diff options
Diffstat (limited to 'prebuilts/api/32.0/private/statsd.te')
| -rw-r--r-- | prebuilts/api/32.0/private/statsd.te | 27 |
1 files changed, 27 insertions, 0 deletions
diff --git a/prebuilts/api/32.0/private/statsd.te b/prebuilts/api/32.0/private/statsd.te new file mode 100644 index 000000000..444d82e3c --- /dev/null +++ b/prebuilts/api/32.0/private/statsd.te @@ -0,0 +1,27 @@ +typeattribute statsd coredomain; + +init_daemon_domain(statsd) + +# Allow to exec the perfetto cmdline client and pass it the trace config on +# stdint through a pipe. It allows statsd to capture traces and hand them +# to Android dropbox. +allow statsd perfetto_exec:file rx_file_perms; +domain_auto_trans(statsd, perfetto_exec, perfetto) + +# Grant statsd with permissions to register the services. +allow statsd { + statscompanion_service +}:service_manager find; + +# Allow incidentd to obtain the statsd incident section. +allow statsd incidentd:fifo_file write; + +# Allow StatsCompanionService to pipe data to statsd. +allow statsd system_server:fifo_file { read getattr }; + +# Allow statsd to retrieve SF statistics over binder +binder_call(statsd, surfaceflinger); + +# Allow statsd to read its system properties +get_prop(statsd, device_config_statsd_native_prop) +get_prop(statsd, device_config_statsd_native_boot_prop) |