Allow reading system ION heap size from debugfs
This grants access for system server to read system ION heap size from
debugfs on all builds.
Experiments on userdebug builds show that large ION heap is correlated
with severe LMKs. This CL will help confirm the finding on bigger
population.
Bug: 139283562
Bug: 139659200
Test: m -j
Change-Id: I45bf4489a2c29e7755cbd9a5d1df05d75a296da0
Merged-In: I68f90149a228bcc6f9de25f1e69565cabf173c41
diff --git a/private/system_server.te b/private/system_server.te
index a03c968..e081fd7 100644
--- a/private/system_server.te
+++ b/private/system_server.te
@@ -1,8 +1,5 @@
-userdebug_or_eng(`
- # Read /sys/kernel/debug/ion/heaps/system.
- allow system_server debugfs_system_ion_heap:file r_file_perms;
-')
-dontaudit system_server debugfs_system_ion_heap:file r_file_perms;
+# b/139283562: Read /sys/kernel/debug/ion/heaps/system.
+allow system_server debugfs_system_ion_heap:file r_file_perms;
# b/129561352: Access to cpufreq interface for battery saver experiments.
allow system_server sysfs_devices_system_cpu:file w_file_perms;
