diff --git a/sepolicy/ohos_policy/hiviewdfx/faultloggerd/system/faultloggerd.te b/sepolicy/ohos_policy/hiviewdfx/faultloggerd/system/faultloggerd.te index 588a9b4f9e7438103edd2880f625c6a01bd8d20c..964b779d42bd1da3e6593ad24c9d6124431f7f4e 100644 --- a/sepolicy/ohos_policy/hiviewdfx/faultloggerd/system/faultloggerd.te +++ b/sepolicy/ohos_policy/hiviewdfx/faultloggerd/system/faultloggerd.te @@ -47,7 +47,8 @@ use_faultloggerd_file({ hiview hidumper }) use_faultloggerd_sdkdump({ hiview hidumper foundation }) neverallow { domain -processdump } faultloggerd_socket_crash:sock_file { write read ioctl }; -neverallow { domain -processdump -foundation -hidumper -hiview -dumpcatcher -appspawn } faultloggerd_socket_sdkdump:sock_file { write read ioctl }; +neverallow { domain -processdump -foundation -hidumper -hiview -dumpcatcher -appspawn -dev_assistant_attr } faultloggerd_socket_sdkdump:sock_file { write }; +neverallow { domain -processdump -foundation -hidumper -hiview -dumpcatcher -appspawn } faultloggerd_socket_sdkdump:sock_file { read ioctl }; ######################### ## faultloggerd rules: ## ######################### diff --git a/sepolicy/ohos_policy/startup/init/public/attributes b/sepolicy/ohos_policy/startup/init/public/attributes index 6f20a45e31f24f9c5c8ef587dc30fcc860119137..0e14a53233e8d7a2afa12b11a2a5d9b54ea21e5d 100644 --- a/sepolicy/ohos_policy/startup/init/public/attributes +++ b/sepolicy/ohos_policy/startup/init/public/attributes @@ -15,3 +15,4 @@ attribute param_set_allow_attr; attribute devinfo_type_allow_attr; attribute sys_param_set_allow_attr; attribute init_module_system_bin_file; +attribute dev_assistant_attr;