Skip to content
Snippets Groups Projects
Commit 093bcd99 authored by Jeff Vander Stoep's avatar Jeff Vander Stoep Committed by android-build-merger
Browse files

Merge "Move domain_deprecated into private policy" into oc-dev am: 02a101a6

am: 35e09523

Change-Id: I728d32563d123fafd7c316f5ea5764a463876757
parents 0e2f85fc 35e09523
No related branches found
No related tags found
No related merge requests found
# rild - radio interface layer daemon
type rild, domain, domain_deprecated;
type rild, domain;
hal_server_domain(rild, hal_telephony)
net_domain(rild)
......
type runas, domain, domain_deprecated, mlstrustedsubject;
type runas, domain, mlstrustedsubject;
type runas_exec, exec_type, file_type;
allow runas adbd:process sigchld;
......
type sdcardd, domain, domain_deprecated;
type sdcardd, domain;
type sdcardd_exec, exec_type, file_type;
allow sdcardd cgroup:dir create_dir_perms;
......
# Process which creates/updates shared RELRO files to be used by other apps.
type shared_relro, domain, domain_deprecated;
type shared_relro, domain;
# Grant write access to the shared relro files/directory.
allow shared_relro shared_relro_file:dir rw_dir_perms;
......
# ueventd seclabel is specified in init.rc since
# it lives in the rootfs and has no unique file type.
type ueventd, domain, domain_deprecated;
type ueventd, domain;
# Write to /dev/kmsg.
allow ueventd kmsg_device:chr_file rw_file_perms;
......
# uncrypt
type uncrypt, domain, domain_deprecated, mlstrustedsubject;
type uncrypt, domain, mlstrustedsubject;
type uncrypt_exec, exec_type, file_type;
allow uncrypt self:capability dac_override;
......
# Domain for update_engine daemon.
type update_engine, domain, domain_deprecated, update_engine_common;
type update_engine, domain, update_engine_common;
type update_engine_exec, exec_type, file_type;
net_domain(update_engine);
......
# volume manager
type vold, domain, domain_deprecated;
type vold, domain;
type vold_exec, exec_type, file_type;
# Read already opened /cache files.
......
##
# trusted execution environment (tee) daemon
#
typeattribute tee domain_deprecated;
type tee_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(tee)
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment