blob: 1aaaad092a33dc48f9bcdb001e97d956b0caff86 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
|
# File types must be defined for file_contexts.
type procrank_exec, exec_type, file_type;
userdebug_or_eng(`
type procrank, domain, mlstrustedsubject;
domain_auto_trans(shell, procrank_exec, procrank)
domain_auto_trans(dumpstate, procrank_exec, procrank)
allow procrank self:capability sys_ptrace;
allow procrank devpts:chr_file { read write getattr ioctl };
allow procrank dumpstate:unix_stream_socket { read write getattr };
r_dir_file(procrank, domain)
allow procrank { shell dumpstate }:fd use;
allow procrank adbd:process sigchld;
# allow procrank write to bugreport.
allow procrank shell_data_file:file w_file_perms;
')
|