Evolution-x-devices/device_google_wahoo
2
0
Fork 0
mirror of https://github.com/Evolution-X-Devices/device_google_wahoo synced 2026-02-01 07:50:47 +00:00
Code Issues Packages Projects Releases Wiki Activity

Fixing ramdump and removing it from permissive mode

Browse Source 
denied { search } for pid=699 comm="ramdump" name="block" dev="tmpfs"
ino=20656 scontext=u:r:ramdump:s0 tcontext=u:object_r:block_device:s0
tclass=dir

denied  { set } for property=debug.htc.ramdump_new_directory pid=690
uid=0 gid=0 scontext=u:r:ramdump:s0 tcontext=u:object_r:debug_prop:s0
tclass=property_service

Bug: 34784662
Bug: 38261729
Test: ramdump functions in enforcing mode
Change-Id: Iceb7043d97f0f7c393075c565a65105b72aa570d
This commit is contained in:
Max Bires
2017-05-31 11:08:17 -07:00
parent 19057ffcac
commit 13bdd9e7e8
3 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
sepolicy/property.te
View File

@@ -11,4 +11,4 @@ type tee_listener_prop, property_type;
type wc_prop, property_type;
type thermal_prop, property_type;
type modem_diag_prop, property_type;
type tel_mon_prop, property_type;
type tel_mon_prop, property_type;

1
sepolicy/property_contexts
View File

@@ -9,6 +9,7 @@ persist.net.doxlat u:object_r:net_radio_prop:s0
sys.post_boot. u:object_r:post_boot_prop:s0
radio. u:object_r:radio_prop:s0
debug.htc.hrdump u:object_r:ramdump_prop:s0
debug.htc.ramdump u:object_r:ramdump_prop:s0
persist.sys.crash_rcu u:object_r:ramdump_prop:s0
debug.ssrdump u:object_r:ssr_prop:s0
persist.sys.cnss. u:object_r:cnss_diag_prop:s0

3
sepolicy/ramdump.te
View File

@@ -12,6 +12,7 @@ userdebug_or_eng(`
allow ramdump ramdump_vendor_data_file:file create_file_perms;
allow ramdump proc:file r_file_perms;
allow ramdump block_device:dir search;
allow ramdump misc_block_device:blk_file rw_file_perms;
allow ramdump userdata_block_device:blk_file rw_file_perms;
@@ -19,6 +20,4 @@ userdebug_or_eng(`
allow ramdump rootfs:file r_file_perms;
r_dir_file(ramdump, sysfs_type)
permissive ramdump;
')