platform_system_sepolicy/shell.te

# Domain for shell processes spawned by ADB
type shell, domain;
type shell_exec, file_type;
unconfined_domain(shell)

# Run app_process.
# XXX Split into its own domain?
app_domain(shell)
SELinux policy that separates "init_shell" from "shell". "init_shell" is used for shell processes spawned by init. Change-Id: I9e35d485bac91f3d0e4f3704acdbb9af7d617173 2013-05-06 22:24:27 +02:00			`# Domain for shell processes spawned by ADB`
Make all domains unconfined. This prevents denials from being generated by the base policy. Over time, these rules will be incrementally tightened to improve security. Change-Id: I4be1c987a5d69ac784a56d42fc2c9063c402de11 2013-05-18 02:11:29 +02:00			`type shell, domain;`
SE Android policy. 2012-01-04 18:33:27 +01:00			`type shell_exec, file_type;`
Make all domains unconfined. This prevents denials from being generated by the base policy. Over time, these rules will be incrementally tightened to improve security. Change-Id: I4be1c987a5d69ac784a56d42fc2c9063c402de11 2013-05-18 02:11:29 +02:00			`unconfined_domain(shell)`
SE Android policy. 2012-01-04 18:33:27 +01:00
			`# Run app_process.`
			`# XXX Split into its own domain?`
			`app_domain(shell)`