1# Input selectors:
2#	isSystemServer (boolean)
3#	isOwner (boolean)
4#	user (string)
5#	seinfo (string)
6#	name (string)
7#	path (string)
8# isSystemServer=true can only be used once.
9# An unspecified isSystemServer defaults to false.
10# isOwner=true will only match for the owner/primary user.
11# isOwner=false will only match for secondary users.
12# If unspecified, the entry can match either case.
13# An unspecified string selector will match any value.
14# A user string selector that ends in * will perform a prefix match.
15# user=_app will match any regular app UID.
16# user=_isolated will match any isolated service UID.
17# All specified input selectors in an entry must match (i.e. logical AND).
18# Matching is case-insensitive.
19#
20# Precedence rules:
21# 	  (1) isSystemServer=true before isSystemServer=false.
22# 	  (2) Specified isOwner= before unspecified isOwner= boolean.
23#	  (3) Specified user= string before unspecified user= string.
24#	  (4) Fixed user= string before user= prefix (i.e. ending in *).
25#	  (5) Longer user= prefix before shorter user= prefix.
26#	  (6) Specified seinfo= string before unspecified seinfo= string.
27#	  (7) Specified name= string before unspecified name= string.
28#	  (8) Specified path= string before unspecified path= string.
29#
30# Outputs:
31#	domain (string)
32#	type (string)
33#	levelFrom (string; one of none, all, app, or user)
34#	level (string)
35# Only entries that specify domain= will be used for app process labeling.
36# Only entries that specify type= will be used for app directory labeling.
37# levelFrom=user is only supported for _app or _isolated UIDs.
38# levelFrom=app or levelFrom=all is only supported for _app UIDs.
39# level may be used to specify a fixed level for any UID.
40#
41isSystemServer=true domain=system_server
42user=system seinfo=platform domain=system_app type=system_app_data_file
43user=bluetooth seinfo=platform domain=bluetooth type=bluetooth_data_file
44user=nfc seinfo=platform domain=nfc type=nfc_data_file
45user=radio seinfo=platform domain=radio type=radio_data_file
46user=shared_relro domain=shared_relro
47user=shell seinfo=platform domain=shell type=shell_data_file
48user=_isolated domain=isolated_app levelFrom=user
49user=_app seinfo=platform domain=platform_app type=app_data_file levelFrom=user
50user=_app domain=untrusted_app type=app_data_file levelFrom=user
51