1# apexd -- manager for APEX packages
2type apexd, domain;
3type apexd_exec, exec_type, file_type, system_file_type;
4
5binder_use(apexd)
6add_service(apexd, apex_service)
7
8neverallow { domain -init -apexd -system_server } apex_service:service_manager find;
9neverallow { domain -init -apexd -system_server -servicemanager } apexd:binder call;
10
11neverallow { domain userdebug_or_eng(`-crash_dump') } apexd:process ptrace;
12