diff options
Diffstat (limited to 'sepolicy')
| -rw-r--r-- | sepolicy/file_contexts | 1 | ||||
| -rw-r--r-- | sepolicy/hal_dumpstate_impl.te | 9 |
2 files changed, 10 insertions, 0 deletions
diff --git a/sepolicy/file_contexts b/sepolicy/file_contexts index ad4c871..2edc942 100644 --- a/sepolicy/file_contexts +++ b/sepolicy/file_contexts @@ -121,6 +121,7 @@ # System files /vendor/bin/ATFWD-daemon u:object_r:atfwd_exec:s0 /vendor/bin/cnd u:object_r:cnd_exec:s0 +/vendor/bin/hw/android\.hardware\.dumpstate@1\.0-service.angler u:object_r:hal_dumpstate_default_exec:s0 /vendor/bin/imscmservice u:object_r:ims_exec:s0 /vendor/bin/imsdatadaemon u:object_r:ims_exec:s0 /vendor/bin/imsqmidaemon u:object_r:ims_exec:s0 diff --git a/sepolicy/hal_dumpstate_impl.te b/sepolicy/hal_dumpstate_impl.te new file mode 100644 index 0000000..e8e098d --- /dev/null +++ b/sepolicy/hal_dumpstate_impl.te @@ -0,0 +1,9 @@ +type hal_dumpstate_impl, domain, hal_dumpstate; +type hal_dumpstate_impl_exec, exec_type, file_type; + +init_daemon_domain(hal_dumpstate_impl) + +# Access to files for dumping +allow hal_dumpstate_impl proc_interrupts:file { open read }; +allow hal_dumpstate_impl pstorefs:dir search; +allow hal_dumpstate_impl sysfs:file { open read }; |