| Alex Klyubin | f5446eb | 2017-03-23 14:27:32 -0700 | [diff] [blame] | 1 | typeattribute shell coredomain; |
| 2 | |
| dcashman | 2e00e63 | 2016-10-12 14:58:09 -0700 | [diff] [blame] | 3 | # systrace support - allow atrace to run |
| 4 | allow shell debugfs_tracing:dir r_dir_perms; |
| Nick Kralevich | 4cae28d | 2017-02-11 22:01:58 -0800 | [diff] [blame] | 5 | allow shell debugfs_tracing:file r_file_perms; |
| 6 | allow shell tracing_shell_writable:file rw_file_perms; |
| dcashman | 2e00e63 | 2016-10-12 14:58:09 -0700 | [diff] [blame] | 7 | allow shell debugfs_trace_marker:file getattr; |
| 8 | allow shell atrace_exec:file rx_file_perms; |
| 9 | |
| dcashman | 3e8dbf0 | 2016-12-08 11:23:34 -0800 | [diff] [blame] | 10 | # Run app_process. |
| 11 | # XXX Transition into its own domain? |
| 12 | app_domain(shell) |
| Jin Qian | af3eaf0 | 2017-03-23 12:28:20 -0700 | [diff] [blame] | 13 | |
| 14 | # allow shell to call dumpsys storaged |
| 15 | binder_call(shell, storaged) |
| Nick Kralevich | 14e2e92 | 2017-05-08 09:51:59 -0700 | [diff] [blame] | 16 | |
| 17 | # Perform SELinux access checks, needed for CTS |
| 18 | selinux_check_access(shell) |
| 19 | selinux_check_context(shell) |