1 typeattribute vold coredomain; 2 typeattribute vold domain_deprecated; 3 4 init_daemon_domain(vold) 5 6 # Switch to more restrictive domains when executing common tools 7 domain_auto_trans(vold, sgdisk_exec, sgdisk); 8 domain_auto_trans(vold, sdcardd_exec, sdcardd); 9 10 # For a handful of probing tools, we choose an even more restrictive 11 # domain when working with untrusted block devices 12 domain_trans(vold, shell_exec, blkid); 13 domain_trans(vold, shell_exec, blkid_untrusted); 14 domain_trans(vold, fsck_exec, fsck); 15 domain_trans(vold, fsck_exec, fsck_untrusted); 16 17 # Newly created storage dirs are always treated as mount stubs to prevent us 18 # from accidentally writing when the mount point isn't present. 19 type_transition vold storage_file:dir storage_stub_file; 20 type_transition vold mnt_media_rw_file:dir mnt_media_rw_stub_file; 21
