#################################################
# MLS policy constraints
#

# We aren't using MLS in Microdroid. But the policy grammar requires
# at least one MLS declaration, and checkpolicy enforces this. We
# don't want to disable MLS, since we share some file labels with the
# host (e.g. files in APEXes) which does have MLS. So we include this
# fairly harmless constraint.

# Process transition:  Require equivalence.
mlsconstrain process { transition dyntransition } (h1 eq h2 and l1 eq l2);