xref: /aosp_15_r20/system/sepolicy/prebuilts/api/34.0/private/remount.te (revision e4a36f4174b17bbab9dc043f4a65dc8d87377290)
1*e4a36f41SAndroid Build Coastguard Workertype remount, domain, coredomain;
2*e4a36f41SAndroid Build Coastguard Workertype remount_exec, system_file_type, exec_type, file_type;
3*e4a36f41SAndroid Build Coastguard Worker
4*e4a36f41SAndroid Build Coastguard Workeruserdebug_or_eng(`
5*e4a36f41SAndroid Build Coastguard Worker  # Allow init to run clean_scratch_files and do auto domain transfer.
6*e4a36f41SAndroid Build Coastguard Worker  init_daemon_domain(remount)
7*e4a36f41SAndroid Build Coastguard Worker
8*e4a36f41SAndroid Build Coastguard Worker  # Allow talking to gsid.
9*e4a36f41SAndroid Build Coastguard Worker  binder_use(remount)
10*e4a36f41SAndroid Build Coastguard Worker  allow remount gsi_service:service_manager find;
11*e4a36f41SAndroid Build Coastguard Worker  binder_call(remount, gsid)
12*e4a36f41SAndroid Build Coastguard Worker
13*e4a36f41SAndroid Build Coastguard Worker  # Allow searching for /metadata/gsi/remount/lp_metadata.
14*e4a36f41SAndroid Build Coastguard Worker  allow remount { metadata_file gsi_metadata_file_type }:dir search;
15*e4a36f41SAndroid Build Coastguard Worker')
16