xref: /aosp_15_r20/system/sepolicy/prebuilts/api/34.0/private/untrusted_app.te (revision e4a36f4174b17bbab9dc043f4a65dc8d87377290) 
1###
2### Untrusted apps.
3###
4### This file defines the rules for untrusted apps running with
5### targetSdkVersion >= 34.
6###
7### See public/untrusted_app.te for more information about which apps are
8### placed in this selinux domain.
9###
10
11typeattribute untrusted_app coredomain;
12
13app_domain(untrusted_app)
14untrusted_app_domain(untrusted_app)
15net_domain(untrusted_app)
16bluetooth_domain(untrusted_app)
17
18# Allow webview to access fd shared by sdksandbox for experiments data
19# TODO(b/229249719): Will not be supported in Android U
20allow untrusted_app sdk_sandbox_data_file:fd use;
21allow untrusted_app sdk_sandbox_data_file:file write;
22
23neverallow untrusted_app sdk_sandbox_data_file:file { open create };
24