Files
device_google_wahoo/sepolicy/vendor/perfd.te
Steven Moreland 3db6f86851 Remove socket violators from passthrough mode.
Bug: 34274385
Bug: 34784662
Test: neverallows not tripped
Test: bluetooth audio works
Test: no denials seen related to wcnss<->bluetooth sockets
Change-Id: Ie966130e5fd15b94bf8ce0e339eb632e7bf5e71e
2017-06-19 11:18:27 -07:00

32 lines
1023 B
Plaintext

type perfd, domain;
type perfd_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(perfd)
r_dir_file(perfd, sysfs_msm_subsys)
# perfd uses kill(pid, 0) to determine if a process exists.
# Determining if a process exists does not require the kill capability
# since a permission denied indicates the process exists.
dontaudit perfd self:capability kill;
allow perfd mediacodec:process signull;
allow perfd hal_power_default:process signull;
allow perfd cgroup:file r_file_perms;
allow perfd post_boot_prop:file r_file_perms;
allow perfd proc:file rw_file_perms;
allow perfd sysfs_graphics:dir search;
allow perfd sysfs_graphics:file r_file_perms;
allow perfd sysfs_soc:dir search;
allow perfd sysfs_soc:file r_file_perms;
allow perfd sysfs_graphics:dir search;
allow perfd sysfs_graphics:file r_file_perms;
allow perfd sysfs_msm_subsys:file w_file_perms;
allow perfd sysfs_devices_system_cpu:file w_file_perms;
allow perfd perfd_socket:sock_file write;
allow perfd latency_device:chr_file w_file_perms;