1*e4a36f41SAndroid Build Coastguard Worker# apexd -- manager for APEX packages 2*e4a36f41SAndroid Build Coastguard Workertype apexd, domain; 3*e4a36f41SAndroid Build Coastguard Workertype apexd_exec, exec_type, file_type, system_file_type; 4*e4a36f41SAndroid Build Coastguard Worker 5*e4a36f41SAndroid Build Coastguard Workerbinder_use(apexd) 6*e4a36f41SAndroid Build Coastguard Workeradd_service(apexd, apex_service) 7*e4a36f41SAndroid Build Coastguard Workerset_prop(apexd, apexd_prop) 8*e4a36f41SAndroid Build Coastguard Worker 9*e4a36f41SAndroid Build Coastguard Workerneverallow { domain -init -apexd -system_server } apex_service:service_manager find; 10*e4a36f41SAndroid Build Coastguard Workerneverallow { domain -init -apexd -system_server -servicemanager } apexd:binder call; 11*e4a36f41SAndroid Build Coastguard Worker 12*e4a36f41SAndroid Build Coastguard Workerneverallow { domain userdebug_or_eng(`-crash_dump') } apexd:process ptrace; 13*e4a36f41SAndroid Build Coastguard Worker 14*e4a36f41SAndroid Build Coastguard Worker# only apexd can set apexd sysprop 15*e4a36f41SAndroid Build Coastguard Workerneverallow { domain -apexd -init } apexd_prop:property_service set; 16