xref: /aosp_15_r20/system/sepolicy/prebuilts/api/34.0/private/compat/30.0/30.0.compat.cil (revision e4a36f4174b17bbab9dc043f4a65dc8d87377290) 
1;; complement CIL file for compatibility between ToT policy and 30.0 vendors.
2;; will be compiled along with other normal policy files, on 30.0 vendors.
3;;
4
5(typeattribute vendordomain)
6(typeattributeset vendordomain ((and (domain) ((not (coredomain))))))
7
8;; TODO: Once 30.0 is no longer supported for vendor images,
9;; mlsvendorcompat can be completely from the system policy.
10(typeattributeset mlsvendorcompat (and appdomain vendordomain))
11(allow mlsvendorcompat app_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
12(allow mlsvendorcompat app_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
13(allow mlsvendorcompat privapp_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
14(allow mlsvendorcompat privapp_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
15