(roletype r domain)
(typeattribute dev_type)
(typeattributeset dev_type (device ashmem_device ashmem_libcutils_device audio_device binder_device hwbinder_device vndbinder_device block_device bt_device camera_device dm_device ublk_block_device dm_user_device ublk_control_device keychord_device loop_control_device loop_device pmsg_device radio_device ram_device rtc_device vd_device vold_device console_device fscklogs gpu_device graphics_device hw_random_device input_device port_device lowpan_device mtp_device nfc_device ptmx_device kmsg_device kmsg_debug_device null_device random_device secure_element_device sensors_device serial_device socket_device owntty_device tty_device video_device zero_device fuse_device iio_device ion_device dmabuf_heap_device dmabuf_system_heap_device dmabuf_system_secure_heap_device qtaguid_device watchdog_device uhid_device uio_device tun_device usbaccessory_device usb_device usb_serial_device gnss_device properties_device properties_serial property_info hidraw_device hci_attach_dev rpmsg_device root_block_device frp_block_device system_block_device recovery_block_device boot_block_device dtbo_block_device userdata_block_device zoned_block_device cache_block_device swap_block_device metadata_block_device misc_block_device super_block_device sdcard_block_device userdata_sysdev rootdisk_sysdev vfio_device tee_device ))
(typeattribute bpffs_type)
(typeattributeset bpffs_type (fs_bpf fs_bpf_tethering fs_bpf_vendor ))
(typeattribute domain)
(typeattributeset domain (adbd aidl_lazy_test_server apexd app_zygote artd atrace audioserver blkid blkid_untrusted bluetooth bootanim bootstat bpfloader bufferhubd cameraserver charger charger_vendor crash_dump credstore dhcp dnsmasq drmserver dumpstate e2fs ephemeral_app evsmanagerd extra_free_kbytes fastbootd fingerprintd flags_health_check fsck fsck_untrusted gatekeeperd gmscore_app gpuservice healthd heapprofd hwservicemanager idmap incident incident_helper incidentd init inputflinger installd isolated_app isolated_compute_app kernel keystore llkd lmkd logd logpersist mdnsd mediadrmserver mediaextractor mediametrics mediaprovider mediaserver mediaswcodec mediatranscoding modprobe mtp netd netutils_wrapper network_stack nfc otapreopt_chroot perfetto performanced platform_app postinstall ppp priv_app prng_seeder profman radio recovery recovery_persist recovery_refresh rkpdapp rs rss_hwm_reset runas runas_app sdcardd secure_element servicemanager sgdisk shared_relro shell simpleperf simpleperf_app_runner slideshow statsd su surfaceflinger system_app system_server tee tombstoned toolbox traced traced_perf traced_probes traceur_app ueventd uncrypt untrusted_app untrusted_app_32 untrusted_app_30 untrusted_app_29 untrusted_app_27 untrusted_app_25 update_engine update_verifier usbd vdc vendor_init vendor_misc_writer vendor_modprobe vendor_shell virtual_touchpad vndservicemanager vold vold_prepare_subdirs watchdogd webview_zygote wificond zygote ))
(typeattribute fs_type)
(typeattributeset fs_type (device labeledfs pipefs sockfs rootfs proc binderfs binderfs_logs binderfs_logs_proc binderfs_logs_stats binderfs_features proc_security proc_drop_caches proc_overcommit_memory proc_min_free_order_shift proc_kpageflags proc_watermark_boost_factor proc_percpu_pagelist_high_fraction usermodehelper sysfs_usermodehelper proc_qtaguid_ctrl proc_qtaguid_stat proc_bluetooth_writable proc_abi proc_asound proc_bootconfig proc_bpf proc_buddyinfo proc_cmdline proc_cpu_alignment proc_cpuinfo proc_dirty proc_diskstats proc_extra_free_kbytes proc_filesystems proc_fs_verity proc_hostname proc_hung_task proc_interrupts proc_iomem proc_kallsyms proc_keys proc_kmsg proc_loadavg proc_locks proc_lowmemorykiller proc_max_map_count proc_meminfo proc_misc proc_modules proc_mounts proc_net proc_net_tcp_udp proc_page_cluster proc_pagetypeinfo proc_panic proc_perf proc_pid_max proc_pipe_conf proc_pressure_cpu proc_pressure_io proc_pressure_mem proc_random proc_sched proc_slabinfo proc_stat proc_swaps proc_sysrq proc_timer proc_tty_drivers proc_uid_cputime_showstat proc_uid_cputime_removeuid proc_uid_io_stats proc_uid_procstat_set proc_uid_time_in_state proc_uid_concurrent_active_time proc_uid_concurrent_policy_time proc_uid_cpupower proc_uptime proc_version proc_vmallocinfo proc_vmstat proc_watermark_scale_factor proc_zoneinfo proc_vendor_sched selinuxfs fusectlfs cgroup cgroup_v2 sysfs sysfs_android_usb sysfs_uio sysfs_batteryinfo sysfs_bluetooth_writable sysfs_devfreq_cur sysfs_devfreq_dir sysfs_devices_block sysfs_dm sysfs_dm_verity sysfs_dma_heap sysfs_dmabuf_stats sysfs_dt_firmware_android sysfs_extcon sysfs_ion sysfs_ipv4 sysfs_kernel_notes sysfs_leds sysfs_loop sysfs_gpu sysfs_hwrandom sysfs_nfc_power_writable sysfs_wake_lock sysfs_net sysfs_power sysfs_rtc sysfs_suspend_stats sysfs_switch sysfs_sync_on_suspend sysfs_transparent_hugepage sysfs_lru_gen_enabled sysfs_usb sysfs_wakeup sysfs_wakeup_reasons sysfs_fs_ext4_features sysfs_fs_f2fs sysfs_fs_fuse_bpf sysfs_fs_fuse_features sysfs_fs_incfs_features sysfs_fs_incfs_metrics sysfs_vendor_sched fs_bpf fs_bpf_tethering fs_bpf_vendor configfs sysfs_devices_cs_etm sysfs_devices_system_cpu sysfs_lowmemorykiller sysfs_wlan_fwpath sysfs_vibrator sysfs_uhid sysfs_thermal sysfs_zram sysfs_zram_uevent inotify devpts tmpfs shm mqueue fuse fuseblk sdcardfs vfat exfat debugfs debugfs_kprobes debugfs_mmc debugfs_mm_events_tracing debugfs_trace_marker debugfs_tracing debugfs_tracing_debug debugfs_tracing_instances debugfs_tracing_printk_formats debugfs_wakeup_sources debugfs_wifi_tracing securityfs pstorefs functionfs oemfs usbfs binfmt_miscfs app_fusefs debugfs_bootreceiver_tracing ))
(typeattribute contextmount_type)
(typeattributeset contextmount_type (oemfs app_fusefs ))
(typeattribute fusefs_type)
(typeattributeset fusefs_type (fuse fuseblk app_fusefs ))
(typeattribute file_type)
(typeattributeset file_type (adbd_exec aidl_lazy_test_server_exec apexd_exec appdomain_tmpfs app_zygote_tmpfs audioserver_tmpfs bootanim_exec bootstat_exec bufferhubd_exec cameraserver_exec cameraserver_tmpfs charger_exec crash_dump_exec credstore_exec dhcp_exec dnsmasq_exec drmserver_exec drmserver_socket dumpstate_exec e2fs_exec extra_free_kbytes_exec unlabeled system_file system_asan_options_file system_event_log_tags_file system_lib_file system_bootstrap_lib_file system_group_file system_linker_exec system_linker_config_file system_passwd_file system_seccomp_policy_file system_security_cacerts_file tcpdump_exec system_zoneinfo_file cgroup_desc_file cgroup_desc_api_file vendor_cgroup_desc_file task_profiles_file task_profiles_api_file vendor_task_profiles_file art_apex_dir linkerconfig_file incremental_control_file bootanim_oem_file vendor_hal_file vendor_file vendor_app_file vendor_configs_file same_process_hal_file vndk_sp_file vendor_framework_file vendor_overlay_file vendor_public_lib_file vendor_public_framework_file vendor_microdroid_file vendor_keylayout_file vendor_keychars_file vendor_idc_file vendor_uuid_mapping_config_file vendor_vm_file vendor_vm_data_file metadata_file vold_metadata_file gsi_metadata_file gsi_public_metadata_file password_slot_metadata_file apex_metadata_file ota_metadata_file metadata_bootstat_file userspace_reboot_metadata_file staged_install_file watchdog_metadata_file repair_mode_metadata_file aconfig_storage_metadata_file aconfig_storage_flags_metadata_file dev_cpu_variant runtime_event_log_tags_file logcat_exec cgroup_rc_file coredump_file system_data_root_file system_data_file system_userdir_file packages_list_file game_mode_intervention_list_file vendor_data_file vendor_userdir_file unencrypted_data_file install_data_file drm_data_file adb_data_file anr_data_file tombstone_data_file tombstone_wifi_data_file apex_data_file apk_data_file apk_tmp_file apk_private_data_file apk_private_tmp_file dalvikcache_data_file ota_data_file ota_package_file user_profile_root_file user_profile_data_file profman_dump_data_file prereboot_data_file resourcecache_data_file shell_data_file property_data_file bootchart_data_file dropbox_data_file heapdump_data_file nativetest_data_file shell_test_data_file ringtone_file preloads_data_file preloads_media_file dhcp_data_file server_configurable_flags_data_file staging_data_file vendor_apex_file vendor_apex_metadata_file shutdown_checkpoints_system_data_file mnt_media_rw_file mnt_user_file mnt_pass_through_file mnt_expand_file mnt_sdcard_file storage_file mnt_media_rw_stub_file storage_stub_file mnt_vendor_file mnt_product_file apex_mnt_dir apex_info_file postinstall_mnt_dir postinstall_file postinstall_apex_mnt_dir mirror_data_file adb_keys_file apex_system_server_data_file apex_module_data_file apex_ota_reserved_file apex_rollback_data_file appcompat_data_file audio_data_file audioserver_data_file bluetooth_data_file bluetooth_logs_data_file bootstat_data_file boottrace_data_file camera_data_file credstore_data_file gatekeeper_data_file incident_data_file keychain_data_file keystore_data_file media_data_file media_rw_data_file media_userdir_file misc_user_data_file net_data_file network_watchlist_data_file nfc_data_file nfc_logs_data_file radio_data_file recovery_data_file shared_relro_file snapshotctl_log_data_file stats_config_data_file stats_data_file systemkeys_data_file textclassifier_data_file trace_data_file vpn_data_file wifi_data_file vold_data_file tee_data_file update_engine_data_file update_engine_log_data_file snapuserd_log_data_file method_trace_data_file gsi_data_file radio_core_data_file app_data_file privapp_data_file system_app_data_file cache_file overlayfs_file cache_backup_file cache_private_backup_file cache_recovery_file efs_file wallpaper_file shortcut_manager_icons icon_file asec_apk_file asec_public_file asec_image_file backup_data_file bluetooth_efs_file fingerprintd_data_file fingerprint_vendor_data_file app_fuse_file face_vendor_data_file iris_vendor_data_file adbd_socket bluetooth_socket dnsproxyd_socket dumpstate_socket fwmarkd_socket lmkd_socket logd_socket logdr_socket logdw_socket mdns_socket mdnsd_socket misc_logd_file mtpd_socket ot_daemon_socket property_socket racoon_socket recovery_socket rild_socket rild_debug_socket snapuserd_socket snapuserd_proxy_socket statsdw_socket system_wpa_socket system_ndebug_socket system_unsolzygote_socket tombstoned_crash_socket tombstoned_java_trace_socket tombstoned_intercept_socket traced_consumer_socket traced_perf_socket traced_producer_socket uncrypt_socket wpa_socket zygote_socket heapprofd_socket gps_control pdx_display_dir pdx_performance_dir pdx_bufferhub_dir pdx_display_client_endpoint_socket pdx_display_manager_endpoint_socket pdx_display_screenshot_endpoint_socket pdx_display_vsync_endpoint_socket pdx_performance_client_endpoint_socket pdx_bufferhub_client_endpoint_socket file_contexts_file mac_perms_file property_contexts_file seapp_contexts_file sepolicy_file service_contexts_file keystore2_key_contexts_file vendor_service_contexts_file hwservice_contexts_file vndservice_contexts_file vendor_kernel_modules system_dlkm_file audiohal_data_file fingerprintd_exec flags_health_check_exec fsck_exec gatekeeperd_exec hal_graphics_composer_server_tmpfs hwservicemanager_exec idmap_exec init_exec init_tmpfs inputflinger_exec installd_exec keystore_exec llkd_exec lmkd_exec logd_exec mediadrmserver_exec mediaextractor_exec mediaextractor_tmpfs mediametrics_exec mediaserver_exec mediaserver_tmpfs mediaswcodec_exec netd_exec netutils_wrapper_exec performanced_exec profman_exec recovery_persist_exec recovery_refresh_exec rs_exec runas_exec sdcardd_exec servicemanager_exec sgdisk_exec shell_exec simpleperf_app_runner_exec statsd_exec su_exec surfaceflinger_tmpfs system_server_tmpfs tombstoned_exec toolbox_exec traced_tmpfs ueventd_tmpfs uncrypt_exec update_engine_exec update_verifier_exec usbd_exec vdc_exec vendor_misc_writer_exec vendor_shell_exec vendor_toolbox_exec virtual_touchpad_exec vold_exec vold_prepare_subdirs_exec watchdogd_exec webview_zygote_exec webview_zygote_tmpfs wificond_exec zygote_tmpfs zygote_exec ))
(typeattribute exec_type)
(typeattributeset exec_type (adbd_exec aidl_lazy_test_server_exec apexd_exec bootanim_exec bootstat_exec bufferhubd_exec cameraserver_exec charger_exec crash_dump_exec credstore_exec dhcp_exec dnsmasq_exec drmserver_exec dumpstate_exec e2fs_exec extra_free_kbytes_exec tcpdump_exec logcat_exec fingerprintd_exec flags_health_check_exec fsck_exec gatekeeperd_exec hwservicemanager_exec idmap_exec init_exec inputflinger_exec installd_exec keystore_exec llkd_exec lmkd_exec logd_exec mediadrmserver_exec mediaextractor_exec mediametrics_exec mediaserver_exec mediaswcodec_exec netd_exec netutils_wrapper_exec performanced_exec profman_exec recovery_persist_exec recovery_refresh_exec rs_exec runas_exec sdcardd_exec servicemanager_exec sgdisk_exec shell_exec simpleperf_app_runner_exec statsd_exec su_exec tombstoned_exec toolbox_exec uncrypt_exec update_engine_exec update_verifier_exec usbd_exec vdc_exec vendor_misc_writer_exec vendor_shell_exec vendor_toolbox_exec virtual_touchpad_exec vold_exec vold_prepare_subdirs_exec watchdogd_exec webview_zygote_exec wificond_exec zygote_exec ))
(typeattribute data_file_type)
(expandtypeattribute (data_file_type) false)
(typeattributeset data_file_type (incremental_control_file system_data_root_file system_data_file system_userdir_file packages_list_file game_mode_intervention_list_file vendor_data_file vendor_userdir_file unencrypted_data_file install_data_file drm_data_file adb_data_file anr_data_file tombstone_data_file tombstone_wifi_data_file apex_data_file apk_data_file apk_tmp_file apk_private_data_file apk_private_tmp_file dalvikcache_data_file ota_data_file ota_package_file user_profile_root_file user_profile_data_file profman_dump_data_file prereboot_data_file resourcecache_data_file shell_data_file property_data_file bootchart_data_file dropbox_data_file heapdump_data_file nativetest_data_file shell_test_data_file ringtone_file preloads_data_file preloads_media_file dhcp_data_file server_configurable_flags_data_file staging_data_file shutdown_checkpoints_system_data_file adb_keys_file apex_system_server_data_file apex_module_data_file apex_ota_reserved_file apex_rollback_data_file appcompat_data_file audio_data_file audioserver_data_file bluetooth_data_file bluetooth_logs_data_file bootstat_data_file boottrace_data_file camera_data_file credstore_data_file gatekeeper_data_file incident_data_file keychain_data_file keystore_data_file media_data_file media_rw_data_file media_userdir_file misc_user_data_file net_data_file network_watchlist_data_file nfc_data_file nfc_logs_data_file radio_data_file recovery_data_file shared_relro_file snapshotctl_log_data_file stats_config_data_file stats_data_file systemkeys_data_file textclassifier_data_file trace_data_file vpn_data_file wifi_data_file vold_data_file tee_data_file update_engine_data_file update_engine_log_data_file snapuserd_log_data_file method_trace_data_file gsi_data_file radio_core_data_file app_data_file privapp_data_file system_app_data_file cache_file overlayfs_file cache_backup_file cache_private_backup_file cache_recovery_file wallpaper_file shortcut_manager_icons icon_file asec_apk_file asec_public_file asec_image_file backup_data_file fingerprintd_data_file fingerprint_vendor_data_file app_fuse_file face_vendor_data_file iris_vendor_data_file bluetooth_socket misc_logd_file system_wpa_socket system_ndebug_socket system_unsolzygote_socket wpa_socket audiohal_data_file ))
(typeattribute core_data_file_type)
(expandtypeattribute (core_data_file_type) false)
(typeattributeset core_data_file_type (incremental_control_file system_data_root_file system_data_file system_userdir_file packages_list_file game_mode_intervention_list_file vendor_userdir_file unencrypted_data_file install_data_file drm_data_file adb_data_file anr_data_file tombstone_data_file apex_data_file apk_data_file apk_tmp_file apk_private_data_file apk_private_tmp_file dalvikcache_data_file ota_data_file ota_package_file user_profile_root_file user_profile_data_file profman_dump_data_file prereboot_data_file resourcecache_data_file shell_data_file property_data_file bootchart_data_file dropbox_data_file heapdump_data_file nativetest_data_file shell_test_data_file ringtone_file preloads_data_file preloads_media_file dhcp_data_file server_configurable_flags_data_file staging_data_file shutdown_checkpoints_system_data_file mirror_data_file adb_keys_file apex_system_server_data_file apex_module_data_file apex_ota_reserved_file apex_rollback_data_file appcompat_data_file audio_data_file audioserver_data_file bluetooth_data_file bluetooth_logs_data_file bootstat_data_file boottrace_data_file camera_data_file credstore_data_file gatekeeper_data_file incident_data_file keychain_data_file keystore_data_file media_data_file media_rw_data_file media_userdir_file misc_user_data_file net_data_file network_watchlist_data_file nfc_data_file nfc_logs_data_file radio_data_file recovery_data_file shared_relro_file snapshotctl_log_data_file stats_config_data_file stats_data_file systemkeys_data_file textclassifier_data_file trace_data_file vpn_data_file wifi_data_file vold_data_file update_engine_data_file update_engine_log_data_file snapuserd_log_data_file method_trace_data_file gsi_data_file radio_core_data_file app_data_file privapp_data_file system_app_data_file cache_file overlayfs_file cache_backup_file cache_private_backup_file cache_recovery_file wallpaper_file shortcut_manager_icons icon_file asec_apk_file asec_public_file asec_image_file backup_data_file fingerprintd_data_file app_fuse_file bluetooth_socket misc_logd_file system_wpa_socket system_ndebug_socket system_unsolzygote_socket wpa_socket audiohal_data_file ))
(typeattribute app_data_file_type)
(expandtypeattribute (app_data_file_type) false)
(typeattributeset app_data_file_type (shell_data_file bluetooth_data_file nfc_data_file radio_data_file app_data_file privapp_data_file system_app_data_file ))
(typeattribute system_file_type)
(typeattributeset system_file_type (adbd_exec aidl_lazy_test_server_exec apexd_exec bootanim_exec bootstat_exec bufferhubd_exec cameraserver_exec charger_exec crash_dump_exec credstore_exec dhcp_exec dnsmasq_exec drmserver_exec dumpstate_exec e2fs_exec extra_free_kbytes_exec system_file system_asan_options_file system_event_log_tags_file system_lib_file system_bootstrap_lib_file system_group_file system_linker_exec system_linker_config_file system_passwd_file system_seccomp_policy_file system_security_cacerts_file tcpdump_exec system_zoneinfo_file cgroup_desc_file cgroup_desc_api_file task_profiles_file task_profiles_api_file art_apex_dir bootanim_oem_file logcat_exec file_contexts_file mac_perms_file property_contexts_file seapp_contexts_file sepolicy_file service_contexts_file keystore2_key_contexts_file hwservice_contexts_file fingerprintd_exec flags_health_check_exec fsck_exec gatekeeperd_exec hwservicemanager_exec idmap_exec init_exec inputflinger_exec installd_exec keystore_exec llkd_exec lmkd_exec logd_exec mediadrmserver_exec mediaextractor_exec mediametrics_exec mediaserver_exec mediaswcodec_exec netd_exec netutils_wrapper_exec performanced_exec profman_exec recovery_persist_exec recovery_refresh_exec rs_exec runas_exec sdcardd_exec servicemanager_exec sgdisk_exec shell_exec simpleperf_app_runner_exec statsd_exec su_exec tombstoned_exec toolbox_exec uncrypt_exec update_engine_exec update_verifier_exec usbd_exec vdc_exec virtual_touchpad_exec vold_exec vold_prepare_subdirs_exec watchdogd_exec wificond_exec zygote_exec ))
(typeattribute system_dlkm_file_type)
(typeattributeset system_dlkm_file_type (system_dlkm_file ))
(typeattribute vendor_file_type)
(typeattributeset vendor_file_type (vendor_cgroup_desc_file vendor_task_profiles_file vendor_hal_file vendor_file vendor_app_file vendor_configs_file same_process_hal_file vndk_sp_file vendor_framework_file vendor_overlay_file vendor_public_lib_file vendor_public_framework_file vendor_microdroid_file vendor_keylayout_file vendor_keychars_file vendor_idc_file vendor_uuid_mapping_config_file vendor_vm_file vendor_vm_data_file vendor_apex_file vendor_apex_metadata_file vendor_service_contexts_file vendor_kernel_modules vendor_misc_writer_exec vendor_shell_exec vendor_toolbox_exec ))
(typeattribute proc_type)
(expandtypeattribute (proc_type) false)
(typeattributeset proc_type (proc proc_security proc_drop_caches proc_overcommit_memory proc_min_free_order_shift proc_kpageflags proc_watermark_boost_factor proc_percpu_pagelist_high_fraction usermodehelper proc_qtaguid_ctrl proc_qtaguid_stat proc_bluetooth_writable proc_abi proc_asound proc_bootconfig proc_bpf proc_buddyinfo proc_cmdline proc_cpu_alignment proc_cpuinfo proc_dirty proc_diskstats proc_extra_free_kbytes proc_filesystems proc_fs_verity proc_hostname proc_hung_task proc_interrupts proc_iomem proc_kallsyms proc_keys proc_kmsg proc_loadavg proc_locks proc_lowmemorykiller proc_max_map_count proc_meminfo proc_misc proc_modules proc_mounts proc_net proc_net_tcp_udp proc_page_cluster proc_pagetypeinfo proc_panic proc_perf proc_pid_max proc_pipe_conf proc_pressure_cpu proc_pressure_io proc_pressure_mem proc_random proc_sched proc_slabinfo proc_stat proc_swaps proc_sysrq proc_timer proc_tty_drivers proc_uid_cputime_showstat proc_uid_cputime_removeuid proc_uid_io_stats proc_uid_procstat_set proc_uid_time_in_state proc_uid_concurrent_active_time proc_uid_concurrent_policy_time proc_uid_cpupower proc_uptime proc_version proc_vmallocinfo proc_vmstat proc_watermark_scale_factor proc_zoneinfo proc_vendor_sched ))
(typeattribute proc_net_type)
(expandtypeattribute (proc_net_type) true)
(typeattributeset proc_net_type (proc_net ))
(typeattribute sysfs_type)
(typeattributeset sysfs_type (sysfs_usermodehelper sysfs sysfs_android_usb sysfs_uio sysfs_batteryinfo sysfs_bluetooth_writable sysfs_devfreq_cur sysfs_devfreq_dir sysfs_devices_block sysfs_dm sysfs_dm_verity sysfs_dma_heap sysfs_dmabuf_stats sysfs_dt_firmware_android sysfs_extcon sysfs_ion sysfs_ipv4 sysfs_kernel_notes sysfs_leds sysfs_loop sysfs_gpu sysfs_hwrandom sysfs_nfc_power_writable sysfs_wake_lock sysfs_net sysfs_power sysfs_rtc sysfs_suspend_stats sysfs_switch sysfs_sync_on_suspend sysfs_transparent_hugepage sysfs_lru_gen_enabled sysfs_usb sysfs_wakeup sysfs_wakeup_reasons sysfs_fs_ext4_features sysfs_fs_f2fs sysfs_fs_fuse_bpf sysfs_fs_fuse_features sysfs_fs_incfs_features sysfs_fs_incfs_metrics sysfs_vendor_sched sysfs_devices_cs_etm sysfs_devices_system_cpu sysfs_lowmemorykiller sysfs_wlan_fwpath sysfs_vibrator sysfs_uhid sysfs_thermal sysfs_zram sysfs_zram_uevent ))
(typeattribute debugfs_type)
(typeattributeset debugfs_type (debugfs debugfs_kprobes debugfs_mmc debugfs_mm_events_tracing debugfs_trace_marker debugfs_tracing debugfs_tracing_debug debugfs_tracing_instances debugfs_tracing_printk_formats debugfs_wakeup_sources debugfs_wifi_tracing debugfs_bootreceiver_tracing ))
(typeattribute tracefs_type)
(typeattributeset tracefs_type (debugfs_mm_events_tracing debugfs_trace_marker debugfs_tracing debugfs_tracing_debug debugfs_tracing_instances debugfs_tracing_printk_formats debugfs_wifi_tracing debugfs_bootreceiver_tracing ))
(typeattribute sdcard_type)
(typeattributeset sdcard_type (fuseblk sdcardfs vfat exfat ))
(typeattribute node_type)
(typeattributeset node_type (node ))
(typeattribute netif_type)
(typeattributeset netif_type (netif ))
(typeattribute port_type)
(typeattributeset port_type (port ))
(typeattribute property_type)
(typeattributeset property_type (apexd_prop bootloader_boot_reason_prop device_config_activity_manager_native_boot_prop device_config_boot_count_prop device_config_input_native_boot_prop device_config_netd_native_prop device_config_reset_performed_prop firstboot_prop boottime_prop charger_prop cold_boot_done_prop ctl_adbd_prop ctl_apexd_prop ctl_bootanim_prop ctl_bugreport_prop ctl_console_prop ctl_dumpstate_prop ctl_fuse_prop ctl_gsid_prop ctl_interface_restart_prop ctl_interface_stop_prop ctl_mdnsd_prop ctl_restart_prop ctl_rildaemon_prop ctl_sigstop_prop dynamic_system_prop heapprofd_enabled_prop llkd_prop lpdumpd_prop mmc_prop mock_ota_prop net_dns_prop overlay_prop persistent_properties_ready_prop safemode_prop system_lmk_prop system_trace_prop test_boot_reason_prop time_prop traced_enabled_prop traced_lazy_prop aac_drc_prop adaptive_haptics_prop apex_ready_prop arm64_memtag_prop binder_cache_bluetooth_server_prop binder_cache_system_server_prop binder_cache_telephony_server_prop boot_status_prop bootanim_system_prop bootloader_prop boottime_public_prop bq_config_prop build_bootimage_prop build_prop composd_vm_art_prop device_config_aconfig_flags_prop device_config_camera_native_prop device_config_edgetpu_native_prop device_config_media_native_prop device_config_nnapi_native_prop device_config_runtime_native_boot_prop device_config_runtime_native_prop device_config_surface_flinger_native_boot_prop device_config_vendor_system_native_prop device_config_vendor_system_native_boot_prop drm_forcel3_prop fingerprint_prop gwp_asan_prop hal_instrumentation_prop userdebug_or_eng_prop init_service_status_prop libc_debug_prop module_sdkextensions_prop nnapi_ext_deny_product_prop persist_wm_debug_prop power_debug_prop property_service_version_prop provisioned_prop restorecon_prop retaildemo_prop servicemanager_prop smart_idle_maint_enabled_prop socket_hook_prop sqlite_log_prop surfaceflinger_display_prop system_boot_reason_prop system_jvmti_agent_prop traced_oome_heap_session_count_prop ab_update_gki_prop usb_prop userspace_reboot_exported_prop vold_status_prop vts_status_prop config_prop cppreopt_prop dalvik_prop debuggerd_prop device_logging_prop dhcp_prop dumpstate_prop exported3_system_prop exported_dumpstate_prop exported_secure_prop heapprofd_prop net_radio_prop pan_result_prop persist_debug_prop shell_prop test_harness_prop theme_prop use_memfd_prop vold_prop apexd_config_prop apexd_select_prop aaudio_config_prop apk_verity_prop audio_config_prop bootanim_config_prop bluetooth_config_prop build_attestation_prop build_config_prop build_odm_prop build_vendor_prop camera_calibration_prop camera_config_prop camera2_extensions_prop camerax_extensions_prop charger_config_prop codec2_config_prop composd_vm_vendor_prop cpu_variant_prop debugfs_restriction_prop drm_service_config_prop exported_camera_prop exported_config_prop exported_default_prop ffs_config_prop framework_watchdog_config_prop graphics_config_prop hdmi_config_prop hw_timeout_multiplier_prop hypervisor_prop hypervisor_restricted_prop incremental_prop keyguard_config_prop keystore_config_prop lmkd_config_prop media_config_prop media_variant_prop mediadrm_config_prop mm_events_config_prop oem_unlock_prop ota_build_prop packagemanager_config_prop quick_start_prop recovery_config_prop recovery_usb_config_prop sendbug_config_prop soc_prop storage_config_prop storagemanager_config_prop surfaceflinger_prop suspend_prop systemsound_config_prop telephony_config_prop threadnetwork_config_prop tombstone_config_prop usb_config_prop userspace_reboot_config_prop vehicle_hal_prop vendor_security_patch_level_prop vendor_socket_hook_prop virtual_ab_prop vndk_prop vts_config_prop vold_config_prop wifi_config_prop zram_config_prop zygote_config_prop dck_prop tuner_config_prop usb_uvc_enabled_prop setupwizard_mode_prop pm_archiving_enabled_prop adbd_config_prop audio_prop bluetooth_a2dp_offload_prop bluetooth_audio_hal_prop bluetooth_prop bpf_progs_loaded_prop charger_status_prop ctl_default_prop ctl_interface_start_prop ctl_start_prop ctl_stop_prop dalvik_config_prop dalvik_dynamic_config_prop dalvik_runtime_prop debug_prop device_config_memory_safety_native_boot_prop device_config_memory_safety_native_prop dumpstate_options_prop exported_system_prop exported_bluetooth_prop exported_overlay_prop exported_pm_prop future_pm_prop ffs_control_prop framework_status_prop gesture_prop graphics_config_writable_prop hal_dumpstate_config_prop sota_prop hwservicemanager_prop lmkd_prop locale_prop logd_prop logpersistd_logging_prop log_prop log_tag_prop lowpan_prop nfc_prop ota_prop permissive_mte_prop powerctl_prop qemu_hw_prop qemu_sf_lcd_density_prop radio_control_prop radio_prop serialno_prop surfaceflinger_color_prop system_prop system_user_mode_emulation_prop telephony_status_prop timezone_prop usb_control_prop vold_post_fs_data_prop wifi_hal_prop wifi_log_prop wifi_prop zram_control_prop default_prop rebootescrow_hal_prop virtual_face_hal_prop virtual_fingerprint_hal_prop persist_vendor_debug_wifi_prop vendor_default_prop ))
(typeattribute core_property_type)
(typeattributeset core_property_type (restorecon_prop usb_prop config_prop cppreopt_prop dalvik_prop debuggerd_prop dhcp_prop dumpstate_prop net_radio_prop pan_result_prop persist_debug_prop shell_prop vold_prop audio_prop debug_prop logd_prop nfc_prop ota_prop powerctl_prop radio_prop system_prop ))
(typeattribute log_property_type)
(typeattributeset log_property_type (log_prop log_tag_prop wifi_log_prop ))
(typeattribute extended_core_property_type)
(typeattribute system_property_type)
(expandtypeattribute (system_property_type) false)
(typeattributeset system_property_type (apexd_prop bootloader_boot_reason_prop device_config_activity_manager_native_boot_prop device_config_boot_count_prop device_config_input_native_boot_prop device_config_netd_native_prop device_config_reset_performed_prop firstboot_prop boottime_prop charger_prop cold_boot_done_prop ctl_adbd_prop ctl_apexd_prop ctl_bootanim_prop ctl_bugreport_prop ctl_console_prop ctl_dumpstate_prop ctl_fuse_prop ctl_gsid_prop ctl_interface_restart_prop ctl_interface_stop_prop ctl_mdnsd_prop ctl_restart_prop ctl_rildaemon_prop ctl_sigstop_prop dynamic_system_prop heapprofd_enabled_prop llkd_prop lpdumpd_prop mmc_prop mock_ota_prop net_dns_prop overlay_prop persistent_properties_ready_prop safemode_prop system_lmk_prop system_trace_prop test_boot_reason_prop time_prop traced_enabled_prop traced_lazy_prop aac_drc_prop adaptive_haptics_prop apex_ready_prop arm64_memtag_prop binder_cache_bluetooth_server_prop binder_cache_system_server_prop binder_cache_telephony_server_prop boot_status_prop bootanim_system_prop bootloader_prop boottime_public_prop bq_config_prop build_bootimage_prop build_prop composd_vm_art_prop device_config_aconfig_flags_prop device_config_camera_native_prop device_config_edgetpu_native_prop device_config_media_native_prop device_config_nnapi_native_prop device_config_runtime_native_boot_prop device_config_runtime_native_prop device_config_surface_flinger_native_boot_prop device_config_vendor_system_native_prop device_config_vendor_system_native_boot_prop drm_forcel3_prop fingerprint_prop gwp_asan_prop hal_instrumentation_prop userdebug_or_eng_prop init_service_status_prop libc_debug_prop module_sdkextensions_prop nnapi_ext_deny_product_prop persist_wm_debug_prop power_debug_prop property_service_version_prop provisioned_prop restorecon_prop retaildemo_prop servicemanager_prop smart_idle_maint_enabled_prop socket_hook_prop sqlite_log_prop surfaceflinger_display_prop system_boot_reason_prop system_jvmti_agent_prop traced_oome_heap_session_count_prop ab_update_gki_prop usb_prop userspace_reboot_exported_prop vold_status_prop vts_status_prop config_prop cppreopt_prop dalvik_prop debuggerd_prop device_logging_prop dhcp_prop dumpstate_prop exported3_system_prop exported_dumpstate_prop exported_secure_prop heapprofd_prop net_radio_prop pan_result_prop persist_debug_prop shell_prop test_harness_prop theme_prop use_memfd_prop vold_prop apexd_config_prop apexd_select_prop aaudio_config_prop apk_verity_prop audio_config_prop bootanim_config_prop bluetooth_config_prop build_attestation_prop build_config_prop build_odm_prop build_vendor_prop camera_calibration_prop camera_config_prop camera2_extensions_prop camerax_extensions_prop charger_config_prop codec2_config_prop composd_vm_vendor_prop cpu_variant_prop debugfs_restriction_prop drm_service_config_prop exported_camera_prop exported_config_prop exported_default_prop ffs_config_prop framework_watchdog_config_prop graphics_config_prop hdmi_config_prop hw_timeout_multiplier_prop hypervisor_prop hypervisor_restricted_prop incremental_prop keyguard_config_prop keystore_config_prop lmkd_config_prop media_config_prop media_variant_prop mediadrm_config_prop mm_events_config_prop oem_unlock_prop ota_build_prop packagemanager_config_prop quick_start_prop recovery_config_prop recovery_usb_config_prop sendbug_config_prop soc_prop storage_config_prop storagemanager_config_prop surfaceflinger_prop suspend_prop systemsound_config_prop telephony_config_prop threadnetwork_config_prop tombstone_config_prop usb_config_prop userspace_reboot_config_prop vehicle_hal_prop vendor_security_patch_level_prop vendor_socket_hook_prop virtual_ab_prop vndk_prop vts_config_prop vold_config_prop wifi_config_prop zram_config_prop zygote_config_prop dck_prop tuner_config_prop usb_uvc_enabled_prop setupwizard_mode_prop pm_archiving_enabled_prop adbd_config_prop audio_prop bluetooth_a2dp_offload_prop bluetooth_audio_hal_prop bluetooth_prop bpf_progs_loaded_prop charger_status_prop ctl_default_prop ctl_interface_start_prop ctl_start_prop ctl_stop_prop dalvik_config_prop dalvik_dynamic_config_prop dalvik_runtime_prop debug_prop device_config_memory_safety_native_boot_prop device_config_memory_safety_native_prop dumpstate_options_prop exported_system_prop exported_bluetooth_prop exported_overlay_prop exported_pm_prop future_pm_prop ffs_control_prop framework_status_prop gesture_prop graphics_config_writable_prop hal_dumpstate_config_prop sota_prop hwservicemanager_prop lmkd_prop locale_prop logd_prop logpersistd_logging_prop log_prop log_tag_prop lowpan_prop nfc_prop ota_prop permissive_mte_prop powerctl_prop qemu_hw_prop qemu_sf_lcd_density_prop radio_control_prop radio_prop serialno_prop surfaceflinger_color_prop system_prop system_user_mode_emulation_prop telephony_status_prop timezone_prop usb_control_prop vold_post_fs_data_prop wifi_hal_prop wifi_log_prop wifi_prop zram_control_prop default_prop ))
(typeattribute system_internal_property_type)
(expandtypeattribute (system_internal_property_type) false)
(typeattributeset system_internal_property_type (apexd_prop bootloader_boot_reason_prop device_config_activity_manager_native_boot_prop device_config_boot_count_prop device_config_input_native_boot_prop device_config_netd_native_prop device_config_reset_performed_prop firstboot_prop boottime_prop charger_prop cold_boot_done_prop ctl_adbd_prop ctl_apexd_prop ctl_bootanim_prop ctl_bugreport_prop ctl_console_prop ctl_dumpstate_prop ctl_fuse_prop ctl_gsid_prop ctl_interface_restart_prop ctl_interface_stop_prop ctl_mdnsd_prop ctl_restart_prop ctl_rildaemon_prop ctl_sigstop_prop dynamic_system_prop heapprofd_enabled_prop llkd_prop lpdumpd_prop mmc_prop mock_ota_prop net_dns_prop overlay_prop persistent_properties_ready_prop safemode_prop system_lmk_prop system_trace_prop test_boot_reason_prop time_prop traced_enabled_prop traced_lazy_prop default_prop ))
(typeattribute system_restricted_property_type)
(expandtypeattribute (system_restricted_property_type) false)
(typeattributeset system_restricted_property_type (aac_drc_prop adaptive_haptics_prop apex_ready_prop arm64_memtag_prop binder_cache_bluetooth_server_prop binder_cache_system_server_prop binder_cache_telephony_server_prop boot_status_prop bootanim_system_prop bootloader_prop boottime_public_prop bq_config_prop build_bootimage_prop build_prop composd_vm_art_prop device_config_aconfig_flags_prop device_config_camera_native_prop device_config_edgetpu_native_prop device_config_media_native_prop device_config_nnapi_native_prop device_config_runtime_native_boot_prop device_config_runtime_native_prop device_config_surface_flinger_native_boot_prop device_config_vendor_system_native_prop device_config_vendor_system_native_boot_prop drm_forcel3_prop fingerprint_prop gwp_asan_prop hal_instrumentation_prop userdebug_or_eng_prop init_service_status_prop libc_debug_prop module_sdkextensions_prop nnapi_ext_deny_product_prop persist_wm_debug_prop power_debug_prop property_service_version_prop provisioned_prop restorecon_prop retaildemo_prop servicemanager_prop smart_idle_maint_enabled_prop socket_hook_prop sqlite_log_prop surfaceflinger_display_prop system_boot_reason_prop system_jvmti_agent_prop traced_oome_heap_session_count_prop ab_update_gki_prop usb_prop userspace_reboot_exported_prop vold_status_prop vts_status_prop config_prop cppreopt_prop dalvik_prop debuggerd_prop device_logging_prop dhcp_prop dumpstate_prop exported3_system_prop exported_dumpstate_prop exported_secure_prop heapprofd_prop net_radio_prop pan_result_prop persist_debug_prop shell_prop test_harness_prop theme_prop use_memfd_prop vold_prop ))
(typeattribute system_public_property_type)
(expandtypeattribute (system_public_property_type) false)
(typeattributeset system_public_property_type (apexd_config_prop apexd_select_prop aaudio_config_prop apk_verity_prop audio_config_prop bootanim_config_prop bluetooth_config_prop build_attestation_prop build_config_prop build_odm_prop build_vendor_prop camera_calibration_prop camera_config_prop camera2_extensions_prop camerax_extensions_prop charger_config_prop codec2_config_prop composd_vm_vendor_prop cpu_variant_prop debugfs_restriction_prop drm_service_config_prop exported_camera_prop exported_config_prop exported_default_prop ffs_config_prop framework_watchdog_config_prop graphics_config_prop hdmi_config_prop hw_timeout_multiplier_prop hypervisor_prop hypervisor_restricted_prop incremental_prop keyguard_config_prop keystore_config_prop lmkd_config_prop media_config_prop media_variant_prop mediadrm_config_prop mm_events_config_prop oem_unlock_prop ota_build_prop packagemanager_config_prop quick_start_prop recovery_config_prop recovery_usb_config_prop sendbug_config_prop soc_prop storage_config_prop storagemanager_config_prop surfaceflinger_prop suspend_prop systemsound_config_prop telephony_config_prop threadnetwork_config_prop tombstone_config_prop usb_config_prop userspace_reboot_config_prop vehicle_hal_prop vendor_security_patch_level_prop vendor_socket_hook_prop virtual_ab_prop vndk_prop vts_config_prop vold_config_prop wifi_config_prop zram_config_prop zygote_config_prop dck_prop tuner_config_prop usb_uvc_enabled_prop setupwizard_mode_prop pm_archiving_enabled_prop adbd_config_prop audio_prop bluetooth_a2dp_offload_prop bluetooth_audio_hal_prop bluetooth_prop bpf_progs_loaded_prop charger_status_prop ctl_default_prop ctl_interface_start_prop ctl_start_prop ctl_stop_prop dalvik_config_prop dalvik_dynamic_config_prop dalvik_runtime_prop debug_prop device_config_memory_safety_native_boot_prop device_config_memory_safety_native_prop dumpstate_options_prop exported_system_prop exported_bluetooth_prop exported_overlay_prop exported_pm_prop future_pm_prop ffs_control_prop framework_status_prop gesture_prop graphics_config_writable_prop hal_dumpstate_config_prop sota_prop hwservicemanager_prop lmkd_prop locale_prop logd_prop logpersistd_logging_prop log_prop log_tag_prop lowpan_prop nfc_prop ota_prop permissive_mte_prop powerctl_prop qemu_hw_prop qemu_sf_lcd_density_prop radio_control_prop radio_prop serialno_prop surfaceflinger_color_prop system_prop system_user_mode_emulation_prop telephony_status_prop timezone_prop usb_control_prop vold_post_fs_data_prop wifi_hal_prop wifi_log_prop wifi_prop zram_control_prop ))
(typeattribute keystore2_key_type)
(typeattributeset keystore2_key_type (keystore wifi_key ))
(typeattribute vendor_property_type)
(expandtypeattribute (vendor_property_type) false)
(typeattributeset vendor_property_type (rebootescrow_hal_prop virtual_face_hal_prop virtual_fingerprint_hal_prop persist_vendor_debug_wifi_prop vendor_default_prop ))
(typeattribute vendor_internal_property_type)
(expandtypeattribute (vendor_internal_property_type) false)
(typeattributeset vendor_internal_property_type (rebootescrow_hal_prop virtual_face_hal_prop virtual_fingerprint_hal_prop vendor_default_prop ))
(typeattribute vendor_restricted_property_type)
(expandtypeattribute (vendor_restricted_property_type) false)
(typeattribute vendor_public_property_type)
(expandtypeattribute (vendor_public_property_type) false)
(typeattributeset vendor_public_property_type (persist_vendor_debug_wifi_prop ))
(typeattribute system_server_service)
(typeattributeset system_server_service (device_config_updatable_service ondevicepersonalization_system_service profiling_service accessibility_service account_service activity_service activity_task_service adb_service adservices_manager_service alarm_service app_binding_service app_hibernation_service app_integrity_service app_prediction_service app_search_service appops_service appwidget_service archive_service assetatlas_service attestation_verification_service audio_service auth_service autofill_service backup_service batterystats_service battery_service binder_calls_stats_service blob_store_service bluetooth_manager_service broadcastradio_service cacheinfo_service cameraproxy_service clipboard_service cloudsearch_service contexthub_service contextual_search_service crossprofileapps_service IProxyService_service companion_device_service connectivity_native_service connectivity_service connmetrics_service consumer_ir_service content_capture_service content_suggestions_service content_service country_detector_service coverage_service cpuinfo_service cpu_monitor_service credential_service dataloader_manager_service dbinfo_service device_config_service device_policy_service device_state_service deviceidle_service device_identifiers_service devicestoragemonitor_service diskstats_service display_service domain_verification_service color_display_service ecm_enhanced_confirmation_service external_vibrator_service file_integrity_service font_service netd_listener_service network_watchlist_service devicelock_service DockObserver_service dreams_service dropbox_service ethernet_service biometric_service bugreport_service platform_compat_service face_service fingerprint_service fwk_altitude_service fwk_stats_service fwk_sensor_service fwk_vibrator_control_service game_service gfxinfo_service gnss_time_update_service grammatical_inflection_service graphicsstats_service hardware_service hardware_properties_service hdmi_control_service healthconnect_service hint_service imms_service incremental_service input_method_service input_service ipsec_service iris_service jobscheduler_service launcherapps_service legacy_permission_service light_service locale_service location_service location_time_zone_manager_service lock_settings_service looper_stats_service media_communication_service media_metrics_service media_projection_service media_router_service media_session_service meminfo_service memtrackproxy_service midi_service mount_service music_recognition_service nearby_service netpolicy_service netstats_service network_management_service network_score_service network_stack_service network_time_update_service notification_service oem_lock_service otadexopt_service overlay_service pac_proxy_service package_service package_native_service people_service permission_service permissionmgr_service permission_checker_service persistent_data_block_service pinner_service powerstats_service power_service print_service processinfo_service procstats_service reboot_readiness_service recovery_service registry_service remote_auth_service remote_provisioning_service resources_manager_service restrictions_service role_service rollback_service runtime_service rttmanager_service samplingprofiler_service scheduling_policy_service search_service search_ui_service sec_key_att_app_id_provider_service security_state_service selection_toolbar_service sensitive_content_protection_service sensorservice_service sensor_privacy_service serial_service servicediscovery_service settings_service shortcut_service slice_service smartspace_service statusbar_service storagestats_service sdk_sandbox_service system_config_service system_server_dumper_service system_update_service soundtrigger_middleware_service speech_recognition_service tare_service task_service testharness_service textclassification_service textservices_service texttospeech_service telecom_service thermal_service threadnetwork_service timedetector_service timezonedetector_service translation_service trust_service tv_ad_service tv_iapp_service tv_input_service tv_tuner_resource_mgr_service uimode_service updatelock_service uri_grants_service usagestats_service usb_service user_service uwb_service vcn_management_service vibrator_service vibrator_manager_service virtual_device_service virtual_device_native_service voiceinteraction_service vpn_management_service vr_manager_service wallpaper_service wallpaper_effects_generation_service webviewupdate_service wifip2p_service wifiscanner_service wifi_service wifiaware_service window_service inputflinger_service tethering_service emergency_affordance_service ))
(typeattribute app_api_service)
(typeattributeset app_api_service (batteryproperties_service gatekeeper_service gpu_service credstore_service mediatranscoding_service profiling_service surfaceflinger_service accessibility_service account_service activity_service activity_task_service alarm_service app_hibernation_service app_prediction_service app_search_service appops_service appwidget_service archive_service assetatlas_service attestation_verification_service audio_service auth_service autofill_service backup_service batterystats_service blob_store_service bluetooth_manager_service broadcastradio_service clipboard_service cloudsearch_service contexthub_service contextual_search_service crossprofileapps_service IProxyService_service companion_device_service connectivity_native_service connectivity_service connmetrics_service consumer_ir_service content_capture_service content_suggestions_service content_service country_detector_service credential_service device_policy_service device_state_service deviceidle_service device_identifiers_service display_service domain_verification_service color_display_service ecm_enhanced_confirmation_service file_integrity_service font_service devicelock_service dreams_service dropbox_service ethernet_service biometric_service bugreport_service platform_compat_service face_service fingerprint_service fwk_stats_service game_service grammatical_inflection_service graphicsstats_service hardware_properties_service hdmi_control_service healthconnect_service hint_service imms_service input_method_service input_service ipsec_service iris_service jobscheduler_service launcherapps_service legacy_permission_service light_service locale_service location_service lock_settings_service media_communication_service media_metrics_service media_projection_service media_router_service media_session_service memtrackproxy_service midi_service mount_service music_recognition_service nearby_service netpolicy_service netstats_service network_management_service notification_service pac_proxy_service package_service package_native_service people_service permission_service permissionmgr_service permission_checker_service powerstats_service power_service print_service procstats_service reboot_readiness_service registry_service remote_auth_service restrictions_service role_service rollback_service rttmanager_service search_service search_ui_service sec_key_att_app_id_provider_service security_state_service selection_toolbar_service sensitive_content_protection_service sensorservice_service sensor_privacy_service servicediscovery_service settings_service shortcut_service slice_service smartspace_service statusbar_service storagestats_service sdk_sandbox_service speech_recognition_service tare_service textclassification_service textservices_service texttospeech_service telecom_service thermal_service threadnetwork_service timedetector_service timezonedetector_service translation_service trust_service tv_ad_service tv_iapp_service tv_input_service tv_tuner_resource_mgr_service uimode_service uri_grants_service usagestats_service usb_service user_service uwb_service vcn_management_service vibrator_service vibrator_manager_service virtual_device_service virtual_device_native_service voiceinteraction_service vpn_management_service wallpaper_service wallpaper_effects_generation_service webviewupdate_service wifip2p_service wifi_service wifiaware_service tethering_service ))
(typeattribute ephemeral_app_api_service)
(typeattributeset ephemeral_app_api_service (batteryproperties_service gpu_service surfaceflinger_service accessibility_service account_service activity_service activity_task_service alarm_service app_search_service appops_service appwidget_service assetatlas_service audio_service autofill_service backup_service batterystats_service bluetooth_manager_service clipboard_service IProxyService_service companion_device_service connectivity_native_service connectivity_service connmetrics_service consumer_ir_service content_capture_service content_suggestions_service content_service country_detector_service credential_service deviceidle_service device_identifiers_service display_service font_service devicelock_service dreams_service dropbox_service platform_compat_service game_service grammatical_inflection_service graphicsstats_service hardware_properties_service hint_service imms_service input_method_service input_service ipsec_service jobscheduler_service launcherapps_service legacy_permission_service light_service locale_service location_service media_communication_service media_metrics_service media_projection_service media_router_service media_session_service memtrackproxy_service midi_service mount_service music_recognition_service netpolicy_service netstats_service network_management_service notification_service package_service package_native_service permission_service permissionmgr_service permission_checker_service power_service print_service procstats_service registry_service restrictions_service rttmanager_service search_service security_state_service selection_toolbar_service sensorservice_service sensor_privacy_service servicediscovery_service settings_service statusbar_service storagestats_service speech_recognition_service textclassification_service textservices_service texttospeech_service telecom_service thermal_service timedetector_service translation_service tv_ad_service tv_iapp_service tv_input_service uimode_service uri_grants_service usagestats_service user_service vcn_management_service vibrator_service vibrator_manager_service virtual_device_native_service voiceinteraction_service webviewupdate_service tethering_service ))
(typeattribute system_api_service)
(typeattributeset system_api_service (device_config_updatable_service ondevicepersonalization_system_service adb_service adservices_manager_service app_hibernation_service app_integrity_service cacheinfo_service cpuinfo_service credential_service dbinfo_service device_state_service diskstats_service color_display_service gfxinfo_service lock_settings_service meminfo_service network_score_service oem_lock_service overlay_service persistent_data_block_service resources_manager_service serial_service system_config_service system_server_dumper_service updatelock_service wifiscanner_service window_service inputflinger_service ))
(typeattribute protected_service)
(typeattributeset protected_service (hal_audio_service hal_authgraph_service hal_authsecret_service hal_bluetooth_service hal_bootctl_service hal_broadcastradio_service hal_camera_service hal_can_controller_service hal_confirmationui_service hal_contexthub_service hal_dumpstate_service hal_evs_service hal_face_service hal_fastboot_service hal_fingerprint_service hal_gnss_service hal_graphics_composer_service hal_health_service hal_health_storage_service hal_identity_service hal_input_processor_service hal_ir_service hal_ivn_service hal_keymint_service hal_light_service hal_macsec_service hal_memtrack_service hal_nfc_service hal_oemlock_service hal_power_service hal_power_stats_service hal_radio_service hal_rebootescrow_service hal_remoteaccess_service hal_remotelyprovisionedcomponent_avf_service hal_remotelyprovisionedcomponent_service hal_sensors_service hal_secretkeeper_service hal_secureclock_service hal_secure_element_service hal_sharedsecret_service hal_system_suspend_service hal_tetheroffload_service hal_thermal_service hal_tv_hdmi_cec_service hal_tv_hdmi_connection_service hal_tv_hdmi_earc_service hal_tv_input_service hal_threadnetwork_service hal_tv_tuner_service hal_usb_service hal_usb_gadget_service hal_uwb_service hal_vehicle_service hal_vibrator_service hal_weaver_service hal_nlinterceptor_service hal_wifi_service hal_wifi_hostapd_service hal_wifi_supplicant_service hal_gatekeeper_service ))
(typeattribute service_manager_type)
(typeattributeset service_manager_type (aidl_lazy_test_service apc_service apex_service artd_service artd_pre_reboot_service audioserver_service authorization_service batteryproperties_service bluetooth_service cameraserver_service fwk_camera_service default_android_service device_config_updatable_service dexopt_chroot_setup_service dnsresolver_service drmserver_service dumpstate_service evsmanagerd_service fingerprintd_service fwk_automotive_display_service gatekeeper_service gpu_service idmap_service incident_service installd_service credstore_service keystore_compat_hal_service keystore_maintenance_service keystore_metrics_service keystore_service legacykeystore_service lpdump_service mdns_service mediaserver_service mediametrics_service mediaextractor_service mediadrmserver_service mediatranscoding_service netd_service nfc_service ondevicepersonalization_system_service ot_daemon_service profiling_service radio_service secure_element_service service_manager_service storaged_service surfaceflinger_service system_app_service system_net_netd_service system_suspend_control_internal_service system_suspend_control_service update_engine_service update_engine_stable_service virtualization_service virtual_camera_service virtual_touchpad_service vold_service vr_hwc_service vrflinger_vsync_service accessibility_service account_service activity_service activity_task_service adb_service adservices_manager_service alarm_service app_binding_service app_hibernation_service app_integrity_service app_prediction_service app_search_service appops_service appwidget_service archive_service assetatlas_service attestation_verification_service audio_service auth_service autofill_service backup_service batterystats_service battery_service binder_calls_stats_service blob_store_service bluetooth_manager_service broadcastradio_service cacheinfo_service cameraproxy_service clipboard_service cloudsearch_service contexthub_service contextual_search_service crossprofileapps_service IProxyService_service companion_device_service connectivity_native_service connectivity_service connmetrics_service consumer_ir_service content_capture_service content_suggestions_service content_service country_detector_service coverage_service cpuinfo_service cpu_monitor_service credential_service dataloader_manager_service dbinfo_service device_config_service device_policy_service device_state_service deviceidle_service device_identifiers_service devicestoragemonitor_service diskstats_service display_service domain_verification_service color_display_service ecm_enhanced_confirmation_service external_vibrator_service file_integrity_service font_service netd_listener_service network_watchlist_service devicelock_service DockObserver_service dreams_service dropbox_service ethernet_service biometric_service bugreport_service platform_compat_service face_service fingerprint_service fwk_altitude_service fwk_stats_service fwk_sensor_service fwk_vibrator_control_service game_service gfxinfo_service gnss_time_update_service grammatical_inflection_service graphicsstats_service hardware_service hardware_properties_service hdmi_control_service healthconnect_service hint_service imms_service incremental_service input_method_service input_service ipsec_service iris_service jobscheduler_service launcherapps_service legacy_permission_service light_service locale_service location_service location_time_zone_manager_service lock_settings_service looper_stats_service media_communication_service media_metrics_service media_projection_service media_router_service media_session_service meminfo_service memtrackproxy_service midi_service mount_service music_recognition_service nearby_service netpolicy_service netstats_service network_management_service network_score_service network_stack_service network_time_update_service notification_service oem_lock_service otadexopt_service overlay_service pac_proxy_service package_service package_native_service people_service permission_service permissionmgr_service permission_checker_service persistent_data_block_service pinner_service powerstats_service power_service print_service processinfo_service procstats_service reboot_readiness_service recovery_service registry_service remote_auth_service remote_provisioning_service resources_manager_service restrictions_service role_service rollback_service runtime_service rttmanager_service samplingprofiler_service scheduling_policy_service search_service search_ui_service sec_key_att_app_id_provider_service security_state_service selection_toolbar_service sensitive_content_protection_service sensorservice_service sensor_privacy_service serial_service servicediscovery_service settings_service shortcut_service slice_service smartspace_service statusbar_service storagestats_service sdk_sandbox_service system_config_service system_server_dumper_service system_update_service soundtrigger_middleware_service speech_recognition_service tare_service task_service testharness_service textclassification_service textservices_service texttospeech_service telecom_service thermal_service threadnetwork_service timedetector_service timezonedetector_service translation_service trust_service tv_ad_service tv_iapp_service tv_input_service tv_tuner_resource_mgr_service uimode_service updatelock_service uri_grants_service usagestats_service usb_service user_service uwb_service vcn_management_service vibrator_service vibrator_manager_service virtual_device_service virtual_device_native_service voiceinteraction_service vpn_management_service vr_manager_service wallpaper_service wallpaper_effects_generation_service webviewupdate_service wifip2p_service wifiscanner_service wifi_service wifinl80211_service wifiaware_service window_service inputflinger_service tethering_service emergency_affordance_service hal_audio_service hal_audiocontrol_service hal_authgraph_service hal_authsecret_service hal_bluetooth_service hal_bootctl_service hal_broadcastradio_service hal_camera_service hal_can_controller_service hal_cas_service hal_codec2_service hal_confirmationui_service hal_contexthub_service hal_drm_service hal_dumpstate_service hal_evs_service hal_face_service hal_fastboot_service hal_fingerprint_service hal_gnss_service hal_graphics_allocator_service hal_graphics_composer_service hal_graphics_mapper_service hal_health_service hal_health_storage_service hal_identity_service hal_input_processor_service hal_ir_service hal_ivn_service hal_keymint_service hal_light_service hal_macsec_service hal_memtrack_service hal_neuralnetworks_service hal_nfc_service hal_oemlock_service hal_power_service hal_power_stats_service hal_radio_service hal_rebootescrow_service hal_remoteaccess_service hal_remotelyprovisionedcomponent_avf_service hal_remotelyprovisionedcomponent_service hal_sensors_service hal_secretkeeper_service hal_secureclock_service hal_secure_element_service hal_sharedsecret_service hal_system_suspend_service hal_tetheroffload_service hal_thermal_service hal_tv_hdmi_cec_service hal_tv_hdmi_connection_service hal_tv_hdmi_earc_service hal_tv_input_service hal_threadnetwork_service hal_tv_tuner_service hal_usb_service hal_usb_gadget_service hal_uwb_service hal_vehicle_service hal_vibrator_service hal_weaver_service hal_nlinterceptor_service hal_wifi_service hal_wifi_hostapd_service hal_wifi_supplicant_service hal_gatekeeper_service ))
(typeattribute hwservice_manager_type)
(typeattributeset hwservice_manager_type (default_android_hwservice fwk_camera_hwservice fwk_display_hwservice fwk_scheduler_hwservice fwk_sensor_hwservice fwk_stats_hwservice fwk_automotive_display_hwservice hal_atrace_hwservice hal_audio_hwservice hal_audiocontrol_hwservice hal_authsecret_hwservice hal_bluetooth_hwservice hal_bootctl_hwservice hal_broadcastradio_hwservice hal_camera_hwservice hal_can_bus_hwservice hal_can_controller_hwservice hal_confirmationui_hwservice hal_contexthub_hwservice hal_dumpstate_hwservice hal_evs_hwservice hal_face_hwservice hal_fingerprint_hwservice hal_gatekeeper_hwservice hal_gnss_hwservice hal_graphics_composer_hwservice hal_health_hwservice hal_health_storage_hwservice hal_input_classifier_hwservice hal_ir_hwservice hal_keymaster_hwservice hal_light_hwservice hal_lowpan_hwservice hal_memtrack_hwservice hal_nfc_hwservice hal_oemlock_hwservice hal_power_hwservice hal_power_stats_hwservice hal_secure_element_hwservice hal_sensors_hwservice hal_telephony_hwservice hal_tetheroffload_hwservice hal_thermal_hwservice hal_tv_cec_hwservice hal_tv_input_hwservice hal_tv_tuner_hwservice hal_usb_gadget_hwservice hal_usb_hwservice hal_vehicle_hwservice hal_vibrator_hwservice hal_vr_hwservice hal_weaver_hwservice hal_wifi_hostapd_hwservice hal_wifi_hwservice hal_wifi_supplicant_hwservice system_net_netd_hwservice system_suspend_hwservice system_wifi_keystore_hwservice fwk_bufferhub_hwservice hal_cas_hwservice hal_codec2_hwservice hal_configstore_ISurfaceFlingerConfigs hal_drm_hwservice hal_graphics_allocator_hwservice hal_graphics_mapper_hwservice hal_neuralnetworks_hwservice hal_omx_hwservice hal_renderscript_hwservice hidl_allocator_hwservice hidl_base_hwservice hidl_manager_hwservice hidl_memory_hwservice hidl_token_hwservice ))
(typeattribute same_process_hwservice)
(typeattributeset same_process_hwservice (hal_graphics_mapper_hwservice hal_renderscript_hwservice ))
(typeattribute coredomain_hwservice)
(typeattributeset coredomain_hwservice (fwk_camera_hwservice fwk_display_hwservice fwk_scheduler_hwservice fwk_sensor_hwservice fwk_stats_hwservice fwk_automotive_display_hwservice system_net_netd_hwservice system_suspend_hwservice system_wifi_keystore_hwservice fwk_bufferhub_hwservice hidl_allocator_hwservice hidl_manager_hwservice hidl_memory_hwservice hidl_token_hwservice ))
(typeattribute protected_hwservice)
(typeattributeset protected_hwservice (default_android_hwservice fwk_camera_hwservice fwk_display_hwservice fwk_scheduler_hwservice fwk_sensor_hwservice fwk_stats_hwservice fwk_automotive_display_hwservice hal_atrace_hwservice hal_audio_hwservice hal_audiocontrol_hwservice hal_authsecret_hwservice hal_bluetooth_hwservice hal_bootctl_hwservice hal_broadcastradio_hwservice hal_camera_hwservice hal_can_bus_hwservice hal_can_controller_hwservice hal_confirmationui_hwservice hal_contexthub_hwservice hal_dumpstate_hwservice hal_evs_hwservice hal_face_hwservice hal_fingerprint_hwservice hal_gatekeeper_hwservice hal_gnss_hwservice hal_graphics_composer_hwservice hal_health_hwservice hal_health_storage_hwservice hal_input_classifier_hwservice hal_ir_hwservice hal_keymaster_hwservice hal_light_hwservice hal_lowpan_hwservice hal_memtrack_hwservice hal_nfc_hwservice hal_oemlock_hwservice hal_power_hwservice hal_power_stats_hwservice hal_secure_element_hwservice hal_sensors_hwservice hal_telephony_hwservice hal_tetheroffload_hwservice hal_thermal_hwservice hal_tv_cec_hwservice hal_tv_input_hwservice hal_tv_tuner_hwservice hal_usb_gadget_hwservice hal_usb_hwservice hal_vehicle_hwservice hal_vibrator_hwservice hal_vr_hwservice hal_weaver_hwservice hal_wifi_hostapd_hwservice hal_wifi_hwservice hal_wifi_supplicant_hwservice system_net_netd_hwservice system_suspend_hwservice system_wifi_keystore_hwservice ))
(typeattribute vndservice_manager_type)
(typeattributeset vndservice_manager_type (service_manager_vndservice default_android_vndservice ))
(typeattribute hal_service_type)
(typeattributeset hal_service_type (hal_audio_service hal_audiocontrol_service hal_authgraph_service hal_authsecret_service hal_bluetooth_service hal_bootctl_service hal_broadcastradio_service hal_camera_service hal_can_controller_service hal_cas_service hal_codec2_service hal_confirmationui_service hal_contexthub_service hal_drm_service hal_dumpstate_service hal_evs_service hal_face_service hal_fastboot_service hal_fingerprint_service hal_gnss_service hal_graphics_allocator_service hal_graphics_composer_service hal_graphics_mapper_service hal_health_service hal_health_storage_service hal_identity_service hal_input_processor_service hal_ir_service hal_ivn_service hal_keymint_service hal_light_service hal_macsec_service hal_memtrack_service hal_neuralnetworks_service hal_nfc_service hal_oemlock_service hal_power_service hal_power_stats_service hal_radio_service hal_rebootescrow_service hal_remoteaccess_service hal_remotelyprovisionedcomponent_avf_service hal_remotelyprovisionedcomponent_service hal_sensors_service hal_secretkeeper_service hal_secureclock_service hal_secure_element_service hal_sharedsecret_service hal_system_suspend_service hal_tetheroffload_service hal_thermal_service hal_tv_hdmi_cec_service hal_tv_hdmi_connection_service hal_tv_hdmi_earc_service hal_tv_input_service hal_threadnetwork_service hal_tv_tuner_service hal_usb_service hal_usb_gadget_service hal_uwb_service hal_vehicle_service hal_vibrator_service hal_weaver_service hal_nlinterceptor_service hal_wifi_service hal_wifi_hostapd_service hal_wifi_supplicant_service hal_gatekeeper_service ))
(typeattribute mlstrustedsubject)
(typeattributeset mlstrustedsubject (bufferhubd drmserver dumpstate pdx_display_client_endpoint_socket pdx_display_manager_endpoint_socket pdx_display_screenshot_endpoint_socket pdx_display_vsync_endpoint_socket pdx_performance_client_endpoint_socket pdx_bufferhub_client_endpoint_socket hwservicemanager init installd kernel keystore llkd lmkd logd mediadrmserver mediaextractor mediaserver netd performanced radio rss_hwm_reset runas servicemanager shell simpleperf_app_runner statsd tombstoned traced traced_probes uncrypt vendor_init vold ))
(typeattribute mlstrustedobject)
(typeattributeset mlstrustedobject (ashmem_device ashmem_libcutils_device binder_device hwbinder_device pmsg_device gpu_device mtp_device ptmx_device kmsg_device null_device random_device owntty_device zero_device fuse_device ion_device dmabuf_heap_device dmabuf_system_heap_device dmabuf_system_secure_heap_device uhid_device tun_device usbaccessory_device usb_device proc_qtaguid_ctrl proc_qtaguid_stat selinuxfs cgroup sysfs sysfs_bluetooth_writable sysfs_kernel_notes sysfs_nfc_power_writable inotify devpts fuse fuseblk sdcardfs vfat exfat debugfs_trace_marker debugfs_tracing debugfs_tracing_debug functionfs anr_data_file tombstone_data_file apk_tmp_file apk_private_tmp_file ota_package_file user_profile_data_file shell_data_file heapdump_data_file ringtone_file media_rw_data_file radio_data_file shared_relro_file trace_data_file method_trace_data_file system_app_data_file cache_file cache_backup_file cache_recovery_file wallpaper_file shortcut_manager_icons asec_apk_file backup_data_file app_fuse_file dnsproxyd_socket fwmarkd_socket logd_socket logdr_socket logdw_socket mdnsd_socket property_socket statsdw_socket system_ndebug_socket system_unsolzygote_socket tombstoned_crash_socket tombstoned_java_trace_socket traced_consumer_socket traced_perf_socket traced_producer_socket heapprofd_socket pdx_display_client_endpoint_socket pdx_display_manager_endpoint_socket pdx_display_screenshot_endpoint_socket pdx_display_vsync_endpoint_socket pdx_performance_client_endpoint_socket pdx_bufferhub_client_endpoint_socket system_server_tmpfs ))
(typeattribute appdomain)
(typeattribute untrusted_app_all)
(typeattribute isolated_app_all)
(typeattribute isolated_compute_allowed_service)
(typeattributeset isolated_compute_allowed_service (audioserver_service cameraserver_service mediaserver_service content_capture_service device_state_service speech_recognition_service hal_codec2_service ))
(typeattribute isolated_compute_allowed_device)
(typeattributeset isolated_compute_allowed_device (hwbinder_device ion_device dmabuf_system_heap_device ))
(typeattribute netdomain)
(typeattributeset netdomain (dhcp dnsmasq drmserver dumpstate mediadrmserver mediaserver netd radio shell update_engine ))
(typeattribute bluetoothdomain)
(typeattributeset bluetoothdomain (radio ))
(typeattribute binderservicedomain)
(typeattributeset binderservicedomain (cameraserver credstore drmserver gatekeeperd idmap inputflinger keystore mediadrmserver mediaextractor mediametrics mediaserver radio virtual_touchpad ))
(typeattribute bpfdomain)
(expandtypeattribute (bpfdomain) false)
(typeattributeset bpfdomain (charger_vendor ))
(typeattribute update_engine_common)
(typeattributeset update_engine_common (update_engine ))
(typeattribute coredomain)
(typeattributeset coredomain (atrace bpfloader e2fs flags_health_check heapprofd perfetto rs rss_hwm_reset traced traced_probes vold_prepare_subdirs ))
(typeattribute vendor_hwservice_type)
(typeattribute coredomain_socket)
(expandtypeattribute (coredomain_socket) false)
(typeattributeset coredomain_socket (adbd_socket bluetooth_socket dnsproxyd_socket dumpstate_socket fwmarkd_socket lmkd_socket logd_socket logdr_socket logdw_socket mdns_socket mdnsd_socket misc_logd_file mtpd_socket ot_daemon_socket property_socket racoon_socket recovery_socket snapuserd_socket snapuserd_proxy_socket statsdw_socket system_wpa_socket system_ndebug_socket system_unsolzygote_socket tombstoned_crash_socket tombstoned_intercept_socket traced_consumer_socket traced_perf_socket traced_producer_socket uncrypt_socket zygote_socket heapprofd_socket pdx_display_client_endpoint_socket pdx_display_client_channel_socket pdx_display_manager_endpoint_socket pdx_display_manager_channel_socket pdx_display_screenshot_endpoint_socket pdx_display_screenshot_channel_socket pdx_display_vsync_endpoint_socket pdx_display_vsync_channel_socket pdx_performance_client_endpoint_socket pdx_performance_client_channel_socket pdx_bufferhub_client_endpoint_socket pdx_bufferhub_client_channel_socket ))
(typeattribute socket_between_core_and_vendor_violators)
(expandtypeattribute (socket_between_core_and_vendor_violators) false)
(typeattribute vendor_executes_system_violators)
(expandtypeattribute (vendor_executes_system_violators) false)
(typeattribute data_between_core_and_vendor_violators)
(expandtypeattribute (data_between_core_and_vendor_violators) false)
(typeattribute system_executes_vendor_violators)
(expandtypeattribute (system_executes_vendor_violators) false)
(typeattribute system_writes_vendor_properties_violators)
(expandtypeattribute (system_writes_vendor_properties_violators) false)
(typeattribute system_writes_mnt_vendor_violators)
(expandtypeattribute (system_writes_mnt_vendor_violators) false)
(typeattribute untrusted_app_visible_hwservice_violators)
(expandtypeattribute (untrusted_app_visible_hwservice_violators) false)
(typeattribute untrusted_app_visible_halserver_violators)
(expandtypeattribute (untrusted_app_visible_halserver_violators) false)
(typeattribute pdx_endpoint_dir_type)
(typeattributeset pdx_endpoint_dir_type (pdx_display_dir pdx_performance_dir pdx_bufferhub_dir ))
(typeattribute pdx_endpoint_socket_type)
(expandtypeattribute (pdx_endpoint_socket_type) false)
(typeattributeset pdx_endpoint_socket_type (pdx_display_client_endpoint_socket pdx_display_manager_endpoint_socket pdx_display_screenshot_endpoint_socket pdx_display_vsync_endpoint_socket pdx_performance_client_endpoint_socket pdx_bufferhub_client_endpoint_socket ))
(typeattribute pdx_channel_socket_type)
(expandtypeattribute (pdx_channel_socket_type) false)
(typeattributeset pdx_channel_socket_type (pdx_display_client_channel_socket pdx_display_manager_channel_socket pdx_display_screenshot_channel_socket pdx_display_vsync_channel_socket pdx_performance_client_channel_socket pdx_bufferhub_client_channel_socket ))
(typeattribute pdx_display_client_endpoint_dir_type)
(typeattributeset pdx_display_client_endpoint_dir_type (pdx_display_dir ))
(typeattribute pdx_display_client_endpoint_socket_type)
(typeattributeset pdx_display_client_endpoint_socket_type (pdx_display_client_endpoint_socket ))
(typeattribute pdx_display_client_channel_socket_type)
(typeattributeset pdx_display_client_channel_socket_type (pdx_display_client_channel_socket ))
(typeattribute pdx_display_client_server_type)
(typeattribute pdx_display_manager_endpoint_dir_type)
(typeattributeset pdx_display_manager_endpoint_dir_type (pdx_display_dir ))
(typeattribute pdx_display_manager_endpoint_socket_type)
(typeattributeset pdx_display_manager_endpoint_socket_type (pdx_display_manager_endpoint_socket ))
(typeattribute pdx_display_manager_channel_socket_type)
(typeattributeset pdx_display_manager_channel_socket_type (pdx_display_manager_channel_socket ))
(typeattribute pdx_display_manager_server_type)
(typeattribute pdx_display_screenshot_endpoint_dir_type)
(typeattributeset pdx_display_screenshot_endpoint_dir_type (pdx_display_dir ))
(typeattribute pdx_display_screenshot_endpoint_socket_type)
(typeattributeset pdx_display_screenshot_endpoint_socket_type (pdx_display_screenshot_endpoint_socket ))
(typeattribute pdx_display_screenshot_channel_socket_type)
(typeattributeset pdx_display_screenshot_channel_socket_type (pdx_display_screenshot_channel_socket ))
(typeattribute pdx_display_screenshot_server_type)
(typeattribute pdx_display_vsync_endpoint_dir_type)
(typeattributeset pdx_display_vsync_endpoint_dir_type (pdx_display_dir ))
(typeattribute pdx_display_vsync_endpoint_socket_type)
(typeattributeset pdx_display_vsync_endpoint_socket_type (pdx_display_vsync_endpoint_socket ))
(typeattribute pdx_display_vsync_channel_socket_type)
(typeattributeset pdx_display_vsync_channel_socket_type (pdx_display_vsync_channel_socket ))
(typeattribute pdx_display_vsync_server_type)
(typeattribute pdx_performance_client_endpoint_dir_type)
(typeattributeset pdx_performance_client_endpoint_dir_type (pdx_performance_dir ))
(typeattribute pdx_performance_client_endpoint_socket_type)
(typeattributeset pdx_performance_client_endpoint_socket_type (pdx_performance_client_endpoint_socket ))
(typeattribute pdx_performance_client_channel_socket_type)
(typeattributeset pdx_performance_client_channel_socket_type (pdx_performance_client_channel_socket ))
(typeattribute pdx_performance_client_server_type)
(typeattributeset pdx_performance_client_server_type (performanced ))
(typeattribute pdx_bufferhub_client_endpoint_dir_type)
(typeattributeset pdx_bufferhub_client_endpoint_dir_type (pdx_bufferhub_dir ))
(typeattribute pdx_bufferhub_client_endpoint_socket_type)
(typeattributeset pdx_bufferhub_client_endpoint_socket_type (pdx_bufferhub_client_endpoint_socket ))
(typeattribute pdx_bufferhub_client_channel_socket_type)
(typeattributeset pdx_bufferhub_client_channel_socket_type (pdx_bufferhub_client_channel_socket ))
(typeattribute pdx_bufferhub_client_server_type)
(typeattributeset pdx_bufferhub_client_server_type (bufferhubd ))
(typeattribute halserverdomain)
(typeattributeset halserverdomain (charger_vendor mediaswcodec ))
(typeattribute halclientdomain)
(expandtypeattribute (halclientdomain) true)
(typeattributeset halclientdomain (bootanim bufferhubd cameraserver charger dumpstate gatekeeperd mediadrmserver mediaextractor mediaserver mediaswcodec radio statsd traceur_app update_engine update_verifier vold wificond ))
(typeattribute hal_automotive_socket_exemption)
(typeattribute hal_allocator)
(expandtypeattribute (hal_allocator) true)
(typeattribute hal_allocator_client)
(expandtypeattribute (hal_allocator_client) true)
(typeattributeset hal_allocator_client (cameraserver mediaextractor mediaserver mediaswcodec ))
(typeattribute hal_allocator_server)
(expandtypeattribute (hal_allocator_server) false)
(typeattribute hal_atrace)
(expandtypeattribute (hal_atrace) true)
(typeattribute hal_atrace_client)
(expandtypeattribute (hal_atrace_client) true)
(typeattributeset hal_atrace_client (traceur_app ))
(typeattribute hal_atrace_server)
(expandtypeattribute (hal_atrace_server) false)
(typeattribute hal_audio)
(expandtypeattribute (hal_audio) true)
(typeattribute hal_audio_client)
(expandtypeattribute (hal_audio_client) true)
(typeattributeset hal_audio_client (dumpstate ))
(typeattribute hal_audio_server)
(expandtypeattribute (hal_audio_server) false)
(typeattribute hal_audiocontrol)
(expandtypeattribute (hal_audiocontrol) true)
(typeattribute hal_audiocontrol_client)
(expandtypeattribute (hal_audiocontrol_client) true)
(typeattributeset hal_audiocontrol_client (dumpstate ))
(typeattribute hal_audiocontrol_server)
(expandtypeattribute (hal_audiocontrol_server) false)
(typeattribute hal_authgraph)
(expandtypeattribute (hal_authgraph) true)
(typeattribute hal_authgraph_client)
(expandtypeattribute (hal_authgraph_client) true)
(typeattributeset hal_authgraph_client (dumpstate ))
(typeattribute hal_authgraph_server)
(expandtypeattribute (hal_authgraph_server) false)
(typeattribute hal_authsecret)
(expandtypeattribute (hal_authsecret) true)
(typeattribute hal_authsecret_client)
(expandtypeattribute (hal_authsecret_client) true)
(typeattributeset hal_authsecret_client (dumpstate ))
(typeattribute hal_authsecret_server)
(expandtypeattribute (hal_authsecret_server) false)
(typeattribute hal_bluetooth)
(expandtypeattribute (hal_bluetooth) true)
(typeattribute hal_bluetooth_client)
(expandtypeattribute (hal_bluetooth_client) true)
(typeattributeset hal_bluetooth_client (dumpstate ))
(typeattribute hal_bluetooth_server)
(expandtypeattribute (hal_bluetooth_server) false)
(typeattribute hal_bootctl)
(expandtypeattribute (hal_bootctl) true)
(typeattribute hal_bootctl_client)
(expandtypeattribute (hal_bootctl_client) true)
(typeattributeset hal_bootctl_client (update_engine update_verifier vold ))
(typeattribute hal_bootctl_server)
(expandtypeattribute (hal_bootctl_server) false)
(typeattribute hal_broadcastradio)
(expandtypeattribute (hal_broadcastradio) true)
(typeattribute hal_broadcastradio_client)
(expandtypeattribute (hal_broadcastradio_client) true)
(typeattributeset hal_broadcastradio_client (dumpstate ))
(typeattribute hal_broadcastradio_server)
(expandtypeattribute (hal_broadcastradio_server) false)
(typeattribute hal_camera)
(expandtypeattribute (hal_camera) true)
(typeattribute hal_camera_client)
(expandtypeattribute (hal_camera_client) true)
(typeattributeset hal_camera_client (cameraserver dumpstate ))
(typeattribute hal_camera_server)
(expandtypeattribute (hal_camera_server) false)
(typeattribute hal_can_bus)
(expandtypeattribute (hal_can_bus) true)
(typeattribute hal_can_bus_client)
(expandtypeattribute (hal_can_bus_client) true)
(typeattribute hal_can_bus_server)
(expandtypeattribute (hal_can_bus_server) false)
(typeattribute hal_can_controller)
(expandtypeattribute (hal_can_controller) true)
(typeattribute hal_can_controller_client)
(expandtypeattribute (hal_can_controller_client) true)
(typeattribute hal_can_controller_server)
(expandtypeattribute (hal_can_controller_server) false)
(typeattribute hal_cas)
(expandtypeattribute (hal_cas) true)
(typeattribute hal_cas_client)
(expandtypeattribute (hal_cas_client) true)
(typeattributeset hal_cas_client (mediaextractor ))
(typeattribute hal_cas_server)
(expandtypeattribute (hal_cas_server) false)
(typeattribute hal_codec2)
(expandtypeattribute (hal_codec2) true)
(typeattributeset hal_codec2 (mediaswcodec ))
(typeattribute hal_codec2_client)
(expandtypeattribute (hal_codec2_client) true)
(typeattributeset hal_codec2_client (cameraserver dumpstate mediaswcodec ))
(typeattribute hal_codec2_server)
(expandtypeattribute (hal_codec2_server) false)
(typeattributeset hal_codec2_server (mediaswcodec ))
(typeattribute hal_configstore)
(expandtypeattribute (hal_configstore) true)
(typeattribute hal_configstore_client)
(expandtypeattribute (hal_configstore_client) true)
(typeattributeset hal_configstore_client (bootanim ))
(typeattribute hal_configstore_server)
(expandtypeattribute (hal_configstore_server) false)
(typeattribute hal_confirmationui)
(expandtypeattribute (hal_confirmationui) true)
(typeattribute hal_confirmationui_client)
(expandtypeattribute (hal_confirmationui_client) true)
(typeattribute hal_confirmationui_server)
(expandtypeattribute (hal_confirmationui_server) false)
(typeattribute hal_contexthub)
(expandtypeattribute (hal_contexthub) true)
(typeattribute hal_contexthub_client)
(expandtypeattribute (hal_contexthub_client) true)
(typeattributeset hal_contexthub_client (dumpstate ))
(typeattribute hal_contexthub_server)
(expandtypeattribute (hal_contexthub_server) false)
(typeattribute hal_drm)
(expandtypeattribute (hal_drm) true)
(typeattribute hal_drm_client)
(expandtypeattribute (hal_drm_client) true)
(typeattributeset hal_drm_client (dumpstate mediadrmserver ))
(typeattribute hal_drm_server)
(expandtypeattribute (hal_drm_server) false)
(typeattribute hal_dumpstate)
(expandtypeattribute (hal_dumpstate) true)
(typeattribute hal_dumpstate_client)
(expandtypeattribute (hal_dumpstate_client) true)
(typeattributeset hal_dumpstate_client (dumpstate ))
(typeattribute hal_dumpstate_server)
(expandtypeattribute (hal_dumpstate_server) false)
(typeattribute hal_evs)
(expandtypeattribute (hal_evs) true)
(typeattribute hal_evs_client)
(expandtypeattribute (hal_evs_client) true)
(typeattributeset hal_evs_client (dumpstate ))
(typeattribute hal_evs_server)
(expandtypeattribute (hal_evs_server) false)
(typeattribute hal_face)
(expandtypeattribute (hal_face) true)
(typeattribute hal_face_client)
(expandtypeattribute (hal_face_client) true)
(typeattributeset hal_face_client (dumpstate ))
(typeattribute hal_face_server)
(expandtypeattribute (hal_face_server) false)
(typeattribute hal_fastboot)
(expandtypeattribute (hal_fastboot) true)
(typeattribute hal_fastboot_client)
(expandtypeattribute (hal_fastboot_client) true)
(typeattribute hal_fastboot_server)
(expandtypeattribute (hal_fastboot_server) false)
(typeattribute hal_fingerprint)
(expandtypeattribute (hal_fingerprint) true)
(typeattribute hal_fingerprint_client)
(expandtypeattribute (hal_fingerprint_client) true)
(typeattributeset hal_fingerprint_client (dumpstate ))
(typeattribute hal_fingerprint_server)
(expandtypeattribute (hal_fingerprint_server) false)
(typeattribute hal_gatekeeper)
(expandtypeattribute (hal_gatekeeper) true)
(typeattribute hal_gatekeeper_client)
(expandtypeattribute (hal_gatekeeper_client) true)
(typeattributeset hal_gatekeeper_client (gatekeeperd ))
(typeattribute hal_gatekeeper_server)
(expandtypeattribute (hal_gatekeeper_server) false)
(typeattribute hal_gnss)
(expandtypeattribute (hal_gnss) true)
(typeattribute hal_gnss_client)
(expandtypeattribute (hal_gnss_client) true)
(typeattributeset hal_gnss_client (dumpstate ))
(typeattribute hal_gnss_server)
(expandtypeattribute (hal_gnss_server) false)
(typeattribute hal_graphics_allocator)
(expandtypeattribute (hal_graphics_allocator) true)
(typeattribute hal_graphics_allocator_client)
(expandtypeattribute (hal_graphics_allocator_client) true)
(typeattributeset hal_graphics_allocator_client (bootanim bufferhubd cameraserver dumpstate mediaswcodec ))
(typeattribute hal_graphics_allocator_server)
(expandtypeattribute (hal_graphics_allocator_server) false)
(typeattribute hal_graphics_composer)
(expandtypeattribute (hal_graphics_composer) true)
(typeattribute hal_graphics_composer_client)
(expandtypeattribute (hal_graphics_composer_client) true)
(typeattributeset hal_graphics_composer_client (bootanim dumpstate ))
(typeattribute hal_graphics_composer_server)
(expandtypeattribute (hal_graphics_composer_server) false)
(typeattribute hal_health)
(expandtypeattribute (hal_health) true)
(typeattributeset hal_health (charger_vendor ))
(typeattribute hal_health_client)
(expandtypeattribute (hal_health_client) true)
(typeattributeset hal_health_client (charger dumpstate statsd ))
(typeattribute hal_health_server)
(expandtypeattribute (hal_health_server) false)
(typeattributeset hal_health_server (charger_vendor ))
(typeattribute hal_health_storage)
(expandtypeattribute (hal_health_storage) true)
(typeattribute hal_health_storage_client)
(expandtypeattribute (hal_health_storage_client) true)
(typeattributeset hal_health_storage_client (vold ))
(typeattribute hal_health_storage_server)
(expandtypeattribute (hal_health_storage_server) false)
(typeattribute hal_identity)
(expandtypeattribute (hal_identity) true)
(typeattribute hal_identity_client)
(expandtypeattribute (hal_identity_client) true)
(typeattributeset hal_identity_client (dumpstate ))
(typeattribute hal_identity_server)
(expandtypeattribute (hal_identity_server) false)
(typeattribute hal_input_classifier)
(expandtypeattribute (hal_input_classifier) true)
(typeattribute hal_input_classifier_client)
(expandtypeattribute (hal_input_classifier_client) true)
(typeattribute hal_input_classifier_server)
(expandtypeattribute (hal_input_classifier_server) false)
(typeattribute hal_input_processor)
(expandtypeattribute (hal_input_processor) true)
(typeattribute hal_input_processor_client)
(expandtypeattribute (hal_input_processor_client) true)
(typeattributeset hal_input_processor_client (dumpstate ))
(typeattribute hal_input_processor_server)
(expandtypeattribute (hal_input_processor_server) false)
(typeattribute hal_ir)
(expandtypeattribute (hal_ir) true)
(typeattribute hal_ir_client)
(expandtypeattribute (hal_ir_client) true)
(typeattribute hal_ir_server)
(expandtypeattribute (hal_ir_server) false)
(typeattribute hal_ivn)
(expandtypeattribute (hal_ivn) true)
(typeattribute hal_ivn_client)
(expandtypeattribute (hal_ivn_client) true)
(typeattribute hal_ivn_server)
(expandtypeattribute (hal_ivn_server) false)
(typeattribute hal_keymaster)
(expandtypeattribute (hal_keymaster) true)
(typeattribute hal_keymaster_client)
(expandtypeattribute (hal_keymaster_client) true)
(typeattribute hal_keymaster_server)
(expandtypeattribute (hal_keymaster_server) false)
(typeattribute hal_keymint)
(expandtypeattribute (hal_keymint) true)
(typeattribute hal_keymint_client)
(expandtypeattribute (hal_keymint_client) true)
(typeattributeset hal_keymint_client (dumpstate ))
(typeattribute hal_keymint_server)
(expandtypeattribute (hal_keymint_server) false)
(typeattribute hal_light)
(expandtypeattribute (hal_light) true)
(typeattribute hal_light_client)
(expandtypeattribute (hal_light_client) true)
(typeattributeset hal_light_client (dumpstate ))
(typeattribute hal_light_server)
(expandtypeattribute (hal_light_server) false)
(typeattribute hal_lowpan)
(expandtypeattribute (hal_lowpan) true)
(typeattribute hal_lowpan_client)
(expandtypeattribute (hal_lowpan_client) true)
(typeattribute hal_lowpan_server)
(expandtypeattribute (hal_lowpan_server) false)
(typeattribute hal_macsec)
(expandtypeattribute (hal_macsec) true)
(typeattribute hal_macsec_client)
(expandtypeattribute (hal_macsec_client) true)
(typeattribute hal_macsec_server)
(expandtypeattribute (hal_macsec_server) false)
(typeattribute hal_memtrack)
(expandtypeattribute (hal_memtrack) true)
(typeattribute hal_memtrack_client)
(expandtypeattribute (hal_memtrack_client) true)
(typeattributeset hal_memtrack_client (dumpstate ))
(typeattribute hal_memtrack_server)
(expandtypeattribute (hal_memtrack_server) false)
(typeattribute hal_neuralnetworks)
(expandtypeattribute (hal_neuralnetworks) true)
(typeattribute hal_neuralnetworks_client)
(expandtypeattribute (hal_neuralnetworks_client) true)
(typeattributeset hal_neuralnetworks_client (dumpstate ))
(typeattribute hal_neuralnetworks_server)
(expandtypeattribute (hal_neuralnetworks_server) false)
(typeattribute hal_nfc)
(expandtypeattribute (hal_nfc) true)
(typeattribute hal_nfc_client)
(expandtypeattribute (hal_nfc_client) true)
(typeattributeset hal_nfc_client (dumpstate ))
(typeattribute hal_nfc_server)
(expandtypeattribute (hal_nfc_server) false)
(typeattribute hal_nlinterceptor)
(expandtypeattribute (hal_nlinterceptor) true)
(typeattribute hal_nlinterceptor_client)
(expandtypeattribute (hal_nlinterceptor_client) true)
(typeattributeset hal_nlinterceptor_client (wificond ))
(typeattribute hal_nlinterceptor_server)
(expandtypeattribute (hal_nlinterceptor_server) false)
(typeattribute hal_oemlock)
(expandtypeattribute (hal_oemlock) true)
(typeattribute hal_oemlock_client)
(expandtypeattribute (hal_oemlock_client) true)
(typeattributeset hal_oemlock_client (dumpstate ))
(typeattribute hal_oemlock_server)
(expandtypeattribute (hal_oemlock_server) false)
(typeattribute hal_omx)
(expandtypeattribute (hal_omx) true)
(typeattribute hal_omx_client)
(expandtypeattribute (hal_omx_client) true)
(typeattributeset hal_omx_client (cameraserver mediaswcodec ))
(typeattribute hal_omx_server)
(expandtypeattribute (hal_omx_server) false)
(typeattribute hal_power)
(expandtypeattribute (hal_power) true)
(typeattribute hal_power_client)
(expandtypeattribute (hal_power_client) true)
(typeattributeset hal_power_client (dumpstate statsd ))
(typeattribute hal_power_server)
(expandtypeattribute (hal_power_server) false)
(typeattribute hal_power_stats)
(expandtypeattribute (hal_power_stats) true)
(typeattribute hal_power_stats_client)
(expandtypeattribute (hal_power_stats_client) true)
(typeattributeset hal_power_stats_client (dumpstate statsd ))
(typeattribute hal_power_stats_server)
(expandtypeattribute (hal_power_stats_server) false)
(typeattribute hal_rebootescrow)
(expandtypeattribute (hal_rebootescrow) true)
(typeattribute hal_rebootescrow_client)
(expandtypeattribute (hal_rebootescrow_client) true)
(typeattributeset hal_rebootescrow_client (dumpstate ))
(typeattribute hal_rebootescrow_server)
(expandtypeattribute (hal_rebootescrow_server) false)
(typeattribute hal_remoteaccess)
(expandtypeattribute (hal_remoteaccess) true)
(typeattribute hal_remoteaccess_client)
(expandtypeattribute (hal_remoteaccess_client) true)
(typeattribute hal_remoteaccess_server)
(expandtypeattribute (hal_remoteaccess_server) false)
(typeattribute hal_secretkeeper)
(expandtypeattribute (hal_secretkeeper) true)
(typeattribute hal_secretkeeper_client)
(expandtypeattribute (hal_secretkeeper_client) true)
(typeattributeset hal_secretkeeper_client (dumpstate ))
(typeattribute hal_secretkeeper_server)
(expandtypeattribute (hal_secretkeeper_server) false)
(typeattribute hal_remotelyprovisionedcomponent_avf)
(expandtypeattribute (hal_remotelyprovisionedcomponent_avf) true)
(typeattribute hal_remotelyprovisionedcomponent_avf_client)
(expandtypeattribute (hal_remotelyprovisionedcomponent_avf_client) true)
(typeattribute hal_remotelyprovisionedcomponent_avf_server)
(expandtypeattribute (hal_remotelyprovisionedcomponent_avf_server) false)
(typeattribute hal_secure_element)
(expandtypeattribute (hal_secure_element) true)
(typeattribute hal_secure_element_client)
(expandtypeattribute (hal_secure_element_client) true)
(typeattribute hal_secure_element_server)
(expandtypeattribute (hal_secure_element_server) false)
(typeattribute hal_sensors)
(expandtypeattribute (hal_sensors) true)
(typeattribute hal_sensors_client)
(expandtypeattribute (hal_sensors_client) true)
(typeattributeset hal_sensors_client (dumpstate ))
(typeattribute hal_sensors_server)
(expandtypeattribute (hal_sensors_server) false)
(typeattribute hal_telephony)
(expandtypeattribute (hal_telephony) true)
(typeattribute hal_telephony_client)
(expandtypeattribute (hal_telephony_client) true)
(typeattributeset hal_telephony_client (radio ))
(typeattribute hal_telephony_server)
(expandtypeattribute (hal_telephony_server) false)
(typeattribute hal_tetheroffload)
(expandtypeattribute (hal_tetheroffload) true)
(typeattribute hal_tetheroffload_client)
(expandtypeattribute (hal_tetheroffload_client) true)
(typeattribute hal_tetheroffload_server)
(expandtypeattribute (hal_tetheroffload_server) false)
(typeattribute hal_thermal)
(expandtypeattribute (hal_thermal) true)
(typeattribute hal_thermal_client)
(expandtypeattribute (hal_thermal_client) true)
(typeattributeset hal_thermal_client (dumpstate statsd ))
(typeattribute hal_thermal_server)
(expandtypeattribute (hal_thermal_server) false)
(typeattribute hal_threadnetwork)
(expandtypeattribute (hal_threadnetwork) true)
(typeattribute hal_threadnetwork_client)
(expandtypeattribute (hal_threadnetwork_client) true)
(typeattribute hal_threadnetwork_server)
(expandtypeattribute (hal_threadnetwork_server) false)
(typeattribute hal_tv_cec)
(expandtypeattribute (hal_tv_cec) true)
(typeattribute hal_tv_cec_client)
(expandtypeattribute (hal_tv_cec_client) true)
(typeattribute hal_tv_cec_server)
(expandtypeattribute (hal_tv_cec_server) false)
(typeattribute hal_tv_hdmi_cec)
(expandtypeattribute (hal_tv_hdmi_cec) true)
(typeattribute hal_tv_hdmi_cec_client)
(expandtypeattribute (hal_tv_hdmi_cec_client) true)
(typeattribute hal_tv_hdmi_cec_server)
(expandtypeattribute (hal_tv_hdmi_cec_server) false)
(typeattribute hal_tv_hdmi_connection)
(expandtypeattribute (hal_tv_hdmi_connection) true)
(typeattribute hal_tv_hdmi_connection_client)
(expandtypeattribute (hal_tv_hdmi_connection_client) true)
(typeattribute hal_tv_hdmi_connection_server)
(expandtypeattribute (hal_tv_hdmi_connection_server) false)
(typeattribute hal_tv_hdmi_earc)
(expandtypeattribute (hal_tv_hdmi_earc) true)
(typeattribute hal_tv_hdmi_earc_client)
(expandtypeattribute (hal_tv_hdmi_earc_client) true)
(typeattribute hal_tv_hdmi_earc_server)
(expandtypeattribute (hal_tv_hdmi_earc_server) false)
(typeattribute hal_tv_input)
(expandtypeattribute (hal_tv_input) true)
(typeattribute hal_tv_input_client)
(expandtypeattribute (hal_tv_input_client) true)
(typeattribute hal_tv_input_server)
(expandtypeattribute (hal_tv_input_server) false)
