123456789101112131415161718192021222324252627282930 |
- type performanced, domain, mlstrustedsubject;
- type performanced_exec, system_file_type, exec_type, file_type;
- binder_use(performanced)
- binder_call(performanced, system_server)
- allow performanced permission_service:service_manager find;
- pdx_server(performanced, performance_client)
- allow performanced self:global_capability_class_set { setuid setgid sys_nice };
- r_dir_file(performanced, { appdomain bufferhubd kernel surfaceflinger })
- dontaudit performanced domain:dir read;
- allow performanced { appdomain bufferhubd kernel surfaceflinger }:process setsched;
- userdebug_or_eng(`
- dontaudit performanced domain:dir open;
- dontaudit performanced domain:file { open read getattr };
- ')
- r_dir_file(performanced, cgroup)
|