2016-07-22 22:13:11 +02:00
|
|
|
# type_transition must be private policy the domain_trans rules could stay
|
|
|
|
|
# public, but conceptually should go with this
|
|
|
|
|
init_daemon_domain(dumpstate)
|
|
|
|
|
|
|
|
|
|
# Execute and transition to the vdc domain
|
|
|
|
|
domain_auto_trans(dumpstate, vdc_exec, vdc)
|
2016-10-12 23:58:09 +02:00
|
|
|
|
|
|
|
|
# TODO: deal with tmpfs_domain pub/priv split properly
|
|
|
|
|
allow dumpstate dumpstate_tmpfs:file execute;
|
|
|
|
|
|
|
|
|
|
# systrace support - allow atrace to run
|
|
|
|
|
allow dumpstate debugfs_tracing:dir r_dir_perms;
|
|
|
|
|
allow dumpstate debugfs_tracing:file rw_file_perms;
|
|
|
|
|
allow dumpstate debugfs_trace_marker:file getattr;
|
|
|
|
|
allow dumpstate atrace_exec:file rx_file_perms;
|
2016-07-01 21:18:54 +02:00
|
|
|
allow dumpstate storaged_exec:file rx_file_perms;
|
|
|
|
|
|
|
|
|
|
# Allow dumpstate to make binder calls to storaged service
|
|
|
|
|
binder_call(dumpstate, storaged)
|
