On Fri, Jul 27, 2018 at 03:05:43PM -0700, Sandeep Patil wrote:
On Fri, Jul 27, 2018 at 04:21:14PM -0400, Theodore Y. Ts'o wrote:
On Fri, Jul 27, 2018 at 04:11:03PM -0400, Steven Rostedt wrote:
That said, I would assume that other Android utilities are using other debugfs files for system status and such.
As of today, I think a lot of information in 'bugreports' is read out of debugfs (including things like binder stats). We do have a plan to change that.
Hmm, if it's only for bugreports, maybe it can be only mounted when about root processes getting tricked into reading from debugfs.
Indeed, I think it can. However, the problem is the last time I tried to remove this a whole bunch of things just broke. So, it wasn't about losing a functionality here and there. Agree, we need to clean up platform to not use debugfs first. Then we can expect Apps or other native processes to not rely on debugfs at all.
Is Android controlling access to debugfs files via SELinux? If so, then access to debugfs can be gradually cranked down as use cases are removed.
- Ted