platform_system_sepolicy/private/mm_events.te
Kalesh Singh 326fc27064 Sepolicy for mm_events
Allow mm_events to periodically arm the mm_events
perfetto trace config if mm_events is enabled.

Bug: 183037386
Test: boot; setprop persist.mm_events.enabled true; No avc denials
Change-Id: Ia9760001e7fb591f18e3e816a63281167a658c74
2021-04-06 22:46:32 -04:00

14 lines
420 B
Text

type mm_events, domain, coredomain;
type mm_events_exec, system_file_type, exec_type, file_type;
init_daemon_domain(mm_events)
allow mm_events shell_exec:file rx_file_perms;
# Allow running the sleep command to rate limit attempts
# to arm mm_events on failure.
allow mm_events toolbox_exec:file rx_file_perms;
allow mm_events perfetto_exec:file rx_file_perms;
domain_auto_trans(mm_events, perfetto_exec, perfetto)