xref: /aosp_15_r20/system/sepolicy/prebuilts/api/34.0/private/profman.te (revision e4a36f4174b17bbab9dc043f4a65dc8d87377290)
1*e4a36f41SAndroid Build Coastguard Workertypeattribute profman coredomain;
2*e4a36f41SAndroid Build Coastguard Worker
3*e4a36f41SAndroid Build Coastguard Worker# Allow profman to read APKs and profile files next to them by FDs passed from
4*e4a36f41SAndroid Build Coastguard Worker# other programs. In addition, allow profman to acquire flocks on those files.
5*e4a36f41SAndroid Build Coastguard Workerallow profman {
6*e4a36f41SAndroid Build Coastguard Worker  system_file
7*e4a36f41SAndroid Build Coastguard Worker  apk_data_file
8*e4a36f41SAndroid Build Coastguard Worker  vendor_app_file
9*e4a36f41SAndroid Build Coastguard Worker}:file { getattr read map lock };
10*e4a36f41SAndroid Build Coastguard Worker
11*e4a36f41SAndroid Build Coastguard Worker# Allow profman to use file descriptors passed from privileged programs.
12*e4a36f41SAndroid Build Coastguard Workerallow profman { artd installd }:fd use;
13