1# vdc spawned from init for the following services:
2#  defaultcrypto
3#  encrypt
4#
5# We also transition into this domain from dumpstate, when
6# collecting bug reports.
7
8type vdc, domain;
9type vdc_exec, exec_type, file_type;
10
11unix_socket_connect(vdc, vold, vold)
12
13# vdc sends information back to dumpstate when "adb bugreport" is used
14allow vdc dumpstate:fd use;
15allow vdc dumpstate:unix_stream_socket { read write getattr };
16
17# vdc information is written to shell owned bugreport files
18allow vdc shell_data_file:file { write getattr };
19
20# Why?
21allow vdc dumpstate:unix_dgram_socket { read write };
22
23# vdc can be invoked with logwrapper, so let it write to pty
24allow vdc devpts:chr_file rw_file_perms;
25
26# vdc writes directly to kmsg during the boot process
27allow vdc kmsg_device:chr_file w_file_perms;
28