Eric Biggers | 9bf0a0c | 2022-04-15 02:18:37 +0000 | [diff] [blame] | 1 | # vdc is a helper program for making Binder calls to vold. It is spawned from |
| 2 | # init for various reasons, such as initializing file-based encryption and |
| 3 | # metadata encryption, and managing userdata checkpointing. |
Nick Kralevich | c0d1476 | 2014-06-25 12:30:11 -0700 | [diff] [blame] | 4 | # |
| 5 | # We also transition into this domain from dumpstate, when |
| 6 | # collecting bug reports. |
Nick Kralevich | 6a259cc | 2016-12-09 19:30:39 -0800 | [diff] [blame] | 7 | type vdc, domain; |
Nick Kralevich | 5e37271 | 2018-09-27 10:21:37 -0700 | [diff] [blame] | 8 | type vdc_exec, system_file_type, exec_type, file_type; |
Inseob Kim | 09b27c7 | 2024-03-28 10:37:28 +0900 | [diff] [blame] | 9 | |
| 10 | # system/sepolicy/public is for vendor-facing type and attribute definitions. |
| 11 | # DO NOT ADD allow, neverallow, or dontaudit statements here. |
| 12 | # Instead, add such policy rules to system/sepolicy/private/*.te. |