Merge "Audit generic debugfs access for removal" am: 65352c90

am: 810ad5f2 Change-Id: I8e5cf7eaf9eb290090adfb5c2821a7efdd9e1acf

Merge "Audit generic debugfs access for removal" am: 65352c90
am: 810ad5f2 Change-Id: I8e5cf7eaf9eb290090adfb5c2821a7efdd9e1acf
5afce150 · android-build-prod (mdb) · android-build-merger · 2b151c77 · 810ad5f2 · 5afce150
Commit 5afce150 authored 7 years ago by android-build-prod (mdb) Committed by android-build-merger 7 years ago
--- a/private/system_server.te
+++ b/private/system_server.te
@@ -139,6 +139,7 @@ allow system_server stats_data_file:file unlink;

 # Read /sys/kernel/debug/wakeup_sources.
 allow system_server debugfs:file r_file_perms;
+auditallow system_server debugfs:file r_file_perms;
 allow system_server debugfs_wakeup_sources:file r_file_perms;

 # Delete /data/misc/stats-data/ and /data/misc/stats-service/ directories.

--- a/public/dumpstate.te
+++ b/public/dumpstate.te
@@ -94,6 +94,7 @@ allow dumpstate {

 # Other random bits of data we want to collect
 allow dumpstate debugfs:file r_file_perms;
+auditallow dumpstate debugfs:file r_file_perms;

 # df for
 allow dumpstate {