xref: /aosp_15_r20/system/sepolicy/private/apexd_derive_classpath.te (revision e4a36f4174b17bbab9dc043f4a65dc8d87377290)
1*e4a36f41SAndroid Build Coastguard Worker# Exclusive domain for apexd calling into derive_classpath binary
2*e4a36f41SAndroid Build Coastguard Workertype apexd_derive_classpath, domain, coredomain;
3*e4a36f41SAndroid Build Coastguard Worker
4*e4a36f41SAndroid Build Coastguard Worker# Allow the binary to write into output file at location /apex/derive_classpath_temp
5*e4a36f41SAndroid Build Coastguard Workerallow apexd_derive_classpath apexd:fd use;
6*e4a36f41SAndroid Build Coastguard Workerallow apexd_derive_classpath apex_mnt_dir:file { write open };
7*e4a36f41SAndroid Build Coastguard Worker# Allow the binary to log using logwrap
8*e4a36f41SAndroid Build Coastguard Workerallow apexd_derive_classpath apexd_devpts:chr_file { read write };
9*e4a36f41SAndroid Build Coastguard Worker
10