Merge "Add new type and domain for vendor radio"

This commit is contained in:
TreeHugger Robot
2017-04-06 04:29:44 +00:00
committed by Android (Google) Code Review
6 changed files with 20 additions and 1 deletions

View File

@@ -16,7 +16,8 @@
on post-fs-data
# Modem logging collection
mkdir /data/diag_logs 0777 system system
mkdir /data/vendor/radio 0775 radio radio
mkdir /data/vendor/radio/diag_logs 0777 system system
# WLAN logging collection
mkdir /data/cnss_diag 0777 system system

View File

@@ -39,4 +39,6 @@ type netmgr_data_file, file_type, data_file_type;
type nfc_vendor_data_file, file_type, data_file_type;
type radio_vendor_data_file, file_type, data_file_type, mlstrustedobject;
type ramdump_data_file, file_type, data_file_type, mlstrustedobject;

View File

@@ -150,6 +150,7 @@
# data files
/data/misc/radio(/.*)? u:object_r:radio_data_file:s0
/data/vendor/radio(/.*)? u:object_r:radio_vendor_data_file:s0
/data/misc/netmgr(/.*)? u:object_r:netmgr_data_file:s0
/data/misc/location(/.*)? u:object_r:location_data_file:s0
/data/ramdump(/.*)? u:object_r:ramdump_data_file:s0

View File

@@ -19,8 +19,10 @@ userdebug_or_eng(`
allow hal_dumpstate_impl smlog_dump_file:dir create_dir_perms;
allow hal_dumpstate_impl smlog_dump_file:file create_file_perms;
allow hal_dumpstate_impl radio_data_file:dir r_dir_perms;
allow hal_dumpstate_impl radio_vendor_data_file:dir r_dir_perms;
allow hal_dumpstate_impl netmgr_data_file:dir r_dir_perms;
allow hal_dumpstate_impl radio_data_file:file r_file_perms;
allow hal_dumpstate_impl radio_vendor_data_file:file r_file_perms;
allow hal_dumpstate_impl netmgr_data_file:file r_file_perms;
')

12
sepolicy/logger_app.te Normal file
View File

@@ -0,0 +1,12 @@
type logger_app, domain;
userdebug_or_eng(`
app_domain(logger_app)
net_domain(logger_app)
allow logger_app app_api_service:service_manager find;
allow logger_app surfaceflinger_service:service_manager find;
allow logger_app radio_vendor_data_file:file { create open unlink getattr setattr read write };
allow logger_app radio_vendor_data_file:dir { create open rmdir add_name remove_name getattr setattr search read write };
')

1
sepolicy/seapp_contexts Normal file
View File

@@ -0,0 +1 @@
user=_app seinfo=platform name=com.android.nexuslogger domain=logger_app type=app_data_file levelFrom=all