diff --git a/non_plat/dumpstate.te b/non_plat/dumpstate.te index 5f0871c..7ecfca6 100644 --- a/non_plat/dumpstate.te +++ b/non_plat/dumpstate.te @@ -164,3 +164,7 @@ allow dumpstate mnt_media_rw_file:dir getattr; # Purpose: fix google dumpstate avc error in xTs allow dumpstate sysfs_mmcblk1:file r_file_perms; allow dumpstate proc_last_kmsg:file r_file_perms; + +# Date: 19/07/15 +# Purpose: Allow dumpstate to read /sys/kernel/debug/kmemleak +allow dumpstate debugfs_kmemleak:file r_file_perms; diff --git a/non_plat/file.te b/non_plat/file.te index 4dbbc3c..71cbd87 100644 --- a/non_plat/file.te +++ b/non_plat/file.te @@ -251,6 +251,9 @@ type debugfs_emi_mbw_buf, fs_type, debugfs_type; # /sys/kernel/debug/vpu/device_dbg type debugfs_vpu_device_dbg, fs_type, debugfs_type; +# /sys/kernel/debug/kmemleak +type debugfs_kmemleak, fs_type, debugfs_type; + ###################################### # core domain file data @@ -368,4 +371,4 @@ type netd_socket, file_type, coredomain_socket; # Date : WK19.27 # Purpose: Android Migration for SVP -type proc_m4u, fs_type, proc_type; \ No newline at end of file +type proc_m4u, fs_type, proc_type; diff --git a/non_plat/file_contexts b/non_plat/file_contexts index 139247c..f51bb83 100644 --- a/non_plat/file_contexts +++ b/non_plat/file_contexts @@ -524,6 +524,7 @@ /sys/kernel/debug/fpsgo(/.*)? u:object_r:debugfs_fpsgo:s0 /sys/kernel/debug/emi_mbw/dump_buf(/.*)? u:object_r:debugfs_emi_mbw_buf:s0 /sys/kernel/debug/vpu/device_dbg(/.*)? u:object_r:debugfs_vpu_device_dbg:s0 +/sys/kernel/debug/kmemleak u:object_r:debugfs_kmemleak:s0 ############################# # System files