diff --git a/private/dumpstate.te b/private/dumpstate.te index 8b72457e3f93e5fb26eca09acef44a4bbc07e815..2c2a62f538403dc6d9fefa42a3b9b0d780f9c277 100644 --- a/private/dumpstate.te +++ b/private/dumpstate.te @@ -38,3 +38,10 @@ get_prop(dumpstate, boottime_prop) allow dumpstate { statsd }:process signal; + +# For collecting bugreports. +allow dumpstate debugfs_wakeup_sources:file r_file_perms; +allow dumpstate dev_type:blk_file getattr; +allow dumpstate webview_zygote:process signal; +dontaudit dumpstate perfprofd:binder call; +dontaudit dumpstate update_engine:binder call; diff --git a/private/installd.te b/private/installd.te index f74843dd135d4f6550d2dc6ff8c58e1ac343c550..055371631f70192590f8e0c4e47bd2599581d46d 100644 --- a/private/installd.te +++ b/private/installd.te @@ -16,3 +16,7 @@ domain_auto_trans(installd, idmap_exec, idmap) # Create /data/.layout_version.* file type_transition installd system_data_file:file install_data_file; + +# For collecting bugreports. +allow installd dumpstate:fd use; +allow installd dumpstate:fifo_file r_file_perms; diff --git a/private/storaged.te b/private/storaged.te index f5b709245166feef349943366aa7c07d26a4ff29..8ad872f61035767556ac7fe198103163aeac730d 100644 --- a/private/storaged.te +++ b/private/storaged.te @@ -51,6 +51,9 @@ allow storaged package_native_service:service_manager find; # running as root. See b/35323867 #3. dontaudit storaged self:global_capability_class_set dac_override; +# For collecting bugreports. +allow storaged dumpstate:fifo_file write; + ### ### neverallow ### diff --git a/vendor/hal_camera_default.te b/vendor/hal_camera_default.te index 239e5c19bd338ea09b258b3423ae95541ab06dc0..5bc4a619178ab9fea0e83524c9f987d79e92dd2b 100644 --- a/vendor/hal_camera_default.te +++ b/vendor/hal_camera_default.te @@ -5,3 +5,7 @@ type hal_camera_default_exec, exec_type, vendor_file_type, file_type; init_daemon_domain(hal_camera_default) allow hal_camera_default fwk_sensor_hwservice:hwservice_manager find; + +# For collecting bugreports. +allow hal_camera_default dumpstate:fd use; +allow hal_camera_default dumpstate:fifo_file write;