| Akilesh Kailash | ca1d90a | 2024-11-11 15:56:28 -0800 | [diff] [blame^] | 1 | type prefetch, coredomain, domain; |
| 2 | type prefetch_exec, exec_type, file_type, system_file_type; |
| 3 | |
| 4 | init_daemon_domain(prefetch) |
| 5 | |
| 6 | # Allow prefetch to start recording by enabling tracing event under |
| 7 | # /sys/kernel/tracing/events/filemap/mm_filemap_add_to_page_cache |
| 8 | allow prefetch debugfs_tracing_instances:dir create_dir_perms; |
| 9 | allow prefetch debugfs_tracing_instances:file rw_file_perms; |
| 10 | |
| 11 | # Allow to read/write/create/delete to storage prefetch record files |
| 12 | allow prefetch metadata_file:dir search; |
| 13 | allow prefetch prefetch_metadata_file:dir rw_dir_perms; |
| 14 | allow prefetch prefetch_metadata_file:file create_file_perms; |
| 15 | |
| 16 | # Disallow other domains controlling prefetch service. |
| 17 | neverallow { |
| 18 | domain |
| 19 | -init |
| 20 | -shell |
| 21 | } ctl_prefetch_prop:property_service set; |
| 22 | |
| 23 | # Disallow other domains controlling prefetch_boot_prop. |
| 24 | neverallow { |
| 25 | domain |
| 26 | -init |
| 27 | } prefetch_boot_prop:property_service set; |