xref: /aosp_15_r20/system/sepolicy/private/microfuchsiad.te (revision e4a36f4174b17bbab9dc043f4a65dc8d87377290)
1*e4a36f41SAndroid Build Coastguard Workeris_flag_enabled(RELEASE_AVF_ENABLE_MICROFUCHSIA, `
2*e4a36f41SAndroid Build Coastguard Worker    type microfuchsiad, domain, coredomain;
3*e4a36f41SAndroid Build Coastguard Worker    type microfuchsiad_exec, system_file_type, exec_type, file_type;
4*e4a36f41SAndroid Build Coastguard Worker
5*e4a36f41SAndroid Build Coastguard Worker    # Host dynamic AIDL services
6*e4a36f41SAndroid Build Coastguard Worker    init_daemon_domain(microfuchsiad)
7*e4a36f41SAndroid Build Coastguard Worker    binder_use(microfuchsiad)
8*e4a36f41SAndroid Build Coastguard Worker    add_service(microfuchsiad, microfuchsia_service)
9*e4a36f41SAndroid Build Coastguard Worker
10*e4a36f41SAndroid Build Coastguard Worker    # Call back into system server
11*e4a36f41SAndroid Build Coastguard Worker    binder_call(microfuchsiad, system_server)
12*e4a36f41SAndroid Build Coastguard Worker
13*e4a36f41SAndroid Build Coastguard Worker    # Start a VM
14*e4a36f41SAndroid Build Coastguard Worker    virtualizationservice_use(microfuchsiad)
15*e4a36f41SAndroid Build Coastguard Worker
16*e4a36f41SAndroid Build Coastguard Worker    # Create pty devices
17*e4a36f41SAndroid Build Coastguard Worker    allow microfuchsiad devpts:chr_file { read write open getattr ioctl };
18*e4a36f41SAndroid Build Coastguard Worker')
19