diff options
Diffstat (limited to 'prebuilts/api/32.0/private/recovery_persist.te')
| -rw-r--r-- | prebuilts/api/32.0/private/recovery_persist.te | 11 |
1 files changed, 11 insertions, 0 deletions
diff --git a/prebuilts/api/32.0/private/recovery_persist.te b/prebuilts/api/32.0/private/recovery_persist.te new file mode 100644 index 000000000..7cb2e675a --- /dev/null +++ b/prebuilts/api/32.0/private/recovery_persist.te @@ -0,0 +1,11 @@ +typeattribute recovery_persist coredomain; + +init_daemon_domain(recovery_persist) + +# recovery_persist is not allowed to write anywhere other than recovery_data_file +neverallow recovery_persist { + file_type + -recovery_data_file + userdebug_or_eng(`-coredump_file') + with_native_coverage(`-method_trace_data_file') +}:file write; |