blob: 96bdfd64bf925f910f4aa295491a23406a6689e9 [file] [log] [blame]
Woody Lin33210ec2020-01-17 18:51:36 +08001type ramdump_exec, exec_type, vendor_file_type, file_type;
2type ramdump, domain;
3
4userdebug_or_eng(`
5 init_daemon_domain(ramdump)
6
7 set_prop(ramdump, vendor_ramdump_prop)
8
9 # f2fs set pin file requires sys_admin
10 allow ramdump self:capability { sys_admin sys_rawio };
11
12 allow ramdump ramdump_vendor_data_file:dir create_dir_perms;
13 allow ramdump ramdump_vendor_data_file:file create_file_perms;
14 allow ramdump proc_cmdline:file r_file_perms;
15
16 allow ramdump block_device:dir search;
17 allow ramdump misc_block_device:blk_file rw_file_perms;
18 allow ramdump userdata_block_device:blk_file rw_file_perms;
19
20 dontaudit ramdump metadata_file:dir search;
21
22 # read /fstab.${ro.hardware}
23 allow ramdump rootfs:file r_file_perms;
24
25 r_dir_file(ramdump, sysfs_type)
26
27 # To access statsd.
28 hwbinder_use(ramdump)
29 get_prop(ramdump, hwservicemanager_prop)
30 allow ramdump fwk_stats_hwservice:hwservice_manager find;
31 binder_call(ramdump, stats_service_server)
Vova Sharaienko88684472021-03-03 01:27:44 +000032 allow ramdump fwk_stats_service:service_manager find;
33 binder_use(ramdump)
Woody Lin33210ec2020-01-17 18:51:36 +080034
35 # To implement fusefs (ramdumpfs) under /mnt/vendor/ramdump.
36 allow ramdump fuse:filesystem relabelfrom;
37 allow ramdump fuse_device:chr_file rw_file_perms;
38 allow ramdump mnt_vendor_file:dir r_dir_perms;
39 allow ramdump ramdump_vendor_mnt_file:dir { getattr mounton };
40 allow ramdump ramdump_vendor_mnt_file:filesystem { mount unmount relabelfrom relabelto };
Woody Linea907ea2021-03-02 17:13:27 +080041
42 # Access new Stats AIDL APIs (ag/13714907).
43 allow ramdump fwk_stats_service:service_manager find;
44 binder_call(ramdump, servicemanager)
Woody Lin33210ec2020-01-17 18:51:36 +080045')