device_lenovo_sdm710-common/sepolicy/vendor/file.te
Hridya Valsaraju 8803ff0740
sdm710-common: Set PRODUCT_SET_DEBUGFS_RESTRICTIONS
Starting with Android R launched devices, debugfs cannot be mounted in
production builds. In order to avoid accidental debugfs dependencies
from creeping in during development with userdebug/eng builds, the
build flag PRODUCT_SET_DEBUGFS_RESTRICTIONS can be set by vendors to
enforce additional debugfs restrictions for userdebug/eng builds. The
same flag will be used to enable sepolicy neveallow statements to
prevent new permissions added for debugfs access.

Test: build, boot
Bug: 184381659
Change-Id: I45e6f20c886d467a215c9466f3a09965ff897d7e
2023-11-25 20:35:07 +02:00

11 lines
408 B
Text

type fingerprint_data_file, data_file_type, file_type;
type thermal_data_file, data_file_type, file_type;
type proc_sysctl_schedboost, proc_type, fs_type;
type sysfs_fingerprint, sysfs_type, fs_type;
type sysfs_gps, sysfs_type, fs_type;
type sysfs_msm_subsys, sysfs_type, fs_type;
type sysfs_rpm, sysfs_type, fs_type;
type sysfs_system_sleep_stats, sysfs_type, fs_type;
type sysfs_tp, fs_type, sysfs_type;