platform_system_sepolicy/servicemanager.te
repo sync 77d4731e9d Make all domains unconfined.
This prevents denials from being generated by the base policy.
Over time, these rules will be incrementally tightened to improve
security.

Change-Id: I4be1c987a5d69ac784a56d42fc2c9063c402de11
2013-05-20 11:08:05 -07:00

7 lines
220 B
Text

# servicemanager - the Binder context manager
type servicemanager, domain;
permissive servicemanager;
type servicemanager_exec, exec_type, file_type;
init_daemon_domain(servicemanager)
unconfined_domain(servicemanager)