platform_system_sepolicy/private/vzwomatrigger_app.te
Ashwini Oruganti c77ff3727c Create a separate domain for VzwOmaTrigger
This creates a new vzwomatrigger_app domain. The domain is
currently in permissive mode (for userdebug and eng builds), while we
observe the SELinux denials generated and update permissions.
Bug: 142672293
Test: Build, flash, boot successfully

Change-Id: I552df772b66e8e7edb1ccee754d1ea8dd1acece0
2019-11-14 16:13:00 -08:00

14 lines
476 B
Text

###
### A domain for further sandboxing the VzwOmaTrigger app.
###
type vzwomatrigger_app, domain;
# Allow everything.
# TODO(b/142672293): remove when no selinux denials are triggered for this
# domain
# STOPSHIP(b/142672293): monitor http://go/sedenials for any denials around
# `vzwomatrigger_app` and remove this line once we are confident about
# this having the right set of permissions.
userdebug_or_eng(`permissive vzwomatrigger_app;')
app_domain(vzwomatrigger_app)