1type init-mm-logging-sh, domain; 2type init-mm-logging-sh_exec, exec_type, vendor_file_type, file_type; 3 4init_daemon_domain(init-mm-logging-sh) 5 6dontaudit init-mm-logging-sh { domain -kernel }:{ file dir } *; 7dontaudit init-mm-logging-sh self:capability sys_ptrace; 8 9userdebug_or_eng(` 10 allow init-mm-logging-sh vendor_toolbox_exec:file rx_file_perms; 11 allow init-mm-logging-sh proc_vmstat:file r_file_perms; 12 allow init-mm-logging-sh mm_logd_vendor_data_file:dir create_dir_perms; 13 allow init-mm-logging-sh mm_logd_vendor_data_file:file create_file_perms; 14 # Allow /proc/<pid>/stat 15 allow init-mm-logging-sh kernel:dir r_dir_perms; 16 allow init-mm-logging-sh kernel:file r_file_perms; 17 allow init-mm-logging-sh proc_stat:file r_file_perms; 18') 19 20