1typeattribute dumpstate coredomain;
2type dumpstate_tmpfs, file_type;
3
4init_daemon_domain(dumpstate)
5
6# Execute and transition to the vdc domain
7domain_auto_trans(dumpstate, vdc_exec, vdc)
8
9# Create tmpfs files for using memfd descriptors to get output from child
10# processes.
11tmpfs_domain(dumpstate)
12
13# Acquire advisory lock on /system/etc/xtables.lock from ip[6]tables
14allow dumpstate system_file:file lock;
15
16allow dumpstate storaged_exec:file rx_file_perms;
17
18# /data/misc/a11ytrace for accessibility traces
19userdebug_or_eng(`
20  allow dumpstate accessibility_trace_data_file:dir r_dir_perms;
21  allow dumpstate accessibility_trace_data_file:file r_file_perms;
22')
23
24# /data/misc/wmtrace for wm traces
25userdebug_or_eng(`
26  allow dumpstate wm_trace_data_file:dir r_dir_perms;
27  allow dumpstate wm_trace_data_file:file r_file_perms;
28')
29
30# /data/system/dropbox for dropbox entries
31userdebug_or_eng(`
32  allow dumpstate dropbox_data_file:dir r_dir_perms;
33  allow dumpstate dropbox_data_file:file r_file_perms;
34')
35
36# Allow dumpstate to make binder calls to incidentd
37binder_call(dumpstate, incidentd)
38
39# Kill incident in case of a timeout
40allow dumpstate incident:process { signal sigkill };
41
42# Allow dumpstate to make binder calls to storaged service
43binder_call(dumpstate, storaged)
44
45# Allow dumpstate to make binder calls to statsd
46binder_call(dumpstate, statsd)
47
48# Allow dumpstate to talk to gpuservice over binder
49binder_call(dumpstate, gpuservice);
50
51# Allow dumpstate to talk to idmap over binder
52binder_call(dumpstate, idmap);
53
54# Allow dumpstate to talk to profcollectd over binder
55userdebug_or_eng(`
56  binder_call(dumpstate, profcollectd)
57')
58
59# Collect metrics on boot time created by init
60get_prop(dumpstate, boottime_prop)
61
62# Signal native processes to dump their stack.
63allow dumpstate {
64  mediatranscoding
65  statsd
66  netd
67}:process signal;
68
69# Only allow dumpstate to dump Keystore on debuggable builds.
70userdebug_or_eng(`
71  allow dumpstate keystore:process signal;
72')
73dontaudit dumpstate keystore:process { signal };
74
75# For collecting bugreports.
76no_debugfs_restriction(`
77  allow dumpstate debugfs_wakeup_sources:file r_file_perms;
78')
79
80allow dumpstate dev_type:blk_file getattr;
81allow dumpstate webview_zygote:process signal;
82allow dumpstate sysfs_dmabuf_stats:file r_file_perms;
83dontaudit dumpstate update_engine:binder call;
84
85# Read files in /proc
86allow dumpstate {
87  proc_net_tcp_udp
88  proc_pid_max
89}:file r_file_perms;
90
91# For comminucating with the system process to do confirmation ui.
92binder_call(dumpstate, incidentcompanion_service)
93
94# Set properties.
95# dumpstate_prop is used to share state with the Shell app.
96set_prop(dumpstate, dumpstate_prop)
97set_prop(dumpstate, exported_dumpstate_prop)
98
99# dumpstate_options_prop is used to pass extra command-line args.
100set_prop(dumpstate, dumpstate_options_prop)
101
102# Allow dumpstate to kill vendor dumpstate service by init
103set_prop(dumpstate, ctl_dumpstate_prop)
104
105# For dumping dynamic partition information.
106set_prop(dumpstate, lpdumpd_prop)
107binder_call(dumpstate, lpdumpd)
108
109# For dumping hypervisor information.
110get_prop(dumpstate, hypervisor_prop)
111
112# For dumping device-mapper and snapshot information.
113allow dumpstate gsid_exec:file rx_file_perms;
114set_prop(dumpstate, ctl_gsid_prop)
115binder_call(dumpstate, gsid)
116
117r_dir_file(dumpstate, ota_metadata_file)
118
119# For starting (and killing) perfetto --save-for-bugreport. If a labelled trace
120# is being recorded, the command above will serialize it into
121# /data/misc/perfetto-traces/bugreport/*.pftrace .
122domain_auto_trans(dumpstate, perfetto_exec, perfetto)
123allow dumpstate perfetto:process signal;
124allow dumpstate perfetto_traces_data_file:dir { search };
125allow dumpstate perfetto_traces_bugreport_data_file:dir rw_dir_perms;
126allow dumpstate perfetto_traces_bugreport_data_file:file { r_file_perms unlink };
127
128# When exec-ing /system/bin/perfetto, dumpstates redirects stdio to /dev/null
129# (which is labelled as dumpstate_tmpfs) to avoid leaking a FD to the bugreport
130# zip file. These rules are to allow perfetto.te to inherit dumpstate's
131# /dev/null.
132allow perfetto dumpstate_tmpfs:file rw_file_perms;
133allow perfetto dumpstate:fd use;
134
135# system_dlkm_file for /system_dlkm partition
136allow dumpstate system_dlkm_file:dir getattr;
137
138# Allow dumpstate to execute derive_sdk in its own domain
139domain_auto_trans(dumpstate, derive_sdk_exec, derive_sdk)
140