| Alex Klyubin | f5446eb | 2017-03-23 14:27:32 -0700 | [diff] [blame] | 1 | typeattribute crash_dump coredomain; |
| Jeff Vander Stoep | 08aa715 | 2018-06-13 22:10:37 -0700 | [diff] [blame] | 2 | |
| 3 | allow crash_dump { |
| 4 | domain |
| Martijn Coenen | ac097ac | 2018-08-17 09:35:42 +0200 | [diff] [blame^] | 5 | -apexd |
| Jeff Vander Stoep | 08aa715 | 2018-06-13 22:10:37 -0700 | [diff] [blame] | 6 | -bpfloader |
| 7 | -crash_dump |
| 8 | -init |
| 9 | -kernel |
| 10 | -keystore |
| Mark Salyzyn | 275ea12 | 2018-08-07 16:03:47 -0700 | [diff] [blame] | 11 | -llkd |
| Jeff Vander Stoep | 08aa715 | 2018-06-13 22:10:37 -0700 | [diff] [blame] | 12 | -logd |
| 13 | -ueventd |
| 14 | -vendor_init |
| 15 | -vold |
| 16 | }:process { ptrace signal sigchld sigstop sigkill }; |
| Mark Salyzyn | 275ea12 | 2018-08-07 16:03:47 -0700 | [diff] [blame] | 17 | userdebug_or_eng(` |
| 18 | allow crash_dump { llkd logd }:process { ptrace signal sigchld sigstop sigkill }; |
| 19 | ') |
| Jeff Vander Stoep | 08aa715 | 2018-06-13 22:10:37 -0700 | [diff] [blame] | 20 | |
| Nick Kralevich | 095fbea | 2018-09-13 11:07:14 -0700 | [diff] [blame] | 21 | ### |
| 22 | ### neverallow assertions |
| 23 | ### |
| 24 | |
| 25 | # ptrace neverallow assertions are spread throughout the other policy |
| 26 | # files, so we avoid adding redundant assertions here |
| 27 | |
| Jeff Vander Stoep | 08aa715 | 2018-06-13 22:10:37 -0700 | [diff] [blame] | 28 | neverallow crash_dump { |
| 29 | bpfloader |
| 30 | init |
| 31 | kernel |
| 32 | keystore |
| Mark Salyzyn | 275ea12 | 2018-08-07 16:03:47 -0700 | [diff] [blame] | 33 | llkd |
| 34 | userdebug_or_eng(`-llkd') |
| Jeff Vander Stoep | 08aa715 | 2018-06-13 22:10:37 -0700 | [diff] [blame] | 35 | logd |
| 36 | userdebug_or_eng(`-logd') |
| 37 | ueventd |
| 38 | vendor_init |
| 39 | vold |
| Nick Kralevich | 095fbea | 2018-09-13 11:07:14 -0700 | [diff] [blame] | 40 | }:process { signal sigstop sigkill }; |
| Alan Stokes | b9cb73a | 2018-09-03 17:27:54 +0100 | [diff] [blame] | 41 | |
| 42 | neverallow crash_dump self:process ptrace; |