1type factory_ota_app, domain, coredomain; 2 3app_domain(factory_ota_app) 4net_domain(factory_ota_app) 5 6# Write to /data/ota_package for OTA packages. 7allow factory_ota_app ota_package_file:dir rw_dir_perms; 8allow factory_ota_app ota_package_file:file create_file_perms; 9 10# Properties 11get_prop(factory_ota_app, factory_ota_prop); 12set_prop(factory_ota_app, exported_system_prop); 13 14# Services 15allow factory_ota_app app_api_service:service_manager find; 16binder_call(factory_ota_app, update_engine) # Allow Factory OTA to call Update Engine 17binder_call(update_engine, factory_ota_app) # Allow Update Engine to call the Factory OTA callback 18allow factory_ota_app update_engine_service:service_manager find; 19allow factory_ota_app nfc_service:service_manager find; 20allow factory_ota_app radio_service:service_manager find; 21