platform_system_sepolicy/private/perfprofd.te

userdebug_or_eng(`
  typeattribute perfprofd coredomain;
  init_daemon_domain(perfprofd)
')

# Only servicemanager, statsd, su and systemserver can communicate.
neverallow { domain userdebug_or_eng(`-statsd -system_server') } perfprofd:binder call;
neverallow perfprofd { domain userdebug_or_eng(`-servicemanager -statsd -su -system_server') }:binder call;
New sepolicy for perfprofd, simpleperf. Bug: http://b/19483574 Change-Id: I594f04004cccd2cbfadbd0f9d1bbb9815a2ea59d 2015-04-30 21:27:36 +02:00			userdebug_or_eng(`
su and perfprofd are coredomain too This is a follow-up to f5446eb1486816c00136b2b5f0a3cc4a01706000 where I forgot to associate su and perfprofd domains with coredomain. Test: mmm system/sepolicy sepolicy-analyze $OUT/root/sepolicy attribute coredomain Bug: 35870313 Change-Id: I13f90693843f7c6fe9fea8e5332aa6dd9558478a 2017-03-24 17:30:19 +01:00			`typeattribute perfprofd coredomain;`
New sepolicy for perfprofd, simpleperf. Bug: http://b/19483574 Change-Id: I594f04004cccd2cbfadbd0f9d1bbb9815a2ea59d 2015-04-30 21:27:36 +02:00			`init_daemon_domain(perfprofd)`
Whitespace fix Because I'm nitpicky. Test: policy compiles Change-Id: I4d886d0d6182d29d7b260cf1f142c47cd32eda29 2016-12-10 05:14:31 +01:00			`')`
Statsd: Allow statsd to contact perfprofd in userdebug Give statsd rights to connect to perfprofd in userdebug. Test: mmma system/extras/perfprofd Change-Id: Idea0a6b757d1b16ec2e6c8719e24900f1e5518fd 2018-01-30 18:48:35 +01:00
			`# Only servicemanager, statsd, su and systemserver can communicate.`
Sepolicy: Fix system server calling perfprofd Give all the right permissions to find and send a message to perfprofd from the system server. Bug: 73175642 Test: m Test: manual Change-Id: I82b63ec097dcd445d9e8169fe0df4398d62ac184 2018-04-30 21:23:20 +02:00			neverallow { domain userdebug_or_eng(`-statsd -system_server') } perfprofd:binder call;
Statsd: Allow statsd to contact perfprofd in userdebug Give statsd rights to connect to perfprofd in userdebug. Test: mmma system/extras/perfprofd Change-Id: Idea0a6b757d1b16ec2e6c8719e24900f1e5518fd 2018-01-30 18:48:35 +01:00			neverallow perfprofd { domain userdebug_or_eng(`-servicemanager -statsd -su -system_server') }:binder call;