platform_system_sepolicy/servicemanager.te

# servicemanager - the Binder context manager
type servicemanager, domain;
type servicemanager_exec, exec_type, file_type;

init_daemon_domain(servicemanager)
unconfined_domain(servicemanager)
SE Android policy. 2012-01-04 18:33:27 +01:00			`# servicemanager - the Binder context manager`
			`type servicemanager, domain;`
			`type servicemanager_exec, exec_type, file_type;`

			`init_daemon_domain(servicemanager)`
Make all domains unconfined. This prevents denials from being generated by the base policy. Over time, these rules will be incrementally tightened to improve security. Change-Id: I4be1c987a5d69ac784a56d42fc2c9063c402de11 2013-05-18 02:11:29 +02:00			`unconfined_domain(servicemanager)`