xref: /aosp_15_r20/system/sepolicy/public/su.te (revision e4a36f4174b17bbab9dc043f4a65dc8d87377290)
1*e4a36f41SAndroid Build Coastguard Worker# Domain used for su processes, as well as for adbd and adb shell
2*e4a36f41SAndroid Build Coastguard Worker# after performing an adb root command.
3*e4a36f41SAndroid Build Coastguard Worker
4*e4a36f41SAndroid Build Coastguard Worker# All types must be defined regardless of build variant to ensure
5*e4a36f41SAndroid Build Coastguard Worker# policy compilation succeeds with userdebug/user combination at boot
6*e4a36f41SAndroid Build Coastguard Workertype su, domain;
7*e4a36f41SAndroid Build Coastguard Worker
8*e4a36f41SAndroid Build Coastguard Worker# File types must be defined for file_contexts.
9*e4a36f41SAndroid Build Coastguard Workertype su_exec, system_file_type, exec_type, file_type;
10*e4a36f41SAndroid Build Coastguard Worker
11*e4a36f41SAndroid Build Coastguard Worker# system/sepolicy/public is for vendor-facing type and attribute definitions.
12*e4a36f41SAndroid Build Coastguard Worker# DO NOT ADD allow, neverallow, or dontaudit statements here.
13*e4a36f41SAndroid Build Coastguard Worker# Instead, add such policy rules to system/sepolicy/private/*.te.
14