diff options
| author | Boon Jun Soh <boonjun@google.com> | 2023-12-08 19:00:04 +0800 |
|---|---|---|
| committer | Boon Jun Soh <boonjun@google.com> | 2023-12-11 14:39:32 +0800 |
| commit | 548c2f184d9b8aeca9d75bf35319fef591d05a85 (patch) | |
| tree | 593c310ff54c787e97725b9ff743a54432198fe4 | |
| parent | 422638059add8f6b7c8a6419cf9be37fc737e1c4 (diff) | |
| download | gs101-sepolicy-548c2f184d9b8aeca9d75bf35319fef591d05a85.tar.gz | |
Fix rlsservice sepolicy
Allows bugreport generation
Bug: 315255760
Bug: 309379598
Test: abd bugreport & ensure lack of rls avc denied logs
Change-Id: Ib3fc7b089c7aea4aea69f219d4c19847d39b0729
| -rw-r--r-- | tracking_denials/bug_map | 1 | ||||
| -rw-r--r-- | whitechapel/vendor/google/dumpstate.te | 2 | ||||
| -rw-r--r-- | whitechapel/vendor/google/rlsservice.te | 4 |
3 files changed, 5 insertions, 2 deletions
diff --git a/tracking_denials/bug_map b/tracking_denials/bug_map index 2b6cd41..a967250 100644 --- a/tracking_denials/bug_map +++ b/tracking_denials/bug_map @@ -1,6 +1,5 @@ chre vendor_data_file dir b/301948771 dump_modem device chr_file b/305600375 -dumpstate rlsservice binder b/309379598 dumpstate virtual_camera binder b/312894628 dumpstate virtual_camera process b/312894628 hal_power_default hal_power_default capability b/240632824 diff --git a/whitechapel/vendor/google/dumpstate.te b/whitechapel/vendor/google/dumpstate.te index e715ad9..f5be2a8 100644 --- a/whitechapel/vendor/google/dumpstate.te +++ b/whitechapel/vendor/google/dumpstate.te @@ -13,4 +13,4 @@ allow dumpstate modem_efs_file:dir getattr; allow dumpstate modem_img_file:dir getattr; allow dumpstate modem_userdata_file:dir getattr; allow dumpstate fuse:dir search; - +allow dumpstate rlsservice:binder call;
\ No newline at end of file diff --git a/whitechapel/vendor/google/rlsservice.te b/whitechapel/vendor/google/rlsservice.te index 4332495..0705e5d 100644 --- a/whitechapel/vendor/google/rlsservice.te +++ b/whitechapel/vendor/google/rlsservice.te @@ -36,3 +36,7 @@ allow rlsservice apex_info_file:file r_file_perms; # Allow read camera property get_prop(rlsservice, vendor_camera_prop); + +# Allow rlsservice bugreport generation +allow rlsservice dumpstate:fd use; +allow rlsservice dumpstate:fifo_file write;
\ No newline at end of file |