Add sepolicy for dumpstate to zip tcpdump into bugreport am: 6a41ee1f21 am: c08e025b25

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs-common/+/22808556

Change-Id: I4c32888bfbdbc60caea97b53131bc5ffca8ae84f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
This commit is contained in:
martinwu 2023-04-27 02:58:05 +00:00 committed by Automerger Merge Worker
commit 6d6104a533
3 changed files with 9 additions and 0 deletions

View File

@ -3,6 +3,8 @@ pixel_bugreport(dump_radio)
userdebug_or_eng(`
allow dump_radio radio_vendor_data_file:dir create_dir_perms;
allow dump_radio radio_vendor_data_file:file create_file_perms;
allow dump_radio tcpdump_vendor_data_file:dir r_dir_perms;
allow dump_radio tcpdump_vendor_data_file:file r_file_perms;
get_prop(dump_radio, vendor_rild_prop)
get_prop(dump_radio vendor_tcpdump_log_prop)
')

6
radio/sepolicy/file.te Normal file
View File

@ -0,0 +1,6 @@
# Data
type tcpdump_vendor_data_file, file_type, data_file_type;
userdebug_or_eng(`
typeattribute tcpdump_vendor_data_file mlstrustedobject;
')

View File

@ -1 +1,2 @@
/vendor/bin/dump/dump_radio u:object_r:dump_radio_exec:s0
/data/vendor/tcpdump_logger(/.*)? u:object_r:tcpdump_vendor_data_file:s0