Merge "Audit generic debugfs access for removal"

am: 65352c90 Change-Id: I86811ccd2e68cdd4f64a250e9b79f3386a9eebc4

Merge "Audit generic debugfs access for removal"
am: 65352c90 Change-Id: I86811ccd2e68cdd4f64a250e9b79f3386a9eebc4
810ad5f2 · android-build-prod (mdb) · android-build-merger · 19e74c56 · 65352c90 · 810ad5f2
Commit 810ad5f2 authored 7 years ago by android-build-prod (mdb) Committed by android-build-merger 7 years ago
--- a/private/system_server.te
+++ b/private/system_server.te
@@ -137,6 +137,7 @@ allow system_server stats_data_file:file unlink;

 # Read /sys/kernel/debug/wakeup_sources.
 allow system_server debugfs:file r_file_perms;
+auditallow system_server debugfs:file r_file_perms;
 allow system_server debugfs_wakeup_sources:file r_file_perms;

 # The DhcpClient and WifiWatchdog use packet_sockets

--- a/public/dumpstate.te
+++ b/public/dumpstate.te
@@ -93,6 +93,7 @@ allow dumpstate {

 # Other random bits of data we want to collect
 allow dumpstate debugfs:file r_file_perms;
+auditallow dumpstate debugfs:file r_file_perms;

 # df for
 allow dumpstate {