platform_system_sepolicy/prebuilts/api/31.0/private/virtmanager.te
Jeff Sharkey 6a5fd26e7a platform/system/sepolicy - SEPolicy Prebuilts for S
Bug: 171506470
Test: Build
Change-Id: I8bf6c8833ecc65ca241fb9bc8be1b7b919825414
2021-06-01 06:49:23 -06:00

17 lines
642 B
Text

type virtmanager, domain, coredomain;
type virtmanager_exec, system_file_type, exec_type, file_type;
# When init runs a file labelled with virtmanager_exec, run it in the virtmanager domain.
init_daemon_domain(virtmanager)
# Let the virtmanager domain use Binder.
binder_use(virtmanager)
# Let the virtmanager domain register the virtualization_service with ServiceManager.
add_service(virtmanager, virtualization_service)
# When virtmanager execs a file with the crosvm_exec label, run it in the crosvm domain.
domain_auto_trans(virtmanager, crosvm_exec, crosvm)
# Let virtmanager kill crosvm.
allow virtmanager crosvm:process sigkill;