Lines Matching refs:domain
3 # We do not apply this to the su domain to avoid interfering with
5 domain_auto_trans({ domain userdebug_or_eng(`-su') }, crash_dump_exec, crash_dump);
6 allow domain crash_dump:process sigchld;
12 get_prop(domain, heapprofd_prop);
15 domain
32 allow domain cgroup:dir search;
33 allow { domain -appdomain -rs } cgroup:dir w_dir_perms;
34 allow { domain -appdomain -rs } cgroup:file w_file_perms;
36 allow domain cgroup_rc_file:dir search;
37 allow domain cgroup_rc_file:file r_file_perms;
38 allow domain task_profiles_file:file r_file_perms;
39 allow domain vendor_task_profiles_file:file r_file_perms;
43 get_prop(domain, use_memfd_prop);
48 get_prop(domain, core_property_type)
49 get_prop(domain, exported_dalvik_prop)
50 get_prop(domain, exported_ffs_prop)
51 get_prop(domain, exported_system_radio_prop)
52 get_prop(domain, exported2_config_prop)
53 get_prop(domain, exported2_radio_prop)
54 get_prop(domain, exported2_system_prop)
55 get_prop(domain, exported2_vold_prop)
56 get_prop(domain, exported3_default_prop)
57 get_prop(domain, exported3_radio_prop)
58 get_prop(domain, exported3_system_prop)
59 get_prop(domain, vendor_default_prop)
73 get_prop({domain -coredomain -appdomain}, vendor_default_prop)
77 allow domain kernel:key search;
79 allow domain fsverity_init:key search;
82 allow domain su:key search;
88 domain
99 neverallow { domain -priv_app } *:keystore_key gen_unique_id;
102 domain
105 userdebug_or_eng(`-domain')
110 neverallow { domain -init -system_server } dropbox_data_file:dir *;
111 neverallow { domain -init -system_server } dropbox_data_file:file ~{ getattr read };
116 domain
124 domain
141 domain
148 domain
157 domain
163 domain
171 neverallow { domain -init -system_server -apexd -installd} staging_data_file:dir *;
172 neverallow { domain -init -system_app -system_server -apexd -kernel -installd } staging_data_file:f…
173 neverallow { domain -init -system_server -installd} staging_data_file:dir no_w_dir_perms;
176 neverallow { domain -init -system_server } staging_data_file:file
180 domain
194 domain
217 domain
224 domain
237 domain
250 # Instead of granting them it is usually better to add the domain to
290 domain
304 domain
305 userdebug_or_eng(`-domain')