From f20b04efdb7ae7cf4432f31b023d4cd209af65a9 Mon Sep 17 00:00:00 2001
From: Steven Moreland <smoreland@google.com>
Date: Tue, 21 Mar 2017 15:58:16 -0700
Subject: [PATCH] Allow bugreport to dump some HAL processes.
Whitelist several hals which can be dumped by bugreports. Don't want to
dump more because of the time it takes and also certain hals have
sensitive data which shouldn't be dumped (i.e. keymaster).
Test: dumps work for given hals
Bug: 36414311
Change-Id: Ic0eddfa95fa33abbc983d3b5161e42c240663f22
---
public/dumpstate.te | 10 ++++++++--
1 file changed, 8 insertions(+), 2 deletions(-)
diff --git a/public/dumpstate.te b/public/dumpstate.te
index 8e645b9db..9b5432977 100644
--- a/public/dumpstate.te
+++ b/public/dumpstate.te
@@ -52,18 +52,24 @@ allow dumpstate domain:process getattr;
allow dumpstate { appdomain system_server }:process signal;
# Signal native processes to dump their stack.
-# This list comes from native_processes_to_dump in dumpstate/utils.c
allow dumpstate {
+ # This list comes from native_processes_to_dump in dumpstate/utils.c
audioserver
cameraserver
drmserver
inputflinger
- mediacodec
mediadrmserver
mediaextractor
mediaserver
sdcardd
surfaceflinger
+
+ # This list comes from hal_interfaces_to_dump in dumpstate/utils.c
+ hal_audio_server
+ hal_bluetooth_server
+ hal_camera_server
+ hal_vr_server
+ mediacodec # TODO(b/36375899): hal_omx_server
}:process signal;
# Connect to tombstoned to intercept dumps.
--
GitLab