PWN-Hunter/android_system_sepolicy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add hal_dumpstate attribute.

Browse Source 
- Also allow dumpstate to talk to hal_dumpstate.

Bug: 31982882
Test: compiles
Change-Id: Ib9cf0027ee7e71fa40b9ccc29fc8dccea6977e5c
This commit is contained in:
Steven Moreland 2016-12-01 09:39:10 -08:00
parent 137a13d5f5
commit d86a30a273
5 changed files with 12 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
private/file_contexts
View File

@ -231,6 +231,7 @@
/system/lib(64)?/libart.* u:object_r:libart_file:s0
/system/bin/hw/android\.hardware\.audio@2\.0-service u:object_r:hal_audio_default_exec:s0
/system/bin/hw/android\.hardware\.boot@1\.0-service u:object_r:hal_boot_exec:s0
/system/bin/hw/android\.hardware\.dumpstate@1\.0-service u:object_r:hal_dumpstate_default_exec:s0
/system/bin/hw/android\.hardware\.graphics\.allocator@2\.0-service u:object_r:hal_graphics_allocator_default_exec:s0
/system/bin/hw/android\.hardware\.graphics\.composer@2\.1-service u:object_r:hal_graphics_composer_default_exec:s0
/system/bin/hw/android\.hardware\.health@1\.0-service u:object_r:hal_health_exec:s0

4
private/hal_dumpstate_default.te Normal file
View File

@ -0,0 +1,4 @@
type hal_dumpstate_default, hal_dumpstate, domain;
type hal_dumpstate_default_exec, exec_type, file_type;
init_daemon_domain(hal_dumpstate_default)

1
public/attributes
View File

@ -116,6 +116,7 @@ attribute update_engine_common;
# HALs
attribute hal_audio;
attribute hal_dumpstate;
attribute hal_graphics_allocator;
attribute hal_graphics_composer;
attribute hal_ir;

1
public/dumpstate.te
View File

@ -99,6 +99,7 @@ binder_call(dumpstate, { appdomain ephemeral_app netd wificond })
# Vibrate the device after we are done collecting the bugreport
# For binderized mode:
binder_call(dumpstate, hal_dumpstate)
binder_call(dumpstate, hal_vibrator)
binder_call(dumpstate, hwservicemanager)
# For passthrough mode:

5
public/hal_dumpstate.te Normal file
View File

@ -0,0 +1,5 @@
# hwbinder access
hwbinder_use(hal_dumpstate)
# call into dumpstate process (callbacks)
binder_call(hal_dumpstate, dumpstate)