1# vdc spawned from init for the following services: 2# defaultcrypto 3# encrypt 4# 5# We also transition into this domain from dumpstate, when 6# collecting bug reports. 7 8type vdc, domain; 9type vdc_exec, exec_type, file_type; 10 11unix_socket_connect(vdc, vold, vold) 12 13# vdc sends information back to dumpstate when "adb bugreport" is used 14allow vdc dumpstate:fd use; 15allow vdc dumpstate:unix_stream_socket { read write getattr }; 16 17# vdc information is written to shell owned bugreport files 18allow vdc shell_data_file:file { write getattr }; 19 20# Why? 21allow vdc dumpstate:unix_dgram_socket { read write }; 22 23# vdc can be invoked with logwrapper, so let it write to pty 24allow vdc devpts:chr_file rw_file_perms; 25 26# vdc writes directly to kmsg during the boot process 27allow vdc kmsg_device:chr_file w_file_perms; 28