BugReport: add necessary rules for dumpstate
Bug: 147730517
Test: $ cts-tradefed run cts -m CtsSecurityHostTestCases -t android.security.cts.SELinuxHostTest#testNoBugreportDenials
And see the avc denials are gone.
Change-Id: I2839861edefbacd6ee24921e7bc5fe6a029d6605
Merged-In: I2839861edefbacd6ee24921e7bc5fe6a029d6605
diff --git a/vendor/google/dumpstate.te b/vendor/google/dumpstate.te
new file mode 100644
index 0000000..05455fd
--- /dev/null
+++ b/vendor/google/dumpstate.te
@@ -0,0 +1,12 @@
+userdebug_or_eng(`
+ allow dumpstate debugfs_dma_buf:file r_file_perms;
+')
+
+# For collecting bugreports.
+allow dumpstate sysfs_scsi_devices_0000:file r_file_perms;
+
+allow dumpstate persist_file:dir r_dir_perms;
+allow dumpstate firmware_file:dir r_dir_perms;
+allow dumpstate firmware_file:filesystem getattr;
+
+dontaudit dumpstate debugfs_dma_buf:file r_file_perms;
diff --git a/vendor/google/genfs_contexts b/vendor/google/genfs_contexts
index c92c3d5..b9ec2b0 100644
--- a/vendor/google/genfs_contexts
+++ b/vendor/google/genfs_contexts
@@ -85,7 +85,7 @@
genfscon sysfs /devices/platform/soc/c440000.qcom,spmi/spmi-0/spmi0-02/c440000.qcom,spmi:qcom,pm7250b@2:qcom,usb-pdphy@1700/usbpd/usbpd0 u:object_r:sysfs_batteryinfo:s0
genfscon sysfs /devices/platform/soc/c440000.qcom,spmi/spmi-0/spmi0-02/c440000.qcom,spmi:qcom,pm7250b@2:google,bms/power_supply u:object_r:sysfs_batteryinfo:s0
genfscon sysfs /devices/platform/soc/1d84000.ufshc/health_descriptor u:object_r:sysfs_scsi_devices_0000:s0
-genfscon sysfs /devices/platform/soc/1d84000.ufshc/host0/target0:0:0/0:0:0:0 u:object_r:sysfs_scsi_devices_0000:s0
+genfscon sysfs /devices/platform/soc/1d84000.ufshc/host0/target0:0:0/0:0:0: u:object_r:sysfs_scsi_devices_0000:s0
genfscon sysfs /class/qcom-battery u:object_r:sysfs_batteryinfo:s0
genfscon debugfs /logbuffer/ssoc u:object_r:debugfs_batteryinfo:s0
genfscon debugfs /logbuffer/ttf u:object_r:debugfs_batteryinfo:s0
