xref: /aosp_15_r20/system/sepolicy/prebuilts/api/31.0/private/lmkd.te (revision e4a36f4174b17bbab9dc043f4a65dc8d87377290)
1*e4a36f41SAndroid Build Coastguard Workertypeattribute lmkd coredomain;
2*e4a36f41SAndroid Build Coastguard Worker
3*e4a36f41SAndroid Build Coastguard Workerinit_daemon_domain(lmkd)
4*e4a36f41SAndroid Build Coastguard Worker
5*e4a36f41SAndroid Build Coastguard Worker# Set sys.lmk.* properties.
6*e4a36f41SAndroid Build Coastguard Workerset_prop(lmkd, system_lmk_prop)
7*e4a36f41SAndroid Build Coastguard Worker
8*e4a36f41SAndroid Build Coastguard Worker# Set lmkd.* properties.
9*e4a36f41SAndroid Build Coastguard Workerset_prop(lmkd, lmkd_prop)
10*e4a36f41SAndroid Build Coastguard Worker
11*e4a36f41SAndroid Build Coastguard Workerallow lmkd fs_bpf:dir search;
12*e4a36f41SAndroid Build Coastguard Workerallow lmkd fs_bpf:file read;
13*e4a36f41SAndroid Build Coastguard Workerallow lmkd bpfloader:bpf map_read;
14*e4a36f41SAndroid Build Coastguard Worker
15*e4a36f41SAndroid Build Coastguard Workerneverallow { domain -init -lmkd -vendor_init } lmkd_prop:property_service set;
16