blob: 3d7902fe982ad866862344bb71603242ddf27553 [file] [log] [blame]
Alex Klyubin357c1612017-02-07 10:54:20 -08001# Domain for atrace process spawned by boottrace service.
2
3type atrace_exec, exec_type, file_type;
4
Yasuhiro Matsuda3d328172015-06-24 15:24:17 +09005userdebug_or_eng(`
Jeff Vander Stoepb5da2522017-07-27 08:08:49 -07006 type atrace, domain, coredomain;
Alex Klyubin357c1612017-02-07 10:54:20 -08007
Yasuhiro Matsuda3d328172015-06-24 15:24:17 +09008 init_daemon_domain(atrace)
Alex Klyubin357c1612017-02-07 10:54:20 -08009
10 # boottrace services uses /data/misc/boottrace/categories
11 allow atrace boottrace_data_file:dir search;
12 allow atrace boottrace_data_file:file r_file_perms;
13
Dan Cashman91d398d2017-09-26 12:58:29 -070014 # Allow atrace to access tracefs.
15 allow atrace debugfs_tracing:dir r_dir_perms;
16 allow atrace debugfs_tracing:file rw_file_perms;
Carmen Jackson2c8ca452018-01-30 18:14:45 -080017 allow atrace debugfs_tracing_debug:dir r_dir_perms;
Dan Cashman91d398d2017-09-26 12:58:29 -070018 allow atrace debugfs_tracing_debug:file rw_file_perms;
19 allow atrace debugfs_trace_marker:file getattr;
Alex Klyubin357c1612017-02-07 10:54:20 -080020
21 # atrace sets debug.atrace.* properties
22 set_prop(atrace, debug_prop)
23
24 # atrace pokes all the binder-enabled processes at startup.
25 binder_use(atrace)
26 allow atrace healthd:binder call;
27 allow atrace surfaceflinger:binder call;
Nick Kralevichb56e6ef2016-12-09 20:14:31 -080028')