Lines Matching full:statsd
1 type statsd, domain, mlstrustedsubject;
2 typeattribute statsd coredomain;
4 init_daemon_domain(statsd)
7 binder_use(statsd)
9 # Allow statsd to scan through /proc/pid for all processes.
10 r_dir_file(statsd, domain)
16 allow statsd devpts:chr_file { getattr ioctl read write };
17 allow statsd shell_exec:file rx_file_perms;
18 allow statsd system_file:file execute_no_trans;
19 allow statsd toolbox_exec:file rx_file_perms;
22 allow statsd su:fifo_file read;
26 allow statsd stats_data_file:dir create_dir_perms;
27 allow statsd stats_data_file:file create_file_perms;
29 # Allow statsd to make binder calls to any binder service.
30 binder_call(statsd, appdomain)
31 binder_call(statsd, healthd)
32 binder_call(statsd, incidentd)
34 binder_call(statsd, perfprofd)
36 binder_call(statsd, statscompanion_service)
37 binder_call(statsd, system_server)
40 read_logd(statsd)
41 control_logd(statsd)
44 # stdint through a pipe. It allows statsd to capture traces and hand them
46 allow statsd perfetto_exec:file rx_file_perms;
47 domain_auto_trans(statsd, perfetto_exec, perfetto)
49 # Grant statsd with permissions to register the services.
50 allow statsd {
57 # Grant statsd to access health hal to access battery metrics.
58 allow statsd hal_health_hwservice:hwservice_manager find;
60 # Only statsd can publish the binder service.
61 add_service(statsd, stats_service)
64 allow statsd stats:fd use;
65 allow statsd stats:fifo_file write;
67 # Allow statsd to send dump info to dumpstate
68 allow statsd dumpstate:fd use;
69 allow statsd dumpstate:fifo_file { getattr write };
71 # Allow statsd to call back to stats with status updates.
72 binder_call(statsd, stats)
75 allow statsd proc_uid_cputime_showstat:file { getattr open read };
76 hal_client_domain(statsd, hal_health)
77 hal_client_domain(statsd, hal_power)
78 hal_client_domain(statsd, hal_thermal)
81 allow statsd adbd:fd use;
82 allow statsd adbd:unix_stream_socket { getattr read write };
83 allow statsd shell:fifo_file { getattr read };
85 unix_socket_send(bluetooth, statsdw, statsd)
86 unix_socket_send(bootstat, statsdw, statsd)
87 unix_socket_send(lmkd, statsdw, statsd)
88 unix_socket_send(platform_app, statsdw, statsd)
89 unix_socket_send(radio, statsdw, statsd)
90 unix_socket_send(statsd, statsdw, statsd)
91 unix_socket_send(system_server, statsdw, statsd)
104 -statsd
110 # Only statsd and the other root services in limited circumstances.
113 neverallow { domain -statsd -system_server -init -vold } stats_data_file:file *;
116 neverallow { domain -statsd -system_server -init -vold } stats_data_file:dir *;
