blob: e93a73d7e644025aaf28d425916fc4f679fb3a9d [file] [log] [blame]
Tri Voa5320882019-02-26 16:45:40 -08001type system_suspend, domain, coredomain, system_suspend_server;
2
3type system_suspend_exec, system_file_type, exec_type, file_type;
4init_daemon_domain(system_suspend)
5
6# To serve ISuspendControlService.aidl.
7binder_use(system_suspend)
8add_service(system_suspend, system_suspend_control_service)
9
10# Access to /sys/power/{ wakeup_count, state } suspend interface.
11allow system_suspend sysfs_power:file rw_file_perms;
Tri Vo131fa732019-02-07 13:29:39 -080012
13neverallow {
14 domain
15 -atrace # tracing
16 -dumpstate # bug reports
17 -system_suspend # implements system_suspend_control_service
18 -system_server # configures system_suspend via ISuspendControlService
19 -traceur_app # tracing
20} system_suspend_control_service:service_manager find;