Lines Matching refs:profman
1 typeattribute profman coredomain;
2 typeattribute profman artd_subprocess_type;
4 # Allow profman to read APKs and profile files next to them by FDs passed from
5 # other programs. In addition, allow profman to acquire flocks on those files.
6 allow profman {
13 # Allow profman to use file descriptors passed from privileged programs.
14 allow profman { artd installd }:fd use;
16 # Allow profman to read from memfd created by artd.
17 # profman needs to read the embedded profile that artd extracts from an APK,
19 allow profman artd_tmpfs:file { getattr read map lock };
21 allow profman user_profile_data_file:file { getattr read write lock map };
24 allow profman asec_apk_file:file { read map };
25 allow profman apk_data_file:file { getattr read map };
26 allow profman apk_data_file:dir { getattr read search };
27 allow profman apk_tmp_file:dir { getattr read search };
29 allow profman oemfs:file { read map };
31 allow profman tmpfs:file { read map };
32 allow profman profman_dump_data_file:file { write map };
34 # Allow profman to analyze profiles for the secondary dex files. These
37 allow profman { privapp_data_file app_data_file }:file { getattr read write lock map };
38 allow profman { privapp_data_file app_data_file }:dir { getattr read search };
41 get_prop(profman, device_config_runtime_native_prop)
42 get_prop(profman, device_config_runtime_native_boot_prop)
48 neverallow profman app_data_file_type:notdevfile_class_set open;