Skip to content
Snippets Groups Projects
Commit 33ded4a6 authored by Joel Galenson's avatar Joel Galenson
Browse files

Allow dumpstate to call mediaswcodec over binder

This prevents denials while taking a bugreport.

Test: cts-tradefed run cts -m CtsSecurityHostTestCases -t
android.security.cts.SELinuxHostTest#testNoBugreportDenials

Change-Id: I381b39fa127f82fcef5d820a04209fd1ba4f63cd
parent faba4312
No related branches found
No related tags found
No related merge requests found
...@@ -278,6 +278,9 @@ dontaudit dumpstate apex_mnt_dir:dir getattr; ...@@ -278,6 +278,9 @@ dontaudit dumpstate apex_mnt_dir:dir getattr;
# Allow dumpstate to talk to bufferhubd over binder # Allow dumpstate to talk to bufferhubd over binder
binder_call(dumpstate, bufferhubd); binder_call(dumpstate, bufferhubd);
# Allow dumpstate to talk to mediaswcodec over binder
binder_call(dumpstate, mediaswcodec);
# Allow dumpstate to kill vendor dumpstate service by init # Allow dumpstate to kill vendor dumpstate service by init
set_prop(dumpstate, ctl_dumpstate_prop) set_prop(dumpstate, ctl_dumpstate_prop)
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment