commit f1ccbd457985b2da7bdfbf57e654b4d70c27ab32
author Leo Liou <leoliou@google.com> Thu Mar 26 15:49:27 2020 +0800
committer Leo Liou <leoliou@google.com> Thu Mar 26 18:53:50 2020 +0800
tree 28d2101d8d1606548d390feb4f2657a82b819dc3
parent 53aa0b994ecaa004582070def5a125657b96c713

sepolicy: add block access rule for dumpstate

avc: denied { search } for name="block" dev="tmpfs" ino=21964
scontext=u:r:hal_dumpstate_impl:s0 tcontext=u:object_r:block_device:s0
tclass=dir permissive=0

Bug: 152450566
Test: run bugreport
Change-Id: I844c91bb8005626b8403f757cc246a19d57f7974
Signed-off-by: Leo Liou <leoliou@google.com>

vendor/qcom/common/hal_dumpstate_impl.te

diff --git a/vendor/qcom/common/hal_dumpstate_impl.te b/vendor/qcom/common/hal_dumpstate_impl.te
index d3bd643..342fa31 100644
--- a/vendor/qcom/common/hal_dumpstate_impl.te
+++ b/vendor/qcom/common/hal_dumpstate_impl.te
@@ -84,6 +84,7 @@
 allow hal_dumpstate_impl proc_stat:file r_file_perms;
 allow hal_dumpstate_impl proc_f2fs:dir r_dir_perms;
 allow hal_dumpstate_impl proc_f2fs:file r_file_perms;
+allow hal_dumpstate_impl block_device:dir r_dir_perms;
 
 # Access to files for dumping
 allow hal_dumpstate_impl  sysfs:dir r_dir_perms;