Allow reading system ION heap size from debugfs
This grants access for system server to read system ION heap size from
debugfs on all builds.
Experiments on userdebug builds show that large ION heap is correlated
with severe LMKs. This CL will help confirm the finding on bigger
population.
Bug: 139283562
Bug: 139659200
Test: m -j
Change-Id: Iae31baf82eda3789fa50f04498fee5a291add922
Merged-In: Icf21f6d502b2d134f28e4fb58f339178b6747dd4
diff --git a/private/system_server.te b/private/system_server.te
index 7e0bba4..2f4696a 100644
--- a/private/system_server.te
+++ b/private/system_server.te
@@ -1,5 +1,2 @@
-userdebug_or_eng(`
- # Read /sys/kernel/debug/ion/heaps/system.
- allow system_server debugfs_system_ion_heap:file r_file_perms;
-')
-dontaudit system_server debugfs_system_ion_heap:file r_file_perms;
+# b/139283562: Read /sys/kernel/debug/ion/heaps/system.
+allow system_server debugfs_system_ion_heap:file r_file_perms;
