Merge "sepolicy: add policies for logbuffer_device" into rvc-d1-dev
diff --git a/vendor/google/device.te b/vendor/google/device.te
index 038c9c7..734a6ee 100644
--- a/vendor/google/device.te
+++ b/vendor/google/device.te
@@ -3,5 +3,6 @@
type rls_device, dev_type;
type dp_block_device, dev_type;
type qg_device, dev_type;
+type logbuffer_device, dev_type;
type smcinvoke_device, dev_type;
type battery_history_device, dev_type;
diff --git a/vendor/google/file_contexts b/vendor/google/file_contexts
index d5da822..6400b06 100644
--- a/vendor/google/file_contexts
+++ b/vendor/google/file_contexts
@@ -9,6 +9,13 @@
/dev/qg u:object_r:qg_device:s0
/dev/qg_battery u:object_r:qg_device:s0
/dev/battery_history u:object_r:battery_history_device:s0
+/dev/logbuffer_usbpd u:object_r:logbuffer_device:s0
+/dev/logbuffer_pps u:object_r:logbuffer_device:s0
+/dev/logbuffer_ssoc u:object_r:logbuffer_device:s0
+/dev/logbuffer_smblib u:object_r:logbuffer_device:s0
+/dev/logbuffer_ttf u:object_r:logbuffer_device:s0
+/dev/logbuffer_wireless u:object_r:logbuffer_device:s0
+/dev/logbuffer_rtx u:object_r:logbuffer_device:s0
# pixelstats binary
/vendor/bin/pixelstats-vendor u:object_r:pixelstats_vendor_exec:s0
diff --git a/vendor/google/hal_dumpstate_impl.te b/vendor/google/hal_dumpstate_impl.te
index aa5c48e..0b55064 100644
--- a/vendor/google/hal_dumpstate_impl.te
+++ b/vendor/google/hal_dumpstate_impl.te
@@ -110,6 +110,9 @@
# Access to files for dumping
allow hal_dumpstate_impl sysfs:dir r_dir_perms;
+# Access /dev/logbuffer*
+allow hal_dumpstate_impl logbuffer_device:chr_file {open read};
+
dontaudit hal_dumpstate_impl tcpdump_vendor_data_file:dir create_dir_perms;
dontaudit hal_dumpstate_impl tcpdump_vendor_data_file:file create_file_perms;
dontaudit hal_dumpstate_impl vendor_tcpdump_log_prop:file r_file_perms;
