1# vdc spawned from init for the following services:
2#  defaultcrypto
3#  encrypt
4#
5# We also transition into this domain from dumpstate, when
6# collecting bug reports.
7
8type vdc, domain;
9type vdc_exec, system_file_type, exec_type, file_type;
10
11# vdc can be invoked with logwrapper, so let it write to pty
12allow vdc devpts:chr_file rw_file_perms;
13
14# vdc writes directly to kmsg during the boot process
15allow vdc kmsg_device:chr_file { getattr w_file_perms };
16
17# vdc talks to vold over Binder
18binder_use(vdc)
19binder_call(vdc, vold)
20allow vdc vold_service:service_manager find;
21