PWN-Hunter/android_system_sepolicy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge "Fix dumpstate denials related to ot_daemon" into main

Browse Source
This commit is contained in:
Thiébaud Weksteen 2023-12-03 23:09:01 +00:00 committed by Gerrit Code Review
commit cba619bf60
2 changed files with 8 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
private/dumpstate.te
View File

@ -62,6 +62,9 @@ binder_call(dumpstate, automotive_display_service)
# Allow dumpstate to talk to virtual_camera service over binder
binder_call(dumpstate, virtual_camera)
# Allow dumpstate to talk to ot_daemon service over binder
binder_call(dumpstate, ot_daemon)
# Collect metrics on boot time created by init
get_prop(dumpstate, boottime_prop)
@ -71,6 +74,7 @@ allow dumpstate {
statsd
netd
virtual_camera
ot_daemon
}:process signal;
# Only allow dumpstate to dump Keystore on debuggable builds.

4
private/ot_daemon.te
View File

@ -32,3 +32,7 @@ binder_call(ot_daemon, system_server)
# Allow OT daemon to write to statsd
unix_socket_send(ot_daemon, statsdw, statsd)
# For collecting bugreports.
allow ot_daemon dumpstate:fd use;
allow ot_daemon dumpstate:fifo_file write;