1type crash_collector, domain, device_domain_deprecated; 2type crash_collector_exec, exec_type, file_type; 3type crash_reports_data_file, file_type, data_file_type; 4 5# To start crash_collector via /proc/sys/core_pattern. 6domain_auto_trans(kernel, crash_collector_exec, crash_collector) 7allow crash_collector kernel:fifo_file read; 8allow crash_collector crash_collector_exec:file execute_no_trans; 9allow crash_collector kernel:fd use; 10 11# To stop being root. 12allow crash_collector self:capability { setuid setgid }; 13 14# To read exec files. 15allow crash_collector exec_type:file r_file_perms; 16 17# To write crash reports in /data/system/crash_reports/ 18allow crash_collector crash_reports_data_file:dir create_dir_perms; 19allow crash_collector crash_reports_data_file:file create_file_perms; 20