(role object_r)
(role auditadm_r)
(role secadm_r)
(typeattribute cil_gen_require)
(roleattribute cil_gen_require)
(handleunknown deny)
(mls true)
(policycap network_peer_controls)
(policycap open_perms)
(policycap extended_socket_class)
(policycap nnp_nosuid_transition)
(sid devnull)
(sidcontext devnull (u object_r null_device ((s0) (s0))))
(sid scmp_packet)
(sidcontext scmp_packet (u object_r unlabeled ((s0) (s0))))
(sid policy)
(sidcontext policy (u object_r unlabeled ((s0) (s0))))
(sid kmod)
(sidcontext kmod (u object_r unlabeled ((s0) (s0))))
(sid sysctl_dev)
(sidcontext sysctl_dev (u object_r unlabeled ((s0) (s0))))
(sid sysctl_vm)
(sidcontext sysctl_vm (u object_r unlabeled ((s0) (s0))))
(sid sysctl_net_unix)
(sidcontext sysctl_net_unix (u object_r unlabeled ((s0) (s0))))
(sid sysctl_net)
(sidcontext sysctl_net (u object_r unlabeled ((s0) (s0))))
(sid sysctl_kernel)
(sidcontext sysctl_kernel (u object_r unlabeled ((s0) (s0))))
(sid sysctl_fs)
(sidcontext sysctl_fs (u object_r unlabeled ((s0) (s0))))
(sid sysctl)
(sidcontext sysctl (u object_r proc ((s0) (s0))))
(sid sysctl_modprobe)
(sidcontext sysctl_modprobe (u object_r unlabeled ((s0) (s0))))
(sid tcp_socket)
(sidcontext tcp_socket (u object_r unlabeled ((s0) (s0))))
(sid icmp_socket)
(sidcontext icmp_socket (u object_r unlabeled ((s0) (s0))))
(sid igmp_packet)
(sidcontext igmp_packet (u object_r unlabeled ((s0) (s0))))
(sid node)
(sidcontext node (u object_r node ((s0) (s0))))
(sid netmsg)
(sidcontext netmsg (u object_r unlabeled ((s0) (s0))))
(sid netif)
(sidcontext netif (u object_r netif ((s0) (s0))))
(sid port)
(sidcontext port (u object_r port ((s0) (s0))))
(sid any_socket)
(sidcontext any_socket (u object_r unlabeled ((s0) (s0))))
(sid init)
(sidcontext init (u object_r unlabeled ((s0) (s0))))
(sid file_labels)
(sidcontext file_labels (u object_r unlabeled ((s0) (s0))))
(sid file)
(sidcontext file (u object_r unlabeled ((s0) (s0))))
(sid fs)
(sidcontext fs (u object_r labeledfs ((s0) (s0))))
(sid unlabeled)
(sidcontext unlabeled (u object_r unlabeled ((s0) (s0))))
(sid security)
(sidcontext security (u object_r kernel ((s0) (s0))))
(sid kernel)
(sidcontext kernel (u r kernel ((s0) (s0))))
(sidorder (kernel security unlabeled fs file file_labels init any_socket port netif netmsg node igmp_packet icmp_socket tcp_socket sysctl_modprobe sysctl sysctl_fs sysctl_kernel sysctl_net sysctl_net_unix sysctl_vm sysctl_dev kmod policy scmp_packet devnull ))
(fsuse trans mqueue (u object_r mqueue ((s0) (s0))))
(fsuse trans shm (u object_r shm ((s0) (s0))))
(fsuse trans devtmpfs (u object_r device ((s0) (s0))))
(fsuse trans tmpfs (u object_r tmpfs ((s0) (s0))))
(fsuse trans devpts (u object_r devpts ((s0) (s0))))
(fsuse task sockfs (u object_r sockfs ((s0) (s0))))
(fsuse task pipefs (u object_r pipefs ((s0) (s0))))
(fsuse xattr erofs (u object_r labeledfs ((s0) (s0))))
(fsuse xattr overlay (u object_r labeledfs ((s0) (s0))))
(fsuse xattr squashfs (u object_r labeledfs ((s0) (s0))))
(fsuse xattr f2fs (u object_r labeledfs ((s0) (s0))))
(fsuse xattr btrfs (u object_r labeledfs ((s0) (s0))))
(fsuse xattr xfs (u object_r labeledfs ((s0) (s0))))
(fsuse xattr ext4 (u object_r labeledfs ((s0) (s0))))
(fsuse xattr ext3 (u object_r labeledfs ((s0) (s0))))
(fsuse xattr ext2 (u object_r labeledfs ((s0) (s0))))
(fsuse xattr jffs2 (u object_r labeledfs ((s0) (s0))))
(fsuse xattr yaffs2 (u object_r labeledfs ((s0) (s0))))
(genfscon binfmt_misc "/" (u object_r binfmt_miscfs ((s0) (s0))))
(genfscon bpf "/" (u object_r fs_bpf ((s0) (s0))))
(genfscon cgroup "/" (u object_r cgroup ((s0) (s0))))
(genfscon cgroup2 "/" (u object_r cgroup_bpf ((s0) (s0))))
(genfscon configfs "/" (u object_r configfs ((s0) (s0))))
(genfscon debugfs "/tracing/events/filemap/mm_filemap_delete_from_page_cache/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon debugfs "/tracing/events/vmscan/mm_vmscan_direct_reclaim_begin/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon debugfs "/tracing/events/filemap/mm_filemap_add_to_page_cache/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon debugfs "/tracing/events/vmscan/mm_vmscan_direct_reclaim_end/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon debugfs "/tracing/events/binder/binder_transaction_alloc_buf/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon debugfs "/tracing/events/binder/binder_transaction_received/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon debugfs "/tracing/events/ext4/ext4_es_lookup_extent_enter/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon debugfs "/tracing/events/ext4/ext4_es_lookup_extent_exit/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon debugfs "/tracing/events/vmscan/mm_vmscan_kswapd_sleep/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon debugfs "/tracing/events/vmscan/mm_vmscan_kswapd_wake/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon debugfs "/tracing/events/sched/sched_blocked_reason/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon debugfs "/tracing/events/power/cpu_frequency_limits/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon debugfs "/tracing/events/f2fs/f2fs_sync_file_enter/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon debugfs "/tracing/events/ext4/ext4_sync_file_enter/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon debugfs "/tracing/events/binder/binder_transaction/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon debugfs "/tracing/events/f2fs/f2fs_get_data_block/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon debugfs "/tracing/events/f2fs/f2fs_sync_file_exit/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon debugfs "/tracing/events/ext4/ext4_da_write_begin/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon debugfs "/tracing/events/ext4/ext4_sync_file_exit/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon debugfs "/tracing/events/sched/sched_process_exit/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon debugfs "/tracing/events/mm_event/mm_event_record/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon debugfs "/tracing/events/oom/oom_score_adj_update/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon debugfs "/tracing/events/block/block_rq_complete/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon debugfs "/tracing/events/sched/sched_cpu_hotplug/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon debugfs "/tracing/events/ext4/ext4_da_write_end/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon debugfs "/tracing/events/f2fs/f2fs_write_begin/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon debugfs "/tracing/events/ext4/ext4_load_inode/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon debugfs "/tracing/events/block/block_rq_issue/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon debugfs "/tracing/events/power/clock_set_rate/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon debugfs "/tracing/events/power/suspend_resume/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon debugfs "/tracing/events/binder/binder_locked/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon debugfs "/tracing/events/binder/binder_unlock/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon debugfs "/tracing/events/kmem/ion_heap_shrink/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon debugfs "/tracing/events/f2fs/f2fs_write_end/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon debugfs "/tracing/events/power/cpu_frequency/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon debugfs "/tracing/events/power/gpu_frequency/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon debugfs "/tracing/events/cpufreq_interactive/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon debugfs "/tracing/events/sched/sched_switch/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon debugfs "/tracing/events/sched/sched_wakeup/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon debugfs "/tracing/events/binder/binder_lock/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon debugfs "/tracing/events/kmem/ion_heap_grow/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon debugfs "/tracing/events/task/task_newtask/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon debugfs "/tracing/events/task/task_rename/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon debugfs "/tracing/events/lowmemorykiller/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon debugfs "/tracing/events/f2fs/f2fs_iget/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon debugfs "/tracing/events/power/cpu_idle/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon debugfs "/tracing/events/kmem/rss_stat/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon debugfs "/tracing/events/ion/ion_stat/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon debugfs "/tracing/events/ftrace/print/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon debugfs "/tracing/options/record-tgid" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon debugfs "/tracing/saved_cmdlines_size" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon debugfs "/tracing/events/header_page" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon debugfs "/tracing/options/print-tgid" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon debugfs "/tracing/options/overwrite" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon debugfs "/tracing/events/dma_fence/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon debugfs "/tracing/instances/wifi" (u object_r debugfs_wifi_tracing ((s0) (s0))))
(genfscon debugfs "/tracing/buffer_size_kb" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon debugfs "/tracing/events/cgroup/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon debugfs "/tracing/events/fence/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon debugfs "/tracing/trace_marker" (u object_r debugfs_trace_marker ((s0) (s0))))
(genfscon debugfs "/tracing/events/sync/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon debugfs "/tracing/per_cpu/cpu" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon debugfs "/tracing/trace_clock" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon debugfs "/tracing/tracing_on" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon debugfs "/tracing/instances" (u object_r debugfs_tracing_instances ((s0) (s0))))
(genfscon debugfs "/wakeup_sources" (u object_r debugfs_wakeup_sources ((s0) (s0))))
(genfscon debugfs "/tracing/trace" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon debugfs "/tracing" (u object_r debugfs_tracing_debug ((s0) (s0))))
(genfscon debugfs "/mmc0" (u object_r debugfs_mmc ((s0) (s0))))
(genfscon debugfs "/kcov" (u object_r debugfs_kcov ((s0) (s0))))
(genfscon debugfs "/" (u object_r debugfs ((s0) (s0))))
(genfscon esdfs "/" (u object_r sdcardfs ((s0) (s0))))
(genfscon exfat "/" (u object_r exfat ((s0) (s0))))
(genfscon functionfs "/" (u object_r functionfs ((s0) (s0))))
(genfscon fuse "/" (u object_r fuse ((s0) (s0))))
(genfscon inotifyfs "/" (u object_r inotify ((s0) (s0))))
(genfscon proc "/sys/kernel/sched_wakeup_granularity_ns" (u object_r proc_sched ((s0) (s0))))
(genfscon proc "/sys/kernel/perf_event_max_sample_rate" (u object_r proc_perf ((s0) (s0))))
(genfscon proc "/sys/kernel/perf_cpu_time_max_percent" (u object_r proc_perf ((s0) (s0))))
(genfscon proc "/sys/kernel/sched_child_runs_first" (u object_r proc_sched ((s0) (s0))))
(genfscon proc "/sys/fs/verity/require_signatures" (u object_r proc_fs_verity ((s0) (s0))))
(genfscon proc "/sys/kernel/sched_tunable_scaling" (u object_r proc_sched ((s0) (s0))))
(genfscon proc "/sys/kernel/perf_event_paranoid" (u object_r proc_perf ((s0) (s0))))
(genfscon proc "/sys/kernel/perf_event_mlock_kb" (u object_r proc_perf ((s0) (s0))))
(genfscon proc "/sys/kernel/sched_rt_runtime_us" (u object_r proc_sched ((s0) (s0))))
(genfscon proc "/sys/kernel/randomize_va_space" (u object_r proc_security ((s0) (s0))))
(genfscon proc "/sys/kernel/sched_rt_period_us" (u object_r proc_sched ((s0) (s0))))
(genfscon proc "/sys/vm/dirty_background_ratio" (u object_r proc_dirty ((s0) (s0))))
(genfscon proc "/sys/vm/dirty_expire_centisecs" (u object_r proc_dirty ((s0) (s0))))
(genfscon proc "/uid_cputime/remove_uid_range" (u object_r proc_uid_cputime_removeuid ((s0) (s0))))
(genfscon proc "/sys/kernel/modules_disabled" (u object_r proc_security ((s0) (s0))))
(genfscon proc "/sys/kernel/sched_latency_ns" (u object_r proc_sched ((s0) (s0))))
(genfscon proc "/sys/kernel/sched_schedstats" (u object_r proc_sched ((s0) (s0))))
(genfscon proc "/sys/vm/mmap_rnd_compat_bits" (u object_r proc_security ((s0) (s0))))
(genfscon proc "/sys/vm/min_free_order_shift" (u object_r proc_min_free_order_shift ((s0) (s0))))
(genfscon proc "/sys/fs/protected_hardlinks" (u object_r proc_security ((s0) (s0))))
(genfscon proc "/sys/kernel/core_pipe_limit" (u object_r usermodehelper ((s0) (s0))))
(genfscon proc "/uid_concurrent_active_time" (u object_r proc_uid_concurrent_active_time ((s0) (s0))))
(genfscon proc "/uid_concurrent_policy_time" (u object_r proc_uid_concurrent_policy_time ((s0) (s0))))
(genfscon proc "/sys/fs/protected_symlinks" (u object_r proc_security ((s0) (s0))))
(genfscon proc "/sys/kernel/dmesg_restrict" (u object_r proc_security ((s0) (s0))))
(genfscon proc "/sys/kernel/usermodehelper" (u object_r usermodehelper ((s0) (s0))))
(genfscon proc "/uid_cputime/show_uid_stat" (u object_r proc_uid_cputime_showstat ((s0) (s0))))
(genfscon proc "/sys/kernel/kptr_restrict" (u object_r proc_security ((s0) (s0))))
(genfscon proc "/sys/kernel/panic_on_oops" (u object_r proc_panic ((s0) (s0))))
(genfscon proc "/sys/vm/extra_free_kbytes" (u object_r proc_extra_free_kbytes ((s0) (s0))))
(genfscon proc "/sys/vm/overcommit_memory" (u object_r proc_overcommit_memory ((s0) (s0))))
(genfscon proc "/sys/kernel/core_pattern" (u object_r usermodehelper ((s0) (s0))))
(genfscon proc "/sys/kernel/poweroff_cmd" (u object_r usermodehelper ((s0) (s0))))
(genfscon proc "/sys/kernel/domainname" (u object_r proc_hostname ((s0) (s0))))
(genfscon proc "/sys/kernel/hung_task_" (u object_r proc_hung_task ((s0) (s0))))
(genfscon proc "/sys/fs/pipe-max-size" (u object_r proc_pipe_conf ((s0) (s0))))
(genfscon proc "/sys/fs/suid_dumpable" (u object_r proc_security ((s0) (s0))))
(genfscon proc "/sys/vm/max_map_count" (u object_r proc_max_map_count ((s0) (s0))))
(genfscon proc "/sys/vm/mmap_min_addr" (u object_r proc_security ((s0) (s0))))
(genfscon proc "/sys/vm/mmap_rnd_bits" (u object_r proc_security ((s0) (s0))))
(genfscon proc "/net/xt_qtaguid/ctrl" (u object_r proc_qtaguid_ctrl ((s0) (s0))))
(genfscon proc "/sys/kernel/hostname" (u object_r proc_hostname ((s0) (s0))))
(genfscon proc "/sys/kernel/modprobe" (u object_r usermodehelper ((s0) (s0))))
(genfscon proc "/sys/vm/page-cluster" (u object_r proc_page_cluster ((s0) (s0))))
(genfscon proc "/sys/kernel/hotplug" (u object_r usermodehelper ((s0) (s0))))
(genfscon proc "/sys/kernel/pid_max" (u object_r proc_pid_max ((s0) (s0))))
(genfscon proc "/sys/vm/drop_caches" (u object_r proc_drop_caches ((s0) (s0))))
(genfscon proc "/sys/kernel/random" (u object_r proc_random ((s0) (s0))))
(genfscon proc "/uid_time_in_state" (u object_r proc_uid_time_in_state ((s0) (s0))))
(genfscon proc "/sys/kernel/sysrq" (u object_r proc_sysrq ((s0) (s0))))
(genfscon proc "/uid_procstat/set" (u object_r proc_uid_procstat_set ((s0) (s0))))
(genfscon proc "/net/xt_qtaguid/" (u object_r proc_qtaguid_stat ((s0) (s0))))
(genfscon proc "/pressure/memory" (u object_r proc_pressure_mem ((s0) (s0))))
(genfscon proc "/sysrq-trigger" (u object_r proc_sysrq ((s0) (s0))))
(genfscon proc "/uid_cpupower/" (u object_r proc_uid_cpupower ((s0) (s0))))
(genfscon proc "/pagetypeinfo" (u object_r proc_pagetypeinfo ((s0) (s0))))
(genfscon proc "/pressure/cpu" (u object_r proc_pressure_cpu ((s0) (s0))))
(genfscon proc "/uid_io/stats" (u object_r proc_uid_io_stats ((s0) (s0))))
(genfscon proc "/filesystems" (u object_r proc_filesystems ((s0) (s0))))
(genfscon proc "/pressure/io" (u object_r proc_pressure_io ((s0) (s0))))
(genfscon proc "/sys/abi/swp" (u object_r proc_abi ((s0) (s0))))
(genfscon proc "/timer_stats" (u object_r proc_timer ((s0) (s0))))
(genfscon proc "/tty/drivers" (u object_r proc_tty_drivers ((s0) (s0))))
(genfscon proc "/vmallocinfo" (u object_r proc_vmallocinfo ((s0) (s0))))
(genfscon proc "/interrupts" (u object_r proc_interrupts ((s0) (s0))))
(genfscon proc "/timer_list" (u object_r proc_timer ((s0) (s0))))
(genfscon proc "/buddyinfo" (u object_r proc_buddyinfo ((s0) (s0))))
(genfscon proc "/config.gz" (u object_r config_gz ((s0) (s0))))
(genfscon proc "/diskstats" (u object_r proc_diskstats ((s0) (s0))))
(genfscon proc "/slabinfo" (u object_r proc_slabinfo ((s0) (s0))))
(genfscon proc "/softirqs" (u object_r proc_timer ((s0) (s0))))
(genfscon proc "/zoneinfo" (u object_r proc_zoneinfo ((s0) (s0))))
(genfscon proc "/cmdline" (u object_r proc_cmdline ((s0) (s0))))
(genfscon proc "/loadavg" (u object_r proc_loadavg ((s0) (s0))))
(genfscon proc "/meminfo" (u object_r proc_meminfo ((s0) (s0))))
(genfscon proc "/modules" (u object_r proc_modules ((s0) (s0))))
(genfscon proc "/net/tcp" (u object_r proc_net_tcp_udp ((s0) (s0))))
(genfscon proc "/net/udp" (u object_r proc_net_tcp_udp ((s0) (s0))))
(genfscon proc "/cpuinfo" (u object_r proc_cpuinfo ((s0) (s0))))
(genfscon proc "/sys/net" (u object_r proc_net ((s0) (s0))))
(genfscon proc "/version" (u object_r proc_version ((s0) (s0))))
(genfscon proc "/asound" (u object_r proc_asound ((s0) (s0))))
(genfscon proc "/mounts" (u object_r proc_mounts ((s0) (s0))))
(genfscon proc "/uptime" (u object_r proc_uptime ((s0) (s0))))
(genfscon proc "/vmstat" (u object_r proc_vmstat ((s0) (s0))))
(genfscon proc "/iomem" (u object_r proc_iomem ((s0) (s0))))
(genfscon proc "/swaps" (u object_r proc_swaps ((s0) (s0))))
(genfscon proc "/keys" (u object_r proc_keys ((s0) (s0))))
(genfscon proc "/kmsg" (u object_r proc_kmsg ((s0) (s0))))
(genfscon proc "/misc" (u object_r proc_misc ((s0) (s0))))
(genfscon proc "/stat" (u object_r proc_stat ((s0) (s0))))
(genfscon proc "/uid/" (u object_r proc_uid_time_in_state ((s0) (s0))))
(genfscon proc "/net" (u object_r proc_net ((s0) (s0))))
(genfscon proc "/" (u object_r proc ((s0) (s0))))
(genfscon pstore "/" (u object_r pstorefs ((s0) (s0))))
(genfscon rootfs "/" (u object_r rootfs ((s0) (s0))))
(genfscon sdcardfs "/" (u object_r sdcardfs ((s0) (s0))))
(genfscon selinuxfs "/" (u object_r selinuxfs ((s0) (s0))))
(genfscon sysfs "/devices/virtual/timed_output/vibrator/enable" (u object_r sysfs_vibrator ((s0) (s0))))
(genfscon sysfs "/firmware/devicetree/base/firmware/android" (u object_r sysfs_dt_firmware_android ((s0) (s0))))
(genfscon sysfs "/devices/platform/nfc-power/nfc_power" (u object_r sysfs_nfc_power_writable ((s0) (s0))))
(genfscon sysfs "/devices/virtual/block/zram0/uevent" (u object_r sysfs_zram_uevent ((s0) (s0))))
(genfscon sysfs "/devices/virtual/block/zram1/uevent" (u object_r sysfs_zram_uevent ((s0) (s0))))
(genfscon sysfs "/devices/virtual/misc/hw_random" (u object_r sysfs_hwrandom ((s0) (s0))))
(genfscon sysfs "/kernel/mm/transparent_hugepage" (u object_r sysfs_transparent_hugepage ((s0) (s0))))
(genfscon sysfs "/module/wlan/parameters/fwpath" (u object_r sysfs_wlan_fwpath ((s0) (s0))))
(genfscon sysfs "/devices/virtual/android_usb" (u object_r sysfs_android_usb ((s0) (s0))))
(genfscon sysfs "/devices/virtual/block/zram0" (u object_r sysfs_zram ((s0) (s0))))
(genfscon sysfs "/devices/virtual/block/zram1" (u object_r sysfs_zram ((s0) (s0))))
(genfscon sysfs "/module/tcp_cubic/parameters" (u object_r sysfs_net ((s0) (s0))))
(genfscon sysfs "/class/rfkill/rfkill0/state" (u object_r sysfs_bluetooth_writable ((s0) (s0))))
(genfscon sysfs "/class/rfkill/rfkill1/state" (u object_r sysfs_bluetooth_writable ((s0) (s0))))
(genfscon sysfs "/class/rfkill/rfkill2/state" (u object_r sysfs_bluetooth_writable ((s0) (s0))))
(genfscon sysfs "/class/rfkill/rfkill3/state" (u object_r sysfs_bluetooth_writable ((s0) (s0))))
(genfscon sysfs "/devices/virtual/block/loop" (u object_r sysfs_loop ((s0) (s0))))
(genfscon sysfs "/devices/virtual/block/dm-" (u object_r sysfs_dm ((s0) (s0))))
(genfscon sysfs "/kernel/memory_state_time" (u object_r sysfs_power ((s0) (s0))))
(genfscon sysfs "/devices/virtual/block/" (u object_r sysfs_devices_block ((s0) (s0))))
(genfscon sysfs "/devices/virtual/switch" (u object_r sysfs_switch ((s0) (s0))))
(genfscon sysfs "/module/lowmemorykiller" (u object_r sysfs_lowmemorykiller ((s0) (s0))))
(genfscon sysfs "/kernel/wakeup_reasons" (u object_r sysfs_wakeup_reasons ((s0) (s0))))
(genfscon sysfs "/kernel/uevent_helper" (u object_r sysfs_usermodehelper ((s0) (s0))))
(genfscon sysfs "/devices/virtual/net" (u object_r sysfs_net ((s0) (s0))))
(genfscon sysfs "/devices/system/cpu" (u object_r sysfs_devices_system_cpu ((s0) (s0))))
(genfscon sysfs "/power/wakeup_count" (u object_r sysfs_power ((s0) (s0))))
(genfscon sysfs "/class/android_usb" (u object_r sysfs_android_usb ((s0) (s0))))
(genfscon sysfs "/power/wake_unlock" (u object_r sysfs_wake_lock ((s0) (s0))))
(genfscon sysfs "/fs/ext4/features" (u object_r sysfs_fs_ext4_features ((s0) (s0))))
(genfscon sysfs "/power/autosleep" (u object_r sysfs_power ((s0) (s0))))
(genfscon sysfs "/power/wake_lock" (u object_r sysfs_wake_lock ((s0) (s0))))
(genfscon sysfs "/class/extcon" (u object_r sysfs_extcon ((s0) (s0))))
(genfscon sysfs "/class/switch" (u object_r sysfs_switch ((s0) (s0))))
(genfscon sysfs "/kernel/notes" (u object_r sysfs_kernel_notes ((s0) (s0))))
(genfscon sysfs "/power/state" (u object_r sysfs_power ((s0) (s0))))
(genfscon sysfs "/kernel/ipv4" (u object_r sysfs_ipv4 ((s0) (s0))))
(genfscon sysfs "/class/leds" (u object_r sysfs_leds ((s0) (s0))))
(genfscon sysfs "/class/net" (u object_r sysfs_net ((s0) (s0))))
(genfscon sysfs "/class/rtc" (u object_r sysfs_rtc ((s0) (s0))))
(genfscon sysfs "/fs/f2fs" (u object_r sysfs_fs_f2fs ((s0) (s0))))
(genfscon sysfs "/" (u object_r sysfs ((s0) (s0))))
(genfscon tracefs "/events/filemap/mm_filemap_delete_from_page_cache/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/vmscan/mm_vmscan_direct_reclaim_begin/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/filemap/mm_filemap_add_to_page_cache/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/vmscan/mm_vmscan_direct_reclaim_end/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/binder/binder_transaction_alloc_buf/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/binder/binder_transaction_received/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/ext4/ext4_es_lookup_extent_enter/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/ext4/ext4_es_lookup_extent_exit/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/vmscan/mm_vmscan_kswapd_sleep/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/vmscan/mm_vmscan_kswapd_wake/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/sched/sched_blocked_reason/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/power/cpu_frequency_limits/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/f2fs/f2fs_sync_file_enter/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/ext4/ext4_sync_file_enter/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/binder/binder_transaction/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/f2fs/f2fs_get_data_block/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/f2fs/f2fs_sync_file_exit/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/ext4/ext4_da_write_begin/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/ext4/ext4_sync_file_exit/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/sched/sched_process_exit/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/mm_event/mm_event_record/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/oom/oom_score_adj_update/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/block/block_rq_complete/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/sched/sched_cpu_hotplug/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/ext4/ext4_da_write_end/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/f2fs/f2fs_write_begin/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/ext4/ext4_load_inode/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/block/block_rq_issue/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/power/clock_set_rate/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/power/suspend_resume/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/binder/binder_locked/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/binder/binder_unlock/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/kmem/ion_heap_shrink/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/f2fs/f2fs_write_end/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/power/cpu_frequency/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/power/gpu_frequency/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/cpufreq_interactive/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/sched/sched_switch/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/sched/sched_wakeup/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/binder/binder_lock/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/kmem/ion_heap_grow/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/task/task_newtask/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/task/task_rename/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/lowmemorykiller/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/f2fs/f2fs_iget/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/power/cpu_idle/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/kmem/rss_stat/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/ion/ion_stat/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/ftrace/print/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/options/record-tgid" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/saved_cmdlines_size" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/header_page" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/options/print-tgid" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/options/overwrite" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/dma_fence/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/instances/wifi" (u object_r debugfs_wifi_tracing ((s0) (s0))))
(genfscon tracefs "/buffer_size_kb" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/cgroup/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/fence/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/trace_marker" (u object_r debugfs_trace_marker ((s0) (s0))))
(genfscon tracefs "/events/sync/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/per_cpu/cpu" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/trace_clock" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/tracing_on" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/instances" (u object_r debugfs_tracing_instances ((s0) (s0))))
(genfscon tracefs "/trace" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/" (u object_r debugfs_tracing_debug ((s0) (s0))))
(genfscon usbfs "/" (u object_r usbfs ((s0) (s0))))
(genfscon vfat "/" (u object_r vfat ((s0) (s0))))
(common cap (chown dac_override dac_read_search fowner fsetid kill setgid setuid setpcap linux_immutable net_bind_service net_broadcast net_admin net_raw ipc_lock ipc_owner sys_module sys_rawio sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_nice sys_resource sys_time sys_tty_config mknod lease audit_write audit_control setfcap ))
(common cap2 (mac_override mac_admin syslog wake_alarm block_suspend audit_read ))
(common ipc (create destroy getattr setattr read write associate unix_read unix_write ))
(common socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind ))
(common file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton ))
(typealias rs_data_file)
(typealiasactual rs_data_file app_exec_data_file)
(class security (compute_av compute_create compute_member check_context load_policy compute_relabel compute_user setenforce setbool setsecparam setcheckreqprot read_policy validate_trans ))
(class process (fork transition sigchld sigkill sigstop signull signal ptrace getsched setsched getsession getpgid setpgid getcap setcap share getattr setexec setfscreate noatsecure siginh setrlimit rlimitinh dyntransition setcurrent execmem execstack execheap setkeycreate setsockcreate getrlimit ))
(mlsconstrain (process (sigkill sigstop signal ptrace setsched setpgid setcap share setrlimit)) (or (eq l1 l2) (eq t1 mlstrustedsubject)))
(mlsconstrain (process (ptrace getsched getsession getpgid getcap share getattr)) (or (dom l1 l2) (eq t1 mlstrustedsubject)))
(mlsconstrain (process (transition dyntransition)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class system (ipc_info syslog_read syslog_mod syslog_console module_request module_load ))
(class capability ())
(classcommon capability cap)
(class filesystem (mount remount unmount getattr relabelfrom relabelto associate quotamod quotaget ))
(class file (execute_no_trans entrypoint execmod open audit_access ))
(classcommon file file)
(mlsconstrain (file (write setattr append unlink link rename)) (or (or (or (or (or (eq t2 app_data_file) (eq t2 privapp_data_file)) (eq t2 appdomain_tmpfs)) (eq l1 l2)) (eq t1 mlstrustedsubject)) (eq t2 mlstrustedobject)))
(mlsconstrain (file (read getattr execute)) (or (or (or (or (or (eq t2 app_data_file) (eq t2 privapp_data_file)) (eq t2 appdomain_tmpfs)) (dom l1 l2)) (eq t1 mlstrustedsubject)) (eq t2 mlstrustedobject)))
(mlsconstrain (file (setattr unlink link rename open)) (or (or (and (and (neq t2 app_data_file) (neq t2 privapp_data_file)) (neq t2 appdomain_tmpfs)) (dom l1 l2)) (eq t1 mlstrustedsubject)))
(mlsconstrain (file (create relabelfrom relabelto)) (and (eq l2 h2) (or (eq l1 l2) (eq t1 mlstrustedsubject))))
(class dir (add_name remove_name reparent search rmdir open audit_access execmod ))
(classcommon dir file)
(mlsconstrain (dir (write setattr rename add_name remove_name reparent rmdir)) (or (or (or (or (eq t2 app_data_file) (eq t2 privapp_data_file)) (eq l1 l2)) (eq t1 mlstrustedsubject)) (eq t2 mlstrustedobject)))
(mlsconstrain (dir (read getattr search)) (or (or (or (or (eq t2 app_data_file) (eq t2 privapp_data_file)) (dom l1 l2)) (eq t1 mlstrustedsubject)) (eq t2 mlstrustedobject)))
(mlsconstrain (dir (setattr rename add_name remove_name reparent search rmdir open)) (or (or (and (neq t2 app_data_file) (neq t2 privapp_data_file)) (dom l1 l2)) (eq t1 mlstrustedsubject)))
(mlsconstrain (dir (create relabelfrom relabelto)) (and (eq l2 h2) (or (eq l1 l2) (eq t1 mlstrustedsubject))))
(class fd (use ))
(class lnk_file (open audit_access execmod ))
(classcommon lnk_file file)
(mlsconstrain (lnk_file (write setattr append unlink link rename)) (or (or (or (or (or (eq t2 app_data_file) (eq t2 privapp_data_file)) (eq t2 appdomain_tmpfs)) (eq l1 l2)) (eq t1 mlstrustedsubject)) (eq t2 mlstrustedobject)))
(mlsconstrain (lnk_file (read getattr execute)) (or (or (or (or (or (eq t2 app_data_file) (eq t2 privapp_data_file)) (eq t2 appdomain_tmpfs)) (dom l1 l2)) (eq t1 mlstrustedsubject)) (eq t2 mlstrustedobject)))
(mlsconstrain (lnk_file (read setattr unlink link rename open)) (or (or (and (neq t2 privapp_data_file) (neq t2 appdomain_tmpfs)) (dom l1 l2)) (eq t1 mlstrustedsubject)))
(mlsconstrain (lnk_file (read setattr unlink link rename open)) (or (or (neq t2 app_data_file) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(mlsconstrain (lnk_file (create relabelfrom relabelto)) (and (eq l2 h2) (or (eq l1 l2) (eq t1 mlstrustedsubject))))
(class chr_file (execute_no_trans entrypoint execmod open audit_access ))
(classcommon chr_file file)
(mlsconstrain (chr_file (write setattr append unlink link rename)) (or (or (or (or (or (eq t2 app_data_file) (eq t2 privapp_data_file)) (eq t2 appdomain_tmpfs)) (eq l1 l2)) (eq t1 mlstrustedsubject)) (eq t2 mlstrustedobject)))
(mlsconstrain (chr_file (read getattr execute)) (or (or (or (or (or (eq t2 app_data_file) (eq t2 privapp_data_file)) (eq t2 appdomain_tmpfs)) (dom l1 l2)) (eq t1 mlstrustedsubject)) (eq t2 mlstrustedobject)))
(mlsconstrain (chr_file (create relabelfrom relabelto)) (and (eq l2 h2) (or (eq l1 l2) (eq t1 mlstrustedsubject))))
(class blk_file (open audit_access execmod ))
(classcommon blk_file file)
(mlsconstrain (blk_file (write setattr append unlink link rename)) (or (or (or (or (or (eq t2 app_data_file) (eq t2 privapp_data_file)) (eq t2 appdomain_tmpfs)) (eq l1 l2)) (eq t1 mlstrustedsubject)) (eq t2 mlstrustedobject)))
(mlsconstrain (blk_file (read getattr execute)) (or (or (or (or (or (eq t2 app_data_file) (eq t2 privapp_data_file)) (eq t2 appdomain_tmpfs)) (dom l1 l2)) (eq t1 mlstrustedsubject)) (eq t2 mlstrustedobject)))
(mlsconstrain (blk_file (create relabelfrom relabelto)) (and (eq l2 h2) (or (eq l1 l2) (eq t1 mlstrustedsubject))))
(class sock_file (open audit_access execmod ))
(classcommon sock_file file)
(mlsconstrain (sock_file (write setattr append unlink link rename)) (or (or (or (or (or (eq t2 app_data_file) (eq t2 privapp_data_file)) (eq t2 appdomain_tmpfs)) (eq l1 l2)) (eq t1 mlstrustedsubject)) (eq t2 mlstrustedobject)))
(mlsconstrain (sock_file (read getattr execute)) (or (or (or (or (or (eq t2 app_data_file) (eq t2 privapp_data_file)) (eq t2 appdomain_tmpfs)) (dom l1 l2)) (eq t1 mlstrustedsubject)) (eq t2 mlstrustedobject)))
(mlsconstrain (sock_file (setattr unlink link rename open)) (or (or (and (and (neq t2 app_data_file) (neq t2 privapp_data_file)) (neq t2 appdomain_tmpfs)) (dom l1 l2)) (eq t1 mlstrustedsubject)))
(mlsconstrain (sock_file (create relabelfrom relabelto)) (and (eq l2 h2) (or (eq l1 l2) (eq t1 mlstrustedsubject))))
(class fifo_file (open audit_access execmod ))
(classcommon fifo_file file)
(mlsconstrain (fifo_file (write setattr append unlink link rename)) (or (or (or (eq l1 l2) (eq t1 mlstrustedsubject)) (eq t2 mlstrustedobject)) (eq t2 domain)))
(mlsconstrain (fifo_file (read getattr)) (or (or (or (dom l1 l2) (eq t1 mlstrustedsubject)) (eq t2 mlstrustedobject)) (eq t2 domain)))
(mlsconstrain (fifo_file (create relabelfrom relabelto)) (and (eq l2 h2) (or (eq l1 l2) (eq t1 mlstrustedsubject))))
(class socket ())
(classcommon socket socket)
(mlsconstrain (socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class tcp_socket (node_bind name_connect ))
(classcommon tcp_socket socket)
(mlsconstrain (tcp_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class udp_socket (node_bind ))
(classcommon udp_socket socket)
(mlsconstrain (udp_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class rawip_socket (node_bind ))
(classcommon rawip_socket socket)
(mlsconstrain (rawip_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class node (recvfrom sendto ))
(class netif (ingress egress ))
(class netlink_socket ())
(classcommon netlink_socket socket)
(mlsconstrain (netlink_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class packet_socket ())
(classcommon packet_socket socket)
(mlsconstrain (packet_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class key_socket ())
(classcommon key_socket socket)
(mlsconstrain (key_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class unix_stream_socket (connectto ))
(classcommon unix_stream_socket socket)
(mlsconstrain (unix_stream_socket (connectto)) (or (or (eq l1 l2) (eq t1 mlstrustedsubject)) (eq t2 mlstrustedsubject)))
(mlsconstrain (unix_stream_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class unix_dgram_socket ())
(classcommon unix_dgram_socket socket)
(mlsconstrain (unix_dgram_socket (sendto)) (or (or (eq l1 l2) (eq t1 mlstrustedsubject)) (eq t2 mlstrustedsubject)))
(mlsconstrain (unix_dgram_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class sem ())
(classcommon sem ipc)
(class msg (send receive ))
(class msgq (enqueue ))
(classcommon msgq ipc)
(class shm (lock ))
(classcommon shm ipc)
(class ipc ())
(classcommon ipc ipc)
(class netlink_route_socket (nlmsg_read nlmsg_write ))
(classcommon netlink_route_socket socket)
(mlsconstrain (netlink_route_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class netlink_tcpdiag_socket (nlmsg_read nlmsg_write ))
(classcommon netlink_tcpdiag_socket socket)
(mlsconstrain (netlink_tcpdiag_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class netlink_nflog_socket ())
(classcommon netlink_nflog_socket socket)
(mlsconstrain (netlink_nflog_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class netlink_xfrm_socket (nlmsg_read nlmsg_write ))
(classcommon netlink_xfrm_socket socket)
(mlsconstrain (netlink_xfrm_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class netlink_selinux_socket ())
(classcommon netlink_selinux_socket socket)
(mlsconstrain (netlink_selinux_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class netlink_audit_socket (nlmsg_read nlmsg_write nlmsg_relay nlmsg_readpriv nlmsg_tty_audit ))
(classcommon netlink_audit_socket socket)
(mlsconstrain (netlink_audit_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class netlink_dnrt_socket ())
(classcommon netlink_dnrt_socket socket)
(mlsconstrain (netlink_dnrt_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class association (sendto recvfrom setcontext polmatch ))
(class netlink_kobject_uevent_socket ())
(classcommon netlink_kobject_uevent_socket socket)
(mlsconstrain (netlink_kobject_uevent_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class appletalk_socket ())
(classcommon appletalk_socket socket)
(mlsconstrain (appletalk_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class packet (send recv relabelto flow_in flow_out forward_in forward_out ))
(class key (view read write search link setattr create ))
(class dccp_socket (node_bind name_connect ))
(classcommon dccp_socket socket)
(class memprotect (mmap_zero ))
(class peer (recv ))
(class capability2 ())
(classcommon capability2 cap2)
(class kernel_service (use_as_override create_files_as ))
(class tun_socket (attach_queue ))
(classcommon tun_socket socket)
(mlsconstrain (tun_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class binder (impersonate call set_context_mgr transfer ))
(class netlink_iscsi_socket ())
(classcommon netlink_iscsi_socket socket)
(mlsconstrain (netlink_iscsi_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class netlink_fib_lookup_socket ())
(classcommon netlink_fib_lookup_socket socket)
(mlsconstrain (netlink_fib_lookup_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class netlink_connector_socket ())
(classcommon netlink_connector_socket socket)
(mlsconstrain (netlink_connector_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class netlink_netfilter_socket ())
(classcommon netlink_netfilter_socket socket)
(mlsconstrain (netlink_netfilter_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class netlink_generic_socket ())
(classcommon netlink_generic_socket socket)
(mlsconstrain (netlink_generic_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class netlink_scsitransport_socket ())
(classcommon netlink_scsitransport_socket socket)
(mlsconstrain (netlink_scsitransport_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class netlink_rdma_socket ())
(classcommon netlink_rdma_socket socket)
(mlsconstrain (netlink_rdma_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class netlink_crypto_socket ())
(classcommon netlink_crypto_socket socket)
(mlsconstrain (netlink_crypto_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class infiniband_pkey (access ))
(class infiniband_endport (manage_subnet ))
(class cap_userns ())
(classcommon cap_userns cap)
(class cap2_userns ())
(classcommon cap2_userns cap2)
(class sctp_socket (node_bind name_connect association ))
(classcommon sctp_socket socket)
(mlsconstrain (sctp_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class icmp_socket (node_bind ))
(classcommon icmp_socket socket)
(mlsconstrain (icmp_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class ax25_socket ())
(classcommon ax25_socket socket)
(mlsconstrain (ax25_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class ipx_socket ())
(classcommon ipx_socket socket)
(mlsconstrain (ipx_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class netrom_socket ())
(classcommon netrom_socket socket)
(mlsconstrain (netrom_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class atmpvc_socket ())
(classcommon atmpvc_socket socket)
(mlsconstrain (atmpvc_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class x25_socket ())
(classcommon x25_socket socket)
(mlsconstrain (x25_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class rose_socket ())
(classcommon rose_socket socket)
(mlsconstrain (rose_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class decnet_socket ())
(classcommon decnet_socket socket)
(mlsconstrain (decnet_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class atmsvc_socket ())
(classcommon atmsvc_socket socket)
(mlsconstrain (atmsvc_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class rds_socket ())
(classcommon rds_socket socket)
(mlsconstrain (rds_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class irda_socket ())
(classcommon irda_socket socket)
(mlsconstrain (irda_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class pppox_socket ())
(classcommon pppox_socket socket)
(mlsconstrain (pppox_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class llc_socket ())
(classcommon llc_socket socket)
(mlsconstrain (llc_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class can_socket ())
(classcommon can_socket socket)
(mlsconstrain (can_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class tipc_socket ())
(classcommon tipc_socket socket)
(mlsconstrain (tipc_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class bluetooth_socket ())
(classcommon bluetooth_socket socket)
(mlsconstrain (bluetooth_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class iucv_socket ())
(classcommon iucv_socket socket)
(mlsconstrain (iucv_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class rxrpc_socket ())
(classcommon rxrpc_socket socket)
(mlsconstrain (rxrpc_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class isdn_socket ())
(classcommon isdn_socket socket)
(mlsconstrain (isdn_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class phonet_socket ())
(classcommon phonet_socket socket)
(mlsconstrain (phonet_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class ieee802154_socket ())
(classcommon ieee802154_socket socket)
(mlsconstrain (ieee802154_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class caif_socket ())
(classcommon caif_socket socket)
(mlsconstrain (caif_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class alg_socket ())
(classcommon alg_socket socket)
(mlsconstrain (alg_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class nfc_socket ())
(classcommon nfc_socket socket)
(mlsconstrain (nfc_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class vsock_socket ())
(classcommon vsock_socket socket)
(mlsconstrain (vsock_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class kcm_socket ())
(classcommon kcm_socket socket)
(mlsconstrain (kcm_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class qipcrtr_socket ())
(classcommon qipcrtr_socket socket)
(mlsconstrain (qipcrtr_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class smc_socket ())
(classcommon smc_socket socket)
(mlsconstrain (smc_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class process2 (nnp_transition nosuid_transition ))
(class bpf (map_create map_read map_write prog_load prog_run ))
(class xdp_socket ())
(classcommon xdp_socket socket)
(mlsconstrain (xdp_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class property_service (set ))
(class service_manager (add find list ))
(class hwservice_manager (add find list ))
(class keystore_key (get_state get insert delete exist list reset password lock unlock is_empty sign verify grant duplicate clear_uid add_auth user_changed gen_unique_id ))
(class drmservice (consumeRights setPlaybackStatus openDecryptSession closeDecryptSession initializeDecryptUnit decrypt finalizeDecryptUnit pread ))
(classorder (security process system capability filesystem file dir fd lnk_file chr_file blk_file sock_file fifo_file socket tcp_socket udp_socket rawip_socket node netif netlink_socket packet_socket key_socket unix_stream_socket unix_dgram_socket sem msg msgq shm ipc netlink_route_socket netlink_tcpdiag_socket netlink_nflog_socket netlink_xfrm_socket netlink_selinux_socket netlink_audit_socket netlink_dnrt_socket association netlink_kobject_uevent_socket appletalk_socket packet key dccp_socket memprotect peer capability2 kernel_service tun_socket binder netlink_iscsi_socket netlink_fib_lookup_socket netlink_connector_socket netlink_netfilter_socket netlink_generic_socket netlink_scsitransport_socket netlink_rdma_socket netlink_crypto_socket infiniband_pkey infiniband_endport cap_userns cap2_userns sctp_socket icmp_socket ax25_socket ipx_socket netrom_socket atmpvc_socket x25_socket rose_socket decnet_socket atmsvc_socket rds_socket irda_socket pppox_socket llc_socket can_socket tipc_socket bluetooth_socket iucv_socket rxrpc_socket isdn_socket phonet_socket ieee802154_socket caif_socket alg_socket nfc_socket vsock_socket kcm_socket qipcrtr_socket smc_socket process2 bpf xdp_socket property_service service_manager hwservice_manager keystore_key drmservice ))
(role r)
(roletype r domain)
(typeattribute dev_type)
(typeattributeset dev_type (device ashmem_device audio_device binder_device hwbinder_device vndbinder_device block_device camera_device dm_device keychord_device loop_control_device loop_device pmsg_device radio_device ram_device rtc_device vold_device console_device fscklogs gpu_device graphics_device hw_random_device input_device port_device lowpan_device mtp_device nfc_device ptmx_device kmsg_device kmsg_debug_device null_device random_device secure_element_device sensors_device serial_device socket_device owntty_device tty_device video_device zero_device fuse_device iio_device ion_device qtaguid_device watchdog_device uhid_device uio_device tun_device usbaccessory_device usb_device properties_device properties_serial property_info hci_attach_dev rpmsg_device root_block_device frp_block_device system_block_device recovery_block_device boot_block_device userdata_block_device cache_block_device swap_block_device metadata_block_device misc_block_device super_block_device sdcard_block_device ppp_device tee_device ))
(typeattribute domain)
(typeattributeset domain (adbd apexd app_zygote ashmemd audioserver blkid blkid_untrusted bluetooth bootanim bootstat bufferhubd cameraserver charger clatd crash_dump dhcp dnsmasq drmserver dumpstate e2fs ephemeral_app fastbootd fingerprintd flags_health_check fsck fsck_untrusted gatekeeperd gpuservice healthd heapprofd hwservicemanager idmap incident incident_helper incidentd init inputflinger install_recovery installd iorapd isolated_app kernel keystore llkd lmkd logd logpersist mdnsd mediadrmserver mediaextractor mediametrics mediaprovider mediaserver mediaswcodec modprobe mtp netd netutils_wrapper network_stack nfc perfetto performanced perfprofd platform_app postinstall ppp priv_app profman racoon radio recovery recovery_persist recovery_refresh rs rss_hwm_reset runas runas_app sdcardd secure_element servicemanager sgdisk shared_relro shell simpleperf_app_runner slideshow statsd su surfaceflinger system_app system_server tee tombstoned toolbox traced traced_probes traceur_app tzdatacheck ueventd uncrypt untrusted_app untrusted_app_27 untrusted_app_25 update_engine update_verifier usbd vdc vendor_init vendor_misc_writer vendor_shell virtual_touchpad vndservicemanager vold vold_prepare_subdirs vr_hwc watchdogd webview_zygote wificond wpantund zygote apex_test_prepostinstall art_apex_boot_integrity art_apex_postinstall art_apex_preinstall atrace auditctl blank_screen bpfloader cppreopts dex2oat dexoptanalyzer fsverity_init fwk_bufferhub gsid hal_allocator_default iw lpdumpd migrate_legacy_obb_data notify_traceur otapreopt_chroot otapreopt_slot postinstall_dexopt preloads_copy preopt2cachename stats storaged system_server_startup system_suspend viewcompiler wait_for_keymaster ))
(typeattribute fs_type)
(typeattributeset fs_type (device labeledfs pipefs sockfs rootfs proc proc_security proc_drop_caches proc_overcommit_memory proc_min_free_order_shift usermodehelper sysfs_usermodehelper proc_qtaguid_ctrl proc_qtaguid_stat proc_bluetooth_writable proc_abi proc_asound proc_buddyinfo proc_cmdline proc_cpuinfo proc_dirty proc_diskstats proc_extra_free_kbytes proc_filesystems proc_fs_verity proc_hostname proc_hung_task proc_interrupts proc_iomem proc_keys proc_kmsg proc_loadavg proc_max_map_count proc_meminfo proc_misc proc_modules proc_mounts proc_net proc_net_tcp_udp proc_page_cluster proc_pagetypeinfo proc_panic proc_perf proc_pid_max proc_pipe_conf proc_pressure_cpu proc_pressure_io proc_pressure_mem proc_random proc_sched proc_slabinfo proc_stat proc_swaps proc_sysrq proc_timer proc_tty_drivers proc_uid_cputime_showstat proc_uid_cputime_removeuid proc_uid_io_stats proc_uid_procstat_set proc_uid_time_in_state proc_uid_concurrent_active_time proc_uid_concurrent_policy_time proc_uid_cpupower proc_uptime proc_version proc_vmallocinfo proc_vmstat proc_zoneinfo selinuxfs cgroup cgroup_bpf sysfs sysfs_android_usb sysfs_uio sysfs_batteryinfo sysfs_bluetooth_writable sysfs_devices_block sysfs_dm sysfs_dt_firmware_android sysfs_extcon sysfs_ipv4 sysfs_kernel_notes sysfs_leds sysfs_loop sysfs_hwrandom sysfs_nfc_power_writable sysfs_wake_lock sysfs_mac_address sysfs_net sysfs_power sysfs_rtc sysfs_switch sysfs_transparent_hugepage sysfs_usb sysfs_wakeup_reasons sysfs_fs_ext4_features sysfs_fs_f2fs fs_bpf configfs sysfs_devices_system_cpu sysfs_lowmemorykiller sysfs_wlan_fwpath sysfs_vibrator sysfs_thermal sysfs_zram sysfs_zram_uevent inotify devpts tmpfs shm mqueue fuse sdcardfs vfat exfat debugfs debugfs_mmc debugfs_trace_marker debugfs_tracing debugfs_tracing_debug debugfs_tracing_instances debugfs_wakeup_sources debugfs_wifi_tracing pstorefs functionfs oemfs usbfs binfmt_miscfs app_fusefs config_gz debugfs_kcov priv_app_devpts untrusted_app_all_devpts ))
(typeattribute contextmount_type)
(typeattributeset contextmount_type (oemfs app_fusefs ))
(typeattribute file_type)
(typeattributeset file_type (adbd_exec apexd_exec appdomain_tmpfs app_zygote_tmpfs audioserver_tmpfs bootanim_exec bootstat_exec bufferhubd_exec cameraserver_exec cameraserver_tmpfs charger_exec clatd_exec crash_dump_exec dhcp_exec dnsmasq_exec drmserver_exec drmserver_socket dumpstate_exec e2fs_exec unlabeled system_file system_asan_options_file system_event_log_tags_file system_lib_file system_bootstrap_lib_file system_linker_exec system_linker_config_file system_seccomp_policy_file system_security_cacerts_file tcpdump_exec system_zoneinfo_file cgroup_desc_file vendor_cgroup_desc_file task_profiles_file vendor_task_profiles_file vendor_hal_file vendor_file vendor_app_file vendor_configs_file same_process_hal_file vndk_sp_file vendor_framework_file vendor_overlay_file vendor_public_lib_file vendor_keylayout_file vendor_keychars_file vendor_idc_file metadata_file vold_metadata_file gsi_metadata_file password_slot_metadata_file apex_metadata_file dev_cpu_variant runtime_event_log_tags_file logcat_exec cgroup_rc_file coredump_file system_data_file packages_list_file vendor_data_file unencrypted_data_file install_data_file drm_data_file adb_data_file anr_data_file tombstone_data_file tombstone_wifi_data_file apex_data_file apk_data_file apk_tmp_file apk_private_data_file apk_private_tmp_file dalvikcache_data_file ota_data_file ota_package_file user_profile_data_file profman_dump_data_file resourcecache_data_file shell_data_file property_data_file bootchart_data_file dropbox_data_file heapdump_data_file nativetest_data_file ringtone_file preloads_data_file preloads_media_file dhcp_data_file server_configurable_flags_data_file staging_data_file mnt_media_rw_file mnt_user_file mnt_expand_file storage_file mnt_media_rw_stub_file storage_stub_file mnt_vendor_file mnt_product_file apex_mnt_dir postinstall_mnt_dir postinstall_file postinstall_apex_mnt_dir adb_keys_file audio_data_file audioserver_data_file bluetooth_data_file bluetooth_logs_data_file bootstat_data_file boottrace_data_file camera_data_file gatekeeper_data_file incident_data_file keychain_data_file keystore_data_file media_data_file media_rw_data_file misc_user_data_file net_data_file network_watchlist_data_file nfc_data_file radio_data_file recovery_data_file shared_relro_file stats_data_file systemkeys_data_file textclassifier_data_file trace_data_file vpn_data_file wifi_data_file zoneinfo_data_file vold_data_file iorapd_data_file perfprofd_data_file tee_data_file update_engine_data_file update_engine_log_data_file method_trace_data_file gsi_data_file app_data_file privapp_data_file system_app_data_file cache_file overlayfs_file cache_backup_file cache_private_backup_file cache_recovery_file efs_file wallpaper_file shortcut_manager_icons icon_file asec_apk_file asec_public_file asec_image_file backup_data_file bluetooth_efs_file fingerprintd_data_file fingerprint_vendor_data_file app_fuse_file face_vendor_data_file iris_vendor_data_file adbd_socket bluetooth_socket dnsproxyd_socket dumpstate_socket fwmarkd_socket lmkd_socket logd_socket logdr_socket logdw_socket mdns_socket mdnsd_socket misc_logd_file mtpd_socket property_socket racoon_socket recovery_socket rild_socket rild_debug_socket statsdw_socket system_wpa_socket system_ndebug_socket tombstoned_crash_socket tombstoned_java_trace_socket tombstoned_intercept_socket traced_producer_socket traced_consumer_socket uncrypt_socket wpa_socket zygote_socket heapprofd_socket gps_control pdx_display_dir pdx_performance_dir pdx_bufferhub_dir pdx_display_client_endpoint_socket pdx_display_manager_endpoint_socket pdx_display_screenshot_endpoint_socket pdx_display_vsync_endpoint_socket pdx_performance_client_endpoint_socket pdx_bufferhub_client_endpoint_socket file_contexts_file mac_perms_file property_contexts_file seapp_contexts_file sepolicy_file service_contexts_file nonplat_service_contexts_file hwservice_contexts_file vndservice_contexts_file audiohal_data_file fingerprintd_exec flags_health_check_exec fsck_exec gatekeeperd_exec hal_graphics_composer_server_tmpfs healthd_exec hwservicemanager_exec idmap_exec init_exec init_tmpfs inputflinger_exec install_recovery_exec installd_exec iorapd_exec iorapd_tmpfs keystore_exec llkd_exec lmkd_exec logd_exec mediadrmserver_exec mediaextractor_exec mediaextractor_tmpfs mediametrics_exec mediaserver_exec mediaserver_tmpfs mediaswcodec_exec mtp_exec netd_exec netutils_wrapper_exec performanced_exec perfprofd_exec ppp_exec profman_exec racoon_exec recovery_persist_exec recovery_refresh_exec rs_exec runas_exec sdcardd_exec servicemanager_exec sgdisk_exec shell_exec simpleperf_app_runner_exec statsd_exec su_exec surfaceflinger_tmpfs system_server_tmpfs tombstoned_exec toolbox_exec tzdatacheck_exec ueventd_tmpfs uncrypt_exec update_engine_exec update_verifier_exec usbd_exec vdc_exec vendor_misc_writer_exec vendor_shell_exec vendor_toolbox_exec virtual_touchpad_exec vold_exec vold_prepare_subdirs_exec vr_hwc_exec watchdogd_exec webview_zygote_exec webview_zygote_tmpfs wificond_exec wpantund_exec zygote_tmpfs zygote_exec apex_test_prepostinstall_exec art_apex_boot_integrity_exec art_apex_postinstall_exec art_apex_preinstall_exec ashmemd_exec atrace_exec audioserver_exec auditctl_exec blank_screen_exec blkid_exec bpfloader_exec cppreopts_exec dex2oat_exec dexoptanalyzer_exec dexoptanalyzer_tmpfs storaged_data_file wm_trace_data_file perfetto_traces_data_file app_exec_data_file rollback_data_file fsverity_init_exec fwk_bufferhub_exec gpuservice_exec gsid_exec hal_allocator_default_exec heapprofd_exec heapprofd_tmpfs incident_exec incident_helper_exec incidentd_exec iw_exec lpdumpd_exec mdnsd_exec migrate_legacy_obb_data_exec notify_traceur_exec otapreopt_chroot_exec otapreopt_slot_exec perfetto_exec perfetto_tmpfs preloads_copy_exec preopt2cachename_exec rss_hwm_reset_exec stats_exec storaged_exec surfaceflinger_exec system_server_startup_tmpfs system_suspend_exec traced_exec traced_tmpfs traced_probes_exec viewcompiler_exec viewcompiler_tmpfs wait_for_keymaster_exec ))
(typeattribute exec_type)
(typeattributeset exec_type (adbd_exec apexd_exec bootanim_exec bootstat_exec bufferhubd_exec cameraserver_exec charger_exec clatd_exec crash_dump_exec dhcp_exec dnsmasq_exec drmserver_exec dumpstate_exec e2fs_exec tcpdump_exec logcat_exec fingerprintd_exec flags_health_check_exec fsck_exec gatekeeperd_exec healthd_exec hwservicemanager_exec idmap_exec init_exec inputflinger_exec install_recovery_exec installd_exec iorapd_exec keystore_exec llkd_exec lmkd_exec logd_exec mediadrmserver_exec mediaextractor_exec mediametrics_exec mediaserver_exec mediaswcodec_exec mtp_exec netd_exec netutils_wrapper_exec performanced_exec perfprofd_exec ppp_exec profman_exec racoon_exec recovery_persist_exec recovery_refresh_exec rs_exec runas_exec sdcardd_exec servicemanager_exec sgdisk_exec shell_exec simpleperf_app_runner_exec statsd_exec su_exec tombstoned_exec toolbox_exec tzdatacheck_exec uncrypt_exec update_engine_exec update_verifier_exec usbd_exec vdc_exec vendor_misc_writer_exec vendor_shell_exec vendor_toolbox_exec virtual_touchpad_exec vold_exec vold_prepare_subdirs_exec vr_hwc_exec watchdogd_exec webview_zygote_exec wificond_exec wpantund_exec zygote_exec apex_test_prepostinstall_exec art_apex_boot_integrity_exec art_apex_postinstall_exec art_apex_preinstall_exec ashmemd_exec atrace_exec audioserver_exec auditctl_exec blank_screen_exec blkid_exec bpfloader_exec cppreopts_exec dex2oat_exec dexoptanalyzer_exec fsverity_init_exec fwk_bufferhub_exec gpuservice_exec gsid_exec hal_allocator_default_exec heapprofd_exec incident_exec incident_helper_exec incidentd_exec iw_exec lpdumpd_exec mdnsd_exec migrate_legacy_obb_data_exec notify_traceur_exec otapreopt_chroot_exec otapreopt_slot_exec perfetto_exec preloads_copy_exec preopt2cachename_exec rss_hwm_reset_exec stats_exec storaged_exec surfaceflinger_exec system_suspend_exec traced_exec traced_probes_exec viewcompiler_exec wait_for_keymaster_exec ))
(typeattribute data_file_type)
(expandtypeattribute (data_file_type) false)
(typeattributeset data_file_type (system_data_file packages_list_file vendor_data_file unencrypted_data_file install_data_file drm_data_file adb_data_file anr_data_file tombstone_data_file tombstone_wifi_data_file apex_data_file apk_data_file apk_tmp_file apk_private_data_file apk_private_tmp_file dalvikcache_data_file ota_data_file ota_package_file user_profile_data_file profman_dump_data_file resourcecache_data_file shell_data_file property_data_file bootchart_data_file dropbox_data_file heapdump_data_file nativetest_data_file ringtone_file preloads_data_file preloads_media_file dhcp_data_file server_configurable_flags_data_file staging_data_file adb_keys_file audio_data_file audioserver_data_file bluetooth_data_file bluetooth_logs_data_file bootstat_data_file boottrace_data_file camera_data_file gatekeeper_data_file incident_data_file keychain_data_file keystore_data_file media_data_file media_rw_data_file misc_user_data_file net_data_file network_watchlist_data_file nfc_data_file radio_data_file recovery_data_file shared_relro_file stats_data_file systemkeys_data_file textclassifier_data_file trace_data_file vpn_data_file wifi_data_file zoneinfo_data_file vold_data_file iorapd_data_file perfprofd_data_file tee_data_file update_engine_data_file update_engine_log_data_file method_trace_data_file gsi_data_file app_data_file privapp_data_file system_app_data_file cache_file overlayfs_file cache_backup_file cache_private_backup_file cache_recovery_file wallpaper_file shortcut_manager_icons icon_file asec_apk_file asec_public_file asec_image_file backup_data_file fingerprintd_data_file fingerprint_vendor_data_file app_fuse_file face_vendor_data_file iris_vendor_data_file bluetooth_socket misc_logd_file system_wpa_socket system_ndebug_socket wpa_socket audiohal_data_file storaged_data_file wm_trace_data_file perfetto_traces_data_file app_exec_data_file rollback_data_file ))
(typeattribute core_data_file_type)
(expandtypeattribute (core_data_file_type) false)
(typeattributeset core_data_file_type (system_data_file packages_list_file unencrypted_data_file install_data_file drm_data_file adb_data_file anr_data_file tombstone_data_file apex_data_file apk_data_file apk_tmp_file apk_private_data_file apk_private_tmp_file dalvikcache_data_file ota_data_file ota_package_file user_profile_data_file profman_dump_data_file resourcecache_data_file shell_data_file property_data_file bootchart_data_file dropbox_data_file heapdump_data_file nativetest_data_file ringtone_file preloads_data_file preloads_media_file dhcp_data_file server_configurable_flags_data_file staging_data_file adb_keys_file audio_data_file audioserver_data_file bluetooth_data_file bluetooth_logs_data_file bootstat_data_file boottrace_data_file camera_data_file gatekeeper_data_file incident_data_file keychain_data_file keystore_data_file media_data_file media_rw_data_file misc_user_data_file net_data_file network_watchlist_data_file nfc_data_file radio_data_file recovery_data_file shared_relro_file stats_data_file systemkeys_data_file textclassifier_data_file trace_data_file vpn_data_file wifi_data_file zoneinfo_data_file vold_data_file iorapd_data_file perfprofd_data_file update_engine_data_file update_engine_log_data_file method_trace_data_file gsi_data_file app_data_file privapp_data_file system_app_data_file cache_file overlayfs_file cache_backup_file cache_private_backup_file cache_recovery_file wallpaper_file shortcut_manager_icons icon_file asec_apk_file asec_public_file asec_image_file backup_data_file fingerprintd_data_file app_fuse_file bluetooth_socket misc_logd_file system_wpa_socket system_ndebug_socket wpa_socket audiohal_data_file storaged_data_file wm_trace_data_file perfetto_traces_data_file app_exec_data_file rollback_data_file ))
(typeattribute system_file_type)
(typeattributeset system_file_type (adbd_exec apexd_exec bootanim_exec bootstat_exec bufferhubd_exec cameraserver_exec charger_exec clatd_exec crash_dump_exec dhcp_exec dnsmasq_exec drmserver_exec dumpstate_exec e2fs_exec system_file system_asan_options_file system_event_log_tags_file system_lib_file system_bootstrap_lib_file system_linker_exec system_linker_config_file system_seccomp_policy_file system_security_cacerts_file tcpdump_exec system_zoneinfo_file cgroup_desc_file task_profiles_file logcat_exec file_contexts_file mac_perms_file property_contexts_file seapp_contexts_file sepolicy_file service_contexts_file hwservice_contexts_file fingerprintd_exec flags_health_check_exec fsck_exec gatekeeperd_exec healthd_exec hwservicemanager_exec idmap_exec init_exec inputflinger_exec install_recovery_exec installd_exec iorapd_exec keystore_exec llkd_exec lmkd_exec logd_exec mediadrmserver_exec mediaextractor_exec mediametrics_exec mediaserver_exec mediaswcodec_exec mtp_exec netd_exec netutils_wrapper_exec performanced_exec perfprofd_exec ppp_exec profman_exec racoon_exec recovery_persist_exec recovery_refresh_exec rs_exec runas_exec sdcardd_exec servicemanager_exec sgdisk_exec shell_exec simpleperf_app_runner_exec statsd_exec su_exec tombstoned_exec toolbox_exec tzdatacheck_exec uncrypt_exec update_engine_exec update_verifier_exec usbd_exec vdc_exec virtual_touchpad_exec vold_exec vold_prepare_subdirs_exec vr_hwc_exec watchdogd_exec wificond_exec wpantund_exec zygote_exec apex_test_prepostinstall_exec art_apex_boot_integrity_exec art_apex_postinstall_exec art_apex_preinstall_exec ashmemd_exec atrace_exec audioserver_exec auditctl_exec blank_screen_exec blkid_exec bpfloader_exec cppreopts_exec dex2oat_exec dexoptanalyzer_exec fsverity_init_exec fwk_bufferhub_exec gpuservice_exec gsid_exec hal_allocator_default_exec heapprofd_exec incident_exec incident_helper_exec incidentd_exec iw_exec lpdumpd_exec mdnsd_exec migrate_legacy_obb_data_exec notify_traceur_exec otapreopt_chroot_exec otapreopt_slot_exec perfetto_exec preloads_copy_exec preopt2cachename_exec rss_hwm_reset_exec stats_exec storaged_exec surfaceflinger_exec system_suspend_exec traced_exec traced_probes_exec viewcompiler_exec wait_for_keymaster_exec ))
(typeattribute vendor_file_type)
(typeattributeset vendor_file_type (vendor_cgroup_desc_file vendor_task_profiles_file vendor_hal_file vendor_file vendor_app_file vendor_configs_file same_process_hal_file vndk_sp_file vendor_framework_file vendor_overlay_file vendor_public_lib_file vendor_keylayout_file vendor_keychars_file vendor_idc_file vendor_misc_writer_exec vendor_shell_exec vendor_toolbox_exec ))
(typeattribute proc_type)
(expandtypeattribute (proc_type) false)
(typeattributeset proc_type (proc proc_security proc_drop_caches proc_overcommit_memory proc_min_free_order_shift usermodehelper proc_qtaguid_ctrl proc_qtaguid_stat proc_bluetooth_writable proc_abi proc_asound proc_buddyinfo proc_cmdline proc_cpuinfo proc_dirty proc_diskstats proc_extra_free_kbytes proc_filesystems proc_fs_verity proc_hostname proc_hung_task proc_interrupts proc_iomem proc_keys proc_kmsg proc_loadavg proc_max_map_count proc_meminfo proc_misc proc_modules proc_mounts proc_net proc_net_tcp_udp proc_page_cluster proc_pagetypeinfo proc_panic proc_perf proc_pid_max proc_pipe_conf proc_pressure_cpu proc_pressure_io proc_pressure_mem proc_random proc_sched proc_slabinfo proc_stat proc_swaps proc_sysrq proc_timer proc_tty_drivers proc_uid_cputime_showstat proc_uid_cputime_removeuid proc_uid_io_stats proc_uid_procstat_set proc_uid_time_in_state proc_uid_concurrent_active_time proc_uid_concurrent_policy_time proc_uid_cpupower proc_uptime proc_version proc_vmallocinfo proc_vmstat proc_zoneinfo config_gz ))
(typeattribute proc_net_type)
(expandtypeattribute (proc_net_type) true)
(typeattributeset proc_net_type (proc_net ))
(typeattribute sysfs_type)
(typeattributeset sysfs_type (sysfs_usermodehelper sysfs sysfs_android_usb sysfs_uio sysfs_batteryinfo sysfs_bluetooth_writable sysfs_devices_block sysfs_dm sysfs_dt_firmware_android sysfs_extcon sysfs_ipv4 sysfs_kernel_notes sysfs_leds sysfs_loop sysfs_hwrandom sysfs_nfc_power_writable sysfs_wake_lock sysfs_mac_address sysfs_net sysfs_power sysfs_rtc sysfs_switch sysfs_transparent_hugepage sysfs_usb sysfs_wakeup_reasons sysfs_fs_ext4_features sysfs_fs_f2fs sysfs_devices_system_cpu sysfs_lowmemorykiller sysfs_wlan_fwpath sysfs_vibrator sysfs_thermal sysfs_zram sysfs_zram_uevent ))
(typeattribute debugfs_type)
(typeattributeset debugfs_type (debugfs debugfs_mmc debugfs_trace_marker debugfs_tracing debugfs_tracing_debug debugfs_tracing_instances debugfs_wakeup_sources debugfs_wifi_tracing debugfs_kcov ))
(typeattribute sdcard_type)
(typeattributeset sdcard_type (fuse sdcardfs vfat exfat ))
(typeattribute node_type)
(typeattributeset node_type (node ))
(typeattribute netif_type)
(typeattributeset netif_type (netif ))
(typeattribute port_type)
(typeattributeset port_type (port ))
(typeattribute property_type)
(typeattributeset property_type (apexd_prop audio_prop boottime_prop boottime_public_prop bluetooth_a2dp_offload_prop bluetooth_audio_hal_prop bluetooth_prop bpf_progs_loaded_prop bootloader_boot_reason_prop config_prop cppreopt_prop cpu_variant_prop ctl_adbd_prop ctl_bootanim_prop ctl_bugreport_prop ctl_console_prop ctl_default_prop ctl_dumpstate_prop ctl_fuse_prop ctl_gsid_prop ctl_interface_restart_prop ctl_interface_start_prop ctl_interface_stop_prop ctl_mdnsd_prop ctl_restart_prop ctl_rildaemon_prop ctl_sigstop_prop ctl_start_prop ctl_stop_prop dalvik_prop debuggerd_prop debug_prop default_prop device_config_activity_manager_native_boot_prop device_config_boot_count_prop device_config_reset_performed_prop device_config_input_native_boot_prop device_config_netd_native_prop device_config_runtime_native_boot_prop device_config_runtime_native_prop device_config_media_native_prop device_logging_prop dhcp_prop dumpstate_options_prop dumpstate_prop dynamic_system_prop exported_secure_prop sota_prop ffs_prop fingerprint_prop firstboot_prop gsid_prop heapprofd_enabled_prop heapprofd_prop hwservicemanager_prop last_boot_reason_prop system_lmk_prop llkd_prop logd_prop logpersistd_logging_prop log_prop log_tag_prop lowpan_prop lpdumpd_prop mmc_prop net_dns_prop net_radio_prop netd_stable_secret_prop nfc_prop nnapi_ext_deny_product_prop overlay_prop pan_result_prop persist_debug_prop persistent_properties_ready_prop pm_prop powerctl_prop radio_prop restorecon_prop safemode_prop serialno_prop shell_prop system_boot_reason_prop system_prop system_radio_prop system_trace_prop test_boot_reason_prop test_harness_prop theme_prop time_prop traced_enabled_prop traced_lazy_prop use_memfd_prop vold_prop wifi_log_prop wifi_prop vendor_security_patch_level_prop exported_audio_prop exported_bluetooth_prop exported_config_prop exported_dalvik_prop exported_default_prop exported_dumpstate_prop exported_ffs_prop exported_fingerprint_prop exported_overlay_prop exported_pm_prop exported_radio_prop exported_system_prop exported_system_radio_prop exported_vold_prop exported_wifi_prop exported2_config_prop exported2_default_prop exported2_radio_prop exported2_system_prop exported2_vold_prop exported3_default_prop exported3_radio_prop exported3_system_prop vendor_default_prop ))
