commit 23f9f51fcdfe85d1c5cdafedd08e0bf958094520
author Hridya Valsaraju <hridya@google.com> Tue May 04 22:01:51 2021 -0700
committer Hridya Valsaraju <hridya@google.com> Tue May 04 22:06:46 2021 -0700
tree 996494dac4d4af27628b263f2f31caa64d7b8e6c
parent 6c03124c3c76df773240c6b7d0f2c2f0dc8a3ef5

Revert "Revert "Add neverallows for debugfs access""

This reverts commit e95e0ec0a5f2f6fdf362d14b7960850a05e790b5.

Now that b/186727553 is fixed, it should be safe to revert this revert.

Test: build
Bug: 184381659
Change-Id: Ibea3882296db880f5cafe4f9efa36d79a183c8a1

private/incidentd.te

diff --git a/private/incidentd.te b/private/incidentd.te
index a574eee..ef191a2 100644
--- a/private/incidentd.te
+++ b/private/incidentd.te
@@ -29,7 +29,9 @@
 allow incidentd proc_pagetypeinfo:file r_file_perms;
 
 # section id 2002, allow reading /d/wakeup_sources
-allow incidentd debugfs_wakeup_sources:file r_file_perms;
+no_debugfs_restriction(`
+  allow incidentd debugfs_wakeup_sources:file r_file_perms;
+')
 
 # section id 2003, allow executing top
 allow incidentd proc_meminfo:file { open read };