xref: /aosp_15_r20/system/sepolicy/public/system_server.te (revision e4a36f4174b17bbab9dc043f4a65dc8d87377290) 
1*e4a36f41SAndroid Build Coastguard Worker#
2*e4a36f41SAndroid Build Coastguard Worker# System Server aka system_server spawned by zygote.
3*e4a36f41SAndroid Build Coastguard Worker# Most of the framework services run in this process.
4*e4a36f41SAndroid Build Coastguard Worker#
5*e4a36f41SAndroid Build Coastguard Workertype system_server, domain;
6*e4a36f41SAndroid Build Coastguard Workertype system_server_tmpfs, file_type, mlstrustedobject;
7*e4a36f41SAndroid Build Coastguard Worker
8*e4a36f41SAndroid Build Coastguard Worker# system/sepolicy/public is for vendor-facing type and attribute definitions.
9*e4a36f41SAndroid Build Coastguard Worker# DO NOT ADD allow, neverallow, or dontaudit statements here.
10*e4a36f41SAndroid Build Coastguard Worker# Instead, add such policy rules to system/sepolicy/private/*.te.
11