tree 971af0bd8136a262f5c93fc4d7543421e92be05d
parent c940cc6f165bd48ee5af9a08c788c6c996cb68b1
author Hridya Valsaraju <hridya@google.com> 1617388425 -0700
committer Michael Bestas <mkbestas@lineageos.org> 1681385749 +0300
gpgsig -----BEGIN PGP SIGNATURE-----
 
 iQJLBAABCgA1FiEEHrBYPudH862glXQBzJUERRm+ZmkFAmQ36RYXHG1rYmVzdGFz
 QGxpbmVhZ2Vvcy5vcmcACgkQzJUERRm+ZmmOnxAAoWQEN4VASHXDHmLOoiz0f/V1
 EM/jjEbKN84Pvf8+OQ/EEZtBdSbnN+RXCHA/X00fHE9Z+bbGKiyG/qauJqHqOQvJ
 4+RPwN3wGP81rOYfV/7Kl7FJTPace5lqKhEJedSQutSEUohnkcIEajizu/nrOqYs
 zgJZ152eN5HvGjtz6Hv2ztX+qHBPXpWkEIndtNCwhDo+w5UG503lRrGpEUFP/BuG
 eWU1lUyo2ms+KdAfWXRKsF4kJMm6x0+69KPdw2bKqVbqOCGgzlio/y+T10NyOUZf
 amlylwscEVV4mvFoWVS8BmjfdDS9jShfNIkDm6G7vEUyGjp095dZxa6pLEeYrFar
 GHo1OZYH1KSdFvhFRODML/Sw80hMY7J5CdkVNIBRv7MKlTLNHBL7aFvyyXmqgnvQ
 A4cqgziwXqIEEk4PNOK1eFj2lWEqEGSjgIicotYV6liOmXPgsmOeSi17dkLWK0CV
 TwLY2aMx3NwlwsCuVQhuKT7vtPMXFe9aAzZYWoBFPWUY7yFM0ifQPEYnUurKUmFL
 2txEJMCYOW+RGQLoHe6MeTiYjTy9MHxr91HLwqeIpXiJnXpInI8U8VYm4sntYWou
 oirHICvSsElJHGoqYR8EHjm3qRVqIpnl9o3mIpS2kucMmc6KOF82uZitaRZhe6jR
 KXh+Et/S1/tMt0pKYiY=
 =cY9F
 -----END PGP SIGNATURE-----

FP4: Set PRODUCT_SET_DEBUGFS_RESTRICTIONS

Starting with Android R launched devices, debugfs cannot be mounted in
production builds. In order to avoid accidental debugfs dependencies
from creeping in during development with userdebug/eng builds, the
build flag PRODUCT_SET_DEBUGFS_RESTRICTIONS can be set by vendors to
enforce additional debugfs restrictions for userdebug/eng builds. The
same flag will be used to enable sepolicy neveallow statements to
prevent new permissions added for debugfs access.

Test: build, boot
Bug: 184381659
Change-Id: I45e6f20c886d467a215c9466f3a09965ff897d7e