Skip to content
Snippets Groups Projects
Commit 361ed751 authored by dcashman's avatar dcashman
Browse files

Allow apps to dump meminfo to serial_console.

Executing dumpsys meminfo over the console shell requires that output go to the
console_device.  meminfo passes a fd to each applicaiton thread so that it can
do this in IApplicationThread.dumpMemInfo().  Allow use of this fd.

Addresses the following denial:
type=1400 audit(1426793987.944:4224): avc: denied { read write } for pid=1809 comm="Binder_4" path="/dev/console" dev="tmpfs" ino=5684 scontext=u:r:platform_app:s0 tcontext=u:object_r:console_device:s0 tclass=chr_file

Bug: 17135173
Change-Id: Id5340a1fb3c8dbf41bda427720c4a0047bc557fc
parent 5a5b364c
No related branches found
No related tags found
No related merge requests found
...@@ -177,6 +177,8 @@ allow { appdomain -isolated_app } keystore:keystore_key { test get insert delete ...@@ -177,6 +177,8 @@ allow { appdomain -isolated_app } keystore:keystore_key { test get insert delete
use_keystore({ appdomain -isolated_app }) use_keystore({ appdomain -isolated_app })
allow appdomain console_device:chr_file { read write };
### ###
### CTS-specific rules ### CTS-specific rules
### ###
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment