2014-06-20 18:11:11 -07:00
|
|
|
# vdc spawned from init for the following services:
|
|
|
|
# defaultcrypto
|
|
|
|
# encrypt
|
2014-06-25 12:30:11 -07:00
|
|
|
#
|
|
|
|
# We also transition into this domain from dumpstate, when
|
|
|
|
# collecting bug reports.
|
2014-06-20 18:11:11 -07:00
|
|
|
|
2016-12-09 19:30:39 -08:00
|
|
|
type vdc, domain;
|
2018-09-27 10:21:37 -07:00
|
|
|
type vdc_exec, system_file_type, exec_type, file_type;
|
2014-06-20 18:11:11 -07:00
|
|
|
|
2016-02-04 14:18:52 -08:00
|
|
|
# vdc can be invoked with logwrapper, so let it write to pty
|
|
|
|
allow vdc devpts:chr_file rw_file_perms;
|
2017-03-29 16:52:19 -07:00
|
|
|
|
|
|
|
# vdc writes directly to kmsg during the boot process
|
2019-03-20 15:36:26 -07:00
|
|
|
allow vdc kmsg_device:chr_file { getattr w_file_perms };
|
2017-09-14 12:19:20 -07:00
|
|
|
|
|
|
|
# vdc talks to vold over Binder
|
|
|
|
binder_use(vdc)
|
|
|
|
binder_call(vdc, vold)
|
|
|
|
allow vdc vold_service:service_manager find;
|