platform_system_sepolicy/public/traced.te

type traced, domain, coredomain, mlstrustedsubject;
type traced_tmpfs, file_type;
Allow iorapd to access perfetto This requires moving the type declaration of perfetto traced to public, because iorapd needs to refer to it. Denials without this CL: https://pastebin.com/raw/sxHMeLEU Bug: 72170747 Test: 1. runcon u:r:iorapd:s0 iorap.cmd.perfetto \ -v --output-proto /data/misc/iorapd/test 2. Check that no selinux denials other than avc: denied { entrypoint } for path="/system/bin/iorap.cmd.perfetto" dev="sda6" ino=21 scontext=u:r:iorapd:s0 tcontext=u:object_r:system_file:s0 tclass=file permissive=1 show up (this is a side-effect of runcon). Change-Id: Iacd1ab201fe9fb2a6302dbd528f42f709cbca054 2019-01-23 21:42:16 +01:00			`type traced, domain, coredomain, mlstrustedsubject;`
traced: move traced_tmpfs to public policy Allow the perfetto_producer macro to be used in device-specific policy. Bug: 185379881 Test: TH Change-Id: I6932ff91a3ed095b5edce4076bdfd8607e925c6e 2021-04-14 22:18:41 +02:00			`type traced_tmpfs, file_type;`
Allow iorapd to access perfetto This requires moving the type declaration of perfetto traced to public, because iorapd needs to refer to it. Denials without this CL: https://pastebin.com/raw/sxHMeLEU Bug: 72170747 Test: 1. runcon u:r:iorapd:s0 iorap.cmd.perfetto \ -v --output-proto /data/misc/iorapd/test 2. Check that no selinux denials other than avc: denied { entrypoint } for path="/system/bin/iorap.cmd.perfetto" dev="sda6" ino=21 scontext=u:r:iorapd:s0 tcontext=u:object_r:system_file:s0 tclass=file permissive=1 show up (this is a side-effect of runcon). Change-Id: Iacd1ab201fe9fb2a6302dbd528f42f709cbca054 2019-01-23 21:42:16 +01:00
Iorapd and friends have been removed Remove references in sepolicy. Leave a few of the types defined since they're public and may be used in device-specific policy. Bug: 211461392 Test: build/boot cuttlefish Change-Id: I615137b92b82b744628ab9b7959ae5ff28001169 2022-05-18 07:53:00 +02:00