type crash_collector_app, domain, device_domain_deprecated; | |
# com.google.android.crashuploader runs in the crash_collector_app domain | |
app_domain(crash_collector_app) | |
net_domain(crash_collector_app) | |
allow crash_collector_app crash_reports_data_file:file { read getattr }; | |
allow crash_collector_app { | |
service_manager_type | |
-dumpstate_service | |
-gatekeeper_service | |
-installd_service | |
-incident_service | |
-netd_service | |
-virtual_touchpad_service | |
-vold_service | |
-vr_hwc_service | |
}:service_manager find; |