1# The flags_health_check command run by init. 2type flags_health_check, domain, coredomain; 3type flags_health_check_exec, system_file_type, exec_type, file_type; 4 5allow flags_health_check server_configurable_flags_data_file:dir rw_dir_perms; 6allow flags_health_check server_configurable_flags_data_file:file create_file_perms; 7 8# server_configurable_flags_data_file is used for storing whether server configurable flags which 9# have been reset during current booting. Mistakenly modified by unrelated components can 10# cause bad server configurable flags synced back to device. 11neverallow { domain -init -flags_health_check } server_configurable_flags_data_file:file no_w_file_perms; 12