From 96c2b2d303ad05ece7cff0df2d9f204501201074 Mon Sep 17 00:00:00 2001 From: klinesjiang Date: Mon, 3 Jun 2019 18:13:50 +0800 Subject: [PATCH] Add sepolicy for RamdumpService to access property sys.boot.reason on Pixel 2 Denied pattern is: avc: denied { read } for name="u:object_r:system_boot_reason_prop:s0" dev="tmpfs" ino=21223 scontext=u:r:ramdump_app:s0:c206,c256,c512,c768 tcontext=u:object_r:system_boot_reason_prop:s0 tclass=file permissive=0 Bug: 132220248 Merged-In: Id391450303a19b14a77ae564a0b79606f9c984fc Change-Id: Id391450303a19b14a77ae564a0b79606f9c984fc --- sepolicy/vendor/ramdump_app.te | 1 + 1 file changed, 1 insertion(+) diff --git a/sepolicy/vendor/ramdump_app.te b/sepolicy/vendor/ramdump_app.te index ed9bf33b..af710d68 100644 --- a/sepolicy/vendor/ramdump_app.te +++ b/sepolicy/vendor/ramdump_app.te @@ -11,4 +11,5 @@ userdebug_or_eng(` set_prop(ramdump_app, vendor_ramdump_prop); get_prop(system_app, vendor_ssr_prop) + get_prop(ramdump_app, system_boot_reason_prop) ')