xref: /aosp_15_r20/system/sepolicy/private/vendor_toolbox.te (revision e4a36f4174b17bbab9dc043f4a65dc8d87377290) 
1# Do not allow domains to transition to vendor toolbox
2# or read, execute the vendor_toolbox file.
3full_treble_only(`
4    # Do not allow non-vendor domains to transition
5    # to vendor toolbox except for the allowlisted domains.
6    neverallow {
7        coredomain
8        -init
9        -modprobe
10    } vendor_toolbox_exec:file { entrypoint execute execute_no_trans };
11')
12