blob: 864557d66929d89262e6d094382d3ed067b31d04 [file] [log] [blame]
Jeff Vander Stoep77b290f2017-12-19 08:19:52 -08001###
2### Domain for all zygote spawned apps
3###
4### This file is the base policy for all zygote spawned apps.
5### Other policy files, such as isolated_app.te, untrusted_app.te, etc
6### extend from this policy. Only policies which should apply to ALL
7### zygote spawned apps should be added here.
8###
Jeff Vander Stoep9f5d0d92019-01-29 14:43:45 -08009type appdomain_tmpfs, file_type;
Inseob Kim09b27c72024-03-28 10:37:28 +090010
11# system/sepolicy/public is for vendor-facing type and attribute definitions.
12# DO NOT ADD allow, neverallow, or dontaudit statements here.
13# Instead, add such policy rules to system/sepolicy/private/*.te.