(typeattribute hal_tv_tuner)
(expandtypeattribute (hal_tv_tuner) true)
(typeattribute hal_tv_tuner_client)
(expandtypeattribute (hal_tv_tuner_client) true)
(typeattribute hal_tv_tuner_server)
(expandtypeattribute (hal_tv_tuner_server) false)
(typeattribute hal_usb)
(expandtypeattribute (hal_usb) true)
(typeattribute hal_usb_client)
(expandtypeattribute (hal_usb_client) true)
(typeattribute hal_usb_server)
(expandtypeattribute (hal_usb_server) false)
(typeattribute hal_usb_gadget)
(expandtypeattribute (hal_usb_gadget) true)
(typeattribute hal_usb_gadget_client)
(expandtypeattribute (hal_usb_gadget_client) true)
(typeattribute hal_usb_gadget_server)
(expandtypeattribute (hal_usb_gadget_server) false)
(typeattribute hal_uwb)
(expandtypeattribute (hal_uwb) true)
(typeattribute hal_uwb_client)
(expandtypeattribute (hal_uwb_client) true)
(typeattribute hal_uwb_server)
(expandtypeattribute (hal_uwb_server) false)
(typeattribute hal_uwb_vendor)
(expandtypeattribute (hal_uwb_vendor) true)
(typeattribute hal_uwb_vendor_client)
(expandtypeattribute (hal_uwb_vendor_client) true)
(typeattribute hal_uwb_vendor_server)
(expandtypeattribute (hal_uwb_vendor_server) false)
(typeattribute hal_vehicle)
(expandtypeattribute (hal_vehicle) true)
(typeattribute hal_vehicle_client)
(expandtypeattribute (hal_vehicle_client) true)
(typeattributeset hal_vehicle_client (dumpstate ))
(typeattribute hal_vehicle_server)
(expandtypeattribute (hal_vehicle_server) false)
(typeattribute hal_vibrator)
(expandtypeattribute (hal_vibrator) true)
(typeattribute hal_vibrator_client)
(expandtypeattribute (hal_vibrator_client) true)
(typeattributeset hal_vibrator_client (dumpstate ))
(typeattribute hal_vibrator_server)
(expandtypeattribute (hal_vibrator_server) false)
(typeattribute hal_vr)
(expandtypeattribute (hal_vr) true)
(typeattribute hal_vr_client)
(expandtypeattribute (hal_vr_client) true)
(typeattribute hal_vr_server)
(expandtypeattribute (hal_vr_server) false)
(typeattribute hal_weaver)
(expandtypeattribute (hal_weaver) true)
(typeattribute hal_weaver_client)
(expandtypeattribute (hal_weaver_client) true)
(typeattributeset hal_weaver_client (dumpstate ))
(typeattribute hal_weaver_server)
(expandtypeattribute (hal_weaver_server) false)
(typeattribute hal_wifi)
(expandtypeattribute (hal_wifi) true)
(typeattribute hal_wifi_client)
(expandtypeattribute (hal_wifi_client) true)
(typeattributeset hal_wifi_client (dumpstate ))
(typeattribute hal_wifi_server)
(expandtypeattribute (hal_wifi_server) false)
(typeattribute hal_wifi_hostapd)
(expandtypeattribute (hal_wifi_hostapd) true)
(typeattribute hal_wifi_hostapd_client)
(expandtypeattribute (hal_wifi_hostapd_client) true)
(typeattribute hal_wifi_hostapd_server)
(expandtypeattribute (hal_wifi_hostapd_server) false)
(typeattribute hal_wifi_supplicant)
(expandtypeattribute (hal_wifi_supplicant) true)
(typeattribute hal_wifi_supplicant_client)
(expandtypeattribute (hal_wifi_supplicant_client) true)
(typeattribute hal_wifi_supplicant_server)
(expandtypeattribute (hal_wifi_supplicant_server) false)
(typeattribute automotive_display_service_server)
(typeattribute camera_service_server)
(typeattribute display_service_server)
(typeattribute evsmanager_service_server)
(typeattribute remote_provisioning_service_server)
(typeattribute scheduler_service_server)
(typeattribute sensor_service_server)
(typeattribute stats_service_server)
(typeattribute system_suspend_internal_server)
(typeattribute system_suspend_server)
(typeattribute wifi_keystore_service_server)
(typeattributeset wifi_keystore_service_server (wificond ))
(typeattribute super_block_device_type)
(typeattributeset super_block_device_type (super_block_device ))
(typeattribute dmabuf_heap_device_type)
(expandtypeattribute (dmabuf_heap_device_type) false)
(typeattributeset dmabuf_heap_device_type (dmabuf_heap_device dmabuf_system_heap_device dmabuf_system_secure_heap_device ))
(typeattribute vm_manager_device_type)
(typeattribute gsi_metadata_file_type)
(typeattributeset gsi_metadata_file_type (gsi_metadata_file gsi_public_metadata_file ))
(typeattribute apex_data_file_type)
(typeattributeset apex_data_file_type (apex_system_server_data_file ))
(typeattribute charger_type)
(typeattributeset charger_type (charger charger_vendor ))
(typeattribute dalvik_config_prop_type)
(typeattributeset dalvik_config_prop_type (dalvik_config_prop dalvik_dynamic_config_prop ))
(type adbd)
(roletype object_r adbd)
(type adbd_exec)
(roletype object_r adbd_exec)
(type aidl_lazy_test_server)
(roletype object_r aidl_lazy_test_server)
(type aidl_lazy_test_server_exec)
(roletype object_r aidl_lazy_test_server_exec)
(type apexd)
(roletype object_r apexd)
(type apexd_exec)
(roletype object_r apexd_exec)
(type appdomain_tmpfs)
(roletype object_r appdomain_tmpfs)
(type app_zygote)
(roletype object_r app_zygote)
(type app_zygote_tmpfs)
(roletype object_r app_zygote_tmpfs)
(type artd)
(roletype object_r artd)
(type atrace)
(roletype object_r atrace)
(type audioserver)
(roletype object_r audioserver)
(type audioserver_tmpfs)
(roletype object_r audioserver_tmpfs)
(type blkid)
(roletype object_r blkid)
(type blkid_untrusted)
(roletype object_r blkid_untrusted)
(type bluetooth)
(roletype object_r bluetooth)
(type bootanim)
(roletype object_r bootanim)
(type bootanim_exec)
(roletype object_r bootanim_exec)
(type bootstat)
(roletype object_r bootstat)
(type bootstat_exec)
(roletype object_r bootstat_exec)
(type bpfloader)
(roletype object_r bpfloader)
(type bufferhubd)
(roletype object_r bufferhubd)
(type bufferhubd_exec)
(roletype object_r bufferhubd_exec)
(type cameraserver)
(roletype object_r cameraserver)
(type cameraserver_exec)
(roletype object_r cameraserver_exec)
(type cameraserver_tmpfs)
(roletype object_r cameraserver_tmpfs)
(type charger)
(roletype object_r charger)
(type charger_exec)
(roletype object_r charger_exec)
(type charger_vendor)
(roletype object_r charger_vendor)
(type crash_dump)
(roletype object_r crash_dump)
(type crash_dump_exec)
(roletype object_r crash_dump_exec)
(type credstore)
(roletype object_r credstore)
(type credstore_exec)
(roletype object_r credstore_exec)
(type device)
(roletype object_r device)
(type ashmem_device)
(roletype object_r ashmem_device)
(type ashmem_libcutils_device)
(roletype object_r ashmem_libcutils_device)
(type audio_device)
(roletype object_r audio_device)
(type binder_device)
(roletype object_r binder_device)
(type hwbinder_device)
(roletype object_r hwbinder_device)
(type vndbinder_device)
(roletype object_r vndbinder_device)
(type block_device)
(roletype object_r block_device)
(type bt_device)
(roletype object_r bt_device)
(type camera_device)
(roletype object_r camera_device)
(type dm_device)
(roletype object_r dm_device)
(type ublk_block_device)
(roletype object_r ublk_block_device)
(type dm_user_device)
(roletype object_r dm_user_device)
(type ublk_control_device)
(roletype object_r ublk_control_device)
(type keychord_device)
(roletype object_r keychord_device)
(type loop_control_device)
(roletype object_r loop_control_device)
(type loop_device)
(roletype object_r loop_device)
(type pmsg_device)
(roletype object_r pmsg_device)
(type radio_device)
(roletype object_r radio_device)
(type ram_device)
(roletype object_r ram_device)
(type rtc_device)
(roletype object_r rtc_device)
(type vd_device)
(roletype object_r vd_device)
(type vold_device)
(roletype object_r vold_device)
(type console_device)
(roletype object_r console_device)
(type fscklogs)
(roletype object_r fscklogs)
(type gpu_device)
(roletype object_r gpu_device)
(type graphics_device)
(roletype object_r graphics_device)
(type hw_random_device)
(roletype object_r hw_random_device)
(type input_device)
(roletype object_r input_device)
(type port_device)
(roletype object_r port_device)
(type lowpan_device)
(roletype object_r lowpan_device)
(type mtp_device)
(roletype object_r mtp_device)
(type nfc_device)
(roletype object_r nfc_device)
(type ptmx_device)
(roletype object_r ptmx_device)
(type kmsg_device)
(roletype object_r kmsg_device)
(type kmsg_debug_device)
(roletype object_r kmsg_debug_device)
(type null_device)
(roletype object_r null_device)
(type random_device)
(roletype object_r random_device)
(type secure_element_device)
(roletype object_r secure_element_device)
(type sensors_device)
(roletype object_r sensors_device)
(type serial_device)
(roletype object_r serial_device)
(type socket_device)
(roletype object_r socket_device)
(type owntty_device)
(roletype object_r owntty_device)
(type tty_device)
(roletype object_r tty_device)
(type video_device)
(roletype object_r video_device)
(type zero_device)
(roletype object_r zero_device)
(type fuse_device)
(roletype object_r fuse_device)
(type iio_device)
(roletype object_r iio_device)
(type ion_device)
(roletype object_r ion_device)
(type dmabuf_heap_device)
(roletype object_r dmabuf_heap_device)
(type dmabuf_system_heap_device)
(roletype object_r dmabuf_system_heap_device)
(type dmabuf_system_secure_heap_device)
(roletype object_r dmabuf_system_secure_heap_device)
(type qtaguid_device)
(roletype object_r qtaguid_device)
(type watchdog_device)
(roletype object_r watchdog_device)
(type uhid_device)
(roletype object_r uhid_device)
(type uio_device)
(roletype object_r uio_device)
(type tun_device)
(roletype object_r tun_device)
(type usbaccessory_device)
(roletype object_r usbaccessory_device)
(type usb_device)
(roletype object_r usb_device)
(type usb_serial_device)
(roletype object_r usb_serial_device)
(type gnss_device)
(roletype object_r gnss_device)
(type properties_device)
(roletype object_r properties_device)
(type properties_serial)
(roletype object_r properties_serial)
(type property_info)
(roletype object_r property_info)
(type hidraw_device)
(roletype object_r hidraw_device)
(type hci_attach_dev)
(roletype object_r hci_attach_dev)
(type rpmsg_device)
(roletype object_r rpmsg_device)
(type root_block_device)
(roletype object_r root_block_device)
(type frp_block_device)
(roletype object_r frp_block_device)
(type system_block_device)
(roletype object_r system_block_device)
(type recovery_block_device)
(roletype object_r recovery_block_device)
(type boot_block_device)
(roletype object_r boot_block_device)
(type dtbo_block_device)
(roletype object_r dtbo_block_device)
(type userdata_block_device)
(roletype object_r userdata_block_device)
(type zoned_block_device)
(roletype object_r zoned_block_device)
(type cache_block_device)
(roletype object_r cache_block_device)
(type swap_block_device)
(roletype object_r swap_block_device)
(type metadata_block_device)
(roletype object_r metadata_block_device)
(type misc_block_device)
(roletype object_r misc_block_device)
(type super_block_device)
(roletype object_r super_block_device)
(type sdcard_block_device)
(roletype object_r sdcard_block_device)
(type userdata_sysdev)
(roletype object_r userdata_sysdev)
(type rootdisk_sysdev)
(roletype object_r rootdisk_sysdev)
(type vfio_device)
(roletype object_r vfio_device)
(type dhcp)
(roletype object_r dhcp)
(type dhcp_exec)
(roletype object_r dhcp_exec)
(type dnsmasq)
(roletype object_r dnsmasq)
(type dnsmasq_exec)
(roletype object_r dnsmasq_exec)
(type drmserver)
(roletype object_r drmserver)
(type drmserver_exec)
(roletype object_r drmserver_exec)
(type drmserver_socket)
(roletype object_r drmserver_socket)
(type dumpstate)
(roletype object_r dumpstate)
(type dumpstate_exec)
(roletype object_r dumpstate_exec)
(type e2fs)
(roletype object_r e2fs)
(type e2fs_exec)
(roletype object_r e2fs_exec)
(type ephemeral_app)
(roletype object_r ephemeral_app)
(type evsmanagerd)
(roletype object_r evsmanagerd)
(type extra_free_kbytes)
(roletype object_r extra_free_kbytes)
(type extra_free_kbytes_exec)
(roletype object_r extra_free_kbytes_exec)
(type fastbootd)
(roletype object_r fastbootd)
(type labeledfs)
(roletype object_r labeledfs)
(type pipefs)
(roletype object_r pipefs)
(type sockfs)
(roletype object_r sockfs)
(type rootfs)
(roletype object_r rootfs)
(type proc)
(roletype object_r proc)
(type binderfs)
(roletype object_r binderfs)
(type binderfs_logs)
(roletype object_r binderfs_logs)
(type binderfs_logs_proc)
(roletype object_r binderfs_logs_proc)
(type binderfs_logs_stats)
(roletype object_r binderfs_logs_stats)
(type binderfs_features)
(roletype object_r binderfs_features)
(type proc_security)
(roletype object_r proc_security)
(type proc_drop_caches)
(roletype object_r proc_drop_caches)
(type proc_overcommit_memory)
(roletype object_r proc_overcommit_memory)
(type proc_min_free_order_shift)
(roletype object_r proc_min_free_order_shift)
(type proc_kpageflags)
(roletype object_r proc_kpageflags)
(type proc_watermark_boost_factor)
(roletype object_r proc_watermark_boost_factor)
(type proc_percpu_pagelist_high_fraction)
(roletype object_r proc_percpu_pagelist_high_fraction)
(type usermodehelper)
(roletype object_r usermodehelper)
(type sysfs_usermodehelper)
(roletype object_r sysfs_usermodehelper)
(type proc_qtaguid_ctrl)
(roletype object_r proc_qtaguid_ctrl)
(type proc_qtaguid_stat)
(roletype object_r proc_qtaguid_stat)
(type proc_bluetooth_writable)
(roletype object_r proc_bluetooth_writable)
(type proc_abi)
(roletype object_r proc_abi)
(type proc_asound)
(roletype object_r proc_asound)
(type proc_bootconfig)
(roletype object_r proc_bootconfig)
(type proc_bpf)
(roletype object_r proc_bpf)
(type proc_buddyinfo)
(roletype object_r proc_buddyinfo)
(type proc_cmdline)
(roletype object_r proc_cmdline)
(type proc_cpu_alignment)
(roletype object_r proc_cpu_alignment)
(type proc_cpuinfo)
(roletype object_r proc_cpuinfo)
(type proc_dirty)
(roletype object_r proc_dirty)
(type proc_diskstats)
(roletype object_r proc_diskstats)
(type proc_extra_free_kbytes)
(roletype object_r proc_extra_free_kbytes)
(type proc_filesystems)
(roletype object_r proc_filesystems)
(type proc_fs_verity)
(roletype object_r proc_fs_verity)
(type proc_hostname)
(roletype object_r proc_hostname)
(type proc_hung_task)
(roletype object_r proc_hung_task)
(type proc_interrupts)
(roletype object_r proc_interrupts)
(type proc_iomem)
(roletype object_r proc_iomem)
(type proc_kallsyms)
(roletype object_r proc_kallsyms)
(type proc_keys)
(roletype object_r proc_keys)
(type proc_kmsg)
(roletype object_r proc_kmsg)
(type proc_loadavg)
(roletype object_r proc_loadavg)
(type proc_locks)
(roletype object_r proc_locks)
(type proc_lowmemorykiller)
(roletype object_r proc_lowmemorykiller)
(type proc_max_map_count)
(roletype object_r proc_max_map_count)
(type proc_meminfo)
(roletype object_r proc_meminfo)
(type proc_misc)
(roletype object_r proc_misc)
(type proc_modules)
(roletype object_r proc_modules)
(type proc_mounts)
(roletype object_r proc_mounts)
(type proc_net)
(roletype object_r proc_net)
(type proc_net_tcp_udp)
(roletype object_r proc_net_tcp_udp)
(type proc_page_cluster)
(roletype object_r proc_page_cluster)
(type proc_pagetypeinfo)
(roletype object_r proc_pagetypeinfo)
(type proc_panic)
(roletype object_r proc_panic)
(type proc_perf)
(roletype object_r proc_perf)
(type proc_pid_max)
(roletype object_r proc_pid_max)
(type proc_pipe_conf)
(roletype object_r proc_pipe_conf)
(type proc_pressure_cpu)
(roletype object_r proc_pressure_cpu)
(type proc_pressure_io)
(roletype object_r proc_pressure_io)
(type proc_pressure_mem)
(roletype object_r proc_pressure_mem)
(type proc_random)
(roletype object_r proc_random)
(type proc_sched)
(roletype object_r proc_sched)
(type proc_slabinfo)
(roletype object_r proc_slabinfo)
(type proc_stat)
(roletype object_r proc_stat)
(type proc_swaps)
(roletype object_r proc_swaps)
(type proc_sysrq)
(roletype object_r proc_sysrq)
(type proc_timer)
(roletype object_r proc_timer)
(type proc_tty_drivers)
(roletype object_r proc_tty_drivers)
(type proc_uid_cputime_showstat)
(roletype object_r proc_uid_cputime_showstat)
(type proc_uid_cputime_removeuid)
(roletype object_r proc_uid_cputime_removeuid)
(type proc_uid_io_stats)
(roletype object_r proc_uid_io_stats)
(type proc_uid_procstat_set)
(roletype object_r proc_uid_procstat_set)
(type proc_uid_time_in_state)
(roletype object_r proc_uid_time_in_state)
(type proc_uid_concurrent_active_time)
(roletype object_r proc_uid_concurrent_active_time)
(type proc_uid_concurrent_policy_time)
(roletype object_r proc_uid_concurrent_policy_time)
(type proc_uid_cpupower)
(roletype object_r proc_uid_cpupower)
(type proc_uptime)
(roletype object_r proc_uptime)
(type proc_version)
(roletype object_r proc_version)
(type proc_vmallocinfo)
(roletype object_r proc_vmallocinfo)
(type proc_vmstat)
(roletype object_r proc_vmstat)
(type proc_watermark_scale_factor)
(roletype object_r proc_watermark_scale_factor)
(type proc_zoneinfo)
(roletype object_r proc_zoneinfo)
(type proc_vendor_sched)
(roletype object_r proc_vendor_sched)
(type selinuxfs)
(roletype object_r selinuxfs)
(type fusectlfs)
(roletype object_r fusectlfs)
(type cgroup)
(roletype object_r cgroup)
(type cgroup_v2)
(roletype object_r cgroup_v2)
(type sysfs)
(roletype object_r sysfs)
(type sysfs_android_usb)
(roletype object_r sysfs_android_usb)
(type sysfs_uio)
(roletype object_r sysfs_uio)
(type sysfs_batteryinfo)
(roletype object_r sysfs_batteryinfo)
(type sysfs_bluetooth_writable)
(roletype object_r sysfs_bluetooth_writable)
(type sysfs_devfreq_cur)
(roletype object_r sysfs_devfreq_cur)
(type sysfs_devfreq_dir)
(roletype object_r sysfs_devfreq_dir)
(type sysfs_devices_block)
(roletype object_r sysfs_devices_block)
(type sysfs_dm)
(roletype object_r sysfs_dm)
(type sysfs_dm_verity)
(roletype object_r sysfs_dm_verity)
(type sysfs_dma_heap)
(roletype object_r sysfs_dma_heap)
(type sysfs_dmabuf_stats)
(roletype object_r sysfs_dmabuf_stats)
(type sysfs_dt_firmware_android)
(roletype object_r sysfs_dt_firmware_android)
(type sysfs_extcon)
(roletype object_r sysfs_extcon)
(type sysfs_ion)
(roletype object_r sysfs_ion)
(type sysfs_ipv4)
(roletype object_r sysfs_ipv4)
(type sysfs_kernel_notes)
(roletype object_r sysfs_kernel_notes)
(type sysfs_leds)
(roletype object_r sysfs_leds)
(type sysfs_loop)
(roletype object_r sysfs_loop)
(type sysfs_gpu)
(roletype object_r sysfs_gpu)
(type sysfs_hwrandom)
(roletype object_r sysfs_hwrandom)
(type sysfs_nfc_power_writable)
(roletype object_r sysfs_nfc_power_writable)
(type sysfs_wake_lock)
(roletype object_r sysfs_wake_lock)
(type sysfs_net)
(roletype object_r sysfs_net)
(type sysfs_power)
(roletype object_r sysfs_power)
(type sysfs_rtc)
(roletype object_r sysfs_rtc)
(type sysfs_suspend_stats)
(roletype object_r sysfs_suspend_stats)
(type sysfs_switch)
(roletype object_r sysfs_switch)
(type sysfs_sync_on_suspend)
(roletype object_r sysfs_sync_on_suspend)
(type sysfs_transparent_hugepage)
(roletype object_r sysfs_transparent_hugepage)
(type sysfs_lru_gen_enabled)
(roletype object_r sysfs_lru_gen_enabled)
(type sysfs_usb)
(roletype object_r sysfs_usb)
(type sysfs_wakeup)
(roletype object_r sysfs_wakeup)
(type sysfs_wakeup_reasons)
(roletype object_r sysfs_wakeup_reasons)
(type sysfs_fs_ext4_features)
(roletype object_r sysfs_fs_ext4_features)
(type sysfs_fs_f2fs)
(roletype object_r sysfs_fs_f2fs)
(type sysfs_fs_fuse_bpf)
(roletype object_r sysfs_fs_fuse_bpf)
(type sysfs_fs_fuse_features)
(roletype object_r sysfs_fs_fuse_features)
(type sysfs_fs_incfs_features)
(roletype object_r sysfs_fs_incfs_features)
(type sysfs_fs_incfs_metrics)
(roletype object_r sysfs_fs_incfs_metrics)
(type sysfs_vendor_sched)
(roletype object_r sysfs_vendor_sched)
(type fs_bpf)
(roletype object_r fs_bpf)
(type fs_bpf_tethering)
(roletype object_r fs_bpf_tethering)
(type fs_bpf_vendor)
(roletype object_r fs_bpf_vendor)
(type configfs)
(roletype object_r configfs)
(type sysfs_devices_cs_etm)
(roletype object_r sysfs_devices_cs_etm)
(type sysfs_devices_system_cpu)
(roletype object_r sysfs_devices_system_cpu)
(type sysfs_lowmemorykiller)
(roletype object_r sysfs_lowmemorykiller)
(type sysfs_wlan_fwpath)
(roletype object_r sysfs_wlan_fwpath)
(type sysfs_vibrator)
(roletype object_r sysfs_vibrator)
(type sysfs_uhid)
(roletype object_r sysfs_uhid)
(type sysfs_thermal)
(roletype object_r sysfs_thermal)
(type sysfs_zram)
(roletype object_r sysfs_zram)
(type sysfs_zram_uevent)
(roletype object_r sysfs_zram_uevent)
(type inotify)
(roletype object_r inotify)
(type devpts)
(roletype object_r devpts)
(type tmpfs)
(roletype object_r tmpfs)
(type shm)
(roletype object_r shm)
(type mqueue)
(roletype object_r mqueue)
(type fuse)
(roletype object_r fuse)
(type fuseblk)
(roletype object_r fuseblk)
(type sdcardfs)
(roletype object_r sdcardfs)
(type vfat)
(roletype object_r vfat)
(type exfat)
(roletype object_r exfat)
(type debugfs)
(roletype object_r debugfs)
(type debugfs_kprobes)
(roletype object_r debugfs_kprobes)
(type debugfs_mmc)
(roletype object_r debugfs_mmc)
(type debugfs_mm_events_tracing)
(roletype object_r debugfs_mm_events_tracing)
(type debugfs_trace_marker)
(roletype object_r debugfs_trace_marker)
(type debugfs_tracing)
(roletype object_r debugfs_tracing)
(type debugfs_tracing_debug)
(roletype object_r debugfs_tracing_debug)
(type debugfs_tracing_instances)
(roletype object_r debugfs_tracing_instances)
(type debugfs_tracing_printk_formats)
(roletype object_r debugfs_tracing_printk_formats)
(type debugfs_wakeup_sources)
(roletype object_r debugfs_wakeup_sources)
(type debugfs_wifi_tracing)
(roletype object_r debugfs_wifi_tracing)
(type securityfs)
(roletype object_r securityfs)
(type pstorefs)
(roletype object_r pstorefs)
(type functionfs)
(roletype object_r functionfs)
(type oemfs)
(roletype object_r oemfs)
(type usbfs)
(roletype object_r usbfs)
(type binfmt_miscfs)
(roletype object_r binfmt_miscfs)
(type app_fusefs)
(roletype object_r app_fusefs)
(type unlabeled)
(roletype object_r unlabeled)
(type system_file)
(roletype object_r system_file)
(type system_asan_options_file)
(roletype object_r system_asan_options_file)
(type system_event_log_tags_file)
(roletype object_r system_event_log_tags_file)
(type system_lib_file)
(roletype object_r system_lib_file)
(type system_bootstrap_lib_file)
(roletype object_r system_bootstrap_lib_file)
(type system_group_file)
(roletype object_r system_group_file)
(type system_linker_exec)
(roletype object_r system_linker_exec)
(type system_linker_config_file)
(roletype object_r system_linker_config_file)
(type system_passwd_file)
(roletype object_r system_passwd_file)
(type system_seccomp_policy_file)
(roletype object_r system_seccomp_policy_file)
(type system_security_cacerts_file)
(roletype object_r system_security_cacerts_file)
(type tcpdump_exec)
(roletype object_r tcpdump_exec)
(type system_zoneinfo_file)
(roletype object_r system_zoneinfo_file)
(type cgroup_desc_file)
(roletype object_r cgroup_desc_file)
(type cgroup_desc_api_file)
(roletype object_r cgroup_desc_api_file)
(type vendor_cgroup_desc_file)
(roletype object_r vendor_cgroup_desc_file)
(type task_profiles_file)
(roletype object_r task_profiles_file)
(type task_profiles_api_file)
(roletype object_r task_profiles_api_file)
(type vendor_task_profiles_file)
(roletype object_r vendor_task_profiles_file)
(type art_apex_dir)
(roletype object_r art_apex_dir)
(type linkerconfig_file)
(roletype object_r linkerconfig_file)
(type incremental_control_file)
(roletype object_r incremental_control_file)
(type bootanim_oem_file)
(roletype object_r bootanim_oem_file)
(type vendor_hal_file)
(roletype object_r vendor_hal_file)
(type vendor_file)
(roletype object_r vendor_file)
(type vendor_app_file)
(roletype object_r vendor_app_file)
(type vendor_configs_file)
(roletype object_r vendor_configs_file)
(type same_process_hal_file)
(roletype object_r same_process_hal_file)
(type vndk_sp_file)
(roletype object_r vndk_sp_file)
(type vendor_framework_file)
(roletype object_r vendor_framework_file)
(type vendor_overlay_file)
(roletype object_r vendor_overlay_file)
(type vendor_public_lib_file)
(roletype object_r vendor_public_lib_file)
(type vendor_public_framework_file)
(roletype object_r vendor_public_framework_file)
(type vendor_microdroid_file)
(roletype object_r vendor_microdroid_file)
(type vendor_keylayout_file)
(roletype object_r vendor_keylayout_file)
(type vendor_keychars_file)
(roletype object_r vendor_keychars_file)
(type vendor_idc_file)
(roletype object_r vendor_idc_file)
(type vendor_uuid_mapping_config_file)
(roletype object_r vendor_uuid_mapping_config_file)
(type vendor_vm_file)
(roletype object_r vendor_vm_file)
(type vendor_vm_data_file)
(roletype object_r vendor_vm_data_file)
(type metadata_file)
(roletype object_r metadata_file)
(type vold_metadata_file)
(roletype object_r vold_metadata_file)
(type gsi_metadata_file)
(roletype object_r gsi_metadata_file)
(type gsi_public_metadata_file)
(roletype object_r gsi_public_metadata_file)
(type password_slot_metadata_file)
(roletype object_r password_slot_metadata_file)
(type apex_metadata_file)
(roletype object_r apex_metadata_file)
(type ota_metadata_file)
(roletype object_r ota_metadata_file)
(type metadata_bootstat_file)
(roletype object_r metadata_bootstat_file)
(type userspace_reboot_metadata_file)
(roletype object_r userspace_reboot_metadata_file)
(type staged_install_file)
(roletype object_r staged_install_file)
(type watchdog_metadata_file)
(roletype object_r watchdog_metadata_file)
(type repair_mode_metadata_file)
(roletype object_r repair_mode_metadata_file)
(type aconfig_storage_metadata_file)
(roletype object_r aconfig_storage_metadata_file)
(type aconfig_storage_flags_metadata_file)
(roletype object_r aconfig_storage_flags_metadata_file)
(type dev_cpu_variant)
(roletype object_r dev_cpu_variant)
(type runtime_event_log_tags_file)
(roletype object_r runtime_event_log_tags_file)
(type logcat_exec)
(roletype object_r logcat_exec)
(type cgroup_rc_file)
(roletype object_r cgroup_rc_file)
(type coredump_file)
(roletype object_r coredump_file)
(type system_data_root_file)
(roletype object_r system_data_root_file)
(type system_data_file)
(roletype object_r system_data_file)
(type system_userdir_file)
(roletype object_r system_userdir_file)
(type packages_list_file)
(roletype object_r packages_list_file)
(type game_mode_intervention_list_file)
(roletype object_r game_mode_intervention_list_file)
(type vendor_data_file)
(roletype object_r vendor_data_file)
(type vendor_userdir_file)
(roletype object_r vendor_userdir_file)
(type unencrypted_data_file)
(roletype object_r unencrypted_data_file)
(type install_data_file)
(roletype object_r install_data_file)
(type drm_data_file)
(roletype object_r drm_data_file)
(type adb_data_file)
(roletype object_r adb_data_file)
(type anr_data_file)
(roletype object_r anr_data_file)
(type tombstone_data_file)
(roletype object_r tombstone_data_file)
(type tombstone_wifi_data_file)
(roletype object_r tombstone_wifi_data_file)
(type apex_data_file)
(roletype object_r apex_data_file)
(type apk_data_file)
(roletype object_r apk_data_file)
(type apk_tmp_file)
(roletype object_r apk_tmp_file)
(type apk_private_data_file)
(roletype object_r apk_private_data_file)
(type apk_private_tmp_file)
(roletype object_r apk_private_tmp_file)
(type dalvikcache_data_file)
(roletype object_r dalvikcache_data_file)
(type ota_data_file)
(roletype object_r ota_data_file)
(type ota_package_file)
(roletype object_r ota_package_file)
(type user_profile_root_file)
(roletype object_r user_profile_root_file)
(type user_profile_data_file)
(roletype object_r user_profile_data_file)
(type profman_dump_data_file)
(roletype object_r profman_dump_data_file)
(type prereboot_data_file)
(roletype object_r prereboot_data_file)
(type resourcecache_data_file)
(roletype object_r resourcecache_data_file)
(type shell_data_file)
(roletype object_r shell_data_file)
(type property_data_file)
(roletype object_r property_data_file)
(type bootchart_data_file)
(roletype object_r bootchart_data_file)
(type dropbox_data_file)
(roletype object_r dropbox_data_file)
(type heapdump_data_file)
(roletype object_r heapdump_data_file)
(type nativetest_data_file)
(roletype object_r nativetest_data_file)
(type shell_test_data_file)
(roletype object_r shell_test_data_file)
(type ringtone_file)
(roletype object_r ringtone_file)
(type preloads_data_file)
(roletype object_r preloads_data_file)
(type preloads_media_file)
(roletype object_r preloads_media_file)
(type dhcp_data_file)
(roletype object_r dhcp_data_file)
(type server_configurable_flags_data_file)
(roletype object_r server_configurable_flags_data_file)
(type staging_data_file)
(roletype object_r staging_data_file)
(type vendor_apex_file)
(roletype object_r vendor_apex_file)
(type vendor_apex_metadata_file)
(roletype object_r vendor_apex_metadata_file)
(type shutdown_checkpoints_system_data_file)
(roletype object_r shutdown_checkpoints_system_data_file)
(type mnt_media_rw_file)
(roletype object_r mnt_media_rw_file)
(type mnt_user_file)
(roletype object_r mnt_user_file)
(type mnt_pass_through_file)
(roletype object_r mnt_pass_through_file)
(type mnt_expand_file)
(roletype object_r mnt_expand_file)
(type mnt_sdcard_file)
(roletype object_r mnt_sdcard_file)
(type storage_file)
(roletype object_r storage_file)
(type mnt_media_rw_stub_file)
(roletype object_r mnt_media_rw_stub_file)
(type storage_stub_file)
(roletype object_r storage_stub_file)
(type mnt_vendor_file)
(roletype object_r mnt_vendor_file)
(type mnt_product_file)
(roletype object_r mnt_product_file)
(type apex_mnt_dir)
(roletype object_r apex_mnt_dir)
(type apex_info_file)
(roletype object_r apex_info_file)
(type postinstall_mnt_dir)
(roletype object_r postinstall_mnt_dir)
(type postinstall_file)
(roletype object_r postinstall_file)
(type postinstall_apex_mnt_dir)
(roletype object_r postinstall_apex_mnt_dir)
(type mirror_data_file)
(roletype object_r mirror_data_file)
(type adb_keys_file)
(roletype object_r adb_keys_file)
(type apex_system_server_data_file)
(roletype object_r apex_system_server_data_file)
(type apex_module_data_file)
(roletype object_r apex_module_data_file)
(type apex_ota_reserved_file)
(roletype object_r apex_ota_reserved_file)
(type apex_rollback_data_file)
(roletype object_r apex_rollback_data_file)
(type appcompat_data_file)
(roletype object_r appcompat_data_file)
(type audio_data_file)
(roletype object_r audio_data_file)
(type audioserver_data_file)
(roletype object_r audioserver_data_file)
(type bluetooth_data_file)
(roletype object_r bluetooth_data_file)
(type bluetooth_logs_data_file)
(roletype object_r bluetooth_logs_data_file)
(type bootstat_data_file)
(roletype object_r bootstat_data_file)
(type boottrace_data_file)
(roletype object_r boottrace_data_file)
(type camera_data_file)
(roletype object_r camera_data_file)
(type credstore_data_file)
(roletype object_r credstore_data_file)
(type gatekeeper_data_file)
(roletype object_r gatekeeper_data_file)
(type incident_data_file)
(roletype object_r incident_data_file)
(type keychain_data_file)
(roletype object_r keychain_data_file)
(type keystore_data_file)
(roletype object_r keystore_data_file)
(type media_data_file)
(roletype object_r media_data_file)
(type media_rw_data_file)
(roletype object_r media_rw_data_file)
(type media_userdir_file)
(roletype object_r media_userdir_file)
(type misc_user_data_file)
(roletype object_r misc_user_data_file)
(type net_data_file)
(roletype object_r net_data_file)
(type network_watchlist_data_file)
(roletype object_r network_watchlist_data_file)
(type nfc_data_file)
(roletype object_r nfc_data_file)
(type nfc_logs_data_file)
(roletype object_r nfc_logs_data_file)
(type radio_data_file)
(roletype object_r radio_data_file)
(type recovery_data_file)
(roletype object_r recovery_data_file)
(type shared_relro_file)
(roletype object_r shared_relro_file)
(type snapshotctl_log_data_file)
(roletype object_r snapshotctl_log_data_file)
(type stats_config_data_file)
(roletype object_r stats_config_data_file)
(type stats_data_file)
(roletype object_r stats_data_file)
(type systemkeys_data_file)
(roletype object_r systemkeys_data_file)
(type textclassifier_data_file)
(roletype object_r textclassifier_data_file)
(type trace_data_file)
(roletype object_r trace_data_file)
(type vpn_data_file)
(roletype object_r vpn_data_file)
(type wifi_data_file)
(roletype object_r wifi_data_file)
(type vold_data_file)
(roletype object_r vold_data_file)
(type tee_data_file)
(roletype object_r tee_data_file)
(type update_engine_data_file)
(roletype object_r update_engine_data_file)
(type update_engine_log_data_file)
(roletype object_r update_engine_log_data_file)
(type snapuserd_log_data_file)
(roletype object_r snapuserd_log_data_file)
(type method_trace_data_file)
(roletype object_r method_trace_data_file)
(type gsi_data_file)
(roletype object_r gsi_data_file)
(type radio_core_data_file)
(roletype object_r radio_core_data_file)
(type app_data_file)
(roletype object_r app_data_file)
(type privapp_data_file)
(roletype object_r privapp_data_file)
(type system_app_data_file)
(roletype object_r system_app_data_file)
(type cache_file)
(roletype object_r cache_file)
(type overlayfs_file)
(roletype object_r overlayfs_file)
(type cache_backup_file)
(roletype object_r cache_backup_file)
(type cache_private_backup_file)
(roletype object_r cache_private_backup_file)
(type cache_recovery_file)
(roletype object_r cache_recovery_file)
(type efs_file)
(roletype object_r efs_file)
(type wallpaper_file)
(roletype object_r wallpaper_file)
(type shortcut_manager_icons)
(roletype object_r shortcut_manager_icons)
(type icon_file)
(roletype object_r icon_file)
(type asec_apk_file)
(roletype object_r asec_apk_file)
(type asec_public_file)
(roletype object_r asec_public_file)
(type asec_image_file)
(roletype object_r asec_image_file)
(type backup_data_file)
(roletype object_r backup_data_file)
(type bluetooth_efs_file)
(roletype object_r bluetooth_efs_file)
(type fingerprintd_data_file)
(roletype object_r fingerprintd_data_file)
(type fingerprint_vendor_data_file)
(roletype object_r fingerprint_vendor_data_file)
(type app_fuse_file)
(roletype object_r app_fuse_file)
(type face_vendor_data_file)
(roletype object_r face_vendor_data_file)
(type iris_vendor_data_file)
(roletype object_r iris_vendor_data_file)
(type adbd_socket)
(roletype object_r adbd_socket)
(type bluetooth_socket)
(roletype object_r bluetooth_socket)
(type dnsproxyd_socket)
(roletype object_r dnsproxyd_socket)
(type dumpstate_socket)
(roletype object_r dumpstate_socket)
(type fwmarkd_socket)
(roletype object_r fwmarkd_socket)
(type lmkd_socket)
(roletype object_r lmkd_socket)
(type logd_socket)
(roletype object_r logd_socket)
(type logdr_socket)
(roletype object_r logdr_socket)
(type logdw_socket)
(roletype object_r logdw_socket)
(type mdns_socket)
(roletype object_r mdns_socket)
(type mdnsd_socket)
(roletype object_r mdnsd_socket)
(type misc_logd_file)
(roletype object_r misc_logd_file)
(type mtpd_socket)
(roletype object_r mtpd_socket)
(type ot_daemon_socket)
(roletype object_r ot_daemon_socket)
(type property_socket)
(roletype object_r property_socket)
(type racoon_socket)
(roletype object_r racoon_socket)
(type recovery_socket)
(roletype object_r recovery_socket)
(type rild_socket)
(roletype object_r rild_socket)
(type rild_debug_socket)
(roletype object_r rild_debug_socket)
(type snapuserd_socket)
(roletype object_r snapuserd_socket)
(type snapuserd_proxy_socket)
(roletype object_r snapuserd_proxy_socket)
(type statsdw_socket)
(roletype object_r statsdw_socket)
(type system_wpa_socket)
(roletype object_r system_wpa_socket)
(type system_ndebug_socket)
(roletype object_r system_ndebug_socket)
(type system_unsolzygote_socket)
(roletype object_r system_unsolzygote_socket)
(type tombstoned_crash_socket)
(roletype object_r tombstoned_crash_socket)
(type tombstoned_java_trace_socket)
(roletype object_r tombstoned_java_trace_socket)
(type tombstoned_intercept_socket)
(roletype object_r tombstoned_intercept_socket)
(type traced_consumer_socket)
(roletype object_r traced_consumer_socket)
(type traced_perf_socket)
(roletype object_r traced_perf_socket)
(type traced_producer_socket)
(roletype object_r traced_producer_socket)
(type uncrypt_socket)
(roletype object_r uncrypt_socket)
(type wpa_socket)
(roletype object_r wpa_socket)
(type zygote_socket)
(roletype object_r zygote_socket)
(type heapprofd_socket)
(roletype object_r heapprofd_socket)
(type gps_control)
(roletype object_r gps_control)
(type pdx_display_dir)
(roletype object_r pdx_display_dir)
(type pdx_performance_dir)
(roletype object_r pdx_performance_dir)
(type pdx_bufferhub_dir)
(roletype object_r pdx_bufferhub_dir)
(type pdx_display_client_endpoint_socket)
(roletype object_r pdx_display_client_endpoint_socket)
(type pdx_display_client_channel_socket)
(roletype object_r pdx_display_client_channel_socket)
(type pdx_display_manager_endpoint_socket)
(roletype object_r pdx_display_manager_endpoint_socket)
(type pdx_display_manager_channel_socket)
(roletype object_r pdx_display_manager_channel_socket)
(type pdx_display_screenshot_endpoint_socket)
(roletype object_r pdx_display_screenshot_endpoint_socket)
(type pdx_display_screenshot_channel_socket)
(roletype object_r pdx_display_screenshot_channel_socket)
(type pdx_display_vsync_endpoint_socket)
(roletype object_r pdx_display_vsync_endpoint_socket)
(type pdx_display_vsync_channel_socket)
(roletype object_r pdx_display_vsync_channel_socket)
(type pdx_performance_client_endpoint_socket)
(roletype object_r pdx_performance_client_endpoint_socket)
(type pdx_performance_client_channel_socket)
(roletype object_r pdx_performance_client_channel_socket)
(type pdx_bufferhub_client_endpoint_socket)
(roletype object_r pdx_bufferhub_client_endpoint_socket)
(type pdx_bufferhub_client_channel_socket)
(roletype object_r pdx_bufferhub_client_channel_socket)
(type file_contexts_file)
(roletype object_r file_contexts_file)
(type mac_perms_file)
(roletype object_r mac_perms_file)
(type property_contexts_file)
(roletype object_r property_contexts_file)
(type seapp_contexts_file)
(roletype object_r seapp_contexts_file)
(type sepolicy_file)
(roletype object_r sepolicy_file)
(type service_contexts_file)
(roletype object_r service_contexts_file)
(type keystore2_key_contexts_file)
(roletype object_r keystore2_key_contexts_file)
(type vendor_service_contexts_file)
(roletype object_r vendor_service_contexts_file)
(type hwservice_contexts_file)
(roletype object_r hwservice_contexts_file)
(type vndservice_contexts_file)
(roletype object_r vndservice_contexts_file)
(type debugfs_bootreceiver_tracing)
(roletype object_r debugfs_bootreceiver_tracing)
(type vendor_kernel_modules)
(roletype object_r vendor_kernel_modules)
(type system_dlkm_file)
(roletype object_r system_dlkm_file)
(type audiohal_data_file)
(roletype object_r audiohal_data_file)
(type fingerprintd)
(roletype object_r fingerprintd)
(type fingerprintd_exec)
(roletype object_r fingerprintd_exec)
(type flags_health_check)
(roletype object_r flags_health_check)
(type flags_health_check_exec)
(roletype object_r flags_health_check_exec)
(type fsck)
(roletype object_r fsck)
(type fsck_exec)
(roletype object_r fsck_exec)
(type fsck_untrusted)
(roletype object_r fsck_untrusted)
(type gatekeeperd)
(roletype object_r gatekeeperd)
(type gatekeeperd_exec)
(roletype object_r gatekeeperd_exec)
(type gmscore_app)
(roletype object_r gmscore_app)
(type gpuservice)
(roletype object_r gpuservice)
(type hal_graphics_composer_server_tmpfs)
(roletype object_r hal_graphics_composer_server_tmpfs)
(typeattribute hal_graphics_composer_client_tmpfs)
(expandtypeattribute (hal_graphics_composer_client_tmpfs) true)
(type healthd)
(roletype object_r healthd)
(type heapprofd)
(roletype object_r heapprofd)
(type default_android_hwservice)
(roletype object_r default_android_hwservice)
(type fwk_camera_hwservice)
(roletype object_r fwk_camera_hwservice)
(type fwk_display_hwservice)
(roletype object_r fwk_display_hwservice)
(type fwk_scheduler_hwservice)
(roletype object_r fwk_scheduler_hwservice)
(type fwk_sensor_hwservice)
(roletype object_r fwk_sensor_hwservice)
(type fwk_stats_hwservice)
(roletype object_r fwk_stats_hwservice)
(type fwk_automotive_display_hwservice)
(roletype object_r fwk_automotive_display_hwservice)
(type hal_atrace_hwservice)
(roletype object_r hal_atrace_hwservice)
(type hal_audio_hwservice)
(roletype object_r hal_audio_hwservice)
(type hal_audiocontrol_hwservice)
(roletype object_r hal_audiocontrol_hwservice)
(type hal_authsecret_hwservice)
(roletype object_r hal_authsecret_hwservice)
(type hal_bluetooth_hwservice)
(roletype object_r hal_bluetooth_hwservice)
(type hal_bootctl_hwservice)
(roletype object_r hal_bootctl_hwservice)
(type hal_broadcastradio_hwservice)
(roletype object_r hal_broadcastradio_hwservice)
(type hal_camera_hwservice)
(roletype object_r hal_camera_hwservice)
(type hal_can_bus_hwservice)
(roletype object_r hal_can_bus_hwservice)
(type hal_can_controller_hwservice)
(roletype object_r hal_can_controller_hwservice)
(type hal_confirmationui_hwservice)
(roletype object_r hal_confirmationui_hwservice)
(type hal_contexthub_hwservice)
(roletype object_r hal_contexthub_hwservice)
(type hal_dumpstate_hwservice)
(roletype object_r hal_dumpstate_hwservice)
(type hal_evs_hwservice)
(roletype object_r hal_evs_hwservice)
(type hal_face_hwservice)
(roletype object_r hal_face_hwservice)
(type hal_fingerprint_hwservice)
(roletype object_r hal_fingerprint_hwservice)
(type hal_gatekeeper_hwservice)
(roletype object_r hal_gatekeeper_hwservice)
(type hal_gnss_hwservice)
(roletype object_r hal_gnss_hwservice)
(type hal_graphics_composer_hwservice)
(roletype object_r hal_graphics_composer_hwservice)
(type hal_health_hwservice)
(roletype object_r hal_health_hwservice)
(type hal_health_storage_hwservice)
(roletype object_r hal_health_storage_hwservice)
(type hal_input_classifier_hwservice)
(roletype object_r hal_input_classifier_hwservice)
(type hal_ir_hwservice)
(roletype object_r hal_ir_hwservice)
(type hal_keymaster_hwservice)
(roletype object_r hal_keymaster_hwservice)
(type hal_light_hwservice)
(roletype object_r hal_light_hwservice)
(type hal_lowpan_hwservice)
(roletype object_r hal_lowpan_hwservice)
(type hal_memtrack_hwservice)
(roletype object_r hal_memtrack_hwservice)
(type hal_nfc_hwservice)
(roletype object_r hal_nfc_hwservice)
(type hal_oemlock_hwservice)
(roletype object_r hal_oemlock_hwservice)
(type hal_power_hwservice)
(roletype object_r hal_power_hwservice)
(type hal_power_stats_hwservice)
(roletype object_r hal_power_stats_hwservice)
(type hal_secure_element_hwservice)
(roletype object_r hal_secure_element_hwservice)
(type hal_sensors_hwservice)
(roletype object_r hal_sensors_hwservice)
(type hal_telephony_hwservice)
(roletype object_r hal_telephony_hwservice)
(type hal_tetheroffload_hwservice)
(roletype object_r hal_tetheroffload_hwservice)
(type hal_thermal_hwservice)
(roletype object_r hal_thermal_hwservice)
(type hal_tv_cec_hwservice)
(roletype object_r hal_tv_cec_hwservice)
(type hal_tv_input_hwservice)
(roletype object_r hal_tv_input_hwservice)
(type hal_tv_tuner_hwservice)
(roletype object_r hal_tv_tuner_hwservice)
(type hal_usb_gadget_hwservice)
(roletype object_r hal_usb_gadget_hwservice)
(type hal_usb_hwservice)
(roletype object_r hal_usb_hwservice)
(type hal_vehicle_hwservice)
(roletype object_r hal_vehicle_hwservice)
(type hal_vibrator_hwservice)
(roletype object_r hal_vibrator_hwservice)
(type hal_vr_hwservice)
(roletype object_r hal_vr_hwservice)
(type hal_weaver_hwservice)
(roletype object_r hal_weaver_hwservice)
(type hal_wifi_hostapd_hwservice)
(roletype object_r hal_wifi_hostapd_hwservice)
(type hal_wifi_hwservice)
(roletype object_r hal_wifi_hwservice)
(type hal_wifi_supplicant_hwservice)
(roletype object_r hal_wifi_supplicant_hwservice)
(type system_net_netd_hwservice)
(roletype object_r system_net_netd_hwservice)
(type system_suspend_hwservice)
(roletype object_r system_suspend_hwservice)
(type system_wifi_keystore_hwservice)
(roletype object_r system_wifi_keystore_hwservice)
(type fwk_bufferhub_hwservice)
(roletype object_r fwk_bufferhub_hwservice)
(type hal_cas_hwservice)
(roletype object_r hal_cas_hwservice)
(type hal_codec2_hwservice)
(roletype object_r hal_codec2_hwservice)
(type hal_configstore_ISurfaceFlingerConfigs)
(roletype object_r hal_configstore_ISurfaceFlingerConfigs)
(type hal_drm_hwservice)
(roletype object_r hal_drm_hwservice)
(type hal_graphics_allocator_hwservice)
(roletype object_r hal_graphics_allocator_hwservice)
(type hal_graphics_mapper_hwservice)
(roletype object_r hal_graphics_mapper_hwservice)
(type hal_neuralnetworks_hwservice)
(roletype object_r hal_neuralnetworks_hwservice)
(type hal_omx_hwservice)
(roletype object_r hal_omx_hwservice)
(type hal_renderscript_hwservice)
(roletype object_r hal_renderscript_hwservice)
(type hidl_allocator_hwservice)
(roletype object_r hidl_allocator_hwservice)
(type hidl_base_hwservice)
(roletype object_r hidl_base_hwservice)
(type hidl_manager_hwservice)
(roletype object_r hidl_manager_hwservice)
(type hidl_memory_hwservice)
(roletype object_r hidl_memory_hwservice)
(type hidl_token_hwservice)
(roletype object_r hidl_token_hwservice)
(type hwservicemanager)
(roletype object_r hwservicemanager)
(type hwservicemanager_exec)
(roletype object_r hwservicemanager_exec)
(type idmap)
(roletype object_r idmap)
(type idmap_exec)
(roletype object_r idmap_exec)
(type incident)
(roletype object_r incident)
(type incident_helper)
(roletype object_r incident_helper)
(type incidentd)
(roletype object_r incidentd)
(type init)
(roletype object_r init)
(type init_exec)
(roletype object_r init_exec)
(type init_tmpfs)
(roletype object_r init_tmpfs)
(type inputflinger)
(roletype object_r inputflinger)
(type inputflinger_exec)
(roletype object_r inputflinger_exec)
(type installd)
(roletype object_r installd)
(type installd_exec)
(roletype object_r installd_exec)
(type isolated_app)
(roletype object_r isolated_app)
(type isolated_compute_app)
(roletype object_r isolated_compute_app)
(type kernel)
(roletype object_r kernel)
(type keystore)
(roletype object_r keystore)
(type keystore_exec)
(roletype object_r keystore_exec)
(type wifi_key)
(roletype object_r wifi_key)
(type llkd)
(roletype object_r llkd)
(type llkd_exec)
(roletype object_r llkd_exec)
(type lmkd)
(roletype object_r lmkd)
(type lmkd_exec)
(roletype object_r lmkd_exec)
(type logd)
(roletype object_r logd)
(type logd_exec)
(roletype object_r logd_exec)
(type logpersist)
(roletype object_r logpersist)
(type mdnsd)
(roletype object_r mdnsd)
(type mediadrmserver)
(roletype object_r mediadrmserver)
(type mediadrmserver_exec)
(roletype object_r mediadrmserver_exec)
(type mediaextractor)
(roletype object_r mediaextractor)
(type mediaextractor_exec)
(roletype object_r mediaextractor_exec)
(type mediaextractor_tmpfs)
(roletype object_r mediaextractor_tmpfs)
(type mediametrics)
(roletype object_r mediametrics)
(type mediametrics_exec)
(roletype object_r mediametrics_exec)
(type mediaprovider)
(roletype object_r mediaprovider)
(type mediaserver)
(roletype object_r mediaserver)
(type mediaserver_exec)
(roletype object_r mediaserver_exec)
(type mediaserver_tmpfs)
(roletype object_r mediaserver_tmpfs)
(type mediaswcodec)
(roletype object_r mediaswcodec)
(type mediaswcodec_exec)
(roletype object_r mediaswcodec_exec)
(type mediatranscoding)
(roletype object_r mediatranscoding)
(type modprobe)
(roletype object_r modprobe)
(type mtp)
(roletype object_r mtp)
(type node)
(roletype object_r node)
(type netif)
(roletype object_r netif)
(type port)
(roletype object_r port)
(type netd)
(roletype object_r netd)
(type netd_exec)
(roletype object_r netd_exec)
(type netutils_wrapper)
(roletype object_r netutils_wrapper)
(type netutils_wrapper_exec)
(roletype object_r netutils_wrapper_exec)
(type network_stack)
(roletype object_r network_stack)
(type nfc)
(roletype object_r nfc)
(type otapreopt_chroot)
(roletype object_r otapreopt_chroot)
(type perfetto)
(roletype object_r perfetto)
(type performanced)
(roletype object_r performanced)
(type performanced_exec)
(roletype object_r performanced_exec)
(type platform_app)
(roletype object_r platform_app)
(type postinstall)
(roletype object_r postinstall)
(type ppp)
(roletype object_r ppp)
(type priv_app)
(roletype object_r priv_app)
(type prng_seeder)
(roletype object_r prng_seeder)
(type profman)
(roletype object_r profman)
(type profman_exec)
(roletype object_r profman_exec)
(type apexd_prop)
(roletype object_r apexd_prop)
(type bootloader_boot_reason_prop)
(roletype object_r bootloader_boot_reason_prop)
(type device_config_activity_manager_native_boot_prop)
(roletype object_r device_config_activity_manager_native_boot_prop)
(type device_config_boot_count_prop)
(roletype object_r device_config_boot_count_prop)
(type device_config_input_native_boot_prop)
(roletype object_r device_config_input_native_boot_prop)
(type device_config_netd_native_prop)
(roletype object_r device_config_netd_native_prop)
(type device_config_reset_performed_prop)
(roletype object_r device_config_reset_performed_prop)
(type firstboot_prop)
(roletype object_r firstboot_prop)
(type boottime_prop)
(roletype object_r boottime_prop)
(type charger_prop)
(roletype object_r charger_prop)
(type cold_boot_done_prop)
(roletype object_r cold_boot_done_prop)
(type ctl_adbd_prop)
(roletype object_r ctl_adbd_prop)
(type ctl_apexd_prop)
(roletype object_r ctl_apexd_prop)
(type ctl_bootanim_prop)
(roletype object_r ctl_bootanim_prop)
(type ctl_bugreport_prop)
(roletype object_r ctl_bugreport_prop)
(type ctl_console_prop)
(roletype object_r ctl_console_prop)
(type ctl_dumpstate_prop)
(roletype object_r ctl_dumpstate_prop)
(type ctl_fuse_prop)
(roletype object_r ctl_fuse_prop)
(type ctl_gsid_prop)
(roletype object_r ctl_gsid_prop)
(type ctl_interface_restart_prop)
(roletype object_r ctl_interface_restart_prop)
(type ctl_interface_stop_prop)
(roletype object_r ctl_interface_stop_prop)
(type ctl_mdnsd_prop)
(roletype object_r ctl_mdnsd_prop)
(type ctl_restart_prop)
(roletype object_r ctl_restart_prop)
(type ctl_rildaemon_prop)
(roletype object_r ctl_rildaemon_prop)
(type ctl_sigstop_prop)
(roletype object_r ctl_sigstop_prop)
(type dynamic_system_prop)
(roletype object_r dynamic_system_prop)
(type heapprofd_enabled_prop)
(roletype object_r heapprofd_enabled_prop)
(type llkd_prop)
(roletype object_r llkd_prop)
(type lpdumpd_prop)
(roletype object_r lpdumpd_prop)
(type mmc_prop)
(roletype object_r mmc_prop)
(type mock_ota_prop)
(roletype object_r mock_ota_prop)
(type net_dns_prop)
(roletype object_r net_dns_prop)
(type overlay_prop)
(roletype object_r overlay_prop)
(type persistent_properties_ready_prop)
(roletype object_r persistent_properties_ready_prop)
(type safemode_prop)
(roletype object_r safemode_prop)
(type system_lmk_prop)
(roletype object_r system_lmk_prop)
(type system_trace_prop)
(roletype object_r system_trace_prop)
(type test_boot_reason_prop)
(roletype object_r test_boot_reason_prop)
(type time_prop)
(roletype object_r time_prop)
(type traced_enabled_prop)
(roletype object_r traced_enabled_prop)
(type traced_lazy_prop)
(roletype object_r traced_lazy_prop)
(type aac_drc_prop)
(roletype object_r aac_drc_prop)
(type adaptive_haptics_prop)
(roletype object_r adaptive_haptics_prop)
(type apex_ready_prop)
(roletype object_r apex_ready_prop)
(type arm64_memtag_prop)
(roletype object_r arm64_memtag_prop)
(type binder_cache_bluetooth_server_prop)
(roletype object_r binder_cache_bluetooth_server_prop)
(type binder_cache_system_server_prop)
(roletype object_r binder_cache_system_server_prop)
(type binder_cache_telephony_server_prop)
(roletype object_r binder_cache_telephony_server_prop)
(type boot_status_prop)
(roletype object_r boot_status_prop)
(type bootanim_system_prop)
(roletype object_r bootanim_system_prop)
(type bootloader_prop)
(roletype object_r bootloader_prop)
(type boottime_public_prop)
(roletype object_r boottime_public_prop)
(type bq_config_prop)
(roletype object_r bq_config_prop)
(type build_bootimage_prop)
(roletype object_r build_bootimage_prop)
(type build_prop)
(roletype object_r build_prop)
(type composd_vm_art_prop)
(roletype object_r composd_vm_art_prop)
(type device_config_aconfig_flags_prop)
(roletype object_r device_config_aconfig_flags_prop)
(type device_config_camera_native_prop)
(roletype object_r device_config_camera_native_prop)
(type device_config_edgetpu_native_prop)
(roletype object_r device_config_edgetpu_native_prop)
(type device_config_media_native_prop)
(roletype object_r device_config_media_native_prop)
(type device_config_nnapi_native_prop)
(roletype object_r device_config_nnapi_native_prop)
(type device_config_runtime_native_boot_prop)
(roletype object_r device_config_runtime_native_boot_prop)
(type device_config_runtime_native_prop)
(roletype object_r device_config_runtime_native_prop)
(type device_config_surface_flinger_native_boot_prop)
(roletype object_r device_config_surface_flinger_native_boot_prop)
(type device_config_vendor_system_native_prop)
(roletype object_r device_config_vendor_system_native_prop)
(type device_config_vendor_system_native_boot_prop)
(roletype object_r device_config_vendor_system_native_boot_prop)
(type drm_forcel3_prop)
(roletype object_r drm_forcel3_prop)
(type fingerprint_prop)
(roletype object_r fingerprint_prop)
(type gwp_asan_prop)
(roletype object_r gwp_asan_prop)
(type hal_instrumentation_prop)
(roletype object_r hal_instrumentation_prop)
(type userdebug_or_eng_prop)
(roletype object_r userdebug_or_eng_prop)
(type init_service_status_prop)
(roletype object_r init_service_status_prop)
(type libc_debug_prop)
(roletype object_r libc_debug_prop)
(type module_sdkextensions_prop)
(roletype object_r module_sdkextensions_prop)
(type nnapi_ext_deny_product_prop)
(roletype object_r nnapi_ext_deny_product_prop)
(type persist_wm_debug_prop)
(roletype object_r persist_wm_debug_prop)
(type power_debug_prop)
(roletype object_r power_debug_prop)
(type property_service_version_prop)
(roletype object_r property_service_version_prop)
(type provisioned_prop)
(roletype object_r provisioned_prop)
(type restorecon_prop)
(roletype object_r restorecon_prop)
(type retaildemo_prop)
(roletype object_r retaildemo_prop)
(type servicemanager_prop)
(roletype object_r servicemanager_prop)
(type smart_idle_maint_enabled_prop)
(roletype object_r smart_idle_maint_enabled_prop)
(type socket_hook_prop)
(roletype object_r socket_hook_prop)
(type sqlite_log_prop)
(roletype object_r sqlite_log_prop)
(type surfaceflinger_display_prop)
(roletype object_r surfaceflinger_display_prop)
(type system_boot_reason_prop)
(roletype object_r system_boot_reason_prop)
(type system_jvmti_agent_prop)
(roletype object_r system_jvmti_agent_prop)
(type traced_oome_heap_session_count_prop)
(roletype object_r traced_oome_heap_session_count_prop)
(type ab_update_gki_prop)
(roletype object_r ab_update_gki_prop)
(type usb_prop)
(roletype object_r usb_prop)
(type userspace_reboot_exported_prop)
(roletype object_r userspace_reboot_exported_prop)
(type vold_status_prop)
(roletype object_r vold_status_prop)
(type vts_status_prop)
(roletype object_r vts_status_prop)
(type config_prop)
(roletype object_r config_prop)
(type cppreopt_prop)
(roletype object_r cppreopt_prop)
(type dalvik_prop)
(roletype object_r dalvik_prop)
(type debuggerd_prop)
(roletype object_r debuggerd_prop)
(type device_logging_prop)
(roletype object_r device_logging_prop)
(type dhcp_prop)
(roletype object_r dhcp_prop)
(type dumpstate_prop)
(roletype object_r dumpstate_prop)
(type exported3_system_prop)
(roletype object_r exported3_system_prop)
(type exported_dumpstate_prop)
(roletype object_r exported_dumpstate_prop)
(type exported_secure_prop)
(roletype object_r exported_secure_prop)
(type heapprofd_prop)
(roletype object_r heapprofd_prop)
(type net_radio_prop)
(roletype object_r net_radio_prop)
(type pan_result_prop)
(roletype object_r pan_result_prop)
(type persist_debug_prop)
(roletype object_r persist_debug_prop)
(type shell_prop)
(roletype object_r shell_prop)
(type test_harness_prop)
(roletype object_r test_harness_prop)
(type theme_prop)
(roletype object_r theme_prop)
(type use_memfd_prop)
(roletype object_r use_memfd_prop)
(type vold_prop)
(roletype object_r vold_prop)
(type apexd_config_prop)
(roletype object_r apexd_config_prop)
(type apexd_select_prop)
(roletype object_r apexd_select_prop)
(type aaudio_config_prop)
(roletype object_r aaudio_config_prop)
(type apk_verity_prop)
(roletype object_r apk_verity_prop)
(type audio_config_prop)
(roletype object_r audio_config_prop)
(type bootanim_config_prop)
(roletype object_r bootanim_config_prop)
(type bluetooth_config_prop)
(roletype object_r bluetooth_config_prop)
(type build_attestation_prop)
(roletype object_r build_attestation_prop)
(type build_config_prop)
(roletype object_r build_config_prop)
(type build_odm_prop)
(roletype object_r build_odm_prop)
(type build_vendor_prop)
(roletype object_r build_vendor_prop)
(type camera_calibration_prop)
(roletype object_r camera_calibration_prop)
(type camera_config_prop)
(roletype object_r camera_config_prop)
(type camera2_extensions_prop)
(roletype object_r camera2_extensions_prop)
(type camerax_extensions_prop)
(roletype object_r camerax_extensions_prop)
(type charger_config_prop)
(roletype object_r charger_config_prop)
(type codec2_config_prop)
(roletype object_r codec2_config_prop)
(type composd_vm_vendor_prop)
(roletype object_r composd_vm_vendor_prop)
(type cpu_variant_prop)
(roletype object_r cpu_variant_prop)
(type debugfs_restriction_prop)
(roletype object_r debugfs_restriction_prop)
(type drm_service_config_prop)
(roletype object_r drm_service_config_prop)
(type exported_camera_prop)
(roletype object_r exported_camera_prop)
(type exported_config_prop)
(roletype object_r exported_config_prop)
(type exported_default_prop)
(roletype object_r exported_default_prop)
(type ffs_config_prop)
(roletype object_r ffs_config_prop)
(type framework_watchdog_config_prop)
(roletype object_r framework_watchdog_config_prop)
(type graphics_config_prop)
(roletype object_r graphics_config_prop)
(type hdmi_config_prop)
(roletype object_r hdmi_config_prop)
(type hw_timeout_multiplier_prop)
(roletype object_r hw_timeout_multiplier_prop)
(type hypervisor_prop)
(roletype object_r hypervisor_prop)
(type hypervisor_restricted_prop)
(roletype object_r hypervisor_restricted_prop)
(type incremental_prop)
(roletype object_r incremental_prop)
(type keyguard_config_prop)
(roletype object_r keyguard_config_prop)
(type keystore_config_prop)
(roletype object_r keystore_config_prop)
(type lmkd_config_prop)
(roletype object_r lmkd_config_prop)
(type media_config_prop)
(roletype object_r media_config_prop)
(type media_variant_prop)
(roletype object_r media_variant_prop)
(type mediadrm_config_prop)
(roletype object_r mediadrm_config_prop)
(type mm_events_config_prop)
(roletype object_r mm_events_config_prop)
(type oem_unlock_prop)
(roletype object_r oem_unlock_prop)
(type ota_build_prop)
(roletype object_r ota_build_prop)
(type packagemanager_config_prop)
(roletype object_r packagemanager_config_prop)
(type quick_start_prop)
(roletype object_r quick_start_prop)
(type recovery_config_prop)
(roletype object_r recovery_config_prop)
(type recovery_usb_config_prop)
(roletype object_r recovery_usb_config_prop)
(type sendbug_config_prop)
(roletype object_r sendbug_config_prop)
(type soc_prop)
(roletype object_r soc_prop)
(type storage_config_prop)
(roletype object_r storage_config_prop)
(type storagemanager_config_prop)
(roletype object_r storagemanager_config_prop)
(type surfaceflinger_prop)
(roletype object_r surfaceflinger_prop)
(type suspend_prop)
(roletype object_r suspend_prop)
(type systemsound_config_prop)
(roletype object_r systemsound_config_prop)
(type telephony_config_prop)
(roletype object_r telephony_config_prop)
(type threadnetwork_config_prop)
(roletype object_r threadnetwork_config_prop)
(type tombstone_config_prop)
(roletype object_r tombstone_config_prop)
(type usb_config_prop)
(roletype object_r usb_config_prop)
(type userspace_reboot_config_prop)
(roletype object_r userspace_reboot_config_prop)
(type vehicle_hal_prop)
(roletype object_r vehicle_hal_prop)
(type vendor_security_patch_level_prop)
(roletype object_r vendor_security_patch_level_prop)
(type vendor_socket_hook_prop)
(roletype object_r vendor_socket_hook_prop)
(type virtual_ab_prop)
(roletype object_r virtual_ab_prop)
(type vndk_prop)
(roletype object_r vndk_prop)
(type vts_config_prop)
(roletype object_r vts_config_prop)
(type vold_config_prop)
(roletype object_r vold_config_prop)
(type wifi_config_prop)
(roletype object_r wifi_config_prop)
(type zram_config_prop)
(roletype object_r zram_config_prop)
(type zygote_config_prop)
(roletype object_r zygote_config_prop)
(type dck_prop)
(roletype object_r dck_prop)
(type tuner_config_prop)
(roletype object_r tuner_config_prop)
(type usb_uvc_enabled_prop)
(roletype object_r usb_uvc_enabled_prop)
(type setupwizard_mode_prop)
(roletype object_r setupwizard_mode_prop)
(type pm_archiving_enabled_prop)
(roletype object_r pm_archiving_enabled_prop)
(type adbd_config_prop)
(roletype object_r adbd_config_prop)
(type audio_prop)
(roletype object_r audio_prop)
(type bluetooth_a2dp_offload_prop)
(roletype object_r bluetooth_a2dp_offload_prop)
(type bluetooth_audio_hal_prop)
(roletype object_r bluetooth_audio_hal_prop)
(type bluetooth_prop)
(roletype object_r bluetooth_prop)
(type bpf_progs_loaded_prop)
(roletype object_r bpf_progs_loaded_prop)
(type charger_status_prop)
(roletype object_r charger_status_prop)
(type ctl_default_prop)
(roletype object_r ctl_default_prop)
(type ctl_interface_start_prop)
(roletype object_r ctl_interface_start_prop)
(type ctl_start_prop)
(roletype object_r ctl_start_prop)
(type ctl_stop_prop)
(roletype object_r ctl_stop_prop)
(type dalvik_config_prop)
(roletype object_r dalvik_config_prop)
(type dalvik_dynamic_config_prop)
(roletype object_r dalvik_dynamic_config_prop)
(type dalvik_runtime_prop)
(roletype object_r dalvik_runtime_prop)
(type debug_prop)
(roletype object_r debug_prop)
(type device_config_memory_safety_native_boot_prop)
(roletype object_r device_config_memory_safety_native_boot_prop)
(type device_config_memory_safety_native_prop)
(roletype object_r device_config_memory_safety_native_prop)
(type dumpstate_options_prop)
(roletype object_r dumpstate_options_prop)
(type exported_system_prop)
(roletype object_r exported_system_prop)
(type exported_bluetooth_prop)
(roletype object_r exported_bluetooth_prop)
(type exported_overlay_prop)
(roletype object_r exported_overlay_prop)
(type exported_pm_prop)
(roletype object_r exported_pm_prop)
(type future_pm_prop)
(roletype object_r future_pm_prop)
(type ffs_control_prop)
(roletype object_r ffs_control_prop)
(type framework_status_prop)
(roletype object_r framework_status_prop)
(type gesture_prop)
(roletype object_r gesture_prop)
(type graphics_config_writable_prop)
(roletype object_r graphics_config_writable_prop)
(type hal_dumpstate_config_prop)
(roletype object_r hal_dumpstate_config_prop)
(type sota_prop)
(roletype object_r sota_prop)
(type hwservicemanager_prop)
(roletype object_r hwservicemanager_prop)
(type lmkd_prop)
(roletype object_r lmkd_prop)
(type locale_prop)
(roletype object_r locale_prop)
(type logd_prop)
(roletype object_r logd_prop)
(type logpersistd_logging_prop)
(roletype object_r logpersistd_logging_prop)
(type log_prop)
(roletype object_r log_prop)
(type log_tag_prop)
(roletype object_r log_tag_prop)
(type lowpan_prop)
(roletype object_r lowpan_prop)
(type nfc_prop)
(roletype object_r nfc_prop)
(type ota_prop)
(roletype object_r ota_prop)
(type permissive_mte_prop)
(roletype object_r permissive_mte_prop)
(type powerctl_prop)
(roletype object_r powerctl_prop)
(type qemu_hw_prop)
(roletype object_r qemu_hw_prop)
(type qemu_sf_lcd_density_prop)
(roletype object_r qemu_sf_lcd_density_prop)
(type radio_control_prop)
(roletype object_r radio_control_prop)
(type radio_prop)
(roletype object_r radio_prop)
(type serialno_prop)
(roletype object_r serialno_prop)
(type surfaceflinger_color_prop)
(roletype object_r surfaceflinger_color_prop)
(type system_prop)
(roletype object_r system_prop)
(type system_user_mode_emulation_prop)
(roletype object_r system_user_mode_emulation_prop)
(type telephony_status_prop)
(roletype object_r telephony_status_prop)
(type timezone_prop)
(roletype object_r timezone_prop)
(type usb_control_prop)
(roletype object_r usb_control_prop)
(type vold_post_fs_data_prop)
(roletype object_r vold_post_fs_data_prop)
(type wifi_hal_prop)
(roletype object_r wifi_hal_prop)
(type wifi_log_prop)
(roletype object_r wifi_log_prop)
(type wifi_prop)
(roletype object_r wifi_prop)
(type zram_control_prop)
(roletype object_r zram_control_prop)
(type default_prop)
(roletype object_r default_prop)
(type rebootescrow_hal_prop)
(roletype object_r rebootescrow_hal_prop)
(type virtual_face_hal_prop)
(roletype object_r virtual_face_hal_prop)
(type virtual_fingerprint_hal_prop)
(roletype object_r virtual_fingerprint_hal_prop)
(type persist_vendor_debug_wifi_prop)
(roletype object_r persist_vendor_debug_wifi_prop)
(type vendor_default_prop)
(roletype object_r vendor_default_prop)
(type radio)
(roletype object_r radio)
(type recovery)
(roletype object_r recovery)
(type recovery_persist)
(roletype object_r recovery_persist)
(type recovery_persist_exec)
(roletype object_r recovery_persist_exec)
(type recovery_refresh)
(roletype object_r recovery_refresh)
(type recovery_refresh_exec)
(roletype object_r recovery_refresh_exec)
(type rkpdapp)
(roletype object_r rkpdapp)
(type rs)
(roletype object_r rs)
(type rs_exec)
(roletype object_r rs_exec)
(type rss_hwm_reset)
(roletype object_r rss_hwm_reset)
(type runas)
(roletype object_r runas)
(type runas_exec)
(roletype object_r runas_exec)
(type runas_app)
(roletype object_r runas_app)
(type sdcardd)
(roletype object_r sdcardd)
(type sdcardd_exec)
(roletype object_r sdcardd_exec)
(type secure_element)
(roletype object_r secure_element)
(type aidl_lazy_test_service)
(roletype object_r aidl_lazy_test_service)
(type apc_service)
(roletype object_r apc_service)
(type apex_service)
(roletype object_r apex_service)
(type artd_service)
(roletype object_r artd_service)
(type artd_pre_reboot_service)
(roletype object_r artd_pre_reboot_service)
(type audioserver_service)
(roletype object_r audioserver_service)
(type authorization_service)
(roletype object_r authorization_service)
(type batteryproperties_service)
(roletype object_r batteryproperties_service)
(type bluetooth_service)
(roletype object_r bluetooth_service)
(type cameraserver_service)
(roletype object_r cameraserver_service)
(type fwk_camera_service)
(roletype object_r fwk_camera_service)
(type default_android_service)
(roletype object_r default_android_service)
(type device_config_updatable_service)
(roletype object_r device_config_updatable_service)
(type dexopt_chroot_setup_service)
(roletype object_r dexopt_chroot_setup_service)
(type dnsresolver_service)
(roletype object_r dnsresolver_service)
(type drmserver_service)
(roletype object_r drmserver_service)
(type dumpstate_service)
(roletype object_r dumpstate_service)
(type evsmanagerd_service)
(roletype object_r evsmanagerd_service)
(type fingerprintd_service)
(roletype object_r fingerprintd_service)
(type fwk_automotive_display_service)
(roletype object_r fwk_automotive_display_service)
(type gatekeeper_service)
(roletype object_r gatekeeper_service)
(type gpu_service)
(roletype object_r gpu_service)
(type idmap_service)
(roletype object_r idmap_service)
(type incident_service)
(roletype object_r incident_service)
(type installd_service)
(roletype object_r installd_service)
(type credstore_service)
(roletype object_r credstore_service)
(type keystore_compat_hal_service)
(roletype object_r keystore_compat_hal_service)
(type keystore_maintenance_service)
(roletype object_r keystore_maintenance_service)
(type keystore_metrics_service)
(roletype object_r keystore_metrics_service)
(type keystore_service)
(roletype object_r keystore_service)
(type legacykeystore_service)
(roletype object_r legacykeystore_service)
(type lpdump_service)
(roletype object_r lpdump_service)
(type mdns_service)
(roletype object_r mdns_service)
(type mediaserver_service)
(roletype object_r mediaserver_service)
(type mediametrics_service)
(roletype object_r mediametrics_service)
(type mediaextractor_service)
(roletype object_r mediaextractor_service)
(type mediadrmserver_service)
(roletype object_r mediadrmserver_service)
(type mediatranscoding_service)
(roletype object_r mediatranscoding_service)
(type netd_service)
(roletype object_r netd_service)
(type nfc_service)
(roletype object_r nfc_service)
(type ondevicepersonalization_system_service)
(roletype object_r ondevicepersonalization_system_service)
(type ot_daemon_service)
(roletype object_r ot_daemon_service)
(type profiling_service)
(roletype object_r profiling_service)
(type radio_service)
(roletype object_r radio_service)
(type secure_element_service)
(roletype object_r secure_element_service)
(type service_manager_service)
(roletype object_r service_manager_service)
(type storaged_service)
(roletype object_r storaged_service)
(type surfaceflinger_service)
(roletype object_r surfaceflinger_service)
(type system_app_service)
(roletype object_r system_app_service)
(type system_net_netd_service)
(roletype object_r system_net_netd_service)
(type system_suspend_control_internal_service)
(roletype object_r system_suspend_control_internal_service)
(type system_suspend_control_service)
(roletype object_r system_suspend_control_service)
(type update_engine_service)
(roletype object_r update_engine_service)
(type update_engine_stable_service)
(roletype object_r update_engine_stable_service)
(type virtualization_service)
(roletype object_r virtualization_service)
(type virtual_camera_service)
(roletype object_r virtual_camera_service)
(type virtual_touchpad_service)
(roletype object_r virtual_touchpad_service)
(type vold_service)
(roletype object_r vold_service)
(type vr_hwc_service)
(roletype object_r vr_hwc_service)
(type vrflinger_vsync_service)
(roletype object_r vrflinger_vsync_service)
(type accessibility_service)
(roletype object_r accessibility_service)
(type account_service)
(roletype object_r account_service)
(type activity_service)
(roletype object_r activity_service)
(type activity_task_service)
(roletype object_r activity_task_service)
(type adb_service)
(roletype object_r adb_service)
(type adservices_manager_service)
(roletype object_r adservices_manager_service)
(type alarm_service)
(roletype object_r alarm_service)
(type app_binding_service)
(roletype object_r app_binding_service)
(type app_hibernation_service)
(roletype object_r app_hibernation_service)
(type app_integrity_service)
(roletype object_r app_integrity_service)
(type app_prediction_service)
(roletype object_r app_prediction_service)
(type app_search_service)
(roletype object_r app_search_service)
(type appops_service)
(roletype object_r appops_service)
(type appwidget_service)
(roletype object_r appwidget_service)
(type archive_service)
(roletype object_r archive_service)
(type assetatlas_service)
(roletype object_r assetatlas_service)
(type attestation_verification_service)
(roletype object_r attestation_verification_service)
(type audio_service)
(roletype object_r audio_service)
(type auth_service)
(roletype object_r auth_service)
(type autofill_service)
(roletype object_r autofill_service)
(type backup_service)
(roletype object_r backup_service)
(type batterystats_service)
(roletype object_r batterystats_service)
(type battery_service)
(roletype object_r battery_service)
(type binder_calls_stats_service)
(roletype object_r binder_calls_stats_service)
(type blob_store_service)
(roletype object_r blob_store_service)
(type bluetooth_manager_service)
(roletype object_r bluetooth_manager_service)
(type broadcastradio_service)
(roletype object_r broadcastradio_service)
(type cacheinfo_service)
(roletype object_r cacheinfo_service)
(type cameraproxy_service)
(roletype object_r cameraproxy_service)
(type clipboard_service)
(roletype object_r clipboard_service)
(type cloudsearch_service)
(roletype object_r cloudsearch_service)
(type contexthub_service)
(roletype object_r contexthub_service)
(type contextual_search_service)
(roletype object_r contextual_search_service)
(type crossprofileapps_service)
(roletype object_r crossprofileapps_service)
(type IProxyService_service)
(roletype object_r IProxyService_service)
(type companion_device_service)
(roletype object_r companion_device_service)
(type connectivity_native_service)
(roletype object_r connectivity_native_service)
(type connectivity_service)
(roletype object_r connectivity_service)
(type connmetrics_service)
(roletype object_r connmetrics_service)
(type consumer_ir_service)
(roletype object_r consumer_ir_service)
(type content_capture_service)
(roletype object_r content_capture_service)
(type content_suggestions_service)
(roletype object_r content_suggestions_service)
(type content_service)
(roletype object_r content_service)
(type country_detector_service)
(roletype object_r country_detector_service)
(type coverage_service)
(roletype object_r coverage_service)
(type cpuinfo_service)
(roletype object_r cpuinfo_service)
(type cpu_monitor_service)
(roletype object_r cpu_monitor_service)
(type credential_service)
(roletype object_r credential_service)
(type dataloader_manager_service)
(roletype object_r dataloader_manager_service)
(type dbinfo_service)
(roletype object_r dbinfo_service)
(type device_config_service)
(roletype object_r device_config_service)
(type device_policy_service)
(roletype object_r device_policy_service)
(type device_state_service)
(roletype object_r device_state_service)
(type deviceidle_service)
(roletype object_r deviceidle_service)
(type device_identifiers_service)
(roletype object_r device_identifiers_service)
(type devicestoragemonitor_service)
(roletype object_r devicestoragemonitor_service)
(type diskstats_service)
(roletype object_r diskstats_service)
(type display_service)
(roletype object_r display_service)
(type domain_verification_service)
(roletype object_r domain_verification_service)
(type color_display_service)
(roletype object_r color_display_service)
(type ecm_enhanced_confirmation_service)
(roletype object_r ecm_enhanced_confirmation_service)
(type external_vibrator_service)
(roletype object_r external_vibrator_service)
(type file_integrity_service)
(roletype object_r file_integrity_service)
(type font_service)
(roletype object_r font_service)
(type netd_listener_service)
(roletype object_r netd_listener_service)
(type network_watchlist_service)
(roletype object_r network_watchlist_service)
(type devicelock_service)
(roletype object_r devicelock_service)
(type DockObserver_service)
(roletype object_r DockObserver_service)
(type dreams_service)
(roletype object_r dreams_service)
(type dropbox_service)
(roletype object_r dropbox_service)
(type ethernet_service)
(roletype object_r ethernet_service)
(type biometric_service)
(roletype object_r biometric_service)
(type bugreport_service)
(roletype object_r bugreport_service)
(type platform_compat_service)
(roletype object_r platform_compat_service)
(type face_service)
(roletype object_r face_service)
(type fingerprint_service)
(roletype object_r fingerprint_service)
(type fwk_altitude_service)
(roletype object_r fwk_altitude_service)
(type fwk_stats_service)
(roletype object_r fwk_stats_service)
(type fwk_sensor_service)
(roletype object_r fwk_sensor_service)
(type fwk_vibrator_control_service)
(roletype object_r fwk_vibrator_control_service)
(type game_service)
(roletype object_r game_service)
(type gfxinfo_service)
(roletype object_r gfxinfo_service)
(type gnss_time_update_service)
(roletype object_r gnss_time_update_service)
(type grammatical_inflection_service)
(roletype object_r grammatical_inflection_service)
(type graphicsstats_service)
(roletype object_r graphicsstats_service)
(type hardware_service)
(roletype object_r hardware_service)
(type hardware_properties_service)
(roletype object_r hardware_properties_service)
(type hdmi_control_service)
(roletype object_r hdmi_control_service)
(type healthconnect_service)
(roletype object_r healthconnect_service)
(type hint_service)
(roletype object_r hint_service)
(type imms_service)
(roletype object_r imms_service)
(type incremental_service)
(roletype object_r incremental_service)
(type input_method_service)
(roletype object_r input_method_service)
(type input_service)
(roletype object_r input_service)
(type ipsec_service)
(roletype object_r ipsec_service)
(type iris_service)
(roletype object_r iris_service)
(type jobscheduler_service)
(roletype object_r jobscheduler_service)
(type launcherapps_service)
(roletype object_r launcherapps_service)
(type legacy_permission_service)
(roletype object_r legacy_permission_service)
(type light_service)
(roletype object_r light_service)
(type locale_service)
(roletype object_r locale_service)
(type location_service)
(roletype object_r location_service)
(type location_time_zone_manager_service)
(roletype object_r location_time_zone_manager_service)
(type lock_settings_service)
(roletype object_r lock_settings_service)
(type looper_stats_service)
(roletype object_r looper_stats_service)
(type media_communication_service)
(roletype object_r media_communication_service)
(type media_metrics_service)
(roletype object_r media_metrics_service)
(type media_projection_service)
(roletype object_r media_projection_service)
(type media_router_service)
(roletype object_r media_router_service)
(type media_session_service)
(roletype object_r media_session_service)
(type meminfo_service)
(roletype object_r meminfo_service)
(type memtrackproxy_service)
(roletype object_r memtrackproxy_service)
(type midi_service)
(roletype object_r midi_service)
(type mount_service)
(roletype object_r mount_service)
(type music_recognition_service)
(roletype object_r music_recognition_service)
(type nearby_service)
(roletype object_r nearby_service)
(type netpolicy_service)
(roletype object_r netpolicy_service)
(type netstats_service)
(roletype object_r netstats_service)
(type network_management_service)
(roletype object_r network_management_service)
(type network_score_service)
(roletype object_r network_score_service)
(type network_stack_service)
(roletype object_r network_stack_service)
(type network_time_update_service)
(roletype object_r network_time_update_service)
(type notification_service)
(roletype object_r notification_service)
(type oem_lock_service)
(roletype object_r oem_lock_service)
(type otadexopt_service)
(roletype object_r otadexopt_service)
(type overlay_service)
(roletype object_r overlay_service)
(type pac_proxy_service)
(roletype object_r pac_proxy_service)
(type package_service)
(roletype object_r package_service)
(type package_native_service)
(roletype object_r package_native_service)
(type people_service)
(roletype object_r people_service)
(type permission_service)
(roletype object_r permission_service)
(type permissionmgr_service)
(roletype object_r permissionmgr_service)
(type permission_checker_service)
(roletype object_r permission_checker_service)
(type persistent_data_block_service)
(roletype object_r persistent_data_block_service)
(type pinner_service)
(roletype object_r pinner_service)
(type powerstats_service)
(roletype object_r powerstats_service)
(type power_service)
(roletype object_r power_service)
(type print_service)
(roletype object_r print_service)
(type processinfo_service)
(roletype object_r processinfo_service)
(type procstats_service)
(roletype object_r procstats_service)
(type reboot_readiness_service)
(roletype object_r reboot_readiness_service)
(type recovery_service)
(roletype object_r recovery_service)
(type registry_service)
(roletype object_r registry_service)
(type remote_auth_service)
(roletype object_r remote_auth_service)
(type remote_provisioning_service)
(roletype object_r remote_provisioning_service)
(type resources_manager_service)
(roletype object_r resources_manager_service)
(type restrictions_service)
(roletype object_r restrictions_service)
(type role_service)
(roletype object_r role_service)
(type rollback_service)
(roletype object_r rollback_service)
(type runtime_service)
(roletype object_r runtime_service)
(type rttmanager_service)
(roletype object_r rttmanager_service)
(type samplingprofiler_service)
(roletype object_r samplingprofiler_service)
(type scheduling_policy_service)
(roletype object_r scheduling_policy_service)
(type search_service)
(roletype object_r search_service)
(type search_ui_service)
(roletype object_r search_ui_service)
(type sec_key_att_app_id_provider_service)
(roletype object_r sec_key_att_app_id_provider_service)
(type security_state_service)
(roletype object_r security_state_service)
(type selection_toolbar_service)
(roletype object_r selection_toolbar_service)
(type sensitive_content_protection_service)
(roletype object_r sensitive_content_protection_service)
(type sensorservice_service)
(roletype object_r sensorservice_service)
(type sensor_privacy_service)
(roletype object_r sensor_privacy_service)
(type serial_service)
(roletype object_r serial_service)
(type servicediscovery_service)
(roletype object_r servicediscovery_service)
(type settings_service)
(roletype object_r settings_service)
(type shortcut_service)
(roletype object_r shortcut_service)
(type slice_service)
(roletype object_r slice_service)
(type smartspace_service)
(roletype object_r smartspace_service)
(type statusbar_service)
(roletype object_r statusbar_service)
(type storagestats_service)
(roletype object_r storagestats_service)
(type sdk_sandbox_service)
(roletype object_r sdk_sandbox_service)
(type system_config_service)
(roletype object_r system_config_service)
(type system_server_dumper_service)
(roletype object_r system_server_dumper_service)
(type system_update_service)
(roletype object_r system_update_service)
(type soundtrigger_middleware_service)
(roletype object_r soundtrigger_middleware_service)
(type speech_recognition_service)
(roletype object_r speech_recognition_service)
(type tare_service)
(roletype object_r tare_service)
(type task_service)
(roletype object_r task_service)
(type testharness_service)
(roletype object_r testharness_service)
(type textclassification_service)
(roletype object_r textclassification_service)
(type textservices_service)
(roletype object_r textservices_service)
(type texttospeech_service)
(roletype object_r texttospeech_service)
(type telecom_service)
(roletype object_r telecom_service)
(type thermal_service)
(roletype object_r thermal_service)
(type threadnetwork_service)
(roletype object_r threadnetwork_service)
(type timedetector_service)
(roletype object_r timedetector_service)
(type timezonedetector_service)
(roletype object_r timezonedetector_service)
(type translation_service)
(roletype object_r translation_service)
(type trust_service)
(roletype object_r trust_service)
(type tv_ad_service)
(roletype object_r tv_ad_service)
(type tv_iapp_service)
(roletype object_r tv_iapp_service)
(type tv_input_service)
(roletype object_r tv_input_service)
(type tv_tuner_resource_mgr_service)
(roletype object_r tv_tuner_resource_mgr_service)
(type uimode_service)
(roletype object_r uimode_service)
(type updatelock_service)
(roletype object_r updatelock_service)
(type uri_grants_service)
(roletype object_r uri_grants_service)
(type usagestats_service)
(roletype object_r usagestats_service)
(type usb_service)
(roletype object_r usb_service)
(type user_service)
(roletype object_r user_service)
(type uwb_service)
(roletype object_r uwb_service)
(type vcn_management_service)
(roletype object_r vcn_management_service)
(type vibrator_service)
(roletype object_r vibrator_service)
(type vibrator_manager_service)
(roletype object_r vibrator_manager_service)
(type virtual_device_service)
(roletype object_r virtual_device_service)
(type virtual_device_native_service)
(roletype object_r virtual_device_native_service)
(type voiceinteraction_service)
(roletype object_r voiceinteraction_service)
(type vpn_management_service)
(roletype object_r vpn_management_service)
(type vr_manager_service)
(roletype object_r vr_manager_service)
(type wallpaper_service)
(roletype object_r wallpaper_service)
(type wallpaper_effects_generation_service)
(roletype object_r wallpaper_effects_generation_service)
(type webviewupdate_service)
(roletype object_r webviewupdate_service)
(type wifip2p_service)
(roletype object_r wifip2p_service)
(type wifiscanner_service)
(roletype object_r wifiscanner_service)
(type wifi_service)
(roletype object_r wifi_service)
(type wifinl80211_service)
(roletype object_r wifinl80211_service)
(type wifiaware_service)
(roletype object_r wifiaware_service)
(type window_service)
(roletype object_r window_service)
(type inputflinger_service)
(roletype object_r inputflinger_service)
(type tethering_service)
(roletype object_r tethering_service)
(type emergency_affordance_service)
(roletype object_r emergency_affordance_service)
(type hal_audio_service)
(roletype object_r hal_audio_service)
(type hal_audiocontrol_service)
(roletype object_r hal_audiocontrol_service)
(type hal_authgraph_service)
(roletype object_r hal_authgraph_service)
(type hal_authsecret_service)
(roletype object_r hal_authsecret_service)
(type hal_bluetooth_service)
(roletype object_r hal_bluetooth_service)
(type hal_bootctl_service)
(roletype object_r hal_bootctl_service)
(type hal_broadcastradio_service)
(roletype object_r hal_broadcastradio_service)
(type hal_camera_service)
(roletype object_r hal_camera_service)
(type hal_can_controller_service)
(roletype object_r hal_can_controller_service)
(type hal_cas_service)
(roletype object_r hal_cas_service)
(type hal_codec2_service)
(roletype object_r hal_codec2_service)
(type hal_confirmationui_service)
(roletype object_r hal_confirmationui_service)
(type hal_contexthub_service)
(roletype object_r hal_contexthub_service)
(type hal_drm_service)
(roletype object_r hal_drm_service)
(type hal_dumpstate_service)
(roletype object_r hal_dumpstate_service)
(type hal_evs_service)
(roletype object_r hal_evs_service)
(type hal_face_service)
(roletype object_r hal_face_service)
(type hal_fastboot_service)
(roletype object_r hal_fastboot_service)
(type hal_fingerprint_service)
(roletype object_r hal_fingerprint_service)
(type hal_gnss_service)
(roletype object_r hal_gnss_service)
(type hal_graphics_allocator_service)
(roletype object_r hal_graphics_allocator_service)
(type hal_graphics_composer_service)
(roletype object_r hal_graphics_composer_service)
(type hal_graphics_mapper_service)
(roletype object_r hal_graphics_mapper_service)
(type hal_health_service)
(roletype object_r hal_health_service)
(type hal_health_storage_service)
(roletype object_r hal_health_storage_service)
(type hal_identity_service)
(roletype object_r hal_identity_service)
(type hal_input_processor_service)
(roletype object_r hal_input_processor_service)
(type hal_ir_service)
(roletype object_r hal_ir_service)
(type hal_ivn_service)
(roletype object_r hal_ivn_service)
(type hal_keymint_service)
(roletype object_r hal_keymint_service)
(type hal_light_service)
(roletype object_r hal_light_service)
(type hal_macsec_service)
(roletype object_r hal_macsec_service)
(type hal_memtrack_service)
(roletype object_r hal_memtrack_service)
(type hal_neuralnetworks_service)
(roletype object_r hal_neuralnetworks_service)
(type hal_nfc_service)
(roletype object_r hal_nfc_service)
(type hal_oemlock_service)
(roletype object_r hal_oemlock_service)
(type hal_power_service)
(roletype object_r hal_power_service)
(type hal_power_stats_service)
(roletype object_r hal_power_stats_service)
(type hal_radio_service)
(roletype object_r hal_radio_service)
(type hal_rebootescrow_service)
(roletype object_r hal_rebootescrow_service)
(type hal_remoteaccess_service)
(roletype object_r hal_remoteaccess_service)
(type hal_remotelyprovisionedcomponent_avf_service)
(roletype object_r hal_remotelyprovisionedcomponent_avf_service)
(type hal_remotelyprovisionedcomponent_service)
(roletype object_r hal_remotelyprovisionedcomponent_service)
(type hal_sensors_service)
(roletype object_r hal_sensors_service)
(type hal_secretkeeper_service)
(roletype object_r hal_secretkeeper_service)
(type hal_secureclock_service)
(roletype object_r hal_secureclock_service)
(type hal_secure_element_service)
(roletype object_r hal_secure_element_service)
(type hal_sharedsecret_service)
(roletype object_r hal_sharedsecret_service)
(type hal_system_suspend_service)
(roletype object_r hal_system_suspend_service)
(type hal_tetheroffload_service)
(roletype object_r hal_tetheroffload_service)
(type hal_thermal_service)
(roletype object_r hal_thermal_service)
(type hal_tv_hdmi_cec_service)
(roletype object_r hal_tv_hdmi_cec_service)
(type hal_tv_hdmi_connection_service)
(roletype object_r hal_tv_hdmi_connection_service)
(type hal_tv_hdmi_earc_service)
(roletype object_r hal_tv_hdmi_earc_service)
(type hal_tv_input_service)
(roletype object_r hal_tv_input_service)
(type hal_threadnetwork_service)
(roletype object_r hal_threadnetwork_service)
(type hal_tv_tuner_service)
(roletype object_r hal_tv_tuner_service)
(type hal_usb_service)
(roletype object_r hal_usb_service)
(type hal_usb_gadget_service)
(roletype object_r hal_usb_gadget_service)
(type hal_uwb_service)
(roletype object_r hal_uwb_service)
(type hal_vehicle_service)
(roletype object_r hal_vehicle_service)
(type hal_vibrator_service)
(roletype object_r hal_vibrator_service)
(type hal_weaver_service)
(roletype object_r hal_weaver_service)
(type hal_nlinterceptor_service)
(roletype object_r hal_nlinterceptor_service)
(type hal_wifi_service)
(roletype object_r hal_wifi_service)
(type hal_wifi_hostapd_service)
(roletype object_r hal_wifi_hostapd_service)
(type hal_wifi_supplicant_service)
(roletype object_r hal_wifi_supplicant_service)
(type hal_gatekeeper_service)
(roletype object_r hal_gatekeeper_service)
(type servicemanager)
(roletype object_r servicemanager)
(type servicemanager_exec)
(roletype object_r servicemanager_exec)
(type sgdisk)
(roletype object_r sgdisk)
(type sgdisk_exec)
(roletype object_r sgdisk_exec)
(type shared_relro)
(roletype object_r shared_relro)
(type shell)
(roletype object_r shell)
(type shell_exec)
(roletype object_r shell_exec)
(type simpleperf)
(roletype object_r simpleperf)
(type simpleperf_app_runner)
(roletype object_r simpleperf_app_runner)
(type simpleperf_app_runner_exec)
(roletype object_r simpleperf_app_runner_exec)
(type slideshow)
(roletype object_r slideshow)
(type statsd)
(roletype object_r statsd)
(type statsd_exec)
(roletype object_r statsd_exec)
(type su)
(roletype object_r su)
(type su_exec)
(roletype object_r su_exec)
(type surfaceflinger)
(roletype object_r surfaceflinger)
(type surfaceflinger_tmpfs)
(roletype object_r surfaceflinger_tmpfs)
(type system_app)
(roletype object_r system_app)
(type system_server)
(roletype object_r system_server)
(type system_server_tmpfs)
(roletype object_r system_server_tmpfs)
(type tee)
(roletype object_r tee)
(type tee_device)
(roletype object_r tee_device)
(type tombstoned)
(roletype object_r tombstoned)
(type tombstoned_exec)
(roletype object_r tombstoned_exec)
(type toolbox)
(roletype object_r toolbox)
(type toolbox_exec)
(roletype object_r toolbox_exec)
(type traced)
(roletype object_r traced)
(type traced_tmpfs)
(roletype object_r traced_tmpfs)
(type traced_perf)
(roletype object_r traced_perf)
(type traced_probes)
(roletype object_r traced_probes)
(type traceur_app)
(roletype object_r traceur_app)
(type ueventd)
(roletype object_r ueventd)
(type ueventd_tmpfs)
(roletype object_r ueventd_tmpfs)
(type uncrypt)
(roletype object_r uncrypt)
(type uncrypt_exec)
(roletype object_r uncrypt_exec)
(type untrusted_app)
(roletype object_r untrusted_app)
(type untrusted_app_32)
(roletype object_r untrusted_app_32)
(type untrusted_app_30)
(roletype object_r untrusted_app_30)
(type untrusted_app_29)
(roletype object_r untrusted_app_29)
(type untrusted_app_27)
(roletype object_r untrusted_app_27)
(type untrusted_app_25)
(roletype object_r untrusted_app_25)
(type update_engine)
(roletype object_r update_engine)
(type update_engine_exec)
(roletype object_r update_engine_exec)
(type update_verifier)
(roletype object_r update_verifier)
(type update_verifier_exec)
(roletype object_r update_verifier_exec)
(type usbd)
(roletype object_r usbd)
(type usbd_exec)
(roletype object_r usbd_exec)
(type vdc)
(roletype object_r vdc)
(type vdc_exec)
(roletype object_r vdc_exec)
(type vendor_init)
(roletype object_r vendor_init)
(type vendor_misc_writer)
(roletype object_r vendor_misc_writer)
(type vendor_misc_writer_exec)
(roletype object_r vendor_misc_writer_exec)
(type vendor_modprobe)
(roletype object_r vendor_modprobe)
(type vendor_shell)
(roletype object_r vendor_shell)
(type vendor_shell_exec)
(roletype object_r vendor_shell_exec)
(type vendor_toolbox_exec)
(roletype object_r vendor_toolbox_exec)
(type virtual_touchpad)
(roletype object_r virtual_touchpad)
(type virtual_touchpad_exec)
(roletype object_r virtual_touchpad_exec)
(type service_manager_vndservice)
(roletype object_r service_manager_vndservice)
(type default_android_vndservice)
(roletype object_r default_android_vndservice)
(type vndservicemanager)
(roletype object_r vndservicemanager)
(type vold)
(roletype object_r vold)
(type vold_exec)
(roletype object_r vold_exec)
(type vold_prepare_subdirs)
(roletype object_r vold_prepare_subdirs)
(type vold_prepare_subdirs_exec)
(roletype object_r vold_prepare_subdirs_exec)
(type watchdogd)
(roletype object_r watchdogd)
(type watchdogd_exec)
(roletype object_r watchdogd_exec)
(type webview_zygote)
(roletype object_r webview_zygote)
(type webview_zygote_exec)
(roletype object_r webview_zygote_exec)
(type webview_zygote_tmpfs)
(roletype object_r webview_zygote_tmpfs)
(type wificond)
(roletype object_r wificond)
(type wificond_exec)
(roletype object_r wificond_exec)
(type zygote)
(roletype object_r zygote)
(type zygote_tmpfs)
(roletype object_r zygote_tmpfs)
(type zygote_exec)
(roletype object_r zygote_exec)
;;* lmx 330 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_1 domain (process (fork)))
;;* lme

