• Home
  • Line#
  • Scopes#
  • Navigate#
  • Raw
  • Download
1# installer daemon
2type installd, domain;
3type installd_exec, exec_type, file_type;
4
5init_daemon_domain(installd)
6relabelto_domain(installd)
7typeattribute installd mlstrustedsubject;
8allow installd self:capability { chown dac_override fowner fsetid setgid setuid };
9allow installd system_data_file:file create_file_perms;
10allow installd system_data_file:lnk_file create;
11allow installd dalvikcache_data_file:file create_file_perms;
12allow installd data_file_type:dir create_dir_perms;
13allow installd data_file_type:dir { relabelfrom relabelto };
14allow installd data_file_type:{ file_class_set } { getattr unlink };
15allow installd apk_data_file:file r_file_perms;
16allow installd apk_tmp_file:file r_file_perms;
17allow installd system_file:file x_file_perms;
18allow installd cgroup:dir create_dir_perms;
19allow installd download_file:dir { r_dir_perms write remove_name };
20allow installd download_file:file { r_file_perms unlink };
21dontaudit installd self:capability sys_admin;
22# Check validity of SELinux context before use.
23selinux_check_context(installd)
24# Read /seapp_contexts and /data/security/seapp_contexts
25security_access_policy(installd)
26# ASEC
27allow installd platform_app_data_file:lnk_file { create setattr };
28allow installd app_data_file:lnk_file { create setattr };
29allow installd asec_apk_file:file r_file_perms;
30allow installd bluetooth_data_file:lnk_file { create setattr };
31allow installd nfc_data_file:lnk_file { create setattr };
32allow installd radio_data_file:lnk_file { create setattr };
33allow installd shell_data_file:lnk_file { create setattr };
34