summaryrefslogtreecommitdiff
path: root/public/system_server.te
blob: 4016ba3981b0df29b5ab36355754aeb6303104e2 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
#
# System Server aka system_server spawned by zygote.
# Most of the framework services run in this process.
#
type system_server, domain;
type system_server_tmpfs, file_type, mlstrustedobject;

# Power controls for debugging/diagnostics
get_prop(system_server, power_debug_prop)
set_prop(system_server, power_debug_prop)

neverallow {
  domain
  -init
  -vendor_init
  -system_server
} power_debug_prop:property_service set;
# Read ro.gfx.* properties
get_prop(system_server, graphics_config_prop)