;;* lmx 330 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_2 domain (process (fork)))
;;* lme

;;* lmx 330 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_3 domain (process (fork)))
;;* lme

;;* lmx 331 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_4 domain (process (fork)))
;;* lme

;;* lmx 331 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_5 domain (process (fork)))
;;* lme

;;* lmx 331 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_6 domain (process (fork)))
;;* lme

;;* lmx 332 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_7 domain (process (fork)))
;;* lme

;;* lmx 332 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_8 domain (process (fork)))
;;* lme

;;* lmx 332 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_9 domain (process (fork)))
;;* lme

;;* lmx 333 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_10 domain (process (fork)))
;;* lme

;;* lmx 333 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_11 domain (process (fork)))
;;* lme

;;* lmx 333 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_12 domain (process (fork)))
;;* lme

;;* lmx 334 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_13 domain (process (fork)))
;;* lme

;;* lmx 334 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_14 domain (process (fork)))
;;* lme

;;* lmx 334 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_15 domain (process (fork)))
;;* lme

;;* lmx 335 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_16 domain (process (fork)))
;;* lme

;;* lmx 335 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_17 domain (process (fork)))
;;* lme

;;* lmx 335 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_18 domain (process (fork)))
;;* lme

;;* lmx 336 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_19 domain (process (fork)))
;;* lme

;;* lmx 336 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_20 domain (process (fork)))
;;* lme

;;* lmx 336 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_21 domain (process (fork)))
;;* lme

;;* lmx 337 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_22 domain (process (fork)))
;;* lme

;;* lmx 337 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_23 domain (process (fork)))
;;* lme

;;* lmx 337 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_24 domain (process (fork)))
;;* lme

;;* lmx 338 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_25 domain (process (fork)))
;;* lme

;;* lmx 338 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_26 domain (process (fork)))
;;* lme

;;* lmx 338 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_27 domain (process (fork)))
;;* lme

;;* lmx 339 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_28 domain (process (fork)))
;;* lme

;;* lmx 339 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_29 domain (process (fork)))
;;* lme

;;* lmx 339 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_30 domain (process (fork)))
;;* lme

;;* lmx 340 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_31 domain (process (fork)))
;;* lme

;;* lmx 340 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_32 domain (process (fork)))
;;* lme

;;* lmx 340 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_33 domain (process (fork)))
;;* lme

;;* lmx 341 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_34 domain (process (fork)))
;;* lme

;;* lmx 341 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_35 domain (process (fork)))
;;* lme

;;* lmx 341 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_36 domain (process (fork)))
;;* lme

;;* lmx 342 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_37 domain (process (fork)))
;;* lme

;;* lmx 342 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_38 domain (process (fork)))
;;* lme

;;* lmx 342 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_39 domain (process (fork)))
;;* lme

;;* lmx 343 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_40 domain (process (fork)))
;;* lme

;;* lmx 343 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_41 domain (process (fork)))
;;* lme

;;* lmx 343 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_42 domain (process (fork)))
;;* lme

;;* lmx 344 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_43 domain (process (fork)))
;;* lme

;;* lmx 344 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_44 domain (process (fork)))
;;* lme

;;* lmx 344 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_45 domain (process (fork)))
;;* lme

;;* lmx 345 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_46 domain (process (fork)))
;;* lme

;;* lmx 345 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_47 domain (process (fork)))
;;* lme

;;* lmx 345 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_48 domain (process (fork)))
;;* lme

;;* lmx 346 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_49 domain (process (fork)))
;;* lme

;;* lmx 346 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_50 domain (process (fork)))
;;* lme

;;* lmx 346 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_51 domain (process (fork)))
;;* lme

;;* lmx 347 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_52 domain (process (fork)))
;;* lme

;;* lmx 347 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_53 domain (process (fork)))
;;* lme

;;* lmx 347 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_54 domain (process (fork)))
;;* lme

;;* lmx 348 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_55 domain (process (fork)))
;;* lme

;;* lmx 348 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_56 domain (process (fork)))
;;* lme

;;* lmx 348 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_57 domain (process (fork)))
;;* lme

;;* lmx 349 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_58 domain (process (fork)))
;;* lme

;;* lmx 349 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_59 domain (process (fork)))
;;* lme

;;* lmx 349 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_60 domain (process (fork)))
;;* lme

;;* lmx 350 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_61 domain (process (fork)))
;;* lme

;;* lmx 350 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_62 domain (process (fork)))
;;* lme

;;* lmx 350 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_63 domain (process (fork)))
;;* lme

;;* lmx 351 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_64 domain (process (fork)))
;;* lme

;;* lmx 351 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_65 domain (process (fork)))
;;* lme

;;* lmx 351 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_66 domain (process (fork)))
;;* lme

;;* lmx 352 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_67 domain (process (fork)))
;;* lme

;;* lmx 352 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_68 domain (process (fork)))
;;* lme

;;* lmx 352 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_69 domain (process (fork)))
;;* lme

;;* lmx 353 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_70 domain (process (fork)))
;;* lme

;;* lmx 353 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_71 domain (process (fork)))
;;* lme

;;* lmx 353 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_72 domain (process (fork)))
;;* lme

;;* lmx 354 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_73 domain (process (fork)))
;;* lme

;;* lmx 354 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_74 domain (process (fork)))
;;* lme

;;* lmx 354 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_75 domain (process (fork)))
;;* lme

;;* lmx 355 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_76 domain (process (fork)))
;;* lme

;;* lmx 355 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_77 domain (process (fork)))
;;* lme

;;* lmx 355 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_78 domain (process (fork)))
;;* lme

;;* lmx 356 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_79 domain (process (fork)))
;;* lme

;;* lmx 356 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_80 domain (process (fork)))
;;* lme

;;* lmx 356 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_81 domain (process (fork)))
;;* lme

;;* lmx 357 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_82 domain (process (fork)))
;;* lme

;;* lmx 357 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_83 domain (process (fork)))
;;* lme

;;* lmx 357 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_84 domain (process (fork)))
;;* lme

;;* lmx 358 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_85 domain (process (fork)))
;;* lme

;;* lmx 358 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_86 domain (process (fork)))
;;* lme

;;* lmx 358 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_87 domain (process (fork)))
;;* lme

;;* lmx 359 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_88 domain (process (fork)))
;;* lme

;;* lmx 359 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_89 domain (process (fork)))
;;* lme

;;* lmx 359 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_90 domain (process (fork)))
;;* lme

;;* lmx 360 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_91 domain (process (fork)))
;;* lme

;;* lmx 360 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_92 domain (process (fork)))
;;* lme

;;* lmx 360 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_93 domain (process (fork)))
;;* lme

;;* lmx 361 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_94 domain (process (fork)))
;;* lme

;;* lmx 361 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_95 domain (process (fork)))
;;* lme

;;* lmx 361 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_96 domain (process (fork)))
;;* lme

;;* lmx 362 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_97 domain (process (fork)))
;;* lme

;;* lmx 362 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_98 domain (process (fork)))
;;* lme

;;* lmx 362 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_99 domain (process (fork)))
;;* lme

;;* lmx 363 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_100 domain (process (fork)))
;;* lme

;;* lmx 363 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_101 domain (process (fork)))
;;* lme

;;* lmx 363 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_102 domain (process (fork)))
;;* lme

;;* lmx 364 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_103 domain (process (fork)))
;;* lme

;;* lmx 364 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_104 domain (process (fork)))
;;* lme

;;* lmx 364 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_105 domain (process (fork)))
;;* lme

;;* lmx 365 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_106 domain (process (fork)))
;;* lme

;;* lmx 365 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_107 domain (process (fork)))
;;* lme

;;* lmx 365 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_108 domain (process (fork)))
;;* lme

;;* lmx 366 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_109 domain (process (fork)))
;;* lme

;;* lmx 366 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_110 domain (process (fork)))
;;* lme

;;* lmx 366 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_111 domain (process (fork)))
;;* lme

;;* lmx 367 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_112 domain (process (fork)))
;;* lme

;;* lmx 367 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_113 domain (process (fork)))
;;* lme

;;* lmx 367 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_114 domain (process (fork)))
;;* lme

;;* lmx 368 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_115 domain (process (fork)))
;;* lme

;;* lmx 368 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_116 domain (process (fork)))
;;* lme

;;* lmx 368 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_117 domain (process (fork)))
;;* lme

;;* lmx 369 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_118 domain (process (fork)))
;;* lme

;;* lmx 369 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_119 domain (process (fork)))
;;* lme

;;* lmx 369 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_120 domain (process (fork)))
;;* lme

;;* lmx 370 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_121 domain (process (fork)))
;;* lme

;;* lmx 370 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_122 domain (process (fork)))
;;* lme

;;* lmx 370 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_123 domain (process (fork)))
;;* lme

;;* lmx 371 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_124 domain (process (fork)))
;;* lme

;;* lmx 371 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_125 domain (process (fork)))
;;* lme

;;* lmx 371 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_126 domain (process (fork)))
;;* lme

;;* lmx 372 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_127 domain (process (fork)))
;;* lme

;;* lmx 372 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_128 domain (process (fork)))
;;* lme

;;* lmx 372 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_129 domain (process (fork)))
;;* lme

;;* lmx 373 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_130 domain (process (fork)))
;;* lme

;;* lmx 373 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_131 domain (process (fork)))
;;* lme

;;* lmx 373 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_132 domain (process (fork)))
;;* lme

;;* lmx 374 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_133 domain (process (fork)))
;;* lme

;;* lmx 374 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_134 domain (process (fork)))
;;* lme

;;* lmx 374 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_135 domain (process (fork)))
;;* lme

;;* lmx 375 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_136 domain (process (fork)))
;;* lme

;;* lmx 375 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_137 domain (process (fork)))
;;* lme

;;* lmx 375 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_138 domain (process (fork)))
;;* lme

;;* lmx 376 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_139 domain (process (fork)))
;;* lme

;;* lmx 376 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_140 domain (process (fork)))
;;* lme

;;* lmx 376 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_141 domain (process (fork)))
;;* lme

;;* lmx 377 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_142 domain (process (fork)))
;;* lme

;;* lmx 377 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_143 domain (process (fork)))
;;* lme

;;* lmx 377 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_144 domain (process (fork)))
;;* lme

;;* lmx 378 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_145 domain (process (fork)))
;;* lme

;;* lmx 378 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_146 domain (process (fork)))
;;* lme

;;* lmx 378 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_147 domain (process (fork)))
;;* lme

;;* lmx 379 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_148 domain (process (fork)))
;;* lme

;;* lmx 379 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_149 domain (process (fork)))
;;* lme

;;* lmx 379 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_150 domain (process (fork)))
;;* lme

;;* lmx 380 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_151 domain (process (fork)))
;;* lme

;;* lmx 380 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_152 domain (process (fork)))
;;* lme

;;* lmx 380 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_153 domain (process (fork)))
;;* lme

;;* lmx 381 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_154 domain (process (fork)))
;;* lme

;;* lmx 381 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_155 domain (process (fork)))
;;* lme

;;* lmx 381 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_156 domain (process (fork)))
;;* lme

;;* lmx 382 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_157 domain (process (fork)))
;;* lme

;;* lmx 382 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_158 domain (process (fork)))
;;* lme

;;* lmx 382 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_159 domain (process (fork)))
;;* lme

;;* lmx 383 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_160 domain (process (fork)))
;;* lme

;;* lmx 383 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_161 domain (process (fork)))
;;* lme

;;* lmx 383 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_162 domain (process (fork)))
;;* lme

;;* lmx 384 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_163 domain (process (fork)))
;;* lme

;;* lmx 384 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_164 domain (process (fork)))
;;* lme

;;* lmx 384 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_165 domain (process (fork)))
;;* lme

;;* lmx 385 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_166 domain (process (fork)))
;;* lme

;;* lmx 385 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_167 domain (process (fork)))
;;* lme

;;* lmx 385 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_168 domain (process (fork)))
;;* lme

;;* lmx 386 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_169 domain (process (fork)))
;;* lme

;;* lmx 386 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_170 domain (process (fork)))
;;* lme

;;* lmx 386 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_171 domain (process (fork)))
;;* lme

;;* lmx 387 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_172 domain (process (fork)))
;;* lme

;;* lmx 387 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_173 domain (process (fork)))
;;* lme

;;* lmx 387 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_174 domain (process (fork)))
;;* lme

;;* lmx 388 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_175 domain (process (fork)))
;;* lme

;;* lmx 388 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_176 domain (process (fork)))
;;* lme

;;* lmx 388 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_177 domain (process (fork)))
;;* lme

;;* lmx 389 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_178 domain (process (fork)))
;;* lme

;;* lmx 389 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_179 domain (process (fork)))
;;* lme

;;* lmx 389 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_180 domain (process (fork)))
;;* lme

;;* lmx 390 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_181 domain (process (fork)))
;;* lme

;;* lmx 390 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_182 domain (process (fork)))
;;* lme

;;* lmx 390 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_183 domain (process (fork)))
;;* lme

;;* lmx 391 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_184 domain (process (fork)))
;;* lme

;;* lmx 391 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_185 domain (process (fork)))
;;* lme

;;* lmx 391 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_186 domain (process (fork)))
;;* lme

;;* lmx 392 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_187 domain (process (fork)))
;;* lme

;;* lmx 392 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_188 domain (process (fork)))
;;* lme

;;* lmx 392 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_189 domain (process (fork)))
;;* lme

;;* lmx 393 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_190 domain (process (fork)))
;;* lme

;;* lmx 393 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_191 domain (process (fork)))
;;* lme

;;* lmx 393 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_192 domain (process (fork)))
;;* lme

;;* lmx 394 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_193 domain (process (fork)))
;;* lme

;;* lmx 394 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_194 domain (process (fork)))
;;* lme

;;* lmx 394 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_195 domain (process (fork)))
;;* lme

;;* lmx 395 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_196 domain (process (fork)))
;;* lme

;;* lmx 395 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_197 domain (process (fork)))
;;* lme

;;* lmx 395 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_198 domain (process (fork)))
;;* lme

;;* lmx 398 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_199 domain (process (fork)))
;;* lme

;;* lmx 398 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_200 domain (process (fork)))
;;* lme

;;* lmx 398 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_201 domain (process (fork)))
;;* lme

;;* lmx 399 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_202 domain (process (fork)))
;;* lme

;;* lmx 399 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_203 domain (process (fork)))
;;* lme

;;* lmx 399 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_204 domain (process (fork)))
;;* lme

;;* lmx 400 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_205 domain (process (fork)))
;;* lme

;;* lmx 400 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_206 domain (process (fork)))
;;* lme

;;* lmx 400 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_207 domain (process (fork)))
;;* lme

;;* lmx 401 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_208 domain (process (fork)))
;;* lme

;;* lmx 401 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_209 domain (process (fork)))
;;* lme

;;* lmx 401 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_210 domain (process (fork)))
;;* lme

;;* lmx 402 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_211 domain (process (fork)))
;;* lme

;;* lmx 402 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_212 domain (process (fork)))
;;* lme

;;* lmx 402 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_213 domain (process (fork)))
;;* lme

;;* lmx 403 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_214 domain (process (fork)))
;;* lme

;;* lmx 403 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_215 domain (process (fork)))
;;* lme

;;* lmx 403 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_216 domain (process (fork)))
;;* lme

;;* lmx 404 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_217 domain (process (fork)))
;;* lme

;;* lmx 404 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_218 domain (process (fork)))
;;* lme

;;* lmx 404 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_219 domain (process (fork)))
;;* lme

;;* lmx 405 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_220 domain (process (fork)))
;;* lme

;;* lmx 405 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_221 domain (process (fork)))
;;* lme

;;* lmx 405 system/sepolicy/prebuilts/api/202404/public/attributes

(neverallow base_typeattr_222 domain (process (fork)))
;;* lme

;;* lmx 8 system/sepolicy/prebuilts/api/202404/public/adbd.te

(neverallow base_typeattr_223 adbd (process (transition)))
;;* lme

;;* lmx 9 system/sepolicy/prebuilts/api/202404/public/adbd.te

(neverallow base_typeattr_224 adbd (process (dyntransition)))
;;* lme

(allow adbd shell_test_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
(allow adbd shell_test_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow adbd shell_test_data_file (lnk_file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow apexd servicemanager (binder (call transfer)))
(allow servicemanager apexd (binder (call transfer)))
(allow servicemanager apexd (dir (search)))
(allow servicemanager apexd (file (read open)))
(allow servicemanager apexd (process (getattr)))
(allow apexd apex_service (service_manager (add find)))
;;* lmx 6 system/sepolicy/prebuilts/api/202404/public/apexd.te

(neverallow base_typeattr_225 apex_service (service_manager (add)))
;;* lme

;;* lmx 8 system/sepolicy/prebuilts/api/202404/public/apexd.te

(neverallow base_typeattr_226 apex_service (service_manager (find)))
;;* lme

;;* lmx 9 system/sepolicy/prebuilts/api/202404/public/apexd.te

(neverallow base_typeattr_227 apexd (binder (call)))
;;* lme

;;* lmx 11 system/sepolicy/prebuilts/api/202404/public/apexd.te

(neverallow domain apexd (process (ptrace)))
;;* lme

;;* lmx 20 system/sepolicy/prebuilts/api/202404/public/app.te

(neverallow base_typeattr_228 self (capability (chown dac_override dac_read_search fowner fsetid kill setgid setuid setpcap linux_immutable net_bind_service net_broadcast net_admin net_raw ipc_lock ipc_owner sys_module sys_rawio sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_nice sys_resource sys_time sys_tty_config mknod lease audit_write audit_control setfcap)))
(neverallow base_typeattr_228 self (capability2 (mac_override mac_admin syslog wake_alarm block_suspend audit_read perfmon)))
(neverallow base_typeattr_228 self (cap_userns (chown dac_override dac_read_search fowner fsetid kill setgid setuid setpcap linux_immutable net_bind_service net_broadcast net_admin net_raw ipc_lock ipc_owner sys_module sys_rawio sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_nice sys_resource sys_time sys_tty_config mknod lease audit_write audit_control setfcap)))
(neverallow base_typeattr_228 self (cap2_userns (mac_override mac_admin syslog wake_alarm block_suspend audit_read perfmon)))
;;* lme

;;* lmx 23 system/sepolicy/prebuilts/api/202404/public/app.te

(neverallow appdomain dev_type (blk_file (read write)))
;;* lme

;;* lmx 26 system/sepolicy/prebuilts/api/202404/public/app.te

(neverallow isolated_app graphics_device (chr_file (read write)))
(neverallow shell graphics_device (chr_file (read write)))
(neverallow untrusted_app graphics_device (chr_file (read write)))
;;* lme

;;* lmx 29 system/sepolicy/prebuilts/api/202404/public/app.te

(neverallow base_typeattr_229 nfc_device (chr_file (read write)))
;;* lme

;;* lmx 31 system/sepolicy/prebuilts/api/202404/public/app.te

(neverallow base_typeattr_230 hci_attach_dev (chr_file (read write)))
;;* lme

;;* lmx 32 system/sepolicy/prebuilts/api/202404/public/app.te

(neverallow appdomain tee_device (chr_file (read write)))
;;* lme

;;* lmx 42 system/sepolicy/prebuilts/api/202404/public/app.te

(neverallow base_typeattr_231 domain (netlink_tcpdiag_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write)))
(neverallow base_typeattr_231 domain (netlink_nflog_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow base_typeattr_231 domain (netlink_xfrm_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write)))
(neverallow base_typeattr_231 domain (netlink_audit_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write nlmsg_relay nlmsg_readpriv nlmsg_tty_audit)))
(neverallow base_typeattr_231 domain (netlink_dnrt_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
;;* lme

;;* lmx 48 system/sepolicy/prebuilts/api/202404/public/app.te

(neverallow base_typeattr_231 domain (netlink_kobject_uevent_socket (write append)))
;;* lme

;;* lmx 51 system/sepolicy/prebuilts/api/202404/public/app.te

(neverallow appdomain socket_device (sock_file (write)))
;;* lme

;;* lmx 54 system/sepolicy/prebuilts/api/202404/public/app.te

(neverallow appdomain adbd_socket (sock_file (write)))
;;* lme

;;* lmx 55 system/sepolicy/prebuilts/api/202404/public/app.te

(neverallow base_typeattr_232 rild_socket (sock_file (write)))
;;* lme

;;* lmx 58 system/sepolicy/prebuilts/api/202404/public/app.te

(neverallow appdomain base_typeattr_233 (process (ptrace)))
;;* lme

;;* lmx 72 system/sepolicy/prebuilts/api/202404/public/app.te

(neverallow base_typeattr_234 appdomain (process (ptrace)))
;;* lme

;;* lmx 76 system/sepolicy/prebuilts/api/202404/public/app.te

(neverallow appdomain base_typeattr_233 (file (write create setattr relabelfrom append unlink link rename)))
;;* lme

;;* lmx 77 system/sepolicy/prebuilts/api/202404/public/app.te

(neverallow base_typeattr_235 base_typeattr_233 (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 86 system/sepolicy/prebuilts/api/202404/public/app.te

(neverallow appdomain base_typeattr_236 (process (sigkill sigstop signal)))
;;* lme

;;* lmx 90 system/sepolicy/prebuilts/api/202404/public/app.te

(neverallow appdomain rootfs (file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain rootfs (dir (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain rootfs (lnk_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain rootfs (chr_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain rootfs (blk_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain rootfs (sock_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain rootfs (fifo_file (write create setattr relabelfrom relabelto append unlink link rename)))
;;* lme

;;* lmx 94 system/sepolicy/prebuilts/api/202404/public/app.te

(neverallow appdomain system_file_type (file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain system_file_type (dir (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain system_file_type (lnk_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain system_file_type (chr_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain system_file_type (blk_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain system_file_type (sock_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain system_file_type (fifo_file (write create setattr relabelfrom relabelto append unlink link rename)))
;;* lme

;;* lmx 98 system/sepolicy/prebuilts/api/202404/public/app.te

(neverallow appdomain exec_type (file (write create setattr relabelfrom relabelto append unlink link rename)))
;;* lme

;;* lmx 105 system/sepolicy/prebuilts/api/202404/public/app.te

(neverallow appdomain system_data_file (file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain system_data_file (dir (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain system_data_file (lnk_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain system_data_file (chr_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain system_data_file (blk_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain system_data_file (sock_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain system_data_file (fifo_file (write create setattr relabelfrom relabelto append unlink link rename)))
;;* lme

;;* lmx 109 system/sepolicy/prebuilts/api/202404/public/app.te

(neverallow appdomain drm_data_file (file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain drm_data_file (dir (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain drm_data_file (lnk_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain drm_data_file (chr_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain drm_data_file (blk_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain drm_data_file (sock_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain drm_data_file (fifo_file (write create setattr relabelfrom relabelto append unlink link rename)))
;;* lme

;;* lmx 112 system/sepolicy/prebuilts/api/202404/public/app.te

(neverallow base_typeattr_237 apk_data_file (file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow base_typeattr_237 apk_data_file (dir (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow base_typeattr_237 apk_data_file (lnk_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow base_typeattr_237 apk_data_file (chr_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow base_typeattr_237 apk_data_file (blk_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow base_typeattr_237 apk_data_file (sock_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow base_typeattr_237 apk_data_file (fifo_file (write create setattr relabelfrom relabelto append unlink link rename)))
;;* lme

;;* lmx 115 system/sepolicy/prebuilts/api/202404/public/app.te

(neverallow base_typeattr_237 apk_private_data_file (file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow base_typeattr_237 apk_private_data_file (dir (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow base_typeattr_237 apk_private_data_file (lnk_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow base_typeattr_237 apk_private_data_file (chr_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow base_typeattr_237 apk_private_data_file (blk_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow base_typeattr_237 apk_private_data_file (sock_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow base_typeattr_237 apk_private_data_file (fifo_file (write create setattr relabelfrom relabelto append unlink link rename)))
;;* lme

;;* lmx 118 system/sepolicy/prebuilts/api/202404/public/app.te

(neverallow base_typeattr_237 apk_private_tmp_file (file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow base_typeattr_237 apk_private_tmp_file (dir (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow base_typeattr_237 apk_private_tmp_file (lnk_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow base_typeattr_237 apk_private_tmp_file (chr_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow base_typeattr_237 apk_private_tmp_file (blk_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow base_typeattr_237 apk_private_tmp_file (sock_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow base_typeattr_237 apk_private_tmp_file (fifo_file (write create setattr relabelfrom relabelto append unlink link rename)))
;;* lme

;;* lmx 121 system/sepolicy/prebuilts/api/202404/public/app.te

(neverallow base_typeattr_235 shell_data_file (file (create setattr relabelfrom relabelto append unlink link rename)))
(neverallow base_typeattr_235 shell_data_file (dir (create setattr relabelfrom relabelto append unlink link rename)))
(neverallow base_typeattr_235 shell_data_file (lnk_file (create setattr relabelfrom relabelto append unlink link rename)))
(neverallow base_typeattr_235 shell_data_file (chr_file (create setattr relabelfrom relabelto append unlink link rename)))
(neverallow base_typeattr_235 shell_data_file (blk_file (create setattr relabelfrom relabelto append unlink link rename)))
(neverallow base_typeattr_235 shell_data_file (sock_file (create setattr relabelfrom relabelto append unlink link rename)))
(neverallow base_typeattr_235 shell_data_file (fifo_file (create setattr relabelfrom relabelto append unlink link rename)))
;;* lme

;;* lmx 124 system/sepolicy/prebuilts/api/202404/public/app.te

(neverallow base_typeattr_230 bluetooth_data_file (file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow base_typeattr_230 bluetooth_data_file (dir (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow base_typeattr_230 bluetooth_data_file (lnk_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow base_typeattr_230 bluetooth_data_file (chr_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow base_typeattr_230 bluetooth_data_file (blk_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow base_typeattr_230 bluetooth_data_file (sock_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow base_typeattr_230 bluetooth_data_file (fifo_file (write create setattr relabelfrom relabelto append unlink link rename)))
;;* lme

;;* lmx 125 system/sepolicy/prebuilts/api/202404/public/app.te

(neverallow base_typeattr_238 credstore_data_file (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow base_typeattr_238 credstore_data_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
(neverallow base_typeattr_238 credstore_data_file (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow base_typeattr_238 credstore_data_file (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow base_typeattr_238 credstore_data_file (blk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow base_typeattr_238 credstore_data_file (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow base_typeattr_238 credstore_data_file (fifo_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 128 system/sepolicy/prebuilts/api/202404/public/app.te

(neverallow appdomain keystore_data_file (file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain keystore_data_file (dir (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain keystore_data_file (lnk_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain keystore_data_file (chr_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain keystore_data_file (blk_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain keystore_data_file (sock_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain keystore_data_file (fifo_file (write create setattr relabelfrom relabelto append unlink link rename)))
;;* lme

;;* lmx 131 system/sepolicy/prebuilts/api/202404/public/app.te

(neverallow appdomain systemkeys_data_file (file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain systemkeys_data_file (dir (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain systemkeys_data_file (lnk_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain systemkeys_data_file (chr_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain systemkeys_data_file (blk_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain systemkeys_data_file (sock_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain systemkeys_data_file (fifo_file (write create setattr relabelfrom relabelto append unlink link rename)))
;;* lme

;;* lmx 134 system/sepolicy/prebuilts/api/202404/public/app.te

(neverallow appdomain wifi_data_file (file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain wifi_data_file (dir (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain wifi_data_file (lnk_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain wifi_data_file (chr_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain wifi_data_file (blk_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain wifi_data_file (sock_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain wifi_data_file (fifo_file (write create setattr relabelfrom relabelto append unlink link rename)))
;;* lme

;;* lmx 137 system/sepolicy/prebuilts/api/202404/public/app.te

(neverallow appdomain dhcp_data_file (file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain dhcp_data_file (dir (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain dhcp_data_file (lnk_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain dhcp_data_file (chr_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain dhcp_data_file (blk_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain dhcp_data_file (sock_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain dhcp_data_file (fifo_file (write create setattr relabelfrom relabelto append unlink link rename)))
;;* lme

;;* lmx 142 system/sepolicy/prebuilts/api/202404/public/app.te

(neverallow base_typeattr_237 apk_tmp_file (file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow base_typeattr_237 apk_tmp_file (dir (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow base_typeattr_237 apk_tmp_file (lnk_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow base_typeattr_237 apk_tmp_file (chr_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow base_typeattr_237 apk_tmp_file (blk_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow base_typeattr_237 apk_tmp_file (sock_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow base_typeattr_237 apk_tmp_file (fifo_file (write create setattr relabelfrom relabelto append unlink link rename)))
;;* lme

;;* lmx 145 system/sepolicy/prebuilts/api/202404/public/app.te

(neverallow base_typeattr_239 apk_tmp_file (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow base_typeattr_239 apk_tmp_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
(neverallow base_typeattr_239 apk_tmp_file (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow base_typeattr_239 apk_tmp_file (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow base_typeattr_239 apk_tmp_file (blk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow base_typeattr_239 apk_tmp_file (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow base_typeattr_239 apk_tmp_file (fifo_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow base_typeattr_239 apk_private_tmp_file (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow base_typeattr_239 apk_private_tmp_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
(neverallow base_typeattr_239 apk_private_tmp_file (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow base_typeattr_239 apk_private_tmp_file (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow base_typeattr_239 apk_private_tmp_file (blk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow base_typeattr_239 apk_private_tmp_file (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow base_typeattr_239 apk_private_tmp_file (fifo_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 147 system/sepolicy/prebuilts/api/202404/public/app.te

(neverallow untrusted_app_all apk_tmp_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
(neverallow untrusted_app_all apk_tmp_file (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow untrusted_app_all apk_tmp_file (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow untrusted_app_all apk_tmp_file (blk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow untrusted_app_all apk_tmp_file (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow untrusted_app_all apk_tmp_file (fifo_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow untrusted_app_all apk_private_tmp_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
(neverallow untrusted_app_all apk_private_tmp_file (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow untrusted_app_all apk_private_tmp_file (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow untrusted_app_all apk_private_tmp_file (blk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow untrusted_app_all apk_private_tmp_file (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow untrusted_app_all apk_private_tmp_file (fifo_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow isolated_app_all apk_tmp_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
(neverallow isolated_app_all apk_tmp_file (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow isolated_app_all apk_tmp_file (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow isolated_app_all apk_tmp_file (blk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow isolated_app_all apk_tmp_file (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow isolated_app_all apk_tmp_file (fifo_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow isolated_app_all apk_private_tmp_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
(neverallow isolated_app_all apk_private_tmp_file (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow isolated_app_all apk_private_tmp_file (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow isolated_app_all apk_private_tmp_file (blk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow isolated_app_all apk_private_tmp_file (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow isolated_app_all apk_private_tmp_file (fifo_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 148 system/sepolicy/prebuilts/api/202404/public/app.te

(neverallow untrusted_app_all apk_tmp_file (file (ioctl write create setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow untrusted_app_all apk_private_tmp_file (file (ioctl write create setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow isolated_app_all apk_tmp_file (file (ioctl write create setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow isolated_app_all apk_private_tmp_file (file (ioctl write create setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
;;* lme

;;* lmx 151 system/sepolicy/prebuilts/api/202404/public/app.te

(neverallow appdomain efs_file (file (write)))
(neverallow appdomain efs_file (dir (write)))
(neverallow appdomain efs_file (lnk_file (write)))
(neverallow appdomain efs_file (chr_file (write)))
(neverallow appdomain efs_file (blk_file (write)))
(neverallow appdomain efs_file (sock_file (write)))
(neverallow appdomain efs_file (fifo_file (write)))
;;* lme

;;* lmx 152 system/sepolicy/prebuilts/api/202404/public/app.te

(neverallow base_typeattr_235 efs_file (file (read)))
(neverallow base_typeattr_235 efs_file (dir (read)))
(neverallow base_typeattr_235 efs_file (lnk_file (read)))
(neverallow base_typeattr_235 efs_file (chr_file (read)))
(neverallow base_typeattr_235 efs_file (blk_file (read)))
(neverallow base_typeattr_235 efs_file (sock_file (read)))
(neverallow base_typeattr_235 efs_file (fifo_file (read)))
;;* lme

;;* lmx 156 system/sepolicy/prebuilts/api/202404/public/app.te

(neverallow base_typeattr_240 sysfs (file (write)))
(neverallow base_typeattr_240 sysfs (dir (write)))
(neverallow base_typeattr_240 sysfs (lnk_file (write)))
(neverallow base_typeattr_240 sysfs (chr_file (write)))
(neverallow base_typeattr_240 sysfs (blk_file (write)))
(neverallow base_typeattr_240 sysfs (sock_file (write)))
(neverallow base_typeattr_240 sysfs (fifo_file (write)))
;;* lme

;;* lmx 158 system/sepolicy/prebuilts/api/202404/public/app.te

(neverallow appdomain proc (file (write)))
(neverallow appdomain proc (dir (write)))
(neverallow appdomain proc (lnk_file (write)))
(neverallow appdomain proc (chr_file (write)))
(neverallow appdomain proc (blk_file (write)))
(neverallow appdomain proc (sock_file (write)))
(neverallow appdomain proc (fifo_file (write)))
;;* lme

;;* lmx 161 system/sepolicy/prebuilts/api/202404/public/app.te

(neverallow appdomain kernel (system (syslog_read syslog_mod syslog_console)))
;;* lme

;;* lmx 164 system/sepolicy/prebuilts/api/202404/public/app.te

(neverallow base_typeattr_235 base_typeattr_224 (security (compute_av check_context)))
;;* lme

;;* lmx 165 system/sepolicy/prebuilts/api/202404/public/app.te

(neverallow base_typeattr_235 base_typeattr_224 (netlink_selinux_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
;;* lme

;;* lmx 169 system/sepolicy/prebuilts/api/202404/public/app.te

(neverallow appdomain fs_type (filesystem (mount remount unmount relabelfrom relabelto associate quotamod quotaget watch)))
;;* lme

;;* lmx 180 system/sepolicy/prebuilts/api/202404/public/app.te

(neverallow appdomain dev_type (lnk_file (write create setattr relabelfrom append unlink link rename)))
(neverallow appdomain rootfs (lnk_file (write create setattr relabelfrom append unlink link rename)))
(neverallow appdomain tmpfs (lnk_file (write create setattr relabelfrom append unlink link rename)))
(neverallow appdomain system_file (lnk_file (write create setattr relabelfrom append unlink link rename)))
(neverallow appdomain apk_data_file (lnk_file (write create setattr relabelfrom append unlink link rename)))
(neverallow appdomain cache_file (lnk_file (write create setattr relabelfrom append unlink link rename)))
(neverallow appdomain cache_recovery_file (lnk_file (write create setattr relabelfrom append unlink link rename)))
;;* lme

;;* lmx 186 system/sepolicy/prebuilts/api/202404/public/app.te

(neverallow base_typeattr_235 input_device (chr_file (ioctl read write create setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
;;* lme

;;* lmx 194 system/sepolicy/prebuilts/api/202404/public/app.te

(neverallow base_typeattr_241 bluetooth_a2dp_offload_prop (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(neverallow base_typeattr_241 bluetooth_audio_hal_prop (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(neverallow base_typeattr_241 bluetooth_prop (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(neverallow base_typeattr_241 exported_bluetooth_prop (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

(allow system_app property_socket (sock_file (write)))
(allow system_app init (unix_stream_socket (connectto)))
(allow system_app nfc_prop (property_service (set)))
(allow system_app nfc_prop (file (read getattr map open)))
(allow system_app property_socket (sock_file (write)))
(allow system_app init (unix_stream_socket (connectto)))
(allow system_app radio_control_prop (property_service (set)))
(allow system_app radio_control_prop (file (read getattr map open)))
;;* lmx 202 system/sepolicy/prebuilts/api/202404/public/app.te

(neverallow appdomain proc_uid_time_in_state (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
;;* lme

;;* lmx 205 system/sepolicy/prebuilts/api/202404/public/app.te

(neverallow appdomain proc_uid_concurrent_active_time (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
;;* lme

;;* lmx 208 system/sepolicy/prebuilts/api/202404/public/app.te

(neverallow appdomain proc_uid_concurrent_policy_time (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
;;* lme

;;* lmx 211 system/sepolicy/prebuilts/api/202404/public/app.te

(neverallow appdomain proc_uid_cpupower (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
;;* lme

;;* lmx 216 system/sepolicy/prebuilts/api/202404/public/app.te

(neverallow base_typeattr_235 proc_net_tcp_udp (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
;;* lme

;;* lmx 224 system/sepolicy/prebuilts/api/202404/public/app.te

(neverallow appdomain system_bootstrap_lib_file (file (read write append map execute open execute_no_trans)))
;;* lme

;;* lmx 226 system/sepolicy/prebuilts/api/202404/public/app.te

(neverallow appdomain system_bootstrap_lib_file (dir (read getattr open search)))
;;* lme

(allow audioserver hal_audio_server (process (signal)))
(allow audioserver sensorservice_service (service_manager (find)))
(allow audioserver system_server (unix_stream_socket (read write)))
(allow bootanim servicemanager (binder (call transfer)))
(allow servicemanager bootanim (binder (call transfer)))
(allow servicemanager bootanim (dir (search)))
(allow servicemanager bootanim (file (read open)))
(allow servicemanager bootanim (process (getattr)))
(allow bootanim surfaceflinger (binder (call transfer)))
(allow surfaceflinger bootanim (binder (transfer)))
(allow bootanim surfaceflinger (fd (use)))
(allow bootanim audioserver (binder (call transfer)))
(allow audioserver bootanim (binder (transfer)))
(allow bootanim audioserver (fd (use)))
(allow bootanim hwservicemanager (binder (call transfer)))
(allow hwservicemanager bootanim (binder (call transfer)))
(allow hwservicemanager bootanim (dir (search)))
(allow hwservicemanager bootanim (file (read map open)))
(allow hwservicemanager bootanim (process (getattr)))
(allow bootanim gpu_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
(allow bootanim gpu_device (dir (ioctl read getattr lock open watch watch_reads search)))
(allow bootanim sysfs_gpu (file (ioctl read getattr lock map open watch watch_reads)))
(allow bootanim oemfs (dir (ioctl read getattr lock open watch watch_reads search)))
(allow bootanim bootanim_oem_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow bootanim audio_device (dir (ioctl read getattr lock open watch watch_reads search)))
(allow bootanim audio_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
(allow bootanim audioserver_service (service_manager (find)))
(allow bootanim surfaceflinger_service (service_manager (find)))
(allow bootanim surfaceflinger (unix_stream_socket (read write)))
(allow bootanim ion_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
(allow bootanim dmabuf_system_heap_device (chr_file (ioctl read getattr lock map open watch watch_reads)))
(allow bootanim hal_graphics_allocator (fd (use)))
(allow bootanim hal_graphics_composer (fd (use)))
(allow bootanim proc_meminfo (file (ioctl read getattr lock map open watch watch_reads)))
(allow bootanim system_file (dir (ioctl read getattr lock open watch watch_reads search)))
(allow bootstat runtime_event_log_tags_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow bootstat bootstat_data_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
(allow bootstat bootstat_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow bootstat metadata_file (dir (search)))
(allow bootstat metadata_bootstat_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
(allow bootstat metadata_bootstat_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow bootstat pstorefs (dir (search)))
(allow bootstat pstorefs (file (ioctl read getattr lock map open watch watch_reads)))
(allow bootstat kernel (system (syslog_read)))
(allow bootstat logcat_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
(allow bootstat logdr_socket (sock_file (write)))
(allow bootstat logd (unix_stream_socket (connectto)))
(allow bootstat statsdw_socket (sock_file (write)))
(allow bootstat statsd (unix_dgram_socket (sendto)))
;;* lmx 32 system/sepolicy/prebuilts/api/202404/public/bootstat.te

(neverallow base_typeattr_242 system_boot_reason_prop (property_service (set)))
;;* lme

(allow init pdx_bufferhub_client_endpoint_socket_type (unix_stream_socket (create bind)))
(allow bufferhubd pdx_bufferhub_client_endpoint_socket_type (unix_stream_socket (read write getattr setattr lock append listen accept getopt setopt shutdown)))
(allow bufferhubd self (process (setsockcreate)))
(allow bufferhubd pdx_bufferhub_client_channel_socket_type (unix_stream_socket (ioctl read write create getattr setattr lock append map bind connect listen accept getopt setopt shutdown)))
;;* lmx 8 system/sepolicy/prebuilts/api/202404/public/bufferhubd.te

(neverallow base_typeattr_243 pdx_bufferhub_client_endpoint_socket_type (unix_stream_socket (listen accept)))
;;* lme

(allow bufferhubd pdx_performance_client_endpoint_dir_type (dir (ioctl read getattr lock open watch watch_reads search)))
(allow bufferhubd pdx_performance_client_endpoint_socket_type (sock_file (ioctl read write getattr lock append map open watch watch_reads)))
(allow bufferhubd pdx_performance_client_endpoint_socket_type (unix_stream_socket (read write shutdown connectto)))
(allow bufferhubd pdx_performance_client_channel_socket_type (unix_stream_socket (read write getattr setattr lock append getopt setopt shutdown)))
(allow bufferhubd pdx_performance_client_server_type (fd (use)))
(allow pdx_performance_client_server_type bufferhubd (fd (use)))
(allow bufferhubd gpu_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
(allow bufferhubd ion_device (chr_file (ioctl read getattr lock map open watch watch_reads)))
(allow bufferhubd hal_omx_server (fd (use)))
(allow bufferhubd hal_codec2_server (fd (use)))
(allow camera_service_server fwk_camera_hwservice (hwservice_manager (add find)))
(allow camera_service_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 1 system/sepolicy/prebuilts/api/202404/public/camera_service_server.te

(neverallow base_typeattr_244 fwk_camera_hwservice (hwservice_manager (add)))
;;* lme

(allow cameraserver servicemanager (binder (call transfer)))
(allow servicemanager cameraserver (binder (call transfer)))
(allow servicemanager cameraserver (dir (search)))
(allow servicemanager cameraserver (file (read open)))
(allow servicemanager cameraserver (process (getattr)))
(allow cameraserver binderservicedomain (binder (call transfer)))
(allow binderservicedomain cameraserver (binder (transfer)))
(allow cameraserver binderservicedomain (fd (use)))
(allow cameraserver appdomain (binder (call transfer)))
(allow appdomain cameraserver (binder (transfer)))
(allow cameraserver appdomain (fd (use)))
(allow cameraserver ion_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
(allow cameraserver dmabuf_system_heap_device (chr_file (ioctl read getattr lock map open watch watch_reads)))
(allow cameraserver hal_graphics_composer (fd (use)))
(allow cameraserver cameraserver_service (service_manager (add find)))
;;* lmx 21 system/sepolicy/prebuilts/api/202404/public/cameraserver.te

(neverallow base_typeattr_245 cameraserver_service (service_manager (add)))
;;* lme

(allow cameraserver fwk_camera_service (service_manager (add find)))
;;* lmx 22 system/sepolicy/prebuilts/api/202404/public/cameraserver.te

(neverallow base_typeattr_245 fwk_camera_service (service_manager (add)))
;;* lme

(allow cameraserver fwk_camera_hwservice (hwservice_manager (add find)))
(allow cameraserver hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 23 system/sepolicy/prebuilts/api/202404/public/cameraserver.te

(neverallow base_typeattr_245 fwk_camera_hwservice (hwservice_manager (add)))
;;* lme

(allow cameraserver activity_service (service_manager (find)))
(allow cameraserver appops_service (service_manager (find)))
(allow cameraserver audioserver_service (service_manager (find)))
(allow cameraserver batterystats_service (service_manager (find)))
(allow cameraserver cameraproxy_service (service_manager (find)))
(allow cameraserver mediaserver_service (service_manager (find)))
(allow cameraserver package_native_service (service_manager (find)))
(allow cameraserver permission_checker_service (service_manager (find)))
(allow cameraserver processinfo_service (service_manager (find)))
(allow cameraserver scheduling_policy_service (service_manager (find)))
(allow cameraserver sensor_privacy_service (service_manager (find)))
(allow cameraserver surfaceflinger_service (service_manager (find)))
(allow cameraserver hidl_token_hwservice (hwservice_manager (find)))
(allow cameraserver hal_camera_service (service_manager (find)))
(allow cameraserver virtual_camera_service (service_manager (find)))
(allow cameraserver surfaceflinger (unix_stream_socket (read write)))
;;* lmx 51 system/sepolicy/prebuilts/api/202404/public/cameraserver.te

(neverallow cameraserver fs_type (file (execute_no_trans)))
(neverallow cameraserver file_type (file (execute_no_trans)))
;;* lme

;;* lmx 63 system/sepolicy/prebuilts/api/202404/public/cameraserver.te

(neverallow cameraserver domain (udp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind)))
(neverallow cameraserver domain (rawip_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind)))
;;* lme

;;* lmx 64 system/sepolicy/prebuilts/api/202404/public/cameraserver.te

(neverallow cameraserver domain (tcp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind name_connect)))
;;* lme

(allow cameraserver adbd (fd (use)))
(allow cameraserver adbd (unix_stream_socket (read write)))
(allow cameraserver shell (fd (use)))
(allow cameraserver shell (unix_stream_socket (read write)))
(allow cameraserver shell (fifo_file (read write)))
(allow cameraserver mediametrics_service (service_manager (find)))
(allow charger_type kmsg_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
(allow charger_type rootfs (dir (ioctl read getattr lock open watch watch_reads search)))
(allow charger_type rootfs (file (ioctl read getattr lock map open watch watch_reads)))
(allow charger_type rootfs (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow charger_type cgroup (dir (ioctl read getattr lock open watch watch_reads search)))
(allow charger_type cgroup (file (ioctl read getattr lock map open watch watch_reads)))
(allow charger_type cgroup (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow charger_type cgroup_v2 (dir (ioctl read getattr lock open watch watch_reads search)))
(allow charger_type cgroup_v2 (file (ioctl read getattr lock map open watch watch_reads)))
(allow charger_type cgroup_v2 (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow charger_type sysfs_type (dir (ioctl read getattr lock open watch watch_reads search)))
(allow charger_type self (capability (sys_boot sys_tty_config)))
(allow charger_type self (cap_userns (sys_boot sys_tty_config)))
(allow charger_type sysfs_wake_lock (file (ioctl read write getattr lock append map open watch watch_reads)))
(allow charger_type self (capability2 (block_suspend)))
(allow charger_type self (cap2_userns (block_suspend)))
(allow charger_type system_suspend_server (binder (call transfer)))
(allow system_suspend_server charger_type (binder (transfer)))
(allow charger_type system_suspend_server (fd (use)))
(allow charger_type system_suspend_hwservice (hwservice_manager (find)))
(allow charger_type hwservicemanager (binder (call transfer)))
(allow hwservicemanager charger_type (binder (call transfer)))
(allow hwservicemanager charger_type (dir (search)))
(allow hwservicemanager charger_type (file (read map open)))
(allow hwservicemanager charger_type (process (getattr)))
(allow charger_type hwservicemanager_prop (file (read getattr map open)))
(allow charger_type hidl_manager_hwservice (hwservice_manager (find)))
(allow charger_type hal_system_suspend_service (service_manager (find)))
(allow charger_type servicemanager (binder (call transfer)))
(allow servicemanager charger_type (binder (call transfer)))
(allow servicemanager charger_type (dir (search)))
(allow servicemanager charger_type (file (read open)))
(allow servicemanager charger_type (process (getattr)))
(allow charger_type self (netlink_kobject_uevent_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
(allow charger_type sysfs_power (file (ioctl read write getattr lock append map open watch watch_reads)))
(allow charger_type sysfs_batteryinfo (dir (ioctl read getattr lock open watch watch_reads search)))
(allow charger_type sysfs_batteryinfo (file (ioctl read getattr lock map open watch watch_reads)))
(allow charger_type sysfs_batteryinfo (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow charger_type pstorefs (dir (ioctl read getattr lock open watch watch_reads search)))
(allow charger_type pstorefs (file (ioctl read getattr lock map open watch watch_reads)))
(allow charger_type graphics_device (dir (ioctl read getattr lock open watch watch_reads search)))
(allow charger_type graphics_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
(allow charger_type input_device (dir (ioctl read getattr lock open watch watch_reads search)))
(allow charger_type input_device (chr_file (ioctl read getattr lock map open watch watch_reads)))
(allow charger_type tty_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
(allow charger_type proc_sysrq (file (ioctl read write getattr lock append map open watch watch_reads)))
(dontaudit crash_dump self (capability (sys_ptrace)))
(dontaudit crash_dump self (cap_userns (sys_ptrace)))
(allow crash_dump domain (fd (use)))
(allow crash_dump domain (fifo_file (read write)))
(allow crash_dump domain (fifo_file (append)))
(allow crash_dump domain (process (getattr)))
(allow crash_dump domain (dir (ioctl read getattr lock open watch watch_reads search)))
(allow crash_dump domain (file (ioctl read getattr lock map open watch watch_reads)))
(allow crash_dump domain (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow crash_dump exec_type (file (ioctl read getattr lock map open watch watch_reads)))
(allow crash_dump dalvikcache_data_file (dir (getattr search)))
(allow crash_dump dalvikcache_data_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow crash_dump apex_module_data_file (dir (getattr search)))
(allow crash_dump proc_uptime (file (ioctl read getattr lock map open watch watch_reads)))
(allow crash_dump apk_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
(allow crash_dump apk_data_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow crash_dump apk_data_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow crash_dump vendor_file (dir (ioctl read getattr lock open watch watch_reads search)))
(allow crash_dump same_process_hal_file (dir (ioctl read getattr lock open watch watch_reads search)))
(allow crash_dump vendor_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow crash_dump vendor_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow crash_dump same_process_hal_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow crash_dump same_process_hal_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow crash_dump shell_test_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
(allow crash_dump shell_test_data_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow crash_dump shell_test_data_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow crash_dump tombstoned_crash_socket (sock_file (write)))
(allow crash_dump tombstoned (unix_stream_socket (connectto)))
(allow crash_dump system_ndebug_socket (sock_file (write)))
(allow crash_dump system_server (unix_stream_socket (connectto)))
(allow crash_dump anr_data_file (file (getattr append)))
(allow crash_dump tombstone_data_file (file (getattr append)))
(allow crash_dump logdr_socket (sock_file (write)))
(allow crash_dump logd (unix_stream_socket (connectto)))
(dontaudit crash_dump core_data_file_type (dir (search)))
(dontaudit crash_dump vendor_file_type (dir (search)))
(dontaudit crash_dump system_data_file (file (read)))
(dontaudit crash_dump system_data_file (lnk_file (read)))
(dontaudit crash_dump property_type (file (read)))
;;* lmx 80 system/sepolicy/prebuilts/api/202404/public/crash_dump.te

(neverallow domain crash_dump_exec (file (execute_no_trans)))
;;* lme

(allow credstore servicemanager (binder (call transfer)))
(allow servicemanager credstore (binder (call transfer)))
(allow servicemanager credstore (dir (search)))
(allow servicemanager credstore (file (read open)))
(allow servicemanager credstore (process (getattr)))
(allow credstore system_server (binder (call transfer)))
(allow system_server credstore (binder (transfer)))
(allow credstore system_server (fd (use)))
(allow credstore credstore_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
(allow credstore credstore_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow credstore credstore_service (service_manager (add find)))
;;* lmx 12 system/sepolicy/prebuilts/api/202404/public/credstore.te

(neverallow base_typeattr_246 credstore_service (service_manager (add)))
;;* lme

(allow credstore sec_key_att_app_id_provider_service (service_manager (find)))
(allow credstore dropbox_service (service_manager (find)))
(allow credstore authorization_service (service_manager (find)))
(allow credstore keystore (keystore2 (get_auth_token)))
(allow credstore cgroup (dir (ioctl read getattr lock open watch watch_reads search)))
(allow credstore cgroup (file (ioctl read getattr lock map open watch watch_reads)))
(allow credstore cgroup (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow credstore cgroup_v2 (dir (ioctl read getattr lock open watch watch_reads search)))
(allow credstore cgroup_v2 (file (ioctl read getattr lock map open watch watch_reads)))
(allow credstore cgroup_v2 (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow dhcp cgroup (dir (write create add_name)))
(allow dhcp cgroup_v2 (dir (write create add_name)))
(allow dhcp self (capability (setgid setuid net_bind_service net_admin net_raw)))
(allow dhcp self (cap_userns (setgid setuid net_bind_service net_admin net_raw)))
(allow dhcp self (packet_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
(allow dhcp self (netlink_route_socket (nlmsg_write)))
(allow dhcp shell_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
(allow dhcp system_file (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
(allow dhcp toolbox_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
(allow dhcp proc_net_type (file (write)))
(allow dhcp dhcp_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
(allow dhcp dhcp_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow dhcp netd (fd (use)))
(allow dhcp netd (fifo_file (ioctl read write getattr lock append map open watch watch_reads)))
(allow dhcp netd (udp_socket (read write)))
(allow dhcp netd (unix_stream_socket (read write)))
(allow dhcp netd (unix_dgram_socket (read write)))
(allow dhcp netd (netlink_route_socket (read write)))
(allow dhcp netd (netlink_nflog_socket (read write)))
(allow dhcp netd (netlink_kobject_uevent_socket (read write)))
(allow display_service_server fwk_display_hwservice (hwservice_manager (add find)))
(allow display_service_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 1 system/sepolicy/prebuilts/api/202404/public/display_service_server.te

(neverallow base_typeattr_247 fwk_display_hwservice (hwservice_manager (add)))
;;* lme

(allowx dnsmasq self (ioctl udp_socket (0x6900 0x6902)))
(allowx dnsmasq self (ioctl udp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(allowx dnsmasq self (ioctl udp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(allow dnsmasq self (capability (dac_override dac_read_search)))
(allow dnsmasq self (cap_userns (dac_override dac_read_search)))
(allow dnsmasq self (capability (setgid setuid net_bind_service net_admin net_raw)))
(allow dnsmasq self (cap_userns (setgid setuid net_bind_service net_admin net_raw)))
(allow dnsmasq dhcp_data_file (dir (write lock open add_name remove_name search)))
(allow dnsmasq dhcp_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow dnsmasq netd (fd (use)))
(allow dnsmasq netd (fifo_file (read write getattr)))
(allow dnsmasq netd (netlink_kobject_uevent_socket (read write)))
(allow dnsmasq netd (netlink_nflog_socket (read write)))
(allow dnsmasq netd (netlink_route_socket (read write)))
(allow dnsmasq netd (unix_stream_socket (read write getattr)))
(allow dnsmasq netd (unix_dgram_socket (read write)))
(allow dnsmasq netd (udp_socket (read write)))
(allow domain init (process (sigchld)))
(allow domain self (process (fork sigchld sigkill sigstop signull signal getsched setsched getsession getpgid setpgid getcap setcap getattr setrlimit)))
(allow domain self (fd (use)))
(allow domain proc (dir (ioctl read getattr lock open watch watch_reads search)))
(allow domain proc_net_type (dir (search)))
(allow domain self (dir (ioctl read getattr lock open watch watch_reads search)))
(allow domain self (file (ioctl read getattr lock map open watch watch_reads)))
(allow domain self (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow domain self (file (ioctl read write getattr lock append map open watch watch_reads)))
(allow domain self (fifo_file (ioctl read write getattr lock append map open watch watch_reads)))
(allow domain self (unix_dgram_socket (ioctl read write create getattr setattr lock append map bind connect getopt setopt shutdown sendto)))
(allow domain self (unix_stream_socket (ioctl read write create getattr setattr lock append map bind connect listen accept getopt setopt shutdown connectto)))
(allow domain init (fd (use)))
(allow domain device_config_aconfig_flags_prop (file (read getattr map open)))
(allow domain tmpfs (dir (getattr search)))
(allow domain rootfs (dir (search)))
(allow domain rootfs (lnk_file (read getattr)))
(allow domain device (dir (search)))
(allow domain dev_type (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow domain devpts (dir (search)))
(allow domain dmabuf_heap_device (dir (ioctl read getattr lock open watch watch_reads search)))
(allow domain socket_device (dir (ioctl read getattr lock open watch watch_reads search)))
(allow domain owntty_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
(allow domain null_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
(allow domain zero_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
(allow domain ashmem_device (chr_file (ioctl read write getattr lock append map)))
(allow domain ashmem_libcutils_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
(allow base_typeattr_248 binder_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
(allow base_typeattr_248 servicemanager_prop (file (read getattr map open)))
(allowx domain binder_device (ioctl chr_file (0x6201 0x6203 (range 0x6205 0x6209) (range 0x620b 0x620d) (range 0x6210 0x6211))))
(allow domain binderfs (dir (getattr search)))
(allow domain binderfs_logs_proc (dir (search)))
(allow domain binderfs_features (dir (search)))
(allow domain binderfs_features (file (ioctl read getattr lock map open watch watch_reads)))
(allow base_typeattr_249 hwbinder_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
(allow domain ptmx_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
(allow domain random_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
(allow domain proc_random (dir (ioctl read getattr lock open watch watch_reads search)))
(allow domain proc_random (file (ioctl read getattr lock map open watch watch_reads)))
(allow domain properties_device (dir (getattr search)))
(allow domain properties_serial (file (ioctl read getattr lock map open watch watch_reads)))
(allow domain property_info (file (ioctl read getattr lock map open watch watch_reads)))
(allow domain log_property_type (file (read getattr map open)))
(dontaudit domain property_type (file (audit_access)))
(allow domain property_contexts_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow domain init (key (search)))
(allow domain vold (key (search)))
(allow domain logdw_socket (sock_file (write)))
(allow domain logd (unix_dgram_socket (sendto)))
(allow domain pmsg_device (chr_file (write lock append map open)))
(allow domain system_file (dir (ioctl read getattr lock open watch watch_reads search)))
(allow domain system_lib_file (dir (ioctl read getattr lock open watch watch_reads search)))
(allow domain system_seccomp_policy_file (dir (ioctl read getattr lock open watch watch_reads search)))
(allow domain system_security_cacerts_file (dir (ioctl read getattr lock open watch watch_reads search)))
(allow domain system_file (lnk_file (read getattr)))
(allow domain system_seccomp_policy_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow domain system_security_cacerts_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow domain system_group_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow domain system_passwd_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow domain system_linker_exec (file (read getattr map execute open)))
(allow domain system_linker_config_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow domain system_lib_file (file (read getattr map execute open)))
(allow domain system_linker_exec (lnk_file (read getattr open)))
(allow domain system_lib_file (lnk_file (read getattr open)))
(allow domain system_event_log_tags_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow appdomain system_file (file (read getattr map execute open)))
(allow coredomain system_file (file (read getattr map execute open)))
(allow domain vendor_hal_file (dir (ioctl read getattr lock open watch watch_reads search)))
(allow domain same_process_hal_file (dir (ioctl read getattr lock open watch watch_reads search)))
(allow base_typeattr_250 same_process_hal_file (file (read getattr map execute open)))
(allow domain vndk_sp_file (dir (ioctl read getattr lock open watch watch_reads search)))
(allow domain vndk_sp_file (file (read getattr map execute open)))
(allow domain vendor_configs_file (dir (ioctl read getattr lock open watch watch_reads search)))
(allow domain vendor_configs_file (file (read getattr map open)))
(allow domain vendor_file_type (lnk_file (read getattr open)))
(allow domain vendor_file (dir (getattr search)))
(allow base_typeattr_250 vendor_file_type (dir (ioctl read getattr lock open watch watch_reads search)))
(allow base_typeattr_250 vendor_file_type (file (read getattr map execute open)))
(allow base_typeattr_250 vendor_file_type (lnk_file (read getattr)))
(allow domain sysfs (lnk_file (read getattr)))
(allow domain system_zoneinfo_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow domain system_zoneinfo_file (dir (ioctl read getattr lock open watch watch_reads search)))
(allow domain sysfs_devices_system_cpu (dir (ioctl read getattr lock open watch watch_reads search)))
(allow domain sysfs_devices_system_cpu (file (ioctl read getattr lock map open watch watch_reads)))
(allow domain sysfs_devices_system_cpu (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow domain sysfs_usb (dir (ioctl read getattr lock open watch watch_reads search)))
(allow domain sysfs_usb (file (ioctl read getattr lock map open watch watch_reads)))
(allow domain sysfs_usb (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow domain sysfs_transparent_hugepage (dir (search)))
(allow domain sysfs_transparent_hugepage (file (ioctl read getattr lock map open watch watch_reads)))
(allow appdomain system_data_file (dir (getattr)))
(allow coredomain system_data_file (dir (getattr)))
(allow domain system_data_root_file (dir (getattr search)))
(allow domain system_data_file (dir (search)))
(allow appdomain system_userdir_file (dir (getattr search)))
(allow coredomain system_userdir_file (dir (getattr search)))
(allow appdomain media_userdir_file (dir (search)))
(allow coredomain media_userdir_file (dir (search)))
(allow domain vendor_userdir_file (dir (getattr search)))
(allow domain vendor_data_file (dir (getattr search)))
(allow domain proc (lnk_file (read getattr)))
(allow domain proc_cpuinfo (file (ioctl read getattr lock map open watch watch_reads)))
(allow domain dev_cpu_variant (file (ioctl read getattr lock map open watch watch_reads)))
(allow domain proc_perf (file (ioctl read getattr lock map open watch watch_reads)))
(allow domain selinuxfs (dir (search)))
(allow domain selinuxfs (file (getattr)))
(allow domain sysfs (dir (search)))
(allow domain selinuxfs (filesystem (getattr)))
(allow domain debugfs (dir (search)))
(allow domain debugfs_tracing (dir (search)))
(allow domain debugfs_tracing_debug (dir (search)))
(allow domain debugfs_trace_marker (file (write lock append map open)))
(allow domain self (lockdown (confidentiality)))
(allow domain fs_type (filesystem (getattr)))
(allow domain fs_type (dir (getattr)))
(allowx domain domain (ioctl tcp_socket ((range 0x5401 0x5404) 0x540b (range 0x540e 0x5411) (range 0x5413 0x5414) (range 0x5450 0x5451))))
(allowx domain domain (ioctl udp_socket ((range 0x5401 0x5404) 0x540b (range 0x540e 0x5411) (range 0x5413 0x5414) (range 0x5450 0x5451))))
(allowx domain domain (ioctl rawip_socket ((range 0x5401 0x5404) 0x540b (range 0x540e 0x5411) (range 0x5413 0x5414) (range 0x5450 0x5451))))
(allowx domain domain (ioctl icmp_socket ((range 0x5401 0x5404) 0x540b (range 0x540e 0x5411) (range 0x5413 0x5414) (range 0x5450 0x5451))))
(allowx domain domain (ioctl tcp_socket ((range 0x8906 0x8907) 0x8910 (range 0x8912 0x8913) 0x8915 0x8917 0x8919 0x891b 0x8921 0x8933 0x8938 0x8942)))
(allowx domain domain (ioctl udp_socket ((range 0x8906 0x8907) 0x8910 (range 0x8912 0x8913) 0x8915 0x8917 0x8919 0x891b 0x8921 0x8933 0x8938 0x8942)))
(allowx domain domain (ioctl rawip_socket ((range 0x8906 0x8907) 0x8910 (range 0x8912 0x8913) 0x8915 0x8917 0x8919 0x891b 0x8921 0x8933 0x8938 0x8942)))
(allowx domain domain (ioctl icmp_socket ((range 0x8906 0x8907) 0x8910 (range 0x8912 0x8913) 0x8915 0x8917 0x8919 0x891b 0x8921 0x8933 0x8938 0x8942)))
(allowx domain domain (ioctl tcp_socket (0x8b01 0x8b05 0x8b07 0x8b09 0x8b0b 0x8b0d 0x8b0f (range 0x8b11 0x8b13) 0x8b21 0x8b23 0x8b25 0x8b27 0x8b29 0x8b2d)))
(allowx domain domain (ioctl udp_socket (0x8b01 0x8b05 0x8b07 0x8b09 0x8b0b 0x8b0d 0x8b0f (range 0x8b11 0x8b13) 0x8b21 0x8b23 0x8b25 0x8b27 0x8b29 0x8b2d)))
(allowx domain domain (ioctl rawip_socket (0x8b01 0x8b05 0x8b07 0x8b09 0x8b0b 0x8b0d 0x8b0f (range 0x8b11 0x8b13) 0x8b21 0x8b23 0x8b25 0x8b27 0x8b29 0x8b2d)))
(allowx domain domain (ioctl icmp_socket (0x8b01 0x8b05 0x8b07 0x8b09 0x8b0b 0x8b0d 0x8b0f (range 0x8b11 0x8b13) 0x8b21 0x8b23 0x8b25 0x8b27 0x8b29 0x8b2d)))
(allowx domain domain (ioctl unix_stream_socket (0x5401 0x5411 (range 0x5413 0x5414) 0x541b (range 0x5450 0x5451))))
(allowx domain domain (ioctl unix_dgram_socket (0x5401 0x5411 (range 0x5413 0x5414) 0x541b (range 0x5450 0x5451))))
(allowx domain pdx_channel_socket_type (ioctl unix_stream_socket (0x5401 0x5411 (range 0x5413 0x5414) 0x541b (range 0x5450 0x5451))))
(allowx domain pdx_channel_socket_type (ioctl unix_dgram_socket (0x5401 0x5411 (range 0x5413 0x5414) 0x541b (range 0x5450 0x5451))))
(allowx domain devpts (ioctl chr_file ((range 0x5401 0x5404) 0x540b (range 0x540e 0x5411) (range 0x5413 0x5414) (range 0x5450 0x5451))))
(allowx domain dev_type (ioctl file ((range 0x5450 0x5451))))
(allowx domain dev_type (ioctl dir ((range 0x5450 0x5451))))
(allowx domain dev_type (ioctl lnk_file ((range 0x5450 0x5451))))
(allowx domain dev_type (ioctl blk_file ((range 0x5450 0x5451))))
(allowx domain dev_type (ioctl sock_file ((range 0x5450 0x5451))))
(allowx domain dev_type (ioctl fifo_file ((range 0x5450 0x5451))))
(allowx domain domain (ioctl file ((range 0x5450 0x5451))))
(allowx domain domain (ioctl dir ((range 0x5450 0x5451))))
(allowx domain domain (ioctl lnk_file ((range 0x5450 0x5451))))
(allowx domain domain (ioctl blk_file ((range 0x5450 0x5451))))
(allowx domain domain (ioctl sock_file ((range 0x5450 0x5451))))
(allowx domain domain (ioctl fifo_file ((range 0x5450 0x5451))))
(allowx domain fs_type (ioctl file ((range 0x5450 0x5451))))
(allowx domain fs_type (ioctl dir ((range 0x5450 0x5451))))
(allowx domain fs_type (ioctl lnk_file ((range 0x5450 0x5451))))
(allowx domain fs_type (ioctl blk_file ((range 0x5450 0x5451))))
(allowx domain fs_type (ioctl sock_file ((range 0x5450 0x5451))))
(allowx domain fs_type (ioctl fifo_file ((range 0x5450 0x5451))))
(allowx domain file_type (ioctl file ((range 0x5450 0x5451))))
(allowx domain file_type (ioctl dir ((range 0x5450 0x5451))))
(allowx domain file_type (ioctl lnk_file ((range 0x5450 0x5451))))
(allowx domain file_type (ioctl blk_file ((range 0x5450 0x5451))))
(allowx domain file_type (ioctl sock_file ((range 0x5450 0x5451))))
(allowx domain file_type (ioctl fifo_file ((range 0x5450 0x5451))))
(allowx domain tun_device (ioctl chr_file ((range 0x5450 0x5451))))
(allowx domain fs_type (ioctl file (0x5401)))
(allowx domain file_type (ioctl file (0x5401)))
(allowx domain domain (ioctl fifo_file (0x5401)))
(allowx domain dev_type (ioctl blk_file (0x1268 0x1272)))
(allowx domain file_type (ioctl file ((range 0xf501 0xf502) 0xf505 (range 0xf50c 0xf50e))))
(allowx domain sdcard_type (ioctl file ((range 0xf501 0xf502) 0xf505 (range 0xf50c 0xf50e))))
(allow base_typeattr_251 hwservice_manager_type (hwservice_manager (add find)))
(allow base_typeattr_251 vndservice_manager_type (service_manager (add find)))
(allow domain apex_mnt_dir (dir (getattr search)))
(allow domain apex_mnt_dir (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow domain device_config_media_native_prop (file (read getattr map open)))
(allow domain aconfig_storage_metadata_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lmx 356 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallowx base_typeattr_224 base_typeattr_224 (ioctl file (0x0)))
(neverallowx base_typeattr_224 base_typeattr_224 (ioctl dir (0x0)))
(neverallowx base_typeattr_224 base_typeattr_224 (ioctl lnk_file (0x0)))
(neverallowx base_typeattr_224 base_typeattr_224 (ioctl blk_file (0x0)))
(neverallowx base_typeattr_224 base_typeattr_224 (ioctl sock_file (0x0)))
(neverallowx base_typeattr_224 base_typeattr_224 (ioctl fifo_file (0x0)))
(neverallowx base_typeattr_224 base_typeattr_224 (ioctl socket (0x0)))
(neverallowx base_typeattr_224 base_typeattr_224 (ioctl tcp_socket (0x0)))
(neverallowx base_typeattr_224 base_typeattr_224 (ioctl udp_socket (0x0)))
(neverallowx base_typeattr_224 base_typeattr_224 (ioctl rawip_socket (0x0)))
(neverallowx base_typeattr_224 base_typeattr_224 (ioctl netlink_socket (0x0)))
(neverallowx base_typeattr_224 base_typeattr_224 (ioctl packet_socket (0x0)))
(neverallowx base_typeattr_224 base_typeattr_224 (ioctl key_socket (0x0)))
(neverallowx base_typeattr_224 base_typeattr_224 (ioctl unix_stream_socket (0x0)))
(neverallowx base_typeattr_224 base_typeattr_224 (ioctl unix_dgram_socket (0x0)))
(neverallowx base_typeattr_224 base_typeattr_224 (ioctl netlink_route_socket (0x0)))
(neverallowx base_typeattr_224 base_typeattr_224 (ioctl netlink_tcpdiag_socket (0x0)))
(neverallowx base_typeattr_224 base_typeattr_224 (ioctl netlink_nflog_socket (0x0)))
(neverallowx base_typeattr_224 base_typeattr_224 (ioctl netlink_xfrm_socket (0x0)))
(neverallowx base_typeattr_224 base_typeattr_224 (ioctl netlink_selinux_socket (0x0)))
(neverallowx base_typeattr_224 base_typeattr_224 (ioctl netlink_audit_socket (0x0)))
(neverallowx base_typeattr_224 base_typeattr_224 (ioctl netlink_dnrt_socket (0x0)))
(neverallowx base_typeattr_224 base_typeattr_224 (ioctl netlink_kobject_uevent_socket (0x0)))
(neverallowx base_typeattr_224 base_typeattr_224 (ioctl appletalk_socket (0x0)))
(neverallowx base_typeattr_224 base_typeattr_224 (ioctl tun_socket (0x0)))
(neverallowx base_typeattr_224 base_typeattr_224 (ioctl netlink_iscsi_socket (0x0)))
(neverallowx base_typeattr_224 base_typeattr_224 (ioctl netlink_fib_lookup_socket (0x0)))
(neverallowx base_typeattr_224 base_typeattr_224 (ioctl netlink_connector_socket (0x0)))
(neverallowx base_typeattr_224 base_typeattr_224 (ioctl netlink_netfilter_socket (0x0)))
(neverallowx base_typeattr_224 base_typeattr_224 (ioctl netlink_generic_socket (0x0)))
(neverallowx base_typeattr_224 base_typeattr_224 (ioctl netlink_scsitransport_socket (0x0)))
(neverallowx base_typeattr_224 base_typeattr_224 (ioctl netlink_rdma_socket (0x0)))
(neverallowx base_typeattr_224 base_typeattr_224 (ioctl netlink_crypto_socket (0x0)))
(neverallowx base_typeattr_224 base_typeattr_224 (ioctl sctp_socket (0x0)))
(neverallowx base_typeattr_224 base_typeattr_224 (ioctl icmp_socket (0x0)))
(neverallowx base_typeattr_224 base_typeattr_224 (ioctl ax25_socket (0x0)))
(neverallowx base_typeattr_224 base_typeattr_224 (ioctl ipx_socket (0x0)))
(neverallowx base_typeattr_224 base_typeattr_224 (ioctl netrom_socket (0x0)))
(neverallowx base_typeattr_224 base_typeattr_224 (ioctl atmpvc_socket (0x0)))
(neverallowx base_typeattr_224 base_typeattr_224 (ioctl x25_socket (0x0)))
(neverallowx base_typeattr_224 base_typeattr_224 (ioctl rose_socket (0x0)))
(neverallowx base_typeattr_224 base_typeattr_224 (ioctl decnet_socket (0x0)))
(neverallowx base_typeattr_224 base_typeattr_224 (ioctl atmsvc_socket (0x0)))
(neverallowx base_typeattr_224 base_typeattr_224 (ioctl rds_socket (0x0)))
(neverallowx base_typeattr_224 base_typeattr_224 (ioctl irda_socket (0x0)))
(neverallowx base_typeattr_224 base_typeattr_224 (ioctl pppox_socket (0x0)))
(neverallowx base_typeattr_224 base_typeattr_224 (ioctl llc_socket (0x0)))
(neverallowx base_typeattr_224 base_typeattr_224 (ioctl can_socket (0x0)))
(neverallowx base_typeattr_224 base_typeattr_224 (ioctl tipc_socket (0x0)))
(neverallowx base_typeattr_224 base_typeattr_224 (ioctl bluetooth_socket (0x0)))
(neverallowx base_typeattr_224 base_typeattr_224 (ioctl iucv_socket (0x0)))
(neverallowx base_typeattr_224 base_typeattr_224 (ioctl rxrpc_socket (0x0)))
(neverallowx base_typeattr_224 base_typeattr_224 (ioctl isdn_socket (0x0)))
(neverallowx base_typeattr_224 base_typeattr_224 (ioctl phonet_socket (0x0)))
(neverallowx base_typeattr_224 base_typeattr_224 (ioctl ieee802154_socket (0x0)))
(neverallowx base_typeattr_224 base_typeattr_224 (ioctl caif_socket (0x0)))
(neverallowx base_typeattr_224 base_typeattr_224 (ioctl alg_socket (0x0)))
(neverallowx base_typeattr_224 base_typeattr_224 (ioctl nfc_socket (0x0)))
(neverallowx base_typeattr_224 base_typeattr_224 (ioctl vsock_socket (0x0)))
(neverallowx base_typeattr_224 base_typeattr_224 (ioctl kcm_socket (0x0)))
(neverallowx base_typeattr_224 base_typeattr_224 (ioctl qipcrtr_socket (0x0)))
(neverallowx base_typeattr_224 base_typeattr_224 (ioctl smc_socket (0x0)))
(neverallowx base_typeattr_224 base_typeattr_224 (ioctl xdp_socket (0x0)))
;;* lme

;;* lmx 360 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallowx domain domain (ioctl socket (0x8905)))
(neverallowx domain domain (ioctl tcp_socket (0x8905)))
(neverallowx domain domain (ioctl udp_socket (0x8905)))
(neverallowx domain domain (ioctl rawip_socket (0x8905)))
(neverallowx domain domain (ioctl netlink_socket (0x8905)))
(neverallowx domain domain (ioctl packet_socket (0x8905)))
(neverallowx domain domain (ioctl key_socket (0x8905)))
(neverallowx domain domain (ioctl unix_stream_socket (0x8905)))
(neverallowx domain domain (ioctl unix_dgram_socket (0x8905)))
(neverallowx domain domain (ioctl netlink_route_socket (0x8905)))
(neverallowx domain domain (ioctl netlink_tcpdiag_socket (0x8905)))
(neverallowx domain domain (ioctl netlink_nflog_socket (0x8905)))
(neverallowx domain domain (ioctl netlink_xfrm_socket (0x8905)))
(neverallowx domain domain (ioctl netlink_selinux_socket (0x8905)))
(neverallowx domain domain (ioctl netlink_audit_socket (0x8905)))
(neverallowx domain domain (ioctl netlink_dnrt_socket (0x8905)))
(neverallowx domain domain (ioctl netlink_kobject_uevent_socket (0x8905)))
(neverallowx domain domain (ioctl appletalk_socket (0x8905)))
(neverallowx domain domain (ioctl tun_socket (0x8905)))
(neverallowx domain domain (ioctl netlink_iscsi_socket (0x8905)))
(neverallowx domain domain (ioctl netlink_fib_lookup_socket (0x8905)))
(neverallowx domain domain (ioctl netlink_connector_socket (0x8905)))
(neverallowx domain domain (ioctl netlink_netfilter_socket (0x8905)))
(neverallowx domain domain (ioctl netlink_generic_socket (0x8905)))
(neverallowx domain domain (ioctl netlink_scsitransport_socket (0x8905)))
(neverallowx domain domain (ioctl netlink_rdma_socket (0x8905)))
(neverallowx domain domain (ioctl netlink_crypto_socket (0x8905)))
(neverallowx domain domain (ioctl sctp_socket (0x8905)))
(neverallowx domain domain (ioctl icmp_socket (0x8905)))
(neverallowx domain domain (ioctl ax25_socket (0x8905)))
(neverallowx domain domain (ioctl ipx_socket (0x8905)))
(neverallowx domain domain (ioctl netrom_socket (0x8905)))
(neverallowx domain domain (ioctl atmpvc_socket (0x8905)))
(neverallowx domain domain (ioctl x25_socket (0x8905)))
(neverallowx domain domain (ioctl rose_socket (0x8905)))
(neverallowx domain domain (ioctl decnet_socket (0x8905)))
(neverallowx domain domain (ioctl atmsvc_socket (0x8905)))
(neverallowx domain domain (ioctl rds_socket (0x8905)))
(neverallowx domain domain (ioctl irda_socket (0x8905)))
(neverallowx domain domain (ioctl pppox_socket (0x8905)))
(neverallowx domain domain (ioctl llc_socket (0x8905)))
(neverallowx domain domain (ioctl can_socket (0x8905)))
(neverallowx domain domain (ioctl tipc_socket (0x8905)))
(neverallowx domain domain (ioctl bluetooth_socket (0x8905)))
(neverallowx domain domain (ioctl iucv_socket (0x8905)))
(neverallowx domain domain (ioctl rxrpc_socket (0x8905)))
(neverallowx domain domain (ioctl isdn_socket (0x8905)))
(neverallowx domain domain (ioctl phonet_socket (0x8905)))
(neverallowx domain domain (ioctl ieee802154_socket (0x8905)))
(neverallowx domain domain (ioctl caif_socket (0x8905)))
(neverallowx domain domain (ioctl alg_socket (0x8905)))
(neverallowx domain domain (ioctl nfc_socket (0x8905)))
(neverallowx domain domain (ioctl vsock_socket (0x8905)))
(neverallowx domain domain (ioctl kcm_socket (0x8905)))
(neverallowx domain domain (ioctl qipcrtr_socket (0x8905)))
(neverallowx domain domain (ioctl smc_socket (0x8905)))
(neverallowx domain domain (ioctl xdp_socket (0x8905)))
;;* lme

;;* lmx 365 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallowx base_typeattr_224 devpts (ioctl chr_file (0x5412)))
;;* lme

;;* lmx 368 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_252 unlabeled (file (create)))
(neverallow base_typeattr_252 unlabeled (dir (create)))
(neverallow base_typeattr_252 unlabeled (lnk_file (create)))
(neverallow base_typeattr_252 unlabeled (chr_file (create)))
(neverallow base_typeattr_252 unlabeled (blk_file (create)))
(neverallow base_typeattr_252 unlabeled (sock_file (create)))
(neverallow base_typeattr_252 unlabeled (fifo_file (create)))
;;* lme

;;* lmx 377 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_253 self (capability (mknod)))
(neverallow base_typeattr_253 self (cap_userns (mknod)))
;;* lme

;;* lmx 380 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_224 self (memprotect (mmap_zero)))
;;* lme

;;* lmx 383 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_224 self (capability2 (mac_override)))
(neverallow base_typeattr_224 self (cap2_userns (mac_override)))
;;* lme

;;* lmx 388 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_224 self (capability2 (mac_admin)))
(neverallow base_typeattr_224 self (cap2_userns (mac_admin)))
;;* lme

;;* lmx 392 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_224 kernel (security (load_policy)))
;;* lme

;;* lmx 398 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_224 kernel (security (setenforce)))
;;* lme

;;* lmx 399 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_254 kernel (security (setcheckreqprot)))
;;* lme

;;* lmx 402 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_224 kernel (security (setbool)))
;;* lme

;;* lmx 407 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_223 kernel (security (setsecparam)))
;;* lme

;;* lmx 415 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_255 hw_random_device (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
;;* lme

;;* lmx 421 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_256 keychord_device (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
;;* lme

;;* lmx 424 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_224 base_typeattr_257 (file (entrypoint)))
;;* lme

(dontaudit domain postinstall_mnt_dir (dir (audit_access)))
;;* lmx 436 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_256 port_device (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
;;* lme

;;* lmx 437 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_224 port_device (chr_file (ioctl read write lock relabelfrom append map link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
;;* lme

;;* lmx 440 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_223 usermodehelper (file (write append)))
;;* lme

;;* lmx 441 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_258 sysfs_usermodehelper (file (write append)))
;;* lme

;;* lmx 442 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_259 proc_security (file (read write append open)))
;;* lme

;;* lmx 446 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_224 init (binder (impersonate call set_context_mgr transfer)))
;;* lme

;;* lmx 447 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_224 vendor_init (binder (impersonate call set_context_mgr transfer)))
;;* lme

;;* lmx 450 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_260 binderfs_logs (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow base_typeattr_260 binderfs_logs_proc (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 451 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_261 binderfs_logs_stats (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 455 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_262 block_device (blk_file (read write open)))
;;* lme

;;* lmx 460 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_224 base_typeattr_224 (chr_file (rename)))
(neverallow base_typeattr_224 base_typeattr_224 (blk_file (rename)))
;;* lme

;;* lmx 464 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow domain device (chr_file (read write open)))
;;* lme

;;* lmx 467 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow domain cache_file (file (execute)))
(neverallow domain cache_backup_file (file (execute)))
(neverallow domain cache_private_backup_file (file (execute)))
(neverallow domain cache_recovery_file (file (execute)))
;;* lme

;;* lmx 470 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow domain nativetest_data_file (file (write create setattr relabelfrom append unlink link rename)))
(neverallow domain nativetest_data_file (lnk_file (write create setattr relabelfrom append unlink link rename)))
(neverallow domain nativetest_data_file (chr_file (write create setattr relabelfrom append unlink link rename)))
(neverallow domain nativetest_data_file (blk_file (write create setattr relabelfrom append unlink link rename)))
(neverallow domain nativetest_data_file (sock_file (write create setattr relabelfrom append unlink link rename)))
(neverallow domain nativetest_data_file (fifo_file (write create setattr relabelfrom append unlink link rename)))
;;* lme

;;* lmx 471 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow domain nativetest_data_file (dir (write create setattr relabelfrom link rename add_name remove_name reparent rmdir)))
;;* lme

;;* lmx 472 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow domain nativetest_data_file (file (execute execute_no_trans)))
;;* lme

;;* lmx 474 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_263 shell_test_data_file (file (write create setattr relabelfrom append unlink link rename)))
(neverallow base_typeattr_263 shell_test_data_file (lnk_file (write create setattr relabelfrom append unlink link rename)))
(neverallow base_typeattr_263 shell_test_data_file (chr_file (write create setattr relabelfrom append unlink link rename)))
(neverallow base_typeattr_263 shell_test_data_file (blk_file (write create setattr relabelfrom append unlink link rename)))
(neverallow base_typeattr_263 shell_test_data_file (sock_file (write create setattr relabelfrom append unlink link rename)))
(neverallow base_typeattr_263 shell_test_data_file (fifo_file (write create setattr relabelfrom append unlink link rename)))
;;* lme

;;* lmx 475 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_263 shell_test_data_file (dir (write create setattr relabelfrom link rename add_name remove_name reparent rmdir)))
;;* lme

;;* lmx 476 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_264 shell_test_data_file (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
;;* lme

;;* lmx 477 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow heapprofd shell_test_data_file (file (write create setattr relabelfrom append unlink link rename execute execute_no_trans)))
;;* lme

;;* lmx 478 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_263 shell_test_data_file (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 481 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_223 property_data_file (dir (write create setattr relabelfrom link rename add_name remove_name reparent rmdir)))
;;* lme

;;* lmx 482 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_223 property_data_file (file (write create setattr relabelfrom append unlink link rename execute execute_no_trans)))
;;* lme

;;* lmx 483 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_223 property_type (file (write create setattr relabelfrom append unlink link rename execute execute_no_trans)))
;;* lme

;;* lmx 484 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_223 properties_device (file (write create setattr relabelfrom append unlink link rename execute execute_no_trans)))
;;* lme

;;* lmx 485 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_223 properties_serial (file (write create setattr relabelfrom append unlink link rename execute execute_no_trans)))
;;* lme

;;* lmx 499 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow domain exec_type (file (write create setattr relabelfrom append unlink link rename)))
(neverallow domain exec_type (dir (write create setattr relabelfrom append unlink link rename)))
(neverallow domain exec_type (lnk_file (write create setattr relabelfrom append unlink link rename)))
(neverallow domain exec_type (chr_file (write create setattr relabelfrom append unlink link rename)))
(neverallow domain exec_type (blk_file (write create setattr relabelfrom append unlink link rename)))
(neverallow domain exec_type (sock_file (write create setattr relabelfrom append unlink link rename)))
(neverallow domain exec_type (fifo_file (write create setattr relabelfrom append unlink link rename)))
(neverallow domain system_file_type (file (write create setattr relabelfrom append unlink link rename)))
(neverallow domain system_file_type (dir (write create setattr relabelfrom append unlink link rename)))
(neverallow domain system_file_type (lnk_file (write create setattr relabelfrom append unlink link rename)))
(neverallow domain system_file_type (chr_file (write create setattr relabelfrom append unlink link rename)))
(neverallow domain system_file_type (blk_file (write create setattr relabelfrom append unlink link rename)))
(neverallow domain system_file_type (sock_file (write create setattr relabelfrom append unlink link rename)))
(neverallow domain system_file_type (fifo_file (write create setattr relabelfrom append unlink link rename)))
(neverallow domain vendor_file_type (file (write create setattr relabelfrom append unlink link rename)))
(neverallow domain vendor_file_type (dir (write create setattr relabelfrom append unlink link rename)))
(neverallow domain vendor_file_type (lnk_file (write create setattr relabelfrom append unlink link rename)))
(neverallow domain vendor_file_type (chr_file (write create setattr relabelfrom append unlink link rename)))
(neverallow domain vendor_file_type (blk_file (write create setattr relabelfrom append unlink link rename)))
(neverallow domain vendor_file_type (sock_file (write create setattr relabelfrom append unlink link rename)))
(neverallow domain vendor_file_type (fifo_file (write create setattr relabelfrom append unlink link rename)))
;;* lme

;;* lmx 501 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_254 exec_type (file (relabelto)))
(neverallow base_typeattr_254 exec_type (dir (relabelto)))
(neverallow base_typeattr_254 exec_type (lnk_file (relabelto)))
(neverallow base_typeattr_254 exec_type (chr_file (relabelto)))
(neverallow base_typeattr_254 exec_type (blk_file (relabelto)))
(neverallow base_typeattr_254 exec_type (sock_file (relabelto)))
(neverallow base_typeattr_254 exec_type (fifo_file (relabelto)))
(neverallow base_typeattr_254 system_file_type (file (relabelto)))
(neverallow base_typeattr_254 system_file_type (dir (relabelto)))
(neverallow base_typeattr_254 system_file_type (lnk_file (relabelto)))
(neverallow base_typeattr_254 system_file_type (chr_file (relabelto)))
(neverallow base_typeattr_254 system_file_type (blk_file (relabelto)))
(neverallow base_typeattr_254 system_file_type (sock_file (relabelto)))
(neverallow base_typeattr_254 system_file_type (fifo_file (relabelto)))
(neverallow base_typeattr_254 vendor_file_type (file (relabelto)))
(neverallow base_typeattr_254 vendor_file_type (dir (relabelto)))
(neverallow base_typeattr_254 vendor_file_type (lnk_file (relabelto)))
(neverallow base_typeattr_254 vendor_file_type (chr_file (relabelto)))
(neverallow base_typeattr_254 vendor_file_type (blk_file (relabelto)))
(neverallow base_typeattr_254 vendor_file_type (sock_file (relabelto)))
(neverallow base_typeattr_254 vendor_file_type (fifo_file (relabelto)))
;;* lme

;;* lmx 504 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_224 exec_type (file (mounton)))
(neverallow base_typeattr_224 exec_type (dir (mounton)))
(neverallow base_typeattr_224 exec_type (lnk_file (mounton)))
(neverallow base_typeattr_224 exec_type (chr_file (mounton)))
(neverallow base_typeattr_224 exec_type (blk_file (mounton)))
(neverallow base_typeattr_224 exec_type (sock_file (mounton)))
(neverallow base_typeattr_224 exec_type (fifo_file (mounton)))
;;* lme

;;* lmx 507 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_224 rootfs (file (write create setattr relabelto append unlink link rename)))
;;* lme

;;* lmx 511 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_224 base_typeattr_265 (filesystem (relabelto)))
;;* lme

;;* lmx 517 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_224 contextmount_type (file (create setattr relabelfrom relabelto append link rename)))
(neverallow base_typeattr_224 contextmount_type (dir (create setattr relabelfrom relabelto append link rename)))
(neverallow base_typeattr_224 contextmount_type (lnk_file (create setattr relabelfrom relabelto append link rename)))
(neverallow base_typeattr_224 contextmount_type (chr_file (create setattr relabelfrom relabelto append link rename)))
(neverallow base_typeattr_224 contextmount_type (blk_file (create setattr relabelfrom relabelto append link rename)))
(neverallow base_typeattr_224 contextmount_type (sock_file (create setattr relabelfrom relabelto append link rename)))
(neverallow base_typeattr_224 contextmount_type (fifo_file (create setattr relabelfrom relabelto append link rename)))
;;* lme

;;* lmx 518 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow domain contextmount_type (file (write unlink)))
(neverallow domain contextmount_type (dir (write unlink)))
(neverallow domain contextmount_type (lnk_file (write unlink)))
(neverallow domain contextmount_type (chr_file (write unlink)))
(neverallow domain contextmount_type (blk_file (write unlink)))
(neverallow domain contextmount_type (sock_file (write unlink)))
(neverallow domain contextmount_type (fifo_file (write unlink)))
;;* lme

;;* lmx 525 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_224 default_android_service (service_manager (add find list)))
;;* lme

;;* lmx 526 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_224 default_android_vndservice (service_manager (add find list)))
;;* lme

;;* lmx 527 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_224 default_android_hwservice (hwservice_manager (add find list)))
;;* lme

;;* lmx 536 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_224 hidl_base_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 540 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_259 mmc_prop (property_service (set)))
;;* lme

;;* lmx 541 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_259 vndk_prop (property_service (set)))
;;* lme

;;* lmx 543 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_223 mmc_prop (property_service (set)))
;;* lme

;;* lmx 543 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_259 exported_default_prop (property_service (set)))
;;* lme

;;* lmx 543 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_223 exported_secure_prop (property_service (set)))
;;* lme

;;* lmx 543 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_259 vendor_default_prop (property_service (set)))
;;* lme

;;* lmx 543 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_259 storage_config_prop (property_service (set)))
;;* lme

;;* lmx 543 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_259 hw_timeout_multiplier_prop (property_service (set)))
;;* lme

;;* lmx 552 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_266 exported_pm_prop (property_service (set)))
;;* lme

;;* lmx 552 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_267 exported_pm_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 558 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_260 future_pm_prop (property_service (set)))
;;* lme

;;* lmx 559 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_260 future_pm_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

(dontaudit domain future_pm_prop (file (read)))
;;* lmx 565 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_223 aac_drc_prop (property_service (set)))
;;* lme

;;* lmx 566 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_223 build_prop (property_service (set)))
;;* lme

;;* lmx 567 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_223 userdebug_or_eng_prop (property_service (set)))
;;* lme

;;* lmx 588 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_268 serialno_prop (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 596 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_269 frp_block_device (blk_file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 610 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_270 metadata_block_device (blk_file (ioctl read write lock append link rename open)))
;;* lme

;;* lmx 620 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_271 system_block_device (blk_file (write append)))
;;* lme

;;* lmx 623 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_272 base_typeattr_224 (binder (set_context_mgr)))
;;* lme

;;* lmx 625 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow servicemanager hwbinder_device (chr_file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 626 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow servicemanager vndbinder_device (chr_file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 627 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow hwservicemanager binder_device (chr_file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 628 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow hwservicemanager vndbinder_device (chr_file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 629 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow vndservicemanager binder_device (chr_file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 630 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow vndservicemanager hwbinder_device (chr_file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 634 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_223 aconfig_storage_metadata_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 635 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_223 aconfig_storage_metadata_file (file (write create setattr relabelfrom append unlink link rename)))
;;* lme

;;* lmx 637 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_273 base_typeattr_274 (service_manager (find)))
;;* lme

;;* lmx 674 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_275 vndbinder_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 682 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow ueventd vndbinder_device (chr_file (ioctl read write append)))
;;* lme

;;* lmx 685 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_276 vndservice_manager_type (service_manager (add find list)))
;;* lme

;;* lmx 692 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_276 vndservicemanager (binder (impersonate call set_context_mgr transfer)))
;;* lme

