1type crash_collector, domain, device_domain_deprecated;
2type crash_collector_exec, exec_type, file_type;
3type crash_reports_data_file, file_type, data_file_type;
4
5# To start crash_collector via /proc/sys/core_pattern.
6domain_auto_trans(kernel, crash_collector_exec, crash_collector)
7allow crash_collector kernel:fifo_file read;
8allow crash_collector crash_collector_exec:file execute_no_trans;
9allow crash_collector kernel:fd use;
10
11# To stop being root.
12allow crash_collector self:capability { setuid setgid };
13
14# To read exec files.
15allow crash_collector exec_type:file r_file_perms;
16
17# To write crash reports in /data/system/crash_reports/
18allow crash_collector crash_reports_data_file:dir create_dir_perms;
19allow crash_collector crash_reports_data_file:file create_file_perms;
20