tequilaOS/platform_system_sepolicy

Fork 0

Commit graph

Author	SHA1	Message	Date
Jeff Vander Stoep	16ebb161eb	traced: move traced_tmpfs to public policy Allow the perfetto_producer macro to be used in device-specific policy. Bug: 185379881 Test: TH Change-Id: I6932ff91a3ed095b5edce4076bdfd8607e925c6e	2021-04-14 22:18:41 +02:00
Primiano Tucci	79d1dbbc05	Allow iorapd to access perfetto This requires moving the type declaration of perfetto traced to public, because iorapd needs to refer to it. Denials without this CL: https://pastebin.com/raw/sxHMeLEU Bug: 72170747 Test: 1. runcon u:r:iorapd:s0 iorap.cmd.perfetto \ -v --output-proto /data/misc/iorapd/test 2. Check that no selinux denials other than avc: denied { entrypoint } for path="/system/bin/iorap.cmd.perfetto" dev="sda6" ino=21 scontext=u:r:iorapd:s0 tcontext=u:object_r:system_file:s0 tclass=file permissive=1 show up (this is a side-effect of runcon). Change-Id: Iacd1ab201fe9fb2a6302dbd528f42f709cbca054	2019-01-23 22:43:47 +00:00

Author

SHA1

Message

Date

Jeff Vander Stoep

16ebb161eb

traced: move traced_tmpfs to public policy

Allow the perfetto_producer macro to be used in device-specific
policy.

Bug: 185379881
Test: TH
Change-Id: I6932ff91a3ed095b5edce4076bdfd8607e925c6e

2021-04-14 22:18:41 +02:00

Primiano Tucci

79d1dbbc05

Allow iorapd to access perfetto

This requires moving the type declaration of
perfetto traced to public, because iorapd
needs to refer to it.

Denials without this CL:
https://pastebin.com/raw/sxHMeLEU

Bug: 72170747
Test: 1. runcon u:r:iorapd:s0 iorap.cmd.perfetto \
          -v --output-proto /data/misc/iorapd/test
      2. Check that no selinux denials other than
         avc: denied { entrypoint } for path="/system/bin/iorap.cmd.perfetto" dev="sda6" ino=21 scontext=u:r:iorapd:s0 tcontext=u:object_r:system_file:s0 tclass=file permissive=1
         show up (this is a side-effect of runcon).

Change-Id: Iacd1ab201fe9fb2a6302dbd528f42f709cbca054

2019-01-23 22:43:47 +00:00

2 commits