From e8da0e146fb11c290141e843ddbee2a232fc48af Mon Sep 17 00:00:00 2001
From: Adam Shih <adamshih@google.com>
Date: Thu, 20 Jan 2022 09:43:54 +0800
Subject: [PATCH] be able to dump bcl in userdebug ROM only

Bug: 208721677
Bug: 208909124
Test: do adb bugreport with no relevant error log
Change-Id: Id8127d495ff1b332284beda1e411b2327ec8625f
---
 tracking_denials/hal_dumpstate_default.te | 6 ------
 whitechapel_pro/hal_dumpstate_default.te  | 6 ++++++
 2 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/tracking_denials/hal_dumpstate_default.te b/tracking_denials/hal_dumpstate_default.te
index db61e9c6..d219fba7 100644
--- a/tracking_denials/hal_dumpstate_default.te
+++ b/tracking_denials/hal_dumpstate_default.te
@@ -14,12 +14,6 @@ dontaudit hal_dumpstate_default sscoredump_vendor_data_crashinfo_file:dir { open
 dontaudit hal_dumpstate_default sscoredump_vendor_data_crashinfo_file:dir search;
 dontaudit hal_dumpstate_default sysfs_aoc:dir { search };
 dontaudit hal_dumpstate_default sysfs_aoc_dumpstate:file { open read };
-dontaudit hal_dumpstate_default sysfs_bcl:dir { open };
-dontaudit hal_dumpstate_default sysfs_bcl:dir { read };
-dontaudit hal_dumpstate_default sysfs_bcl:dir { search };
-dontaudit hal_dumpstate_default sysfs_bcl:file { getattr };
-dontaudit hal_dumpstate_default sysfs_bcl:file open;
-dontaudit hal_dumpstate_default sysfs_bcl:file { read };
 dontaudit hal_dumpstate_default sysfs_chip_id:file { open };
 dontaudit hal_dumpstate_default sysfs_chip_id:file { read };
 dontaudit hal_dumpstate_default sysfs_exynos_bts:dir { search };
diff --git a/whitechapel_pro/hal_dumpstate_default.te b/whitechapel_pro/hal_dumpstate_default.te
index cd9e1cc5..4796bbd4 100644
--- a/whitechapel_pro/hal_dumpstate_default.te
+++ b/whitechapel_pro/hal_dumpstate_default.te
@@ -37,4 +37,10 @@ userdebug_or_eng(`
   allow hal_dumpstate_default mnt_vendor_file:dir search;
   allow hal_dumpstate_default ramdump_vendor_mnt_file:dir search;
   allow hal_dumpstate_default ramdump_vendor_mnt_file:file r_file_perms;
+  allow hal_dumpstate_default sysfs_bcl:dir r_dir_perms;
+  allow hal_dumpstate_default sysfs_bcl:file r_file_perms;
+
 ')
+
+dontaudit hal_dumpstate_default sysfs_bcl:dir { open };
+dontaudit hal_dumpstate_default sysfs_bcl:file { read };