commit b93164076a0fbcf78af63e439dc128d08a2d8708
author Jeff Vander Stoep <jeffv@google.com> Fri Oct 20 13:00:40 2017 -0700
committer Jeff Vander Stoep <jeffv@google.com> Wed Nov 15 12:55:38 2017 -0800
tree 1b67a4f4cf7c20fc9986f361f66d3e4a2757e040
parent 4c44680ee099543686b3eb6553159530843cfc37

Remove dumpstate HAL's access to radio app data

These permissions no longer appear to be needed.

Bug: 34980020
Test: adb bugreport, not denials for radio_data_file
Change-Id: Id20a3cc87d78ef547811dffe230d13772f1504b0
Merged-In: Id20a3cc87d78ef547811dffe230d13772f1504b0
(cherry picked from commit 97e8a770f6129986202161663edeaa1169e92914)

sepolicy/vendor/hal_dumpstate_impl.te

diff --git a/sepolicy/vendor/hal_dumpstate_impl.te b/sepolicy/vendor/hal_dumpstate_impl.te
index 38461d2..5b26697 100644
--- a/sepolicy/vendor/hal_dumpstate_impl.te
+++ b/sepolicy/vendor/hal_dumpstate_impl.te
@@ -13,10 +13,8 @@
   domain_auto_trans(hal_dumpstate_impl, smlog_dump_exec, smlog_dump)
   allow hal_dumpstate_impl modem_dump_file:dir create_dir_perms;
   allow hal_dumpstate_impl modem_dump_file:file create_file_perms;
-  allow hal_dumpstate_impl radio_data_file:dir r_dir_perms;
   allow hal_dumpstate_impl radio_vendor_data_file:dir r_dir_perms;
   allow hal_dumpstate_impl netmgr_data_file:dir r_dir_perms;
-  allow hal_dumpstate_impl radio_data_file:file r_file_perms;
   allow hal_dumpstate_impl radio_vendor_data_file:file r_file_perms;
   allow hal_dumpstate_impl netmgr_data_file:file r_file_perms;
   allow hal_dumpstate_impl debugfs_ipc:dir r_dir_perms;