xref: /aosp_15_r20/system/sepolicy/public/isolated_app.te (revision e4a36f4174b17bbab9dc043f4a65dc8d87377290)
1*e4a36f41SAndroid Build Coastguard Worker###
2*e4a36f41SAndroid Build Coastguard Worker### Services with isolatedProcess=true in their manifest.
3*e4a36f41SAndroid Build Coastguard Worker###
4*e4a36f41SAndroid Build Coastguard Worker### This file defines the rules for isolated apps. An "isolated
5*e4a36f41SAndroid Build Coastguard Worker### app" is an APP with UID between AID_ISOLATED_START (99000)
6*e4a36f41SAndroid Build Coastguard Worker### and AID_ISOLATED_END (99999).
7*e4a36f41SAndroid Build Coastguard Worker###
8*e4a36f41SAndroid Build Coastguard Worker
9*e4a36f41SAndroid Build Coastguard Workertype isolated_app, domain;
10*e4a36f41SAndroid Build Coastguard Worker
11*e4a36f41SAndroid Build Coastguard Worker# system/sepolicy/public is for vendor-facing type and attribute definitions.
12*e4a36f41SAndroid Build Coastguard Worker# DO NOT ADD allow, neverallow, or dontaudit statements here.
13*e4a36f41SAndroid Build Coastguard Worker# Instead, add such policy rules to system/sepolicy/private/*.te.
14