From ec9c4f8a505f2729fb9a249404294780f8445b2f Mon Sep 17 00:00:00 2001 From: LianRuiyang <995621404@qq.com> Date: Fri, 12 Sep 2025 03:04:02 +0000 Subject: [PATCH 1/2] update sepolicy/ohos_policy/startup/init/public/attributes. Signed-off-by: LianRuiyang <995621404@qq.com> --- sepolicy/ohos_policy/startup/init/public/attributes | 1 + 1 file changed, 1 insertion(+) diff --git a/sepolicy/ohos_policy/startup/init/public/attributes b/sepolicy/ohos_policy/startup/init/public/attributes index 6f20a45e3..0e14a5323 100644 --- a/sepolicy/ohos_policy/startup/init/public/attributes +++ b/sepolicy/ohos_policy/startup/init/public/attributes @@ -15,3 +15,4 @@ attribute param_set_allow_attr; attribute devinfo_type_allow_attr; attribute sys_param_set_allow_attr; attribute init_module_system_bin_file; +attribute dev_assistant_attr; -- Gitee From b38b08cf9bdcdda95fc337544b792999094a2e4f Mon Sep 17 00:00:00 2001 From: LianRuiyang <995621404@qq.com> Date: Fri, 12 Sep 2025 03:07:21 +0000 Subject: [PATCH 2/2] update sepolicy/ohos_policy/hiviewdfx/faultloggerd/system/faultloggerd.te. Signed-off-by: LianRuiyang <995621404@qq.com> --- .../ohos_policy/hiviewdfx/faultloggerd/system/faultloggerd.te | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/sepolicy/ohos_policy/hiviewdfx/faultloggerd/system/faultloggerd.te b/sepolicy/ohos_policy/hiviewdfx/faultloggerd/system/faultloggerd.te index 588a9b4f9..964b779d4 100644 --- a/sepolicy/ohos_policy/hiviewdfx/faultloggerd/system/faultloggerd.te +++ b/sepolicy/ohos_policy/hiviewdfx/faultloggerd/system/faultloggerd.te @@ -47,7 +47,8 @@ use_faultloggerd_file({ hiview hidumper }) use_faultloggerd_sdkdump({ hiview hidumper foundation }) neverallow { domain -processdump } faultloggerd_socket_crash:sock_file { write read ioctl }; -neverallow { domain -processdump -foundation -hidumper -hiview -dumpcatcher -appspawn } faultloggerd_socket_sdkdump:sock_file { write read ioctl }; +neverallow { domain -processdump -foundation -hidumper -hiview -dumpcatcher -appspawn -dev_assistant_attr } faultloggerd_socket_sdkdump:sock_file { write }; +neverallow { domain -processdump -foundation -hidumper -hiview -dumpcatcher -appspawn } faultloggerd_socket_sdkdump:sock_file { read ioctl }; ######################### ## faultloggerd rules: ## ######################### -- Gitee