platform_system_sepolicy/public/traceur_app.te
Carmen Jackson ac55fe955f Add selinux rule to allow Traceur to enable the traced daemon.
Bug: 130784724
Test: manual
Change-Id: Ic1903e273f5a136b3e0b14a901a60d8d0a81b211
2019-04-25 23:59:06 -07:00

31 lines
809 B
Text

type traceur_app, domain;
allow traceur_app servicemanager:service_manager list;
allow traceur_app hwservicemanager:hwservice_manager list;
# Allow Traceur to enable traced if necessary.
set_prop(traceur_app, traced_enabled_prop)
set_prop(traceur_app, debug_prop)
allow traceur_app {
service_manager_type
-apex_service
-dnsresolver_service
-gatekeeper_service
-incident_service
-installd_service
-iorapd_service
-lpdump_service
-netd_service
-virtual_touchpad_service
-vold_service
-vr_hwc_service
}:service_manager find;
# Allow traceur_app to use atrace HAL
hal_client_domain(traceur_app, hal_atrace)
dontaudit traceur_app service_manager_type:service_manager find;
dontaudit traceur_app hwservice_manager_type:hwservice_manager find;
dontaudit traceur_app domain:binder call;