Skip to content
Snippets Groups Projects
Commit b10ff337 authored by Yao Chen's avatar Yao Chen
Browse files

Allow dumpstate to call statsd. This is needed for bugreport.

Selinux violations while calling dump() on statsd by bugreport.

avc: denied { call } for scontext=u:r:dumpstate:s0 tcontext=u:r:statsd:s0 tclass=binder permissive=1
denied { use } for path="pipe:[411602]" dev="pipefs" ino=411602 scontext=u:r:statsd:s0 tcontext=u:r:dumpstate:s0 tclass=fd permissive=1
avc: denied { write } for path="pipe:[411602]" dev="pipefs" ino=411602 scontext=u:r:statsd:s0 tcontext=u:r:dumpstate:s0 tclass=fifo_file permissive=1
avc: denied { getattr } for path="pipe:[411602]" dev="pipefs" ino=411602 scontext=u:r:statsd:s0 tcontext=u:r:dumpstate:s0 tclass=fifo_file permissive=1

Test: manual
Change-Id: I46c5b119548378cc80c6e4498d00edad5959d188
parent 65565c1c
No related branches found
No related tags found
No related merge requests found
......@@ -27,5 +27,8 @@ userdebug_or_eng(`
# Allow dumpstate to make binder calls to storaged service
binder_call(dumpstate, storaged)
# Allow dumpstate to make binder calls to statsd
binder_call(dumpstate, statsd)
# Collect metrics on boot time created by init
get_prop(dumpstate, boottime_prop)
......@@ -53,6 +53,10 @@ add_service(statsd, stats_service)
allow statsd stats:fd use;
allow statsd stats:fifo_file write;
# Allow statsd to send dump info to dumpstate
allow statsd dumpstate:fd use;
allow statsd dumpstate:fifo_file { getattr write };
# Allow statsd to call back to stats with status updates.
binder_call(statsd, stats)
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment