75e8c1f461
Previously in Microdroid, processes send log messages to logd over socket and then logcat ran to hand the message to the host side over the serial console. That has changed. Now, the liblog library which processes use to emit logs directly sends the given message to the serial console. Liblog does this by reading a new system property ro.log.file_logger.path. When this is set, liblog doesn't use the logd logger, but opens the file that the sysprop refers to and writes logs there. This change implments sepolicy side of the story. * logd and logcat types are removed since they no longer are needed. * existing references to those types are removed as well. * a new property type `log_prop` is introduced and the two system properties are labaled as log_prop * all processes have read access to the system properties * all processes have append access to /dev/hvc2 Bug: 222592894 Test: run microdroid, see log is still emitted. Change-Id: I4c4f3f4fd0e7babeab28ddf39471e914445ef4da
66 lines
1.9 KiB
Text
66 lines
1.9 KiB
Text
# crash_dump might inherit CAP_SYS_PTRACE from a privileged process,
|
|
# which will result in an audit log even when it's allowed to trace.
|
|
dontaudit crash_dump self:global_capability_class_set { sys_ptrace };
|
|
|
|
allow crash_dump kmsg_debug_device:chr_file { open append };
|
|
|
|
# Use inherited file descriptors
|
|
allow crash_dump domain:fd use;
|
|
|
|
# Read/write IPC pipes inherited from crashing processes.
|
|
allow crash_dump domain:fifo_file { read write };
|
|
|
|
# Append to pipes given to us by processes requesting dumps (e.g. dumpstate)
|
|
allow crash_dump domain:fifo_file { append };
|
|
|
|
# Read information from /proc/$PID.
|
|
allow crash_dump domain:process getattr;
|
|
|
|
r_dir_file(crash_dump, domain)
|
|
allow crash_dump exec_type:file r_file_perms;
|
|
|
|
# Read all /vendor
|
|
r_dir_file(crash_dump, vendor_file)
|
|
|
|
# Talk to tombstoned
|
|
unix_socket_connect(crash_dump, tombstoned_crash, tombstoned)
|
|
|
|
# Append to tombstone files.
|
|
allow crash_dump tombstone_data_file:file { append getattr };
|
|
|
|
# Crash dump is not intended to access the following files. Since these
|
|
# are WAI, suppress the denials to clean up the logs.
|
|
dontaudit crash_dump {
|
|
core_data_file_type
|
|
vendor_file_type
|
|
}:dir search;
|
|
dontaudit crash_dump system_data_file:{ lnk_file file } read;
|
|
dontaudit crash_dump property_type:file read;
|
|
|
|
# Suppress denials for files in /proc that are passed
|
|
# across exec().
|
|
dontaudit crash_dump proc_type:file rw_file_perms;
|
|
|
|
typeattribute crash_dump coredomain;
|
|
|
|
# Crash dump does not need to access devices passed across exec().
|
|
dontaudit crash_dump { devpts dev_type }:chr_file { read write };
|
|
|
|
allow crash_dump {
|
|
domain
|
|
-apexd
|
|
-crash_dump
|
|
-init
|
|
-kernel
|
|
-no_crash_dump_domain
|
|
-ueventd
|
|
-vendor_init
|
|
}:process { ptrace signal sigchld sigstop sigkill };
|
|
|
|
userdebug_or_eng(`
|
|
allow crash_dump {
|
|
apexd
|
|
}:process { ptrace signal sigchld sigstop sigkill };
|
|
')
|
|
|
|
neverallow crash_dump no_crash_dump_domain:process ptrace;
|