commit 23f9f51fcdfe85d1c5cdafedd08e0bf958094520
author Hridya Valsaraju <hridya@google.com> Tue May 04 22:01:51 2021 -0700
committer Hridya Valsaraju <hridya@google.com> Tue May 04 22:06:46 2021 -0700
tree 996494dac4d4af27628b263f2f31caa64d7b8e6c
parent 6c03124c3c76df773240c6b7d0f2c2f0dc8a3ef5

Revert "Revert "Add neverallows for debugfs access""

This reverts commit e95e0ec0a5f2f6fdf362d14b7960850a05e790b5.

Now that b/186727553 is fixed, it should be safe to revert this revert.

Test: build
Bug: 184381659
Change-Id: Ibea3882296db880f5cafe4f9efa36d79a183c8a1

private/dumpstate.te

diff --git a/private/dumpstate.te b/private/dumpstate.te
index 13e3b4c..f418fa3 100644
--- a/private/dumpstate.te
+++ b/private/dumpstate.te
@@ -54,7 +54,10 @@
 }:process signal;
 
 # For collecting bugreports.
-allow dumpstate debugfs_wakeup_sources:file r_file_perms;
+no_debugfs_restriction(`
+  allow dumpstate debugfs_wakeup_sources:file r_file_perms;
+')
+
 allow dumpstate dev_type:blk_file getattr;
 allow dumpstate webview_zygote:process signal;
 allow dumpstate sysfs_dmabuf_stats:file r_file_perms;