diff --git a/sepolicy/dumpstate.te b/sepolicy/dumpstate.te index 86444e32..ce328ce8 100644 --- a/sepolicy/dumpstate.te +++ b/sepolicy/dumpstate.te @@ -5,8 +5,9 @@ userdebug_or_eng(` allow dumpstate proc_stat:file r_file_perms; allow dumpstate persist_file:dir r_dir_perms; allow dumpstate sysfs_leds:dir search; - allow dumpstate system_block_device:blk_file r_file_perms; dontaudit dumpstate self:netlink_xfrm_socket create_socket_perms_no_ioctl; + + binder_call(dumpstate, per_mgr) ') diff --git a/sepolicy/file.te b/sepolicy/file.te index 1090915e..47862b43 100644 --- a/sepolicy/file.te +++ b/sepolicy/file.te @@ -13,11 +13,12 @@ type sysfs_usb_c, sysfs_type, fs_type; type debugfs_clk, debugfs_type, fs_type; type debugfs_ion, debugfs_type, fs_type; +type debugfs_ipc, debugfs_type, fs_type; type debugfs_kgsl, debugfs_type, fs_type; type debugfs_rpm, debugfs_type, fs_type; type debugfs_rmt_storage, debugfs_type, fs_type; type debugfs_usb, debugfs_type, fs_type; -type debugfs_ipc, debugfs_type, fs_type; +type debugfs_wlan, debugfs_type, fs_type; # /proc type proc_wifi_dbg, fs_type; diff --git a/sepolicy/file_contexts b/sepolicy/file_contexts index 5dde354f..516bc026 100644 --- a/sepolicy/file_contexts +++ b/sepolicy/file_contexts @@ -167,6 +167,7 @@ /sys/kernel/debug/rpm_stats u:object_r:debugfs_rpm:s0 /sys/kernel/debug/rpm_master_stats u:object_r:debugfs_rpm:s0 /sys/kernel/debug/ion(/.*)? u:object_r:debugfs_ion:s0 +/sys/kernel/debug/ipc_logging(/.*)? u:object_r:debugfs_ipc:s0 /sys/kernel/debug/system_stats u:object_r:debugfs_rpm:s0 /sys/kernel/debug/tcpm/usbpd0 u:object_r:debugfs_usb:s0 /sys/kernel/debug/pd_engine/usbpd0 u:object_r:debugfs_usb:s0 diff --git a/sepolicy/hal_dumpstate_impl.te b/sepolicy/hal_dumpstate_impl.te index 9b5cc096..61ef8418 100644 --- a/sepolicy/hal_dumpstate_impl.te +++ b/sepolicy/hal_dumpstate_impl.te @@ -35,6 +35,9 @@ allow hal_dumpstate_impl sysfs_thermal:file r_file_perms; allow hal_dumpstate_impl debugfs_ion:dir r_dir_perms; allow hal_dumpstate_impl debugfs_ion:file r_file_perms; +allow hal_dumpstate_impl debugfs_rpm:file r_file_perms; +allow hal_dumpstate_impl debugfs_ipc:file r_file_perms; +allow hal_dumpstate_impl proc_stat:file r_file_perms; # Access to files for dumping allow hal_dumpstate_impl sysfs:dir r_dir_perms;