Create directories and add sepolicy for the Pixel Logger app
This app gathers hardware logs from qcom specific endpoints so it's
practically impossible to get it to work completely in
cuttlefish. With this change it's possible to interact with it, but it
will still fail if the record button is pressed.
Bug: 143493313
Test: locally
Change-Id: I71e0938c3371db88f81f064a70fef2f8569bc8b7
diff --git a/shared/config/init.vendor.rc b/shared/config/init.vendor.rc
index 1281ef1..0f111e8 100644
--- a/shared/config/init.vendor.rc
+++ b/shared/config/init.vendor.rc
@@ -80,6 +80,9 @@
on post-fs-data
start vport_trigger
+ mkdir /data/vendor/modem_dump 0777 system system
+ mkdir /data/vendor/radio 0777 system system
+
on late-fs
# Wait for keymaster
diff --git a/shared/sepolicy/vendor/google/file.te b/shared/sepolicy/vendor/google/file.te
new file mode 100644
index 0000000..6215415
--- /dev/null
+++ b/shared/sepolicy/vendor/google/file.te
@@ -0,0 +1 @@
+type radio_vendor_data_file, file_type, data_file_type, mlstrustedobject;
diff --git a/shared/sepolicy/vendor/google/file_contexts b/shared/sepolicy/vendor/google/file_contexts
new file mode 100644
index 0000000..fa35cd3
--- /dev/null
+++ b/shared/sepolicy/vendor/google/file_contexts
@@ -0,0 +1 @@
+/data/vendor/radio(/.*)? u:object_r:radio_vendor_data_file:s0
diff --git a/shared/sepolicy/vendor/google/logger_app.te b/shared/sepolicy/vendor/google/logger_app.te
new file mode 100644
index 0000000..4eb329e
--- /dev/null
+++ b/shared/sepolicy/vendor/google/logger_app.te
@@ -0,0 +1,15 @@
+type logger_app, domain;
+
+# Taken from bonito-sepolicy:
+# https://cs.android.com/android/_/android/device/google/bonito-sepolicy/+/5396ef0aa04dc69ed04ecbc7f55eacf2a76b040b:vendor/qcom/common/logger_app.te;drc=dd2c2053296b0c00b5ef103adcabb8cd82eb0045
+userdebug_or_eng(`
+ app_domain(logger_app)
+ net_domain(logger_app)
+
+ allow logger_app app_api_service:service_manager find;
+ allow logger_app surfaceflinger_service:service_manager find;
+ allow logger_app radio_vendor_data_file:file create_file_perms;
+ allow logger_app radio_vendor_data_file:file rw_file_perms;
+ allow logger_app radio_vendor_data_file:dir create_dir_perms;
+ allow logger_app radio_vendor_data_file:dir rw_dir_perms;
+')
diff --git a/shared/sepolicy/vendor/google/seapp_contexts b/shared/sepolicy/vendor/google/seapp_contexts
index 0be8810..0ba2c3a 100644
--- a/shared/sepolicy/vendor/google/seapp_contexts
+++ b/shared/sepolicy/vendor/google/seapp_contexts
@@ -1,2 +1,3 @@
# Ramdump app
user=_app seinfo=platform name=com.android.ramdump domain=ramdump_app type=app_data_file levelFrom=all
+user=_app seinfo=platform name=com.android.pixellogger domain=logger_app type=app_data_file levelFrom=all