;;* lmx 709 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_277 base_typeattr_278 (socket (connect sendto)))
(neverallow base_typeattr_277 base_typeattr_278 (tcp_socket (connect sendto)))
(neverallow base_typeattr_277 base_typeattr_278 (udp_socket (connect sendto)))
(neverallow base_typeattr_277 base_typeattr_278 (rawip_socket (connect sendto)))
(neverallow base_typeattr_277 base_typeattr_278 (netlink_socket (connect sendto)))
(neverallow base_typeattr_277 base_typeattr_278 (packet_socket (connect sendto)))
(neverallow base_typeattr_277 base_typeattr_278 (key_socket (connect sendto)))
(neverallow base_typeattr_277 base_typeattr_278 (unix_stream_socket (connect sendto)))
(neverallow base_typeattr_277 base_typeattr_278 (unix_dgram_socket (connect sendto)))
(neverallow base_typeattr_277 base_typeattr_278 (netlink_route_socket (connect sendto)))
(neverallow base_typeattr_277 base_typeattr_278 (netlink_tcpdiag_socket (connect sendto)))
(neverallow base_typeattr_277 base_typeattr_278 (netlink_nflog_socket (connect sendto)))
(neverallow base_typeattr_277 base_typeattr_278 (netlink_xfrm_socket (connect sendto)))
(neverallow base_typeattr_277 base_typeattr_278 (netlink_selinux_socket (connect sendto)))
(neverallow base_typeattr_277 base_typeattr_278 (netlink_audit_socket (connect sendto)))
(neverallow base_typeattr_277 base_typeattr_278 (netlink_dnrt_socket (connect sendto)))
(neverallow base_typeattr_277 base_typeattr_278 (netlink_kobject_uevent_socket (connect sendto)))
(neverallow base_typeattr_277 base_typeattr_278 (appletalk_socket (connect sendto)))
(neverallow base_typeattr_277 base_typeattr_278 (tun_socket (connect sendto)))
(neverallow base_typeattr_277 base_typeattr_278 (netlink_iscsi_socket (connect sendto)))
(neverallow base_typeattr_277 base_typeattr_278 (netlink_fib_lookup_socket (connect sendto)))
(neverallow base_typeattr_277 base_typeattr_278 (netlink_connector_socket (connect sendto)))
(neverallow base_typeattr_277 base_typeattr_278 (netlink_netfilter_socket (connect sendto)))
(neverallow base_typeattr_277 base_typeattr_278 (netlink_generic_socket (connect sendto)))
(neverallow base_typeattr_277 base_typeattr_278 (netlink_scsitransport_socket (connect sendto)))
(neverallow base_typeattr_277 base_typeattr_278 (netlink_rdma_socket (connect sendto)))
(neverallow base_typeattr_277 base_typeattr_278 (netlink_crypto_socket (connect sendto)))
(neverallow base_typeattr_277 base_typeattr_278 (sctp_socket (connect sendto)))
(neverallow base_typeattr_277 base_typeattr_278 (icmp_socket (connect sendto)))
(neverallow base_typeattr_277 base_typeattr_278 (ax25_socket (connect sendto)))
(neverallow base_typeattr_277 base_typeattr_278 (ipx_socket (connect sendto)))
(neverallow base_typeattr_277 base_typeattr_278 (netrom_socket (connect sendto)))
(neverallow base_typeattr_277 base_typeattr_278 (atmpvc_socket (connect sendto)))
(neverallow base_typeattr_277 base_typeattr_278 (x25_socket (connect sendto)))
(neverallow base_typeattr_277 base_typeattr_278 (rose_socket (connect sendto)))
(neverallow base_typeattr_277 base_typeattr_278 (decnet_socket (connect sendto)))
(neverallow base_typeattr_277 base_typeattr_278 (atmsvc_socket (connect sendto)))
(neverallow base_typeattr_277 base_typeattr_278 (rds_socket (connect sendto)))
(neverallow base_typeattr_277 base_typeattr_278 (irda_socket (connect sendto)))
(neverallow base_typeattr_277 base_typeattr_278 (pppox_socket (connect sendto)))
(neverallow base_typeattr_277 base_typeattr_278 (llc_socket (connect sendto)))
(neverallow base_typeattr_277 base_typeattr_278 (can_socket (connect sendto)))
(neverallow base_typeattr_277 base_typeattr_278 (tipc_socket (connect sendto)))
(neverallow base_typeattr_277 base_typeattr_278 (bluetooth_socket (connect sendto)))
(neverallow base_typeattr_277 base_typeattr_278 (iucv_socket (connect sendto)))
(neverallow base_typeattr_277 base_typeattr_278 (rxrpc_socket (connect sendto)))
(neverallow base_typeattr_277 base_typeattr_278 (isdn_socket (connect sendto)))
(neverallow base_typeattr_277 base_typeattr_278 (phonet_socket (connect sendto)))
(neverallow base_typeattr_277 base_typeattr_278 (ieee802154_socket (connect sendto)))
(neverallow base_typeattr_277 base_typeattr_278 (caif_socket (connect sendto)))
(neverallow base_typeattr_277 base_typeattr_278 (alg_socket (connect sendto)))
(neverallow base_typeattr_277 base_typeattr_278 (nfc_socket (connect sendto)))
(neverallow base_typeattr_277 base_typeattr_278 (vsock_socket (connect sendto)))
(neverallow base_typeattr_277 base_typeattr_278 (kcm_socket (connect sendto)))
(neverallow base_typeattr_277 base_typeattr_278 (qipcrtr_socket (connect sendto)))
(neverallow base_typeattr_277 base_typeattr_278 (smc_socket (connect sendto)))
(neverallow base_typeattr_277 base_typeattr_278 (xdp_socket (connect sendto)))
;;* lme

;;* lmx 709 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_277 base_typeattr_278 (unix_stream_socket (connectto)))
;;* lme

;;* lmx 722 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_279 core_data_file_type (sock_file (create setattr lock relabelfrom relabelto map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow base_typeattr_279 coredomain_socket (sock_file (create setattr lock relabelfrom relabelto map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow base_typeattr_279 unlabeled (sock_file (create setattr lock relabelfrom relabelto map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 736 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_273 base_typeattr_280 (sock_file (create setattr lock relabelfrom relabelto map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 752 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_281 base_typeattr_282 (sock_file (create setattr lock relabelfrom relabelto map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 776 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_283 base_typeattr_284 (file (create setattr lock relabelfrom relabelto unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow base_typeattr_283 base_typeattr_284 (lnk_file (create setattr lock relabelfrom relabelto unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow base_typeattr_283 base_typeattr_284 (chr_file (create setattr lock relabelfrom relabelto unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow base_typeattr_283 base_typeattr_284 (blk_file (create setattr lock relabelfrom relabelto unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow base_typeattr_283 base_typeattr_284 (sock_file (create setattr lock relabelfrom relabelto unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow base_typeattr_283 base_typeattr_284 (fifo_file (create setattr lock relabelfrom relabelto unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 791 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_283 base_typeattr_285 (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 808 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_286 core_data_file_type (file (create setattr lock relabelfrom relabelto unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow base_typeattr_286 core_data_file_type (lnk_file (create setattr lock relabelfrom relabelto unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow base_typeattr_286 core_data_file_type (chr_file (create setattr lock relabelfrom relabelto unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow base_typeattr_286 core_data_file_type (blk_file (create setattr lock relabelfrom relabelto unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow base_typeattr_286 core_data_file_type (sock_file (create setattr lock relabelfrom relabelto unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow base_typeattr_286 core_data_file_type (fifo_file (create setattr lock relabelfrom relabelto unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 808 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_287 base_typeattr_288 (file (create setattr lock relabelfrom relabelto unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow base_typeattr_287 base_typeattr_288 (lnk_file (create setattr lock relabelfrom relabelto unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow base_typeattr_287 base_typeattr_288 (chr_file (create setattr lock relabelfrom relabelto unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow base_typeattr_287 base_typeattr_288 (blk_file (create setattr lock relabelfrom relabelto unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow base_typeattr_287 base_typeattr_288 (sock_file (create setattr lock relabelfrom relabelto unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow base_typeattr_287 base_typeattr_288 (fifo_file (create setattr lock relabelfrom relabelto unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 808 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow vendor_init unencrypted_data_file (file (write create setattr relabelfrom relabelto append unlink link rename execute quotaon mounton audit_access execmod watch_mount watch_sb watch_with_perm execute_no_trans entrypoint)))
;;* lme

;;* lmx 832 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_286 base_typeattr_289 (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 832 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_287 base_typeattr_290 (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 832 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow vendor_init unencrypted_data_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent rmdir)))
;;* lme

;;* lmx 864 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_291 system_data_file (dir (ioctl read write create setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent rmdir)))
;;* lme

;;* lmx 876 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_292 vendor_data_file (dir (ioctl read write create setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent rmdir)))
;;* lme

;;* lmx 889 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_293 vendor_data_file (file (create setattr lock relabelfrom relabelto unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow base_typeattr_293 vendor_data_file (lnk_file (create setattr lock relabelfrom relabelto unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow base_typeattr_293 vendor_data_file (chr_file (create setattr lock relabelfrom relabelto unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow base_typeattr_293 vendor_data_file (blk_file (create setattr lock relabelfrom relabelto unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow base_typeattr_293 vendor_data_file (sock_file (create setattr lock relabelfrom relabelto unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow base_typeattr_293 vendor_data_file (fifo_file (create setattr lock relabelfrom relabelto unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 900 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_294 vendor_shell_exec (file (execute execute_no_trans)))
;;* lme

;;* lmx 911 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_295 base_typeattr_296 (file (execute execute_no_trans entrypoint)))
;;* lme

;;* lmx 933 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow coredomain base_typeattr_297 (file (entrypoint)))
;;* lme

;;* lmx 933 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_250 base_typeattr_298 (file (entrypoint)))
;;* lme

;;* lmx 950 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_299 base_typeattr_300 (file (execute)))
;;* lme

;;* lmx 969 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_301 base_typeattr_302 (file (execute_no_trans)))
;;* lme

;;* lmx 980 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_295 base_typeattr_303 (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
;;* lme

;;* lmx 1017 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_304 zygote (unix_stream_socket (connectto)))
;;* lme

;;* lmx 1018 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_305 zygote_socket (sock_file (write)))
;;* lme

;;* lmx 1020 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_306 webview_zygote (unix_stream_socket (connectto)))
;;* lme

;;* lmx 1021 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_305 webview_zygote (sock_file (write)))
;;* lme

;;* lmx 1022 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_305 app_zygote (sock_file (write)))
;;* lme

;;* lmx 1024 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow domain tombstoned_crash_socket (unix_stream_socket (connectto)))
;;* lme

;;* lmx 1028 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_307 tombstoned_intercept_socket (sock_file (write)))
;;* lme

;;* lmx 1029 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_307 tombstoned_intercept_socket (unix_stream_socket (connectto)))
;;* lme

;;* lmx 1032 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_308 heapdump_data_file (file (read)))
;;* lme

;;* lmx 1050 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_224 base_typeattr_224 (sem (create destroy getattr setattr read write associate unix_read unix_write)))
(neverallow base_typeattr_224 base_typeattr_224 (msg (send receive)))
(neverallow base_typeattr_224 base_typeattr_224 (msgq (create destroy getattr setattr read write associate unix_read unix_write enqueue)))
(neverallow base_typeattr_224 base_typeattr_224 (shm (create destroy getattr setattr read write associate unix_read unix_write lock)))
;;* lme

;;* lmx 1054 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_224 dev_type (lnk_file (mounton)))
(neverallow base_typeattr_224 dev_type (sock_file (mounton)))
(neverallow base_typeattr_224 dev_type (fifo_file (mounton)))
(neverallow base_typeattr_224 fs_type (lnk_file (mounton)))
(neverallow base_typeattr_224 fs_type (sock_file (mounton)))
(neverallow base_typeattr_224 fs_type (fifo_file (mounton)))
(neverallow base_typeattr_224 file_type (lnk_file (mounton)))
(neverallow base_typeattr_224 file_type (sock_file (mounton)))
(neverallow base_typeattr_224 file_type (fifo_file (mounton)))
;;* lme

;;* lmx 1059 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow domain su_exec (file (execute execute_no_trans)))
;;* lme

;;* lmx 1071 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_224 base_typeattr_309 (file (execmod)))
;;* lme

;;* lmx 1076 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_224 self (process (execstack execheap)))
;;* lme

;;* lmx 1080 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_310 file_type (file (execmod)))
;;* lme

;;* lmx 1082 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_223 proc (file (mounton)))
(neverallow base_typeattr_223 proc (dir (mounton)))
;;* lme

;;* lmx 1083 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_311 proc_type (file (mounton)))
(neverallow base_typeattr_311 proc_type (dir (mounton)))
;;* lme

;;* lmx 1091 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_312 domain (process (transition dyntransition)))
;;* lme

;;* lmx 1110 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_313 system_data_file (file (write create setattr relabelfrom append unlink link rename)))
;;* lme

;;* lmx 1113 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow installd system_data_file (file (write create setattr relabelto append link rename execute quotaon mounton audit_access execmod watch_mount watch_sb watch_with_perm execute_no_trans entrypoint)))
;;* lme

;;* lmx 1126 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_314 shell (process (transition dyntransition)))
;;* lme

;;* lmx 1133 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_315 base_typeattr_316 (process (transition dyntransition)))
;;* lme

;;* lmx 1142 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_317 app_data_file (lnk_file (read)))
(neverallow base_typeattr_317 privapp_data_file (lnk_file (read)))
;;* lme

;;* lmx 1149 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_318 shell_data_file (lnk_file (read)))
;;* lme

;;* lmx 1156 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_224 base_typeattr_319 (service_manager (list)))
;;* lme

;;* lmx 1161 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_224 base_typeattr_320 (hwservice_manager (list)))
;;* lme

;;* lmx 1180 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_224 domain (file (execute execute_no_trans entrypoint)))
;;* lme

;;* lmx 1186 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_260 debugfs (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow base_typeattr_260 debugfs (lnk_file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 1189 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow domain debugfs_type (file (execute execute_no_trans)))
;;* lme

;;* lmx 1192 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_321 fusectlfs (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 1201 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_322 profman_exec (file (execute execute_no_trans)))
;;* lme

;;* lmx 1207 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_224 base_typeattr_323 (system (module_load)))
;;* lme

;;* lmx 1211 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_224 self (capability (setfcap)))
(neverallow base_typeattr_224 self (cap_userns (setfcap)))
;;* lme

;;* lmx 1214 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow domain crash_dump (process (noatsecure)))
;;* lme

;;* lmx 1218 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_324 coredomain_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 1223 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_224 same_process_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 1234 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow domain proc_type (dir (write create link rename add_name remove_name reparent rmdir)))
(neverallow domain sysfs_type (dir (write create link rename add_name remove_name reparent rmdir)))
;;* lme

;;* lmx 1237 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow domain cgroup (file (create)))
;;* lme

;;* lmx 1238 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow domain cgroup_v2 (file (create)))
;;* lme

(dontaudit domain proc_type (dir (write)))
(dontaudit domain sysfs_type (dir (write)))
(dontaudit domain cgroup (file (create)))
(dontaudit domain cgroup_v2 (file (create)))
;;* lmx 1261 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_325 mnt_vendor_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 1264 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_326 vendor_public_lib_file (file (execute execute_no_trans)))
(neverallow base_typeattr_326 vendor_public_framework_file (file (execute execute_no_trans)))
;;* lme

;;* lmx 1275 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_250 mnt_product_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 1278 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_327 sysfs_batteryinfo (file (read open)))
;;* lme

;;* lmx 1301 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_328 hal_codec2_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 1310 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_329 ashmem_device (chr_file (open)))
;;* lme

;;* lmx 1312 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow base_typeattr_330 debugfs_tracing_printk_formats (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
;;* lme

;;* lmx 1315 system/sepolicy/prebuilts/api/202404/public/domain.te

(neverallow domain self (lockdown (integrity)))
;;* lme

(allow drmserver servicemanager (binder (call transfer)))
(allow servicemanager drmserver (binder (call transfer)))
(allow servicemanager drmserver (dir (search)))
(allow servicemanager drmserver (file (read open)))
(allow servicemanager drmserver (process (getattr)))
(allow drmserver system_server (binder (call transfer)))
(allow system_server drmserver (binder (transfer)))
(allow drmserver system_server (fd (use)))
(allow drmserver appdomain (binder (call transfer)))
(allow appdomain drmserver (binder (transfer)))
(allow drmserver appdomain (fd (use)))
(allow drmserver mediametrics (binder (call transfer)))
(allow mediametrics drmserver (binder (transfer)))
(allow drmserver mediametrics (fd (use)))
(allow drmserver system_server (fd (use)))
(allow drmserver mediaserver (binder (call transfer)))
(allow mediaserver drmserver (binder (transfer)))
(allow drmserver mediaserver (fd (use)))
(allow drmserver sdcard_type (dir (search)))
(allow drmserver fuse (dir (search)))
(allow drmserver drm_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
(allow drmserver drm_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow drmserver app_data_file (file (read write getattr map)))
(allow drmserver privapp_data_file (file (read write getattr map)))
(allow drmserver sdcard_type (file (read write getattr map)))
(allow drmserver fuse (file (read write getattr map)))
(allow drmserver efs_file (dir (ioctl read getattr lock open watch watch_reads search)))
(allow drmserver efs_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow drmserver efs_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow drmserver apk_data_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
(auditallow drmserver apk_data_file (dir (write add_name)))
(allow drmserver drmserver_socket (sock_file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(auditallow drmserver drmserver_socket (sock_file (create)))
(allow drmserver apk_data_file (sock_file (unlink)))
(allow drmserver media_rw_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
(allow drmserver media_rw_data_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow drmserver media_rw_data_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow drmserver apk_data_file (file (read getattr map)))
(allow drmserver asec_apk_file (file (read getattr map)))
(allow drmserver ringtone_file (file (read getattr map)))
(allow drmserver radio_data_file (file (read getattr map)))
(allow drmserver oemfs (dir (search)))
(allow drmserver oemfs (file (ioctl read getattr lock map open watch watch_reads)))
(allow drmserver vendor_overlay_file (file (read map)))
(allow drmserver drmserver_service (service_manager (add find)))
;;* lmx 57 system/sepolicy/prebuilts/api/202404/public/drmserver.te

(neverallow base_typeattr_331 drmserver_service (service_manager (add)))
;;* lme

(allow drmserver permission_service (service_manager (find)))
(allow drmserver mediametrics_service (service_manager (find)))
(allow drmserver selinuxfs (dir (ioctl read getattr lock open watch watch_reads search)))
(allow drmserver selinuxfs (file (ioctl read getattr lock map open watch watch_reads)))
(allow drmserver selinuxfs (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow drmserver selinuxfs (file (write lock append map open)))
(allow drmserver kernel (security (compute_av)))
(allow drmserver self (netlink_selinux_socket (read write create getattr setattr lock relabelfrom relabelto append bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(allow drmserver cgroup (dir (ioctl read getattr lock open watch watch_reads search)))
(allow drmserver cgroup (file (ioctl read getattr lock map open watch watch_reads)))
(allow drmserver cgroup (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow drmserver cgroup_v2 (dir (ioctl read getattr lock open watch watch_reads search)))
(allow drmserver cgroup_v2 (file (ioctl read getattr lock map open watch watch_reads)))
(allow drmserver cgroup_v2 (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow drmserver system_file (dir (ioctl read getattr lock open watch watch_reads search)))
(allow drmserver system_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow drmserver system_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow dumpstate servicemanager (binder (call transfer)))
(allow servicemanager dumpstate (binder (call transfer)))
(allow servicemanager dumpstate (dir (search)))
(allow servicemanager dumpstate (file (read open)))
(allow servicemanager dumpstate (process (getattr)))
(allow dumpstate sysfs_wake_lock (file (ioctl read write getattr lock append map open watch watch_reads)))
(allow dumpstate self (capability2 (block_suspend)))
(allow dumpstate self (cap2_userns (block_suspend)))
(allow dumpstate system_suspend_server (binder (call transfer)))
(allow system_suspend_server dumpstate (binder (transfer)))
(allow dumpstate system_suspend_server (fd (use)))
(allow dumpstate system_suspend_hwservice (hwservice_manager (find)))
(allow dumpstate hwservicemanager (binder (call transfer)))
(allow hwservicemanager dumpstate (binder (call transfer)))
(allow hwservicemanager dumpstate (dir (search)))
(allow hwservicemanager dumpstate (file (read map open)))
(allow hwservicemanager dumpstate (process (getattr)))
(allow dumpstate hwservicemanager_prop (file (read getattr map open)))
(allow dumpstate hidl_manager_hwservice (hwservice_manager (find)))
(allow dumpstate hal_system_suspend_service (service_manager (find)))
(allow dumpstate servicemanager (binder (call transfer)))
(allow servicemanager dumpstate (binder (call transfer)))
(allow servicemanager dumpstate (dir (search)))
(allow servicemanager dumpstate (file (read open)))
(allow servicemanager dumpstate (process (getattr)))
(allow dumpstate self (capability (setgid setuid sys_resource)))
(allow dumpstate self (cap_userns (setgid setuid sys_resource)))
(allow dumpstate domain (dir (ioctl read getattr lock open watch watch_reads search)))
(allow dumpstate domain (file (ioctl read getattr lock map open watch watch_reads)))
(allow dumpstate domain (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow dumpstate self (capability (kill net_admin net_raw)))
(allow dumpstate self (cap_userns (kill net_admin net_raw)))
(allow dumpstate system_file (file (execute_no_trans)))
(allow dumpstate toolbox_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
(allow dumpstate system_file (dir (ioctl read getattr lock open watch watch_reads search)))
(allow dumpstate self (capability (chown dac_override dac_read_search fowner fsetid)))
(allow dumpstate self (cap_userns (chown dac_override dac_read_search fowner fsetid)))
(allow dumpstate anr_data_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
(allow dumpstate anr_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow dumpstate system_data_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow dumpstate app_data_file (file (append)))
(allow dumpstate privapp_data_file (file (append)))
(allow dumpstate self (capability2 (syslog)))
(allow dumpstate self (cap2_userns (syslog)))
(allow dumpstate kernel (system (syslog_read)))
(allow dumpstate pstorefs (dir (ioctl read getattr lock open watch watch_reads search)))
(allow dumpstate pstorefs (file (ioctl read getattr lock map open watch watch_reads)))
(allow dumpstate domain (process (getattr)))
(allow dumpstate appdomain (process (signal)))
(allow dumpstate app_zygote (process (signal)))
(allow dumpstate system_server (process (signal)))
(allow dumpstate zygote (process (signal)))
(allow dumpstate hal_audio_server (process (signal)))
(allow dumpstate hal_audiocontrol_server (process (signal)))
(allow dumpstate hal_bluetooth_server (process (signal)))
(allow dumpstate hal_broadcastradio_server (process (signal)))
(allow dumpstate hal_camera_server (process (signal)))
(allow dumpstate hal_codec2_server (process (signal)))
(allow dumpstate hal_drm_server (process (signal)))
(allow dumpstate hal_evs_server (process (signal)))
(allow dumpstate hal_face_server (process (signal)))
(allow dumpstate hal_fingerprint_server (process (signal)))
(allow dumpstate hal_graphics_allocator_server (process (signal)))
(allow dumpstate hal_graphics_composer_server (process (signal)))
(allow dumpstate hal_health_server (process (signal)))
(allow dumpstate hal_input_processor_server (process (signal)))
(allow dumpstate hal_neuralnetworks_server (process (signal)))
(allow dumpstate hal_omx_server (process (signal)))
(allow dumpstate hal_power_server (process (signal)))
(allow dumpstate hal_power_stats_server (process (signal)))
(allow dumpstate hal_sensors_server (process (signal)))
(allow dumpstate hal_thermal_server (process (signal)))
(allow dumpstate hal_vehicle_server (process (signal)))
(allow dumpstate hal_vr_server (process (signal)))
(allow dumpstate system_suspend_server (process (signal)))
(allow dumpstate audioserver (process (signal)))
(allow dumpstate cameraserver (process (signal)))
(allow dumpstate drmserver (process (signal)))
(allow dumpstate evsmanagerd (process (signal)))
(allow dumpstate inputflinger (process (signal)))
(allow dumpstate mediadrmserver (process (signal)))
(allow dumpstate mediaextractor (process (signal)))
(allow dumpstate mediametrics (process (signal)))
(allow dumpstate mediaserver (process (signal)))
(allow dumpstate mediaswcodec (process (signal)))
(allow dumpstate sdcardd (process (signal)))
(allow dumpstate surfaceflinger (process (signal)))
(allow dumpstate vold (process (signal)))
(allow dumpstate tombstoned_intercept_socket (sock_file (write)))
(allow dumpstate tombstoned (unix_stream_socket (connectto)))
(allow dumpstate sysfs_type (dir (ioctl read getattr lock open watch watch_reads search)))
(allow dumpstate sysfs_devices_block (file (ioctl read getattr lock map open watch watch_reads)))
(allow dumpstate sysfs_dm (file (ioctl read getattr lock map open watch watch_reads)))
(allow dumpstate sysfs_loop (file (ioctl read getattr lock map open watch watch_reads)))
(allow dumpstate sysfs_usb (file (ioctl read getattr lock map open watch watch_reads)))
(allow dumpstate sysfs_zram (file (ioctl read getattr lock map open watch watch_reads)))
(dontaudit dumpstate sysfs (file (ioctl read getattr lock map open watch watch_reads)))
(allow dumpstate block_device (dir (getattr search)))
(allow dumpstate rootfs (dir (getattr search)))
(allow dumpstate selinuxfs (dir (getattr search)))
(allow dumpstate tmpfs (dir (getattr search)))
(allow dumpstate metadata_file (dir (getattr search)))
(allow dumpstate storage_file (dir (getattr search)))
(allow dumpstate cache_file (dir (getattr search)))
(allow dumpstate fuse_device (chr_file (getattr)))
(allow dumpstate dm_device (blk_file (getattr)))
(allow dumpstate cache_block_device (blk_file (getattr)))
(allow dumpstate rootfs (lnk_file (read getattr)))
(allow dumpstate cache_file (lnk_file (read getattr)))
(allow dumpstate cgroup (dir (ioctl read getattr lock open watch watch_reads search)))
(allow dumpstate cgroup (file (ioctl read getattr lock map open watch watch_reads)))
(allow dumpstate cgroup (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow dumpstate cgroup_v2 (dir (ioctl read getattr lock open watch watch_reads search)))
(allow dumpstate cgroup_v2 (file (ioctl read getattr lock map open watch watch_reads)))
(allow dumpstate cgroup_v2 (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow dumpstate binderservicedomain (binder (call transfer)))
(allow binderservicedomain dumpstate (binder (transfer)))
(allow dumpstate binderservicedomain (fd (use)))
(allow dumpstate appdomain (binder (call transfer)))
(allow dumpstate artd (binder (call transfer)))
(allow dumpstate netd (binder (call transfer)))
(allow dumpstate wificond (binder (call transfer)))
(allow appdomain dumpstate (binder (transfer)))
(allow artd dumpstate (binder (transfer)))
(allow netd dumpstate (binder (transfer)))
(allow wificond dumpstate (binder (transfer)))
(allow dumpstate appdomain (fd (use)))
(allow dumpstate artd (fd (use)))
(allow dumpstate netd (fd (use)))
(allow dumpstate wificond (fd (use)))
(allow hal_audio_server dumpstate (fifo_file (write)))
(allow hal_audio_server dumpstate (fd (use)))
(allow hal_audiocontrol_server dumpstate (fifo_file (write)))
(allow hal_audiocontrol_server dumpstate (fd (use)))
(allow hal_authgraph_server dumpstate (fifo_file (write)))
(allow hal_authgraph_server dumpstate (fd (use)))
(allow hal_authsecret_server dumpstate (fifo_file (write)))
(allow hal_authsecret_server dumpstate (fd (use)))
(allow hal_bluetooth_server dumpstate (fifo_file (write)))
(allow hal_bluetooth_server dumpstate (fd (use)))
(allow hal_broadcastradio_server dumpstate (fifo_file (write)))
(allow hal_broadcastradio_server dumpstate (fd (use)))
(allow hal_camera_server dumpstate (fifo_file (write)))
(allow hal_camera_server dumpstate (fd (use)))
(allow hal_codec2_server dumpstate (fifo_file (write)))
(allow hal_codec2_server dumpstate (fd (use)))
(allow hal_contexthub_server dumpstate (fifo_file (write)))
(allow hal_contexthub_server dumpstate (fd (use)))
(allow hal_drm_server dumpstate (fifo_file (write)))
(allow hal_drm_server dumpstate (fd (use)))
(allow hal_dumpstate_server dumpstate (fifo_file (write)))
(allow hal_dumpstate_server dumpstate (fd (use)))
(allow hal_evs_server dumpstate (fifo_file (write)))
(allow hal_evs_server dumpstate (fd (use)))
(allow hal_face_server dumpstate (fifo_file (write)))
(allow hal_face_server dumpstate (fd (use)))
(allow hal_fingerprint_server dumpstate (fifo_file (write)))
(allow hal_fingerprint_server dumpstate (fd (use)))
(allow hal_gnss_server dumpstate (fifo_file (write)))
(allow hal_gnss_server dumpstate (fd (use)))
(allow hal_graphics_allocator_server dumpstate (fifo_file (write)))
(allow hal_graphics_allocator_server dumpstate (fd (use)))
(allow hal_graphics_composer_server dumpstate (fifo_file (write)))
(allow hal_graphics_composer_server dumpstate (fd (use)))
(allow hal_health_server dumpstate (fifo_file (write)))
(allow hal_health_server dumpstate (fd (use)))
(allow hal_identity_server dumpstate (fifo_file (write)))
(allow hal_identity_server dumpstate (fd (use)))
(allow hal_input_processor_server dumpstate (fifo_file (write)))
(allow hal_input_processor_server dumpstate (fd (use)))
(allow hal_keymint_server dumpstate (fifo_file (write)))
(allow hal_keymint_server dumpstate (fd (use)))
(allow hal_light_server dumpstate (fifo_file (write)))
(allow hal_light_server dumpstate (fd (use)))
(allow hal_memtrack_server dumpstate (fifo_file (write)))
(allow hal_memtrack_server dumpstate (fd (use)))
(allow hal_neuralnetworks_server dumpstate (fifo_file (write)))
(allow hal_neuralnetworks_server dumpstate (fd (use)))
(allow hal_nfc_server dumpstate (fifo_file (write)))
(allow hal_nfc_server dumpstate (fd (use)))
(allow hal_oemlock_server dumpstate (fifo_file (write)))
(allow hal_oemlock_server dumpstate (fd (use)))
(allow hal_power_server dumpstate (fifo_file (write)))
(allow hal_power_server dumpstate (fd (use)))
(allow hal_power_stats_server dumpstate (fifo_file (write)))
(allow hal_power_stats_server dumpstate (fd (use)))
(allow hal_rebootescrow_server dumpstate (fifo_file (write)))
(allow hal_rebootescrow_server dumpstate (fd (use)))
(allow hal_secretkeeper_server dumpstate (fifo_file (write)))
(allow hal_secretkeeper_server dumpstate (fd (use)))
(allow hal_sensors_server dumpstate (fifo_file (write)))
(allow hal_sensors_server dumpstate (fd (use)))
(allow hal_thermal_server dumpstate (fifo_file (write)))
(allow hal_thermal_server dumpstate (fd (use)))
(allow hal_vehicle_server dumpstate (fifo_file (write)))
(allow hal_vehicle_server dumpstate (fd (use)))
(allow hal_weaver_server dumpstate (fifo_file (write)))
(allow hal_weaver_server dumpstate (fd (use)))
(allow hal_wifi_server dumpstate (fifo_file (write)))
(allow hal_wifi_server dumpstate (fd (use)))
(allow dumpstate self (capability (sys_ptrace)))
(allow dumpstate self (cap_userns (sys_ptrace)))
(allow dumpstate shell_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
(allow dumpstate shell_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow dumpstate shell_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
(allow dumpstate zygote_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
(allow dumpstate bluetooth_data_file (dir (search)))
(allow dumpstate bluetooth_logs_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
(allow dumpstate bluetooth_logs_data_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow dumpstate nfc_logs_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
(allow dumpstate nfc_logs_data_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow dumpstate gpu_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
(allow dumpstate gpu_device (dir (ioctl read getattr lock open watch watch_reads search)))
(allow dumpstate logcat_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
(allow dumpstate logdr_socket (sock_file (write)))
(allow dumpstate logd (unix_stream_socket (connectto)))
(allow dumpstate logd_socket (sock_file (write)))
(allow dumpstate logd (unix_stream_socket (connectto)))
(allow dumpstate runtime_event_log_tags_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow dumpstate proc_net_type (file (ioctl read getattr lock map open watch watch_reads)))
(allow dumpstate proc_qtaguid_ctrl (file (ioctl read getattr lock map open watch watch_reads)))
(allow dumpstate proc_qtaguid_stat (file (ioctl read getattr lock map open watch watch_reads)))
(allow dumpstate proc_bootconfig (file (ioctl read getattr lock map open watch watch_reads)))
(allow dumpstate proc_buddyinfo (file (ioctl read getattr lock map open watch watch_reads)))
(allow dumpstate proc_cmdline (file (ioctl read getattr lock map open watch watch_reads)))
(allow dumpstate proc_meminfo (file (ioctl read getattr lock map open watch watch_reads)))
(allow dumpstate proc_modules (file (ioctl read getattr lock map open watch watch_reads)))
(allow dumpstate proc_pagetypeinfo (file (ioctl read getattr lock map open watch watch_reads)))
(allow dumpstate proc_pipe_conf (file (ioctl read getattr lock map open watch watch_reads)))
(allow dumpstate proc_slabinfo (file (ioctl read getattr lock map open watch watch_reads)))
(allow dumpstate proc_version (file (ioctl read getattr lock map open watch watch_reads)))
(allow dumpstate proc_vmallocinfo (file (ioctl read getattr lock map open watch watch_reads)))
(allow dumpstate proc_vmstat (file (ioctl read getattr lock map open watch watch_reads)))
(allow dumpstate net_data_file (dir (search)))
(allow dumpstate net_data_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow dumpstate self (netlink_tcpdiag_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown nlmsg_read)))
(allow dumpstate tombstone_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
(allow dumpstate tombstone_data_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow dumpstate cache_recovery_file (dir (ioctl read getattr lock open watch watch_reads search)))
(allow dumpstate cache_recovery_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow dumpstate recovery_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
(allow dumpstate recovery_data_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow dumpstate update_engine_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
(allow dumpstate update_engine_log_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
(allow dumpstate update_engine_data_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow dumpstate update_engine_log_data_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow dumpstate snapuserd_log_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
(allow dumpstate snapuserd_log_data_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow dumpstate misc_logd_file (dir (ioctl read getattr lock open watch watch_reads search)))
(allow dumpstate misc_logd_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow dumpstate prereboot_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
(allow dumpstate prereboot_data_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow dumpstate app_fuse_file (dir (ioctl read getattr lock open watch watch_reads search)))
(allow dumpstate overlayfs_file (dir (ioctl read getattr lock open watch watch_reads search)))
(allow dumpstate base_typeattr_332 (service_manager (find)))
(dontaudit dumpstate hal_service_type (service_manager (find)))
(dontaudit dumpstate apex_service (service_manager (find)))
(dontaudit dumpstate dumpstate_service (service_manager (find)))
(dontaudit dumpstate gatekeeper_service (service_manager (find)))
(dontaudit dumpstate virtual_touchpad_service (service_manager (find)))
(dontaudit dumpstate vold_service (service_manager (find)))
(dontaudit dumpstate hwservice_manager_type (hwservice_manager (find)))
(allow dumpstate servicemanager (service_manager (list)))
(allow dumpstate hwservicemanager (hwservice_manager (list)))
(allow dumpstate devpts (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
(allow dumpstate property_type (file (read getattr map open)))
(allow dumpstate media_rw_data_file (dir (getattr)))
(allow dumpstate proc_interrupts (file (ioctl read getattr lock map open watch watch_reads)))
(allow dumpstate proc_zoneinfo (file (ioctl read getattr lock map open watch watch_reads)))
(allow dumpstate dumpstate_service (service_manager (add find)))
;;* lmx 324 system/sepolicy/prebuilts/api/202404/public/dumpstate.te

(neverallow base_typeattr_333 dumpstate_service (service_manager (add)))
;;* lme

(allow dumpstate ion_device (chr_file (ioctl read getattr lock map open watch watch_reads)))
(allow dumpstate proc_stat (file (ioctl read getattr lock map open watch watch_reads)))
(allow dumpstate proc_pressure_cpu (file (ioctl read getattr lock map open watch watch_reads)))
(allow dumpstate proc_pressure_mem (file (ioctl read getattr lock map open watch watch_reads)))
(allow dumpstate proc_pressure_io (file (ioctl read getattr lock map open watch watch_reads)))
(allow dumpstate proc_pid_max (file (ioctl read getattr lock map open watch watch_reads)))
(allow dumpstate installd (binder (call transfer)))
(allow installd dumpstate (binder (transfer)))
(allow dumpstate installd (fd (use)))
(allow dumpstate self (netlink_xfrm_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown nlmsg_read)))
(allow dumpstate self (netlink_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
(allow dumpstate self (netlink_generic_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
(allow dumpstate domain (socket (getattr)))
(allow dumpstate domain (tcp_socket (getattr)))
(allow dumpstate domain (udp_socket (getattr)))
(allow dumpstate domain (rawip_socket (getattr)))
(allow dumpstate domain (netlink_socket (getattr)))
(allow dumpstate domain (packet_socket (getattr)))
(allow dumpstate domain (key_socket (getattr)))
(allow dumpstate domain (unix_stream_socket (getattr)))
(allow dumpstate domain (unix_dgram_socket (getattr)))
(allow dumpstate domain (netlink_route_socket (getattr)))
(allow dumpstate domain (netlink_tcpdiag_socket (getattr)))
(allow dumpstate domain (netlink_nflog_socket (getattr)))
(allow dumpstate domain (netlink_xfrm_socket (getattr)))
(allow dumpstate domain (netlink_selinux_socket (getattr)))
(allow dumpstate domain (netlink_audit_socket (getattr)))
(allow dumpstate domain (netlink_dnrt_socket (getattr)))
(allow dumpstate domain (netlink_kobject_uevent_socket (getattr)))
(allow dumpstate domain (appletalk_socket (getattr)))
(allow dumpstate domain (tun_socket (getattr)))
(allow dumpstate domain (netlink_iscsi_socket (getattr)))
(allow dumpstate domain (netlink_fib_lookup_socket (getattr)))
(allow dumpstate domain (netlink_connector_socket (getattr)))
(allow dumpstate domain (netlink_netfilter_socket (getattr)))
(allow dumpstate domain (netlink_generic_socket (getattr)))
(allow dumpstate domain (netlink_scsitransport_socket (getattr)))
(allow dumpstate domain (netlink_rdma_socket (getattr)))
(allow dumpstate domain (netlink_crypto_socket (getattr)))
(allow dumpstate domain (sctp_socket (getattr)))
(allow dumpstate domain (icmp_socket (getattr)))
(allow dumpstate domain (ax25_socket (getattr)))
(allow dumpstate domain (ipx_socket (getattr)))
(allow dumpstate domain (netrom_socket (getattr)))
(allow dumpstate domain (atmpvc_socket (getattr)))
(allow dumpstate domain (x25_socket (getattr)))
(allow dumpstate domain (rose_socket (getattr)))
(allow dumpstate domain (decnet_socket (getattr)))
(allow dumpstate domain (atmsvc_socket (getattr)))
(allow dumpstate domain (rds_socket (getattr)))
(allow dumpstate domain (irda_socket (getattr)))
(allow dumpstate domain (pppox_socket (getattr)))
(allow dumpstate domain (llc_socket (getattr)))
(allow dumpstate domain (can_socket (getattr)))
(allow dumpstate domain (tipc_socket (getattr)))
(allow dumpstate domain (bluetooth_socket (getattr)))
(allow dumpstate domain (iucv_socket (getattr)))
(allow dumpstate domain (rxrpc_socket (getattr)))
(allow dumpstate domain (isdn_socket (getattr)))
(allow dumpstate domain (phonet_socket (getattr)))
(allow dumpstate domain (ieee802154_socket (getattr)))
(allow dumpstate domain (caif_socket (getattr)))
(allow dumpstate domain (alg_socket (getattr)))
(allow dumpstate domain (nfc_socket (getattr)))
(allow dumpstate domain (vsock_socket (getattr)))
(allow dumpstate domain (kcm_socket (getattr)))
(allow dumpstate domain (qipcrtr_socket (getattr)))
(allow dumpstate domain (smc_socket (getattr)))
(allow dumpstate domain (xdp_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (tcp_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (udp_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (rawip_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (netlink_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (packet_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (key_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (unix_stream_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (unix_dgram_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (netlink_route_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (netlink_tcpdiag_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (netlink_nflog_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (netlink_xfrm_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (netlink_selinux_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (netlink_audit_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (netlink_dnrt_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (netlink_kobject_uevent_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (appletalk_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (tun_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (netlink_iscsi_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (netlink_fib_lookup_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (netlink_connector_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (netlink_netfilter_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (netlink_generic_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (netlink_scsitransport_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (netlink_rdma_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (netlink_crypto_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (sctp_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (icmp_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (ax25_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (ipx_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (netrom_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (atmpvc_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (x25_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (rose_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (decnet_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (atmsvc_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (rds_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (irda_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (pppox_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (llc_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (can_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (tipc_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (bluetooth_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (iucv_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (rxrpc_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (isdn_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (phonet_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (ieee802154_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (caif_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (alg_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (nfc_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (vsock_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (kcm_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (qipcrtr_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (smc_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (xdp_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (socket (getattr)))
(allow dumpstate pdx_channel_socket_type (tcp_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (udp_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (rawip_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (netlink_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (packet_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (key_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (unix_stream_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (unix_dgram_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (netlink_route_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (netlink_tcpdiag_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (netlink_nflog_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (netlink_xfrm_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (netlink_selinux_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (netlink_audit_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (netlink_dnrt_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (netlink_kobject_uevent_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (appletalk_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (tun_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (netlink_iscsi_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (netlink_fib_lookup_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (netlink_connector_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (netlink_netfilter_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (netlink_generic_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (netlink_scsitransport_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (netlink_rdma_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (netlink_crypto_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (sctp_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (icmp_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (ax25_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (ipx_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (netrom_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (atmpvc_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (x25_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (rose_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (decnet_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (atmsvc_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (rds_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (irda_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (pppox_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (llc_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (can_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (tipc_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (bluetooth_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (iucv_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (rxrpc_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (isdn_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (phonet_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (ieee802154_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (caif_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (alg_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (nfc_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (vsock_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (kcm_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (qipcrtr_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (smc_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (xdp_socket (getattr)))
(allow dumpstate linkerconfig_file (dir (read open)))
(dontaudit dumpstate mnt_user_file (dir (search)))
(dontaudit dumpstate mnt_vendor_file (dir (search)))
(dontaudit dumpstate mnt_product_file (dir (search)))
(dontaudit dumpstate mirror_data_file (dir (search)))
(dontaudit dumpstate linkerconfig_file (dir (getattr)))
(dontaudit dumpstate mnt_user_file (dir (getattr)))
(dontaudit dumpstate apex_mnt_dir (dir (getattr)))
(dontaudit dumpstate mirror_data_file (dir (getattr)))
(allow dumpstate bufferhubd (binder (call transfer)))
(allow bufferhubd dumpstate (binder (transfer)))
(allow dumpstate bufferhubd (fd (use)))
(allow dumpstate mediaswcodec (binder (call transfer)))
(allow mediaswcodec dumpstate (binder (transfer)))
(allow dumpstate mediaswcodec (fd (use)))
(allow dumpstate snapshotctl_log_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
(allow dumpstate snapshotctl_log_data_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow dumpstate binderfs_logs (dir (ioctl read getattr lock open watch watch_reads search)))
(allow dumpstate binderfs_logs (file (ioctl read getattr lock map open watch watch_reads)))
(allow dumpstate binderfs_logs_proc (file (ioctl read getattr lock map open watch watch_reads)))
(allow dumpstate binderfs_logs_stats (file (ioctl read getattr lock map open watch watch_reads)))
(allow dumpstate apex_mnt_dir (dir (ioctl read getattr lock open watch watch_reads search)))
(allow dumpstate apex_info_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow dumpstate vendor_apex_metadata_file (dir (ioctl read getattr lock open watch watch_reads search)))
(allow dumpstate vendor_apex_metadata_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow dumpstate vendor_apex_metadata_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow dumpstate shutdown_checkpoints_system_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
(allow dumpstate shutdown_checkpoints_system_data_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lmx 398 system/sepolicy/prebuilts/api/202404/public/dumpstate.te

(neverallow dumpstate base_typeattr_224 (process (ptrace)))
;;* lme

;;* lmx 407 system/sepolicy/prebuilts/api/202404/public/dumpstate.te

(neverallow base_typeattr_334 dumpstate_service (service_manager (find)))
;;* lme

(allow e2fs devpts (chr_file (ioctl read write getattr)))
(allow e2fs dev_type (blk_file (getattr)))
(allow e2fs block_device (dir (search)))
(allow e2fs userdata_block_device (blk_file (ioctl read write getattr lock append map open watch watch_reads)))
(allow e2fs metadata_block_device (blk_file (ioctl read write getattr lock append map open watch watch_reads)))
(allow e2fs dm_device (blk_file (ioctl read write getattr lock append map open watch watch_reads)))
(allow e2fs zoned_block_device (blk_file (ioctl read write getattr lock append map open watch watch_reads)))
(allow e2fs vold (fd (use)))
(allow e2fs sysfs_dm (dir (ioctl read getattr lock open watch watch_reads search)))
(allow e2fs sysfs_dm (file (ioctl read getattr lock map open watch watch_reads)))
(allowx e2fs dm_device (ioctl blk_file (0x125e 0x1277 (range 0x127b 0x127d) (range 0x1282 0x1283))))
(allowx e2fs userdata_block_device (ioctl blk_file (0x125e 0x1277 (range 0x127b 0x127d) (range 0x1282 0x1283))))
(allowx e2fs zoned_block_device (ioctl blk_file (0x125e 0x1277 (range 0x127b 0x127d) (range 0x1282 0x1283))))
(allowx e2fs metadata_block_device (ioctl blk_file (0x125e 0x1277 (range 0x127b 0x127d) (range 0x1282 0x1283))))
(allow e2fs proc_filesystems (file (ioctl read getattr lock map open watch watch_reads)))
(allow e2fs proc_mounts (file (ioctl read getattr lock map open watch watch_reads)))
(allow e2fs proc_swaps (file (ioctl read getattr lock map open watch watch_reads)))
(allow e2fs sysfs_fs_ext4_features (dir (search)))
(allow e2fs sysfs_fs_ext4_features (file (ioctl read getattr lock map open watch watch_reads)))
(allow e2fs file_contexts_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow extra_free_kbytes shell_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
(allow extra_free_kbytes system_file (file (getattr map execute execute_no_trans)))
(allow extra_free_kbytes toolbox_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
(allow extra_free_kbytes proc_extra_free_kbytes (file (ioctl read write getattr lock append map open watch watch_reads)))
(allow extra_free_kbytes proc_watermark_scale_factor (file (ioctl read write getattr lock append map open watch watch_reads)))
(allow extra_free_kbytes proc_zoneinfo (file (ioctl read getattr lock map open watch watch_reads)))
;;* lmx 129 system/sepolicy/prebuilts/api/202404/public/fastbootd.te

(neverallow fastbootd data_file_type (file (execute execute_no_trans)))
;;* lme

(allow fs_type self (filesystem (associate)))
(allow cgroup tmpfs (filesystem (associate)))
(allow cgroup_v2 tmpfs (filesystem (associate)))
(allow cgroup_rc_file tmpfs (filesystem (associate)))
(allow sysfs_type sysfs (filesystem (associate)))
(allow debugfs_type debugfs (filesystem (associate)))
(allow debugfs_type debugfs_tracing (filesystem (associate)))
(allow debugfs_type debugfs_tracing_debug (filesystem (associate)))
(allow file_type labeledfs (filesystem (associate)))
(allow file_type tmpfs (filesystem (associate)))
(allow file_type rootfs (filesystem (associate)))
(allow dev_type tmpfs (filesystem (associate)))
(allow app_fuse_file app_fusefs (filesystem (associate)))
(allow postinstall_file self (filesystem (associate)))
(allow proc_net proc (filesystem (associate)))
;;* lmx 651 system/sepolicy/prebuilts/api/202404/public/file.te

(neverallow fs_type file_type (filesystem (associate)))
;;* lme

(allow fingerprintd servicemanager (binder (call transfer)))
(allow servicemanager fingerprintd (binder (call transfer)))
(allow servicemanager fingerprintd (dir (search)))
(allow servicemanager fingerprintd (file (read open)))
(allow servicemanager fingerprintd (process (getattr)))
(allow fingerprintd system_file (dir (ioctl read getattr lock open watch watch_reads search)))
(allow fingerprintd fingerprintd_service (service_manager (add find)))
;;* lmx 10 system/sepolicy/prebuilts/api/202404/public/fingerprintd.te

(neverallow base_typeattr_335 fingerprintd_service (service_manager (add)))
;;* lme

(allow fingerprintd fingerprintd_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow fingerprintd fingerprintd_data_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
(allow keystore fingerprintd (dir (search)))
(allow keystore fingerprintd (file (read open)))
(allow keystore fingerprintd (process (getattr)))
(allow fingerprintd apc_service (service_manager (find)))
(allow fingerprintd keystore_service (service_manager (find)))
(allow fingerprintd legacykeystore_service (service_manager (find)))
(allow fingerprintd keystore (binder (call transfer)))
(allow keystore fingerprintd (binder (transfer)))
(allow fingerprintd keystore (fd (use)))
(allow keystore fingerprintd (binder (call transfer)))
(allow fingerprintd keystore (binder (transfer)))
(allow keystore fingerprintd (fd (use)))
(allow fingerprintd keystore (keystore2 (add_auth)))
(allow fingerprintd system_server (binder (call transfer)))
(allow system_server fingerprintd (binder (transfer)))
(allow fingerprintd system_server (fd (use)))
(allow fingerprintd permission_service (service_manager (find)))
(allow fingerprintd ion_device (chr_file (ioctl read getattr lock map open watch watch_reads)))
(allow flags_health_check server_configurable_flags_data_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
(allow flags_health_check server_configurable_flags_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lmx 12 system/sepolicy/prebuilts/api/202404/public/flags_health_check.te

(neverallow base_typeattr_336 server_configurable_flags_data_file (file (write create setattr relabelfrom append unlink link rename)))
;;* lme

(allow fsck tmpfs (chr_file (ioctl read write)))
(allow fsck devpts (chr_file (ioctl read write getattr)))
(allow fsck vold (fd (use)))
(allow fsck vold (fifo_file (read write getattr)))
(allow fsck userdata_block_device (blk_file (ioctl read write getattr lock append map open watch watch_reads)))
(allow fsck cache_block_device (blk_file (ioctl read write getattr lock append map open watch watch_reads)))
(allow fsck dm_device (blk_file (ioctl read write getattr lock append map open watch watch_reads)))
(allow fsck zoned_block_device (blk_file (ioctl read write getattr lock append map open watch watch_reads)))
(allow fsck metadata_file (dir (getattr)))
(allow fsck block_device (dir (search)))
(allow fsck mirror_data_file (dir (search)))
(allowx fsck dev_type (ioctl blk_file (0x125e 0x127c 0x1282)))
(allow fsck dev_type (blk_file (getattr)))
(allow fsck proc_mounts (file (ioctl read getattr lock map open watch watch_reads)))
(allow fsck proc_swaps (file (ioctl read getattr lock map open watch watch_reads)))
(allow fsck sysfs_dm (file (ioctl read getattr lock map open watch watch_reads)))
(allow fsck rootfs (dir (ioctl read getattr lock open watch watch_reads search)))
(allow fsck sysfs_dm (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lmx 72 system/sepolicy/prebuilts/api/202404/public/fsck.te

(neverallow fsck vold_device (blk_file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow fsck root_block_device (blk_file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow fsck frp_block_device (blk_file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow fsck system_block_device (blk_file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow fsck recovery_block_device (blk_file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow fsck boot_block_device (blk_file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow fsck swap_block_device (blk_file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 75 system/sepolicy/prebuilts/api/202404/public/fsck.te

(neverallow base_typeattr_337 fsck (process (transition)))
;;* lme

;;* lmx 76 system/sepolicy/prebuilts/api/202404/public/fsck.te

(neverallow base_typeattr_224 fsck (process (dyntransition)))
;;* lme

;;* lmx 77 system/sepolicy/prebuilts/api/202404/public/fsck.te

(neverallow fsck base_typeattr_338 (file (entrypoint)))
;;* lme

(allow fsck_untrusted devpts (chr_file (ioctl read write getattr)))
(allow fsck_untrusted vold (fd (use)))
(allow fsck_untrusted vold (fifo_file (read write getattr)))
(allow fsck_untrusted block_device (dir (search)))
(allow fsck_untrusted vold_device (blk_file (ioctl read write getattr lock append map open watch watch_reads)))
(allow fsck_untrusted proc_mounts (file (ioctl read getattr lock map open watch watch_reads)))
(allow fsck_untrusted dev_type (blk_file (getattr)))
;;* lmx 45 system/sepolicy/prebuilts/api/202404/public/fsck_untrusted.te

(neverallow fsck_untrusted dm_device (blk_file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow fsck_untrusted root_block_device (blk_file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow fsck_untrusted frp_block_device (blk_file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow fsck_untrusted system_block_device (blk_file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow fsck_untrusted recovery_block_device (blk_file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow fsck_untrusted boot_block_device (blk_file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow fsck_untrusted userdata_block_device (blk_file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow fsck_untrusted cache_block_device (blk_file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow fsck_untrusted swap_block_device (blk_file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow fsck_untrusted metadata_block_device (blk_file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 48 system/sepolicy/prebuilts/api/202404/public/fsck_untrusted.te

(neverallow base_typeattr_339 fsck_untrusted (process (transition)))
;;* lme

;;* lmx 49 system/sepolicy/prebuilts/api/202404/public/fsck_untrusted.te

(neverallow base_typeattr_224 fsck_untrusted (process (dyntransition)))
;;* lme

;;* lmx 50 system/sepolicy/prebuilts/api/202404/public/fsck_untrusted.te

(neverallow fsck_untrusted base_typeattr_338 (file (entrypoint)))
;;* lme

;;* lmx 55 system/sepolicy/prebuilts/api/202404/public/fsck_untrusted.te

(neverallow fsck_untrusted self (capability (setgid setuid sys_admin)))
(neverallow fsck_untrusted self (cap_userns (setgid setuid sys_admin)))
;;* lme

(dontaudit fsck_untrusted sysfs (file (ioctl read write getattr lock append map open watch watch_reads)))
(dontaudit fsck_untrusted sysfs_dm (file (ioctl read write getattr lock append map open watch watch_reads)))
(dontaudit fsck_untrusted sysfs_dm (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
(dontaudit fsck_untrusted tmpfs (lnk_file (read)))
(allow gatekeeperd servicemanager (binder (call transfer)))
(allow servicemanager gatekeeperd (binder (call transfer)))
(allow servicemanager gatekeeperd (dir (search)))
(allow servicemanager gatekeeperd (file (read open)))
(allow servicemanager gatekeeperd (process (getattr)))
(allow gatekeeperd ion_device (chr_file (ioctl read getattr lock map open watch watch_reads)))
(allow gatekeeperd system_file (dir (ioctl read getattr lock open watch watch_reads search)))
(allow gatekeeperd gatekeeper_service (service_manager (add find)))
;;* lmx 21 system/sepolicy/prebuilts/api/202404/public/gatekeeperd.te

(neverallow base_typeattr_340 gatekeeper_service (service_manager (add)))
;;* lme

(allow keystore gatekeeperd (dir (search)))
(allow keystore gatekeeperd (file (read open)))
(allow keystore gatekeeperd (process (getattr)))
(allow gatekeeperd apc_service (service_manager (find)))
(allow gatekeeperd keystore_service (service_manager (find)))
(allow gatekeeperd legacykeystore_service (service_manager (find)))
(allow gatekeeperd keystore (binder (call transfer)))
(allow keystore gatekeeperd (binder (transfer)))
(allow gatekeeperd keystore (fd (use)))
(allow keystore gatekeeperd (binder (call transfer)))
(allow gatekeeperd keystore (binder (transfer)))
(allow keystore gatekeeperd (fd (use)))
(allow gatekeeperd keystore (keystore2 (add_auth)))
(allow gatekeeperd authorization_service (service_manager (find)))
(allow gatekeeperd system_server (binder (call)))
(allow gatekeeperd permission_service (service_manager (find)))
(allow gatekeeperd gatekeeper_data_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
(allow gatekeeperd gatekeeper_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow gatekeeperd hardware_properties_service (service_manager (find)))
(allow gatekeeperd cgroup (dir (ioctl read getattr lock open watch watch_reads search)))
(allow gatekeeperd cgroup (file (ioctl read getattr lock map open watch watch_reads)))
(allow gatekeeperd cgroup (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow gatekeeperd cgroup_v2 (dir (ioctl read getattr lock open watch watch_reads search)))
(allow gatekeeperd cgroup_v2 (file (ioctl read getattr lock map open watch watch_reads)))
(allow gatekeeperd cgroup_v2 (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow hal_allocator_client hal_allocator_server (binder (call transfer)))
(allow hal_allocator_server hal_allocator_client (binder (transfer)))
(allow hal_allocator_client hal_allocator_server (fd (use)))
(allow hal_allocator_client hidl_allocator_hwservice (hwservice_manager (find)))
(allow hal_allocator_server hidl_allocator_hwservice (hwservice_manager (add find)))
(allow hal_allocator_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 4 system/sepolicy/prebuilts/api/202404/public/hal_allocator.te

(neverallow base_typeattr_341 hidl_allocator_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 4 system/sepolicy/prebuilts/api/202404/public/hal_allocator.te

(neverallow base_typeattr_342 hidl_allocator_hwservice (hwservice_manager (find)))
;;* lme

(allow hal_allocator_client hidl_memory_hwservice (hwservice_manager (find)))
(allow hal_allocator_client same_process_hal_file (file (read getattr map execute open)))
(allow hal_atrace_client hal_atrace_server (binder (call transfer)))
(allow hal_atrace_server hal_atrace_client (binder (transfer)))
(allow hal_atrace_client hal_atrace_server (fd (use)))
(allow hal_atrace_client hal_atrace_hwservice (hwservice_manager (find)))
(allow hal_atrace_server hal_atrace_hwservice (hwservice_manager (add find)))
(allow hal_atrace_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 4 system/sepolicy/prebuilts/api/202404/public/hal_atrace.te

(neverallow base_typeattr_343 hal_atrace_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 4 system/sepolicy/prebuilts/api/202404/public/hal_atrace.te

(neverallow base_typeattr_344 hal_atrace_hwservice (hwservice_manager (find)))
;;* lme

(allow hal_audio_client hal_audio_server (binder (call transfer)))
(allow hal_audio_server hal_audio_client (binder (transfer)))
(allow hal_audio_client hal_audio_server (fd (use)))
(allow hal_audio_server hal_audio_client (binder (call transfer)))
(allow hal_audio_client hal_audio_server (binder (transfer)))
(allow hal_audio_server hal_audio_client (fd (use)))
(allow hal_audio_client hal_audio_hwservice (hwservice_manager (find)))
(allow hal_audio_server hal_audio_hwservice (hwservice_manager (add find)))
(allow hal_audio_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 5 system/sepolicy/prebuilts/api/202404/public/hal_audio.te

(neverallow base_typeattr_345 hal_audio_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/prebuilts/api/202404/public/hal_audio.te

(neverallow base_typeattr_346 hal_audio_hwservice (hwservice_manager (find)))
;;* lme

(allow hal_audio_client hal_audio_service (service_manager (find)))
(allow hal_audio_server hal_audio_service (service_manager (add find)))
;;* lmx 6 system/sepolicy/prebuilts/api/202404/public/hal_audio.te

(neverallow base_typeattr_345 hal_audio_service (service_manager (add)))
;;* lme

;;* lmx 6 system/sepolicy/prebuilts/api/202404/public/hal_audio.te

(neverallow base_typeattr_347 hal_audio_service (service_manager (find)))
;;* lme

(allow hal_audio ion_device (chr_file (ioctl read getattr lock map open watch watch_reads)))
(allow hal_audio_server servicemanager (binder (call transfer)))
(allow servicemanager hal_audio_server (binder (transfer)))
(allow hal_audio_server servicemanager (fd (use)))
(allow hal_audio proc (dir (ioctl read getattr lock open watch watch_reads search)))
(allow hal_audio proc (file (ioctl read getattr lock map open watch watch_reads)))
(allow hal_audio proc (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow hal_audio proc_asound (dir (ioctl read getattr lock open watch watch_reads search)))
(allow hal_audio proc_asound (file (ioctl read getattr lock map open watch watch_reads)))
(allow hal_audio proc_asound (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow hal_audio_server audio_device (dir (ioctl read getattr lock open watch watch_reads search)))
(allow hal_audio_server audio_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
(allow hal_audio shell (fd (use)))
(allow hal_audio shell (fifo_file (write)))
(allow hal_audio dumpstate (fd (use)))
(allow hal_audio dumpstate (fifo_file (write)))
(allow hal_audio_server appdomain (fd (use)))
(allow hal_audio_server system_server_tmpfs (file (read getattr map)))
(allow hal_audio_server self (capability (sys_nice)))
(allow hal_audio_server self (cap_userns (sys_nice)))
(allow hal_audio vndbinder_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
(allow hal_audio vndservicemanager (binder (call transfer)))
(allow vndservicemanager hal_audio (dir (search)))
(allow vndservicemanager hal_audio (file (read map open)))
(allow vndservicemanager hal_audio (process (getattr)))
;;* lmx 39 system/sepolicy/prebuilts/api/202404/public/hal_audio.te

(neverallow hal_audio_server fs_type (file (execute_no_trans)))
(neverallow hal_audio_server file_type (file (execute_no_trans)))
;;* lme

;;* lmx 42 system/sepolicy/prebuilts/api/202404/public/hal_audio.te

(neverallow base_typeattr_348 audio_device (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
;;* lme

(allow hal_audio audio_config_prop (file (read getattr map open)))
(allow hal_audio bluetooth_a2dp_offload_prop (file (read getattr map open)))
(allow hal_audio bluetooth_audio_hal_prop (file (read getattr map open)))
(allow hal_audiocontrol_client hal_audiocontrol_server (binder (call transfer)))
(allow hal_audiocontrol_server hal_audiocontrol_client (binder (transfer)))
(allow hal_audiocontrol_client hal_audiocontrol_server (fd (use)))
(allow hal_audiocontrol_server hal_audiocontrol_client (binder (call transfer)))
(allow hal_audiocontrol_client hal_audiocontrol_server (binder (transfer)))
(allow hal_audiocontrol_server hal_audiocontrol_client (fd (use)))
(allow hal_audiocontrol_client hal_audiocontrol_hwservice (hwservice_manager (find)))
(allow hal_audiocontrol_server hal_audiocontrol_hwservice (hwservice_manager (add find)))
(allow hal_audiocontrol_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 5 system/sepolicy/prebuilts/api/202404/public/hal_audiocontrol.te

(neverallow base_typeattr_349 hal_audiocontrol_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/prebuilts/api/202404/public/hal_audiocontrol.te

(neverallow base_typeattr_350 hal_audiocontrol_hwservice (hwservice_manager (find)))
;;* lme

(allow hal_audiocontrol_client hal_audiocontrol_service (service_manager (find)))
(allow hal_audiocontrol_server hal_audiocontrol_service (service_manager (add find)))
;;* lmx 6 system/sepolicy/prebuilts/api/202404/public/hal_audiocontrol.te

(neverallow base_typeattr_349 hal_audiocontrol_service (service_manager (add)))
;;* lme

;;* lmx 6 system/sepolicy/prebuilts/api/202404/public/hal_audiocontrol.te

(neverallow base_typeattr_351 hal_audiocontrol_service (service_manager (find)))
;;* lme

(allow hal_audiocontrol_server servicemanager (binder (call transfer)))
(allow servicemanager hal_audiocontrol_server (binder (transfer)))
(allow hal_audiocontrol_server servicemanager (fd (use)))
(allow hal_authgraph_client hal_authgraph_server (binder (call transfer)))
(allow hal_authgraph_server hal_authgraph_client (binder (transfer)))
(allow hal_authgraph_client hal_authgraph_server (fd (use)))
(allow hal_authgraph_client hal_authgraph_service (service_manager (find)))
(allow hal_authgraph_server hal_authgraph_service (service_manager (add find)))
;;* lmx 3 system/sepolicy/prebuilts/api/202404/public/hal_authgraph.te

(neverallow base_typeattr_352 hal_authgraph_service (service_manager (add)))
;;* lme

;;* lmx 3 system/sepolicy/prebuilts/api/202404/public/hal_authgraph.te

(neverallow base_typeattr_353 hal_authgraph_service (service_manager (find)))
;;* lme

(allow hal_authgraph_server servicemanager (binder (call transfer)))
(allow servicemanager hal_authgraph_server (binder (transfer)))
(allow hal_authgraph_server servicemanager (fd (use)))
(allow hal_authgraph_server tee_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
(allow hal_authgraph_server ion_device (chr_file (ioctl read getattr lock map open watch watch_reads)))
(allow hal_authsecret_client hal_authsecret_server (binder (call transfer)))
(allow hal_authsecret_server hal_authsecret_client (binder (transfer)))
(allow hal_authsecret_client hal_authsecret_server (fd (use)))
(allow hal_authsecret_client hal_authsecret_hwservice (hwservice_manager (find)))
(allow hal_authsecret_server hal_authsecret_hwservice (hwservice_manager (add find)))
(allow hal_authsecret_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 4 system/sepolicy/prebuilts/api/202404/public/hal_authsecret.te

(neverallow base_typeattr_354 hal_authsecret_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 4 system/sepolicy/prebuilts/api/202404/public/hal_authsecret.te

(neverallow base_typeattr_355 hal_authsecret_hwservice (hwservice_manager (find)))
;;* lme

(allow hal_authsecret_client hal_authsecret_service (service_manager (find)))
(allow hal_authsecret_server hal_authsecret_service (service_manager (add find)))
;;* lmx 5 system/sepolicy/prebuilts/api/202404/public/hal_authsecret.te

(neverallow base_typeattr_354 hal_authsecret_service (service_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/prebuilts/api/202404/public/hal_authsecret.te

(neverallow base_typeattr_356 hal_authsecret_service (service_manager (find)))
;;* lme

(allow hal_authsecret_server servicemanager (binder (call transfer)))
(allow servicemanager hal_authsecret_server (binder (transfer)))
(allow hal_authsecret_server servicemanager (fd (use)))
(allow hal_bluetooth_client hal_bluetooth_server (binder (call transfer)))
(allow hal_bluetooth_server hal_bluetooth_client (binder (transfer)))
(allow hal_bluetooth_client hal_bluetooth_server (fd (use)))
(allow hal_bluetooth_server hal_bluetooth_client (binder (call transfer)))
(allow hal_bluetooth_client hal_bluetooth_server (binder (transfer)))
(allow hal_bluetooth_server hal_bluetooth_client (fd (use)))
(allow hal_bluetooth_server servicemanager (binder (call transfer)))
(allow servicemanager hal_bluetooth_server (binder (transfer)))
(allow hal_bluetooth_server servicemanager (fd (use)))
(allow hal_bluetooth_client hal_bluetooth_hwservice (hwservice_manager (find)))
(allow hal_bluetooth_server hal_bluetooth_hwservice (hwservice_manager (add find)))
(allow hal_bluetooth_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 6 system/sepolicy/prebuilts/api/202404/public/hal_bluetooth.te

(neverallow base_typeattr_357 hal_bluetooth_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 6 system/sepolicy/prebuilts/api/202404/public/hal_bluetooth.te

(neverallow base_typeattr_358 hal_bluetooth_hwservice (hwservice_manager (find)))
;;* lme

(allow hal_bluetooth_client hal_bluetooth_service (service_manager (find)))
(allow hal_bluetooth_server hal_bluetooth_service (service_manager (add find)))
;;* lmx 7 system/sepolicy/prebuilts/api/202404/public/hal_bluetooth.te

(neverallow base_typeattr_357 hal_bluetooth_service (service_manager (add)))
;;* lme

;;* lmx 7 system/sepolicy/prebuilts/api/202404/public/hal_bluetooth.te

(neverallow base_typeattr_359 hal_bluetooth_service (service_manager (find)))
;;* lme

(allow hal_bluetooth sysfs_wake_lock (file (ioctl read write getattr lock append map open watch watch_reads)))
(allow hal_bluetooth self (capability2 (block_suspend)))
(allow hal_bluetooth self (cap2_userns (block_suspend)))
(allow hal_bluetooth system_suspend_server (binder (call transfer)))
(allow system_suspend_server hal_bluetooth (binder (transfer)))
(allow hal_bluetooth system_suspend_server (fd (use)))
(allow hal_bluetooth system_suspend_hwservice (hwservice_manager (find)))
(allow hal_bluetooth hwservicemanager (binder (call transfer)))
(allow hwservicemanager hal_bluetooth (binder (call transfer)))
(allow hwservicemanager hal_bluetooth (dir (search)))
(allow hwservicemanager hal_bluetooth (file (read map open)))
(allow hwservicemanager hal_bluetooth (process (getattr)))
(allow hal_bluetooth hwservicemanager_prop (file (read getattr map open)))
(allow hal_bluetooth hidl_manager_hwservice (hwservice_manager (find)))
(allow hal_bluetooth hal_system_suspend_service (service_manager (find)))
(allow hal_bluetooth servicemanager (binder (call transfer)))
(allow servicemanager hal_bluetooth (binder (call transfer)))
(allow servicemanager hal_bluetooth (dir (search)))
(allow servicemanager hal_bluetooth (file (read open)))
(allow servicemanager hal_bluetooth (process (getattr)))
(allow hal_bluetooth self (capability (net_admin)))
(allow hal_bluetooth self (cap_userns (net_admin)))
(allow hal_bluetooth bluetooth_efs_file (dir (ioctl read getattr lock open watch watch_reads search)))
(allow hal_bluetooth bluetooth_efs_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow hal_bluetooth bluetooth_efs_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow hal_bluetooth uhid_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
(allow hal_bluetooth hci_attach_dev (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
(allow hal_bluetooth sysfs_type (dir (ioctl read getattr lock open watch watch_reads search)))
(allow hal_bluetooth sysfs_type (file (ioctl read getattr lock map open watch watch_reads)))
(allow hal_bluetooth sysfs_type (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow hal_bluetooth sysfs_bluetooth_writable (file (ioctl read write getattr lock append map open watch watch_reads)))
(allow hal_bluetooth self (capability2 (wake_alarm)))
(allow hal_bluetooth self (cap2_userns (wake_alarm)))
(allow hal_bluetooth property_socket (sock_file (write)))
(allow hal_bluetooth init (unix_stream_socket (connectto)))
(allow hal_bluetooth bluetooth_a2dp_offload_prop (property_service (set)))
(allow hal_bluetooth bluetooth_a2dp_offload_prop (file (read getattr map open)))
(allow hal_bluetooth property_socket (sock_file (write)))
(allow hal_bluetooth init (unix_stream_socket (connectto)))
(allow hal_bluetooth bluetooth_audio_hal_prop (property_service (set)))
(allow hal_bluetooth bluetooth_audio_hal_prop (file (read getattr map open)))
(allow hal_bluetooth property_socket (sock_file (write)))
(allow hal_bluetooth init (unix_stream_socket (connectto)))
(allow hal_bluetooth bluetooth_prop (property_service (set)))
(allow hal_bluetooth bluetooth_prop (file (read getattr map open)))
(allow hal_bluetooth property_socket (sock_file (write)))
(allow hal_bluetooth init (unix_stream_socket (connectto)))
(allow hal_bluetooth exported_bluetooth_prop (property_service (set)))
(allow hal_bluetooth exported_bluetooth_prop (file (read getattr map open)))
(allow hal_bluetooth proc_bluetooth_writable (file (ioctl read write getattr lock append map open watch watch_reads)))
(allow hal_bluetooth self (capability (sys_nice)))
(allow hal_bluetooth self (cap_userns (sys_nice)))
(allow hal_bootctl_client hal_bootctl_server (binder (call transfer)))
(allow hal_bootctl_server hal_bootctl_client (binder (transfer)))
(allow hal_bootctl_client hal_bootctl_server (fd (use)))
(allow hal_bootctl_server hal_bootctl_client (binder (call transfer)))
(allow hal_bootctl_client hal_bootctl_server (binder (transfer)))
(allow hal_bootctl_server hal_bootctl_client (fd (use)))
(allow hal_bootctl_server servicemanager (binder (call transfer)))
(allow servicemanager hal_bootctl_server (binder (call transfer)))
(allow servicemanager hal_bootctl_server (dir (search)))
(allow servicemanager hal_bootctl_server (file (read open)))
(allow servicemanager hal_bootctl_server (process (getattr)))
(allow hal_bootctl_client hal_bootctl_hwservice (hwservice_manager (find)))
(allow hal_bootctl_server hal_bootctl_hwservice (hwservice_manager (add find)))
(allow hal_bootctl_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 6 system/sepolicy/prebuilts/api/202404/public/hal_bootctl.te

(neverallow base_typeattr_360 hal_bootctl_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 6 system/sepolicy/prebuilts/api/202404/public/hal_bootctl.te

(neverallow base_typeattr_361 hal_bootctl_hwservice (hwservice_manager (find)))
;;* lme

(allow hal_bootctl_server proc_bootconfig (file (ioctl read getattr lock map open watch watch_reads)))
(allow hal_bootctl_client hal_bootctl_service (service_manager (find)))
(allow hal_bootctl_server hal_bootctl_service (service_manager (add find)))
;;* lmx 10 system/sepolicy/prebuilts/api/202404/public/hal_bootctl.te

(neverallow base_typeattr_360 hal_bootctl_service (service_manager (add)))
;;* lme

;;* lmx 10 system/sepolicy/prebuilts/api/202404/public/hal_bootctl.te

(neverallow base_typeattr_362 hal_bootctl_service (service_manager (find)))
;;* lme

(allow hal_broadcastradio_client hal_broadcastradio_server (binder (call transfer)))
(allow hal_broadcastradio_server hal_broadcastradio_client (binder (transfer)))
(allow hal_broadcastradio_client hal_broadcastradio_server (fd (use)))
(allow hal_broadcastradio_server hal_broadcastradio_client (binder (call transfer)))
(allow hal_broadcastradio_client hal_broadcastradio_server (binder (transfer)))
(allow hal_broadcastradio_server hal_broadcastradio_client (fd (use)))
(allow hal_broadcastradio_client hal_broadcastradio_hwservice (hwservice_manager (find)))
(allow hal_broadcastradio_server hal_broadcastradio_hwservice (hwservice_manager (add find)))
(allow hal_broadcastradio_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 4 system/sepolicy/prebuilts/api/202404/public/hal_broadcastradio.te

(neverallow base_typeattr_363 hal_broadcastradio_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 4 system/sepolicy/prebuilts/api/202404/public/hal_broadcastradio.te

(neverallow base_typeattr_364 hal_broadcastradio_hwservice (hwservice_manager (find)))
;;* lme

(allow hal_broadcastradio_client hal_broadcastradio_service (service_manager (find)))
(allow hal_broadcastradio_server hal_broadcastradio_service (service_manager (add find)))
;;* lmx 5 system/sepolicy/prebuilts/api/202404/public/hal_broadcastradio.te

(neverallow base_typeattr_363 hal_broadcastradio_service (service_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/prebuilts/api/202404/public/hal_broadcastradio.te

(neverallow base_typeattr_365 hal_broadcastradio_service (service_manager (find)))
;;* lme

(allow hal_broadcastradio_server servicemanager (binder (call transfer)))
(allow servicemanager hal_broadcastradio_server (binder (transfer)))
(allow hal_broadcastradio_server servicemanager (fd (use)))
(allow hal_camera_client hal_camera_server (binder (call transfer)))
(allow hal_camera_server hal_camera_client (binder (transfer)))
(allow hal_camera_client hal_camera_server (fd (use)))
(allow hal_camera_server hal_camera_client (binder (call transfer)))
(allow hal_camera_client hal_camera_server (binder (transfer)))
(allow hal_camera_server hal_camera_client (fd (use)))
(allow hal_camera_server servicemanager (binder (call transfer)))
(allow servicemanager hal_camera_server (binder (call transfer)))
(allow servicemanager hal_camera_server (dir (search)))
(allow servicemanager hal_camera_server (file (read open)))
(allow servicemanager hal_camera_server (process (getattr)))
(allow hal_camera_client hal_camera_hwservice (hwservice_manager (find)))
(allow hal_camera_server hal_camera_hwservice (hwservice_manager (add find)))
(allow hal_camera_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 8 system/sepolicy/prebuilts/api/202404/public/hal_camera.te

(neverallow base_typeattr_366 hal_camera_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 8 system/sepolicy/prebuilts/api/202404/public/hal_camera.te

(neverallow base_typeattr_367 hal_camera_hwservice (hwservice_manager (find)))
;;* lme

(allow hal_camera_client hal_camera_service (service_manager (find)))
(allow hal_camera_server hal_camera_service (service_manager (add find)))
;;* lmx 9 system/sepolicy/prebuilts/api/202404/public/hal_camera.te

(neverallow base_typeattr_366 hal_camera_service (service_manager (add)))
;;* lme

;;* lmx 9 system/sepolicy/prebuilts/api/202404/public/hal_camera.te

(neverallow base_typeattr_368 hal_camera_service (service_manager (find)))
;;* lme

(allow hal_camera device (dir (ioctl read getattr lock open watch watch_reads search)))
(allow hal_camera video_device (dir (ioctl read getattr lock open watch watch_reads search)))
(allow hal_camera video_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
(allow hal_camera camera_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
(allow hal_camera ion_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
(allow hal_camera dmabuf_system_heap_device (chr_file (ioctl read getattr lock map open watch watch_reads)))
(allow hal_camera_client hal_graphics_allocator (fd (use)))
(allow hal_camera_server hal_graphics_allocator (fd (use)))
(allow hal_camera base_typeattr_369 (fd (use)))
(allow hal_camera surfaceflinger (fd (use)))
(allow hal_camera hal_allocator_server (fd (use)))
(allow hal_camera shell (fd (use)))
(allow hal_camera shell (fifo_file (write)))
;;* lmx 36 system/sepolicy/prebuilts/api/202404/public/hal_camera.te

(neverallow hal_camera_server fs_type (file (execute_no_trans)))
(neverallow hal_camera_server file_type (file (execute_no_trans)))
;;* lme

;;* lmx 39 system/sepolicy/prebuilts/api/202404/public/hal_camera.te

(neverallow hal_camera_server domain (tcp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind name_connect)))
(neverallow hal_camera_server domain (udp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind)))
(neverallow hal_camera_server domain (rawip_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind)))
;;* lme

;;* lmx 42 system/sepolicy/prebuilts/api/202404/public/hal_camera.te

(neverallow base_typeattr_370 camera_device (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
;;* lme

(allow hal_can_controller_client hal_can_controller_server (binder (call transfer)))
(allow hal_can_controller_server hal_can_controller_client (binder (transfer)))
(allow hal_can_controller_client hal_can_controller_server (fd (use)))
(allow hal_can_controller_server hal_can_controller_client (binder (call transfer)))
(allow hal_can_controller_client hal_can_controller_server (binder (transfer)))
(allow hal_can_controller_server hal_can_controller_client (fd (use)))
(allow hal_can_controller_client hal_can_controller_hwservice (hwservice_manager (find)))
(allow hal_can_controller_server hal_can_controller_hwservice (hwservice_manager (add find)))
(allow hal_can_controller_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 4 system/sepolicy/prebuilts/api/202404/public/hal_can.te

(neverallow base_typeattr_371 hal_can_controller_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 4 system/sepolicy/prebuilts/api/202404/public/hal_can.te

(neverallow base_typeattr_372 hal_can_controller_hwservice (hwservice_manager (find)))
;;* lme

(allow hal_can_bus_client hal_can_bus_server (binder (call transfer)))
(allow hal_can_bus_server hal_can_bus_client (binder (transfer)))
(allow hal_can_bus_client hal_can_bus_server (fd (use)))
(allow hal_can_bus_server hal_can_bus_client (binder (call transfer)))
(allow hal_can_bus_client hal_can_bus_server (binder (transfer)))
(allow hal_can_bus_server hal_can_bus_client (fd (use)))
(allow hal_can_bus_client hal_can_bus_hwservice (hwservice_manager (find)))
(allow hal_can_bus_server hal_can_bus_hwservice (hwservice_manager (add find)))
(allow hal_can_bus_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 9 system/sepolicy/prebuilts/api/202404/public/hal_can.te

(neverallow base_typeattr_373 hal_can_bus_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 9 system/sepolicy/prebuilts/api/202404/public/hal_can.te

(neverallow base_typeattr_374 hal_can_bus_hwservice (hwservice_manager (find)))
;;* lme

(allow hal_can_controller_client hal_can_controller_service (service_manager (find)))
(allow hal_can_controller_server hal_can_controller_service (service_manager (add find)))
;;* lmx 12 system/sepolicy/prebuilts/api/202404/public/hal_can.te

(neverallow base_typeattr_371 hal_can_controller_service (service_manager (add)))
;;* lme

;;* lmx 12 system/sepolicy/prebuilts/api/202404/public/hal_can.te

(neverallow base_typeattr_375 hal_can_controller_service (service_manager (find)))
;;* lme

(allow hal_can_controller servicemanager (binder (call transfer)))
(allow servicemanager hal_can_controller (binder (call transfer)))
(allow servicemanager hal_can_controller (dir (search)))
(allow servicemanager hal_can_controller (file (read open)))
(allow servicemanager hal_can_controller (process (getattr)))
(allow hal_cas_client hal_cas_server (binder (call transfer)))
(allow hal_cas_server hal_cas_client (binder (transfer)))
(allow hal_cas_client hal_cas_server (fd (use)))
(allow hal_cas_server hal_cas_client (binder (call transfer)))
(allow hal_cas_client hal_cas_server (binder (transfer)))
(allow hal_cas_server hal_cas_client (fd (use)))
(allow hal_cas_client hal_cas_hwservice (hwservice_manager (find)))
(allow hal_cas_server hal_cas_hwservice (hwservice_manager (add find)))
(allow hal_cas_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 5 system/sepolicy/prebuilts/api/202404/public/hal_cas.te

(neverallow base_typeattr_376 hal_cas_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/prebuilts/api/202404/public/hal_cas.te

(neverallow base_typeattr_377 hal_cas_hwservice (hwservice_manager (find)))
;;* lme

(allow hal_cas_server hidl_memory_hwservice (hwservice_manager (find)))
(allow hal_cas_client hal_cas_service (service_manager (find)))
(allow hal_cas_server hal_cas_service (service_manager (add find)))
;;* lmx 8 system/sepolicy/prebuilts/api/202404/public/hal_cas.te

(neverallow base_typeattr_376 hal_cas_service (service_manager (add)))
;;* lme

;;* lmx 8 system/sepolicy/prebuilts/api/202404/public/hal_cas.te

(neverallow base_typeattr_378 hal_cas_service (service_manager (find)))
;;* lme

(allow hal_cas_server servicemanager (binder (call transfer)))
(allow servicemanager hal_cas_server (binder (transfer)))
(allow hal_cas_server servicemanager (fd (use)))
(allow hal_cas_client servicemanager (binder (call transfer)))
(allow servicemanager hal_cas_client (binder (transfer)))
(allow hal_cas_client servicemanager (fd (use)))
(allow hal_cas_server serialno_prop (file (read getattr map open)))
(allow hal_cas system_data_file (file (read getattr)))
(allow hal_cas cgroup (dir (ioctl read getattr lock open watch watch_reads search)))
(allow hal_cas cgroup (file (ioctl read getattr lock map open watch watch_reads)))
(allow hal_cas cgroup (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow hal_cas cgroup (dir (write search)))
(allow hal_cas cgroup (file (write lock append map open)))
(allow hal_cas cgroup_v2 (dir (ioctl read getattr lock open watch watch_reads search)))
(allow hal_cas cgroup_v2 (file (ioctl read getattr lock map open watch watch_reads)))
(allow hal_cas cgroup_v2 (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow hal_cas cgroup_v2 (dir (write search)))
(allow hal_cas cgroup_v2 (file (write lock append map open)))
(allow hal_cas ion_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
(allow hal_cas hal_graphics_allocator (fd (use)))
(allow hal_cas tee_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lmx 40 system/sepolicy/prebuilts/api/202404/public/hal_cas.te

(neverallow hal_cas_server fs_type (file (execute_no_trans)))
(neverallow hal_cas_server file_type (file (execute_no_trans)))
;;* lme

;;* lmx 43 system/sepolicy/prebuilts/api/202404/public/hal_cas.te

(neverallowx hal_cas_server domain (ioctl tcp_socket (0x6900 0x6902)))
(neverallowx hal_cas_server domain (ioctl udp_socket (0x6900 0x6902)))
(neverallowx hal_cas_server domain (ioctl rawip_socket (0x6900 0x6902)))
;;* lme

;;* lmx 43 system/sepolicy/prebuilts/api/202404/public/hal_cas.te

(neverallowx hal_cas_server domain (ioctl tcp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx hal_cas_server domain (ioctl udp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx hal_cas_server domain (ioctl rawip_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
;;* lme

;;* lmx 43 system/sepolicy/prebuilts/api/202404/public/hal_cas.te

(neverallowx hal_cas_server domain (ioctl tcp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx hal_cas_server domain (ioctl udp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx hal_cas_server domain (ioctl rawip_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
;;* lme

(allow hal_codec2_client media_variant_prop (file (read getattr map open)))
(allow hal_codec2_server media_variant_prop (file (read getattr map open)))
(allow hal_codec2_client codec2_config_prop (file (read getattr map open)))
(allow hal_codec2_server codec2_config_prop (file (read getattr map open)))
(allow hal_codec2_client hal_codec2_server (binder (call transfer)))
(allow hal_codec2_server hal_codec2_client (binder (transfer)))
(allow hal_codec2_client hal_codec2_server (fd (use)))
(allow hal_codec2_server hal_codec2_client (binder (call transfer)))
(allow hal_codec2_client hal_codec2_server (binder (transfer)))
(allow hal_codec2_server hal_codec2_client (fd (use)))
(allow hal_codec2_client hal_codec2_hwservice (hwservice_manager (find)))
(allow hal_codec2_server hal_codec2_hwservice (hwservice_manager (add find)))
(allow hal_codec2_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 9 system/sepolicy/prebuilts/api/202404/public/hal_codec2.te

(neverallow base_typeattr_379 hal_codec2_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 9 system/sepolicy/prebuilts/api/202404/public/hal_codec2.te

(neverallow base_typeattr_380 hal_codec2_hwservice (hwservice_manager (find)))
;;* lme

(allow hal_codec2_client hal_codec2_service (service_manager (find)))
(allow hal_codec2_server hal_codec2_service (service_manager (add find)))
;;* lmx 10 system/sepolicy/prebuilts/api/202404/public/hal_codec2.te

(neverallow base_typeattr_379 hal_codec2_service (service_manager (add)))
;;* lme

;;* lmx 10 system/sepolicy/prebuilts/api/202404/public/hal_codec2.te

(neverallow base_typeattr_381 hal_codec2_service (service_manager (find)))
;;* lme

(allow hal_codec2_server hal_graphics_composer (fd (use)))
(allow hal_codec2_server ion_device (chr_file (ioctl read getattr lock map open watch watch_reads)))
(allow hal_codec2_server hal_camera (fd (use)))
(allow hal_codec2_server bufferhubd (fd (use)))
(allow hal_codec2_client ion_device (chr_file (ioctl read getattr lock map open watch watch_reads)))
(allow hal_codec2_server su (fifo_file (read)))
(allow hal_codec2_server mediaserver (fifo_file (read)))
(allow hal_codec2_server base_typeattr_382 (fifo_file (read)))
(allow hal_configstore_client hal_configstore_server (binder (call transfer)))
(allow hal_configstore_server hal_configstore_client (binder (transfer)))
(allow hal_configstore_client hal_configstore_server (fd (use)))
(allow hal_configstore_client hal_configstore_ISurfaceFlingerConfigs (hwservice_manager (find)))
(allow hal_configstore_server hal_configstore_ISurfaceFlingerConfigs (hwservice_manager (add find)))
(allow hal_configstore_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 4 system/sepolicy/prebuilts/api/202404/public/hal_configstore.te

(neverallow base_typeattr_383 hal_configstore_ISurfaceFlingerConfigs (hwservice_manager (add)))
;;* lme

;;* lmx 4 system/sepolicy/prebuilts/api/202404/public/hal_configstore.te

(neverallow base_typeattr_384 hal_configstore_ISurfaceFlingerConfigs (hwservice_manager (find)))
;;* lme

(allow hal_configstore_server anr_data_file (file (append)))
(allow hal_configstore_server dumpstate (fd (use)))
(allow hal_configstore_server incidentd (fd (use)))
(allow hal_configstore_server dumpstate (fifo_file (write append)))
(allow hal_configstore_server incidentd (fifo_file (write append)))
(allow hal_configstore_server system_server (fifo_file (write append)))
(allow hal_configstore_server tombstoned (unix_stream_socket (connectto)))
(allow hal_configstore_server tombstoned (fd (use)))
(allow hal_configstore_server tombstoned_crash_socket (sock_file (write)))
(allow hal_configstore_server tombstone_data_file (file (append)))
;;* lmx 15 system/sepolicy/prebuilts/api/202404/public/hal_configstore.te

(neverallow hal_configstore_server fs_type (file (execute_no_trans)))
(neverallow hal_configstore_server file_type (file (execute_no_trans)))
;;* lme

;;* lmx 29 system/sepolicy/prebuilts/api/202404/public/hal_configstore.te

(neverallow hal_configstore_server domain (socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow hal_configstore_server domain (tcp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind name_connect)))
(neverallow hal_configstore_server domain (udp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind)))
(neverallow hal_configstore_server domain (rawip_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind)))
(neverallow hal_configstore_server domain (netlink_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow hal_configstore_server domain (packet_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow hal_configstore_server domain (key_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow hal_configstore_server domain (netlink_route_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write nlmsg_readpriv nlmsg_getneigh)))
(neverallow hal_configstore_server domain (netlink_tcpdiag_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write)))
(neverallow hal_configstore_server domain (netlink_nflog_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow hal_configstore_server domain (netlink_xfrm_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write)))
(neverallow hal_configstore_server domain (netlink_selinux_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow hal_configstore_server domain (netlink_audit_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write nlmsg_relay nlmsg_readpriv nlmsg_tty_audit)))
(neverallow hal_configstore_server domain (netlink_dnrt_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow hal_configstore_server domain (netlink_kobject_uevent_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow hal_configstore_server domain (appletalk_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow hal_configstore_server domain (tun_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind attach_queue)))
(neverallow hal_configstore_server domain (netlink_iscsi_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow hal_configstore_server domain (netlink_fib_lookup_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow hal_configstore_server domain (netlink_connector_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow hal_configstore_server domain (netlink_netfilter_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow hal_configstore_server domain (netlink_generic_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow hal_configstore_server domain (netlink_scsitransport_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow hal_configstore_server domain (netlink_rdma_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow hal_configstore_server domain (netlink_crypto_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
;;* lme

;;* lmx 37 system/sepolicy/prebuilts/api/202404/public/hal_configstore.te

(neverallow hal_configstore_server base_typeattr_385 (unix_stream_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind connectto)))
(neverallow hal_configstore_server base_typeattr_385 (unix_dgram_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
;;* lme

;;* lmx 45 system/sepolicy/prebuilts/api/202404/public/hal_configstore.te

(neverallow hal_configstore_server base_typeattr_386 (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow hal_configstore_server base_typeattr_386 (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow hal_configstore_server base_typeattr_386 (fifo_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 51 system/sepolicy/prebuilts/api/202404/public/hal_configstore.te

(neverallow hal_configstore_server sdcard_type (dir (ioctl read write create setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
(neverallow hal_configstore_server fuse (dir (ioctl read write create setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
(neverallow hal_configstore_server fuseblk (dir (ioctl read write create setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
(neverallow hal_configstore_server sdcardfs (dir (ioctl read write create setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
(neverallow hal_configstore_server vfat (dir (ioctl read write create setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
(neverallow hal_configstore_server exfat (dir (ioctl read write create setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 55 system/sepolicy/prebuilts/api/202404/public/hal_configstore.te

(neverallow hal_configstore_server sdcard_type (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow hal_configstore_server fuse (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow hal_configstore_server fuseblk (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow hal_configstore_server sdcardfs (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow hal_configstore_server vfat (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow hal_configstore_server exfat (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
;;* lme

;;* lmx 58 system/sepolicy/prebuilts/api/202404/public/hal_configstore.te

(neverallow hal_configstore_server base_typeattr_224 (service_manager (add find list)))
;;* lme

;;* lmx 61 system/sepolicy/prebuilts/api/202404/public/hal_configstore.te

(neverallow hal_configstore_server self (capability (chown dac_override dac_read_search fowner fsetid kill setgid setuid setpcap linux_immutable net_bind_service net_broadcast net_admin net_raw ipc_lock ipc_owner sys_module sys_rawio sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_nice sys_resource sys_time sys_tty_config mknod lease audit_write audit_control setfcap)))
(neverallow hal_configstore_server self (capability2 (mac_override mac_admin syslog wake_alarm block_suspend audit_read perfmon)))
(neverallow hal_configstore_server self (cap_userns (chown dac_override dac_read_search fowner fsetid kill setgid setuid setpcap linux_immutable net_bind_service net_broadcast net_admin net_raw ipc_lock ipc_owner sys_module sys_rawio sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_nice sys_resource sys_time sys_tty_config mknod lease audit_write audit_control setfcap)))
(neverallow hal_configstore_server self (cap2_userns (mac_override mac_admin syslog wake_alarm block_suspend audit_read perfmon)))
;;* lme

;;* lmx 64 system/sepolicy/prebuilts/api/202404/public/hal_configstore.te

(neverallow hal_configstore_server base_typeattr_224 (process (ptrace)))
;;* lme

;;* lmx 67 system/sepolicy/prebuilts/api/202404/public/hal_configstore.te

(neverallow hal_configstore_server base_typeattr_224 (file (relabelfrom relabelto)))
(neverallow hal_configstore_server base_typeattr_224 (dir (relabelfrom relabelto)))
(neverallow hal_configstore_server base_typeattr_224 (lnk_file (relabelfrom relabelto)))
(neverallow hal_configstore_server base_typeattr_224 (chr_file (relabelfrom relabelto)))
(neverallow hal_configstore_server base_typeattr_224 (blk_file (relabelfrom relabelto)))
(neverallow hal_configstore_server base_typeattr_224 (sock_file (relabelfrom relabelto)))
(neverallow hal_configstore_server base_typeattr_224 (fifo_file (relabelfrom relabelto)))
;;* lme

(allow hal_confirmationui_client hal_confirmationui_server (binder (call transfer)))
(allow hal_confirmationui_server hal_confirmationui_client (binder (transfer)))
(allow hal_confirmationui_client hal_confirmationui_server (fd (use)))
(allow hal_confirmationui_client hal_confirmationui_hwservice (hwservice_manager (find)))
(allow hal_confirmationui_server hal_confirmationui_hwservice (hwservice_manager (add find)))
(allow hal_confirmationui_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 4 system/sepolicy/prebuilts/api/202404/public/hal_confirmationui.te

(neverallow base_typeattr_387 hal_confirmationui_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 4 system/sepolicy/prebuilts/api/202404/public/hal_confirmationui.te

(neverallow base_typeattr_388 hal_confirmationui_hwservice (hwservice_manager (find)))
;;* lme

(allow hal_confirmationui_client hal_confirmationui_service (service_manager (find)))
(allow hal_confirmationui_server hal_confirmationui_service (service_manager (add find)))
;;* lmx 5 system/sepolicy/prebuilts/api/202404/public/hal_confirmationui.te

(neverallow base_typeattr_387 hal_confirmationui_service (service_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/prebuilts/api/202404/public/hal_confirmationui.te

(neverallow base_typeattr_389 hal_confirmationui_service (service_manager (find)))
;;* lme

(allow hal_confirmationui_server servicemanager (binder (call transfer)))
(allow servicemanager hal_confirmationui_server (binder (transfer)))
(allow hal_confirmationui_server servicemanager (fd (use)))
(allow hal_contexthub_client hal_contexthub_server (binder (call transfer)))
(allow hal_contexthub_server hal_contexthub_client (binder (transfer)))
(allow hal_contexthub_client hal_contexthub_server (fd (use)))
(allow hal_contexthub_server hal_contexthub_client (binder (call transfer)))
(allow hal_contexthub_client hal_contexthub_server (binder (transfer)))
(allow hal_contexthub_server hal_contexthub_client (fd (use)))
(allow hal_contexthub_server hal_contexthub_service (service_manager (add find)))
;;* lmx 5 system/sepolicy/prebuilts/api/202404/public/hal_contexthub.te

(neverallow base_typeattr_390 hal_contexthub_service (service_manager (add)))
;;* lme

(allow hal_contexthub_server servicemanager (binder (call transfer)))
(allow servicemanager hal_contexthub_server (binder (transfer)))
(allow hal_contexthub_server servicemanager (fd (use)))
(allow hal_contexthub_client hal_contexthub_service (service_manager (find)))
(allow hal_contexthub_client hal_contexthub_hwservice (hwservice_manager (find)))
(allow hal_contexthub_server hal_contexthub_hwservice (hwservice_manager (add find)))
(allow hal_contexthub_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 10 system/sepolicy/prebuilts/api/202404/public/hal_contexthub.te

