xref: /aosp_15_r20/system/sepolicy/private/vdc.te (revision e4a36f4174b17bbab9dc043f4a65dc8d87377290)
1*e4a36f41SAndroid Build Coastguard Workertypeattribute vdc coredomain;
2*e4a36f41SAndroid Build Coastguard Worker
3*e4a36f41SAndroid Build Coastguard Workerinit_daemon_domain(vdc)
4*e4a36f41SAndroid Build Coastguard Worker
5*e4a36f41SAndroid Build Coastguard Worker# Allow stdin/out back to vehicle_binding_util
6*e4a36f41SAndroid Build Coastguard Workerallow vdc vehicle_binding_util:fd use;
7*e4a36f41SAndroid Build Coastguard Worker
8*e4a36f41SAndroid Build Coastguard Worker# vdc can be invoked with logwrapper, so let it write to pty
9*e4a36f41SAndroid Build Coastguard Workerallow vdc devpts:chr_file rw_file_perms;
10*e4a36f41SAndroid Build Coastguard Worker
11*e4a36f41SAndroid Build Coastguard Worker# vdc writes directly to kmsg during the boot process
12*e4a36f41SAndroid Build Coastguard Workerallow vdc kmsg_device:chr_file { getattr w_file_perms };
13*e4a36f41SAndroid Build Coastguard Worker
14*e4a36f41SAndroid Build Coastguard Worker# vdc talks to vold over Binder
15*e4a36f41SAndroid Build Coastguard Workerbinder_use(vdc)
16*e4a36f41SAndroid Build Coastguard Workerbinder_call(vdc, vold)
17*e4a36f41SAndroid Build Coastguard Workerallow vdc vold_service:service_manager find;
18