1type crash_collector, domain, domain_deprecated;
2type crash_collector_exec, exec_type, file_type;
3type crash_reports_data_file, file_type, data_file_type;
4
5# To start crash_collector via /proc/sys/core_pattern.
6domain_auto_trans(kernel, crash_collector_exec, crash_collector)
7allow crash_collector kernel:fifo_file read;
8allow crash_collector crash_collector_exec:file execute_no_trans;
9
10# To stop being root.
11allow crash_collector self:capability { setuid setgid };
12
13# To read exec files.
14allow crash_collector exec_type:file r_file_perms;
15
16# To write crash reports in /data/system/crash_reports/
17allow crash_collector crash_reports_data_file:dir create_dir_perms;
18allow crash_collector crash_reports_data_file:file create_file_perms;
19