1 # Input selectors: 2 # isSystemServer (boolean) 3 # user (string) 4 # seinfo (string) 5 # name (string) 6 # path (string) 7 # sebool (string) 8 # isSystemServer=true can only be used once. 9 # An unspecified isSystemServer defaults to false. 10 # An unspecified string selector will match any value. 11 # A user string selector that ends in * will perform a prefix match. 12 # user=_app will match any regular app UID. 13 # user=_isolated will match any isolated service UID. 14 # All specified input selectors in an entry must match (i.e. logical AND). 15 # Matching is case-insensitive. 16 # 17 # Precedence rules: 18 # (1) isSystemServer=true before isSystemServer=false. 19 # (2) Specified user= string before unspecified user= string. 20 # (3) Fixed user= string before user= prefix (i.e. ending in *). 21 # (4) Longer user= prefix before shorter user= prefix. 22 # (5) Specified seinfo= string before unspecified seinfo= string. 23 # (6) Specified name= string before unspecified name= string. 24 # (7) Specified path= string before unspecified path= string. 25 # (8) Specified sebool= string before unspecified sebool= string. 26 # 27 # Outputs: 28 # domain (string) 29 # type (string) 30 # levelFrom (string; one of none, all, app, or user) 31 # level (string) 32 # Only entries that specify domain= will be used for app process labeling. 33 # Only entries that specify type= will be used for app directory labeling. 34 # levelFrom=user is only supported for _app or _isolated UIDs. 35 # levelFrom=app or levelFrom=all is only supported for _app UIDs. 36 # level may be used to specify a fixed level for any UID. 37 # 38 isSystemServer=true domain=system_server 39 user=system domain=system_app type=system_app_data_file 40 user=bluetooth domain=bluetooth type=bluetooth_data_file 41 user=nfc domain=nfc type=nfc_data_file 42 user=radio domain=radio type=radio_data_file 43 user=shared_relro domain=shared_relro 44 user=shell domain=shell type=shell_data_file 45 user=_isolated domain=isolated_app 46 user=_app seinfo=platform domain=platform_app type=app_data_file 47 user=_app domain=untrusted_app type=app_data_file 48
