| Dan Cashman | 91d398d | 2017-09-26 12:58:29 -0700 | [diff] [blame^] | 1 | typeattribute shell coredomain; |
| 2 | |
| 3 | # systrace support - allow atrace to run |
| 4 | allow shell debugfs_tracing:dir r_dir_perms; |
| 5 | allow shell debugfs_tracing:file r_file_perms; |
| 6 | allow shell tracing_shell_writable:file rw_file_perms; |
| 7 | allow shell debugfs_trace_marker:file getattr; |
| 8 | allow shell atrace_exec:file rx_file_perms; |
| 9 | |
| 10 | # read config.gz for CTS purposes |
| 11 | allow shell config_gz:file r_file_perms; |
| 12 | |
| 13 | userdebug_or_eng(` |
| 14 | allow shell tracing_shell_writable_debug:file rw_file_perms; |
| 15 | ') |
| 16 | |
| 17 | # Run app_process. |
| 18 | # XXX Transition into its own domain? |
| 19 | app_domain(shell) |
| 20 | |
| 21 | # allow shell to call dumpsys storaged |
| 22 | binder_call(shell, storaged) |