tree da2a2603470ef1f688f0813ecc240d76b9cab4c6
parent 115a60e02ef14f3355e2a57abd5142dcb9e21a42
author Nick Kralevich <nnk@google.com> 1432002322 -0700
committer Nick Kralevich <nnk@google.com> 1432002341 -0700

make /data/diag_logs an mlstrustedobject

QXDM logger runs as a platform app, and is now subject to
SELinux multi-user restrictions. Mark /data/diag_logs as being
safe to access from multiple Android users.

Addresses the following denial:

  05-18 17:27:40.163   319   319 W roid.qxdmlogger: type=1400 audit(0.0:2731): avc: denied { write } for name="rundiag" dev="dm-1" ino=1798722 scontext=u:r:platform_app:s0:c512,c768 tcontext=u:object_r:diag_logs:s0 tclass=file permissive=0
  05-18 17:27:40.193   335   335 W chmod   : type=1400 audit(0.0:2732): avc: denied { setattr } for name="rundiag" dev="dm-1" ino=1798722 scontext=u:r:platform_app:s0:c512,c768 tcontext=u:object_r:diag_logs:s0 tclass=file permissive=0

Bug: 21280070
Change-Id: Iad56825d52fd64ff418ebde72354fccff24e6509