Lines Matching refs:domain
2 ### Domain for all zygote spawned apps
305 domain:{
318 neverallow appdomain domain:netlink_kobject_uevent_socket { write append };
323 # Unix domain sockets.
331 neverallow appdomain { domain -appdomain }:process ptrace;
333 # Write access to /proc/pid entries for any non-app domain.
334 neverallow appdomain { domain -appdomain }:file write;
340 neverallow appdomain { domain -appdomain }:process
343 # Transition to a non-app domain.
344 # Exception for the shell domain and the su domain, can transition to runas,
346 neverallow { appdomain -shell userdebug_or_eng(`-su') } { domain -appdomain }:process
