tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Merge "sepolicy: Allow system domains to be profiled"

Browse source
This commit is contained in:
Lalit Maganti 2022-02-02 12:04:38 +00:00 committed by Gerrit Code Review
commit fb9d097d03
3 changed files with 14 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
private/gmscore_app.te
View file

@ -5,6 +5,11 @@ typeattribute gmscore_app coredomain;
app_domain(gmscore_app)
# TODO(b/217368496): remove this.
perfetto_producer(gmscore_app)
can_profile_heap(gmscore_app)
can_profile_perf(gmscore_app)
allow gmscore_app sysfs_type:dir search;
# Read access to /sys/class/net/wlan*/address
r_dir_file(gmscore_app, sysfs_net)

4
private/platform_app.te
View file

@ -109,6 +109,10 @@ dontaudit platform_app debugfs_tracing:file rw_file_perms;
# Allow platform apps to act as Perfetto producers.
perfetto_producer(platform_app)
# TODO(b/217368496): remove this.
can_profile_heap(platform_app)
can_profile_perf(platform_app)
# Allow platform apps to create VMs
virtualizationservice_use(platform_app)

5
private/system_server.te
View file

@ -14,6 +14,11 @@ tmpfs_domain(system_server)
userfaultfd_use(system_server)
# TODO(b/217368496): remove this.
perfetto_producer(system_server)
can_profile_heap(system_server)
can_profile_perf(system_server)
# Create a socket for connections from crash_dump.
type_transition system_server system_data_file:sock_file system_ndebug_socket "ndebugsocket";