1# SEPolicy for System UI 2typeattribute systemui_app coredomain; 3app_domain(systemui_app) 4 5allow systemui_app app_api_service:service_manager find; 6allow systemui_app network_score_service:service_manager find; 7allow systemui_app overlay_service:service_manager find; 8allow systemui_app color_display_service:service_manager find; 9allow systemui_app audioserver_service:service_manager find; 10allow systemui_app cameraserver_service:service_manager find; 11allow systemui_app mediaserver_service:service_manager find; 12allow systemui_app mediaextractor_service:service_manager find; 13allow systemui_app mediametrics_service:service_manager find; 14allow systemui_app radio_service:service_manager find; 15allow systemui_app vr_manager_service:service_manager find; 16allow systemui_app nfc_service:service_manager find; 17allow systemui_app adb_service:service_manager find; 18allow systemui_app statsmanager_service:service_manager find; 19 20get_prop(systemui_app, keyguard_config_prop) 21set_prop(systemui_app, bootanim_system_prop) 22get_prop(systemui_app, qemu_hw_prop) 23get_prop(systemui_app, radio_cdma_ecm_prop) 24 25# Allow writing and removing wmshell protolog in /data/misc/wmtrace. 26userdebug_or_eng(` 27 allow systemui_app wm_trace_data_file:dir rw_dir_perms; 28 allow systemui_app wm_trace_data_file:file create_file_perms; 29') 30set_prop(systemui_app, debug_tracing_desktop_mode_visible_tasks_prop) 31