xref: /aosp_15_r20/system/sepolicy/prebuilts/api/34.0/private/lmkd.te (revision e4a36f4174b17bbab9dc043f4a65dc8d87377290)
1*e4a36f41SAndroid Build Coastguard Workertypeattribute lmkd coredomain;
2*e4a36f41SAndroid Build Coastguard Workertypeattribute lmkd bpfdomain;
3*e4a36f41SAndroid Build Coastguard Worker
4*e4a36f41SAndroid Build Coastguard Workerinit_daemon_domain(lmkd)
5*e4a36f41SAndroid Build Coastguard Worker
6*e4a36f41SAndroid Build Coastguard Worker# Set sys.lmk.* properties.
7*e4a36f41SAndroid Build Coastguard Workerset_prop(lmkd, system_lmk_prop)
8*e4a36f41SAndroid Build Coastguard Worker
9*e4a36f41SAndroid Build Coastguard Worker# Set lmkd.* properties.
10*e4a36f41SAndroid Build Coastguard Workerset_prop(lmkd, lmkd_prop)
11*e4a36f41SAndroid Build Coastguard Worker
12*e4a36f41SAndroid Build Coastguard Worker# Get persist.device_config.lmk_native.* properties.
13*e4a36f41SAndroid Build Coastguard Workerget_prop(lmkd, device_config_lmkd_native_prop)
14*e4a36f41SAndroid Build Coastguard Worker
15*e4a36f41SAndroid Build Coastguard Workerallow lmkd fs_bpf:file read;
16*e4a36f41SAndroid Build Coastguard Workerallow lmkd bpfloader:bpf map_read;
17*e4a36f41SAndroid Build Coastguard Worker
18*e4a36f41SAndroid Build Coastguard Workerneverallow { domain -init -lmkd -vendor_init } lmkd_prop:property_service set;
19