xref: /aosp_15_r20/system/sepolicy/private/hwservice.te (revision e4a36f4174b17bbab9dc043f4a65dc8d87377290)
1*e4a36f41SAndroid Build Coastguard Workertype hal_lazy_test_hwservice, hwservice_manager_type, protected_hwservice;
2*e4a36f41SAndroid Build Coastguard Worker
3*e4a36f41SAndroid Build Coastguard Worker###
4*e4a36f41SAndroid Build Coastguard Worker### Neverallow rules
5*e4a36f41SAndroid Build Coastguard Worker###
6*e4a36f41SAndroid Build Coastguard Worker
7*e4a36f41SAndroid Build Coastguard Worker# hwservicemanager handles registering or looking up named services.
8*e4a36f41SAndroid Build Coastguard Worker# It does not make sense to register or lookup something which is not a
9*e4a36f41SAndroid Build Coastguard Worker# hwservice. Trigger a compile error if this occurs.
10*e4a36f41SAndroid Build Coastguard Workerneverallow domain ~hwservice_manager_type:hwservice_manager { add find };
11