(neverallow base_typeattr_390 hal_contexthub_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 10 system/sepolicy/prebuilts/api/202404/public/hal_contexthub.te

(neverallow base_typeattr_391 hal_contexthub_hwservice (hwservice_manager (find)))
;;* lme

(allow hal_drm_server servicemanager (binder (call transfer)))
(allow servicemanager hal_drm_server (binder (call transfer)))
(allow servicemanager hal_drm_server (dir (search)))
(allow servicemanager hal_drm_server (file (read open)))
(allow servicemanager hal_drm_server (process (getattr)))
(allow hal_drm_client hal_drm_server (binder (call transfer)))
(allow hal_drm_server hal_drm_client (binder (transfer)))
(allow hal_drm_client hal_drm_server (fd (use)))
(allow hal_drm_server hal_drm_client (binder (call transfer)))
(allow hal_drm_client hal_drm_server (binder (transfer)))
(allow hal_drm_server hal_drm_client (fd (use)))
(allow hal_drm_client hal_drm_hwservice (hwservice_manager (find)))
(allow hal_drm_server hal_drm_hwservice (hwservice_manager (add find)))
(allow hal_drm_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 6 system/sepolicy/prebuilts/api/202404/public/hal_drm.te

(neverallow base_typeattr_392 hal_drm_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 6 system/sepolicy/prebuilts/api/202404/public/hal_drm.te

(neverallow base_typeattr_393 hal_drm_hwservice (hwservice_manager (find)))
;;* lme

(allow hal_drm_client hal_drm_service (service_manager (find)))
(allow hal_drm_server hal_drm_service (service_manager (add find)))
;;* lmx 7 system/sepolicy/prebuilts/api/202404/public/hal_drm.te

(neverallow base_typeattr_392 hal_drm_service (service_manager (add)))
;;* lme

;;* lmx 7 system/sepolicy/prebuilts/api/202404/public/hal_drm.te

(neverallow base_typeattr_394 hal_drm_service (service_manager (find)))
;;* lme

(allow hal_drm hidl_memory_hwservice (hwservice_manager (find)))
(allow hal_drm self (process (execmem)))
(allow hal_drm_server serialno_prop (file (read getattr map open)))
(allow hal_drm_server drm_forcel3_prop (file (read getattr map open)))
(allow hal_drm system_data_file (file (read getattr)))
(allow hal_drm cgroup (dir (ioctl read getattr lock open watch watch_reads search)))
(allow hal_drm cgroup (file (ioctl read getattr lock map open watch watch_reads)))
(allow hal_drm cgroup (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow hal_drm cgroup (dir (write search)))
(allow hal_drm cgroup (file (write lock append map open)))
(allow hal_drm cgroup_v2 (dir (ioctl read getattr lock open watch watch_reads search)))
(allow hal_drm cgroup_v2 (file (ioctl read getattr lock map open watch watch_reads)))
(allow hal_drm cgroup_v2 (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow hal_drm cgroup_v2 (dir (write search)))
(allow hal_drm cgroup_v2 (file (write lock append map open)))
(allow hal_drm ion_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
(allow hal_drm hal_graphics_allocator (fd (use)))
(allow hal_drm hal_allocator_server (fd (use)))
(allow hal_drm mediaserver (fd (use)))
(allow hal_drm sysfs (file (ioctl read getattr lock map open watch watch_reads)))
(allow hal_drm tee_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
(allow hal_drm_server base_typeattr_369 (fd (use)))
(allowx hal_drm self (ioctl tcp_socket ((range 0x5401 0x5404) 0x540b (range 0x540e 0x5411) (range 0x5413 0x5414) (range 0x5450 0x5451))))
(allowx hal_drm self (ioctl udp_socket ((range 0x5401 0x5404) 0x540b (range 0x540e 0x5411) (range 0x5413 0x5414) (range 0x5450 0x5451))))
(allowx hal_drm self (ioctl rawip_socket ((range 0x5401 0x5404) 0x540b (range 0x540e 0x5411) (range 0x5413 0x5414) (range 0x5450 0x5451))))
(allowx hal_drm self (ioctl tcp_socket ((range 0x8906 0x8907) 0x8910 (range 0x8912 0x8913) 0x8915 0x8917 0x8919 0x891b 0x8921 0x8933 0x8938 0x8942)))
(allowx hal_drm self (ioctl udp_socket ((range 0x8906 0x8907) 0x8910 (range 0x8912 0x8913) 0x8915 0x8917 0x8919 0x891b 0x8921 0x8933 0x8938 0x8942)))
(allowx hal_drm self (ioctl rawip_socket ((range 0x8906 0x8907) 0x8910 (range 0x8912 0x8913) 0x8915 0x8917 0x8919 0x891b 0x8921 0x8933 0x8938 0x8942)))
(allowx hal_drm self (ioctl tcp_socket (0x8b01 0x8b05 0x8b07 0x8b09 0x8b0b 0x8b0d 0x8b0f (range 0x8b11 0x8b13) 0x8b21 0x8b23 0x8b25 0x8b27 0x8b29 0x8b2d)))
(allowx hal_drm self (ioctl udp_socket (0x8b01 0x8b05 0x8b07 0x8b09 0x8b0b 0x8b0d 0x8b0f (range 0x8b11 0x8b13) 0x8b21 0x8b23 0x8b25 0x8b27 0x8b29 0x8b2d)))
(allowx hal_drm self (ioctl rawip_socket (0x8b01 0x8b05 0x8b07 0x8b09 0x8b0b 0x8b0d 0x8b0f (range 0x8b11 0x8b13) 0x8b21 0x8b23 0x8b25 0x8b27 0x8b29 0x8b2d)))
;;* lmx 63 system/sepolicy/prebuilts/api/202404/public/hal_drm.te

(neverallow hal_drm_server fs_type (file (execute_no_trans)))
(neverallow hal_drm_server file_type (file (execute_no_trans)))
;;* lme

;;* lmx 66 system/sepolicy/prebuilts/api/202404/public/hal_drm.te

(neverallowx hal_drm_server domain (ioctl tcp_socket (0x6900 0x6902)))
(neverallowx hal_drm_server domain (ioctl udp_socket (0x6900 0x6902)))
(neverallowx hal_drm_server domain (ioctl rawip_socket (0x6900 0x6902)))
;;* lme

;;* lmx 66 system/sepolicy/prebuilts/api/202404/public/hal_drm.te

(neverallowx hal_drm_server domain (ioctl tcp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx hal_drm_server domain (ioctl udp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx hal_drm_server domain (ioctl rawip_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
;;* lme

;;* lmx 66 system/sepolicy/prebuilts/api/202404/public/hal_drm.te

(neverallowx hal_drm_server domain (ioctl tcp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx hal_drm_server domain (ioctl udp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx hal_drm_server domain (ioctl rawip_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
;;* lme

(allow hal_dumpstate_client hal_dumpstate_server (binder (call transfer)))
(allow hal_dumpstate_server hal_dumpstate_client (binder (transfer)))
(allow hal_dumpstate_client hal_dumpstate_server (fd (use)))
(allow hal_dumpstate_server hal_dumpstate_client (binder (call transfer)))
(allow hal_dumpstate_client hal_dumpstate_server (binder (transfer)))
(allow hal_dumpstate_server hal_dumpstate_client (fd (use)))
(allow hal_dumpstate_server property_socket (sock_file (write)))
(allow hal_dumpstate_server init (unix_stream_socket (connectto)))
(allow hal_dumpstate_server hal_dumpstate_config_prop (property_service (set)))
(allow hal_dumpstate_server hal_dumpstate_config_prop (file (read getattr map open)))
(allow hal_dumpstate_client hal_dumpstate_hwservice (hwservice_manager (find)))
(allow hal_dumpstate_server hal_dumpstate_hwservice (hwservice_manager (add find)))
(allow hal_dumpstate_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 7 system/sepolicy/prebuilts/api/202404/public/hal_dumpstate.te

(neverallow base_typeattr_395 hal_dumpstate_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 7 system/sepolicy/prebuilts/api/202404/public/hal_dumpstate.te

(neverallow base_typeattr_396 hal_dumpstate_hwservice (hwservice_manager (find)))
;;* lme

(allow hal_dumpstate_client hal_dumpstate_service (service_manager (find)))
(allow hal_dumpstate_server hal_dumpstate_service (service_manager (add find)))
;;* lmx 8 system/sepolicy/prebuilts/api/202404/public/hal_dumpstate.te

(neverallow base_typeattr_395 hal_dumpstate_service (service_manager (add)))
;;* lme

;;* lmx 8 system/sepolicy/prebuilts/api/202404/public/hal_dumpstate.te

(neverallow base_typeattr_397 hal_dumpstate_service (service_manager (find)))
;;* lme

(allow hal_dumpstate_server servicemanager (binder (call transfer)))
(allow servicemanager hal_dumpstate_server (binder (transfer)))
(allow hal_dumpstate_server servicemanager (fd (use)))
(allow hal_dumpstate_server servicemanager (binder (call transfer)))
(allow servicemanager hal_dumpstate_server (binder (call transfer)))
(allow servicemanager hal_dumpstate_server (dir (search)))
(allow servicemanager hal_dumpstate_server (file (read open)))
(allow servicemanager hal_dumpstate_server (process (getattr)))
(allow hal_dumpstate shell_data_file (file (write)))
(allow hal_dumpstate proc_interrupts (file (ioctl read getattr lock map open watch watch_reads)))
(allow hal_dumpstate fscklogs (dir (ioctl read getattr lock open watch watch_reads search)))
(allow hal_dumpstate fscklogs (file (ioctl read getattr lock map open watch watch_reads)))
(allow hal_dumpstate fscklogs (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow hal_evs_client hwservicemanager (binder (call transfer)))
(allow hwservicemanager hal_evs_client (binder (call transfer)))
(allow hwservicemanager hal_evs_client (dir (search)))
(allow hwservicemanager hal_evs_client (file (read map open)))
(allow hwservicemanager hal_evs_client (process (getattr)))
(allow hal_evs_server hwservicemanager (binder (call transfer)))
(allow hwservicemanager hal_evs_server (binder (call transfer)))
(allow hwservicemanager hal_evs_server (dir (search)))
(allow hwservicemanager hal_evs_server (file (read map open)))
(allow hwservicemanager hal_evs_server (process (getattr)))
(allow hal_evs_client hal_evs_server (binder (call transfer)))
(allow hal_evs_server hal_evs_client (binder (transfer)))
(allow hal_evs_client hal_evs_server (fd (use)))
(allow hal_evs_server hal_evs_client (binder (call transfer)))
(allow hal_evs_client hal_evs_server (binder (transfer)))
(allow hal_evs_server hal_evs_client (fd (use)))
(allow hal_evs_client hal_evs_hwservice (hwservice_manager (find)))
(allow hal_evs_server hal_evs_hwservice (hwservice_manager (add find)))
(allow hal_evs_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 12 system/sepolicy/prebuilts/api/202404/public/hal_evs.te

(neverallow base_typeattr_398 hal_evs_hwservice (hwservice_manager (add)))
;;* lme

(allow hal_evs_client hal_evs_service (service_manager (find)))
(allow hal_evs_server hal_evs_service (service_manager (add find)))
;;* lmx 15 system/sepolicy/prebuilts/api/202404/public/hal_evs.te

(neverallow base_typeattr_399 hal_evs_service (service_manager (add)))
;;* lme

;;* lmx 15 system/sepolicy/prebuilts/api/202404/public/hal_evs.te

(neverallow base_typeattr_400 hal_evs_service (service_manager (find)))
;;* lme

(allow hal_face_client hal_face_server (binder (call transfer)))
(allow hal_face_server hal_face_client (binder (transfer)))
(allow hal_face_client hal_face_server (fd (use)))
(allow hal_face_server hal_face_client (binder (call transfer)))
(allow hal_face_client hal_face_server (binder (transfer)))
(allow hal_face_server hal_face_client (fd (use)))
(allow hal_face_client hal_face_hwservice (hwservice_manager (find)))
(allow hal_face_server hal_face_hwservice (hwservice_manager (add find)))
(allow hal_face_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 5 system/sepolicy/prebuilts/api/202404/public/hal_face.te

(neverallow base_typeattr_401 hal_face_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/prebuilts/api/202404/public/hal_face.te

(neverallow base_typeattr_402 hal_face_hwservice (hwservice_manager (find)))
;;* lme

(allow hal_face_client hal_face_service (service_manager (find)))
(allow hal_face_server hal_face_service (service_manager (add find)))
;;* lmx 6 system/sepolicy/prebuilts/api/202404/public/hal_face.te

(neverallow base_typeattr_401 hal_face_service (service_manager (add)))
;;* lme

;;* lmx 6 system/sepolicy/prebuilts/api/202404/public/hal_face.te

(neverallow base_typeattr_403 hal_face_service (service_manager (find)))
;;* lme

(allow hal_face_server servicemanager (binder (call transfer)))
(allow servicemanager hal_face_server (binder (call transfer)))
(allow servicemanager hal_face_server (dir (search)))
(allow servicemanager hal_face_server (file (read open)))
(allow servicemanager hal_face_server (process (getattr)))
(allow hal_face ion_device (chr_file (ioctl read getattr lock map open watch watch_reads)))
(allow hal_face face_vendor_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow hal_face face_vendor_data_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
(allow hal_fastboot_client hal_fastboot_server (binder (call transfer)))
(allow hal_fastboot_server hal_fastboot_client (binder (transfer)))
(allow hal_fastboot_client hal_fastboot_server (fd (use)))
(allow hal_fastboot_client hal_fastboot_service (service_manager (find)))
(allow hal_fastboot_server hal_fastboot_service (service_manager (add find)))
;;* lmx 4 system/sepolicy/prebuilts/api/202404/public/hal_fastboot.te

(neverallow base_typeattr_404 hal_fastboot_service (service_manager (add)))
;;* lme

;;* lmx 4 system/sepolicy/prebuilts/api/202404/public/hal_fastboot.te

(neverallow base_typeattr_405 hal_fastboot_service (service_manager (find)))
;;* lme

(allow hal_fastboot_server servicemanager (binder (call transfer)))
(allow servicemanager hal_fastboot_server (binder (transfer)))
(allow hal_fastboot_server servicemanager (fd (use)))
(allow hal_fingerprint_client hal_fingerprint_server (binder (call transfer)))
(allow hal_fingerprint_server hal_fingerprint_client (binder (transfer)))
(allow hal_fingerprint_client hal_fingerprint_server (fd (use)))
(allow hal_fingerprint_server hal_fingerprint_client (binder (call transfer)))
(allow hal_fingerprint_client hal_fingerprint_server (binder (transfer)))
(allow hal_fingerprint_server hal_fingerprint_client (fd (use)))
(allow hal_fingerprint_client hal_fingerprint_hwservice (hwservice_manager (find)))
(allow hal_fingerprint_server hal_fingerprint_hwservice (hwservice_manager (add find)))
(allow hal_fingerprint_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 5 system/sepolicy/prebuilts/api/202404/public/hal_fingerprint.te

(neverallow base_typeattr_406 hal_fingerprint_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/prebuilts/api/202404/public/hal_fingerprint.te

(neverallow base_typeattr_407 hal_fingerprint_hwservice (hwservice_manager (find)))
;;* lme

(allow hal_fingerprint_client hal_fingerprint_service (service_manager (find)))
(allow hal_fingerprint_server hal_fingerprint_service (service_manager (add find)))
;;* lmx 6 system/sepolicy/prebuilts/api/202404/public/hal_fingerprint.te

(neverallow base_typeattr_406 hal_fingerprint_service (service_manager (add)))
;;* lme

;;* lmx 6 system/sepolicy/prebuilts/api/202404/public/hal_fingerprint.te

(neverallow base_typeattr_408 hal_fingerprint_service (service_manager (find)))
;;* lme

(allow hal_fingerprint_server servicemanager (binder (call transfer)))
(allow servicemanager hal_fingerprint_server (binder (call transfer)))
(allow servicemanager hal_fingerprint_server (dir (search)))
(allow servicemanager hal_fingerprint_server (file (read open)))
(allow servicemanager hal_fingerprint_server (process (getattr)))
(allow hal_fingerprint ion_device (chr_file (ioctl read getattr lock map open watch watch_reads)))
(allow hal_fingerprint fingerprint_vendor_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow hal_fingerprint fingerprint_vendor_data_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
(allow hal_fingerprint cgroup (dir (ioctl read getattr lock open watch watch_reads search)))
(allow hal_fingerprint cgroup (file (ioctl read getattr lock map open watch watch_reads)))
(allow hal_fingerprint cgroup (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow hal_fingerprint cgroup_v2 (dir (ioctl read getattr lock open watch watch_reads search)))
(allow hal_fingerprint cgroup_v2 (file (ioctl read getattr lock map open watch watch_reads)))
(allow hal_fingerprint cgroup_v2 (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow hal_fingerprint sysfs (dir (ioctl read getattr lock open watch watch_reads search)))
(allow hal_fingerprint sysfs (file (ioctl read getattr lock map open watch watch_reads)))
(allow hal_fingerprint sysfs (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow hal_gatekeeper_client hal_gatekeeper_server (binder (call transfer)))
(allow hal_gatekeeper_server hal_gatekeeper_client (binder (transfer)))
(allow hal_gatekeeper_client hal_gatekeeper_server (fd (use)))
(allow hal_gatekeeper_client hal_gatekeeper_hwservice (hwservice_manager (find)))
(allow hal_gatekeeper_server hal_gatekeeper_hwservice (hwservice_manager (add find)))
(allow hal_gatekeeper_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 3 system/sepolicy/prebuilts/api/202404/public/hal_gatekeeper.te

(neverallow base_typeattr_409 hal_gatekeeper_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 3 system/sepolicy/prebuilts/api/202404/public/hal_gatekeeper.te

(neverallow base_typeattr_410 hal_gatekeeper_hwservice (hwservice_manager (find)))
;;* lme

(allow hal_gatekeeper_client hal_gatekeeper_service (service_manager (find)))
(allow hal_gatekeeper_server hal_gatekeeper_service (service_manager (add find)))
;;* lmx 4 system/sepolicy/prebuilts/api/202404/public/hal_gatekeeper.te

(neverallow base_typeattr_409 hal_gatekeeper_service (service_manager (add)))
;;* lme

;;* lmx 4 system/sepolicy/prebuilts/api/202404/public/hal_gatekeeper.te

(neverallow base_typeattr_411 hal_gatekeeper_service (service_manager (find)))
;;* lme

(allow hal_gatekeeper_server servicemanager (binder (call transfer)))
(allow servicemanager hal_gatekeeper_server (binder (transfer)))
(allow hal_gatekeeper_server servicemanager (fd (use)))
(allow hal_gatekeeper tee_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
(allow hal_gatekeeper ion_device (chr_file (ioctl read getattr lock map open watch watch_reads)))
(allow hal_gnss_client hal_gnss_server (binder (call transfer)))
(allow hal_gnss_server hal_gnss_client (binder (transfer)))
(allow hal_gnss_client hal_gnss_server (fd (use)))
(allow hal_gnss_server hal_gnss_client (binder (call transfer)))
(allow hal_gnss_client hal_gnss_server (binder (transfer)))
(allow hal_gnss_server hal_gnss_client (fd (use)))
(allow hal_gnss_client hal_gnss_hwservice (hwservice_manager (find)))
(allow hal_gnss_server hal_gnss_hwservice (hwservice_manager (add find)))
(allow hal_gnss_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 5 system/sepolicy/prebuilts/api/202404/public/hal_gnss.te

(neverallow base_typeattr_412 hal_gnss_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/prebuilts/api/202404/public/hal_gnss.te

(neverallow base_typeattr_413 hal_gnss_hwservice (hwservice_manager (find)))
;;* lme

(allow hal_gnss_client hal_gnss_service (service_manager (find)))
(allow hal_gnss_server hal_gnss_service (service_manager (add find)))
;;* lmx 6 system/sepolicy/prebuilts/api/202404/public/hal_gnss.te

(neverallow base_typeattr_412 hal_gnss_service (service_manager (add)))
;;* lme

;;* lmx 6 system/sepolicy/prebuilts/api/202404/public/hal_gnss.te

(neverallow base_typeattr_414 hal_gnss_service (service_manager (find)))
;;* lme

(allow hal_gnss_server servicemanager (binder (call transfer)))
(allow servicemanager hal_gnss_server (binder (call transfer)))
(allow servicemanager hal_gnss_server (dir (search)))
(allow servicemanager hal_gnss_server (file (read open)))
(allow servicemanager hal_gnss_server (process (getattr)))
(allow hal_gnss_client servicemanager (binder (call transfer)))
(allow servicemanager hal_gnss_client (binder (call transfer)))
(allow servicemanager hal_gnss_client (dir (search)))
(allow servicemanager hal_gnss_client (file (read open)))
(allow servicemanager hal_gnss_client (process (getattr)))
(allow hal_graphics_allocator_client hal_graphics_allocator_server (binder (call transfer)))
(allow hal_graphics_allocator_server hal_graphics_allocator_client (binder (transfer)))
(allow hal_graphics_allocator_client hal_graphics_allocator_server (fd (use)))
(allow hal_graphics_allocator_client hal_graphics_allocator_hwservice (hwservice_manager (find)))
(allow hal_graphics_allocator_server hal_graphics_allocator_hwservice (hwservice_manager (add find)))
(allow hal_graphics_allocator_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 4 system/sepolicy/prebuilts/api/202404/public/hal_graphics_allocator.te

(neverallow base_typeattr_415 hal_graphics_allocator_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 4 system/sepolicy/prebuilts/api/202404/public/hal_graphics_allocator.te

(neverallow base_typeattr_416 hal_graphics_allocator_hwservice (hwservice_manager (find)))
;;* lme

(allow hal_graphics_allocator_client hal_graphics_mapper_hwservice (hwservice_manager (find)))
(allow hal_graphics_allocator_client hal_graphics_mapper_service (service_manager (find)))
(allow hal_graphics_allocator_client same_process_hal_file (file (read getattr map execute open)))
(allow hal_graphics_allocator gpu_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
(allow hal_graphics_allocator gpu_device (dir (ioctl read getattr lock open watch watch_reads search)))
(allow hal_graphics_allocator ion_device (chr_file (ioctl read getattr lock map open watch watch_reads)))
(allow hal_graphics_allocator dmabuf_system_heap_device (chr_file (ioctl read getattr lock map open watch watch_reads)))
(allow hal_graphics_allocator dmabuf_system_secure_heap_device (chr_file (ioctl read getattr lock map open watch watch_reads)))
(allow hal_graphics_allocator self (capability (sys_nice)))
(allow hal_graphics_allocator self (cap_userns (sys_nice)))
(allow hal_graphics_allocator_client hal_graphics_allocator_service (service_manager (find)))
(allow hal_graphics_allocator_server hal_graphics_allocator_service (service_manager (add find)))
;;* lmx 22 system/sepolicy/prebuilts/api/202404/public/hal_graphics_allocator.te

(neverallow base_typeattr_415 hal_graphics_allocator_service (service_manager (add)))
;;* lme

;;* lmx 22 system/sepolicy/prebuilts/api/202404/public/hal_graphics_allocator.te

(neverallow base_typeattr_417 hal_graphics_allocator_service (service_manager (find)))
;;* lme

(allow hal_graphics_allocator_server servicemanager (binder (call transfer)))
(allow servicemanager hal_graphics_allocator_server (binder (transfer)))
(allow hal_graphics_allocator_server servicemanager (fd (use)))
(allow hal_graphics_allocator_client servicemanager (binder (call transfer)))
(allow servicemanager hal_graphics_allocator_client (binder (transfer)))
(allow hal_graphics_allocator_client servicemanager (fd (use)))
(allow hal_graphics_composer_client hal_graphics_composer_server (binder (call transfer)))
(allow hal_graphics_composer_server hal_graphics_composer_client (binder (transfer)))
(allow hal_graphics_composer_client hal_graphics_composer_server (fd (use)))
(allow hal_graphics_composer_server hal_graphics_composer_client (binder (call transfer)))
(allow hal_graphics_composer_client hal_graphics_composer_server (binder (transfer)))
(allow hal_graphics_composer_server hal_graphics_composer_client (fd (use)))
(allow hal_graphics_composer_client hal_graphics_composer_server_tmpfs (file (read write getattr map)))
(allow hal_graphics_composer_server hal_graphics_composer_client_tmpfs (file (read write getattr map)))
(allow hal_graphics_composer_client hal_graphics_composer_hwservice (hwservice_manager (find)))
(allow hal_graphics_composer_server hal_graphics_composer_hwservice (hwservice_manager (add find)))
(allow hal_graphics_composer_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 11 system/sepolicy/prebuilts/api/202404/public/hal_graphics_composer.te

(neverallow base_typeattr_418 hal_graphics_composer_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 11 system/sepolicy/prebuilts/api/202404/public/hal_graphics_composer.te

(neverallow base_typeattr_419 hal_graphics_composer_hwservice (hwservice_manager (find)))
;;* lme

(allow hal_graphics_composer_server hal_graphics_mapper_hwservice (hwservice_manager (find)))
(allow hal_graphics_composer gpu_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
(allow hal_graphics_composer gpu_device (dir (ioctl read getattr lock open watch watch_reads search)))
(allow hal_graphics_composer ion_device (chr_file (ioctl read getattr lock map open watch watch_reads)))
(allow hal_graphics_composer dmabuf_system_heap_device (chr_file (ioctl read getattr lock map open watch watch_reads)))
(allow hal_graphics_composer hal_graphics_allocator (fd (use)))
(allow hal_graphics_composer graphics_device (dir (search)))
(allow hal_graphics_composer graphics_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
(allow hal_graphics_composer system_server (fd (use)))
(allow hal_graphics_composer bootanim (fd (use)))
(allow hal_graphics_composer appdomain (fd (use)))
(allow hal_graphics_composer self (capability (sys_nice)))
(allow hal_graphics_composer self (cap_userns (sys_nice)))
(allow hal_graphics_composer_server hal_graphics_composer_client (fifo_file (write)))
(allow hal_graphics_composer_client servicemanager (binder (call transfer)))
(allow servicemanager hal_graphics_composer_client (binder (transfer)))
(allow hal_graphics_composer_client servicemanager (fd (use)))
(allow hal_graphics_composer_server servicemanager (binder (call transfer)))
(allow servicemanager hal_graphics_composer_server (binder (transfer)))
(allow hal_graphics_composer_server servicemanager (fd (use)))
(allow hal_graphics_composer_client hal_graphics_composer_service (service_manager (find)))
(allow hal_graphics_composer_server hal_graphics_composer_service (service_manager (add find)))
;;* lmx 42 system/sepolicy/prebuilts/api/202404/public/hal_graphics_composer.te

(neverallow base_typeattr_418 hal_graphics_composer_service (service_manager (add)))
;;* lme

;;* lmx 42 system/sepolicy/prebuilts/api/202404/public/hal_graphics_composer.te

(neverallow base_typeattr_420 hal_graphics_composer_service (service_manager (find)))
;;* lme

(allow hal_health_client hal_health_server (binder (call transfer)))
(allow hal_health_server hal_health_client (binder (transfer)))
(allow hal_health_client hal_health_server (fd (use)))
(allow hal_health_server hal_health_client (binder (call transfer)))
(allow hal_health_client hal_health_server (binder (transfer)))
(allow hal_health_server hal_health_client (fd (use)))
(allow hal_health_client hal_health_hwservice (hwservice_manager (find)))
(allow hal_health_server hal_health_hwservice (hwservice_manager (add find)))
(allow hal_health_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 5 system/sepolicy/prebuilts/api/202404/public/hal_health.te

(neverallow base_typeattr_421 hal_health_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/prebuilts/api/202404/public/hal_health.te

(neverallow base_typeattr_422 hal_health_hwservice (hwservice_manager (find)))
;;* lme

(allow hal_health_client hal_health_service (service_manager (find)))
(allow hal_health_server hal_health_service (service_manager (add find)))
;;* lmx 6 system/sepolicy/prebuilts/api/202404/public/hal_health.te

(neverallow base_typeattr_421 hal_health_service (service_manager (add)))
;;* lme

;;* lmx 6 system/sepolicy/prebuilts/api/202404/public/hal_health.te

(neverallow base_typeattr_423 hal_health_service (service_manager (find)))
;;* lme

(allow hal_health_server self (netlink_kobject_uevent_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
(allow hal_health_server sysfs (dir (ioctl read getattr lock open watch watch_reads search)))
(allow hal_health_server sysfs_batteryinfo (dir (ioctl read getattr lock open watch watch_reads search)))
(allow hal_health_server sysfs_batteryinfo (file (ioctl read getattr lock map open watch watch_reads)))
(allow hal_health_server sysfs_batteryinfo (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow hal_health_server sysfs_wake_lock (file (ioctl read write getattr lock append map open watch watch_reads)))
(allow hal_health_server self (capability2 (block_suspend)))
(allow hal_health_server self (cap2_userns (block_suspend)))
(allow hal_health_server system_suspend_server (binder (call transfer)))
(allow system_suspend_server hal_health_server (binder (transfer)))
(allow hal_health_server system_suspend_server (fd (use)))
(allow hal_health_server system_suspend_hwservice (hwservice_manager (find)))
(allow hal_health_server hwservicemanager (binder (call transfer)))
(allow hwservicemanager hal_health_server (binder (call transfer)))
(allow hwservicemanager hal_health_server (dir (search)))
(allow hwservicemanager hal_health_server (file (read map open)))
(allow hwservicemanager hal_health_server (process (getattr)))
(allow hal_health_server hwservicemanager_prop (file (read getattr map open)))
(allow hal_health_server hidl_manager_hwservice (hwservice_manager (find)))
(allow hal_health_server hal_system_suspend_service (service_manager (find)))
(allow hal_health_server servicemanager (binder (call transfer)))
(allow servicemanager hal_health_server (binder (call transfer)))
(allow servicemanager hal_health_server (dir (search)))
(allow servicemanager hal_health_server (file (read open)))
(allow servicemanager hal_health_server (process (getattr)))
(allow hal_health_server kmsg_device (chr_file (write getattr lock append map open)))
(allow hal_health_server self (capability2 (wake_alarm)))
(allow hal_health_server fs_bpf_vendor (dir (search)))
(allow hal_health_server fs_bpf_vendor (file (read)))
(allow hal_health_server bpfloader (bpf (prog_run)))
(allow hal_health_storage_client hal_health_storage_server (binder (call transfer)))
(allow hal_health_storage_server hal_health_storage_client (binder (transfer)))
(allow hal_health_storage_client hal_health_storage_server (fd (use)))
(allow hal_health_storage_server hal_health_storage_client (binder (call transfer)))
(allow hal_health_storage_client hal_health_storage_server (binder (transfer)))
(allow hal_health_storage_server hal_health_storage_client (fd (use)))
(allow hal_health_storage_server servicemanager (binder (call transfer)))
(allow servicemanager hal_health_storage_server (binder (call transfer)))
(allow servicemanager hal_health_storage_server (dir (search)))
(allow servicemanager hal_health_storage_server (file (read open)))
(allow servicemanager hal_health_storage_server (process (getattr)))
(allow hal_health_storage_client hal_health_storage_hwservice (hwservice_manager (find)))
(allow hal_health_storage_server hal_health_storage_hwservice (hwservice_manager (add find)))
(allow hal_health_storage_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 7 system/sepolicy/prebuilts/api/202404/public/hal_health_storage.te

(neverallow base_typeattr_424 hal_health_storage_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 7 system/sepolicy/prebuilts/api/202404/public/hal_health_storage.te

(neverallow base_typeattr_425 hal_health_storage_hwservice (hwservice_manager (find)))
;;* lme

(allow hal_health_storage_client hal_health_storage_service (service_manager (find)))
(allow hal_health_storage_server hal_health_storage_service (service_manager (add find)))
;;* lmx 8 system/sepolicy/prebuilts/api/202404/public/hal_health_storage.te

(neverallow base_typeattr_424 hal_health_storage_service (service_manager (add)))
;;* lme

;;* lmx 8 system/sepolicy/prebuilts/api/202404/public/hal_health_storage.te

(neverallow base_typeattr_426 hal_health_storage_service (service_manager (find)))
;;* lme

(allow hal_health_storage_server gsi_metadata_file_type (dir (search)))
(allow hal_health_storage_server metadata_file (dir (search)))
(allow hal_health_storage_server gsi_public_metadata_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow hal_health_storage_server proc_bootconfig (file (ioctl read getattr lock map open watch watch_reads)))
(allow hal_health_storage_server proc_cmdline (file (ioctl read getattr lock map open watch watch_reads)))
(allow hal_identity_client hal_identity_server (binder (call transfer)))
(allow hal_identity_server hal_identity_client (binder (transfer)))
(allow hal_identity_client hal_identity_server (fd (use)))
(allow hal_identity_client hal_identity_service (service_manager (find)))
(allow hal_identity_server hal_identity_service (service_manager (add find)))
;;* lmx 4 system/sepolicy/prebuilts/api/202404/public/hal_identity.te

(neverallow base_typeattr_427 hal_identity_service (service_manager (add)))
;;* lme

;;* lmx 4 system/sepolicy/prebuilts/api/202404/public/hal_identity.te

(neverallow base_typeattr_428 hal_identity_service (service_manager (find)))
;;* lme

(allow hal_identity_server servicemanager (binder (call transfer)))
(allow servicemanager hal_identity_server (binder (transfer)))
(allow hal_identity_server servicemanager (fd (use)))
(allow hal_input_classifier_client hal_input_classifier_server (binder (call transfer)))
(allow hal_input_classifier_server hal_input_classifier_client (binder (transfer)))
(allow hal_input_classifier_client hal_input_classifier_server (fd (use)))
(allow hal_input_classifier_client hal_input_classifier_hwservice (hwservice_manager (find)))
(allow hal_input_classifier_server hal_input_classifier_hwservice (hwservice_manager (add find)))
(allow hal_input_classifier_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 4 system/sepolicy/prebuilts/api/202404/public/hal_input_classifier.te

(neverallow base_typeattr_429 hal_input_classifier_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 4 system/sepolicy/prebuilts/api/202404/public/hal_input_classifier.te

(neverallow base_typeattr_430 hal_input_classifier_hwservice (hwservice_manager (find)))
;;* lme

(allow hal_input_processor_client hal_input_processor_server (binder (call transfer)))
(allow hal_input_processor_server hal_input_processor_client (binder (transfer)))
(allow hal_input_processor_client hal_input_processor_server (fd (use)))
(allow hal_input_processor_server servicemanager (binder (call transfer)))
(allow servicemanager hal_input_processor_server (binder (transfer)))
(allow hal_input_processor_server servicemanager (fd (use)))
(allow hal_input_processor_client hal_input_processor_service (service_manager (find)))
(allow hal_input_processor_server hal_input_processor_service (service_manager (add find)))
;;* lmx 5 system/sepolicy/prebuilts/api/202404/public/hal_input_processor.te

(neverallow base_typeattr_431 hal_input_processor_service (service_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/prebuilts/api/202404/public/hal_input_processor.te

(neverallow base_typeattr_432 hal_input_processor_service (service_manager (find)))
;;* lme

(allow hal_input_processor_server dumpstate (fifo_file (write)))
(allow hal_ir_client hal_ir_server (binder (call transfer)))
(allow hal_ir_server hal_ir_client (binder (transfer)))
(allow hal_ir_client hal_ir_server (fd (use)))
(allow hal_ir_server hal_ir_client (binder (call transfer)))
(allow hal_ir_client hal_ir_server (binder (transfer)))
(allow hal_ir_server hal_ir_client (fd (use)))
(allow hal_ir_client hal_ir_service (service_manager (find)))
(allow hal_ir_server hal_ir_service (service_manager (add find)))
;;* lmx 5 system/sepolicy/prebuilts/api/202404/public/hal_ir.te

(neverallow base_typeattr_433 hal_ir_service (service_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/prebuilts/api/202404/public/hal_ir.te

(neverallow base_typeattr_434 hal_ir_service (service_manager (find)))
;;* lme

(allow hal_ir_server servicemanager (binder (call transfer)))
(allow servicemanager hal_ir_server (binder (transfer)))
(allow hal_ir_server servicemanager (fd (use)))
(allow hal_ir_client hal_ir_hwservice (hwservice_manager (find)))
(allow hal_ir_server hal_ir_hwservice (hwservice_manager (add find)))
(allow hal_ir_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 8 system/sepolicy/prebuilts/api/202404/public/hal_ir.te

(neverallow base_typeattr_433 hal_ir_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 8 system/sepolicy/prebuilts/api/202404/public/hal_ir.te

(neverallow base_typeattr_435 hal_ir_hwservice (hwservice_manager (find)))
;;* lme

(allow hal_ivn_client hal_ivn_server (binder (call transfer)))
(allow hal_ivn_server hal_ivn_client (binder (transfer)))
(allow hal_ivn_client hal_ivn_server (fd (use)))
(allow hal_ivn_client hal_ivn_service (service_manager (find)))
(allow hal_ivn_server hal_ivn_service (service_manager (add find)))
;;* lmx 4 system/sepolicy/prebuilts/api/202404/public/hal_ivn.te

(neverallow base_typeattr_436 hal_ivn_service (service_manager (add)))
;;* lme

;;* lmx 4 system/sepolicy/prebuilts/api/202404/public/hal_ivn.te

(neverallow base_typeattr_437 hal_ivn_service (service_manager (find)))
;;* lme

(allow hal_keymaster_client hal_keymaster_server (binder (call transfer)))
(allow hal_keymaster_server hal_keymaster_client (binder (transfer)))
(allow hal_keymaster_client hal_keymaster_server (fd (use)))
(allow hal_keymaster_client hal_keymaster_hwservice (hwservice_manager (find)))
(allow hal_keymaster_server hal_keymaster_hwservice (hwservice_manager (add find)))
(allow hal_keymaster_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 4 system/sepolicy/prebuilts/api/202404/public/hal_keymaster.te

(neverallow base_typeattr_438 hal_keymaster_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 4 system/sepolicy/prebuilts/api/202404/public/hal_keymaster.te

(neverallow base_typeattr_439 hal_keymaster_hwservice (hwservice_manager (find)))
;;* lme

(allow hal_keymaster tee_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
(allow hal_keymaster ion_device (chr_file (ioctl read getattr lock map open watch watch_reads)))
(allow hal_keymint_client hal_keymint_server (binder (call transfer)))
(allow hal_keymint_server hal_keymint_client (binder (transfer)))
(allow hal_keymint_client hal_keymint_server (fd (use)))
(allow hal_keymint_client hal_keymint_service (service_manager (find)))
(allow hal_keymint_server hal_keymint_service (service_manager (add find)))
;;* lmx 3 system/sepolicy/prebuilts/api/202404/public/hal_keymint.te

(neverallow base_typeattr_440 hal_keymint_service (service_manager (add)))
;;* lme

;;* lmx 3 system/sepolicy/prebuilts/api/202404/public/hal_keymint.te

(neverallow base_typeattr_441 hal_keymint_service (service_manager (find)))
;;* lme

(allow hal_keymint_client hal_remotelyprovisionedcomponent_service (service_manager (find)))
(allow hal_keymint_server hal_remotelyprovisionedcomponent_service (service_manager (add find)))
;;* lmx 4 system/sepolicy/prebuilts/api/202404/public/hal_keymint.te

(neverallow base_typeattr_440 hal_remotelyprovisionedcomponent_service (service_manager (add)))
;;* lme

;;* lmx 4 system/sepolicy/prebuilts/api/202404/public/hal_keymint.te

(neverallow base_typeattr_441 hal_remotelyprovisionedcomponent_service (service_manager (find)))
;;* lme

(allow hal_keymint_server servicemanager (binder (call transfer)))
(allow servicemanager hal_keymint_server (binder (transfer)))
(allow hal_keymint_server servicemanager (fd (use)))
(allow hal_keymint_server tee_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
(allow hal_keymint_server ion_device (chr_file (ioctl read getattr lock map open watch watch_reads)))
(allow hal_light_client hal_light_server (binder (call transfer)))
(allow hal_light_server hal_light_client (binder (transfer)))
(allow hal_light_client hal_light_server (fd (use)))
(allow hal_light_server hal_light_client (binder (call transfer)))
(allow hal_light_client hal_light_server (binder (transfer)))
(allow hal_light_server hal_light_client (fd (use)))
(allow hal_light_client hal_light_hwservice (hwservice_manager (find)))
(allow hal_light_server hal_light_hwservice (hwservice_manager (add find)))
(allow hal_light_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 5 system/sepolicy/prebuilts/api/202404/public/hal_light.te

(neverallow base_typeattr_442 hal_light_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/prebuilts/api/202404/public/hal_light.te

(neverallow base_typeattr_443 hal_light_hwservice (hwservice_manager (find)))
;;* lme

(allow hal_light_client hal_light_service (service_manager (find)))
(allow hal_light_server hal_light_service (service_manager (add find)))
;;* lmx 6 system/sepolicy/prebuilts/api/202404/public/hal_light.te

(neverallow base_typeattr_442 hal_light_service (service_manager (add)))
;;* lme

;;* lmx 6 system/sepolicy/prebuilts/api/202404/public/hal_light.te

(neverallow base_typeattr_444 hal_light_service (service_manager (find)))
;;* lme

(allow hal_light_server servicemanager (binder (call transfer)))
(allow servicemanager hal_light_server (binder (transfer)))
(allow hal_light_server servicemanager (fd (use)))
(allow hal_light_client servicemanager (binder (call transfer)))
(allow servicemanager hal_light_client (binder (call transfer)))
(allow servicemanager hal_light_client (dir (search)))
(allow servicemanager hal_light_client (file (read open)))
(allow servicemanager hal_light_client (process (getattr)))
(allow hal_light_server dumpstate (fifo_file (write)))
(allow hal_light sysfs_leds (lnk_file (read)))
(allow hal_light sysfs_leds (file (ioctl read write getattr lock append map open watch watch_reads)))
(allow hal_light sysfs_leds (dir (ioctl read getattr lock open watch watch_reads search)))
(allow hal_lowpan_client hal_lowpan_server (binder (call transfer)))
(allow hal_lowpan_server hal_lowpan_client (binder (transfer)))
(allow hal_lowpan_client hal_lowpan_server (fd (use)))
(allow hal_lowpan_server hal_lowpan_client (binder (call transfer)))
(allow hal_lowpan_client hal_lowpan_server (binder (transfer)))
(allow hal_lowpan_server hal_lowpan_client (fd (use)))
(allow hal_lowpan_client hal_lowpan_hwservice (hwservice_manager (find)))
(allow hal_lowpan_server hal_lowpan_hwservice (hwservice_manager (add find)))
(allow hal_lowpan_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 7 system/sepolicy/prebuilts/api/202404/public/hal_lowpan.te

(neverallow base_typeattr_445 hal_lowpan_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 7 system/sepolicy/prebuilts/api/202404/public/hal_lowpan.te

(neverallow base_typeattr_446 hal_lowpan_hwservice (hwservice_manager (find)))
;;* lme

(allow hal_lowpan_server property_socket (sock_file (write)))
(allow hal_lowpan_server init (unix_stream_socket (connectto)))
(allow hal_lowpan_server lowpan_prop (property_service (set)))
(allow hal_lowpan_server lowpan_prop (file (read getattr map open)))
(allow hal_lowpan_server lowpan_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lmx 20 system/sepolicy/prebuilts/api/202404/public/hal_lowpan.te

(neverallow base_typeattr_447 lowpan_device (chr_file (ioctl read write create setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
;;* lme

(allow hal_macsec_client hal_macsec_server (binder (call transfer)))
(allow hal_macsec_server hal_macsec_client (binder (transfer)))
(allow hal_macsec_client hal_macsec_server (fd (use)))
(allow hal_macsec_server hal_macsec_client (binder (call transfer)))
(allow hal_macsec_client hal_macsec_server (binder (transfer)))
(allow hal_macsec_server hal_macsec_client (fd (use)))
(allow hal_macsec_client hal_macsec_service (service_manager (find)))
(allow hal_macsec_server hal_macsec_service (service_manager (add find)))
;;* lmx 5 system/sepolicy/prebuilts/api/202404/public/hal_macsec.te

(neverallow base_typeattr_448 hal_macsec_service (service_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/prebuilts/api/202404/public/hal_macsec.te

(neverallow base_typeattr_449 hal_macsec_service (service_manager (find)))
;;* lme

(allow hal_macsec_server servicemanager (binder (call transfer)))
(allow servicemanager hal_macsec_server (binder (call transfer)))
(allow servicemanager hal_macsec_server (dir (search)))
(allow servicemanager hal_macsec_server (file (read open)))
(allow servicemanager hal_macsec_server (process (getattr)))
(allow hal_memtrack_client hal_memtrack_server (binder (call transfer)))
(allow hal_memtrack_server hal_memtrack_client (binder (transfer)))
(allow hal_memtrack_client hal_memtrack_server (fd (use)))
(allow hal_memtrack_client hal_memtrack_hwservice (hwservice_manager (find)))
(allow hal_memtrack_server hal_memtrack_hwservice (hwservice_manager (add find)))
(allow hal_memtrack_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 4 system/sepolicy/prebuilts/api/202404/public/hal_memtrack.te

(neverallow base_typeattr_450 hal_memtrack_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 4 system/sepolicy/prebuilts/api/202404/public/hal_memtrack.te

(neverallow base_typeattr_451 hal_memtrack_hwservice (hwservice_manager (find)))
;;* lme

(allow hal_memtrack_client hal_memtrack_service (service_manager (find)))
(allow hal_memtrack_server hal_memtrack_service (service_manager (add find)))
;;* lmx 6 system/sepolicy/prebuilts/api/202404/public/hal_memtrack.te

(neverallow base_typeattr_450 hal_memtrack_service (service_manager (add)))
;;* lme

;;* lmx 6 system/sepolicy/prebuilts/api/202404/public/hal_memtrack.te

(neverallow base_typeattr_452 hal_memtrack_service (service_manager (find)))
;;* lme

(allow hal_memtrack_server servicemanager (binder (call transfer)))
(allow servicemanager hal_memtrack_server (binder (transfer)))
(allow hal_memtrack_server servicemanager (fd (use)))
(allow hal_neuralnetworks_client hal_neuralnetworks_server (binder (call transfer)))
(allow hal_neuralnetworks_server hal_neuralnetworks_client (binder (transfer)))
(allow hal_neuralnetworks_client hal_neuralnetworks_server (fd (use)))
(allow hal_neuralnetworks_server hal_neuralnetworks_client (binder (call transfer)))
(allow hal_neuralnetworks_client hal_neuralnetworks_server (binder (transfer)))
(allow hal_neuralnetworks_server hal_neuralnetworks_client (fd (use)))
(allow hal_neuralnetworks_client hal_neuralnetworks_hwservice (hwservice_manager (find)))
(allow hal_neuralnetworks_server hal_neuralnetworks_hwservice (hwservice_manager (add find)))
(allow hal_neuralnetworks_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 5 system/sepolicy/prebuilts/api/202404/public/hal_neuralnetworks.te

(neverallow base_typeattr_453 hal_neuralnetworks_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/prebuilts/api/202404/public/hal_neuralnetworks.te

(neverallow base_typeattr_454 hal_neuralnetworks_hwservice (hwservice_manager (find)))
;;* lme

(allow hal_neuralnetworks hidl_memory_hwservice (hwservice_manager (find)))
(allow hal_neuralnetworks hal_allocator (fd (use)))
(allow hal_neuralnetworks hal_graphics_mapper_hwservice (hwservice_manager (find)))
(allow hal_neuralnetworks hal_graphics_allocator (fd (use)))
(allow hal_neuralnetworks gpu_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
(allow hal_neuralnetworks gpu_device (dir (ioctl read getattr lock open watch watch_reads search)))
(allow hal_neuralnetworks_server app_data_file (file (read write getattr map)))
(allow hal_neuralnetworks_server privapp_data_file (file (read write getattr map)))
(allow hal_neuralnetworks_server shell_data_file (file (read write getattr map)))
(allow hal_neuralnetworks_server ion_device (chr_file (ioctl read getattr lock map open watch watch_reads)))
(allow hal_neuralnetworks_server storage_file (file (read getattr map)))
(allow hal_neuralnetworks_server apk_data_file (file (read getattr map)))
(allow hal_neuralnetworks_client nnapi_ext_deny_product_prop (file (read getattr map open)))
(allow hal_neuralnetworks_client device_config_nnapi_native_prop (file (read getattr map open)))
;;* lmx 39 system/sepolicy/prebuilts/api/202404/public/hal_neuralnetworks.te

(neverallow base_typeattr_223 nnapi_ext_deny_product_prop (property_service (set)))
;;* lme

(allow hal_neuralnetworks_client hal_neuralnetworks_service (service_manager (find)))
(allow hal_neuralnetworks_server hal_neuralnetworks_service (service_manager (add find)))
;;* lmx 42 system/sepolicy/prebuilts/api/202404/public/hal_neuralnetworks.te

(neverallow base_typeattr_453 hal_neuralnetworks_service (service_manager (add)))
;;* lme

;;* lmx 42 system/sepolicy/prebuilts/api/202404/public/hal_neuralnetworks.te

(neverallow base_typeattr_455 hal_neuralnetworks_service (service_manager (find)))
;;* lme

(allow hal_neuralnetworks_server servicemanager (binder (call transfer)))
(allow servicemanager hal_neuralnetworks_server (binder (transfer)))
(allow hal_neuralnetworks_server servicemanager (fd (use)))
(allow hal_neuralnetworks_server servicemanager (binder (call transfer)))
(allow servicemanager hal_neuralnetworks_server (binder (call transfer)))
(allow servicemanager hal_neuralnetworks_server (dir (search)))
(allow servicemanager hal_neuralnetworks_server (file (read open)))
(allow servicemanager hal_neuralnetworks_server (process (getattr)))
(allow hal_neuralnetworks_server dumpstate (fifo_file (write)))
;;* lmx 16 system/sepolicy/prebuilts/api/202404/public/hal_neverallows.te

(neverallow base_typeattr_456 self (capability (net_admin net_raw)))
(neverallow base_typeattr_456 self (cap_userns (net_admin net_raw)))
;;* lme

;;* lmx 38 system/sepolicy/prebuilts/api/202404/public/hal_neverallows.te

(neverallow base_typeattr_457 domain (udp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind)))
(neverallow base_typeattr_457 domain (rawip_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind)))
;;* lme

;;* lmx 54 system/sepolicy/prebuilts/api/202404/public/hal_neverallows.te

(neverallow base_typeattr_458 domain (tcp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind name_connect)))
;;* lme

;;* lmx 58 system/sepolicy/prebuilts/api/202404/public/hal_neverallows.te

(neverallow hal_uwb_vendor_server self (capability (net_raw)))
(neverallow hal_uwb_vendor_server self (cap_userns (net_raw)))
;;* lme

;;* lmx 62 system/sepolicy/prebuilts/api/202404/public/hal_neverallows.te

(neverallow hal_uwb_vendor_server domain (socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow hal_uwb_vendor_server domain (rawip_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind)))
(neverallow hal_uwb_vendor_server domain (netlink_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow hal_uwb_vendor_server domain (packet_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow hal_uwb_vendor_server domain (key_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow hal_uwb_vendor_server domain (netlink_route_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write nlmsg_readpriv nlmsg_getneigh)))
(neverallow hal_uwb_vendor_server domain (netlink_tcpdiag_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write)))
(neverallow hal_uwb_vendor_server domain (netlink_nflog_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow hal_uwb_vendor_server domain (netlink_xfrm_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write)))
(neverallow hal_uwb_vendor_server domain (netlink_selinux_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow hal_uwb_vendor_server domain (netlink_audit_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write nlmsg_relay nlmsg_readpriv nlmsg_tty_audit)))
(neverallow hal_uwb_vendor_server domain (netlink_dnrt_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow hal_uwb_vendor_server domain (netlink_kobject_uevent_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow hal_uwb_vendor_server domain (tun_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind attach_queue)))
(neverallow hal_uwb_vendor_server domain (netlink_iscsi_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow hal_uwb_vendor_server domain (netlink_fib_lookup_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow hal_uwb_vendor_server domain (netlink_connector_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow hal_uwb_vendor_server domain (netlink_netfilter_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow hal_uwb_vendor_server domain (netlink_scsitransport_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow hal_uwb_vendor_server domain (netlink_rdma_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow hal_uwb_vendor_server domain (netlink_crypto_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow hal_uwb_vendor_server domain (qipcrtr_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow hal_uwb_vendor_server domain (xdp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
;;* lme

;;* lmx 95 system/sepolicy/prebuilts/api/202404/public/hal_neverallows.te

(neverallow base_typeattr_459 base_typeattr_460 (file (execute_no_trans)))
;;* lme

;;* lmx 97 system/sepolicy/prebuilts/api/202404/public/hal_neverallows.te

(neverallow base_typeattr_223 halserverdomain (process (transition)))
;;* lme

;;* lmx 101 system/sepolicy/prebuilts/api/202404/public/hal_neverallows.te

(neverallow base_typeattr_224 halserverdomain (process (dyntransition)))
;;* lme

(allow hal_nfc_client hal_nfc_server (binder (call transfer)))
(allow hal_nfc_server hal_nfc_client (binder (transfer)))
(allow hal_nfc_client hal_nfc_server (fd (use)))
(allow hal_nfc_server hal_nfc_client (binder (call transfer)))
(allow hal_nfc_client hal_nfc_server (binder (transfer)))
(allow hal_nfc_server hal_nfc_client (fd (use)))
(allow hal_nfc_server servicemanager (binder (call transfer)))
(allow servicemanager hal_nfc_server (binder (transfer)))
(allow hal_nfc_server servicemanager (fd (use)))
(allow hal_nfc_client hal_nfc_hwservice (hwservice_manager (find)))
(allow hal_nfc_server hal_nfc_hwservice (hwservice_manager (add find)))
(allow hal_nfc_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 6 system/sepolicy/prebuilts/api/202404/public/hal_nfc.te

(neverallow base_typeattr_461 hal_nfc_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 6 system/sepolicy/prebuilts/api/202404/public/hal_nfc.te

(neverallow base_typeattr_462 hal_nfc_hwservice (hwservice_manager (find)))
;;* lme

(allow hal_nfc_client hal_nfc_service (service_manager (find)))
(allow hal_nfc_server hal_nfc_service (service_manager (add find)))
;;* lmx 7 system/sepolicy/prebuilts/api/202404/public/hal_nfc.te

(neverallow base_typeattr_461 hal_nfc_service (service_manager (add)))
;;* lme

;;* lmx 7 system/sepolicy/prebuilts/api/202404/public/hal_nfc.te

(neverallow base_typeattr_463 hal_nfc_service (service_manager (find)))
;;* lme

(allow hal_nfc property_socket (sock_file (write)))
(allow hal_nfc init (unix_stream_socket (connectto)))
(allow hal_nfc nfc_prop (property_service (set)))
(allow hal_nfc nfc_prop (file (read getattr map open)))
(allow hal_nfc nfc_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
(allow hal_nlinterceptor_client hal_nlinterceptor_server (binder (call transfer)))
(allow hal_nlinterceptor_server hal_nlinterceptor_client (binder (transfer)))
(allow hal_nlinterceptor_client hal_nlinterceptor_server (fd (use)))
(allow hal_nlinterceptor_client hal_nlinterceptor_service (service_manager (find)))
(allow hal_nlinterceptor_server hal_nlinterceptor_service (service_manager (add find)))
;;* lmx 3 system/sepolicy/prebuilts/api/202404/public/hal_nlinterceptor.te

(neverallow base_typeattr_464 hal_nlinterceptor_service (service_manager (add)))
;;* lme

;;* lmx 3 system/sepolicy/prebuilts/api/202404/public/hal_nlinterceptor.te

(neverallow base_typeattr_465 hal_nlinterceptor_service (service_manager (find)))
;;* lme

(allow hal_nlinterceptor servicemanager (binder (call transfer)))
(allow servicemanager hal_nlinterceptor (binder (transfer)))
(allow hal_nlinterceptor servicemanager (fd (use)))
(allow hal_nlinterceptor self (capability (net_admin)))
(allow hal_nlinterceptor self (cap_userns (net_admin)))
(allow hal_nlinterceptor self (netlink_generic_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
(allow hal_nlinterceptor self (netlink_route_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown nlmsg_write nlmsg_readpriv)))
(allow hal_oemlock_client hal_oemlock_server (binder (call transfer)))
(allow hal_oemlock_server hal_oemlock_client (binder (transfer)))
(allow hal_oemlock_client hal_oemlock_server (fd (use)))
(allow hal_oemlock_client hal_oemlock_hwservice (hwservice_manager (find)))
(allow hal_oemlock_server hal_oemlock_hwservice (hwservice_manager (add find)))
(allow hal_oemlock_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 4 system/sepolicy/prebuilts/api/202404/public/hal_oemlock.te

(neverallow base_typeattr_466 hal_oemlock_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 4 system/sepolicy/prebuilts/api/202404/public/hal_oemlock.te

(neverallow base_typeattr_467 hal_oemlock_hwservice (hwservice_manager (find)))
;;* lme

(allow hal_oemlock_client hal_oemlock_service (service_manager (find)))
(allow hal_oemlock_server hal_oemlock_service (service_manager (add find)))
;;* lmx 5 system/sepolicy/prebuilts/api/202404/public/hal_oemlock.te

(neverallow base_typeattr_466 hal_oemlock_service (service_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/prebuilts/api/202404/public/hal_oemlock.te

(neverallow base_typeattr_468 hal_oemlock_service (service_manager (find)))
;;* lme

(allow hal_oemlock_server servicemanager (binder (call transfer)))
(allow servicemanager hal_oemlock_server (binder (transfer)))
(allow hal_oemlock_server servicemanager (fd (use)))
(allow hal_omx_server binderservicedomain (binder (call transfer)))
(allow binderservicedomain hal_omx_server (binder (transfer)))
(allow hal_omx_server binderservicedomain (fd (use)))
(allow hal_omx_server base_typeattr_369 (binder (call transfer)))
(allow base_typeattr_369 hal_omx_server (binder (transfer)))
(allow hal_omx_server base_typeattr_369 (fd (use)))
(allow hal_omx_server hal_graphics_composer (fd (use)))
(allow hal_omx_server ion_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
(allow hal_omx_server hal_camera (fd (use)))
(allow hal_omx_server anr_data_file (file (append)))
(allow hal_omx_server dumpstate (fd (use)))
(allow hal_omx_server incidentd (fd (use)))
(allow hal_omx_server dumpstate (fifo_file (write append)))
(allow hal_omx_server incidentd (fifo_file (write append)))
(allow hal_omx_server system_server (fifo_file (write append)))
(allow hal_omx_server tombstoned (unix_stream_socket (connectto)))
(allow hal_omx_server tombstoned (fd (use)))
(allow hal_omx_server tombstoned_crash_socket (sock_file (write)))
(allow hal_omx_server tombstone_data_file (file (append)))
(allow hal_omx_server bufferhubd (fd (use)))
(allow hal_omx_client hal_omx_hwservice (hwservice_manager (find)))
(allow hal_omx_server hal_omx_hwservice (hwservice_manager (add find)))
(allow hal_omx_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 21 system/sepolicy/prebuilts/api/202404/public/hal_omx.te

(neverallow base_typeattr_469 hal_omx_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 21 system/sepolicy/prebuilts/api/202404/public/hal_omx.te

(neverallow base_typeattr_470 hal_omx_hwservice (hwservice_manager (find)))
;;* lme

(allow hal_omx_client hidl_token_hwservice (hwservice_manager (find)))
(allow hal_omx_client media_variant_prop (file (read getattr map open)))
(allow hal_omx_server media_variant_prop (file (read getattr map open)))
(allow hal_omx_client hal_omx_server (binder (call transfer)))
(allow hal_omx_server hal_omx_client (binder (transfer)))
(allow hal_omx_client hal_omx_server (fd (use)))
(allow hal_omx_server hal_omx_client (binder (call transfer)))
(allow hal_omx_client hal_omx_server (binder (transfer)))
(allow hal_omx_server hal_omx_client (fd (use)))
;;* lmx 37 system/sepolicy/prebuilts/api/202404/public/hal_omx.te

(neverallow hal_omx_server fs_type (file (execute_no_trans)))
(neverallow hal_omx_server file_type (file (execute_no_trans)))
;;* lme

;;* lmx 49 system/sepolicy/prebuilts/api/202404/public/hal_omx.te

(neverallow hal_omx_server domain (udp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind)))
(neverallow hal_omx_server domain (rawip_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind)))
;;* lme

;;* lmx 50 system/sepolicy/prebuilts/api/202404/public/hal_omx.te

(neverallow hal_omx_server domain (tcp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind name_connect)))
;;* lme

(allow hal_power_client hal_power_server (binder (call transfer)))
(allow hal_power_server hal_power_client (binder (transfer)))
(allow hal_power_client hal_power_server (fd (use)))
(allow hal_power_server hal_power_client (binder (call transfer)))
(allow hal_power_client hal_power_server (binder (transfer)))
(allow hal_power_server hal_power_client (fd (use)))
(allow hal_power_client hal_power_hwservice (hwservice_manager (find)))
(allow hal_power_server hal_power_hwservice (hwservice_manager (add find)))
(allow hal_power_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 5 system/sepolicy/prebuilts/api/202404/public/hal_power.te

(neverallow base_typeattr_471 hal_power_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/prebuilts/api/202404/public/hal_power.te

(neverallow base_typeattr_472 hal_power_hwservice (hwservice_manager (find)))
;;* lme

(allow hal_power_client hal_power_service (service_manager (find)))
(allow hal_power_server hal_power_service (service_manager (add find)))
;;* lmx 6 system/sepolicy/prebuilts/api/202404/public/hal_power.te

(neverallow base_typeattr_471 hal_power_service (service_manager (add)))
;;* lme

;;* lmx 6 system/sepolicy/prebuilts/api/202404/public/hal_power.te

(neverallow base_typeattr_473 hal_power_service (service_manager (find)))
;;* lme

(allow hal_power_server servicemanager (binder (call transfer)))
(allow servicemanager hal_power_server (binder (transfer)))
(allow hal_power_server servicemanager (fd (use)))
(allow hal_power_client servicemanager (binder (call transfer)))
(allow servicemanager hal_power_client (binder (transfer)))
(allow hal_power_client servicemanager (fd (use)))
(allow hal_power_stats_client hal_power_stats_server (binder (call transfer)))
(allow hal_power_stats_server hal_power_stats_client (binder (transfer)))
(allow hal_power_stats_client hal_power_stats_server (fd (use)))
(allow hal_power_stats_server hal_power_stats_client (binder (call transfer)))
(allow hal_power_stats_client hal_power_stats_server (binder (transfer)))
(allow hal_power_stats_server hal_power_stats_client (fd (use)))
(allow hal_power_stats_client hal_power_stats_hwservice (hwservice_manager (find)))
(allow hal_power_stats_server hal_power_stats_hwservice (hwservice_manager (add find)))
(allow hal_power_stats_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 5 system/sepolicy/prebuilts/api/202404/public/hal_power_stats.te

(neverallow base_typeattr_474 hal_power_stats_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/prebuilts/api/202404/public/hal_power_stats.te

(neverallow base_typeattr_475 hal_power_stats_hwservice (hwservice_manager (find)))
;;* lme

(allow hal_power_stats_client hal_power_stats_service (service_manager (find)))
(allow hal_power_stats_server hal_power_stats_service (service_manager (add find)))
;;* lmx 6 system/sepolicy/prebuilts/api/202404/public/hal_power_stats.te

(neverallow base_typeattr_474 hal_power_stats_service (service_manager (add)))
;;* lme

;;* lmx 6 system/sepolicy/prebuilts/api/202404/public/hal_power_stats.te

(neverallow base_typeattr_476 hal_power_stats_service (service_manager (find)))
;;* lme

(allow hal_power_stats_server servicemanager (binder (call transfer)))
(allow servicemanager hal_power_stats_server (binder (transfer)))
(allow hal_power_stats_server servicemanager (fd (use)))
(allow hal_power_stats_client servicemanager (binder (call transfer)))
(allow servicemanager hal_power_stats_client (binder (transfer)))
(allow hal_power_stats_client servicemanager (fd (use)))
(allow hal_rebootescrow_client hal_rebootescrow_server (binder (call transfer)))
(allow hal_rebootescrow_server hal_rebootescrow_client (binder (transfer)))
(allow hal_rebootescrow_client hal_rebootescrow_server (fd (use)))
(allow hal_rebootescrow_client hal_rebootescrow_service (service_manager (find)))
(allow hal_rebootescrow_server hal_rebootescrow_service (service_manager (add find)))
;;* lmx 4 system/sepolicy/prebuilts/api/202404/public/hal_rebootescrow.te

(neverallow base_typeattr_477 hal_rebootescrow_service (service_manager (add)))
;;* lme

;;* lmx 4 system/sepolicy/prebuilts/api/202404/public/hal_rebootescrow.te

(neverallow base_typeattr_478 hal_rebootescrow_service (service_manager (find)))
;;* lme

(allow hal_rebootescrow_server servicemanager (binder (call transfer)))
(allow servicemanager hal_rebootescrow_server (binder (call transfer)))
(allow servicemanager hal_rebootescrow_server (dir (search)))
(allow servicemanager hal_rebootescrow_server (file (read open)))
(allow servicemanager hal_rebootescrow_server (process (getattr)))
(allow hal_remoteaccess_client hal_remoteaccess_server (binder (call transfer)))
(allow hal_remoteaccess_server hal_remoteaccess_client (binder (transfer)))
(allow hal_remoteaccess_client hal_remoteaccess_server (fd (use)))
(allow hal_remoteaccess_server hal_remoteaccess_client (binder (call transfer)))
(allow hal_remoteaccess_client hal_remoteaccess_server (binder (transfer)))
(allow hal_remoteaccess_server hal_remoteaccess_client (fd (use)))
(allow hal_remoteaccess_client hal_remoteaccess_service (service_manager (find)))
(allow hal_remoteaccess_server hal_remoteaccess_service (service_manager (add find)))
;;* lmx 5 system/sepolicy/prebuilts/api/202404/public/hal_remoteaccess.te

(neverallow base_typeattr_479 hal_remoteaccess_service (service_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/prebuilts/api/202404/public/hal_remoteaccess.te

(neverallow base_typeattr_480 hal_remoteaccess_service (service_manager (find)))
;;* lme

(allow hal_remotelyprovisionedcomponent_avf_client hal_remotelyprovisionedcomponent_avf_server (binder (call transfer)))
(allow hal_remotelyprovisionedcomponent_avf_server hal_remotelyprovisionedcomponent_avf_client (binder (transfer)))
(allow hal_remotelyprovisionedcomponent_avf_client hal_remotelyprovisionedcomponent_avf_server (fd (use)))
(allow hal_remotelyprovisionedcomponent_avf_client hal_remotelyprovisionedcomponent_avf_service (service_manager (find)))
(allow hal_remotelyprovisionedcomponent_avf_server hal_remotelyprovisionedcomponent_avf_service (service_manager (add find)))
;;* lmx 5 system/sepolicy/prebuilts/api/202404/public/hal_remotelyprovisionedcomponent_avf.te

(neverallow base_typeattr_481 hal_remotelyprovisionedcomponent_avf_service (service_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/prebuilts/api/202404/public/hal_remotelyprovisionedcomponent_avf.te

(neverallow base_typeattr_482 hal_remotelyprovisionedcomponent_avf_service (service_manager (find)))
;;* lme

(allow hal_remotelyprovisionedcomponent_avf_server servicemanager (binder (call transfer)))
(allow servicemanager hal_remotelyprovisionedcomponent_avf_server (binder (call transfer)))
(allow servicemanager hal_remotelyprovisionedcomponent_avf_server (dir (search)))
(allow servicemanager hal_remotelyprovisionedcomponent_avf_server (file (read open)))
(allow servicemanager hal_remotelyprovisionedcomponent_avf_server (process (getattr)))
(allow hal_secretkeeper_client hal_secretkeeper_server (binder (call transfer)))
(allow hal_secretkeeper_server hal_secretkeeper_client (binder (transfer)))
(allow hal_secretkeeper_client hal_secretkeeper_server (fd (use)))
(allow hal_secretkeeper_client hal_secretkeeper_service (service_manager (find)))
(allow hal_secretkeeper_server hal_secretkeeper_service (service_manager (add find)))
;;* lmx 5 system/sepolicy/prebuilts/api/202404/public/hal_secretkeeper.te

(neverallow base_typeattr_483 hal_secretkeeper_service (service_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/prebuilts/api/202404/public/hal_secretkeeper.te

(neverallow base_typeattr_484 hal_secretkeeper_service (service_manager (find)))
;;* lme

(allow hal_secretkeeper_server servicemanager (binder (call transfer)))
(allow servicemanager hal_secretkeeper_server (binder (call transfer)))
(allow servicemanager hal_secretkeeper_server (dir (search)))
(allow servicemanager hal_secretkeeper_server (file (read open)))
(allow servicemanager hal_secretkeeper_server (process (getattr)))
(allow hal_secretkeeper_client servicemanager (binder (call transfer)))
(allow servicemanager hal_secretkeeper_client (binder (call transfer)))
(allow servicemanager hal_secretkeeper_client (dir (search)))
(allow servicemanager hal_secretkeeper_client (file (read open)))
(allow servicemanager hal_secretkeeper_client (process (getattr)))
(allow hal_secretkeeper_server tee_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
(allow hal_secure_element_client hal_secure_element_server (binder (call transfer)))
(allow hal_secure_element_server hal_secure_element_client (binder (transfer)))
(allow hal_secure_element_client hal_secure_element_server (fd (use)))
(allow hal_secure_element_server hal_secure_element_client (binder (call transfer)))
(allow hal_secure_element_client hal_secure_element_server (binder (transfer)))
(allow hal_secure_element_server hal_secure_element_client (fd (use)))
(allow hal_secure_element_client hal_secure_element_hwservice (hwservice_manager (find)))
(allow hal_secure_element_server hal_secure_element_hwservice (hwservice_manager (add find)))
(allow hal_secure_element_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 5 system/sepolicy/prebuilts/api/202404/public/hal_secure_element.te

(neverallow base_typeattr_485 hal_secure_element_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/prebuilts/api/202404/public/hal_secure_element.te

(neverallow base_typeattr_486 hal_secure_element_hwservice (hwservice_manager (find)))
;;* lme

(allow hal_secure_element_client hal_secure_element_service (service_manager (find)))
(allow hal_secure_element_server hal_secure_element_service (service_manager (add find)))
;;* lmx 6 system/sepolicy/prebuilts/api/202404/public/hal_secure_element.te

(neverallow base_typeattr_485 hal_secure_element_service (service_manager (add)))
;;* lme

;;* lmx 6 system/sepolicy/prebuilts/api/202404/public/hal_secure_element.te

(neverallow base_typeattr_487 hal_secure_element_service (service_manager (find)))
;;* lme

(allow hal_secure_element_server servicemanager (binder (call transfer)))
(allow servicemanager hal_secure_element_server (binder (call transfer)))
(allow servicemanager hal_secure_element_server (dir (search)))
(allow servicemanager hal_secure_element_server (file (read open)))
(allow servicemanager hal_secure_element_server (process (getattr)))
(allow hal_secure_element_client hal_secure_element_service (service_manager (find)))
(allow hal_sensors_client hal_sensors_server (binder (call transfer)))
(allow hal_sensors_server hal_sensors_client (binder (transfer)))
(allow hal_sensors_client hal_sensors_server (fd (use)))
(allow hal_sensors_client hal_sensors_hwservice (hwservice_manager (find)))
(allow hal_sensors_server hal_sensors_hwservice (hwservice_manager (add find)))
(allow hal_sensors_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 4 system/sepolicy/prebuilts/api/202404/public/hal_sensors.te

(neverallow base_typeattr_488 hal_sensors_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 4 system/sepolicy/prebuilts/api/202404/public/hal_sensors.te

(neverallow base_typeattr_489 hal_sensors_hwservice (hwservice_manager (find)))
;;* lme

(allow hal_sensors base_typeattr_369 (fd (use)))
(allow hal_sensors hal_allocator (fd (use)))
(allow hal_sensors self (capability (sys_nice)))
(allow hal_sensors self (cap_userns (sys_nice)))
(allow hal_sensors_server hal_sensors_service (service_manager (add find)))
;;* lmx 16 system/sepolicy/prebuilts/api/202404/public/hal_sensors.te

(neverallow base_typeattr_488 hal_sensors_service (service_manager (add)))
;;* lme

(allow hal_sensors_server servicemanager (binder (call transfer)))
(allow servicemanager hal_sensors_server (binder (transfer)))
(allow hal_sensors_server servicemanager (fd (use)))
(allow hal_sensors_client hal_sensors_service (service_manager (find)))
(allow hal_telephony_client hal_telephony_server (binder (call transfer)))
(allow hal_telephony_server hal_telephony_client (binder (transfer)))
(allow hal_telephony_client hal_telephony_server (fd (use)))
(allow hal_telephony_server hal_telephony_client (binder (call transfer)))
(allow hal_telephony_client hal_telephony_server (binder (transfer)))
(allow hal_telephony_server hal_telephony_client (fd (use)))
(allow hal_telephony_client hal_telephony_hwservice (hwservice_manager (find)))
(allow hal_telephony_server hal_telephony_hwservice (hwservice_manager (add find)))
(allow hal_telephony_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 5 system/sepolicy/prebuilts/api/202404/public/hal_telephony.te

(neverallow base_typeattr_490 hal_telephony_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/prebuilts/api/202404/public/hal_telephony.te

(neverallow base_typeattr_491 hal_telephony_hwservice (hwservice_manager (find)))
;;* lme

(allow hal_telephony_client hal_radio_service (service_manager (find)))
(allow hal_telephony_server hal_radio_service (service_manager (add find)))
;;* lmx 6 system/sepolicy/prebuilts/api/202404/public/hal_telephony.te

(neverallow base_typeattr_490 hal_radio_service (service_manager (add)))
;;* lme

;;* lmx 6 system/sepolicy/prebuilts/api/202404/public/hal_telephony.te

(neverallow base_typeattr_492 hal_radio_service (service_manager (find)))
;;* lme

(allowx hal_telephony_server self (ioctl udp_socket (0x6900 0x6902)))
(allowx hal_telephony_server self (ioctl udp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(allowx hal_telephony_server self (ioctl udp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(allow hal_telephony_server self (netlink_route_socket (nlmsg_write)))
(allow hal_telephony_server self (capability (setgid setuid setpcap net_admin net_raw)))
(allow hal_telephony_server self (cap_userns (setgid setuid setpcap net_admin net_raw)))
(allow hal_telephony_server cgroup (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
(allow hal_telephony_server cgroup (file (ioctl read getattr lock map open watch watch_reads)))
(allow hal_telephony_server cgroup (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow hal_telephony_server cgroup_v2 (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
(allow hal_telephony_server cgroup_v2 (file (ioctl read getattr lock map open watch watch_reads)))
(allow hal_telephony_server cgroup_v2 (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow hal_telephony_server radio_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
(allow hal_telephony_server radio_device (blk_file (ioctl read getattr lock map open watch watch_reads)))
(allow hal_telephony_server efs_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
(allow hal_telephony_server efs_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow hal_telephony_server vendor_shell_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
(allow hal_telephony_server bluetooth_efs_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow hal_telephony_server bluetooth_efs_file (dir (ioctl read getattr lock open watch watch_reads search)))
(allow hal_telephony_server telephony_config_prop (file (read getattr map open)))
(allow hal_telephony_server property_socket (sock_file (write)))
(allow hal_telephony_server init (unix_stream_socket (connectto)))
(allow hal_telephony_server radio_control_prop (property_service (set)))
(allow hal_telephony_server radio_control_prop (file (read getattr map open)))
(allow hal_telephony_server property_socket (sock_file (write)))
(allow hal_telephony_server init (unix_stream_socket (connectto)))
(allow hal_telephony_server radio_prop (property_service (set)))
(allow hal_telephony_server radio_prop (file (read getattr map open)))
(allow hal_telephony_server property_socket (sock_file (write)))
(allow hal_telephony_server init (unix_stream_socket (connectto)))
(allow hal_telephony_server telephony_status_prop (property_service (set)))
(allow hal_telephony_server telephony_status_prop (file (read getattr map open)))
(allow hal_telephony_server tty_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
(allow hal_telephony_server self (netlink_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
(allow hal_telephony_server self (netlink_generic_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
(allow hal_telephony_server self (netlink_kobject_uevent_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
(allow hal_telephony_server sysfs_wake_lock (file (ioctl read write getattr lock append map open watch watch_reads)))
(allow hal_telephony_server self (capability2 (block_suspend)))
(allow hal_telephony_server self (cap2_userns (block_suspend)))
(allow hal_telephony_server system_suspend_server (binder (call transfer)))
(allow system_suspend_server hal_telephony_server (binder (transfer)))
(allow hal_telephony_server system_suspend_server (fd (use)))
(allow hal_telephony_server system_suspend_hwservice (hwservice_manager (find)))
(allow hal_telephony_server hwservicemanager (binder (call transfer)))
(allow hwservicemanager hal_telephony_server (binder (call transfer)))
(allow hwservicemanager hal_telephony_server (dir (search)))
(allow hwservicemanager hal_telephony_server (file (read map open)))
(allow hwservicemanager hal_telephony_server (process (getattr)))
(allow hal_telephony_server hwservicemanager_prop (file (read getattr map open)))
(allow hal_telephony_server hidl_manager_hwservice (hwservice_manager (find)))
(allow hal_telephony_server hal_system_suspend_service (service_manager (find)))
(allow hal_telephony_server servicemanager (binder (call transfer)))
(allow servicemanager hal_telephony_server (binder (call transfer)))
(allow servicemanager hal_telephony_server (dir (search)))
(allow servicemanager hal_telephony_server (file (read open)))
(allow servicemanager hal_telephony_server (process (getattr)))
(allow hal_telephony_server proc_net_type (dir (ioctl read getattr lock open watch watch_reads search)))
(allow hal_telephony_server proc_net_type (file (ioctl read getattr lock map open watch watch_reads)))
(allow hal_telephony_server proc_net_type (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow hal_telephony_server sysfs_type (dir (ioctl read getattr lock open watch watch_reads search)))
(allow hal_telephony_server sysfs_type (file (ioctl read getattr lock map open watch watch_reads)))
(allow hal_telephony_server sysfs_type (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow hal_telephony_server self (socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
(allow hal_telephony_server hal_telephony_server (binder (call transfer)))
(allow hal_telephony_server hal_telephony_server (binder (transfer)))
(allow hal_telephony_server hal_telephony_server (fd (use)))
(allow hal_tetheroffload_client hal_tetheroffload_server (binder (call transfer)))
(allow hal_tetheroffload_server hal_tetheroffload_client (binder (transfer)))
(allow hal_tetheroffload_client hal_tetheroffload_server (fd (use)))
(allow hal_tetheroffload_server hal_tetheroffload_client (binder (call transfer)))
(allow hal_tetheroffload_client hal_tetheroffload_server (binder (transfer)))
(allow hal_tetheroffload_server hal_tetheroffload_client (fd (use)))
(allow hal_tetheroffload_client hal_tetheroffload_hwservice (hwservice_manager (find)))
(allow hal_tetheroffload_server hal_tetheroffload_hwservice (hwservice_manager (add find)))
(allow hal_tetheroffload_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 5 system/sepolicy/prebuilts/api/202404/public/hal_tetheroffload.te

(neverallow base_typeattr_493 hal_tetheroffload_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/prebuilts/api/202404/public/hal_tetheroffload.te

(neverallow base_typeattr_494 hal_tetheroffload_hwservice (hwservice_manager (find)))
;;* lme

(allow hal_tetheroffload_client hal_tetheroffload_service (service_manager (find)))
(allow hal_tetheroffload_server hal_tetheroffload_service (service_manager (add find)))
;;* lmx 6 system/sepolicy/prebuilts/api/202404/public/hal_tetheroffload.te

(neverallow base_typeattr_493 hal_tetheroffload_service (service_manager (add)))
;;* lme

;;* lmx 6 system/sepolicy/prebuilts/api/202404/public/hal_tetheroffload.te

(neverallow base_typeattr_495 hal_tetheroffload_service (service_manager (find)))
;;* lme

(allow hal_tetheroffload_server servicemanager (binder (call transfer)))
(allow servicemanager hal_tetheroffload_server (binder (call transfer)))
(allow servicemanager hal_tetheroffload_server (dir (search)))
(allow servicemanager hal_tetheroffload_server (file (read open)))
(allow servicemanager hal_tetheroffload_server (process (getattr)))
(allow hal_tetheroffload_server hal_tetheroffload_client (netlink_netfilter_socket (read write getattr setopt)))
(allow hal_thermal_client hal_thermal_server (binder (call transfer)))
(allow hal_thermal_server hal_thermal_client (binder (transfer)))
(allow hal_thermal_client hal_thermal_server (fd (use)))
(allow hal_thermal_server hal_thermal_client (binder (call transfer)))
(allow hal_thermal_client hal_thermal_server (binder (transfer)))
(allow hal_thermal_server hal_thermal_client (fd (use)))
(allow hal_thermal_client hal_thermal_hwservice (hwservice_manager (find)))
(allow hal_thermal_server hal_thermal_hwservice (hwservice_manager (add find)))
(allow hal_thermal_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 5 system/sepolicy/prebuilts/api/202404/public/hal_thermal.te

(neverallow base_typeattr_496 hal_thermal_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/prebuilts/api/202404/public/hal_thermal.te

(neverallow base_typeattr_497 hal_thermal_hwservice (hwservice_manager (find)))
;;* lme

(allow hal_thermal_client hal_thermal_service (service_manager (find)))
(allow hal_thermal_server hal_thermal_service (service_manager (add find)))
;;* lmx 6 system/sepolicy/prebuilts/api/202404/public/hal_thermal.te

(neverallow base_typeattr_496 hal_thermal_service (service_manager (add)))
;;* lme

;;* lmx 6 system/sepolicy/prebuilts/api/202404/public/hal_thermal.te

(neverallow base_typeattr_498 hal_thermal_service (service_manager (find)))
;;* lme

(allow hal_thermal_server hal_thermal_service (service_manager (add find)))
;;* lmx 8 system/sepolicy/prebuilts/api/202404/public/hal_thermal.te

(neverallow base_typeattr_496 hal_thermal_service (service_manager (add)))
;;* lme

(allow hal_thermal_server servicemanager (binder (call transfer)))
(allow servicemanager hal_thermal_server (binder (transfer)))
(allow hal_thermal_server servicemanager (fd (use)))
(allow hal_thermal_client servicemanager (binder (call transfer)))
(allow servicemanager hal_thermal_client (binder (transfer)))
(allow hal_thermal_client servicemanager (fd (use)))
(allow hal_threadnetwork_client hal_threadnetwork_server (binder (call transfer)))
(allow hal_threadnetwork_server hal_threadnetwork_client (binder (transfer)))
(allow hal_threadnetwork_client hal_threadnetwork_server (fd (use)))
(allow hal_threadnetwork_server hal_threadnetwork_client (binder (call transfer)))
(allow hal_threadnetwork_client hal_threadnetwork_server (binder (transfer)))
(allow hal_threadnetwork_server hal_threadnetwork_client (fd (use)))
(allow hal_threadnetwork_client hal_threadnetwork_service (service_manager (find)))
(allow hal_threadnetwork_server hal_threadnetwork_service (service_manager (add find)))
;;* lmx 4 system/sepolicy/prebuilts/api/202404/public/hal_threadnetwork.te

(neverallow base_typeattr_499 hal_threadnetwork_service (service_manager (add)))
;;* lme

;;* lmx 4 system/sepolicy/prebuilts/api/202404/public/hal_threadnetwork.te

(neverallow base_typeattr_500 hal_threadnetwork_service (service_manager (find)))
;;* lme

(allow hal_threadnetwork_server servicemanager (binder (call transfer)))
(allow servicemanager hal_threadnetwork_server (binder (transfer)))
(allow hal_threadnetwork_server servicemanager (fd (use)))
(allow hal_threadnetwork_client servicemanager (binder (call transfer)))
(allow servicemanager hal_threadnetwork_client (binder (transfer)))
(allow hal_threadnetwork_client servicemanager (fd (use)))
(allow hal_tv_cec_client hal_tv_cec_server (binder (call transfer)))
(allow hal_tv_cec_server hal_tv_cec_client (binder (transfer)))
(allow hal_tv_cec_client hal_tv_cec_server (fd (use)))
(allow hal_tv_cec_server hal_tv_cec_client (binder (call transfer)))
(allow hal_tv_cec_client hal_tv_cec_server (binder (transfer)))
(allow hal_tv_cec_server hal_tv_cec_client (fd (use)))
(allow hal_tv_cec_client hal_tv_cec_hwservice (hwservice_manager (find)))
(allow hal_tv_cec_server hal_tv_cec_hwservice (hwservice_manager (add find)))
(allow hal_tv_cec_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 5 system/sepolicy/prebuilts/api/202404/public/hal_tv_cec.te

(neverallow base_typeattr_501 hal_tv_cec_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/prebuilts/api/202404/public/hal_tv_cec.te

(neverallow base_typeattr_502 hal_tv_cec_hwservice (hwservice_manager (find)))
;;* lme

(allow hal_tv_hdmi_cec_client hal_tv_hdmi_cec_server (binder (call transfer)))
(allow hal_tv_hdmi_cec_server hal_tv_hdmi_cec_client (binder (transfer)))
(allow hal_tv_hdmi_cec_client hal_tv_hdmi_cec_server (fd (use)))
(allow hal_tv_hdmi_cec_server hal_tv_hdmi_cec_client (binder (call transfer)))
(allow hal_tv_hdmi_cec_client hal_tv_hdmi_cec_server (binder (transfer)))
(allow hal_tv_hdmi_cec_server hal_tv_hdmi_cec_client (fd (use)))
(allow hal_tv_hdmi_cec_client servicemanager (binder (call transfer)))
(allow servicemanager hal_tv_hdmi_cec_client (binder (call transfer)))
(allow servicemanager hal_tv_hdmi_cec_client (dir (search)))
(allow servicemanager hal_tv_hdmi_cec_client (file (read open)))
(allow servicemanager hal_tv_hdmi_cec_client (process (getattr)))
(allow hal_tv_hdmi_cec_server servicemanager (binder (call transfer)))
(allow servicemanager hal_tv_hdmi_cec_server (binder (call transfer)))
(allow servicemanager hal_tv_hdmi_cec_server (dir (search)))
(allow servicemanager hal_tv_hdmi_cec_server (file (read open)))
(allow servicemanager hal_tv_hdmi_cec_server (process (getattr)))
(allow hal_tv_hdmi_cec_client hal_tv_hdmi_cec_service (service_manager (find)))
(allow hal_tv_hdmi_cec_server hal_tv_hdmi_cec_service (service_manager (add find)))
;;* lmx 7 system/sepolicy/prebuilts/api/202404/public/hal_tv_hdmi_cec.te

(neverallow base_typeattr_503 hal_tv_hdmi_cec_service (service_manager (add)))
;;* lme

;;* lmx 7 system/sepolicy/prebuilts/api/202404/public/hal_tv_hdmi_cec.te

(neverallow base_typeattr_504 hal_tv_hdmi_cec_service (service_manager (find)))
;;* lme

(allow hal_tv_hdmi_connection_client hal_tv_hdmi_connection_server (binder (call transfer)))
(allow hal_tv_hdmi_connection_server hal_tv_hdmi_connection_client (binder (transfer)))
(allow hal_tv_hdmi_connection_client hal_tv_hdmi_connection_server (fd (use)))
(allow hal_tv_hdmi_connection_server hal_tv_hdmi_connection_client (binder (call transfer)))
(allow hal_tv_hdmi_connection_client hal_tv_hdmi_connection_server (binder (transfer)))
(allow hal_tv_hdmi_connection_server hal_tv_hdmi_connection_client (fd (use)))
(allow hal_tv_hdmi_connection_client servicemanager (binder (call transfer)))
(allow servicemanager hal_tv_hdmi_connection_client (binder (call transfer)))
(allow servicemanager hal_tv_hdmi_connection_client (dir (search)))
(allow servicemanager hal_tv_hdmi_connection_client (file (read open)))
(allow servicemanager hal_tv_hdmi_connection_client (process (getattr)))
(allow hal_tv_hdmi_connection_server servicemanager (binder (call transfer)))
(allow servicemanager hal_tv_hdmi_connection_server (binder (call transfer)))
(allow servicemanager hal_tv_hdmi_connection_server (dir (search)))
(allow servicemanager hal_tv_hdmi_connection_server (file (read open)))
(allow servicemanager hal_tv_hdmi_connection_server (process (getattr)))
(allow hal_tv_hdmi_connection_client hal_tv_hdmi_connection_service (service_manager (find)))
(allow hal_tv_hdmi_connection_server hal_tv_hdmi_connection_service (service_manager (add find)))
;;* lmx 7 system/sepolicy/prebuilts/api/202404/public/hal_tv_hdmi_connection.te

(neverallow base_typeattr_505 hal_tv_hdmi_connection_service (service_manager (add)))
;;* lme

;;* lmx 7 system/sepolicy/prebuilts/api/202404/public/hal_tv_hdmi_connection.te

(neverallow base_typeattr_506 hal_tv_hdmi_connection_service (service_manager (find)))
;;* lme

(allow hal_tv_hdmi_earc_client hal_tv_hdmi_earc_server (binder (call transfer)))
(allow hal_tv_hdmi_earc_server hal_tv_hdmi_earc_client (binder (transfer)))
(allow hal_tv_hdmi_earc_client hal_tv_hdmi_earc_server (fd (use)))
(allow hal_tv_hdmi_earc_server hal_tv_hdmi_earc_client (binder (call transfer)))
(allow hal_tv_hdmi_earc_client hal_tv_hdmi_earc_server (binder (transfer)))
(allow hal_tv_hdmi_earc_server hal_tv_hdmi_earc_client (fd (use)))
(allow hal_tv_hdmi_earc_client servicemanager (binder (call transfer)))
(allow servicemanager hal_tv_hdmi_earc_client (binder (call transfer)))
(allow servicemanager hal_tv_hdmi_earc_client (dir (search)))
(allow servicemanager hal_tv_hdmi_earc_client (file (read open)))
(allow servicemanager hal_tv_hdmi_earc_client (process (getattr)))
(allow hal_tv_hdmi_earc_server servicemanager (binder (call transfer)))
(allow servicemanager hal_tv_hdmi_earc_server (binder (call transfer)))
(allow servicemanager hal_tv_hdmi_earc_server (dir (search)))
(allow servicemanager hal_tv_hdmi_earc_server (file (read open)))
(allow servicemanager hal_tv_hdmi_earc_server (process (getattr)))
(allow hal_tv_hdmi_earc_client hal_tv_hdmi_earc_service (service_manager (find)))
(allow hal_tv_hdmi_earc_server hal_tv_hdmi_earc_service (service_manager (add find)))
;;* lmx 7 system/sepolicy/prebuilts/api/202404/public/hal_tv_hdmi_earc.te

(neverallow base_typeattr_507 hal_tv_hdmi_earc_service (service_manager (add)))
;;* lme

;;* lmx 7 system/sepolicy/prebuilts/api/202404/public/hal_tv_hdmi_earc.te

(neverallow base_typeattr_508 hal_tv_hdmi_earc_service (service_manager (find)))
;;* lme

(allow hal_tv_input_client hal_tv_input_server (binder (call transfer)))
(allow hal_tv_input_server hal_tv_input_client (binder (transfer)))
(allow hal_tv_input_client hal_tv_input_server (fd (use)))
(allow hal_tv_input_server hal_tv_input_client (binder (call transfer)))
(allow hal_tv_input_client hal_tv_input_server (binder (transfer)))
(allow hal_tv_input_server hal_tv_input_client (fd (use)))
(allow hal_tv_input_client hal_tv_input_hwservice (hwservice_manager (find)))
(allow hal_tv_input_server hal_tv_input_hwservice (hwservice_manager (add find)))
(allow hal_tv_input_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 5 system/sepolicy/prebuilts/api/202404/public/hal_tv_input.te

(neverallow base_typeattr_509 hal_tv_input_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/prebuilts/api/202404/public/hal_tv_input.te

(neverallow base_typeattr_510 hal_tv_input_hwservice (hwservice_manager (find)))
;;* lme

(allow hal_tv_input_client hal_tv_input_service (service_manager (find)))
(allow hal_tv_input_server hal_tv_input_service (service_manager (add find)))
;;* lmx 6 system/sepolicy/prebuilts/api/202404/public/hal_tv_input.te

(neverallow base_typeattr_509 hal_tv_input_service (service_manager (add)))
;;* lme

;;* lmx 6 system/sepolicy/prebuilts/api/202404/public/hal_tv_input.te

(neverallow base_typeattr_511 hal_tv_input_service (service_manager (find)))
;;* lme

(allow hal_tv_input_server servicemanager (binder (call transfer)))
(allow servicemanager hal_tv_input_server (binder (transfer)))
(allow hal_tv_input_server servicemanager (fd (use)))
(allow hal_tv_input_client servicemanager (binder (call transfer)))
(allow servicemanager hal_tv_input_client (binder (transfer)))
(allow hal_tv_input_client servicemanager (fd (use)))
(allow hal_tv_tuner_client hal_tv_tuner_server (binder (call transfer)))
(allow hal_tv_tuner_server hal_tv_tuner_client (binder (transfer)))
(allow hal_tv_tuner_client hal_tv_tuner_server (fd (use)))
(allow hal_tv_tuner_server hal_tv_tuner_client (binder (call transfer)))
(allow hal_tv_tuner_client hal_tv_tuner_server (binder (transfer)))
(allow hal_tv_tuner_server hal_tv_tuner_client (fd (use)))
(allow hal_tv_tuner_client hal_tv_tuner_hwservice (hwservice_manager (find)))
(allow hal_tv_tuner_server hal_tv_tuner_hwservice (hwservice_manager (add find)))
(allow hal_tv_tuner_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 4 system/sepolicy/prebuilts/api/202404/public/hal_tv_tuner.te

(neverallow base_typeattr_512 hal_tv_tuner_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 4 system/sepolicy/prebuilts/api/202404/public/hal_tv_tuner.te

(neverallow base_typeattr_513 hal_tv_tuner_hwservice (hwservice_manager (find)))
;;* lme

(allow hal_tv_tuner_client hal_tv_tuner_service (service_manager (find)))
(allow hal_tv_tuner_server hal_tv_tuner_service (service_manager (add find)))
;;* lmx 5 system/sepolicy/prebuilts/api/202404/public/hal_tv_tuner.te

(neverallow base_typeattr_512 hal_tv_tuner_service (service_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/prebuilts/api/202404/public/hal_tv_tuner.te

(neverallow base_typeattr_514 hal_tv_tuner_service (service_manager (find)))
;;* lme

(allow hal_tv_tuner_server servicemanager (binder (call transfer)))
(allow servicemanager hal_tv_tuner_server (binder (transfer)))
(allow hal_tv_tuner_server servicemanager (fd (use)))
(allow hal_tv_tuner_client servicemanager (binder (call transfer)))
(allow servicemanager hal_tv_tuner_client (binder (transfer)))
(allow hal_tv_tuner_client servicemanager (fd (use)))
(allow hal_usb_client hal_usb_server (binder (call transfer)))
(allow hal_usb_server hal_usb_client (binder (transfer)))
(allow hal_usb_client hal_usb_server (fd (use)))
(allow hal_usb_server hal_usb_client (binder (call transfer)))
(allow hal_usb_client hal_usb_server (binder (transfer)))
(allow hal_usb_server hal_usb_client (fd (use)))
(allow hal_usb_client hal_usb_service (service_manager (find)))
(allow hal_usb_server hal_usb_service (service_manager (add find)))
;;* lmx 5 system/sepolicy/prebuilts/api/202404/public/hal_usb.te

(neverallow base_typeattr_515 hal_usb_service (service_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/prebuilts/api/202404/public/hal_usb.te

(neverallow base_typeattr_516 hal_usb_service (service_manager (find)))
;;* lme

(allow hal_usb_server servicemanager (binder (call transfer)))
(allow servicemanager hal_usb_server (binder (transfer)))
(allow hal_usb_server servicemanager (fd (use)))
(allow hal_usb_client hal_usb_hwservice (hwservice_manager (find)))
(allow hal_usb_server hal_usb_hwservice (hwservice_manager (add find)))
(allow hal_usb_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 8 system/sepolicy/prebuilts/api/202404/public/hal_usb.te

(neverallow base_typeattr_515 hal_usb_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 8 system/sepolicy/prebuilts/api/202404/public/hal_usb.te

(neverallow base_typeattr_517 hal_usb_hwservice (hwservice_manager (find)))
;;* lme

(allow hal_usb self (netlink_kobject_uevent_socket (create)))
(allow hal_usb self (netlink_kobject_uevent_socket (setopt)))
(allow hal_usb self (netlink_kobject_uevent_socket (getopt)))
(allow hal_usb self (netlink_kobject_uevent_socket (bind)))
(allow hal_usb self (netlink_kobject_uevent_socket (read)))
(allow hal_usb sysfs (dir (open)))
(allow hal_usb sysfs (dir (read)))
(allow hal_usb sysfs (file (read)))
(allow hal_usb sysfs (file (open)))
(allow hal_usb sysfs (file (write)))
(allow hal_usb sysfs (file (getattr)))
(allow hal_usb_gadget_client hal_usb_gadget_server (binder (call transfer)))
(allow hal_usb_gadget_server hal_usb_gadget_client (binder (transfer)))
(allow hal_usb_gadget_client hal_usb_gadget_server (fd (use)))
(allow hal_usb_gadget_server hal_usb_gadget_client (binder (call transfer)))
(allow hal_usb_gadget_client hal_usb_gadget_server (binder (transfer)))
(allow hal_usb_gadget_server hal_usb_gadget_client (fd (use)))
(allow hal_usb_gadget_client hal_usb_gadget_service (service_manager (find)))
(allow hal_usb_gadget_server hal_usb_gadget_service (service_manager (add find)))
;;* lmx 5 system/sepolicy/prebuilts/api/202404/public/hal_usb_gadget.te

