platform_system_sepolicy/watchdogd.te

# watchdogd seclabel is specified in init.<board>.rc
type watchdogd, domain;
permissive watchdogd;
unconfined_domain(watchdogd)
allow watchdogd rootfs:file entrypoint;
watchdog security policy. Initial policy for software watchdog daemon which is started by init. Change-Id: I042a5b1698bf53ce2e50ea06851c374e5123ee2c Signed-off-by: rpcraig <rpcraig@tycho.ncsc.mil> 2012-12-03 12:07:45 +01:00			`# watchdogd seclabel is specified in init.<board>.rc`
			`type watchdogd, domain;`
Move domains into per-domain permissive mode. Bug: 4070557 Change-Id: I027f76cff6df90e9909711cb81fbd17db95233c1 2013-05-15 06:02:55 +02:00			`permissive watchdogd;`
Make all domains unconfined. This prevents denials from being generated by the base policy. Over time, these rules will be incrementally tightened to improve security. Change-Id: I4be1c987a5d69ac784a56d42fc2c9063c402de11 2013-05-18 02:11:29 +02:00			`unconfined_domain(watchdogd)`
Clean up remaining denials. Bug: 8424461 Change-Id: I8f0b01cdb19b4a479d5de842f4e4844aeab00622 2013-05-22 22:19:58 +02:00			`allow watchdogd rootfs:file entrypoint;`