1type system_server_startup, domain, coredomain;
2type system_server_startup_tmpfs, file_type;
3
4tmpfs_domain(system_server_startup)
5
6# Create JIT memory
7allow system_server_startup self:process execmem;
8allow system_server_startup system_server_startup_tmpfs:file { execute read write open map };
9
10# Allow to pick up integrity-checked artifacts from the ART APEX dalvik cache.
11allow system_server_startup apex_art_data_file:dir r_dir_perms;
12allow system_server_startup apex_art_data_file:file { r_file_perms execute };
13
14# Allow system_server_startup to run setcon() and enter the
15# system_server domain
16allow system_server_startup self:process setcurrent;
17allow system_server_startup system_server:process dyntransition;
18
19# Child of the zygote.
20allow system_server_startup zygote:process sigchld;
21
22# Allow query ART device config properties
23get_prop(system_server_startup, device_config_runtime_native_boot_prop)
24get_prop(system_server_startup, device_config_runtime_native_prop)
25