platform_system_sepolicy/logd.te

# android user-space log manager
type logd, domain, mlstrustedsubject;
type logd_exec, exec_type, file_type;

init_daemon_domain(logd)

allow logd self:capability { setuid setgid sys_nice audit_control };
allow logd self:capability2 syslog;
allow logd self:netlink_audit_socket { create_socket_perms nlmsg_write };
allow logd kernel:system syslog_read;
allow logd kmsg_device:chr_file w_file_perms;
allow logd system_data_file:file r_file_perms;

r_dir_file(logd, domain)

allow logd kernel:system syslog_mod;

control_logd(logd)

###
### Neverallow rules
###
### logd should NEVER do any of this

# Block device access.
neverallow logd dev_type:blk_file { read write };

# ptrace any other app
neverallow logd domain:process ptrace;

# Write to /system.
neverallow logd system_file:dir_file_class_set write;

# Write to files in /data/data or system files on /data
neverallow logd { app_data_file system_data_file }:dir_file_class_set write;
sepolicy: Add write_logd, read_logd & control_logd - Add write_logd, read_logd and control_logd macros added along with contexts for user space logd. - Specify above on domain wide, or service-by-service basis - Add logd rules. - deprecate access_logcat as unused. - 'allow <domain> zygote:unix_dgram_socket write;' rule added to deal with fd inheritance. ToDo: investigate means to allow references to close, and reopen in context of application or call setsockcreatecon() to label them in child context. Change-Id: I35dbb9d5122c5ed9b8c8f128abf24a871d6b26d8 2013-11-13 00:34:52 +01:00			`# android user-space log manager`
Annotate MLS trusted subjects and objects. When using MLS (i.e. enabling levelFrom= in seapp_contexts), certain domains and types must be exempted from the normal constraints defined in the mls file. Beyond the current set, adbd, logd, mdnsd, netd, and servicemanager need to be able to read/write to any level in order to communicate with apps running with any level, and the logdr and logdw sockets need to be writable by apps running with any level. This change has no impact unless levelFrom= is specified in seapp_contexts, so by itself it is a no-op. Change-Id: I36ed382b04a60a472e245a77055db294d3e708c3 Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov> 2014-09-08 22:06:40 +02:00			`type logd, domain, mlstrustedsubject;`
sepolicy: Add write_logd, read_logd & control_logd - Add write_logd, read_logd and control_logd macros added along with contexts for user space logd. - Specify above on domain wide, or service-by-service basis - Add logd rules. - deprecate access_logcat as unused. - 'allow <domain> zygote:unix_dgram_socket write;' rule added to deal with fd inheritance. ToDo: investigate means to allow references to close, and reopen in context of application or call setsockcreatecon() to label them in child context. Change-Id: I35dbb9d5122c5ed9b8c8f128abf24a871d6b26d8 2013-11-13 00:34:52 +01:00			`type logd_exec, exec_type, file_type;`

			`init_daemon_domain(logd)`

logd: add auditd Change-Id: Iec4bfc08ced20c0d4c74e07baca6cff812c9ba00 2014-04-01 20:02:57 +02:00			`allow logd self:capability { setuid setgid sys_nice audit_control };`
			`allow logd self:capability2 syslog;`
			`allow logd self:netlink_audit_socket { create_socket_perms nlmsg_write };`
			`allow logd kernel:system syslog_read;`
logd: auditd: add permissions to access /dev/kmsg Change-Id: I3c16a8e1104352d3d71cd3cd0298f4c31de56f5d 2014-04-07 23:04:30 +02:00			`allow logd kmsg_device:chr_file w_file_perms;`
logd: allow access to system files - allow access for /data/system/packages.xml. - deprecate access to /dev/logd_debug (can use /dev/kmsg for debugging) - allow access to /dev/socket/logd for 'logd --reinit' Bug: 19681572 Change-Id: Iac57fff1aabc3b061ad2cc27969017797f8bef54 2015-03-10 21:46:37 +01:00			`allow logd system_data_file:file r_file_perms;`
sepolicy: Add write_logd, read_logd & control_logd - Add write_logd, read_logd and control_logd macros added along with contexts for user space logd. - Specify above on domain wide, or service-by-service basis - Add logd rules. - deprecate access_logcat as unused. - 'allow <domain> zygote:unix_dgram_socket write;' rule added to deal with fd inheritance. ToDo: investigate means to allow references to close, and reopen in context of application or call setsockcreatecon() to label them in child context. Change-Id: I35dbb9d5122c5ed9b8c8f128abf24a871d6b26d8 2013-11-13 00:34:52 +01:00
			`r_dir_file(logd, domain)`

logd: Add klogd Change-Id: Ib9bc89b05771a12c6bb9a25cf59ea51afd22ae15 2014-10-16 00:49:37 +02:00			`allow logd kernel:system syslog_mod;`

logd: allow access to system files - allow access for /data/system/packages.xml. - deprecate access to /dev/logd_debug (can use /dev/kmsg for debugging) - allow access to /dev/socket/logd for 'logd --reinit' Bug: 19681572 Change-Id: Iac57fff1aabc3b061ad2cc27969017797f8bef54 2015-03-10 21:46:37 +01:00			`control_logd(logd)`

sepolicy: Add write_logd, read_logd & control_logd - Add write_logd, read_logd and control_logd macros added along with contexts for user space logd. - Specify above on domain wide, or service-by-service basis - Add logd rules. - deprecate access_logcat as unused. - 'allow <domain> zygote:unix_dgram_socket write;' rule added to deal with fd inheritance. ToDo: investigate means to allow references to close, and reopen in context of application or call setsockcreatecon() to label them in child context. Change-Id: I35dbb9d5122c5ed9b8c8f128abf24a871d6b26d8 2013-11-13 00:34:52 +01:00			`###`
			`### Neverallow rules`
			`###`
			`### logd should NEVER do any of this`

			`# Block device access.`
			`neverallow logd dev_type:blk_file { read write };`

			`# ptrace any other app`
			`neverallow logd domain:process ptrace;`

			`# Write to /system.`
			`neverallow logd system_file:dir_file_class_set write;`

			`# Write to files in /data/data or system files on /data`
			`neverallow logd { app_data_file system_data_file }:dir_file_class_set write;`