diff options
| author | Tai Kuo <taikuo@google.com> | 2023-09-12 23:42:40 +0000 |
|---|---|---|
| committer | Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com> | 2023-09-12 23:42:40 +0000 |
| commit | 8cf4f20ca380fe56b2a8e18c01a7066223ef9abd (patch) | |
| tree | 83ee4d78d8808acd65a7abf9b968a341e34db9d1 | |
| parent | 207188241d0ffdb6ce72be47374f5f98be86f7ae (diff) | |
| parent | 1a65e5d5e43de3bb18c01b44243dd6d8103f2e33 (diff) | |
| download | zuma-sepolicy-8cf4f20ca380fe56b2a8e18c01a7066223ef9abd.tar.gz | |
Allow regmap debugfs for drivers probed by insmod am: 1a65e5d5e4
Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/24727593
Change-Id: Ia298dbfa2909cea74711f2f10b0bdca3c301a0a2
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
| -rw-r--r-- | legacy/whitechapel_pro/file.te | 3 | ||||
| -rw-r--r-- | legacy/whitechapel_pro/genfs_contexts | 3 | ||||
| -rw-r--r-- | tracking_denials/bug_map | 1 | ||||
| -rw-r--r-- | vendor/file.te | 1 | ||||
| -rw-r--r-- | vendor/genfs_contexts | 1 | ||||
| -rw-r--r-- | vendor/insmod-sh.te | 1 |
6 files changed, 3 insertions, 7 deletions
diff --git a/legacy/whitechapel_pro/file.te b/legacy/whitechapel_pro/file.te index f59a80b..db0b31f 100644 --- a/legacy/whitechapel_pro/file.te +++ b/legacy/whitechapel_pro/file.te @@ -12,9 +12,6 @@ type sysfs_bcmdhd, sysfs_type, fs_type; type sysfs_chargelevel, sysfs_type, fs_type; type sysfs_camera, sysfs_type, fs_type; -# debugfs -type vendor_regmap_debugfs, fs_type, debugfs_type; - # persist type persist_ss_file, file_type, vendor_persist_type; diff --git a/legacy/whitechapel_pro/genfs_contexts b/legacy/whitechapel_pro/genfs_contexts index dccae4e..34f9ee4 100644 --- a/legacy/whitechapel_pro/genfs_contexts +++ b/legacy/whitechapel_pro/genfs_contexts @@ -30,9 +30,6 @@ genfscon sysfs /devices/platform/wlan/sscoredump/sscd_wlan/report_count genfscon proc /fs/f2fs u:object_r:proc_f2fs:s0 genfscon proc /sys/vm/swappiness u:object_r:proc_dirty:s0 -# debugfs -genfscon debugfs /regmap u:object_r:vendor_regmap_debugfs:s0 - # Haptics genfscon sysfs /devices/platform/10970000.hsi2c/i2c-5/i2c-cs40l26a u:object_r:sysfs_vibrator:s0 genfscon sysfs /devices/platform/10970000.hsi2c/i2c-6/i2c-cs40l26a u:object_r:sysfs_vibrator:s0 diff --git a/tracking_denials/bug_map b/tracking_denials/bug_map index 74f2fbb..7c532ac 100644 --- a/tracking_denials/bug_map +++ b/tracking_denials/bug_map @@ -4,7 +4,6 @@ hal_uwb_default debugfs file b/288049522 incidentd debugfs_wakeup_sources file b/288049561 incidentd incidentd anon_inode b/288049561 insmod-sh insmod-sh key b/274374722 -insmod-sh vendor_regmap_debugfs dir b/274727542 mtectrl unlabeled dir b/264483752 systemui_app wm_trace_data_file dir b/288049075 vendor_init proc file b/289856761 diff --git a/vendor/file.te b/vendor/file.te index c87d37c..ce20aa0 100644 --- a/vendor/file.te +++ b/vendor/file.te @@ -29,6 +29,7 @@ type vendor_battery_debugfs, fs_type, debugfs_type; type vendor_pm_genpd_debugfs, fs_type, debugfs_type; type vendor_usb_debugfs, fs_type, debugfs_type; type vendor_maxfg_debugfs, fs_type, debugfs_type; +type vendor_regmap_debugfs, fs_type, debugfs_type; # WLC type sysfs_wlc, sysfs_type, fs_type; diff --git a/vendor/genfs_contexts b/vendor/genfs_contexts index 254baa0..35a4aff 100644 --- a/vendor/genfs_contexts +++ b/vendor/genfs_contexts @@ -35,6 +35,7 @@ genfscon debugfs /google_battery u:object genfscon debugfs /pm_genpd/pm_genpd_summary u:object_r:vendor_pm_genpd_debugfs:s0 genfscon debugfs /usb u:object_r:vendor_usb_debugfs:s0 genfscon debugfs /maxfg u:object_r:vendor_maxfg_debugfs:s0 +genfscon debugfs /regmap u:object_r:vendor_regmap_debugfs:s0 # Extcon genfscon sysfs /devices/platform/10cb0000.hsi2c/i2c-0/0-0025/extcon/extcon0 u:object_r:sysfs_extcon:s0 diff --git a/vendor/insmod-sh.te b/vendor/insmod-sh.te index e09c248..f80660c 100644 --- a/vendor/insmod-sh.te +++ b/vendor/insmod-sh.te @@ -1,2 +1,3 @@ allow insmod-sh self:capability sys_nice; allow insmod-sh kernel:process setsched; +allow insmod-sh vendor_regmap_debugfs:dir search; |