1 type hal_dumpstate_impl, domain; 2 hal_server_domain(hal_dumpstate_impl, hal_dumpstate) 3 4 type hal_dumpstate_impl_exec, exec_type, file_type; 5 init_daemon_domain(hal_dumpstate_impl) 6 7 # Execute dump scripts 8 allow hal_dumpstate_impl shell_exec:file rx_file_perms; 9 allow hal_dumpstate_impl toolbox_exec:file rx_file_perms; 10 11 # Access to files for dumping 12 allow hal_dumpstate_impl debugfs_rpm:file r_file_perms; 13 allow hal_dumpstate_impl debugfs_ipc:dir r_dir_perms; 14 allow hal_dumpstate_impl debugfs_ipc:file r_file_perms; 15 allow hal_dumpstate_impl debugfs_bufinfo:file r_file_perms; 16 allow hal_dumpstate_impl sysfs_batteryinfo:file r_file_perms; 17 allow hal_dumpstate_impl sysfs_devices_system_cpu:dir r_dir_perms; 18 allow hal_dumpstate_impl sysfs_devices_system_cpu:file r_file_perms; 19 allow hal_dumpstate_impl sysfs_hwmon:file r_file_perms; 20 allow hal_dumpstate_impl sysfs_thermal:dir r_dir_perms; 21 allow hal_dumpstate_impl proc_interrupts:file r_file_perms; 22 allow hal_dumpstate_impl pstorefs:dir r_dir_perms; 23