commit ed2a836e189ceabe466b96a8efde717c645590e4
author Daniele Di Proietto <ddiproietto@google.com> Mon Sep 25 09:10:55 2023 +0000
committer Daniele Di Proietto <ddiproietto@google.com> Mon Sep 25 09:10:55 2023 +0000
tree 13804d91a13f3b25dfe0fa21edf446844d39d1c3
parent 2f0bcc1b0a36bf60bbc511ac90e900cc1ac74c26

tracing: SELinux access to a couple of more binder events

* `binder_command`: Reported by the kernel every time a userspace
  thread sends a binder command to the binder kernel driver. Only the
  command type (e.g. `BC_TRANSACTION`, `BC_REPLY`) is reported, the
  contents are not disclosed.
* `binder_command`: Reported by the kernel every time the binder driver
  sends a command to a userspace thread. Only the command type (e.g.
  `BR_TRANSACTION_COMPLETE`, `BR_FAILED_REPLY`) is reported, the
  contents are not disclosed.

Bug: 295124679
Change-Id: I0dcfda7eba892abca3145188b9168a6b3a2ee0e8

private/genfs_contexts

diff --git a/private/genfs_contexts b/private/genfs_contexts
index f35f268..a7aec61 100644
--- a/private/genfs_contexts
+++ b/private/genfs_contexts
@@ -286,6 +286,8 @@
 genfscon tracefs /events/binder/binder_unlock/                           u:object_r:debugfs_tracing:s0
 genfscon tracefs /events/binder/binder_transaction_alloc_buf/            u:object_r:debugfs_tracing:s0
 genfscon tracefs /events/binder/binder_set_priority/                     u:object_r:debugfs_tracing:s0
+genfscon tracefs /events/binder/binder_command/                          u:object_r:debugfs_tracing:s0
+genfscon tracefs /events/binder/binder_return/                           u:object_r:debugfs_tracing:s0
 genfscon tracefs /events/lowmemorykiller/                                u:object_r:debugfs_tracing:s0
 genfscon tracefs /events/sync/                                           u:object_r:debugfs_tracing:s0
 genfscon tracefs /events/fence/                                          u:object_r:debugfs_tracing:s0
@@ -351,6 +353,8 @@
 genfscon debugfs /tracing/events/binder/binder_unlock/                           u:object_r:debugfs_tracing:s0
 genfscon debugfs /tracing/events/binder/binder_transaction_alloc_buf/            u:object_r:debugfs_tracing:s0
 genfscon debugfs /tracing/events/binder/binder_set_priority/                     u:object_r:debugfs_tracing:s0
+genfscon debugfs /tracing/events/binder/binder_command/                          u:object_r:debugfs_tracing:s0
+genfscon debugfs /tracing/events/binder/binder_return/                           u:object_r:debugfs_tracing:s0
 genfscon debugfs /tracing/events/lowmemorykiller/                                u:object_r:debugfs_tracing:s0
 genfscon debugfs /tracing/events/sync/                                           u:object_r:debugfs_tracing:s0
 genfscon debugfs /tracing/events/fence/                                          u:object_r:debugfs_tracing:s0