android_system_sepolicy/ueventd.te

# ueventd seclabel is specified in init.rc since
# it lives in the rootfs and has no unique file type.
type ueventd, domain;
permissive ueventd;
tmpfs_domain(ueventd)
unconfined_domain(ueventd)
allow ueventd rootfs:file entrypoint;
SE Android policy. 2012-01-04 09:33:27 -08:00			`# ueventd seclabel is specified in init.rc since`
			`# it lives in the rootfs and has no unique file type.`
			`type ueventd, domain;`
Move domains into per-domain permissive mode. Bug: 4070557 Change-Id: I027f76cff6df90e9909711cb81fbd17db95233c1 2013-05-14 21:02:55 -07:00			`permissive ueventd;`
SE Android policy. 2012-01-04 09:33:27 -08:00			`tmpfs_domain(ueventd)`
Make all domains unconfined. This prevents denials from being generated by the base policy. Over time, these rules will be incrementally tightened to improve security. Change-Id: I4be1c987a5d69ac784a56d42fc2c9063c402de11 2013-05-17 17:11:29 -07:00			`unconfined_domain(ueventd)`
SE Android policy. 2012-01-04 09:33:27 -08:00			`allow ueventd rootfs:file entrypoint;`