blob: 41f1a9bee6b768f0c2d004390d5ef583cf046ca1 [file] [log] [blame]
Alan Stokesd376e202021-09-09 17:08:15 +01001type composd, domain, coredomain;
2type composd_exec, system_file_type, exec_type, file_type;
3
Alan Stokes8788f7a2021-11-19 17:33:34 +00004# Host dynamic AIDL services
Alan Stokesd376e202021-09-09 17:08:15 +01005init_daemon_domain(composd)
6binder_use(composd)
7add_service(composd, compos_service)
Alan Stokes8788f7a2021-11-19 17:33:34 +00008add_service(composd, compos_internal_service)
Alan Stokesd376e202021-09-09 17:08:15 +01009
Alan Stokes9112c9a2021-10-19 16:50:24 +010010# Call back into system server
11binder_call(composd, system_server)
12
Alan Stokesd376e202021-09-09 17:08:15 +010013# Start a VM
14virtualizationservice_use(composd)
15
Victor Hsieh33aa1a32021-12-03 16:46:18 -080016# Allow preparing staging directory for odrefresh
17allow composd apex_art_data_file:dir { create_dir_perms relabelfrom };
18allow composd apex_art_staging_data_file:dir { create_dir_perms relabelto };
19
Alan Stokesd376e202021-09-09 17:08:15 +010020# Access our APEX data files
21allow composd apex_module_data_file:dir search;
22allow composd apex_compos_data_file:dir create_dir_perms;
23allow composd apex_compos_data_file:file create_file_perms;
Alan Stokesd3438b02021-09-15 14:28:12 +010024
Alan Stokes9112c9a2021-10-19 16:50:24 +010025# TODO(b/205750213): Removed these when we run odrefresh in the VM
26# Run odrefresh to refresh ART artifacts, and kill it if we need to
Alan Stokesd3438b02021-09-15 14:28:12 +010027domain_auto_trans(composd, odrefresh_exec, odrefresh)
Alan Stokes9112c9a2021-10-19 16:50:24 +010028allow composd odrefresh:process sigkill;
Victor Hsieh1f117c262021-12-01 15:25:23 -080029
30# Read ART's properties
31get_prop(composd, dalvik_config_prop)