689f91f9ed
One day we won't need this mechanism any more & can remove all traces of it. Bug: 141677108 Test: builds Change-Id: I95525a163ab4f19d8ca411c02a3c06498c6777ef
10 lines
902 B
Text
10 lines
902 B
Text
(typeattribute vendordomain)
|
|
(typeattributeset vendordomain ((and (domain) ((not (coredomain))))))
|
|
|
|
;; TODO: Once 30.0 is no longer supported for vendor images,
|
|
;; mlsvendorcompat can be completely from the system policy.
|
|
(typeattributeset mlsvendorcompat (and appdomain vendordomain))
|
|
(allow mlsvendorcompat app_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
|
|
(allow mlsvendorcompat app_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
|
|
(allow mlsvendorcompat privapp_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
|
|
(allow mlsvendorcompat privapp_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
|