| Anton Hansson | e822545 | 2019-11-25 13:10:10 +0000 | [diff] [blame^] | 1 | |
| 2 | # Domain for derive_sdk | ||||
| 3 | type derive_sdk, domain, coredomain; | ||||
| 4 | type derive_sdk_exec, system_file_type, exec_type, file_type; | ||||
| 5 | init_daemon_domain(derive_sdk) | ||||
| 6 | |||||
| 7 | # Read /apex | ||||
| 8 | allow derive_sdk apex_mnt_dir:dir r_dir_perms; | ||||
| 9 | |||||
| 10 | # Prop rules: writable by derive_sdk, readable by bootclasspath (apps) | ||||
| 11 | set_prop(derive_sdk, module_sdkext_prop) | ||||
| 12 | neverallow {domain -init -derive_sdk} module_sdkext_prop:property_service set; | ||||