xref: /aosp_15_r20/system/sepolicy/private/vdc.te (revision e4a36f4174b17bbab9dc043f4a65dc8d87377290)
1typeattribute vdc coredomain;
2
3init_daemon_domain(vdc)
4
5# Allow stdin/out back to vehicle_binding_util
6allow vdc vehicle_binding_util:fd use;
7
8# vdc can be invoked with logwrapper, so let it write to pty
9allow vdc devpts:chr_file rw_file_perms;
10
11# vdc writes directly to kmsg during the boot process
12allow vdc kmsg_device:chr_file { getattr w_file_perms };
13
14# vdc talks to vold over Binder
15binder_use(vdc)
16binder_call(vdc, vold)
17allow vdc vold_service:service_manager find;
18