xref: /aosp_15_r20/system/sepolicy/prebuilts/api/34.0/private/toolbox.te (revision e4a36f4174b17bbab9dc043f4a65dc8d87377290)
1*e4a36f41SAndroid Build Coastguard Workertypeattribute toolbox coredomain;
2*e4a36f41SAndroid Build Coastguard Worker
3*e4a36f41SAndroid Build Coastguard Workerinit_daemon_domain(toolbox)
4*e4a36f41SAndroid Build Coastguard Worker
5*e4a36f41SAndroid Build Coastguard Worker# rm -rf in /data/misc/virtualizationservice
6*e4a36f41SAndroid Build Coastguard Workerallow toolbox virtualizationservice_data_file:dir { rmdir rw_dir_perms };
7*e4a36f41SAndroid Build Coastguard Workerallow toolbox virtualizationservice_data_file:file { getattr unlink };
8*e4a36f41SAndroid Build Coastguard Worker
9*e4a36f41SAndroid Build Coastguard Worker# If we can't remove these directories we try to chmod them. That
10*e4a36f41SAndroid Build Coastguard Worker# doesn't work, but it doesn't matter as virtualizationservice itself
11*e4a36f41SAndroid Build Coastguard Worker# will delete them when it starts. See b/235338094#comment39
12*e4a36f41SAndroid Build Coastguard Workerdontaudit toolbox virtualizationservice_data_file:dir setattr;
13