| Alex Klyubin | 357c161 | 2017-02-07 10:54:20 -0800 | [diff] [blame] | 1 | # Domain for atrace process spawned by boottrace service. |
| 2 | |
| 3 | type atrace_exec, exec_type, file_type; |
| 4 | |
| Yasuhiro Matsuda | 3d32817 | 2015-06-24 15:24:17 +0900 | [diff] [blame] | 5 | userdebug_or_eng(` |
| Alex Klyubin | f5446eb | 2017-03-23 14:27:32 -0700 | [diff] [blame] | 6 | type atrace, domain, coredomain, domain_deprecated; |
| Alex Klyubin | 357c161 | 2017-02-07 10:54:20 -0800 | [diff] [blame] | 7 | |
| Yasuhiro Matsuda | 3d32817 | 2015-06-24 15:24:17 +0900 | [diff] [blame] | 8 | init_daemon_domain(atrace) |
| Alex Klyubin | 357c161 | 2017-02-07 10:54:20 -0800 | [diff] [blame] | 9 | |
| 10 | # boottrace services uses /data/misc/boottrace/categories |
| 11 | allow atrace boottrace_data_file:dir search; |
| 12 | allow atrace boottrace_data_file:file r_file_perms; |
| 13 | |
| 14 | # atrace reads the files in /sys/kernel/debug/tracing/ |
| 15 | allow atrace debugfs_tracing:file r_file_perms; |
| 16 | |
| 17 | # atrace sets debug.atrace.* properties |
| 18 | set_prop(atrace, debug_prop) |
| 19 | |
| 20 | # atrace pokes all the binder-enabled processes at startup. |
| 21 | binder_use(atrace) |
| 22 | allow atrace healthd:binder call; |
| 23 | allow atrace surfaceflinger:binder call; |
| Nick Kralevich | b56e6ef | 2016-12-09 20:14:31 -0800 | [diff] [blame] | 24 | ') |