1*e4a36f41SAndroid Build Coastguard Worker# vdc spawned from init for the following services: 2*e4a36f41SAndroid Build Coastguard Worker# defaultcrypto 3*e4a36f41SAndroid Build Coastguard Worker# encrypt 4*e4a36f41SAndroid Build Coastguard Worker# 5*e4a36f41SAndroid Build Coastguard Worker# We also transition into this domain from dumpstate, when 6*e4a36f41SAndroid Build Coastguard Worker# collecting bug reports. 7*e4a36f41SAndroid Build Coastguard Worker 8*e4a36f41SAndroid Build Coastguard Workertype vdc, domain; 9*e4a36f41SAndroid Build Coastguard Workertype vdc_exec, system_file_type, exec_type, file_type; 10*e4a36f41SAndroid Build Coastguard Worker 11*e4a36f41SAndroid Build Coastguard Worker# vdc can be invoked with logwrapper, so let it write to pty 12*e4a36f41SAndroid Build Coastguard Workerallow vdc devpts:chr_file rw_file_perms; 13*e4a36f41SAndroid Build Coastguard Worker 14*e4a36f41SAndroid Build Coastguard Worker# vdc writes directly to kmsg during the boot process 15*e4a36f41SAndroid Build Coastguard Workerallow vdc kmsg_device:chr_file { getattr w_file_perms }; 16*e4a36f41SAndroid Build Coastguard Worker 17*e4a36f41SAndroid Build Coastguard Worker# vdc talks to vold over Binder 18*e4a36f41SAndroid Build Coastguard Workerbinder_use(vdc) 19*e4a36f41SAndroid Build Coastguard Workerbinder_call(vdc, vold) 20*e4a36f41SAndroid Build Coastguard Workerallow vdc vold_service:service_manager find; 21