Merge "Allow powerhal to adjust hardware composer scheduling" am: fc15657b6b am: f293454418 am: a0de8742f8 am: 5db70795a2
Original change: https://android-review.googlesource.com/c/platform/hardware/google/pixel-sepolicy/+/1923037
Change-Id: Ic04e24981c14f648d8dcff5d75b7b445408334e9
diff --git a/debugpolicy/device.te b/debugpolicy/device.te
index 1deb4ab..c774e3b 100644
--- a/debugpolicy/device.te
+++ b/debugpolicy/device.te
@@ -1 +1 @@
-type dpm_block_device, dev_type, bdev_type;
+type dpm_block_device, dev_type;
diff --git a/input/dumpstate.te b/input/dumpstate.te
index b2c0c81..748ff35 100644
--- a/input/dumpstate.te
+++ b/input/dumpstate.te
@@ -1,2 +1,2 @@
-# b/187795940
-dontaudit dumpstate twoshay:binder call;
+binder_call(dumpstate, twoshay)
+
diff --git a/input/twoshay.te b/input/twoshay.te
index eba1cce..d27fda6 100644
--- a/input/twoshay.te
+++ b/input/twoshay.te
@@ -12,5 +12,9 @@
allow twoshay fwk_stats_service:service_manager find;
binder_call(twoshay, stats_service_server)
+# Allow dumpsys output in bugreports.
+allow twoshay dumpstate:fd use;
+allow twoshay dumpstate:fifo_file write;
+
# b/198755236
dontaudit twoshay twoshay:capability dac_override;
diff --git a/pixelstats/file_contexts b/pixelstats/file_contexts
new file mode 100644
index 0000000..a899889
--- /dev/null
+++ b/pixelstats/file_contexts
@@ -0,0 +1,3 @@
+# pixelstats binary
+/vendor/bin/pixelstats-vendor u:object_r:pixelstats_vendor_exec:s0
+
diff --git a/pixelstats/pixelstats_vendor.te b/pixelstats/pixelstats_vendor.te
index 4b43168..57aba2f 100644
--- a/pixelstats/pixelstats_vendor.te
+++ b/pixelstats/pixelstats_vendor.te
@@ -1,3 +1,8 @@
+type pixelstats_vendor, domain;
+
+type pixelstats_vendor_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(pixelstats_vendor)
+
# UeventListener
r_dir_file(pixelstats_vendor, sysfs_batteryinfo)
allow pixelstats_vendor sysfs_batteryinfo:file w_file_perms;
diff --git a/ramdump/common/file.te b/ramdump/common/file.te
index 78ad1db..93b947f 100644
--- a/ramdump/common/file.te
+++ b/ramdump/common/file.te
@@ -1,3 +1,3 @@
type ramdump_vendor_data_file, file_type, data_file_type, mlstrustedobject;
type ramdump_vendor_mnt_file, file_type, data_file_type, mlstrustedobject;
-type ramdump_vendor_fs, file_type, data_file_type, mlstrustedobject;
+type ramdump_vendor_fs, fusefs_type, data_file_type, mlstrustedobject;