From 1121156a9362f2c554775f0915f21a9e63c771d9 Mon Sep 17 00:00:00 2001 From: Andrew LeCain Date: Wed, 14 Mar 2018 13:30:08 -0700 Subject: Add qsee_log to dumpstate Updating dumpstate to cat /d/tzdbg/qsee_log Added debugfs_tzdbg selinux security context Give hal_dumpstate_imp debugfs_tzdbg read permissions Fixes: 74536221 Test: adb root; adb shell setenforce 1; adb unroot; adb bugreport Change-Id: I6bbf61e1c5464f18fb838c9225611d589a8a15f4 --- sepolicy/vendor/file.te | 1 + sepolicy/vendor/genfs_contexts | 1 + sepolicy/vendor/hal_dumpstate_impl.te | 2 ++ 3 files changed, 4 insertions(+) (limited to 'sepolicy') diff --git a/sepolicy/vendor/file.te b/sepolicy/vendor/file.te index 461d2ed7..e45661f1 100644 --- a/sepolicy/vendor/file.te +++ b/sepolicy/vendor/file.te @@ -35,6 +35,7 @@ type debugfs_mdp, debugfs_type, fs_type; type debugfs_icnss, debugfs_type, fs_type; type debugfs_f2fs, debugfs_type, fs_type; type debugfs_dma_bufinfo, debugfs_type, fs_type; +type debugfs_tzdbg, debugfs_type, fs_type; # /proc type proc_wifi_dbg, fs_type; diff --git a/sepolicy/vendor/genfs_contexts b/sepolicy/vendor/genfs_contexts index 15b88425..c77160be 100644 --- a/sepolicy/vendor/genfs_contexts +++ b/sepolicy/vendor/genfs_contexts @@ -97,5 +97,6 @@ genfscon debugfs /mdp u:object_r:debugfs_mdp:s0 genfscon debugfs /rmt_storage u:object_r:debugfs_rmt_storage:s0 genfscon debugfs /icnss u:object_r:debugfs_icnss:s0 genfscon debugfs /f2fs u:object_r:debugfs_f2fs:s0 +genfscon debugfs /tzdbg u:object_r:debugfs_tzdbg:s0 genfscon debugfs /dma_buf/bufinfo u:object_r:debugfs_dma_bufinfo:s0 diff --git a/sepolicy/vendor/hal_dumpstate_impl.te b/sepolicy/vendor/hal_dumpstate_impl.te index 3391fdd8..2edc914f 100644 --- a/sepolicy/vendor/hal_dumpstate_impl.te +++ b/sepolicy/vendor/hal_dumpstate_impl.te @@ -19,6 +19,8 @@ userdebug_or_eng(` allow hal_dumpstate_impl netmgr_data_file:file r_file_perms; allow hal_dumpstate_impl debugfs_ipc:dir r_dir_perms; allow hal_dumpstate_impl debugfs_ipc:file r_file_perms; + allow hal_dumpstate_impl debugfs_tzdbg:dir search; + allow hal_dumpstate_impl debugfs_tzdbg:file r_file_perms; allow hal_dumpstate_impl sysfs_usb_device:dir r_dir_perms; allow hal_dumpstate_impl sysfs_usb_device:file r_file_perms; allow hal_dumpstate_impl ssr_log_file:dir search; -- cgit v1.2.3