xref: /aosp_15_r20/system/sepolicy/private/apex_test_prepostinstall.te (revision e4a36f4174b17bbab9dc043f4a65dc8d87377290)
1*e4a36f41SAndroid Build Coastguard Worker# APEX pre- & post-install test.
2*e4a36f41SAndroid Build Coastguard Worker#
3*e4a36f41SAndroid Build Coastguard Worker# Allow to run pre- and post-install hooks for APEX test modules
4*e4a36f41SAndroid Build Coastguard Worker# in debuggable builds.
5*e4a36f41SAndroid Build Coastguard Worker
6*e4a36f41SAndroid Build Coastguard Workertype apex_test_prepostinstall, domain, coredomain;
7*e4a36f41SAndroid Build Coastguard Workertype apex_test_prepostinstall_exec, system_file_type, exec_type, file_type;
8*e4a36f41SAndroid Build Coastguard Worker
9*e4a36f41SAndroid Build Coastguard Workeruserdebug_or_eng(`
10*e4a36f41SAndroid Build Coastguard Worker  # /dev/zero
11*e4a36f41SAndroid Build Coastguard Worker  allow apex_test_prepostinstall apexd:fd use;
12*e4a36f41SAndroid Build Coastguard Worker  # Logwrapper.
13*e4a36f41SAndroid Build Coastguard Worker  create_pty(apex_test_prepostinstall)
14*e4a36f41SAndroid Build Coastguard Worker  # Logwrapper executing sh.
15*e4a36f41SAndroid Build Coastguard Worker  allow apex_test_prepostinstall shell_exec:file rx_file_perms;
16*e4a36f41SAndroid Build Coastguard Worker  # Logwrapper exec.
17*e4a36f41SAndroid Build Coastguard Worker  allow apex_test_prepostinstall system_file:file execute_no_trans;
18*e4a36f41SAndroid Build Coastguard Worker  # Ls.
19*e4a36f41SAndroid Build Coastguard Worker  allow apex_test_prepostinstall toolbox_exec:file rx_file_perms;
20*e4a36f41SAndroid Build Coastguard Worker')
21