1# vdc is a helper program for making Binder calls to vold. It is spawned from 2# init for various reasons, such as initializing file-based encryption and 3# metadata encryption, and managing userdata checkpointing. 4# 5# We also transition into this domain from dumpstate, when 6# collecting bug reports. 7type vdc, domain; 8type vdc_exec, system_file_type, exec_type, file_type; 9 10# system/sepolicy/public is for vendor-facing type and attribute definitions. 11# DO NOT ADD allow, neverallow, or dontaudit statements here. 12# Instead, add such policy rules to system/sepolicy/private/*.te. 13