unplugged-system/system/sepolicy/public/platform_app.te

15 lines
566 B
Plaintext
Executable File

###
### Apps signed with the platform key.
###
allow platform_app system_app_data_file:dir r_dir_perms;
allow platform_app system_app_data_file:file r_file_perms;
type platform_app, domain;
# add for ADUPS_FOTA_SUPPORT or FOTA_UPDATE_SUPPORT.
allow platform_app recovery_service:service_manager find;
allow platform_app update_engine_service:service_manager find;
allow platform_app update_engine:binder call;
allow platform_app { cache_file cache_recovery_file }:dir create_dir_perms;
allow platform_app { cache_file cache_recovery_file }:file create_file_perms;