(typeattribute core_property_type)
(typeattributeset core_property_type (audio_prop config_prop cppreopt_prop dalvik_prop debuggerd_prop debug_prop default_prop dhcp_prop dumpstate_prop ffs_prop fingerprint_prop logd_prop net_radio_prop nfc_prop pan_result_prop persist_debug_prop powerctl_prop radio_prop restorecon_prop shell_prop system_prop system_radio_prop vold_prop ))
(typeattribute log_property_type)
(typeattributeset log_property_type (log_prop log_tag_prop wifi_log_prop ))
(typeattribute extended_core_property_type)
(typeattribute system_server_service)
(typeattributeset system_server_service (accessibility_service account_service activity_service activity_task_service adb_service alarm_service app_binding_service app_prediction_service appops_service appwidget_service assetatlas_service audio_service autofill_service backup_service batterystats_service battery_service binder_calls_stats_service bluetooth_manager_service broadcastradio_service cameraproxy_service clipboard_service contexthub_service crossprofileapps_service IProxyService_service companion_device_service connectivity_service connmetrics_service consumer_ir_service content_capture_service content_suggestions_service content_service country_detector_service coverage_service cpuinfo_service dbinfo_service device_config_service device_policy_service deviceidle_service device_identifiers_service devicestoragemonitor_service diskstats_service display_service color_display_service external_vibrator_service font_service netd_listener_service network_watchlist_service DockObserver_service dreams_service dropbox_service lowpan_service ethernet_service biometric_service bugreport_service face_service fingerprint_service gfxinfo_service graphicsstats_service hardware_service hardware_properties_service hdmi_control_service imms_service input_method_service input_service ipsec_service iris_service jobscheduler_service launcherapps_service location_service lock_settings_service looper_stats_service media_projection_service media_router_service media_session_service meminfo_service midi_service mount_service netpolicy_service netstats_service network_management_service network_score_service network_stack_service network_time_update_service notification_service oem_lock_service otadexopt_service overlay_service package_service package_native_service permission_service permissionmgr_service persistent_data_block_service pinner_service power_service print_service processinfo_service procstats_service recovery_service registry_service restrictions_service role_service rollback_service runtime_service rttmanager_service samplingprofiler_service scheduling_policy_service search_service sec_key_att_app_id_provider_service sensorservice_service sensor_privacy_service serial_service servicediscovery_service settings_service shortcut_service slice_service statusbar_service storagestats_service system_update_service task_service testharness_service textclassification_service textservices_service telecom_service thermal_service timedetector_service timezone_service trust_service tv_input_service uimode_service updatelock_service uri_grants_service usagestats_service usb_service user_service vibrator_service voiceinteraction_service vr_manager_service wallpaper_service webviewupdate_service wifip2p_service wifiscanner_service wifi_service wifiaware_service window_service inputflinger_service attention_service dynamic_system_service incidentcompanion_service statscompanion_service ))
(typeattribute app_api_service)
(typeattributeset app_api_service (batteryproperties_service gatekeeper_service gpu_service surfaceflinger_service accessibility_service account_service activity_service activity_task_service alarm_service app_prediction_service appops_service appwidget_service assetatlas_service audio_service autofill_service backup_service batterystats_service bluetooth_manager_service clipboard_service contexthub_service crossprofileapps_service IProxyService_service companion_device_service connectivity_service connmetrics_service consumer_ir_service content_capture_service content_suggestions_service content_service country_detector_service device_policy_service deviceidle_service device_identifiers_service display_service font_service dreams_service dropbox_service ethernet_service biometric_service face_service fingerprint_service graphicsstats_service hardware_properties_service imms_service input_method_service input_service ipsec_service iris_service jobscheduler_service launcherapps_service location_service media_projection_service media_router_service media_session_service midi_service mount_service netpolicy_service netstats_service network_management_service notification_service package_service package_native_service permission_service permissionmgr_service power_service print_service procstats_service registry_service restrictions_service role_service rollback_service rttmanager_service search_service sec_key_att_app_id_provider_service sensorservice_service sensor_privacy_service servicediscovery_service settings_service shortcut_service slice_service statusbar_service storagestats_service textclassification_service textservices_service telecom_service thermal_service trust_service tv_input_service uimode_service uri_grants_service usagestats_service usb_service user_service vibrator_service voiceinteraction_service wallpaper_service webviewupdate_service wifip2p_service wifi_service wifiaware_service ashmem_device_service ))
(typeattribute ephemeral_app_api_service)
(typeattributeset ephemeral_app_api_service (batteryproperties_service surfaceflinger_service accessibility_service account_service activity_service activity_task_service alarm_service appops_service appwidget_service assetatlas_service audio_service autofill_service backup_service batterystats_service bluetooth_manager_service clipboard_service IProxyService_service companion_device_service connectivity_service connmetrics_service consumer_ir_service content_capture_service content_suggestions_service content_service country_detector_service deviceidle_service device_identifiers_service display_service font_service dreams_service dropbox_service graphicsstats_service hardware_properties_service imms_service input_method_service input_service ipsec_service jobscheduler_service launcherapps_service location_service media_projection_service media_router_service media_session_service midi_service mount_service netpolicy_service netstats_service network_management_service notification_service package_service package_native_service permission_service permissionmgr_service power_service print_service procstats_service registry_service restrictions_service rttmanager_service search_service sensorservice_service sensor_privacy_service servicediscovery_service settings_service statusbar_service storagestats_service textclassification_service textservices_service telecom_service thermal_service tv_input_service uimode_service uri_grants_service usagestats_service user_service vibrator_service voiceinteraction_service webviewupdate_service ))
(typeattribute system_api_service)
(typeattributeset system_api_service (adb_service cpuinfo_service dbinfo_service diskstats_service color_display_service lowpan_service bugreport_service gfxinfo_service hdmi_control_service lock_settings_service meminfo_service network_score_service oem_lock_service overlay_service persistent_data_block_service serial_service updatelock_service wifiscanner_service window_service inputflinger_service wpantund_service dynamic_system_service incidentcompanion_service ))
(typeattribute service_manager_type)
(typeattributeset service_manager_type (apex_service audioserver_service batteryproperties_service bluetooth_service cameraserver_service default_android_service dnsresolver_service drmserver_service dumpstate_service fingerprintd_service hal_fingerprint_service gatekeeper_service gpu_service idmap_service iorapd_service incident_service installd_service keystore_service lpdump_service mediaserver_service mediametrics_service mediaextractor_service mediacodec_service mediadrmserver_service netd_service nfc_service perfprofd_service radio_service secure_element_service storaged_service surfaceflinger_service system_app_service system_suspend_control_service update_engine_service virtual_touchpad_service vold_service vr_hwc_service vrflinger_vsync_service accessibility_service account_service activity_service activity_task_service adb_service alarm_service app_binding_service app_prediction_service appops_service appwidget_service assetatlas_service audio_service autofill_service backup_service batterystats_service battery_service binder_calls_stats_service bluetooth_manager_service broadcastradio_service cameraproxy_service clipboard_service contexthub_service crossprofileapps_service IProxyService_service companion_device_service connectivity_service connmetrics_service consumer_ir_service content_capture_service content_suggestions_service content_service country_detector_service coverage_service cpuinfo_service dbinfo_service device_config_service device_policy_service deviceidle_service device_identifiers_service devicestoragemonitor_service diskstats_service display_service color_display_service external_vibrator_service font_service netd_listener_service network_watchlist_service DockObserver_service dreams_service dropbox_service lowpan_service ethernet_service biometric_service bugreport_service face_service fingerprint_service gfxinfo_service graphicsstats_service hardware_service hardware_properties_service hdmi_control_service imms_service input_method_service input_service ipsec_service iris_service jobscheduler_service launcherapps_service location_service lock_settings_service looper_stats_service media_projection_service media_router_service media_session_service meminfo_service midi_service mount_service netpolicy_service netstats_service network_management_service network_score_service network_stack_service network_time_update_service notification_service oem_lock_service otadexopt_service overlay_service package_service package_native_service permission_service permissionmgr_service persistent_data_block_service pinner_service power_service print_service processinfo_service procstats_service recovery_service registry_service restrictions_service role_service rollback_service runtime_service rttmanager_service samplingprofiler_service scheduling_policy_service search_service sec_key_att_app_id_provider_service sensorservice_service sensor_privacy_service serial_service servicediscovery_service settings_service shortcut_service slice_service statusbar_service storagestats_service system_update_service task_service testharness_service textclassification_service textservices_service telecom_service thermal_service timedetector_service timezone_service trust_service tv_input_service uimode_service updatelock_service uri_grants_service usagestats_service usb_service user_service vibrator_service voiceinteraction_service vr_manager_service wallpaper_service webviewupdate_service wifip2p_service wifiscanner_service wifi_service wificond_service wifiaware_service window_service inputflinger_service wpantund_service ashmem_device_service attention_service dynamic_system_service gsi_service incidentcompanion_service stats_service statscompanion_service ))
(typeattribute hwservice_manager_type)
(typeattributeset hwservice_manager_type (default_android_hwservice fwk_bufferhub_hwservice fwk_camera_hwservice fwk_display_hwservice fwk_scheduler_hwservice fwk_sensor_hwservice fwk_stats_hwservice hal_atrace_hwservice hal_audiocontrol_hwservice hal_audio_hwservice hal_authsecret_hwservice hal_bluetooth_hwservice hal_bootctl_hwservice hal_broadcastradio_hwservice hal_camera_hwservice hal_codec2_hwservice hal_configstore_ISurfaceFlingerConfigs hal_confirmationui_hwservice hal_contexthub_hwservice hal_drm_hwservice hal_cas_hwservice hal_dumpstate_hwservice hal_evs_hwservice hal_face_hwservice hal_fingerprint_hwservice hal_gatekeeper_hwservice hal_gnss_hwservice hal_graphics_allocator_hwservice hal_graphics_composer_hwservice hal_graphics_mapper_hwservice hal_health_hwservice hal_health_storage_hwservice hal_input_classifier_hwservice hal_ir_hwservice hal_keymaster_hwservice hal_light_hwservice hal_lowpan_hwservice hal_memtrack_hwservice hal_neuralnetworks_hwservice hal_nfc_hwservice hal_oemlock_hwservice hal_omx_hwservice hal_power_hwservice hal_power_stats_hwservice hal_renderscript_hwservice hal_secure_element_hwservice hal_sensors_hwservice hal_telephony_hwservice hal_tetheroffload_hwservice hal_thermal_hwservice hal_tv_cec_hwservice hal_tv_input_hwservice hal_usb_hwservice hal_usb_gadget_hwservice hal_vehicle_hwservice hal_vibrator_hwservice hal_vr_hwservice hal_weaver_hwservice hal_wifi_hwservice hal_wifi_hostapd_hwservice hal_wifi_offload_hwservice hal_wifi_supplicant_hwservice hidl_allocator_hwservice hidl_base_hwservice hidl_manager_hwservice hidl_memory_hwservice hidl_token_hwservice system_net_netd_hwservice system_suspend_hwservice system_wifi_keystore_hwservice thermalcallback_hwservice ))
(typeattribute same_process_hwservice)
(typeattributeset same_process_hwservice (hal_graphics_mapper_hwservice hal_renderscript_hwservice ))
(typeattribute coredomain_hwservice)
(typeattributeset coredomain_hwservice (fwk_bufferhub_hwservice fwk_camera_hwservice fwk_display_hwservice fwk_scheduler_hwservice fwk_sensor_hwservice fwk_stats_hwservice hidl_allocator_hwservice hidl_manager_hwservice hidl_memory_hwservice hidl_token_hwservice system_net_netd_hwservice system_suspend_hwservice system_wifi_keystore_hwservice ))
(typeattribute vndservice_manager_type)
(typeattributeset vndservice_manager_type (default_android_vndservice ))
(typeattribute mlstrustedsubject)
(typeattributeset mlstrustedsubject (adbd app_zygote bufferhubd drmserver dumpstate pdx_display_client_endpoint_socket pdx_display_manager_endpoint_socket pdx_display_screenshot_endpoint_socket pdx_display_vsync_endpoint_socket pdx_performance_client_endpoint_socket pdx_bufferhub_client_endpoint_socket heapprofd hwservicemanager incidentd init installd kernel keystore llkd lmkd logd mdnsd mediadrmserver mediaextractor mediaserver netd performanced racoon radio rss_hwm_reset runas servicemanager shell simpleperf_app_runner statsd surfaceflinger system_server tombstoned traced traced_probes uncrypt vendor_init vold webview_zygote zygote cppreopts dexoptanalyzer otapreopt_slot storaged viewcompiler ))
(typeattribute mlstrustedobject)
(typeattributeset mlstrustedobject (ashmem_device binder_device hwbinder_device pmsg_device gpu_device mtp_device ptmx_device null_device random_device owntty_device zero_device fuse_device ion_device tun_device usbaccessory_device usb_device proc_qtaguid_ctrl proc_qtaguid_stat selinuxfs cgroup sysfs sysfs_bluetooth_writable sysfs_kernel_notes sysfs_nfc_power_writable inotify devpts fuse sdcardfs vfat exfat debugfs_trace_marker debugfs_tracing debugfs_tracing_debug functionfs anr_data_file tombstone_data_file apk_tmp_file apk_private_tmp_file ota_package_file user_profile_data_file shell_data_file heapdump_data_file ringtone_file media_rw_data_file radio_data_file trace_data_file perfprofd_data_file method_trace_data_file system_app_data_file cache_file cache_backup_file cache_recovery_file wallpaper_file shortcut_manager_icons asec_apk_file backup_data_file app_fuse_file dnsproxyd_socket fwmarkd_socket logd_socket logdr_socket logdw_socket mdnsd_socket property_socket statsdw_socket system_ndebug_socket tombstoned_crash_socket tombstoned_java_trace_socket traced_producer_socket traced_consumer_socket heapprofd_socket pdx_display_client_endpoint_socket pdx_display_manager_endpoint_socket pdx_display_screenshot_endpoint_socket pdx_display_vsync_endpoint_socket pdx_performance_client_endpoint_socket pdx_bufferhub_client_endpoint_socket system_server_tmpfs heapprofd_tmpfs traced_tmpfs ))
(typeattribute appdomain)
(typeattributeset appdomain (bluetooth ephemeral_app isolated_app mediaprovider network_stack nfc platform_app priv_app radio runas_app secure_element shared_relro shell system_app traceur_app untrusted_app untrusted_app_27 untrusted_app_25 ))
(typeattribute untrusted_app_all)
(typeattributeset untrusted_app_all (runas_app untrusted_app untrusted_app_27 untrusted_app_25 ))
(typeattribute netdomain)
(typeattributeset netdomain (adbd bluetooth clatd dhcp dnsmasq drmserver dumpstate ephemeral_app mdnsd mediadrmserver mediaprovider mediaserver mtp netd network_stack nfc platform_app ppp priv_app racoon radio runas_app shell system_app system_server untrusted_app untrusted_app_27 untrusted_app_25 update_engine wpantund ))
(typeattribute bluetoothdomain)
(typeattributeset bluetoothdomain (platform_app priv_app radio runas_app system_server untrusted_app untrusted_app_27 untrusted_app_25 ))
(typeattribute binderservicedomain)
(typeattributeset binderservicedomain (audioserver cameraserver drmserver gatekeeperd inputflinger keystore mediadrmserver mediaextractor mediametrics mediaserver nfc radio secure_element surfaceflinger system_app system_server virtual_touchpad vr_hwc gsid ))
(typeattribute update_engine_common)
(typeattributeset update_engine_common (update_engine ))
(typeattribute coredomain)
(typeattributeset coredomain (adbd apexd app_zygote ashmemd audioserver blkid blkid_untrusted bluetooth bootanim bootstat bufferhubd cameraserver charger clatd crash_dump dhcp dnsmasq drmserver dumpstate e2fs ephemeral_app fastbootd fingerprintd flags_health_check fsck fsck_untrusted gatekeeperd gpuservice healthd heapprofd hwservicemanager idmap incident incident_helper incidentd init inputflinger install_recovery installd iorapd isolated_app kernel keystore llkd lmkd logd logpersist mdnsd mediadrmserver mediaextractor mediametrics mediaprovider mediaserver mediaswcodec modprobe mtp netd netutils_wrapper network_stack nfc perfetto performanced platform_app postinstall ppp priv_app profman racoon radio recovery recovery_persist recovery_refresh rs rss_hwm_reset runas runas_app sdcardd secure_element servicemanager sgdisk shared_relro shell simpleperf_app_runner slideshow statsd surfaceflinger system_app system_server tombstoned toolbox traced traced_probes traceur_app tzdatacheck ueventd uncrypt untrusted_app untrusted_app_27 untrusted_app_25 update_engine update_verifier usbd vdc virtual_touchpad vold vold_prepare_subdirs vr_hwc watchdogd webview_zygote wificond wpantund zygote apex_test_prepostinstall art_apex_boot_integrity art_apex_postinstall art_apex_preinstall atrace auditctl blank_screen bpfloader cppreopts dex2oat dexoptanalyzer fsverity_init fwk_bufferhub gsid hal_allocator_default iw lpdumpd migrate_legacy_obb_data notify_traceur otapreopt_chroot otapreopt_slot postinstall_dexopt preloads_copy preopt2cachename stats storaged system_server_startup system_suspend viewcompiler wait_for_keymaster ))
(typeattribute coredomain_socket)
(expandtypeattribute (coredomain_socket) false)
(typeattributeset coredomain_socket (drmserver_socket adbd_socket bluetooth_socket dnsproxyd_socket dumpstate_socket fwmarkd_socket lmkd_socket logd_socket logdr_socket logdw_socket mdns_socket mdnsd_socket misc_logd_file mtpd_socket property_socket racoon_socket recovery_socket statsdw_socket system_wpa_socket system_ndebug_socket tombstoned_crash_socket tombstoned_intercept_socket traced_producer_socket traced_consumer_socket uncrypt_socket zygote_socket heapprofd_socket pdx_display_client_endpoint_socket pdx_display_client_channel_socket pdx_display_manager_endpoint_socket pdx_display_manager_channel_socket pdx_display_screenshot_endpoint_socket pdx_display_screenshot_channel_socket pdx_display_vsync_endpoint_socket pdx_display_vsync_channel_socket pdx_performance_client_endpoint_socket pdx_performance_client_channel_socket pdx_bufferhub_client_endpoint_socket pdx_bufferhub_client_channel_socket ))
(typeattribute binder_in_vendor_violators)
(expandtypeattribute (binder_in_vendor_violators) false)
(typeattribute socket_between_core_and_vendor_violators)
(expandtypeattribute (socket_between_core_and_vendor_violators) false)
(typeattribute vendor_executes_system_violators)
(expandtypeattribute (vendor_executes_system_violators) false)
(typeattribute data_between_core_and_vendor_violators)
(expandtypeattribute (data_between_core_and_vendor_violators) false)
(typeattribute system_executes_vendor_violators)
(expandtypeattribute (system_executes_vendor_violators) false)
(typeattribute system_writes_vendor_properties_violators)
(expandtypeattribute (system_writes_vendor_properties_violators) false)
(typeattribute system_writes_mnt_vendor_violators)
(expandtypeattribute (system_writes_mnt_vendor_violators) false)
(typeattribute untrusted_app_visible_hwservice_violators)
(expandtypeattribute (untrusted_app_visible_hwservice_violators) false)
(typeattribute untrusted_app_visible_halserver_violators)
(expandtypeattribute (untrusted_app_visible_halserver_violators) false)
(typeattribute pdx_endpoint_dir_type)
(typeattributeset pdx_endpoint_dir_type (pdx_display_dir pdx_performance_dir pdx_bufferhub_dir ))
(typeattribute pdx_endpoint_socket_type)
(expandtypeattribute (pdx_endpoint_socket_type) false)
(typeattributeset pdx_endpoint_socket_type (pdx_display_client_endpoint_socket pdx_display_manager_endpoint_socket pdx_display_screenshot_endpoint_socket pdx_display_vsync_endpoint_socket pdx_performance_client_endpoint_socket pdx_bufferhub_client_endpoint_socket ))
(typeattribute pdx_channel_socket_type)
(expandtypeattribute (pdx_channel_socket_type) false)
(typeattributeset pdx_channel_socket_type (pdx_display_client_channel_socket pdx_display_manager_channel_socket pdx_display_screenshot_channel_socket pdx_display_vsync_channel_socket pdx_performance_client_channel_socket pdx_bufferhub_client_channel_socket ))
(typeattribute pdx_display_client_endpoint_dir_type)
(typeattributeset pdx_display_client_endpoint_dir_type (pdx_display_dir ))
(typeattribute pdx_display_client_endpoint_socket_type)
(typeattributeset pdx_display_client_endpoint_socket_type (pdx_display_client_endpoint_socket ))
(typeattribute pdx_display_client_channel_socket_type)
(typeattributeset pdx_display_client_channel_socket_type (pdx_display_client_channel_socket ))
(typeattribute pdx_display_client_server_type)
(typeattributeset pdx_display_client_server_type (surfaceflinger ))
(typeattribute pdx_display_manager_endpoint_dir_type)
(typeattributeset pdx_display_manager_endpoint_dir_type (pdx_display_dir ))
(typeattribute pdx_display_manager_endpoint_socket_type)
(typeattributeset pdx_display_manager_endpoint_socket_type (pdx_display_manager_endpoint_socket ))
(typeattribute pdx_display_manager_channel_socket_type)
(typeattributeset pdx_display_manager_channel_socket_type (pdx_display_manager_channel_socket ))
(typeattribute pdx_display_manager_server_type)
(typeattributeset pdx_display_manager_server_type (surfaceflinger ))
(typeattribute pdx_display_screenshot_endpoint_dir_type)
(typeattributeset pdx_display_screenshot_endpoint_dir_type (pdx_display_dir ))
(typeattribute pdx_display_screenshot_endpoint_socket_type)
(typeattributeset pdx_display_screenshot_endpoint_socket_type (pdx_display_screenshot_endpoint_socket ))
(typeattribute pdx_display_screenshot_channel_socket_type)
(typeattributeset pdx_display_screenshot_channel_socket_type (pdx_display_screenshot_channel_socket ))
(typeattribute pdx_display_screenshot_server_type)
(typeattributeset pdx_display_screenshot_server_type (surfaceflinger ))
(typeattribute pdx_display_vsync_endpoint_dir_type)
(typeattributeset pdx_display_vsync_endpoint_dir_type (pdx_display_dir ))
(typeattribute pdx_display_vsync_endpoint_socket_type)
(typeattributeset pdx_display_vsync_endpoint_socket_type (pdx_display_vsync_endpoint_socket ))
(typeattribute pdx_display_vsync_channel_socket_type)
(typeattributeset pdx_display_vsync_channel_socket_type (pdx_display_vsync_channel_socket ))
(typeattribute pdx_display_vsync_server_type)
(typeattributeset pdx_display_vsync_server_type (surfaceflinger ))
(typeattribute pdx_performance_client_endpoint_dir_type)
(typeattributeset pdx_performance_client_endpoint_dir_type (pdx_performance_dir ))
(typeattribute pdx_performance_client_endpoint_socket_type)
(typeattributeset pdx_performance_client_endpoint_socket_type (pdx_performance_client_endpoint_socket ))
(typeattribute pdx_performance_client_channel_socket_type)
(typeattributeset pdx_performance_client_channel_socket_type (pdx_performance_client_channel_socket ))
(typeattribute pdx_performance_client_server_type)
(typeattributeset pdx_performance_client_server_type (performanced ))
(typeattribute pdx_bufferhub_client_endpoint_dir_type)
(typeattributeset pdx_bufferhub_client_endpoint_dir_type (pdx_bufferhub_dir ))
(typeattribute pdx_bufferhub_client_endpoint_socket_type)
(typeattributeset pdx_bufferhub_client_endpoint_socket_type (pdx_bufferhub_client_endpoint_socket ))
(typeattribute pdx_bufferhub_client_channel_socket_type)
(typeattributeset pdx_bufferhub_client_channel_socket_type (pdx_bufferhub_client_channel_socket ))
(typeattribute pdx_bufferhub_client_server_type)
(typeattributeset pdx_bufferhub_client_server_type (bufferhubd ))
(typeattribute halserverdomain)
(typeattributeset halserverdomain (healthd mediaswcodec vr_hwc fwk_bufferhub hal_allocator_default ))
(typeattribute halclientdomain)
(expandtypeattribute (halclientdomain) true)
(typeattributeset halclientdomain (adbd audioserver bluetooth bootanim bufferhubd cameraserver dumpstate gatekeeperd healthd keystore mediadrmserver mediaextractor mediaserver mediaswcodec nfc radio secure_element shell statsd surfaceflinger system_server traced_probes traceur_app update_engine update_verifier usbd vold vr_hwc wificond wpantund atrace blank_screen fwk_bufferhub storaged wait_for_keymaster ))
(typeattribute hal_automotive_socket_exemption)
(typeattribute hal_allocator)
(expandtypeattribute (hal_allocator) true)
(typeattributeset hal_allocator (hal_allocator_default ))
(typeattribute hal_allocator_client)
(expandtypeattribute (hal_allocator_client) true)
(typeattributeset hal_allocator_client (audioserver cameraserver mediaextractor mediaserver mediaswcodec system_server ))
(typeattribute hal_allocator_server)
(expandtypeattribute (hal_allocator_server) false)
(typeattributeset hal_allocator_server (hal_allocator_default ))
(typeattribute hal_atrace)
(expandtypeattribute (hal_atrace) true)
(typeattribute hal_atrace_client)
(expandtypeattribute (hal_atrace_client) true)
(typeattributeset hal_atrace_client (shell traceur_app atrace ))
(typeattribute hal_atrace_server)
(expandtypeattribute (hal_atrace_server) false)
(typeattribute hal_audio)
(expandtypeattribute (hal_audio) true)
(typeattribute hal_audio_client)
(expandtypeattribute (hal_audio_client) true)
(typeattributeset hal_audio_client (audioserver bluetooth ))
(typeattribute hal_audio_server)
(expandtypeattribute (hal_audio_server) false)
(typeattribute hal_audiocontrol)
(expandtypeattribute (hal_audiocontrol) true)
(typeattribute hal_audiocontrol_client)
(expandtypeattribute (hal_audiocontrol_client) true)
(typeattribute hal_audiocontrol_server)
(expandtypeattribute (hal_audiocontrol_server) false)
(typeattribute hal_authsecret)
(expandtypeattribute (hal_authsecret) true)
(typeattribute hal_authsecret_client)
(expandtypeattribute (hal_authsecret_client) true)
(typeattributeset hal_authsecret_client (system_server ))
(typeattribute hal_authsecret_server)
(expandtypeattribute (hal_authsecret_server) false)
(typeattribute hal_bluetooth)
(expandtypeattribute (hal_bluetooth) true)
(typeattribute hal_bluetooth_client)
(expandtypeattribute (hal_bluetooth_client) true)
(typeattributeset hal_bluetooth_client (bluetooth ))
(typeattribute hal_bluetooth_server)
(expandtypeattribute (hal_bluetooth_server) false)
(typeattribute hal_bootctl)
(expandtypeattribute (hal_bootctl) true)
(typeattribute hal_bootctl_client)
(expandtypeattribute (hal_bootctl_client) true)
(typeattributeset hal_bootctl_client (update_engine update_verifier vold ))
(typeattribute hal_bootctl_server)
(expandtypeattribute (hal_bootctl_server) false)
(typeattribute hal_bufferhub)
(expandtypeattribute (hal_bufferhub) true)
(typeattributeset hal_bufferhub (fwk_bufferhub ))
(typeattribute hal_bufferhub_client)
(expandtypeattribute (hal_bufferhub_client) true)
(typeattribute hal_bufferhub_server)
(expandtypeattribute (hal_bufferhub_server) false)
(typeattributeset hal_bufferhub_server (fwk_bufferhub ))
(typeattribute hal_broadcastradio)
(expandtypeattribute (hal_broadcastradio) true)
(typeattribute hal_broadcastradio_client)
(expandtypeattribute (hal_broadcastradio_client) true)
(typeattributeset hal_broadcastradio_client (system_server ))
(typeattribute hal_broadcastradio_server)
(expandtypeattribute (hal_broadcastradio_server) false)
(typeattribute hal_camera)
(expandtypeattribute (hal_camera) true)
(typeattribute hal_camera_client)
(expandtypeattribute (hal_camera_client) true)
(typeattributeset hal_camera_client (cameraserver ))
(typeattribute hal_camera_server)
(expandtypeattribute (hal_camera_server) false)
(typeattribute hal_cas)
(expandtypeattribute (hal_cas) true)
(typeattribute hal_cas_client)
(expandtypeattribute (hal_cas_client) true)
(typeattributeset hal_cas_client (mediaextractor ))
(typeattribute hal_cas_server)
(expandtypeattribute (hal_cas_server) false)
(typeattribute hal_codec2)
(expandtypeattribute (hal_codec2) true)
(typeattributeset hal_codec2 (mediaswcodec ))
(typeattribute hal_codec2_client)
(expandtypeattribute (hal_codec2_client) true)
(typeattributeset hal_codec2_client (cameraserver mediaserver mediaswcodec surfaceflinger system_server ))
(typeattribute hal_codec2_server)
(expandtypeattribute (hal_codec2_server) false)
(typeattributeset hal_codec2_server (mediaswcodec ))
(typeattribute hal_configstore)
(expandtypeattribute (hal_configstore) true)
(typeattribute hal_configstore_client)
(expandtypeattribute (hal_configstore_client) true)
(typeattributeset hal_configstore_client (bootanim surfaceflinger system_server ))
(typeattribute hal_configstore_server)
(expandtypeattribute (hal_configstore_server) false)
(typeattribute hal_confirmationui)
(expandtypeattribute (hal_confirmationui) true)
(typeattribute hal_confirmationui_client)
(expandtypeattribute (hal_confirmationui_client) true)
(typeattributeset hal_confirmationui_client (keystore ))
(typeattribute hal_confirmationui_server)
(expandtypeattribute (hal_confirmationui_server) false)
(typeattribute hal_contexthub)
(expandtypeattribute (hal_contexthub) true)
(typeattribute hal_contexthub_client)
(expandtypeattribute (hal_contexthub_client) true)
(typeattributeset hal_contexthub_client (system_server ))
(typeattribute hal_contexthub_server)
(expandtypeattribute (hal_contexthub_server) false)
(typeattribute hal_drm)
(expandtypeattribute (hal_drm) true)
(typeattribute hal_drm_client)
(expandtypeattribute (hal_drm_client) true)
(typeattributeset hal_drm_client (mediadrmserver ))
(typeattribute hal_drm_server)
(expandtypeattribute (hal_drm_server) false)
(typeattribute hal_dumpstate)
(expandtypeattribute (hal_dumpstate) true)
(typeattribute hal_dumpstate_client)
(expandtypeattribute (hal_dumpstate_client) true)
(typeattributeset hal_dumpstate_client (dumpstate ))
(typeattribute hal_dumpstate_server)
(expandtypeattribute (hal_dumpstate_server) false)
(typeattribute hal_evs)
(expandtypeattribute (hal_evs) true)
(typeattribute hal_evs_client)
(expandtypeattribute (hal_evs_client) true)
(typeattribute hal_evs_server)
(expandtypeattribute (hal_evs_server) false)
(typeattribute hal_face)
(expandtypeattribute (hal_face) true)
(typeattribute hal_face_client)
(expandtypeattribute (hal_face_client) true)
(typeattributeset hal_face_client (system_server ))
(typeattribute hal_face_server)
(expandtypeattribute (hal_face_server) false)
(typeattribute hal_fingerprint)
(expandtypeattribute (hal_fingerprint) true)
(typeattribute hal_fingerprint_client)
(expandtypeattribute (hal_fingerprint_client) true)
(typeattributeset hal_fingerprint_client (system_server ))
(typeattribute hal_fingerprint_server)
(expandtypeattribute (hal_fingerprint_server) false)
(typeattribute hal_gatekeeper)
(expandtypeattribute (hal_gatekeeper) true)
(typeattribute hal_gatekeeper_client)
(expandtypeattribute (hal_gatekeeper_client) true)
(typeattributeset hal_gatekeeper_client (gatekeeperd ))
(typeattribute hal_gatekeeper_server)
(expandtypeattribute (hal_gatekeeper_server) false)
(typeattribute hal_gnss)
(expandtypeattribute (hal_gnss) true)
(typeattribute hal_gnss_client)
(expandtypeattribute (hal_gnss_client) true)
(typeattributeset hal_gnss_client (system_server ))
(typeattribute hal_gnss_server)
(expandtypeattribute (hal_gnss_server) false)
(typeattribute hal_graphics_allocator)
(expandtypeattribute (hal_graphics_allocator) true)
(typeattribute hal_graphics_allocator_client)
(expandtypeattribute (hal_graphics_allocator_client) true)
(typeattributeset hal_graphics_allocator_client (adbd bootanim bufferhubd cameraserver dumpstate mediadrmserver mediaserver mediaswcodec surfaceflinger system_server vr_hwc fwk_bufferhub ))
(typeattribute hal_graphics_allocator_server)
(expandtypeattribute (hal_graphics_allocator_server) false)
(typeattribute hal_graphics_composer)
(expandtypeattribute (hal_graphics_composer) true)
(typeattributeset hal_graphics_composer (vr_hwc ))
(typeattribute hal_graphics_composer_client)
(expandtypeattribute (hal_graphics_composer_client) true)
(typeattributeset hal_graphics_composer_client (bootanim surfaceflinger ))
(typeattribute hal_graphics_composer_server)
(expandtypeattribute (hal_graphics_composer_server) false)
(typeattributeset hal_graphics_composer_server (vr_hwc ))
(typeattribute hal_health)
(expandtypeattribute (hal_health) true)
(typeattributeset hal_health (healthd ))
(typeattribute hal_health_client)
(expandtypeattribute (hal_health_client) true)
(typeattributeset hal_health_client (healthd statsd system_server traced_probes storaged ))
(typeattribute hal_health_server)
(expandtypeattribute (hal_health_server) false)
(typeattributeset hal_health_server (healthd ))
(typeattribute hal_health_storage)
(expandtypeattribute (hal_health_storage) true)
(typeattribute hal_health_storage_client)
(expandtypeattribute (hal_health_storage_client) true)
(typeattributeset hal_health_storage_client (vold ))
(typeattribute hal_health_storage_server)
(expandtypeattribute (hal_health_storage_server) false)
(typeattribute hal_input_classifier)
(expandtypeattribute (hal_input_classifier) true)
(typeattribute hal_input_classifier_client)
(expandtypeattribute (hal_input_classifier_client) true)
(typeattributeset hal_input_classifier_client (system_server ))
(typeattribute hal_input_classifier_server)
(expandtypeattribute (hal_input_classifier_server) false)
(typeattribute hal_ir)
(expandtypeattribute (hal_ir) true)
(typeattribute hal_ir_client)
(expandtypeattribute (hal_ir_client) true)
(typeattributeset hal_ir_client (system_server ))
(typeattribute hal_ir_server)
(expandtypeattribute (hal_ir_server) false)
(typeattribute hal_keymaster)
(expandtypeattribute (hal_keymaster) true)
(typeattribute hal_keymaster_client)
(expandtypeattribute (hal_keymaster_client) true)
(typeattributeset hal_keymaster_client (keystore vold wait_for_keymaster ))
(typeattribute hal_keymaster_server)
(expandtypeattribute (hal_keymaster_server) false)
(typeattribute hal_light)
(expandtypeattribute (hal_light) true)
(typeattribute hal_light_client)
(expandtypeattribute (hal_light_client) true)
(typeattributeset hal_light_client (system_server blank_screen ))
(typeattribute hal_light_server)
(expandtypeattribute (hal_light_server) false)
(typeattribute hal_lowpan)
(expandtypeattribute (hal_lowpan) true)
(typeattribute hal_lowpan_client)
(expandtypeattribute (hal_lowpan_client) true)
(typeattributeset hal_lowpan_client (wpantund ))
(typeattribute hal_lowpan_server)
(expandtypeattribute (hal_lowpan_server) false)
(typeattribute hal_memtrack)
(expandtypeattribute (hal_memtrack) true)
(typeattribute hal_memtrack_client)
(expandtypeattribute (hal_memtrack_client) true)
(typeattributeset hal_memtrack_client (system_server ))
(typeattribute hal_memtrack_server)
(expandtypeattribute (hal_memtrack_server) false)
(typeattribute hal_neuralnetworks)
(expandtypeattribute (hal_neuralnetworks) true)
(typeattribute hal_neuralnetworks_client)
(expandtypeattribute (hal_neuralnetworks_client) true)
(typeattributeset hal_neuralnetworks_client (system_server ))
(typeattribute hal_neuralnetworks_server)
(expandtypeattribute (hal_neuralnetworks_server) false)
(typeattribute hal_nfc)
(expandtypeattribute (hal_nfc) true)
(typeattribute hal_nfc_client)
(expandtypeattribute (hal_nfc_client) true)
(typeattributeset hal_nfc_client (nfc ))
(typeattribute hal_nfc_server)
(expandtypeattribute (hal_nfc_server) false)
(typeattribute hal_oemlock)
(expandtypeattribute (hal_oemlock) true)
(typeattribute hal_oemlock_client)
(expandtypeattribute (hal_oemlock_client) true)
(typeattributeset hal_oemlock_client (system_server ))
(typeattribute hal_oemlock_server)
(expandtypeattribute (hal_oemlock_server) false)
(typeattribute hal_omx)
(expandtypeattribute (hal_omx) true)
(typeattribute hal_omx_client)
(expandtypeattribute (hal_omx_client) true)
(typeattributeset hal_omx_client (cameraserver mediaserver mediaswcodec surfaceflinger system_server ))
(typeattribute hal_omx_server)
(expandtypeattribute (hal_omx_server) false)
(typeattribute hal_power)
(expandtypeattribute (hal_power) true)
(typeattribute hal_power_client)
(expandtypeattribute (hal_power_client) true)
(typeattributeset hal_power_client (statsd surfaceflinger system_server ))
(typeattribute hal_power_server)
(expandtypeattribute (hal_power_server) false)
(typeattribute hal_power_stats)
(expandtypeattribute (hal_power_stats) true)
(typeattribute hal_power_stats_client)
(expandtypeattribute (hal_power_stats_client) true)
(typeattributeset hal_power_stats_client (statsd system_server traced_probes ))
(typeattribute hal_power_stats_server)
(expandtypeattribute (hal_power_stats_server) false)
(typeattribute hal_secure_element)
(expandtypeattribute (hal_secure_element) true)
(typeattribute hal_secure_element_client)
(expandtypeattribute (hal_secure_element_client) true)
(typeattributeset hal_secure_element_client (secure_element ))
(typeattribute hal_secure_element_server)
(expandtypeattribute (hal_secure_element_server) false)
(typeattribute hal_sensors)
(expandtypeattribute (hal_sensors) true)
(typeattribute hal_sensors_client)
(expandtypeattribute (hal_sensors_client) true)
(typeattributeset hal_sensors_client (system_server ))
(typeattribute hal_sensors_server)
(expandtypeattribute (hal_sensors_server) false)
(typeattribute hal_telephony)
(expandtypeattribute (hal_telephony) true)
(typeattribute hal_telephony_client)
(expandtypeattribute (hal_telephony_client) true)
(typeattributeset hal_telephony_client (bluetooth radio ))
(typeattribute hal_telephony_server)
(expandtypeattribute (hal_telephony_server) false)
(typeattribute hal_tetheroffload)
(expandtypeattribute (hal_tetheroffload) true)
(typeattribute hal_tetheroffload_client)
(expandtypeattribute (hal_tetheroffload_client) true)
(typeattributeset hal_tetheroffload_client (system_server ))
(typeattribute hal_tetheroffload_server)
(expandtypeattribute (hal_tetheroffload_server) false)
(typeattribute hal_thermal)
(expandtypeattribute (hal_thermal) true)
(typeattribute hal_thermal_client)
(expandtypeattribute (hal_thermal_client) true)
(typeattributeset hal_thermal_client (statsd system_server ))
(typeattribute hal_thermal_server)
(expandtypeattribute (hal_thermal_server) false)
(typeattribute hal_tv_cec)
(expandtypeattribute (hal_tv_cec) true)
(typeattribute hal_tv_cec_client)
(expandtypeattribute (hal_tv_cec_client) true)
(typeattributeset hal_tv_cec_client (system_server ))
(typeattribute hal_tv_cec_server)
(expandtypeattribute (hal_tv_cec_server) false)
(typeattribute hal_tv_input)
(expandtypeattribute (hal_tv_input) true)
(typeattribute hal_tv_input_client)
(expandtypeattribute (hal_tv_input_client) true)
(typeattributeset hal_tv_input_client (system_server ))
(typeattribute hal_tv_input_server)
(expandtypeattribute (hal_tv_input_server) false)
(typeattribute hal_usb)
(expandtypeattribute (hal_usb) true)
(typeattribute hal_usb_client)
(expandtypeattribute (hal_usb_client) true)
(typeattributeset hal_usb_client (system_server ))
(typeattribute hal_usb_server)
(expandtypeattribute (hal_usb_server) false)
(typeattribute hal_usb_gadget)
(expandtypeattribute (hal_usb_gadget) true)
(typeattribute hal_usb_gadget_client)
(expandtypeattribute (hal_usb_gadget_client) true)
(typeattributeset hal_usb_gadget_client (system_server usbd ))
(typeattribute hal_usb_gadget_server)
(expandtypeattribute (hal_usb_gadget_server) false)
(typeattribute hal_vehicle)
(expandtypeattribute (hal_vehicle) true)
(typeattribute hal_vehicle_client)
(expandtypeattribute (hal_vehicle_client) true)
(typeattribute hal_vehicle_server)
(expandtypeattribute (hal_vehicle_server) false)
(typeattribute hal_vibrator)
(expandtypeattribute (hal_vibrator) true)
(typeattribute hal_vibrator_client)
(expandtypeattribute (hal_vibrator_client) true)
(typeattributeset hal_vibrator_client (dumpstate system_server ))
(typeattribute hal_vibrator_server)
(expandtypeattribute (hal_vibrator_server) false)
(typeattribute hal_vr)
(expandtypeattribute (hal_vr) true)
(typeattribute hal_vr_client)
(expandtypeattribute (hal_vr_client) true)
(typeattributeset hal_vr_client (system_server ))
(typeattribute hal_vr_server)
(expandtypeattribute (hal_vr_server) false)
(typeattribute hal_weaver)
(expandtypeattribute (hal_weaver) true)
(typeattribute hal_weaver_client)
(expandtypeattribute (hal_weaver_client) true)
(typeattributeset hal_weaver_client (system_server ))
(typeattribute hal_weaver_server)
(expandtypeattribute (hal_weaver_server) false)
(typeattribute hal_wifi)
(expandtypeattribute (hal_wifi) true)
(typeattribute hal_wifi_client)
(expandtypeattribute (hal_wifi_client) true)
(typeattributeset hal_wifi_client (dumpstate system_server ))
(typeattribute hal_wifi_server)
(expandtypeattribute (hal_wifi_server) false)
(typeattribute hal_wifi_hostapd)
(expandtypeattribute (hal_wifi_hostapd) true)
(typeattribute hal_wifi_hostapd_client)
(expandtypeattribute (hal_wifi_hostapd_client) true)
(typeattributeset hal_wifi_hostapd_client (system_server ))
(typeattribute hal_wifi_hostapd_server)
(expandtypeattribute (hal_wifi_hostapd_server) false)
(typeattribute hal_wifi_offload)
(expandtypeattribute (hal_wifi_offload) true)
(typeattribute hal_wifi_offload_client)
(expandtypeattribute (hal_wifi_offload_client) true)
(typeattributeset hal_wifi_offload_client (system_server wificond ))
(typeattribute hal_wifi_offload_server)
(expandtypeattribute (hal_wifi_offload_server) false)
(typeattribute hal_wifi_supplicant)
(expandtypeattribute (hal_wifi_supplicant) true)
(typeattribute hal_wifi_supplicant_client)
(expandtypeattribute (hal_wifi_supplicant_client) true)
(typeattributeset hal_wifi_supplicant_client (system_server ))
(typeattribute hal_wifi_supplicant_server)
(expandtypeattribute (hal_wifi_supplicant_server) false)
(typeattribute camera_service_server)
(typeattributeset camera_service_server (cameraserver ))
(typeattribute display_service_server)
(typeattributeset display_service_server (surfaceflinger ))
(typeattribute scheduler_service_server)
(typeattributeset scheduler_service_server (system_server ))
(typeattribute sensor_service_server)
(typeattributeset sensor_service_server (system_server ))
(typeattribute stats_service_server)
(typeattributeset stats_service_server (statsd ))
(typeattribute system_suspend_server)
(typeattributeset system_suspend_server (system_suspend ))
(typeattribute wifi_keystore_service_server)
(typeattributeset wifi_keystore_service_server (keystore ))
(typeattribute super_block_device_type)
(typeattributeset super_block_device_type (super_block_device ))
(type adbd)
(roletype object_r adbd)
(type adbd_exec)
(roletype object_r adbd_exec)
(type apexd)
(roletype object_r apexd)
(type apexd_exec)
(roletype object_r apexd_exec)
(type appdomain_tmpfs)
(roletype object_r appdomain_tmpfs)
(type app_zygote)
(roletype object_r app_zygote)
(type app_zygote_tmpfs)
(roletype object_r app_zygote_tmpfs)
(type ashmemd)
(roletype object_r ashmemd)
(type audioserver)
(roletype object_r audioserver)
(type audioserver_tmpfs)
(roletype object_r audioserver_tmpfs)
(type blkid)
(roletype object_r blkid)
(type blkid_untrusted)
(roletype object_r blkid_untrusted)
(type bluetooth)
(roletype object_r bluetooth)
(type bootanim)
(roletype object_r bootanim)
(type bootanim_exec)
(roletype object_r bootanim_exec)
(type bootstat)
(roletype object_r bootstat)
(type bootstat_exec)
(roletype object_r bootstat_exec)
(type bufferhubd)
(roletype object_r bufferhubd)
(type bufferhubd_exec)
(roletype object_r bufferhubd_exec)
(type cameraserver)
(roletype object_r cameraserver)
(type cameraserver_exec)
(roletype object_r cameraserver_exec)
(type cameraserver_tmpfs)
(roletype object_r cameraserver_tmpfs)
(type charger)
(roletype object_r charger)
(type charger_exec)
(roletype object_r charger_exec)
(type clatd)
(roletype object_r clatd)
(type clatd_exec)
(roletype object_r clatd_exec)
(type crash_dump)
(roletype object_r crash_dump)
(type crash_dump_exec)
(roletype object_r crash_dump_exec)
(type device)
(roletype object_r device)
(type ashmem_device)
(roletype object_r ashmem_device)
(type audio_device)
(roletype object_r audio_device)
(type binder_device)
(roletype object_r binder_device)
(type hwbinder_device)
(roletype object_r hwbinder_device)
(type vndbinder_device)
(roletype object_r vndbinder_device)
(type block_device)
(roletype object_r block_device)
(type camera_device)
(roletype object_r camera_device)
(type dm_device)
(roletype object_r dm_device)
(type keychord_device)
(roletype object_r keychord_device)
(type loop_control_device)
(roletype object_r loop_control_device)
(type loop_device)
(roletype object_r loop_device)
(type pmsg_device)
(roletype object_r pmsg_device)
(type radio_device)
(roletype object_r radio_device)
(type ram_device)
(roletype object_r ram_device)
(type rtc_device)
(roletype object_r rtc_device)
(type vold_device)
(roletype object_r vold_device)
(type console_device)
(roletype object_r console_device)
(type fscklogs)
(roletype object_r fscklogs)
(type gpu_device)
(roletype object_r gpu_device)
(type graphics_device)
(roletype object_r graphics_device)
(type hw_random_device)
(roletype object_r hw_random_device)
(type input_device)
(roletype object_r input_device)
(type port_device)
(roletype object_r port_device)
(type lowpan_device)
(roletype object_r lowpan_device)
(type mtp_device)
(roletype object_r mtp_device)
(type nfc_device)
(roletype object_r nfc_device)
(type ptmx_device)
(roletype object_r ptmx_device)
(type kmsg_device)
(roletype object_r kmsg_device)
(type kmsg_debug_device)
(roletype object_r kmsg_debug_device)
(type null_device)
(roletype object_r null_device)
(type random_device)
(roletype object_r random_device)
(type secure_element_device)
(roletype object_r secure_element_device)
(type sensors_device)
(roletype object_r sensors_device)
(type serial_device)
(roletype object_r serial_device)
(type socket_device)
(roletype object_r socket_device)
(type owntty_device)
(roletype object_r owntty_device)
(type tty_device)
(roletype object_r tty_device)
(type video_device)
(roletype object_r video_device)
(type zero_device)
(roletype object_r zero_device)
(type fuse_device)
(roletype object_r fuse_device)
(type iio_device)
(roletype object_r iio_device)
(type ion_device)
(roletype object_r ion_device)
(type qtaguid_device)
(roletype object_r qtaguid_device)
(type watchdog_device)
(roletype object_r watchdog_device)
(type uhid_device)
(roletype object_r uhid_device)
(type uio_device)
(roletype object_r uio_device)
(type tun_device)
(roletype object_r tun_device)
(type usbaccessory_device)
(roletype object_r usbaccessory_device)
(type usb_device)
(roletype object_r usb_device)
(type properties_device)
(roletype object_r properties_device)
(type properties_serial)
(roletype object_r properties_serial)
(type property_info)
(roletype object_r property_info)
(type hci_attach_dev)
(roletype object_r hci_attach_dev)
(type rpmsg_device)
(roletype object_r rpmsg_device)
(type root_block_device)
(roletype object_r root_block_device)
(type frp_block_device)
(roletype object_r frp_block_device)
(type system_block_device)
(roletype object_r system_block_device)
(type recovery_block_device)
(roletype object_r recovery_block_device)
(type boot_block_device)
(roletype object_r boot_block_device)
(type userdata_block_device)
(roletype object_r userdata_block_device)
(type cache_block_device)
(roletype object_r cache_block_device)
(type swap_block_device)
(roletype object_r swap_block_device)
(type metadata_block_device)
(roletype object_r metadata_block_device)
(type misc_block_device)
(roletype object_r misc_block_device)
(type super_block_device)
(roletype object_r super_block_device)
(type sdcard_block_device)
(roletype object_r sdcard_block_device)
(type dhcp)
(roletype object_r dhcp)
(type dhcp_exec)
(roletype object_r dhcp_exec)
(type dnsmasq)
(roletype object_r dnsmasq)
(type dnsmasq_exec)
(roletype object_r dnsmasq_exec)
(type drmserver)
(roletype object_r drmserver)
(type drmserver_exec)
(roletype object_r drmserver_exec)
(type drmserver_socket)
(roletype object_r drmserver_socket)
(type dumpstate)
(roletype object_r dumpstate)
(type dumpstate_exec)
(roletype object_r dumpstate_exec)
(type e2fs)
(roletype object_r e2fs)
(type e2fs_exec)
(roletype object_r e2fs_exec)
(type ephemeral_app)
(roletype object_r ephemeral_app)
(type fastbootd)
(roletype object_r fastbootd)
(type labeledfs)
(roletype object_r labeledfs)
(type pipefs)
(roletype object_r pipefs)
(type sockfs)
(roletype object_r sockfs)
(type rootfs)
(roletype object_r rootfs)
(type proc)
(roletype object_r proc)
(type proc_security)
(roletype object_r proc_security)
(type proc_drop_caches)
(roletype object_r proc_drop_caches)
(type proc_overcommit_memory)
(roletype object_r proc_overcommit_memory)
(type proc_min_free_order_shift)
(roletype object_r proc_min_free_order_shift)
(type usermodehelper)
(roletype object_r usermodehelper)
(type sysfs_usermodehelper)
(roletype object_r sysfs_usermodehelper)
(type proc_qtaguid_ctrl)
(roletype object_r proc_qtaguid_ctrl)
(type proc_qtaguid_stat)
(roletype object_r proc_qtaguid_stat)
(type proc_bluetooth_writable)
(roletype object_r proc_bluetooth_writable)
(type proc_abi)
(roletype object_r proc_abi)
(type proc_asound)
(roletype object_r proc_asound)
(type proc_buddyinfo)
(roletype object_r proc_buddyinfo)
(type proc_cmdline)
(roletype object_r proc_cmdline)
(type proc_cpuinfo)
(roletype object_r proc_cpuinfo)
(type proc_dirty)
(roletype object_r proc_dirty)
(type proc_diskstats)
(roletype object_r proc_diskstats)
(type proc_extra_free_kbytes)
(roletype object_r proc_extra_free_kbytes)
(type proc_filesystems)
(roletype object_r proc_filesystems)
(type proc_fs_verity)
(roletype object_r proc_fs_verity)
(type proc_hostname)
(roletype object_r proc_hostname)
(type proc_hung_task)
(roletype object_r proc_hung_task)
(type proc_interrupts)
(roletype object_r proc_interrupts)
(type proc_iomem)
(roletype object_r proc_iomem)
(type proc_keys)
(roletype object_r proc_keys)
(type proc_kmsg)
(roletype object_r proc_kmsg)
(type proc_loadavg)
(roletype object_r proc_loadavg)
(type proc_max_map_count)
(roletype object_r proc_max_map_count)
(type proc_meminfo)
(roletype object_r proc_meminfo)
(type proc_misc)
(roletype object_r proc_misc)
(type proc_modules)
(roletype object_r proc_modules)
(type proc_mounts)
(roletype object_r proc_mounts)
(type proc_net)
(roletype object_r proc_net)
(type proc_net_tcp_udp)
(roletype object_r proc_net_tcp_udp)
(type proc_page_cluster)
(roletype object_r proc_page_cluster)
(type proc_pagetypeinfo)
(roletype object_r proc_pagetypeinfo)
(type proc_panic)
(roletype object_r proc_panic)
(type proc_perf)
(roletype object_r proc_perf)
(type proc_pid_max)
(roletype object_r proc_pid_max)
(type proc_pipe_conf)
(roletype object_r proc_pipe_conf)
(type proc_pressure_cpu)
(roletype object_r proc_pressure_cpu)
(type proc_pressure_io)
(roletype object_r proc_pressure_io)
(type proc_pressure_mem)
(roletype object_r proc_pressure_mem)
(type proc_random)
(roletype object_r proc_random)
(type proc_sched)
(roletype object_r proc_sched)
(type proc_slabinfo)
(roletype object_r proc_slabinfo)
(type proc_stat)
(roletype object_r proc_stat)
(type proc_swaps)
(roletype object_r proc_swaps)
(type proc_sysrq)
(roletype object_r proc_sysrq)
(type proc_timer)
(roletype object_r proc_timer)
(type proc_tty_drivers)
(roletype object_r proc_tty_drivers)
(type proc_uid_cputime_showstat)
(roletype object_r proc_uid_cputime_showstat)
(type proc_uid_cputime_removeuid)
(roletype object_r proc_uid_cputime_removeuid)
(type proc_uid_io_stats)
(roletype object_r proc_uid_io_stats)
(type proc_uid_procstat_set)
(roletype object_r proc_uid_procstat_set)
(type proc_uid_time_in_state)
(roletype object_r proc_uid_time_in_state)
(type proc_uid_concurrent_active_time)
(roletype object_r proc_uid_concurrent_active_time)
(type proc_uid_concurrent_policy_time)
(roletype object_r proc_uid_concurrent_policy_time)
(type proc_uid_cpupower)
(roletype object_r proc_uid_cpupower)
(type proc_uptime)
(roletype object_r proc_uptime)
(type proc_version)
(roletype object_r proc_version)
(type proc_vmallocinfo)
(roletype object_r proc_vmallocinfo)
(type proc_vmstat)
(roletype object_r proc_vmstat)
(type proc_zoneinfo)
(roletype object_r proc_zoneinfo)
(type selinuxfs)
(roletype object_r selinuxfs)
(type cgroup)
(roletype object_r cgroup)
(type cgroup_bpf)
(roletype object_r cgroup_bpf)
(type sysfs)
(roletype object_r sysfs)
(type sysfs_android_usb)
(roletype object_r sysfs_android_usb)
(type sysfs_uio)
(roletype object_r sysfs_uio)
(type sysfs_batteryinfo)
(roletype object_r sysfs_batteryinfo)
(type sysfs_bluetooth_writable)
(roletype object_r sysfs_bluetooth_writable)
(type sysfs_devices_block)
(roletype object_r sysfs_devices_block)
(type sysfs_dm)
(roletype object_r sysfs_dm)
(type sysfs_dt_firmware_android)
(roletype object_r sysfs_dt_firmware_android)
(type sysfs_extcon)
(roletype object_r sysfs_extcon)
(type sysfs_ipv4)
(roletype object_r sysfs_ipv4)
(type sysfs_kernel_notes)
(roletype object_r sysfs_kernel_notes)
(type sysfs_leds)
(roletype object_r sysfs_leds)
(type sysfs_loop)
(roletype object_r sysfs_loop)
(type sysfs_hwrandom)
(roletype object_r sysfs_hwrandom)
(type sysfs_nfc_power_writable)
(roletype object_r sysfs_nfc_power_writable)
(type sysfs_wake_lock)
(roletype object_r sysfs_wake_lock)
(type sysfs_mac_address)
(roletype object_r sysfs_mac_address)
(type sysfs_net)
(roletype object_r sysfs_net)
(type sysfs_power)
(roletype object_r sysfs_power)
(type sysfs_rtc)
(roletype object_r sysfs_rtc)
(type sysfs_switch)
(roletype object_r sysfs_switch)
(type sysfs_transparent_hugepage)
(roletype object_r sysfs_transparent_hugepage)
(type sysfs_usb)
(roletype object_r sysfs_usb)
(type sysfs_wakeup_reasons)
(roletype object_r sysfs_wakeup_reasons)
(type sysfs_fs_ext4_features)
(roletype object_r sysfs_fs_ext4_features)
(type sysfs_fs_f2fs)
(roletype object_r sysfs_fs_f2fs)
(type fs_bpf)
(roletype object_r fs_bpf)
(type configfs)
(roletype object_r configfs)
(type sysfs_devices_system_cpu)
(roletype object_r sysfs_devices_system_cpu)
(type sysfs_lowmemorykiller)
(roletype object_r sysfs_lowmemorykiller)
(type sysfs_wlan_fwpath)
(roletype object_r sysfs_wlan_fwpath)
(type sysfs_vibrator)
(roletype object_r sysfs_vibrator)
(type sysfs_thermal)
(roletype object_r sysfs_thermal)
(type sysfs_zram)
(roletype object_r sysfs_zram)
(type sysfs_zram_uevent)
(roletype object_r sysfs_zram_uevent)
(type inotify)
(roletype object_r inotify)
(type devpts)
(roletype object_r devpts)
(type tmpfs)
(roletype object_r tmpfs)
(type shm)
(roletype object_r shm)
(type mqueue)
(roletype object_r mqueue)
(type fuse)
(roletype object_r fuse)
(type sdcardfs)
(roletype object_r sdcardfs)
(type vfat)
(roletype object_r vfat)
(type exfat)
(roletype object_r exfat)
(type debugfs)
(roletype object_r debugfs)
(type debugfs_mmc)
(roletype object_r debugfs_mmc)
(type debugfs_trace_marker)
(roletype object_r debugfs_trace_marker)
(type debugfs_tracing)
(roletype object_r debugfs_tracing)
(type debugfs_tracing_debug)
(roletype object_r debugfs_tracing_debug)
(type debugfs_tracing_instances)
(roletype object_r debugfs_tracing_instances)
(type debugfs_wakeup_sources)
(roletype object_r debugfs_wakeup_sources)
(type debugfs_wifi_tracing)
(roletype object_r debugfs_wifi_tracing)
(type pstorefs)
(roletype object_r pstorefs)
(type functionfs)
(roletype object_r functionfs)
(type oemfs)
(roletype object_r oemfs)
(type usbfs)
(roletype object_r usbfs)
(type binfmt_miscfs)
(roletype object_r binfmt_miscfs)
(type app_fusefs)
(roletype object_r app_fusefs)
(type unlabeled)
(roletype object_r unlabeled)
(type system_file)
(roletype object_r system_file)
(type system_asan_options_file)
(roletype object_r system_asan_options_file)
(type system_event_log_tags_file)
(roletype object_r system_event_log_tags_file)
(type system_lib_file)
(roletype object_r system_lib_file)
(type system_bootstrap_lib_file)
(roletype object_r system_bootstrap_lib_file)
(type system_linker_exec)
(roletype object_r system_linker_exec)
(type system_linker_config_file)
(roletype object_r system_linker_config_file)
(type system_seccomp_policy_file)
(roletype object_r system_seccomp_policy_file)
(type system_security_cacerts_file)
(roletype object_r system_security_cacerts_file)
(type tcpdump_exec)
(roletype object_r tcpdump_exec)
(type system_zoneinfo_file)
(roletype object_r system_zoneinfo_file)
(type cgroup_desc_file)
(roletype object_r cgroup_desc_file)
(type vendor_cgroup_desc_file)
(roletype object_r vendor_cgroup_desc_file)
(type task_profiles_file)
(roletype object_r task_profiles_file)
(type vendor_task_profiles_file)
(roletype object_r vendor_task_profiles_file)
(type vendor_hal_file)
(roletype object_r vendor_hal_file)
(type vendor_file)
(roletype object_r vendor_file)
(type vendor_app_file)
(roletype object_r vendor_app_file)
(type vendor_configs_file)
(roletype object_r vendor_configs_file)
(type same_process_hal_file)
(roletype object_r same_process_hal_file)
(type vndk_sp_file)
(roletype object_r vndk_sp_file)
(type vendor_framework_file)
(roletype object_r vendor_framework_file)
(type vendor_overlay_file)
(roletype object_r vendor_overlay_file)
(type vendor_public_lib_file)
(roletype object_r vendor_public_lib_file)
(type vendor_keylayout_file)
(roletype object_r vendor_keylayout_file)
(type vendor_keychars_file)
(roletype object_r vendor_keychars_file)
(type vendor_idc_file)
(roletype object_r vendor_idc_file)
(type metadata_file)
(roletype object_r metadata_file)
(type vold_metadata_file)
(roletype object_r vold_metadata_file)
(type gsi_metadata_file)
(roletype object_r gsi_metadata_file)
(type password_slot_metadata_file)
(roletype object_r password_slot_metadata_file)
(type apex_metadata_file)
(roletype object_r apex_metadata_file)
(type dev_cpu_variant)
(roletype object_r dev_cpu_variant)
(type runtime_event_log_tags_file)
(roletype object_r runtime_event_log_tags_file)
(type logcat_exec)
(roletype object_r logcat_exec)
(type cgroup_rc_file)
(roletype object_r cgroup_rc_file)
(type coredump_file)
(roletype object_r coredump_file)
(type system_data_file)
(roletype object_r system_data_file)
(type packages_list_file)
(roletype object_r packages_list_file)
(type vendor_data_file)
(roletype object_r vendor_data_file)
(type unencrypted_data_file)
(roletype object_r unencrypted_data_file)
(type install_data_file)
(roletype object_r install_data_file)
(type drm_data_file)
(roletype object_r drm_data_file)
(type adb_data_file)
(roletype object_r adb_data_file)
(type anr_data_file)
(roletype object_r anr_data_file)
(type tombstone_data_file)
(roletype object_r tombstone_data_file)
(type tombstone_wifi_data_file)
(roletype object_r tombstone_wifi_data_file)
(type apex_data_file)
(roletype object_r apex_data_file)
(type apk_data_file)
(roletype object_r apk_data_file)
(type apk_tmp_file)
(roletype object_r apk_tmp_file)
(type apk_private_data_file)
(roletype object_r apk_private_data_file)
(type apk_private_tmp_file)
(roletype object_r apk_private_tmp_file)
(type dalvikcache_data_file)
(roletype object_r dalvikcache_data_file)
(type ota_data_file)
(roletype object_r ota_data_file)
(type ota_package_file)
(roletype object_r ota_package_file)
(type user_profile_data_file)
(roletype object_r user_profile_data_file)
(type profman_dump_data_file)
(roletype object_r profman_dump_data_file)
(type resourcecache_data_file)
(roletype object_r resourcecache_data_file)
(type shell_data_file)
(roletype object_r shell_data_file)
(type property_data_file)
(roletype object_r property_data_file)
(type bootchart_data_file)
(roletype object_r bootchart_data_file)
(type dropbox_data_file)
(roletype object_r dropbox_data_file)
(type heapdump_data_file)
(roletype object_r heapdump_data_file)
(type nativetest_data_file)
(roletype object_r nativetest_data_file)
(type ringtone_file)
(roletype object_r ringtone_file)
(type preloads_data_file)
(roletype object_r preloads_data_file)
(type preloads_media_file)
(roletype object_r preloads_media_file)
(type dhcp_data_file)
(roletype object_r dhcp_data_file)
(type server_configurable_flags_data_file)
(roletype object_r server_configurable_flags_data_file)
(type staging_data_file)
(roletype object_r staging_data_file)
(type mnt_media_rw_file)
(roletype object_r mnt_media_rw_file)
(type mnt_user_file)
(roletype object_r mnt_user_file)
(type mnt_expand_file)
(roletype object_r mnt_expand_file)
(type storage_file)
(roletype object_r storage_file)
(type mnt_media_rw_stub_file)
(roletype object_r mnt_media_rw_stub_file)
(type storage_stub_file)
(roletype object_r storage_stub_file)
(type mnt_vendor_file)
(roletype object_r mnt_vendor_file)
(type mnt_product_file)
(roletype object_r mnt_product_file)
(type apex_mnt_dir)
(roletype object_r apex_mnt_dir)
(type postinstall_mnt_dir)
(roletype object_r postinstall_mnt_dir)
(type postinstall_file)
(roletype object_r postinstall_file)
(type postinstall_apex_mnt_dir)
(roletype object_r postinstall_apex_mnt_dir)
(type adb_keys_file)
(roletype object_r adb_keys_file)
(type audio_data_file)
(roletype object_r audio_data_file)
(type audioserver_data_file)
(roletype object_r audioserver_data_file)
(type bluetooth_data_file)
(roletype object_r bluetooth_data_file)
(type bluetooth_logs_data_file)
(roletype object_r bluetooth_logs_data_file)
(type bootstat_data_file)
(roletype object_r bootstat_data_file)
(type boottrace_data_file)
(roletype object_r boottrace_data_file)
(type camera_data_file)
(roletype object_r camera_data_file)
(type gatekeeper_data_file)
(roletype object_r gatekeeper_data_file)
(type incident_data_file)
(roletype object_r incident_data_file)
(type keychain_data_file)
(roletype object_r keychain_data_file)
(type keystore_data_file)
(roletype object_r keystore_data_file)
(type media_data_file)
(roletype object_r media_data_file)
(type media_rw_data_file)
(roletype object_r media_rw_data_file)
(type misc_user_data_file)
(roletype object_r misc_user_data_file)
(type net_data_file)
(roletype object_r net_data_file)
(type network_watchlist_data_file)
(roletype object_r network_watchlist_data_file)
(type nfc_data_file)
(roletype object_r nfc_data_file)
(type radio_data_file)
(roletype object_r radio_data_file)
(type recovery_data_file)
(roletype object_r recovery_data_file)
(type shared_relro_file)
(roletype object_r shared_relro_file)
(type stats_data_file)
(roletype object_r stats_data_file)
(type systemkeys_data_file)
(roletype object_r systemkeys_data_file)
(type textclassifier_data_file)
(roletype object_r textclassifier_data_file)
(type trace_data_file)
(roletype object_r trace_data_file)
(type vpn_data_file)
(roletype object_r vpn_data_file)
(type wifi_data_file)
(roletype object_r wifi_data_file)
(type zoneinfo_data_file)
(roletype object_r zoneinfo_data_file)
(type vold_data_file)
(roletype object_r vold_data_file)
(type iorapd_data_file)
(roletype object_r iorapd_data_file)
(type perfprofd_data_file)
(roletype object_r perfprofd_data_file)
(type tee_data_file)
(roletype object_r tee_data_file)
(type update_engine_data_file)
(roletype object_r update_engine_data_file)
(type update_engine_log_data_file)
(roletype object_r update_engine_log_data_file)
(type method_trace_data_file)
(roletype object_r method_trace_data_file)
(type gsi_data_file)
(roletype object_r gsi_data_file)
(type app_data_file)
(roletype object_r app_data_file)
(type privapp_data_file)
(roletype object_r privapp_data_file)
(type system_app_data_file)
(roletype object_r system_app_data_file)
(type cache_file)
(roletype object_r cache_file)
(type overlayfs_file)
(roletype object_r overlayfs_file)
(type cache_backup_file)
(roletype object_r cache_backup_file)
(type cache_private_backup_file)
(roletype object_r cache_private_backup_file)
(type cache_recovery_file)
(roletype object_r cache_recovery_file)
(type efs_file)
(roletype object_r efs_file)
(type wallpaper_file)
(roletype object_r wallpaper_file)
(type shortcut_manager_icons)
(roletype object_r shortcut_manager_icons)
(type icon_file)
(roletype object_r icon_file)
(type asec_apk_file)
(roletype object_r asec_apk_file)
(type asec_public_file)
(roletype object_r asec_public_file)
(type asec_image_file)
(roletype object_r asec_image_file)
(type backup_data_file)
(roletype object_r backup_data_file)
(type bluetooth_efs_file)
(roletype object_r bluetooth_efs_file)
(type fingerprintd_data_file)
(roletype object_r fingerprintd_data_file)
(type fingerprint_vendor_data_file)
(roletype object_r fingerprint_vendor_data_file)
(type app_fuse_file)
(roletype object_r app_fuse_file)
(type face_vendor_data_file)
(roletype object_r face_vendor_data_file)
(type iris_vendor_data_file)
(roletype object_r iris_vendor_data_file)
(type adbd_socket)
(roletype object_r adbd_socket)
(type bluetooth_socket)
(roletype object_r bluetooth_socket)
(type dnsproxyd_socket)
(roletype object_r dnsproxyd_socket)
(type dumpstate_socket)
(roletype object_r dumpstate_socket)
(type fwmarkd_socket)
(roletype object_r fwmarkd_socket)
(type lmkd_socket)
(roletype object_r lmkd_socket)
(type logd_socket)
(roletype object_r logd_socket)
(type logdr_socket)
(roletype object_r logdr_socket)
(type logdw_socket)
(roletype object_r logdw_socket)
(type mdns_socket)
(roletype object_r mdns_socket)
(type mdnsd_socket)
(roletype object_r mdnsd_socket)
(type misc_logd_file)
(roletype object_r misc_logd_file)
(type mtpd_socket)
(roletype object_r mtpd_socket)
(type property_socket)
(roletype object_r property_socket)
(type racoon_socket)
(roletype object_r racoon_socket)
(type recovery_socket)
(roletype object_r recovery_socket)
(type rild_socket)
(roletype object_r rild_socket)
(type rild_debug_socket)
(roletype object_r rild_debug_socket)
(type statsdw_socket)
(roletype object_r statsdw_socket)
(type system_wpa_socket)
(roletype object_r system_wpa_socket)
(type system_ndebug_socket)
(roletype object_r system_ndebug_socket)
(type tombstoned_crash_socket)
(roletype object_r tombstoned_crash_socket)
(type tombstoned_java_trace_socket)
(roletype object_r tombstoned_java_trace_socket)
(type tombstoned_intercept_socket)
(roletype object_r tombstoned_intercept_socket)
(type traced_producer_socket)
(roletype object_r traced_producer_socket)
(type traced_consumer_socket)
(roletype object_r traced_consumer_socket)
(type uncrypt_socket)
(roletype object_r uncrypt_socket)
(type wpa_socket)
(roletype object_r wpa_socket)
(type zygote_socket)
(roletype object_r zygote_socket)
(type heapprofd_socket)
(roletype object_r heapprofd_socket)
(type gps_control)
(roletype object_r gps_control)
(type pdx_display_dir)
(roletype object_r pdx_display_dir)
(type pdx_performance_dir)
(roletype object_r pdx_performance_dir)
