| Alex Klyubin | f5446eb | 2017-03-23 14:27:32 -0700 | [diff] [blame] | 1 | typeattribute vold coredomain; |
| 2 | |
| dcashman | cc39f63 | 2016-07-22 13:13:11 -0700 | [diff] [blame] | 3 | init_daemon_domain(vold) |
| 4 | |
| 5 | # Switch to more restrictive domains when executing common tools |
| 6 | domain_auto_trans(vold, sgdisk_exec, sgdisk); |
| 7 | domain_auto_trans(vold, sdcardd_exec, sdcardd); |
| 8 | |
| 9 | # For a handful of probing tools, we choose an even more restrictive |
| 10 | # domain when working with untrusted block devices |
| Paul Crowley | f9f7539 | 2018-11-30 15:58:26 -0800 | [diff] [blame] | 11 | domain_trans(vold, blkid_exec, blkid); |
| 12 | domain_trans(vold, blkid_exec, blkid_untrusted); |
| dcashman | cc39f63 | 2016-07-22 13:13:11 -0700 | [diff] [blame] | 13 | domain_trans(vold, fsck_exec, fsck); |
| 14 | domain_trans(vold, fsck_exec, fsck_untrusted); |
| 15 | |
| 16 | # Newly created storage dirs are always treated as mount stubs to prevent us |
| 17 | # from accidentally writing when the mount point isn't present. |
| 18 | type_transition vold storage_file:dir storage_stub_file; |
| 19 | type_transition vold mnt_media_rw_file:dir mnt_media_rw_stub_file; |
| Inseob Kim | 55e5c9b | 2020-03-04 17:20:35 +0900 | [diff] [blame^] | 20 | |
| 21 | # Property Service |
| 22 | set_prop(vold, vold_prop) |
| 23 | set_prop(vold, exported_vold_prop) |
| 24 | set_prop(vold, exported2_vold_prop) |
| 25 | set_prop(vold, powerctl_prop) |
| 26 | set_prop(vold, ctl_fuse_prop) |
| 27 | set_prop(vold, restorecon_prop) |
| 28 | set_prop(vold, ota_prop) |
| 29 | set_prop(vold, boottime_prop) |