45ba665cfc
Otherwise it defaults to the label of /data/system and cannot be distinguished from any other socket in that directory. Also adds allow rule required for pre-existing wpa_socket transition to function without unconfined_domain. Change-Id: I57179aa18786bd56d247f397347e546cca978e41 Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
12 lines
369 B
Text
12 lines
369 B
Text
# debugger interface
|
|
type debuggerd, domain;
|
|
permissive debuggerd;
|
|
type debuggerd_exec, exec_type, file_type;
|
|
|
|
init_daemon_domain(debuggerd)
|
|
unconfined_domain(debuggerd)
|
|
relabelto_domain(debuggerd)
|
|
allow debuggerd tombstone_data_file:dir relabelto;
|
|
|
|
# Connect to system_server via /data/system/ndebugsocket.
|
|
unix_socket_connect(debuggerd, system_ndebug, system_server)
|