dump f2fs in gs-common
Bug: 248143736
Test: adb bugreport
Change-Id: Ifcd0b3aaa017d106530c58a1ce2b56d77af1b12d
diff --git a/storage/sepolicy/dump_storage.te b/storage/sepolicy/dump_storage.te
new file mode 100644
index 0000000..314fa78
--- /dev/null
+++ b/storage/sepolicy/dump_storage.te
@@ -0,0 +1,13 @@
+pixel_bugreport(dump_storage)
+
+allow dump_storage vendor_toolbox_exec:file execute_no_trans;
+
+userdebug_or_eng(`
+ allow dump_storage debugfs_f2fs:dir r_dir_perms;
+ allow dump_storage debugfs_f2fs:file r_file_perms;
+')
+
+get_prop(dump_storage, boottime_public_prop)
+
+dontaudit dump_storage debugfs_f2fs:dir r_dir_perms;
+dontaudit dump_storage debugfs_f2fs:file r_file_perms;
diff --git a/storage/sepolicy/file.te b/storage/sepolicy/file.te
new file mode 100644
index 0000000..64b6b4e
--- /dev/null
+++ b/storage/sepolicy/file.te
@@ -0,0 +1 @@
+type debugfs_f2fs, debugfs_type, fs_type;
diff --git a/storage/sepolicy/file_contexts b/storage/sepolicy/file_contexts
new file mode 100644
index 0000000..eda4cf7
--- /dev/null
+++ b/storage/sepolicy/file_contexts
@@ -0,0 +1 @@
+/vendor/bin/dump/dump_storage\.sh u:object_r:dump_storage_exec:s0
diff --git a/storage/sepolicy/genfs_contexts b/storage/sepolicy/genfs_contexts
new file mode 100644
index 0000000..1a27ec4
--- /dev/null
+++ b/storage/sepolicy/genfs_contexts
@@ -0,0 +1 @@
+genfscon debugfs /f2fs u:object_r:debugfs_f2fs:s0