xref: /aosp_15_r20/system/sepolicy/public/vdc.te (revision e4a36f4174b17bbab9dc043f4a65dc8d87377290)
1*e4a36f41SAndroid Build Coastguard Worker# vdc is a helper program for making Binder calls to vold.  It is spawned from
2*e4a36f41SAndroid Build Coastguard Worker# init for various reasons, such as initializing file-based encryption and
3*e4a36f41SAndroid Build Coastguard Worker# metadata encryption, and managing userdata checkpointing.
4*e4a36f41SAndroid Build Coastguard Worker#
5*e4a36f41SAndroid Build Coastguard Worker# We also transition into this domain from dumpstate, when
6*e4a36f41SAndroid Build Coastguard Worker# collecting bug reports.
7*e4a36f41SAndroid Build Coastguard Workertype vdc, domain;
8*e4a36f41SAndroid Build Coastguard Workertype vdc_exec, system_file_type, exec_type, file_type;
9*e4a36f41SAndroid Build Coastguard Worker
10*e4a36f41SAndroid Build Coastguard Worker# system/sepolicy/public is for vendor-facing type and attribute definitions.
11*e4a36f41SAndroid Build Coastguard Worker# DO NOT ADD allow, neverallow, or dontaudit statements here.
12*e4a36f41SAndroid Build Coastguard Worker# Instead, add such policy rules to system/sepolicy/private/*.te.
13