(type pdx_bufferhub_dir)
(roletype object_r pdx_bufferhub_dir)
(type pdx_display_client_endpoint_socket)
(roletype object_r pdx_display_client_endpoint_socket)
(type pdx_display_client_channel_socket)
(roletype object_r pdx_display_client_channel_socket)
(type pdx_display_manager_endpoint_socket)
(roletype object_r pdx_display_manager_endpoint_socket)
(type pdx_display_manager_channel_socket)
(roletype object_r pdx_display_manager_channel_socket)
(type pdx_display_screenshot_endpoint_socket)
(roletype object_r pdx_display_screenshot_endpoint_socket)
(type pdx_display_screenshot_channel_socket)
(roletype object_r pdx_display_screenshot_channel_socket)
(type pdx_display_vsync_endpoint_socket)
(roletype object_r pdx_display_vsync_endpoint_socket)
(type pdx_display_vsync_channel_socket)
(roletype object_r pdx_display_vsync_channel_socket)
(type pdx_performance_client_endpoint_socket)
(roletype object_r pdx_performance_client_endpoint_socket)
(type pdx_performance_client_channel_socket)
(roletype object_r pdx_performance_client_channel_socket)
(type pdx_bufferhub_client_endpoint_socket)
(roletype object_r pdx_bufferhub_client_endpoint_socket)
(type pdx_bufferhub_client_channel_socket)
(roletype object_r pdx_bufferhub_client_channel_socket)
(type file_contexts_file)
(roletype object_r file_contexts_file)
(type mac_perms_file)
(roletype object_r mac_perms_file)
(type property_contexts_file)
(roletype object_r property_contexts_file)
(type seapp_contexts_file)
(roletype object_r seapp_contexts_file)
(type sepolicy_file)
(roletype object_r sepolicy_file)
(type service_contexts_file)
(roletype object_r service_contexts_file)
(type nonplat_service_contexts_file)
(roletype object_r nonplat_service_contexts_file)
(type hwservice_contexts_file)
(roletype object_r hwservice_contexts_file)
(type vndservice_contexts_file)
(roletype object_r vndservice_contexts_file)
(type audiohal_data_file)
(roletype object_r audiohal_data_file)
(type fingerprintd)
(roletype object_r fingerprintd)
(type fingerprintd_exec)
(roletype object_r fingerprintd_exec)
(type flags_health_check)
(roletype object_r flags_health_check)
(type flags_health_check_exec)
(roletype object_r flags_health_check_exec)
(type fsck)
(roletype object_r fsck)
(type fsck_exec)
(roletype object_r fsck_exec)
(type fsck_untrusted)
(roletype object_r fsck_untrusted)
(type gatekeeperd)
(roletype object_r gatekeeperd)
(type gatekeeperd_exec)
(roletype object_r gatekeeperd_exec)
(type gpuservice)
(roletype object_r gpuservice)
(type hal_graphics_composer_server_tmpfs)
(roletype object_r hal_graphics_composer_server_tmpfs)
(typeattribute hal_graphics_composer_client_tmpfs)
(expandtypeattribute (hal_graphics_composer_client_tmpfs) true)
(typeattributeset hal_graphics_composer_client_tmpfs (surfaceflinger_tmpfs ))
(type healthd)
(roletype object_r healthd)
(type healthd_exec)
(roletype object_r healthd_exec)
(type heapprofd)
(roletype object_r heapprofd)
(type default_android_hwservice)
(roletype object_r default_android_hwservice)
(type fwk_bufferhub_hwservice)
(roletype object_r fwk_bufferhub_hwservice)
(type fwk_camera_hwservice)
(roletype object_r fwk_camera_hwservice)
(type fwk_display_hwservice)
(roletype object_r fwk_display_hwservice)
(type fwk_scheduler_hwservice)
(roletype object_r fwk_scheduler_hwservice)
(type fwk_sensor_hwservice)
(roletype object_r fwk_sensor_hwservice)
(type fwk_stats_hwservice)
(roletype object_r fwk_stats_hwservice)
(type hal_atrace_hwservice)
(roletype object_r hal_atrace_hwservice)
(type hal_audiocontrol_hwservice)
(roletype object_r hal_audiocontrol_hwservice)
(type hal_audio_hwservice)
(roletype object_r hal_audio_hwservice)
(type hal_authsecret_hwservice)
(roletype object_r hal_authsecret_hwservice)
(type hal_bluetooth_hwservice)
(roletype object_r hal_bluetooth_hwservice)
(type hal_bootctl_hwservice)
(roletype object_r hal_bootctl_hwservice)
(type hal_broadcastradio_hwservice)
(roletype object_r hal_broadcastradio_hwservice)
(type hal_camera_hwservice)
(roletype object_r hal_camera_hwservice)
(type hal_codec2_hwservice)
(roletype object_r hal_codec2_hwservice)
(type hal_configstore_ISurfaceFlingerConfigs)
(roletype object_r hal_configstore_ISurfaceFlingerConfigs)
(type hal_confirmationui_hwservice)
(roletype object_r hal_confirmationui_hwservice)
(type hal_contexthub_hwservice)
(roletype object_r hal_contexthub_hwservice)
(type hal_drm_hwservice)
(roletype object_r hal_drm_hwservice)
(type hal_cas_hwservice)
(roletype object_r hal_cas_hwservice)
(type hal_dumpstate_hwservice)
(roletype object_r hal_dumpstate_hwservice)
(type hal_evs_hwservice)
(roletype object_r hal_evs_hwservice)
(type hal_face_hwservice)
(roletype object_r hal_face_hwservice)
(type hal_fingerprint_hwservice)
(roletype object_r hal_fingerprint_hwservice)
(type hal_gatekeeper_hwservice)
(roletype object_r hal_gatekeeper_hwservice)
(type hal_gnss_hwservice)
(roletype object_r hal_gnss_hwservice)
(type hal_graphics_allocator_hwservice)
(roletype object_r hal_graphics_allocator_hwservice)
(type hal_graphics_composer_hwservice)
(roletype object_r hal_graphics_composer_hwservice)
(type hal_graphics_mapper_hwservice)
(roletype object_r hal_graphics_mapper_hwservice)
(type hal_health_hwservice)
(roletype object_r hal_health_hwservice)
(type hal_health_storage_hwservice)
(roletype object_r hal_health_storage_hwservice)
(type hal_input_classifier_hwservice)
(roletype object_r hal_input_classifier_hwservice)
(type hal_ir_hwservice)
(roletype object_r hal_ir_hwservice)
(type hal_keymaster_hwservice)
(roletype object_r hal_keymaster_hwservice)
(type hal_light_hwservice)
(roletype object_r hal_light_hwservice)
(type hal_lowpan_hwservice)
(roletype object_r hal_lowpan_hwservice)
(type hal_memtrack_hwservice)
(roletype object_r hal_memtrack_hwservice)
(type hal_neuralnetworks_hwservice)
(roletype object_r hal_neuralnetworks_hwservice)
(type hal_nfc_hwservice)
(roletype object_r hal_nfc_hwservice)
(type hal_oemlock_hwservice)
(roletype object_r hal_oemlock_hwservice)
(type hal_omx_hwservice)
(roletype object_r hal_omx_hwservice)
(type hal_power_hwservice)
(roletype object_r hal_power_hwservice)
(type hal_power_stats_hwservice)
(roletype object_r hal_power_stats_hwservice)
(type hal_renderscript_hwservice)
(roletype object_r hal_renderscript_hwservice)
(type hal_secure_element_hwservice)
(roletype object_r hal_secure_element_hwservice)
(type hal_sensors_hwservice)
(roletype object_r hal_sensors_hwservice)
(type hal_telephony_hwservice)
(roletype object_r hal_telephony_hwservice)
(type hal_tetheroffload_hwservice)
(roletype object_r hal_tetheroffload_hwservice)
(type hal_thermal_hwservice)
(roletype object_r hal_thermal_hwservice)
(type hal_tv_cec_hwservice)
(roletype object_r hal_tv_cec_hwservice)
(type hal_tv_input_hwservice)
(roletype object_r hal_tv_input_hwservice)
(type hal_usb_hwservice)
(roletype object_r hal_usb_hwservice)
(type hal_usb_gadget_hwservice)
(roletype object_r hal_usb_gadget_hwservice)
(type hal_vehicle_hwservice)
(roletype object_r hal_vehicle_hwservice)
(type hal_vibrator_hwservice)
(roletype object_r hal_vibrator_hwservice)
(type hal_vr_hwservice)
(roletype object_r hal_vr_hwservice)
(type hal_weaver_hwservice)
(roletype object_r hal_weaver_hwservice)
(type hal_wifi_hwservice)
(roletype object_r hal_wifi_hwservice)
(type hal_wifi_hostapd_hwservice)
(roletype object_r hal_wifi_hostapd_hwservice)
(type hal_wifi_offload_hwservice)
(roletype object_r hal_wifi_offload_hwservice)
(type hal_wifi_supplicant_hwservice)
(roletype object_r hal_wifi_supplicant_hwservice)
(type hidl_allocator_hwservice)
(roletype object_r hidl_allocator_hwservice)
(type hidl_base_hwservice)
(roletype object_r hidl_base_hwservice)
(type hidl_manager_hwservice)
(roletype object_r hidl_manager_hwservice)
(type hidl_memory_hwservice)
(roletype object_r hidl_memory_hwservice)
(type hidl_token_hwservice)
(roletype object_r hidl_token_hwservice)
(type system_net_netd_hwservice)
(roletype object_r system_net_netd_hwservice)
(type system_suspend_hwservice)
(roletype object_r system_suspend_hwservice)
(type system_wifi_keystore_hwservice)
(roletype object_r system_wifi_keystore_hwservice)
(type thermalcallback_hwservice)
(roletype object_r thermalcallback_hwservice)
(type hwservicemanager)
(roletype object_r hwservicemanager)
(type hwservicemanager_exec)
(roletype object_r hwservicemanager_exec)
(type idmap)
(roletype object_r idmap)
(type idmap_exec)
(roletype object_r idmap_exec)
(type incident)
(roletype object_r incident)
(type incident_helper)
(roletype object_r incident_helper)
(type incidentd)
(roletype object_r incidentd)
(type init)
(roletype object_r init)
(type init_exec)
(roletype object_r init_exec)
(type init_tmpfs)
(roletype object_r init_tmpfs)
(type inputflinger)
(roletype object_r inputflinger)
(type inputflinger_exec)
(roletype object_r inputflinger_exec)
(type install_recovery)
(roletype object_r install_recovery)
(type install_recovery_exec)
(roletype object_r install_recovery_exec)
(type installd)
(roletype object_r installd)
(type installd_exec)
(roletype object_r installd_exec)
(type iorapd)
(roletype object_r iorapd)
(type iorapd_exec)
(roletype object_r iorapd_exec)
(type iorapd_tmpfs)
(roletype object_r iorapd_tmpfs)
(type isolated_app)
(roletype object_r isolated_app)
(type kernel)
(roletype object_r kernel)
(type keystore)
(roletype object_r keystore)
(type keystore_exec)
(roletype object_r keystore_exec)
(type llkd)
(roletype object_r llkd)
(type llkd_exec)
(roletype object_r llkd_exec)
(type lmkd)
(roletype object_r lmkd)
(type lmkd_exec)
(roletype object_r lmkd_exec)
(type logd)
(roletype object_r logd)
(type logd_exec)
(roletype object_r logd_exec)
(type logpersist)
(roletype object_r logpersist)
(type mdnsd)
(roletype object_r mdnsd)
(type mediadrmserver)
(roletype object_r mediadrmserver)
(type mediadrmserver_exec)
(roletype object_r mediadrmserver_exec)
(type mediaextractor)
(roletype object_r mediaextractor)
(type mediaextractor_exec)
(roletype object_r mediaextractor_exec)
(type mediaextractor_tmpfs)
(roletype object_r mediaextractor_tmpfs)
(type mediametrics)
(roletype object_r mediametrics)
(type mediametrics_exec)
(roletype object_r mediametrics_exec)
(type mediaprovider)
(roletype object_r mediaprovider)
(type mediaserver)
(roletype object_r mediaserver)
(type mediaserver_exec)
(roletype object_r mediaserver_exec)
(type mediaserver_tmpfs)
(roletype object_r mediaserver_tmpfs)
(type mediaswcodec)
(roletype object_r mediaswcodec)
(type mediaswcodec_exec)
(roletype object_r mediaswcodec_exec)
(type modprobe)
(roletype object_r modprobe)
(type mtp)
(roletype object_r mtp)
(type mtp_exec)
(roletype object_r mtp_exec)
(type node)
(roletype object_r node)
(type netif)
(roletype object_r netif)
(type port)
(roletype object_r port)
(type netd)
(roletype object_r netd)
(type netd_exec)
(roletype object_r netd_exec)
(type netutils_wrapper)
(roletype object_r netutils_wrapper)
(type netutils_wrapper_exec)
(roletype object_r netutils_wrapper_exec)
(type network_stack)
(roletype object_r network_stack)
(type nfc)
(roletype object_r nfc)
(type perfetto)
(roletype object_r perfetto)
(type performanced)
(roletype object_r performanced)
(type performanced_exec)
(roletype object_r performanced_exec)
(type perfprofd)
(roletype object_r perfprofd)
(type perfprofd_exec)
(roletype object_r perfprofd_exec)
(type platform_app)
(roletype object_r platform_app)
(type postinstall)
(roletype object_r postinstall)
(type ppp)
(roletype object_r ppp)
(type ppp_device)
(roletype object_r ppp_device)
(type ppp_exec)
(roletype object_r ppp_exec)
(type priv_app)
(roletype object_r priv_app)
(type profman)
(roletype object_r profman)
(type profman_exec)
(roletype object_r profman_exec)
(type apexd_prop)
(roletype object_r apexd_prop)
(type audio_prop)
(roletype object_r audio_prop)
(type boottime_prop)
(roletype object_r boottime_prop)
(type boottime_public_prop)
(roletype object_r boottime_public_prop)
(type bluetooth_a2dp_offload_prop)
(roletype object_r bluetooth_a2dp_offload_prop)
(type bluetooth_audio_hal_prop)
(roletype object_r bluetooth_audio_hal_prop)
(type bluetooth_prop)
(roletype object_r bluetooth_prop)
(type bpf_progs_loaded_prop)
(roletype object_r bpf_progs_loaded_prop)
(type bootloader_boot_reason_prop)
(roletype object_r bootloader_boot_reason_prop)
(type config_prop)
(roletype object_r config_prop)
(type cppreopt_prop)
(roletype object_r cppreopt_prop)
(type cpu_variant_prop)
(roletype object_r cpu_variant_prop)
(type ctl_adbd_prop)
(roletype object_r ctl_adbd_prop)
(type ctl_bootanim_prop)
(roletype object_r ctl_bootanim_prop)
(type ctl_bugreport_prop)
(roletype object_r ctl_bugreport_prop)
(type ctl_console_prop)
(roletype object_r ctl_console_prop)
(type ctl_default_prop)
(roletype object_r ctl_default_prop)
(type ctl_dumpstate_prop)
(roletype object_r ctl_dumpstate_prop)
(type ctl_fuse_prop)
(roletype object_r ctl_fuse_prop)
(type ctl_gsid_prop)
(roletype object_r ctl_gsid_prop)
(type ctl_interface_restart_prop)
(roletype object_r ctl_interface_restart_prop)
(type ctl_interface_start_prop)
(roletype object_r ctl_interface_start_prop)
(type ctl_interface_stop_prop)
(roletype object_r ctl_interface_stop_prop)
(type ctl_mdnsd_prop)
(roletype object_r ctl_mdnsd_prop)
(type ctl_restart_prop)
(roletype object_r ctl_restart_prop)
(type ctl_rildaemon_prop)
(roletype object_r ctl_rildaemon_prop)
(type ctl_sigstop_prop)
(roletype object_r ctl_sigstop_prop)
(type ctl_start_prop)
(roletype object_r ctl_start_prop)
(type ctl_stop_prop)
(roletype object_r ctl_stop_prop)
(type dalvik_prop)
(roletype object_r dalvik_prop)
(type debuggerd_prop)
(roletype object_r debuggerd_prop)
(type debug_prop)
(roletype object_r debug_prop)
(type default_prop)
(roletype object_r default_prop)
(type device_config_activity_manager_native_boot_prop)
(roletype object_r device_config_activity_manager_native_boot_prop)
(type device_config_boot_count_prop)
(roletype object_r device_config_boot_count_prop)
(type device_config_reset_performed_prop)
(roletype object_r device_config_reset_performed_prop)
(type device_config_input_native_boot_prop)
(roletype object_r device_config_input_native_boot_prop)
(type device_config_netd_native_prop)
(roletype object_r device_config_netd_native_prop)
(type device_config_runtime_native_boot_prop)
(roletype object_r device_config_runtime_native_boot_prop)
(type device_config_runtime_native_prop)
(roletype object_r device_config_runtime_native_prop)
(type device_config_media_native_prop)
(roletype object_r device_config_media_native_prop)
(type device_logging_prop)
(roletype object_r device_logging_prop)
(type dhcp_prop)
(roletype object_r dhcp_prop)
(type dumpstate_options_prop)
(roletype object_r dumpstate_options_prop)
(type dumpstate_prop)
(roletype object_r dumpstate_prop)
(type dynamic_system_prop)
(roletype object_r dynamic_system_prop)
(type exported_secure_prop)
(roletype object_r exported_secure_prop)
(type sota_prop)
(roletype object_r sota_prop)
(type ffs_prop)
(roletype object_r ffs_prop)
(type fingerprint_prop)
(roletype object_r fingerprint_prop)
(type firstboot_prop)
(roletype object_r firstboot_prop)
(type gsid_prop)
(roletype object_r gsid_prop)
(type heapprofd_enabled_prop)
(roletype object_r heapprofd_enabled_prop)
(type heapprofd_prop)
(roletype object_r heapprofd_prop)
(type hwservicemanager_prop)
(roletype object_r hwservicemanager_prop)
(type last_boot_reason_prop)
(roletype object_r last_boot_reason_prop)
(type system_lmk_prop)
(roletype object_r system_lmk_prop)
(type llkd_prop)
(roletype object_r llkd_prop)
(type logd_prop)
(roletype object_r logd_prop)
(type logpersistd_logging_prop)
(roletype object_r logpersistd_logging_prop)
(type log_prop)
(roletype object_r log_prop)
(type log_tag_prop)
(roletype object_r log_tag_prop)
(type lowpan_prop)
(roletype object_r lowpan_prop)
(type lpdumpd_prop)
(roletype object_r lpdumpd_prop)
(type mmc_prop)
(roletype object_r mmc_prop)
(type net_dns_prop)
(roletype object_r net_dns_prop)
(type net_radio_prop)
(roletype object_r net_radio_prop)
(type netd_stable_secret_prop)
(roletype object_r netd_stable_secret_prop)
(type nfc_prop)
(roletype object_r nfc_prop)
(type nnapi_ext_deny_product_prop)
(roletype object_r nnapi_ext_deny_product_prop)
(type overlay_prop)
(roletype object_r overlay_prop)
(type pan_result_prop)
(roletype object_r pan_result_prop)
(type persist_debug_prop)
(roletype object_r persist_debug_prop)
(type persistent_properties_ready_prop)
(roletype object_r persistent_properties_ready_prop)
(type pm_prop)
(roletype object_r pm_prop)
(type powerctl_prop)
(roletype object_r powerctl_prop)
(type radio_prop)
(roletype object_r radio_prop)
(type restorecon_prop)
(roletype object_r restorecon_prop)
(type safemode_prop)
(roletype object_r safemode_prop)
(type serialno_prop)
(roletype object_r serialno_prop)
(type shell_prop)
(roletype object_r shell_prop)
(type system_boot_reason_prop)
(roletype object_r system_boot_reason_prop)
(type system_prop)
(roletype object_r system_prop)
(type system_radio_prop)
(roletype object_r system_radio_prop)
(type system_trace_prop)
(roletype object_r system_trace_prop)
(type test_boot_reason_prop)
(roletype object_r test_boot_reason_prop)
(type test_harness_prop)
(roletype object_r test_harness_prop)
(type theme_prop)
(roletype object_r theme_prop)
(type time_prop)
(roletype object_r time_prop)
(type traced_enabled_prop)
(roletype object_r traced_enabled_prop)
(type traced_lazy_prop)
(roletype object_r traced_lazy_prop)
(type use_memfd_prop)
(roletype object_r use_memfd_prop)
(type vold_prop)
(roletype object_r vold_prop)
(type wifi_log_prop)
(roletype object_r wifi_log_prop)
(type wifi_prop)
(roletype object_r wifi_prop)
(type vendor_security_patch_level_prop)
(roletype object_r vendor_security_patch_level_prop)
(type exported_audio_prop)
(roletype object_r exported_audio_prop)
(type exported_bluetooth_prop)
(roletype object_r exported_bluetooth_prop)
(type exported_config_prop)
(roletype object_r exported_config_prop)
(type exported_dalvik_prop)
(roletype object_r exported_dalvik_prop)
(type exported_default_prop)
(roletype object_r exported_default_prop)
(type exported_dumpstate_prop)
(roletype object_r exported_dumpstate_prop)
(type exported_ffs_prop)
(roletype object_r exported_ffs_prop)
(type exported_fingerprint_prop)
(roletype object_r exported_fingerprint_prop)
(type exported_overlay_prop)
(roletype object_r exported_overlay_prop)
(type exported_pm_prop)
(roletype object_r exported_pm_prop)
(type exported_radio_prop)
(roletype object_r exported_radio_prop)
(type exported_system_prop)
(roletype object_r exported_system_prop)
(type exported_system_radio_prop)
(roletype object_r exported_system_radio_prop)
(type exported_vold_prop)
(roletype object_r exported_vold_prop)
(type exported_wifi_prop)
(roletype object_r exported_wifi_prop)
(type exported2_config_prop)
(roletype object_r exported2_config_prop)
(type exported2_default_prop)
(roletype object_r exported2_default_prop)
(type exported2_radio_prop)
(roletype object_r exported2_radio_prop)
(type exported2_system_prop)
(roletype object_r exported2_system_prop)
(type exported2_vold_prop)
(roletype object_r exported2_vold_prop)
(type exported3_default_prop)
(roletype object_r exported3_default_prop)
(type exported3_radio_prop)
(roletype object_r exported3_radio_prop)
(type exported3_system_prop)
(roletype object_r exported3_system_prop)
(type vendor_default_prop)
(roletype object_r vendor_default_prop)
(type racoon)
(roletype object_r racoon)
(type racoon_exec)
(roletype object_r racoon_exec)
(type radio)
(roletype object_r radio)
(type recovery)
(roletype object_r recovery)
(type recovery_persist)
(roletype object_r recovery_persist)
(type recovery_persist_exec)
(roletype object_r recovery_persist_exec)
(type recovery_refresh)
(roletype object_r recovery_refresh)
(type recovery_refresh_exec)
(roletype object_r recovery_refresh_exec)
(type rs)
(roletype object_r rs)
(type rs_exec)
(roletype object_r rs_exec)
(type rss_hwm_reset)
(roletype object_r rss_hwm_reset)
(type runas)
(roletype object_r runas)
(type runas_exec)
(roletype object_r runas_exec)
(type runas_app)
(roletype object_r runas_app)
(type sdcardd)
(roletype object_r sdcardd)
(type sdcardd_exec)
(roletype object_r sdcardd_exec)
(type secure_element)
(roletype object_r secure_element)
(type apex_service)
(roletype object_r apex_service)
(type audioserver_service)
(roletype object_r audioserver_service)
(type batteryproperties_service)
(roletype object_r batteryproperties_service)
(type bluetooth_service)
(roletype object_r bluetooth_service)
(type cameraserver_service)
(roletype object_r cameraserver_service)
(type default_android_service)
(roletype object_r default_android_service)
(type dnsresolver_service)
(roletype object_r dnsresolver_service)
(type drmserver_service)
(roletype object_r drmserver_service)
(type dumpstate_service)
(roletype object_r dumpstate_service)
(type fingerprintd_service)
(roletype object_r fingerprintd_service)
(type hal_fingerprint_service)
(roletype object_r hal_fingerprint_service)
(type gatekeeper_service)
(roletype object_r gatekeeper_service)
(type gpu_service)
(roletype object_r gpu_service)
(type idmap_service)
(roletype object_r idmap_service)
(type iorapd_service)
(roletype object_r iorapd_service)
(type incident_service)
(roletype object_r incident_service)
(type installd_service)
(roletype object_r installd_service)
(type keystore_service)
(roletype object_r keystore_service)
(type lpdump_service)
(roletype object_r lpdump_service)
(type mediaserver_service)
(roletype object_r mediaserver_service)
(type mediametrics_service)
(roletype object_r mediametrics_service)
(type mediaextractor_service)
(roletype object_r mediaextractor_service)
(type mediacodec_service)
(roletype object_r mediacodec_service)
(type mediadrmserver_service)
(roletype object_r mediadrmserver_service)
(type netd_service)
(roletype object_r netd_service)
(type nfc_service)
(roletype object_r nfc_service)
(type perfprofd_service)
(roletype object_r perfprofd_service)
(type radio_service)
(roletype object_r radio_service)
(type secure_element_service)
(roletype object_r secure_element_service)
(type storaged_service)
(roletype object_r storaged_service)
(type surfaceflinger_service)
(roletype object_r surfaceflinger_service)
(type system_app_service)
(roletype object_r system_app_service)
(type system_suspend_control_service)
(roletype object_r system_suspend_control_service)
(type update_engine_service)
(roletype object_r update_engine_service)
(type virtual_touchpad_service)
(roletype object_r virtual_touchpad_service)
(type vold_service)
(roletype object_r vold_service)
(type vr_hwc_service)
(roletype object_r vr_hwc_service)
(type vrflinger_vsync_service)
(roletype object_r vrflinger_vsync_service)
(type accessibility_service)
(roletype object_r accessibility_service)
(type account_service)
(roletype object_r account_service)
(type activity_service)
(roletype object_r activity_service)
(type activity_task_service)
(roletype object_r activity_task_service)
(type adb_service)
(roletype object_r adb_service)
(type alarm_service)
(roletype object_r alarm_service)
(type app_binding_service)
(roletype object_r app_binding_service)
(type app_prediction_service)
(roletype object_r app_prediction_service)
(type appops_service)
(roletype object_r appops_service)
(type appwidget_service)
(roletype object_r appwidget_service)
(type assetatlas_service)
(roletype object_r assetatlas_service)
(type audio_service)
(roletype object_r audio_service)
(type autofill_service)
(roletype object_r autofill_service)
(type backup_service)
(roletype object_r backup_service)
(type batterystats_service)
(roletype object_r batterystats_service)
(type battery_service)
(roletype object_r battery_service)
(type binder_calls_stats_service)
(roletype object_r binder_calls_stats_service)
(type bluetooth_manager_service)
(roletype object_r bluetooth_manager_service)
(type broadcastradio_service)
(roletype object_r broadcastradio_service)
(type cameraproxy_service)
(roletype object_r cameraproxy_service)
(type clipboard_service)
(roletype object_r clipboard_service)
(type contexthub_service)
(roletype object_r contexthub_service)
(type crossprofileapps_service)
(roletype object_r crossprofileapps_service)
(type IProxyService_service)
(roletype object_r IProxyService_service)
(type companion_device_service)
(roletype object_r companion_device_service)
(type connectivity_service)
(roletype object_r connectivity_service)
(type connmetrics_service)
(roletype object_r connmetrics_service)
(type consumer_ir_service)
(roletype object_r consumer_ir_service)
(type content_capture_service)
(roletype object_r content_capture_service)
(type content_suggestions_service)
(roletype object_r content_suggestions_service)
(type content_service)
(roletype object_r content_service)
(type country_detector_service)
(roletype object_r country_detector_service)
(type coverage_service)
(roletype object_r coverage_service)
(type cpuinfo_service)
(roletype object_r cpuinfo_service)
(type dbinfo_service)
(roletype object_r dbinfo_service)
(type device_config_service)
(roletype object_r device_config_service)
(type device_policy_service)
(roletype object_r device_policy_service)
(type deviceidle_service)
(roletype object_r deviceidle_service)
(type device_identifiers_service)
(roletype object_r device_identifiers_service)
(type devicestoragemonitor_service)
(roletype object_r devicestoragemonitor_service)
(type diskstats_service)
(roletype object_r diskstats_service)
(type display_service)
(roletype object_r display_service)
(type color_display_service)
(roletype object_r color_display_service)
(type external_vibrator_service)
(roletype object_r external_vibrator_service)
(type font_service)
(roletype object_r font_service)
(type netd_listener_service)
(roletype object_r netd_listener_service)
(type network_watchlist_service)
(roletype object_r network_watchlist_service)
(type DockObserver_service)
(roletype object_r DockObserver_service)
(type dreams_service)
(roletype object_r dreams_service)
(type dropbox_service)
(roletype object_r dropbox_service)
(type lowpan_service)
(roletype object_r lowpan_service)
(type ethernet_service)
(roletype object_r ethernet_service)
(type biometric_service)
(roletype object_r biometric_service)
(type bugreport_service)
(roletype object_r bugreport_service)
(type face_service)
(roletype object_r face_service)
(type fingerprint_service)
(roletype object_r fingerprint_service)
(type gfxinfo_service)
(roletype object_r gfxinfo_service)
(type graphicsstats_service)
(roletype object_r graphicsstats_service)
(type hardware_service)
(roletype object_r hardware_service)
(type hardware_properties_service)
(roletype object_r hardware_properties_service)
(type hdmi_control_service)
(roletype object_r hdmi_control_service)
(type imms_service)
(roletype object_r imms_service)
(type input_method_service)
(roletype object_r input_method_service)
(type input_service)
(roletype object_r input_service)
(type ipsec_service)
(roletype object_r ipsec_service)
(type iris_service)
(roletype object_r iris_service)
(type jobscheduler_service)
(roletype object_r jobscheduler_service)
(type launcherapps_service)
(roletype object_r launcherapps_service)
(type location_service)
(roletype object_r location_service)
(type lock_settings_service)
(roletype object_r lock_settings_service)
(type looper_stats_service)
(roletype object_r looper_stats_service)
(type media_projection_service)
(roletype object_r media_projection_service)
(type media_router_service)
(roletype object_r media_router_service)
(type media_session_service)
(roletype object_r media_session_service)
(type meminfo_service)
(roletype object_r meminfo_service)
(type midi_service)
(roletype object_r midi_service)
(type mount_service)
(roletype object_r mount_service)
(type netpolicy_service)
(roletype object_r netpolicy_service)
(type netstats_service)
(roletype object_r netstats_service)
(type network_management_service)
(roletype object_r network_management_service)
(type network_score_service)
(roletype object_r network_score_service)
(type network_stack_service)
(roletype object_r network_stack_service)
(type network_time_update_service)
(roletype object_r network_time_update_service)
(type notification_service)
(roletype object_r notification_service)
(type oem_lock_service)
(roletype object_r oem_lock_service)
(type otadexopt_service)
(roletype object_r otadexopt_service)
(type overlay_service)
(roletype object_r overlay_service)
(type package_service)
(roletype object_r package_service)
(type package_native_service)
(roletype object_r package_native_service)
(type permission_service)
(roletype object_r permission_service)
(type permissionmgr_service)
(roletype object_r permissionmgr_service)
(type persistent_data_block_service)
(roletype object_r persistent_data_block_service)
(type pinner_service)
(roletype object_r pinner_service)
(type power_service)
(roletype object_r power_service)
(type print_service)
(roletype object_r print_service)
(type processinfo_service)
(roletype object_r processinfo_service)
(type procstats_service)
(roletype object_r procstats_service)
(type recovery_service)
(roletype object_r recovery_service)
(type registry_service)
(roletype object_r registry_service)
(type restrictions_service)
(roletype object_r restrictions_service)
(type role_service)
(roletype object_r role_service)
(type rollback_service)
(roletype object_r rollback_service)
(type runtime_service)
(roletype object_r runtime_service)
(type rttmanager_service)
(roletype object_r rttmanager_service)
(type samplingprofiler_service)
(roletype object_r samplingprofiler_service)
(type scheduling_policy_service)
(roletype object_r scheduling_policy_service)
(type search_service)
(roletype object_r search_service)
(type sec_key_att_app_id_provider_service)
(roletype object_r sec_key_att_app_id_provider_service)
(type sensorservice_service)
(roletype object_r sensorservice_service)
(type sensor_privacy_service)
(roletype object_r sensor_privacy_service)
(type serial_service)
(roletype object_r serial_service)
(type servicediscovery_service)
(roletype object_r servicediscovery_service)
(type settings_service)
(roletype object_r settings_service)
(type shortcut_service)
(roletype object_r shortcut_service)
(type slice_service)
(roletype object_r slice_service)
(type statusbar_service)
(roletype object_r statusbar_service)
(type storagestats_service)
(roletype object_r storagestats_service)
(type system_update_service)
(roletype object_r system_update_service)
(type task_service)
(roletype object_r task_service)
(type testharness_service)
(roletype object_r testharness_service)
(type textclassification_service)
(roletype object_r textclassification_service)
(type textservices_service)
(roletype object_r textservices_service)
(type telecom_service)
(roletype object_r telecom_service)
(type thermal_service)
(roletype object_r thermal_service)
(type timedetector_service)
(roletype object_r timedetector_service)
(type timezone_service)
(roletype object_r timezone_service)
(type trust_service)
(roletype object_r trust_service)
(type tv_input_service)
(roletype object_r tv_input_service)
(type uimode_service)
(roletype object_r uimode_service)
(type updatelock_service)
(roletype object_r updatelock_service)
(type uri_grants_service)
(roletype object_r uri_grants_service)
(type usagestats_service)
(roletype object_r usagestats_service)
(type usb_service)
(roletype object_r usb_service)
(type user_service)
(roletype object_r user_service)
(type vibrator_service)
(roletype object_r vibrator_service)
(type voiceinteraction_service)
(roletype object_r voiceinteraction_service)
(type vr_manager_service)
(roletype object_r vr_manager_service)
(type wallpaper_service)
(roletype object_r wallpaper_service)
(type webviewupdate_service)
(roletype object_r webviewupdate_service)
(type wifip2p_service)
(roletype object_r wifip2p_service)
(type wifiscanner_service)
(roletype object_r wifiscanner_service)
(type wifi_service)
(roletype object_r wifi_service)
(type wificond_service)
(roletype object_r wificond_service)
(type wifiaware_service)
(roletype object_r wifiaware_service)
(type window_service)
(roletype object_r window_service)
(type inputflinger_service)
(roletype object_r inputflinger_service)
(type wpantund_service)
(roletype object_r wpantund_service)
(type servicemanager)
(roletype object_r servicemanager)
(type servicemanager_exec)
(roletype object_r servicemanager_exec)
(type sgdisk)
(roletype object_r sgdisk)
(type sgdisk_exec)
(roletype object_r sgdisk_exec)
(type shared_relro)
(roletype object_r shared_relro)
(type shell)
(roletype object_r shell)
(type shell_exec)
(roletype object_r shell_exec)
(type simpleperf_app_runner)
(roletype object_r simpleperf_app_runner)
(type simpleperf_app_runner_exec)
(roletype object_r simpleperf_app_runner_exec)
(type slideshow)
(roletype object_r slideshow)
(type statsd)
(roletype object_r statsd)
(type statsd_exec)
(roletype object_r statsd_exec)
(type su)
(roletype object_r su)
(type su_exec)
(roletype object_r su_exec)
(type surfaceflinger)
(roletype object_r surfaceflinger)
(type surfaceflinger_tmpfs)
(roletype object_r surfaceflinger_tmpfs)
(type system_app)
(roletype object_r system_app)
(type system_server)
(roletype object_r system_server)
(type system_server_tmpfs)
(roletype object_r system_server_tmpfs)
(type tee)
(roletype object_r tee)
(type tee_device)
(roletype object_r tee_device)
(type tombstoned)
(roletype object_r tombstoned)
(type tombstoned_exec)
(roletype object_r tombstoned_exec)
(type toolbox)
(roletype object_r toolbox)
(type toolbox_exec)
(roletype object_r toolbox_exec)
(type traced)
(roletype object_r traced)
(type traced_probes)
(roletype object_r traced_probes)
(type traceur_app)
(roletype object_r traceur_app)
(type tzdatacheck)
(roletype object_r tzdatacheck)
(type tzdatacheck_exec)
(roletype object_r tzdatacheck_exec)
(type ueventd)
(roletype object_r ueventd)
(type ueventd_tmpfs)
(roletype object_r ueventd_tmpfs)
(type uncrypt)
(roletype object_r uncrypt)
(type uncrypt_exec)
(roletype object_r uncrypt_exec)
(type untrusted_app)
(roletype object_r untrusted_app)
(type untrusted_app_27)
(roletype object_r untrusted_app_27)
(type untrusted_app_25)
(roletype object_r untrusted_app_25)
(type update_engine)
(roletype object_r update_engine)
(type update_engine_exec)
(roletype object_r update_engine_exec)
(type update_verifier)
(roletype object_r update_verifier)
(type update_verifier_exec)
(roletype object_r update_verifier_exec)
(type usbd)
(roletype object_r usbd)
(type usbd_exec)
(roletype object_r usbd_exec)
(type vdc)
(roletype object_r vdc)
(type vdc_exec)
(roletype object_r vdc_exec)
(type vendor_init)
(roletype object_r vendor_init)
(type vendor_misc_writer)
(roletype object_r vendor_misc_writer)
(type vendor_misc_writer_exec)
(roletype object_r vendor_misc_writer_exec)
(type vendor_shell)
(roletype object_r vendor_shell)
(type vendor_shell_exec)
(roletype object_r vendor_shell_exec)
(type vendor_toolbox_exec)
(roletype object_r vendor_toolbox_exec)
(type virtual_touchpad)
(roletype object_r virtual_touchpad)
(type virtual_touchpad_exec)
(roletype object_r virtual_touchpad_exec)
(type default_android_vndservice)
(roletype object_r default_android_vndservice)
(type vndservicemanager)
(roletype object_r vndservicemanager)
(type vold)
(roletype object_r vold)
(type vold_exec)
(roletype object_r vold_exec)
(type vold_prepare_subdirs)
(roletype object_r vold_prepare_subdirs)
(type vold_prepare_subdirs_exec)
(roletype object_r vold_prepare_subdirs_exec)
(type vr_hwc)
(roletype object_r vr_hwc)
(type vr_hwc_exec)
(roletype object_r vr_hwc_exec)
(type watchdogd)
(roletype object_r watchdogd)
(type watchdogd_exec)
(roletype object_r watchdogd_exec)
(type webview_zygote)
(roletype object_r webview_zygote)
(type webview_zygote_exec)
(roletype object_r webview_zygote_exec)
(type webview_zygote_tmpfs)
(roletype object_r webview_zygote_tmpfs)
(type wificond)
(roletype object_r wificond)
(type wificond_exec)
(roletype object_r wificond_exec)
(type wpantund)
(roletype object_r wpantund)
(type wpantund_exec)
(roletype object_r wpantund_exec)
(type zygote)
(roletype object_r zygote)
(type zygote_tmpfs)
(roletype object_r zygote_tmpfs)
(type zygote_exec)
(roletype object_r zygote_exec)
(type apex_test_prepostinstall)
(roletype object_r apex_test_prepostinstall)
(type apex_test_prepostinstall_exec)
(roletype object_r apex_test_prepostinstall_exec)
(type art_apex_boot_integrity)
(roletype object_r art_apex_boot_integrity)
(type art_apex_boot_integrity_exec)
(roletype object_r art_apex_boot_integrity_exec)
(type art_apex_postinstall)
(roletype object_r art_apex_postinstall)
(type art_apex_postinstall_exec)
(roletype object_r art_apex_postinstall_exec)
(type art_apex_preinstall)
(roletype object_r art_apex_preinstall)
(type art_apex_preinstall_exec)
(roletype object_r art_apex_preinstall_exec)
(type ashmemd_exec)
(roletype object_r ashmemd_exec)
(type atrace)
(roletype object_r atrace)
(type atrace_exec)
(roletype object_r atrace_exec)
(type audioserver_exec)
(roletype object_r audioserver_exec)
(type auditctl)
(roletype object_r auditctl)
(type auditctl_exec)
(roletype object_r auditctl_exec)
(type blank_screen)
(roletype object_r blank_screen)
(type blank_screen_exec)
(roletype object_r blank_screen_exec)
(type blkid_exec)
(roletype object_r blkid_exec)
(type bpfloader)
(roletype object_r bpfloader)
(type bpfloader_exec)
(roletype object_r bpfloader_exec)
(type cppreopts)
(roletype object_r cppreopts)
(type cppreopts_exec)
(roletype object_r cppreopts_exec)
(type dex2oat)
(roletype object_r dex2oat)
(type dex2oat_exec)
(roletype object_r dex2oat_exec)
(type dexoptanalyzer)
(roletype object_r dexoptanalyzer)
(type dexoptanalyzer_exec)
(roletype object_r dexoptanalyzer_exec)
(type dexoptanalyzer_tmpfs)
(roletype object_r dexoptanalyzer_tmpfs)
(type config_gz)
(roletype object_r config_gz)
(type storaged_data_file)
(roletype object_r storaged_data_file)
(type wm_trace_data_file)
(roletype object_r wm_trace_data_file)
(type perfetto_traces_data_file)
(roletype object_r perfetto_traces_data_file)
(type debugfs_kcov)
(roletype object_r debugfs_kcov)
(type app_exec_data_file)
(roletype object_r app_exec_data_file)
(type rollback_data_file)
(roletype object_r rollback_data_file)
(type fsverity_init)
(roletype object_r fsverity_init)
(type fsverity_init_exec)
(roletype object_r fsverity_init_exec)
(type fwk_bufferhub)
(roletype object_r fwk_bufferhub)
(type fwk_bufferhub_exec)
(roletype object_r fwk_bufferhub_exec)
(type gpuservice_exec)
(roletype object_r gpuservice_exec)
(type gsid)
(roletype object_r gsid)
(type gsid_exec)
(roletype object_r gsid_exec)
(type hal_allocator_default)
(roletype object_r hal_allocator_default)
(type hal_allocator_default_exec)
(roletype object_r hal_allocator_default_exec)
(type heapprofd_exec)
(roletype object_r heapprofd_exec)
(type heapprofd_tmpfs)
(roletype object_r heapprofd_tmpfs)
(type incident_exec)
(roletype object_r incident_exec)
(type incident_helper_exec)
(roletype object_r incident_helper_exec)
(type incidentd_exec)
(roletype object_r incidentd_exec)
(type iw)
(roletype object_r iw)
(type iw_exec)
(roletype object_r iw_exec)
(type lpdumpd)
(roletype object_r lpdumpd)
(type lpdumpd_exec)
(roletype object_r lpdumpd_exec)
(type mdnsd_exec)
(roletype object_r mdnsd_exec)
(type migrate_legacy_obb_data)
(roletype object_r migrate_legacy_obb_data)
(type migrate_legacy_obb_data_exec)
(roletype object_r migrate_legacy_obb_data_exec)
(type notify_traceur)
(roletype object_r notify_traceur)
(type notify_traceur_exec)
(roletype object_r notify_traceur_exec)
(type otapreopt_chroot)
(roletype object_r otapreopt_chroot)
(type otapreopt_chroot_exec)
(roletype object_r otapreopt_chroot_exec)
(type otapreopt_slot)
(roletype object_r otapreopt_slot)
(type otapreopt_slot_exec)
(roletype object_r otapreopt_slot_exec)
(type perfetto_exec)
(roletype object_r perfetto_exec)
(type perfetto_tmpfs)
(roletype object_r perfetto_tmpfs)
(type postinstall_dexopt)
(roletype object_r postinstall_dexopt)
(type preloads_copy)
(roletype object_r preloads_copy)
(type preloads_copy_exec)
(roletype object_r preloads_copy_exec)
(type preopt2cachename)
(roletype object_r preopt2cachename)
(type preopt2cachename_exec)
(roletype object_r preopt2cachename_exec)
(type priv_app_devpts)
(roletype object_r priv_app_devpts)
(type rss_hwm_reset_exec)
(roletype object_r rss_hwm_reset_exec)
(type ashmem_device_service)
(roletype object_r ashmem_device_service)
(type attention_service)
(roletype object_r attention_service)
(type dynamic_system_service)
(roletype object_r dynamic_system_service)
(type gsi_service)
(roletype object_r gsi_service)
(type incidentcompanion_service)
(roletype object_r incidentcompanion_service)
(type stats_service)
(roletype object_r stats_service)
(type statscompanion_service)
(roletype object_r statscompanion_service)
(type stats)
(roletype object_r stats)
(type stats_exec)
(roletype object_r stats_exec)
(type storaged)
(roletype object_r storaged)
(type storaged_exec)
(roletype object_r storaged_exec)
(type surfaceflinger_exec)
(roletype object_r surfaceflinger_exec)
(type system_server_startup)
(roletype object_r system_server_startup)
(type system_server_startup_tmpfs)
(roletype object_r system_server_startup_tmpfs)
(type system_suspend)
(roletype object_r system_suspend)
(type system_suspend_exec)
(roletype object_r system_suspend_exec)
(type traced_exec)
(roletype object_r traced_exec)
(type traced_tmpfs)
(roletype object_r traced_tmpfs)
(type traced_probes_exec)
(roletype object_r traced_probes_exec)
(type untrusted_app_all_devpts)
(roletype object_r untrusted_app_all_devpts)
(type viewcompiler)
(roletype object_r viewcompiler)
(type viewcompiler_exec)
(roletype object_r viewcompiler_exec)
(type viewcompiler_tmpfs)
(roletype object_r viewcompiler_tmpfs)
(type wait_for_keymaster)
(roletype object_r wait_for_keymaster)
(type wait_for_keymaster_exec)
(roletype object_r wait_for_keymaster_exec)
(user u)
(userrole u object_r)
(userrole u r)
(userlevel u (s0 ))
(userrange u ((s0 ) (s0 (range c0 c1023))))
(sensitivity s0)
(sensitivitycategory s0 (c0 c1 c2 c3 c4 c5 c6 c7 c8 c9 c10 c11 c12 c13 c14 c15 c16 c17 c18 c19 c20 c21 c22 c23 c24 c25 c26 c27 c28 c29 c30 c31 c32 c33 c34 c35 c36 c37 c38 c39 c40 c41 c42 c43 c44 c45 c46 c47 c48 c49 c50 c51 c52 c53 c54 c55 c56 c57 c58 c59 c60 c61 c62 c63 c64 c65 c66 c67 c68 c69 c70 c71 c72 c73 c74 c75 c76 c77 c78 c79 c80 c81 c82 c83 c84 c85 c86 c87 c88 c89 c90 c91 c92 c93 c94 c95 c96 c97 c98 c99 c100 c101 c102 c103 c104 c105 c106 c107 c108 c109 c110 c111 c112 c113 c114 c115 c116 c117 c118 c119 c120 c121 c122 c123 c124 c125 c126 c127 c128 c129 c130 c131 c132 c133 c134 c135 c136 c137 c138 c139 c140 c141 c142 c143 c144 c145 c146 c147 c148 c149 c150 c151 c152 c153 c154 c155 c156 c157 c158 c159 c160 c161 c162 c163 c164 c165 c166 c167 c168 c169 c170 c171 c172 c173 c174 c175 c176 c177 c178 c179 c180 c181 c182 c183 c184 c185 c186 c187 c188 c189 c190 c191 c192 c193 c194 c195 c196 c197 c198 c199 c200 c201 c202 c203 c204 c205 c206 c207 c208 c209 c210 c211 c212 c213 c214 c215 c216 c217 c218 c219 c220 c221 c222 c223 c224 c225 c226 c227 c228 c229 c230 c231 c232 c233 c234 c235 c236 c237 c238 c239 c240 c241 c242 c243 c244 c245 c246 c247 c248 c249 c250 c251 c252 c253 c254 c255 c256 c257 c258 c259 c260 c261 c262 c263 c264 c265 c266 c267 c268 c269 c270 c271 c272 c273 c274 c275 c276 c277 c278 c279 c280 c281 c282 c283 c284 c285 c286 c287 c288 c289 c290 c291 c292 c293 c294 c295 c296 c297 c298 c299 c300 c301 c302 c303 c304 c305 c306 c307 c308 c309 c310 c311 c312 c313 c314 c315 c316 c317 c318 c319 c320 c321 c322 c323 c324 c325 c326 c327 c328 c329 c330 c331 c332 c333 c334 c335 c336 c337 c338 c339 c340 c341 c342 c343 c344 c345 c346 c347 c348 c349 c350 c351 c352 c353 c354 c355 c356 c357 c358 c359 c360 c361 c362 c363 c364 c365 c366 c367 c368 c369 c370 c371 c372 c373 c374 c375 c376 c377 c378 c379 c380 c381 c382 c383 c384 c385 c386 c387 c388 c389 c390 c391 c392 c393 c394 c395 c396 c397 c398 c399 c400 c401 c402 c403 c404 c405 c406 c407 c408 c409 c410 c411 c412 c413 c414 c415 c416 c417 c418 c419 c420 c421 c422 c423 c424 c425 c426 c427 c428 c429 c430 c431 c432 c433 c434 c435 c436 c437 c438 c439 c440 c441 c442 c443 c444 c445 c446 c447 c448 c449 c450 c451 c452 c453 c454 c455 c456 c457 c458 c459 c460 c461 c462 c463 c464 c465 c466 c467 c468 c469 c470 c471 c472 c473 c474 c475 c476 c477 c478 c479 c480 c481 c482 c483 c484 c485 c486 c487 c488 c489 c490 c491 c492 c493 c494 c495 c496 c497 c498 c499 c500 c501 c502 c503 c504 c505 c506 c507 c508 c509 c510 c511 c512 c513 c514 c515 c516 c517 c518 c519 c520 c521 c522 c523 c524 c525 c526 c527 c528 c529 c530 c531 c532 c533 c534 c535 c536 c537 c538 c539 c540 c541 c542 c543 c544 c545 c546 c547 c548 c549 c550 c551 c552 c553 c554 c555 c556 c557 c558 c559 c560 c561 c562 c563 c564 c565 c566 c567 c568 c569 c570 c571 c572 c573 c574 c575 c576 c577 c578 c579 c580 c581 c582 c583 c584 c585 c586 c587 c588 c589 c590 c591 c592 c593 c594 c595 c596 c597 c598 c599 c600 c601 c602 c603 c604 c605 c606 c607 c608 c609 c610 c611 c612 c613 c614 c615 c616 c617 c618 c619 c620 c621 c622 c623 c624 c625 c626 c627 c628 c629 c630 c631 c632 c633 c634 c635 c636 c637 c638 c639 c640 c641 c642 c643 c644 c645 c646 c647 c648 c649 c650 c651 c652 c653 c654 c655 c656 c657 c658 c659 c660 c661 c662 c663 c664 c665 c666 c667 c668 c669 c670 c671 c672 c673 c674 c675 c676 c677 c678 c679 c680 c681 c682 c683 c684 c685 c686 c687 c688 c689 c690 c691 c692 c693 c694 c695 c696 c697 c698 c699 c700 c701 c702 c703 c704 c705 c706 c707 c708 c709 c710 c711 c712 c713 c714 c715 c716 c717 c718 c719 c720 c721 c722 c723 c724 c725 c726 c727 c728 c729 c730 c731 c732 c733 c734 c735 c736 c737 c738 c739 c740 c741 c742 c743 c744 c745 c746 c747 c748 c749 c750 c751 c752 c753 c754 c755 c756 c757 c758 c759 c760 c761 c762 c763 c764 c765 c766 c767 c768 c769 c770 c771 c772 c773 c774 c775 c776 c777 c778 c779 c780 c781 c782 c783 c784 c785 c786 c787 c788 c789 c790 c791 c792 c793 c794 c795 c796 c797 c798 c799 c800 c801 c802 c803 c804 c805 c806 c807 c808 c809 c810 c811 c812 c813 c814 c815 c816 c817 c818 c819 c820 c821 c822 c823 c824 c825 c826 c827 c828 c829 c830 c831 c832 c833 c834 c835 c836 c837 c838 c839 c840 c841 c842 c843 c844 c845 c846 c847 c848 c849 c850 c851 c852 c853 c854 c855 c856 c857 c858 c859 c860 c861 c862 c863 c864 c865 c866 c867 c868 c869 c870 c871 c872 c873 c874 c875 c876 c877 c878 c879 c880 c881 c882 c883 c884 c885 c886 c887 c888 c889 c890 c891 c892 c893 c894 c895 c896 c897 c898 c899 c900 c901 c902 c903 c904 c905 c906 c907 c908 c909 c910 c911 c912 c913 c914 c915 c916 c917 c918 c919 c920 c921 c922 c923 c924 c925 c926 c927 c928 c929 c930 c931 c932 c933 c934 c935 c936 c937 c938 c939 c940 c941 c942 c943 c944 c945 c946 c947 c948 c949 c950 c951 c952 c953 c954 c955 c956 c957 c958 c959 c960 c961 c962 c963 c964 c965 c966 c967 c968 c969 c970 c971 c972 c973 c974 c975 c976 c977 c978 c979 c980 c981 c982 c983 c984 c985 c986 c987 c988 c989 c990 c991 c992 c993 c994 c995 c996 c997 c998 c999 c1000 c1001 c1002 c1003 c1004 c1005 c1006 c1007 c1008 c1009 c1010 c1011 c1012 c1013 c1014 c1015 c1016 c1017 c1018 c1019 c1020 c1021 c1022 c1023 ))
(sensitivityorder (s0 ))
(category c0)
(category c1)
(category c2)
(category c3)
(category c4)
(category c5)
(category c6)
(category c7)
(category c8)
(category c9)
(category c10)
(category c11)
(category c12)
(category c13)
(category c14)
(category c15)
(category c16)
(category c17)
(category c18)
(category c19)
(category c20)
(category c21)
(category c22)
(category c23)
(category c24)
(category c25)
(category c26)
(category c27)
(category c28)
(category c29)
(category c30)
(category c31)
(category c32)
(category c33)
(category c34)
(category c35)
(category c36)
(category c37)
(category c38)
(category c39)
(category c40)
(category c41)
(category c42)
(category c43)
(category c44)
(category c45)
(category c46)
(category c47)
(category c48)
(category c49)
(category c50)
(category c51)
(category c52)
(category c53)
(category c54)
(category c55)
(category c56)
(category c57)
(category c58)
(category c59)
(category c60)
(category c61)
(category c62)
(category c63)
(category c64)
(category c65)
(category c66)
(category c67)
(category c68)
(category c69)
(category c70)
(category c71)
(category c72)
(category c73)
(category c74)
(category c75)
(category c76)
(category c77)
(category c78)
(category c79)
(category c80)
(category c81)
(category c82)
(category c83)
(category c84)
(category c85)
(category c86)
(category c87)
(category c88)
(category c89)
(category c90)
(category c91)
(category c92)
(category c93)
(category c94)
(category c95)
(category c96)
(category c97)
(category c98)
(category c99)
(category c100)
(category c101)
(category c102)
(category c103)
(category c104)
(category c105)
(category c106)
(category c107)
(category c108)
(category c109)
(category c110)
(category c111)
(category c112)
(category c113)
(category c114)
(category c115)
(category c116)
(category c117)
(category c118)
(category c119)
(category c120)
(category c121)
(category c122)
(category c123)
(category c124)
(category c125)
(category c126)
(category c127)
(category c128)
(category c129)
(category c130)
(category c131)
(category c132)
(category c133)
(category c134)
(category c135)
(category c136)
(category c137)
(category c138)
(category c139)
(category c140)
(category c141)
(category c142)
(category c143)
(category c144)
(category c145)
(category c146)
(category c147)
(category c148)
(category c149)
(category c150)
(category c151)
(category c152)
(category c153)
(category c154)
(category c155)
(category c156)
(category c157)
(category c158)
(category c159)
(category c160)
(category c161)
(category c162)
(category c163)
(category c164)
(category c165)
(category c166)
(category c167)
(category c168)
(category c169)
(category c170)
(category c171)
(category c172)
(category c173)
(category c174)
(category c175)
(category c176)
(category c177)
(category c178)
(category c179)
(category c180)
(category c181)
(category c182)
(category c183)
(category c184)
(category c185)
(category c186)
(category c187)
(category c188)
(category c189)
(category c190)
(category c191)
(category c192)
(category c193)
(category c194)
(category c195)
(category c196)
(category c197)
(category c198)
(category c199)
(category c200)
(category c201)
(category c202)
(category c203)
(category c204)
(category c205)
(category c206)
(category c207)
(category c208)
(category c209)
(category c210)
(category c211)
(category c212)
(category c213)
(category c214)
(category c215)
(category c216)
(category c217)
(category c218)
(category c219)
(category c220)
(category c221)
(category c222)
(category c223)
(category c224)
(category c225)
(category c226)
(category c227)
(category c228)
(category c229)
(category c230)
(category c231)
(category c232)
(category c233)
(category c234)
(category c235)
(category c236)
(category c237)
(category c238)
(category c239)
(category c240)
(category c241)
(category c242)
(category c243)
(category c244)
(category c245)
(category c246)
(category c247)
(category c248)
(category c249)
(category c250)
(category c251)
(category c252)
(category c253)
(category c254)
(category c255)
(category c256)
(category c257)
(category c258)
(category c259)
(category c260)
(category c261)
(category c262)
(category c263)
(category c264)
(category c265)
(category c266)
(category c267)
(category c268)
(category c269)
(category c270)
(category c271)
(category c272)
(category c273)
(category c274)
(category c275)
(category c276)
(category c277)
(category c278)
(category c279)
(category c280)
(category c281)
(category c282)
(category c283)
(category c284)
(category c285)
(category c286)
(category c287)
(category c288)
(category c289)
(category c290)
(category c291)
(category c292)
(category c293)
(category c294)
(category c295)
(category c296)
(category c297)
(category c298)
(category c299)
(category c300)
(category c301)
(category c302)
(category c303)
(category c304)
(category c305)
(category c306)
(category c307)
(category c308)
(category c309)
(category c310)
(category c311)
(category c312)
(category c313)
(category c314)
(category c315)
(category c316)
(category c317)
(category c318)
(category c319)
(category c320)
(category c321)
(category c322)
(category c323)
(category c324)
(category c325)
(category c326)
(category c327)
(category c328)
(category c329)
(category c330)
(category c331)
(category c332)
(category c333)
(category c334)
(category c335)
(category c336)
(category c337)
(category c338)
(category c339)
(category c340)
(category c341)
(category c342)
(category c343)
(category c344)
(category c345)
(category c346)
(category c347)
(category c348)
(category c349)
(category c350)
(category c351)
(category c352)
(category c353)
(category c354)
(category c355)
(category c356)
(category c357)
(category c358)
(category c359)
(category c360)
(category c361)
(category c362)
(category c363)
(category c364)
(category c365)
(category c366)
(category c367)
(category c368)
(category c369)
(category c370)
(category c371)
(category c372)
(category c373)
(category c374)
(category c375)
(category c376)
(category c377)
(category c378)
(category c379)
(category c380)
(category c381)
(category c382)
(category c383)
(category c384)
(category c385)
(category c386)
(category c387)
(category c388)
(category c389)
(category c390)
(category c391)
(category c392)
(category c393)
(category c394)
(category c395)
(category c396)
(category c397)
(category c398)
(category c399)
(category c400)
(category c401)
(category c402)
(category c403)
(category c404)
(category c405)
(category c406)
(category c407)
(category c408)
(category c409)
(category c410)
(category c411)
(category c412)
(category c413)
(category c414)
(category c415)
(category c416)
(category c417)
(category c418)
(category c419)
(category c420)
(category c421)
(category c422)
(category c423)
(category c424)
(category c425)
(category c426)
(category c427)
(category c428)
(category c429)
(category c430)
(category c431)
(category c432)
(category c433)
(category c434)
(category c435)
(category c436)
(category c437)
(category c438)
(category c439)
(category c440)
(category c441)
(category c442)
(category c443)
(category c444)
(category c445)
(category c446)
(category c447)
(category c448)
(category c449)
(category c450)
(category c451)
(category c452)
(category c453)
(category c454)
(category c455)
(category c456)
(category c457)
(category c458)
(category c459)
(category c460)
(category c461)
(category c462)
(category c463)
(category c464)
(category c465)
(category c466)
(category c467)
(category c468)
(category c469)
(category c470)
(category c471)
(category c472)
(category c473)
(category c474)
(category c475)
(category c476)
(category c477)
(category c478)
(category c479)
(category c480)
(category c481)
(category c482)
(category c483)
(category c484)
(category c485)
(category c486)
(category c487)
(category c488)
(category c489)
(category c490)
(category c491)
(category c492)
(category c493)
(category c494)
(category c495)
(category c496)
(category c497)
(category c498)
(category c499)
(category c500)
(category c501)
(category c502)
(category c503)
(category c504)
(category c505)
(category c506)
(category c507)
(category c508)
(category c509)
(category c510)
(category c511)
(category c512)
(category c513)
(category c514)
(category c515)
(category c516)
(category c517)
(category c518)
(category c519)
(category c520)
(category c521)
(category c522)
(category c523)
(category c524)
(category c525)
(category c526)
(category c527)
(category c528)
(category c529)
(category c530)
(category c531)
(category c532)
(category c533)
(category c534)
(category c535)
(category c536)
(category c537)
(category c538)
(category c539)
(category c540)
(category c541)
(category c542)
(category c543)
(category c544)
(category c545)
(category c546)
(category c547)
(category c548)
(category c549)
(category c550)
(category c551)
(category c552)
(category c553)
(category c554)
(category c555)
(category c556)
(category c557)
(category c558)
(category c559)
(category c560)
(category c561)
(category c562)
(category c563)
(category c564)
(category c565)
(category c566)
(category c567)
(category c568)
(category c569)
(category c570)
(category c571)
(category c572)
(category c573)
(category c574)
(category c575)
(category c576)
(category c577)
(category c578)
(category c579)
(category c580)
(category c581)
(category c582)
(category c583)
(category c584)
(category c585)
(category c586)
(category c587)
(category c588)
(category c589)
(category c590)
(category c591)
(category c592)
(category c593)
(category c594)
(category c595)
(category c596)
(category c597)
(category c598)
(category c599)
(category c600)
(category c601)
(category c602)
(category c603)
(category c604)
(category c605)
(category c606)
(category c607)
(category c608)
(category c609)
(category c610)
(category c611)
(category c612)
(category c613)
(category c614)
(category c615)
(category c616)
(category c617)
(category c618)
(category c619)
(category c620)
(category c621)
(category c622)
(category c623)
(category c624)
(category c625)
(category c626)
(category c627)
(category c628)
(category c629)
(category c630)
(category c631)
(category c632)
(category c633)
(category c634)
(category c635)
(category c636)
(category c637)
(category c638)
(category c639)
(category c640)
(category c641)
(category c642)
(category c643)
(category c644)
(category c645)
(category c646)
(category c647)
(category c648)
(category c649)
(category c650)
(category c651)
(category c652)
(category c653)
(category c654)
(category c655)
(category c656)
(category c657)
(category c658)
(category c659)
(category c660)
(category c661)
(category c662)
(category c663)
(category c664)
(category c665)
(category c666)
(category c667)
(category c668)
(category c669)
(category c670)
(category c671)
(category c672)
(category c673)
(category c674)
(category c675)
(category c676)
(category c677)
(category c678)
(category c679)
(category c680)
(category c681)
(category c682)
(category c683)
(category c684)
(category c685)
(category c686)
(category c687)
(category c688)
(category c689)
(category c690)
(category c691)
(category c692)
(category c693)
(category c694)
(category c695)
(category c696)
(category c697)
(category c698)
(category c699)
(category c700)
(category c701)
(category c702)
(category c703)
(category c704)
(category c705)
(category c706)
(category c707)
(category c708)
(category c709)
(category c710)
(category c711)
(category c712)
(category c713)
(category c714)
(category c715)
(category c716)
(category c717)
(category c718)
(category c719)
(category c720)
(category c721)
(category c722)
(category c723)
(category c724)
(category c725)
(category c726)
(category c727)
(category c728)
(category c729)
(category c730)
(category c731)
(category c732)
(category c733)
(category c734)
(category c735)
(category c736)
(category c737)
(category c738)
(category c739)
(category c740)
(category c741)
(category c742)
(category c743)
(category c744)
(category c745)
(category c746)
(category c747)
(category c748)
(category c749)
(category c750)
(category c751)
(category c752)
(category c753)
(category c754)
(category c755)
(category c756)
(category c757)
(category c758)
(category c759)
(category c760)
(category c761)
(category c762)
(category c763)
(category c764)
(category c765)
(category c766)
(category c767)
(category c768)
(category c769)
(category c770)
(category c771)
(category c772)
(category c773)
(category c774)
(category c775)
(category c776)
(category c777)
(category c778)
(category c779)
(category c780)
(category c781)
(category c782)
(category c783)
(category c784)
(category c785)
(category c786)
(category c787)
(category c788)
(category c789)
(category c790)
(category c791)
(category c792)
(category c793)
(category c794)
(category c795)
(category c796)
(category c797)
(category c798)
(category c799)
(category c800)
(category c801)
(category c802)
(category c803)
(category c804)
(category c805)
(category c806)
(category c807)
(category c808)
(category c809)
(category c810)
(category c811)
(category c812)
(category c813)
(category c814)
(category c815)
(category c816)
(category c817)
(category c818)
(category c819)
(category c820)
(category c821)
(category c822)
(category c823)
(category c824)
(category c825)
(category c826)
(category c827)
(category c828)
(category c829)
(category c830)
(category c831)
(category c832)
(category c833)
(category c834)
(category c835)
(category c836)
(category c837)
(category c838)
(category c839)
(category c840)
(category c841)
(category c842)
(category c843)
(category c844)
(category c845)
(category c846)
(category c847)
(category c848)
(category c849)
(category c850)
(category c851)
(category c852)
(category c853)
(category c854)
(category c855)
(category c856)
(category c857)
(category c858)
(category c859)
(category c860)
(category c861)
(category c862)
(category c863)
(category c864)
(category c865)
(category c866)
(category c867)
(category c868)
(category c869)
(category c870)
(category c871)
(category c872)
(category c873)
(category c874)
(category c875)
(category c876)
(category c877)
(category c878)
(category c879)
(category c880)
(category c881)
(category c882)
(category c883)
(category c884)
(category c885)
(category c886)
(category c887)
(category c888)
(category c889)
(category c890)
(category c891)
(category c892)
(category c893)
(category c894)
(category c895)
(category c896)
(category c897)
(category c898)
(category c899)
(category c900)
(category c901)
(category c902)
(category c903)
(category c904)
(category c905)
(category c906)
(category c907)
(category c908)
(category c909)
(category c910)
(category c911)
(category c912)
(category c913)
(category c914)
(category c915)
(category c916)
(category c917)
(category c918)
(category c919)
(category c920)
(category c921)
(category c922)
(category c923)
(category c924)
(category c925)
(category c926)
(category c927)
(category c928)
(category c929)
(category c930)
(category c931)
(category c932)
(category c933)
(category c934)
(category c935)
(category c936)
(category c937)
(category c938)
(category c939)
(category c940)
(category c941)
(category c942)
(category c943)
(category c944)
(category c945)
(category c946)
(category c947)
(category c948)
(category c949)
(category c950)
(category c951)
(category c952)
(category c953)
(category c954)
(category c955)
(category c956)
(category c957)
(category c958)
(category c959)
(category c960)
(category c961)
(category c962)
(category c963)
(category c964)
(category c965)
(category c966)
(category c967)
(category c968)
(category c969)
(category c970)
(category c971)
(category c972)
(category c973)
(category c974)
(category c975)
(category c976)
(category c977)
(category c978)
(category c979)
(category c980)
(category c981)
(category c982)
(category c983)
(category c984)
(category c985)
(category c986)
(category c987)
(category c988)
(category c989)
(category c990)
(category c991)
(category c992)
(category c993)
(category c994)
(category c995)
(category c996)
(category c997)
(category c998)
(category c999)
(category c1000)
(category c1001)
(category c1002)
(category c1003)
(category c1004)
(category c1005)
(category c1006)
(category c1007)
(category c1008)
(category c1009)
(category c1010)
(category c1011)
(category c1012)
(category c1013)
(category c1014)
(category c1015)
(category c1016)
(category c1017)
(category c1018)
(category c1019)
(category c1020)
(category c1021)
(category c1022)
(category c1023)
(categoryorder (c0 c1 c2 c3 c4 c5 c6 c7 c8 c9 c10 c11 c12 c13 c14 c15 c16 c17 c18 c19 c20 c21 c22 c23 c24 c25 c26 c27 c28 c29 c30 c31 c32 c33 c34 c35 c36 c37 c38 c39 c40 c41 c42 c43 c44 c45 c46 c47 c48 c49 c50 c51 c52 c53 c54 c55 c56 c57 c58 c59 c60 c61 c62 c63 c64 c65 c66 c67 c68 c69 c70 c71 c72 c73 c74 c75 c76 c77 c78 c79 c80 c81 c82 c83 c84 c85 c86 c87 c88 c89 c90 c91 c92 c93 c94 c95 c96 c97 c98 c99 c100 c101 c102 c103 c104 c105 c106 c107 c108 c109 c110 c111 c112 c113 c114 c115 c116 c117 c118 c119 c120 c121 c122 c123 c124 c125 c126 c127 c128 c129 c130 c131 c132 c133 c134 c135 c136 c137 c138 c139 c140 c141 c142 c143 c144 c145 c146 c147 c148 c149 c150 c151 c152 c153 c154 c155 c156 c157 c158 c159 c160 c161 c162 c163 c164 c165 c166 c167 c168 c169 c170 c171 c172 c173 c174 c175 c176 c177 c178 c179 c180 c181 c182 c183 c184 c185 c186 c187 c188 c189 c190 c191 c192 c193 c194 c195 c196 c197 c198 c199 c200 c201 c202 c203 c204 c205 c206 c207 c208 c209 c210 c211 c212 c213 c214 c215 c216 c217 c218 c219 c220 c221 c222 c223 c224 c225 c226 c227 c228 c229 c230 c231 c232 c233 c234 c235 c236 c237 c238 c239 c240 c241 c242 c243 c244 c245 c246 c247 c248 c249 c250 c251 c252 c253 c254 c255 c256 c257 c258 c259 c260 c261 c262 c263 c264 c265 c266 c267 c268 c269 c270 c271 c272 c273 c274 c275 c276 c277 c278 c279 c280 c281 c282 c283 c284 c285 c286 c287 c288 c289 c290 c291 c292 c293 c294 c295 c296 c297 c298 c299 c300 c301 c302 c303 c304 c305 c306 c307 c308 c309 c310 c311 c312 c313 c314 c315 c316 c317 c318 c319 c320 c321 c322 c323 c324 c325 c326 c327 c328 c329 c330 c331 c332 c333 c334 c335 c336 c337 c338 c339 c340 c341 c342 c343 c344 c345 c346 c347 c348 c349 c350 c351 c352 c353 c354 c355 c356 c357 c358 c359 c360 c361 c362 c363 c364 c365 c366 c367 c368 c369 c370 c371 c372 c373 c374 c375 c376 c377 c378 c379 c380 c381 c382 c383 c384 c385 c386 c387 c388 c389 c390 c391 c392 c393 c394 c395 c396 c397 c398 c399 c400 c401 c402 c403 c404 c405 c406 c407 c408 c409 c410 c411 c412 c413 c414 c415 c416 c417 c418 c419 c420 c421 c422 c423 c424 c425 c426 c427 c428 c429 c430 c431 c432 c433 c434 c435 c436 c437 c438 c439 c440 c441 c442 c443 c444 c445 c446 c447 c448 c449 c450 c451 c452 c453 c454 c455 c456 c457 c458 c459 c460 c461 c462 c463 c464 c465 c466 c467 c468 c469 c470 c471 c472 c473 c474 c475 c476 c477 c478 c479 c480 c481 c482 c483 c484 c485 c486 c487 c488 c489 c490 c491 c492 c493 c494 c495 c496 c497 c498 c499 c500 c501 c502 c503 c504 c505 c506 c507 c508 c509 c510 c511 c512 c513 c514 c515 c516 c517 c518 c519 c520 c521 c522 c523 c524 c525 c526 c527 c528 c529 c530 c531 c532 c533 c534 c535 c536 c537 c538 c539 c540 c541 c542 c543 c544 c545 c546 c547 c548 c549 c550 c551 c552 c553 c554 c555 c556 c557 c558 c559 c560 c561 c562 c563 c564 c565 c566 c567 c568 c569 c570 c571 c572 c573 c574 c575 c576 c577 c578 c579 c580 c581 c582 c583 c584 c585 c586 c587 c588 c589 c590 c591 c592 c593 c594 c595 c596 c597 c598 c599 c600 c601 c602 c603 c604 c605 c606 c607 c608 c609 c610 c611 c612 c613 c614 c615 c616 c617 c618 c619 c620 c621 c622 c623 c624 c625 c626 c627 c628 c629 c630 c631 c632 c633 c634 c635 c636 c637 c638 c639 c640 c641 c642 c643 c644 c645 c646 c647 c648 c649 c650 c651 c652 c653 c654 c655 c656 c657 c658 c659 c660 c661 c662 c663 c664 c665 c666 c667 c668 c669 c670 c671 c672 c673 c674 c675 c676 c677 c678 c679 c680 c681 c682 c683 c684 c685 c686 c687 c688 c689 c690 c691 c692 c693 c694 c695 c696 c697 c698 c699 c700 c701 c702 c703 c704 c705 c706 c707 c708 c709 c710 c711 c712 c713 c714 c715 c716 c717 c718 c719 c720 c721 c722 c723 c724 c725 c726 c727 c728 c729 c730 c731 c732 c733 c734 c735 c736 c737 c738 c739 c740 c741 c742 c743 c744 c745 c746 c747 c748 c749 c750 c751 c752 c753 c754 c755 c756 c757 c758 c759 c760 c761 c762 c763 c764 c765 c766 c767 c768 c769 c770 c771 c772 c773 c774 c775 c776 c777 c778 c779 c780 c781 c782 c783 c784 c785 c786 c787 c788 c789 c790 c791 c792 c793 c794 c795 c796 c797 c798 c799 c800 c801 c802 c803 c804 c805 c806 c807 c808 c809 c810 c811 c812 c813 c814 c815 c816 c817 c818 c819 c820 c821 c822 c823 c824 c825 c826 c827 c828 c829 c830 c831 c832 c833 c834 c835 c836 c837 c838 c839 c840 c841 c842 c843 c844 c845 c846 c847 c848 c849 c850 c851 c852 c853 c854 c855 c856 c857 c858 c859 c860 c861 c862 c863 c864 c865 c866 c867 c868 c869 c870 c871 c872 c873 c874 c875 c876 c877 c878 c879 c880 c881 c882 c883 c884 c885 c886 c887 c888 c889 c890 c891 c892 c893 c894 c895 c896 c897 c898 c899 c900 c901 c902 c903 c904 c905 c906 c907 c908 c909 c910 c911 c912 c913 c914 c915 c916 c917 c918 c919 c920 c921 c922 c923 c924 c925 c926 c927 c928 c929 c930 c931 c932 c933 c934 c935 c936 c937 c938 c939 c940 c941 c942 c943 c944 c945 c946 c947 c948 c949 c950 c951 c952 c953 c954 c955 c956 c957 c958 c959 c960 c961 c962 c963 c964 c965 c966 c967 c968 c969 c970 c971 c972 c973 c974 c975 c976 c977 c978 c979 c980 c981 c982 c983 c984 c985 c986 c987 c988 c989 c990 c991 c992 c993 c994 c995 c996 c997 c998 c999 c1000 c1001 c1002 c1003 c1004 c1005 c1006 c1007 c1008 c1009 c1010 c1011 c1012 c1013 c1014 c1015 c1016 c1017 c1018 c1019 c1020 c1021 c1022 c1023 ))
;;* lmx 244 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_1 domain (process (fork)))
;;* lme

