Lines Matching refs:perfprofd

1 # perfprofd - perf profile collection daemon
2 type perfprofd, domain;
7   typeattribute perfprofd coredomain;
8   typeattribute perfprofd mlstrustedsubject;
10   # perfprofd access to sysfs directory structure.
11   allow perfprofd sysfs_type:dir search;
13   # perfprofd needs to control CPU hot-plug in order to avoid kernel
17   allow perfprofd sysfs_devices_system_cpu:file rw_file_perms;
19   # perfprofd checks for the existence of and then invokes simpleperf;
20   # simpleperf retains perfprofd domain after exec
21   allow perfprofd system_file:file rx_file_perms;
23   # perfprofd reads a config file from /data/data/com.google.android.gms/files
24   allow perfprofd { privapp_data_file app_data_file }:file r_file_perms;
25   allow perfprofd { privapp_data_file app_data_file }:dir search;
26   allow perfprofd self:global_capability_class_set { dac_override dac_read_search };
28   # perfprofd opens a file for writing in /data/misc/perfprofd
29   allow perfprofd perfprofd_data_file:file create_file_perms;
30   allow perfprofd perfprofd_data_file:dir rw_dir_perms;
32   # perfprofd uses the system log
33   read_logd(perfprofd);
34   write_logd(perfprofd);
36   # perfprofd inspects /sys/power/wake_unlock
37   wakelock_use(perfprofd);
39   # perfprofd looks at thermals.
40   allow perfprofd sysfs_thermal:dir r_dir_perms;
42   # perfprofd gets charging status.
43   hal_client_domain(perfprofd, hal_health)
46   allow perfprofd sysfs_kernel_notes:file r_file_perms;
48   # Simpleperf & perfprofd query a range of proc stats.
49   allow perfprofd proc_loadavg:file r_file_perms;
50   allow perfprofd proc_stat:file r_file_perms;
51   allow perfprofd proc_modules:file r_file_perms;
54   allow perfprofd proc_perf:file write;
57   dontaudit perfprofd proc_security:file *;
60   allow perfprofd self:global_capability_class_set sys_admin;
63   r_dir_file(perfprofd, domain)
66   allow perfprofd self:global_capability_class_set { sys_resource sys_ptrace };
67   neverallow perfprofd domain:process ptrace;
71   allow perfprofd exec_type:file r_file_perms;
73   r_dir_file(perfprofd, apk_data_file)
74   r_dir_file(perfprofd, dalvikcache_data_file)
76   r_dir_file(perfprofd, vendor_file)
78   r_dir_file(perfprofd, vendor_app_file)
80   r_dir_file(perfprofd, same_process_hal_file)
83   set_prop(perfprofd, shell_prop)
86   r_dir_file(perfprofd, debugfs_tracing)
87   r_dir_file(perfprofd, debugfs_tracing_debug)
90   allow perfprofd toolbox_exec:file rx_file_perms;
92   allow perfprofd shell_exec:file rx_file_perms;
95   allow perfprofd self:global_capability_class_set ipc_lock;
100   dontaudit perfprofd shell_data_file:dir *;
101   dontaudit perfprofd shell_data_file:file *;
103   # Allow perfprofd to publish a binder service and make binder calls.
104   binder_use(perfprofd)
105   add_service(perfprofd, perfprofd_service)
112   allow perfprofd devpts:chr_file rw_file_perms;
114   # Use socket & pipe supplied by su, for cmd perfprofd dump.
115   allow perfprofd su:unix_stream_socket { read write getattr sendto };
116   allow perfprofd su:fifo_file r_file_perms;
118   # Allow perfprofd to submit to dropbox.
119   allow perfprofd dropbox_service:service_manager find;
120   binder_call(perfprofd, system_server)