Lines Matching full:domain
2 ### Domain for all zygote spawned apps
243 domain:{
256 neverallow appdomain domain:netlink_kobject_uevent_socket { write append };
261 # Unix domain sockets.
271 neverallow appdomain { domain -appdomain }:process ptrace;
273 # Write access to /proc/pid entries for any non-app domain.
274 neverallow appdomain { domain -appdomain }:file write;
280 neverallow appdomain { domain -appdomain }:process
283 # Transition to a non-app domain.
284 # Exception for the shell domain and the su domain, can transition to runas,
286 neverallow { appdomain -shell userdebug_or_eng(`-su') } { domain -appdomain }:process
