Android Code Search

Search Result Root android/platform/superproject
Branch
Branch
android15-qpr2-release
Search Result Path
system/sepolicy/private/system_server.te
101:
102:
103:
# Child of the zygote.
allow system_server zygote:fd use;
allow system_server zygote:process sigchld;
364:
365:
366:
# Talk with graphics composer fences
allow system_server hal_graphics_composer:fd use;

568:
569:
570:
unix_socket_connect(system_server, tombstoned_java_trace, tombstoned)
allow system_server tombstoned:fd use;
allow system_server dumpstate:fifo_file append;
Search Result Root android/platform/superproject
Branch
Branch
android15-qpr2-release
Search Result Path
system/sepolicy/private/stats.te
8:
9:
10:
# allow stats access to stdout from its parent shell.
allow stats shell:fd use;

12:
13:
14:
# connection.
allow stats adbd:fd use;
allow stats adbd:unix_stream_socket { read write };
29:
30:
31:
# Allow pipes from (and only from) stats.
allow statsd stats:fd use;
allow statsd stats:fifo_file write;
Search Result Root android/platform/superproject
Branch
Branch
android15-qpr2-release
Search Result Path
system/sepolicy/private/system_suspend.te
33:
34:
35:
# For adding `dumpsys syspend_control` output to bugreport
allow system_suspend dumpstate:fd use;
allow system_suspend dumpstate:fifo_file write;
Search Result Root android/platform/superproject
Branch
Branch
android15-qpr2-release
Search Result Path
system/sepolicy/private/rs.te
32:
33:
34:
# File descriptors passed from app to renderscript
allow rs { untrusted_app_all ephemeral_app priv_app }:fd use;

36:
37:
38:
# renderscript usages shouldn't be popping up.
dontaudit rs { zygote surfaceflinger hal_graphics_allocator }:fd use;
Search Result Root android/platform/superproject
Branch
Branch
android15-qpr2-release
Search Result Path
system/sepolicy/private/statsd.te
115:
116:
117:
# Allow statsd to send dump info to dumpstate
allow statsd dumpstate:fd use;
allow statsd dumpstate:fifo_file { getattr write };
126:
127:
128:
# Allow 'adb shell cmd' to upload configs and download output.
allow statsd adbd:fd use;
allow statsd adbd:unix_stream_socket { getattr read write };
Search Result Root android/platform/superproject
Branch
Branch
android15-qpr2-release
Search Result Path
system/sepolicy/private/app.te
191:
192:
193:
194:
195:
196:
# Receive and use open file descriptors inherited from zygote.
allow appdomain zygote:fd use;

# Receive and use open file descriptors inherited from app zygote.
allow appdomain app_zygote:fd use;

231:
232:
233:
# Use pipes and sockets provided by system_server via binder or local socket.
allow appdomain system_server:fd use;
allow appdomain system_server:fifo_file rw_file_perms;
Search Result Root android/platform/superproject
Branch
Branch
android15-qpr2-release
Search Result Path
system/sepolicy/private/vdc.te
5:
6:
7:
# Allow stdin/out back to vehicle_binding_util
allow vdc vehicle_binding_util:fd use;
Search Result Root android/platform/superproject
Branch
Branch
android15-qpr2-release
Search Result Path
system/sepolicy/private/snapuserd.te
41:
42:
43:
# again, the descriptor leaks into the new process.
allow snapuserd kernel:fd use;
Search Result Root android/platform/superproject
Branch
Branch
android15-qpr2-release
Search Result Path
system/sepolicy/public/te_macros
143:
144:
145:
# Client needs to use an channel event fd from the server.
allow $1 pdx_$2_server_type:fd use;
# Servers may receive sync fences, gralloc buffers, etc, from clients.
147:
148:
149:
# clients is error prone.
allow pdx_$2_server_type $1:fd use;
')
191:
192:
193:
allow { virtualizationmanager crosvm } $1:fd use;
# Let the client use file descriptors created by virtualizationmanager.
allow $1 virtualizationmanager:fd use;
Search Result Root android/platform/superproject
Branch
Branch
android15-qpr2-release
Search Result Path
system/sepolicy/private/fuseblkd.te
14:
15:
16:
allow fuseblkd fuseblk:filesystem { mount unmount };
allow fuseblkd fuseblkd_untrusted:fd use;

Results per page