summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorThiƩbaud Weksteen <tweek@google.com>2022-09-28 02:43:26 +0000
committerAutomerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>2022-09-28 02:43:26 +0000
commita2ca127e0bb27dca2094ac2cc4f083b43eefa812 (patch)
treec25f77324356f073c0018767f2652f55bfce2095
parent0961bce6de7e4840d83c5fa151abf96e2162a425 (diff)
parente1b875d925cfc61f829ee6d8606aebf3c63344f3 (diff)
downloadredbull-sepolicy-a2ca127e0bb27dca2094ac2cc4f083b43eefa812.tar.gz
Allow dumpstate to access GPU sysfs nodes am: 30c4343daf am: 227e109f35 am: e1b875d925
Original change: https://android-review.googlesource.com/c/device/google/redbull-sepolicy/+/2222073 Change-Id: I28bc488ba9d2eee5cc4d9aa3d7d00e689c685bd3 Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
-rw-r--r--vendor/google/dumpstate.te6
1 files changed, 6 insertions, 0 deletions
diff --git a/vendor/google/dumpstate.te b/vendor/google/dumpstate.te
index 0e5a409..c69e874 100644
--- a/vendor/google/dumpstate.te
+++ b/vendor/google/dumpstate.te
@@ -16,3 +16,9 @@ allow dumpstate firmware_file:filesystem getattr;
dontaudit dumpstate debugfs_dma_buf:file r_file_perms;
dontaudit dumpstate incidentd:process sigkill;
+
+# dumpstate may trigger a screen capture using /system/bin/screencap. In this
+# case, the gralloc implementation will attempt to retrieve information about
+# the GPU using /sys/class/kgsl/**/gpu_model.
+allow dumpstate sysfs_msm_subsys:dir search;
+allow dumpstate sysfs_msm_subsys:file rw_file_perms;