1 # Input selectors: 2 # isSystemServer (boolean) 3 # user (string) 4 # seinfo (string) 5 # name (string) 6 # sebool (string) 7 # isSystemServer=true can only be used once. 8 # An unspecified isSystemServer defaults to false. 9 # An unspecified string selector will match any value. 10 # A user string selector that ends in * will perform a prefix match. 11 # All specified input selectors in an entry must match (i.e. logical AND). 12 # Matching is case-insensitive. 13 # Precedence rules: 14 # (1) isSystemServer=true before isSystemServer=false. 15 # (2) Specified user= string before unspecified user= string. 16 # (3) Fixed user= string before user= prefix (i.e. ending in *). 17 # (4) Longer user= prefix before shorter user= prefix. 18 # (5) Specified seinfo= string before unspecified seinfo= string. 19 # (6) Specified name= string before unspecified name= string. 20 # (7) Specified sebool= string before unspecified sebool= string. 21 # 22 # Outputs: 23 # domain (string) 24 # type (string) 25 # levelFromUid (boolean) 26 # level (string) 27 # Only entries that specify domain= will be used for app process labeling. 28 # Only entries that specify type= will be used for app directory labeling. 29 # levelfromUid is only supported for app UIDs presently. 30 # level may be used to specify a fixed level for any UID. 31 # 32 isSystemServer=true domain=system 33 user=system domain=system_app type=system_data_file 34 user=nfc domain=nfc type=nfc_data_file 35 user=radio domain=radio type=radio_data_file 36 user=app_* domain=untrusted_app type=app_data_file levelFromUid=true 37 user=app_* seinfo=platform domain=platform_app type=platform_app_data_file 38 user=app_* seinfo=shared domain=shared_app type=platform_app_data_file 39 user=app_* seinfo=media domain=media_app type=platform_app_data_file 40 user=app_* seinfo=release domain=release_app type=platform_app_data_file 41 user=app_* seinfo=release name=com.android.browser domain=browser_app type=platform_app_data_file 42 user=isolated domain=isolated_app levelFromUid=true 43
