42c7d8966c
public/property split is landed to selectively export public types to vendors. So rules happening within system should be in private. This introduces private/property.te and moves all allow and neverallow rules from any coredomains to system defiend properties. Bug: 150331497 Test: system/sepolicy/tools/build_policies.sh Change-Id: I0d929024ae9f4ae3830d4bf3d59e999febb22cbe
11 lines
398 B
Text
11 lines
398 B
Text
# type_transition must be private policy the domain_trans rules could stay
|
|
# public, but conceptually should go with this
|
|
# Technically not a daemon but we do want the transition from init domain to
|
|
# asan_extract to occur.
|
|
with_asan(`
|
|
typeattribute asan_extract coredomain;
|
|
init_daemon_domain(asan_extract)
|
|
|
|
# We need to signal a reboot when done.
|
|
set_prop(asan_extract, powerctl_prop)
|
|
')
|