From 67358d5c40173d644f0acbdfe6839d6087e6f60a Mon Sep 17 00:00:00 2001 From: Joel Galenson Date: Fri, 1 Mar 2019 12:38:54 -0800 Subject: [PATCH] Fix denials during bugreport. Bug: 124465994 Test: Build Change-Id: I8ed0fa685ff11c1ed99973ece65d00dcebcac540 (cherry picked from commit 73fd5ce2172b1b8baf1cf1bc28712a90496a4300) --- sepolicy/vendor/dumpstate.te | 1 - sepolicy/vendor/file.te | 1 - sepolicy/vendor/genfs_contexts | 1 - 3 files changed, 3 deletions(-) diff --git a/sepolicy/vendor/dumpstate.te b/sepolicy/vendor/dumpstate.te index a736369e..faa81a65 100644 --- a/sepolicy/vendor/dumpstate.te +++ b/sepolicy/vendor/dumpstate.te @@ -13,6 +13,5 @@ userdebug_or_eng(` # For collecting bugreports. allow dumpstate sysfs_scsi_devices_0000:file r_file_perms; allow dumpstate sysfs_scsi_devices_other:file r_file_perms; -allow dumpstate sysfs_devices_block:file r_file_perms; dontaudit dumpstate persist_file:dir r_dir_perms; dontaudit dumpstate kernel:system module_request; diff --git a/sepolicy/vendor/file.te b/sepolicy/vendor/file.te index cd69ac1d..6f859044 100644 --- a/sepolicy/vendor/file.te +++ b/sepolicy/vendor/file.te @@ -13,7 +13,6 @@ type sysfs_rmtfs, sysfs_type, fs_type; type sysfs_soc, sysfs_type, fs_type; type sysfs_scsi_devices_0000, sysfs_type, fs_type; type sysfs_scsi_devices_other, sysfs_type, fs_type; -type sysfs_devices_block, sysfs_type, fs_type; type sysfs_timestamp_switch, sysfs_type, fs_type; type sysfs_touch, sysfs_type, fs_type; type sysfs_usb_c, sysfs_type, fs_type; diff --git a/sepolicy/vendor/genfs_contexts b/sepolicy/vendor/genfs_contexts index a4538391..0ed12627 100644 --- a/sepolicy/vendor/genfs_contexts +++ b/sepolicy/vendor/genfs_contexts @@ -76,7 +76,6 @@ genfscon sysfs /devices/soc/a800000.ssusb/a800000.dwc3/xhci-hcd.0.auto/usb2 u:ob genfscon sysfs /devices/soc/800f000.qcom,spmi/spmi-0/spmi0-02/800f000.qcom,spmi:qcom,pmi8998@2:qcom,usb-pdphy@1700/usbpd0/typec u:object_r:sysfs_usb_c:s0 genfscon sysfs /module/diagchar u:object_r:sysfs_diag:s0 genfscon sysfs /kernel/irq_helper/irq_blacklist_on u:object_r:sysfs_irq:s0 -genfscon sysfs /devices/virtual/block/ u:object_r:sysfs_devices_block:s0 genfscon debugfs /kgsl/proc u:object_r:debugfs_kgsl:s0 genfscon debugfs /clk/debug_suspend u:object_r:debugfs_clk:s0