| Alex Klyubin | f5446eb | 2017-03-23 14:27:32 -0700 | [diff] [blame] | 1 | typeattribute update_engine coredomain; |
| 2 | |
| dcashman | cc39f63 | 2016-07-22 13:13:11 -0700 | [diff] [blame] | 3 | init_daemon_domain(update_engine); |
| Yifan Hong | 07a99e1 | 2019-08-07 13:01:15 -0700 | [diff] [blame] | 4 | |
| 5 | # Allow to talk to gsid. |
| 6 | allow update_engine gsi_service:service_manager find; |
| 7 | binder_call(update_engine, gsid) |
| Inseob Kim | 55e5c9b | 2020-03-04 17:20:35 +0900 | [diff] [blame] | 8 | |
| 9 | # Allow to start gsid service. |
| 10 | set_prop(update_engine, ctl_gsid_prop) |
| 11 | |
| David Anderson | 09bb944 | 2020-11-13 00:45:59 -0800 | [diff] [blame] | 12 | # Allow to start snapuserd for dm-user communication. |
| 13 | set_prop(update_engine, ctl_snapuserd_prop) |
| 14 | |
| Inseob Kim | 55e5c9b | 2020-03-04 17:20:35 +0900 | [diff] [blame] | 15 | # Allow to set the OTA related properties, e.g. ota.warm_reset. |
| 16 | set_prop(update_engine, ota_prop) |
| Howard Chen | 2a2278e | 2020-04-30 17:45:45 +0800 | [diff] [blame] | 17 | |
| 18 | # Allow to get the DSU status |
| 19 | get_prop(update_engine, gsid_prop) |
| Yifan Hong | 8ac37f0 | 2020-06-01 15:07:50 -0700 | [diff] [blame] | 20 | |
| 21 | # Allow update_engine to call the callback function provided by GKI update hook. |
| 22 | binder_call(update_engine, gki_apex_prepostinstall) |
| David Anderson | 09bb944 | 2020-11-13 00:45:59 -0800 | [diff] [blame] | 23 | |
| 24 | # Allow to communicate with the snapuserd service, for dm-user snapshots. |
| 25 | allow update_engine snapuserd:unix_stream_socket connectto; |
| 26 | allow update_engine snapuserd_socket:sock_file write; |
| David Anderson | 9e21df2 | 2021-07-27 18:51:18 -0700 | [diff] [blame] | 27 | get_prop(update_engine, snapuserd_prop) |
| Mohammad Samiul Islam | 606a3dc | 2021-02-18 19:55:31 +0000 | [diff] [blame] | 28 | |
| 29 | # Allow to communicate with apexd for calculating and reserving space for |
| 30 | # capex decompression |
| 31 | allow update_engine apex_service:service_manager find; |
| 32 | binder_call(update_engine, apexd) |