android_system_sepolicy/prebuilts/api/32.0/private/virtmanager.te
Inseob Kim 43b6a317bc Add SEPolicy prebuilts for Sv2 (API 32)
Bug: 206330997
Test: Build
Change-Id: I26082be343b15c9d6c7cabf0acd44711fbcc8113
2021-11-30 12:04:43 +09:00

18 lines
642 B
Plaintext

type virtmanager, domain, coredomain;
type virtmanager_exec, system_file_type, exec_type, file_type;
# When init runs a file labelled with virtmanager_exec, run it in the virtmanager domain.
init_daemon_domain(virtmanager)
# Let the virtmanager domain use Binder.
binder_use(virtmanager)
# Let the virtmanager domain register the virtualization_service with ServiceManager.
add_service(virtmanager, virtualization_service)
# When virtmanager execs a file with the crosvm_exec label, run it in the crosvm domain.
domain_auto_trans(virtmanager, crosvm_exec, crosvm)
# Let virtmanager kill crosvm.
allow virtmanager crosvm:process sigkill;