1 typeattribute dumpstate coredomain; 2 typeattribute dumpstate domain_deprecated; 3 4 init_daemon_domain(dumpstate) 5 6 # Execute and transition to the vdc domain 7 domain_auto_trans(dumpstate, vdc_exec, vdc) 8 9 # Acquire advisory lock on /system/etc/xtables.lock from ip[6]tables 10 allow dumpstate system_file:file lock; 11 12 # TODO: deal with tmpfs_domain pub/priv split properly 13 allow dumpstate dumpstate_tmpfs:file execute; 14 15 # systrace support - allow atrace to run 16 allow dumpstate debugfs_tracing:dir r_dir_perms; 17 allow dumpstate debugfs_tracing:file rw_file_perms; 18 allow dumpstate debugfs_trace_marker:file getattr; 19 allow dumpstate atrace_exec:file rx_file_perms; 20 allow dumpstate storaged_exec:file rx_file_perms; 21 22 # Allow dumpstate to make binder calls to storaged service 23 binder_call(dumpstate, storaged) 24 25 # Collect metrics on boot time created by init 26 get_prop(dumpstate, boottime_prop) 27