commit 9bfbb3c0d4f264a239a58d125a02141092cef110
author Michael Eastwood <mweastwood@google.com> Wed Jul 28 21:36:38 2021 +0000
committer Android (Google) Code Review <android-gerrit@google.com> Wed Jul 28 21:36:38 2021 +0000
tree b27c262261a0dc98a1e7e1dd2e5507a17fb8c091
parent fead41d573492e8e2b66e33efd77f413e9644ac7
parent 30bd5e8ed68adc7f5f1f6149dfb763bc43c01a4e

Merge "Allow hal_dumpstate_default to access vendor_camera_debug_prop" into sc-dev

tracking_denials/hal_dumpstate_default.te

diff --git a/tracking_denials/hal_dumpstate_default.te b/tracking_denials/hal_dumpstate_default.te
deleted file mode 100644
index d175c64..0000000
--- a/tracking_denials/hal_dumpstate_default.te
+++ /dev/null
@@ -1,2 +0,0 @@
-# b/193365129
-dontaudit hal_dumpstate_default vendor_camera_debug_prop:file read;

whitechapel/vendor/google/hal_dumpstate_default.te

diff --git a/whitechapel/vendor/google/hal_dumpstate_default.te b/whitechapel/vendor/google/hal_dumpstate_default.te
index 5c61bf4..b5608c1 100644
--- a/whitechapel/vendor/google/hal_dumpstate_default.te
+++ b/whitechapel/vendor/google/hal_dumpstate_default.te
@@ -27,6 +27,9 @@
 allow hal_dumpstate_default vendor_camera_data_file:dir r_dir_perms;
 allow hal_dumpstate_default vendor_camera_data_file:file r_file_perms;
 
+# camera prop access
+get_prop(hal_dumpstate_default, vendor_camera_debug_prop);
+
 allow hal_dumpstate_default vendor_log_file:dir search;
 
 allow hal_dumpstate_default vendor_usf_stats:file execute_no_trans;