blob: 5df056b9b538f2f12d59fd34073369f808f146c8 [file] [log] [blame]
Woody Lin33210ec2020-01-17 18:51:36 +08001type ramdump_exec, exec_type, vendor_file_type, file_type;
2type ramdump, domain;
3
4userdebug_or_eng(`
5 init_daemon_domain(ramdump)
6
7 set_prop(ramdump, vendor_ramdump_prop)
8
9 # f2fs set pin file requires sys_admin
10 allow ramdump self:capability { sys_admin sys_rawio };
11
12 allow ramdump ramdump_vendor_data_file:dir create_dir_perms;
13 allow ramdump ramdump_vendor_data_file:file create_file_perms;
14 allow ramdump proc_cmdline:file r_file_perms;
15
16 allow ramdump block_device:dir search;
17 allow ramdump misc_block_device:blk_file rw_file_perms;
18 allow ramdump userdata_block_device:blk_file rw_file_perms;
19
Yi-Yo Chianged56bd32021-03-22 13:44:35 +080020 # Allow ReadDefaultFstab().
21 read_fstab(ramdump)
Woody Lin33210ec2020-01-17 18:51:36 +080022
23 # read /fstab.${ro.hardware}
24 allow ramdump rootfs:file r_file_perms;
25
26 r_dir_file(ramdump, sysfs_type)
27
Woody Lin33210ec2020-01-17 18:51:36 +080028 # To implement fusefs (ramdumpfs) under /mnt/vendor/ramdump.
29 allow ramdump fuse:filesystem relabelfrom;
30 allow ramdump fuse_device:chr_file rw_file_perms;
31 allow ramdump mnt_vendor_file:dir r_dir_perms;
32 allow ramdump ramdump_vendor_mnt_file:dir { getattr mounton };
33 allow ramdump ramdump_vendor_mnt_file:filesystem { mount unmount relabelfrom relabelto };
Woody Linea907ea2021-03-02 17:13:27 +080034
Vova Sharaienko6f660ac2021-04-15 01:41:33 +000035 # Access new Stats AIDL APIs
Woody Linea907ea2021-03-02 17:13:27 +080036 allow ramdump fwk_stats_service:service_manager find;
37 binder_call(ramdump, servicemanager)
Vova Sharaienko6f660ac2021-04-15 01:41:33 +000038 binder_use(ramdump)
Woody Lin33210ec2020-01-17 18:51:36 +080039')