1 # vdc spawned from init for the following services: 2 # defaultcrypto 3 # encrypt 4 # 5 # We also transition into this domain from dumpstate, when 6 # collecting bug reports. 7 8 type vdc, domain; 9 type vdc_exec, exec_type, file_type; 10 11 unix_socket_connect(vdc, vold, vold) 12 13 # vdc sends information back to dumpstate when "adb bugreport" is used 14 allow vdc dumpstate:fd use; 15 allow vdc dumpstate:unix_stream_socket { read write getattr }; 16 17 # vdc information is written to shell owned bugreport files 18 allow vdc shell_data_file:file { write getattr }; 19 20 # Why? 21 allow vdc dumpstate:unix_dgram_socket { read write }; 22 23 # vdc can be invoked with logwrapper, so let it write to pty 24 allow vdc devpts:chr_file rw_file_perms; 25 26 # vdc writes directly to kmsg during the boot process 27 allow vdc kmsg_device:chr_file w_file_perms; 28
