summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorWoody Lin <woodylin@google.com>2021-07-05 03:03:00 +0000
committerAutomerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>2021-07-05 03:03:00 +0000
commit97c67688d6161f85b6e379d8909dbf16101168ea (patch)
tree33838bcf4dfc67759a65ec5f7fa236ac2dfa300f
parent485df3df21ff52cd342fe8bb667ca4d57dd35b6e (diff)
parent80300f9daf7ea82ddee2ae2626cd33e84c9c6e7e (diff)
downloadpixel-sepolicy-97c67688d6161f85b6e379d8909dbf16101168ea.tar.gz
pixel-sepolicy/ramdump: create ramdump_vendor_fs am: 80300f9daf
Original change: https://googleplex-android-review.googlesource.com/c/platform/hardware/google/pixel-sepolicy/+/15171196 Change-Id: Id322857f562fe9853ae3dab0deea2f5e8aa15147
-rw-r--r--ramdump/common/file.te1
-rw-r--r--ramdump/ramdump.te3
2 files changed, 3 insertions, 1 deletions
diff --git a/ramdump/common/file.te b/ramdump/common/file.te
index e1382df..78ad1db 100644
--- a/ramdump/common/file.te
+++ b/ramdump/common/file.te
@@ -1,2 +1,3 @@
type ramdump_vendor_data_file, file_type, data_file_type, mlstrustedobject;
type ramdump_vendor_mnt_file, file_type, data_file_type, mlstrustedobject;
+type ramdump_vendor_fs, file_type, data_file_type, mlstrustedobject;
diff --git a/ramdump/ramdump.te b/ramdump/ramdump.te
index 9b3e475..d66139f 100644
--- a/ramdump/ramdump.te
+++ b/ramdump/ramdump.te
@@ -39,7 +39,8 @@ userdebug_or_eng(`
allow ramdump fuse_device:chr_file rw_file_perms;
allow ramdump mnt_vendor_file:dir r_dir_perms;
allow ramdump ramdump_vendor_mnt_file:dir { getattr mounton };
- allow ramdump ramdump_vendor_mnt_file:filesystem { mount unmount relabelfrom relabelto };
+ allow ramdump ramdump_vendor_fs:filesystem { mount unmount relabelfrom relabelto };
+ allow ramdump_vendor_mnt_file ramdump_vendor_fs:filesystem associate;
# Access new Stats AIDL APIs (ag/13714907).
allow ramdump fwk_stats_service:service_manager find;