platform_system_sepolicy/public/traceur_app.te

type traceur_app, domain;

allow traceur_app servicemanager:service_manager list;
allow traceur_app hwservicemanager:hwservice_manager list;

allow traceur_app {
  service_manager_type
  -apex_service
  -dnsresolver_service
  -gatekeeper_service
  -incident_service
  -installd_service
  -lpdump_service
  -mdns_service
  -netd_service
  -virtual_touchpad_service
  -vold_service
  -default_android_service
}:service_manager find;

# Allow traceur_app to use atrace HAL
hal_client_domain(traceur_app, hal_atrace)

dontaudit traceur_app service_manager_type:service_manager find;
dontaudit traceur_app hwservice_manager_type:hwservice_manager find;
dontaudit traceur_app domain:binder call;
Adding a traceur_app domain to remove it from shell This CL creates a traceur_app domain with userdebug privileges akin to what shell has with regards to being able to find most services on device. Previously, traceur was running as shell which was an unintentional abuse of selinux architecture. Bug: 68126425 Test: Traceur functions outside of shell user privilege Change-Id: Ib5090e7e8225ad201b3ec24b506fe2717101d0f1 2017-12-12 01:19:23 +01:00			`type traceur_app, domain;`

Enable Traceur on user builds. Test: Standard Traceur workflow works successfully with no selinux denials on a user build. Bug: 64762598 Change-Id: I0dfe506d463b63d70c5bda03f8706041ea7ab448 2018-01-09 21:24:47 +01:00			`allow traceur_app servicemanager:service_manager list;`
			`allow traceur_app hwservicemanager:hwservice_manager list;`
Adding a traceur_app domain to remove it from shell This CL creates a traceur_app domain with userdebug privileges akin to what shell has with regards to being able to find most services on device. Previously, traceur was running as shell which was an unintentional abuse of selinux architecture. Bug: 68126425 Test: Traceur functions outside of shell user privilege Change-Id: Ib5090e7e8225ad201b3ec24b506fe2717101d0f1 2017-12-12 01:19:23 +01:00
Enable Traceur on user builds. Test: Standard Traceur workflow works successfully with no selinux denials on a user build. Bug: 64762598 Change-Id: I0dfe506d463b63d70c5bda03f8706041ea7ab448 2018-01-09 21:24:47 +01:00			`allow traceur_app {`
			`service_manager_type`
Add policy for apexd. apexd is a new daemon for managing APEX packages installed on the device. It hosts a single binder service, "apexservice". Bug: 112455435 Test: builds, binder service can be registered, apexes can be accessed, verified and mounted Change-Id: I634ad100f10b2edcd9a9c0df0d33896fa5d4ed97 2018-08-17 09:35:42 +02:00			`-apex_service`
Add sepolicy for resolver service Bug: 126141549 Test: built, flashed, booted Change-Id: I34260e1e5cc238fbe92574f928252680c1e6b417 2019-02-25 13:12:15 +01:00			`-dnsresolver_service`
Enable Traceur on user builds. Test: Standard Traceur workflow works successfully with no selinux denials on a user build. Bug: 64762598 Change-Id: I0dfe506d463b63d70c5bda03f8706041ea7ab448 2018-01-09 21:24:47 +01:00			`-gatekeeper_service`
			`-incident_service`
			`-installd_service`
Add rules for lpdump and lpdumpd - lpdump is a binary on the device that talks to lpdumpd via binder. - lpdumpd is a daemon on the device that actually reads dynamic partition metadata. Only lpdump can talk to it. Bug: 126233777 Test: boots (sanity) Test: lpdump Change-Id: I0e21f35ac136bcbb0603940364e8117f2d6ac438 2019-03-14 23:45:03 +01:00			`-lpdump_service`
Add sepolicy for mdns service mdns service is a subset of netd-provided services, so it gets the same treatment as netd_service or dnsresolver_service Bug: 209894875 Test: built, flashed, booted Change-Id: I33de769c4fff41e816792a34015a70f89e4b8a8c 2021-12-09 04:49:23 +01:00			`-mdns_service`
Enable Traceur on user builds. Test: Standard Traceur workflow works successfully with no selinux denials on a user build. Bug: 64762598 Change-Id: I0dfe506d463b63d70c5bda03f8706041ea7ab448 2018-01-09 21:24:47 +01:00			`-netd_service`
			`-virtual_touchpad_service`
			`-vold_service`
More neverallows for default_android_service. We don't want to accidentally allow this, and a neverallow also means that the issue will be found during development, instead of review. Fixes: 148081219 Test: compile policy only Change-Id: I57990a2a4ab9e5988b09dae2dd6a710ce8f53800 2020-01-21 19:18:57 +01:00			`-default_android_service`
Enable Traceur on user builds. Test: Standard Traceur workflow works successfully with no selinux denials on a user build. Bug: 64762598 Change-Id: I0dfe506d463b63d70c5bda03f8706041ea7ab448 2018-01-09 21:24:47 +01:00			`}:service_manager find;`
Adding a traceur_app domain to remove it from shell This CL creates a traceur_app domain with userdebug privileges akin to what shell has with regards to being able to find most services on device. Previously, traceur was running as shell which was an unintentional abuse of selinux architecture. Bug: 68126425 Test: Traceur functions outside of shell user privilege Change-Id: Ib5090e7e8225ad201b3ec24b506fe2717101d0f1 2017-12-12 01:19:23 +01:00
Allow traceur to call atrace HAL Bug: 116783882 Bug: 111098596 Test: turn on/off system_tracing Change-Id: I089851924bdb1a5cd71598a7014d17fedc87625a 2018-09-27 19:52:14 +02:00			`# Allow traceur_app to use atrace HAL`
			`hal_client_domain(traceur_app, hal_atrace)`

Enable Traceur on user builds. Test: Standard Traceur workflow works successfully with no selinux denials on a user build. Bug: 64762598 Change-Id: I0dfe506d463b63d70c5bda03f8706041ea7ab448 2018-01-09 21:24:47 +01:00			`dontaudit traceur_app service_manager_type:service_manager find;`
			`dontaudit traceur_app hwservice_manager_type:hwservice_manager find;`
			`dontaudit traceur_app domain:binder call;`