diff --git a/plat_private/dumpstate.te b/plat_private/dumpstate.te index 43b0f00..486476a 100644 --- a/plat_private/dumpstate.te +++ b/plat_private/dumpstate.te @@ -49,3 +49,9 @@ allow dumpstate sysfs_vibrator:file write; # Purpose : Allow dumpstate self to sys_nice allow dumpstate self:capability sys_nice; + +# Date: W1826 +# Purpose : mobile_log_d exec 'logcat -L' via dumpstate +allow dumpstate mobile_log_d:fd use; +allow dumpstate mobile_log_d:fifo_file write; +allow dumpstate mobile_log_d:unix_stream_socket { read write }; diff --git a/plat_private/mobile_log_d.te b/plat_private/mobile_log_d.te index 39f6e0b..d4e679c 100644 --- a/plat_private/mobile_log_d.te +++ b/plat_private/mobile_log_d.te @@ -32,6 +32,12 @@ allow mobile_log_d system_file:file execute_no_trans; #shell command allow mobile_log_d shell_exec:file rx_file_perms; +# execute logcat command +allow mobile_log_d logcat_exec:file rx_file_perms; + +# execute 'logcat -L' via dumpstate +domain_auto_trans(mobile_log_d, logcat_exec, dumpstate) + #general storage access allow mobile_log_d storage_file:dir create_dir_perms; allow mobile_log_d storage_file:file create_file_perms;