xref: /aosp_15_r20/system/sepolicy/prebuilts/api/31.0/private/virtmanager.te (revision e4a36f4174b17bbab9dc043f4a65dc8d87377290)
1*e4a36f41SAndroid Build Coastguard Workertype virtmanager, domain, coredomain;
2*e4a36f41SAndroid Build Coastguard Workertype virtmanager_exec, system_file_type, exec_type, file_type;
3*e4a36f41SAndroid Build Coastguard Worker
4*e4a36f41SAndroid Build Coastguard Worker# When init runs a file labelled with virtmanager_exec, run it in the virtmanager domain.
5*e4a36f41SAndroid Build Coastguard Workerinit_daemon_domain(virtmanager)
6*e4a36f41SAndroid Build Coastguard Worker
7*e4a36f41SAndroid Build Coastguard Worker# Let the virtmanager domain use Binder.
8*e4a36f41SAndroid Build Coastguard Workerbinder_use(virtmanager)
9*e4a36f41SAndroid Build Coastguard Worker
10*e4a36f41SAndroid Build Coastguard Worker# Let the virtmanager domain register the virtualization_service with ServiceManager.
11*e4a36f41SAndroid Build Coastguard Workeradd_service(virtmanager, virtualization_service)
12*e4a36f41SAndroid Build Coastguard Worker
13*e4a36f41SAndroid Build Coastguard Worker# When virtmanager execs a file with the crosvm_exec label, run it in the crosvm domain.
14*e4a36f41SAndroid Build Coastguard Workerdomain_auto_trans(virtmanager, crosvm_exec, crosvm)
15*e4a36f41SAndroid Build Coastguard Worker
16*e4a36f41SAndroid Build Coastguard Worker# Let virtmanager kill crosvm.
17*e4a36f41SAndroid Build Coastguard Workerallow virtmanager crosvm:process sigkill;
18