tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Merge "[SfStats] sepolicy for SfStats' global puller"

Browse source
This commit is contained in:
Treehugger Robot 2020-01-15 17:25:54 +00:00 committed by Gerrit Code Review
commit 41a1b4af9c
3 changed files with 8 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
private/stats.te
View file

@ -47,6 +47,7 @@ neverallow {
-shell
-stats
-statsd
-surfaceflinger
-system_app
-system_server
-traceur_app

3
private/statsd.te
View file

@ -19,3 +19,6 @@ allow statsd incidentd:fifo_file write;
# Allow StatsCompanionService to pipe data to statsd.
allow statsd system_server:fifo_file { read getattr };
# Allow statsd to retrieve SF statistics over binder
binder_call(statsd, surfaceflinger);

4
private/surfaceflinger.te
View file

@ -114,6 +114,10 @@ pdx_server(surfaceflinger, display_vsync)
pdx_client(surfaceflinger, bufferhub_client)
pdx_client(surfaceflinger, performance_client)
# Allow supplying timestats statistics to statsd
allow surfaceflinger stats_service:service_manager find;
binder_call(surfaceflinger, statsd);
###
### Neverallow rules
###