xref: /aosp_15_r20/system/sepolicy/private/tradeinmode.te (revision e4a36f4174b17bbab9dc043f4a65dc8d87377290)
1*e4a36f41SAndroid Build Coastguard Worker### trade-in mode
2*e4a36f41SAndroid Build Coastguard Worker
3*e4a36f41SAndroid Build Coastguard Workertype tradeinmode, domain, coredomain;
4*e4a36f41SAndroid Build Coastguard Workertype tradeinmode_exec, exec_type, file_type, system_file_type;
5*e4a36f41SAndroid Build Coastguard Worker
6*e4a36f41SAndroid Build Coastguard Workerallow tradeinmode adbd_tradeinmode:fd use;
7*e4a36f41SAndroid Build Coastguard Workerallow tradeinmode adbd_tradeinmode:unix_stream_socket { read write ioctl };
8*e4a36f41SAndroid Build Coastguard Worker
9*e4a36f41SAndroid Build Coastguard Worker# Allow running from normal shell.
10*e4a36f41SAndroid Build Coastguard Workerallow tradeinmode { adbd shell }:fd use;
11*e4a36f41SAndroid Build Coastguard Workerallow tradeinmode adbd:unix_stream_socket { read write ioctl };
12*e4a36f41SAndroid Build Coastguard Worker
13*e4a36f41SAndroid Build Coastguard Workerallow tradeinmode devpts:chr_file rw_file_perms;
14*e4a36f41SAndroid Build Coastguard Worker
15*e4a36f41SAndroid Build Coastguard Worker# Allow executing am/content without a domain transition.
16*e4a36f41SAndroid Build Coastguard Workerallow tradeinmode system_file:file rx_file_perms;
17*e4a36f41SAndroid Build Coastguard Workerallow tradeinmode zygote_exec:file rx_file_perms;
18*e4a36f41SAndroid Build Coastguard Workerallow tradeinmode apex_info_file:file r_file_perms;
19*e4a36f41SAndroid Build Coastguard Worker
20*e4a36f41SAndroid Build Coastguard Workerallow tradeinmode activity_service:service_manager find;
21*e4a36f41SAndroid Build Coastguard Worker
22*e4a36f41SAndroid Build Coastguard Workerget_prop(tradeinmode, odsign_prop)
23*e4a36f41SAndroid Build Coastguard Workerget_prop(tradeinmode, build_attestation_prop)
24*e4a36f41SAndroid Build Coastguard Workerget_prop(tradeinmode, adbd_tradeinmode_prop)
25*e4a36f41SAndroid Build Coastguard Worker
26*e4a36f41SAndroid Build Coastguard Worker# Needed to start activities through "am".
27*e4a36f41SAndroid Build Coastguard Workerbinder_call(tradeinmode, system_server)
28*e4a36f41SAndroid Build Coastguard Workerbinder_call(tradeinmode, servicemanager)
29*e4a36f41SAndroid Build Coastguard Worker
30*e4a36f41SAndroid Build Coastguard Worker# Needed to run "content".
31*e4a36f41SAndroid Build Coastguard Workerbinder_call(tradeinmode, platform_app)
32