1# required permission to use tar to pack dumpsate_board.bin
2allow hal_dumpstate_default vendor_toolbox_exec:file execute_no_trans;
3allow hal_dumpstate_default radio_vendor_data_file:dir create_dir_perms;
4allow hal_dumpstate_default radio_vendor_data_file:file create_file_perms;
5allow hal_dumpstate_default shell_data_file:file getattr;
6set_prop(hal_dumpstate_default, vendor_logger_prop)
7
8# All dumps that are executed via hal_dumpstate_default should use their
9# own domain to request their permissions to achieve compartmentalization.
10# go/pixel-bugreport has examples on how to do that.
11neverallow hal_dumpstate_default { vendor_file_type -vendor_toolbox_exec }:file execute_no_trans;
12
13