;;* lmx 244 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_2 domain (process (fork)))
;;* lme

;;* lmx 244 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_3 domain (process (fork)))
;;* lme

;;* lmx 245 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_4 domain (process (fork)))
;;* lme

;;* lmx 245 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_5 domain (process (fork)))
;;* lme

;;* lmx 245 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_6 domain (process (fork)))
;;* lme

;;* lmx 246 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_7 domain (process (fork)))
;;* lme

;;* lmx 246 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_8 domain (process (fork)))
;;* lme

;;* lmx 246 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_9 domain (process (fork)))
;;* lme

;;* lmx 247 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_10 domain (process (fork)))
;;* lme

;;* lmx 247 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_11 domain (process (fork)))
;;* lme

;;* lmx 247 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_12 domain (process (fork)))
;;* lme

;;* lmx 248 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_13 domain (process (fork)))
;;* lme

;;* lmx 248 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_14 domain (process (fork)))
;;* lme

;;* lmx 248 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_15 domain (process (fork)))
;;* lme

;;* lmx 249 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_16 domain (process (fork)))
;;* lme

;;* lmx 249 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_17 domain (process (fork)))
;;* lme

;;* lmx 249 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_18 domain (process (fork)))
;;* lme

;;* lmx 250 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_19 domain (process (fork)))
;;* lme

;;* lmx 250 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_20 domain (process (fork)))
;;* lme

;;* lmx 250 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_21 domain (process (fork)))
;;* lme

;;* lmx 251 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_22 domain (process (fork)))
;;* lme

;;* lmx 251 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_23 domain (process (fork)))
;;* lme

;;* lmx 251 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_24 domain (process (fork)))
;;* lme

;;* lmx 252 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_25 domain (process (fork)))
;;* lme

;;* lmx 252 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_26 domain (process (fork)))
;;* lme

;;* lmx 252 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_27 domain (process (fork)))
;;* lme

;;* lmx 253 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_28 domain (process (fork)))
;;* lme

;;* lmx 253 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_29 domain (process (fork)))
;;* lme

;;* lmx 253 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_30 domain (process (fork)))
;;* lme

;;* lmx 254 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_31 domain (process (fork)))
;;* lme

;;* lmx 254 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_32 domain (process (fork)))
;;* lme

;;* lmx 254 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_33 domain (process (fork)))
;;* lme

;;* lmx 255 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_34 domain (process (fork)))
;;* lme

;;* lmx 255 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_35 domain (process (fork)))
;;* lme

;;* lmx 255 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_36 domain (process (fork)))
;;* lme

;;* lmx 256 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_37 domain (process (fork)))
;;* lme

;;* lmx 256 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_38 domain (process (fork)))
;;* lme

;;* lmx 256 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_39 domain (process (fork)))
;;* lme

;;* lmx 257 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_40 domain (process (fork)))
;;* lme

;;* lmx 257 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_41 domain (process (fork)))
;;* lme

;;* lmx 257 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_42 domain (process (fork)))
;;* lme

;;* lmx 258 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_43 domain (process (fork)))
;;* lme

;;* lmx 258 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_44 domain (process (fork)))
;;* lme

;;* lmx 258 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_45 domain (process (fork)))
;;* lme

;;* lmx 259 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_46 domain (process (fork)))
;;* lme

;;* lmx 259 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_47 domain (process (fork)))
;;* lme

;;* lmx 259 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_48 domain (process (fork)))
;;* lme

;;* lmx 260 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_49 domain (process (fork)))
;;* lme

;;* lmx 260 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_50 domain (process (fork)))
;;* lme

;;* lmx 260 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_51 domain (process (fork)))
;;* lme

;;* lmx 261 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_52 domain (process (fork)))
;;* lme

;;* lmx 261 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_53 domain (process (fork)))
;;* lme

;;* lmx 261 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_54 domain (process (fork)))
;;* lme

;;* lmx 262 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_55 domain (process (fork)))
;;* lme

;;* lmx 262 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_56 domain (process (fork)))
;;* lme

;;* lmx 262 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_57 domain (process (fork)))
;;* lme

;;* lmx 263 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_58 domain (process (fork)))
;;* lme

;;* lmx 263 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_59 domain (process (fork)))
;;* lme

;;* lmx 263 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_60 domain (process (fork)))
;;* lme

;;* lmx 264 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_61 domain (process (fork)))
;;* lme

;;* lmx 264 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_62 domain (process (fork)))
;;* lme

;;* lmx 264 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_63 domain (process (fork)))
;;* lme

;;* lmx 265 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_64 domain (process (fork)))
;;* lme

;;* lmx 265 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_65 domain (process (fork)))
;;* lme

;;* lmx 265 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_66 domain (process (fork)))
;;* lme

;;* lmx 266 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_67 domain (process (fork)))
;;* lme

;;* lmx 266 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_68 domain (process (fork)))
;;* lme

;;* lmx 266 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_69 domain (process (fork)))
;;* lme

;;* lmx 267 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_70 domain (process (fork)))
;;* lme

;;* lmx 267 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_71 domain (process (fork)))
;;* lme

;;* lmx 267 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_72 domain (process (fork)))
;;* lme

;;* lmx 268 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_73 domain (process (fork)))
;;* lme

;;* lmx 268 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_74 domain (process (fork)))
;;* lme

;;* lmx 268 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_75 domain (process (fork)))
;;* lme

;;* lmx 269 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_76 domain (process (fork)))
;;* lme

;;* lmx 269 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_77 domain (process (fork)))
;;* lme

;;* lmx 269 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_78 domain (process (fork)))
;;* lme

;;* lmx 270 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_79 domain (process (fork)))
;;* lme

;;* lmx 270 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_80 domain (process (fork)))
;;* lme

;;* lmx 270 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_81 domain (process (fork)))
;;* lme

;;* lmx 271 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_82 domain (process (fork)))
;;* lme

;;* lmx 271 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_83 domain (process (fork)))
;;* lme

;;* lmx 271 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_84 domain (process (fork)))
;;* lme

;;* lmx 272 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_85 domain (process (fork)))
;;* lme

;;* lmx 272 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_86 domain (process (fork)))
;;* lme

;;* lmx 272 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_87 domain (process (fork)))
;;* lme

;;* lmx 273 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_88 domain (process (fork)))
;;* lme

;;* lmx 273 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_89 domain (process (fork)))
;;* lme

;;* lmx 273 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_90 domain (process (fork)))
;;* lme

;;* lmx 274 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_91 domain (process (fork)))
;;* lme

;;* lmx 274 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_92 domain (process (fork)))
;;* lme

;;* lmx 274 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_93 domain (process (fork)))
;;* lme

;;* lmx 275 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_94 domain (process (fork)))
;;* lme

;;* lmx 275 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_95 domain (process (fork)))
;;* lme

;;* lmx 275 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_96 domain (process (fork)))
;;* lme

;;* lmx 276 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_97 domain (process (fork)))
;;* lme

;;* lmx 276 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_98 domain (process (fork)))
;;* lme

;;* lmx 276 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_99 domain (process (fork)))
;;* lme

;;* lmx 277 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_100 domain (process (fork)))
;;* lme

;;* lmx 277 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_101 domain (process (fork)))
;;* lme

;;* lmx 277 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_102 domain (process (fork)))
;;* lme

;;* lmx 278 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_103 domain (process (fork)))
;;* lme

;;* lmx 278 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_104 domain (process (fork)))
;;* lme

;;* lmx 278 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_105 domain (process (fork)))
;;* lme

;;* lmx 279 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_106 domain (process (fork)))
;;* lme

;;* lmx 279 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_107 domain (process (fork)))
;;* lme

;;* lmx 279 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_108 domain (process (fork)))
;;* lme

;;* lmx 280 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_109 domain (process (fork)))
;;* lme

;;* lmx 280 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_110 domain (process (fork)))
;;* lme

;;* lmx 280 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_111 domain (process (fork)))
;;* lme

;;* lmx 281 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_112 domain (process (fork)))
;;* lme

;;* lmx 281 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_113 domain (process (fork)))
;;* lme

;;* lmx 281 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_114 domain (process (fork)))
;;* lme

;;* lmx 282 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_115 domain (process (fork)))
;;* lme

;;* lmx 282 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_116 domain (process (fork)))
;;* lme

;;* lmx 282 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_117 domain (process (fork)))
;;* lme

;;* lmx 283 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_118 domain (process (fork)))
;;* lme

;;* lmx 283 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_119 domain (process (fork)))
;;* lme

;;* lmx 283 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_120 domain (process (fork)))
;;* lme

;;* lmx 284 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_121 domain (process (fork)))
;;* lme

;;* lmx 284 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_122 domain (process (fork)))
;;* lme

;;* lmx 284 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_123 domain (process (fork)))
;;* lme

;;* lmx 285 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_124 domain (process (fork)))
;;* lme

;;* lmx 285 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_125 domain (process (fork)))
;;* lme

;;* lmx 285 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_126 domain (process (fork)))
;;* lme

;;* lmx 286 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_127 domain (process (fork)))
;;* lme

;;* lmx 286 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_128 domain (process (fork)))
;;* lme

;;* lmx 286 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_129 domain (process (fork)))
;;* lme

;;* lmx 287 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_130 domain (process (fork)))
;;* lme

;;* lmx 287 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_131 domain (process (fork)))
;;* lme

;;* lmx 287 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_132 domain (process (fork)))
;;* lme

;;* lmx 288 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_133 domain (process (fork)))
;;* lme

;;* lmx 288 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_134 domain (process (fork)))
;;* lme

;;* lmx 288 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_135 domain (process (fork)))
;;* lme

;;* lmx 289 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_136 domain (process (fork)))
;;* lme

;;* lmx 289 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_137 domain (process (fork)))
;;* lme

;;* lmx 289 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_138 domain (process (fork)))
;;* lme

;;* lmx 290 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_139 domain (process (fork)))
;;* lme

;;* lmx 290 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_140 domain (process (fork)))
;;* lme

;;* lmx 290 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_141 domain (process (fork)))
;;* lme

;;* lmx 291 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_142 domain (process (fork)))
;;* lme

;;* lmx 291 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_143 domain (process (fork)))
;;* lme

;;* lmx 291 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_144 domain (process (fork)))
;;* lme

;;* lmx 292 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_145 domain (process (fork)))
;;* lme

;;* lmx 292 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_146 domain (process (fork)))
;;* lme

;;* lmx 292 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_147 domain (process (fork)))
;;* lme

;;* lmx 293 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_148 domain (process (fork)))
;;* lme

;;* lmx 293 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_149 domain (process (fork)))
;;* lme

;;* lmx 293 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_150 domain (process (fork)))
;;* lme

;;* lmx 294 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_151 domain (process (fork)))
;;* lme

;;* lmx 294 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_152 domain (process (fork)))
;;* lme

;;* lmx 294 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_153 domain (process (fork)))
;;* lme

;;* lmx 295 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_154 domain (process (fork)))
;;* lme

;;* lmx 295 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_155 domain (process (fork)))
;;* lme

;;* lmx 295 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_156 domain (process (fork)))
;;* lme

;;* lmx 296 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_157 domain (process (fork)))
;;* lme

;;* lmx 296 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_158 domain (process (fork)))
;;* lme

;;* lmx 296 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_159 domain (process (fork)))
;;* lme

;;* lmx 297 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_160 domain (process (fork)))
;;* lme

;;* lmx 297 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_161 domain (process (fork)))
;;* lme

;;* lmx 297 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_162 domain (process (fork)))
;;* lme

;;* lmx 298 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_163 domain (process (fork)))
;;* lme

;;* lmx 298 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_164 domain (process (fork)))
;;* lme

;;* lmx 298 system/sepolicy/prebuilts/api/29.0/public/attributes

(neverallow base_typeattr_165 domain (process (fork)))
;;* lme

;;* lmx 8 system/sepolicy/prebuilts/api/29.0/public/adbd.te

(neverallow base_typeattr_166 adbd (process (transition)))
;;* lme

;;* lmx 9 system/sepolicy/prebuilts/api/29.0/public/adbd.te

(neverallow base_typeattr_167 adbd (process (dyntransition)))
;;* lme

(allow adbd property_socket (sock_file (write)))
(allow adbd init (unix_stream_socket (connectto)))
(allow adbd ctl_mdnsd_prop (property_service (set)))
(allow adbd ctl_mdnsd_prop (file (read getattr map open)))
(allow apexd servicemanager (binder (call transfer)))
(allow servicemanager apexd (dir (search)))
(allow servicemanager apexd (file (read open)))
(allow servicemanager apexd (process (getattr)))
(allow apexd apex_service (service_manager (add find)))
;;* lmx 6 system/sepolicy/prebuilts/api/29.0/public/apexd.te

(neverallow base_typeattr_168 apex_service (service_manager (add)))
;;* lme

(allow apexd property_socket (sock_file (write)))
(allow apexd init (unix_stream_socket (connectto)))
(allow apexd apexd_prop (property_service (set)))
(allow apexd apexd_prop (file (read getattr map open)))
;;* lmx 9 system/sepolicy/prebuilts/api/29.0/public/apexd.te

(neverallow base_typeattr_169 apex_service (service_manager (find)))
;;* lme

;;* lmx 10 system/sepolicy/prebuilts/api/29.0/public/apexd.te

(neverallow base_typeattr_169 apexd (binder (call)))
;;* lme

;;* lmx 12 system/sepolicy/prebuilts/api/29.0/public/apexd.te

(neverallow domain apexd (process (ptrace)))
;;* lme

;;* lmx 15 system/sepolicy/prebuilts/api/29.0/public/apexd.te

(neverallow base_typeattr_170 apexd_prop (property_service (set)))
;;* lme

(allow appdomain self (process (execmem)))
(allow appdomain ashmem_device (chr_file (execute)))
(allow appdomain zygote (fd (use)))
(allow appdomain zygote_exec (file (ioctl read getattr lock map execute execute_no_trans open)))
(allow appdomain zygote (process (sigchld)))
(allow appdomain dalvikcache_data_file (dir (getattr search)))
(allow appdomain dalvikcache_data_file (file (ioctl read getattr lock map open)))
(allow base_typeattr_171 rootfs (lnk_file (ioctl read getattr lock map open)))
(allow base_typeattr_171 tmpfs (lnk_file (ioctl read getattr lock map open)))
(allow appdomain tmpfs (dir (ioctl read getattr lock search open)))
(allow appdomain zygote (fifo_file (write)))
(allow appdomain shell (process (sigchld)))
(allow appdomain adbd (process (sigchld)))
(allow appdomain devpts (chr_file (ioctl read write getattr)))
(allow appdomain system_server (fd (use)))
(allow appdomain system_server (fifo_file (ioctl read write getattr lock append map open)))
(allow appdomain system_server (unix_stream_socket (read write getattr getopt setopt shutdown)))
(allow appdomain system_server (tcp_socket (read write getattr getopt shutdown)))
(allow appdomain vold (fd (use)))
(allow appdomain appdomain (fifo_file (ioctl read write getattr lock append map open)))
(allow appdomain surfaceflinger (unix_stream_socket (read write getattr getopt setopt shutdown)))
(allow base_typeattr_171 app_data_file (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
(allow base_typeattr_171 privapp_data_file (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
(allow base_typeattr_171 app_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow base_typeattr_171 privapp_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow appdomain mnt_expand_file (dir (ioctl read getattr lock search open)))
(allow appdomain keychain_data_file (dir (ioctl read getattr lock search open)))
(allow appdomain keychain_data_file (file (ioctl read getattr lock map open)))
(allow appdomain keychain_data_file (lnk_file (ioctl read getattr lock map open)))
(allow appdomain misc_user_data_file (dir (ioctl read getattr lock search open)))
(allow appdomain misc_user_data_file (file (ioctl read getattr lock map open)))
(allow base_typeattr_171 textclassifier_data_file (dir (ioctl read getattr lock search open)))
(allow base_typeattr_171 textclassifier_data_file (file (ioctl read getattr lock map open)))
(allow base_typeattr_171 textclassifier_data_file (lnk_file (ioctl read getattr lock map open)))
(allow appdomain oemfs (dir (ioctl read getattr lock search open)))
(allow appdomain oemfs (file (ioctl read getattr lock map execute execute_no_trans open)))
(allow base_typeattr_172 shell_exec (file (ioctl read getattr lock map execute execute_no_trans open)))
(allow base_typeattr_172 toolbox_exec (file (ioctl read getattr lock map execute execute_no_trans open)))
(allow appdomain system_file (file (getattr map execute execute_no_trans)))
(allow appdomain system_file (dir (ioctl read getattr lock search open)))
(allow appdomain system_file (lnk_file (read getattr open)))
(allow base_typeattr_171 vendor_file (dir (read open)))
(allow base_typeattr_172 vendor_app_file (dir (ioctl read getattr lock search open)))
(allow base_typeattr_172 vendor_app_file (file (ioctl read getattr lock map open)))
(allow base_typeattr_172 vendor_app_file (lnk_file (ioctl read getattr lock map open)))
(allow base_typeattr_172 vendor_app_file (file (execute)))
(allow appdomain vendor_overlay_file (dir (ioctl read getattr lock search open)))
(allow appdomain vendor_overlay_file (file (ioctl read getattr lock map open)))
(allow appdomain vendor_overlay_file (lnk_file (ioctl read getattr lock map open)))
(allow appdomain vendor_framework_file (dir (ioctl read getattr lock search open)))
(allow appdomain vendor_framework_file (file (ioctl read getattr lock map open)))
(allow appdomain vendor_framework_file (lnk_file (ioctl read getattr lock map open)))
(allow appdomain vendor_public_lib_file (dir (ioctl read getattr lock search open)))
(allow appdomain vendor_public_lib_file (file (read getattr map execute open)))
(allow appdomain wallpaper_file (file (read write getattr map)))
(allow appdomain ringtone_file (file (read write getattr map)))
(allow appdomain shortcut_manager_icons (file (read getattr map)))
(allow appdomain icon_file (file (read getattr map)))
(allow appdomain anr_data_file (dir (search)))
(allow appdomain anr_data_file (file (append open)))
(allow appdomain tombstoned_java_trace_socket (sock_file (write)))
(allow appdomain tombstoned (unix_stream_socket (connectto)))
(allow appdomain tombstoned (fd (use)))
(allow appdomain dumpstate (fifo_file (append)))
(allow appdomain incidentd (fifo_file (append)))
(allow appdomain dumpstate (fd (use)))
(allow appdomain dumpstate (unix_stream_socket (read write getattr getopt shutdown)))
(allow appdomain dumpstate (fifo_file (write getattr)))
(allow appdomain shell_data_file (file (write getattr)))
(allow appdomain incidentd (fd (use)))
(allow appdomain incidentd (fifo_file (write getattr)))
(allow appdomain statsdw_socket (sock_file (write)))
(allow appdomain statsd (unix_dgram_socket (sendto)))
(allow appdomain user_profile_data_file (dir (write add_name search)))
(allow appdomain user_profile_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow base_typeattr_173 proc_net_type (dir (ioctl read getattr lock search open)))
(allow base_typeattr_173 proc_net_type (file (ioctl read getattr lock map open)))
(allow base_typeattr_173 proc_net_type (lnk_file (ioctl read getattr lock map open)))
(allow base_typeattr_171 gpu_device (chr_file (ioctl read write getattr lock append map open)))
(allow appdomain servicemanager (binder (call transfer)))
(allow servicemanager appdomain (dir (search)))
(allow servicemanager appdomain (file (read open)))
(allow servicemanager appdomain (process (getattr)))
(allow appdomain binderservicedomain (binder (call transfer)))
(allow binderservicedomain appdomain (binder (transfer)))
(allow appdomain binderservicedomain (fd (use)))
(allow appdomain appdomain (binder (call transfer)))
(allow appdomain appdomain (binder (transfer)))
(allow appdomain appdomain (fd (use)))
(allow appdomain ephemeral_app (binder (call transfer)))
(allow ephemeral_app appdomain (binder (transfer)))
(allow appdomain ephemeral_app (fd (use)))
(allow appdomain hal_graphics_composer (fd (use)))
(allow appdomain appdomain (unix_stream_socket (read write getattr getopt shutdown)))
(allow appdomain backup_data_file (file (read write getattr map)))
(allow appdomain cache_backup_file (file (read write getattr map)))
(allow appdomain cache_backup_file (dir (getattr)))
(allow appdomain system_data_file (lnk_file (ioctl read getattr lock map open)))
(allow appdomain system_data_file (file (read getattr map)))
(allow base_typeattr_171 media_rw_data_file (file (read getattr)))
(allow base_typeattr_171 radio_data_file (file (read write getattr)))
(allow base_typeattr_174 storage_file (dir (ioctl read getattr lock search open)))
(allow base_typeattr_174 storage_file (lnk_file (ioctl read getattr lock map open)))
(allow base_typeattr_174 mnt_user_file (dir (ioctl read getattr lock search open)))
(allow base_typeattr_174 mnt_user_file (lnk_file (ioctl read getattr lock map open)))
(allow base_typeattr_174 sdcard_type (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
(allow base_typeattr_174 sdcard_type (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow base_typeattr_174 media_rw_data_file (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
(allow base_typeattr_174 media_rw_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow base_typeattr_174 usb_device (chr_file (ioctl read write getattr)))
(allow base_typeattr_174 usbaccessory_device (chr_file (read write getattr)))
(allow appdomain dalvikcache_data_file (file (execute)))
(allow appdomain dalvikcache_data_file (lnk_file (ioctl read getattr lock map open)))
(allow appdomain shared_relro_file (dir (search)))
(allow appdomain shared_relro_file (file (ioctl read getattr lock map open)))
(allow appdomain apk_data_file (dir (ioctl read getattr lock search open)))
(allow appdomain apk_data_file (file (ioctl read getattr lock map execute execute_no_trans open)))
(allow appdomain resourcecache_data_file (file (ioctl read getattr lock map open)))
(allow appdomain resourcecache_data_file (dir (ioctl read getattr lock search open)))
(allow appdomain logcat_exec (file (ioctl read getattr lock map execute execute_no_trans open)))
(allow appdomain logdr_socket (sock_file (write)))
(allow appdomain logd (unix_stream_socket (connectto)))
(allow base_typeattr_172 logd_socket (sock_file (write)))
(allow base_typeattr_172 logd (unix_stream_socket (connectto)))
(allow appdomain zygote (unix_dgram_socket (write)))
(allow base_typeattr_174 keystore (keystore_key (get_state get insert delete exist list sign verify)))
(allow keystore base_typeattr_174 (dir (search)))
(allow keystore base_typeattr_174 (file (read open)))
(allow keystore base_typeattr_174 (process (getattr)))
(allow base_typeattr_174 keystore_service (service_manager (find)))
(allow base_typeattr_174 keystore (binder (call transfer)))
(allow keystore base_typeattr_174 (binder (transfer)))
(allow base_typeattr_174 keystore (fd (use)))
(allow keystore base_typeattr_174 (binder (call transfer)))
(allow base_typeattr_174 keystore (binder (transfer)))
(allow keystore base_typeattr_174 (fd (use)))
(allow appdomain console_device (chr_file (read write)))
(allowx base_typeattr_175 self (ioctl tcp_socket ((range 0x5401 0x5403) 0x540b (range 0x540e 0x5411) (range 0x5413 0x5414) (range 0x5450 0x5451))))
(allowx base_typeattr_175 self (ioctl udp_socket ((range 0x5401 0x5403) 0x540b (range 0x540e 0x5411) (range 0x5413 0x5414) (range 0x5450 0x5451))))
(allowx base_typeattr_175 self (ioctl rawip_socket ((range 0x5401 0x5403) 0x540b (range 0x540e 0x5411) (range 0x5413 0x5414) (range 0x5450 0x5451))))
(allowx base_typeattr_175 self (ioctl tcp_socket ((range 0x8906 0x8907) 0x8910 (range 0x8912 0x8913) 0x8915 0x8917 0x8919 0x891b 0x8921 0x8933 0x8938 0x8942)))
(allowx base_typeattr_175 self (ioctl udp_socket ((range 0x8906 0x8907) 0x8910 (range 0x8912 0x8913) 0x8915 0x8917 0x8919 0x891b 0x8921 0x8933 0x8938 0x8942)))
(allowx base_typeattr_175 self (ioctl rawip_socket ((range 0x8906 0x8907) 0x8910 (range 0x8912 0x8913) 0x8915 0x8917 0x8919 0x891b 0x8921 0x8933 0x8938 0x8942)))
(allowx base_typeattr_175 self (ioctl tcp_socket (0x8b01 0x8b05 0x8b07 0x8b09 0x8b0b 0x8b0d 0x8b0f (range 0x8b11 0x8b13) 0x8b21 0x8b23 0x8b25 0x8b27 0x8b29 0x8b2d)))
(allowx base_typeattr_175 self (ioctl udp_socket (0x8b01 0x8b05 0x8b07 0x8b09 0x8b0b 0x8b0d 0x8b0f (range 0x8b11 0x8b13) 0x8b21 0x8b23 0x8b25 0x8b27 0x8b29 0x8b2d)))
(allowx base_typeattr_175 self (ioctl rawip_socket (0x8b01 0x8b05 0x8b07 0x8b09 0x8b0b 0x8b0d 0x8b0f (range 0x8b11 0x8b13) 0x8b21 0x8b23 0x8b25 0x8b27 0x8b29 0x8b2d)))
(allow base_typeattr_171 ion_device (chr_file (ioctl read getattr lock map open)))
(allow base_typeattr_171 hal_audio (fd (use)))
(allow base_typeattr_171 hal_camera (fd (use)))
(allow base_typeattr_171 hal_renderscript_hwservice (hwservice_manager (find)))
(allow appdomain same_process_hal_file (file (read getattr map execute open)))
(allow appdomain proc_meminfo (file (ioctl read getattr lock map open)))
(allow appdomain app_fuse_file (file (read write getattr append)))
(allow base_typeattr_174 pdx_display_client_endpoint_dir_type (dir (ioctl read getattr lock search open)))
(allow base_typeattr_174 pdx_display_client_endpoint_socket_type (sock_file (ioctl read write getattr lock append map open)))
(allow base_typeattr_174 pdx_display_client_endpoint_socket_type (unix_stream_socket (read write shutdown connectto)))
(allow base_typeattr_174 pdx_display_client_channel_socket_type (unix_stream_socket (read write getattr setattr lock append getopt setopt shutdown)))
(allow base_typeattr_174 pdx_display_client_server_type (fd (use)))
(allow pdx_display_client_server_type base_typeattr_174 (fd (use)))
(allow base_typeattr_174 pdx_display_manager_endpoint_dir_type (dir (ioctl read getattr lock search open)))
(allow base_typeattr_174 pdx_display_manager_endpoint_socket_type (sock_file (ioctl read write getattr lock append map open)))
(allow base_typeattr_174 pdx_display_manager_endpoint_socket_type (unix_stream_socket (read write shutdown connectto)))
(allow base_typeattr_174 pdx_display_manager_channel_socket_type (unix_stream_socket (read write getattr setattr lock append getopt setopt shutdown)))
(allow base_typeattr_174 pdx_display_manager_server_type (fd (use)))
(allow pdx_display_manager_server_type base_typeattr_174 (fd (use)))
(allow base_typeattr_174 pdx_display_vsync_endpoint_dir_type (dir (ioctl read getattr lock search open)))
(allow base_typeattr_174 pdx_display_vsync_endpoint_socket_type (sock_file (ioctl read write getattr lock append map open)))
(allow base_typeattr_174 pdx_display_vsync_endpoint_socket_type (unix_stream_socket (read write shutdown connectto)))
(allow base_typeattr_174 pdx_display_vsync_channel_socket_type (unix_stream_socket (read write getattr setattr lock append getopt setopt shutdown)))
(allow base_typeattr_174 pdx_display_vsync_server_type (fd (use)))
(allow pdx_display_vsync_server_type base_typeattr_174 (fd (use)))
(allow base_typeattr_174 pdx_performance_client_endpoint_dir_type (dir (ioctl read getattr lock search open)))
(allow base_typeattr_174 pdx_performance_client_endpoint_socket_type (sock_file (ioctl read write getattr lock append map open)))
(allow base_typeattr_174 pdx_performance_client_endpoint_socket_type (unix_stream_socket (read write shutdown connectto)))
(allow base_typeattr_174 pdx_performance_client_channel_socket_type (unix_stream_socket (read write getattr setattr lock append getopt setopt shutdown)))
(allow base_typeattr_174 pdx_performance_client_server_type (fd (use)))
(allow pdx_performance_client_server_type base_typeattr_174 (fd (use)))
(allow base_typeattr_174 pdx_bufferhub_client_channel_socket_type (unix_stream_socket (read write getattr setattr lock append getopt setopt shutdown)))
(allow base_typeattr_174 pdx_bufferhub_client_server_type (fd (use)))
(allow pdx_bufferhub_client_server_type base_typeattr_174 (fd (use)))
(allow appdomain runas_exec (file (getattr)))
(allow base_typeattr_174 tun_device (chr_file (ioctl read write getattr append)))
(allowx base_typeattr_174 tun_device (ioctl chr_file (0x54d2)))
(allow appdomain adbd (unix_stream_socket (connectto)))
(allow appdomain adbd (fd (use)))
(allow appdomain adbd (unix_stream_socket (ioctl read write getattr getopt shutdown)))
(allow appdomain cache_file (dir (getattr)))
(allow appdomain dropbox_data_file (file (read getattr)))
(allow appdomain audioserver_tmpfs (file (read write getattr map)))
(allow appdomain system_server_tmpfs (file (read write getattr map)))
(allow appdomain zygote_tmpfs (file (read map)))
(allow base_typeattr_176 ashmemd (binder (call transfer)))
(allow ashmemd base_typeattr_176 (binder (transfer)))
(allow base_typeattr_176 ashmemd (fd (use)))
;;* lmx 371 system/sepolicy/prebuilts/api/29.0/public/app.te

(neverallow base_typeattr_177 self (capability (chown dac_override dac_read_search fowner fsetid kill setgid setuid setpcap linux_immutable net_bind_service net_broadcast net_admin net_raw ipc_lock ipc_owner sys_module sys_rawio sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_nice sys_resource sys_time sys_tty_config mknod lease audit_write audit_control setfcap)))
(neverallow base_typeattr_177 self (capability2 (mac_override mac_admin syslog wake_alarm block_suspend audit_read)))
(neverallow base_typeattr_177 self (cap_userns (chown dac_override dac_read_search fowner fsetid kill setgid setuid setpcap linux_immutable net_bind_service net_broadcast net_admin net_raw ipc_lock ipc_owner sys_module sys_rawio sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_nice sys_resource sys_time sys_tty_config mknod lease audit_write audit_control setfcap)))
(neverallow base_typeattr_177 self (cap2_userns (mac_override mac_admin syslog wake_alarm block_suspend audit_read)))
;;* lme

;;* lmx 374 system/sepolicy/prebuilts/api/29.0/public/app.te

(neverallow appdomain dev_type (blk_file (read write)))
;;* lme

;;* lmx 384 system/sepolicy/prebuilts/api/29.0/public/app.te

(neverallow appdomain audio_device (chr_file (read write)))
(neverallow appdomain camera_device (chr_file (read write)))
(neverallow appdomain dm_device (chr_file (read write)))
(neverallow appdomain radio_device (chr_file (read write)))
(neverallow appdomain video_device (chr_file (read write)))
(neverallow appdomain rpmsg_device (chr_file (read write)))
;;* lme

;;* lmx 387 system/sepolicy/prebuilts/api/29.0/public/app.te

(neverallow isolated_app graphics_device (chr_file (read write)))
(neverallow shell graphics_device (chr_file (read write)))
(neverallow untrusted_app graphics_device (chr_file (read write)))
;;* lme

;;* lmx 390 system/sepolicy/prebuilts/api/29.0/public/app.te

(neverallow base_typeattr_178 nfc_device (chr_file (read write)))
;;* lme

;;* lmx 392 system/sepolicy/prebuilts/api/29.0/public/app.te

(neverallow base_typeattr_175 hci_attach_dev (chr_file (read write)))
;;* lme

;;* lmx 393 system/sepolicy/prebuilts/api/29.0/public/app.te

(neverallow appdomain tee_device (chr_file (read write)))
;;* lme

;;* lmx 403 system/sepolicy/prebuilts/api/29.0/public/app.te

(neverallow appdomain domain (netlink_tcpdiag_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write)))
(neverallow appdomain domain (netlink_nflog_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow appdomain domain (netlink_xfrm_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write)))
(neverallow appdomain domain (netlink_audit_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write nlmsg_relay nlmsg_readpriv nlmsg_tty_audit)))
(neverallow appdomain domain (netlink_dnrt_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
;;* lme

;;* lmx 408 system/sepolicy/prebuilts/api/29.0/public/app.te

(neverallow appdomain domain (netlink_kobject_uevent_socket (write append)))
;;* lme

;;* lmx 411 system/sepolicy/prebuilts/api/29.0/public/app.te

(neverallow appdomain socket_device (sock_file (write)))
;;* lme

;;* lmx 414 system/sepolicy/prebuilts/api/29.0/public/app.te

(neverallow appdomain adbd_socket (sock_file (write)))
;;* lme

;;* lmx 415 system/sepolicy/prebuilts/api/29.0/public/app.te

(neverallow base_typeattr_179 rild_socket (sock_file (write)))
;;* lme

;;* lmx 418 system/sepolicy/prebuilts/api/29.0/public/app.te

(neverallow appdomain base_typeattr_180 (process (ptrace)))
;;* lme

;;* lmx 432 system/sepolicy/prebuilts/api/29.0/public/app.te

(neverallow base_typeattr_181 appdomain (process (ptrace)))
;;* lme

;;* lmx 436 system/sepolicy/prebuilts/api/29.0/public/app.te

(neverallow appdomain base_typeattr_180 (file (write create setattr relabelfrom append unlink link rename)))
;;* lme

;;* lmx 437 system/sepolicy/prebuilts/api/29.0/public/app.te

(neverallow base_typeattr_182 base_typeattr_180 (file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
;;* lme

;;* lmx 446 system/sepolicy/prebuilts/api/29.0/public/app.te

(neverallow appdomain base_typeattr_183 (process (sigkill sigstop signal)))
;;* lme

