1userdebug_or_eng(` 2 typeattribute su coredomain; 3 4 domain_auto_trans(shell, su_exec, su) 5 # Allow dumpstate to call su on userdebug / eng builds to collect 6 # additional information. 7 domain_auto_trans(dumpstate, su_exec, su) 8 9 # Make sure that dumpstate runs the same from the "su" domain as 10 # from the "init" domain. 11 domain_auto_trans(su, dumpstate_exec, dumpstate) 12 13 # Put the incident command into its domain so it is the same on user, userdebug and eng. 14 domain_auto_trans(su, incident_exec, incident) 15 16# su is also permissive to permit setenforce. 17 permissive su; 18 19 app_domain(su) 20') 21