vold:binder { call }; diff --git a/whitechapel_pro/dumpstate.te b/whitechapel_pro/dumpstate.te index 05f0b107..ea7108e6 100644 --- a/whitechapel_pro/dumpstate.te +++ b/whitechapel_pro/dumpstate.te @@ -1,4 +1,6 @@ +dump_hal(hal_health) dump_hal(hal_graphics_composer) +dump_hal(hal_uwb_vendor) userdebug_or_eng(` allow dumpstate vendor_dmabuf_debugfs:file r_file_perms; @@ -9,5 +11,6 @@ allow dumpstate persist_file:dir r_dir_perms; allow dumpstate modem_efs_file:dir r_dir_perms; allow dumpstate modem_userdata_file:dir r_dir_perms; allow dumpstate modem_img_file:dir r_dir_perms; +allow dumpstate fuse:dir search; dontaudit dumpstate vendor_dmabuf_debugfs:file r_file_perms;