blob: 04fc39e7177a6b40f1da164140d84205e099fcc3 [file] [log] [blame]
Eric Biggers9bf0a0c2022-04-15 02:18:37 +00001# vdc is a helper program for making Binder calls to vold. It is spawned from
2# init for various reasons, such as initializing file-based encryption and
3# metadata encryption, and managing userdata checkpointing.
Nick Kralevichc0d14762014-06-25 12:30:11 -07004#
5# We also transition into this domain from dumpstate, when
6# collecting bug reports.
Nick Kralevich6a259cc2016-12-09 19:30:39 -08007type vdc, domain;
Nick Kralevich5e372712018-09-27 10:21:37 -07008type vdc_exec, system_file_type, exec_type, file_type;
Inseob Kim09b27c72024-03-28 10:37:28 +09009
10# system/sepolicy/public is for vendor-facing type and attribute definitions.
11# DO NOT ADD allow, neverallow, or dontaudit statements here.
12# Instead, add such policy rules to system/sepolicy/private/*.te.