Files
device_google_wahoo/sepolicy/vendor/ramoops.te
Chungjui Fan e73d5d568d Modify ramoops sepolicy due to some ramoops file paths are changed to vendor partition
Bug: 121294677

Sync and cherry-pick ag/4966918 to AOSP

Change-Id: I82d564bfa8ae3c7c9dce6d9e87cfa014e1c04ad3
Merged-In: Id7ea3c744b5af06db299f60f1ac038d49d5b7ffb
Signed-off-by: SalmaxChang <salmaxchang@google.com>
2018-12-22 02:00:35 +00:00

20 lines
640 B
Plaintext

type ramoops, domain;
type ramoops_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(ramoops);
# kmod=crypto-gcm(aes)
dontaudit ramoops kernel:system module_request;
allow ramoops ramoops_exec:file rx_file_perms;
allow ramoops vendor_shell_exec:file rx_file_perms;
allow ramoops vendor_toolbox_exec:file rx_file_perms;
# Set the sys.ramoops.decrypted property
set_prop(ramoops, vendor_ramoops_prop);
allow ramoops sysfs_pstore:file rw_file_perms;
allow ramoops ramoops_device:chr_file rw_file_perms;
allow ramoops ramoops_vendor_data_file:file create_file_perms;
allow ramoops ramoops_vendor_data_file:dir rw_dir_perms;