| Adam Shih | b9903cc | 2022-09-23 10:34:21 +0800 | [diff] [blame^] | 1 | ##################################### |
| 2 | # pixel_bugreport(domain_name) |
| 3 | # Defines a new domain for executables under /vendor/bin/dump |
| 4 | # Grants permissions to interact with dumpstate and write to bugreport. |
| 5 | # See go/pixel-defrag for more details. |
| 6 | define(`pixel_bugreport', ` |
| 7 | type $1, domain; |
| 8 | type $1_exec, exec_type, vendor_file_type, file_type; |
| 9 | typeattribute $1 hal_dumpstate; |
| 10 | domain_auto_trans(hal_dumpstate_default, $1_exec, $1) |
| 11 | |
| 12 | allow $1 dumpstate:fd use; |
| 13 | allow $1 dumpstate:fifo_file { write getattr }; |
| 14 | allow $1 hal_dumpstate_default:fd use; |
| 15 | allow $1 shell_data_file:file { write getattr }; |
| 16 | ') |
| 17 | |