tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Merge changes from topic "tm-qpr-oome-perfetto" into tm-qpr-dev am: 37883b47f8

Browse source 
Original change: https://googleplex-android-review.googlesource.com/c/platform/system/sepolicy/+/21986580

Change-Id: I66f23e61f789b8a18f44f6a68af9f399e9d06be0
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
This commit is contained in:
Ioannis Ilkos 2023-03-20 11:02:24 +00:00 committed by Automerger Merge Worker
commit 865d0883ac
6 changed files with 16 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
prebuilts/api/33.0/private/app.te
View file

@ -54,6 +54,9 @@ get_prop(appdomain, device_config_runtime_native_boot_prop)
userdebug_or_eng(`perfetto_producer({ appdomain })')
# Allow the heap dump ART plugin to the count of sessions waiting for OOME
get_prop(appdomain, traced_oome_heap_session_count_prop)
# Prevent apps from causing presubmit failures.
# Apps can cause selinux denials by accessing CE storage
# and/or external storage. In either case, the selinux denial is

1
prebuilts/api/33.0/private/compat/32.0/32.0.ignore.cil
View file

@ -75,6 +75,7 @@
sysfs_lru_gen_enabled
system_dlkm_file
tare_service
traced_oome_heap_session_count_prop
tv_iapp_service
untrusted_app_30
vendor_uuid_mapping_config_file

3
prebuilts/api/33.0/private/property_contexts
View file

@ -218,6 +218,9 @@ ro.lowpan. u:object_r:lowpan_prop:s0
# heapprofd properties
heapprofd. u:object_r:heapprofd_prop:s0
# traced properties
traced.oome_heap_session.count u:object_r:traced_oome_heap_session_count_prop:s0 exact uint
# hwservicemanager properties
hwservicemanager. u:object_r:hwservicemanager_prop:s0

3
prebuilts/api/33.0/private/system_server.te
View file

@ -830,6 +830,9 @@ get_prop(system_server, hypervisor_prop)
# Read persist.wm.debug. properties
get_prop(system_server, persist_wm_debug_prop)
# Allow the heap dump ART plugin to the count of sessions waiting for OOME
get_prop(system_server, traced_oome_heap_session_count_prop)
# Create a socket for connections from debuggerd.
allow system_server system_ndebug_socket:sock_file create_file_perms;

5
prebuilts/api/33.0/private/traced.te
View file

@ -68,6 +68,11 @@ allow traced {
set_prop(traced, system_trace_prop)
# Allow to lazily start producers.
set_prop(traced, traced_lazy_prop)
# Allow tracking the count of sessions intercepting Java OutOfMemoryError
# If there are such tracing sessions and an OutOfMemoryError is thrown by ART,
# the hprof plugin intercepts the error, lazily registers a data source to
# traced and collects a heap dump.
set_prop(traced, traced_oome_heap_session_count_prop)
# Allow traced to talk to statsd for logging metrics.
unix_socket_send(traced, statsdw, statsd)

1
prebuilts/api/33.0/public/property.te
View file

@ -90,6 +90,7 @@ system_restricted_prop(sqlite_log_prop)
system_restricted_prop(surfaceflinger_display_prop)
system_restricted_prop(system_boot_reason_prop)
system_restricted_prop(system_jvmti_agent_prop)
system_restricted_prop(traced_oome_heap_session_count_prop)
system_restricted_prop(ab_update_gki_prop)
system_restricted_prop(usb_prop)
system_restricted_prop(userspace_reboot_exported_prop)