userdebug_or_eng(`
|
typeattribute su coredomain;
|
|
domain_auto_trans(shell, su_exec, su)
|
# Allow dumpstate to call su on userdebug / eng builds to collect
|
# additional information.
|
domain_auto_trans(dumpstate, su_exec, su)
|
|
# Make sure that dumpstate runs the same from the "su" domain as
|
# from the "init" domain.
|
domain_auto_trans(su, dumpstate_exec, dumpstate)
|
|
# Put the incident command into its domain so it is the same on user, userdebug and eng.
|
domain_auto_trans(su, incident_exec, incident)
|
|
# Put the perfetto command into its domain so it is the same on user, userdebug and eng.
|
domain_auto_trans(su, perfetto_exec, perfetto)
|
|
# su is also permissive to permit setenforce.
|
permissive su;
|
|
app_domain(su)
|
')
|