;;* lmx 450 system/sepolicy/prebuilts/api/29.0/public/app.te

(neverallow appdomain rootfs (file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain rootfs (dir (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain rootfs (lnk_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain rootfs (chr_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain rootfs (blk_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain rootfs (sock_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain rootfs (fifo_file (write create setattr relabelfrom relabelto append unlink link rename)))
;;* lme

;;* lmx 454 system/sepolicy/prebuilts/api/29.0/public/app.te

(neverallow appdomain system_file (file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain system_file (dir (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain system_file (lnk_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain system_file (chr_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain system_file (blk_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain system_file (sock_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain system_file (fifo_file (write create setattr relabelfrom relabelto append unlink link rename)))
;;* lme

;;* lmx 458 system/sepolicy/prebuilts/api/29.0/public/app.te

(neverallow appdomain exec_type (file (write create setattr relabelfrom relabelto append unlink link rename)))
;;* lme

;;* lmx 465 system/sepolicy/prebuilts/api/29.0/public/app.te

(neverallow appdomain system_data_file (file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain system_data_file (dir (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain system_data_file (lnk_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain system_data_file (chr_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain system_data_file (blk_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain system_data_file (sock_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain system_data_file (fifo_file (write create setattr relabelfrom relabelto append unlink link rename)))
;;* lme

;;* lmx 469 system/sepolicy/prebuilts/api/29.0/public/app.te

(neverallow appdomain drm_data_file (file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain drm_data_file (dir (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain drm_data_file (lnk_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain drm_data_file (chr_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain drm_data_file (blk_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain drm_data_file (sock_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain drm_data_file (fifo_file (write create setattr relabelfrom relabelto append unlink link rename)))
;;* lme

;;* lmx 472 system/sepolicy/prebuilts/api/29.0/public/app.te

(neverallow base_typeattr_184 apk_data_file (file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow base_typeattr_184 apk_data_file (dir (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow base_typeattr_184 apk_data_file (lnk_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow base_typeattr_184 apk_data_file (chr_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow base_typeattr_184 apk_data_file (blk_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow base_typeattr_184 apk_data_file (sock_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow base_typeattr_184 apk_data_file (fifo_file (write create setattr relabelfrom relabelto append unlink link rename)))
;;* lme

;;* lmx 475 system/sepolicy/prebuilts/api/29.0/public/app.te

(neverallow base_typeattr_184 apk_tmp_file (file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow base_typeattr_184 apk_tmp_file (dir (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow base_typeattr_184 apk_tmp_file (lnk_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow base_typeattr_184 apk_tmp_file (chr_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow base_typeattr_184 apk_tmp_file (blk_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow base_typeattr_184 apk_tmp_file (sock_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow base_typeattr_184 apk_tmp_file (fifo_file (write create setattr relabelfrom relabelto append unlink link rename)))
;;* lme

;;* lmx 478 system/sepolicy/prebuilts/api/29.0/public/app.te

(neverallow base_typeattr_184 apk_private_data_file (file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow base_typeattr_184 apk_private_data_file (dir (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow base_typeattr_184 apk_private_data_file (lnk_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow base_typeattr_184 apk_private_data_file (chr_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow base_typeattr_184 apk_private_data_file (blk_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow base_typeattr_184 apk_private_data_file (sock_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow base_typeattr_184 apk_private_data_file (fifo_file (write create setattr relabelfrom relabelto append unlink link rename)))
;;* lme

;;* lmx 481 system/sepolicy/prebuilts/api/29.0/public/app.te

(neverallow base_typeattr_184 apk_private_tmp_file (file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow base_typeattr_184 apk_private_tmp_file (dir (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow base_typeattr_184 apk_private_tmp_file (lnk_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow base_typeattr_184 apk_private_tmp_file (chr_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow base_typeattr_184 apk_private_tmp_file (blk_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow base_typeattr_184 apk_private_tmp_file (sock_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow base_typeattr_184 apk_private_tmp_file (fifo_file (write create setattr relabelfrom relabelto append unlink link rename)))
;;* lme

;;* lmx 484 system/sepolicy/prebuilts/api/29.0/public/app.te

(neverallow base_typeattr_182 shell_data_file (file (create setattr relabelfrom relabelto append unlink link rename)))
(neverallow base_typeattr_182 shell_data_file (dir (create setattr relabelfrom relabelto append unlink link rename)))
(neverallow base_typeattr_182 shell_data_file (lnk_file (create setattr relabelfrom relabelto append unlink link rename)))
(neverallow base_typeattr_182 shell_data_file (chr_file (create setattr relabelfrom relabelto append unlink link rename)))
(neverallow base_typeattr_182 shell_data_file (blk_file (create setattr relabelfrom relabelto append unlink link rename)))
(neverallow base_typeattr_182 shell_data_file (sock_file (create setattr relabelfrom relabelto append unlink link rename)))
(neverallow base_typeattr_182 shell_data_file (fifo_file (create setattr relabelfrom relabelto append unlink link rename)))
;;* lme

;;* lmx 487 system/sepolicy/prebuilts/api/29.0/public/app.te

(neverallow base_typeattr_175 bluetooth_data_file (file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow base_typeattr_175 bluetooth_data_file (dir (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow base_typeattr_175 bluetooth_data_file (lnk_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow base_typeattr_175 bluetooth_data_file (chr_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow base_typeattr_175 bluetooth_data_file (blk_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow base_typeattr_175 bluetooth_data_file (sock_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow base_typeattr_175 bluetooth_data_file (fifo_file (write create setattr relabelfrom relabelto append unlink link rename)))
;;* lme

;;* lmx 490 system/sepolicy/prebuilts/api/29.0/public/app.te

(neverallow appdomain keystore_data_file (file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain keystore_data_file (dir (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain keystore_data_file (lnk_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain keystore_data_file (chr_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain keystore_data_file (blk_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain keystore_data_file (sock_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain keystore_data_file (fifo_file (write create setattr relabelfrom relabelto append unlink link rename)))
;;* lme

;;* lmx 493 system/sepolicy/prebuilts/api/29.0/public/app.te

(neverallow appdomain systemkeys_data_file (file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain systemkeys_data_file (dir (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain systemkeys_data_file (lnk_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain systemkeys_data_file (chr_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain systemkeys_data_file (blk_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain systemkeys_data_file (sock_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain systemkeys_data_file (fifo_file (write create setattr relabelfrom relabelto append unlink link rename)))
;;* lme

;;* lmx 496 system/sepolicy/prebuilts/api/29.0/public/app.te

(neverallow appdomain wifi_data_file (file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain wifi_data_file (dir (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain wifi_data_file (lnk_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain wifi_data_file (chr_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain wifi_data_file (blk_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain wifi_data_file (sock_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain wifi_data_file (fifo_file (write create setattr relabelfrom relabelto append unlink link rename)))
;;* lme

;;* lmx 499 system/sepolicy/prebuilts/api/29.0/public/app.te

(neverallow appdomain dhcp_data_file (file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain dhcp_data_file (dir (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain dhcp_data_file (lnk_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain dhcp_data_file (chr_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain dhcp_data_file (blk_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain dhcp_data_file (sock_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain dhcp_data_file (fifo_file (write create setattr relabelfrom relabelto append unlink link rename)))
;;* lme

;;* lmx 503 system/sepolicy/prebuilts/api/29.0/public/app.te

(neverallow base_typeattr_185 apk_tmp_file (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod open audit_access)))
(neverallow base_typeattr_185 apk_tmp_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton add_name remove_name reparent search rmdir open audit_access execmod)))
(neverallow base_typeattr_185 apk_tmp_file (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton open audit_access execmod)))
(neverallow base_typeattr_185 apk_tmp_file (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod open audit_access)))
(neverallow base_typeattr_185 apk_tmp_file (blk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton open audit_access execmod)))
(neverallow base_typeattr_185 apk_tmp_file (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton open audit_access execmod)))
(neverallow base_typeattr_185 apk_tmp_file (fifo_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton open audit_access execmod)))
(neverallow base_typeattr_185 apk_private_tmp_file (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod open audit_access)))
(neverallow base_typeattr_185 apk_private_tmp_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton add_name remove_name reparent search rmdir open audit_access execmod)))
(neverallow base_typeattr_185 apk_private_tmp_file (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton open audit_access execmod)))
(neverallow base_typeattr_185 apk_private_tmp_file (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod open audit_access)))
(neverallow base_typeattr_185 apk_private_tmp_file (blk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton open audit_access execmod)))
(neverallow base_typeattr_185 apk_private_tmp_file (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton open audit_access execmod)))
(neverallow base_typeattr_185 apk_private_tmp_file (fifo_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton open audit_access execmod)))
;;* lme

;;* lmx 505 system/sepolicy/prebuilts/api/29.0/public/app.te

(neverallow untrusted_app_all apk_tmp_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton add_name remove_name reparent search rmdir open audit_access execmod)))
(neverallow untrusted_app_all apk_tmp_file (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton open audit_access execmod)))
(neverallow untrusted_app_all apk_tmp_file (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod open audit_access)))
(neverallow untrusted_app_all apk_tmp_file (blk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton open audit_access execmod)))
(neverallow untrusted_app_all apk_tmp_file (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton open audit_access execmod)))
(neverallow untrusted_app_all apk_tmp_file (fifo_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton open audit_access execmod)))
(neverallow untrusted_app_all apk_private_tmp_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton add_name remove_name reparent search rmdir open audit_access execmod)))
(neverallow untrusted_app_all apk_private_tmp_file (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton open audit_access execmod)))
(neverallow untrusted_app_all apk_private_tmp_file (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod open audit_access)))
(neverallow untrusted_app_all apk_private_tmp_file (blk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton open audit_access execmod)))
(neverallow untrusted_app_all apk_private_tmp_file (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton open audit_access execmod)))
(neverallow untrusted_app_all apk_private_tmp_file (fifo_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton open audit_access execmod)))
;;* lme

;;* lmx 506 system/sepolicy/prebuilts/api/29.0/public/app.te

(neverallow untrusted_app_all apk_tmp_file (file (ioctl write create setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod open audit_access)))
(neverallow untrusted_app_all apk_private_tmp_file (file (ioctl write create setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod open audit_access)))
;;* lme

;;* lmx 509 system/sepolicy/prebuilts/api/29.0/public/app.te

(neverallow appdomain efs_file (file (write)))
(neverallow appdomain efs_file (dir (write)))
(neverallow appdomain efs_file (lnk_file (write)))
(neverallow appdomain efs_file (chr_file (write)))
(neverallow appdomain efs_file (blk_file (write)))
(neverallow appdomain efs_file (sock_file (write)))
(neverallow appdomain efs_file (fifo_file (write)))
;;* lme

;;* lmx 510 system/sepolicy/prebuilts/api/29.0/public/app.te

(neverallow base_typeattr_182 efs_file (file (read)))
(neverallow base_typeattr_182 efs_file (dir (read)))
(neverallow base_typeattr_182 efs_file (lnk_file (read)))
(neverallow base_typeattr_182 efs_file (chr_file (read)))
(neverallow base_typeattr_182 efs_file (blk_file (read)))
(neverallow base_typeattr_182 efs_file (sock_file (read)))
(neverallow base_typeattr_182 efs_file (fifo_file (read)))
;;* lme

;;* lmx 514 system/sepolicy/prebuilts/api/29.0/public/app.te

(neverallow base_typeattr_186 sysfs (file (write)))
(neverallow base_typeattr_186 sysfs (dir (write)))
(neverallow base_typeattr_186 sysfs (lnk_file (write)))
(neverallow base_typeattr_186 sysfs (chr_file (write)))
(neverallow base_typeattr_186 sysfs (blk_file (write)))
(neverallow base_typeattr_186 sysfs (sock_file (write)))
(neverallow base_typeattr_186 sysfs (fifo_file (write)))
;;* lme

;;* lmx 516 system/sepolicy/prebuilts/api/29.0/public/app.te

(neverallow appdomain proc (file (write)))
(neverallow appdomain proc (dir (write)))
(neverallow appdomain proc (lnk_file (write)))
(neverallow appdomain proc (chr_file (write)))
(neverallow appdomain proc (blk_file (write)))
(neverallow appdomain proc (sock_file (write)))
(neverallow appdomain proc (fifo_file (write)))
;;* lme

;;* lmx 519 system/sepolicy/prebuilts/api/29.0/public/app.te

(neverallow appdomain kernel (system (syslog_read syslog_mod syslog_console)))
;;* lme

;;* lmx 522 system/sepolicy/prebuilts/api/29.0/public/app.te

(neverallow base_typeattr_182 base_typeattr_167 (security (compute_av check_context)))
;;* lme

;;* lmx 523 system/sepolicy/prebuilts/api/29.0/public/app.te

(neverallow base_typeattr_182 base_typeattr_167 (netlink_selinux_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
;;* lme

;;* lmx 527 system/sepolicy/prebuilts/api/29.0/public/app.te

(neverallow appdomain fs_type (filesystem (mount remount unmount relabelfrom relabelto associate quotamod quotaget)))
;;* lme

;;* lmx 538 system/sepolicy/prebuilts/api/29.0/public/app.te

(neverallow appdomain dev_type (lnk_file (write create setattr relabelfrom append unlink link rename)))
(neverallow appdomain rootfs (lnk_file (write create setattr relabelfrom append unlink link rename)))
(neverallow appdomain tmpfs (lnk_file (write create setattr relabelfrom append unlink link rename)))
(neverallow appdomain system_file (lnk_file (write create setattr relabelfrom append unlink link rename)))
(neverallow appdomain apk_data_file (lnk_file (write create setattr relabelfrom append unlink link rename)))
(neverallow appdomain cache_file (lnk_file (write create setattr relabelfrom append unlink link rename)))
(neverallow appdomain cache_recovery_file (lnk_file (write create setattr relabelfrom append unlink link rename)))
;;* lme

;;* lmx 553 system/sepolicy/prebuilts/api/29.0/public/app.te

(neverallow bluetooth base_typeattr_187 (file (execute execute_no_trans)))
(neverallow isolated_app base_typeattr_187 (file (execute execute_no_trans)))
(neverallow nfc base_typeattr_187 (file (execute execute_no_trans)))
(neverallow radio base_typeattr_187 (file (execute execute_no_trans)))
(neverallow shared_relro base_typeattr_187 (file (execute execute_no_trans)))
(neverallow system_app base_typeattr_187 (file (execute execute_no_trans)))
;;* lme

;;* lmx 559 system/sepolicy/prebuilts/api/29.0/public/app.te

(neverallow base_typeattr_182 input_device (chr_file (ioctl read write create setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod open audit_access)))
;;* lme

;;* lmx 567 system/sepolicy/prebuilts/api/29.0/public/app.te

(neverallow base_typeattr_188 bluetooth_a2dp_offload_prop (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(neverallow base_typeattr_188 bluetooth_audio_hal_prop (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(neverallow base_typeattr_188 bluetooth_prop (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(neverallow base_typeattr_188 exported_bluetooth_prop (file (ioctl read write create getattr setattr lock append map unlink rename open)))
;;* lme

;;* lmx 570 system/sepolicy/prebuilts/api/29.0/public/app.te

(neverallow appdomain proc_uid_time_in_state (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod open audit_access)))
;;* lme

;;* lmx 573 system/sepolicy/prebuilts/api/29.0/public/app.te

(neverallow appdomain proc_uid_concurrent_active_time (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod open audit_access)))
;;* lme

;;* lmx 576 system/sepolicy/prebuilts/api/29.0/public/app.te

(neverallow appdomain proc_uid_concurrent_policy_time (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod open audit_access)))
;;* lme

;;* lmx 579 system/sepolicy/prebuilts/api/29.0/public/app.te

(neverallow appdomain proc_uid_cpupower (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod open audit_access)))
;;* lme

;;* lmx 584 system/sepolicy/prebuilts/api/29.0/public/app.te

(neverallow base_typeattr_182 proc_net_tcp_udp (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod open audit_access)))
;;* lme

;;* lmx 592 system/sepolicy/prebuilts/api/29.0/public/app.te

(neverallow appdomain system_bootstrap_lib_file (file (read write append map execute execute_no_trans open)))
;;* lme

;;* lmx 594 system/sepolicy/prebuilts/api/29.0/public/app.te

(neverallow appdomain system_bootstrap_lib_file (dir (read getattr search open)))
;;* lme

(allow bootanim servicemanager (binder (call transfer)))
(allow servicemanager bootanim (dir (search)))
(allow servicemanager bootanim (file (read open)))
(allow servicemanager bootanim (process (getattr)))
(allow bootanim surfaceflinger (binder (call transfer)))
(allow surfaceflinger bootanim (binder (transfer)))
(allow bootanim surfaceflinger (fd (use)))
(allow bootanim audioserver (binder (call transfer)))
(allow audioserver bootanim (binder (transfer)))
(allow bootanim audioserver (fd (use)))
(allow bootanim hwservicemanager (binder (call transfer)))
(allow hwservicemanager bootanim (binder (call transfer)))
(allow hwservicemanager bootanim (dir (search)))
(allow hwservicemanager bootanim (file (read map open)))
(allow hwservicemanager bootanim (process (getattr)))
(allow bootanim gpu_device (chr_file (ioctl read write getattr lock append map open)))
(allow bootanim oemfs (dir (search)))
(allow bootanim oemfs (file (ioctl read getattr lock map open)))
(allow bootanim audio_device (dir (ioctl read getattr lock search open)))
(allow bootanim audio_device (chr_file (ioctl read write getattr lock append map open)))
(allow bootanim audioserver_service (service_manager (find)))
(allow bootanim surfaceflinger_service (service_manager (find)))
(allow bootanim ion_device (chr_file (ioctl read write getattr lock append map open)))
(allow bootanim hal_graphics_allocator (fd (use)))
(allow bootanim hal_graphics_composer (fd (use)))
(allow bootanim proc_meminfo (file (ioctl read getattr lock map open)))
(allow bootanim system_file (dir (ioctl read getattr lock search open)))
(allow bootanim bootloader_boot_reason_prop (file (read getattr map open)))
(allow bootstat runtime_event_log_tags_file (file (ioctl read getattr lock map open)))
(allow bootstat bootstat_data_file (dir (ioctl read write getattr lock add_name remove_name search open)))
(allow bootstat bootstat_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow bootstat boottime_prop (file (read getattr map open)))
(allow bootstat property_socket (sock_file (write)))
(allow bootstat init (unix_stream_socket (connectto)))
(allow bootstat bootloader_boot_reason_prop (property_service (set)))
(allow bootstat bootloader_boot_reason_prop (file (read getattr map open)))
(allow bootstat property_socket (sock_file (write)))
(allow bootstat init (unix_stream_socket (connectto)))
(allow bootstat system_boot_reason_prop (property_service (set)))
(allow bootstat system_boot_reason_prop (file (read getattr map open)))
(allow bootstat property_socket (sock_file (write)))
(allow bootstat init (unix_stream_socket (connectto)))
(allow bootstat last_boot_reason_prop (property_service (set)))
(allow bootstat last_boot_reason_prop (file (read getattr map open)))
(allow bootstat pstorefs (dir (search)))
(allow bootstat pstorefs (file (ioctl read getattr lock map open)))
(allow bootstat kernel (system (syslog_read)))
(allow bootstat logcat_exec (file (ioctl read getattr lock map execute execute_no_trans open)))
(allow bootstat logdr_socket (sock_file (write)))
(allow bootstat logd (unix_stream_socket (connectto)))
(allow bootstat statsdw_socket (sock_file (write)))
(allow bootstat statsd (unix_dgram_socket (sendto)))
;;* lmx 43 system/sepolicy/prebuilts/api/29.0/public/bootstat.te

(neverallow base_typeattr_189 bootloader_boot_reason_prop (file (ioctl read getattr lock map open)))
(neverallow base_typeattr_189 last_boot_reason_prop (file (ioctl read getattr lock map open)))
;;* lme

;;* lmx 45 system/sepolicy/prebuilts/api/29.0/public/bootstat.te

(neverallow bootanim last_boot_reason_prop (file (ioctl read getattr lock map open)))
(neverallow recovery last_boot_reason_prop (file (ioctl read getattr lock map open)))
;;* lme

;;* lmx 52 system/sepolicy/prebuilts/api/29.0/public/bootstat.te

(neverallow base_typeattr_190 bootloader_boot_reason_prop (property_service (set)))
(neverallow base_typeattr_190 last_boot_reason_prop (property_service (set)))
;;* lme

;;* lmx 54 system/sepolicy/prebuilts/api/29.0/public/bootstat.te

(neverallow system_server bootloader_boot_reason_prop (property_service (set)))
;;* lme

;;* lmx 60 system/sepolicy/prebuilts/api/29.0/public/bootstat.te

(neverallow base_typeattr_191 system_boot_reason_prop (property_service (set)))
;;* lme

(allow init pdx_bufferhub_client_endpoint_socket_type (unix_stream_socket (create bind)))
(allow bufferhubd pdx_bufferhub_client_endpoint_socket_type (unix_stream_socket (read write getattr setattr lock append listen accept getopt setopt shutdown)))
(allow bufferhubd self (process (setsockcreate)))
(allow bufferhubd pdx_bufferhub_client_channel_socket_type (unix_stream_socket (ioctl read write create getattr setattr lock append map bind connect listen accept getopt setopt shutdown)))
;;* lmx 8 system/sepolicy/prebuilts/api/29.0/public/bufferhubd.te

(neverallow base_typeattr_192 pdx_bufferhub_client_endpoint_socket_type (unix_stream_socket (listen accept)))
;;* lme

(allow bufferhubd pdx_performance_client_endpoint_dir_type (dir (ioctl read getattr lock search open)))
(allow bufferhubd pdx_performance_client_endpoint_socket_type (sock_file (ioctl read write getattr lock append map open)))
(allow bufferhubd pdx_performance_client_endpoint_socket_type (unix_stream_socket (read write shutdown connectto)))
(allow bufferhubd pdx_performance_client_channel_socket_type (unix_stream_socket (read write getattr setattr lock append getopt setopt shutdown)))
(allow bufferhubd pdx_performance_client_server_type (fd (use)))
(allow pdx_performance_client_server_type bufferhubd (fd (use)))
(allow bufferhubd gpu_device (chr_file (ioctl read write getattr lock append map open)))
(allow bufferhubd ion_device (chr_file (ioctl read getattr lock map open)))
(allow bufferhubd hal_omx_server (fd (use)))
(allow bufferhubd hal_codec2_server (fd (use)))
(allow camera_service_server fwk_camera_hwservice (hwservice_manager (add find)))
(allow camera_service_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 1 system/sepolicy/prebuilts/api/29.0/public/camera_service_server.te

(neverallow base_typeattr_193 fwk_camera_hwservice (hwservice_manager (add)))
;;* lme

(allow cameraserver servicemanager (binder (call transfer)))
(allow servicemanager cameraserver (dir (search)))
(allow servicemanager cameraserver (file (read open)))
(allow servicemanager cameraserver (process (getattr)))
(allow cameraserver binderservicedomain (binder (call transfer)))
(allow binderservicedomain cameraserver (binder (transfer)))
(allow cameraserver binderservicedomain (fd (use)))
(allow cameraserver appdomain (binder (call transfer)))
(allow appdomain cameraserver (binder (transfer)))
(allow cameraserver appdomain (fd (use)))
(allow cameraserver ion_device (chr_file (ioctl read write getattr lock append map open)))
(allow cameraserver hal_graphics_composer (fd (use)))
(allow cameraserver cameraserver_service (service_manager (add find)))
;;* lmx 20 system/sepolicy/prebuilts/api/29.0/public/cameraserver.te

(neverallow base_typeattr_194 cameraserver_service (service_manager (add)))
;;* lme

(allow cameraserver fwk_camera_hwservice (hwservice_manager (add find)))
(allow cameraserver hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 21 system/sepolicy/prebuilts/api/29.0/public/cameraserver.te

(neverallow base_typeattr_194 fwk_camera_hwservice (hwservice_manager (add)))
;;* lme

(allow cameraserver activity_service (service_manager (find)))
(allow cameraserver appops_service (service_manager (find)))
(allow cameraserver audioserver_service (service_manager (find)))
(allow cameraserver batterystats_service (service_manager (find)))
(allow cameraserver cameraproxy_service (service_manager (find)))
(allow cameraserver mediaserver_service (service_manager (find)))
(allow cameraserver processinfo_service (service_manager (find)))
(allow cameraserver scheduling_policy_service (service_manager (find)))
(allow cameraserver sensor_privacy_service (service_manager (find)))
(allow cameraserver surfaceflinger_service (service_manager (find)))
(allow cameraserver hidl_token_hwservice (hwservice_manager (find)))
;;* lmx 42 system/sepolicy/prebuilts/api/29.0/public/cameraserver.te

(neverallow cameraserver fs_type (file (execute_no_trans)))
(neverallow cameraserver file_type (file (execute_no_trans)))
;;* lme

;;* lmx 54 system/sepolicy/prebuilts/api/29.0/public/cameraserver.te

(neverallow cameraserver domain (tcp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind name_connect)))
(neverallow cameraserver domain (udp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind)))
(neverallow cameraserver domain (rawip_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind)))
;;* lme

(allow cameraserver adbd (fd (use)))
(allow cameraserver adbd (unix_stream_socket (read write)))
(allow cameraserver shell (fd (use)))
(allow cameraserver shell (unix_stream_socket (read write)))
(allow cameraserver shell (fifo_file (read write)))
(allow cameraserver mediametrics_service (service_manager (find)))
(allow charger kmsg_device (chr_file (ioctl read write getattr lock append map open)))
(allow charger rootfs (dir (ioctl read getattr lock search open)))
(allow charger rootfs (file (ioctl read getattr lock map open)))
(allow charger rootfs (lnk_file (ioctl read getattr lock map open)))
(allow charger cgroup (dir (ioctl read getattr lock search open)))
(allow charger cgroup (file (ioctl read getattr lock map open)))
(allow charger cgroup (lnk_file (ioctl read getattr lock map open)))
(allow charger sysfs_type (dir (ioctl read getattr lock search open)))
(allow charger self (capability (sys_tty_config)))
(allow charger self (cap_userns (sys_tty_config)))
(allow charger self (capability (sys_boot)))
(allow charger self (cap_userns (sys_boot)))
(allow charger sysfs_wake_lock (file (ioctl read write getattr lock append map open)))
(allow charger self (capability2 (block_suspend)))
(allow charger self (cap2_userns (block_suspend)))
(allow charger system_suspend_server (binder (call transfer)))
(allow system_suspend_server charger (binder (transfer)))
(allow charger system_suspend_server (fd (use)))
(allow charger system_suspend_hwservice (hwservice_manager (find)))
(allow charger hwservicemanager (binder (call transfer)))
(allow hwservicemanager charger (binder (call transfer)))
(allow hwservicemanager charger (dir (search)))
(allow hwservicemanager charger (file (read map open)))
(allow hwservicemanager charger (process (getattr)))
(allow charger hwservicemanager_prop (file (read getattr map open)))
(allow charger hidl_manager_hwservice (hwservice_manager (find)))
(allow charger self (netlink_kobject_uevent_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
(allow charger sysfs_power (file (ioctl read write getattr lock append map open)))
(allow charger sysfs_batteryinfo (dir (ioctl read getattr lock search open)))
(allow charger sysfs_batteryinfo (file (ioctl read getattr lock map open)))
(allow charger sysfs_batteryinfo (lnk_file (ioctl read getattr lock map open)))
(allow charger pstorefs (dir (ioctl read getattr lock search open)))
(allow charger pstorefs (file (ioctl read getattr lock map open)))
(allow charger graphics_device (dir (ioctl read getattr lock search open)))
(allow charger graphics_device (chr_file (ioctl read write getattr lock append map open)))
(allow charger input_device (dir (ioctl read getattr lock search open)))
(allow charger input_device (chr_file (ioctl read getattr lock map open)))
(allow charger tty_device (chr_file (ioctl read write getattr lock append map open)))
(allow charger proc_sysrq (file (ioctl read write getattr lock append map open)))
(allow charger property_socket (sock_file (write)))
(allow charger init (unix_stream_socket (connectto)))
(allow charger system_prop (property_service (set)))
(allow charger system_prop (file (read getattr map open)))
(allow charger property_socket (sock_file (write)))
(allow charger init (unix_stream_socket (connectto)))
(allow charger exported_system_prop (property_service (set)))
(allow charger exported_system_prop (file (read getattr map open)))
(allow charger property_socket (sock_file (write)))
(allow charger init (unix_stream_socket (connectto)))
(allow charger exported2_system_prop (property_service (set)))
(allow charger exported2_system_prop (file (read getattr map open)))
(allow charger property_socket (sock_file (write)))
(allow charger init (unix_stream_socket (connectto)))
(allow charger exported3_system_prop (property_service (set)))
(allow charger exported3_system_prop (file (read getattr map open)))
(allow clatd proc_net_type (dir (ioctl read getattr lock search open)))
(allow clatd proc_net_type (file (ioctl read getattr lock map open)))
(allow clatd proc_net_type (lnk_file (ioctl read getattr lock map open)))
(allow clatd netd (fd (use)))
(allow clatd netd (fifo_file (read write)))
(allow clatd netd (netlink_kobject_uevent_socket (read write)))
(allow clatd netd (netlink_nflog_socket (read write)))
(allow clatd netd (netlink_route_socket (read write)))
(allow clatd netd (udp_socket (read write)))
(allow clatd netd (unix_stream_socket (read write)))
(allow clatd netd (unix_dgram_socket (read write)))
(allow clatd self (capability (setgid setuid net_admin net_raw)))
(allow clatd self (cap_userns (setgid setuid net_admin net_raw)))
(allow clatd self (capability (ipc_lock)))
(allow clatd self (cap_userns (ipc_lock)))
(allow clatd self (netlink_route_socket (nlmsg_write)))
(allow clatd self (rawip_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
(allow clatd self (packet_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
(allow clatd tun_device (chr_file (ioctl read write getattr lock append map open)))
(dontaudit crash_dump self (capability (sys_ptrace)))
(dontaudit crash_dump self (cap_userns (sys_ptrace)))
(allow crash_dump domain (fd (use)))
(allow crash_dump domain (fifo_file (read write)))
(allow crash_dump domain (fifo_file (append)))
(allow crash_dump domain (dir (ioctl read getattr lock search open)))
(allow crash_dump domain (file (ioctl read getattr lock map open)))
(allow crash_dump domain (lnk_file (ioctl read getattr lock map open)))
(allow crash_dump exec_type (file (ioctl read getattr lock map open)))
(allow crash_dump dalvikcache_data_file (dir (getattr search)))
(allow crash_dump dalvikcache_data_file (file (ioctl read getattr lock map open)))
(allow crash_dump apk_data_file (dir (ioctl read getattr lock search open)))
(allow crash_dump apk_data_file (file (ioctl read getattr lock map open)))
(allow crash_dump apk_data_file (lnk_file (ioctl read getattr lock map open)))
(allow crash_dump vendor_file (dir (ioctl read getattr lock search open)))
(allow crash_dump same_process_hal_file (dir (ioctl read getattr lock search open)))
(allow crash_dump vendor_file (file (ioctl read getattr lock map open)))
(allow crash_dump vendor_file (lnk_file (ioctl read getattr lock map open)))
(allow crash_dump same_process_hal_file (file (ioctl read getattr lock map open)))
(allow crash_dump same_process_hal_file (lnk_file (ioctl read getattr lock map open)))
(allow crash_dump tombstoned_crash_socket (sock_file (write)))
(allow crash_dump tombstoned (unix_stream_socket (connectto)))
(allow crash_dump system_ndebug_socket (sock_file (write)))
(allow crash_dump system_server (unix_stream_socket (connectto)))
(allow crash_dump anr_data_file (file (getattr append)))
(allow crash_dump tombstone_data_file (file (getattr append)))
(allow crash_dump logdr_socket (sock_file (write)))
(allow crash_dump logd (unix_stream_socket (connectto)))
(dontaudit crash_dump core_data_file_type (dir (search)))
(dontaudit crash_dump vendor_file_type (dir (search)))
(dontaudit crash_dump system_data_file (file (read)))
(dontaudit crash_dump property_type (file (read)))
;;* lmx 68 system/sepolicy/prebuilts/api/29.0/public/clatd.te

(neverallow domain crash_dump_exec (file (execute_no_trans)))
;;* lme

(allow dhcp cgroup (dir (write create add_name)))
(allow dhcp self (capability (setgid setuid net_bind_service net_admin net_raw)))
(allow dhcp self (cap_userns (setgid setuid net_bind_service net_admin net_raw)))
(allow dhcp self (packet_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
(allow dhcp self (netlink_route_socket (nlmsg_write)))
(allow dhcp shell_exec (file (ioctl read getattr lock map execute execute_no_trans open)))
(allow dhcp system_file (file (ioctl read getattr lock map execute execute_no_trans open)))
(allow dhcp toolbox_exec (file (ioctl read getattr lock map execute execute_no_trans open)))
(allow dhcp proc_net_type (file (write)))
(allow dhcp property_socket (sock_file (write)))
(allow dhcp init (unix_stream_socket (connectto)))
(allow dhcp dhcp_prop (property_service (set)))
(allow dhcp dhcp_prop (file (read getattr map open)))
(allow dhcp property_socket (sock_file (write)))
(allow dhcp init (unix_stream_socket (connectto)))
(allow dhcp pan_result_prop (property_service (set)))
(allow dhcp pan_result_prop (file (read getattr map open)))
(allow dhcp dhcp_data_file (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
(allow dhcp dhcp_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow dhcp netd (fd (use)))
(allow dhcp netd (fifo_file (ioctl read write getattr lock append map open)))
(allow dhcp netd (udp_socket (read write)))
(allow dhcp netd (unix_stream_socket (read write)))
(allow dhcp netd (unix_dgram_socket (read write)))
(allow dhcp netd (netlink_route_socket (read write)))
(allow dhcp netd (netlink_nflog_socket (read write)))
(allow dhcp netd (netlink_kobject_uevent_socket (read write)))
(allow display_service_server fwk_display_hwservice (hwservice_manager (add find)))
(allow display_service_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 1 system/sepolicy/prebuilts/api/29.0/public/display_service_server.te

(neverallow base_typeattr_195 fwk_display_hwservice (hwservice_manager (add)))
;;* lme

(allowx dnsmasq self (ioctl udp_socket (0x6900 0x6902)))
(allowx dnsmasq self (ioctl udp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(allowx dnsmasq self (ioctl udp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(allow dnsmasq self (capability (dac_override dac_read_search)))
(allow dnsmasq self (cap_userns (dac_override dac_read_search)))
(allow dnsmasq self (capability (setgid setuid net_bind_service net_admin net_raw)))
(allow dnsmasq self (cap_userns (setgid setuid net_bind_service net_admin net_raw)))
(allow dnsmasq dhcp_data_file (dir (write lock add_name remove_name search open)))
(allow dnsmasq dhcp_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow dnsmasq netd (fd (use)))
(allow dnsmasq netd (fifo_file (read write getattr)))
(allow dnsmasq netd (netlink_kobject_uevent_socket (read write)))
(allow dnsmasq netd (netlink_nflog_socket (read write)))
(allow dnsmasq netd (netlink_route_socket (read write)))
(allow dnsmasq netd (unix_stream_socket (read write getattr)))
(allow dnsmasq netd (unix_dgram_socket (read write)))
(allow dnsmasq netd (udp_socket (read write)))
(allow domain init (process (sigchld)))
(allow domain self (process (fork sigchld sigkill sigstop signull signal getsched setsched getsession getpgid setpgid getcap setcap getattr setrlimit)))
(allow domain self (fd (use)))
(allow domain proc (dir (ioctl read getattr lock search open)))
(allow domain proc_net_type (dir (search)))
(allow domain self (dir (ioctl read getattr lock search open)))
(allow domain self (file (ioctl read getattr lock map open)))
(allow domain self (lnk_file (ioctl read getattr lock map open)))
(allow domain self (file (ioctl read write getattr lock append map open)))
(allow domain self (fifo_file (ioctl read write getattr lock append map open)))
(allow domain self (unix_dgram_socket (ioctl read write create getattr setattr lock append map bind connect getopt setopt shutdown sendto)))
(allow domain self (unix_stream_socket (ioctl read write create getattr setattr lock append map bind connect listen accept getopt setopt shutdown connectto)))
(allow domain init (fd (use)))
(allow domain tmpfs (dir (getattr search)))
(allow domain rootfs (dir (search)))
(allow domain rootfs (lnk_file (read getattr)))
(allow domain device (dir (search)))
(allow domain dev_type (lnk_file (ioctl read getattr lock map open)))
(allow domain devpts (dir (search)))
(allow domain socket_device (dir (ioctl read getattr lock search open)))
(allow domain owntty_device (chr_file (ioctl read write getattr lock append map open)))
(allow domain null_device (chr_file (ioctl read write getattr lock append map open)))
(allow domain zero_device (chr_file (ioctl read write getattr lock append map open)))
(allow base_typeattr_196 ashmem_device (chr_file (ioctl read write getattr lock append map open)))
(allow domain ashmemd (fd (use)))
(allow base_typeattr_197 binder_device (chr_file (ioctl read write getattr lock append map open)))
(allow base_typeattr_198 hwbinder_device (chr_file (ioctl read write getattr lock append map open)))
(allow domain ptmx_device (chr_file (ioctl read write getattr lock append map open)))
(allow domain random_device (chr_file (ioctl read write getattr lock append map open)))
(allow domain proc_random (dir (ioctl read getattr lock search open)))
(allow domain proc_random (file (ioctl read getattr lock map open)))
(allow domain properties_device (dir (getattr search)))
(allow domain properties_serial (file (ioctl read getattr lock map open)))
(allow domain property_info (file (ioctl read getattr lock map open)))
(allow domain debug_prop (file (read getattr map open)))
(allow domain exported_config_prop (file (read getattr map open)))
(allow domain exported_default_prop (file (read getattr map open)))
(allow domain exported_dumpstate_prop (file (read getattr map open)))
(allow domain exported_fingerprint_prop (file (read getattr map open)))
(allow domain exported_radio_prop (file (read getattr map open)))
(allow domain exported_secure_prop (file (read getattr map open)))
(allow domain exported_system_prop (file (read getattr map open)))
(allow domain exported_vold_prop (file (read getattr map open)))
(allow domain exported2_default_prop (file (read getattr map open)))
(allow domain logd_prop (file (read getattr map open)))
(allow domain log_property_type (file (read getattr map open)))
(dontaudit domain property_type (file (audit_access)))
(allow domain property_contexts_file (file (ioctl read getattr lock map open)))
(allow domain init (key (search)))
(allow domain vold (key (search)))
(allow domain logdw_socket (sock_file (write)))
(allow domain logd (unix_dgram_socket (sendto)))
(allow domain pmsg_device (chr_file (write lock append map open)))
(allow domain system_file (dir (ioctl read getattr lock search open)))
(allow domain system_lib_file (dir (ioctl read getattr lock search open)))
(allow domain system_seccomp_policy_file (dir (ioctl read getattr lock search open)))
(allow domain system_security_cacerts_file (dir (ioctl read getattr lock search open)))
(allow domain system_file (lnk_file (read getattr)))
(allow domain system_seccomp_policy_file (file (ioctl read getattr lock map open)))
(allow domain system_security_cacerts_file (file (ioctl read getattr lock map open)))
(allow domain system_linker_exec (file (read getattr map execute open)))
(allow domain system_linker_config_file (file (ioctl read getattr lock map open)))
(allow domain system_lib_file (file (read getattr map execute open)))
(allow domain system_linker_exec (lnk_file (read getattr open)))
(allow domain system_lib_file (lnk_file (read getattr open)))
(allow domain system_event_log_tags_file (file (ioctl read getattr lock map open)))
(allow appdomain system_file (file (read getattr map execute open)))
(allow coredomain system_file (file (read getattr map execute open)))
(allow domain vendor_hal_file (dir (ioctl read getattr lock search open)))
(allow domain same_process_hal_file (dir (ioctl read getattr lock search open)))
(allow base_typeattr_199 same_process_hal_file (file (read getattr map execute open)))
(allow domain vndk_sp_file (dir (ioctl read getattr lock search open)))
(allow domain vndk_sp_file (file (read getattr map execute open)))
(allow domain vendor_configs_file (dir (ioctl read getattr lock search open)))
(allow domain vendor_configs_file (file (read getattr map open)))
(allow domain vendor_file_type (lnk_file (read getattr open)))
(allow domain vendor_file (dir (getattr search)))
(allow base_typeattr_199 vendor_file_type (dir (ioctl read getattr lock search open)))
(allow base_typeattr_199 vendor_file_type (file (read getattr map execute open)))
(allow base_typeattr_199 vendor_file_type (lnk_file (read getattr)))
(allow domain sysfs (lnk_file (read getattr)))
(allow domain system_zoneinfo_file (file (ioctl read getattr lock map open)))
(allow domain zoneinfo_data_file (file (ioctl read getattr lock map open)))
(allow domain system_zoneinfo_file (dir (ioctl read getattr lock search open)))
(allow domain zoneinfo_data_file (dir (ioctl read getattr lock search open)))
(allow domain sysfs_devices_system_cpu (dir (ioctl read getattr lock search open)))
(allow domain sysfs_devices_system_cpu (file (ioctl read getattr lock map open)))
(allow domain sysfs_devices_system_cpu (lnk_file (ioctl read getattr lock map open)))
(allow domain sysfs_usb (dir (ioctl read getattr lock search open)))
(allow domain sysfs_usb (file (ioctl read getattr lock map open)))
(allow domain sysfs_usb (lnk_file (ioctl read getattr lock map open)))
(allow domain sysfs_transparent_hugepage (dir (search)))
(allow domain sysfs_transparent_hugepage (file (ioctl read getattr lock map open)))
(allow appdomain system_data_file (dir (getattr)))
(allow coredomain system_data_file (dir (getattr)))
(allow domain system_data_file (dir (search)))
(allow domain vendor_data_file (dir (getattr search)))
(allow domain proc (lnk_file (read getattr)))
(allow domain proc_cpuinfo (file (ioctl read getattr lock map open)))
(allow domain dev_cpu_variant (file (ioctl read getattr lock map open)))
(allow domain proc_overcommit_memory (file (ioctl read getattr lock map open)))
(allow domain proc_perf (file (ioctl read getattr lock map open)))
(allow domain selinuxfs (dir (search)))
(allow domain selinuxfs (file (getattr)))
(allow domain sysfs (dir (search)))
(allow domain selinuxfs (filesystem (getattr)))
(allow domain debugfs (dir (search)))
(allow domain debugfs_tracing (dir (search)))
(allow domain debugfs_tracing_debug (dir (search)))
(allow domain debugfs_trace_marker (file (write lock append map open)))
(allow domain fs_type (filesystem (getattr)))
(allow domain fs_type (dir (getattr)))
(allowx domain domain (ioctl tcp_socket ((range 0x5401 0x5403) 0x540b (range 0x540e 0x5411) (range 0x5413 0x5414) (range 0x5450 0x5451))))
(allowx domain domain (ioctl udp_socket ((range 0x5401 0x5403) 0x540b (range 0x540e 0x5411) (range 0x5413 0x5414) (range 0x5450 0x5451))))
(allowx domain domain (ioctl rawip_socket ((range 0x5401 0x5403) 0x540b (range 0x540e 0x5411) (range 0x5413 0x5414) (range 0x5450 0x5451))))
(allowx domain domain (ioctl icmp_socket ((range 0x5401 0x5403) 0x540b (range 0x540e 0x5411) (range 0x5413 0x5414) (range 0x5450 0x5451))))
(allowx domain domain (ioctl tcp_socket ((range 0x8906 0x8907) 0x8910 (range 0x8912 0x8913) 0x8915 0x8917 0x8919 0x891b 0x8921 0x8933 0x8938 0x8942)))
(allowx domain domain (ioctl udp_socket ((range 0x8906 0x8907) 0x8910 (range 0x8912 0x8913) 0x8915 0x8917 0x8919 0x891b 0x8921 0x8933 0x8938 0x8942)))
(allowx domain domain (ioctl rawip_socket ((range 0x8906 0x8907) 0x8910 (range 0x8912 0x8913) 0x8915 0x8917 0x8919 0x891b 0x8921 0x8933 0x8938 0x8942)))
(allowx domain domain (ioctl icmp_socket ((range 0x8906 0x8907) 0x8910 (range 0x8912 0x8913) 0x8915 0x8917 0x8919 0x891b 0x8921 0x8933 0x8938 0x8942)))
(allowx domain domain (ioctl tcp_socket (0x8b01 0x8b05 0x8b07 0x8b09 0x8b0b 0x8b0d 0x8b0f (range 0x8b11 0x8b13) 0x8b21 0x8b23 0x8b25 0x8b27 0x8b29 0x8b2d)))
(allowx domain domain (ioctl udp_socket (0x8b01 0x8b05 0x8b07 0x8b09 0x8b0b 0x8b0d 0x8b0f (range 0x8b11 0x8b13) 0x8b21 0x8b23 0x8b25 0x8b27 0x8b29 0x8b2d)))
(allowx domain domain (ioctl rawip_socket (0x8b01 0x8b05 0x8b07 0x8b09 0x8b0b 0x8b0d 0x8b0f (range 0x8b11 0x8b13) 0x8b21 0x8b23 0x8b25 0x8b27 0x8b29 0x8b2d)))
(allowx domain domain (ioctl icmp_socket (0x8b01 0x8b05 0x8b07 0x8b09 0x8b0b 0x8b0d 0x8b0f (range 0x8b11 0x8b13) 0x8b21 0x8b23 0x8b25 0x8b27 0x8b29 0x8b2d)))
(allowx domain domain (ioctl unix_stream_socket (0x5401 0x5411 (range 0x5413 0x5414) 0x541b (range 0x5450 0x5451))))
(allowx domain domain (ioctl unix_dgram_socket (0x5401 0x5411 (range 0x5413 0x5414) 0x541b (range 0x5450 0x5451))))
(allowx domain pdx_channel_socket_type (ioctl unix_stream_socket (0x5401 0x5411 (range 0x5413 0x5414) 0x541b (range 0x5450 0x5451))))
(allowx domain pdx_channel_socket_type (ioctl unix_dgram_socket (0x5401 0x5411 (range 0x5413 0x5414) 0x541b (range 0x5450 0x5451))))
(allowx domain devpts (ioctl chr_file ((range 0x5401 0x5403) 0x540b (range 0x540e 0x5411) (range 0x5413 0x5414) (range 0x5450 0x5451))))
(allowx domain dev_type (ioctl file ((range 0x5450 0x5451))))
(allowx domain dev_type (ioctl dir ((range 0x5450 0x5451))))
(allowx domain dev_type (ioctl lnk_file ((range 0x5450 0x5451))))
(allowx domain dev_type (ioctl blk_file ((range 0x5450 0x5451))))
(allowx domain dev_type (ioctl sock_file ((range 0x5450 0x5451))))
(allowx domain dev_type (ioctl fifo_file ((range 0x5450 0x5451))))
(allowx domain domain (ioctl file ((range 0x5450 0x5451))))
(allowx domain domain (ioctl dir ((range 0x5450 0x5451))))
(allowx domain domain (ioctl lnk_file ((range 0x5450 0x5451))))
(allowx domain domain (ioctl blk_file ((range 0x5450 0x5451))))
(allowx domain domain (ioctl sock_file ((range 0x5450 0x5451))))
(allowx domain domain (ioctl fifo_file ((range 0x5450 0x5451))))
(allowx domain fs_type (ioctl file ((range 0x5450 0x5451))))
(allowx domain fs_type (ioctl dir ((range 0x5450 0x5451))))
(allowx domain fs_type (ioctl lnk_file ((range 0x5450 0x5451))))
(allowx domain fs_type (ioctl blk_file ((range 0x5450 0x5451))))
(allowx domain fs_type (ioctl sock_file ((range 0x5450 0x5451))))
(allowx domain fs_type (ioctl fifo_file ((range 0x5450 0x5451))))
(allowx domain file_type (ioctl file ((range 0x5450 0x5451))))
(allowx domain file_type (ioctl dir ((range 0x5450 0x5451))))
(allowx domain file_type (ioctl lnk_file ((range 0x5450 0x5451))))
(allowx domain file_type (ioctl blk_file ((range 0x5450 0x5451))))
(allowx domain file_type (ioctl sock_file ((range 0x5450 0x5451))))
(allowx domain file_type (ioctl fifo_file ((range 0x5450 0x5451))))
(allowx domain tun_device (ioctl chr_file ((range 0x5450 0x5451))))
(allowx domain fs_type (ioctl file (0x5401)))
(allowx domain file_type (ioctl file (0x5401)))
(allowx domain domain (ioctl fifo_file (0x5401)))
(allowx domain dev_type (ioctl blk_file (0x1268 0x1272)))
(allowx domain file_type (ioctl file ((range 0xf501 0xf502) 0xf505 (range 0xf50c 0xf50e))))
(allowx domain sdcard_type (ioctl file ((range 0xf501 0xf502) 0xf505 (range 0xf50c 0xf50e))))
(allow base_typeattr_200 hwservice_manager_type (hwservice_manager (add find)))
(allow base_typeattr_200 vndservice_manager_type (service_manager (add find)))
(allow domain apex_mnt_dir (dir (getattr search)))
(allow domain apex_mnt_dir (lnk_file (ioctl read getattr lock map open)))
;;* lmx 335 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallowx base_typeattr_167 base_typeattr_167 (ioctl file (0x0)))
(neverallowx base_typeattr_167 base_typeattr_167 (ioctl dir (0x0)))
(neverallowx base_typeattr_167 base_typeattr_167 (ioctl lnk_file (0x0)))
(neverallowx base_typeattr_167 base_typeattr_167 (ioctl blk_file (0x0)))
(neverallowx base_typeattr_167 base_typeattr_167 (ioctl sock_file (0x0)))
(neverallowx base_typeattr_167 base_typeattr_167 (ioctl fifo_file (0x0)))
(neverallowx base_typeattr_167 base_typeattr_167 (ioctl socket (0x0)))
(neverallowx base_typeattr_167 base_typeattr_167 (ioctl tcp_socket (0x0)))
(neverallowx base_typeattr_167 base_typeattr_167 (ioctl udp_socket (0x0)))
(neverallowx base_typeattr_167 base_typeattr_167 (ioctl rawip_socket (0x0)))
(neverallowx base_typeattr_167 base_typeattr_167 (ioctl netlink_socket (0x0)))
(neverallowx base_typeattr_167 base_typeattr_167 (ioctl packet_socket (0x0)))
(neverallowx base_typeattr_167 base_typeattr_167 (ioctl key_socket (0x0)))
(neverallowx base_typeattr_167 base_typeattr_167 (ioctl unix_stream_socket (0x0)))
(neverallowx base_typeattr_167 base_typeattr_167 (ioctl unix_dgram_socket (0x0)))
(neverallowx base_typeattr_167 base_typeattr_167 (ioctl netlink_route_socket (0x0)))
(neverallowx base_typeattr_167 base_typeattr_167 (ioctl netlink_tcpdiag_socket (0x0)))
(neverallowx base_typeattr_167 base_typeattr_167 (ioctl netlink_nflog_socket (0x0)))
(neverallowx base_typeattr_167 base_typeattr_167 (ioctl netlink_xfrm_socket (0x0)))
(neverallowx base_typeattr_167 base_typeattr_167 (ioctl netlink_selinux_socket (0x0)))
(neverallowx base_typeattr_167 base_typeattr_167 (ioctl netlink_audit_socket (0x0)))
(neverallowx base_typeattr_167 base_typeattr_167 (ioctl netlink_dnrt_socket (0x0)))
(neverallowx base_typeattr_167 base_typeattr_167 (ioctl netlink_kobject_uevent_socket (0x0)))
(neverallowx base_typeattr_167 base_typeattr_167 (ioctl appletalk_socket (0x0)))
(neverallowx base_typeattr_167 base_typeattr_167 (ioctl tun_socket (0x0)))
(neverallowx base_typeattr_167 base_typeattr_167 (ioctl netlink_iscsi_socket (0x0)))
(neverallowx base_typeattr_167 base_typeattr_167 (ioctl netlink_fib_lookup_socket (0x0)))
(neverallowx base_typeattr_167 base_typeattr_167 (ioctl netlink_connector_socket (0x0)))
(neverallowx base_typeattr_167 base_typeattr_167 (ioctl netlink_netfilter_socket (0x0)))
(neverallowx base_typeattr_167 base_typeattr_167 (ioctl netlink_generic_socket (0x0)))
(neverallowx base_typeattr_167 base_typeattr_167 (ioctl netlink_scsitransport_socket (0x0)))
(neverallowx base_typeattr_167 base_typeattr_167 (ioctl netlink_rdma_socket (0x0)))
(neverallowx base_typeattr_167 base_typeattr_167 (ioctl netlink_crypto_socket (0x0)))
(neverallowx base_typeattr_167 base_typeattr_167 (ioctl sctp_socket (0x0)))
(neverallowx base_typeattr_167 base_typeattr_167 (ioctl icmp_socket (0x0)))
(neverallowx base_typeattr_167 base_typeattr_167 (ioctl ax25_socket (0x0)))
(neverallowx base_typeattr_167 base_typeattr_167 (ioctl ipx_socket (0x0)))
(neverallowx base_typeattr_167 base_typeattr_167 (ioctl netrom_socket (0x0)))
(neverallowx base_typeattr_167 base_typeattr_167 (ioctl atmpvc_socket (0x0)))
(neverallowx base_typeattr_167 base_typeattr_167 (ioctl x25_socket (0x0)))
(neverallowx base_typeattr_167 base_typeattr_167 (ioctl rose_socket (0x0)))
(neverallowx base_typeattr_167 base_typeattr_167 (ioctl decnet_socket (0x0)))
(neverallowx base_typeattr_167 base_typeattr_167 (ioctl atmsvc_socket (0x0)))
(neverallowx base_typeattr_167 base_typeattr_167 (ioctl rds_socket (0x0)))
(neverallowx base_typeattr_167 base_typeattr_167 (ioctl irda_socket (0x0)))
(neverallowx base_typeattr_167 base_typeattr_167 (ioctl pppox_socket (0x0)))
(neverallowx base_typeattr_167 base_typeattr_167 (ioctl llc_socket (0x0)))
(neverallowx base_typeattr_167 base_typeattr_167 (ioctl can_socket (0x0)))
(neverallowx base_typeattr_167 base_typeattr_167 (ioctl tipc_socket (0x0)))
(neverallowx base_typeattr_167 base_typeattr_167 (ioctl bluetooth_socket (0x0)))
(neverallowx base_typeattr_167 base_typeattr_167 (ioctl iucv_socket (0x0)))
(neverallowx base_typeattr_167 base_typeattr_167 (ioctl rxrpc_socket (0x0)))
(neverallowx base_typeattr_167 base_typeattr_167 (ioctl isdn_socket (0x0)))
(neverallowx base_typeattr_167 base_typeattr_167 (ioctl phonet_socket (0x0)))
(neverallowx base_typeattr_167 base_typeattr_167 (ioctl ieee802154_socket (0x0)))
(neverallowx base_typeattr_167 base_typeattr_167 (ioctl caif_socket (0x0)))
(neverallowx base_typeattr_167 base_typeattr_167 (ioctl alg_socket (0x0)))
(neverallowx base_typeattr_167 base_typeattr_167 (ioctl nfc_socket (0x0)))
(neverallowx base_typeattr_167 base_typeattr_167 (ioctl vsock_socket (0x0)))
(neverallowx base_typeattr_167 base_typeattr_167 (ioctl kcm_socket (0x0)))
(neverallowx base_typeattr_167 base_typeattr_167 (ioctl qipcrtr_socket (0x0)))
(neverallowx base_typeattr_167 base_typeattr_167 (ioctl smc_socket (0x0)))
(neverallowx base_typeattr_167 base_typeattr_167 (ioctl xdp_socket (0x0)))
;;* lme

;;* lmx 339 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallowx domain domain (ioctl socket (0x8905)))
(neverallowx domain domain (ioctl tcp_socket (0x8905)))
(neverallowx domain domain (ioctl udp_socket (0x8905)))
(neverallowx domain domain (ioctl rawip_socket (0x8905)))
(neverallowx domain domain (ioctl netlink_socket (0x8905)))
(neverallowx domain domain (ioctl packet_socket (0x8905)))
(neverallowx domain domain (ioctl key_socket (0x8905)))
(neverallowx domain domain (ioctl unix_stream_socket (0x8905)))
(neverallowx domain domain (ioctl unix_dgram_socket (0x8905)))
(neverallowx domain domain (ioctl netlink_route_socket (0x8905)))
(neverallowx domain domain (ioctl netlink_tcpdiag_socket (0x8905)))
(neverallowx domain domain (ioctl netlink_nflog_socket (0x8905)))
(neverallowx domain domain (ioctl netlink_xfrm_socket (0x8905)))
(neverallowx domain domain (ioctl netlink_selinux_socket (0x8905)))
(neverallowx domain domain (ioctl netlink_audit_socket (0x8905)))
(neverallowx domain domain (ioctl netlink_dnrt_socket (0x8905)))
(neverallowx domain domain (ioctl netlink_kobject_uevent_socket (0x8905)))
(neverallowx domain domain (ioctl appletalk_socket (0x8905)))
(neverallowx domain domain (ioctl tun_socket (0x8905)))
(neverallowx domain domain (ioctl netlink_iscsi_socket (0x8905)))
(neverallowx domain domain (ioctl netlink_fib_lookup_socket (0x8905)))
(neverallowx domain domain (ioctl netlink_connector_socket (0x8905)))
(neverallowx domain domain (ioctl netlink_netfilter_socket (0x8905)))
(neverallowx domain domain (ioctl netlink_generic_socket (0x8905)))
(neverallowx domain domain (ioctl netlink_scsitransport_socket (0x8905)))
(neverallowx domain domain (ioctl netlink_rdma_socket (0x8905)))
(neverallowx domain domain (ioctl netlink_crypto_socket (0x8905)))
(neverallowx domain domain (ioctl sctp_socket (0x8905)))
(neverallowx domain domain (ioctl icmp_socket (0x8905)))
(neverallowx domain domain (ioctl ax25_socket (0x8905)))
(neverallowx domain domain (ioctl ipx_socket (0x8905)))
(neverallowx domain domain (ioctl netrom_socket (0x8905)))
(neverallowx domain domain (ioctl atmpvc_socket (0x8905)))
(neverallowx domain domain (ioctl x25_socket (0x8905)))
(neverallowx domain domain (ioctl rose_socket (0x8905)))
(neverallowx domain domain (ioctl decnet_socket (0x8905)))
(neverallowx domain domain (ioctl atmsvc_socket (0x8905)))
(neverallowx domain domain (ioctl rds_socket (0x8905)))
(neverallowx domain domain (ioctl irda_socket (0x8905)))
(neverallowx domain domain (ioctl pppox_socket (0x8905)))
(neverallowx domain domain (ioctl llc_socket (0x8905)))
(neverallowx domain domain (ioctl can_socket (0x8905)))
(neverallowx domain domain (ioctl tipc_socket (0x8905)))
(neverallowx domain domain (ioctl bluetooth_socket (0x8905)))
(neverallowx domain domain (ioctl iucv_socket (0x8905)))
(neverallowx domain domain (ioctl rxrpc_socket (0x8905)))
(neverallowx domain domain (ioctl isdn_socket (0x8905)))
(neverallowx domain domain (ioctl phonet_socket (0x8905)))
(neverallowx domain domain (ioctl ieee802154_socket (0x8905)))
(neverallowx domain domain (ioctl caif_socket (0x8905)))
(neverallowx domain domain (ioctl alg_socket (0x8905)))
(neverallowx domain domain (ioctl nfc_socket (0x8905)))
(neverallowx domain domain (ioctl vsock_socket (0x8905)))
(neverallowx domain domain (ioctl kcm_socket (0x8905)))
(neverallowx domain domain (ioctl qipcrtr_socket (0x8905)))
(neverallowx domain domain (ioctl smc_socket (0x8905)))
(neverallowx domain domain (ioctl xdp_socket (0x8905)))
;;* lme

;;* lmx 344 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallowx base_typeattr_167 devpts (ioctl chr_file (0x5412)))
;;* lme

;;* lmx 347 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_201 unlabeled (file (create)))
(neverallow base_typeattr_201 unlabeled (dir (create)))
(neverallow base_typeattr_201 unlabeled (lnk_file (create)))
(neverallow base_typeattr_201 unlabeled (chr_file (create)))
(neverallow base_typeattr_201 unlabeled (blk_file (create)))
(neverallow base_typeattr_201 unlabeled (sock_file (create)))
(neverallow base_typeattr_201 unlabeled (fifo_file (create)))
;;* lme

;;* lmx 356 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_202 self (capability (mknod)))
(neverallow base_typeattr_202 self (cap_userns (mknod)))
;;* lme

;;* lmx 359 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_167 self (memprotect (mmap_zero)))
;;* lme

;;* lmx 362 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_167 self (capability2 (mac_override)))
(neverallow base_typeattr_167 self (cap2_userns (mac_override)))
;;* lme

;;* lmx 367 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_167 self (capability2 (mac_admin)))
(neverallow base_typeattr_167 self (cap2_userns (mac_admin)))
;;* lme

;;* lmx 371 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_167 kernel (security (load_policy)))
;;* lme

;;* lmx 377 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_167 kernel (security (setenforce)))
;;* lme

;;* lmx 378 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_203 kernel (security (setcheckreqprot)))
;;* lme

;;* lmx 381 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_167 kernel (security (setbool)))
;;* lme

;;* lmx 386 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_166 kernel (security (setsecparam)))
;;* lme

;;* lmx 395 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_204 hw_random_device (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod open audit_access)))
;;* lme

;;* lmx 401 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_205 keychord_device (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod open audit_access)))
;;* lme

;;* lmx 404 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_167 base_typeattr_206 (file (entrypoint)))
;;* lme

(dontaudit domain postinstall_mnt_dir (dir (audit_access)))
;;* lmx 416 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_205 port_device (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod open audit_access)))
;;* lme

;;* lmx 417 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_167 port_device (chr_file (ioctl read write lock relabelfrom append map link rename execute quotaon mounton execute_no_trans entrypoint execmod open audit_access)))
;;* lme

;;* lmx 420 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_166 usermodehelper (file (write append)))
;;* lme

;;* lmx 421 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_207 sysfs_usermodehelper (file (write append)))
;;* lme

;;* lmx 422 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_208 proc_security (file (read write append open)))
;;* lme

;;* lmx 427 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_167 init (binder (impersonate call set_context_mgr)))
;;* lme

;;* lmx 428 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_209 init (binder (transfer)))
;;* lme

;;* lmx 429 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_167 vendor_init (binder (impersonate call set_context_mgr transfer)))
;;* lme

;;* lmx 433 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_210 block_device (blk_file (read write open)))
;;* lme

;;* lmx 438 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_167 base_typeattr_167 (chr_file (rename)))
(neverallow base_typeattr_167 base_typeattr_167 (blk_file (rename)))
;;* lme

;;* lmx 442 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow domain device (chr_file (read write open)))
;;* lme

;;* lmx 445 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow domain cache_file (file (execute)))
(neverallow domain cache_backup_file (file (execute)))
(neverallow domain cache_private_backup_file (file (execute)))
(neverallow domain cache_recovery_file (file (execute)))
;;* lme

