| Nick Kralevich | 88ce951 | 2014-01-09 15:25:36 -0800 | [diff] [blame] | 1 | userdebug_or_eng(` |
| Alex Klyubin | 6b558dc | 2017-03-24 09:30:19 -0700 | [diff] [blame] | 2 | typeattribute su coredomain; |
| 3 | |
| Nick Kralevich | 88ce951 | 2014-01-09 15:25:36 -0800 | [diff] [blame] | 4 | domain_auto_trans(shell, su_exec, su) |
| Nick Kralevich | 88ce951 | 2014-01-09 15:25:36 -0800 | [diff] [blame] | 5 | # Allow dumpstate to call su on userdebug / eng builds to collect |
| 6 | # additional information. |
| 7 | domain_auto_trans(dumpstate, su_exec, su) |
| Stephen Smalley | d99e6d5 | 2013-12-02 14:18:11 -0500 | [diff] [blame] | 8 | |
| Christopher Ferris | 5ec38c4 | 2015-01-29 12:11:55 -0800 | [diff] [blame] | 9 | # Make sure that dumpstate runs the same from the "su" domain as |
| 10 | # from the "init" domain. |
| 11 | domain_auto_trans(su, dumpstate_exec, dumpstate) |
| 12 | |
| Joe Onorato | 41f93db | 2016-11-20 23:23:04 -0800 | [diff] [blame] | 13 | # Put the incident command into its domain so it is the same on user, userdebug and eng. |
| 14 | domain_auto_trans(su, incident_exec, incident) |
| 15 | |
| Nick Kralevich | 35e9239 | 2017-11-01 10:17:28 -0700 | [diff] [blame^] | 16 | # su is also permissive to permit setenforce. |
| Nick Kralevich | 88ce951 | 2014-01-09 15:25:36 -0800 | [diff] [blame] | 17 | permissive su; |
| Sreeram Ramachandran | bc32018 | 2014-05-02 14:50:26 -0700 | [diff] [blame] | 18 | |
| dcashman | 3e8dbf0 | 2016-12-08 11:23:34 -0800 | [diff] [blame] | 19 | app_domain(su) |
| Nick Kralevich | 88ce951 | 2014-01-09 15:25:36 -0800 | [diff] [blame] | 20 | ') |