(neverallow base_typeattr_518 hal_usb_gadget_service (service_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/prebuilts/api/202404/public/hal_usb_gadget.te

(neverallow base_typeattr_519 hal_usb_gadget_service (service_manager (find)))
;;* lme

(allow hal_usb_gadget_server servicemanager (binder (call transfer)))
(allow servicemanager hal_usb_gadget_server (binder (transfer)))
(allow hal_usb_gadget_server servicemanager (fd (use)))
(allow hal_usb_gadget_client hal_usb_gadget_hwservice (hwservice_manager (find)))
(allow hal_usb_gadget_server hal_usb_gadget_hwservice (hwservice_manager (add find)))
(allow hal_usb_gadget_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 8 system/sepolicy/prebuilts/api/202404/public/hal_usb_gadget.te

(neverallow base_typeattr_518 hal_usb_gadget_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 8 system/sepolicy/prebuilts/api/202404/public/hal_usb_gadget.te

(neverallow base_typeattr_520 hal_usb_gadget_hwservice (hwservice_manager (find)))
;;* lme

(allow hal_usb_gadget_server configfs (lnk_file (read create unlink)))
(allow hal_usb_gadget_server configfs (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
(allow hal_usb_gadget_server configfs (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow hal_usb_gadget_server functionfs (dir (read search)))
(allow hal_usb_gadget_server functionfs (file (read)))
(allow hal_usb_gadget_server proc_interrupts (file (ioctl read getattr lock map open watch watch_reads)))
(allow hal_usb_gadget_server usb_uvc_enabled_prop (file (read getattr map open)))
(allow hal_uwb_client hal_uwb_server (binder (call transfer)))
(allow hal_uwb_server hal_uwb_client (binder (transfer)))
(allow hal_uwb_client hal_uwb_server (fd (use)))
(allow hal_uwb_server hal_uwb_client (binder (call transfer)))
(allow hal_uwb_client hal_uwb_server (binder (transfer)))
(allow hal_uwb_server hal_uwb_client (fd (use)))
(allow hal_uwb_client hal_uwb_service (service_manager (find)))
(allow hal_uwb_server hal_uwb_service (service_manager (add find)))
;;* lmx 5 system/sepolicy/prebuilts/api/202404/public/hal_uwb.te

(neverallow base_typeattr_521 hal_uwb_service (service_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/prebuilts/api/202404/public/hal_uwb.te

(neverallow base_typeattr_522 hal_uwb_service (service_manager (find)))
;;* lme

(allow hal_uwb_server servicemanager (binder (call transfer)))
(allow servicemanager hal_uwb_server (binder (transfer)))
(allow hal_uwb_server servicemanager (fd (use)))
(allow hal_uwb_client servicemanager (binder (call transfer)))
(allow servicemanager hal_uwb_client (binder (transfer)))
(allow hal_uwb_client servicemanager (fd (use)))
(allow hal_vehicle_client hal_vehicle_server (binder (call transfer)))
(allow hal_vehicle_server hal_vehicle_client (binder (transfer)))
(allow hal_vehicle_client hal_vehicle_server (fd (use)))
(allow hal_vehicle_server hal_vehicle_client (binder (call transfer)))
(allow hal_vehicle_client hal_vehicle_server (binder (transfer)))
(allow hal_vehicle_server hal_vehicle_client (fd (use)))
(allow hal_vehicle_client hal_vehicle_hwservice (hwservice_manager (find)))
(allow hal_vehicle_server hal_vehicle_hwservice (hwservice_manager (add find)))
(allow hal_vehicle_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 6 system/sepolicy/prebuilts/api/202404/public/hal_vehicle.te

(neverallow base_typeattr_523 hal_vehicle_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 6 system/sepolicy/prebuilts/api/202404/public/hal_vehicle.te

(neverallow base_typeattr_524 hal_vehicle_hwservice (hwservice_manager (find)))
;;* lme

(allow hal_vehicle_client hal_vehicle_service (service_manager (find)))
(allow hal_vehicle_server hal_vehicle_service (service_manager (add find)))
;;* lmx 7 system/sepolicy/prebuilts/api/202404/public/hal_vehicle.te

(neverallow base_typeattr_523 hal_vehicle_service (service_manager (add)))
;;* lme

;;* lmx 7 system/sepolicy/prebuilts/api/202404/public/hal_vehicle.te

(neverallow base_typeattr_525 hal_vehicle_service (service_manager (find)))
;;* lme

(allow hal_vibrator_client hal_vibrator_server (binder (call transfer)))
(allow hal_vibrator_server hal_vibrator_client (binder (transfer)))
(allow hal_vibrator_client hal_vibrator_server (fd (use)))
(allow hal_vibrator_server hal_vibrator_client (binder (call transfer)))
(allow hal_vibrator_client hal_vibrator_server (binder (transfer)))
(allow hal_vibrator_server hal_vibrator_client (fd (use)))
(allow hal_vibrator_client hal_vibrator_hwservice (hwservice_manager (find)))
(allow hal_vibrator_server hal_vibrator_hwservice (hwservice_manager (add find)))
(allow hal_vibrator_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 5 system/sepolicy/prebuilts/api/202404/public/hal_vibrator.te

(neverallow base_typeattr_526 hal_vibrator_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/prebuilts/api/202404/public/hal_vibrator.te

(neverallow base_typeattr_527 hal_vibrator_hwservice (hwservice_manager (find)))
;;* lme

(allow hal_vibrator_client hal_vibrator_service (service_manager (find)))
(allow hal_vibrator_server hal_vibrator_service (service_manager (add find)))
;;* lmx 6 system/sepolicy/prebuilts/api/202404/public/hal_vibrator.te

(neverallow base_typeattr_526 hal_vibrator_service (service_manager (add)))
;;* lme

;;* lmx 6 system/sepolicy/prebuilts/api/202404/public/hal_vibrator.te

(neverallow base_typeattr_528 hal_vibrator_service (service_manager (find)))
;;* lme

(allow hal_vibrator_server servicemanager (binder (call transfer)))
(allow servicemanager hal_vibrator_server (binder (transfer)))
(allow hal_vibrator_server servicemanager (fd (use)))
(allow hal_vibrator_server dumpstate (fifo_file (write)))
(allow hal_vibrator sysfs_vibrator (file (ioctl read write getattr lock append map open watch watch_reads)))
(allow hal_vibrator sysfs_vibrator (dir (search)))
(allow hal_vibrator fwk_vibrator_control_service (service_manager (find)))
(allow hal_vr_client hal_vr_server (binder (call transfer)))
(allow hal_vr_server hal_vr_client (binder (transfer)))
(allow hal_vr_client hal_vr_server (fd (use)))
(allow hal_vr_server hal_vr_client (binder (call transfer)))
(allow hal_vr_client hal_vr_server (binder (transfer)))
(allow hal_vr_server hal_vr_client (fd (use)))
(allow hal_vr_client hal_vr_hwservice (hwservice_manager (find)))
(allow hal_vr_server hal_vr_hwservice (hwservice_manager (add find)))
(allow hal_vr_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 5 system/sepolicy/prebuilts/api/202404/public/hal_vr.te

(neverallow base_typeattr_529 hal_vr_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/prebuilts/api/202404/public/hal_vr.te

(neverallow base_typeattr_530 hal_vr_hwservice (hwservice_manager (find)))
;;* lme

(allow hal_weaver_client hal_weaver_server (binder (call transfer)))
(allow hal_weaver_server hal_weaver_client (binder (transfer)))
(allow hal_weaver_client hal_weaver_server (fd (use)))
(allow hal_weaver_client hal_weaver_hwservice (hwservice_manager (find)))
(allow hal_weaver_server hal_weaver_hwservice (hwservice_manager (add find)))
(allow hal_weaver_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 4 system/sepolicy/prebuilts/api/202404/public/hal_weaver.te

(neverallow base_typeattr_531 hal_weaver_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 4 system/sepolicy/prebuilts/api/202404/public/hal_weaver.te

(neverallow base_typeattr_532 hal_weaver_hwservice (hwservice_manager (find)))
;;* lme

(allow hal_weaver_client hal_weaver_service (service_manager (find)))
(allow hal_weaver_server hal_weaver_service (service_manager (add find)))
;;* lmx 5 system/sepolicy/prebuilts/api/202404/public/hal_weaver.te

(neverallow base_typeattr_531 hal_weaver_service (service_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/prebuilts/api/202404/public/hal_weaver.te

(neverallow base_typeattr_533 hal_weaver_service (service_manager (find)))
;;* lme

(allow hal_weaver_server servicemanager (binder (call transfer)))
(allow servicemanager hal_weaver_server (binder (transfer)))
(allow hal_weaver_server servicemanager (fd (use)))
(allow hal_wifi_client hal_wifi_server (binder (call transfer)))
(allow hal_wifi_server hal_wifi_client (binder (transfer)))
(allow hal_wifi_client hal_wifi_server (fd (use)))
(allow hal_wifi_server hal_wifi_client (binder (call transfer)))
(allow hal_wifi_client hal_wifi_server (binder (transfer)))
(allow hal_wifi_server hal_wifi_client (fd (use)))
(allow hal_wifi_client hal_wifi_hwservice (hwservice_manager (find)))
(allow hal_wifi_server hal_wifi_hwservice (hwservice_manager (add find)))
(allow hal_wifi_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 5 system/sepolicy/prebuilts/api/202404/public/hal_wifi.te

(neverallow base_typeattr_534 hal_wifi_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/prebuilts/api/202404/public/hal_wifi.te

(neverallow base_typeattr_535 hal_wifi_hwservice (hwservice_manager (find)))
;;* lme

(allow hal_wifi_client hal_wifi_service (service_manager (find)))
(allow hal_wifi_server hal_wifi_service (service_manager (add find)))
;;* lmx 6 system/sepolicy/prebuilts/api/202404/public/hal_wifi.te

(neverallow base_typeattr_534 hal_wifi_service (service_manager (add)))
;;* lme

;;* lmx 6 system/sepolicy/prebuilts/api/202404/public/hal_wifi.te

(neverallow base_typeattr_536 hal_wifi_service (service_manager (find)))
;;* lme

(allow hal_wifi_server servicemanager (binder (call transfer)))
(allow servicemanager hal_wifi_server (binder (call transfer)))
(allow servicemanager hal_wifi_server (dir (search)))
(allow servicemanager hal_wifi_server (file (read open)))
(allow servicemanager hal_wifi_server (process (getattr)))
(allow hal_wifi proc_net_type (dir (ioctl read getattr lock open watch watch_reads search)))
(allow hal_wifi proc_net_type (file (ioctl read getattr lock map open watch watch_reads)))
(allow hal_wifi proc_net_type (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow hal_wifi sysfs_type (dir (ioctl read getattr lock open watch watch_reads search)))
(allow hal_wifi sysfs_type (file (ioctl read getattr lock map open watch watch_reads)))
(allow hal_wifi sysfs_type (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow hal_wifi_server property_socket (sock_file (write)))
(allow hal_wifi_server init (unix_stream_socket (connectto)))
(allow hal_wifi_server wifi_hal_prop (property_service (set)))
(allow hal_wifi_server wifi_hal_prop (file (read getattr map open)))
(allow hal_wifi property_socket (sock_file (write)))
(allow hal_wifi init (unix_stream_socket (connectto)))
(allow hal_wifi wifi_prop (property_service (set)))
(allow hal_wifi wifi_prop (file (read getattr map open)))
(allow hal_wifi self (udp_socket (ioctl read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
(allowx hal_wifi self (ioctl udp_socket (0x8914 0x8924 0x8946)))
(allow hal_wifi self (capability (net_admin net_raw)))
(allow hal_wifi self (cap_userns (net_admin net_raw)))
(allow hal_wifi self (netlink_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
(allow hal_wifi self (netlink_generic_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
(allow hal_wifi sysfs_wlan_fwpath (file (write lock append map open)))
(allow hal_wifi proc_modules (file (read getattr open)))
(allow hal_wifi dumpstate (fifo_file (write)))
(allow hal_wifi_server tombstone_wifi_data_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
(allow hal_wifi_server tombstone_wifi_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow hal_wifi_hostapd_client hal_wifi_hostapd_server (binder (call transfer)))
(allow hal_wifi_hostapd_server hal_wifi_hostapd_client (binder (transfer)))
(allow hal_wifi_hostapd_client hal_wifi_hostapd_server (fd (use)))
(allow hal_wifi_hostapd_server hal_wifi_hostapd_client (binder (call transfer)))
(allow hal_wifi_hostapd_client hal_wifi_hostapd_server (binder (transfer)))
(allow hal_wifi_hostapd_server hal_wifi_hostapd_client (fd (use)))
(allow hal_wifi_hostapd_client hal_wifi_hostapd_hwservice (hwservice_manager (find)))
(allow hal_wifi_hostapd_server hal_wifi_hostapd_hwservice (hwservice_manager (add find)))
(allow hal_wifi_hostapd_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 5 system/sepolicy/prebuilts/api/202404/public/hal_wifi_hostapd.te

(neverallow base_typeattr_537 hal_wifi_hostapd_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/prebuilts/api/202404/public/hal_wifi_hostapd.te

(neverallow base_typeattr_538 hal_wifi_hostapd_hwservice (hwservice_manager (find)))
;;* lme

(allow hal_wifi_hostapd_client hal_wifi_hostapd_service (service_manager (find)))
(allow hal_wifi_hostapd_server hal_wifi_hostapd_service (service_manager (add find)))
;;* lmx 6 system/sepolicy/prebuilts/api/202404/public/hal_wifi_hostapd.te

(neverallow base_typeattr_537 hal_wifi_hostapd_service (service_manager (add)))
;;* lme

;;* lmx 6 system/sepolicy/prebuilts/api/202404/public/hal_wifi_hostapd.te

(neverallow base_typeattr_539 hal_wifi_hostapd_service (service_manager (find)))
;;* lme

(allow hal_wifi_hostapd_server servicemanager (binder (call transfer)))
(allow servicemanager hal_wifi_hostapd_server (binder (call transfer)))
(allow servicemanager hal_wifi_hostapd_server (dir (search)))
(allow servicemanager hal_wifi_hostapd_server (file (read open)))
(allow servicemanager hal_wifi_hostapd_server (process (getattr)))
(allow hal_wifi_hostapd_server dumpstate (fifo_file (write)))
(allow hal_wifi_hostapd_server self (capability (net_admin net_raw)))
(allow hal_wifi_hostapd_server self (cap_userns (net_admin net_raw)))
(allow hal_wifi_hostapd_server sysfs_net (dir (search)))
(allow hal_wifi_hostapd_server proc_net_type (file (read getattr open)))
(allowx hal_wifi_hostapd_server self (ioctl udp_socket (0x6900 0x6902)))
(allowx hal_wifi_hostapd_server self (ioctl udp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(allowx hal_wifi_hostapd_server self (ioctl udp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(allow hal_wifi_hostapd_server self (netlink_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
(allow hal_wifi_hostapd_server self (netlink_generic_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
(allow hal_wifi_hostapd_server self (packet_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
(allow hal_wifi_hostapd_server self (netlink_route_socket (nlmsg_write)))
;;* lmx 31 system/sepolicy/prebuilts/api/202404/public/hal_wifi_hostapd.te

(neverallow hal_wifi_hostapd_server sdcard_type (dir (ioctl read write create setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
(neverallow hal_wifi_hostapd_server fuse (dir (ioctl read write create setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 32 system/sepolicy/prebuilts/api/202404/public/hal_wifi_hostapd.te

(neverallow hal_wifi_hostapd_server sdcard_type (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow hal_wifi_hostapd_server fuse (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
;;* lme

(allow hal_wifi_supplicant_client hal_wifi_supplicant_server (binder (call transfer)))
(allow hal_wifi_supplicant_server hal_wifi_supplicant_client (binder (transfer)))
(allow hal_wifi_supplicant_client hal_wifi_supplicant_server (fd (use)))
(allow hal_wifi_supplicant_server hal_wifi_supplicant_client (binder (call transfer)))
(allow hal_wifi_supplicant_client hal_wifi_supplicant_server (binder (transfer)))
(allow hal_wifi_supplicant_server hal_wifi_supplicant_client (fd (use)))
(allow hal_wifi_supplicant_client hal_wifi_supplicant_hwservice (hwservice_manager (find)))
(allow hal_wifi_supplicant_server hal_wifi_supplicant_hwservice (hwservice_manager (add find)))
(allow hal_wifi_supplicant_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 5 system/sepolicy/prebuilts/api/202404/public/hal_wifi_supplicant.te

(neverallow base_typeattr_540 hal_wifi_supplicant_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/prebuilts/api/202404/public/hal_wifi_supplicant.te

(neverallow base_typeattr_541 hal_wifi_supplicant_hwservice (hwservice_manager (find)))
;;* lme

(allow hal_wifi_supplicant_client hal_wifi_supplicant_service (service_manager (find)))
(allow hal_wifi_supplicant_server hal_wifi_supplicant_service (service_manager (add find)))
;;* lmx 6 system/sepolicy/prebuilts/api/202404/public/hal_wifi_supplicant.te

(neverallow base_typeattr_540 hal_wifi_supplicant_service (service_manager (add)))
;;* lme

;;* lmx 6 system/sepolicy/prebuilts/api/202404/public/hal_wifi_supplicant.te

(neverallow base_typeattr_542 hal_wifi_supplicant_service (service_manager (find)))
;;* lme

(allowx hal_wifi_supplicant self (ioctl udp_socket (0x6900 0x6902)))
(allowx hal_wifi_supplicant self (ioctl udp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(allowx hal_wifi_supplicant self (ioctl udp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(allow hal_wifi_supplicant sysfs_type (dir (ioctl read getattr lock open watch watch_reads search)))
(allow hal_wifi_supplicant sysfs_type (file (ioctl read getattr lock map open watch watch_reads)))
(allow hal_wifi_supplicant sysfs_type (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow hal_wifi_supplicant proc_net_type (dir (ioctl read getattr lock open watch watch_reads search)))
(allow hal_wifi_supplicant proc_net_type (file (ioctl read getattr lock map open watch watch_reads)))
(allow hal_wifi_supplicant proc_net_type (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow hal_wifi_supplicant self (capability (setgid setuid net_admin net_raw)))
(allow hal_wifi_supplicant self (cap_userns (setgid setuid net_admin net_raw)))
(allow hal_wifi_supplicant cgroup (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
(allow hal_wifi_supplicant cgroup_v2 (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
(allow hal_wifi_supplicant self (netlink_route_socket (nlmsg_write)))
(allow hal_wifi_supplicant self (netlink_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
(allow hal_wifi_supplicant self (netlink_generic_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
(allow hal_wifi_supplicant self (packet_socket (ioctl read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
(allowx hal_wifi_supplicant self (ioctl packet_socket ((range 0x5401 0x5404) 0x540b (range 0x540e 0x5411) (range 0x5413 0x5414) (range 0x5450 0x5451))))
(allowx hal_wifi_supplicant self (ioctl packet_socket (0x6900 0x6902)))
(allowx hal_wifi_supplicant self (ioctl packet_socket ((range 0x8906 0x8907) (range 0x890b 0x890d) (range 0x8910 0x8927) 0x8929 (range 0x8930 0x8939) (range 0x8940 0x8943) (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(allowx hal_wifi_supplicant self (ioctl packet_socket ((range 0x8b00 0x8b02) (range 0x8b04 0x8b1d) (range 0x8b20 0x8b2d) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(allow keystore hal_wifi_supplicant (dir (search)))
(allow keystore hal_wifi_supplicant (file (read open)))
(allow keystore hal_wifi_supplicant (process (getattr)))
(allow hal_wifi_supplicant apc_service (service_manager (find)))
(allow hal_wifi_supplicant keystore_service (service_manager (find)))
(allow hal_wifi_supplicant legacykeystore_service (service_manager (find)))
(allow hal_wifi_supplicant keystore (binder (call transfer)))
(allow keystore hal_wifi_supplicant (binder (transfer)))
(allow hal_wifi_supplicant keystore (fd (use)))
(allow keystore hal_wifi_supplicant (binder (call transfer)))
(allow hal_wifi_supplicant keystore (binder (transfer)))
(allow keystore hal_wifi_supplicant (fd (use)))
(allow hal_wifi_supplicant_server servicemanager (binder (call transfer)))
(allow servicemanager hal_wifi_supplicant_server (binder (call transfer)))
(allow servicemanager hal_wifi_supplicant_server (dir (search)))
(allow servicemanager hal_wifi_supplicant_server (file (read open)))
(allow servicemanager hal_wifi_supplicant_server (process (getattr)))
(allow hal_wifi_supplicant wifi_key (keystore2_key (get_info use)))
;;* lmx 37 system/sepolicy/prebuilts/api/202404/public/hal_wifi_supplicant.te

(neverallow hal_wifi_supplicant_server sdcard_type (dir (ioctl read write create setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
(neverallow hal_wifi_supplicant_server fuse (dir (ioctl read write create setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 38 system/sepolicy/prebuilts/api/202404/public/hal_wifi_supplicant.te

(neverallow hal_wifi_supplicant_server sdcard_type (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow hal_wifi_supplicant_server fuse (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
;;* lme

;;* lmx 102 system/sepolicy/prebuilts/api/202404/public/hwservice.te

(neverallow domain base_typeattr_543 (hwservice_manager (add find)))
;;* lme

(allow hwservicemanager self (binder (set_context_mgr)))
(allow hwservicemanager system_file (dir (ioctl read getattr lock open watch watch_reads search)))
(allow hwservicemanager hwservice_contexts_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow hwservicemanager selinuxfs (dir (ioctl read getattr lock open watch watch_reads search)))
(allow hwservicemanager selinuxfs (file (ioctl read getattr lock map open watch watch_reads)))
(allow hwservicemanager selinuxfs (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow hwservicemanager selinuxfs (file (write lock append map open)))
(allow hwservicemanager kernel (security (compute_av)))
(allow hwservicemanager self (netlink_selinux_socket (read write create getattr setattr lock relabelfrom relabelto append bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(allow idmap resourcecache_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow idmap resourcecache_data_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
(allow idmap apk_data_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow idmap apk_data_file (dir (search)))
(allow idmap apk_tmp_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow idmap apk_private_tmp_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow idmap apk_tmp_file (dir (search)))
(allow idmap apk_private_tmp_file (dir (search)))
(allow idmap vendor_app_file (dir (ioctl read getattr lock open watch watch_reads search)))
(allow idmap vendor_app_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow idmap vendor_app_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow idmap vendor_overlay_file (dir (ioctl read getattr lock open watch watch_reads search)))
(allow idmap vendor_overlay_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow idmap vendor_overlay_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow idmap servicemanager (binder (call transfer)))
(allow servicemanager idmap (binder (call transfer)))
(allow servicemanager idmap (dir (search)))
(allow servicemanager idmap (file (read open)))
(allow servicemanager idmap (process (getattr)))
(allow idmap idmap_service (service_manager (add find)))
;;* lmx 26 system/sepolicy/prebuilts/api/202404/public/idmap.te

(neverallow base_typeattr_544 idmap_service (service_manager (add)))
;;* lme

(allow init tmpfs (chr_file (ioctl read write create getattr setattr lock append map unlink open watch watch_reads)))
(allow init tmpfs (chr_file (relabelfrom)))
(allow init kmsg_device (chr_file (write getattr relabelto)))
(allow init properties_device (dir (relabelto)))
(allow init properties_serial (file (write relabelto)))
(allow init property_type (file (read write create getattr setattr relabelto append map unlink rename open)))
(allow init properties_device (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow init property_info (file (relabelto)))
(allow init device (file (relabelfrom)))
(allow init runtime_event_log_tags_file (file (write create setattr relabelto open)))
(allow init device (dir (relabelto)))
(allow init dm_user_device (dir (relabelto)))
(allow init socket_device (dir (relabelto)))
(allow init lmkd_socket (sock_file (write)))
(allow init lmkd (unix_stream_socket (connectto)))
(allow init console_device (chr_file (relabelto)))
(allow init ptmx_device (chr_file (relabelto)))
(allow init null_device (chr_file (relabelto)))
(allow init random_device (chr_file (relabelto)))
(allow init tmpfs (chr_file (relabelfrom)))
(allow init tmpfs (blk_file (relabelfrom)))
(allow init tmpfs (blk_file (getattr)))
(allow init block_device (dir (relabelto)))
(allow init block_device (lnk_file (relabelto)))
(allow init block_device (blk_file (relabelto)))
(allow init dm_device (chr_file (relabelto)))
(allow init dm_device (blk_file (relabelto)))
(allow init dm_user_device (chr_file (relabelto)))
(allow init kernel (fd (use)))
(allow init tmpfs (lnk_file (read getattr relabelfrom)))
(allow init system_block_device (lnk_file (relabelto)))
(allow init system_block_device (blk_file (relabelto)))
(allow init recovery_block_device (lnk_file (relabelto)))
(allow init recovery_block_device (blk_file (relabelto)))
(allow init userdata_block_device (lnk_file (relabelto)))
(allow init userdata_block_device (blk_file (relabelto)))
(allow init metadata_block_device (lnk_file (relabelto)))
(allow init metadata_block_device (blk_file (relabelto)))
(allow init misc_block_device (lnk_file (relabelto)))
(allow init misc_block_device (blk_file (relabelto)))
(allow init dtbo_block_device (lnk_file (relabelto)))
(allow init super_block_device (lnk_file (relabelto)))
(allow init mnt_sdcard_file (lnk_file (create)))
(allow init self (capability (sys_resource)))
(allow init self (cap_userns (sys_resource)))
(allow init tmpfs (file (getattr unlink)))
(allow init devpts (chr_file (read write open)))
(allow init fscklogs (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow init tmpfs (chr_file (write)))
(allow init console_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
(allow init tty_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
(allow init self (capability (sys_admin)))
(allow init self (cap_userns (sys_admin)))
(allow init self (capability (sys_chroot)))
(allow init self (cap_userns (sys_chroot)))
(allow init rootfs (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
(allow init rootfs (dir (mounton)))
(allow init cgroup (dir (mounton)))
(allow init system_file (dir (mounton)))
(allow init linkerconfig_file (dir (mounton)))
(allow init vendor_file (dir (mounton)))
(allow init system_data_root_file (dir (mounton)))
(allow init system_data_file (dir (mounton)))
(allow init shell_data_file (dir (mounton)))
(allow init mnt_user_file (dir (mounton)))
(allow init storage_file (dir (mounton)))
(allow init postinstall_mnt_dir (dir (mounton)))
(allow init mirror_data_file (dir (mounton)))
(allow init cache_file (dir (mounton)))
(allow init system_dlkm_file (dir (mounton)))
(allow init fs_bpf (dir (mounton)))
(allow init device (dir (mounton)))
(allow init apex_mnt_dir (dir (mounton)))
(allow init art_apex_dir (dir (mounton)))
(allow init rootfs (lnk_file (create unlink)))
(allow init sysfs (dir (mounton)))
(allow init tmpfs (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
(allow init tmpfs (dir (mounton)))
(allow init cgroup (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
(allow init cgroup (file (ioctl read write getattr lock append map open watch watch_reads)))
(allow init cgroup_rc_file (file (ioctl read write getattr lock append map open watch watch_reads)))
(allow init cgroup_desc_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow init cgroup_desc_api_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow init vendor_cgroup_desc_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow init cgroup_v2 (dir (ioctl read write create getattr setattr lock rename mounton open watch watch_reads add_name remove_name reparent search rmdir)))
(allow init cgroup_v2 (file (ioctl read write getattr lock append map open watch watch_reads)))
(allow init configfs (dir (mounton)))
(allow init configfs (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
(allow init configfs (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow init configfs (lnk_file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow init metadata_file (dir (mounton)))
(allow init tmpfs (dir (relabelfrom)))
(allow init self (capability (dac_override dac_read_search)))
(allow init self (cap_userns (dac_override dac_read_search)))
(allow init self (capability (sys_time)))
(allow init self (cap_userns (sys_time)))
(allow init self (capability (sys_rawio mknod)))
(allow init self (cap_userns (sys_rawio mknod)))
(allow init dev_type (blk_file (ioctl read getattr lock map open watch watch_reads)))
(allowx init dev_type (ioctl blk_file (0x125d)))
(allowx init system_data_root_file (ioctl dir (0x587d)))
(allow init base_typeattr_545 (filesystem (mount remount unmount getattr relabelfrom associate quotamod quotaget watch)))
(allow init debugfs_tracing_debug (filesystem (mount)))
(allow init unlabeled (filesystem (mount remount unmount getattr relabelfrom associate quotamod quotaget watch)))
(allow init contextmount_type (filesystem (relabelto)))
(allow init contextmount_type (dir (ioctl read getattr lock open watch watch_reads search)))
(allow init contextmount_type (file (ioctl read getattr lock map open watch watch_reads)))
(allow init contextmount_type (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow init contextmount_type (sock_file (ioctl read getattr lock map open watch watch_reads)))
(allow init contextmount_type (fifo_file (ioctl read getattr lock map open watch watch_reads)))
(allow init rootfs (file (relabelfrom)))
(allow init rootfs (dir (relabelfrom)))
(allow init self (capability (chown fowner fsetid)))
(allow init self (cap_userns (chown fowner fsetid)))
(allow init base_typeattr_546 (dir (ioctl read create getattr setattr open search)))
(allow init base_typeattr_547 (dir (write relabelfrom add_name remove_name rmdir)))
(allow init base_typeattr_548 (file (read write create getattr setattr relabelfrom map unlink open)))
(allow init tracefs_type (file (ioctl read write create getattr setattr lock relabelfrom append map unlink rename open watch watch_reads)))
(allow init apex_info_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow init base_typeattr_549 (sock_file (read create getattr setattr relabelfrom unlink open)))
(allow init base_typeattr_549 (fifo_file (read create getattr setattr relabelfrom unlink open)))
(allow init base_typeattr_550 (lnk_file (create getattr setattr relabelfrom unlink)))
(allow init cache_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow init base_typeattr_551 (file (relabelto)))
(allow init base_typeattr_551 (dir (relabelto)))
(allow init base_typeattr_551 (lnk_file (relabelto)))
(allow init base_typeattr_551 (chr_file (relabelto)))
(allow init base_typeattr_551 (blk_file (relabelto)))
(allow init base_typeattr_551 (sock_file (relabelto)))
(allow init base_typeattr_551 (fifo_file (relabelto)))
(allow init sysfs (file (getattr relabelfrom)))
(allow init sysfs (dir (getattr relabelfrom)))
(allow init sysfs (lnk_file (getattr relabelfrom)))
(allow init debugfs_tracing (file (getattr relabelfrom)))
(allow init debugfs_tracing (dir (getattr relabelfrom)))
(allow init debugfs_tracing (lnk_file (getattr relabelfrom)))
(allow init debugfs_tracing_debug (file (getattr relabelfrom)))
(allow init debugfs_tracing_debug (dir (getattr relabelfrom)))
(allow init debugfs_tracing_debug (lnk_file (getattr relabelfrom)))
(allow init sysfs_type (file (getattr relabelto)))
(allow init sysfs_type (dir (getattr relabelto)))
(allow init sysfs_type (lnk_file (getattr relabelto)))
(allow init tracefs_type (file (getattr relabelto)))
(allow init tracefs_type (dir (getattr relabelto)))
(allow init tracefs_type (lnk_file (getattr relabelto)))
(allow init dev_type (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
(allow init dev_type (lnk_file (create)))
(allow init debugfs_tracing (file (write lock append map open)))
(allow init debugfs_tracing_instances (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
(allow init debugfs_tracing_instances (file (write lock append map open)))
(allow init debugfs_wifi_tracing (file (write lock append map open)))
(allow init base_typeattr_552 (file (read setattr open)))
(allow init base_typeattr_553 (dir (read setattr open search)))
(allow init binder_device (chr_file (read open)))
(allow init hwbinder_device (chr_file (read open)))
(allow init dm_device (chr_file (read open)))
(allow init pmsg_device (chr_file (read open)))
(allow init console_device (chr_file (read open)))
(allow init input_device (chr_file (read open)))
(allow init ptmx_device (chr_file (read open)))
(allow init kmsg_device (chr_file (read open)))
(allow init null_device (chr_file (read open)))
(allow init random_device (chr_file (read open)))
(allow init owntty_device (chr_file (read open)))
(allow init tty_device (chr_file (read open)))
(allow init zero_device (chr_file (read open)))
(allow init devpts (chr_file (read open)))
(allow init unlabeled (dir (ioctl read write create getattr setattr lock relabelfrom rename open watch watch_reads add_name remove_name reparent search rmdir)))
(allow init unlabeled (file (ioctl read write create getattr setattr lock relabelfrom append map unlink rename open watch watch_reads)))
(allow init unlabeled (lnk_file (ioctl read write create getattr setattr lock relabelfrom append map unlink rename open watch watch_reads)))
(allow init unlabeled (sock_file (ioctl read write create getattr setattr lock relabelfrom append map unlink rename open watch watch_reads)))
(allow init unlabeled (fifo_file (ioctl read write create getattr setattr lock relabelfrom append map unlink rename open watch watch_reads)))
(allow init kernel (system (syslog_mod)))
(allow init self (capability2 (syslog)))
(allow init self (cap2_userns (syslog)))
(allow init proc_net_type (dir (ioctl read getattr lock open watch watch_reads search)))
(allow init proc_net_type (file (ioctl read getattr lock map open watch watch_reads)))
(allow init proc_net_type (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow init proc_filesystems (file (ioctl read getattr lock map open watch watch_reads)))
(allow init proc (file (ioctl read getattr lock map open watch watch_reads)))
(allow init proc_bootconfig (file (ioctl read getattr lock map open watch watch_reads)))
(allow init proc_cmdline (file (ioctl read getattr lock map open watch watch_reads)))
(allow init proc_diskstats (file (ioctl read getattr lock map open watch watch_reads)))
(allow init proc_kmsg (file (ioctl read getattr lock map open watch watch_reads)))
(allow init proc_meminfo (file (ioctl read getattr lock map open watch watch_reads)))
(allow init proc_stat (file (ioctl read getattr lock map open watch watch_reads)))
(allow init proc_uptime (file (ioctl read getattr lock map open watch watch_reads)))
(allow init proc_version (file (ioctl read getattr lock map open watch watch_reads)))
(allow init proc_net_type (file (write lock append map open)))
(allow init proc_overcommit_memory (file (write lock append map open)))
(allow init proc_min_free_order_shift (file (write lock append map open)))
(allow init proc_watermark_boost_factor (file (write lock append map open)))
(allow init proc_abi (file (write lock append map open)))
(allow init proc_cpu_alignment (file (write lock append map open)))
(allow init proc_dirty (file (write lock append map open)))
(allow init proc_extra_free_kbytes (file (write lock append map open)))
(allow init proc_hostname (file (write lock append map open)))
(allow init proc_hung_task (file (write lock append map open)))
(allow init proc_max_map_count (file (write lock append map open)))
(allow init proc_page_cluster (file (write lock append map open)))
(allow init proc_panic (file (write lock append map open)))
(allow init proc_perf (file (write lock append map open)))
(allow init proc_sched (file (write lock append map open)))
(allow init proc_sysrq (file (write lock append map open)))
(allow init proc_security (file (ioctl read write getattr lock append map open watch watch_reads)))
(allow init proc_qtaguid_ctrl (file (setattr)))
(allow init proc_qtaguid_stat (file (setattr)))
(allow init proc_bootconfig (file (setattr)))
(allow init proc_cmdline (file (setattr)))
(allow init proc_kmsg (file (setattr)))
(allow init proc_net (file (setattr)))
(allow init proc_pagetypeinfo (file (setattr)))
(allow init proc_slabinfo (file (setattr)))
(allow init proc_sysrq (file (setattr)))
(allow init proc_vmallocinfo (file (setattr)))
(allow init sysfs_android_usb (file (write lock append map open)))
(allow init sysfs_dm (file (write lock append map open)))
(allow init sysfs_dm_verity (file (write lock append map open)))
(allow init sysfs_leds (file (write lock append map open)))
(allow init sysfs_power (file (write lock append map open)))
(allow init sysfs_lru_gen_enabled (file (write lock append map open)))
(allow init sysfs_fs_f2fs (file (write lock append map open)))
(allow init sysfs_dt_firmware_android (file (ioctl read getattr lock map open watch watch_reads)))
(allow init sysfs_fs_ext4_features (file (ioctl read getattr lock map open watch watch_reads)))
(allow init sysfs_zram (file (ioctl read write getattr lock append map open watch watch_reads)))
(allow init loop_control_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
(allow init loop_device (blk_file (ioctl read write getattr lock append map open watch watch_reads)))
(allowx init loop_device (ioctl blk_file ((range 0x4c00 0x4c01) (range 0x4c03 0x4c04) (range 0x4c08 0x4c09) 0x4c82)))
(allow init sysfs_vibrator (file (write lock append map open)))
(allow init sysfs_android_usb (file (setattr)))
(allow init sysfs_ipv4 (file (setattr)))
(allow init sysfs_leds (file (setattr)))
(allow init sysfs_wake_lock (file (setattr)))
(allow init sysfs_power (file (setattr)))
(allow init sysfs_devices_system_cpu (file (setattr)))
(allow init sysfs_lowmemorykiller (file (setattr)))
(allow init sysfs_vibrator (file (setattr)))
(allow init sysfs_zram (file (setattr)))
(allow init usermodehelper (file (ioctl read write getattr lock append map open watch watch_reads)))
(allow init sysfs_usermodehelper (file (ioctl read write getattr lock append map open watch watch_reads)))
(allow init self (capability (net_admin)))
(allow init self (cap_userns (net_admin)))
(allow init self (capability (sys_boot)))
(allow init self (cap_userns (sys_boot)))
(allow init misc_logd_file (dir (read write create getattr setattr open add_name search)))
(allow init misc_logd_file (file (write create getattr setattr open)))
(allow init self (capability (kill)))
(allow init self (cap_userns (kill)))
(allow init domain (process (sigkill signal getpgid)))
(allow init credstore_data_file (dir (read create getattr setattr open search)))
(allow init credstore_data_file (file (getattr)))
(allow init keystore_data_file (dir (read create getattr setattr open search)))
(allow init keystore_data_file (file (getattr)))
(allow init vold_data_file (dir (read create getattr setattr open search)))
(allow init vold_data_file (file (getattr)))
(allow init shell_data_file (dir (read create getattr setattr open search)))
(allow init shell_data_file (file (getattr)))
(allow init self (capability (setgid setuid setpcap)))
(allow init self (cap_userns (setgid setuid setpcap)))
(allow init domain (dir (ioctl read getattr lock open watch watch_reads search)))
(allow init domain (file (ioctl read getattr lock map open watch watch_reads)))
(allow init domain (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow init self (process (setexec setfscreate setsockcreate)))
(allow init file_contexts_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow init sepolicy_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow init selinuxfs (dir (ioctl read getattr lock open watch watch_reads search)))
(allow init selinuxfs (file (ioctl read getattr lock map open watch watch_reads)))
(allow init selinuxfs (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow init selinuxfs (file (write lock append map open)))
(allow init kernel (security (compute_av)))
(allow init self (netlink_selinux_socket (read write create getattr setattr lock relabelfrom relabelto append bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(allow init kernel (security (compute_create)))
(allow init domain (unix_stream_socket (create bind setopt)))
(allow init domain (unix_dgram_socket (create bind setopt)))
(allow init property_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
(allow init property_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow init property_type (property_service (set)))
(allow init self (netlink_audit_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown nlmsg_relay)))
(allow init self (capability (audit_write)))
(allow init self (cap_userns (audit_write)))
(allow init self (udp_socket (ioctl create)))
(allowx init self (ioctl udp_socket (0x8914)))
(allow init self (capability (net_raw)))
(allow init self (cap_userns (net_raw)))
(allow init kernel (process (getsched setsched)))
(allow init swap_block_device (blk_file (ioctl read write getattr lock append map open watch watch_reads)))
(allow init device (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow init input_device (dir (ioctl read getattr lock open watch watch_reads search)))
(allow init input_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
(allow init dm_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
(allow init dm_device (blk_file (ioctl read write getattr lock append map open watch watch_reads)))
(allow init dm_user_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
(allow init metadata_block_device (blk_file (ioctl read write getattr lock append map open watch watch_reads)))
(allow init pstorefs (dir (search)))
(allow init pstorefs (file (ioctl read getattr lock map open watch watch_reads)))
(allow init kernel (system (syslog_read)))
(allow init init (key (write search setattr)))
(allow init unencrypted_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
(allowx init data_file_type (ioctl dir (0x6613 0x6615)))
(allowx init unlabeled (ioctl dir (0x6613 0x6615)))
(allow init misc_block_device (blk_file (write lock append map open)))
(allow init system_file (dir (ioctl read getattr lock open watch watch_reads search)))
(allow init system_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow init system_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow init system_dlkm_file_type (dir (ioctl read getattr lock open watch watch_reads search)))
(allow init system_dlkm_file_type (file (ioctl read getattr lock map open watch watch_reads)))
(allow init system_dlkm_file_type (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow init vendor_file_type (dir (ioctl read getattr lock open watch watch_reads search)))
(allow init vendor_file_type (file (ioctl read getattr lock map open watch watch_reads)))
(allow init vendor_file_type (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow init system_data_file (file (read getattr)))
(allow init system_data_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow init vendor_shell_exec (file (execute)))
(allow init vold_metadata_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
(allow init vold_metadata_file (file (getattr)))
(allow init metadata_bootstat_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
(allow init metadata_bootstat_file (file (write lock append map open)))
(allow init userspace_reboot_metadata_file (file (write lock append map open)))
(allow init proc_pressure_mem (file (ioctl read write getattr setattr lock append map open watch watch_reads)))
(allow init system_bootstrap_lib_file (dir (ioctl read getattr lock open watch watch_reads search)))
(allow init system_bootstrap_lib_file (file (read getattr map execute open)))
(allow init fuse (dir (getattr search)))
(allow init userdata_sysdev (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow init rootdisk_sysdev (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lmx 659 system/sepolicy/prebuilts/api/202404/public/init.te

(neverallow domain init (process (dyntransition)))
;;* lme

;;* lmx 660 system/sepolicy/prebuilts/api/202404/public/init.te

(neverallow base_typeattr_254 init (process (transition)))
;;* lme

;;* lmx 661 system/sepolicy/prebuilts/api/202404/public/init.te

(neverallow init base_typeattr_554 (file (entrypoint)))
;;* lme

;;* lmx 664 system/sepolicy/prebuilts/api/202404/public/init.te

(neverallow init shell_data_file (lnk_file (read)))
;;* lme

;;* lmx 665 system/sepolicy/prebuilts/api/202404/public/init.te

(neverallow init app_data_file_type (lnk_file (read)))
;;* lme

;;* lmx 668 system/sepolicy/prebuilts/api/202404/public/init.te

(neverallow init fs_type (file (execute_no_trans)))
(neverallow init file_type (file (execute_no_trans)))
;;* lme

;;* lmx 677 system/sepolicy/prebuilts/api/202404/public/init.te

(neverallow init base_typeattr_224 (process (noatsecure)))
;;* lme

;;* lmx 680 system/sepolicy/prebuilts/api/202404/public/init.te

(neverallow init service_manager_type (service_manager (add find)))
;;* lme

;;* lmx 682 system/sepolicy/prebuilts/api/202404/public/init.te

(neverallow init servicemanager (service_manager (list)))
;;* lme

;;* lmx 685 system/sepolicy/prebuilts/api/202404/public/init.te

(neverallow init shell_data_file (dir (write add_name remove_name)))
;;* lme

;;* lmx 688 system/sepolicy/prebuilts/api/202404/public/init.te

(neverallow init sysfs (file (write open)))
;;* lme

;;* lmx 691 system/sepolicy/prebuilts/api/202404/public/init.te

(neverallow base_typeattr_224 init (process (ptrace)))
;;* lme

;;* lmx 696 system/sepolicy/prebuilts/api/202404/public/init.te

(neverallow base_typeattr_555 system_data_root_file (dir (write add_name remove_name)))
;;* lme

(allow inputflinger servicemanager (binder (call transfer)))
(allow servicemanager inputflinger (binder (call transfer)))
(allow servicemanager inputflinger (dir (search)))
(allow servicemanager inputflinger (file (read open)))
(allow servicemanager inputflinger (process (getattr)))
(allow inputflinger system_server (binder (call transfer)))
(allow system_server inputflinger (binder (transfer)))
(allow inputflinger system_server (fd (use)))
(allow inputflinger sysfs_wake_lock (file (ioctl read write getattr lock append map open watch watch_reads)))
(allow inputflinger self (capability2 (block_suspend)))
(allow inputflinger self (cap2_userns (block_suspend)))
(allow inputflinger system_suspend_server (binder (call transfer)))
(allow system_suspend_server inputflinger (binder (transfer)))
(allow inputflinger system_suspend_server (fd (use)))
(allow inputflinger system_suspend_hwservice (hwservice_manager (find)))
(allow inputflinger hwservicemanager (binder (call transfer)))
(allow hwservicemanager inputflinger (binder (call transfer)))
(allow hwservicemanager inputflinger (dir (search)))
(allow hwservicemanager inputflinger (file (read map open)))
(allow hwservicemanager inputflinger (process (getattr)))
(allow inputflinger hwservicemanager_prop (file (read getattr map open)))
(allow inputflinger hidl_manager_hwservice (hwservice_manager (find)))
(allow inputflinger hal_system_suspend_service (service_manager (find)))
(allow inputflinger servicemanager (binder (call transfer)))
(allow servicemanager inputflinger (binder (call transfer)))
(allow servicemanager inputflinger (dir (search)))
(allow servicemanager inputflinger (file (read open)))
(allow servicemanager inputflinger (process (getattr)))
(allow inputflinger input_device (dir (ioctl read getattr lock open watch watch_reads search)))
(allow inputflinger input_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
(allow inputflinger cgroup (dir (ioctl read getattr lock open watch watch_reads search)))
(allow inputflinger cgroup (file (ioctl read getattr lock map open watch watch_reads)))
(allow inputflinger cgroup (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow inputflinger cgroup_v2 (dir (ioctl read getattr lock open watch watch_reads search)))
(allow inputflinger cgroup_v2 (file (ioctl read getattr lock map open watch watch_reads)))
(allow inputflinger cgroup_v2 (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow installd self (capability (chown dac_override dac_read_search fowner fsetid kill setgid setuid sys_admin)))
(allow installd self (cap_userns (chown dac_override dac_read_search fowner fsetid kill setgid setuid sys_admin)))
(allow installd dalvikcache_data_file (dir (relabelto)))
(allow installd dalvikcache_data_file (file (relabelto link)))
(allow installd apk_data_file (dir (ioctl read write create getattr setattr lock relabelfrom rename open watch watch_reads add_name remove_name reparent search rmdir)))
(allow installd apk_data_file (file (ioctl read write create getattr setattr lock relabelfrom append map unlink link rename open watch watch_reads)))
(allow installd apk_data_file (lnk_file (ioctl read create getattr lock map unlink open watch watch_reads)))
(allow installd asec_apk_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow installd apk_tmp_file (file (ioctl read getattr lock map unlink open watch watch_reads)))
(allow installd apk_tmp_file (dir (ioctl read write create getattr setattr lock relabelfrom rename open watch watch_reads add_name remove_name reparent search rmdir)))
(allow installd oemfs (dir (ioctl read getattr lock open watch watch_reads search)))
(allow installd oemfs (file (ioctl read getattr lock map open watch watch_reads)))
(allow installd cgroup (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
(allow installd cgroup_v2 (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
(allow installd mnt_expand_file (dir (getattr search)))
(allow installd selinuxfs (dir (ioctl read getattr lock open watch watch_reads search)))
(allow installd selinuxfs (file (ioctl read getattr lock map open watch watch_reads)))
(allow installd selinuxfs (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow installd selinuxfs (file (write lock append map open)))
(allow installd kernel (security (check_context)))
(allow installd rootfs (dir (ioctl read getattr lock open watch watch_reads search)))
(allow installd rootfs (file (ioctl read getattr lock map open watch watch_reads)))
(allow installd rootfs (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow installd system_file (dir (ioctl read getattr lock open watch watch_reads search)))
(allow installd system_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow installd system_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow installd vendor_app_file (dir (ioctl read getattr lock open watch watch_reads search)))
(allow installd vendor_app_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow installd vendor_app_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow installd vendor_framework_file (dir (ioctl read getattr lock open watch watch_reads search)))
(allow installd vendor_framework_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow installd vendor_framework_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow installd vendor_overlay_file (dir (ioctl read getattr lock open watch watch_reads search)))
(allow installd vendor_overlay_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow installd vendor_overlay_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow installd vendor_apex_metadata_file (dir (getattr search)))
(allow installd file_contexts_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow installd seapp_contexts_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow installd asec_image_file (dir (search)))
(allow installd asec_image_file (file (getattr)))
(allow installd system_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
(allow installd system_data_file (lnk_file (read create getattr setattr unlink)))
(allow installd mnt_pass_through_file (dir (ioctl read getattr lock open watch watch_reads search)))
(allow installd media_rw_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
(allow installd media_rw_data_file (file (getattr unlink)))
(allow installd system_data_file (dir (relabelfrom)))
(allow installd media_rw_data_file (dir (relabelto)))
(allow installd media_userdir_file (dir (ioctl read getattr lock open watch watch_reads search)))
(allow installd tmpfs (dir (ioctl read getattr lock open watch watch_reads search)))
(allow installd storage_file (dir (search)))
(allow installd sdcard_type (dir (read write getattr open remove_name search rmdir)))
(allow installd fuse (dir (read write getattr open remove_name search rmdir)))
(allow installd sdcard_type (file (getattr unlink)))
(allow installd fuse (file (getattr unlink)))
(allow installd mirror_data_file (dir (ioctl read write create getattr setattr lock rename mounton open watch watch_reads add_name remove_name reparent search rmdir)))
(allow installd system_userdir_file (dir (ioctl read getattr lock open watch watch_reads search)))
(allow installd misc_user_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
(allow installd misc_user_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow installd keychain_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
(allow installd keychain_data_file (file (ioctl read getattr lock map unlink open watch watch_reads)))
(allow installd install_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow installd install_data_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
(allow installd dalvikcache_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
(allow installd dalvikcache_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow installd dalvikcache_data_file (lnk_file (getattr)))
(allow installd resourcecache_data_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
(allow installd resourcecache_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow installd unlabeled (dir (ioctl read write getattr lock relabelfrom open watch watch_reads add_name remove_name search rmdir)))
(allow installd unlabeled (file (getattr setattr relabelfrom unlink rename)))
(allow installd unlabeled (lnk_file (getattr setattr relabelfrom unlink rename)))
(allow installd unlabeled (sock_file (getattr setattr relabelfrom unlink rename)))
(allow installd unlabeled (fifo_file (getattr setattr relabelfrom unlink rename)))
(allow installd unlabeled (file (ioctl read getattr lock map open watch watch_reads)))
(allow installd system_data_file (file (getattr relabelfrom unlink)))
(allow installd system_data_file (lnk_file (getattr relabelfrom unlink)))
(allow installd system_data_file (sock_file (getattr relabelfrom unlink)))
(allow installd system_data_file (fifo_file (getattr relabelfrom unlink)))
(allow installd app_data_file_type (dir (ioctl read write create getattr setattr lock relabelfrom relabelto rename open watch watch_reads add_name remove_name reparent search rmdir)))
(allow installd app_data_file_type (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink rename open watch watch_reads)))
(allow installd app_data_file_type (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink rename open watch watch_reads)))
(allow installd app_data_file_type (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink rename open watch watch_reads)))
(allow installd app_data_file_type (fifo_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink rename open watch watch_reads)))
(allowx installd app_data_file_type (ioctl file ((range 0x581f 0x5820))))
(allowx installd app_data_file_type (ioctl dir ((range 0x581f 0x5820))))
(allowx installd system_data_file (ioctl file ((range 0x581f 0x5820))))
(allowx installd system_data_file (ioctl dir ((range 0x581f 0x5820))))
(allowx installd install_data_file (ioctl file ((range 0x581f 0x5820))))
(allowx installd install_data_file (ioctl dir ((range 0x581f 0x5820))))
(allowx installd app_data_file_type (ioctl file ((range 0x6601 0x6602))))
(allowx installd app_data_file_type (ioctl dir ((range 0x6601 0x6602))))
(allowx installd system_data_file (ioctl file ((range 0x6601 0x6602))))
(allowx installd system_data_file (ioctl dir ((range 0x6601 0x6602))))
(allowx installd install_data_file (ioctl file ((range 0x6601 0x6602))))
(allowx installd install_data_file (ioctl dir ((range 0x6601 0x6602))))
(allow installd user_profile_root_file (dir (ioctl read write create getattr setattr lock relabelfrom rename open watch watch_reads add_name remove_name reparent search rmdir)))
(allow installd user_profile_data_file (dir (ioctl read write create getattr setattr lock relabelto rename open watch watch_reads add_name remove_name reparent search rmdir)))
(allow installd user_profile_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow installd user_profile_data_file (file (unlink)))
(allow installd labeledfs (filesystem (unmount)))
(allow installd profman_dump_data_file (dir (write add_name search)))
(allow installd profman_dump_data_file (file (write create setattr open)))
(allow installd devpts (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
(allow installd toolbox_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
(allow installd servicemanager (binder (call transfer)))
(allow servicemanager installd (binder (call transfer)))
(allow servicemanager installd (dir (search)))
(allow servicemanager installd (file (read open)))
(allow servicemanager installd (process (getattr)))
(allow installd installd_service (service_manager (add find)))
;;* lmx 145 system/sepolicy/prebuilts/api/202404/public/installd.te

(neverallow base_typeattr_556 installd_service (service_manager (add)))
;;* lme

(allow installd dumpstate (fifo_file (write getattr)))
(allow installd system_server (binder (call transfer)))
(allow system_server installd (binder (transfer)))
(allow installd system_server (fd (use)))
(allow installd permission_service (service_manager (find)))
(allow installd block_device (dir (search)))
(allow installd labeledfs (filesystem (quotamod quotaget)))
(allow installd preloads_data_file (file (ioctl read getattr lock map unlink open watch watch_reads)))
(allow installd preloads_data_file (dir (ioctl read write getattr lock open watch watch_reads remove_name search rmdir)))
(allow installd preloads_media_file (file (ioctl read getattr lock map unlink open watch watch_reads)))
(allow installd preloads_media_file (dir (ioctl read write getattr lock open watch watch_reads remove_name search rmdir)))
(allow installd proc_filesystems (file (ioctl read getattr lock map open watch watch_reads)))
(allow installd storage_config_prop (file (read getattr map open)))
(allow installd vold (fd (use)))
;;* lmx 178 system/sepolicy/prebuilts/api/202404/public/installd.te

(neverallow base_typeattr_557 installd_service (service_manager (find)))
;;* lme

;;* lmx 179 system/sepolicy/prebuilts/api/202404/public/installd.te

(neverallow base_typeattr_558 installd (binder (call)))
;;* lme

;;* lmx 185 system/sepolicy/prebuilts/api/202404/public/installd.te

(neverallow installd base_typeattr_559 (binder (call)))
;;* lme

(allow kernel self (capability (sys_nice)))
(allow kernel self (cap_userns (sys_nice)))
(allow kernel rootfs (dir (ioctl read getattr lock open watch watch_reads search)))
(allow kernel rootfs (file (ioctl read getattr lock map open watch watch_reads)))
(allow kernel rootfs (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow kernel proc_bootconfig (file (ioctl read getattr lock map open watch watch_reads)))
(allow kernel proc_cmdline (file (ioctl read getattr lock map open watch watch_reads)))
(allow kernel selinuxfs (dir (ioctl read getattr lock open watch watch_reads search)))
(allow kernel selinuxfs (file (ioctl read getattr lock map open watch watch_reads)))
(allow kernel file_contexts_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow kernel rootfs (file (relabelfrom)))
(allow kernel init_exec (file (relabelto)))
(allow kernel init (process (share)))
(allow kernel unlabeled (dir (search)))
(allow kernel usbfs (filesystem (mount)))
(allow kernel usbfs (dir (search)))
(dontaudit kernel self (security (setenforce)))
(allow kernel self (capability (sys_resource)))
(allow kernel self (cap_userns (sys_resource)))
(allow kernel self (capability (sys_boot)))
(allow kernel self (cap_userns (sys_boot)))
(allow kernel proc_sysrq (file (write lock append map open)))
(allow kernel tmpfs (chr_file (write)))
(allow kernel selinuxfs (file (write)))
(allow kernel self (security (setcheckreqprot)))
(allow kernel sdcard_type (file (read write)))
(allow kernel fuse (file (read write)))
(allow kernel mediaprovider (fd (use)))
(allow kernel vold (fd (use)))
(allow kernel app_data_file (file (read)))
(allow kernel privapp_data_file (file (read)))
(allow kernel asec_image_file (file (read)))
(allow kernel media_rw_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
(allow kernel media_rw_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow kernel vold_data_file (file (read write)))
(allow kernel apexd (fd (use)))
(allow kernel apex_data_file (file (read)))
(allow kernel staging_data_file (file (read)))
(allow kernel vendor_apex_file (file (read)))
(allow kernel system_file (file (execute)))
(allow kernel appdomain_tmpfs (file (read write)))
;;* lmx 128 system/sepolicy/prebuilts/api/202404/public/kernel.te

(neverallow base_typeattr_224 kernel (process (transition dyntransition)))
;;* lme

;;* lmx 138 system/sepolicy/prebuilts/api/202404/public/kernel.te

(neverallow kernel base_typeattr_224 (file (execute_no_trans entrypoint)))
;;* lme

;;* lmx 143 system/sepolicy/prebuilts/api/202404/public/kernel.te

(neverallow kernel self (capability (dac_override dac_read_search)))
(neverallow kernel self (cap_userns (dac_override dac_read_search)))
;;* lme

;;* lmx 146 system/sepolicy/prebuilts/api/202404/public/kernel.te

(neverallow base_typeattr_224 kernel (process (ptrace)))
;;* lme

(allow keystore servicemanager (binder (call transfer)))
(allow servicemanager keystore (binder (call transfer)))
(allow servicemanager keystore (dir (search)))
(allow servicemanager keystore (file (read open)))
(allow servicemanager keystore (process (getattr)))
(allow keystore remote_provisioning_service_server (binder (call transfer)))
(allow remote_provisioning_service_server keystore (binder (transfer)))
(allow keystore remote_provisioning_service_server (fd (use)))
(allow keystore system_server (binder (call transfer)))
(allow system_server keystore (binder (transfer)))
(allow keystore system_server (fd (use)))
(allow keystore wificond (binder (call transfer)))
(allow wificond keystore (binder (transfer)))
(allow keystore wificond (fd (use)))
(allow keystore keystore_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
(allow keystore keystore_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow keystore keystore_data_file (lnk_file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow keystore keystore_data_file (sock_file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow keystore keystore_data_file (fifo_file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow keystore keystore_exec (file (getattr)))
(allow keystore keystore_service (service_manager (add find)))
;;* lmx 16 system/sepolicy/prebuilts/api/202404/public/keystore.te

(neverallow base_typeattr_560 keystore_service (service_manager (add)))
;;* lme

(allow keystore sec_key_att_app_id_provider_service (service_manager (find)))
(allow keystore dropbox_service (service_manager (find)))
(allow keystore remote_provisioning_service (service_manager (find)))
(allow keystore apc_service (service_manager (add find)))
;;* lmx 20 system/sepolicy/prebuilts/api/202404/public/keystore.te

(neverallow base_typeattr_560 apc_service (service_manager (add)))
;;* lme

(allow keystore keystore_compat_hal_service (service_manager (add find)))
;;* lmx 21 system/sepolicy/prebuilts/api/202404/public/keystore.te

(neverallow base_typeattr_560 keystore_compat_hal_service (service_manager (add)))
;;* lme

(allow keystore authorization_service (service_manager (add find)))
;;* lmx 22 system/sepolicy/prebuilts/api/202404/public/keystore.te

(neverallow base_typeattr_560 authorization_service (service_manager (add)))
;;* lme

(allow keystore keystore_maintenance_service (service_manager (add find)))
;;* lmx 23 system/sepolicy/prebuilts/api/202404/public/keystore.te

(neverallow base_typeattr_560 keystore_maintenance_service (service_manager (add)))
;;* lme

(allow keystore keystore_metrics_service (service_manager (add find)))
;;* lmx 24 system/sepolicy/prebuilts/api/202404/public/keystore.te

(neverallow base_typeattr_560 keystore_metrics_service (service_manager (add)))
;;* lme

(allow keystore legacykeystore_service (service_manager (add find)))
;;* lmx 25 system/sepolicy/prebuilts/api/202404/public/keystore.te

(neverallow base_typeattr_560 legacykeystore_service (service_manager (add)))
;;* lme

(allow keystore selinuxfs (dir (ioctl read getattr lock open watch watch_reads search)))
(allow keystore selinuxfs (file (ioctl read getattr lock map open watch watch_reads)))
(allow keystore selinuxfs (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow keystore selinuxfs (file (write lock append map open)))
(allow keystore kernel (security (compute_av)))
(allow keystore self (netlink_selinux_socket (read write create getattr setattr lock relabelfrom relabelto append bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(allow keystore cgroup (dir (ioctl read getattr lock open watch watch_reads search)))
(allow keystore cgroup (file (ioctl read getattr lock map open watch watch_reads)))
(allow keystore cgroup (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow keystore cgroup_v2 (dir (ioctl read getattr lock open watch watch_reads search)))
(allow keystore cgroup_v2 (file (ioctl read getattr lock map open watch watch_reads)))
(allow keystore cgroup_v2 (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lmx 39 system/sepolicy/prebuilts/api/202404/public/keystore.te

(neverallow base_typeattr_560 keystore_data_file (dir (write lock relabelfrom append map unlink link rename execute quotaon mounton audit_access execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent rmdir)))
;;* lme

;;* lmx 40 system/sepolicy/prebuilts/api/202404/public/keystore.te

(neverallow base_typeattr_560 keystore_data_file (file (ioctl read write create setattr lock relabelfrom append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow base_typeattr_560 keystore_data_file (lnk_file (ioctl read write create setattr lock relabelfrom append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow base_typeattr_560 keystore_data_file (sock_file (ioctl read write create setattr lock relabelfrom append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow base_typeattr_560 keystore_data_file (fifo_file (ioctl read write create setattr lock relabelfrom append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 42 system/sepolicy/prebuilts/api/202404/public/keystore.te

(neverallow base_typeattr_561 keystore_data_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 43 system/sepolicy/prebuilts/api/202404/public/keystore.te

(neverallow base_typeattr_561 keystore_data_file (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow base_typeattr_561 keystore_data_file (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow base_typeattr_561 keystore_data_file (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow base_typeattr_561 keystore_data_file (fifo_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 46 system/sepolicy/prebuilts/api/202404/public/keystore.te

(neverallow domain keystore (process (ptrace)))
;;* lme

(allow keystore vendor_security_patch_level_prop (file (read getattr map open)))
(allow keystore keystore_config_prop (file (read getattr map open)))
(allow lmkd self (capability (dac_override dac_read_search kill sys_resource)))
(allow lmkd self (cap_userns (dac_override dac_read_search kill sys_resource)))
(allow lmkd self (capability (ipc_lock)))
(allow lmkd self (cap_userns (ipc_lock)))
(allow lmkd domain (dir (ioctl read getattr lock open watch watch_reads search)))
(allow lmkd domain (file (ioctl read getattr lock map open watch watch_reads)))
(allow lmkd domain (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow lmkd domain (file (write)))
(allow lmkd sysfs_lowmemorykiller (dir (ioctl read getattr lock open watch watch_reads search)))
(allow lmkd sysfs_lowmemorykiller (file (ioctl read getattr lock map open watch watch_reads)))
(allow lmkd sysfs_lowmemorykiller (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow lmkd sysfs_lowmemorykiller (file (write lock append map open)))
(allow lmkd domain (process (sigkill setsched)))
(allow lmkd kernel (process (setsched)))
(allow lmkd cgroup (dir (remove_name rmdir)))
(allow lmkd cgroup_v2 (dir (remove_name rmdir)))
(allow lmkd cgroup (file (ioctl read getattr lock map open watch watch_reads)))
(allow lmkd cgroup_v2 (file (ioctl read getattr lock map open watch watch_reads)))
(allow lmkd self (capability (sys_nice)))
(allow lmkd self (cap_userns (sys_nice)))
(allow lmkd proc_zoneinfo (file (ioctl read getattr lock map open watch watch_reads)))
(allow lmkd proc_vmstat (file (ioctl read getattr lock map open watch watch_reads)))
(allow lmkd domain (dir (read open search)))
(allow lmkd domain (file (read open)))
(allow lmkd proc_sysrq (file (ioctl read write getattr lock append map open watch watch_reads)))
(allow lmkd proc_lowmemorykiller (file (ioctl read getattr lock map open watch watch_reads)))
(allow lmkd proc_meminfo (file (ioctl read getattr lock map open watch watch_reads)))
(allow lmkd proc_pressure_cpu (file (ioctl read getattr lock map open watch watch_reads)))
(allow lmkd proc_pressure_io (file (ioctl read getattr lock map open watch watch_reads)))
(allow lmkd proc_pressure_mem (file (ioctl read write getattr lock append map open watch watch_reads)))
(allow lmkd lmkd_socket (sock_file (write)))
(allow lmkd statsdw_socket (sock_file (write)))
(allow lmkd statsd (unix_dgram_socket (sendto)))
;;* lmx 71 system/sepolicy/prebuilts/api/202404/public/lmkd.te

(neverallow base_typeattr_224 lmkd (process (noatsecure)))
;;* lme

;;* lmx 72 system/sepolicy/prebuilts/api/202404/public/lmkd.te

(neverallow lmkd self (capability (sys_ptrace)))
(neverallow lmkd self (cap_userns (sys_ptrace)))
;;* lme

(allow logd cgroup (dir (ioctl read getattr lock open watch watch_reads search)))
(allow logd cgroup (file (ioctl read getattr lock map open watch watch_reads)))
(allow logd cgroup (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow logd cgroup_v2 (dir (ioctl read getattr lock open watch watch_reads search)))
(allow logd cgroup_v2 (file (ioctl read getattr lock map open watch watch_reads)))
(allow logd cgroup_v2 (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow logd proc_kmsg (dir (ioctl read getattr lock open watch watch_reads search)))
(allow logd proc_kmsg (file (ioctl read getattr lock map open watch watch_reads)))
(allow logd proc_kmsg (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow logd proc_meminfo (dir (ioctl read getattr lock open watch watch_reads search)))
(allow logd proc_meminfo (file (ioctl read getattr lock map open watch watch_reads)))
(allow logd proc_meminfo (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow logd self (capability (setgid setuid setpcap sys_nice audit_control)))
(allow logd self (cap_userns (setgid setuid setpcap sys_nice audit_control)))
(allow logd self (capability2 (syslog)))
(allow logd self (cap2_userns (syslog)))
(allow logd self (netlink_audit_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown nlmsg_write)))
(allow logd kernel (system (syslog_read)))
(allow logd kmsg_device (chr_file (write getattr lock append map open)))
(allow logd system_data_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow logd system_data_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow logd packages_list_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow logd pstorefs (dir (search)))
(allow logd pstorefs (file (ioctl read getattr lock map open watch watch_reads)))
(allow logd runtime_event_log_tags_file (file (ioctl read write getattr lock append map open watch watch_reads)))
(allow logd domain (dir (ioctl read getattr lock open watch watch_reads search)))
(allow logd domain (file (ioctl read getattr lock map open watch watch_reads)))
(allow logd domain (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow logd kernel (system (syslog_mod)))
(allow logd logd_socket (sock_file (write)))
(allow logd logd (unix_stream_socket (connectto)))
(allow logd runtime_event_log_tags_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow runtime_event_log_tags_file tmpfs (filesystem (associate)))
(dontaudit domain runtime_event_log_tags_file (file (read map open)))
(allow logd property_socket (sock_file (write)))
(allow logd init (unix_stream_socket (connectto)))
(allow logd logd_prop (property_service (set)))
(allow logd logd_prop (file (read getattr map open)))
;;* lmx 51 system/sepolicy/prebuilts/api/202404/public/logd.te

(neverallow logd dev_type (blk_file (read write)))
;;* lme

;;* lmx 54 system/sepolicy/prebuilts/api/202404/public/logd.te

(neverallow logd domain (process (ptrace)))
;;* lme

;;* lmx 57 system/sepolicy/prebuilts/api/202404/public/logd.te

(neverallow domain logd (process (ptrace)))
;;* lme

;;* lmx 60 system/sepolicy/prebuilts/api/202404/public/logd.te

(neverallow logd system_file_type (file (write)))
(neverallow logd system_file_type (dir (write)))
(neverallow logd system_file_type (lnk_file (write)))
(neverallow logd system_file_type (chr_file (write)))
(neverallow logd system_file_type (blk_file (write)))
(neverallow logd system_file_type (sock_file (write)))
(neverallow logd system_file_type (fifo_file (write)))
;;* lme

;;* lmx 68 system/sepolicy/prebuilts/api/202404/public/logd.te

(neverallow logd base_typeattr_562 (file (write)))
(neverallow logd base_typeattr_562 (dir (write)))
(neverallow logd base_typeattr_562 (lnk_file (write)))
(neverallow logd base_typeattr_562 (chr_file (write)))
(neverallow logd base_typeattr_562 (blk_file (write)))
(neverallow logd base_typeattr_562 (sock_file (write)))
(neverallow logd base_typeattr_562 (fifo_file (write)))
;;* lme

;;* lmx 71 system/sepolicy/prebuilts/api/202404/public/logd.te

(neverallow base_typeattr_223 logd (process (transition)))
;;* lme

;;* lmx 72 system/sepolicy/prebuilts/api/202404/public/logd.te

(neverallow base_typeattr_224 logd (process (dyntransition)))
;;* lme

;;* lmx 79 system/sepolicy/prebuilts/api/202404/public/logd.te

(neverallow base_typeattr_563 runtime_event_log_tags_file (file (write create setattr relabelfrom append unlink link rename)))
;;* lme

(allow logpersist shell_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
(allow logpersist logcat_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lmx 15 system/sepolicy/prebuilts/api/202404/public/logpersist.te

(neverallow logpersist dev_type (blk_file (read write)))
;;* lme

;;* lmx 18 system/sepolicy/prebuilts/api/202404/public/logpersist.te

(neverallow logpersist domain (process (ptrace)))
;;* lme

;;* lmx 21 system/sepolicy/prebuilts/api/202404/public/logpersist.te

(neverallow logpersist app_data_file_type (file (write)))
(neverallow logpersist app_data_file_type (dir (write)))
(neverallow logpersist app_data_file_type (lnk_file (write)))
(neverallow logpersist app_data_file_type (chr_file (write)))
(neverallow logpersist app_data_file_type (blk_file (write)))
(neverallow logpersist app_data_file_type (sock_file (write)))
(neverallow logpersist app_data_file_type (fifo_file (write)))
(neverallow logpersist system_data_file (file (write)))
(neverallow logpersist system_data_file (dir (write)))
(neverallow logpersist system_data_file (lnk_file (write)))
(neverallow logpersist system_data_file (chr_file (write)))
(neverallow logpersist system_data_file (blk_file (write)))
(neverallow logpersist system_data_file (sock_file (write)))
(neverallow logpersist system_data_file (fifo_file (write)))
;;* lme

;;* lmx 31 system/sepolicy/prebuilts/api/202404/public/logpersist.te

(neverallow base_typeattr_224 logpersist (process (dyntransition)))
;;* lme

(allowx logpersist misc_logd_file (ioctl file (0x6602)))
(allowx logpersist misc_logd_file (ioctl file (0xf512)))
(allow mediadrmserver servicemanager (binder (call transfer)))
(allow servicemanager mediadrmserver (binder (call transfer)))
(allow servicemanager mediadrmserver (dir (search)))
(allow servicemanager mediadrmserver (file (read open)))
(allow servicemanager mediadrmserver (process (getattr)))
(allow mediadrmserver binderservicedomain (binder (call transfer)))
(allow binderservicedomain mediadrmserver (binder (transfer)))
(allow mediadrmserver binderservicedomain (fd (use)))
(allow mediadrmserver appdomain (binder (call transfer)))
(allow appdomain mediadrmserver (binder (transfer)))
(allow mediadrmserver appdomain (fd (use)))
(allow mediadrmserver mediadrmserver_service (service_manager (add find)))
;;* lmx 14 system/sepolicy/prebuilts/api/202404/public/mediadrmserver.te

(neverallow base_typeattr_564 mediadrmserver_service (service_manager (add)))
;;* lme

(allow mediadrmserver mediaserver_service (service_manager (find)))
(allow mediadrmserver mediametrics_service (service_manager (find)))
(allow mediadrmserver processinfo_service (service_manager (find)))
(allow mediadrmserver surfaceflinger_service (service_manager (find)))
(allow mediadrmserver system_file (dir (ioctl read getattr lock open watch watch_reads search)))
(allow mediadrmserver hal_omx_server (binder (call transfer)))
(allow hal_omx_server mediadrmserver (binder (transfer)))
(allow mediadrmserver hal_omx_server (fd (use)))
;;* lmx 30 system/sepolicy/prebuilts/api/202404/public/mediadrmserver.te

(neverallow mediadrmserver fs_type (file (execute_no_trans)))
(neverallow mediadrmserver file_type (file (execute_no_trans)))
;;* lme

;;* lmx 33 system/sepolicy/prebuilts/api/202404/public/mediadrmserver.te

(neverallowx mediadrmserver domain (ioctl tcp_socket (0x6900 0x6902)))
(neverallowx mediadrmserver domain (ioctl udp_socket (0x6900 0x6902)))
(neverallowx mediadrmserver domain (ioctl rawip_socket (0x6900 0x6902)))
;;* lme

;;* lmx 33 system/sepolicy/prebuilts/api/202404/public/mediadrmserver.te

(neverallowx mediadrmserver domain (ioctl tcp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx mediadrmserver domain (ioctl udp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx mediadrmserver domain (ioctl rawip_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
;;* lme

;;* lmx 33 system/sepolicy/prebuilts/api/202404/public/mediadrmserver.te

(neverallowx mediadrmserver domain (ioctl tcp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx mediadrmserver domain (ioctl udp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx mediadrmserver domain (ioctl rawip_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
;;* lme

(allow mediaextractor servicemanager (binder (call transfer)))
(allow servicemanager mediaextractor (binder (call transfer)))
(allow servicemanager mediaextractor (dir (search)))
(allow servicemanager mediaextractor (file (read open)))
(allow servicemanager mediaextractor (process (getattr)))
(allow mediaextractor binderservicedomain (binder (call transfer)))
(allow binderservicedomain mediaextractor (binder (transfer)))
(allow mediaextractor binderservicedomain (fd (use)))
(allow mediaextractor appdomain (binder (call transfer)))
(allow appdomain mediaextractor (binder (transfer)))
(allow mediaextractor appdomain (fd (use)))
(allow mediaextractor mediaextractor_service (service_manager (add find)))
;;* lmx 13 system/sepolicy/prebuilts/api/202404/public/mediaextractor.te

(neverallow base_typeattr_565 mediaextractor_service (service_manager (add)))
;;* lme

(allow mediaextractor mediametrics_service (service_manager (find)))
(allow mediaextractor hidl_token_hwservice (hwservice_manager (find)))
(allow mediaextractor system_server (fd (use)))
(allow mediaextractor cgroup (dir (ioctl read getattr lock open watch watch_reads search)))
(allow mediaextractor cgroup (file (ioctl read getattr lock map open watch watch_reads)))
(allow mediaextractor cgroup (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow mediaextractor cgroup_v2 (dir (ioctl read getattr lock open watch watch_reads search)))
(allow mediaextractor cgroup_v2 (file (ioctl read getattr lock map open watch watch_reads)))
(allow mediaextractor cgroup_v2 (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow mediaextractor proc_meminfo (file (ioctl read getattr lock map open watch watch_reads)))
(allow mediaextractor anr_data_file (file (append)))
(allow mediaextractor dumpstate (fd (use)))
(allow mediaextractor incidentd (fd (use)))
(allow mediaextractor dumpstate (fifo_file (write append)))
(allow mediaextractor incidentd (fifo_file (write append)))
(allow mediaextractor system_server (fifo_file (write append)))
(allow mediaextractor tombstoned (unix_stream_socket (connectto)))
(allow mediaextractor tombstoned (fd (use)))
(allow mediaextractor tombstoned_crash_socket (sock_file (write)))
(allow mediaextractor tombstone_data_file (file (append)))
(allow mediaextractor sdcard_type (file (read getattr)))
(allow mediaextractor fuse (file (read getattr)))
(allow mediaextractor media_rw_data_file (file (read getattr)))
(allow mediaextractor app_data_file (file (read getattr)))
(allow mediaextractor privapp_data_file (file (read getattr)))
(allow mediaextractor apk_data_file (file (read getattr)))
(allow mediaextractor asec_apk_file (file (read getattr)))
(allow mediaextractor ringtone_file (file (read getattr)))
(allow mediaextractor vendor_overlay_file (file (read map)))
(allow mediaextractor system_file (dir (read open)))
;;* lmx 50 system/sepolicy/prebuilts/api/202404/public/mediaextractor.te

(neverallow mediaextractor fs_type (file (execute_no_trans)))
(neverallow mediaextractor file_type (file (execute_no_trans)))
;;* lme

;;* lmx 62 system/sepolicy/prebuilts/api/202404/public/mediaextractor.te

(neverallow mediaextractor domain (udp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind)))
(neverallow mediaextractor domain (rawip_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind)))
;;* lme

;;* lmx 63 system/sepolicy/prebuilts/api/202404/public/mediaextractor.te

(neverallow mediaextractor domain (tcp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind name_connect)))
;;* lme

;;* lmx 72 system/sepolicy/prebuilts/api/202404/public/mediaextractor.te

(neverallow mediaextractor data_file_type (file (open)))
;;* lme

(allow mediametrics servicemanager (binder (call transfer)))
(allow servicemanager mediametrics (binder (call transfer)))
(allow servicemanager mediametrics (dir (search)))
(allow servicemanager mediametrics (file (read open)))
(allow servicemanager mediametrics (process (getattr)))
(allow mediametrics binderservicedomain (binder (call transfer)))
(allow binderservicedomain mediametrics (binder (transfer)))
(allow mediametrics binderservicedomain (fd (use)))
(allow mediametrics mediametrics_service (service_manager (add find)))
;;* lmx 10 system/sepolicy/prebuilts/api/202404/public/mediametrics.te

(neverallow base_typeattr_566 mediametrics_service (service_manager (add)))
;;* lme

(allow mediametrics system_server (fd (use)))
(allow mediametrics cgroup (dir (ioctl read getattr lock open watch watch_reads search)))
(allow mediametrics cgroup (file (ioctl read getattr lock map open watch watch_reads)))
(allow mediametrics cgroup (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow mediametrics cgroup_v2 (dir (ioctl read getattr lock open watch watch_reads search)))
(allow mediametrics cgroup_v2 (file (ioctl read getattr lock map open watch watch_reads)))
(allow mediametrics cgroup_v2 (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow mediametrics proc_meminfo (file (ioctl read getattr lock map open watch watch_reads)))
(allow mediametrics app_data_file (file (write)))
(allow mediametrics privapp_data_file (file (write)))
(allow mediametrics package_native_service (service_manager (find)))
(allow mediametrics statsdw_socket (sock_file (write)))
(allow mediametrics statsd (unix_dgram_socket (sendto)))
;;* lmx 33 system/sepolicy/prebuilts/api/202404/public/mediametrics.te

(neverallow mediametrics fs_type (file (execute_no_trans)))
(neverallow mediametrics file_type (file (execute_no_trans)))
;;* lme

;;* lmx 45 system/sepolicy/prebuilts/api/202404/public/mediametrics.te

(neverallow mediametrics domain (udp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind)))
(neverallow mediametrics domain (rawip_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind)))
;;* lme

;;* lmx 46 system/sepolicy/prebuilts/api/202404/public/mediametrics.te

(neverallow mediametrics domain (tcp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind name_connect)))
;;* lme

(allow mediaserver sdcard_type (dir (ioctl read getattr lock open watch watch_reads search)))
(allow mediaserver sdcard_type (file (ioctl read getattr lock map open watch watch_reads)))
(allow mediaserver sdcard_type (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow mediaserver fuse (dir (ioctl read getattr lock open watch watch_reads search)))
(allow mediaserver fuse (file (ioctl read getattr lock map open watch watch_reads)))
(allow mediaserver fuse (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow mediaserver cgroup (dir (ioctl read getattr lock open watch watch_reads search)))
(allow mediaserver cgroup (file (ioctl read getattr lock map open watch watch_reads)))
(allow mediaserver cgroup (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow mediaserver cgroup_v2 (dir (ioctl read getattr lock open watch watch_reads search)))
(allow mediaserver cgroup_v2 (file (ioctl read getattr lock map open watch watch_reads)))
(allow mediaserver cgroup_v2 (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow mediaserver proc (lnk_file (getattr)))
(allow mediaserver system_file (dir (ioctl read getattr lock open watch watch_reads search)))
(allow mediaserver servicemanager (binder (call transfer)))
(allow servicemanager mediaserver (binder (call transfer)))
(allow servicemanager mediaserver (dir (search)))
(allow servicemanager mediaserver (file (read open)))
(allow servicemanager mediaserver (process (getattr)))
(allow mediaserver binderservicedomain (binder (call transfer)))
(allow binderservicedomain mediaserver (binder (transfer)))
(allow mediaserver binderservicedomain (fd (use)))
(allow mediaserver appdomain (binder (call transfer)))
(allow appdomain mediaserver (binder (transfer)))
(allow mediaserver appdomain (fd (use)))
(allow mediaserver media_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
(allow mediaserver media_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow mediaserver app_data_file (file (ioctl read write getattr lock append map)))
(allow mediaserver privapp_data_file (file (ioctl read write getattr lock append map)))
(allow mediaserver sdcard_type (file (write)))
(allow mediaserver fuse (file (write)))
(allow mediaserver gpu_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
(allow mediaserver gpu_device (dir (ioctl read getattr lock open watch watch_reads search)))
(allow mediaserver video_device (dir (ioctl read getattr lock open watch watch_reads search)))
(allow mediaserver video_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
(allow mediaserver apk_data_file (file (read getattr)))
(allow mediaserver asec_apk_file (file (read getattr)))
(allow mediaserver ringtone_file (file (read getattr)))
(allow mediaserver radio_data_file (file (read getattr)))
(allow mediaserver appdomain (fifo_file (read write getattr)))
(allow mediaserver rpmsg_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
(allow mediaserver system_server (fifo_file (ioctl read getattr lock map open watch watch_reads)))
(allow mediaserver media_rw_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
(allow mediaserver media_rw_data_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow mediaserver media_rw_data_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow mediaserver app_fuse_file (file (read getattr)))
(allow mediaserver drmserver_socket (sock_file (write)))
(allow mediaserver drmserver (unix_stream_socket (connectto)))
(allow mediaserver bluetooth_socket (sock_file (write)))
(allow mediaserver bluetooth (unix_stream_socket (connectto)))
(allow mediaserver statsdw_socket (sock_file (write)))
(allow mediaserver statsd (unix_dgram_socket (sendto)))
(allow mediaserver mediaserver_service (service_manager (add find)))
;;* lmx 72 system/sepolicy/prebuilts/api/202404/public/mediaserver.te

(neverallow base_typeattr_567 mediaserver_service (service_manager (add)))
;;* lme

(allow mediaserver activity_service (service_manager (find)))
(allow mediaserver appops_service (service_manager (find)))
(allow mediaserver audio_service (service_manager (find)))
(allow mediaserver audioserver_service (service_manager (find)))
(allow mediaserver cameraserver_service (service_manager (find)))
(allow mediaserver batterystats_service (service_manager (find)))
(allow mediaserver drmserver_service (service_manager (find)))
(allow mediaserver mediaextractor_service (service_manager (find)))
(allow mediaserver mediametrics_service (service_manager (find)))
(allow mediaserver media_session_service (service_manager (find)))
(allow mediaserver package_native_service (service_manager (find)))
(allow mediaserver permission_service (service_manager (find)))
(allow mediaserver permission_checker_service (service_manager (find)))
(allow mediaserver power_service (service_manager (find)))
(allow mediaserver processinfo_service (service_manager (find)))
(allow mediaserver scheduling_policy_service (service_manager (find)))
(allow mediaserver surfaceflinger_service (service_manager (find)))
(allow mediaserver mediadrmserver_service (service_manager (find)))
(allow mediaserver hidl_token_hwservice (hwservice_manager (find)))
(allow mediaserver oemfs (dir (search)))
(allow mediaserver oemfs (file (ioctl read getattr lock map open watch watch_reads)))
(allow mediaserver bootanim_oem_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow mediaserver vendor_app_file (file (read getattr map)))
(allow drmserver mediaserver (dir (search)))
(allow drmserver mediaserver (file (read open)))
(allow drmserver mediaserver (process (getattr)))
(allow mediaserver drmserver (drmservice (consumeRights setPlaybackStatus openDecryptSession closeDecryptSession initializeDecryptUnit decrypt finalizeDecryptUnit pread)))
(allowx mediaserver self (ioctl tcp_socket ((range 0x5401 0x5404) 0x540b (range 0x540e 0x5411) (range 0x5413 0x5414) (range 0x5450 0x5451))))
(allowx mediaserver self (ioctl udp_socket ((range 0x5401 0x5404) 0x540b (range 0x540e 0x5411) (range 0x5413 0x5414) (range 0x5450 0x5451))))
(allowx mediaserver self (ioctl rawip_socket ((range 0x5401 0x5404) 0x540b (range 0x540e 0x5411) (range 0x5413 0x5414) (range 0x5450 0x5451))))
(allowx mediaserver self (ioctl tcp_socket ((range 0x8906 0x8907) 0x8910 (range 0x8912 0x8913) 0x8915 0x8917 0x8919 0x891b 0x8921 0x8933 0x8938 0x8942)))
(allowx mediaserver self (ioctl udp_socket ((range 0x8906 0x8907) 0x8910 (range 0x8912 0x8913) 0x8915 0x8917 0x8919 0x891b 0x8921 0x8933 0x8938 0x8942)))
(allowx mediaserver self (ioctl rawip_socket ((range 0x8906 0x8907) 0x8910 (range 0x8912 0x8913) 0x8915 0x8917 0x8919 0x891b 0x8921 0x8933 0x8938 0x8942)))
(allowx mediaserver self (ioctl tcp_socket (0x8b01 0x8b05 0x8b07 0x8b09 0x8b0b 0x8b0d 0x8b0f (range 0x8b11 0x8b13) 0x8b21 0x8b23 0x8b25 0x8b27 0x8b29 0x8b2d)))
(allowx mediaserver self (ioctl udp_socket (0x8b01 0x8b05 0x8b07 0x8b09 0x8b0b 0x8b0d 0x8b0f (range 0x8b11 0x8b13) 0x8b21 0x8b23 0x8b25 0x8b27 0x8b29 0x8b2d)))
(allowx mediaserver self (ioctl rawip_socket (0x8b01 0x8b05 0x8b07 0x8b09 0x8b0b 0x8b0d 0x8b0f (range 0x8b11 0x8b13) 0x8b21 0x8b23 0x8b25 0x8b27 0x8b29 0x8b2d)))
(allow mediaserver media_rw_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
(allow mediaserver media_rw_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow mediaserver preloads_media_file (file (ioctl read getattr)))
(allow mediaserver ion_device (chr_file (ioctl read getattr lock map open watch watch_reads)))
(allow mediaserver dmabuf_system_heap_device (chr_file (ioctl read getattr lock map open watch watch_reads)))
(allow mediaserver dmabuf_system_secure_heap_device (chr_file (ioctl read getattr lock map open watch watch_reads)))
(allow mediaserver hal_graphics_allocator (fd (use)))
(allow mediaserver hal_graphics_composer (fd (use)))
(allow mediaserver hal_camera (fd (use)))
(allow mediaserver system_server (fd (use)))
(allow mediaserver vold (fd (use)))
(allow mediaserver vendor_overlay_file (file (read getattr map)))
;;* lmx 155 system/sepolicy/prebuilts/api/202404/public/mediaserver.te

(neverallow mediaserver fs_type (file (execute_no_trans)))
(neverallow mediaserver file_type (file (execute_no_trans)))
;;* lme

;;* lmx 158 system/sepolicy/prebuilts/api/202404/public/mediaserver.te

(neverallowx mediaserver domain (ioctl tcp_socket (0x6900 0x6902)))
(neverallowx mediaserver domain (ioctl udp_socket (0x6900 0x6902)))
(neverallowx mediaserver domain (ioctl rawip_socket (0x6900 0x6902)))
;;* lme

;;* lmx 158 system/sepolicy/prebuilts/api/202404/public/mediaserver.te

(neverallowx mediaserver domain (ioctl tcp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx mediaserver domain (ioctl udp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx mediaserver domain (ioctl rawip_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
;;* lme

;;* lmx 158 system/sepolicy/prebuilts/api/202404/public/mediaserver.te

(neverallowx mediaserver domain (ioctl tcp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx mediaserver domain (ioctl udp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx mediaserver domain (ioctl rawip_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
;;* lme

(allow mediaswcodec aac_drc_prop (file (read getattr map open)))
(allow mediaswcodec anr_data_file (file (append)))
(allow mediaswcodec dumpstate (fd (use)))
(allow mediaswcodec incidentd (fd (use)))
(allow mediaswcodec dumpstate (fifo_file (write append)))
(allow mediaswcodec incidentd (fifo_file (write append)))
(allow mediaswcodec system_server (fifo_file (write append)))
(allow mediaswcodec tombstoned (unix_stream_socket (connectto)))
(allow mediaswcodec tombstoned (fd (use)))
(allow mediaswcodec tombstoned_crash_socket (sock_file (write)))
(allow mediaswcodec tombstone_data_file (file (append)))
;;* lmx 21 system/sepolicy/prebuilts/api/202404/public/mediaswcodec.te

(neverallow mediaswcodec fs_type (file (execute_no_trans)))
(neverallow mediaswcodec file_type (file (execute_no_trans)))
;;* lme

;;* lmx 27 system/sepolicy/prebuilts/api/202404/public/mediaswcodec.te

(neverallow mediaswcodec domain (udp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind)))
(neverallow mediaswcodec domain (rawip_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind)))
;;* lme

;;* lmx 28 system/sepolicy/prebuilts/api/202404/public/mediaswcodec.te

(neverallow mediaswcodec domain (tcp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind name_connect)))
;;* lme

(allow mediaswcodec dmabuf_system_heap_device (chr_file (ioctl read getattr lock map open watch watch_reads)))
(allow mediaswcodec dmabuf_system_secure_heap_device (chr_file (ioctl read getattr lock map open watch watch_reads)))
(allow mediaswcodec gpu_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
(allow mediaswcodec gpu_device (dir (ioctl read getattr lock open watch watch_reads search)))
(allow modprobe proc_modules (file (ioctl read getattr lock map open watch watch_reads)))
(allow modprobe proc_cmdline (file (ioctl read getattr lock map open watch watch_reads)))
(allow modprobe self (capability (sys_module)))
(allow modprobe self (cap_userns (sys_module)))
(allow modprobe kernel (key (search)))
(allow modprobe system_dlkm_file (dir (search)))
(allow modprobe system_dlkm_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow modprobe system_dlkm_file (system (module_load)))
(allow netdomain self (tcp_socket (ioctl read write create getattr setattr lock append map bind connect listen accept getopt setopt shutdown)))
(allow netdomain self (udp_socket (ioctl read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
(allow netdomain self (rawip_socket (ioctl read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
(allow netdomain self (icmp_socket (ioctl read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
(allow netdomain port_type (tcp_socket (name_connect)))
(allow netdomain self (netlink_route_socket (read write create getattr setattr lock append connect getopt setopt shutdown nlmsg_read)))
(allow netdomain dnsproxyd_socket (sock_file (write)))
(allow netdomain netd (unix_stream_socket (connectto)))
(allow netdomain fwmarkd_socket (sock_file (write)))
(allow netdomain netd (unix_stream_socket (connectto)))
(allow netd mdnsd_socket (sock_file (write)))
(allow netd mdnsd (unix_stream_socket (connectto)))
(allowx netd self (ioctl udp_socket (0x6900 0x6902)))
(allowx netd self (ioctl udp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(allowx netd self (ioctl udp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(allow netd cgroup (dir (ioctl read getattr lock open watch watch_reads search)))
(allow netd cgroup (file (ioctl read getattr lock map open watch watch_reads)))
(allow netd cgroup (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow netd system_server (fd (use)))
(allow netd self (capability (kill net_admin net_raw)))
(allow netd self (cap_userns (kill net_admin net_raw)))
(dontaudit netd self (capability (fsetid)))
(dontaudit netd self (cap_userns (fsetid)))
(allow netd tun_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
(allowx netd tun_device (ioctl chr_file (0x54ca 0x54d2)))
(allow netd self (tun_socket (create)))
(allow netd self (netlink_kobject_uevent_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
(allow netd self (netlink_route_socket (nlmsg_write)))
(allow netd self (netlink_nflog_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
(allow netd self (netlink_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
(allow netd self (netlink_tcpdiag_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown nlmsg_read nlmsg_write)))
(allow netd self (netlink_generic_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
(allow netd self (netlink_netfilter_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
(allow netd shell_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
(allow netd system_file (file (getattr map execute execute_no_trans)))
(allow netd devpts (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
(allow netd system_file (file (lock)))
(dontaudit netd system_file (dir (write)))
(allow netd proc_qtaguid_ctrl (file (ioctl read write getattr lock append map open watch watch_reads)))
(allow netd qtaguid_device (chr_file (ioctl read getattr lock map open watch watch_reads)))
(allow netd proc_net_type (dir (ioctl read getattr lock open watch watch_reads search)))
(allow netd proc_net_type (file (ioctl read getattr lock map open watch watch_reads)))
(allow netd proc_net_type (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow netd proc_net_type (file (ioctl read write getattr lock append map open watch watch_reads)))
(allow netd sysfs (dir (ioctl read getattr lock open watch watch_reads search)))
(allow netd sysfs_net (dir (ioctl read getattr lock open watch watch_reads search)))
(allow netd sysfs_net (file (ioctl read getattr lock map open watch watch_reads)))
(allow netd sysfs_net (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow netd sysfs_net (file (write lock append map open)))
(allow netd sysfs_usb (file (write)))
(allow netd cgroup_v2 (dir (ioctl read getattr lock open watch watch_reads search)))
(allow netd cgroup_v2 (file (ioctl read getattr lock map open watch watch_reads)))
(allow netd cgroup_v2 (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow netd self (capability (chown dac_override dac_read_search)))
(allow netd self (cap_userns (chown dac_override dac_read_search)))
(allow netd net_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow netd net_data_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
(allow netd self (capability (fowner)))
(allow netd self (cap_userns (fowner)))
(allow netd system_file (file (lock)))
(allow netd dnsmasq (process (sigkill signal)))
(allow netd servicemanager (binder (call transfer)))
(allow servicemanager netd (binder (call transfer)))
(allow servicemanager netd (dir (search)))
(allow servicemanager netd (file (read open)))
(allow servicemanager netd (process (getattr)))
(allow netd netd_service (service_manager (add find)))
;;* lmx 87 system/sepolicy/prebuilts/api/202404/public/netd.te

(neverallow base_typeattr_568 netd_service (service_manager (add)))
;;* lme

(allow netd dnsresolver_service (service_manager (add find)))
;;* lmx 88 system/sepolicy/prebuilts/api/202404/public/netd.te

(neverallow base_typeattr_568 dnsresolver_service (service_manager (add)))
;;* lme

(allow netd mdns_service (service_manager (add find)))
;;* lmx 89 system/sepolicy/prebuilts/api/202404/public/netd.te

(neverallow base_typeattr_568 mdns_service (service_manager (add)))
;;* lme

(allow netd dumpstate (fifo_file (write getattr)))
(allow netd system_server (binder (call)))
(allow netd permission_service (service_manager (find)))
(allow netd netd_listener_service (service_manager (find)))
(allow netd netdomain (tcp_socket (read write getattr setattr getopt setopt)))
(allow netd netdomain (udp_socket (read write getattr setattr getopt setopt)))
(allow netd netdomain (rawip_socket (read write getattr setattr getopt setopt)))
(allow netd netdomain (tun_socket (read write getattr setattr getopt setopt)))
(allow netd netdomain (icmp_socket (read write getattr setattr getopt setopt)))
(allow netd netdomain (fd (use)))
(allow netd self (netlink_xfrm_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown nlmsg_read nlmsg_write)))
(allow netd system_net_netd_hwservice (hwservice_manager (add find)))
(allow netd hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 113 system/sepolicy/prebuilts/api/202404/public/netd.te

(neverallow base_typeattr_568 system_net_netd_hwservice (hwservice_manager (add)))
;;* lme

(allow netd hwservicemanager (binder (call transfer)))
(allow hwservicemanager netd (binder (call transfer)))
(allow hwservicemanager netd (dir (search)))
(allow hwservicemanager netd (file (read map open)))
(allow hwservicemanager netd (process (getattr)))
(allow system_net_netd_service servicemanager (binder (call transfer)))
(allow servicemanager system_net_netd_service (binder (transfer)))
(allow system_net_netd_service servicemanager (fd (use)))
(allow netd system_net_netd_service (service_manager (add find)))
;;* lmx 118 system/sepolicy/prebuilts/api/202404/public/netd.te