;;* lmx 456 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_180 base_typeattr_187 (file (execute execute_no_trans)))
;;* lme

;;* lmx 459 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow domain nativetest_data_file (file (write create setattr relabelfrom append unlink link rename)))
(neverallow domain nativetest_data_file (lnk_file (write create setattr relabelfrom append unlink link rename)))
(neverallow domain nativetest_data_file (chr_file (write create setattr relabelfrom append unlink link rename)))
(neverallow domain nativetest_data_file (blk_file (write create setattr relabelfrom append unlink link rename)))
(neverallow domain nativetest_data_file (sock_file (write create setattr relabelfrom append unlink link rename)))
(neverallow domain nativetest_data_file (fifo_file (write create setattr relabelfrom append unlink link rename)))
;;* lme

;;* lmx 460 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow domain nativetest_data_file (dir (write create setattr relabelfrom link rename add_name remove_name reparent rmdir)))
;;* lme

;;* lmx 461 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow domain nativetest_data_file (file (execute execute_no_trans)))
;;* lme

;;* lmx 464 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_166 property_data_file (dir (write create setattr relabelfrom link rename add_name remove_name reparent rmdir)))
;;* lme

;;* lmx 465 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_166 property_data_file (file (write create setattr relabelfrom append unlink link rename execute execute_no_trans)))
;;* lme

;;* lmx 466 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_166 property_type (file (write create setattr relabelfrom append unlink link rename execute execute_no_trans)))
;;* lme

;;* lmx 467 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_166 properties_device (file (write create setattr relabelfrom append unlink link rename execute execute_no_trans)))
;;* lme

;;* lmx 468 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_166 properties_serial (file (write create setattr relabelfrom append unlink link rename execute execute_no_trans)))
;;* lme

;;* lmx 482 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow domain exec_type (file (write create setattr relabelfrom append unlink link rename)))
(neverallow domain exec_type (dir (write create setattr relabelfrom append unlink link rename)))
(neverallow domain exec_type (lnk_file (write create setattr relabelfrom append unlink link rename)))
(neverallow domain exec_type (chr_file (write create setattr relabelfrom append unlink link rename)))
(neverallow domain exec_type (blk_file (write create setattr relabelfrom append unlink link rename)))
(neverallow domain exec_type (sock_file (write create setattr relabelfrom append unlink link rename)))
(neverallow domain exec_type (fifo_file (write create setattr relabelfrom append unlink link rename)))
(neverallow domain system_file_type (file (write create setattr relabelfrom append unlink link rename)))
(neverallow domain system_file_type (dir (write create setattr relabelfrom append unlink link rename)))
(neverallow domain system_file_type (lnk_file (write create setattr relabelfrom append unlink link rename)))
(neverallow domain system_file_type (chr_file (write create setattr relabelfrom append unlink link rename)))
(neverallow domain system_file_type (blk_file (write create setattr relabelfrom append unlink link rename)))
(neverallow domain system_file_type (sock_file (write create setattr relabelfrom append unlink link rename)))
(neverallow domain system_file_type (fifo_file (write create setattr relabelfrom append unlink link rename)))
(neverallow domain vendor_file_type (file (write create setattr relabelfrom append unlink link rename)))
(neverallow domain vendor_file_type (dir (write create setattr relabelfrom append unlink link rename)))
(neverallow domain vendor_file_type (lnk_file (write create setattr relabelfrom append unlink link rename)))
(neverallow domain vendor_file_type (chr_file (write create setattr relabelfrom append unlink link rename)))
(neverallow domain vendor_file_type (blk_file (write create setattr relabelfrom append unlink link rename)))
(neverallow domain vendor_file_type (sock_file (write create setattr relabelfrom append unlink link rename)))
(neverallow domain vendor_file_type (fifo_file (write create setattr relabelfrom append unlink link rename)))
;;* lme

;;* lmx 484 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_203 exec_type (file (relabelto)))
(neverallow base_typeattr_203 exec_type (dir (relabelto)))
(neverallow base_typeattr_203 exec_type (lnk_file (relabelto)))
(neverallow base_typeattr_203 exec_type (chr_file (relabelto)))
(neverallow base_typeattr_203 exec_type (blk_file (relabelto)))
(neverallow base_typeattr_203 exec_type (sock_file (relabelto)))
(neverallow base_typeattr_203 exec_type (fifo_file (relabelto)))
(neverallow base_typeattr_203 system_file_type (file (relabelto)))
(neverallow base_typeattr_203 system_file_type (dir (relabelto)))
(neverallow base_typeattr_203 system_file_type (lnk_file (relabelto)))
(neverallow base_typeattr_203 system_file_type (chr_file (relabelto)))
(neverallow base_typeattr_203 system_file_type (blk_file (relabelto)))
(neverallow base_typeattr_203 system_file_type (sock_file (relabelto)))
(neverallow base_typeattr_203 system_file_type (fifo_file (relabelto)))
(neverallow base_typeattr_203 vendor_file_type (file (relabelto)))
(neverallow base_typeattr_203 vendor_file_type (dir (relabelto)))
(neverallow base_typeattr_203 vendor_file_type (lnk_file (relabelto)))
(neverallow base_typeattr_203 vendor_file_type (chr_file (relabelto)))
(neverallow base_typeattr_203 vendor_file_type (blk_file (relabelto)))
(neverallow base_typeattr_203 vendor_file_type (sock_file (relabelto)))
(neverallow base_typeattr_203 vendor_file_type (fifo_file (relabelto)))
;;* lme

;;* lmx 487 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_167 exec_type (file (mounton)))
(neverallow base_typeattr_167 exec_type (dir (mounton)))
(neverallow base_typeattr_167 exec_type (lnk_file (mounton)))
(neverallow base_typeattr_167 exec_type (chr_file (mounton)))
(neverallow base_typeattr_167 exec_type (blk_file (mounton)))
(neverallow base_typeattr_167 exec_type (sock_file (mounton)))
(neverallow base_typeattr_167 exec_type (fifo_file (mounton)))
;;* lme

;;* lmx 488 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_166 system_file_type (file (mounton)))
(neverallow base_typeattr_166 system_file_type (dir (mounton)))
(neverallow base_typeattr_166 system_file_type (lnk_file (mounton)))
(neverallow base_typeattr_166 system_file_type (chr_file (mounton)))
(neverallow base_typeattr_166 system_file_type (blk_file (mounton)))
(neverallow base_typeattr_166 system_file_type (sock_file (mounton)))
(neverallow base_typeattr_166 system_file_type (fifo_file (mounton)))
(neverallow base_typeattr_166 vendor_file_type (file (mounton)))
(neverallow base_typeattr_166 vendor_file_type (dir (mounton)))
(neverallow base_typeattr_166 vendor_file_type (lnk_file (mounton)))
(neverallow base_typeattr_166 vendor_file_type (chr_file (mounton)))
(neverallow base_typeattr_166 vendor_file_type (blk_file (mounton)))
(neverallow base_typeattr_166 vendor_file_type (sock_file (mounton)))
(neverallow base_typeattr_166 vendor_file_type (fifo_file (mounton)))
;;* lme

;;* lmx 491 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_167 rootfs (file (write create setattr relabelto append unlink link rename)))
;;* lme

;;* lmx 495 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_167 base_typeattr_211 (filesystem (relabelto)))
;;* lme

;;* lmx 501 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_167 contextmount_type (file (create setattr relabelfrom relabelto append link rename)))
(neverallow base_typeattr_167 contextmount_type (dir (create setattr relabelfrom relabelto append link rename)))
(neverallow base_typeattr_167 contextmount_type (lnk_file (create setattr relabelfrom relabelto append link rename)))
(neverallow base_typeattr_167 contextmount_type (chr_file (create setattr relabelfrom relabelto append link rename)))
(neverallow base_typeattr_167 contextmount_type (blk_file (create setattr relabelfrom relabelto append link rename)))
(neverallow base_typeattr_167 contextmount_type (sock_file (create setattr relabelfrom relabelto append link rename)))
(neverallow base_typeattr_167 contextmount_type (fifo_file (create setattr relabelfrom relabelto append link rename)))
;;* lme

;;* lmx 502 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow domain contextmount_type (file (write unlink)))
(neverallow domain contextmount_type (dir (write unlink)))
(neverallow domain contextmount_type (lnk_file (write unlink)))
(neverallow domain contextmount_type (chr_file (write unlink)))
(neverallow domain contextmount_type (blk_file (write unlink)))
(neverallow domain contextmount_type (sock_file (write unlink)))
(neverallow domain contextmount_type (fifo_file (write unlink)))
;;* lme

;;* lmx 509 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_167 default_android_service (service_manager (add)))
;;* lme

;;* lmx 510 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_167 default_android_vndservice (service_manager (add find)))
;;* lme

;;* lmx 511 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_167 default_android_hwservice (hwservice_manager (add find)))
;;* lme

;;* lmx 520 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_167 hidl_base_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 524 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_208 default_prop (property_service (set)))
;;* lme

;;* lmx 525 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_208 mmc_prop (property_service (set)))
;;* lme

;;* lmx 527 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_166 default_prop (property_service (set)))
;;* lme

;;* lmx 527 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_166 mmc_prop (property_service (set)))
;;* lme

;;* lmx 527 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_208 exported_default_prop (property_service (set)))
;;* lme

;;* lmx 527 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_166 exported_secure_prop (property_service (set)))
;;* lme

;;* lmx 527 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_166 exported2_default_prop (property_service (set)))
;;* lme

;;* lmx 527 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_208 exported3_default_prop (property_service (set)))
;;* lme

;;* lmx 527 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_208 vendor_default_prop (property_service (set)))
;;* lme

;;* lmx 538 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_212 pm_prop (property_service (set)))
;;* lme

;;* lmx 539 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_199 pm_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
;;* lme

;;* lmx 541 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_213 exported_pm_prop (property_service (set)))
;;* lme

;;* lmx 541 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_214 exported_pm_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
;;* lme

;;* lmx 562 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_215 serialno_prop (file (ioctl read getattr lock map open)))
;;* lme

;;* lmx 565 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_216 firstboot_prop (file (ioctl read getattr lock map open)))
;;* lme

;;* lmx 574 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_217 frp_block_device (blk_file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
;;* lme

;;* lmx 587 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_218 metadata_block_device (blk_file (ioctl read write lock append link rename open)))
;;* lme

;;* lmx 597 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_219 system_block_device (blk_file (write append)))
;;* lme

;;* lmx 616 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_220 misc_block_device (blk_file (ioctl read write lock relabelfrom append link rename open)))
;;* lme

;;* lmx 619 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_221 base_typeattr_167 (binder (set_context_mgr)))
;;* lme

;;* lmx 621 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow servicemanager hwbinder_device (chr_file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
;;* lme

;;* lmx 622 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow servicemanager vndbinder_device (chr_file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
;;* lme

;;* lmx 623 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow hwservicemanager binder_device (chr_file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
;;* lme

;;* lmx 624 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow hwservicemanager vndbinder_device (chr_file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
;;* lme

;;* lmx 625 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow vndservicemanager binder_device (chr_file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
;;* lme

;;* lmx 626 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow vndservicemanager hwbinder_device (chr_file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
;;* lme

;;* lmx 631 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_222 binder_device (chr_file (ioctl read write getattr lock append map open)))
;;* lme

(dontaudit domain binder_device (chr_file (audit_access)))
;;* lmx 644 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_222 service_manager_type (service_manager (find)))
;;* lme

;;* lmx 652 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_176 base_typeattr_223 (service_manager (find)))
;;* lme

;;* lmx 677 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_222 servicemanager (binder (call transfer)))
;;* lme

;;* lmx 687 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_224 vndbinder_device (chr_file (ioctl read write getattr lock append map open)))
;;* lme

;;* lmx 695 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow ueventd vndbinder_device (chr_file (ioctl read write append)))
;;* lme

;;* lmx 698 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_225 vndservice_manager_type (service_manager (add find list)))
;;* lme

;;* lmx 705 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_225 vndservicemanager (binder (impersonate call set_context_mgr transfer)))
;;* lme

;;* lmx 722 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_226 base_typeattr_227 (socket (connect sendto)))
(neverallow base_typeattr_226 base_typeattr_227 (tcp_socket (connect sendto)))
(neverallow base_typeattr_226 base_typeattr_227 (udp_socket (connect sendto)))
(neverallow base_typeattr_226 base_typeattr_227 (rawip_socket (connect sendto)))
(neverallow base_typeattr_226 base_typeattr_227 (netlink_socket (connect sendto)))
(neverallow base_typeattr_226 base_typeattr_227 (packet_socket (connect sendto)))
(neverallow base_typeattr_226 base_typeattr_227 (key_socket (connect sendto)))
(neverallow base_typeattr_226 base_typeattr_227 (unix_stream_socket (connect sendto)))
(neverallow base_typeattr_226 base_typeattr_227 (unix_dgram_socket (connect sendto)))
(neverallow base_typeattr_226 base_typeattr_227 (netlink_route_socket (connect sendto)))
(neverallow base_typeattr_226 base_typeattr_227 (netlink_tcpdiag_socket (connect sendto)))
(neverallow base_typeattr_226 base_typeattr_227 (netlink_nflog_socket (connect sendto)))
(neverallow base_typeattr_226 base_typeattr_227 (netlink_xfrm_socket (connect sendto)))
(neverallow base_typeattr_226 base_typeattr_227 (netlink_selinux_socket (connect sendto)))
(neverallow base_typeattr_226 base_typeattr_227 (netlink_audit_socket (connect sendto)))
(neverallow base_typeattr_226 base_typeattr_227 (netlink_dnrt_socket (connect sendto)))
(neverallow base_typeattr_226 base_typeattr_227 (netlink_kobject_uevent_socket (connect sendto)))
(neverallow base_typeattr_226 base_typeattr_227 (appletalk_socket (connect sendto)))
(neverallow base_typeattr_226 base_typeattr_227 (tun_socket (connect sendto)))
(neverallow base_typeattr_226 base_typeattr_227 (netlink_iscsi_socket (connect sendto)))
(neverallow base_typeattr_226 base_typeattr_227 (netlink_fib_lookup_socket (connect sendto)))
(neverallow base_typeattr_226 base_typeattr_227 (netlink_connector_socket (connect sendto)))
(neverallow base_typeattr_226 base_typeattr_227 (netlink_netfilter_socket (connect sendto)))
(neverallow base_typeattr_226 base_typeattr_227 (netlink_generic_socket (connect sendto)))
(neverallow base_typeattr_226 base_typeattr_227 (netlink_scsitransport_socket (connect sendto)))
(neverallow base_typeattr_226 base_typeattr_227 (netlink_rdma_socket (connect sendto)))
(neverallow base_typeattr_226 base_typeattr_227 (netlink_crypto_socket (connect sendto)))
(neverallow base_typeattr_226 base_typeattr_227 (sctp_socket (connect sendto)))
(neverallow base_typeattr_226 base_typeattr_227 (icmp_socket (connect sendto)))
(neverallow base_typeattr_226 base_typeattr_227 (ax25_socket (connect sendto)))
(neverallow base_typeattr_226 base_typeattr_227 (ipx_socket (connect sendto)))
(neverallow base_typeattr_226 base_typeattr_227 (netrom_socket (connect sendto)))
(neverallow base_typeattr_226 base_typeattr_227 (atmpvc_socket (connect sendto)))
(neverallow base_typeattr_226 base_typeattr_227 (x25_socket (connect sendto)))
(neverallow base_typeattr_226 base_typeattr_227 (rose_socket (connect sendto)))
(neverallow base_typeattr_226 base_typeattr_227 (decnet_socket (connect sendto)))
(neverallow base_typeattr_226 base_typeattr_227 (atmsvc_socket (connect sendto)))
(neverallow base_typeattr_226 base_typeattr_227 (rds_socket (connect sendto)))
(neverallow base_typeattr_226 base_typeattr_227 (irda_socket (connect sendto)))
(neverallow base_typeattr_226 base_typeattr_227 (pppox_socket (connect sendto)))
(neverallow base_typeattr_226 base_typeattr_227 (llc_socket (connect sendto)))
(neverallow base_typeattr_226 base_typeattr_227 (can_socket (connect sendto)))
(neverallow base_typeattr_226 base_typeattr_227 (tipc_socket (connect sendto)))
(neverallow base_typeattr_226 base_typeattr_227 (bluetooth_socket (connect sendto)))
(neverallow base_typeattr_226 base_typeattr_227 (iucv_socket (connect sendto)))
(neverallow base_typeattr_226 base_typeattr_227 (rxrpc_socket (connect sendto)))
(neverallow base_typeattr_226 base_typeattr_227 (isdn_socket (connect sendto)))
(neverallow base_typeattr_226 base_typeattr_227 (phonet_socket (connect sendto)))
(neverallow base_typeattr_226 base_typeattr_227 (ieee802154_socket (connect sendto)))
(neverallow base_typeattr_226 base_typeattr_227 (caif_socket (connect sendto)))
(neverallow base_typeattr_226 base_typeattr_227 (alg_socket (connect sendto)))
(neverallow base_typeattr_226 base_typeattr_227 (nfc_socket (connect sendto)))
(neverallow base_typeattr_226 base_typeattr_227 (vsock_socket (connect sendto)))
(neverallow base_typeattr_226 base_typeattr_227 (kcm_socket (connect sendto)))
(neverallow base_typeattr_226 base_typeattr_227 (qipcrtr_socket (connect sendto)))
(neverallow base_typeattr_226 base_typeattr_227 (smc_socket (connect sendto)))
(neverallow base_typeattr_226 base_typeattr_227 (xdp_socket (connect sendto)))
;;* lme

;;* lmx 722 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_226 base_typeattr_227 (unix_stream_socket (connectto)))
;;* lme

;;* lmx 734 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_228 base_typeattr_229 (socket (connect sendto)))
(neverallow base_typeattr_228 base_typeattr_229 (tcp_socket (connect sendto)))
(neverallow base_typeattr_228 base_typeattr_229 (udp_socket (connect sendto)))
(neverallow base_typeattr_228 base_typeattr_229 (rawip_socket (connect sendto)))
(neverallow base_typeattr_228 base_typeattr_229 (netlink_socket (connect sendto)))
(neverallow base_typeattr_228 base_typeattr_229 (packet_socket (connect sendto)))
(neverallow base_typeattr_228 base_typeattr_229 (key_socket (connect sendto)))
(neverallow base_typeattr_228 base_typeattr_229 (unix_stream_socket (connect sendto)))
(neverallow base_typeattr_228 base_typeattr_229 (unix_dgram_socket (connect sendto)))
(neverallow base_typeattr_228 base_typeattr_229 (netlink_route_socket (connect sendto)))
(neverallow base_typeattr_228 base_typeattr_229 (netlink_tcpdiag_socket (connect sendto)))
(neverallow base_typeattr_228 base_typeattr_229 (netlink_nflog_socket (connect sendto)))
(neverallow base_typeattr_228 base_typeattr_229 (netlink_xfrm_socket (connect sendto)))
(neverallow base_typeattr_228 base_typeattr_229 (netlink_selinux_socket (connect sendto)))
(neverallow base_typeattr_228 base_typeattr_229 (netlink_audit_socket (connect sendto)))
(neverallow base_typeattr_228 base_typeattr_229 (netlink_dnrt_socket (connect sendto)))
(neverallow base_typeattr_228 base_typeattr_229 (netlink_kobject_uevent_socket (connect sendto)))
(neverallow base_typeattr_228 base_typeattr_229 (appletalk_socket (connect sendto)))
(neverallow base_typeattr_228 base_typeattr_229 (tun_socket (connect sendto)))
(neverallow base_typeattr_228 base_typeattr_229 (netlink_iscsi_socket (connect sendto)))
(neverallow base_typeattr_228 base_typeattr_229 (netlink_fib_lookup_socket (connect sendto)))
(neverallow base_typeattr_228 base_typeattr_229 (netlink_connector_socket (connect sendto)))
(neverallow base_typeattr_228 base_typeattr_229 (netlink_netfilter_socket (connect sendto)))
(neverallow base_typeattr_228 base_typeattr_229 (netlink_generic_socket (connect sendto)))
(neverallow base_typeattr_228 base_typeattr_229 (netlink_scsitransport_socket (connect sendto)))
(neverallow base_typeattr_228 base_typeattr_229 (netlink_rdma_socket (connect sendto)))
(neverallow base_typeattr_228 base_typeattr_229 (netlink_crypto_socket (connect sendto)))
(neverallow base_typeattr_228 base_typeattr_229 (sctp_socket (connect sendto)))
(neverallow base_typeattr_228 base_typeattr_229 (icmp_socket (connect sendto)))
(neverallow base_typeattr_228 base_typeattr_229 (ax25_socket (connect sendto)))
(neverallow base_typeattr_228 base_typeattr_229 (ipx_socket (connect sendto)))
(neverallow base_typeattr_228 base_typeattr_229 (netrom_socket (connect sendto)))
(neverallow base_typeattr_228 base_typeattr_229 (atmpvc_socket (connect sendto)))
(neverallow base_typeattr_228 base_typeattr_229 (x25_socket (connect sendto)))
(neverallow base_typeattr_228 base_typeattr_229 (rose_socket (connect sendto)))
(neverallow base_typeattr_228 base_typeattr_229 (decnet_socket (connect sendto)))
(neverallow base_typeattr_228 base_typeattr_229 (atmsvc_socket (connect sendto)))
(neverallow base_typeattr_228 base_typeattr_229 (rds_socket (connect sendto)))
(neverallow base_typeattr_228 base_typeattr_229 (irda_socket (connect sendto)))
(neverallow base_typeattr_228 base_typeattr_229 (pppox_socket (connect sendto)))
(neverallow base_typeattr_228 base_typeattr_229 (llc_socket (connect sendto)))
(neverallow base_typeattr_228 base_typeattr_229 (can_socket (connect sendto)))
(neverallow base_typeattr_228 base_typeattr_229 (tipc_socket (connect sendto)))
(neverallow base_typeattr_228 base_typeattr_229 (bluetooth_socket (connect sendto)))
(neverallow base_typeattr_228 base_typeattr_229 (iucv_socket (connect sendto)))
(neverallow base_typeattr_228 base_typeattr_229 (rxrpc_socket (connect sendto)))
(neverallow base_typeattr_228 base_typeattr_229 (isdn_socket (connect sendto)))
(neverallow base_typeattr_228 base_typeattr_229 (phonet_socket (connect sendto)))
(neverallow base_typeattr_228 base_typeattr_229 (ieee802154_socket (connect sendto)))
(neverallow base_typeattr_228 base_typeattr_229 (caif_socket (connect sendto)))
(neverallow base_typeattr_228 base_typeattr_229 (alg_socket (connect sendto)))
(neverallow base_typeattr_228 base_typeattr_229 (nfc_socket (connect sendto)))
(neverallow base_typeattr_228 base_typeattr_229 (vsock_socket (connect sendto)))
(neverallow base_typeattr_228 base_typeattr_229 (kcm_socket (connect sendto)))
(neverallow base_typeattr_228 base_typeattr_229 (qipcrtr_socket (connect sendto)))
(neverallow base_typeattr_228 base_typeattr_229 (smc_socket (connect sendto)))
(neverallow base_typeattr_228 base_typeattr_229 (xdp_socket (connect sendto)))
;;* lme

;;* lmx 734 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_228 base_typeattr_229 (unix_stream_socket (connectto)))
;;* lme

;;* lmx 753 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_230 netd (socket (connect sendto)))
(neverallow base_typeattr_230 netd (tcp_socket (connect sendto)))
(neverallow base_typeattr_230 netd (udp_socket (connect sendto)))
(neverallow base_typeattr_230 netd (rawip_socket (connect sendto)))
(neverallow base_typeattr_230 netd (netlink_socket (connect sendto)))
(neverallow base_typeattr_230 netd (packet_socket (connect sendto)))
(neverallow base_typeattr_230 netd (key_socket (connect sendto)))
(neverallow base_typeattr_230 netd (unix_stream_socket (connect sendto)))
(neverallow base_typeattr_230 netd (unix_dgram_socket (connect sendto)))
(neverallow base_typeattr_230 netd (netlink_route_socket (connect sendto)))
(neverallow base_typeattr_230 netd (netlink_tcpdiag_socket (connect sendto)))
(neverallow base_typeattr_230 netd (netlink_nflog_socket (connect sendto)))
(neverallow base_typeattr_230 netd (netlink_xfrm_socket (connect sendto)))
(neverallow base_typeattr_230 netd (netlink_selinux_socket (connect sendto)))
(neverallow base_typeattr_230 netd (netlink_audit_socket (connect sendto)))
(neverallow base_typeattr_230 netd (netlink_dnrt_socket (connect sendto)))
(neverallow base_typeattr_230 netd (netlink_kobject_uevent_socket (connect sendto)))
(neverallow base_typeattr_230 netd (appletalk_socket (connect sendto)))
(neverallow base_typeattr_230 netd (tun_socket (connect sendto)))
(neverallow base_typeattr_230 netd (netlink_iscsi_socket (connect sendto)))
(neverallow base_typeattr_230 netd (netlink_fib_lookup_socket (connect sendto)))
(neverallow base_typeattr_230 netd (netlink_connector_socket (connect sendto)))
(neverallow base_typeattr_230 netd (netlink_netfilter_socket (connect sendto)))
(neverallow base_typeattr_230 netd (netlink_generic_socket (connect sendto)))
(neverallow base_typeattr_230 netd (netlink_scsitransport_socket (connect sendto)))
(neverallow base_typeattr_230 netd (netlink_rdma_socket (connect sendto)))
(neverallow base_typeattr_230 netd (netlink_crypto_socket (connect sendto)))
(neverallow base_typeattr_230 netd (sctp_socket (connect sendto)))
(neverallow base_typeattr_230 netd (icmp_socket (connect sendto)))
(neverallow base_typeattr_230 netd (ax25_socket (connect sendto)))
(neverallow base_typeattr_230 netd (ipx_socket (connect sendto)))
(neverallow base_typeattr_230 netd (netrom_socket (connect sendto)))
(neverallow base_typeattr_230 netd (atmpvc_socket (connect sendto)))
(neverallow base_typeattr_230 netd (x25_socket (connect sendto)))
(neverallow base_typeattr_230 netd (rose_socket (connect sendto)))
(neverallow base_typeattr_230 netd (decnet_socket (connect sendto)))
(neverallow base_typeattr_230 netd (atmsvc_socket (connect sendto)))
(neverallow base_typeattr_230 netd (rds_socket (connect sendto)))
(neverallow base_typeattr_230 netd (irda_socket (connect sendto)))
(neverallow base_typeattr_230 netd (pppox_socket (connect sendto)))
(neverallow base_typeattr_230 netd (llc_socket (connect sendto)))
(neverallow base_typeattr_230 netd (can_socket (connect sendto)))
(neverallow base_typeattr_230 netd (tipc_socket (connect sendto)))
(neverallow base_typeattr_230 netd (bluetooth_socket (connect sendto)))
(neverallow base_typeattr_230 netd (iucv_socket (connect sendto)))
(neverallow base_typeattr_230 netd (rxrpc_socket (connect sendto)))
(neverallow base_typeattr_230 netd (isdn_socket (connect sendto)))
(neverallow base_typeattr_230 netd (phonet_socket (connect sendto)))
(neverallow base_typeattr_230 netd (ieee802154_socket (connect sendto)))
(neverallow base_typeattr_230 netd (caif_socket (connect sendto)))
(neverallow base_typeattr_230 netd (alg_socket (connect sendto)))
(neverallow base_typeattr_230 netd (nfc_socket (connect sendto)))
(neverallow base_typeattr_230 netd (vsock_socket (connect sendto)))
(neverallow base_typeattr_230 netd (kcm_socket (connect sendto)))
(neverallow base_typeattr_230 netd (qipcrtr_socket (connect sendto)))
(neverallow base_typeattr_230 netd (smc_socket (connect sendto)))
(neverallow base_typeattr_230 netd (xdp_socket (connect sendto)))
;;* lme

;;* lmx 753 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_230 netd (unix_stream_socket (connectto)))
;;* lme

;;* lmx 763 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_231 core_data_file_type (sock_file (create setattr lock relabelfrom relabelto map unlink link rename execute quotaon mounton open audit_access execmod)))
(neverallow base_typeattr_231 coredomain_socket (sock_file (create setattr lock relabelfrom relabelto map unlink link rename execute quotaon mounton open audit_access execmod)))
(neverallow base_typeattr_231 unlabeled (sock_file (create setattr lock relabelfrom relabelto map unlink link rename execute quotaon mounton open audit_access execmod)))
;;* lme

;;* lmx 777 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_176 base_typeattr_232 (sock_file (create setattr lock relabelfrom relabelto map unlink link rename execute quotaon mounton open audit_access execmod)))
;;* lme

;;* lmx 793 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_233 base_typeattr_234 (sock_file (create setattr lock relabelfrom relabelto map unlink link rename execute quotaon mounton open audit_access execmod)))
;;* lme

;;* lmx 816 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_235 base_typeattr_236 (file (create setattr lock relabelfrom relabelto unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod open audit_access)))
(neverallow base_typeattr_235 base_typeattr_236 (lnk_file (create setattr lock relabelfrom relabelto unlink link rename execute quotaon mounton open audit_access execmod)))
(neverallow base_typeattr_235 base_typeattr_236 (chr_file (create setattr lock relabelfrom relabelto unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod open audit_access)))
(neverallow base_typeattr_235 base_typeattr_236 (blk_file (create setattr lock relabelfrom relabelto unlink link rename execute quotaon mounton open audit_access execmod)))
(neverallow base_typeattr_235 base_typeattr_236 (sock_file (create setattr lock relabelfrom relabelto unlink link rename execute quotaon mounton open audit_access execmod)))
(neverallow base_typeattr_235 base_typeattr_236 (fifo_file (create setattr lock relabelfrom relabelto unlink link rename execute quotaon mounton open audit_access execmod)))
;;* lme

;;* lmx 830 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_235 base_typeattr_237 (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton add_name remove_name reparent search rmdir open audit_access execmod)))
;;* lme

;;* lmx 846 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_238 base_typeattr_239 (file (create setattr lock relabelfrom relabelto unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod open audit_access)))
(neverallow base_typeattr_238 base_typeattr_239 (lnk_file (create setattr lock relabelfrom relabelto unlink link rename execute quotaon mounton open audit_access execmod)))
(neverallow base_typeattr_238 base_typeattr_239 (chr_file (create setattr lock relabelfrom relabelto unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod open audit_access)))
(neverallow base_typeattr_238 base_typeattr_239 (blk_file (create setattr lock relabelfrom relabelto unlink link rename execute quotaon mounton open audit_access execmod)))
(neverallow base_typeattr_238 base_typeattr_239 (sock_file (create setattr lock relabelfrom relabelto unlink link rename execute quotaon mounton open audit_access execmod)))
(neverallow base_typeattr_238 base_typeattr_239 (fifo_file (create setattr lock relabelfrom relabelto unlink link rename execute quotaon mounton open audit_access execmod)))
;;* lme

;;* lmx 846 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_240 base_typeattr_241 (file (create setattr lock relabelfrom relabelto unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod open audit_access)))
(neverallow base_typeattr_240 base_typeattr_241 (lnk_file (create setattr lock relabelfrom relabelto unlink link rename execute quotaon mounton open audit_access execmod)))
(neverallow base_typeattr_240 base_typeattr_241 (chr_file (create setattr lock relabelfrom relabelto unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod open audit_access)))
(neverallow base_typeattr_240 base_typeattr_241 (blk_file (create setattr lock relabelfrom relabelto unlink link rename execute quotaon mounton open audit_access execmod)))
(neverallow base_typeattr_240 base_typeattr_241 (sock_file (create setattr lock relabelfrom relabelto unlink link rename execute quotaon mounton open audit_access execmod)))
(neverallow base_typeattr_240 base_typeattr_241 (fifo_file (create setattr lock relabelfrom relabelto unlink link rename execute quotaon mounton open audit_access execmod)))
;;* lme

;;* lmx 846 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow vendor_init unencrypted_data_file (file (write create setattr relabelfrom relabelto append unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod audit_access)))
;;* lme

;;* lmx 876 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_238 base_typeattr_242 (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton add_name remove_name reparent search rmdir open audit_access execmod)))
;;* lme

;;* lmx 876 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_240 base_typeattr_243 (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton add_name remove_name reparent search rmdir open audit_access execmod)))
;;* lme

;;* lmx 876 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow vendor_init unencrypted_data_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton add_name remove_name reparent rmdir open audit_access execmod)))
;;* lme

;;* lmx 906 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_244 system_data_file (dir (ioctl read write create setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton add_name remove_name reparent rmdir open audit_access execmod)))
;;* lme

;;* lmx 918 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_245 vendor_data_file (dir (ioctl read write create setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton add_name remove_name reparent rmdir open audit_access execmod)))
;;* lme

;;* lmx 931 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_246 vendor_data_file (file (create setattr lock relabelfrom relabelto unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod open audit_access)))
(neverallow base_typeattr_246 vendor_data_file (lnk_file (create setattr lock relabelfrom relabelto unlink link rename execute quotaon mounton open audit_access execmod)))
(neverallow base_typeattr_246 vendor_data_file (chr_file (create setattr lock relabelfrom relabelto unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod open audit_access)))
(neverallow base_typeattr_246 vendor_data_file (blk_file (create setattr lock relabelfrom relabelto unlink link rename execute quotaon mounton open audit_access execmod)))
(neverallow base_typeattr_246 vendor_data_file (sock_file (create setattr lock relabelfrom relabelto unlink link rename execute quotaon mounton open audit_access execmod)))
(neverallow base_typeattr_246 vendor_data_file (fifo_file (create setattr lock relabelfrom relabelto unlink link rename execute quotaon mounton open audit_access execmod)))
;;* lme

;;* lmx 942 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_247 vendor_shell_exec (file (execute execute_no_trans)))
;;* lme

;;* lmx 952 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_248 base_typeattr_249 (file (execute execute_no_trans entrypoint)))
;;* lme

;;* lmx 971 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_250 base_typeattr_251 (file (execute)))
;;* lme

;;* lmx 988 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_252 base_typeattr_253 (file (execute_no_trans)))
;;* lme

;;* lmx 999 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_254 base_typeattr_255 (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod open audit_access)))
;;* lme

;;* lmx 1029 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_248 base_typeattr_256 (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod open audit_access)))
;;* lme

;;* lmx 1060 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_257 zygote (unix_stream_socket (connectto)))
;;* lme

;;* lmx 1061 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_258 zygote_socket (sock_file (write)))
;;* lme

;;* lmx 1063 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_259 webview_zygote (unix_stream_socket (connectto)))
;;* lme

;;* lmx 1064 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_258 webview_zygote (sock_file (write)))
;;* lme

;;* lmx 1065 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_258 app_zygote (sock_file (write)))
;;* lme

;;* lmx 1079 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_260 tombstoned_crash_socket (unix_stream_socket (connectto)))
;;* lme

;;* lmx 1083 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_261 tombstoned_intercept_socket (sock_file (write)))
;;* lme

;;* lmx 1084 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_261 tombstoned_intercept_socket (unix_stream_socket (connectto)))
;;* lme

;;* lmx 1102 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_167 base_typeattr_167 (sem (create destroy getattr setattr read write associate unix_read unix_write)))
(neverallow base_typeattr_167 base_typeattr_167 (msg (send receive)))
(neverallow base_typeattr_167 base_typeattr_167 (msgq (create destroy getattr setattr read write associate unix_read unix_write enqueue)))
(neverallow base_typeattr_167 base_typeattr_167 (shm (create destroy getattr setattr read write associate unix_read unix_write lock)))
;;* lme

;;* lmx 1106 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_167 dev_type (lnk_file (mounton)))
(neverallow base_typeattr_167 dev_type (sock_file (mounton)))
(neverallow base_typeattr_167 dev_type (fifo_file (mounton)))
(neverallow base_typeattr_167 fs_type (lnk_file (mounton)))
(neverallow base_typeattr_167 fs_type (sock_file (mounton)))
(neverallow base_typeattr_167 fs_type (fifo_file (mounton)))
(neverallow base_typeattr_167 file_type (lnk_file (mounton)))
(neverallow base_typeattr_167 file_type (sock_file (mounton)))
(neverallow base_typeattr_167 file_type (fifo_file (mounton)))
;;* lme

;;* lmx 1111 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow domain su_exec (file (execute execute_no_trans)))
;;* lme

;;* lmx 1123 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_167 base_typeattr_262 (file (execmod)))
;;* lme

;;* lmx 1128 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_167 self (process (execstack execheap)))
;;* lme

;;* lmx 1132 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_263 file_type (file (execmod)))
;;* lme

;;* lmx 1134 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_166 proc (file (mounton)))
(neverallow base_typeattr_166 proc (dir (mounton)))
;;* lme

;;* lmx 1142 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_264 domain (process (transition dyntransition)))
;;* lme

;;* lmx 1160 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_265 system_data_file (file (write create setattr relabelfrom append unlink link rename)))
;;* lme

;;* lmx 1163 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow installd system_data_file (file (write create setattr relabelto append link rename execute quotaon mounton execute_no_trans entrypoint execmod audit_access)))
;;* lme

;;* lmx 1174 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_266 system_app_data_file (file (create unlink open)))
(neverallow base_typeattr_266 system_app_data_file (dir (create unlink open)))
(neverallow base_typeattr_266 system_app_data_file (lnk_file (create unlink open)))
(neverallow base_typeattr_266 system_app_data_file (chr_file (create unlink open)))
(neverallow base_typeattr_266 system_app_data_file (blk_file (create unlink open)))
(neverallow base_typeattr_266 system_app_data_file (sock_file (create unlink open)))
(neverallow base_typeattr_266 system_app_data_file (fifo_file (create unlink open)))
;;* lme

;;* lmx 1180 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow untrusted_app_all system_app_data_file (file (create unlink open)))
(neverallow untrusted_app_all system_app_data_file (dir (create unlink open)))
(neverallow untrusted_app_all system_app_data_file (lnk_file (create unlink open)))
(neverallow untrusted_app_all system_app_data_file (chr_file (create unlink open)))
(neverallow untrusted_app_all system_app_data_file (blk_file (create unlink open)))
(neverallow untrusted_app_all system_app_data_file (sock_file (create unlink open)))
(neverallow untrusted_app_all system_app_data_file (fifo_file (create unlink open)))
(neverallow ephemeral_app system_app_data_file (file (create unlink open)))
(neverallow ephemeral_app system_app_data_file (dir (create unlink open)))
(neverallow ephemeral_app system_app_data_file (lnk_file (create unlink open)))
(neverallow ephemeral_app system_app_data_file (chr_file (create unlink open)))
(neverallow ephemeral_app system_app_data_file (blk_file (create unlink open)))
(neverallow ephemeral_app system_app_data_file (sock_file (create unlink open)))
(neverallow ephemeral_app system_app_data_file (fifo_file (create unlink open)))
(neverallow isolated_app system_app_data_file (file (create unlink open)))
(neverallow isolated_app system_app_data_file (dir (create unlink open)))
(neverallow isolated_app system_app_data_file (lnk_file (create unlink open)))
(neverallow isolated_app system_app_data_file (chr_file (create unlink open)))
(neverallow isolated_app system_app_data_file (blk_file (create unlink open)))
(neverallow isolated_app system_app_data_file (sock_file (create unlink open)))
(neverallow isolated_app system_app_data_file (fifo_file (create unlink open)))
(neverallow priv_app system_app_data_file (file (create unlink open)))
(neverallow priv_app system_app_data_file (dir (create unlink open)))
(neverallow priv_app system_app_data_file (lnk_file (create unlink open)))
(neverallow priv_app system_app_data_file (chr_file (create unlink open)))
(neverallow priv_app system_app_data_file (blk_file (create unlink open)))
(neverallow priv_app system_app_data_file (sock_file (create unlink open)))
(neverallow priv_app system_app_data_file (fifo_file (create unlink open)))
;;* lme

;;* lmx 1193 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_267 shell (process (transition dyntransition)))
;;* lme

;;* lmx 1199 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_268 base_typeattr_182 (process (transition dyntransition)))
;;* lme

;;* lmx 1207 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_269 app_data_file (lnk_file (read)))
(neverallow base_typeattr_269 privapp_data_file (lnk_file (read)))
;;* lme

;;* lmx 1214 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_270 shell_data_file (lnk_file (read)))
;;* lme

;;* lmx 1228 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_271 shell_data_file (dir (write create setattr relabelfrom link rename add_name remove_name reparent rmdir)))
;;* lme

;;* lmx 1240 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_272 shell_data_file (dir (search open)))
;;* lme

;;* lmx 1251 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_273 shell_data_file (file (open)))
;;* lme

;;* lmx 1258 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_167 base_typeattr_274 (service_manager (list)))
;;* lme

;;* lmx 1263 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_167 base_typeattr_275 (hwservice_manager (list)))
;;* lme

;;* lmx 1282 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_167 domain (file (execute execute_no_trans entrypoint)))
;;* lme

;;* lmx 1288 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_276 debugfs (file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
(neverallow base_typeattr_276 debugfs (lnk_file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
;;* lme

;;* lmx 1291 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow domain debugfs_type (file (execute execute_no_trans)))
;;* lme

;;* lmx 1299 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_277 profman_exec (file (execute execute_no_trans)))
;;* lme

;;* lmx 1304 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_167 base_typeattr_278 (system (module_load)))
;;* lme

;;* lmx 1308 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_167 self (capability (setfcap)))
(neverallow base_typeattr_167 self (cap_userns (setfcap)))
;;* lme

;;* lmx 1311 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow domain crash_dump (process (noatsecure)))
;;* lme

;;* lmx 1315 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_279 coredomain_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 1320 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_167 same_process_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 1324 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_280 vendor_file (file (write create setattr relabelfrom append unlink link rename execute execute_no_trans open)))
;;* lme

;;* lmx 1347 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow domain proc_type (dir (write create link rename add_name remove_name reparent rmdir)))
(neverallow domain sysfs_type (dir (write create link rename add_name remove_name reparent rmdir)))
;;* lme

;;* lmx 1350 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow domain cgroup (file (create)))
;;* lme

(dontaudit domain proc_type (dir (write)))
(dontaudit domain sysfs_type (dir (write)))
(dontaudit domain cgroup (file (create)))
;;* lmx 1372 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_281 mnt_vendor_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton add_name remove_name reparent search rmdir open audit_access execmod)))
;;* lme

;;* lmx 1375 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_282 vendor_public_lib_file (file (execute execute_no_trans)))
;;* lme

;;* lmx 1386 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_199 mnt_product_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton add_name remove_name reparent search rmdir open audit_access execmod)))
;;* lme

;;* lmx 1389 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_283 sysfs_batteryinfo (file (read open)))
;;* lme

;;* lmx 1409 system/sepolicy/prebuilts/api/29.0/public/domain.te

(neverallow base_typeattr_284 hal_codec2_hwservice (hwservice_manager (add)))
;;* lme

(allow drmserver servicemanager (binder (call transfer)))
(allow servicemanager drmserver (dir (search)))
(allow servicemanager drmserver (file (read open)))
(allow servicemanager drmserver (process (getattr)))
(allow drmserver system_server (binder (call transfer)))
(allow system_server drmserver (binder (transfer)))
(allow drmserver system_server (fd (use)))
(allow drmserver appdomain (binder (call transfer)))
(allow appdomain drmserver (binder (transfer)))
(allow drmserver appdomain (fd (use)))
(allow drmserver system_server (fd (use)))
(allow drmserver mediaserver (binder (call transfer)))
(allow mediaserver drmserver (binder (transfer)))
(allow drmserver mediaserver (fd (use)))
(allow drmserver sdcard_type (dir (search)))
(allow drmserver drm_data_file (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
(allow drmserver drm_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow drmserver app_data_file (file (read write getattr map)))
(allow drmserver privapp_data_file (file (read write getattr map)))
(allow drmserver sdcard_type (file (read write getattr map)))
(allow drmserver efs_file (dir (ioctl read getattr lock search open)))
(allow drmserver efs_file (file (ioctl read getattr lock map open)))
(allow drmserver efs_file (lnk_file (ioctl read getattr lock map open)))
(allow drmserver apk_data_file (dir (ioctl read write getattr lock add_name remove_name search open)))
(allow drmserver drmserver_socket (sock_file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow drmserver apk_data_file (sock_file (unlink)))
(allow drmserver media_rw_data_file (dir (ioctl read getattr lock search open)))
(allow drmserver media_rw_data_file (file (ioctl read getattr lock map open)))
(allow drmserver media_rw_data_file (lnk_file (ioctl read getattr lock map open)))
(allow drmserver apk_data_file (file (read getattr map)))
(allow drmserver asec_apk_file (file (read getattr map)))
(allow drmserver ringtone_file (file (read getattr map)))
(allow drmserver radio_data_file (file (read getattr map)))
(allow drmserver oemfs (dir (search)))
(allow drmserver oemfs (file (ioctl read getattr lock map open)))
(allow drmserver drmserver_service (service_manager (add find)))
;;* lmx 51 system/sepolicy/prebuilts/api/29.0/public/drmserver.te

(neverallow base_typeattr_285 drmserver_service (service_manager (add)))
;;* lme

(allow drmserver permission_service (service_manager (find)))
(allow drmserver selinuxfs (dir (ioctl read getattr lock search open)))
(allow drmserver selinuxfs (file (ioctl read getattr lock map open)))
(allow drmserver selinuxfs (lnk_file (ioctl read getattr lock map open)))
(allow drmserver selinuxfs (file (write lock append map open)))
(allow drmserver kernel (security (compute_av)))
(allow drmserver self (netlink_selinux_socket (read write create getattr setattr lock relabelfrom relabelto append bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(allow drmserver cgroup (dir (ioctl read getattr lock search open)))
(allow drmserver cgroup (file (ioctl read getattr lock map open)))
(allow drmserver cgroup (lnk_file (ioctl read getattr lock map open)))
(allow drmserver system_file (dir (ioctl read getattr lock search open)))
(allow drmserver system_file (file (ioctl read getattr lock map open)))
(allow drmserver system_file (lnk_file (ioctl read getattr lock map open)))
(allow dumpstate servicemanager (binder (call transfer)))
(allow servicemanager dumpstate (dir (search)))
(allow servicemanager dumpstate (file (read open)))
(allow servicemanager dumpstate (process (getattr)))
(allow dumpstate sysfs_wake_lock (file (ioctl read write getattr lock append map open)))
(allow dumpstate self (capability2 (block_suspend)))
(allow dumpstate self (cap2_userns (block_suspend)))
(allow dumpstate system_suspend_server (binder (call transfer)))
(allow system_suspend_server dumpstate (binder (transfer)))
(allow dumpstate system_suspend_server (fd (use)))
(allow dumpstate system_suspend_hwservice (hwservice_manager (find)))
(allow dumpstate hwservicemanager (binder (call transfer)))
(allow hwservicemanager dumpstate (binder (call transfer)))
(allow hwservicemanager dumpstate (dir (search)))
(allow hwservicemanager dumpstate (file (read map open)))
(allow hwservicemanager dumpstate (process (getattr)))
(allow dumpstate hwservicemanager_prop (file (read getattr map open)))
(allow dumpstate hidl_manager_hwservice (hwservice_manager (find)))
(allow dumpstate self (capability (setgid setuid sys_resource)))
(allow dumpstate self (cap_userns (setgid setuid sys_resource)))
(allow dumpstate domain (dir (ioctl read getattr lock search open)))
(allow dumpstate domain (file (ioctl read getattr lock map open)))
(allow dumpstate domain (lnk_file (ioctl read getattr lock map open)))
(allow dumpstate self (capability (kill net_admin net_raw)))
(allow dumpstate self (cap_userns (kill net_admin net_raw)))
(allow dumpstate system_file (file (execute_no_trans)))
(allow dumpstate toolbox_exec (file (ioctl read getattr lock map execute execute_no_trans open)))
(allow dumpstate system_file (dir (ioctl read getattr lock search open)))
(allow dumpstate self (capability (chown dac_override dac_read_search fowner fsetid)))
(allow dumpstate self (cap_userns (chown dac_override dac_read_search fowner fsetid)))
(allow dumpstate anr_data_file (dir (ioctl read write getattr lock add_name remove_name search open)))
(allow dumpstate anr_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow dumpstate system_data_file (file (ioctl read getattr lock map open)))
(allow dumpstate privapp_data_file (file (append)))
(allow dumpstate self (capability2 (syslog)))
(allow dumpstate self (cap2_userns (syslog)))
(allow dumpstate kernel (system (syslog_read)))
(allow dumpstate pstorefs (dir (ioctl read getattr lock search open)))
(allow dumpstate pstorefs (file (ioctl read getattr lock map open)))
(allow dumpstate domain (process (getattr)))
(allow dumpstate appdomain (process (signal)))
(allow dumpstate system_server (process (signal)))
(allow dumpstate zygote (process (signal)))
(allow dumpstate hal_audio_server (process (signal)))
(allow dumpstate hal_bluetooth_server (process (signal)))
(allow dumpstate hal_camera_server (process (signal)))
(allow dumpstate hal_codec2_server (process (signal)))
(allow dumpstate hal_drm_server (process (signal)))
(allow dumpstate hal_face_server (process (signal)))
(allow dumpstate hal_graphics_allocator_server (process (signal)))
(allow dumpstate hal_graphics_composer_server (process (signal)))
(allow dumpstate hal_health_server (process (signal)))
(allow dumpstate hal_omx_server (process (signal)))
(allow dumpstate hal_power_server (process (signal)))
(allow dumpstate hal_power_stats_server (process (signal)))
(allow dumpstate hal_sensors_server (process (signal)))
(allow dumpstate hal_thermal_server (process (signal)))
(allow dumpstate hal_vr_server (process (signal)))
(allow dumpstate audioserver (process (signal)))
(allow dumpstate cameraserver (process (signal)))
(allow dumpstate drmserver (process (signal)))
(allow dumpstate inputflinger (process (signal)))
(allow dumpstate mediadrmserver (process (signal)))
(allow dumpstate mediaextractor (process (signal)))
(allow dumpstate mediametrics (process (signal)))
(allow dumpstate mediaserver (process (signal)))
(allow dumpstate mediaswcodec (process (signal)))
(allow dumpstate sdcardd (process (signal)))
(allow dumpstate surfaceflinger (process (signal)))
(allow dumpstate vold (process (signal)))
(allow dumpstate tombstoned_intercept_socket (sock_file (write)))
(allow dumpstate tombstoned (unix_stream_socket (connectto)))
(allow dumpstate sysfs_type (dir (ioctl read getattr lock search open)))
(allow dumpstate sysfs_devices_block (file (ioctl read getattr lock map open)))
(allow dumpstate sysfs_dm (file (ioctl read getattr lock map open)))
(allow dumpstate sysfs_loop (file (ioctl read getattr lock map open)))
(allow dumpstate sysfs_usb (file (ioctl read getattr lock map open)))
(allow dumpstate sysfs_zram (file (ioctl read getattr lock map open)))
(allow dumpstate debugfs (file (ioctl read getattr lock map open)))
(auditallow dumpstate debugfs (file (ioctl read getattr lock map open)))
(allow dumpstate debugfs_mmc (file (ioctl read getattr lock map open)))
(allow dumpstate block_device (dir (getattr search)))
(allow dumpstate rootfs (dir (getattr search)))
(allow dumpstate selinuxfs (dir (getattr search)))
(allow dumpstate tmpfs (dir (getattr search)))
(allow dumpstate metadata_file (dir (getattr search)))
(allow dumpstate storage_file (dir (getattr search)))
(allow dumpstate cache_file (dir (getattr search)))
(allow dumpstate fuse_device (chr_file (getattr)))
(allow dumpstate dm_device (blk_file (getattr)))
(allow dumpstate cache_block_device (blk_file (getattr)))
(allow dumpstate rootfs (lnk_file (read getattr)))
(allow dumpstate cache_file (lnk_file (read getattr)))
(allow dumpstate cgroup (dir (ioctl read getattr lock search open)))
(allow dumpstate cgroup (file (ioctl read getattr lock map open)))
(allow dumpstate cgroup (lnk_file (ioctl read getattr lock map open)))
(allow dumpstate binderservicedomain (binder (call transfer)))
(allow binderservicedomain dumpstate (binder (transfer)))
(allow dumpstate binderservicedomain (fd (use)))
(allow dumpstate appdomain (binder (call transfer)))
(allow dumpstate netd (binder (call transfer)))
(allow dumpstate wificond (binder (call transfer)))
(allow appdomain dumpstate (binder (transfer)))
(allow netd dumpstate (binder (transfer)))
(allow wificond dumpstate (binder (transfer)))
(allow dumpstate appdomain (fd (use)))
(allow dumpstate netd (fd (use)))
(allow dumpstate wificond (fd (use)))
(allow dumpstate self (capability (sys_ptrace)))
(allow dumpstate self (cap_userns (sys_ptrace)))
(allow dumpstate shell_data_file (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
(allow dumpstate shell_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow dumpstate shell_exec (file (ioctl read getattr lock map execute execute_no_trans open)))
(allow dumpstate zygote_exec (file (ioctl read getattr lock map execute execute_no_trans open)))
(allow dumpstate bluetooth_data_file (dir (search)))
(allow dumpstate bluetooth_logs_data_file (dir (ioctl read getattr lock search open)))
(allow dumpstate bluetooth_logs_data_file (file (ioctl read getattr lock map open)))
(allow dumpstate gpu_device (chr_file (ioctl read write getattr lock append map open)))
(allow dumpstate logcat_exec (file (ioctl read getattr lock map execute execute_no_trans open)))
(allow dumpstate logdr_socket (sock_file (write)))
(allow dumpstate logd (unix_stream_socket (connectto)))
(allow dumpstate logd_socket (sock_file (write)))
(allow dumpstate logd (unix_stream_socket (connectto)))
(allow dumpstate runtime_event_log_tags_file (file (ioctl read getattr lock map open)))
(allow dumpstate proc_net_type (file (ioctl read getattr lock map open)))
(allow dumpstate proc_qtaguid_ctrl (file (ioctl read getattr lock map open)))
(allow dumpstate proc_qtaguid_stat (file (ioctl read getattr lock map open)))
(allow dumpstate proc_buddyinfo (file (ioctl read getattr lock map open)))
(allow dumpstate proc_cmdline (file (ioctl read getattr lock map open)))
(allow dumpstate proc_meminfo (file (ioctl read getattr lock map open)))
(allow dumpstate proc_modules (file (ioctl read getattr lock map open)))
(allow dumpstate proc_pagetypeinfo (file (ioctl read getattr lock map open)))
(allow dumpstate proc_pipe_conf (file (ioctl read getattr lock map open)))
(allow dumpstate proc_slabinfo (file (ioctl read getattr lock map open)))
(allow dumpstate proc_version (file (ioctl read getattr lock map open)))
(allow dumpstate proc_vmallocinfo (file (ioctl read getattr lock map open)))
(allow dumpstate proc_vmstat (file (ioctl read getattr lock map open)))
(allow dumpstate net_data_file (dir (search)))
(allow dumpstate net_data_file (file (ioctl read getattr lock map open)))
(allow dumpstate self (netlink_tcpdiag_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown nlmsg_read)))
(allow dumpstate tombstone_data_file (dir (ioctl read getattr lock search open)))
(allow dumpstate tombstone_data_file (file (ioctl read getattr lock map open)))
(allow dumpstate cache_recovery_file (dir (ioctl read getattr lock search open)))
(allow dumpstate cache_recovery_file (file (ioctl read getattr lock map open)))
(allow dumpstate recovery_data_file (dir (ioctl read getattr lock search open)))
(allow dumpstate recovery_data_file (file (ioctl read getattr lock map open)))
(allow dumpstate update_engine_log_data_file (dir (ioctl read getattr lock search open)))
(allow dumpstate update_engine_log_data_file (file (ioctl read getattr lock map open)))
(allow dumpstate app_fuse_file (dir (ioctl read getattr lock search open)))
(allow dumpstate overlayfs_file (dir (ioctl read getattr lock search open)))
(allow dumpstate base_typeattr_286 (service_manager (find)))
(dontaudit dumpstate apex_service (service_manager (find)))
(dontaudit dumpstate dumpstate_service (service_manager (find)))
(dontaudit dumpstate gatekeeper_service (service_manager (find)))
(dontaudit dumpstate iorapd_service (service_manager (find)))
(dontaudit dumpstate virtual_touchpad_service (service_manager (find)))
(dontaudit dumpstate vold_service (service_manager (find)))
(dontaudit dumpstate vr_hwc_service (service_manager (find)))
(dontaudit dumpstate hwservice_manager_type (hwservice_manager (find)))
(allow dumpstate servicemanager (service_manager (list)))
(allow dumpstate hwservicemanager (hwservice_manager (list)))
(allow dumpstate devpts (chr_file (ioctl read write getattr lock append map open)))
(allow dumpstate property_socket (sock_file (write)))
(allow dumpstate init (unix_stream_socket (connectto)))
(allow dumpstate dumpstate_prop (property_service (set)))
(allow dumpstate dumpstate_prop (file (read getattr map open)))
(allow dumpstate property_socket (sock_file (write)))
(allow dumpstate init (unix_stream_socket (connectto)))
(allow dumpstate exported_dumpstate_prop (property_service (set)))
(allow dumpstate exported_dumpstate_prop (file (read getattr map open)))
(allow dumpstate property_socket (sock_file (write)))
(allow dumpstate init (unix_stream_socket (connectto)))
(allow dumpstate dumpstate_options_prop (property_service (set)))
(allow dumpstate dumpstate_options_prop (file (read getattr map open)))
(allow dumpstate property_type (file (read getattr map open)))
(allow dumpstate media_rw_data_file (dir (getattr)))
(allow dumpstate proc_interrupts (file (ioctl read getattr lock map open)))
(allow dumpstate proc_zoneinfo (file (ioctl read getattr lock map open)))
(allow dumpstate dumpstate_service (service_manager (add find)))
;;* lmx 272 system/sepolicy/prebuilts/api/29.0/public/dumpstate.te

(neverallow base_typeattr_287 dumpstate_service (service_manager (add)))
;;* lme

(allow dumpstate ion_device (chr_file (ioctl read getattr lock map open)))
(allow dumpstate proc_stat (file (ioctl read getattr lock map open)))
(allow dumpstate installd (binder (call transfer)))
(allow installd dumpstate (binder (transfer)))
(allow dumpstate installd (fd (use)))
(allow dumpstate self (netlink_xfrm_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown nlmsg_read)))
(allow dumpstate self (netlink_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
(allow dumpstate self (netlink_generic_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
(allow dumpstate domain (socket (getattr)))
(allow dumpstate domain (tcp_socket (getattr)))
(allow dumpstate domain (udp_socket (getattr)))
(allow dumpstate domain (rawip_socket (getattr)))
(allow dumpstate domain (netlink_socket (getattr)))
(allow dumpstate domain (packet_socket (getattr)))
(allow dumpstate domain (key_socket (getattr)))
(allow dumpstate domain (unix_stream_socket (getattr)))
(allow dumpstate domain (unix_dgram_socket (getattr)))
(allow dumpstate domain (netlink_route_socket (getattr)))
(allow dumpstate domain (netlink_tcpdiag_socket (getattr)))
(allow dumpstate domain (netlink_nflog_socket (getattr)))
(allow dumpstate domain (netlink_xfrm_socket (getattr)))
(allow dumpstate domain (netlink_selinux_socket (getattr)))
(allow dumpstate domain (netlink_audit_socket (getattr)))
(allow dumpstate domain (netlink_dnrt_socket (getattr)))
(allow dumpstate domain (netlink_kobject_uevent_socket (getattr)))
(allow dumpstate domain (appletalk_socket (getattr)))
(allow dumpstate domain (tun_socket (getattr)))
(allow dumpstate domain (netlink_iscsi_socket (getattr)))
(allow dumpstate domain (netlink_fib_lookup_socket (getattr)))
(allow dumpstate domain (netlink_connector_socket (getattr)))
(allow dumpstate domain (netlink_netfilter_socket (getattr)))
(allow dumpstate domain (netlink_generic_socket (getattr)))
(allow dumpstate domain (netlink_scsitransport_socket (getattr)))
(allow dumpstate domain (netlink_rdma_socket (getattr)))
(allow dumpstate domain (netlink_crypto_socket (getattr)))
(allow dumpstate domain (sctp_socket (getattr)))
(allow dumpstate domain (icmp_socket (getattr)))
(allow dumpstate domain (ax25_socket (getattr)))
(allow dumpstate domain (ipx_socket (getattr)))
(allow dumpstate domain (netrom_socket (getattr)))
(allow dumpstate domain (atmpvc_socket (getattr)))
(allow dumpstate domain (x25_socket (getattr)))
(allow dumpstate domain (rose_socket (getattr)))
(allow dumpstate domain (decnet_socket (getattr)))
(allow dumpstate domain (atmsvc_socket (getattr)))
(allow dumpstate domain (rds_socket (getattr)))
(allow dumpstate domain (irda_socket (getattr)))
(allow dumpstate domain (pppox_socket (getattr)))
(allow dumpstate domain (llc_socket (getattr)))
(allow dumpstate domain (can_socket (getattr)))
(allow dumpstate domain (tipc_socket (getattr)))
(allow dumpstate domain (bluetooth_socket (getattr)))
(allow dumpstate domain (iucv_socket (getattr)))
(allow dumpstate domain (rxrpc_socket (getattr)))
(allow dumpstate domain (isdn_socket (getattr)))
(allow dumpstate domain (phonet_socket (getattr)))
(allow dumpstate domain (ieee802154_socket (getattr)))
(allow dumpstate domain (caif_socket (getattr)))
(allow dumpstate domain (alg_socket (getattr)))
(allow dumpstate domain (nfc_socket (getattr)))
(allow dumpstate domain (vsock_socket (getattr)))
(allow dumpstate domain (kcm_socket (getattr)))
(allow dumpstate domain (qipcrtr_socket (getattr)))
(allow dumpstate domain (smc_socket (getattr)))
(allow dumpstate domain (xdp_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (tcp_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (udp_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (rawip_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (netlink_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (packet_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (key_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (unix_stream_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (unix_dgram_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (netlink_route_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (netlink_tcpdiag_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (netlink_nflog_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (netlink_xfrm_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (netlink_selinux_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (netlink_audit_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (netlink_dnrt_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (netlink_kobject_uevent_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (appletalk_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (tun_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (netlink_iscsi_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (netlink_fib_lookup_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (netlink_connector_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (netlink_netfilter_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (netlink_generic_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (netlink_scsitransport_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (netlink_rdma_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (netlink_crypto_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (sctp_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (icmp_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (ax25_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (ipx_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (netrom_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (atmpvc_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (x25_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (rose_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (decnet_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (atmsvc_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (rds_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (irda_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (pppox_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (llc_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (can_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (tipc_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (bluetooth_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (iucv_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (rxrpc_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (isdn_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (phonet_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (ieee802154_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (caif_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (alg_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (nfc_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (vsock_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (kcm_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (qipcrtr_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (smc_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (xdp_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (socket (getattr)))
(allow dumpstate pdx_channel_socket_type (tcp_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (udp_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (rawip_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (netlink_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (packet_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (key_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (unix_stream_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (unix_dgram_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (netlink_route_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (netlink_tcpdiag_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (netlink_nflog_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (netlink_xfrm_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (netlink_selinux_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (netlink_audit_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (netlink_dnrt_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (netlink_kobject_uevent_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (appletalk_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (tun_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (netlink_iscsi_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (netlink_fib_lookup_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (netlink_connector_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (netlink_netfilter_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (netlink_generic_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (netlink_scsitransport_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (netlink_rdma_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (netlink_crypto_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (sctp_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (icmp_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (ax25_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (ipx_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (netrom_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (atmpvc_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (x25_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (rose_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (decnet_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (atmsvc_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (rds_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (irda_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (pppox_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (llc_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (can_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (tipc_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (bluetooth_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (iucv_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (rxrpc_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (isdn_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (phonet_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (ieee802154_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (caif_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (alg_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (nfc_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (vsock_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (kcm_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (qipcrtr_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (smc_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (xdp_socket (getattr)))
(dontaudit dumpstate mnt_vendor_file (dir (search)))
(dontaudit dumpstate apex_mnt_dir (dir (getattr)))
(allow dumpstate bufferhubd (binder (call transfer)))
(allow bufferhubd dumpstate (binder (transfer)))
(allow dumpstate bufferhubd (fd (use)))
(allow dumpstate mediaswcodec (binder (call transfer)))
(allow mediaswcodec dumpstate (binder (transfer)))
(allow dumpstate mediaswcodec (fd (use)))
(allow dumpstate property_socket (sock_file (write)))
(allow dumpstate init (unix_stream_socket (connectto)))
(allow dumpstate ctl_dumpstate_prop (property_service (set)))
(allow dumpstate ctl_dumpstate_prop (file (read getattr map open)))
;;* lmx 313 system/sepolicy/prebuilts/api/29.0/public/dumpstate.te

