xref: /aosp_15_r20/system/sepolicy/public/asan_extract.te (revision e4a36f4174b17bbab9dc043f4a65dc8d87377290)
1*e4a36f41SAndroid Build Coastguard Worker# asan_extract
2*e4a36f41SAndroid Build Coastguard Worker#
3*e4a36f41SAndroid Build Coastguard Worker# This command set moves the artifact corresponding to the current slot
4*e4a36f41SAndroid Build Coastguard Worker# from /data/ota to /data/dalvik-cache.
5*e4a36f41SAndroid Build Coastguard Worker
6*e4a36f41SAndroid Build Coastguard Workerwith_asan(`
7*e4a36f41SAndroid Build Coastguard Worker  type asan_extract, domain, coredomain;
8*e4a36f41SAndroid Build Coastguard Worker  type asan_extract_exec, exec_type, file_type, system_file_type;
9*e4a36f41SAndroid Build Coastguard Worker')
10*e4a36f41SAndroid Build Coastguard Worker
11*e4a36f41SAndroid Build Coastguard Worker# system/sepolicy/public is for vendor-facing type and attribute definitions.
12*e4a36f41SAndroid Build Coastguard Worker# DO NOT ADD allow, neverallow, or dontaudit statements here.
13*e4a36f41SAndroid Build Coastguard Worker# Instead, add such policy rules to system/sepolicy/private/*.te.
14