(neverallow base_typeattr_568 system_net_netd_service (service_manager (add)))
;;* lme

;;* lmx 126 system/sepolicy/prebuilts/api/202404/public/netd.te

(neverallow netd dev_type (blk_file (read write)))
;;* lme

;;* lmx 129 system/sepolicy/prebuilts/api/202404/public/netd.te

(neverallow netd domain (process (ptrace)))
;;* lme

;;* lmx 132 system/sepolicy/prebuilts/api/202404/public/netd.te

(neverallow netd system_file_type (file (write)))
(neverallow netd system_file_type (dir (write)))
(neverallow netd system_file_type (lnk_file (write)))
(neverallow netd system_file_type (chr_file (write)))
(neverallow netd system_file_type (blk_file (write)))
(neverallow netd system_file_type (sock_file (write)))
(neverallow netd system_file_type (fifo_file (write)))
;;* lme

;;* lmx 135 system/sepolicy/prebuilts/api/202404/public/netd.te

(neverallow netd app_data_file_type (file (write)))
(neverallow netd app_data_file_type (dir (write)))
(neverallow netd app_data_file_type (lnk_file (write)))
(neverallow netd app_data_file_type (chr_file (write)))
(neverallow netd app_data_file_type (blk_file (write)))
(neverallow netd app_data_file_type (sock_file (write)))
(neverallow netd app_data_file_type (fifo_file (write)))
(neverallow netd system_data_file (file (write)))
(neverallow netd system_data_file (dir (write)))
(neverallow netd system_data_file (lnk_file (write)))
(neverallow netd system_data_file (chr_file (write)))
(neverallow netd system_data_file (blk_file (write)))
(neverallow netd system_data_file (sock_file (write)))
(neverallow netd system_data_file (fifo_file (write)))
;;* lme

;;* lmx 145 system/sepolicy/prebuilts/api/202404/public/netd.te

(neverallow base_typeattr_569 netd_service (service_manager (find)))
;;* lme

;;* lmx 155 system/sepolicy/prebuilts/api/202404/public/netd.te

(neverallow base_typeattr_569 dnsresolver_service (service_manager (find)))
;;* lme

;;* lmx 165 system/sepolicy/prebuilts/api/202404/public/netd.te

(neverallow base_typeattr_569 mdns_service (service_manager (find)))
;;* lme

;;* lmx 168 system/sepolicy/prebuilts/api/202404/public/netd.te

(neverallow base_typeattr_231 netd (binder (call)))
;;* lme

;;* lmx 169 system/sepolicy/prebuilts/api/202404/public/netd.te

(neverallow netd base_typeattr_231 (binder (call)))
;;* lme

;;* lmx 174 system/sepolicy/prebuilts/api/202404/public/netd.te

(neverallow netd proc_net (dir (write create setattr relabelfrom link rename add_name remove_name reparent rmdir)))
;;* lme

(dontaudit netd proc_net (dir (write)))
;;* lmx 177 system/sepolicy/prebuilts/api/202404/public/netd.te

(neverallow netd sysfs_net (dir (write create setattr relabelfrom link rename add_name remove_name reparent rmdir)))
;;* lme

(dontaudit netd sysfs_net (dir (write)))
;;* lmx 181 system/sepolicy/prebuilts/api/202404/public/netd.te

(neverallow netd self (capability (sys_admin)))
;;* lme

(dontaudit netd self (capability (sys_admin)))
(dontaudit netd self (capability (sys_module)))
(dontaudit netd appdomain (unix_stream_socket (read write)))
;;* lmx 5 system/sepolicy/prebuilts/api/202404/public/netutils_wrapper.te

(neverallow domain netutils_wrapper_exec (file (execute_no_trans)))
;;* lme

(allow performanced servicemanager (binder (call transfer)))
(allow servicemanager performanced (binder (call transfer)))
(allow servicemanager performanced (dir (search)))
(allow servicemanager performanced (file (read open)))
(allow servicemanager performanced (process (getattr)))
(allow performanced system_server (binder (call transfer)))
(allow system_server performanced (binder (transfer)))
(allow performanced system_server (fd (use)))
(allow performanced permission_service (service_manager (find)))
(allow init pdx_performance_client_endpoint_socket_type (unix_stream_socket (create bind)))
(allow performanced pdx_performance_client_endpoint_socket_type (unix_stream_socket (read write getattr setattr lock append listen accept getopt setopt shutdown)))
(allow performanced self (process (setsockcreate)))
(allow performanced pdx_performance_client_channel_socket_type (unix_stream_socket (ioctl read write create getattr setattr lock append map bind connect listen accept getopt setopt shutdown)))
;;* lmx 10 system/sepolicy/prebuilts/api/202404/public/performanced.te

(neverallow base_typeattr_570 pdx_performance_client_endpoint_socket_type (unix_stream_socket (listen accept)))
;;* lme

(allow performanced self (capability (setgid setuid sys_nice)))
(allow performanced self (cap_userns (setgid setuid sys_nice)))
(allow performanced appdomain (dir (ioctl read getattr lock open watch watch_reads search)))
(allow performanced bufferhubd (dir (ioctl read getattr lock open watch watch_reads search)))
(allow performanced kernel (dir (ioctl read getattr lock open watch watch_reads search)))
(allow performanced surfaceflinger (dir (ioctl read getattr lock open watch watch_reads search)))
(allow performanced appdomain (file (ioctl read getattr lock map open watch watch_reads)))
(allow performanced appdomain (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow performanced bufferhubd (file (ioctl read getattr lock map open watch watch_reads)))
(allow performanced bufferhubd (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow performanced kernel (file (ioctl read getattr lock map open watch watch_reads)))
(allow performanced kernel (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow performanced surfaceflinger (file (ioctl read getattr lock map open watch watch_reads)))
(allow performanced surfaceflinger (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(dontaudit performanced domain (dir (read)))
(allow performanced appdomain (process (setsched)))
(allow performanced bufferhubd (process (setsched)))
(allow performanced kernel (process (setsched)))
(allow performanced surfaceflinger (process (setsched)))
(allow performanced cgroup (dir (ioctl read getattr lock open watch watch_reads search)))
(allow performanced cgroup (file (ioctl read getattr lock map open watch watch_reads)))
(allow performanced cgroup (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow performanced cgroup_v2 (dir (ioctl read getattr lock open watch watch_reads search)))
(allow performanced cgroup_v2 (file (ioctl read getattr lock map open watch watch_reads)))
(allow performanced cgroup_v2 (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow postinstall update_engine_common (fd (use)))
(allow postinstall update_engine_common (fifo_file (ioctl read write getattr lock append map open watch watch_reads)))
(allow postinstall postinstall_file (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
(allow postinstall postinstall_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow postinstall postinstall_file (dir (ioctl read getattr lock open watch watch_reads search)))
(allow postinstall shell_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
(allow postinstall system_file (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
(allow postinstall toolbox_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
(allow postinstall servicemanager (binder (call transfer)))
(allow servicemanager postinstall (binder (call transfer)))
(allow servicemanager postinstall (dir (search)))
(allow servicemanager postinstall (file (read open)))
(allow servicemanager postinstall (process (getattr)))
(allow postinstall system_server (binder (call transfer)))
(allow system_server postinstall (binder (transfer)))
(allow postinstall system_server (fd (use)))
(allow postinstall otadexopt_service (service_manager (find)))
(allow postinstall sysfs_fs_f2fs (file (ioctl read write getattr lock append map open watch watch_reads)))
(allow postinstall sysfs_fs_f2fs (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lmx 45 system/sepolicy/prebuilts/api/202404/public/postinstall.te

(neverallow base_typeattr_571 postinstall (process (transition dyntransition)))
;;* lme

(allow profman user_profile_data_file (file (read write getattr lock map)))
(allow profman asec_apk_file (file (read map)))
(allow profman apk_data_file (file (read getattr map)))
(allow profman apk_data_file (dir (read getattr search)))
(allow profman oemfs (file (read map)))
(allow profman tmpfs (file (read map)))
(allow profman profman_dump_data_file (file (write map)))
(allow profman app_data_file (file (read write getattr lock map)))
(allow profman privapp_data_file (file (read write getattr lock map)))
(allow profman app_data_file (dir (read getattr search)))
(allow profman privapp_data_file (dir (read getattr search)))
(allow profman device_config_runtime_native_prop (file (read getattr map open)))
(allow profman device_config_runtime_native_boot_prop (file (read getattr map open)))
;;* lmx 31 system/sepolicy/prebuilts/api/202404/public/profman.te

(neverallow profman app_data_file_type (file (open)))
(neverallow profman app_data_file_type (lnk_file (open)))
(neverallow profman app_data_file_type (sock_file (open)))
(neverallow profman app_data_file_type (fifo_file (open)))
;;* lme

;;* lmx 6 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 apexd_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 7 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 bootloader_boot_reason_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 8 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 device_config_activity_manager_native_boot_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 9 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 device_config_boot_count_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 10 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 device_config_input_native_boot_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 11 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 device_config_netd_native_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 12 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 device_config_reset_performed_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 13 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 firstboot_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 15 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 boottime_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 15 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 charger_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 15 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 cold_boot_done_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 15 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 ctl_adbd_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 15 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 ctl_apexd_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 15 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 ctl_bootanim_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 15 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 ctl_bugreport_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 15 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 ctl_console_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 15 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 ctl_dumpstate_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 15 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 ctl_fuse_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 15 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 ctl_gsid_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 15 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 ctl_interface_restart_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 15 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 ctl_interface_stop_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 15 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 ctl_mdnsd_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 15 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 ctl_restart_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 15 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 ctl_rildaemon_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 15 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 ctl_sigstop_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 15 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 dynamic_system_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 15 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 heapprofd_enabled_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 15 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 llkd_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 15 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 lpdumpd_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 15 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 mmc_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 15 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 mock_ota_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 15 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 net_dns_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 15 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 overlay_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 15 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 persistent_properties_ready_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 15 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 safemode_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 15 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 system_lmk_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 15 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 system_trace_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 15 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 test_boot_reason_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 15 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 time_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 15 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 traced_enabled_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 15 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 traced_lazy_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 53 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 aac_drc_prop (property_service (set)))
;;* lme

;;* lmx 54 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 adaptive_haptics_prop (property_service (set)))
;;* lme

;;* lmx 55 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 apex_ready_prop (property_service (set)))
;;* lme

;;* lmx 56 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 arm64_memtag_prop (property_service (set)))
;;* lme

;;* lmx 57 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 binder_cache_bluetooth_server_prop (property_service (set)))
;;* lme

;;* lmx 58 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 binder_cache_system_server_prop (property_service (set)))
;;* lme

;;* lmx 59 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 binder_cache_telephony_server_prop (property_service (set)))
;;* lme

;;* lmx 60 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 boot_status_prop (property_service (set)))
;;* lme

;;* lmx 61 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 bootanim_system_prop (property_service (set)))
;;* lme

;;* lmx 62 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 bootloader_prop (property_service (set)))
;;* lme

;;* lmx 63 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 boottime_public_prop (property_service (set)))
;;* lme

;;* lmx 64 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 bq_config_prop (property_service (set)))
;;* lme

;;* lmx 65 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 build_bootimage_prop (property_service (set)))
;;* lme

;;* lmx 66 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 build_prop (property_service (set)))
;;* lme

;;* lmx 67 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 composd_vm_art_prop (property_service (set)))
;;* lme

;;* lmx 68 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 device_config_aconfig_flags_prop (property_service (set)))
;;* lme

;;* lmx 69 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 device_config_camera_native_prop (property_service (set)))
;;* lme

;;* lmx 70 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 device_config_edgetpu_native_prop (property_service (set)))
;;* lme

;;* lmx 71 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 device_config_media_native_prop (property_service (set)))
;;* lme

;;* lmx 72 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 device_config_nnapi_native_prop (property_service (set)))
;;* lme

;;* lmx 73 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 device_config_runtime_native_boot_prop (property_service (set)))
;;* lme

;;* lmx 74 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 device_config_runtime_native_prop (property_service (set)))
;;* lme

;;* lmx 75 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 device_config_surface_flinger_native_boot_prop (property_service (set)))
;;* lme

;;* lmx 76 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 device_config_vendor_system_native_prop (property_service (set)))
;;* lme

;;* lmx 77 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 device_config_vendor_system_native_boot_prop (property_service (set)))
;;* lme

;;* lmx 78 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 drm_forcel3_prop (property_service (set)))
;;* lme

;;* lmx 79 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 fingerprint_prop (property_service (set)))
;;* lme

;;* lmx 80 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 gwp_asan_prop (property_service (set)))
;;* lme

;;* lmx 81 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 hal_instrumentation_prop (property_service (set)))
;;* lme

;;* lmx 82 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 userdebug_or_eng_prop (property_service (set)))
;;* lme

;;* lmx 83 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 init_service_status_prop (property_service (set)))
;;* lme

;;* lmx 84 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 libc_debug_prop (property_service (set)))
;;* lme

;;* lmx 85 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 module_sdkextensions_prop (property_service (set)))
;;* lme

;;* lmx 86 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 nnapi_ext_deny_product_prop (property_service (set)))
;;* lme

;;* lmx 87 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 persist_wm_debug_prop (property_service (set)))
;;* lme

;;* lmx 88 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 power_debug_prop (property_service (set)))
;;* lme

;;* lmx 89 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 property_service_version_prop (property_service (set)))
;;* lme

;;* lmx 90 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 provisioned_prop (property_service (set)))
;;* lme

;;* lmx 91 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 restorecon_prop (property_service (set)))
;;* lme

;;* lmx 92 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 retaildemo_prop (property_service (set)))
;;* lme

;;* lmx 93 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 servicemanager_prop (property_service (set)))
;;* lme

;;* lmx 94 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 smart_idle_maint_enabled_prop (property_service (set)))
;;* lme

;;* lmx 95 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 socket_hook_prop (property_service (set)))
;;* lme

;;* lmx 96 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 sqlite_log_prop (property_service (set)))
;;* lme

;;* lmx 97 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 surfaceflinger_display_prop (property_service (set)))
;;* lme

;;* lmx 98 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 system_boot_reason_prop (property_service (set)))
;;* lme

;;* lmx 99 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 system_jvmti_agent_prop (property_service (set)))
;;* lme

;;* lmx 100 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 traced_oome_heap_session_count_prop (property_service (set)))
;;* lme

;;* lmx 101 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 ab_update_gki_prop (property_service (set)))
;;* lme

;;* lmx 102 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 usb_prop (property_service (set)))
;;* lme

;;* lmx 103 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 userspace_reboot_exported_prop (property_service (set)))
;;* lme

;;* lmx 104 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 vold_status_prop (property_service (set)))
;;* lme

;;* lmx 105 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 vts_status_prop (property_service (set)))
;;* lme

;;* lmx 107 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 config_prop (property_service (set)))
;;* lme

;;* lmx 107 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 cppreopt_prop (property_service (set)))
;;* lme

;;* lmx 107 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 dalvik_prop (property_service (set)))
;;* lme

;;* lmx 107 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 debuggerd_prop (property_service (set)))
;;* lme

;;* lmx 107 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 device_logging_prop (property_service (set)))
;;* lme

;;* lmx 107 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 dhcp_prop (property_service (set)))
;;* lme

;;* lmx 107 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 dumpstate_prop (property_service (set)))
;;* lme

;;* lmx 107 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 exported3_system_prop (property_service (set)))
;;* lme

;;* lmx 107 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 exported_dumpstate_prop (property_service (set)))
;;* lme

;;* lmx 107 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 exported_secure_prop (property_service (set)))
;;* lme

;;* lmx 107 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 heapprofd_prop (property_service (set)))
;;* lme

;;* lmx 107 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 net_radio_prop (property_service (set)))
;;* lme

;;* lmx 107 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 pan_result_prop (property_service (set)))
;;* lme

;;* lmx 107 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 persist_debug_prop (property_service (set)))
;;* lme

;;* lmx 107 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 shell_prop (property_service (set)))
;;* lme

;;* lmx 107 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 test_harness_prop (property_service (set)))
;;* lme

;;* lmx 107 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 theme_prop (property_service (set)))
;;* lme

;;* lmx 107 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 use_memfd_prop (property_service (set)))
;;* lme

;;* lmx 107 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 vold_prop (property_service (set)))
;;* lme

(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init apexd_config_prop (property_service (set)))
(allow vendor_init apexd_config_prop (file (read getattr map open)))
;;* lmx 131 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_259 apexd_config_prop (property_service (set)))
;;* lme

(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init apexd_select_prop (property_service (set)))
(allow vendor_init apexd_select_prop (file (read getattr map open)))
;;* lmx 132 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_259 apexd_select_prop (property_service (set)))
;;* lme

(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init aaudio_config_prop (property_service (set)))
(allow vendor_init aaudio_config_prop (file (read getattr map open)))
;;* lmx 133 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_259 aaudio_config_prop (property_service (set)))
;;* lme

(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init apk_verity_prop (property_service (set)))
(allow vendor_init apk_verity_prop (file (read getattr map open)))
;;* lmx 134 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_259 apk_verity_prop (property_service (set)))
;;* lme

(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init audio_config_prop (property_service (set)))
(allow vendor_init audio_config_prop (file (read getattr map open)))
;;* lmx 135 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_259 audio_config_prop (property_service (set)))
;;* lme

(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init bootanim_config_prop (property_service (set)))
(allow vendor_init bootanim_config_prop (file (read getattr map open)))
;;* lmx 136 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_259 bootanim_config_prop (property_service (set)))
;;* lme

(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init bluetooth_config_prop (property_service (set)))
(allow vendor_init bluetooth_config_prop (file (read getattr map open)))
;;* lmx 137 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_259 bluetooth_config_prop (property_service (set)))
;;* lme

(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init build_attestation_prop (property_service (set)))
(allow vendor_init build_attestation_prop (file (read getattr map open)))
;;* lmx 138 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_259 build_attestation_prop (property_service (set)))
;;* lme

(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init build_config_prop (property_service (set)))
(allow vendor_init build_config_prop (file (read getattr map open)))
;;* lmx 139 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_259 build_config_prop (property_service (set)))
;;* lme

(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init build_odm_prop (property_service (set)))
(allow vendor_init build_odm_prop (file (read getattr map open)))
;;* lmx 140 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_259 build_odm_prop (property_service (set)))
;;* lme

(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init build_vendor_prop (property_service (set)))
(allow vendor_init build_vendor_prop (file (read getattr map open)))
;;* lmx 141 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_259 build_vendor_prop (property_service (set)))
;;* lme

(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init camera_calibration_prop (property_service (set)))
(allow vendor_init camera_calibration_prop (file (read getattr map open)))
;;* lmx 142 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_259 camera_calibration_prop (property_service (set)))
;;* lme

(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init camera_config_prop (property_service (set)))
(allow vendor_init camera_config_prop (file (read getattr map open)))
;;* lmx 143 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_259 camera_config_prop (property_service (set)))
;;* lme

(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init camera2_extensions_prop (property_service (set)))
(allow vendor_init camera2_extensions_prop (file (read getattr map open)))
;;* lmx 144 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_259 camera2_extensions_prop (property_service (set)))
;;* lme

(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init camerax_extensions_prop (property_service (set)))
(allow vendor_init camerax_extensions_prop (file (read getattr map open)))
;;* lmx 145 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_259 camerax_extensions_prop (property_service (set)))
;;* lme

(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init charger_config_prop (property_service (set)))
(allow vendor_init charger_config_prop (file (read getattr map open)))
;;* lmx 146 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_259 charger_config_prop (property_service (set)))
;;* lme

(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init codec2_config_prop (property_service (set)))
(allow vendor_init codec2_config_prop (file (read getattr map open)))
;;* lmx 147 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_259 codec2_config_prop (property_service (set)))
;;* lme

(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init composd_vm_vendor_prop (property_service (set)))
(allow vendor_init composd_vm_vendor_prop (file (read getattr map open)))
;;* lmx 148 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_259 composd_vm_vendor_prop (property_service (set)))
;;* lme

(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init cpu_variant_prop (property_service (set)))
(allow vendor_init cpu_variant_prop (file (read getattr map open)))
;;* lmx 149 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_259 cpu_variant_prop (property_service (set)))
;;* lme

(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init debugfs_restriction_prop (property_service (set)))
(allow vendor_init debugfs_restriction_prop (file (read getattr map open)))
;;* lmx 150 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_259 debugfs_restriction_prop (property_service (set)))
;;* lme

(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init drm_service_config_prop (property_service (set)))
(allow vendor_init drm_service_config_prop (file (read getattr map open)))
;;* lmx 151 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_259 drm_service_config_prop (property_service (set)))
;;* lme

(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init exported_camera_prop (property_service (set)))
(allow vendor_init exported_camera_prop (file (read getattr map open)))
;;* lmx 152 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_259 exported_camera_prop (property_service (set)))
;;* lme

(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init exported_config_prop (property_service (set)))
(allow vendor_init exported_config_prop (file (read getattr map open)))
;;* lmx 153 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_259 exported_config_prop (property_service (set)))
;;* lme

(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init exported_default_prop (property_service (set)))
(allow vendor_init exported_default_prop (file (read getattr map open)))
;;* lmx 154 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_259 exported_default_prop (property_service (set)))
;;* lme

(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init ffs_config_prop (property_service (set)))
(allow vendor_init ffs_config_prop (file (read getattr map open)))
;;* lmx 155 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_259 ffs_config_prop (property_service (set)))
;;* lme

(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init framework_watchdog_config_prop (property_service (set)))
(allow vendor_init framework_watchdog_config_prop (file (read getattr map open)))
;;* lmx 156 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_259 framework_watchdog_config_prop (property_service (set)))
;;* lme

(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init graphics_config_prop (property_service (set)))
(allow vendor_init graphics_config_prop (file (read getattr map open)))
;;* lmx 157 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_259 graphics_config_prop (property_service (set)))
;;* lme

(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init hdmi_config_prop (property_service (set)))
(allow vendor_init hdmi_config_prop (file (read getattr map open)))
;;* lmx 158 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_259 hdmi_config_prop (property_service (set)))
;;* lme

(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init hw_timeout_multiplier_prop (property_service (set)))
(allow vendor_init hw_timeout_multiplier_prop (file (read getattr map open)))
;;* lmx 159 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_259 hw_timeout_multiplier_prop (property_service (set)))
;;* lme

(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init hypervisor_prop (property_service (set)))
(allow vendor_init hypervisor_prop (file (read getattr map open)))
;;* lmx 160 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_259 hypervisor_prop (property_service (set)))
;;* lme

(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init hypervisor_restricted_prop (property_service (set)))
(allow vendor_init hypervisor_restricted_prop (file (read getattr map open)))
;;* lmx 161 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_259 hypervisor_restricted_prop (property_service (set)))
;;* lme

(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init incremental_prop (property_service (set)))
(allow vendor_init incremental_prop (file (read getattr map open)))
;;* lmx 162 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_259 incremental_prop (property_service (set)))
;;* lme

(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init keyguard_config_prop (property_service (set)))
(allow vendor_init keyguard_config_prop (file (read getattr map open)))
;;* lmx 163 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_259 keyguard_config_prop (property_service (set)))
;;* lme

(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init keystore_config_prop (property_service (set)))
(allow vendor_init keystore_config_prop (file (read getattr map open)))
;;* lmx 164 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_259 keystore_config_prop (property_service (set)))
;;* lme

(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init lmkd_config_prop (property_service (set)))
(allow vendor_init lmkd_config_prop (file (read getattr map open)))
;;* lmx 165 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_259 lmkd_config_prop (property_service (set)))
;;* lme

(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init media_config_prop (property_service (set)))
(allow vendor_init media_config_prop (file (read getattr map open)))
;;* lmx 166 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_259 media_config_prop (property_service (set)))
;;* lme

(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init media_variant_prop (property_service (set)))
(allow vendor_init media_variant_prop (file (read getattr map open)))
;;* lmx 167 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_259 media_variant_prop (property_service (set)))
;;* lme

(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init mediadrm_config_prop (property_service (set)))
(allow vendor_init mediadrm_config_prop (file (read getattr map open)))
;;* lmx 168 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_259 mediadrm_config_prop (property_service (set)))
;;* lme

(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init mm_events_config_prop (property_service (set)))
(allow vendor_init mm_events_config_prop (file (read getattr map open)))
;;* lmx 169 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_259 mm_events_config_prop (property_service (set)))
;;* lme

(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init oem_unlock_prop (property_service (set)))
(allow vendor_init oem_unlock_prop (file (read getattr map open)))
;;* lmx 170 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_259 oem_unlock_prop (property_service (set)))
;;* lme

(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init ota_build_prop (property_service (set)))
(allow vendor_init ota_build_prop (file (read getattr map open)))
;;* lmx 171 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_259 ota_build_prop (property_service (set)))
;;* lme

(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init packagemanager_config_prop (property_service (set)))
(allow vendor_init packagemanager_config_prop (file (read getattr map open)))
;;* lmx 172 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_259 packagemanager_config_prop (property_service (set)))
;;* lme

(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init quick_start_prop (property_service (set)))
(allow vendor_init quick_start_prop (file (read getattr map open)))
;;* lmx 173 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_259 quick_start_prop (property_service (set)))
;;* lme

(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init recovery_config_prop (property_service (set)))
(allow vendor_init recovery_config_prop (file (read getattr map open)))
;;* lmx 174 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_259 recovery_config_prop (property_service (set)))
;;* lme

(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init recovery_usb_config_prop (property_service (set)))
(allow vendor_init recovery_usb_config_prop (file (read getattr map open)))
;;* lmx 175 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_259 recovery_usb_config_prop (property_service (set)))
;;* lme

(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init sendbug_config_prop (property_service (set)))
(allow vendor_init sendbug_config_prop (file (read getattr map open)))
;;* lmx 176 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_259 sendbug_config_prop (property_service (set)))
;;* lme

(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init soc_prop (property_service (set)))
(allow vendor_init soc_prop (file (read getattr map open)))
;;* lmx 177 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_259 soc_prop (property_service (set)))
;;* lme

(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init storage_config_prop (property_service (set)))
(allow vendor_init storage_config_prop (file (read getattr map open)))
;;* lmx 178 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_259 storage_config_prop (property_service (set)))
;;* lme

(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init storagemanager_config_prop (property_service (set)))
(allow vendor_init storagemanager_config_prop (file (read getattr map open)))
;;* lmx 179 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_259 storagemanager_config_prop (property_service (set)))
;;* lme

(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init surfaceflinger_prop (property_service (set)))
(allow vendor_init surfaceflinger_prop (file (read getattr map open)))
;;* lmx 180 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_259 surfaceflinger_prop (property_service (set)))
;;* lme

(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init suspend_prop (property_service (set)))
(allow vendor_init suspend_prop (file (read getattr map open)))
;;* lmx 181 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_259 suspend_prop (property_service (set)))
;;* lme

(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init systemsound_config_prop (property_service (set)))
(allow vendor_init systemsound_config_prop (file (read getattr map open)))
;;* lmx 182 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_259 systemsound_config_prop (property_service (set)))
;;* lme

(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init telephony_config_prop (property_service (set)))
(allow vendor_init telephony_config_prop (file (read getattr map open)))
;;* lmx 183 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_259 telephony_config_prop (property_service (set)))
;;* lme

(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init threadnetwork_config_prop (property_service (set)))
(allow vendor_init threadnetwork_config_prop (file (read getattr map open)))
;;* lmx 184 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_259 threadnetwork_config_prop (property_service (set)))
;;* lme

(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init tombstone_config_prop (property_service (set)))
(allow vendor_init tombstone_config_prop (file (read getattr map open)))
;;* lmx 185 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_259 tombstone_config_prop (property_service (set)))
;;* lme

(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init usb_config_prop (property_service (set)))
(allow vendor_init usb_config_prop (file (read getattr map open)))
;;* lmx 186 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_259 usb_config_prop (property_service (set)))
;;* lme

(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init userspace_reboot_config_prop (property_service (set)))
(allow vendor_init userspace_reboot_config_prop (file (read getattr map open)))
;;* lmx 187 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_259 userspace_reboot_config_prop (property_service (set)))
;;* lme

(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init vehicle_hal_prop (property_service (set)))
(allow vendor_init vehicle_hal_prop (file (read getattr map open)))
;;* lmx 188 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_259 vehicle_hal_prop (property_service (set)))
;;* lme

(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init vendor_security_patch_level_prop (property_service (set)))
(allow vendor_init vendor_security_patch_level_prop (file (read getattr map open)))
;;* lmx 189 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_259 vendor_security_patch_level_prop (property_service (set)))
;;* lme

(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init vendor_socket_hook_prop (property_service (set)))
(allow vendor_init vendor_socket_hook_prop (file (read getattr map open)))
;;* lmx 190 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_259 vendor_socket_hook_prop (property_service (set)))
;;* lme

(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init virtual_ab_prop (property_service (set)))
(allow vendor_init virtual_ab_prop (file (read getattr map open)))
;;* lmx 191 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_259 virtual_ab_prop (property_service (set)))
;;* lme

(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init vndk_prop (property_service (set)))
(allow vendor_init vndk_prop (file (read getattr map open)))
;;* lmx 192 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_259 vndk_prop (property_service (set)))
;;* lme

(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init vts_config_prop (property_service (set)))
(allow vendor_init vts_config_prop (file (read getattr map open)))
;;* lmx 193 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_259 vts_config_prop (property_service (set)))
;;* lme

(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init vold_config_prop (property_service (set)))
(allow vendor_init vold_config_prop (file (read getattr map open)))
;;* lmx 194 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_259 vold_config_prop (property_service (set)))
;;* lme

(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init wifi_config_prop (property_service (set)))
(allow vendor_init wifi_config_prop (file (read getattr map open)))
;;* lmx 195 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_259 wifi_config_prop (property_service (set)))
;;* lme

(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init zram_config_prop (property_service (set)))
(allow vendor_init zram_config_prop (file (read getattr map open)))
;;* lmx 196 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_259 zram_config_prop (property_service (set)))
;;* lme

(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init zygote_config_prop (property_service (set)))
(allow vendor_init zygote_config_prop (file (read getattr map open)))
;;* lmx 197 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_259 zygote_config_prop (property_service (set)))
;;* lme

(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init dck_prop (property_service (set)))
(allow vendor_init dck_prop (file (read getattr map open)))
;;* lmx 198 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_259 dck_prop (property_service (set)))
;;* lme

(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init tuner_config_prop (property_service (set)))
(allow vendor_init tuner_config_prop (file (read getattr map open)))
;;* lmx 199 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_259 tuner_config_prop (property_service (set)))
;;* lme

(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init usb_uvc_enabled_prop (property_service (set)))
(allow vendor_init usb_uvc_enabled_prop (file (read getattr map open)))
;;* lmx 200 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_259 usb_uvc_enabled_prop (property_service (set)))
;;* lme

(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init setupwizard_mode_prop (property_service (set)))
(allow vendor_init setupwizard_mode_prop (file (read getattr map open)))
;;* lmx 201 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_259 setupwizard_mode_prop (property_service (set)))
;;* lme

(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init pm_archiving_enabled_prop (property_service (set)))
(allow vendor_init pm_archiving_enabled_prop (file (read getattr map open)))
;;* lmx 202 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_259 pm_archiving_enabled_prop (property_service (set)))
;;* lme

;;* lmx 264 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_250 default_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 267 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_572 rebootescrow_hal_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 270 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_572 virtual_face_hal_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 273 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_572 virtual_fingerprint_hal_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 340 system/sepolicy/prebuilts/api/202404/public/property.te

(neverallow base_typeattr_572 vendor_default_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

(allow property_type tmpfs (filesystem (associate)))
(allow radio radio_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
(allow radio radio_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow radio radio_data_file (lnk_file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow radio radio_data_file (sock_file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow radio radio_data_file (fifo_file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow radio radio_core_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
(allow radio radio_core_data_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow radio net_data_file (dir (search)))
(allow radio net_data_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow radio radio_service (service_manager (add find)))
;;* lmx 20 system/sepolicy/prebuilts/api/202404/public/radio.te

(neverallow base_typeattr_573 radio_service (service_manager (add)))
;;* lme

(allow radio audioserver_service (service_manager (find)))
(allow radio cameraserver_service (service_manager (find)))
(allow radio drmserver_service (service_manager (find)))
(allow radio mediaserver_service (service_manager (find)))
(allow radio nfc_service (service_manager (find)))
(allow radio app_api_service (service_manager (find)))
(allow radio system_api_service (service_manager (find)))
(allow radio timedetector_service (service_manager (find)))
(allow radio timezonedetector_service (service_manager (find)))
(allow radio hwservicemanager (binder (call transfer)))
(allow hwservicemanager radio (binder (call transfer)))
(allow hwservicemanager radio (dir (search)))
(allow hwservicemanager radio (file (read map open)))
(allow hwservicemanager radio (process (getattr)))
(allow radio proc_cmdline (file (ioctl read getattr lock map open watch watch_reads)))
;;* lmx 165 system/sepolicy/prebuilts/api/202404/public/recovery.te

(neverallow recovery base_typeattr_574 (file (write create setattr relabelfrom append unlink link rename execute execute_no_trans)))
;;* lme

;;* lmx 171 system/sepolicy/prebuilts/api/202404/public/recovery.te

(neverallow recovery base_typeattr_574 (dir (write create setattr relabelfrom link rename add_name remove_name reparent rmdir)))
;;* lme

(allow recovery_persist pstorefs (dir (search)))
(allow recovery_persist pstorefs (file (ioctl read getattr lock map open watch watch_reads)))
(allow recovery_persist recovery_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow recovery_persist recovery_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
(allow recovery_persist cache_file (dir (search)))
(allow recovery_persist cache_file (lnk_file (read)))
(allow recovery_persist cache_recovery_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
(allow recovery_persist cache_recovery_file (file (ioctl read getattr lock map unlink open watch watch_reads)))
;;* lmx 23 system/sepolicy/prebuilts/api/202404/public/recovery_persist.te

(neverallow recovery_persist dev_type (blk_file (read write)))
;;* lme

;;* lmx 26 system/sepolicy/prebuilts/api/202404/public/recovery_persist.te

(neverallow recovery_persist domain (process (ptrace)))
;;* lme

;;* lmx 29 system/sepolicy/prebuilts/api/202404/public/recovery_persist.te

(neverallow recovery_persist system_file_type (file (write)))
(neverallow recovery_persist system_file_type (dir (write)))
(neverallow recovery_persist system_file_type (lnk_file (write)))
(neverallow recovery_persist system_file_type (chr_file (write)))
(neverallow recovery_persist system_file_type (blk_file (write)))
(neverallow recovery_persist system_file_type (sock_file (write)))
(neverallow recovery_persist system_file_type (fifo_file (write)))
;;* lme

;;* lmx 32 system/sepolicy/prebuilts/api/202404/public/recovery_persist.te

(neverallow recovery_persist app_data_file_type (file (write)))
(neverallow recovery_persist app_data_file_type (dir (write)))
(neverallow recovery_persist app_data_file_type (lnk_file (write)))
(neverallow recovery_persist app_data_file_type (chr_file (write)))
(neverallow recovery_persist app_data_file_type (blk_file (write)))
(neverallow recovery_persist app_data_file_type (sock_file (write)))
(neverallow recovery_persist app_data_file_type (fifo_file (write)))
(neverallow recovery_persist system_data_file (file (write)))
(neverallow recovery_persist system_data_file (dir (write)))
(neverallow recovery_persist system_data_file (lnk_file (write)))
(neverallow recovery_persist system_data_file (chr_file (write)))
(neverallow recovery_persist system_data_file (blk_file (write)))
(neverallow recovery_persist system_data_file (sock_file (write)))
(neverallow recovery_persist system_data_file (fifo_file (write)))
;;* lme

(allow recovery_refresh pstorefs (dir (search)))
(allow recovery_refresh pstorefs (file (ioctl read getattr lock map open watch watch_reads)))
;;* lmx 16 system/sepolicy/prebuilts/api/202404/public/recovery_refresh.te

(neverallow recovery_refresh dev_type (blk_file (read write)))
;;* lme

;;* lmx 19 system/sepolicy/prebuilts/api/202404/public/recovery_refresh.te

(neverallow recovery_refresh domain (process (ptrace)))
;;* lme

;;* lmx 22 system/sepolicy/prebuilts/api/202404/public/recovery_refresh.te

(neverallow recovery_refresh system_file_type (file (write)))
(neverallow recovery_refresh system_file_type (dir (write)))
(neverallow recovery_refresh system_file_type (lnk_file (write)))
(neverallow recovery_refresh system_file_type (chr_file (write)))
(neverallow recovery_refresh system_file_type (blk_file (write)))
(neverallow recovery_refresh system_file_type (sock_file (write)))
(neverallow recovery_refresh system_file_type (fifo_file (write)))
;;* lme

;;* lmx 25 system/sepolicy/prebuilts/api/202404/public/recovery_refresh.te

(neverallow recovery_refresh app_data_file_type (file (write)))
(neverallow recovery_refresh app_data_file_type (dir (write)))
(neverallow recovery_refresh app_data_file_type (lnk_file (write)))
(neverallow recovery_refresh app_data_file_type (chr_file (write)))
(neverallow recovery_refresh app_data_file_type (blk_file (write)))
(neverallow recovery_refresh app_data_file_type (sock_file (write)))
(neverallow recovery_refresh app_data_file_type (fifo_file (write)))
(neverallow recovery_refresh system_data_file (file (write)))
(neverallow recovery_refresh system_data_file (dir (write)))
(neverallow recovery_refresh system_data_file (lnk_file (write)))
(neverallow recovery_refresh system_data_file (chr_file (write)))
(neverallow recovery_refresh system_data_file (blk_file (write)))
(neverallow recovery_refresh system_data_file (sock_file (write)))
(neverallow recovery_refresh system_data_file (fifo_file (write)))
;;* lme

(allow remote_provisioning_service_server remote_provisioning_service (service_manager (add find)))
;;* lmx 3 system/sepolicy/prebuilts/api/202404/public/remote_provisioning_service_server.te

(neverallow base_typeattr_575 remote_provisioning_service (service_manager (add)))
;;* lme

(allow remote_provisioning_service_server servicemanager (binder (call transfer)))
(allow servicemanager remote_provisioning_service_server (binder (call transfer)))
(allow servicemanager remote_provisioning_service_server (dir (search)))
(allow servicemanager remote_provisioning_service_server (file (read open)))
(allow servicemanager remote_provisioning_service_server (process (getattr)))
(allow rootdisk_sysdev sysfs (filesystem (associate)))
(allow runas adbd (fd (use)))
(allow runas adbd (process (sigchld)))
(allow runas adbd (unix_stream_socket (read write)))
(allow runas shell (fd (use)))
(allow runas shell (fifo_file (read write)))
(allow runas shell (unix_stream_socket (read write)))
(allow runas devpts (chr_file (ioctl read write)))
(allow runas shell_data_file (file (read write)))
(allow runas system_data_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow runas system_data_file (lnk_file (getattr)))
(allow runas packages_list_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow runas system_data_file (lnk_file (read)))
(dontaudit runas self (capability (dac_override dac_read_search)))
(dontaudit runas self (cap_userns (dac_override dac_read_search)))
(allow runas app_data_file (dir (getattr search)))
(allow runas self (capability (setgid setuid)))
(allow runas self (cap_userns (setgid setuid)))
(allow runas selinuxfs (dir (ioctl read getattr lock open watch watch_reads search)))
(allow runas selinuxfs (file (ioctl read getattr lock map open watch watch_reads)))
(allow runas selinuxfs (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow runas selinuxfs (file (write lock append map open)))
(allow runas kernel (security (check_context)))
(allow runas self (process (setcurrent)))
(allow runas base_typeattr_576 (process (dyntransition)))
(allow runas seapp_contexts_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lmx 42 system/sepolicy/prebuilts/api/202404/public/runas.te

(neverallow runas self (capability (chown dac_override dac_read_search fowner fsetid kill setpcap linux_immutable net_bind_service net_broadcast net_admin net_raw ipc_lock ipc_owner sys_module sys_rawio sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_nice sys_resource sys_time sys_tty_config mknod lease audit_write audit_control setfcap)))
(neverallow runas self (cap_userns (chown dac_override dac_read_search fowner fsetid kill setpcap linux_immutable net_bind_service net_broadcast net_admin net_raw ipc_lock ipc_owner sys_module sys_rawio sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_nice sys_resource sys_time sys_tty_config mknod lease audit_write audit_control setfcap)))
;;* lme

;;* lmx 43 system/sepolicy/prebuilts/api/202404/public/runas.te

(neverallow runas self (capability2 (mac_override mac_admin syslog wake_alarm block_suspend audit_read perfmon)))
(neverallow runas self (cap2_userns (mac_override mac_admin syslog wake_alarm block_suspend audit_read perfmon)))
;;* lme

(allow scheduler_service_server fwk_scheduler_hwservice (hwservice_manager (add find)))
(allow scheduler_service_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 1 system/sepolicy/prebuilts/api/202404/public/scheduler_service_server.te

(neverallow base_typeattr_577 fwk_scheduler_hwservice (hwservice_manager (add)))
;;* lme

(allow sdcardd cgroup (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
(allow sdcardd cgroup_v2 (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
(allow sdcardd fuse_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
(allow sdcardd rootfs (dir (mounton)))
(allow sdcardd sdcardfs (filesystem (remount)))
(allow sdcardd tmpfs (dir (ioctl read getattr lock open watch watch_reads search)))
(allow sdcardd mnt_media_rw_file (dir (ioctl read getattr lock open watch watch_reads search)))
(allow sdcardd storage_file (dir (search)))
(allow sdcardd storage_stub_file (dir (mounton search)))
(allow sdcardd sdcard_type (filesystem (mount unmount)))
(allow sdcardd fuse (filesystem (mount unmount)))
(allow sdcardd self (capability (dac_override dac_read_search setgid setuid sys_admin sys_resource)))
(allow sdcardd self (cap_userns (dac_override dac_read_search setgid setuid sys_admin sys_resource)))
(allow sdcardd sdcard_type (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
(allow sdcardd fuse (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
(allow sdcardd sdcard_type (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow sdcardd fuse (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow sdcardd media_rw_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
(allow sdcardd media_rw_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow sdcardd system_data_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow sdcardd packages_list_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow sdcardd install_data_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow sdcardd install_data_file (dir (search)))
(allow sdcardd vold (fd (use)))
(allow sdcardd vold (fifo_file (read write getattr)))
(allow sdcardd mnt_expand_file (dir (search)))
(allow sdcardd proc_filesystems (file (ioctl read getattr lock map open watch watch_reads)))
;;* lmx 46 system/sepolicy/prebuilts/api/202404/public/sdcardd.te

(neverallow init sdcardd_exec (file (execute)))
;;* lme

;;* lmx 47 system/sepolicy/prebuilts/api/202404/public/sdcardd.te

(neverallow init sdcardd (process (transition dyntransition)))
;;* lme

(allow sensor_service_server fwk_sensor_hwservice (hwservice_manager (add find)))
(allow sensor_service_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 1 system/sepolicy/prebuilts/api/202404/public/sensor_service_server.te

(neverallow base_typeattr_578 fwk_sensor_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 366 system/sepolicy/prebuilts/api/202404/public/service.te

(neverallow domain base_typeattr_579 (service_manager (add find)))
;;* lme

(allow servicemanager self (binder (set_context_mgr)))
(allow servicemanager base_typeattr_580 (binder (transfer)))
(allow servicemanager service_contexts_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow servicemanager vendor_service_contexts_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow servicemanager service_manager_service (service_manager (add find)))
;;* lmx 27 system/sepolicy/prebuilts/api/202404/public/servicemanager.te

(neverallow base_typeattr_581 service_manager_service (service_manager (add)))
;;* lme

(allow servicemanager dumpstate (fd (use)))
(allow servicemanager dumpstate (fifo_file (write)))
(allow servicemanager selinuxfs (dir (ioctl read getattr lock open watch watch_reads search)))
(allow servicemanager selinuxfs (file (ioctl read getattr lock map open watch watch_reads)))
(allow servicemanager selinuxfs (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow servicemanager selinuxfs (file (write lock append map open)))
(allow servicemanager kernel (security (compute_av)))
(allow servicemanager self (netlink_selinux_socket (read write create getattr setattr lock relabelfrom relabelto append bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(allow servicemanager kmsg_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
(allow sgdisk block_device (dir (search)))
(allow sgdisk vold_device (blk_file (ioctl read write getattr lock append map open watch watch_reads)))
(allowx sgdisk vold_device (ioctl blk_file (0x301)))
(allowx sgdisk vold_device (ioctl blk_file (0x1260)))
(allowx sgdisk vold_device (ioctl blk_file (0x125f)))
(allowx sgdisk vold_device (ioctl blk_file (0x127b)))
(allow sgdisk devpts (chr_file (ioctl read write getattr)))
(allow sgdisk vold (fd (use)))
(allow sgdisk vold (fifo_file (read write getattr)))
(allow sgdisk self (capability (sys_admin)))
(allow sgdisk self (cap_userns (sys_admin)))
;;* lmx 35 system/sepolicy/prebuilts/api/202404/public/sgdisk.te

(neverallow base_typeattr_339 sgdisk (process (transition)))
;;* lme

;;* lmx 36 system/sepolicy/prebuilts/api/202404/public/sgdisk.te

(neverallow base_typeattr_224 sgdisk (process (dyntransition)))
;;* lme

;;* lmx 37 system/sepolicy/prebuilts/api/202404/public/sgdisk.te

(neverallow sgdisk base_typeattr_582 (file (entrypoint)))
;;* lme

(allow shell logcat_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
(allow shell logdr_socket (sock_file (write)))
(allow shell logd (unix_stream_socket (connectto)))
(allow shell logd_socket (sock_file (write)))
(allow shell logd (unix_stream_socket (connectto)))
(allow shell logd_prop (file (read getattr map open)))
(allow shell pstorefs (dir (search)))
(allow shell pstorefs (file (ioctl read getattr lock map open watch watch_reads)))
(allow shell rootfs (dir (ioctl read getattr lock open watch watch_reads search)))
(allow shell anr_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
(allow shell anr_data_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow shell shell_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
(allow shell shell_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow shell shell_data_file (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
(allow shell shell_data_file (lnk_file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow shell shell_test_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
(allow shell shell_test_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow shell shell_test_data_file (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
(allow shell shell_test_data_file (lnk_file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow shell shell_test_data_file (sock_file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow shell trace_data_file (file (ioctl read getattr lock map unlink open watch watch_reads)))
(allow shell trace_data_file (dir (ioctl read write getattr lock open watch watch_reads remove_name search)))
(allow shell profman_dump_data_file (dir (ioctl read write getattr lock open watch watch_reads remove_name search)))
(allow shell profman_dump_data_file (file (ioctl read getattr lock map unlink open watch watch_reads)))
(allow shell dumpstate_socket (sock_file (write)))
(allow shell dumpstate (unix_stream_socket (connectto)))
(allow shell devpts (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
(allow shell tty_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
(allow shell console_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
(allow shell input_device (dir (ioctl read getattr lock open watch watch_reads search)))
(allow shell input_device (chr_file (ioctl read getattr lock map open watch watch_reads)))
(allow shell system_file (dir (ioctl read getattr lock open watch watch_reads search)))
(allow shell system_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow shell system_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow shell system_file (file (getattr map execute execute_no_trans)))
(allow shell toolbox_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
(allow shell shell_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
(allow shell zygote_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
(allow shell servicemanager (service_manager (list)))
(allow shell base_typeattr_583 (service_manager (find)))
(allow shell dumpstate (binder (call)))
(allow shell hwservicemanager (binder (call transfer)))
(allow hwservicemanager shell (binder (call transfer)))
(allow hwservicemanager shell (dir (search)))
(allow hwservicemanager shell (file (read map open)))
(allow hwservicemanager shell (process (getattr)))
(allow shell hwservicemanager (hwservice_manager (list)))
(allow shell proc_net_type (dir (ioctl read getattr lock open watch watch_reads search)))
(allow shell proc_net_type (file (ioctl read getattr lock map open watch watch_reads)))
(allow shell proc_net_type (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow shell proc_asound (file (ioctl read getattr lock map open watch watch_reads)))
(allow shell proc_filesystems (file (ioctl read getattr lock map open watch watch_reads)))
(allow shell proc_interrupts (file (ioctl read getattr lock map open watch watch_reads)))
(allow shell proc_loadavg (file (ioctl read getattr lock map open watch watch_reads)))
(allow shell proc_meminfo (file (ioctl read getattr lock map open watch watch_reads)))
(allow shell proc_modules (file (ioctl read getattr lock map open watch watch_reads)))
(allow shell proc_pid_max (file (ioctl read getattr lock map open watch watch_reads)))
(allow shell proc_slabinfo (file (ioctl read getattr lock map open watch watch_reads)))
(allow shell proc_stat (file (ioctl read getattr lock map open watch watch_reads)))
(allow shell proc_timer (file (ioctl read getattr lock map open watch watch_reads)))
(allow shell proc_uptime (file (ioctl read getattr lock map open watch watch_reads)))
(allow shell proc_version (file (ioctl read getattr lock map open watch watch_reads)))
(allow shell proc_vmstat (file (ioctl read getattr lock map open watch watch_reads)))
(allow shell proc_zoneinfo (file (ioctl read getattr lock map open watch watch_reads)))
(allow shell sysfs_net (dir (ioctl read getattr lock open watch watch_reads search)))
(allow shell cgroup (dir (ioctl read getattr lock open watch watch_reads search)))
(allow shell cgroup (file (ioctl read getattr lock map open watch watch_reads)))
(allow shell cgroup (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow shell cgroup_desc_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow shell cgroup_desc_api_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow shell vendor_cgroup_desc_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow shell cgroup_v2 (dir (ioctl read getattr lock open watch watch_reads search)))
(allow shell cgroup_v2 (file (ioctl read getattr lock map open watch watch_reads)))
(allow shell cgroup_v2 (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow shell domain (dir (read getattr open search)))
(allow shell domain (file (read getattr open)))
(allow shell domain (lnk_file (read getattr open)))
(allow shell labeledfs (filesystem (getattr)))
(allow shell proc (filesystem (getattr)))
(allow shell device (dir (getattr)))
(allow shell domain (process (getattr)))
(allow shell selinuxfs (dir (ioctl read getattr lock open watch watch_reads search)))
(allow shell selinuxfs (file (ioctl read getattr lock map open watch watch_reads)))
(allow shell bootchart_data_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
(allow shell bootchart_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow shell self (process (ptrace)))
(allow shell sysfs (dir (ioctl read getattr lock open watch watch_reads search)))
(allow shell sysfs_batteryinfo (dir (ioctl read getattr lock open watch watch_reads search)))
(allow shell sysfs_batteryinfo (file (ioctl read getattr lock map open watch watch_reads)))
(allow shell ion_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
(allow shell dev_type (dir (ioctl read getattr lock open watch watch_reads search)))
(allow shell dev_type (chr_file (getattr)))
(allow shell proc (lnk_file (getattr)))
(allow shell dev_type (blk_file (getattr)))
(allow shell file_contexts_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow shell property_contexts_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow shell seapp_contexts_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow shell service_contexts_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow shell sepolicy_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow shell vendor_shell_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lmx 206 system/sepolicy/prebuilts/api/202404/public/shell.te

(neverallow shell hal_keymint_service (service_manager (find)))
(neverallow shell hal_secureclock_service (service_manager (find)))
(neverallow shell hal_sharedsecret_service (service_manager (find)))
;;* lme

;;* lmx 214 system/sepolicy/prebuilts/api/202404/public/shell.te

(neverallow shell file_type (file (link)))
;;* lme

;;* lmx 217 system/sepolicy/prebuilts/api/202404/public/shell.te

(neverallowx shell domain (ioctl tcp_socket (0x6900 0x6902)))
(neverallowx shell domain (ioctl udp_socket (0x6900 0x6902)))
(neverallowx shell domain (ioctl rawip_socket (0x6900 0x6902)))
;;* lme

;;* lmx 217 system/sepolicy/prebuilts/api/202404/public/shell.te

(neverallowx shell domain (ioctl tcp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx shell domain (ioctl udp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx shell domain (ioctl rawip_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
;;* lme

;;* lmx 217 system/sepolicy/prebuilts/api/202404/public/shell.te

(neverallowx shell domain (ioctl tcp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx shell domain (ioctl udp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx shell domain (ioctl rawip_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
;;* lme

;;* lmx 225 system/sepolicy/prebuilts/api/202404/public/shell.te

(neverallow shell hw_random_device (chr_file (ioctl read write create setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow shell port_device (chr_file (ioctl read write create setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow shell fuse_device (chr_file (ioctl read write create setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
;;* lme

;;* lmx 228 system/sepolicy/prebuilts/api/202404/public/shell.te

(neverallow shell dev_type (blk_file (ioctl read write create setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 237 system/sepolicy/prebuilts/api/202404/public/shell.te

(neverallow shell input_device (chr_file (write create setattr relabelfrom append unlink link rename)))
;;* lme

(allow slideshow kmsg_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
(allow slideshow sysfs_wake_lock (file (ioctl read write getattr lock append map open watch watch_reads)))
(allow slideshow self (capability2 (block_suspend)))
(allow slideshow self (cap2_userns (block_suspend)))
(allow slideshow system_suspend_server (binder (call transfer)))
(allow system_suspend_server slideshow (binder (transfer)))
(allow slideshow system_suspend_server (fd (use)))
(allow slideshow system_suspend_hwservice (hwservice_manager (find)))
(allow slideshow hwservicemanager (binder (call transfer)))
(allow hwservicemanager slideshow (binder (call transfer)))
(allow hwservicemanager slideshow (dir (search)))
(allow hwservicemanager slideshow (file (read map open)))
(allow hwservicemanager slideshow (process (getattr)))
(allow slideshow hwservicemanager_prop (file (read getattr map open)))
(allow slideshow hidl_manager_hwservice (hwservice_manager (find)))
(allow slideshow hal_system_suspend_service (service_manager (find)))
(allow slideshow servicemanager (binder (call transfer)))
(allow servicemanager slideshow (binder (call transfer)))
(allow servicemanager slideshow (dir (search)))
(allow servicemanager slideshow (file (read open)))
(allow servicemanager slideshow (process (getattr)))
(allow slideshow device (dir (ioctl read getattr lock open watch watch_reads search)))
(allow slideshow self (capability (sys_tty_config)))
(allow slideshow self (cap_userns (sys_tty_config)))
(allow slideshow graphics_device (dir (ioctl read getattr lock open watch watch_reads search)))
(allow slideshow graphics_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
(allow slideshow input_device (dir (ioctl read getattr lock open watch watch_reads search)))
(allow slideshow input_device (chr_file (ioctl read getattr lock map open watch watch_reads)))
(allow slideshow tty_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
(allow stats_service_server fwk_stats_hwservice (hwservice_manager (add find)))
(allow stats_service_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 1 system/sepolicy/prebuilts/api/202404/public/stats_service_server.te

(neverallow base_typeattr_584 fwk_stats_hwservice (hwservice_manager (add)))
;;* lme

(allow stats_service_server fwk_stats_service (service_manager (add find)))
;;* lmx 2 system/sepolicy/prebuilts/api/202404/public/stats_service_server.te

(neverallow base_typeattr_584 fwk_stats_service (service_manager (add)))
;;* lme

(allow stats_service_server servicemanager (binder (call transfer)))
(allow servicemanager stats_service_server (binder (call transfer)))
(allow servicemanager stats_service_server (dir (search)))
(allow servicemanager stats_service_server (file (read open)))
(allow servicemanager stats_service_server (process (getattr)))
(allow statsd servicemanager (binder (call transfer)))
(allow servicemanager statsd (binder (call transfer)))
(allow servicemanager statsd (dir (search)))
(allow servicemanager statsd (file (read open)))
(allow servicemanager statsd (process (getattr)))
(allow statsd domain (dir (ioctl read getattr lock open watch watch_reads search)))
(allow statsd domain (file (ioctl read getattr lock map open watch watch_reads)))
(allow statsd domain (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow statsd devpts (chr_file (ioctl read write getattr)))
(allow statsd shell_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
(allow statsd system_file (file (execute_no_trans)))
(allow statsd toolbox_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
(allow statsd stats_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
(allow statsd stats_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow statsd stats_config_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
(allow statsd stats_config_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow statsd appdomain (binder (call transfer)))
(allow appdomain statsd (binder (transfer)))
(allow statsd appdomain (fd (use)))
(allow statsd incidentd (binder (call transfer)))
(allow incidentd statsd (binder (transfer)))
(allow statsd incidentd (fd (use)))
(allow statsd system_server (binder (call transfer)))
(allow system_server statsd (binder (transfer)))
(allow statsd system_server (fd (use)))
(allow statsd traced_probes (binder (call transfer)))
(allow traced_probes statsd (binder (transfer)))
(allow statsd traced_probes (fd (use)))
(allow statsd gpu_service (service_manager (find)))
(allow statsd gpuservice (binder (call transfer)))
(allow gpuservice statsd (binder (transfer)))
(allow statsd gpuservice (fd (use)))
(allow statsd keystore_service (service_manager (find)))
(allow statsd keystore (binder (call transfer)))
(allow keystore statsd (binder (transfer)))
(allow statsd keystore (fd (use)))
(allow statsd mediametrics_service (service_manager (find)))
(allow statsd mediametrics (binder (call transfer)))
(allow mediametrics statsd (binder (transfer)))
(allow statsd mediametrics (fd (use)))
(allow statsd mediaserver_service (service_manager (find)))
(allow statsd mediaserver (binder (call transfer)))
(allow mediaserver statsd (binder (transfer)))
(allow statsd mediaserver (fd (use)))
(allow statsd logcat_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
(allow statsd logdr_socket (sock_file (write)))
(allow statsd logd (unix_stream_socket (connectto)))
(allow statsd logd_socket (sock_file (write)))
(allow statsd logd (unix_stream_socket (connectto)))
(allow statsd app_api_service (service_manager (find)))
(allow statsd system_api_service (service_manager (find)))
(allow statsd incident_service (service_manager (find)))
(allow statsd hal_health_hwservice (hwservice_manager (find)))
(allow statsd dumpstate (fd (use)))
(allow statsd dumpstate (fifo_file (write getattr)))
(allow statsd proc_uid_cputime_showstat (file (read getattr open)))
(allow statsd adbd (fd (use)))
(allow statsd adbd (unix_stream_socket (read write getattr)))
(allow statsd shell (fifo_file (read write getattr)))
(allow statsd statsdw_socket (sock_file (write)))
(allow statsd statsd (unix_dgram_socket (sendto)))
;;* lmx 94 system/sepolicy/prebuilts/api/202404/public/statsd.te

(neverallow base_typeattr_585 stats_data_file (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
;;* lme

;;* lmx 95 system/sepolicy/prebuilts/api/202404/public/statsd.te

(neverallow base_typeattr_586 stats_config_data_file (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
;;* lme

;;* lmx 99 system/sepolicy/prebuilts/api/202404/public/statsd.te

(neverallow base_typeattr_585 stats_data_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 100 system/sepolicy/prebuilts/api/202404/public/statsd.te

(neverallow base_typeattr_586 stats_config_data_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
;;* lme

(allow system_server power_debug_prop (file (read getattr map open)))
(allow system_server property_socket (sock_file (write)))
(allow system_server init (unix_stream_socket (connectto)))
(allow system_server power_debug_prop (property_service (set)))
(allow system_server power_debug_prop (file (read getattr map open)))
;;* lmx 18 system/sepolicy/prebuilts/api/202404/public/system_server.te

(neverallow base_typeattr_587 power_debug_prop (property_service (set)))
;;* lme

(allow system_suspend_internal_server system_suspend_control_internal_service (service_manager (add find)))
;;* lmx 2 system/sepolicy/prebuilts/api/202404/public/system_suspend_internal_server.te

(neverallow base_typeattr_588 system_suspend_control_internal_service (service_manager (add)))
;;* lme

;;* lmx 11 system/sepolicy/prebuilts/api/202404/public/system_suspend_internal_server.te

(neverallow base_typeattr_589 system_suspend_control_internal_service (service_manager (find)))
;;* lme

(allow system_suspend_server hwservicemanager (binder (call transfer)))
(allow hwservicemanager system_suspend_server (binder (call transfer)))
(allow hwservicemanager system_suspend_server (dir (search)))
(allow hwservicemanager system_suspend_server (file (read map open)))
(allow hwservicemanager system_suspend_server (process (getattr)))
(allow system_suspend_server hwservicemanager_prop (file (read getattr map open)))
(allow system_suspend_server system_suspend_hwservice (hwservice_manager (add find)))
(allow system_suspend_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 6 system/sepolicy/prebuilts/api/202404/public/system_suspend_server.te

(neverallow base_typeattr_590 system_suspend_hwservice (hwservice_manager (add)))
;;* lme

(allow tee fingerprint_vendor_data_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
(allow tee fingerprint_vendor_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow tombstoned domain (fd (use)))
(allow tombstoned domain (fifo_file (write)))
(allow tombstoned domain (dir (ioctl read getattr lock open watch watch_reads search)))
(allow tombstoned domain (file (ioctl read getattr lock map open watch watch_reads)))
(allow tombstoned tombstone_data_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
(allow tombstoned tombstone_data_file (file (ioctl read write create getattr setattr lock append map unlink link rename open watch watch_reads)))
(allow tombstoned anr_data_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
(allow tombstoned anr_data_file (file (create getattr append unlink link open)))
(allow toolbox tmpfs (chr_file (ioctl read write)))
(allow toolbox devpts (chr_file (ioctl read write getattr)))
(allow toolbox block_device (dir (search)))
(allow toolbox swap_block_device (blk_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lmx 22 system/sepolicy/prebuilts/api/202404/public/toolbox.te

(neverallow base_typeattr_223 toolbox (process (transition)))
;;* lme

;;* lmx 23 system/sepolicy/prebuilts/api/202404/public/toolbox.te

(neverallow base_typeattr_224 toolbox (process (dyntransition)))
;;* lme

;;* lmx 24 system/sepolicy/prebuilts/api/202404/public/toolbox.te

(neverallow toolbox base_typeattr_591 (file (entrypoint)))
;;* lme

(allow toolbox system_data_root_file (dir (write remove_name)))
(allow toolbox system_data_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search rmdir)))
(allow toolbox system_data_file (file (getattr unlink)))
(allow toolbox media_userdir_file (dir (ioctl read getattr setattr lock open watch watch_reads search)))
(allowx toolbox media_userdir_file (ioctl dir ((range 0x6601 0x6602))))
(allow traceur_app servicemanager (service_manager (list)))
(allow traceur_app hwservicemanager (hwservice_manager (list)))
(allow traceur_app base_typeattr_592 (service_manager (find)))
(dontaudit traceur_app service_manager_type (service_manager (find)))
(dontaudit traceur_app hwservice_manager_type (hwservice_manager (find)))
(dontaudit traceur_app domain (binder (call)))
(allow ueventd kmsg_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
(allow ueventd self (capability (chown dac_override dac_read_search fowner fsetid setgid setuid net_admin sys_rawio mknod)))
(allow ueventd self (cap_userns (chown dac_override dac_read_search fowner fsetid setgid setuid net_admin sys_rawio mknod)))
(allow ueventd device (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow ueventd rootfs (dir (ioctl read getattr lock open watch watch_reads search)))
(allow ueventd rootfs (file (ioctl read getattr lock map open watch watch_reads)))
(allow ueventd rootfs (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow ueventd sysfs_type (file (write lock append map open)))
(allow ueventd sysfs_type (dir (ioctl read getattr lock open watch watch_reads search)))
(allow ueventd sysfs_type (file (ioctl read getattr lock map open watch watch_reads)))
(allow ueventd sysfs_type (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow ueventd sysfs_type (file (setattr relabelfrom relabelto)))
(allow ueventd sysfs_type (lnk_file (setattr relabelfrom relabelto)))
(allow ueventd sysfs_type (dir (setattr relabelfrom relabelto)))
(allow ueventd tmpfs (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
(allow ueventd dev_type (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
(allow ueventd dev_type (lnk_file (create unlink)))
(allow ueventd dev_type (chr_file (create getattr setattr unlink)))
(allow ueventd dev_type (blk_file (create getattr setattr relabelfrom relabelto unlink)))
(allow ueventd self (netlink_kobject_uevent_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
(allow ueventd efs_file (dir (search)))
(allow ueventd efs_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow ueventd selinuxfs (dir (ioctl read getattr lock open watch watch_reads search)))
(allow ueventd selinuxfs (file (ioctl read getattr lock map open watch watch_reads)))
(allow ueventd selinuxfs (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow ueventd base_typeattr_593 (dir (ioctl read getattr lock open watch watch_reads search)))
(allow ueventd base_typeattr_593 (file (ioctl read getattr lock map open watch watch_reads)))
(allow ueventd base_typeattr_593 (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow ueventd apex_mnt_dir (dir (ioctl read getattr lock open watch watch_reads search)))
(allow ueventd file_contexts_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow ueventd self (process (setfscreate)))
(allow ueventd proc_cmdline (file (ioctl read getattr lock map open watch watch_reads)))
(allow ueventd proc_bootconfig (file (ioctl read getattr lock map open watch watch_reads)))
(dontaudit ueventd postinstall_mnt_dir (dir (getattr)))
(allow ueventd self (capability (sys_module)))
(allow ueventd self (cap_userns (sys_module)))
(allow ueventd vendor_file (system (module_load)))
(allow ueventd kernel (key (search)))
(allow ueventd system_bootstrap_lib_file (dir (ioctl read getattr lock open watch watch_reads search)))
(allow ueventd system_bootstrap_lib_file (file (read getattr map execute open)))
(allow ueventd vendor_shell_exec (file (execute)))
(allow ueventd dm_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
(allow ueventd self (capability (sys_admin)))
(allow ueventd apexd_prop (file (read getattr map open)))
;;* lmx 80 system/sepolicy/prebuilts/api/202404/public/ueventd.te

(neverallow ueventd dev_type (blk_file (ioctl read write lock append map link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 83 system/sepolicy/prebuilts/api/202404/public/ueventd.te

(neverallow ueventd port_device (chr_file (ioctl read write lock relabelfrom append map link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
;;* lme

;;* lmx 86 system/sepolicy/prebuilts/api/202404/public/ueventd.te

(neverallow base_typeattr_224 ueventd (process (ptrace)))
;;* lme

;;* lmx 89 system/sepolicy/prebuilts/api/202404/public/ueventd.te

(neverallow ueventd fs_type (file (execute_no_trans)))
(neverallow ueventd file_type (file (execute_no_trans)))
;;* lme

(allow uncrypt self (capability (dac_override dac_read_search)))
(allow uncrypt self (cap_userns (dac_override dac_read_search)))
(allow uncrypt cache_file (dir (search)))
(allow uncrypt cache_recovery_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
(allow uncrypt cache_recovery_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow uncrypt ota_package_file (dir (ioctl read getattr lock open watch watch_reads search)))
(allow uncrypt ota_package_file (file (ioctl read write getattr lock append map open watch watch_reads)))
(allow uncrypt uncrypt_socket (sock_file (write)))
(allow uncrypt uncrypt (unix_stream_socket (connectto)))
(allow uncrypt self (capability (sys_rawio)))
(allow uncrypt self (cap_userns (sys_rawio)))
(allow uncrypt misc_block_device (blk_file (write lock append map open)))
(allow uncrypt block_device (dir (ioctl read getattr lock open watch watch_reads search)))
(allow uncrypt userdata_block_device (blk_file (write lock append map open)))
(allow uncrypt rootfs (dir (ioctl read getattr lock open watch watch_reads search)))
(allow uncrypt rootfs (file (ioctl read getattr lock map open watch watch_reads)))
(allow uncrypt rootfs (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow uncrypt proc_bootconfig (file (ioctl read getattr lock map open watch watch_reads)))
(allow uncrypt proc_cmdline (file (ioctl read getattr lock map open watch watch_reads)))
(allow uncrypt sysfs_dt_firmware_android (dir (ioctl read getattr lock open watch watch_reads search)))
(allow uncrypt sysfs_dt_firmware_android (file (ioctl read getattr lock map open watch watch_reads)))
(allow uncrypt sysfs_dt_firmware_android (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow uncrypt gsi_metadata_file_type (dir (search)))
(allow uncrypt metadata_file (dir (search)))
(allow uncrypt gsi_public_metadata_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow uncrypt proc_bootconfig (file (ioctl read getattr lock map open watch watch_reads)))
(allow uncrypt proc_cmdline (file (ioctl read getattr lock map open watch watch_reads)))
(allow update_engine self (process (setsched)))
(allow update_engine self (capability (fowner sys_admin)))
(allow update_engine self (cap_userns (fowner sys_admin)))
(dontaudit update_engine self (capability (fsetid)))
(dontaudit update_engine self (cap_userns (fsetid)))
(allow update_engine kmsg_device (chr_file (write getattr lock append map open)))
(allow update_engine update_engine_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
(allow update_engine sysfs_wake_lock (file (ioctl read write getattr lock append map open watch watch_reads)))
(allow update_engine self (capability2 (block_suspend)))
(allow update_engine self (cap2_userns (block_suspend)))
(allow update_engine system_suspend_server (binder (call transfer)))
(allow system_suspend_server update_engine (binder (transfer)))
(allow update_engine system_suspend_server (fd (use)))
(allow update_engine system_suspend_hwservice (hwservice_manager (find)))
(allow update_engine hwservicemanager (binder (call transfer)))
(allow hwservicemanager update_engine (binder (call transfer)))
(allow hwservicemanager update_engine (dir (search)))
(allow hwservicemanager update_engine (file (read map open)))
(allow hwservicemanager update_engine (process (getattr)))
(allow update_engine hwservicemanager_prop (file (read getattr map open)))
(allow update_engine hidl_manager_hwservice (hwservice_manager (find)))
(allow update_engine hal_system_suspend_service (service_manager (find)))
(allow update_engine servicemanager (binder (call transfer)))
(allow servicemanager update_engine (binder (call transfer)))
(allow servicemanager update_engine (dir (search)))
(allow servicemanager update_engine (file (read open)))
(allow servicemanager update_engine (process (getattr)))
(dontaudit update_engine kernel (process (setsched)))
(dontaudit update_engine self (capability (sys_rawio)))
(dontaudit update_engine self (cap_userns (sys_rawio)))
(allow update_engine update_engine_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
(allow update_engine update_engine_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow update_engine update_engine_log_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
(allow update_engine update_engine_log_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow update_engine servicemanager (binder (call transfer)))
(allow servicemanager update_engine (binder (call transfer)))
(allow servicemanager update_engine (dir (search)))
(allow servicemanager update_engine (file (read open)))
(allow servicemanager update_engine (process (getattr)))
(allow update_engine update_engine_service (service_manager (add find)))
;;* lmx 34 system/sepolicy/prebuilts/api/202404/public/update_engine.te

(neverallow base_typeattr_594 update_engine_service (service_manager (add)))
;;* lme

(allow update_engine update_engine_stable_service (service_manager (add find)))
;;* lmx 35 system/sepolicy/prebuilts/api/202404/public/update_engine.te

(neverallow base_typeattr_594 update_engine_stable_service (service_manager (add)))
;;* lme

(allow update_engine priv_app (binder (call transfer)))
(allow priv_app update_engine (binder (transfer)))
(allow update_engine priv_app (fd (use)))
(allow update_engine gmscore_app (binder (call transfer)))
(allow gmscore_app update_engine (binder (transfer)))
(allow update_engine gmscore_app (fd (use)))
(allow update_engine system_server (binder (call transfer)))
(allow system_server update_engine (binder (transfer)))
(allow update_engine system_server (fd (use)))
(allow update_engine ota_package_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow update_engine ota_package_file (dir (ioctl read getattr lock open watch watch_reads search)))
(allow update_engine proc_misc (file (ioctl read getattr lock map open watch watch_reads)))
(allow update_engine system_file (dir (ioctl read getattr lock open watch watch_reads search)))
(allow update_engine gsi_metadata_file_type (dir (search)))
(allow update_engine metadata_file (dir (search)))
(allow update_engine gsi_public_metadata_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow update_engine proc_bootconfig (file (ioctl read getattr lock map open watch watch_reads)))
(allow update_engine proc_cmdline (file (ioctl read getattr lock map open watch watch_reads)))
(allow update_engine proc_filesystems (file (ioctl read getattr lock map open watch watch_reads)))
(allow update_engine_common block_device (dir (search)))
(allow update_engine_common boot_block_device (blk_file (ioctl read write getattr lock append map open watch watch_reads)))
(allow update_engine_common system_block_device (blk_file (ioctl read write getattr lock append map open watch watch_reads)))
(allowx update_engine_common dev_type (ioctl blk_file ((range 0x125d 0x125e) 0x1277 (range 0x127c 0x127d) 0x127f)))
(allow update_engine_common misc_block_device (blk_file (ioctl read write getattr lock append map open watch watch_reads)))
(allow update_engine_common rootfs (dir (getattr)))
(allow update_engine_common rootfs (file (ioctl read getattr lock map open watch watch_reads)))
(allow update_engine_common postinstall_mnt_dir (dir (getattr mounton search)))
(allow update_engine_common postinstall_file (filesystem (mount unmount relabelfrom relabelto)))
(allow update_engine_common labeledfs (filesystem (mount unmount relabelfrom)))
(allow update_engine_common postinstall_file (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
(allow update_engine_common postinstall_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow update_engine_common postinstall_file (dir (ioctl read getattr lock open watch watch_reads search)))
(allow update_engine_common cache_file (dir (ioctl read getattr lock open watch watch_reads search)))
(allow update_engine_common cache_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow update_engine_common cache_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow update_engine_common shell_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
(allow update_engine_common postinstall (process (sigkill sigstop signal)))
(allow update_engine_common proc_cmdline (file (ioctl read getattr lock map open watch watch_reads)))
(allow update_engine_common sysfs_dt_firmware_android (dir (ioctl read getattr lock open watch watch_reads search)))
(allow update_engine_common sysfs_dt_firmware_android (file (ioctl read getattr lock map open watch watch_reads)))
(allow update_engine_common sysfs_dt_firmware_android (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow update_engine_common sysfs_dm (dir (ioctl read getattr lock open watch watch_reads search)))
(allow update_engine_common sysfs_dm (file (ioctl read getattr lock map open watch watch_reads)))
(allow update_engine_common sysfs_dm (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow update_engine_common sysfs (dir (ioctl read getattr lock open watch watch_reads search)))
(allow update_engine_common sysfs_fs_f2fs (dir (ioctl read getattr lock open watch watch_reads search)))
(allow update_engine_common dm_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
(allow update_engine_common dm_device (blk_file (ioctl read write getattr lock append map open watch watch_reads)))
(allow update_engine dm_user_device (dir (ioctl read getattr lock open watch watch_reads search)))
(allow update_engine dm_user_device (chr_file (ioctl read getattr lock map open watch watch_reads)))
(allow update_engine_common super_block_device_type (blk_file (ioctl read write getattr lock append map open watch watch_reads)))
(allowx update_engine_common super_block_device_type (ioctl blk_file (0x1278 0x127a)))
(allow update_engine_common block_device (dir (ioctl read getattr lock open watch watch_reads search)))
(allow update_engine_common statsdw_socket (sock_file (write)))
(allow update_engine_common statsd (unix_dgram_socket (sendto)))
(allow update_engine_common virtual_ab_prop (file (read getattr map open)))
(allow update_engine_common ab_update_gki_prop (file (read getattr map open)))
(allow update_engine_common build_bootimage_prop (file (read getattr map open)))
(allow update_engine_common metadata_file (dir (search)))
(allow update_engine_common ota_metadata_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
(allow update_engine_common ota_metadata_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow update_verifier block_device (dir (search)))
(allow update_verifier ota_package_file (dir (ioctl read getattr lock open watch watch_reads search)))
(allow update_verifier ota_package_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow update_verifier sysfs (dir (ioctl read getattr lock open watch watch_reads search)))
(allow update_verifier sysfs_dm (dir (ioctl read getattr lock open watch watch_reads search)))
(allow update_verifier sysfs_dm (file (ioctl read getattr lock map open watch watch_reads)))
(allow update_verifier dm_device (blk_file (ioctl read getattr lock map open watch watch_reads)))
(allow update_verifier kmsg_device (chr_file (write getattr lock append map open)))
(allow update_verifier vold_service (service_manager (find)))
(allow update_verifier servicemanager (binder (call transfer)))
(allow servicemanager update_verifier (binder (transfer)))
(allow update_verifier servicemanager (fd (use)))
(allow update_verifier vold (binder (call transfer)))
(allow vold update_verifier (binder (transfer)))
(allow update_verifier vold (fd (use)))
(allow usbd servicemanager (binder (call transfer)))
(allow servicemanager usbd (binder (transfer)))
(allow usbd servicemanager (fd (use)))
(allow userdata_sysdev sysfs (filesystem (associate)))
(allow vdc devpts (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
(allow vdc kmsg_device (chr_file (write getattr lock append map open)))
(allow vdc servicemanager (binder (call transfer)))
(allow servicemanager vdc (binder (call transfer)))
(allow servicemanager vdc (dir (search)))
(allow servicemanager vdc (file (read open)))
(allow servicemanager vdc (process (getattr)))
(allow vdc vold (binder (call transfer)))
(allow vold vdc (binder (transfer)))
(allow vdc vold (fd (use)))
(allow vdc vold_service (service_manager (find)))
(allow vendor_init init (unix_stream_socket (read write)))
(allow vendor_init kmsg_device (chr_file (write getattr open)))
(allow vendor_init device (dir (mounton)))
(allow vendor_init rootfs (lnk_file (create unlink)))
(allow vendor_init cgroup (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
(allow vendor_init cgroup (file (write lock append map open)))
(allow vendor_init cgroup_v2 (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
(allow vendor_init cgroup_v2 (file (write lock append map open)))
(allow vendor_init configfs (dir (mounton)))
(allow vendor_init configfs (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
(allow vendor_init configfs (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow vendor_init configfs (lnk_file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow vendor_init self (capability (dac_override dac_read_search)))
(allow vendor_init self (cap_userns (dac_override dac_read_search)))
(allow vendor_init self (capability (chown fowner fsetid)))
(allow vendor_init self (cap_userns (chown fowner fsetid)))
(allow vendor_init unencrypted_data_file (dir (search)))
(allow vendor_init unencrypted_data_file (file (ioctl read getattr lock map open watch watch_reads)))
(allowx vendor_init data_file_type (ioctl dir (0x6613 0x6615)))
(allow vendor_init system_data_file (dir (getattr)))
(allow vendor_init base_typeattr_595 (dir (ioctl read write create getattr setattr relabelfrom open add_name remove_name search rmdir)))
(allow vendor_init unlabeled (file (getattr relabelfrom)))
(allow vendor_init unlabeled (dir (getattr relabelfrom)))
(allow vendor_init unlabeled (lnk_file (getattr relabelfrom)))
(allow vendor_init unlabeled (sock_file (getattr relabelfrom)))
(allow vendor_init unlabeled (fifo_file (getattr relabelfrom)))
(allow vendor_init base_typeattr_596 (file (read write create getattr setattr relabelfrom map unlink open)))
(allow vendor_init base_typeattr_597 (sock_file (read create getattr setattr relabelfrom unlink open)))
(allow vendor_init base_typeattr_597 (fifo_file (read create getattr setattr relabelfrom unlink open)))
(allow vendor_init base_typeattr_598 (lnk_file (create getattr setattr relabelfrom unlink)))
(allow vendor_init base_typeattr_599 (file (relabelto)))
(allow vendor_init base_typeattr_599 (dir (relabelto)))
(allow vendor_init base_typeattr_599 (lnk_file (relabelto)))
(allow vendor_init base_typeattr_599 (chr_file (relabelto)))
(allow vendor_init base_typeattr_599 (blk_file (relabelto)))
(allow vendor_init base_typeattr_599 (sock_file (relabelto)))
(allow vendor_init base_typeattr_599 (fifo_file (relabelto)))
(allow vendor_init dev_type (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
(allow vendor_init dev_type (lnk_file (create)))
(allow vendor_init debugfs_tracing (file (write lock append map open)))
(allow vendor_init base_typeattr_600 (file (read setattr map open)))
(allow vendor_init tracefs_type (file (read setattr map open)))
(allow vendor_init base_typeattr_601 (dir (read setattr open search)))
(allow vendor_init dev_type (blk_file (getattr)))
(allow vendor_init proc_net_type (dir (ioctl read getattr lock open watch watch_reads search)))
(allow vendor_init proc_net_type (file (ioctl read getattr lock map open watch watch_reads)))
(allow vendor_init proc_net_type (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow vendor_init proc_net_type (file (write lock append map open)))
(allow vendor_init self (capability (net_admin)))
(allow vendor_init self (cap_userns (net_admin)))
(allow vendor_init proc_page_cluster (file (write lock append map open)))
(allow vendor_init sysfs_type (dir (ioctl read getattr lock open watch watch_reads search)))
(allow vendor_init sysfs_type (lnk_file (read)))
(allow vendor_init base_typeattr_602 (file (ioctl read write getattr lock append map open watch watch_reads)))
(allow vendor_init self (process (setfscreate)))
(allow vendor_init vendor_file_type (dir (ioctl read getattr lock open watch watch_reads search)))
(allow vendor_init vendor_file_type (file (ioctl read getattr lock map open watch watch_reads)))
(allow vendor_init vendor_file_type (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow vendor_init serialno_prop (file (read getattr map open)))
(allow vendor_init self (capability (sys_admin)))
(allow vendor_init self (cap_userns (sys_admin)))
(allow vendor_init misc_block_device (blk_file (write lock append map open)))
(allow vendor_init system_bootstrap_lib_file (dir (ioctl read getattr lock open watch watch_reads search)))
(allow vendor_init system_bootstrap_lib_file (file (read getattr map execute open)))
(allow vendor_init userdata_sysdev (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow vendor_init file_contexts_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow vendor_init self (capability (sys_nice)))
(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init apk_verity_prop (property_service (set)))
(allow vendor_init apk_verity_prop (file (read getattr map open)))
(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init bluetooth_a2dp_offload_prop (property_service (set)))
(allow vendor_init bluetooth_a2dp_offload_prop (file (read getattr map open)))
(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init bluetooth_audio_hal_prop (property_service (set)))
(allow vendor_init bluetooth_audio_hal_prop (file (read getattr map open)))
(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init bluetooth_config_prop (property_service (set)))
(allow vendor_init bluetooth_config_prop (file (read getattr map open)))
(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init camera2_extensions_prop (property_service (set)))
(allow vendor_init camera2_extensions_prop (file (read getattr map open)))
(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init camerax_extensions_prop (property_service (set)))
(allow vendor_init camerax_extensions_prop (file (read getattr map open)))
(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init cpu_variant_prop (property_service (set)))
(allow vendor_init cpu_variant_prop (file (read getattr map open)))
(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init dalvik_config_prop (property_service (set)))
(allow vendor_init dalvik_config_prop (file (read getattr map open)))
(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init dalvik_dynamic_config_prop (property_service (set)))
(allow vendor_init dalvik_dynamic_config_prop (file (read getattr map open)))
(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init dalvik_runtime_prop (property_service (set)))
(allow vendor_init dalvik_runtime_prop (file (read getattr map open)))
(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init debug_prop (property_service (set)))
(allow vendor_init debug_prop (file (read getattr map open)))
(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init exported_bluetooth_prop (property_service (set)))
(allow vendor_init exported_bluetooth_prop (file (read getattr map open)))
(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init exported_camera_prop (property_service (set)))
(allow vendor_init exported_camera_prop (file (read getattr map open)))
(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init exported_config_prop (property_service (set)))
(allow vendor_init exported_config_prop (file (read getattr map open)))
(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init exported_default_prop (property_service (set)))
(allow vendor_init exported_default_prop (file (read getattr map open)))
(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init exported_overlay_prop (property_service (set)))
(allow vendor_init exported_overlay_prop (file (read getattr map open)))
(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init exported_pm_prop (property_service (set)))
(allow vendor_init exported_pm_prop (file (read getattr map open)))
(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init ffs_control_prop (property_service (set)))
(allow vendor_init ffs_control_prop (file (read getattr map open)))
(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init hw_timeout_multiplier_prop (property_service (set)))
(allow vendor_init hw_timeout_multiplier_prop (file (read getattr map open)))
(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init incremental_prop (property_service (set)))
(allow vendor_init incremental_prop (file (read getattr map open)))
(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init lmkd_prop (property_service (set)))
(allow vendor_init lmkd_prop (file (read getattr map open)))
(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init logd_prop (property_service (set)))
(allow vendor_init logd_prop (file (read getattr map open)))
(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init log_tag_prop (property_service (set)))
(allow vendor_init log_tag_prop (file (read getattr map open)))
(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init log_prop (property_service (set)))
(allow vendor_init log_prop (file (read getattr map open)))
(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init graphics_config_writable_prop (property_service (set)))
(allow vendor_init graphics_config_writable_prop (file (read getattr map open)))
(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init qemu_hw_prop (property_service (set)))
(allow vendor_init qemu_hw_prop (file (read getattr map open)))
(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init radio_control_prop (property_service (set)))
(allow vendor_init radio_control_prop (file (read getattr map open)))
(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init rebootescrow_hal_prop (property_service (set)))
(allow vendor_init rebootescrow_hal_prop (file (read getattr map open)))
(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init serialno_prop (property_service (set)))
(allow vendor_init serialno_prop (file (read getattr map open)))
(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init soc_prop (property_service (set)))
(allow vendor_init soc_prop (file (read getattr map open)))
(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init surfaceflinger_color_prop (property_service (set)))
(allow vendor_init surfaceflinger_color_prop (file (read getattr map open)))
(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init usb_control_prop (property_service (set)))
(allow vendor_init usb_control_prop (file (read getattr map open)))
(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init userspace_reboot_config_prop (property_service (set)))
(allow vendor_init userspace_reboot_config_prop (file (read getattr map open)))
(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init vehicle_hal_prop (property_service (set)))
(allow vendor_init vehicle_hal_prop (file (read getattr map open)))
(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init vendor_default_prop (property_service (set)))
(allow vendor_init vendor_default_prop (file (read getattr map open)))
(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init keystore_config_prop (property_service (set)))
(allow vendor_init keystore_config_prop (file (read getattr map open)))
(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init vendor_security_patch_level_prop (property_service (set)))
(allow vendor_init vendor_security_patch_level_prop (file (read getattr map open)))
(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init vndk_prop (property_service (set)))
(allow vendor_init vndk_prop (file (read getattr map open)))
(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init virtual_ab_prop (property_service (set)))
(allow vendor_init virtual_ab_prop (file (read getattr map open)))
(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init vold_post_fs_data_prop (property_service (set)))
(allow vendor_init vold_post_fs_data_prop (file (read getattr map open)))
(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init wifi_hal_prop (property_service (set)))
(allow vendor_init wifi_hal_prop (file (read getattr map open)))
(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init wifi_log_prop (property_service (set)))
(allow vendor_init wifi_log_prop (file (read getattr map open)))
(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init zram_control_prop (property_service (set)))
(allow vendor_init zram_control_prop (file (read getattr map open)))
(allow vendor_init boot_status_prop (file (read getattr map open)))
(allow vendor_init exported3_system_prop (file (read getattr map open)))
(allow vendor_init ota_prop (file (read getattr map open)))
(allow vendor_init power_debug_prop (file (read getattr map open)))
(allow vendor_init provisioned_prop (file (read getattr map open)))
(allow vendor_init retaildemo_prop (file (read getattr map open)))
(allow vendor_init surfaceflinger_display_prop (file (read getattr map open)))
(allow vendor_init test_harness_prop (file (read getattr map open)))
(allow vendor_init theme_prop (file (read getattr map open)))
(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init dck_prop (property_service (set)))
(allow vendor_init dck_prop (file (read getattr map open)))
(allow vendor_init device_config_vendor_system_native_prop (file (read getattr map open)))
(allow vendor_init device_config_vendor_system_native_boot_prop (file (read getattr map open)))
;;* lmx 305 system/sepolicy/prebuilts/api/202404/public/vendor_init.te

(neverallow vendor_init base_typeattr_603 (socket (connect sendto)))
(neverallow vendor_init base_typeattr_603 (tcp_socket (connect sendto)))
(neverallow vendor_init base_typeattr_603 (udp_socket (connect sendto)))
(neverallow vendor_init base_typeattr_603 (rawip_socket (connect sendto)))
(neverallow vendor_init base_typeattr_603 (netlink_socket (connect sendto)))
(neverallow vendor_init base_typeattr_603 (packet_socket (connect sendto)))
(neverallow vendor_init base_typeattr_603 (key_socket (connect sendto)))
(neverallow vendor_init base_typeattr_603 (unix_stream_socket (connect sendto)))
(neverallow vendor_init base_typeattr_603 (unix_dgram_socket (connect sendto)))
(neverallow vendor_init base_typeattr_603 (netlink_route_socket (connect sendto)))
(neverallow vendor_init base_typeattr_603 (netlink_tcpdiag_socket (connect sendto)))
(neverallow vendor_init base_typeattr_603 (netlink_nflog_socket (connect sendto)))
(neverallow vendor_init base_typeattr_603 (netlink_xfrm_socket (connect sendto)))
(neverallow vendor_init base_typeattr_603 (netlink_selinux_socket (connect sendto)))
(neverallow vendor_init base_typeattr_603 (netlink_audit_socket (connect sendto)))
(neverallow vendor_init base_typeattr_603 (netlink_dnrt_socket (connect sendto)))
(neverallow vendor_init base_typeattr_603 (netlink_kobject_uevent_socket (connect sendto)))
(neverallow vendor_init base_typeattr_603 (appletalk_socket (connect sendto)))
(neverallow vendor_init base_typeattr_603 (tun_socket (connect sendto)))
(neverallow vendor_init base_typeattr_603 (netlink_iscsi_socket (connect sendto)))
(neverallow vendor_init base_typeattr_603 (netlink_fib_lookup_socket (connect sendto)))
(neverallow vendor_init base_typeattr_603 (netlink_connector_socket (connect sendto)))
(neverallow vendor_init base_typeattr_603 (netlink_netfilter_socket (connect sendto)))
(neverallow vendor_init base_typeattr_603 (netlink_generic_socket (connect sendto)))
(neverallow vendor_init base_typeattr_603 (netlink_scsitransport_socket (connect sendto)))
(neverallow vendor_init base_typeattr_603 (netlink_rdma_socket (connect sendto)))
(neverallow vendor_init base_typeattr_603 (netlink_crypto_socket (connect sendto)))
(neverallow vendor_init base_typeattr_603 (sctp_socket (connect sendto)))
(neverallow vendor_init base_typeattr_603 (icmp_socket (connect sendto)))
(neverallow vendor_init base_typeattr_603 (ax25_socket (connect sendto)))
(neverallow vendor_init base_typeattr_603 (ipx_socket (connect sendto)))
(neverallow vendor_init base_typeattr_603 (netrom_socket (connect sendto)))
(neverallow vendor_init base_typeattr_603 (atmpvc_socket (connect sendto)))
(neverallow vendor_init base_typeattr_603 (x25_socket (connect sendto)))
(neverallow vendor_init base_typeattr_603 (rose_socket (connect sendto)))
(neverallow vendor_init base_typeattr_603 (decnet_socket (connect sendto)))
(neverallow vendor_init base_typeattr_603 (atmsvc_socket (connect sendto)))
(neverallow vendor_init base_typeattr_603 (rds_socket (connect sendto)))
(neverallow vendor_init base_typeattr_603 (irda_socket (connect sendto)))
(neverallow vendor_init base_typeattr_603 (pppox_socket (connect sendto)))
(neverallow vendor_init base_typeattr_603 (llc_socket (connect sendto)))
(neverallow vendor_init base_typeattr_603 (can_socket (connect sendto)))
(neverallow vendor_init base_typeattr_603 (tipc_socket (connect sendto)))
(neverallow vendor_init base_typeattr_603 (bluetooth_socket (connect sendto)))
(neverallow vendor_init base_typeattr_603 (iucv_socket (connect sendto)))
(neverallow vendor_init base_typeattr_603 (rxrpc_socket (connect sendto)))
(neverallow vendor_init base_typeattr_603 (isdn_socket (connect sendto)))
(neverallow vendor_init base_typeattr_603 (phonet_socket (connect sendto)))
(neverallow vendor_init base_typeattr_603 (ieee802154_socket (connect sendto)))
(neverallow vendor_init base_typeattr_603 (caif_socket (connect sendto)))
(neverallow vendor_init base_typeattr_603 (alg_socket (connect sendto)))
(neverallow vendor_init base_typeattr_603 (nfc_socket (connect sendto)))
(neverallow vendor_init base_typeattr_603 (vsock_socket (connect sendto)))
(neverallow vendor_init base_typeattr_603 (kcm_socket (connect sendto)))
(neverallow vendor_init base_typeattr_603 (qipcrtr_socket (connect sendto)))
(neverallow vendor_init base_typeattr_603 (smc_socket (connect sendto)))
(neverallow vendor_init base_typeattr_603 (xdp_socket (connect sendto)))
;;* lme

;;* lmx 305 system/sepolicy/prebuilts/api/202404/public/vendor_init.te

(neverallow vendor_init base_typeattr_603 (unix_stream_socket (connectto)))
;;* lme

;;* lmx 310 system/sepolicy/prebuilts/api/202404/public/vendor_init.te

(neverallow domain vendor_init (process (dyntransition)))
;;* lme

;;* lmx 311 system/sepolicy/prebuilts/api/202404/public/vendor_init.te

(neverallow base_typeattr_223 vendor_init (process (transition)))
;;* lme

;;* lmx 312 system/sepolicy/prebuilts/api/202404/public/vendor_init.te

(neverallow vendor_init base_typeattr_554 (file (entrypoint)))
;;* lme

;;* lmx 315 system/sepolicy/prebuilts/api/202404/public/vendor_init.te

(neverallow vendor_init app_data_file_type (lnk_file (read)))
;;* lme

;;* lmx 316 system/sepolicy/prebuilts/api/202404/public/vendor_init.te

(neverallow vendor_init shell_data_file (lnk_file (read)))
;;* lme

;;* lmx 318 system/sepolicy/prebuilts/api/202404/public/vendor_init.te

(neverallow vendor_init shell_data_file (dir (write add_name remove_name)))
;;* lme

;;* lmx 321 system/sepolicy/prebuilts/api/202404/public/vendor_init.te

(neverallow vendor_init fs_type (file (execute_no_trans)))
(neverallow vendor_init file_type (file (execute_no_trans)))
;;* lme

;;* lmx 324 system/sepolicy/prebuilts/api/202404/public/vendor_init.te

(neverallow vendor_init service_manager_type (service_manager (add find)))
;;* lme

;;* lmx 325 system/sepolicy/prebuilts/api/202404/public/vendor_init.te

(neverallow vendor_init servicemanager (service_manager (list)))
;;* lme

;;* lmx 328 system/sepolicy/prebuilts/api/202404/public/vendor_init.te

(neverallow base_typeattr_224 vendor_init (process (ptrace)))
;;* lme

(allow vendor_misc_writer misc_block_device (blk_file (write lock append map open)))
(allow vendor_misc_writer block_device (dir (ioctl read getattr lock open watch watch_reads search)))
(dontaudit vendor_misc_writer proc_cmdline (file (ioctl read getattr lock map open watch watch_reads)))
(dontaudit vendor_misc_writer sysfs_dt_firmware_android (dir (search)))
(dontaudit vendor_misc_writer proc_bootconfig (file (ioctl read getattr lock map open watch watch_reads)))
(allow vendor_misc_writer gsi_metadata_file_type (dir (search)))
(allow vendor_misc_writer metadata_file (dir (search)))
(allow vendor_misc_writer gsi_public_metadata_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow vendor_misc_writer proc_bootconfig (file (ioctl read getattr lock map open watch watch_reads)))
(allow vendor_misc_writer proc_cmdline (file (ioctl read getattr lock map open watch watch_reads)))
(allow vendor_shell vendor_shell_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
(allow vendor_shell vendor_toolbox_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
(allow vendor_shell shell (fd (use)))
(allow vendor_shell adbd (fd (use)))
(allow vendor_shell adbd (process (sigchld)))
(allow vendor_shell adbd (unix_stream_socket (ioctl read write getattr)))
(allow vendor_shell devpts (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
(allow vendor_shell tty_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
(allow vendor_shell console_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
(allow vendor_shell input_device (dir (ioctl read getattr lock open watch watch_reads search)))
(allow vendor_shell input_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lmx 8 system/sepolicy/prebuilts/api/202404/public/vendor_toolbox.te

(neverallow base_typeattr_604 vendor_toolbox_exec (file (execute execute_no_trans entrypoint)))
;;* lme

(allow virtual_touchpad servicemanager (binder (call transfer)))
(allow servicemanager virtual_touchpad (binder (call transfer)))
(allow servicemanager virtual_touchpad (dir (search)))
(allow servicemanager virtual_touchpad (file (read open)))
(allow servicemanager virtual_touchpad (process (getattr)))
(allow virtual_touchpad virtual_touchpad_service (service_manager (add find)))
;;* lmx 6 system/sepolicy/prebuilts/api/202404/public/virtual_touchpad.te

(neverallow base_typeattr_605 virtual_touchpad_service (service_manager (add)))
;;* lme