(neverallow dumpstate base_typeattr_167 (process (ptrace)))
;;* lme

;;* lmx 322 system/sepolicy/prebuilts/api/29.0/public/dumpstate.te

(neverallow base_typeattr_288 dumpstate_service (service_manager (find)))
;;* lme

(allow e2fs devpts (chr_file (ioctl read write getattr)))
(allow e2fs dev_type (blk_file (getattr)))
(allow e2fs block_device (dir (search)))
(allow e2fs userdata_block_device (blk_file (ioctl read write getattr lock append map open)))
(allow e2fs metadata_block_device (blk_file (ioctl read write getattr lock append map open)))
(allow e2fs dm_device (blk_file (ioctl read write getattr lock append map open)))
(allowx e2fs dm_device (ioctl blk_file (0x125e 0x1277 (range 0x127b 0x127d))))
(allowx e2fs userdata_block_device (ioctl blk_file (0x125e 0x1277 (range 0x127b 0x127d))))
(allowx e2fs metadata_block_device (ioctl blk_file (0x125e 0x1277 (range 0x127b 0x127d))))
(allow e2fs proc_filesystems (file (ioctl read getattr lock map open)))
(allow e2fs proc_mounts (file (ioctl read getattr lock map open)))
(allow e2fs proc_swaps (file (ioctl read getattr lock map open)))
(allow e2fs sysfs_fs_ext4_features (dir (search)))
(allow e2fs sysfs_fs_ext4_features (file (ioctl read getattr lock map open)))
(allow e2fs file_contexts_file (file (ioctl read getattr lock map open)))
;;* lmx 117 system/sepolicy/prebuilts/api/29.0/public/fastbootd.te

(neverallow fastbootd data_file_type (file (execute execute_no_trans)))
;;* lme

(allow fs_type self (filesystem (associate)))
(allow cgroup tmpfs (filesystem (associate)))
(allow cgroup_bpf tmpfs (filesystem (associate)))
(allow cgroup_rc_file tmpfs (filesystem (associate)))
(allow sysfs_type sysfs (filesystem (associate)))
(allow debugfs_type debugfs (filesystem (associate)))
(allow debugfs_type debugfs_tracing (filesystem (associate)))
(allow debugfs_type debugfs_tracing_debug (filesystem (associate)))
(allow file_type labeledfs (filesystem (associate)))
(allow file_type tmpfs (filesystem (associate)))
(allow file_type rootfs (filesystem (associate)))
(allow dev_type tmpfs (filesystem (associate)))
(allow app_fuse_file app_fusefs (filesystem (associate)))
(allow postinstall_file self (filesystem (associate)))
;;* lmx 503 system/sepolicy/prebuilts/api/29.0/public/file.te

(neverallow fs_type file_type (filesystem (associate)))
;;* lme

(allow fingerprintd servicemanager (binder (call transfer)))
(allow servicemanager fingerprintd (dir (search)))
(allow servicemanager fingerprintd (file (read open)))
(allow servicemanager fingerprintd (process (getattr)))
(allow fingerprintd system_file (dir (ioctl read getattr lock search open)))
(allow fingerprintd fingerprintd_service (service_manager (add find)))
;;* lmx 10 system/sepolicy/prebuilts/api/29.0/public/fingerprintd.te

(neverallow base_typeattr_289 fingerprintd_service (service_manager (add)))
;;* lme

(allow fingerprintd fingerprintd_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow fingerprintd fingerprintd_data_file (dir (ioctl read write getattr lock add_name remove_name search open)))
(allow keystore fingerprintd (dir (search)))
(allow keystore fingerprintd (file (read open)))
(allow keystore fingerprintd (process (getattr)))
(allow fingerprintd keystore_service (service_manager (find)))
(allow fingerprintd keystore (binder (call transfer)))
(allow keystore fingerprintd (binder (transfer)))
(allow fingerprintd keystore (fd (use)))
(allow keystore fingerprintd (binder (call transfer)))
(allow fingerprintd keystore (binder (transfer)))
(allow keystore fingerprintd (fd (use)))
(allow fingerprintd keystore (keystore_key (add_auth)))
(allow fingerprintd system_server (binder (call transfer)))
(allow system_server fingerprintd (binder (transfer)))
(allow fingerprintd system_server (fd (use)))
(allow fingerprintd permission_service (service_manager (find)))
(allow fingerprintd ion_device (chr_file (ioctl read getattr lock map open)))
(allow flags_health_check property_socket (sock_file (write)))
(allow flags_health_check init (unix_stream_socket (connectto)))
(allow flags_health_check device_config_boot_count_prop (property_service (set)))
(allow flags_health_check device_config_boot_count_prop (file (read getattr map open)))
(allow flags_health_check property_socket (sock_file (write)))
(allow flags_health_check init (unix_stream_socket (connectto)))
(allow flags_health_check device_config_reset_performed_prop (property_service (set)))
(allow flags_health_check device_config_reset_performed_prop (file (read getattr map open)))
(allow flags_health_check property_socket (sock_file (write)))
(allow flags_health_check init (unix_stream_socket (connectto)))
(allow flags_health_check device_config_runtime_native_boot_prop (property_service (set)))
(allow flags_health_check device_config_runtime_native_boot_prop (file (read getattr map open)))
(allow flags_health_check property_socket (sock_file (write)))
(allow flags_health_check init (unix_stream_socket (connectto)))
(allow flags_health_check device_config_runtime_native_prop (property_service (set)))
(allow flags_health_check device_config_runtime_native_prop (file (read getattr map open)))
(allow flags_health_check property_socket (sock_file (write)))
(allow flags_health_check init (unix_stream_socket (connectto)))
(allow flags_health_check device_config_input_native_boot_prop (property_service (set)))
(allow flags_health_check device_config_input_native_boot_prop (file (read getattr map open)))
(allow flags_health_check property_socket (sock_file (write)))
(allow flags_health_check init (unix_stream_socket (connectto)))
(allow flags_health_check device_config_netd_native_prop (property_service (set)))
(allow flags_health_check device_config_netd_native_prop (file (read getattr map open)))
(allow flags_health_check property_socket (sock_file (write)))
(allow flags_health_check init (unix_stream_socket (connectto)))
(allow flags_health_check device_config_activity_manager_native_boot_prop (property_service (set)))
(allow flags_health_check device_config_activity_manager_native_boot_prop (file (read getattr map open)))
(allow flags_health_check property_socket (sock_file (write)))
(allow flags_health_check init (unix_stream_socket (connectto)))
(allow flags_health_check device_config_media_native_prop (property_service (set)))
(allow flags_health_check device_config_media_native_prop (file (read getattr map open)))
(allow flags_health_check server_configurable_flags_data_file (dir (ioctl read write getattr lock add_name remove_name search open)))
(allow flags_health_check server_configurable_flags_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
;;* lmx 21 system/sepolicy/prebuilts/api/29.0/public/flags_health_check.te

(neverallow base_typeattr_290 device_config_boot_count_prop (property_service (set)))
;;* lme

;;* lmx 26 system/sepolicy/prebuilts/api/29.0/public/flags_health_check.te

(neverallow base_typeattr_290 device_config_reset_performed_prop (property_service (set)))
;;* lme

;;* lmx 31 system/sepolicy/prebuilts/api/29.0/public/flags_health_check.te

(neverallow base_typeattr_290 server_configurable_flags_data_file (file (write create setattr relabelfrom append unlink link rename)))
;;* lme

(allow fsck tmpfs (chr_file (ioctl read write)))
(allow fsck devpts (chr_file (ioctl read write getattr)))
(allow fsck vold (fd (use)))
(allow fsck vold (fifo_file (read write getattr)))
(allow fsck block_device (dir (search)))
(allow fsck userdata_block_device (blk_file (ioctl read write getattr lock append map open)))
(allow fsck cache_block_device (blk_file (ioctl read write getattr lock append map open)))
(allow fsck dm_device (blk_file (ioctl read write getattr lock append map open)))
(allowx fsck dev_type (ioctl blk_file (0x125e 0x127c)))
(allow fsck dev_type (blk_file (getattr)))
(allow fsck proc_mounts (file (ioctl read getattr lock map open)))
(allow fsck proc_swaps (file (ioctl read getattr lock map open)))
(allow fsck rootfs (dir (ioctl read getattr lock search open)))
;;* lmx 63 system/sepolicy/prebuilts/api/29.0/public/fsck.te

(neverallow fsck vold_device (blk_file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
(neverallow fsck root_block_device (blk_file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
(neverallow fsck frp_block_device (blk_file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
(neverallow fsck system_block_device (blk_file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
(neverallow fsck recovery_block_device (blk_file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
(neverallow fsck boot_block_device (blk_file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
(neverallow fsck swap_block_device (blk_file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
;;* lme

;;* lmx 66 system/sepolicy/prebuilts/api/29.0/public/fsck.te

(neverallow base_typeattr_291 fsck (process (transition)))
;;* lme

;;* lmx 67 system/sepolicy/prebuilts/api/29.0/public/fsck.te

(neverallow base_typeattr_167 fsck (process (dyntransition)))
;;* lme

;;* lmx 68 system/sepolicy/prebuilts/api/29.0/public/fsck.te

(neverallow fsck base_typeattr_292 (file (entrypoint)))
;;* lme

(allow fsck_untrusted devpts (chr_file (ioctl read write getattr)))
(allow fsck_untrusted vold (fd (use)))
(allow fsck_untrusted vold (fifo_file (read write getattr)))
(allow fsck_untrusted block_device (dir (search)))
(allow fsck_untrusted vold_device (blk_file (ioctl read write getattr lock append map open)))
(allow fsck_untrusted proc_mounts (file (ioctl read getattr lock map open)))
(allow fsck_untrusted dev_type (blk_file (getattr)))
;;* lmx 45 system/sepolicy/prebuilts/api/29.0/public/fsck_untrusted.te

(neverallow fsck_untrusted dm_device (blk_file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
(neverallow fsck_untrusted root_block_device (blk_file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
(neverallow fsck_untrusted frp_block_device (blk_file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
(neverallow fsck_untrusted system_block_device (blk_file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
(neverallow fsck_untrusted recovery_block_device (blk_file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
(neverallow fsck_untrusted boot_block_device (blk_file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
(neverallow fsck_untrusted userdata_block_device (blk_file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
(neverallow fsck_untrusted cache_block_device (blk_file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
(neverallow fsck_untrusted swap_block_device (blk_file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
(neverallow fsck_untrusted metadata_block_device (blk_file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
;;* lme

;;* lmx 48 system/sepolicy/prebuilts/api/29.0/public/fsck_untrusted.te

(neverallow base_typeattr_293 fsck_untrusted (process (transition)))
;;* lme

;;* lmx 49 system/sepolicy/prebuilts/api/29.0/public/fsck_untrusted.te

(neverallow base_typeattr_167 fsck_untrusted (process (dyntransition)))
;;* lme

;;* lmx 50 system/sepolicy/prebuilts/api/29.0/public/fsck_untrusted.te

(neverallow fsck_untrusted base_typeattr_292 (file (entrypoint)))
;;* lme

(allow hal_bufferhub_client hal_bufferhub_server (binder (call transfer)))
(allow hal_bufferhub_server hal_bufferhub_client (binder (transfer)))
(allow hal_bufferhub_client hal_bufferhub_server (fd (use)))
(allow hal_bufferhub_server hal_bufferhub_client (binder (call transfer)))
(allow hal_bufferhub_client hal_bufferhub_server (binder (transfer)))
(allow hal_bufferhub_server hal_bufferhub_client (fd (use)))
(allow hal_bufferhub_client fwk_bufferhub_hwservice (hwservice_manager (find)))
(allow hal_bufferhub_server fwk_bufferhub_hwservice (hwservice_manager (add find)))
(allow hal_bufferhub_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 4 system/sepolicy/prebuilts/api/29.0/public/fwk_bufferhub.te

(neverallow base_typeattr_294 fwk_bufferhub_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 4 system/sepolicy/prebuilts/api/29.0/public/fwk_bufferhub.te

(neverallow base_typeattr_295 fwk_bufferhub_hwservice (hwservice_manager (find)))
;;* lme

(allow gatekeeperd servicemanager (binder (call transfer)))
(allow servicemanager gatekeeperd (dir (search)))
(allow servicemanager gatekeeperd (file (read open)))
(allow servicemanager gatekeeperd (process (getattr)))
(allow gatekeeperd ion_device (chr_file (ioctl read getattr lock map open)))
(allow gatekeeperd system_file (dir (ioctl read getattr lock search open)))
(allow gatekeeperd gatekeeper_service (service_manager (add find)))
;;* lmx 21 system/sepolicy/prebuilts/api/29.0/public/gatekeeperd.te

(neverallow base_typeattr_296 gatekeeper_service (service_manager (add)))
;;* lme

(allow keystore gatekeeperd (dir (search)))
(allow keystore gatekeeperd (file (read open)))
(allow keystore gatekeeperd (process (getattr)))
(allow gatekeeperd keystore_service (service_manager (find)))
(allow gatekeeperd keystore (binder (call transfer)))
(allow keystore gatekeeperd (binder (transfer)))
(allow gatekeeperd keystore (fd (use)))
(allow keystore gatekeeperd (binder (call transfer)))
(allow gatekeeperd keystore (binder (transfer)))
(allow keystore gatekeeperd (fd (use)))
(allow gatekeeperd keystore (keystore_key (add_auth)))
(allow gatekeeperd system_server (binder (call)))
(allow gatekeeperd permission_service (service_manager (find)))
(allow gatekeeperd gatekeeper_data_file (dir (ioctl read write getattr lock add_name remove_name search open)))
(allow gatekeeperd gatekeeper_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow gatekeeperd hardware_properties_service (service_manager (find)))
(allow gatekeeperd gsid_prop (file (read getattr map open)))
(allow gatekeeperd cgroup (dir (ioctl read getattr lock search open)))
(allow gatekeeperd cgroup (file (ioctl read getattr lock map open)))
(allow gatekeeperd cgroup (lnk_file (ioctl read getattr lock map open)))
(allow hal_allocator_client hal_allocator_server (binder (call transfer)))
(allow hal_allocator_server hal_allocator_client (binder (transfer)))
(allow hal_allocator_client hal_allocator_server (fd (use)))
(allow hal_allocator_client hidl_allocator_hwservice (hwservice_manager (find)))
(allow hal_allocator_server hidl_allocator_hwservice (hwservice_manager (add find)))
(allow hal_allocator_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 4 system/sepolicy/prebuilts/api/29.0/public/hal_allocator.te

(neverallow base_typeattr_297 hidl_allocator_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 4 system/sepolicy/prebuilts/api/29.0/public/hal_allocator.te

(neverallow base_typeattr_298 hidl_allocator_hwservice (hwservice_manager (find)))
;;* lme

(allow hal_allocator_client hidl_memory_hwservice (hwservice_manager (find)))
(allow hal_allocator_client same_process_hal_file (file (read getattr map execute open)))
(allow hal_atrace_client hal_atrace_server (binder (call transfer)))
(allow hal_atrace_server hal_atrace_client (binder (transfer)))
(allow hal_atrace_client hal_atrace_server (fd (use)))
(allow hal_atrace_client hal_atrace_hwservice (hwservice_manager (find)))
(allow hal_atrace_server hal_atrace_hwservice (hwservice_manager (add find)))
(allow hal_atrace_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 4 system/sepolicy/prebuilts/api/29.0/public/hal_atrace.te

(neverallow base_typeattr_299 hal_atrace_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 4 system/sepolicy/prebuilts/api/29.0/public/hal_atrace.te

(neverallow base_typeattr_300 hal_atrace_hwservice (hwservice_manager (find)))
;;* lme

(allow hal_audio_client hal_audio_server (binder (call transfer)))
(allow hal_audio_server hal_audio_client (binder (transfer)))
(allow hal_audio_client hal_audio_server (fd (use)))
(allow hal_audio_server hal_audio_client (binder (call transfer)))
(allow hal_audio_client hal_audio_server (binder (transfer)))
(allow hal_audio_server hal_audio_client (fd (use)))
(allow hal_audio_client hal_audio_hwservice (hwservice_manager (find)))
(allow hal_audio_server hal_audio_hwservice (hwservice_manager (add find)))
(allow hal_audio_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 5 system/sepolicy/prebuilts/api/29.0/public/hal_audio.te

(neverallow base_typeattr_301 hal_audio_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/prebuilts/api/29.0/public/hal_audio.te

(neverallow base_typeattr_302 hal_audio_hwservice (hwservice_manager (find)))
;;* lme

(allow hal_audio ion_device (chr_file (ioctl read getattr lock map open)))
(allow hal_audio proc (dir (ioctl read getattr lock search open)))
(allow hal_audio proc (file (ioctl read getattr lock map open)))
(allow hal_audio proc (lnk_file (ioctl read getattr lock map open)))
(allow hal_audio proc_asound (dir (ioctl read getattr lock search open)))
(allow hal_audio proc_asound (file (ioctl read getattr lock map open)))
(allow hal_audio proc_asound (lnk_file (ioctl read getattr lock map open)))
(allow hal_audio_server audio_device (dir (ioctl read getattr lock search open)))
(allow hal_audio_server audio_device (chr_file (ioctl read write getattr lock append map open)))
(allow hal_audio shell (fd (use)))
(allow hal_audio shell (fifo_file (write)))
(allow hal_audio dumpstate (fd (use)))
(allow hal_audio dumpstate (fifo_file (write)))
(allow hal_audio vndbinder_device (chr_file (ioctl read write getattr lock append map open)))
(allow hal_audio vndservicemanager (binder (call transfer)))
(allow vndservicemanager hal_audio (dir (search)))
(allow vndservicemanager hal_audio (file (read map open)))
(allow vndservicemanager hal_audio (process (getattr)))
;;* lmx 28 system/sepolicy/prebuilts/api/29.0/public/hal_audio.te

(neverallow hal_audio_server fs_type (file (execute_no_trans)))
(neverallow hal_audio_server file_type (file (execute_no_trans)))
;;* lme

;;* lmx 32 system/sepolicy/prebuilts/api/29.0/public/hal_audio.te

(neverallow hal_audio_server domain (tcp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind name_connect)))
(neverallow hal_audio_server domain (udp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind)))
(neverallow hal_audio_server domain (rawip_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind)))
;;* lme

;;* lmx 35 system/sepolicy/prebuilts/api/29.0/public/hal_audio.te

(neverallow base_typeattr_303 audio_device (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod open audit_access)))
;;* lme

(allow hal_audio bluetooth_a2dp_offload_prop (file (read getattr map open)))
(allow hal_audio bluetooth_audio_hal_prop (file (read getattr map open)))
(allow hal_audiocontrol_client hal_audiocontrol_server (binder (call transfer)))
(allow hal_audiocontrol_server hal_audiocontrol_client (binder (transfer)))
(allow hal_audiocontrol_client hal_audiocontrol_server (fd (use)))
(allow hal_audiocontrol_server hal_audiocontrol_client (binder (call transfer)))
(allow hal_audiocontrol_client hal_audiocontrol_server (binder (transfer)))
(allow hal_audiocontrol_server hal_audiocontrol_client (fd (use)))
(allow hal_audiocontrol_client hal_audiocontrol_hwservice (hwservice_manager (find)))
(allow hal_audiocontrol_server hal_audiocontrol_hwservice (hwservice_manager (add find)))
(allow hal_audiocontrol_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 5 system/sepolicy/prebuilts/api/29.0/public/hal_audiocontrol.te

(neverallow base_typeattr_304 hal_audiocontrol_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/prebuilts/api/29.0/public/hal_audiocontrol.te

(neverallow base_typeattr_305 hal_audiocontrol_hwservice (hwservice_manager (find)))
;;* lme

(allow hal_authsecret_client hal_authsecret_server (binder (call transfer)))
(allow hal_authsecret_server hal_authsecret_client (binder (transfer)))
(allow hal_authsecret_client hal_authsecret_server (fd (use)))
(allow hal_authsecret_client hal_authsecret_hwservice (hwservice_manager (find)))
(allow hal_authsecret_server hal_authsecret_hwservice (hwservice_manager (add find)))
(allow hal_authsecret_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 4 system/sepolicy/prebuilts/api/29.0/public/hal_authsecret.te

(neverallow base_typeattr_306 hal_authsecret_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 4 system/sepolicy/prebuilts/api/29.0/public/hal_authsecret.te

(neverallow base_typeattr_307 hal_authsecret_hwservice (hwservice_manager (find)))
;;* lme

(allow hal_bluetooth_client hal_bluetooth_server (binder (call transfer)))
(allow hal_bluetooth_server hal_bluetooth_client (binder (transfer)))
(allow hal_bluetooth_client hal_bluetooth_server (fd (use)))
(allow hal_bluetooth_server hal_bluetooth_client (binder (call transfer)))
(allow hal_bluetooth_client hal_bluetooth_server (binder (transfer)))
(allow hal_bluetooth_server hal_bluetooth_client (fd (use)))
(allow hal_bluetooth_client hal_bluetooth_hwservice (hwservice_manager (find)))
(allow hal_bluetooth_server hal_bluetooth_hwservice (hwservice_manager (add find)))
(allow hal_bluetooth_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 5 system/sepolicy/prebuilts/api/29.0/public/hal_bluetooth.te

(neverallow base_typeattr_308 hal_bluetooth_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/prebuilts/api/29.0/public/hal_bluetooth.te

(neverallow base_typeattr_309 hal_bluetooth_hwservice (hwservice_manager (find)))
;;* lme

(allow hal_bluetooth sysfs_wake_lock (file (ioctl read write getattr lock append map open)))
(allow hal_bluetooth self (capability2 (block_suspend)))
(allow hal_bluetooth self (cap2_userns (block_suspend)))
(allow hal_bluetooth system_suspend_server (binder (call transfer)))
(allow system_suspend_server hal_bluetooth (binder (transfer)))
(allow hal_bluetooth system_suspend_server (fd (use)))
(allow hal_bluetooth system_suspend_hwservice (hwservice_manager (find)))
(allow hal_bluetooth hwservicemanager (binder (call transfer)))
(allow hwservicemanager hal_bluetooth (binder (call transfer)))
(allow hwservicemanager hal_bluetooth (dir (search)))
(allow hwservicemanager hal_bluetooth (file (read map open)))
(allow hwservicemanager hal_bluetooth (process (getattr)))
(allow hal_bluetooth hwservicemanager_prop (file (read getattr map open)))
(allow hal_bluetooth hidl_manager_hwservice (hwservice_manager (find)))
(allow hal_bluetooth self (capability (net_admin)))
(allow hal_bluetooth self (cap_userns (net_admin)))
(allow hal_bluetooth bluetooth_efs_file (dir (ioctl read getattr lock search open)))
(allow hal_bluetooth bluetooth_efs_file (file (ioctl read getattr lock map open)))
(allow hal_bluetooth bluetooth_efs_file (lnk_file (ioctl read getattr lock map open)))
(allow hal_bluetooth uhid_device (chr_file (ioctl read write getattr lock append map open)))
(allow hal_bluetooth hci_attach_dev (chr_file (ioctl read write getattr lock append map open)))
(allow hal_bluetooth sysfs_type (dir (ioctl read getattr lock search open)))
(allow hal_bluetooth sysfs_type (file (ioctl read getattr lock map open)))
(allow hal_bluetooth sysfs_type (lnk_file (ioctl read getattr lock map open)))
(allow hal_bluetooth sysfs_bluetooth_writable (file (ioctl read write getattr lock append map open)))
(allow hal_bluetooth self (capability2 (wake_alarm)))
(allow hal_bluetooth self (cap2_userns (wake_alarm)))
(allow hal_bluetooth property_socket (sock_file (write)))
(allow hal_bluetooth init (unix_stream_socket (connectto)))
(allow hal_bluetooth bluetooth_a2dp_offload_prop (property_service (set)))
(allow hal_bluetooth bluetooth_a2dp_offload_prop (file (read getattr map open)))
(allow hal_bluetooth property_socket (sock_file (write)))
(allow hal_bluetooth init (unix_stream_socket (connectto)))
(allow hal_bluetooth bluetooth_audio_hal_prop (property_service (set)))
(allow hal_bluetooth bluetooth_audio_hal_prop (file (read getattr map open)))
(allow hal_bluetooth property_socket (sock_file (write)))
(allow hal_bluetooth init (unix_stream_socket (connectto)))
(allow hal_bluetooth bluetooth_prop (property_service (set)))
(allow hal_bluetooth bluetooth_prop (file (read getattr map open)))
(allow hal_bluetooth property_socket (sock_file (write)))
(allow hal_bluetooth init (unix_stream_socket (connectto)))
(allow hal_bluetooth exported_bluetooth_prop (property_service (set)))
(allow hal_bluetooth exported_bluetooth_prop (file (read getattr map open)))
(allow hal_bluetooth proc_bluetooth_writable (file (ioctl read write getattr lock append map open)))
(allow hal_bluetooth self (capability (sys_nice)))
(allow hal_bluetooth self (cap_userns (sys_nice)))
(allow hal_bootctl_client hal_bootctl_server (binder (call transfer)))
(allow hal_bootctl_server hal_bootctl_client (binder (transfer)))
(allow hal_bootctl_client hal_bootctl_server (fd (use)))
(allow hal_bootctl_server hal_bootctl_client (binder (call transfer)))
(allow hal_bootctl_client hal_bootctl_server (binder (transfer)))
(allow hal_bootctl_server hal_bootctl_client (fd (use)))
(allow hal_bootctl_client hal_bootctl_hwservice (hwservice_manager (find)))
(allow hal_bootctl_server hal_bootctl_hwservice (hwservice_manager (add find)))
(allow hal_bootctl_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 5 system/sepolicy/prebuilts/api/29.0/public/hal_bootctl.te

(neverallow base_typeattr_310 hal_bootctl_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/prebuilts/api/29.0/public/hal_bootctl.te

(neverallow base_typeattr_311 hal_bootctl_hwservice (hwservice_manager (find)))
;;* lme

(allow hal_broadcastradio_client hal_broadcastradio_server (binder (call transfer)))
(allow hal_broadcastradio_server hal_broadcastradio_client (binder (transfer)))
(allow hal_broadcastradio_client hal_broadcastradio_server (fd (use)))
(allow hal_broadcastradio_server hal_broadcastradio_client (binder (call transfer)))
(allow hal_broadcastradio_client hal_broadcastradio_server (binder (transfer)))
(allow hal_broadcastradio_server hal_broadcastradio_client (fd (use)))
(allow hal_broadcastradio_client hal_broadcastradio_hwservice (hwservice_manager (find)))
(allow hal_broadcastradio_server hal_broadcastradio_hwservice (hwservice_manager (add find)))
(allow hal_broadcastradio_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 4 system/sepolicy/prebuilts/api/29.0/public/hal_broadcastradio.te

(neverallow base_typeattr_312 hal_broadcastradio_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 4 system/sepolicy/prebuilts/api/29.0/public/hal_broadcastradio.te

(neverallow base_typeattr_313 hal_broadcastradio_hwservice (hwservice_manager (find)))
;;* lme

(allow hal_camera_client hal_camera_server (binder (call transfer)))
(allow hal_camera_server hal_camera_client (binder (transfer)))
(allow hal_camera_client hal_camera_server (fd (use)))
(allow hal_camera_server hal_camera_client (binder (call transfer)))
(allow hal_camera_client hal_camera_server (binder (transfer)))
(allow hal_camera_server hal_camera_client (fd (use)))
(allow hal_camera_client hal_camera_hwservice (hwservice_manager (find)))
(allow hal_camera_server hal_camera_hwservice (hwservice_manager (add find)))
(allow hal_camera_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 5 system/sepolicy/prebuilts/api/29.0/public/hal_camera.te

(neverallow base_typeattr_314 hal_camera_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/prebuilts/api/29.0/public/hal_camera.te

(neverallow base_typeattr_315 hal_camera_hwservice (hwservice_manager (find)))
;;* lme

(allow hal_camera device (dir (ioctl read getattr lock search open)))
(allow hal_camera video_device (dir (ioctl read getattr lock search open)))
(allow hal_camera video_device (chr_file (ioctl read write getattr lock append map open)))
(allow hal_camera camera_device (chr_file (ioctl read write getattr lock append map open)))
(allow hal_camera ion_device (chr_file (ioctl read write getattr lock append map open)))
(allow hal_camera_client hal_graphics_allocator (fd (use)))
(allow hal_camera_server hal_graphics_allocator (fd (use)))
(allow hal_camera base_typeattr_171 (fd (use)))
(allow hal_camera surfaceflinger (fd (use)))
(allow hal_camera hal_allocator_server (fd (use)))
(allow hal_camera shell (fd (use)))
(allow hal_camera shell (fifo_file (write)))
;;* lmx 30 system/sepolicy/prebuilts/api/29.0/public/hal_camera.te

(neverallow hal_camera_server fs_type (file (execute_no_trans)))
(neverallow hal_camera_server file_type (file (execute_no_trans)))
;;* lme

;;* lmx 33 system/sepolicy/prebuilts/api/29.0/public/hal_camera.te

(neverallow hal_camera_server domain (tcp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind name_connect)))
(neverallow hal_camera_server domain (udp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind)))
(neverallow hal_camera_server domain (rawip_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind)))
;;* lme

;;* lmx 36 system/sepolicy/prebuilts/api/29.0/public/hal_camera.te

(neverallow base_typeattr_316 camera_device (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod open audit_access)))
;;* lme

(allow hal_cas_client hal_cas_server (binder (call transfer)))
(allow hal_cas_server hal_cas_client (binder (transfer)))
(allow hal_cas_client hal_cas_server (fd (use)))
(allow hal_cas_server hal_cas_client (binder (call transfer)))
(allow hal_cas_client hal_cas_server (binder (transfer)))
(allow hal_cas_server hal_cas_client (fd (use)))
(allow hal_cas_client hal_cas_hwservice (hwservice_manager (find)))
(allow hal_cas_server hal_cas_hwservice (hwservice_manager (add find)))
(allow hal_cas_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 5 system/sepolicy/prebuilts/api/29.0/public/hal_cas.te

(neverallow base_typeattr_317 hal_cas_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/prebuilts/api/29.0/public/hal_cas.te

(neverallow base_typeattr_318 hal_cas_hwservice (hwservice_manager (find)))
;;* lme

(allow hal_cas_server hidl_memory_hwservice (hwservice_manager (find)))
(allow hal_cas_server serialno_prop (file (read getattr map open)))
(allow hal_cas system_data_file (file (read getattr)))
(allow hal_cas cgroup (dir (ioctl read getattr lock search open)))
(allow hal_cas cgroup (file (ioctl read getattr lock map open)))
(allow hal_cas cgroup (lnk_file (ioctl read getattr lock map open)))
(allow hal_cas cgroup (dir (write search)))
(allow hal_cas cgroup (file (write lock append map open)))
(allow hal_cas ion_device (chr_file (ioctl read write getattr lock append map open)))
(allow hal_cas hal_graphics_allocator (fd (use)))
(allow hal_cas tee_device (chr_file (ioctl read write getattr lock append map open)))
;;* lmx 31 system/sepolicy/prebuilts/api/29.0/public/hal_cas.te

(neverallow hal_cas_server fs_type (file (execute_no_trans)))
(neverallow hal_cas_server file_type (file (execute_no_trans)))
;;* lme

;;* lmx 34 system/sepolicy/prebuilts/api/29.0/public/hal_cas.te

(neverallowx hal_cas_server domain (ioctl tcp_socket (0x6900 0x6902)))
(neverallowx hal_cas_server domain (ioctl udp_socket (0x6900 0x6902)))
(neverallowx hal_cas_server domain (ioctl rawip_socket (0x6900 0x6902)))
;;* lme

;;* lmx 34 system/sepolicy/prebuilts/api/29.0/public/hal_cas.te

(neverallowx hal_cas_server domain (ioctl tcp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx hal_cas_server domain (ioctl udp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx hal_cas_server domain (ioctl rawip_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
;;* lme

;;* lmx 34 system/sepolicy/prebuilts/api/29.0/public/hal_cas.te

(neverallowx hal_cas_server domain (ioctl tcp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx hal_cas_server domain (ioctl udp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx hal_cas_server domain (ioctl rawip_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
;;* lme

(allow hal_codec2_client hal_codec2_server (binder (call transfer)))
(allow hal_codec2_server hal_codec2_client (binder (transfer)))
(allow hal_codec2_client hal_codec2_server (fd (use)))
(allow hal_codec2_server hal_codec2_client (binder (call transfer)))
(allow hal_codec2_client hal_codec2_server (binder (transfer)))
(allow hal_codec2_server hal_codec2_client (fd (use)))
(allow hal_codec2_client hal_codec2_hwservice (hwservice_manager (find)))
(allow hal_codec2_server hal_codec2_hwservice (hwservice_manager (add find)))
(allow hal_codec2_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 4 system/sepolicy/prebuilts/api/29.0/public/hal_codec2.te

(neverallow base_typeattr_319 hal_codec2_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 4 system/sepolicy/prebuilts/api/29.0/public/hal_codec2.te

(neverallow base_typeattr_320 hal_codec2_hwservice (hwservice_manager (find)))
;;* lme

(allow hal_codec2_server hal_graphics_composer (fd (use)))
(allow hal_codec2_server ion_device (chr_file (ioctl read getattr lock map open)))
(allow hal_codec2_server hal_camera (fd (use)))
(allow hal_codec2_server bufferhubd (fd (use)))
(allow hal_codec2_client ion_device (chr_file (ioctl read getattr lock map open)))
(allow hal_configstore_client hal_configstore_server (binder (call transfer)))
(allow hal_configstore_server hal_configstore_client (binder (transfer)))
(allow hal_configstore_client hal_configstore_server (fd (use)))
(allow hal_configstore_client hal_configstore_ISurfaceFlingerConfigs (hwservice_manager (find)))
(allow hal_configstore_server hal_configstore_ISurfaceFlingerConfigs (hwservice_manager (add find)))
(allow hal_configstore_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 4 system/sepolicy/prebuilts/api/29.0/public/hal_configstore.te

(neverallow base_typeattr_321 hal_configstore_ISurfaceFlingerConfigs (hwservice_manager (add)))
;;* lme

;;* lmx 4 system/sepolicy/prebuilts/api/29.0/public/hal_configstore.te

(neverallow base_typeattr_322 hal_configstore_ISurfaceFlingerConfigs (hwservice_manager (find)))
;;* lme

(allow hal_configstore_server anr_data_file (file (append)))
(allow hal_configstore_server dumpstate (fd (use)))
(allow hal_configstore_server incidentd (fd (use)))
(allow hal_configstore_server dumpstate (fifo_file (write append)))
(allow hal_configstore_server incidentd (fifo_file (write append)))
(allow hal_configstore_server system_server (fifo_file (write append)))
(allow hal_configstore_server tombstoned (unix_stream_socket (connectto)))
(allow hal_configstore_server tombstoned (fd (use)))
(allow hal_configstore_server tombstoned_crash_socket (sock_file (write)))
(allow hal_configstore_server tombstone_data_file (file (append)))
;;* lmx 15 system/sepolicy/prebuilts/api/29.0/public/hal_configstore.te

(neverallow hal_configstore_server fs_type (file (execute_no_trans)))
(neverallow hal_configstore_server file_type (file (execute_no_trans)))
;;* lme

;;* lmx 29 system/sepolicy/prebuilts/api/29.0/public/hal_configstore.te

(neverallow hal_configstore_server domain (socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow hal_configstore_server domain (tcp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind name_connect)))
(neverallow hal_configstore_server domain (udp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind)))
(neverallow hal_configstore_server domain (rawip_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind)))
(neverallow hal_configstore_server domain (netlink_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow hal_configstore_server domain (packet_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow hal_configstore_server domain (key_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow hal_configstore_server domain (netlink_route_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write)))
(neverallow hal_configstore_server domain (netlink_tcpdiag_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write)))
(neverallow hal_configstore_server domain (netlink_nflog_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow hal_configstore_server domain (netlink_xfrm_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write)))
(neverallow hal_configstore_server domain (netlink_selinux_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow hal_configstore_server domain (netlink_audit_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write nlmsg_relay nlmsg_readpriv nlmsg_tty_audit)))
(neverallow hal_configstore_server domain (netlink_dnrt_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow hal_configstore_server domain (netlink_kobject_uevent_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow hal_configstore_server domain (appletalk_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow hal_configstore_server domain (tun_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind attach_queue)))
(neverallow hal_configstore_server domain (netlink_iscsi_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow hal_configstore_server domain (netlink_fib_lookup_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow hal_configstore_server domain (netlink_connector_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow hal_configstore_server domain (netlink_netfilter_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow hal_configstore_server domain (netlink_generic_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow hal_configstore_server domain (netlink_scsitransport_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow hal_configstore_server domain (netlink_rdma_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow hal_configstore_server domain (netlink_crypto_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
;;* lme

;;* lmx 37 system/sepolicy/prebuilts/api/29.0/public/hal_configstore.te

(neverallow hal_configstore_server base_typeattr_323 (unix_stream_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind connectto)))
(neverallow hal_configstore_server base_typeattr_323 (unix_dgram_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
;;* lme

;;* lmx 46 system/sepolicy/prebuilts/api/29.0/public/hal_configstore.te

(neverallow hal_configstore_server base_typeattr_324 (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod open audit_access)))
(neverallow hal_configstore_server base_typeattr_324 (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton open audit_access execmod)))
(neverallow hal_configstore_server base_typeattr_324 (fifo_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton open audit_access execmod)))
;;* lme

;;* lmx 52 system/sepolicy/prebuilts/api/29.0/public/hal_configstore.te

(neverallow hal_configstore_server sdcard_type (dir (ioctl read write create setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton add_name remove_name reparent search rmdir open audit_access execmod)))
(neverallow hal_configstore_server fuse (dir (ioctl read write create setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton add_name remove_name reparent search rmdir open audit_access execmod)))
(neverallow hal_configstore_server sdcardfs (dir (ioctl read write create setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton add_name remove_name reparent search rmdir open audit_access execmod)))
(neverallow hal_configstore_server vfat (dir (ioctl read write create setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton add_name remove_name reparent search rmdir open audit_access execmod)))
(neverallow hal_configstore_server exfat (dir (ioctl read write create setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton add_name remove_name reparent search rmdir open audit_access execmod)))
;;* lme

;;* lmx 56 system/sepolicy/prebuilts/api/29.0/public/hal_configstore.te

(neverallow hal_configstore_server sdcard_type (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod open audit_access)))
(neverallow hal_configstore_server fuse (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod open audit_access)))
(neverallow hal_configstore_server sdcardfs (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod open audit_access)))
(neverallow hal_configstore_server vfat (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod open audit_access)))
(neverallow hal_configstore_server exfat (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod open audit_access)))
;;* lme

;;* lmx 59 system/sepolicy/prebuilts/api/29.0/public/hal_configstore.te

(neverallow hal_configstore_server base_typeattr_167 (service_manager (add find list)))
;;* lme

;;* lmx 62 system/sepolicy/prebuilts/api/29.0/public/hal_configstore.te

(neverallow hal_configstore_server self (capability (chown dac_override dac_read_search fowner fsetid kill setgid setuid setpcap linux_immutable net_bind_service net_broadcast net_admin net_raw ipc_lock ipc_owner sys_module sys_rawio sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_nice sys_resource sys_time sys_tty_config mknod lease audit_write audit_control setfcap)))
(neverallow hal_configstore_server self (capability2 (mac_override mac_admin syslog wake_alarm block_suspend audit_read)))
(neverallow hal_configstore_server self (cap_userns (chown dac_override dac_read_search fowner fsetid kill setgid setuid setpcap linux_immutable net_bind_service net_broadcast net_admin net_raw ipc_lock ipc_owner sys_module sys_rawio sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_nice sys_resource sys_time sys_tty_config mknod lease audit_write audit_control setfcap)))
(neverallow hal_configstore_server self (cap2_userns (mac_override mac_admin syslog wake_alarm block_suspend audit_read)))
;;* lme

;;* lmx 65 system/sepolicy/prebuilts/api/29.0/public/hal_configstore.te

(neverallow hal_configstore_server base_typeattr_167 (process (ptrace)))
;;* lme

;;* lmx 68 system/sepolicy/prebuilts/api/29.0/public/hal_configstore.te

(neverallow hal_configstore_server base_typeattr_167 (file (relabelfrom relabelto)))
(neverallow hal_configstore_server base_typeattr_167 (dir (relabelfrom relabelto)))
(neverallow hal_configstore_server base_typeattr_167 (lnk_file (relabelfrom relabelto)))
(neverallow hal_configstore_server base_typeattr_167 (chr_file (relabelfrom relabelto)))
(neverallow hal_configstore_server base_typeattr_167 (blk_file (relabelfrom relabelto)))
(neverallow hal_configstore_server base_typeattr_167 (sock_file (relabelfrom relabelto)))
(neverallow hal_configstore_server base_typeattr_167 (fifo_file (relabelfrom relabelto)))
;;* lme

(allow hal_confirmationui_client hal_confirmationui_server (binder (call transfer)))
(allow hal_confirmationui_server hal_confirmationui_client (binder (transfer)))
(allow hal_confirmationui_client hal_confirmationui_server (fd (use)))
(allow hal_confirmationui_client hal_confirmationui_hwservice (hwservice_manager (find)))
(allow hal_confirmationui_server hal_confirmationui_hwservice (hwservice_manager (add find)))
(allow hal_confirmationui_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 4 system/sepolicy/prebuilts/api/29.0/public/hal_confirmationui.te

(neverallow base_typeattr_325 hal_confirmationui_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 4 system/sepolicy/prebuilts/api/29.0/public/hal_confirmationui.te

(neverallow base_typeattr_326 hal_confirmationui_hwservice (hwservice_manager (find)))
;;* lme

(allow hal_contexthub_client hal_contexthub_server (binder (call transfer)))
(allow hal_contexthub_server hal_contexthub_client (binder (transfer)))
(allow hal_contexthub_client hal_contexthub_server (fd (use)))
(allow hal_contexthub_server hal_contexthub_client (binder (call transfer)))
(allow hal_contexthub_client hal_contexthub_server (binder (transfer)))
(allow hal_contexthub_server hal_contexthub_client (fd (use)))
(allow hal_contexthub_client hal_contexthub_hwservice (hwservice_manager (find)))
(allow hal_contexthub_server hal_contexthub_hwservice (hwservice_manager (add find)))
(allow hal_contexthub_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 5 system/sepolicy/prebuilts/api/29.0/public/hal_contexthub.te

(neverallow base_typeattr_327 hal_contexthub_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/prebuilts/api/29.0/public/hal_contexthub.te

(neverallow base_typeattr_328 hal_contexthub_hwservice (hwservice_manager (find)))
;;* lme

(allow hal_drm_client hal_drm_server (binder (call transfer)))
(allow hal_drm_server hal_drm_client (binder (transfer)))
(allow hal_drm_client hal_drm_server (fd (use)))
(allow hal_drm_server hal_drm_client (binder (call transfer)))
(allow hal_drm_client hal_drm_server (binder (transfer)))
(allow hal_drm_server hal_drm_client (fd (use)))
(allow hal_drm_client hal_drm_hwservice (hwservice_manager (find)))
(allow hal_drm_server hal_drm_hwservice (hwservice_manager (add find)))
(allow hal_drm_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 5 system/sepolicy/prebuilts/api/29.0/public/hal_drm.te

(neverallow base_typeattr_329 hal_drm_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/prebuilts/api/29.0/public/hal_drm.te

(neverallow base_typeattr_330 hal_drm_hwservice (hwservice_manager (find)))
;;* lme

(allow hal_drm hidl_memory_hwservice (hwservice_manager (find)))
(allow hal_drm self (process (execmem)))
(allow hal_drm serialno_prop (file (read getattr map open)))
(allow hal_drm system_data_file (file (read getattr)))
(allow hal_drm cgroup (dir (ioctl read getattr lock search open)))
(allow hal_drm cgroup (file (ioctl read getattr lock map open)))
(allow hal_drm cgroup (lnk_file (ioctl read getattr lock map open)))
(allow hal_drm cgroup (dir (write search)))
(allow hal_drm cgroup (file (write lock append map open)))
(allow hal_drm ion_device (chr_file (ioctl read write getattr lock append map open)))
(allow hal_drm hal_graphics_allocator (fd (use)))
(allow hal_drm mediaserver (fd (use)))
(allow hal_drm sysfs (file (ioctl read getattr lock map open)))
(allow hal_drm tee_device (chr_file (ioctl read write getattr lock append map open)))
(allowx hal_drm self (ioctl tcp_socket ((range 0x5401 0x5403) 0x540b (range 0x540e 0x5411) (range 0x5413 0x5414) (range 0x5450 0x5451))))
(allowx hal_drm self (ioctl udp_socket ((range 0x5401 0x5403) 0x540b (range 0x540e 0x5411) (range 0x5413 0x5414) (range 0x5450 0x5451))))
(allowx hal_drm self (ioctl rawip_socket ((range 0x5401 0x5403) 0x540b (range 0x540e 0x5411) (range 0x5413 0x5414) (range 0x5450 0x5451))))
(allowx hal_drm self (ioctl tcp_socket ((range 0x8906 0x8907) 0x8910 (range 0x8912 0x8913) 0x8915 0x8917 0x8919 0x891b 0x8921 0x8933 0x8938 0x8942)))
(allowx hal_drm self (ioctl udp_socket ((range 0x8906 0x8907) 0x8910 (range 0x8912 0x8913) 0x8915 0x8917 0x8919 0x891b 0x8921 0x8933 0x8938 0x8942)))
(allowx hal_drm self (ioctl rawip_socket ((range 0x8906 0x8907) 0x8910 (range 0x8912 0x8913) 0x8915 0x8917 0x8919 0x891b 0x8921 0x8933 0x8938 0x8942)))
(allowx hal_drm self (ioctl tcp_socket (0x8b01 0x8b05 0x8b07 0x8b09 0x8b0b 0x8b0d 0x8b0f (range 0x8b11 0x8b13) 0x8b21 0x8b23 0x8b25 0x8b27 0x8b29 0x8b2d)))
(allowx hal_drm self (ioctl udp_socket (0x8b01 0x8b05 0x8b07 0x8b09 0x8b0b 0x8b0d 0x8b0f (range 0x8b11 0x8b13) 0x8b21 0x8b23 0x8b25 0x8b27 0x8b29 0x8b2d)))
(allowx hal_drm self (ioctl rawip_socket (0x8b01 0x8b05 0x8b07 0x8b09 0x8b0b 0x8b0d 0x8b0f (range 0x8b11 0x8b13) 0x8b21 0x8b23 0x8b25 0x8b27 0x8b29 0x8b2d)))
;;* lmx 44 system/sepolicy/prebuilts/api/29.0/public/hal_drm.te

(neverallow hal_drm_server fs_type (file (execute_no_trans)))
(neverallow hal_drm_server file_type (file (execute_no_trans)))
;;* lme

;;* lmx 47 system/sepolicy/prebuilts/api/29.0/public/hal_drm.te

(neverallowx hal_drm_server domain (ioctl tcp_socket (0x6900 0x6902)))
(neverallowx hal_drm_server domain (ioctl udp_socket (0x6900 0x6902)))
(neverallowx hal_drm_server domain (ioctl rawip_socket (0x6900 0x6902)))
;;* lme

;;* lmx 47 system/sepolicy/prebuilts/api/29.0/public/hal_drm.te

(neverallowx hal_drm_server domain (ioctl tcp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx hal_drm_server domain (ioctl udp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx hal_drm_server domain (ioctl rawip_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
;;* lme

;;* lmx 47 system/sepolicy/prebuilts/api/29.0/public/hal_drm.te

(neverallowx hal_drm_server domain (ioctl tcp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx hal_drm_server domain (ioctl udp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx hal_drm_server domain (ioctl rawip_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
;;* lme

(allow hal_dumpstate_client hal_dumpstate_server (binder (call transfer)))
(allow hal_dumpstate_server hal_dumpstate_client (binder (transfer)))
(allow hal_dumpstate_client hal_dumpstate_server (fd (use)))
(allow hal_dumpstate_server hal_dumpstate_client (binder (call transfer)))
(allow hal_dumpstate_client hal_dumpstate_server (binder (transfer)))
(allow hal_dumpstate_server hal_dumpstate_client (fd (use)))
(allow hal_dumpstate_client hal_dumpstate_hwservice (hwservice_manager (find)))
(allow hal_dumpstate_server hal_dumpstate_hwservice (hwservice_manager (add find)))
(allow hal_dumpstate_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 5 system/sepolicy/prebuilts/api/29.0/public/hal_dumpstate.te

(neverallow base_typeattr_331 hal_dumpstate_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/prebuilts/api/29.0/public/hal_dumpstate.te

(neverallow base_typeattr_332 hal_dumpstate_hwservice (hwservice_manager (find)))
;;* lme

(allow hal_dumpstate shell_data_file (file (write)))
(allow hal_dumpstate proc_interrupts (file (ioctl read getattr lock map open)))
(allow hal_evs_client hwservicemanager (binder (call transfer)))
(allow hwservicemanager hal_evs_client (binder (call transfer)))
(allow hwservicemanager hal_evs_client (dir (search)))
(allow hwservicemanager hal_evs_client (file (read map open)))
(allow hwservicemanager hal_evs_client (process (getattr)))
(allow hal_evs_server hwservicemanager (binder (call transfer)))
(allow hwservicemanager hal_evs_server (binder (call transfer)))
(allow hwservicemanager hal_evs_server (dir (search)))
(allow hwservicemanager hal_evs_server (file (read map open)))
(allow hwservicemanager hal_evs_server (process (getattr)))
(allow hal_evs_client hal_evs_server (binder (call transfer)))
(allow hal_evs_server hal_evs_client (binder (transfer)))
(allow hal_evs_client hal_evs_server (fd (use)))
(allow hal_evs_server hal_evs_client (binder (call transfer)))
(allow hal_evs_client hal_evs_server (binder (transfer)))
(allow hal_evs_server hal_evs_client (fd (use)))
(allow hal_evs_client hal_evs_hwservice (hwservice_manager (find)))
(allow hal_face_client hal_face_server (binder (call transfer)))
(allow hal_face_server hal_face_client (binder (transfer)))
(allow hal_face_client hal_face_server (fd (use)))
(allow hal_face_server hal_face_client (binder (call transfer)))
(allow hal_face_client hal_face_server (binder (transfer)))
(allow hal_face_server hal_face_client (fd (use)))
(allow hal_face_client hal_face_hwservice (hwservice_manager (find)))
(allow hal_face_server hal_face_hwservice (hwservice_manager (add find)))
(allow hal_face_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 5 system/sepolicy/prebuilts/api/29.0/public/hal_face.te

(neverallow base_typeattr_333 hal_face_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/prebuilts/api/29.0/public/hal_face.te

(neverallow base_typeattr_334 hal_face_hwservice (hwservice_manager (find)))
;;* lme

(allow hal_face ion_device (chr_file (ioctl read getattr lock map open)))
(allow hal_face face_vendor_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow hal_face face_vendor_data_file (dir (ioctl read write getattr lock add_name remove_name search open)))
(allow hal_fingerprint_client hal_fingerprint_server (binder (call transfer)))
(allow hal_fingerprint_server hal_fingerprint_client (binder (transfer)))
(allow hal_fingerprint_client hal_fingerprint_server (fd (use)))
(allow hal_fingerprint_server hal_fingerprint_client (binder (call transfer)))
(allow hal_fingerprint_client hal_fingerprint_server (binder (transfer)))
(allow hal_fingerprint_server hal_fingerprint_client (fd (use)))
(allow hal_fingerprint_client hal_fingerprint_hwservice (hwservice_manager (find)))
(allow hal_fingerprint_server hal_fingerprint_hwservice (hwservice_manager (add find)))
(allow hal_fingerprint_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 5 system/sepolicy/prebuilts/api/29.0/public/hal_fingerprint.te

(neverallow base_typeattr_335 hal_fingerprint_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/prebuilts/api/29.0/public/hal_fingerprint.te

(neverallow base_typeattr_336 hal_fingerprint_hwservice (hwservice_manager (find)))
;;* lme

(allow hal_fingerprint ion_device (chr_file (ioctl read getattr lock map open)))
(allow hal_fingerprint fingerprint_vendor_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow hal_fingerprint fingerprint_vendor_data_file (dir (ioctl read write getattr lock add_name remove_name search open)))
(allow hal_fingerprint cgroup (dir (ioctl read getattr lock search open)))
(allow hal_fingerprint cgroup (file (ioctl read getattr lock map open)))
(allow hal_fingerprint cgroup (lnk_file (ioctl read getattr lock map open)))
(allow hal_fingerprint sysfs (dir (ioctl read getattr lock search open)))
(allow hal_fingerprint sysfs (file (ioctl read getattr lock map open)))
(allow hal_fingerprint sysfs (lnk_file (ioctl read getattr lock map open)))
(allow hal_gatekeeper_client hal_gatekeeper_server (binder (call transfer)))
(allow hal_gatekeeper_server hal_gatekeeper_client (binder (transfer)))
(allow hal_gatekeeper_client hal_gatekeeper_server (fd (use)))
(allow hal_gatekeeper_client hal_gatekeeper_hwservice (hwservice_manager (find)))
(allow hal_gatekeeper_server hal_gatekeeper_hwservice (hwservice_manager (add find)))
(allow hal_gatekeeper_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 3 system/sepolicy/prebuilts/api/29.0/public/hal_gatekeeper.te

(neverallow base_typeattr_337 hal_gatekeeper_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 3 system/sepolicy/prebuilts/api/29.0/public/hal_gatekeeper.te

(neverallow base_typeattr_338 hal_gatekeeper_hwservice (hwservice_manager (find)))
;;* lme

(allow hal_gatekeeper tee_device (chr_file (ioctl read write getattr lock append map open)))
(allow hal_gatekeeper ion_device (chr_file (ioctl read getattr lock map open)))
(allow hal_gnss_client hal_gnss_server (binder (call transfer)))
(allow hal_gnss_server hal_gnss_client (binder (transfer)))
(allow hal_gnss_client hal_gnss_server (fd (use)))
(allow hal_gnss_server hal_gnss_client (binder (call transfer)))
(allow hal_gnss_client hal_gnss_server (binder (transfer)))
(allow hal_gnss_server hal_gnss_client (fd (use)))
(allow hal_gnss_client hal_gnss_hwservice (hwservice_manager (find)))
(allow hal_gnss_server hal_gnss_hwservice (hwservice_manager (add find)))
(allow hal_gnss_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 5 system/sepolicy/prebuilts/api/29.0/public/hal_gnss.te

(neverallow base_typeattr_339 hal_gnss_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/prebuilts/api/29.0/public/hal_gnss.te

(neverallow base_typeattr_340 hal_gnss_hwservice (hwservice_manager (find)))
;;* lme

(allow hal_graphics_allocator_client hal_graphics_allocator_server (binder (call transfer)))
(allow hal_graphics_allocator_server hal_graphics_allocator_client (binder (transfer)))
(allow hal_graphics_allocator_client hal_graphics_allocator_server (fd (use)))
(allow hal_graphics_allocator_client hal_graphics_allocator_hwservice (hwservice_manager (find)))
(allow hal_graphics_allocator_server hal_graphics_allocator_hwservice (hwservice_manager (add find)))
(allow hal_graphics_allocator_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 4 system/sepolicy/prebuilts/api/29.0/public/hal_graphics_allocator.te

(neverallow base_typeattr_341 hal_graphics_allocator_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 4 system/sepolicy/prebuilts/api/29.0/public/hal_graphics_allocator.te

(neverallow base_typeattr_342 hal_graphics_allocator_hwservice (hwservice_manager (find)))
;;* lme

(allow hal_graphics_allocator_client hal_graphics_mapper_hwservice (hwservice_manager (find)))
(allow hal_graphics_allocator_client same_process_hal_file (file (read getattr map execute open)))
(allow hal_graphics_allocator gpu_device (chr_file (ioctl read write getattr lock append map open)))
(allow hal_graphics_allocator ion_device (chr_file (ioctl read getattr lock map open)))
(allow hal_graphics_allocator self (capability (sys_nice)))
(allow hal_graphics_allocator self (cap_userns (sys_nice)))
(allow hal_graphics_composer_client hal_graphics_composer_server (binder (call transfer)))
(allow hal_graphics_composer_server hal_graphics_composer_client (binder (transfer)))
(allow hal_graphics_composer_client hal_graphics_composer_server (fd (use)))
(allow hal_graphics_composer_server hal_graphics_composer_client (binder (call transfer)))
(allow hal_graphics_composer_client hal_graphics_composer_server (binder (transfer)))
(allow hal_graphics_composer_server hal_graphics_composer_client (fd (use)))
(allow hal_graphics_composer_client hal_graphics_composer_server_tmpfs (file (read write getattr map)))
(allow hal_graphics_composer_server hal_graphics_composer_client_tmpfs (file (read write getattr map)))
(allow hal_graphics_composer_client hal_graphics_composer_hwservice (hwservice_manager (find)))
(allow hal_graphics_composer_server hal_graphics_composer_hwservice (hwservice_manager (add find)))
(allow hal_graphics_composer_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 11 system/sepolicy/prebuilts/api/29.0/public/hal_graphics_composer.te

(neverallow base_typeattr_343 hal_graphics_composer_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 11 system/sepolicy/prebuilts/api/29.0/public/hal_graphics_composer.te

(neverallow base_typeattr_344 hal_graphics_composer_hwservice (hwservice_manager (find)))
;;* lme

(allow hal_graphics_composer_server hal_graphics_mapper_hwservice (hwservice_manager (find)))
(allow hal_graphics_composer gpu_device (chr_file (ioctl read write getattr lock append map open)))
(allow hal_graphics_composer ion_device (chr_file (ioctl read getattr lock map open)))
(allow hal_graphics_composer hal_graphics_allocator (fd (use)))
(allow hal_graphics_composer graphics_device (dir (search)))
(allow hal_graphics_composer graphics_device (chr_file (ioctl read write getattr lock append map open)))
(allow hal_graphics_composer system_server (fd (use)))
(allow hal_graphics_composer bootanim (fd (use)))
(allow hal_graphics_composer appdomain (fd (use)))
(allow hal_graphics_composer self (capability (sys_nice)))
(allow hal_graphics_composer self (cap_userns (sys_nice)))
(allow hal_health_client hal_health_server (binder (call transfer)))
(allow hal_health_server hal_health_client (binder (transfer)))
(allow hal_health_client hal_health_server (fd (use)))
(allow hal_health_server hal_health_client (binder (call transfer)))
(allow hal_health_client hal_health_server (binder (transfer)))
(allow hal_health_server hal_health_client (fd (use)))
(allow hal_health_client hal_health_hwservice (hwservice_manager (find)))
(allow hal_health_server hal_health_hwservice (hwservice_manager (add find)))
(allow hal_health_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 5 system/sepolicy/prebuilts/api/29.0/public/hal_health.te

(neverallow base_typeattr_345 hal_health_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/prebuilts/api/29.0/public/hal_health.te

(neverallow base_typeattr_346 hal_health_hwservice (hwservice_manager (find)))
;;* lme

(allow hal_health_server self (netlink_kobject_uevent_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
(allow hal_health_server sysfs (dir (ioctl read getattr lock search open)))
(allow hal_health_server sysfs_batteryinfo (dir (ioctl read getattr lock search open)))
(allow hal_health_server sysfs_batteryinfo (file (ioctl read getattr lock map open)))
(allow hal_health_server sysfs_batteryinfo (lnk_file (ioctl read getattr lock map open)))
(allow hal_health_server sysfs_wake_lock (file (ioctl read write getattr lock append map open)))
(allow hal_health_server self (capability2 (block_suspend)))
(allow hal_health_server self (cap2_userns (block_suspend)))
(allow hal_health_server system_suspend_server (binder (call transfer)))
(allow system_suspend_server hal_health_server (binder (transfer)))
(allow hal_health_server system_suspend_server (fd (use)))
(allow hal_health_server system_suspend_hwservice (hwservice_manager (find)))
(allow hal_health_server hwservicemanager (binder (call transfer)))
(allow hwservicemanager hal_health_server (binder (call transfer)))
(allow hwservicemanager hal_health_server (dir (search)))
(allow hwservicemanager hal_health_server (file (read map open)))
(allow hwservicemanager hal_health_server (process (getattr)))
(allow hal_health_server hwservicemanager_prop (file (read getattr map open)))
(allow hal_health_server hidl_manager_hwservice (hwservice_manager (find)))
(allow hal_health_server kmsg_device (chr_file (write getattr lock append map open)))
(allow hal_health_server self (capability2 (wake_alarm)))
(allow hal_health_storage_client hal_health_storage_server (binder (call transfer)))
(allow hal_health_storage_server hal_health_storage_client (binder (transfer)))
(allow hal_health_storage_client hal_health_storage_server (fd (use)))
(allow hal_health_storage_server hal_health_storage_client (binder (call transfer)))
(allow hal_health_storage_client hal_health_storage_server (binder (transfer)))
(allow hal_health_storage_server hal_health_storage_client (fd (use)))
(allow hal_health_storage_client hal_health_storage_hwservice (hwservice_manager (find)))
(allow hal_health_storage_server hal_health_storage_hwservice (hwservice_manager (add find)))
(allow hal_health_storage_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 5 system/sepolicy/prebuilts/api/29.0/public/hal_health_storage.te

(neverallow base_typeattr_347 hal_health_storage_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/prebuilts/api/29.0/public/hal_health_storage.te

(neverallow base_typeattr_348 hal_health_storage_hwservice (hwservice_manager (find)))
;;* lme

(allow hal_input_classifier_client hal_input_classifier_server (binder (call transfer)))
(allow hal_input_classifier_server hal_input_classifier_client (binder (transfer)))
(allow hal_input_classifier_client hal_input_classifier_server (fd (use)))
(allow hal_input_classifier_client hal_input_classifier_hwservice (hwservice_manager (find)))
(allow hal_input_classifier_server hal_input_classifier_hwservice (hwservice_manager (add find)))
(allow hal_input_classifier_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 4 system/sepolicy/prebuilts/api/29.0/public/hal_input_classifier.te

