diff --git a/private/compat/28.0/28.0.ignore.cil b/private/compat/28.0/28.0.ignore.cil index 7a0dafa451d13e30c195e10b3e007d6c65b2e66c..569ea1eefbded91024ad53563fabfeb741bce648 100644 --- a/private/compat/28.0/28.0.ignore.cil +++ b/private/compat/28.0/28.0.ignore.cil @@ -80,6 +80,7 @@ sensor_privacy_service server_configurable_flags_data_file super_block_device + system_event_log_tags_file system_lmk_prop system_suspend_hwservice staging_data_file diff --git a/private/file_contexts b/private/file_contexts index 853d0a709421ec5d45dcf455859de7c69232a79b..196c762f2c1c97e1e49c54cccbd33956f9100fac 100644 --- a/private/file_contexts +++ b/private/file_contexts @@ -287,6 +287,7 @@ /system/bin/hw/android\.frameworks\.bufferhub@1\.0-service u:object_r:fwk_bufferhub_exec:s0 /system/bin/hw/android\.hidl\.allocator@1\.0-service u:object_r:hal_allocator_default_exec:s0 /system/bin/hw/android\.system\.suspend@1\.0-service u:object_r:hal_system_suspend_default_exec:s0 +/system/etc/event-log-tags u:object_r:system_event_log_tags_file:s0 /system/etc/ld\.config.* u:object_r:system_linker_config_file:s0 /system/etc/seccomp_policy(/.*)? u:object_r:system_seccomp_policy_file:s0 /system/etc/security/cacerts(/.*)? u:object_r:system_security_cacerts_file:s0 diff --git a/public/domain.te b/public/domain.te index ab6610f14728dc01f6aec6a9fd93540559d5b30b..6592c7ce54d327ee990a8aeffac7bab6bac36f58 100644 --- a/public/domain.te +++ b/public/domain.te @@ -125,6 +125,8 @@ allow domain system_linker_exec:file { execute read open getattr map }; allow domain system_linker_config_file:file r_file_perms; allow domain system_lib_file:file { execute read open getattr map }; +allow domain system_event_log_tags_file:file r_file_perms; + allow { appdomain coredomain } system_file:file { execute read open getattr map }; # Make sure system/vendor split doesn not affect non-treble @@ -1032,6 +1034,7 @@ full_treble_only(` -file_contexts_file -netutils_wrapper_exec -property_contexts_file + -system_event_log_tags_file -system_lib_file with_asan(`-system_asan_options_file') -system_linker_exec diff --git a/public/file.te b/public/file.te index 86a85dc61034405daf577b0e2b3d987d26690b28..2d266107adb96835fe245a913388289f407141e1 100644 --- a/public/file.te +++ b/public/file.te @@ -135,6 +135,8 @@ type unlabeled, file_type; type system_file, system_file_type, file_type; # Default type for /system/asan.options type system_asan_options_file, system_file_type, file_type; +# Type for /system/etc/event-log-tags (liblog implementation detail) +type system_event_log_tags_file, system_file_type, file_type; # Default type for anything under /system/lib[64]. type system_lib_file, system_file_type, file_type; # Default type for linker executable /system/bin/linker[64].