Lines Matching refs:perfprofd

1 # perfprofd - perf profile collection daemon
2 type perfprofd, domain;
7   typeattribute perfprofd coredomain;
8   typeattribute perfprofd mlstrustedsubject;
10   # perfprofd access to sysfs directory structure.
11   allow perfprofd sysfs_type:dir search;
13   # perfprofd needs to control CPU hot-plug in order to avoid kernel
17   allow perfprofd sysfs_devices_system_cpu:file rw_file_perms;
19   # perfprofd checks for the existence of and then invokes simpleperf;
20   # simpleperf retains perfprofd domain after exec
21   allow perfprofd system_file:file rx_file_perms;
23   # perfprofd reads a config file from /data/data/com.google.android.gms/files
24   allow perfprofd app_data_file:file r_file_perms;
25   allow perfprofd app_data_file:dir search;
26   allow perfprofd self:global_capability_class_set { dac_override };
28   # perfprofd opens a file for writing in /data/misc/perfprofd
29   allow perfprofd perfprofd_data_file:file create_file_perms;
30   allow perfprofd perfprofd_data_file:dir rw_dir_perms;
32   # perfprofd uses the system log
33   read_logd(perfprofd);
34   write_logd(perfprofd);
36   # perfprofd inspects /sys/power/wake_unlock
37   wakelock_use(perfprofd);
39   # perfprofd looks at thermals.
40   allow perfprofd sysfs_thermal:dir r_dir_perms;
42   # perfprofd checks power_supply.
43   r_dir_file(perfprofd, sysfs_batteryinfo)
46   allow perfprofd sysfs_kernel_notes:file r_file_perms;
48   # Simpleperf & perfprofd query a range of proc stats.
49   allow perfprofd proc_loadavg:file r_file_perms;
50   allow perfprofd proc_stat:file r_file_perms;
51   allow perfprofd proc_modules:file r_file_perms;
54   allow perfprofd proc_perf:file write;
57   dontaudit perfprofd proc_security:file *;
60   allow perfprofd self:global_capability_class_set sys_admin;
63   r_dir_file(perfprofd, domain)
66   allow perfprofd self:global_capability_class_set { sys_resource sys_ptrace };
67   neverallow perfprofd domain:process ptrace;
71   allow perfprofd exec_type:file r_file_perms;
73   r_dir_file(perfprofd, apk_data_file)
74   r_dir_file(perfprofd, dalvikcache_data_file)
76   r_dir_file(perfprofd, vendor_file)
78   r_dir_file(perfprofd, vendor_app_file)
81   set_prop(perfprofd, shell_prop)
84   r_dir_file(perfprofd, debugfs_tracing)
85   r_dir_file(perfprofd, debugfs_tracing_debug)
88   allow perfprofd toolbox_exec:file rx_file_perms;
90   allow perfprofd shell_exec:file rx_file_perms;
93   allow perfprofd self:global_capability_class_set ipc_lock;
98   dontaudit perfprofd shell_data_file:dir *;
99   dontaudit perfprofd shell_data_file:file *;
101   # Allow perfprofd to publish a binder service and make binder calls.
102   binder_use(perfprofd)
103   add_service(perfprofd, perfprofd_service)
110   allow perfprofd devpts:chr_file rw_file_perms;
112   # Use socket & pipe supplied by su, for cmd perfprofd dump.
113   allow perfprofd su:unix_stream_socket { read write getattr sendto };
114   allow perfprofd su:fifo_file r_file_perms;
116   # Allow perfprofd to submit to dropbox.
117   allow perfprofd dropbox_service:service_manager find;
118   binder_call(perfprofd, system_server)