diff options
| author | Android Build Coastguard Worker <android-build-coastguard-worker@google.com> | 2022-06-07 18:49:14 +0000 |
|---|---|---|
| committer | Android Build Coastguard Worker <android-build-coastguard-worker@google.com> | 2022-06-07 18:49:14 +0000 |
| commit | 0cde46394f9a46f2af29147fe77c51e6dc927d02 (patch) | |
| tree | 288082be18181d7cf02c26d909195d3fc3b2dc86 | |
| parent | d918241a085fe6adfef1272872ffd069881e8fc7 (diff) | |
| parent | 7cc8181d16e0afabd3086c74ee81f213960b37a8 (diff) | |
| download | redbull-sepolicy-android13-frc-odp-release.tar.gz | |
Snap for 8692753 from 7cc8181d16e0afabd3086c74ee81f213960b37a8 to tm-frc-odp-releaset_frc_odp_330442040t_frc_odp_330442000android13-frc-odp-release
Change-Id: I77c6c9edcfc7ecc5dcb09d5f2d79467bfe4fea3d
| -rw-r--r-- | tracking_denials/dumpstate.te | 2 | ||||
| -rw-r--r-- | vendor/qcom/common/file.te | 1 | ||||
| -rw-r--r-- | vendor/qcom/common/genfs_contexts | 1 | ||||
| -rw-r--r-- | vendor/qcom/common/shell.te | 3 |
4 files changed, 7 insertions, 0 deletions
diff --git a/tracking_denials/dumpstate.te b/tracking_denials/dumpstate.te new file mode 100644 index 0000000..c415668 --- /dev/null +++ b/tracking_denials/dumpstate.te @@ -0,0 +1,2 @@ +# b/233569257 +dontaudit dumpstate app_zygote:process { signal }; diff --git a/vendor/qcom/common/file.te b/vendor/qcom/common/file.te index 0533681..99b8620 100644 --- a/vendor/qcom/common/file.te +++ b/vendor/qcom/common/file.te @@ -40,6 +40,7 @@ type sysfs_rmtfs, sysfs_type, fs_type; type adsprpcd_file, file_type, mlstrustedobject, vendor_file_type; type persist_time_file, file_type, vendor_persist_type; type sysfs_kgsl_proc, sysfs_type, fs_type; +type sysfs_kgsl_shell, sysfs_type, fs_type; type sysfs_diag, fs_type, sysfs_type; type vendor_radio_data_file, file_type, data_file_type, mlstrustedobject; type sensors_vendor_data_file, file_type, data_file_type; diff --git a/vendor/qcom/common/genfs_contexts b/vendor/qcom/common/genfs_contexts index 2ddedb9..5b8182a 100644 --- a/vendor/qcom/common/genfs_contexts +++ b/vendor/qcom/common/genfs_contexts @@ -6,6 +6,7 @@ genfscon sysfs /class/uio genfscon sysfs /devices/virtual/kgsl/kgsl/proc u:object_r:sysfs_kgsl_proc:s0 genfscon sysfs /devices/platform/soc/0.qcom,rmtfs_sharedmem u:object_r:sysfs_rmtfs:s0 genfscon sysfs /devices/platform/soc/soc:qcom,kgsl-hyp u:object_r:sysfs_msm_subsys:s0 +genfscon sysfs /devices/platform/soc/3d00000.qcom,kgsl-3d0/kgsl/kgsl-3d0/perfcounter u:object_r:sysfs_kgsl_shell:s0 genfscon sysfs /bus/esoc u:object_r:sysfs_esoc:s0 genfscon sysfs /bus/msm_subsys u:object_r:sysfs_msm_subsys:s0 genfscon debugfs /wlan u:object_r:debugfs_wlan:s0 diff --git a/vendor/qcom/common/shell.te b/vendor/qcom/common/shell.te new file mode 100644 index 0000000..cd0e4a4 --- /dev/null +++ b/vendor/qcom/common/shell.te @@ -0,0 +1,3 @@ +# allow shell users to control kgsl perfcounters +allow shell sysfs_kgsl_shell:file rw_file_perms; +allow shell sysfs_msm_subsys:dir r_dir_perms; |