Merge "debuggerd: Allow "debug.db.uid" usage" into klp-modular-dev

debuggerd.te

@@ -23,3 +23,8 @@ allow debuggerd system_data_file:file open;
 
 # Connect to system_server via /data/system/ndebugsocket.
 unix_socket_connect(debuggerd, system_ndebug, system_server)
+
+userdebug_or_eng(`
+  allow debuggerd input_device:dir r_dir_perms;
+  allow debuggerd input_device:chr_file rw_file_perms;
+')

property.te

 type default_prop, property_type;
 type shell_prop, property_type;
 type debug_prop, property_type;
+type debuggerd_prop, property_type;
 type radio_prop, property_type;
 type system_prop, property_type;
 type vold_prop, property_type;

property_contexts

@@ -27,6 +27,7 @@ dhcp.                   u:object_r:system_prop:s0
 bluetooth.              u:object_r:bluetooth_prop:s0
 
 debug.                  u:object_r:debug_prop:s0
+debug.db.               u:object_r:debuggerd_prop:s0
 log.                    u:object_r:shell_prop:s0
 service.adb.root        u:object_r:shell_prop:s0
 service.adb.tcp.port    u:object_r:shell_prop:s0

su.te

@@ -16,6 +16,7 @@ userdebug_or_eng(`
   allow su self:process execmem;
   tmpfs_domain(su)
   allow su su_tmpfs:file execute;
+  allow su debuggerd_prop:property_service set;
 
   # su is also permissive to permit setenforce.
   permissive su;