diff options
| author | Yiwei Zhang <zzyiwei@google.com> | 2020-01-09 18:15:25 -0800 |
|---|---|---|
| committer | Yiwei Zhang <zzyiwei@google.com> | 2020-01-09 18:51:24 -0800 |
| commit | b5c47df035086cda964e6afb6411b9f8a0084fca (patch) | |
| tree | d491f0d43bef5ca8770951f829d1eb6a6b6e56fa | |
| parent | 6daec46264b5bfdfec6f249443133d74222d48e0 (diff) | |
| download | android_system_sepolicy-b5c47df035086cda964e6afb6411b9f8a0084fca.tar.gz android_system_sepolicy-b5c47df035086cda964e6afb6411b9f8a0084fca.tar.bz2 android_system_sepolicy-b5c47df035086cda964e6afb6411b9f8a0084fca.zip | |
Revert "Revert "Allow dumpstate to dumpsys gpu""
This reverts commit 6daec46264b5bfdfec6f249443133d74222d48e0.
Reason for revert: b/147458874
Bug: 132402890
Test: build passes on coral-userdebug
Change-Id: Ibcbc06e99561be424aa953e62985abb5b5864c56
| -rw-r--r-- | prebuilts/api/29.0/private/gpuservice.te | 4 | ||||
| -rw-r--r-- | private/gpuservice.te | 4 |
2 files changed, 8 insertions, 0 deletions
diff --git a/prebuilts/api/29.0/private/gpuservice.te b/prebuilts/api/29.0/private/gpuservice.te index ebfff768..9e17d064 100644 --- a/prebuilts/api/29.0/private/gpuservice.te +++ b/prebuilts/api/29.0/private/gpuservice.te @@ -31,6 +31,10 @@ allow gpuservice adbd:unix_stream_socket { read write getattr }; # Needed for interactive shell allow gpuservice devpts:chr_file { read write getattr }; +# Needed for dumpstate to dumpsys gpu. +allow gpuservice dumpstate:fd use; +allow gpuservice dumpstate:fifo_file write; + add_service(gpuservice, gpu_service) # Only uncomment below line when in development diff --git a/private/gpuservice.te b/private/gpuservice.te index ebfff768..9e17d064 100644 --- a/private/gpuservice.te +++ b/private/gpuservice.te @@ -31,6 +31,10 @@ allow gpuservice adbd:unix_stream_socket { read write getattr }; # Needed for interactive shell allow gpuservice devpts:chr_file { read write getattr }; +# Needed for dumpstate to dumpsys gpu. +allow gpuservice dumpstate:fd use; +allow gpuservice dumpstate:fifo_file write; + add_service(gpuservice, gpu_service) # Only uncomment below line when in development |