commit 8b014967417b0d9e4bbb24257e2ed39028b05bde
author Frank Luo <luofrank@google.com> Tue Sep 03 16:34:44 2019 +0800
committer Frank Luo <luofrank@google.com> Tue Sep 24 15:30:23 2019 +0800
tree 62a46ea701bfbc7d96b116ed6aceba0955788402
parent bae337f71fb234668543ad6daf6d07e5ca7ffbcb

sepolicy: allow dumpstate to access sensors_vendor_data_file

From ag/9318102 and ag/9317883, we need to dump sensor logs to bugreport for debug
purpose.

Bug: 140278673
Test: Trigger bugreport and see sensor logs are in dumpstate_board.txt
Change-Id: I565193c1b055bd0fec2ea89c3d8a87f30efb8e0a

vendor/google/hal_dumpstate_impl.te

diff --git a/vendor/google/hal_dumpstate_impl.te b/vendor/google/hal_dumpstate_impl.te
index 8f8d432..0a8b5cf 100644
--- a/vendor/google/hal_dumpstate_impl.te
+++ b/vendor/google/hal_dumpstate_impl.te
@@ -130,6 +130,12 @@
 # Access to knowles framework info
 allow hal_dumpstate_impl sysfs_knowles_info:file r_file_perms;
 
+#dump sensors log
+userdebug_or_eng(`
+  allow hal_dumpstate_impl sensors_vendor_data_file:dir r_dir_perms;
+  allow hal_dumpstate_impl sensors_vendor_data_file:file r_file_perms;
+')
+
 dontaudit hal_dumpstate_impl modem_dump_file:dir create_dir_perms;
 dontaudit hal_dumpstate_impl modem_dump_file:file create_file_perms;
 dontaudit hal_dumpstate_impl netmgrd_data_file:dir r_dir_perms;
@@ -144,3 +150,5 @@
 dontaudit hal_dumpstate_impl mpss_rfs_data_file:file r_file_perms;
 dontaudit hal_dumpstate_impl vendor_modem_diag_prop:file r_file_perms;
 dontaudit hal_dumpstate_impl vendor_tcpdump_log_prop:file r_file_perms;
+dontaudit hal_dumpstate_impl sensors_vendor_data_file:dir r_dir_perms;
+dontaudit hal_dumpstate_impl sensors_vendor_data_file:file r_file_perms;