| Inseob Kim | e138997 | 2021-07-19 07:48:34 +0000 | [diff] [blame] | 1 | allow fs_type self:filesystem associate; |
| 2 | allow cgroup tmpfs:filesystem associate; |
| 3 | allow cgroup_v2 tmpfs:filesystem associate; |
| 4 | allow cgroup_rc_file tmpfs:filesystem associate; |
| 5 | allow debugfs_type { debugfs debugfs_tracing debugfs_tracing_debug }:filesystem associate; |
| 6 | allow dev_type tmpfs:filesystem associate; |
| Shikha Panwar | 1aeaaed | 2022-12-08 13:18:56 +0000 | [diff] [blame] | 7 | allow encryptedstore_file encryptedstore_fs:filesystem associate; |
| Inseob Kim | 8565b96 | 2021-11-29 14:56:46 +0900 | [diff] [blame] | 8 | allow extra_apk_file zipfusefs:filesystem associate; |
| Inseob Kim | e138997 | 2021-07-19 07:48:34 +0000 | [diff] [blame] | 9 | allow file_type labeledfs:filesystem associate; |
| 10 | allow file_type tmpfs:filesystem associate; |
| 11 | allow file_type rootfs:filesystem associate; |
| 12 | allow proc_net proc:filesystem associate; |
| 13 | allow sysfs_type sysfs:filesystem associate; |
| 14 | allow system_data_file tmpfs:filesystem associate; |
| Victor Hsieh | 49c0ec7 | 2021-08-03 17:26:38 -0700 | [diff] [blame] | 15 | |
| 16 | type authfs_fuse, fs_type, contextmount_type; |
| Jeff Vander Stoep | bc0fa66 | 2021-12-03 15:21:54 +0100 | [diff] [blame] | 17 | |
| 18 | # /dev/selinux/test - used to verify that apex sepolicy is loaded and |
| 19 | # property labeled. |
| 20 | type sepolicy_test_file, file_type; |
| Shikha Panwar | c6ff74a | 2022-11-21 16:06:09 +0000 | [diff] [blame] | 21 | |
| 22 | # /system/bin/mke2fs - used to format encryptedstore block device |
| 23 | type e2fs_exec, system_file_type, exec_type, file_type; |
| Shikha Panwar | 1aeaaed | 2022-12-08 13:18:56 +0000 | [diff] [blame] | 24 | |
| 25 | type encryptedstore_file, file_type; |
| 26 | type encryptedstore_fs, fs_type, contextmount_type; |
| Jiyong Park | 02df74a | 2022-12-20 19:27:49 +0900 | [diff] [blame] | 27 | |
| 28 | # Filesystem entry for for PRNG seeder socket. |
| 29 | type prng_seeder_socket, file_type, coredomain_socket; |