blob: 466bc0bb44b9bcce6af79e45ad881212379f15fe [file] [log] [blame]
Nick Kralevich88ce9512014-01-09 15:25:36 -08001userdebug_or_eng(`
Nick Kralevich88ce9512014-01-09 15:25:36 -08002 domain_auto_trans(shell, su_exec, su)
Nick Kralevich88ce9512014-01-09 15:25:36 -08003 # Allow dumpstate to call su on userdebug / eng builds to collect
4 # additional information.
5 domain_auto_trans(dumpstate, su_exec, su)
Stephen Smalleyd99e6d52013-12-02 14:18:11 -05006
Christopher Ferris5ec38c42015-01-29 12:11:55 -08007 # Make sure that dumpstate runs the same from the "su" domain as
8 # from the "init" domain.
9 domain_auto_trans(su, dumpstate_exec, dumpstate)
10
Joe Onorato41f93db2016-11-20 23:23:04 -080011 # Put the incident command into its domain so it is the same on user, userdebug and eng.
12 domain_auto_trans(su, incident_exec, incident)
13
dcashman2e00e632016-10-12 14:58:09 -070014# su is also permissive to permit setenforce.
Nick Kralevich88ce9512014-01-09 15:25:36 -080015 permissive su;
Sreeram Ramachandranbc320182014-05-02 14:50:26 -070016
dcashman3e8dbf02016-12-08 11:23:34 -080017 app_domain(su)
Nick Kralevich88ce9512014-01-09 15:25:36 -080018')