commit 23f9f51fcdfe85d1c5cdafedd08e0bf958094520
author Hridya Valsaraju <hridya@google.com> Tue May 04 22:01:51 2021 -0700
committer Hridya Valsaraju <hridya@google.com> Tue May 04 22:06:46 2021 -0700
tree 996494dac4d4af27628b263f2f31caa64d7b8e6c
parent 6c03124c3c76df773240c6b7d0f2c2f0dc8a3ef5

Revert "Revert "Add neverallows for debugfs access""

This reverts commit e95e0ec0a5f2f6fdf362d14b7960850a05e790b5.

Now that b/186727553 is fixed, it should be safe to revert this revert.

Test: build
Bug: 184381659
Change-Id: Ibea3882296db880f5cafe4f9efa36d79a183c8a1

private/system_server.te

diff --git a/private/system_server.te b/private/system_server.te
index caf5208..08c4e40 100644
--- a/private/system_server.te
+++ b/private/system_server.te
@@ -184,7 +184,9 @@
 allow system_server stats_data_file:file unlink;
 
 # Read /sys/kernel/debug/wakeup_sources.
-allow system_server debugfs_wakeup_sources:file r_file_perms;
+no_debugfs_restriction(`
+  allow system_server debugfs_wakeup_sources:file r_file_perms;
+')
 
 # Read /sys/kernel/ion/*.
 allow system_server sysfs_ion:file r_file_perms;