| Yasuhiro Matsuda | 3d32817 | 2015-06-24 15:24:17 +0900 | [diff] [blame] | 1 | # Domain for atrace process spawned by boottrace service. |
| 2 | type atrace_exec, exec_type, file_type; |
| 3 | |
| 4 | userdebug_or_eng(` |
| 5 | |
| Jeff Vander Stoep | d22987b | 2015-11-03 09:54:39 -0800 | [diff] [blame^] | 6 | type atrace, domain, domain_deprecated; |
| Yasuhiro Matsuda | 3d32817 | 2015-06-24 15:24:17 +0900 | [diff] [blame] | 7 | init_daemon_domain(atrace) |
| 8 | |
| 9 | # boottrace services uses /data/misc/boottrace/categories |
| 10 | allow atrace boottrace_data_file:dir search; |
| 11 | allow atrace boottrace_data_file:file r_file_perms; |
| 12 | |
| 13 | # atrace reads the files in /sys/kernel/debug/tracing/ |
| 14 | allow atrace debugfs:file r_file_perms; |
| 15 | |
| 16 | # atrace sets debug.atrace.* properties |
| 17 | set_prop(atrace, debug_prop) |
| 18 | |
| 19 | # atrace pokes all the binder-enabled processes at startup. |
| 20 | binder_use(atrace) |
| 21 | allow atrace healthd:binder call; |
| 22 | allow atrace surfaceflinger:binder call; |
| 23 | |
| 24 | ') |