(allow virtual_touchpad system_server (binder (call transfer)))
(allow system_server virtual_touchpad (binder (transfer)))
(allow virtual_touchpad system_server (fd (use)))
(allow virtual_touchpad uhid_device (chr_file (ioctl write lock append map open)))
(allow virtual_touchpad permission_service (service_manager (find)))
(allow vold cache_file (dir (ioctl read getattr lock open watch watch_reads search)))
(allow vold cache_file (file (read getattr)))
(allow vold cache_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow vold base_typeattr_606 (dir (ioctl read getattr lock open watch watch_reads search)))
(allow vold base_typeattr_606 (file (ioctl read getattr lock map open watch watch_reads)))
(allow vold base_typeattr_606 (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow vold sysfs (file (write lock append map open)))
(allow vold sysfs_devices_block (file (write lock append map open)))
(allow vold sysfs_dm (file (write lock append map open)))
(allow vold sysfs_loop (file (write lock append map open)))
(allow vold sysfs_usb (file (write lock append map open)))
(allow vold sysfs_fs_f2fs (file (write lock append map open)))
(allow vold sysfs_zram_uevent (file (write lock append map open)))
(allow vold rootfs (dir (ioctl read getattr lock open watch watch_reads search)))
(allow vold rootfs (file (ioctl read getattr lock map open watch watch_reads)))
(allow vold rootfs (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow vold metadata_file (dir (ioctl read getattr lock open watch watch_reads search)))
(allow vold metadata_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow vold metadata_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow vold proc (file (ioctl read getattr lock map open watch watch_reads)))
(allow vold proc_drop_caches (file (ioctl read getattr lock map open watch watch_reads)))
(allow vold proc_bootconfig (file (ioctl read getattr lock map open watch watch_reads)))
(allow vold proc_cmdline (file (ioctl read getattr lock map open watch watch_reads)))
(allow vold proc_filesystems (file (ioctl read getattr lock map open watch watch_reads)))
(allow vold proc_meminfo (file (ioctl read getattr lock map open watch watch_reads)))
(allow vold proc_mounts (file (ioctl read getattr lock map open watch watch_reads)))
(allow vold file_contexts_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow vold self (process (setexec)))
(allow vold e2fs_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
(allowx vold fs_type (ioctl dir (0x5879)))
(allowx vold file_type (ioctl dir (0x5879)))
(allowx vold data_file_type (ioctl dir (0x6613 0x6615 (range 0x6617 0x6618) 0x661a)))
;;* lmx 63 system/sepolicy/prebuilts/api/202404/public/vold.te

(neverallowx base_typeattr_321 data_file_type (ioctl dir (0x6613)))
;;* lme

;;* lmx 69 system/sepolicy/prebuilts/api/202404/public/vold.te

(neverallowx base_typeattr_339 data_file_type (ioctl dir ((range 0x6617 0x6618) 0x661a)))
;;* lme

(allowx vold vold_metadata_file (ioctl file (0x660b)))
(allowx vold vold_data_file (ioctl file (0x660b)))
(allowx vold vold_metadata_file (ioctl file (0xf514)))
(allowx vold vold_data_file (ioctl file (0xf514)))
(allow vold self (process (setfscreate)))
(allow vold system_file (file (getattr map execute execute_no_trans)))
(allow vold block_device (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
(allow vold device (dir (write)))
(allow vold devpts (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
(allow vold rootfs (dir (mounton)))
(allow vold sdcard_type (dir (mounton)))
(allow vold fuse (dir (mounton)))
(allow vold sdcard_type (filesystem (mount remount unmount)))
(allow vold fuse (filesystem (mount remount unmount)))
(allow vold sdcard_type (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
(allow vold fuse (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
(allow vold mnt_media_rw_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
(allow vold storage_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
(allow vold sdcard_type (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow vold fuse (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow vold mnt_media_rw_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow vold storage_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow vold media_rw_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
(allow vold media_rw_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow vold media_rw_data_file (dir (mounton)))
(allowx vold media_rw_data_file (ioctl file ((range 0x581f 0x5820))))
(allowx vold media_rw_data_file (ioctl dir ((range 0x581f 0x5820))))
(allowx vold media_rw_data_file (ioctl file ((range 0x6601 0x6602))))
(allowx vold media_rw_data_file (ioctl dir ((range 0x6601 0x6602))))
(allow vold mnt_media_rw_stub_file (dir (create getattr setattr mounton rmdir)))
(allow vold storage_stub_file (dir (create getattr setattr mounton rmdir)))
(allow vold mnt_user_file (dir (ioctl read write create getattr setattr lock rename mounton open watch watch_reads add_name remove_name reparent search rmdir)))
(allow vold mnt_user_file (lnk_file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow vold mnt_user_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow vold mnt_pass_through_file (dir (ioctl read write create getattr setattr lock rename mounton open watch watch_reads add_name remove_name reparent search rmdir)))
(allow vold mnt_pass_through_file (lnk_file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow vold mnt_expand_file (dir (ioctl read write create getattr setattr lock rename mounton open watch watch_reads add_name remove_name reparent search rmdir)))
(allow vold apk_data_file (dir (create getattr setattr)))
(allow vold shell_data_file (dir (create getattr setattr)))
(allow vold system_userdir_file (dir (create getattr setattr)))
(allow vold media_userdir_file (dir (ioctl read create getattr setattr open)))
(allowx vold media_userdir_file (ioctl dir ((range 0x6601 0x6602))))
(allow vold apk_data_file (dir (ioctl read write getattr lock mounton open watch watch_reads add_name remove_name search)))
(allow vold apk_data_file (file (ioctl read write getattr lock append map unlink open watch watch_reads)))
(allow vold apk_tmp_file (dir (ioctl read getattr lock mounton open watch watch_reads search)))
(allow vold incremental_control_file (file (ioctl read getattr lock relabelto map open watch watch_reads)))
(allow vold tmpfs (filesystem (mount unmount)))
(allow vold tmpfs (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
(allow vold tmpfs (dir (mounton)))
(allow vold self (capability (chown dac_override dac_read_search fowner fsetid net_admin sys_admin mknod)))
(allow vold self (cap_userns (chown dac_override dac_read_search fowner fsetid net_admin sys_admin mknod)))
(allow vold self (netlink_kobject_uevent_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
(allow vold loop_control_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
(allow vold loop_device (blk_file (ioctl read write create getattr setattr lock append map unlink open watch watch_reads)))
(allowx vold loop_device (ioctl blk_file ((range 0x4c00 0x4c01) (range 0x4c04 0x4c05) 0x4c82)))
(allow vold vold_device (blk_file (ioctl read write create getattr setattr lock append map unlink open watch watch_reads)))
(allowx vold vold_device (ioctl blk_file (0x1260 0x1277)))
(allow vold dm_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
(allow vold dm_device (blk_file (ioctl read write getattr lock append map open watch watch_reads)))
(allowx vold dm_device (ioctl blk_file (0x1277 0x127d (range 0x1282 0x1283))))
(allow vold domain (dir (ioctl read getattr lock open watch watch_reads search)))
(allow vold domain (file (ioctl read getattr lock map open watch watch_reads)))
(allow vold domain (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow vold domain (process (sigkill signal)))
(allow vold self (capability (kill sys_ptrace)))
(allow vold self (cap_userns (kill sys_ptrace)))
(allow vold kmsg_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
(allow vold fsck_exec (file (ioctl read getattr lock map execute open watch watch_reads)))
(allow vold fscklogs (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
(allow vold fscklogs (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow vold labeledfs (filesystem (mount remount unmount)))
(allow vold system_data_root_file (dir (ioctl read write create getattr setattr lock rename mounton open watch watch_reads add_name remove_name reparent search rmdir)))
(allow vold system_data_file (dir (ioctl read write create getattr setattr lock rename mounton open watch watch_reads add_name remove_name reparent search rmdir)))
(allow vold system_data_file (lnk_file (getattr)))
(allow vold vendor_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
(allow vold system_data_file (file (read)))
(allow vold kernel (process (setsched)))
(allow vold asec_image_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow vold asec_image_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
(allow vold asec_apk_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto rename mounton open watch watch_reads add_name remove_name reparent search rmdir)))
(allow vold asec_public_file (dir (setattr relabelto)))
(allow vold asec_apk_file (file (ioctl read getattr setattr lock relabelfrom relabelto map open watch watch_reads)))
(allow vold asec_public_file (file (setattr relabelto)))
(allow vold unlabeled (dir (ioctl read getattr setattr lock relabelfrom open watch watch_reads search)))
(allow vold unlabeled (file (ioctl read getattr setattr lock relabelfrom map open watch watch_reads)))
(allow vold fusectlfs (file (ioctl read write getattr lock append map open watch watch_reads)))
(allow vold fusectlfs (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
(allow vold sysfs_wake_lock (file (ioctl read write getattr lock append map open watch watch_reads)))
(allow vold self (capability2 (block_suspend)))
(allow vold self (cap2_userns (block_suspend)))
(allow vold system_suspend_server (binder (call transfer)))
(allow system_suspend_server vold (binder (transfer)))
(allow vold system_suspend_server (fd (use)))
(allow vold system_suspend_hwservice (hwservice_manager (find)))
(allow vold hwservicemanager (binder (call transfer)))
(allow hwservicemanager vold (binder (call transfer)))
(allow hwservicemanager vold (dir (search)))
(allow hwservicemanager vold (file (read map open)))
(allow hwservicemanager vold (process (getattr)))
(allow vold hwservicemanager_prop (file (read getattr map open)))
(allow vold hidl_manager_hwservice (hwservice_manager (find)))
(allow vold hal_system_suspend_service (service_manager (find)))
(allow vold servicemanager (binder (call transfer)))
(allow servicemanager vold (binder (call transfer)))
(allow servicemanager vold (dir (search)))
(allow servicemanager vold (file (read open)))
(allow servicemanager vold (process (getattr)))
(allow vold servicemanager (binder (call transfer)))
(allow servicemanager vold (binder (call transfer)))
(allow servicemanager vold (dir (search)))
(allow servicemanager vold (file (read open)))
(allow servicemanager vold (process (getattr)))
(allow vold vold_service (service_manager (add find)))
;;* lmx 218 system/sepolicy/prebuilts/api/202404/public/vold.te

(neverallow base_typeattr_339 vold_service (service_manager (add)))
;;* lme

(allow vold system_server (binder (call transfer)))
(allow system_server vold (binder (transfer)))
(allow vold system_server (fd (use)))
(allow vold permission_service (service_manager (find)))
(allow vold userdata_block_device (blk_file (ioctl read write getattr lock append map open watch watch_reads)))
(allowx vold userdata_block_device (ioctl blk_file (0x127d)))
(allow vold zoned_block_device (blk_file (ioctl read write getattr lock append map open watch watch_reads)))
(allow vold metadata_block_device (blk_file (ioctl read write getattr lock append map open watch watch_reads)))
(allowx vold metadata_block_device (ioctl blk_file (0x127d)))
(allow vold unencrypted_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow vold unencrypted_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
(allow vold proc_drop_caches (file (write lock append map open)))
(allow vold vold_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
(allow vold vold_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow vold vold_metadata_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
(allow vold vold_metadata_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow vold init (key (write search setattr)))
(allow vold vold (key (write search setattr)))
(allow vold self (capability (sys_nice)))
(allow vold self (cap_userns (sys_nice)))
(allow vold self (capability (sys_chroot)))
(allow vold self (cap_userns (sys_chroot)))
(allow vold storage_file (dir (mounton)))
(allow vold fuse_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
(allow vold fuse (filesystem (relabelfrom)))
(allow vold app_fusefs (filesystem (relabelfrom relabelto)))
(allow vold app_fusefs (filesystem (mount unmount)))
(allow vold app_fuse_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
(allow vold app_fuse_file (file (read write getattr append open)))
(allow vold toolbox_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
(allow vold user_profile_root_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
(allow vold user_profile_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
(allow vold misc_block_device (blk_file (write lock append map open)))
(allow vold mnt_vendor_file (dir (search)))
(dontaudit vold self (capability (sys_resource)))
(dontaudit vold self (cap_userns (sys_resource)))
(allow vold gsi_metadata_file_type (dir (search)))
(allow vold metadata_file (dir (search)))
(allow vold gsi_public_metadata_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow vold proc_bootconfig (file (ioctl read getattr lock map open watch watch_reads)))
(allow vold proc_cmdline (file (ioctl read getattr lock map open watch watch_reads)))
(allow vold vendor_apex_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lmx 299 system/sepolicy/prebuilts/api/202404/public/vold.te

(neverallow base_typeattr_607 vold_data_file (dir (write lock append map unlink link rename execute quotaon mounton audit_access execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent rmdir)))
;;* lme

;;* lmx 306 system/sepolicy/prebuilts/api/202404/public/vold.te

(neverallow base_typeattr_608 vold_data_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 312 system/sepolicy/prebuilts/api/202404/public/vold.te

(neverallow base_typeattr_337 vold_metadata_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 319 system/sepolicy/prebuilts/api/202404/public/vold.te

(neverallow base_typeattr_609 vold_data_file (file (ioctl read write create setattr lock relabelfrom append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow base_typeattr_609 vold_data_file (lnk_file (ioctl read write create setattr lock relabelfrom append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow base_typeattr_609 vold_data_file (sock_file (ioctl read write create setattr lock relabelfrom append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow base_typeattr_609 vold_data_file (fifo_file (ioctl read write create setattr lock relabelfrom append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 326 system/sepolicy/prebuilts/api/202404/public/vold.te

(neverallow base_typeattr_608 vold_metadata_file (file (ioctl read write create setattr lock relabelfrom append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow base_typeattr_608 vold_metadata_file (lnk_file (ioctl read write create setattr lock relabelfrom append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow base_typeattr_608 vold_metadata_file (sock_file (ioctl read write create setattr lock relabelfrom append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow base_typeattr_608 vold_metadata_file (fifo_file (ioctl read write create setattr lock relabelfrom append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 334 system/sepolicy/prebuilts/api/202404/public/vold.te

(neverallow base_typeattr_610 vold_metadata_file (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow base_typeattr_610 vold_metadata_file (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow base_typeattr_610 vold_metadata_file (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow base_typeattr_610 vold_metadata_file (fifo_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow base_typeattr_610 vold_data_file (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow base_typeattr_610 vold_data_file (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow base_typeattr_610 vold_data_file (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow base_typeattr_610 vold_data_file (fifo_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 336 system/sepolicy/prebuilts/api/202404/public/vold.te

(neverallow base_typeattr_337 restorecon_prop (property_service (set)))
;;* lme

;;* lmx 349 system/sepolicy/prebuilts/api/202404/public/vold.te

(neverallow vold base_typeattr_611 (binder (call)))
;;* lme

;;* lmx 351 system/sepolicy/prebuilts/api/202404/public/vold.te

(neverallow vold fsck_exec (file (execute_no_trans)))
;;* lme

;;* lmx 352 system/sepolicy/prebuilts/api/202404/public/vold.te

(neverallow base_typeattr_223 vold (process (transition dyntransition)))
;;* lme

;;* lmx 353 system/sepolicy/prebuilts/api/202404/public/vold.te

(neverallow vold base_typeattr_224 (process (ptrace)))
;;* lme

;;* lmx 354 system/sepolicy/prebuilts/api/202404/public/vold.te

(neverallow vold base_typeattr_224 (rawip_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind)))
;;* lme

(allow watchdogd watchdog_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
(allow watchdogd kmsg_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
(allow wificond servicemanager (binder (call transfer)))
(allow servicemanager wificond (binder (call transfer)))
(allow servicemanager wificond (dir (search)))
(allow servicemanager wificond (file (read open)))
(allow servicemanager wificond (process (getattr)))
(allow wificond system_server (binder (call transfer)))
(allow system_server wificond (binder (transfer)))
(allow wificond system_server (fd (use)))
(allow wificond keystore (binder (call transfer)))
(allow keystore wificond (binder (transfer)))
(allow wificond keystore (fd (use)))
(allow wificond wifinl80211_service (service_manager (add find)))
;;* lmx 9 system/sepolicy/prebuilts/api/202404/public/wificond.te

(neverallow base_typeattr_612 wifinl80211_service (service_manager (add)))
;;* lme

(allow wificond self (udp_socket (ioctl read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
(allowx wificond self (ioctl udp_socket (0x8914 0x8924)))
(allow wificond self (capability (net_admin net_raw)))
(allow wificond self (cap_userns (net_admin net_raw)))
(allow wificond self (netlink_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
(allow wificond self (netlink_generic_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
(allow wificond proc_net_type (dir (ioctl read getattr lock open watch watch_reads search)))
(allow wificond proc_net_type (file (ioctl read getattr lock map open watch watch_reads)))
(allow wificond proc_net_type (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow wificond permission_service (service_manager (find)))
(allow wificond dumpstate (fd (use)))
(allow wificond dumpstate (fifo_file (write)))
(allow wificond hwservicemanager (binder (call transfer)))
(allow hwservicemanager wificond (binder (call transfer)))
(allow hwservicemanager wificond (dir (search)))
(allow hwservicemanager wificond (file (read map open)))
(allow hwservicemanager wificond (process (getattr)))
(allow wificond system_wifi_keystore_hwservice (hwservice_manager (add find)))
(allow wificond hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 34 system/sepolicy/prebuilts/api/202404/public/wificond.te

(neverallow base_typeattr_612 system_wifi_keystore_hwservice (hwservice_manager (add)))
;;* lme

(allow wificond keystore_service (service_manager (find)))
(allow wificond wifi_key (keystore2_key (get_info use)))
(typeattribute base_typeattr_612)
(typeattributeset base_typeattr_612 (and (domain ) (not (wificond ))))
(typeattribute base_typeattr_611)
(typeattributeset base_typeattr_611 (and (domain ) (not (hal_bootctl_server hal_health_storage_server hal_keymaster_server system_suspend_server hwservicemanager keystore servicemanager system_server ))))
(typeattribute base_typeattr_610)
(typeattributeset base_typeattr_610 (and (domain ) (not (init kernel vold vold_prepare_subdirs ))))
(typeattribute base_typeattr_609)
(typeattributeset base_typeattr_609 (and (domain ) (not (kernel vold vold_prepare_subdirs ))))
(typeattribute base_typeattr_608)
(typeattributeset base_typeattr_608 (and (domain ) (not (init vold vold_prepare_subdirs ))))
(typeattribute base_typeattr_607)
(typeattributeset base_typeattr_607 (and (domain ) (not (vold vold_prepare_subdirs ))))
(typeattribute base_typeattr_606)
(typeattributeset base_typeattr_606 (and (sysfs_type ) (not (sysfs_batteryinfo ))))
(typeattribute base_typeattr_605)
(typeattributeset base_typeattr_605 (and (domain ) (not (virtual_touchpad ))))
(typeattribute base_typeattr_604)
(typeattributeset base_typeattr_604 (and (coredomain ) (not (init modprobe ))))
(typeattribute base_typeattr_603)
(typeattributeset base_typeattr_603 (and (domain ) (not (init logd prng_seeder su vendor_init ))))
(typeattribute base_typeattr_602)
(typeattributeset base_typeattr_602 (and (sysfs_type ) (not (sysfs_usermodehelper ))))
(typeattribute base_typeattr_601)
(typeattributeset base_typeattr_601 (and (fs_type ) (not (bpffs_type contextmount_type fusefs_type sdcard_type rootfs proc_uid_time_in_state proc_uid_concurrent_active_time proc_uid_concurrent_policy_time ))))
(typeattribute base_typeattr_600)
(typeattributeset base_typeattr_600 (and (fs_type ) (not (bpffs_type contextmount_type fusefs_type debugfs_type sdcard_type keychord_device rootfs proc_uid_time_in_state proc_uid_concurrent_active_time proc_uid_concurrent_policy_time ))))
(typeattribute base_typeattr_599)
(typeattributeset base_typeattr_599 (and (file_type ) (not (bpffs_type exec_type core_data_file_type system_file_type system_dlkm_file_type vendor_file_type gsi_metadata_file_type vold_metadata_file password_slot_metadata_file apex_metadata_file ota_metadata_file userspace_reboot_metadata_file aconfig_storage_metadata_file aconfig_storage_flags_metadata_file mnt_product_file ))))
(typeattribute base_typeattr_598)
(typeattributeset base_typeattr_598 (and (file_type ) (not (bpffs_type exec_type core_data_file_type system_file_type system_dlkm_file_type vendor_file_type gsi_metadata_file_type unlabeled vold_metadata_file password_slot_metadata_file apex_metadata_file ota_metadata_file userspace_reboot_metadata_file aconfig_storage_metadata_file aconfig_storage_flags_metadata_file apex_mnt_dir ))))
(typeattribute base_typeattr_597)
(typeattributeset base_typeattr_597 (and (file_type ) (not (bpffs_type exec_type core_data_file_type system_file_type system_dlkm_file_type vendor_file_type gsi_metadata_file_type unlabeled vold_metadata_file password_slot_metadata_file apex_metadata_file ota_metadata_file userspace_reboot_metadata_file aconfig_storage_metadata_file aconfig_storage_flags_metadata_file ))))
(typeattribute base_typeattr_596)
(typeattributeset base_typeattr_596 (and (file_type ) (not (bpffs_type exec_type core_data_file_type system_file_type system_dlkm_file_type vendor_file_type debugfs_type gsi_metadata_file_type unlabeled vold_metadata_file password_slot_metadata_file apex_metadata_file ota_metadata_file userspace_reboot_metadata_file aconfig_storage_metadata_file aconfig_storage_flags_metadata_file runtime_event_log_tags_file apex_info_file ))))
(typeattribute base_typeattr_595)
(typeattributeset base_typeattr_595 (and (file_type ) (not (bpffs_type exec_type core_data_file_type system_file_type system_dlkm_file_type vendor_file_type gsi_metadata_file_type unlabeled vold_metadata_file password_slot_metadata_file apex_metadata_file ota_metadata_file userspace_reboot_metadata_file aconfig_storage_metadata_file aconfig_storage_flags_metadata_file mnt_product_file ))))
(typeattribute base_typeattr_594)
(typeattributeset base_typeattr_594 (and (domain ) (not (update_engine ))))
(typeattribute base_typeattr_593)
(typeattributeset base_typeattr_593 (and (vendor_file_type ) (not (vendor_app_file vendor_overlay_file ))))
(typeattribute base_typeattr_592)
(typeattributeset base_typeattr_592 (and (service_manager_type ) (not (apex_service default_android_service dnsresolver_service gatekeeper_service incident_service installd_service lpdump_service mdns_service netd_service virtual_touchpad_service vold_service ))))
(typeattribute base_typeattr_591)
(typeattributeset base_typeattr_591 (and (fs_type file_type ) (not (toolbox_exec ))))
(typeattribute base_typeattr_590)
(typeattributeset base_typeattr_590 (and (domain ) (not (system_suspend_server ))))
(typeattribute base_typeattr_589)
(typeattributeset base_typeattr_589 (and (domain ) (not (system_suspend_internal_server atrace dumpstate system_server traceur_app ))))
(typeattribute base_typeattr_588)
(typeattributeset base_typeattr_588 (and (domain ) (not (system_suspend_internal_server ))))
(typeattribute base_typeattr_587)
(typeattributeset base_typeattr_587 (and (domain ) (not (init shell system_server vendor_init ))))
(typeattribute base_typeattr_586)
(typeattributeset base_typeattr_586 (and (domain ) (not (init statsd system_server vold ))))
(typeattribute base_typeattr_585)
(typeattributeset base_typeattr_585 (and (domain ) (not (init statsd vold ))))
(typeattribute base_typeattr_584)
(typeattributeset base_typeattr_584 (and (domain ) (not (stats_service_server ))))
(typeattribute base_typeattr_583)
(typeattributeset base_typeattr_583 (and (service_manager_type ) (not (apex_service default_android_service dnsresolver_service gatekeeper_service incident_service installd_service mdns_service netd_service system_suspend_control_internal_service system_suspend_control_service virtual_touchpad_service vold_service hal_keymint_service hal_secureclock_service hal_sharedsecret_service ))))
(typeattribute base_typeattr_582)
(typeattributeset base_typeattr_582 (and (fs_type file_type ) (not (sgdisk_exec ))))
(typeattribute base_typeattr_581)
(typeattributeset base_typeattr_581 (and (domain ) (not (servicemanager ))))
(typeattribute base_typeattr_580)
(typeattributeset base_typeattr_580 (and (domain ) (not (hwservicemanager init vendor_init vndservicemanager ))))
(typeattribute base_typeattr_579)
(typeattributeset base_typeattr_579 (not (service_manager_type vndservice_manager_type ) ))
(typeattribute base_typeattr_578)
(typeattributeset base_typeattr_578 (and (domain ) (not (sensor_service_server ))))
(typeattribute base_typeattr_577)
(typeattributeset base_typeattr_577 (and (domain ) (not (scheduler_service_server ))))
(typeattribute base_typeattr_576)
(typeattributeset base_typeattr_576 (and (appdomain ) (not (system_app ))))
(typeattribute base_typeattr_575)
(typeattributeset base_typeattr_575 (and (domain ) (not (remote_provisioning_service_server ))))
(typeattribute base_typeattr_574)
(typeattributeset base_typeattr_574 (and (data_file_type ) (not (cache_file cache_recovery_file ))))
(typeattribute base_typeattr_573)
(typeattributeset base_typeattr_573 (and (domain ) (not (radio ))))
(typeattribute base_typeattr_572)
(typeattributeset base_typeattr_572 (and (coredomain ) (not (dumpstate init ))))
(typeattribute base_typeattr_571)
(typeattributeset base_typeattr_571 (and (domain ) (not (recovery update_engine ))))
(typeattribute base_typeattr_570)
(typeattributeset base_typeattr_570 (and (domain ) (not (performanced ))))
(typeattribute base_typeattr_569)
(typeattributeset base_typeattr_569 (and (domain ) (not (dumpstate netd netutils_wrapper network_stack system_server ))))
(typeattribute base_typeattr_568)
(typeattributeset base_typeattr_568 (and (domain ) (not (netd ))))
(typeattribute base_typeattr_567)
(typeattributeset base_typeattr_567 (and (domain ) (not (mediaserver ))))
(typeattribute base_typeattr_566)
(typeattributeset base_typeattr_566 (and (domain ) (not (mediametrics ))))
(typeattribute base_typeattr_565)
(typeattributeset base_typeattr_565 (and (domain ) (not (mediaextractor ))))
(typeattribute base_typeattr_564)
(typeattributeset base_typeattr_564 (and (domain ) (not (mediadrmserver ))))
(typeattribute base_typeattr_563)
(typeattributeset base_typeattr_563 (and (domain ) (not (init logd ))))
(typeattribute base_typeattr_562)
(typeattributeset base_typeattr_562 (and (app_data_file_type system_data_file packages_list_file ) (not (shell_data_file ))))
(typeattribute base_typeattr_561)
(typeattributeset base_typeattr_561 (and (domain ) (not (init keystore ))))
(typeattribute base_typeattr_560)
(typeattributeset base_typeattr_560 (and (domain ) (not (keystore ))))
(typeattribute base_typeattr_559)
(typeattributeset base_typeattr_559 (and (domain ) (not (servicemanager system_server ))))
(typeattribute base_typeattr_558)
(typeattributeset base_typeattr_558 (and (domain ) (not (dumpstate servicemanager system_server ))))
(typeattribute base_typeattr_557)
(typeattributeset base_typeattr_557 (and (domain ) (not (dumpstate installd system_server ))))
(typeattribute base_typeattr_556)
(typeattributeset base_typeattr_556 (and (domain ) (not (installd ))))
(typeattribute base_typeattr_555)
(typeattributeset base_typeattr_555 (and (domain ) (not (init toolbox vendor_init vold ))))
(typeattribute base_typeattr_554)
(typeattributeset base_typeattr_554 (and (fs_type file_type ) (not (init_exec ))))
(typeattribute base_typeattr_553)
(typeattributeset base_typeattr_553 (and (fs_type ) (not (bpffs_type contextmount_type fusefs_type sdcard_type rootfs ))))
(typeattribute base_typeattr_552)
(typeattributeset base_typeattr_552 (and (fs_type ) (not (bpffs_type contextmount_type fusefs_type proc_type sysfs_type debugfs_type sdcard_type keychord_device rootfs ))))
(typeattribute base_typeattr_551)
(typeattributeset base_typeattr_551 (and (file_type ) (not (bpffs_type exec_type system_file_type system_dlkm_file_type vendor_file_type app_data_file privapp_data_file ))))
(typeattribute base_typeattr_550)
(typeattributeset base_typeattr_550 (and (file_type ) (not (bpffs_type exec_type system_file_type system_dlkm_file_type vendor_file_type shell_data_file nativetest_data_file apex_mnt_dir credstore_data_file keystore_data_file vold_data_file gsi_data_file app_data_file privapp_data_file system_app_data_file misc_logd_file ))))
(typeattribute base_typeattr_549)
(typeattributeset base_typeattr_549 (and (file_type ) (not (bpffs_type exec_type system_file_type system_dlkm_file_type vendor_file_type shell_data_file nativetest_data_file credstore_data_file keystore_data_file vold_data_file gsi_data_file app_data_file privapp_data_file system_app_data_file misc_logd_file ))))
(typeattribute base_typeattr_548)
(typeattributeset base_typeattr_548 (and (file_type ) (not (bpffs_type exec_type system_file_type system_dlkm_file_type vendor_file_type debugfs_type runtime_event_log_tags_file shell_data_file nativetest_data_file apex_info_file credstore_data_file keystore_data_file vold_data_file gsi_data_file app_data_file privapp_data_file system_app_data_file misc_logd_file ))))
(typeattribute base_typeattr_547)
(typeattributeset base_typeattr_547 (and (file_type ) (not (bpffs_type exec_type system_file_type system_dlkm_file_type vendor_file_type system_userdir_file vendor_userdir_file shell_data_file nativetest_data_file credstore_data_file keystore_data_file media_userdir_file vold_data_file app_data_file privapp_data_file system_app_data_file misc_logd_file ))))
(typeattribute base_typeattr_546)
(typeattributeset base_typeattr_546 (and (file_type ) (not (bpffs_type exec_type system_file_type system_dlkm_file_type vendor_file_type nativetest_data_file app_data_file privapp_data_file system_app_data_file misc_logd_file ))))
(typeattribute base_typeattr_545)
(typeattributeset base_typeattr_545 (and (fs_type ) (not (debugfs_type ))))
(typeattribute base_typeattr_544)
(typeattributeset base_typeattr_544 (and (domain ) (not (idmap ))))
(typeattribute base_typeattr_543)
(typeattributeset base_typeattr_543 (not (hwservice_manager_type ) ))
(typeattribute base_typeattr_542)
(typeattributeset base_typeattr_542 (and (domain ) (not (hal_wifi_supplicant_client hal_wifi_supplicant_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_541)
(typeattributeset base_typeattr_541 (and (domain ) (not (hal_wifi_supplicant_client hal_wifi_supplicant_server ))))
(typeattribute base_typeattr_540)
(typeattributeset base_typeattr_540 (and (domain ) (not (hal_wifi_supplicant_server ))))
(typeattribute base_typeattr_539)
(typeattributeset base_typeattr_539 (and (domain ) (not (hal_wifi_hostapd_client hal_wifi_hostapd_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_538)
(typeattributeset base_typeattr_538 (and (domain ) (not (hal_wifi_hostapd_client hal_wifi_hostapd_server ))))
(typeattribute base_typeattr_537)
(typeattributeset base_typeattr_537 (and (domain ) (not (hal_wifi_hostapd_server ))))
(typeattribute base_typeattr_536)
(typeattributeset base_typeattr_536 (and (domain ) (not (hal_wifi_client hal_wifi_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_535)
(typeattributeset base_typeattr_535 (and (domain ) (not (hal_wifi_client hal_wifi_server ))))
(typeattribute base_typeattr_534)
(typeattributeset base_typeattr_534 (and (domain ) (not (hal_wifi_server ))))
(typeattribute base_typeattr_533)
(typeattributeset base_typeattr_533 (and (domain ) (not (hal_weaver_client hal_weaver_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_532)
(typeattributeset base_typeattr_532 (and (domain ) (not (hal_weaver_client hal_weaver_server ))))
(typeattribute base_typeattr_531)
(typeattributeset base_typeattr_531 (and (domain ) (not (hal_weaver_server ))))
(typeattribute base_typeattr_530)
(typeattributeset base_typeattr_530 (and (domain ) (not (hal_vr_client hal_vr_server ))))
(typeattribute base_typeattr_529)
(typeattributeset base_typeattr_529 (and (domain ) (not (hal_vr_server ))))
(typeattribute base_typeattr_528)
(typeattributeset base_typeattr_528 (and (domain ) (not (hal_vibrator_client hal_vibrator_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_527)
(typeattributeset base_typeattr_527 (and (domain ) (not (hal_vibrator_client hal_vibrator_server ))))
(typeattribute base_typeattr_526)
(typeattributeset base_typeattr_526 (and (domain ) (not (hal_vibrator_server ))))
(typeattribute base_typeattr_525)
(typeattributeset base_typeattr_525 (and (domain ) (not (hal_vehicle_client hal_vehicle_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_524)
(typeattributeset base_typeattr_524 (and (domain ) (not (hal_vehicle_client hal_vehicle_server ))))
(typeattribute base_typeattr_523)
(typeattributeset base_typeattr_523 (and (domain ) (not (hal_vehicle_server ))))
(typeattribute base_typeattr_522)
(typeattributeset base_typeattr_522 (and (domain ) (not (hal_uwb_client hal_uwb_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_521)
(typeattributeset base_typeattr_521 (and (domain ) (not (hal_uwb_server ))))
(typeattribute base_typeattr_520)
(typeattributeset base_typeattr_520 (and (domain ) (not (hal_usb_gadget_client hal_usb_gadget_server ))))
(typeattribute base_typeattr_519)
(typeattributeset base_typeattr_519 (and (domain ) (not (hal_usb_gadget_client hal_usb_gadget_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_518)
(typeattributeset base_typeattr_518 (and (domain ) (not (hal_usb_gadget_server ))))
(typeattribute base_typeattr_517)
(typeattributeset base_typeattr_517 (and (domain ) (not (hal_usb_client hal_usb_server ))))
(typeattribute base_typeattr_516)
(typeattributeset base_typeattr_516 (and (domain ) (not (hal_usb_client hal_usb_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_515)
(typeattributeset base_typeattr_515 (and (domain ) (not (hal_usb_server ))))
(typeattribute base_typeattr_514)
(typeattributeset base_typeattr_514 (and (domain ) (not (hal_tv_tuner_client hal_tv_tuner_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_513)
(typeattributeset base_typeattr_513 (and (domain ) (not (hal_tv_tuner_client hal_tv_tuner_server ))))
(typeattribute base_typeattr_512)
(typeattributeset base_typeattr_512 (and (domain ) (not (hal_tv_tuner_server ))))
(typeattribute base_typeattr_511)
(typeattributeset base_typeattr_511 (and (domain ) (not (hal_tv_input_client hal_tv_input_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_510)
(typeattributeset base_typeattr_510 (and (domain ) (not (hal_tv_input_client hal_tv_input_server ))))
(typeattribute base_typeattr_509)
(typeattributeset base_typeattr_509 (and (domain ) (not (hal_tv_input_server ))))
(typeattribute base_typeattr_508)
(typeattributeset base_typeattr_508 (and (domain ) (not (hal_tv_hdmi_earc_client hal_tv_hdmi_earc_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_507)
(typeattributeset base_typeattr_507 (and (domain ) (not (hal_tv_hdmi_earc_server ))))
(typeattribute base_typeattr_506)
(typeattributeset base_typeattr_506 (and (domain ) (not (hal_tv_hdmi_connection_client hal_tv_hdmi_connection_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_505)
(typeattributeset base_typeattr_505 (and (domain ) (not (hal_tv_hdmi_connection_server ))))
(typeattribute base_typeattr_504)
(typeattributeset base_typeattr_504 (and (domain ) (not (hal_tv_hdmi_cec_client hal_tv_hdmi_cec_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_503)
(typeattributeset base_typeattr_503 (and (domain ) (not (hal_tv_hdmi_cec_server ))))
(typeattribute base_typeattr_502)
(typeattributeset base_typeattr_502 (and (domain ) (not (hal_tv_cec_client hal_tv_cec_server ))))
(typeattribute base_typeattr_501)
(typeattributeset base_typeattr_501 (and (domain ) (not (hal_tv_cec_server ))))
(typeattribute base_typeattr_500)
(typeattributeset base_typeattr_500 (and (domain ) (not (hal_threadnetwork_client hal_threadnetwork_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_499)
(typeattributeset base_typeattr_499 (and (domain ) (not (hal_threadnetwork_server ))))
(typeattribute base_typeattr_498)
(typeattributeset base_typeattr_498 (and (domain ) (not (hal_thermal_client hal_thermal_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_497)
(typeattributeset base_typeattr_497 (and (domain ) (not (hal_thermal_client hal_thermal_server ))))
(typeattribute base_typeattr_496)
(typeattributeset base_typeattr_496 (and (domain ) (not (hal_thermal_server ))))
(typeattribute base_typeattr_495)
(typeattributeset base_typeattr_495 (and (domain ) (not (hal_tetheroffload_client hal_tetheroffload_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_494)
(typeattributeset base_typeattr_494 (and (domain ) (not (hal_tetheroffload_client hal_tetheroffload_server ))))
(typeattribute base_typeattr_493)
(typeattributeset base_typeattr_493 (and (domain ) (not (hal_tetheroffload_server ))))
(typeattribute base_typeattr_492)
(typeattributeset base_typeattr_492 (and (domain ) (not (hal_telephony_client hal_telephony_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_491)
(typeattributeset base_typeattr_491 (and (domain ) (not (hal_telephony_client hal_telephony_server ))))
(typeattribute base_typeattr_490)
(typeattributeset base_typeattr_490 (and (domain ) (not (hal_telephony_server ))))
(typeattribute base_typeattr_489)
(typeattributeset base_typeattr_489 (and (domain ) (not (hal_sensors_client hal_sensors_server ))))
(typeattribute base_typeattr_488)
(typeattributeset base_typeattr_488 (and (domain ) (not (hal_sensors_server ))))
(typeattribute base_typeattr_487)
(typeattributeset base_typeattr_487 (and (domain ) (not (hal_secure_element_client hal_secure_element_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_486)
(typeattributeset base_typeattr_486 (and (domain ) (not (hal_secure_element_client hal_secure_element_server ))))
(typeattribute base_typeattr_485)
(typeattributeset base_typeattr_485 (and (domain ) (not (hal_secure_element_server ))))
(typeattribute base_typeattr_484)
(typeattributeset base_typeattr_484 (and (domain ) (not (hal_secretkeeper_client hal_secretkeeper_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_483)
(typeattributeset base_typeattr_483 (and (domain ) (not (hal_secretkeeper_server ))))
(typeattribute base_typeattr_482)
(typeattributeset base_typeattr_482 (and (domain ) (not (hal_remotelyprovisionedcomponent_avf_client hal_remotelyprovisionedcomponent_avf_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_481)
(typeattributeset base_typeattr_481 (and (domain ) (not (hal_remotelyprovisionedcomponent_avf_server ))))
(typeattribute base_typeattr_480)
(typeattributeset base_typeattr_480 (and (domain ) (not (hal_remoteaccess_client hal_remoteaccess_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_479)
(typeattributeset base_typeattr_479 (and (domain ) (not (hal_remoteaccess_server ))))
(typeattribute base_typeattr_478)
(typeattributeset base_typeattr_478 (and (domain ) (not (hal_rebootescrow_client hal_rebootescrow_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_477)
(typeattributeset base_typeattr_477 (and (domain ) (not (hal_rebootescrow_server ))))
(typeattribute base_typeattr_476)
(typeattributeset base_typeattr_476 (and (domain ) (not (hal_power_stats_client hal_power_stats_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_475)
(typeattributeset base_typeattr_475 (and (domain ) (not (hal_power_stats_client hal_power_stats_server ))))
(typeattribute base_typeattr_474)
(typeattributeset base_typeattr_474 (and (domain ) (not (hal_power_stats_server ))))
(typeattribute base_typeattr_473)
(typeattributeset base_typeattr_473 (and (domain ) (not (hal_power_client hal_power_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_472)
(typeattributeset base_typeattr_472 (and (domain ) (not (hal_power_client hal_power_server ))))
(typeattribute base_typeattr_471)
(typeattributeset base_typeattr_471 (and (domain ) (not (hal_power_server ))))
(typeattribute base_typeattr_470)
(typeattributeset base_typeattr_470 (and (domain ) (not (hal_omx_client hal_omx_server ))))
(typeattribute base_typeattr_469)
(typeattributeset base_typeattr_469 (and (domain ) (not (hal_omx_server ))))
(typeattribute base_typeattr_468)
(typeattributeset base_typeattr_468 (and (domain ) (not (hal_oemlock_client hal_oemlock_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_467)
(typeattributeset base_typeattr_467 (and (domain ) (not (hal_oemlock_client hal_oemlock_server ))))
(typeattribute base_typeattr_466)
(typeattributeset base_typeattr_466 (and (domain ) (not (hal_oemlock_server ))))
(typeattribute base_typeattr_465)
(typeattributeset base_typeattr_465 (and (domain ) (not (hal_nlinterceptor_client hal_nlinterceptor_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_464)
(typeattributeset base_typeattr_464 (and (domain ) (not (hal_nlinterceptor_server ))))
(typeattribute base_typeattr_463)
(typeattributeset base_typeattr_463 (and (domain ) (not (hal_nfc_client hal_nfc_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_462)
(typeattributeset base_typeattr_462 (and (domain ) (not (hal_nfc_client hal_nfc_server ))))
(typeattribute base_typeattr_461)
(typeattributeset base_typeattr_461 (and (domain ) (not (hal_nfc_server ))))
(typeattribute base_typeattr_460)
(typeattributeset base_typeattr_460 (and (fs_type file_type ) (not (shell_exec toolbox_exec ))))
(typeattribute base_typeattr_459)
(typeattributeset base_typeattr_459 (and (halserverdomain ) (not (hal_dumpstate_server hal_telephony_server ))))
(typeattribute base_typeattr_458)
(typeattributeset base_typeattr_458 (and (halserverdomain ) (not (hal_automotive_socket_exemption hal_bluetooth_server hal_can_controller_server hal_nlinterceptor_server hal_telephony_server hal_tetheroffload_server hal_wifi_server hal_wifi_hostapd_server hal_wifi_supplicant_server ))))
(typeattribute base_typeattr_457)
(typeattributeset base_typeattr_457 (and (halserverdomain ) (not (hal_automotive_socket_exemption hal_bluetooth_server hal_can_controller_server hal_nlinterceptor_server hal_telephony_server hal_tetheroffload_server hal_uwb_server hal_uwb_vendor_server hal_wifi_server hal_wifi_hostapd_server hal_wifi_supplicant_server ))))
(typeattribute base_typeattr_456)
(typeattributeset base_typeattr_456 (and (halserverdomain ) (not (hal_bluetooth_server hal_can_controller_server hal_nlinterceptor_server hal_telephony_server hal_uwb_server hal_uwb_vendor_server hal_wifi_server hal_wifi_hostapd_server hal_wifi_supplicant_server ))))
(typeattribute base_typeattr_455)
(typeattributeset base_typeattr_455 (and (domain ) (not (hal_neuralnetworks_client hal_neuralnetworks_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_454)
(typeattributeset base_typeattr_454 (and (domain ) (not (hal_neuralnetworks_client hal_neuralnetworks_server ))))
(typeattribute base_typeattr_453)
(typeattributeset base_typeattr_453 (and (domain ) (not (hal_neuralnetworks_server ))))
(typeattribute base_typeattr_452)
(typeattributeset base_typeattr_452 (and (domain ) (not (hal_memtrack_client hal_memtrack_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_451)
(typeattributeset base_typeattr_451 (and (domain ) (not (hal_memtrack_client hal_memtrack_server ))))
(typeattribute base_typeattr_450)
(typeattributeset base_typeattr_450 (and (domain ) (not (hal_memtrack_server ))))
(typeattribute base_typeattr_449)
(typeattributeset base_typeattr_449 (and (domain ) (not (hal_macsec_client hal_macsec_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_448)
(typeattributeset base_typeattr_448 (and (domain ) (not (hal_macsec_server ))))
(typeattribute base_typeattr_447)
(typeattributeset base_typeattr_447 (and (domain ) (not (hal_lowpan_server init ueventd ))))
(typeattribute base_typeattr_446)
(typeattributeset base_typeattr_446 (and (domain ) (not (hal_lowpan_client hal_lowpan_server ))))
(typeattribute base_typeattr_445)
(typeattributeset base_typeattr_445 (and (domain ) (not (hal_lowpan_server ))))
(typeattribute base_typeattr_444)
(typeattributeset base_typeattr_444 (and (domain ) (not (hal_light_client hal_light_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_443)
(typeattributeset base_typeattr_443 (and (domain ) (not (hal_light_client hal_light_server ))))
(typeattribute base_typeattr_442)
(typeattributeset base_typeattr_442 (and (domain ) (not (hal_light_server ))))
(typeattribute base_typeattr_441)
(typeattributeset base_typeattr_441 (and (domain ) (not (hal_keymint_client hal_keymint_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_440)
(typeattributeset base_typeattr_440 (and (domain ) (not (hal_keymint_server ))))
(typeattribute base_typeattr_439)
(typeattributeset base_typeattr_439 (and (domain ) (not (hal_keymaster_client hal_keymaster_server ))))
(typeattribute base_typeattr_438)
(typeattributeset base_typeattr_438 (and (domain ) (not (hal_keymaster_server ))))
(typeattribute base_typeattr_437)
(typeattributeset base_typeattr_437 (and (domain ) (not (hal_ivn_client hal_ivn_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_436)
(typeattributeset base_typeattr_436 (and (domain ) (not (hal_ivn_server ))))
(typeattribute base_typeattr_435)
(typeattributeset base_typeattr_435 (and (domain ) (not (hal_ir_client hal_ir_server ))))
(typeattribute base_typeattr_434)
(typeattributeset base_typeattr_434 (and (domain ) (not (hal_ir_client hal_ir_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_433)
(typeattributeset base_typeattr_433 (and (domain ) (not (hal_ir_server ))))
(typeattribute base_typeattr_432)
(typeattributeset base_typeattr_432 (and (domain ) (not (hal_input_processor_client hal_input_processor_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_431)
(typeattributeset base_typeattr_431 (and (domain ) (not (hal_input_processor_server ))))
(typeattribute base_typeattr_430)
(typeattributeset base_typeattr_430 (and (domain ) (not (hal_input_classifier_client hal_input_classifier_server ))))
(typeattribute base_typeattr_429)
(typeattributeset base_typeattr_429 (and (domain ) (not (hal_input_classifier_server ))))
(typeattribute base_typeattr_428)
(typeattributeset base_typeattr_428 (and (domain ) (not (hal_identity_client hal_identity_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_427)
(typeattributeset base_typeattr_427 (and (domain ) (not (hal_identity_server ))))
(typeattribute base_typeattr_426)
(typeattributeset base_typeattr_426 (and (domain ) (not (hal_health_storage_client hal_health_storage_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_425)
(typeattributeset base_typeattr_425 (and (domain ) (not (hal_health_storage_client hal_health_storage_server ))))
(typeattribute base_typeattr_424)
(typeattributeset base_typeattr_424 (and (domain ) (not (hal_health_storage_server ))))
(typeattribute base_typeattr_423)
(typeattributeset base_typeattr_423 (and (domain ) (not (hal_health_client hal_health_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_422)
(typeattributeset base_typeattr_422 (and (domain ) (not (hal_health_client hal_health_server ))))
(typeattribute base_typeattr_421)
(typeattributeset base_typeattr_421 (and (domain ) (not (hal_health_server ))))
(typeattribute base_typeattr_420)
(typeattributeset base_typeattr_420 (and (domain ) (not (hal_graphics_composer_client hal_graphics_composer_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_419)
(typeattributeset base_typeattr_419 (and (domain ) (not (hal_graphics_composer_client hal_graphics_composer_server ))))
(typeattribute base_typeattr_418)
(typeattributeset base_typeattr_418 (and (domain ) (not (hal_graphics_composer_server ))))
(typeattribute base_typeattr_417)
(typeattributeset base_typeattr_417 (and (domain ) (not (hal_graphics_allocator_client hal_graphics_allocator_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_416)
(typeattributeset base_typeattr_416 (and (domain ) (not (hal_graphics_allocator_client hal_graphics_allocator_server ))))
(typeattribute base_typeattr_415)
(typeattributeset base_typeattr_415 (and (domain ) (not (hal_graphics_allocator_server ))))
(typeattribute base_typeattr_414)
(typeattributeset base_typeattr_414 (and (domain ) (not (hal_gnss_client hal_gnss_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_413)
(typeattributeset base_typeattr_413 (and (domain ) (not (hal_gnss_client hal_gnss_server ))))
(typeattribute base_typeattr_412)
(typeattributeset base_typeattr_412 (and (domain ) (not (hal_gnss_server ))))
(typeattribute base_typeattr_411)
(typeattributeset base_typeattr_411 (and (domain ) (not (hal_gatekeeper_client hal_gatekeeper_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_410)
(typeattributeset base_typeattr_410 (and (domain ) (not (hal_gatekeeper_client hal_gatekeeper_server ))))
(typeattribute base_typeattr_409)
(typeattributeset base_typeattr_409 (and (domain ) (not (hal_gatekeeper_server ))))
(typeattribute base_typeattr_408)
(typeattributeset base_typeattr_408 (and (domain ) (not (hal_fingerprint_client hal_fingerprint_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_407)
(typeattributeset base_typeattr_407 (and (domain ) (not (hal_fingerprint_client hal_fingerprint_server ))))
(typeattribute base_typeattr_406)
(typeattributeset base_typeattr_406 (and (domain ) (not (hal_fingerprint_server ))))
(typeattribute base_typeattr_405)
(typeattributeset base_typeattr_405 (and (domain ) (not (hal_fastboot_client hal_fastboot_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_404)
(typeattributeset base_typeattr_404 (and (domain ) (not (hal_fastboot_server ))))
(typeattribute base_typeattr_403)
(typeattributeset base_typeattr_403 (and (domain ) (not (hal_face_client hal_face_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_402)
(typeattributeset base_typeattr_402 (and (domain ) (not (hal_face_client hal_face_server ))))
(typeattribute base_typeattr_401)
(typeattributeset base_typeattr_401 (and (domain ) (not (hal_face_server ))))
(typeattribute base_typeattr_400)
(typeattributeset base_typeattr_400 (and (domain ) (not (hal_evs_client hal_evs_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_399)
(typeattributeset base_typeattr_399 (and (domain ) (not (hal_evs_server ))))
(typeattribute base_typeattr_398)
(typeattributeset base_typeattr_398 (and (domain ) (not (hal_evs_server evsmanagerd ))))
(typeattribute base_typeattr_397)
(typeattributeset base_typeattr_397 (and (domain ) (not (hal_dumpstate_client hal_dumpstate_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_396)
(typeattributeset base_typeattr_396 (and (domain ) (not (hal_dumpstate_client hal_dumpstate_server ))))
(typeattribute base_typeattr_395)
(typeattributeset base_typeattr_395 (and (domain ) (not (hal_dumpstate_server ))))
(typeattribute base_typeattr_394)
(typeattributeset base_typeattr_394 (and (domain ) (not (hal_drm_client hal_drm_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_393)
(typeattributeset base_typeattr_393 (and (domain ) (not (hal_drm_client hal_drm_server ))))
(typeattribute base_typeattr_392)
(typeattributeset base_typeattr_392 (and (domain ) (not (hal_drm_server ))))
(typeattribute base_typeattr_391)
(typeattributeset base_typeattr_391 (and (domain ) (not (hal_contexthub_client hal_contexthub_server ))))
(typeattribute base_typeattr_390)
(typeattributeset base_typeattr_390 (and (domain ) (not (hal_contexthub_server ))))
(typeattribute base_typeattr_389)
(typeattributeset base_typeattr_389 (and (domain ) (not (hal_confirmationui_client hal_confirmationui_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_388)
(typeattributeset base_typeattr_388 (and (domain ) (not (hal_confirmationui_client hal_confirmationui_server ))))
(typeattribute base_typeattr_387)
(typeattributeset base_typeattr_387 (and (domain ) (not (hal_confirmationui_server ))))
(typeattribute base_typeattr_386)
(typeattributeset base_typeattr_386 (and (data_file_type ) (not (anr_data_file tombstone_data_file ))))
(typeattribute base_typeattr_385)
(typeattributeset base_typeattr_385 (and (domain ) (not (hal_configstore_server logd prng_seeder tombstoned ))))
(typeattribute base_typeattr_384)
(typeattributeset base_typeattr_384 (and (domain ) (not (hal_configstore_client hal_configstore_server ))))
(typeattribute base_typeattr_383)
(typeattributeset base_typeattr_383 (and (domain ) (not (hal_configstore_server ))))
(typeattribute base_typeattr_382)
(typeattributeset base_typeattr_382 (and (appdomain ) (not (isolated_app_all ))))
(typeattribute base_typeattr_381)
(typeattributeset base_typeattr_381 (and (domain ) (not (hal_codec2_client hal_codec2_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_380)
(typeattributeset base_typeattr_380 (and (domain ) (not (hal_codec2_client hal_codec2_server ))))
(typeattribute base_typeattr_379)
(typeattributeset base_typeattr_379 (and (domain ) (not (hal_codec2_server ))))
(typeattribute base_typeattr_378)
(typeattributeset base_typeattr_378 (and (domain ) (not (hal_cas_client hal_cas_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_377)
(typeattributeset base_typeattr_377 (and (domain ) (not (hal_cas_client hal_cas_server ))))
(typeattribute base_typeattr_376)
(typeattributeset base_typeattr_376 (and (domain ) (not (hal_cas_server ))))
(typeattribute base_typeattr_375)
(typeattributeset base_typeattr_375 (and (domain ) (not (hal_can_controller_client hal_can_controller_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_374)
(typeattributeset base_typeattr_374 (and (domain ) (not (hal_can_bus_client hal_can_bus_server ))))
(typeattribute base_typeattr_373)
(typeattributeset base_typeattr_373 (and (domain ) (not (hal_can_bus_server ))))
(typeattribute base_typeattr_372)
(typeattributeset base_typeattr_372 (and (domain ) (not (hal_can_controller_client hal_can_controller_server ))))
(typeattribute base_typeattr_371)
(typeattributeset base_typeattr_371 (and (domain ) (not (hal_can_controller_server ))))
(typeattribute base_typeattr_370)
(typeattributeset base_typeattr_370 (and (halserverdomain ) (not (hal_camera_server ))))
(typeattribute base_typeattr_369)
(typeattributeset base_typeattr_369 (and (appdomain ) (not (isolated_app ))))
(typeattribute base_typeattr_368)
(typeattributeset base_typeattr_368 (and (domain ) (not (hal_camera_client hal_camera_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_367)
(typeattributeset base_typeattr_367 (and (domain ) (not (hal_camera_client hal_camera_server ))))
(typeattribute base_typeattr_366)
(typeattributeset base_typeattr_366 (and (domain ) (not (hal_camera_server ))))
(typeattribute base_typeattr_365)
(typeattributeset base_typeattr_365 (and (domain ) (not (hal_broadcastradio_client hal_broadcastradio_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_364)
(typeattributeset base_typeattr_364 (and (domain ) (not (hal_broadcastradio_client hal_broadcastradio_server ))))
(typeattribute base_typeattr_363)
(typeattributeset base_typeattr_363 (and (domain ) (not (hal_broadcastradio_server ))))
(typeattribute base_typeattr_362)
(typeattributeset base_typeattr_362 (and (domain ) (not (hal_bootctl_client hal_bootctl_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_361)
(typeattributeset base_typeattr_361 (and (domain ) (not (hal_bootctl_client hal_bootctl_server ))))
(typeattribute base_typeattr_360)
(typeattributeset base_typeattr_360 (and (domain ) (not (hal_bootctl_server ))))
(typeattribute base_typeattr_359)
(typeattributeset base_typeattr_359 (and (domain ) (not (hal_bluetooth_client hal_bluetooth_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_358)
(typeattributeset base_typeattr_358 (and (domain ) (not (hal_bluetooth_client hal_bluetooth_server ))))
(typeattribute base_typeattr_357)
(typeattributeset base_typeattr_357 (and (domain ) (not (hal_bluetooth_server ))))
(typeattribute base_typeattr_356)
(typeattributeset base_typeattr_356 (and (domain ) (not (hal_authsecret_client hal_authsecret_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_355)
(typeattributeset base_typeattr_355 (and (domain ) (not (hal_authsecret_client hal_authsecret_server ))))
(typeattribute base_typeattr_354)
(typeattributeset base_typeattr_354 (and (domain ) (not (hal_authsecret_server ))))
(typeattribute base_typeattr_353)
(typeattributeset base_typeattr_353 (and (domain ) (not (hal_authgraph_client hal_authgraph_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_352)
(typeattributeset base_typeattr_352 (and (domain ) (not (hal_authgraph_server ))))
(typeattribute base_typeattr_351)
(typeattributeset base_typeattr_351 (and (domain ) (not (hal_audiocontrol_client hal_audiocontrol_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_350)
(typeattributeset base_typeattr_350 (and (domain ) (not (hal_audiocontrol_client hal_audiocontrol_server ))))
(typeattribute base_typeattr_349)
(typeattributeset base_typeattr_349 (and (domain ) (not (hal_audiocontrol_server ))))
(typeattribute base_typeattr_348)
(typeattributeset base_typeattr_348 (and (halserverdomain ) (not (hal_audio_server hal_omx_server ))))
(typeattribute base_typeattr_347)
(typeattributeset base_typeattr_347 (and (domain ) (not (hal_audio_client hal_audio_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_346)
(typeattributeset base_typeattr_346 (and (domain ) (not (hal_audio_client hal_audio_server ))))
(typeattribute base_typeattr_345)
(typeattributeset base_typeattr_345 (and (domain ) (not (hal_audio_server ))))
(typeattribute base_typeattr_344)
(typeattributeset base_typeattr_344 (and (domain ) (not (hal_atrace_client hal_atrace_server ))))
(typeattribute base_typeattr_343)
(typeattributeset base_typeattr_343 (and (domain ) (not (hal_atrace_server ))))
(typeattribute base_typeattr_342)
(typeattributeset base_typeattr_342 (and (domain ) (not (hal_allocator_client hal_allocator_server ))))
(typeattribute base_typeattr_341)
(typeattributeset base_typeattr_341 (and (domain ) (not (hal_allocator_server ))))
(typeattribute base_typeattr_340)
(typeattributeset base_typeattr_340 (and (domain ) (not (gatekeeperd ))))
(typeattribute base_typeattr_339)
(typeattributeset base_typeattr_339 (and (domain ) (not (vold ))))
(typeattribute base_typeattr_338)
(typeattributeset base_typeattr_338 (and (fs_type file_type ) (not (fsck_exec ))))
(typeattribute base_typeattr_337)
(typeattributeset base_typeattr_337 (and (domain ) (not (init vold ))))
(typeattribute base_typeattr_336)
(typeattributeset base_typeattr_336 (and (domain ) (not (flags_health_check init ))))
(typeattribute base_typeattr_335)
(typeattributeset base_typeattr_335 (and (domain ) (not (fingerprintd ))))
(typeattribute base_typeattr_334)
(typeattributeset base_typeattr_334 (and (domain ) (not (dumpstate shell system_server traceur_app ))))
(typeattribute base_typeattr_333)
(typeattributeset base_typeattr_333 (and (domain ) (not (dumpstate ))))
(typeattribute base_typeattr_332)
(typeattributeset base_typeattr_332 (and (service_manager_type ) (not (hal_service_type apex_service default_android_service dumpstate_service gatekeeper_service virtual_touchpad_service vold_service ))))
(typeattribute base_typeattr_331)
(typeattributeset base_typeattr_331 (and (domain ) (not (drmserver ))))
(typeattribute base_typeattr_330)
(typeattributeset base_typeattr_330 (and (domain ) (not (init traced_probes vendor_init ))))
(typeattribute base_typeattr_329)
(typeattributeset base_typeattr_329 (and (domain ) (not (ephemeral_app untrusted_app_27 untrusted_app_25 ))))
(typeattribute base_typeattr_328)
(typeattributeset base_typeattr_328 (and (domain ) (not (hal_codec2_server hal_omx_server ))))
(typeattribute base_typeattr_327)
(typeattributeset base_typeattr_327 (and (coredomain ) (not (apexd charger incidentd init recovery shell ueventd ))))
(typeattribute base_typeattr_326)
(typeattributeset base_typeattr_326 (and (coredomain ) (not (appdomain ))))
(typeattribute base_typeattr_325)
(typeattributeset base_typeattr_325 (and (coredomain ) (not (system_writes_mnt_vendor_violators init ueventd vold ))))
(typeattribute base_typeattr_324)
(typeattributeset base_typeattr_324 (not (coredomain ) ))
(typeattribute base_typeattr_323)
(typeattributeset base_typeattr_323 (not (system_file_type system_dlkm_file_type vendor_file_type rootfs ) ))
(typeattribute base_typeattr_322)
(typeattributeset base_typeattr_322 (and (domain ) (not (artd installd profman ))))
(typeattribute base_typeattr_321)
(typeattributeset base_typeattr_321 (and (domain ) (not (init vendor_init vold ))))
(typeattribute base_typeattr_320)
(typeattributeset base_typeattr_320 (not (hwservicemanager ) ))
(typeattribute base_typeattr_319)
(typeattributeset base_typeattr_319 (not (servicemanager vndservicemanager ) ))
(typeattribute base_typeattr_318)
(typeattributeset base_typeattr_318 (and (domain ) (not (installd shell ))))
(typeattribute base_typeattr_317)
(typeattributeset base_typeattr_317 (and (domain ) (not (appdomain artd installd ))))
(typeattribute base_typeattr_316)
(typeattributeset base_typeattr_316 (and (appdomain ) (not (shell simpleperf ))))
(typeattribute base_typeattr_315)
(typeattributeset base_typeattr_315 (and (domain ) (not (app_zygote runas simpleperf_app_runner webview_zygote zygote ))))
(typeattribute base_typeattr_314)
(typeattributeset base_typeattr_314 (and (domain ) (not (adbd init runas zygote ))))
(typeattribute base_typeattr_313)
(typeattributeset base_typeattr_313 (and (domain ) (not (init installd system_app system_server toolbox vold_prepare_subdirs ))))
(typeattribute base_typeattr_312)
(typeattributeset base_typeattr_312 (not (domain ) ))
(typeattribute base_typeattr_311)
(typeattributeset base_typeattr_311 (and (domain ) (not (init zygote ))))
(typeattribute base_typeattr_310)
(typeattributeset base_typeattr_310 (and (domain ) (not (untrusted_app_27 untrusted_app_25 ))))
(typeattribute base_typeattr_309)
(typeattributeset base_typeattr_309 (and (file_type ) (not (apk_data_file app_data_file asec_public_file ))))
(typeattribute base_typeattr_308)
(typeattributeset base_typeattr_308 (and (domain ) (not (init system_server ))))
(typeattribute base_typeattr_307)
(typeattributeset base_typeattr_307 (and (domain ) (not (dumpstate incidentd system_server ))))
(typeattribute base_typeattr_306)
(typeattributeset base_typeattr_306 (and (domain ) (not (app_zygote system_server webview_zygote ))))
(typeattribute base_typeattr_305)
(typeattributeset base_typeattr_305 (and (domain ) (not (system_server ))))
(typeattribute base_typeattr_304)
(typeattributeset base_typeattr_304 (and (domain ) (not (system_server zygote ))))
(typeattribute base_typeattr_303)
(typeattributeset base_typeattr_303 (and (system_file_type ) (not (crash_dump_exec system_event_log_tags_file system_lib_file system_group_file system_linker_exec system_linker_config_file system_passwd_file system_seccomp_policy_file system_security_cacerts_file system_zoneinfo_file task_profiles_file task_profiles_api_file file_contexts_file property_contexts_file netutils_wrapper_exec shell_exec toolbox_exec ))))
(typeattribute base_typeattr_302)
(typeattributeset base_typeattr_302 (and (vendor_file_type ) (not (same_process_hal_file ))))
(typeattribute base_typeattr_301)
(typeattributeset base_typeattr_301 (and (coredomain ) (not (system_executes_vendor_violators shell ))))
(typeattribute base_typeattr_300)
(typeattributeset base_typeattr_300 (and (vendor_file_type ) (not (vendor_app_file same_process_hal_file vndk_sp_file vendor_public_lib_file vendor_public_framework_file ))))
(typeattribute base_typeattr_299)
(typeattributeset base_typeattr_299 (and (coredomain ) (not (system_executes_vendor_violators init shell ueventd ))))
(typeattribute base_typeattr_298)
(typeattributeset base_typeattr_298 (and (file_type ) (not (vendor_file_type init_exec ))))
(typeattribute base_typeattr_297)
(typeattributeset base_typeattr_297 (and (file_type ) (not (system_file_type postinstall_file ))))
(typeattribute base_typeattr_296)
(typeattributeset base_typeattr_296 (and (system_file_type ) (not (crash_dump_exec system_lib_file system_linker_exec netutils_wrapper_exec shell_exec toolbox_exec ))))
(typeattribute base_typeattr_295)
(typeattributeset base_typeattr_295 (and (domain ) (not (appdomain coredomain vendor_executes_system_violators vendor_init ))))
(typeattribute base_typeattr_294)
(typeattributeset base_typeattr_294 (and (coredomain ) (not (init shell ueventd ))))
(typeattribute base_typeattr_293)
(typeattributeset base_typeattr_293 (and (coredomain ) (not (data_between_core_and_vendor_violators init ))))
(typeattribute base_typeattr_292)
(typeattributeset base_typeattr_292 (and (coredomain ) (not (data_between_core_and_vendor_violators init vold vold_prepare_subdirs ))))
(typeattribute base_typeattr_291)
(typeattributeset base_typeattr_291 (and (domain ) (not (appdomain coredomain data_between_core_and_vendor_violators ))))
(typeattribute base_typeattr_290)
(typeattributeset base_typeattr_290 (and (core_data_file_type ) (not (system_data_root_file system_data_file vendor_data_file vendor_userdir_file unencrypted_data_file ))))
(typeattribute base_typeattr_289)
(typeattributeset base_typeattr_289 (and (core_data_file_type ) (not (system_data_root_file system_data_file vendor_data_file vendor_userdir_file ))))
(typeattribute base_typeattr_288)
(typeattributeset base_typeattr_288 (and (core_data_file_type ) (not (unencrypted_data_file ))))
(typeattribute base_typeattr_287)
(typeattributeset base_typeattr_287 (and (vendor_init ) (not (data_between_core_and_vendor_violators ))))
(typeattribute base_typeattr_286)
(typeattributeset base_typeattr_286 (and (domain ) (not (appdomain coredomain data_between_core_and_vendor_violators vendor_init ))))
(typeattribute base_typeattr_285)
(typeattributeset base_typeattr_285 (and (data_file_type ) (not (core_data_file_type app_data_file_type vendor_data_file ))))
(typeattribute base_typeattr_284)
(typeattributeset base_typeattr_284 (and (data_file_type ) (not (core_data_file_type app_data_file_type ))))
(typeattribute base_typeattr_283)
(typeattributeset base_typeattr_283 (and (coredomain ) (not (appdomain data_between_core_and_vendor_violators init vold_prepare_subdirs ))))
(typeattribute base_typeattr_282)
(typeattributeset base_typeattr_282 (and (dev_type file_type ) (not (core_data_file_type app_data_file_type coredomain_socket unlabeled ))))
(typeattribute base_typeattr_281)
(typeattributeset base_typeattr_281 (and (coredomain ) (not (socket_between_core_and_vendor_violators init ueventd ))))
(typeattribute base_typeattr_280)
(typeattributeset base_typeattr_280 (and (core_data_file_type coredomain_socket unlabeled ) (not (pdx_endpoint_socket_type pdx_channel_socket_type app_data_file privapp_data_file ))))
(typeattribute base_typeattr_279)
(typeattributeset base_typeattr_279 (and (domain ) (not (appdomain coredomain socket_between_core_and_vendor_violators data_between_core_and_vendor_violators vendor_init ))))
(typeattribute base_typeattr_278)
(typeattributeset base_typeattr_278 (and (domain ) (not (coredomain socket_between_core_and_vendor_violators ))))
(typeattribute base_typeattr_277)
(typeattributeset base_typeattr_277 (and (coredomain ) (not (adbd init ))))
(typeattribute base_typeattr_276)
(typeattributeset base_typeattr_276 (and (coredomain ) (not (shell ))))
(typeattribute base_typeattr_275)
(typeattributeset base_typeattr_275 (and (coredomain ) (not (shell ueventd ))))
(typeattribute base_typeattr_274)
(typeattributeset base_typeattr_274 (and (service_manager_type ) (not (app_api_service ephemeral_app_api_service hal_service_type apc_service audioserver_service cameraserver_service drmserver_service credstore_service keystore_maintenance_service keystore_service legacykeystore_service mediaserver_service mediametrics_service mediaextractor_service mediadrmserver_service nfc_service radio_service virtual_touchpad_service vr_manager_service ))))
(typeattribute base_typeattr_273)
(typeattributeset base_typeattr_273 (and (appdomain ) (not (coredomain ))))
(typeattribute base_typeattr_272)
(typeattributeset base_typeattr_272 (and (domain ) (not (hwservicemanager servicemanager vndservicemanager ))))
(typeattribute base_typeattr_271)
(typeattributeset base_typeattr_271 (and (domain ) (not (fastbootd recovery update_engine ))))
(typeattribute base_typeattr_270)
(typeattributeset base_typeattr_270 (and (domain ) (not (hal_fastboot_server e2fs fastbootd fsck init recovery vold ))))
(typeattribute base_typeattr_269)
(typeattributeset base_typeattr_269 (and (domain ) (not (init recovery system_server ueventd ))))
(typeattribute base_typeattr_268)
(typeattributeset base_typeattr_268 (and (domain ) (not (hal_camera_server hal_cas_server hal_drm_server hal_keymint_server adbd dumpstate fastbootd init mediadrmserver mediaserver recovery shell system_server vendor_init ))))
(typeattribute base_typeattr_267)
(typeattributeset base_typeattr_267 (and (domain ) (not (coredomain vendor_init ))))
(typeattribute base_typeattr_266)
(typeattributeset base_typeattr_266 (and (domain ) (not (init system_server vendor_init ))))
(typeattribute base_typeattr_265)
(typeattributeset base_typeattr_265 (and (fs_type ) (not (contextmount_type ))))
(typeattribute base_typeattr_264)
(typeattributeset base_typeattr_264 (and (domain ) (not (adbd crash_dump heapprofd init shell ))))
(typeattribute base_typeattr_263)
(typeattributeset base_typeattr_263 (and (domain ) (not (adbd init shell ))))
(typeattribute base_typeattr_262)
(typeattributeset base_typeattr_262 (and (domain ) (not (init kernel recovery ))))
(typeattribute base_typeattr_261)
(typeattributeset base_typeattr_261 (and (domain ) (not (dumpstate init system_server vendor_init ))))
(typeattribute base_typeattr_260)
(typeattributeset base_typeattr_260 (and (domain ) (not (dumpstate init vendor_init ))))
(typeattribute base_typeattr_259)
(typeattributeset base_typeattr_259 (and (domain ) (not (init vendor_init ))))
(typeattribute base_typeattr_258)
(typeattributeset base_typeattr_258 (and (domain ) (not (init ueventd ))))
(typeattribute base_typeattr_257)
(typeattributeset base_typeattr_257 (and (file_type ) (not (exec_type postinstall_file ))))
(typeattribute base_typeattr_256)
(typeattributeset base_typeattr_256 (and (domain ) (not (shell ueventd ))))
(typeattribute base_typeattr_255)
(typeattributeset base_typeattr_255 (and (domain ) (not (prng_seeder shell ueventd ))))
(typeattribute base_typeattr_254)
(typeattributeset base_typeattr_254 (and (domain ) (not (kernel ))))
(typeattribute base_typeattr_253)
(typeattributeset base_typeattr_253 (and (domain ) (not (init kernel ueventd vold ))))
(typeattribute base_typeattr_252)
(typeattributeset base_typeattr_252 (and (domain ) (not (init recovery ))))
(typeattribute base_typeattr_251)
(typeattributeset base_typeattr_251 (and (domain ) (not (domain ))))
(typeattribute base_typeattr_250)
(typeattributeset base_typeattr_250 (and (domain ) (not (coredomain ))))
(typeattribute base_typeattr_249)
(typeattributeset base_typeattr_249 (and (domain ) (not (isolated_app servicemanager vndservicemanager ))))
(typeattribute base_typeattr_248)
(typeattributeset base_typeattr_248 (and (domain ) (not (hwservicemanager vndservicemanager ))))
(typeattribute base_typeattr_247)
(typeattributeset base_typeattr_247 (and (domain ) (not (display_service_server ))))
(typeattribute base_typeattr_246)
(typeattributeset base_typeattr_246 (and (domain ) (not (credstore ))))
(typeattribute base_typeattr_245)
(typeattributeset base_typeattr_245 (and (domain ) (not (cameraserver ))))
(typeattribute base_typeattr_244)
(typeattributeset base_typeattr_244 (and (domain ) (not (camera_service_server ))))
(typeattribute base_typeattr_243)
(typeattributeset base_typeattr_243 (and (domain ) (not (bufferhubd ))))
(typeattribute base_typeattr_242)
(typeattributeset base_typeattr_242 (and (domain ) (not (bootstat init ))))
(typeattribute base_typeattr_241)
(typeattributeset base_typeattr_241 (and (appdomain ) (not (bluetooth system_app ))))
(typeattribute base_typeattr_240)
(typeattributeset base_typeattr_240 (and (appdomain ) (not (bluetooth nfc ))))
(typeattribute base_typeattr_239)
(typeattributeset base_typeattr_239 (and (appdomain ) (not (untrusted_app_all isolated_app_all platform_app priv_app ))))
(typeattribute base_typeattr_238)
(typeattributeset base_typeattr_238 (and (domain ) (not (credstore init ))))
(typeattribute base_typeattr_237)
(typeattributeset base_typeattr_237 (and (appdomain ) (not (platform_app ))))
(typeattribute base_typeattr_236)
(typeattributeset base_typeattr_236 (and (domain ) (not (appdomain perfetto ))))
(typeattribute base_typeattr_235)
(typeattributeset base_typeattr_235 (and (appdomain ) (not (shell ))))
(typeattribute base_typeattr_234)
(typeattributeset base_typeattr_234 (and (domain ) (not (appdomain crash_dump ))))
(typeattribute base_typeattr_233)
(typeattributeset base_typeattr_233 (and (domain ) (not (appdomain ))))
(typeattribute base_typeattr_232)
(typeattributeset base_typeattr_232 (and (appdomain ) (not (radio ))))
(typeattribute base_typeattr_231)
(typeattributeset base_typeattr_231 (and (appdomain ) (not (network_stack ))))
(typeattribute base_typeattr_230)
(typeattributeset base_typeattr_230 (and (appdomain ) (not (bluetooth ))))
(typeattribute base_typeattr_229)
(typeattributeset base_typeattr_229 (and (appdomain ) (not (nfc ))))
(typeattribute base_typeattr_228)
(typeattributeset base_typeattr_228 (and (appdomain ) (not (bluetooth network_stack ))))
(typeattribute base_typeattr_227)
(typeattributeset base_typeattr_227 (and (domain ) (not (apexd init servicemanager system_server update_engine ))))
(typeattribute base_typeattr_226)
(typeattributeset base_typeattr_226 (and (domain ) (not (apexd init system_server update_engine ))))
(typeattribute base_typeattr_225)
(typeattributeset base_typeattr_225 (and (domain ) (not (apexd ))))
(typeattribute base_typeattr_224)
(typeattributeset base_typeattr_224 (all))
(typeattribute base_typeattr_223)
(typeattributeset base_typeattr_223 (and (domain ) (not (init ))))
(typeattribute base_typeattr_222)
(typeattributeset base_typeattr_222 (and (hal_wifi_supplicant_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_221)
(typeattributeset base_typeattr_221 (and (hal_wifi_supplicant_server ) (not (hal_wifi_supplicant ))))
(typeattribute base_typeattr_220)
(typeattributeset base_typeattr_220 (and (hal_wifi_supplicant_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_219)
(typeattributeset base_typeattr_219 (and (hal_wifi_hostapd_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_218)
(typeattributeset base_typeattr_218 (and (hal_wifi_hostapd_server ) (not (hal_wifi_hostapd ))))
(typeattribute base_typeattr_217)
(typeattributeset base_typeattr_217 (and (hal_wifi_hostapd_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_216)
(typeattributeset base_typeattr_216 (and (hal_wifi_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_215)
(typeattributeset base_typeattr_215 (and (hal_wifi_server ) (not (hal_wifi ))))
(typeattribute base_typeattr_214)
(typeattributeset base_typeattr_214 (and (hal_wifi_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_213)
(typeattributeset base_typeattr_213 (and (hal_weaver_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_212)
(typeattributeset base_typeattr_212 (and (hal_weaver_server ) (not (hal_weaver ))))
(typeattribute base_typeattr_211)
(typeattributeset base_typeattr_211 (and (hal_weaver_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_210)
(typeattributeset base_typeattr_210 (and (hal_vr_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_209)
(typeattributeset base_typeattr_209 (and (hal_vr_server ) (not (hal_vr ))))
(typeattribute base_typeattr_208)
(typeattributeset base_typeattr_208 (and (hal_vr_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_207)
(typeattributeset base_typeattr_207 (and (hal_vibrator_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_206)
(typeattributeset base_typeattr_206 (and (hal_vibrator_server ) (not (hal_vibrator ))))
(typeattribute base_typeattr_205)
(typeattributeset base_typeattr_205 (and (hal_vibrator_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_204)
(typeattributeset base_typeattr_204 (and (hal_vehicle_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_203)
(typeattributeset base_typeattr_203 (and (hal_vehicle_server ) (not (hal_vehicle ))))
(typeattribute base_typeattr_202)
(typeattributeset base_typeattr_202 (and (hal_vehicle_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_201)
(typeattributeset base_typeattr_201 (and (hal_uwb_vendor_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_200)
(typeattributeset base_typeattr_200 (and (hal_uwb_vendor_server ) (not (hal_uwb_vendor ))))
(typeattribute base_typeattr_199)
(typeattributeset base_typeattr_199 (and (hal_uwb_vendor_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_198)
(typeattributeset base_typeattr_198 (and (hal_uwb_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_197)
(typeattributeset base_typeattr_197 (and (hal_uwb_server ) (not (hal_uwb ))))
(typeattribute base_typeattr_196)
(typeattributeset base_typeattr_196 (and (hal_uwb_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_195)
(typeattributeset base_typeattr_195 (and (hal_usb_gadget_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_194)
(typeattributeset base_typeattr_194 (and (hal_usb_gadget_server ) (not (hal_usb_gadget ))))
(typeattribute base_typeattr_193)
(typeattributeset base_typeattr_193 (and (hal_usb_gadget_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_192)
(typeattributeset base_typeattr_192 (and (hal_usb_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_191)
(typeattributeset base_typeattr_191 (and (hal_usb_server ) (not (hal_usb ))))
(typeattribute base_typeattr_190)
(typeattributeset base_typeattr_190 (and (hal_usb_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_189)
(typeattributeset base_typeattr_189 (and (hal_tv_tuner_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_188)
(typeattributeset base_typeattr_188 (and (hal_tv_tuner_server ) (not (hal_tv_tuner ))))
(typeattribute base_typeattr_187)
(typeattributeset base_typeattr_187 (and (hal_tv_tuner_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_186)
(typeattributeset base_typeattr_186 (and (hal_tv_input_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_185)
(typeattributeset base_typeattr_185 (and (hal_tv_input_server ) (not (hal_tv_input ))))
(typeattribute base_typeattr_184)
(typeattributeset base_typeattr_184 (and (hal_tv_input_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_183)
(typeattributeset base_typeattr_183 (and (hal_tv_hdmi_earc_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_182)
(typeattributeset base_typeattr_182 (and (hal_tv_hdmi_earc_server ) (not (hal_tv_hdmi_earc ))))
(typeattribute base_typeattr_181)
(typeattributeset base_typeattr_181 (and (hal_tv_hdmi_earc_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_180)
(typeattributeset base_typeattr_180 (and (hal_tv_hdmi_connection_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_179)
(typeattributeset base_typeattr_179 (and (hal_tv_hdmi_connection_server ) (not (hal_tv_hdmi_connection ))))
(typeattribute base_typeattr_178)
(typeattributeset base_typeattr_178 (and (hal_tv_hdmi_connection_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_177)
(typeattributeset base_typeattr_177 (and (hal_tv_hdmi_cec_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_176)
(typeattributeset base_typeattr_176 (and (hal_tv_hdmi_cec_server ) (not (hal_tv_hdmi_cec ))))
(typeattribute base_typeattr_175)
(typeattributeset base_typeattr_175 (and (hal_tv_hdmi_cec_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_174)
(typeattributeset base_typeattr_174 (and (hal_tv_cec_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_173)
(typeattributeset base_typeattr_173 (and (hal_tv_cec_server ) (not (hal_tv_cec ))))
(typeattribute base_typeattr_172)
(typeattributeset base_typeattr_172 (and (hal_tv_cec_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_171)
(typeattributeset base_typeattr_171 (and (hal_threadnetwork_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_170)
(typeattributeset base_typeattr_170 (and (hal_threadnetwork_server ) (not (hal_threadnetwork ))))
(typeattribute base_typeattr_169)
(typeattributeset base_typeattr_169 (and (hal_threadnetwork_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_168)
(typeattributeset base_typeattr_168 (and (hal_thermal_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_167)
(typeattributeset base_typeattr_167 (and (hal_thermal_server ) (not (hal_thermal ))))
(typeattribute base_typeattr_166)
(typeattributeset base_typeattr_166 (and (hal_thermal_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_165)
(typeattributeset base_typeattr_165 (and (hal_tetheroffload_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_164)
(typeattributeset base_typeattr_164 (and (hal_tetheroffload_server ) (not (hal_tetheroffload ))))
(typeattribute base_typeattr_163)
(typeattributeset base_typeattr_163 (and (hal_tetheroffload_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_162)
(typeattributeset base_typeattr_162 (and (hal_telephony_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_161)
(typeattributeset base_typeattr_161 (and (hal_telephony_server ) (not (hal_telephony ))))
(typeattribute base_typeattr_160)
(typeattributeset base_typeattr_160 (and (hal_telephony_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_159)
(typeattributeset base_typeattr_159 (and (hal_sensors_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_158)
(typeattributeset base_typeattr_158 (and (hal_sensors_server ) (not (hal_sensors ))))
(typeattribute base_typeattr_157)
(typeattributeset base_typeattr_157 (and (hal_sensors_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_156)
(typeattributeset base_typeattr_156 (and (hal_secure_element_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_155)
(typeattributeset base_typeattr_155 (and (hal_secure_element_server ) (not (hal_secure_element ))))
(typeattribute base_typeattr_154)
(typeattributeset base_typeattr_154 (and (hal_secure_element_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_153)
(typeattributeset base_typeattr_153 (and (hal_remotelyprovisionedcomponent_avf_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_152)
(typeattributeset base_typeattr_152 (and (hal_remotelyprovisionedcomponent_avf_server ) (not (hal_remotelyprovisionedcomponent_avf ))))
(typeattribute base_typeattr_151)
(typeattributeset base_typeattr_151 (and (hal_remotelyprovisionedcomponent_avf_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_150)
(typeattributeset base_typeattr_150 (and (hal_secretkeeper_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_149)
(typeattributeset base_typeattr_149 (and (hal_secretkeeper_server ) (not (hal_secretkeeper ))))
(typeattribute base_typeattr_148)
(typeattributeset base_typeattr_148 (and (hal_secretkeeper_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_147)
(typeattributeset base_typeattr_147 (and (hal_remoteaccess_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_146)
(typeattributeset base_typeattr_146 (and (hal_remoteaccess_server ) (not (hal_remoteaccess ))))
(typeattribute base_typeattr_145)
(typeattributeset base_typeattr_145 (and (hal_remoteaccess_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_144)
(typeattributeset base_typeattr_144 (and (hal_rebootescrow_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_143)
(typeattributeset base_typeattr_143 (and (hal_rebootescrow_server ) (not (hal_rebootescrow ))))
(typeattribute base_typeattr_142)
(typeattributeset base_typeattr_142 (and (hal_rebootescrow_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_141)
(typeattributeset base_typeattr_141 (and (hal_power_stats_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_140)
(typeattributeset base_typeattr_140 (and (hal_power_stats_server ) (not (hal_power_stats ))))
(typeattribute base_typeattr_139)
(typeattributeset base_typeattr_139 (and (hal_power_stats_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_138)
(typeattributeset base_typeattr_138 (and (hal_power_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_137)
(typeattributeset base_typeattr_137 (and (hal_power_server ) (not (hal_power ))))
(typeattribute base_typeattr_136)
(typeattributeset base_typeattr_136 (and (hal_power_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_135)
(typeattributeset base_typeattr_135 (and (hal_omx_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_134)
(typeattributeset base_typeattr_134 (and (hal_omx_server ) (not (hal_omx ))))
(typeattribute base_typeattr_133)
(typeattributeset base_typeattr_133 (and (hal_omx_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_132)
(typeattributeset base_typeattr_132 (and (hal_oemlock_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_131)
(typeattributeset base_typeattr_131 (and (hal_oemlock_server ) (not (hal_oemlock ))))
(typeattribute base_typeattr_130)
(typeattributeset base_typeattr_130 (and (hal_oemlock_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_129)
(typeattributeset base_typeattr_129 (and (hal_nlinterceptor_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_128)
(typeattributeset base_typeattr_128 (and (hal_nlinterceptor_server ) (not (hal_nlinterceptor ))))
(typeattribute base_typeattr_127)
(typeattributeset base_typeattr_127 (and (hal_nlinterceptor_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_126)
(typeattributeset base_typeattr_126 (and (hal_nfc_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_125)
(typeattributeset base_typeattr_125 (and (hal_nfc_server ) (not (hal_nfc ))))
(typeattribute base_typeattr_124)
(typeattributeset base_typeattr_124 (and (hal_nfc_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_123)
(typeattributeset base_typeattr_123 (and (hal_neuralnetworks_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_122)
(typeattributeset base_typeattr_122 (and (hal_neuralnetworks_server ) (not (hal_neuralnetworks ))))
(typeattribute base_typeattr_121)
(typeattributeset base_typeattr_121 (and (hal_neuralnetworks_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_120)
(typeattributeset base_typeattr_120 (and (hal_memtrack_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_119)
(typeattributeset base_typeattr_119 (and (hal_memtrack_server ) (not (hal_memtrack ))))
(typeattribute base_typeattr_118)
(typeattributeset base_typeattr_118 (and (hal_memtrack_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_117)
(typeattributeset base_typeattr_117 (and (hal_macsec_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_116)
(typeattributeset base_typeattr_116 (and (hal_macsec_server ) (not (hal_macsec ))))
(typeattribute base_typeattr_115)
(typeattributeset base_typeattr_115 (and (hal_macsec_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_114)
(typeattributeset base_typeattr_114 (and (hal_lowpan_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_113)
(typeattributeset base_typeattr_113 (and (hal_lowpan_server ) (not (hal_lowpan ))))
(typeattribute base_typeattr_112)
(typeattributeset base_typeattr_112 (and (hal_lowpan_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_111)
(typeattributeset base_typeattr_111 (and (hal_light_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_110)
(typeattributeset base_typeattr_110 (and (hal_light_server ) (not (hal_light ))))
(typeattribute base_typeattr_109)
(typeattributeset base_typeattr_109 (and (hal_light_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_108)
(typeattributeset base_typeattr_108 (and (hal_keymint_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_107)
(typeattributeset base_typeattr_107 (and (hal_keymint_server ) (not (hal_keymint ))))
(typeattribute base_typeattr_106)
(typeattributeset base_typeattr_106 (and (hal_keymint_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_105)
(typeattributeset base_typeattr_105 (and (hal_keymaster_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_104)
(typeattributeset base_typeattr_104 (and (hal_keymaster_server ) (not (hal_keymaster ))))
(typeattribute base_typeattr_103)
(typeattributeset base_typeattr_103 (and (hal_keymaster_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_102)
(typeattributeset base_typeattr_102 (and (hal_ivn_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_101)
(typeattributeset base_typeattr_101 (and (hal_ivn_server ) (not (hal_ivn ))))
(typeattribute base_typeattr_100)
(typeattributeset base_typeattr_100 (and (hal_ivn_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_99)
(typeattributeset base_typeattr_99 (and (hal_ir_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_98)
(typeattributeset base_typeattr_98 (and (hal_ir_server ) (not (hal_ir ))))
(typeattribute base_typeattr_97)
(typeattributeset base_typeattr_97 (and (hal_ir_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_96)
(typeattributeset base_typeattr_96 (and (hal_input_processor_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_95)
(typeattributeset base_typeattr_95 (and (hal_input_processor_server ) (not (hal_input_processor ))))
(typeattribute base_typeattr_94)
(typeattributeset base_typeattr_94 (and (hal_input_processor_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_93)
(typeattributeset base_typeattr_93 (and (hal_input_classifier_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_92)
(typeattributeset base_typeattr_92 (and (hal_input_classifier_server ) (not (hal_input_classifier ))))
(typeattribute base_typeattr_91)
(typeattributeset base_typeattr_91 (and (hal_input_classifier_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_90)
(typeattributeset base_typeattr_90 (and (hal_identity_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_89)
(typeattributeset base_typeattr_89 (and (hal_identity_server ) (not (hal_identity ))))
(typeattribute base_typeattr_88)
(typeattributeset base_typeattr_88 (and (hal_identity_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_87)
(typeattributeset base_typeattr_87 (and (hal_health_storage_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_86)
(typeattributeset base_typeattr_86 (and (hal_health_storage_server ) (not (hal_health_storage ))))
(typeattribute base_typeattr_85)
(typeattributeset base_typeattr_85 (and (hal_health_storage_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_84)
(typeattributeset base_typeattr_84 (and (hal_health_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_83)
(typeattributeset base_typeattr_83 (and (hal_health_server ) (not (hal_health ))))
(typeattribute base_typeattr_82)
(typeattributeset base_typeattr_82 (and (hal_health_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_81)
(typeattributeset base_typeattr_81 (and (hal_graphics_composer_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_80)
(typeattributeset base_typeattr_80 (and (hal_graphics_composer_server ) (not (hal_graphics_composer ))))
(typeattribute base_typeattr_79)
(typeattributeset base_typeattr_79 (and (hal_graphics_composer_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_78)
(typeattributeset base_typeattr_78 (and (hal_graphics_allocator_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_77)
(typeattributeset base_typeattr_77 (and (hal_graphics_allocator_server ) (not (hal_graphics_allocator ))))
(typeattribute base_typeattr_76)
(typeattributeset base_typeattr_76 (and (hal_graphics_allocator_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_75)
(typeattributeset base_typeattr_75 (and (hal_gnss_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_74)
(typeattributeset base_typeattr_74 (and (hal_gnss_server ) (not (hal_gnss ))))
(typeattribute base_typeattr_73)
(typeattributeset base_typeattr_73 (and (hal_gnss_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_72)
(typeattributeset base_typeattr_72 (and (hal_gatekeeper_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_71)
(typeattributeset base_typeattr_71 (and (hal_gatekeeper_server ) (not (hal_gatekeeper ))))
(typeattribute base_typeattr_70)
(typeattributeset base_typeattr_70 (and (hal_gatekeeper_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_69)
(typeattributeset base_typeattr_69 (and (hal_fingerprint_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_68)
(typeattributeset base_typeattr_68 (and (hal_fingerprint_server ) (not (hal_fingerprint ))))
(typeattribute base_typeattr_67)
(typeattributeset base_typeattr_67 (and (hal_fingerprint_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_66)
(typeattributeset base_typeattr_66 (and (hal_fastboot_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_65)
(typeattributeset base_typeattr_65 (and (hal_fastboot_server ) (not (hal_fastboot ))))
(typeattribute base_typeattr_64)
(typeattributeset base_typeattr_64 (and (hal_fastboot_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_63)
(typeattributeset base_typeattr_63 (and (hal_face_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_62)
(typeattributeset base_typeattr_62 (and (hal_face_server ) (not (hal_face ))))
(typeattribute base_typeattr_61)
(typeattributeset base_typeattr_61 (and (hal_face_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_60)
(typeattributeset base_typeattr_60 (and (hal_evs_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_59)
(typeattributeset base_typeattr_59 (and (hal_evs_server ) (not (hal_evs ))))
(typeattribute base_typeattr_58)
(typeattributeset base_typeattr_58 (and (hal_evs_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_57)
(typeattributeset base_typeattr_57 (and (hal_dumpstate_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_56)
(typeattributeset base_typeattr_56 (and (hal_dumpstate_server ) (not (hal_dumpstate ))))
(typeattribute base_typeattr_55)
(typeattributeset base_typeattr_55 (and (hal_dumpstate_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_54)
(typeattributeset base_typeattr_54 (and (hal_drm_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_53)
(typeattributeset base_typeattr_53 (and (hal_drm_server ) (not (hal_drm ))))
(typeattribute base_typeattr_52)
(typeattributeset base_typeattr_52 (and (hal_drm_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_51)
(typeattributeset base_typeattr_51 (and (hal_contexthub_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_50)
(typeattributeset base_typeattr_50 (and (hal_contexthub_server ) (not (hal_contexthub ))))
(typeattribute base_typeattr_49)
(typeattributeset base_typeattr_49 (and (hal_contexthub_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_48)
(typeattributeset base_typeattr_48 (and (hal_confirmationui_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_47)
(typeattributeset base_typeattr_47 (and (hal_confirmationui_server ) (not (hal_confirmationui ))))
(typeattribute base_typeattr_46)
(typeattributeset base_typeattr_46 (and (hal_confirmationui_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_45)
(typeattributeset base_typeattr_45 (and (hal_configstore_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_44)
(typeattributeset base_typeattr_44 (and (hal_configstore_server ) (not (hal_configstore ))))
(typeattribute base_typeattr_43)
(typeattributeset base_typeattr_43 (and (hal_configstore_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_42)
(typeattributeset base_typeattr_42 (and (hal_codec2_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_41)
(typeattributeset base_typeattr_41 (and (hal_codec2_server ) (not (hal_codec2 ))))
(typeattribute base_typeattr_40)
(typeattributeset base_typeattr_40 (and (hal_codec2_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_39)
(typeattributeset base_typeattr_39 (and (hal_cas_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_38)
(typeattributeset base_typeattr_38 (and (hal_cas_server ) (not (hal_cas ))))
(typeattribute base_typeattr_37)
(typeattributeset base_typeattr_37 (and (hal_cas_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_36)
(typeattributeset base_typeattr_36 (and (hal_can_controller_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_35)
(typeattributeset base_typeattr_35 (and (hal_can_controller_server ) (not (hal_can_controller ))))
(typeattribute base_typeattr_34)
(typeattributeset base_typeattr_34 (and (hal_can_controller_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_33)
(typeattributeset base_typeattr_33 (and (hal_can_bus_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_32)
(typeattributeset base_typeattr_32 (and (hal_can_bus_server ) (not (hal_can_bus ))))
(typeattribute base_typeattr_31)
(typeattributeset base_typeattr_31 (and (hal_can_bus_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_30)
(typeattributeset base_typeattr_30 (and (hal_camera_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_29)
(typeattributeset base_typeattr_29 (and (hal_camera_server ) (not (hal_camera ))))
(typeattribute base_typeattr_28)
(typeattributeset base_typeattr_28 (and (hal_camera_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_27)
(typeattributeset base_typeattr_27 (and (hal_broadcastradio_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_26)
(typeattributeset base_typeattr_26 (and (hal_broadcastradio_server ) (not (hal_broadcastradio ))))
(typeattribute base_typeattr_25)
(typeattributeset base_typeattr_25 (and (hal_broadcastradio_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_24)
(typeattributeset base_typeattr_24 (and (hal_bootctl_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_23)
(typeattributeset base_typeattr_23 (and (hal_bootctl_server ) (not (hal_bootctl ))))
(typeattribute base_typeattr_22)
(typeattributeset base_typeattr_22 (and (hal_bootctl_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_21)
(typeattributeset base_typeattr_21 (and (hal_bluetooth_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_20)
(typeattributeset base_typeattr_20 (and (hal_bluetooth_server ) (not (hal_bluetooth ))))
(typeattribute base_typeattr_19)
(typeattributeset base_typeattr_19 (and (hal_bluetooth_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_18)
(typeattributeset base_typeattr_18 (and (hal_authsecret_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_17)
(typeattributeset base_typeattr_17 (and (hal_authsecret_server ) (not (hal_authsecret ))))
(typeattribute base_typeattr_16)
(typeattributeset base_typeattr_16 (and (hal_authsecret_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_15)
(typeattributeset base_typeattr_15 (and (hal_authgraph_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_14)
(typeattributeset base_typeattr_14 (and (hal_authgraph_server ) (not (hal_authgraph ))))
(typeattribute base_typeattr_13)
(typeattributeset base_typeattr_13 (and (hal_authgraph_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_12)
(typeattributeset base_typeattr_12 (and (hal_audiocontrol_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_11)
(typeattributeset base_typeattr_11 (and (hal_audiocontrol_server ) (not (hal_audiocontrol ))))
(typeattribute base_typeattr_10)
(typeattributeset base_typeattr_10 (and (hal_audiocontrol_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_9)
(typeattributeset base_typeattr_9 (and (hal_audio_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_8)
(typeattributeset base_typeattr_8 (and (hal_audio_server ) (not (hal_audio ))))
(typeattribute base_typeattr_7)
(typeattributeset base_typeattr_7 (and (hal_audio_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_6)
(typeattributeset base_typeattr_6 (and (hal_atrace_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_5)
(typeattributeset base_typeattr_5 (and (hal_atrace_server ) (not (hal_atrace ))))
(typeattribute base_typeattr_4)
(typeattributeset base_typeattr_4 (and (hal_atrace_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_3)
(typeattributeset base_typeattr_3 (and (hal_allocator_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_2)
(typeattributeset base_typeattr_2 (and (hal_allocator_server ) (not (hal_allocator ))))
(typeattribute base_typeattr_1)
(typeattributeset base_typeattr_1 (and (hal_allocator_server ) (not (halserverdomain ))))