Add a selinux macro to help dump extra HALs
- To allow dumpstate to dump extra HALs, we need to change selinux
policy for the HAL.
- By defining a macro, someone including vendors can easily dump HALs.
Bug: 143622274
Test: Run dumpstate and check if HALs specified at "ro.dump.hals.extra"
property are included.
Change-Id: Ied77682abdd942d0f3a5ae6fa427c5ab14c57232
(cherry picked from commit 43f29c95511a603eeb0e74df0cbbf56f2ad92d61)
diff --git a/car_product/sepolicy/public/te_macros b/car_product/sepolicy/public/te_macros
new file mode 100644
index 0000000..963afdc
--- /dev/null
+++ b/car_product/sepolicy/public/te_macros
@@ -0,0 +1,7 @@
+# Define a macro to allow extra HAL dump
+define(`dump_extra_hal', `
+ hal_client_domain(dumpstate, $1);
+ allow $1_server dumpstate:fifo_file write;
+ allow $1_server dumpstate:fd use;
+ allow dumpstate $1:process signal;
+')