Merge "[TSV2] Add sepolicy for dumpstate to zip tcpdump into bugreport" into udc-d1-dev

This commit is contained in:
Treehugger Robot 2023-04-28 06:38:20 +00:00 committed by Android (Google) Code Review
commit 47815b3e2a
3 changed files with 9 additions and 0 deletions

View File

@ -3,6 +3,8 @@ pixel_bugreport(dump_radio)
userdebug_or_eng(`
allow dump_radio radio_vendor_data_file:dir create_dir_perms;
allow dump_radio radio_vendor_data_file:file create_file_perms;
allow dump_radio tcpdump_vendor_data_file:dir r_dir_perms;
allow dump_radio tcpdump_vendor_data_file:file r_file_perms;
get_prop(dump_radio, vendor_rild_prop)
get_prop(dump_radio vendor_tcpdump_log_prop)
')

6
radio/sepolicy/file.te Normal file
View File

@ -0,0 +1,6 @@
# Data
type tcpdump_vendor_data_file, file_type, data_file_type;
userdebug_or_eng(`
typeattribute tcpdump_vendor_data_file mlstrustedobject;
')

View File

@ -1 +1,2 @@
/vendor/bin/dump/dump_radio u:object_r:dump_radio_exec:s0
/data/vendor/tcpdump_logger(/.*)? u:object_r:tcpdump_vendor_data_file:s0