platform_system_sepolicy/prebuilts/api/29.0/public/traceur_app.te
Ian Pedowitz 94b7372534 SEPolicy Prebuilts for Q
Bug: 129943426
Test: Build
Change-Id: I3e091652fa8d1757b1f71f7559186d5b32f000d5
2019-05-14 21:42:22 -07:00

31 lines
809 B
Text

type traceur_app, domain;
allow traceur_app servicemanager:service_manager list;
allow traceur_app hwservicemanager:hwservice_manager list;
# Allow Traceur to enable traced if necessary.
set_prop(traceur_app, traced_enabled_prop)
set_prop(traceur_app, debug_prop)
allow traceur_app {
service_manager_type
-apex_service
-dnsresolver_service
-gatekeeper_service
-incident_service
-installd_service
-iorapd_service
-lpdump_service
-netd_service
-virtual_touchpad_service
-vold_service
-vr_hwc_service
}:service_manager find;
# Allow traceur_app to use atrace HAL
hal_client_domain(traceur_app, hal_atrace)
dontaudit traceur_app service_manager_type:service_manager find;
dontaudit traceur_app hwservice_manager_type:hwservice_manager find;
dontaudit traceur_app domain:binder call;