| type crash_collector_app, domain, device_domain_deprecated; | |
| # com.google.android.crashuploader runs in the crash_collector_app domain | |
| app_domain(crash_collector_app) | |
| net_domain(crash_collector_app) | |
| allow crash_collector_app crash_reports_data_file:file { read getattr }; | |
| allow crash_collector_app { | |
| service_manager_type | |
| -dumpstate_service | |
| -gatekeeper_service | |
| -installd_service | |
| -incident_service | |
| -netd_service | |
| -virtual_touchpad_service | |
| -vold_service | |
| -vr_hwc_service | |
| }:service_manager find; |