Home | History | Annotate | Download | only in sepolicy
      1 # vdc spawned from init for the following services:
      2 #  defaultcrypto
      3 #  encrypt
      4 #
      5 # We also transition into this domain from dumpstate, when
      6 # collecting bug reports.
      7 
      8 type vdc, domain;
      9 type vdc_exec, exec_type, file_type;
     10 
     11 init_daemon_domain(vdc)
     12 
     13 unix_socket_connect(vdc, vold, vold)
     14 
     15 # vdc sends information back to dumpstate when "adb bugreport" is used
     16 allow vdc dumpstate:fd use;
     17 allow vdc dumpstate:unix_stream_socket { read write getattr };
     18 
     19 # vdc information is written to shell owned bugreport files
     20 allow vdc shell_data_file:file { write getattr };
     21 
     22 # Why?
     23 allow vdc dumpstate:unix_dgram_socket { read write };
     24