1 # TODO: deal with tmpfs_domain pub/priv split properly 2 # Read system properties managed by zygote. 3 allow appdomain zygote_tmpfs:file read; 4 5 neverallow appdomain system_server:udp_socket { 6 accept append bind create ioctl listen lock name_bind 7 relabelfrom relabelto setattr shutdown }; 8
