summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorThan McIntosh <thanm@google.com>2015-05-01 09:33:39 -0400
committerThan McIntosh <thanm@google.com>2015-05-07 12:29:58 -0400
commitcde34c72c014c468039f971e471b92986dda869e (patch)
tree0b6e3980cecf0a096509688ad97dbb2c62405c83
parent472d1dd2adf2c6fad893146ed11f60983847996a (diff)
downloadflo-cde34c72c014c468039f971e471b92986dda869e.tar.gz
New device-specific sepolicy file for 'perfprofd'
Bug: http://b/19483574 Change-Id: I89791663fed939562c155c181b4e6e3ed44c748e
-rw-r--r--sepolicy/perfprofd.te6
-rw-r--r--sepolicy/property.te1
-rw-r--r--sepolicy/property_contexts1
3 files changed, 8 insertions, 0 deletions
diff --git a/sepolicy/perfprofd.te b/sepolicy/perfprofd.te
new file mode 100644
index 0000000..4296d4d
--- /dev/null
+++ b/sepolicy/perfprofd.te
@@ -0,0 +1,6 @@
+userdebug_or_eng(`
+ # perfprofd disables mpdecision temporarily via setprop ctl.stop,
+ # then re-enables afterwards with setprop ctl.start
+ allow perfprofd ctl_mpdecision:property_service set;
+ unix_socket_connect(perfprofd, property, init)
+')
diff --git a/sepolicy/property.te b/sepolicy/property.te
index 4deda57..8483793 100644
--- a/sepolicy/property.te
+++ b/sepolicy/property.te
@@ -1 +1,2 @@
type ctl_rmt_prop, property_type;
+type ctl_mpdecision, property_type;
diff --git a/sepolicy/property_contexts b/sepolicy/property_contexts
index 2667358..6b2dc61 100644
--- a/sepolicy/property_contexts
+++ b/sepolicy/property_contexts
@@ -1 +1,2 @@
ctl.rmt_storage u:object_r:ctl_rmt_prop:s0
+ctl.mpdecision u:object_r:ctl_mpdecision:s0