| Dan Cashman | 8058248 | 2017-12-06 09:20:27 -0800 | [diff] [blame] | 1 | userdebug_or_eng(` |
| 2 | typeattribute su coredomain; |
| 3 | |
| 4 | domain_auto_trans(shell, su_exec, su) |
| 5 | # Allow dumpstate to call su on userdebug / eng builds to collect |
| 6 | # additional information. |
| 7 | domain_auto_trans(dumpstate, su_exec, su) |
| 8 | |
| 9 | # Make sure that dumpstate runs the same from the "su" domain as |
| 10 | # from the "init" domain. |
| 11 | domain_auto_trans(su, dumpstate_exec, dumpstate) |
| 12 | |
| 13 | # Put the incident command into its domain so it is the same on user, userdebug and eng. |
| 14 | domain_auto_trans(su, incident_exec, incident) |
| 15 | |
| 16 | # su is also permissive to permit setenforce. |
| 17 | permissive su; |
| 18 | |
| 19 | app_domain(su) |
| 20 | ') |