1 type factory_ota_app, domain, coredomain; 2 3 app_domain(factory_ota_app) 4 net_domain(factory_ota_app) 5 6 # Write to /data/ota_package for OTA packages. 7 allow factory_ota_app ota_package_file:dir rw_dir_perms; 8 allow factory_ota_app ota_package_file:file create_file_perms; 9 10 # Properties 11 get_prop(factory_ota_app, factory_ota_prop); 12 set_prop(factory_ota_app, exported_system_prop); 13 14 # Services 15 allow factory_ota_app app_api_service:service_manager find; 16 binder_call(factory_ota_app, update_engine) # Allow Factory OTA to call Update Engine 17 binder_call(update_engine, factory_ota_app) # Allow Update Engine to call the Factory OTA callback 18 allow factory_ota_app update_engine_service:service_manager find; 19 allow factory_ota_app nfc_service:service_manager find; 20 allow factory_ota_app radio_service:service_manager find; 21
