1# Input selectors: 2# isSystemServer (boolean) 3# user (string) 4# seinfo (string) 5# name (string) 6# path (string) 7# sebool (string) 8# isSystemServer=true can only be used once. 9# An unspecified isSystemServer defaults to false. 10# An unspecified string selector will match any value. 11# A user string selector that ends in * will perform a prefix match. 12# user=_app will match any regular app UID. 13# user=_isolated will match any isolated service UID. 14# All specified input selectors in an entry must match (i.e. logical AND). 15# Matching is case-insensitive. 16# 17# Precedence rules: 18# (1) isSystemServer=true before isSystemServer=false. 19# (2) Specified user= string before unspecified user= string. 20# (3) Fixed user= string before user= prefix (i.e. ending in *). 21# (4) Longer user= prefix before shorter user= prefix. 22# (5) Specified seinfo= string before unspecified seinfo= string. 23# (6) Specified name= string before unspecified name= string. 24# (7) Specified path= string before unspecified path= string. 25# (8) Specified sebool= string before unspecified sebool= string. 26# 27# Outputs: 28# domain (string) 29# type (string) 30# levelFrom (string; one of none, all, app, or user) 31# level (string) 32# Only entries that specify domain= will be used for app process labeling. 33# Only entries that specify type= will be used for app directory labeling. 34# levelFrom=user is only supported for _app or _isolated UIDs. 35# levelFrom=app or levelFrom=all is only supported for _app UIDs. 36# level may be used to specify a fixed level for any UID. 37# 38isSystemServer=true domain=system_server 39user=system domain=system_app type=system_app_data_file 40user=bluetooth domain=bluetooth type=bluetooth_data_file 41user=nfc domain=nfc type=nfc_data_file 42user=radio domain=radio type=radio_data_file 43user=shared_relro domain=shared_relro 44user=shell domain=shell type=shell_data_file 45user=_isolated domain=isolated_app 46user=_app seinfo=platform domain=platform_app type=app_data_file 47user=_app domain=untrusted_app type=app_data_file 48