summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorAndroid Build Coastguard Worker <android-build-coastguard-worker@google.com>2024-02-02 23:45:27 +0000
committerAndroid Build Coastguard Worker <android-build-coastguard-worker@google.com>2024-02-02 23:45:27 +0000
commit9e07f6d7197607de165d60772295a02623877243 (patch)
tree57db7e0820fb97c0efad6860344aa88cedc4e68b
parentb3f8d59ab7f0fc852c435f8fc5f9e2cfd4322e39 (diff)
parentca94f3fec919565cce0a2c3fa1f78c267bf0f350 (diff)
downloadredbull-sepolicy-simpleperf-release.tar.gz
Snap for 11400057 from ca94f3fec919565cce0a2c3fa1f78c267bf0f350 to simpleperf-releasesimpleperf-release
Change-Id: I99225c3cb35cf68aaf09f9985c58d99c0c74aa67
-rw-r--r--vendor/google/grilservice_app.te3
-rw-r--r--vendor/qcom/common/file.te1
-rw-r--r--vendor/qcom/common/file_contexts1
-rw-r--r--vendor/qcom/common/hal_bluetooth_default.te6
4 files changed, 9 insertions, 2 deletions
diff --git a/vendor/google/grilservice_app.te b/vendor/google/grilservice_app.te
index b41c009..4188d8f 100644
--- a/vendor/google/grilservice_app.te
+++ b/vendor/google/grilservice_app.te
@@ -13,3 +13,6 @@ binder_call(grilservice_app, hal_wifi_ext)
# this denial on grilservice_app since this AudioMetric functionality is not used in legacy device.
dontaudit grilservice_app hal_audiometricext_hwservice:hwservice_manager find;
+# this denial on grilservice_app since ODPM isn't accessed / available on legacy devices.
+dontaudit grilservice_app hal_power_stats_service:service_manager find;
+
diff --git a/vendor/qcom/common/file.te b/vendor/qcom/common/file.te
index 99b8620..37cdeba 100644
--- a/vendor/qcom/common/file.te
+++ b/vendor/qcom/common/file.te
@@ -62,3 +62,4 @@ type debugfs_icnss, debugfs_type, fs_type;
type debugfs_ion, debugfs_type, fs_type;
type debugfs_tzdbg, debugfs_type, fs_type;
type cnss_vendor_data_file, file_type, data_file_type, mlstrustedobject;
+type sscoredump_vendor_data_coredump_file, file_type, data_file_type, mlstrustedobject;
diff --git a/vendor/qcom/common/file_contexts b/vendor/qcom/common/file_contexts
index 99df651..ce842ca 100644
--- a/vendor/qcom/common/file_contexts
+++ b/vendor/qcom/common/file_contexts
@@ -261,6 +261,7 @@
/data/vendor/mediadrm(/.*)? u:object_r:mediadrm_vendor_data_file:s0
/data/vendor/nnhal(/.*)? u:object_r:hal_neuralnetworks_data_file:s0
/data/vendor/ssrdump(/.*)? u:object_r:ramdump_vendor_data_file:s0
+/data/vendor/ssrdump/coredump(/.*)? u:object_r:sscoredump_vendor_data_coredump_file:s0
/data/vendor/ssrlog(/.*)? u:object_r:ssr_log_file:s0
/data/vendor/camera(/.*)? u:object_r:camera_vendor_data_file:s0
/data/vendor/location(/.*)? u:object_r:location_data_file:s0
diff --git a/vendor/qcom/common/hal_bluetooth_default.te b/vendor/qcom/common/hal_bluetooth_default.te
index 7df493d..f5f2128 100644
--- a/vendor/qcom/common/hal_bluetooth_default.te
+++ b/vendor/qcom/common/hal_bluetooth_default.te
@@ -4,8 +4,10 @@ allow hal_bluetooth_default hal_bluetooth_coexistence_hwservice:hwservice_manage
userdebug_or_eng(`
allow hal_bluetooth_default diag_device:chr_file rw_file_perms;
- allow hal_bluetooth_default ramdump_vendor_data_file:dir rw_dir_perms;
- allow hal_bluetooth_default ramdump_vendor_data_file:file { create rw_file_perms };
+ allow hal_bluetooth_default ramdump_vendor_data_file:dir create_dir_perms;
+ allow hal_bluetooth_default ramdump_vendor_data_file:file create_file_perms;
+ allow hal_bluetooth_default sscoredump_vendor_data_coredump_file:dir create_dir_perms;
+ allow hal_bluetooth_default sscoredump_vendor_data_coredump_file:file create_file_perms;
r_dir_file(hal_bluetooth_default, debugfs_ipc)
set_prop(hal_bluetooth_default, vendor_ssr_prop)
')