2017-03-23 14:27:32 -07:00
|
|
|
typeattribute crash_dump coredomain;
|
2018-06-13 22:10:37 -07:00
|
|
|
|
2019-02-15 10:29:38 -08:00
|
|
|
# Crash dump does not need to access the GPU.
|
|
|
|
dontaudit crash_dump gpu_device:chr_file *;
|
|
|
|
|
2018-06-13 22:10:37 -07:00
|
|
|
allow crash_dump {
|
|
|
|
domain
|
2018-08-17 00:35:42 -07:00
|
|
|
-apexd
|
2018-06-13 22:10:37 -07:00
|
|
|
-bpfloader
|
|
|
|
-crash_dump
|
|
|
|
-init
|
|
|
|
-kernel
|
|
|
|
-keystore
|
2018-08-07 16:03:47 -07:00
|
|
|
-llkd
|
2018-06-13 22:10:37 -07:00
|
|
|
-logd
|
|
|
|
-ueventd
|
|
|
|
-vendor_init
|
|
|
|
-vold
|
|
|
|
}:process { ptrace signal sigchld sigstop sigkill };
|
2018-08-07 16:03:47 -07:00
|
|
|
userdebug_or_eng(`
|
2019-02-05 13:39:02 -08:00
|
|
|
allow crash_dump { llkd logd vold }:process { ptrace signal sigchld sigstop sigkill };
|
2018-08-07 16:03:47 -07:00
|
|
|
')
|
2018-06-13 22:10:37 -07:00
|
|
|
|
2018-09-13 11:07:14 -07:00
|
|
|
###
|
|
|
|
### neverallow assertions
|
|
|
|
###
|
|
|
|
|
|
|
|
# ptrace neverallow assertions are spread throughout the other policy
|
|
|
|
# files, so we avoid adding redundant assertions here
|
|
|
|
|
2018-06-13 22:10:37 -07:00
|
|
|
neverallow crash_dump {
|
|
|
|
bpfloader
|
|
|
|
init
|
|
|
|
kernel
|
|
|
|
keystore
|
2018-08-07 16:03:47 -07:00
|
|
|
llkd
|
|
|
|
userdebug_or_eng(`-llkd')
|
2018-06-13 22:10:37 -07:00
|
|
|
logd
|
|
|
|
userdebug_or_eng(`-logd')
|
|
|
|
ueventd
|
|
|
|
vendor_init
|
|
|
|
vold
|
2019-02-05 13:39:02 -08:00
|
|
|
userdebug_or_eng(`-vold')
|
2018-09-13 11:07:14 -07:00
|
|
|
}:process { signal sigstop sigkill };
|
2018-09-03 09:27:54 -07:00
|
|
|
|
|
|
|
neverallow crash_dump self:process ptrace;
|
2019-02-15 10:29:38 -08:00
|
|
|
neverallow crash_dump gpu_device:chr_file *;
|