tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Merge "Allow traced_probes to subscribe to statsd atoms" am: c9ff8d010b

Browse source 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2501735

Change-Id: I4781ed0ec3bcdeee98c1301f8981e65e44b3e3ed
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
This commit is contained in:
Hector Dearman 2023-03-27 16:32:35 +00:00 committed by Automerger Merge Worker
commit 121da8e36f
3 changed files with 5 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
private/stats.te
View file

@ -56,4 +56,5 @@ neverallow {
-system_app
-system_server
-traceur_app
-traced_probes
} stats_service:service_manager find;

4
private/traced_probes.te
View file

@ -100,8 +100,10 @@ hal_client_domain(traced_probes, hal_atrace)
# On debug builds allow to ingest system logs into the trace.
userdebug_or_eng(`read_logd(traced_probes)')
# Allow traced_probes to talk to statsd for logging metrics.
# Allow traced_probes to talk to statsd for logging metrics and recording atoms.
unix_socket_send(traced_probes, statsdw, statsd)
binder_call(traced_probes, statsd)
allow traced_probes stats_service:service_manager find;
###
### Neverallow rules

1
public/statsd.te
View file

@ -34,6 +34,7 @@ allow statsd stats_config_data_file:file create_file_perms;
binder_call(statsd, appdomain)
binder_call(statsd, incidentd)
binder_call(statsd, system_server)
binder_call(statsd, traced_probes)
# Allow statsd to interact with gpuservice
allow statsd gpu_service:service_manager find;