DO NOT MERGE - Merge PPRL.190205.001 into master
Bug: 124234733
Change-Id: I78dac98a0d72fc8b8fe868c964458a98f5727786
diff --git a/private/bug_map b/private/bug_map
index ae7b695..a5fdb74 100644
--- a/private/bug_map
+++ b/private/bug_map
@@ -1,5 +1,4 @@
cppreopts cppreopts capability 79414024
-crash_dump gpu_device chr_file 124468495
dnsmasq netd fifo_file 77868789
dnsmasq netd unix_stream_socket 77868789
init app_data_file file 77873135
diff --git a/private/crash_dump.te b/private/crash_dump.te
index bb13bff..fd2e4b6 100644
--- a/private/crash_dump.te
+++ b/private/crash_dump.te
@@ -1,5 +1,8 @@
typeattribute crash_dump coredomain;
+# Crash dump does not need to access the GPU.
+dontaudit crash_dump gpu_device:chr_file *;
+
allow crash_dump {
domain
-apexd
@@ -41,3 +44,4 @@
}:process { signal sigstop sigkill };
neverallow crash_dump self:process ptrace;
+neverallow crash_dump gpu_device:chr_file *;