1type ramdump_exec, exec_type, vendor_file_type, file_type;
2
3userdebug_or_eng(`
4  type ramdump, domain;
5  init_daemon_domain(ramdump)
6
7  set_prop(ramdump, vendor_ramdump_prop)
8
9  allow ramdump self:capability sys_rawio;
10
11  allow ramdump ramdump_vendor_data_file:dir create_dir_perms;
12  allow ramdump ramdump_vendor_data_file:file create_file_perms;
13  allow ramdump {
14    proc
15    proc_cmdline
16  }:file r_file_perms;
17
18  allow ramdump block_device:dir search;
19  allow ramdump misc_block_device:blk_file rw_file_perms;
20  allow ramdump userdata_block_device:blk_file rw_file_perms;
21
22  # read from /fstab.taimen
23  allow ramdump rootfs:file r_file_perms;
24
25  dontaudit ramdump metadata_file:dir search;
26
27  r_dir_file(ramdump, sysfs_type)
28')
29