(neverallow base_typeattr_349 hal_input_classifier_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 4 system/sepolicy/prebuilts/api/29.0/public/hal_input_classifier.te

(neverallow base_typeattr_350 hal_input_classifier_hwservice (hwservice_manager (find)))
;;* lme

(allow hal_ir_client hal_ir_server (binder (call transfer)))
(allow hal_ir_server hal_ir_client (binder (transfer)))
(allow hal_ir_client hal_ir_server (fd (use)))
(allow hal_ir_server hal_ir_client (binder (call transfer)))
(allow hal_ir_client hal_ir_server (binder (transfer)))
(allow hal_ir_server hal_ir_client (fd (use)))
(allow hal_ir_client hal_ir_hwservice (hwservice_manager (find)))
(allow hal_ir_server hal_ir_hwservice (hwservice_manager (add find)))
(allow hal_ir_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 5 system/sepolicy/prebuilts/api/29.0/public/hal_ir.te

(neverallow base_typeattr_351 hal_ir_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/prebuilts/api/29.0/public/hal_ir.te

(neverallow base_typeattr_352 hal_ir_hwservice (hwservice_manager (find)))
;;* lme

(allow hal_keymaster_client hal_keymaster_server (binder (call transfer)))
(allow hal_keymaster_server hal_keymaster_client (binder (transfer)))
(allow hal_keymaster_client hal_keymaster_server (fd (use)))
(allow hal_keymaster_client hal_keymaster_hwservice (hwservice_manager (find)))
(allow hal_keymaster_server hal_keymaster_hwservice (hwservice_manager (add find)))
(allow hal_keymaster_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 4 system/sepolicy/prebuilts/api/29.0/public/hal_keymaster.te

(neverallow base_typeattr_353 hal_keymaster_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 4 system/sepolicy/prebuilts/api/29.0/public/hal_keymaster.te

(neverallow base_typeattr_354 hal_keymaster_hwservice (hwservice_manager (find)))
;;* lme

(allow hal_keymaster tee_device (chr_file (ioctl read write getattr lock append map open)))
(allow hal_keymaster ion_device (chr_file (ioctl read getattr lock map open)))
(allow hal_light_client hal_light_server (binder (call transfer)))
(allow hal_light_server hal_light_client (binder (transfer)))
(allow hal_light_client hal_light_server (fd (use)))
(allow hal_light_server hal_light_client (binder (call transfer)))
(allow hal_light_client hal_light_server (binder (transfer)))
(allow hal_light_server hal_light_client (fd (use)))
(allow hal_light_client hal_light_hwservice (hwservice_manager (find)))
(allow hal_light_server hal_light_hwservice (hwservice_manager (add find)))
(allow hal_light_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 5 system/sepolicy/prebuilts/api/29.0/public/hal_light.te

(neverallow base_typeattr_355 hal_light_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/prebuilts/api/29.0/public/hal_light.te

(neverallow base_typeattr_356 hal_light_hwservice (hwservice_manager (find)))
;;* lme

(allow hal_light sysfs_leds (lnk_file (read)))
(allow hal_light sysfs_leds (file (ioctl read write getattr lock append map open)))
(allow hal_light sysfs_leds (dir (ioctl read getattr lock search open)))
(allow hal_lowpan_client hal_lowpan_server (binder (call transfer)))
(allow hal_lowpan_server hal_lowpan_client (binder (transfer)))
(allow hal_lowpan_client hal_lowpan_server (fd (use)))
(allow hal_lowpan_server hal_lowpan_client (binder (call transfer)))
(allow hal_lowpan_client hal_lowpan_server (binder (transfer)))
(allow hal_lowpan_server hal_lowpan_client (fd (use)))
(allow hal_lowpan_client hal_lowpan_hwservice (hwservice_manager (find)))
(allow hal_lowpan_server hal_lowpan_hwservice (hwservice_manager (add find)))
(allow hal_lowpan_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 7 system/sepolicy/prebuilts/api/29.0/public/hal_lowpan.te

(neverallow base_typeattr_357 hal_lowpan_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 7 system/sepolicy/prebuilts/api/29.0/public/hal_lowpan.te

(neverallow base_typeattr_358 hal_lowpan_hwservice (hwservice_manager (find)))
;;* lme

(allow hal_lowpan_server property_socket (sock_file (write)))
(allow hal_lowpan_server init (unix_stream_socket (connectto)))
(allow hal_lowpan_server lowpan_prop (property_service (set)))
(allow hal_lowpan_server lowpan_prop (file (read getattr map open)))
(allow hal_lowpan_server lowpan_device (chr_file (ioctl read write getattr lock append map open)))
;;* lmx 20 system/sepolicy/prebuilts/api/29.0/public/hal_lowpan.te

(neverallow base_typeattr_359 lowpan_device (chr_file (ioctl read write create setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod open audit_access)))
;;* lme

(allow hal_memtrack_client hal_memtrack_server (binder (call transfer)))
(allow hal_memtrack_server hal_memtrack_client (binder (transfer)))
(allow hal_memtrack_client hal_memtrack_server (fd (use)))
(allow hal_memtrack_client hal_memtrack_hwservice (hwservice_manager (find)))
(allow hal_memtrack_server hal_memtrack_hwservice (hwservice_manager (add find)))
(allow hal_memtrack_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 4 system/sepolicy/prebuilts/api/29.0/public/hal_memtrack.te

(neverallow base_typeattr_360 hal_memtrack_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 4 system/sepolicy/prebuilts/api/29.0/public/hal_memtrack.te

(neverallow base_typeattr_361 hal_memtrack_hwservice (hwservice_manager (find)))
;;* lme

(allow hal_neuralnetworks_client hal_neuralnetworks_server (binder (call transfer)))
(allow hal_neuralnetworks_server hal_neuralnetworks_client (binder (transfer)))
(allow hal_neuralnetworks_client hal_neuralnetworks_server (fd (use)))
(allow hal_neuralnetworks_server hal_neuralnetworks_client (binder (call transfer)))
(allow hal_neuralnetworks_client hal_neuralnetworks_server (binder (transfer)))
(allow hal_neuralnetworks_server hal_neuralnetworks_client (fd (use)))
(allow hal_neuralnetworks_client hal_neuralnetworks_hwservice (hwservice_manager (find)))
(allow hal_neuralnetworks_server hal_neuralnetworks_hwservice (hwservice_manager (add find)))
(allow hal_neuralnetworks_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 5 system/sepolicy/prebuilts/api/29.0/public/hal_neuralnetworks.te

(neverallow base_typeattr_362 hal_neuralnetworks_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/prebuilts/api/29.0/public/hal_neuralnetworks.te

(neverallow base_typeattr_363 hal_neuralnetworks_hwservice (hwservice_manager (find)))
;;* lme

(allow hal_neuralnetworks hidl_memory_hwservice (hwservice_manager (find)))
(allow hal_neuralnetworks hal_allocator (fd (use)))
(allow hal_neuralnetworks_server app_data_file (file (read write getattr map)))
(allow hal_neuralnetworks_server privapp_data_file (file (read write getattr map)))
(allow hal_neuralnetworks_server shell_data_file (file (read write getattr map)))
(allow hal_neuralnetworks_client nnapi_ext_deny_product_prop (file (read getattr map open)))
;;* lmx 22 system/sepolicy/prebuilts/api/29.0/public/hal_neuralnetworks.te

(neverallow base_typeattr_166 nnapi_ext_deny_product_prop (property_service (set)))
;;* lme

;;* lmx 11 system/sepolicy/prebuilts/api/29.0/public/hal_neverallows.te

(neverallow base_typeattr_364 self (capability (net_admin net_raw)))
(neverallow base_typeattr_364 self (cap_userns (net_admin net_raw)))
;;* lme

;;* lmx 27 system/sepolicy/prebuilts/api/29.0/public/hal_neverallows.te

(neverallow base_typeattr_365 domain (tcp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind name_connect)))
(neverallow base_typeattr_365 domain (udp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind)))
(neverallow base_typeattr_365 domain (rawip_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind)))
;;* lme

;;* lmx 54 system/sepolicy/prebuilts/api/29.0/public/hal_neverallows.te

(neverallow base_typeattr_366 fs_type (file (execute_no_trans)))
(neverallow base_typeattr_366 file_type (file (execute_no_trans)))
;;* lme

;;* lmx 56 system/sepolicy/prebuilts/api/29.0/public/hal_neverallows.te

(neverallow base_typeattr_166 halserverdomain (process (transition)))
;;* lme

;;* lmx 60 system/sepolicy/prebuilts/api/29.0/public/hal_neverallows.te

(neverallow base_typeattr_167 halserverdomain (process (dyntransition)))
;;* lme

(allow hal_nfc_client hal_nfc_server (binder (call transfer)))
(allow hal_nfc_server hal_nfc_client (binder (transfer)))
(allow hal_nfc_client hal_nfc_server (fd (use)))
(allow hal_nfc_server hal_nfc_client (binder (call transfer)))
(allow hal_nfc_client hal_nfc_server (binder (transfer)))
(allow hal_nfc_server hal_nfc_client (fd (use)))
(allow hal_nfc_client hal_nfc_hwservice (hwservice_manager (find)))
(allow hal_nfc_server hal_nfc_hwservice (hwservice_manager (add find)))
(allow hal_nfc_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 5 system/sepolicy/prebuilts/api/29.0/public/hal_nfc.te

(neverallow base_typeattr_367 hal_nfc_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/prebuilts/api/29.0/public/hal_nfc.te

(neverallow base_typeattr_368 hal_nfc_hwservice (hwservice_manager (find)))
;;* lme

(allow hal_nfc property_socket (sock_file (write)))
(allow hal_nfc init (unix_stream_socket (connectto)))
(allow hal_nfc nfc_prop (property_service (set)))
(allow hal_nfc nfc_prop (file (read getattr map open)))
(allow hal_nfc nfc_device (chr_file (ioctl read write getattr lock append map open)))
(allow hal_oemlock_client hal_oemlock_server (binder (call transfer)))
(allow hal_oemlock_server hal_oemlock_client (binder (transfer)))
(allow hal_oemlock_client hal_oemlock_server (fd (use)))
(allow hal_oemlock_client hal_oemlock_hwservice (hwservice_manager (find)))
(allow hal_oemlock_server hal_oemlock_hwservice (hwservice_manager (add find)))
(allow hal_oemlock_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 4 system/sepolicy/prebuilts/api/29.0/public/hal_oemlock.te

(neverallow base_typeattr_369 hal_oemlock_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 4 system/sepolicy/prebuilts/api/29.0/public/hal_oemlock.te

(neverallow base_typeattr_370 hal_oemlock_hwservice (hwservice_manager (find)))
;;* lme

(allow hal_omx_server binderservicedomain (binder (call transfer)))
(allow binderservicedomain hal_omx_server (binder (transfer)))
(allow hal_omx_server binderservicedomain (fd (use)))
(allow hal_omx_server base_typeattr_171 (binder (call transfer)))
(allow base_typeattr_171 hal_omx_server (binder (transfer)))
(allow hal_omx_server base_typeattr_171 (fd (use)))
(allow hal_omx_server hal_graphics_composer (fd (use)))
(allow hal_omx_server ion_device (chr_file (ioctl read write getattr lock append map open)))
(allow hal_omx_server hal_camera (fd (use)))
(allow hal_omx_server anr_data_file (file (append)))
(allow hal_omx_server dumpstate (fd (use)))
(allow hal_omx_server incidentd (fd (use)))
(allow hal_omx_server dumpstate (fifo_file (write append)))
(allow hal_omx_server incidentd (fifo_file (write append)))
(allow hal_omx_server system_server (fifo_file (write append)))
(allow hal_omx_server tombstoned (unix_stream_socket (connectto)))
(allow hal_omx_server tombstoned (fd (use)))
(allow hal_omx_server tombstoned_crash_socket (sock_file (write)))
(allow hal_omx_server tombstone_data_file (file (append)))
(allow hal_omx_server bufferhubd (fd (use)))
(allow hal_omx_client hal_omx_hwservice (hwservice_manager (find)))
(allow hal_omx_server hal_omx_hwservice (hwservice_manager (add find)))
(allow hal_omx_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 21 system/sepolicy/prebuilts/api/29.0/public/hal_omx.te

(neverallow base_typeattr_371 hal_omx_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 21 system/sepolicy/prebuilts/api/29.0/public/hal_omx.te

(neverallow base_typeattr_372 hal_omx_hwservice (hwservice_manager (find)))
;;* lme

(allow hal_omx_client hidl_token_hwservice (hwservice_manager (find)))
(allow hal_omx_client hal_omx_server (binder (call transfer)))
(allow hal_omx_server hal_omx_client (binder (transfer)))
(allow hal_omx_client hal_omx_server (fd (use)))
(allow hal_omx_server hal_omx_client (binder (call transfer)))
(allow hal_omx_client hal_omx_server (binder (transfer)))
(allow hal_omx_server hal_omx_client (fd (use)))
;;* lmx 34 system/sepolicy/prebuilts/api/29.0/public/hal_omx.te

(neverallow hal_omx_server fs_type (file (execute_no_trans)))
(neverallow hal_omx_server file_type (file (execute_no_trans)))
;;* lme

;;* lmx 46 system/sepolicy/prebuilts/api/29.0/public/hal_omx.te

(neverallow hal_omx_server domain (tcp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind name_connect)))
(neverallow hal_omx_server domain (udp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind)))
(neverallow hal_omx_server domain (rawip_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind)))
;;* lme

(allow hal_power_client hal_power_server (binder (call transfer)))
(allow hal_power_server hal_power_client (binder (transfer)))
(allow hal_power_client hal_power_server (fd (use)))
(allow hal_power_server hal_power_client (binder (call transfer)))
(allow hal_power_client hal_power_server (binder (transfer)))
(allow hal_power_server hal_power_client (fd (use)))
(allow hal_power_client hal_power_hwservice (hwservice_manager (find)))
(allow hal_power_server hal_power_hwservice (hwservice_manager (add find)))
(allow hal_power_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 5 system/sepolicy/prebuilts/api/29.0/public/hal_power.te

(neverallow base_typeattr_373 hal_power_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/prebuilts/api/29.0/public/hal_power.te

(neverallow base_typeattr_374 hal_power_hwservice (hwservice_manager (find)))
;;* lme

(allow hal_power_stats_client hal_power_stats_server (binder (call transfer)))
(allow hal_power_stats_server hal_power_stats_client (binder (transfer)))
(allow hal_power_stats_client hal_power_stats_server (fd (use)))
(allow hal_power_stats_server hal_power_stats_client (binder (call transfer)))
(allow hal_power_stats_client hal_power_stats_server (binder (transfer)))
(allow hal_power_stats_server hal_power_stats_client (fd (use)))
(allow hal_power_stats_client hal_power_stats_hwservice (hwservice_manager (find)))
(allow hal_power_stats_server hal_power_stats_hwservice (hwservice_manager (add find)))
(allow hal_power_stats_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 5 system/sepolicy/prebuilts/api/29.0/public/hal_power_stats.te

(neverallow base_typeattr_375 hal_power_stats_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/prebuilts/api/29.0/public/hal_power_stats.te

(neverallow base_typeattr_376 hal_power_stats_hwservice (hwservice_manager (find)))
;;* lme

(allow hal_secure_element_client hal_secure_element_server (binder (call transfer)))
(allow hal_secure_element_server hal_secure_element_client (binder (transfer)))
(allow hal_secure_element_client hal_secure_element_server (fd (use)))
(allow hal_secure_element_server hal_secure_element_client (binder (call transfer)))
(allow hal_secure_element_client hal_secure_element_server (binder (transfer)))
(allow hal_secure_element_server hal_secure_element_client (fd (use)))
(allow hal_secure_element_client hal_secure_element_hwservice (hwservice_manager (find)))
(allow hal_secure_element_server hal_secure_element_hwservice (hwservice_manager (add find)))
(allow hal_secure_element_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 5 system/sepolicy/prebuilts/api/29.0/public/hal_secure_element.te

(neverallow base_typeattr_377 hal_secure_element_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/prebuilts/api/29.0/public/hal_secure_element.te

(neverallow base_typeattr_378 hal_secure_element_hwservice (hwservice_manager (find)))
;;* lme

(allow hal_sensors_client hal_sensors_server (binder (call transfer)))
(allow hal_sensors_server hal_sensors_client (binder (transfer)))
(allow hal_sensors_client hal_sensors_server (fd (use)))
(allow hal_sensors_client hal_sensors_hwservice (hwservice_manager (find)))
(allow hal_sensors_server hal_sensors_hwservice (hwservice_manager (add find)))
(allow hal_sensors_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 4 system/sepolicy/prebuilts/api/29.0/public/hal_sensors.te

(neverallow base_typeattr_379 hal_sensors_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 4 system/sepolicy/prebuilts/api/29.0/public/hal_sensors.te

(neverallow base_typeattr_380 hal_sensors_hwservice (hwservice_manager (find)))
;;* lme

(allow hal_sensors base_typeattr_171 (fd (use)))
(allow hal_sensors hal_allocator (fd (use)))
(allow hal_sensors self (capability (sys_nice)))
(allow hal_sensors self (cap_userns (sys_nice)))
(allow hal_telephony_client hal_telephony_server (binder (call transfer)))
(allow hal_telephony_server hal_telephony_client (binder (transfer)))
(allow hal_telephony_client hal_telephony_server (fd (use)))
(allow hal_telephony_server hal_telephony_client (binder (call transfer)))
(allow hal_telephony_client hal_telephony_server (binder (transfer)))
(allow hal_telephony_server hal_telephony_client (fd (use)))
(allow hal_telephony_client hal_telephony_hwservice (hwservice_manager (find)))
(allow hal_telephony_server hal_telephony_hwservice (hwservice_manager (add find)))
(allow hal_telephony_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 5 system/sepolicy/prebuilts/api/29.0/public/hal_telephony.te

(neverallow base_typeattr_381 hal_telephony_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/prebuilts/api/29.0/public/hal_telephony.te

(neverallow base_typeattr_382 hal_telephony_hwservice (hwservice_manager (find)))
;;* lme

(allowx hal_telephony_server self (ioctl udp_socket (0x6900 0x6902)))
(allowx hal_telephony_server self (ioctl udp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(allowx hal_telephony_server self (ioctl udp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(allow hal_telephony_server self (netlink_route_socket (nlmsg_write)))
(allow hal_telephony_server kernel (system (module_request)))
(allow hal_telephony_server self (capability (setgid setuid setpcap net_admin net_raw)))
(allow hal_telephony_server self (cap_userns (setgid setuid setpcap net_admin net_raw)))
(allow hal_telephony_server cgroup (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
(allow hal_telephony_server cgroup (file (ioctl read getattr lock map open)))
(allow hal_telephony_server cgroup (lnk_file (ioctl read getattr lock map open)))
(allow hal_telephony_server radio_device (chr_file (ioctl read write getattr lock append map open)))
(allow hal_telephony_server radio_device (blk_file (ioctl read getattr lock map open)))
(allow hal_telephony_server efs_file (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
(allow hal_telephony_server efs_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow hal_telephony_server vendor_shell_exec (file (ioctl read getattr lock map execute execute_no_trans open)))
(allow hal_telephony_server bluetooth_efs_file (file (ioctl read getattr lock map open)))
(allow hal_telephony_server bluetooth_efs_file (dir (ioctl read getattr lock search open)))
(allow hal_telephony_server property_socket (sock_file (write)))
(allow hal_telephony_server init (unix_stream_socket (connectto)))
(allow hal_telephony_server radio_prop (property_service (set)))
(allow hal_telephony_server radio_prop (file (read getattr map open)))
(allow hal_telephony_server property_socket (sock_file (write)))
(allow hal_telephony_server init (unix_stream_socket (connectto)))
(allow hal_telephony_server exported_radio_prop (property_service (set)))
(allow hal_telephony_server exported_radio_prop (file (read getattr map open)))
(allow hal_telephony_server property_socket (sock_file (write)))
(allow hal_telephony_server init (unix_stream_socket (connectto)))
(allow hal_telephony_server exported2_radio_prop (property_service (set)))
(allow hal_telephony_server exported2_radio_prop (file (read getattr map open)))
(allow hal_telephony_server property_socket (sock_file (write)))
(allow hal_telephony_server init (unix_stream_socket (connectto)))
(allow hal_telephony_server exported3_radio_prop (property_service (set)))
(allow hal_telephony_server exported3_radio_prop (file (read getattr map open)))
(allow hal_telephony_server tty_device (chr_file (ioctl read write getattr lock append map open)))
(allow hal_telephony_server self (netlink_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
(allow hal_telephony_server self (netlink_generic_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
(allow hal_telephony_server self (netlink_kobject_uevent_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
(allow hal_telephony_server sysfs_wake_lock (file (ioctl read write getattr lock append map open)))
(allow hal_telephony_server self (capability2 (block_suspend)))
(allow hal_telephony_server self (cap2_userns (block_suspend)))
(allow hal_telephony_server system_suspend_server (binder (call transfer)))
(allow system_suspend_server hal_telephony_server (binder (transfer)))
(allow hal_telephony_server system_suspend_server (fd (use)))
(allow hal_telephony_server system_suspend_hwservice (hwservice_manager (find)))
(allow hal_telephony_server hwservicemanager (binder (call transfer)))
(allow hwservicemanager hal_telephony_server (binder (call transfer)))
(allow hwservicemanager hal_telephony_server (dir (search)))
(allow hwservicemanager hal_telephony_server (file (read map open)))
(allow hwservicemanager hal_telephony_server (process (getattr)))
(allow hal_telephony_server hwservicemanager_prop (file (read getattr map open)))
(allow hal_telephony_server hidl_manager_hwservice (hwservice_manager (find)))
(allow hal_telephony_server proc_net_type (dir (ioctl read getattr lock search open)))
(allow hal_telephony_server proc_net_type (file (ioctl read getattr lock map open)))
(allow hal_telephony_server proc_net_type (lnk_file (ioctl read getattr lock map open)))
(allow hal_telephony_server sysfs_type (dir (ioctl read getattr lock search open)))
(allow hal_telephony_server sysfs_type (file (ioctl read getattr lock map open)))
(allow hal_telephony_server sysfs_type (lnk_file (ioctl read getattr lock map open)))
(allow hal_telephony_server self (socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
(allow hal_tetheroffload_client hal_tetheroffload_server (binder (call transfer)))
(allow hal_tetheroffload_server hal_tetheroffload_client (binder (transfer)))
(allow hal_tetheroffload_client hal_tetheroffload_server (fd (use)))
(allow hal_tetheroffload_server hal_tetheroffload_client (binder (call transfer)))
(allow hal_tetheroffload_client hal_tetheroffload_server (binder (transfer)))
(allow hal_tetheroffload_server hal_tetheroffload_client (fd (use)))
(allow hal_tetheroffload_client hal_tetheroffload_hwservice (hwservice_manager (find)))
(allow hal_tetheroffload_server hal_tetheroffload_hwservice (hwservice_manager (add find)))
(allow hal_tetheroffload_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 5 system/sepolicy/prebuilts/api/29.0/public/hal_tetheroffload.te

(neverallow base_typeattr_383 hal_tetheroffload_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/prebuilts/api/29.0/public/hal_tetheroffload.te

(neverallow base_typeattr_384 hal_tetheroffload_hwservice (hwservice_manager (find)))
;;* lme

(allow hal_tetheroffload_server hal_tetheroffload_client (netlink_netfilter_socket (read write getattr setopt)))
(allow hal_thermal_client hal_thermal_server (binder (call transfer)))
(allow hal_thermal_server hal_thermal_client (binder (transfer)))
(allow hal_thermal_client hal_thermal_server (fd (use)))
(allow hal_thermal_server hal_thermal_client (binder (call transfer)))
(allow hal_thermal_client hal_thermal_server (binder (transfer)))
(allow hal_thermal_server hal_thermal_client (fd (use)))
(allow hal_thermal_client hal_thermal_hwservice (hwservice_manager (find)))
(allow hal_thermal_server hal_thermal_hwservice (hwservice_manager (add find)))
(allow hal_thermal_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 5 system/sepolicy/prebuilts/api/29.0/public/hal_thermal.te

(neverallow base_typeattr_385 hal_thermal_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/prebuilts/api/29.0/public/hal_thermal.te

(neverallow base_typeattr_386 hal_thermal_hwservice (hwservice_manager (find)))
;;* lme

(allow hal_tv_cec_client hal_tv_cec_server (binder (call transfer)))
(allow hal_tv_cec_server hal_tv_cec_client (binder (transfer)))
(allow hal_tv_cec_client hal_tv_cec_server (fd (use)))
(allow hal_tv_cec_server hal_tv_cec_client (binder (call transfer)))
(allow hal_tv_cec_client hal_tv_cec_server (binder (transfer)))
(allow hal_tv_cec_server hal_tv_cec_client (fd (use)))
(allow hal_tv_cec_client hal_tv_cec_hwservice (hwservice_manager (find)))
(allow hal_tv_cec_server hal_tv_cec_hwservice (hwservice_manager (add find)))
(allow hal_tv_cec_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 5 system/sepolicy/prebuilts/api/29.0/public/hal_tv_cec.te

(neverallow base_typeattr_387 hal_tv_cec_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/prebuilts/api/29.0/public/hal_tv_cec.te

(neverallow base_typeattr_388 hal_tv_cec_hwservice (hwservice_manager (find)))
;;* lme

(allow hal_tv_input_client hal_tv_input_server (binder (call transfer)))
(allow hal_tv_input_server hal_tv_input_client (binder (transfer)))
(allow hal_tv_input_client hal_tv_input_server (fd (use)))
(allow hal_tv_input_server hal_tv_input_client (binder (call transfer)))
(allow hal_tv_input_client hal_tv_input_server (binder (transfer)))
(allow hal_tv_input_server hal_tv_input_client (fd (use)))
(allow hal_tv_input_client hal_tv_input_hwservice (hwservice_manager (find)))
(allow hal_tv_input_server hal_tv_input_hwservice (hwservice_manager (add find)))
(allow hal_tv_input_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 5 system/sepolicy/prebuilts/api/29.0/public/hal_tv_input.te

(neverallow base_typeattr_389 hal_tv_input_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/prebuilts/api/29.0/public/hal_tv_input.te

(neverallow base_typeattr_390 hal_tv_input_hwservice (hwservice_manager (find)))
;;* lme

(allow hal_usb_client hal_usb_server (binder (call transfer)))
(allow hal_usb_server hal_usb_client (binder (transfer)))
(allow hal_usb_client hal_usb_server (fd (use)))
(allow hal_usb_server hal_usb_client (binder (call transfer)))
(allow hal_usb_client hal_usb_server (binder (transfer)))
(allow hal_usb_server hal_usb_client (fd (use)))
(allow hal_usb_client hal_usb_hwservice (hwservice_manager (find)))
(allow hal_usb_server hal_usb_hwservice (hwservice_manager (add find)))
(allow hal_usb_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 5 system/sepolicy/prebuilts/api/29.0/public/hal_usb.te

(neverallow base_typeattr_391 hal_usb_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/prebuilts/api/29.0/public/hal_usb.te

(neverallow base_typeattr_392 hal_usb_hwservice (hwservice_manager (find)))
;;* lme

(allow hal_usb self (netlink_kobject_uevent_socket (create)))
(allow hal_usb self (netlink_kobject_uevent_socket (setopt)))
(allow hal_usb self (netlink_kobject_uevent_socket (getopt)))
(allow hal_usb self (netlink_kobject_uevent_socket (bind)))
(allow hal_usb self (netlink_kobject_uevent_socket (read)))
(allow hal_usb sysfs (dir (open)))
(allow hal_usb sysfs (dir (read)))
(allow hal_usb sysfs (file (read)))
(allow hal_usb sysfs (file (open)))
(allow hal_usb sysfs (file (write)))
(allow hal_usb sysfs (file (getattr)))
(allow hal_usb_gadget_client hal_usb_gadget_server (binder (call transfer)))
(allow hal_usb_gadget_server hal_usb_gadget_client (binder (transfer)))
(allow hal_usb_gadget_client hal_usb_gadget_server (fd (use)))
(allow hal_usb_gadget_server hal_usb_gadget_client (binder (call transfer)))
(allow hal_usb_gadget_client hal_usb_gadget_server (binder (transfer)))
(allow hal_usb_gadget_server hal_usb_gadget_client (fd (use)))
(allow hal_usb_gadget_client hal_usb_gadget_hwservice (hwservice_manager (find)))
(allow hal_usb_gadget_server hal_usb_gadget_hwservice (hwservice_manager (add find)))
(allow hal_usb_gadget_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 5 system/sepolicy/prebuilts/api/29.0/public/hal_usb_gadget.te

(neverallow base_typeattr_393 hal_usb_gadget_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/prebuilts/api/29.0/public/hal_usb_gadget.te

(neverallow base_typeattr_394 hal_usb_gadget_hwservice (hwservice_manager (find)))
;;* lme

(allow hal_usb_gadget_server configfs (lnk_file (read create unlink)))
(allow hal_usb_gadget_server configfs (dir (ioctl read write getattr lock add_name remove_name search open)))
(allow hal_usb_gadget_server configfs (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow hal_usb_gadget_server functionfs (dir (read search)))
(allow hal_usb_gadget_server functionfs (file (read)))
(allow hal_vehicle_client hal_vehicle_server (binder (call transfer)))
(allow hal_vehicle_server hal_vehicle_client (binder (transfer)))
(allow hal_vehicle_client hal_vehicle_server (fd (use)))
(allow hal_vehicle_server hal_vehicle_client (binder (call transfer)))
(allow hal_vehicle_client hal_vehicle_server (binder (transfer)))
(allow hal_vehicle_server hal_vehicle_client (fd (use)))
(allow hal_vehicle_client hal_vehicle_hwservice (hwservice_manager (find)))
(allow hal_vehicle_server hal_vehicle_hwservice (hwservice_manager (add find)))
(allow hal_vehicle_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 6 system/sepolicy/prebuilts/api/29.0/public/hal_vehicle.te

(neverallow base_typeattr_395 hal_vehicle_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 6 system/sepolicy/prebuilts/api/29.0/public/hal_vehicle.te

(neverallow base_typeattr_396 hal_vehicle_hwservice (hwservice_manager (find)))
;;* lme

(allow hal_vibrator_client hal_vibrator_server (binder (call transfer)))
(allow hal_vibrator_server hal_vibrator_client (binder (transfer)))
(allow hal_vibrator_client hal_vibrator_server (fd (use)))
(allow hal_vibrator_client hal_vibrator_hwservice (hwservice_manager (find)))
(allow hal_vibrator_server hal_vibrator_hwservice (hwservice_manager (add find)))
(allow hal_vibrator_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 4 system/sepolicy/prebuilts/api/29.0/public/hal_vibrator.te

(neverallow base_typeattr_397 hal_vibrator_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 4 system/sepolicy/prebuilts/api/29.0/public/hal_vibrator.te

(neverallow base_typeattr_398 hal_vibrator_hwservice (hwservice_manager (find)))
;;* lme

(allow hal_vibrator sysfs_vibrator (file (ioctl read write getattr lock append map open)))
(allow hal_vibrator sysfs_vibrator (dir (search)))
(allow hal_vr_client hal_vr_server (binder (call transfer)))
(allow hal_vr_server hal_vr_client (binder (transfer)))
(allow hal_vr_client hal_vr_server (fd (use)))
(allow hal_vr_server hal_vr_client (binder (call transfer)))
(allow hal_vr_client hal_vr_server (binder (transfer)))
(allow hal_vr_server hal_vr_client (fd (use)))
(allow hal_vr_client hal_vr_hwservice (hwservice_manager (find)))
(allow hal_vr_server hal_vr_hwservice (hwservice_manager (add find)))
(allow hal_vr_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 5 system/sepolicy/prebuilts/api/29.0/public/hal_vr.te

(neverallow base_typeattr_399 hal_vr_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/prebuilts/api/29.0/public/hal_vr.te

(neverallow base_typeattr_400 hal_vr_hwservice (hwservice_manager (find)))
;;* lme

(allow hal_weaver_client hal_weaver_server (binder (call transfer)))
(allow hal_weaver_server hal_weaver_client (binder (transfer)))
(allow hal_weaver_client hal_weaver_server (fd (use)))
(allow hal_weaver_client hal_weaver_hwservice (hwservice_manager (find)))
(allow hal_weaver_server hal_weaver_hwservice (hwservice_manager (add find)))
(allow hal_weaver_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 4 system/sepolicy/prebuilts/api/29.0/public/hal_weaver.te

(neverallow base_typeattr_401 hal_weaver_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 4 system/sepolicy/prebuilts/api/29.0/public/hal_weaver.te

(neverallow base_typeattr_402 hal_weaver_hwservice (hwservice_manager (find)))
;;* lme

(allow hal_wifi_client hal_wifi_server (binder (call transfer)))
(allow hal_wifi_server hal_wifi_client (binder (transfer)))
(allow hal_wifi_client hal_wifi_server (fd (use)))
(allow hal_wifi_server hal_wifi_client (binder (call transfer)))
(allow hal_wifi_client hal_wifi_server (binder (transfer)))
(allow hal_wifi_server hal_wifi_client (fd (use)))
(allow hal_wifi_client hal_wifi_hwservice (hwservice_manager (find)))
(allow hal_wifi_server hal_wifi_hwservice (hwservice_manager (add find)))
(allow hal_wifi_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 5 system/sepolicy/prebuilts/api/29.0/public/hal_wifi.te

(neverallow base_typeattr_403 hal_wifi_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/prebuilts/api/29.0/public/hal_wifi.te

(neverallow base_typeattr_404 hal_wifi_hwservice (hwservice_manager (find)))
;;* lme

(allow hal_wifi proc_net_type (dir (ioctl read getattr lock search open)))
(allow hal_wifi proc_net_type (file (ioctl read getattr lock map open)))
(allow hal_wifi proc_net_type (lnk_file (ioctl read getattr lock map open)))
(allow hal_wifi sysfs_type (dir (ioctl read getattr lock search open)))
(allow hal_wifi sysfs_type (file (ioctl read getattr lock map open)))
(allow hal_wifi sysfs_type (lnk_file (ioctl read getattr lock map open)))
(allow hal_wifi property_socket (sock_file (write)))
(allow hal_wifi init (unix_stream_socket (connectto)))
(allow hal_wifi exported_wifi_prop (property_service (set)))
(allow hal_wifi exported_wifi_prop (file (read getattr map open)))
(allow hal_wifi property_socket (sock_file (write)))
(allow hal_wifi init (unix_stream_socket (connectto)))
(allow hal_wifi wifi_prop (property_service (set)))
(allow hal_wifi wifi_prop (file (read getattr map open)))
(allow hal_wifi self (udp_socket (ioctl read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
(allowx hal_wifi self (ioctl udp_socket (0x8914 0x8924 0x8946)))
(allow hal_wifi self (capability (net_admin net_raw)))
(allow hal_wifi self (cap_userns (net_admin net_raw)))
(allow hal_wifi self (netlink_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
(allow hal_wifi self (netlink_generic_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
(allow hal_wifi sysfs_wlan_fwpath (file (write lock append map open)))
(allow hal_wifi proc_modules (file (read getattr open)))
(allow hal_wifi dumpstate (fifo_file (write)))
(allow hal_wifi_server tombstone_wifi_data_file (dir (ioctl read write getattr lock add_name remove_name search open)))
(allow hal_wifi_server tombstone_wifi_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow hal_wifi_hostapd_client hal_wifi_hostapd_server (binder (call transfer)))
(allow hal_wifi_hostapd_server hal_wifi_hostapd_client (binder (transfer)))
(allow hal_wifi_hostapd_client hal_wifi_hostapd_server (fd (use)))
(allow hal_wifi_hostapd_server hal_wifi_hostapd_client (binder (call transfer)))
(allow hal_wifi_hostapd_client hal_wifi_hostapd_server (binder (transfer)))
(allow hal_wifi_hostapd_server hal_wifi_hostapd_client (fd (use)))
(allow hal_wifi_hostapd_client hal_wifi_hostapd_hwservice (hwservice_manager (find)))
(allow hal_wifi_hostapd_server hal_wifi_hostapd_hwservice (hwservice_manager (add find)))
(allow hal_wifi_hostapd_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 5 system/sepolicy/prebuilts/api/29.0/public/hal_wifi_hostapd.te

(neverallow base_typeattr_405 hal_wifi_hostapd_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/prebuilts/api/29.0/public/hal_wifi_hostapd.te

(neverallow base_typeattr_406 hal_wifi_hostapd_hwservice (hwservice_manager (find)))
;;* lme

(allow hal_wifi_hostapd_server self (capability (net_admin net_raw)))
(allow hal_wifi_hostapd_server self (cap_userns (net_admin net_raw)))
(allow hal_wifi_hostapd_server sysfs_net (dir (search)))
(allow hal_wifi_hostapd_server proc_net_type (file (read getattr open)))
(allowx hal_wifi_hostapd_server self (ioctl udp_socket (0x6900 0x6902)))
(allowx hal_wifi_hostapd_server self (ioctl udp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(allowx hal_wifi_hostapd_server self (ioctl udp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(allow hal_wifi_hostapd_server self (netlink_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
(allow hal_wifi_hostapd_server self (netlink_generic_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
(allow hal_wifi_hostapd_server self (packet_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
(allow hal_wifi_hostapd_server self (netlink_route_socket (nlmsg_write)))
;;* lmx 26 system/sepolicy/prebuilts/api/29.0/public/hal_wifi_hostapd.te

(neverallow hal_wifi_hostapd_server sdcard_type (dir (ioctl read write create setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton add_name remove_name reparent search rmdir open audit_access execmod)))
;;* lme

;;* lmx 27 system/sepolicy/prebuilts/api/29.0/public/hal_wifi_hostapd.te

(neverallow hal_wifi_hostapd_server sdcard_type (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod open audit_access)))
;;* lme

(allow hal_wifi_offload_client hal_wifi_offload_server (binder (call transfer)))
(allow hal_wifi_offload_server hal_wifi_offload_client (binder (transfer)))
(allow hal_wifi_offload_client hal_wifi_offload_server (fd (use)))
(allow hal_wifi_offload_server hal_wifi_offload_client (binder (call transfer)))
(allow hal_wifi_offload_client hal_wifi_offload_server (binder (transfer)))
(allow hal_wifi_offload_server hal_wifi_offload_client (fd (use)))
(allow hal_wifi_offload_client hal_wifi_offload_hwservice (hwservice_manager (find)))
(allow hal_wifi_offload_server hal_wifi_offload_hwservice (hwservice_manager (add find)))
(allow hal_wifi_offload_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 5 system/sepolicy/prebuilts/api/29.0/public/hal_wifi_offload.te

(neverallow base_typeattr_407 hal_wifi_offload_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/prebuilts/api/29.0/public/hal_wifi_offload.te

(neverallow base_typeattr_408 hal_wifi_offload_hwservice (hwservice_manager (find)))
;;* lme

(allow hal_wifi_offload proc_net_type (dir (ioctl read getattr lock search open)))
(allow hal_wifi_offload proc_net_type (file (ioctl read getattr lock map open)))
(allow hal_wifi_offload proc_net_type (lnk_file (ioctl read getattr lock map open)))
(allow hal_wifi_offload sysfs_type (dir (ioctl read getattr lock search open)))
(allow hal_wifi_offload sysfs_type (file (ioctl read getattr lock map open)))
(allow hal_wifi_offload sysfs_type (lnk_file (ioctl read getattr lock map open)))
(allow hal_wifi_supplicant_client hal_wifi_supplicant_server (binder (call transfer)))
(allow hal_wifi_supplicant_server hal_wifi_supplicant_client (binder (transfer)))
(allow hal_wifi_supplicant_client hal_wifi_supplicant_server (fd (use)))
(allow hal_wifi_supplicant_server hal_wifi_supplicant_client (binder (call transfer)))
(allow hal_wifi_supplicant_client hal_wifi_supplicant_server (binder (transfer)))
(allow hal_wifi_supplicant_server hal_wifi_supplicant_client (fd (use)))
(allow hal_wifi_supplicant_client hal_wifi_supplicant_hwservice (hwservice_manager (find)))
(allow hal_wifi_supplicant_server hal_wifi_supplicant_hwservice (hwservice_manager (add find)))
(allow hal_wifi_supplicant_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 5 system/sepolicy/prebuilts/api/29.0/public/hal_wifi_supplicant.te

(neverallow base_typeattr_409 hal_wifi_supplicant_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/prebuilts/api/29.0/public/hal_wifi_supplicant.te

(neverallow base_typeattr_410 hal_wifi_supplicant_hwservice (hwservice_manager (find)))
;;* lme

(allowx hal_wifi_supplicant self (ioctl udp_socket (0x6900 0x6902)))
(allowx hal_wifi_supplicant self (ioctl udp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(allowx hal_wifi_supplicant self (ioctl udp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(allow hal_wifi_supplicant sysfs_type (dir (ioctl read getattr lock search open)))
(allow hal_wifi_supplicant sysfs_type (file (ioctl read getattr lock map open)))
(allow hal_wifi_supplicant sysfs_type (lnk_file (ioctl read getattr lock map open)))
(allow hal_wifi_supplicant proc_net_type (dir (ioctl read getattr lock search open)))
(allow hal_wifi_supplicant proc_net_type (file (ioctl read getattr lock map open)))
(allow hal_wifi_supplicant proc_net_type (lnk_file (ioctl read getattr lock map open)))
(allow hal_wifi_supplicant kernel (system (module_request)))
(allow hal_wifi_supplicant self (capability (setgid setuid net_admin net_raw)))
(allow hal_wifi_supplicant self (cap_userns (setgid setuid net_admin net_raw)))
(allow hal_wifi_supplicant cgroup (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
(allow hal_wifi_supplicant self (netlink_route_socket (nlmsg_write)))
(allow hal_wifi_supplicant self (netlink_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
(allow hal_wifi_supplicant self (netlink_generic_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
(allow hal_wifi_supplicant self (packet_socket (ioctl read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
(allowx hal_wifi_supplicant self (ioctl packet_socket ((range 0x5401 0x5403) 0x540b (range 0x540e 0x5411) (range 0x5413 0x5414) (range 0x5450 0x5451))))
(allowx hal_wifi_supplicant self (ioctl packet_socket (0x6900 0x6902)))
(allowx hal_wifi_supplicant self (ioctl packet_socket ((range 0x8906 0x8907) (range 0x890b 0x890d) (range 0x8910 0x8927) 0x8929 (range 0x8930 0x8939) (range 0x8940 0x8943) (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(allowx hal_wifi_supplicant self (ioctl packet_socket ((range 0x8b00 0x8b02) (range 0x8b04 0x8b1d) (range 0x8b20 0x8b2d) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
;;* lmx 27 system/sepolicy/prebuilts/api/29.0/public/hal_wifi_supplicant.te

(neverallow hal_wifi_supplicant_server sdcard_type (dir (ioctl read write create setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton add_name remove_name reparent search rmdir open audit_access execmod)))
;;* lme

;;* lmx 28 system/sepolicy/prebuilts/api/29.0/public/hal_wifi_supplicant.te

(neverallow hal_wifi_supplicant_server sdcard_type (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod open audit_access)))
;;* lme

(allow healthd kmsg_device (chr_file (ioctl read write getattr lock append map open)))
(allow healthd sysfs_type (dir (search)))
(allow healthd sysfs (dir (ioctl read getattr lock search open)))
(allow healthd rootfs (dir (ioctl read getattr lock search open)))
(allow healthd rootfs (file (ioctl read getattr lock map open)))
(allow healthd rootfs (lnk_file (ioctl read getattr lock map open)))
(allow healthd cgroup (dir (ioctl read getattr lock search open)))
(allow healthd cgroup (file (ioctl read getattr lock map open)))
(allow healthd cgroup (lnk_file (ioctl read getattr lock map open)))
(allow healthd self (capability (sys_tty_config)))
(allow healthd self (cap_userns (sys_tty_config)))
(allow healthd self (capability (sys_boot)))
(allow healthd self (cap_userns (sys_boot)))
(dontaudit healthd self (capability (sys_resource)))
(dontaudit healthd self (cap_userns (sys_resource)))
(allow healthd self (netlink_kobject_uevent_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
(allow healthd sysfs_wake_lock (file (ioctl read write getattr lock append map open)))
(allow healthd self (capability2 (block_suspend)))
(allow healthd self (cap2_userns (block_suspend)))
(allow healthd system_suspend_server (binder (call transfer)))
(allow system_suspend_server healthd (binder (transfer)))
(allow healthd system_suspend_server (fd (use)))
(allow healthd system_suspend_hwservice (hwservice_manager (find)))
(allow healthd hwservicemanager (binder (call transfer)))
(allow hwservicemanager healthd (binder (call transfer)))
(allow hwservicemanager healthd (dir (search)))
(allow hwservicemanager healthd (file (read map open)))
(allow hwservicemanager healthd (process (getattr)))
(allow healthd hwservicemanager_prop (file (read getattr map open)))
(allow healthd hidl_manager_hwservice (hwservice_manager (find)))
(allow healthd sysfs_power (file (ioctl read write getattr lock append map open)))
(allow healthd sysfs_usb (file (write)))
(allow healthd sysfs_batteryinfo (dir (ioctl read getattr lock search open)))
(allow healthd sysfs_batteryinfo (file (ioctl read getattr lock map open)))
(allow healthd sysfs_batteryinfo (lnk_file (ioctl read getattr lock map open)))
(allow healthd pstorefs (dir (ioctl read getattr lock search open)))
(allow healthd pstorefs (file (ioctl read getattr lock map open)))
(allow healthd graphics_device (dir (ioctl read getattr lock search open)))
(allow healthd graphics_device (chr_file (ioctl read write getattr lock append map open)))
(allow healthd input_device (dir (ioctl read getattr lock search open)))
(allow healthd input_device (chr_file (ioctl read getattr lock map open)))
(allow healthd tty_device (chr_file (ioctl read write getattr lock append map open)))
(allow healthd ashmem_device (chr_file (execute)))
(allow healthd self (process (execmem)))
(allow healthd proc_sysrq (file (ioctl read write getattr lock append map open)))
(allow healthd property_socket (sock_file (write)))
(allow healthd init (unix_stream_socket (connectto)))
(allow healthd system_prop (property_service (set)))
(allow healthd system_prop (file (read getattr map open)))
(allow healthd property_socket (sock_file (write)))
(allow healthd init (unix_stream_socket (connectto)))
(allow healthd exported_system_prop (property_service (set)))
(allow healthd exported_system_prop (file (read getattr map open)))
(allow healthd property_socket (sock_file (write)))
(allow healthd init (unix_stream_socket (connectto)))
(allow healthd exported2_system_prop (property_service (set)))
(allow healthd exported2_system_prop (file (read getattr map open)))
(allow healthd property_socket (sock_file (write)))
(allow healthd init (unix_stream_socket (connectto)))
(allow healthd exported3_system_prop (property_service (set)))
(allow healthd exported3_system_prop (file (read getattr map open)))
;;* lmx 81 system/sepolicy/prebuilts/api/29.0/public/hwservice.te

(neverallow domain base_typeattr_411 (hwservice_manager (add find)))
;;* lme

(allow hwservicemanager self (binder (set_context_mgr)))
(allow hwservicemanager property_socket (sock_file (write)))
(allow hwservicemanager init (unix_stream_socket (connectto)))
(allow hwservicemanager hwservicemanager_prop (property_service (set)))
(allow hwservicemanager hwservicemanager_prop (file (read getattr map open)))
(allow hwservicemanager system_file (dir (ioctl read getattr lock search open)))
(allow hwservicemanager hwservice_contexts_file (file (ioctl read getattr lock map open)))
(allow hwservicemanager selinuxfs (dir (ioctl read getattr lock search open)))
(allow hwservicemanager selinuxfs (file (ioctl read getattr lock map open)))
(allow hwservicemanager selinuxfs (lnk_file (ioctl read getattr lock map open)))
(allow hwservicemanager selinuxfs (file (write lock append map open)))
(allow hwservicemanager kernel (security (compute_av)))
(allow hwservicemanager self (netlink_selinux_socket (read write create getattr setattr lock relabelfrom relabelto append bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(allow idmap installd (fd (use)))
(allow idmap resourcecache_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow idmap resourcecache_data_file (dir (ioctl read write getattr lock add_name remove_name search open)))
(dontaudit idmap installd (file (read)))
(allow idmap apk_data_file (file (ioctl read getattr lock map open)))
(allow idmap apk_data_file (dir (search)))
(allow idmap apk_tmp_file (file (ioctl read getattr lock map open)))
(allow idmap apk_private_tmp_file (file (ioctl read getattr lock map open)))
(allow idmap apk_tmp_file (dir (search)))
(allow idmap apk_private_tmp_file (dir (search)))
(allow idmap vendor_app_file (dir (ioctl read getattr lock search open)))
(allow idmap vendor_app_file (file (ioctl read getattr lock map open)))
(allow idmap vendor_app_file (lnk_file (ioctl read getattr lock map open)))
(allow idmap vendor_overlay_file (dir (ioctl read getattr lock search open)))
(allow idmap vendor_overlay_file (file (ioctl read getattr lock map open)))
(allow idmap vendor_overlay_file (lnk_file (ioctl read getattr lock map open)))
(allow idmap servicemanager (binder (call transfer)))
(allow servicemanager idmap (dir (search)))
(allow servicemanager idmap (file (read open)))
(allow servicemanager idmap (process (getattr)))
(allow idmap idmap_service (service_manager (add find)))
;;* lmx 30 system/sepolicy/prebuilts/api/29.0/public/idmap.te

(neverallow base_typeattr_412 idmap_service (service_manager (add)))
;;* lme

(allow init tmpfs (chr_file (ioctl read write create getattr setattr lock append map unlink open)))
(allow init tmpfs (chr_file (relabelfrom)))
(allow init kmsg_device (chr_file (write getattr relabelto)))
(allow init properties_device (dir (relabelto)))
(allow init properties_serial (file (write relabelto)))
(allow init property_type (file (read write create getattr setattr relabelto append map unlink rename open)))
(allow init properties_device (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow init property_info (file (relabelto)))
(allow init device (file (relabelfrom)))
(allow init runtime_event_log_tags_file (file (write create setattr relabelto open)))
(allow init device (dir (relabelto)))
(allow init socket_device (dir (relabelto)))
(allow init ptmx_device (chr_file (relabelto)))
(allow init null_device (chr_file (relabelto)))
(allow init random_device (chr_file (relabelto)))
(allow init tmpfs (chr_file (relabelfrom)))
(allow init tmpfs (blk_file (relabelfrom)))
(allow init tmpfs (blk_file (getattr)))
(allow init block_device (dir (relabelto)))
(allow init block_device (lnk_file (relabelto)))
(allow init block_device (blk_file (relabelto)))
(allow init dm_device (chr_file (relabelto)))
(allow init dm_device (blk_file (relabelto)))
(allow init kernel (fd (use)))
(allow init tmpfs (lnk_file (read getattr relabelfrom)))
(allow init system_block_device (lnk_file (relabelto)))
(allow init system_block_device (blk_file (relabelto)))
(allow init recovery_block_device (lnk_file (relabelto)))
(allow init recovery_block_device (blk_file (relabelto)))
(allow init userdata_block_device (lnk_file (relabelto)))
(allow init userdata_block_device (blk_file (relabelto)))
(allow init metadata_block_device (lnk_file (relabelto)))
(allow init metadata_block_device (blk_file (relabelto)))
(allow init misc_block_device (lnk_file (relabelto)))
(allow init misc_block_device (blk_file (relabelto)))
(allow init self (capability (sys_resource)))
(allow init self (cap_userns (sys_resource)))
(allow init tmpfs (file (getattr unlink)))
(allow init devpts (chr_file (read write open)))
(allow init fscklogs (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow init tmpfs (chr_file (write)))
(allow init console_device (chr_file (ioctl read write getattr lock append map open)))
(allow init tty_device (chr_file (ioctl read write getattr lock append map open)))
(allow init self (capability (sys_admin)))
(allow init self (cap_userns (sys_admin)))
(allow init self (capability (sys_chroot)))
(allow init self (cap_userns (sys_chroot)))
(allow init rootfs (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
(allow init rootfs (dir (mounton)))
(allow init cgroup (dir (mounton)))
(allow init system_file (dir (mounton)))
(allow init vendor_file (dir (mounton)))
(allow init system_data_file (dir (mounton)))
(allow init storage_file (dir (mounton)))
(allow init postinstall_mnt_dir (dir (mounton)))
(allow init cache_file (dir (mounton)))
(allow init cgroup_bpf (dir (create mounton)))
(allow init fs_bpf (dir (mounton)))
(allow init device (dir (mounton)))
(allow init apex_mnt_dir (dir (mounton)))
(allow init rootfs (lnk_file (create unlink)))
(allow init sysfs (dir (mounton)))
(allow init tmpfs (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
(allow init tmpfs (dir (mounton)))
(allow init cgroup (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
(allow init cgroup (file (ioctl read write getattr lock append map open)))
(allow init cgroup_rc_file (file (ioctl read write getattr lock append map open)))
(allow init cgroup_desc_file (file (ioctl read getattr lock map open)))
(allow init vendor_cgroup_desc_file (file (ioctl read getattr lock map open)))
(allow init configfs (dir (mounton)))
(allow init configfs (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
(allow init configfs (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow init configfs (lnk_file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow init metadata_file (dir (mounton)))
(allow init tmpfs (dir (relabelfrom)))
(allow init self (capability (dac_override dac_read_search)))
(allow init self (cap_userns (dac_override dac_read_search)))
(allow init self (capability (sys_time)))
(allow init self (cap_userns (sys_time)))
(allow init self (capability (sys_rawio mknod)))
(allow init self (cap_userns (sys_rawio mknod)))
(allow init dev_type (blk_file (ioctl read getattr lock map open)))
(allowx init dev_type (ioctl blk_file (0x125d)))
(allow init fs_type (filesystem (mount remount unmount getattr relabelfrom associate quotamod quotaget)))
(allow init unlabeled (filesystem (mount remount unmount getattr relabelfrom associate quotamod quotaget)))
(allow init contextmount_type (filesystem (relabelto)))
(allow init contextmount_type (dir (ioctl read getattr lock search open)))
(allow init contextmount_type (file (ioctl read getattr lock map open)))
(allow init contextmount_type (lnk_file (ioctl read getattr lock map open)))
(allow init contextmount_type (sock_file (ioctl read getattr lock map open)))
(allow init contextmount_type (fifo_file (ioctl read getattr lock map open)))
(allow init rootfs (file (relabelfrom)))
(allow init rootfs (dir (relabelfrom)))
(allow init self (capability (chown fowner fsetid)))
(allow init self (cap_userns (chown fowner fsetid)))
(allow init base_typeattr_413 (dir (ioctl read create getattr setattr search open)))
(allow init base_typeattr_414 (dir (write relabelfrom add_name remove_name rmdir)))
(allow init base_typeattr_415 (file (read write create getattr setattr relabelfrom map unlink open)))
(allow init base_typeattr_414 (sock_file (read create getattr setattr relabelfrom unlink open)))
(allow init base_typeattr_414 (fifo_file (read create getattr setattr relabelfrom unlink open)))
(allow init base_typeattr_416 (lnk_file (create getattr setattr relabelfrom unlink)))
(allow init cache_file (lnk_file (ioctl read getattr lock map open)))
(allow init base_typeattr_417 (file (relabelto)))
(allow init base_typeattr_417 (dir (relabelto)))
(allow init base_typeattr_417 (lnk_file (relabelto)))
(allow init base_typeattr_417 (chr_file (relabelto)))
(allow init base_typeattr_417 (blk_file (relabelto)))
(allow init base_typeattr_417 (sock_file (relabelto)))
(allow init base_typeattr_417 (fifo_file (relabelto)))
(allow init sysfs (file (getattr relabelfrom)))
(allow init sysfs (dir (getattr relabelfrom)))
(allow init sysfs (lnk_file (getattr relabelfrom)))
(allow init debugfs (file (getattr relabelfrom)))
(allow init debugfs (dir (getattr relabelfrom)))
(allow init debugfs (lnk_file (getattr relabelfrom)))
(allow init debugfs_tracing (file (getattr relabelfrom)))
(allow init debugfs_tracing (dir (getattr relabelfrom)))
(allow init debugfs_tracing (lnk_file (getattr relabelfrom)))
(allow init debugfs_tracing_debug (file (getattr relabelfrom)))
(allow init debugfs_tracing_debug (dir (getattr relabelfrom)))
(allow init debugfs_tracing_debug (lnk_file (getattr relabelfrom)))
(allow init sysfs_type (file (getattr relabelto)))
(allow init sysfs_type (dir (getattr relabelto)))
(allow init sysfs_type (lnk_file (getattr relabelto)))
(allow init debugfs_type (file (getattr relabelto)))
(allow init debugfs_type (dir (getattr relabelto)))
(allow init debugfs_type (lnk_file (getattr relabelto)))
(allow init dev_type (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
(allow init dev_type (lnk_file (create)))
(allow init debugfs_tracing (file (write lock append map open)))
(allow init debugfs_tracing_instances (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
(allow init debugfs_tracing_instances (file (write lock append map open)))
(allow init debugfs_wifi_tracing (file (write lock append map open)))
(allow init base_typeattr_418 (file (read setattr open)))
(allow init base_typeattr_419 (dir (read setattr search open)))
(allow init ashmem_device (chr_file (read open)))
(allow init binder_device (chr_file (read open)))
(allow init hwbinder_device (chr_file (read open)))
(allow init dm_device (chr_file (read open)))
(allow init pmsg_device (chr_file (read open)))
(allow init console_device (chr_file (read open)))
(allow init hw_random_device (chr_file (read open)))
(allow init input_device (chr_file (read open)))
(allow init ptmx_device (chr_file (read open)))
(allow init kmsg_device (chr_file (read open)))
(allow init null_device (chr_file (read open)))
(allow init random_device (chr_file (read open)))
(allow init owntty_device (chr_file (read open)))
(allow init tty_device (chr_file (read open)))
(allow init zero_device (chr_file (read open)))
(allow init devpts (chr_file (read open)))
(allow init base_typeattr_420 (chr_file (setattr)))
(allow init unlabeled (dir (ioctl read write create getattr setattr lock relabelfrom rename add_name remove_name reparent search rmdir open)))
(allow init unlabeled (file (ioctl read write create getattr setattr lock relabelfrom append map unlink rename open)))
(allow init unlabeled (lnk_file (ioctl read write create getattr setattr lock relabelfrom append map unlink rename open)))
(allow init unlabeled (sock_file (ioctl read write create getattr setattr lock relabelfrom append map unlink rename open)))
(allow init unlabeled (fifo_file (ioctl read write create getattr setattr lock relabelfrom append map unlink rename open)))
(allow init kernel (system (syslog_mod)))
(allow init self (capability2 (syslog)))
(allow init self (cap2_userns (syslog)))
(allow init proc_net_type (dir (ioctl read getattr lock search open)))
(allow init proc_net_type (file (ioctl read getattr lock map open)))
(allow init proc_net_type (lnk_file (ioctl read getattr lock map open)))
(allow init proc_filesystems (file (ioctl read getattr lock map open)))
(allow init proc (file (ioctl read getattr lock map open)))
(allow init proc_cmdline (file (ioctl read getattr lock map open)))
(allow init proc_diskstats (file (ioctl read getattr lock map open)))
(allow init proc_kmsg (file (ioctl read getattr lock map open)))
(allow init proc_meminfo (file (ioctl read getattr lock map open)))
(allow init proc_stat (file (ioctl read getattr lock map open)))
(allow init proc_uptime (file (ioctl read getattr lock map open)))
(allow init proc_version (file (ioctl read getattr lock map open)))
(allow init proc_net_type (file (write lock append map open)))
(allow init proc_overcommit_memory (file (write lock append map open)))
(allow init proc_min_free_order_shift (file (write lock append map open)))
(allow init proc_abi (file (write lock append map open)))
(allow init proc_dirty (file (write lock append map open)))
(allow init proc_extra_free_kbytes (file (write lock append map open)))
(allow init proc_hostname (file (write lock append map open)))
(allow init proc_hung_task (file (write lock append map open)))
(allow init proc_max_map_count (file (write lock append map open)))
(allow init proc_page_cluster (file (write lock append map open)))
(allow init proc_panic (file (write lock append map open)))
(allow init proc_perf (file (write lock append map open)))
(allow init proc_sched (file (write lock append map open)))
(allow init proc_sysrq (file (write lock append map open)))
(allow init proc_security (file (ioctl read write getattr lock append map open)))
(allow init proc_qtaguid_ctrl (file (setattr)))
(allow init proc_qtaguid_stat (file (setattr)))
(allow init proc_cmdline (file (setattr)))
(allow init proc_kmsg (file (setattr)))
(allow init proc_net (file (setattr)))
(allow init proc_slabinfo (file (setattr)))
(allow init proc_sysrq (file (setattr)))
(allow init proc_vmallocinfo (file (setattr)))
(allow init sysfs_android_usb (file (write lock append map open)))
(allow init sysfs_dm (file (write lock append map open)))
(allow init sysfs_leds (file (write lock append map open)))
(allow init sysfs_power (file (write lock append map open)))
(allow init sysfs_fs_f2fs (file (write lock append map open)))
(allow init sysfs_dt_firmware_android (file (ioctl read getattr lock map open)))
(allow init sysfs_fs_ext4_features (file (ioctl read getattr lock map open)))
(allow init sysfs_zram (file (ioctl read write getattr lock append map open)))
(allow init loop_control_device (chr_file (ioctl read write getattr lock append map open)))
(allow init loop_device (blk_file (ioctl read write getattr lock append map open)))
(allowx init loop_device (ioctl blk_file ((range 0x4c00 0x4c01) (range 0x4c08 0x4c09) 0x4c82)))
(allow init sysfs_vibrator (file (write lock append map open)))
(allow init sysfs_android_usb (file (setattr)))
(allow init sysfs_ipv4 (file (setattr)))
(allow init sysfs_leds (file (setattr)))
(allow init sysfs_wake_lock (file (setattr)))
(allow init sysfs_power (file (setattr)))
(allow init sysfs_devices_system_cpu (file (setattr)))
(allow init sysfs_lowmemorykiller (file (setattr)))
(allow init sysfs_vibrator (file (setattr)))
(allow init sysfs_zram (file (setattr)))
(allow init usermodehelper (file (ioctl read write getattr lock append map open)))
(allow init sysfs_usermodehelper (file (ioctl read write getattr lock append map open)))
(allow init self (capability (net_admin)))
(allow init self (cap_userns (net_admin)))
(allow init self (capability (sys_boot)))
(allow init self (cap_userns (sys_boot)))
(allow init misc_logd_file (dir (read write create getattr setattr add_name search open)))
(allow init misc_logd_file (file (write create getattr setattr open)))
(allow init self (capability (kill)))
(allow init self (cap_userns (kill)))
(allow init domain (process (sigkill signal getpgid)))
(allow init keystore_data_file (dir (read create getattr setattr search open)))
(allow init keystore_data_file (file (getattr)))
(allow init vold_data_file (dir (read create getattr setattr search open)))
(allow init vold_data_file (file (getattr)))
(allow init shell_data_file (dir (read create getattr setattr search open)))
(allow init shell_data_file (file (getattr)))
(allow init self (capability (setgid setuid setpcap)))
(allow init self (cap_userns (setgid setuid setpcap)))
(allow init domain (dir (ioctl read getattr lock search open)))
(allow init domain (file (ioctl read getattr lock map open)))
(allow init domain (lnk_file (ioctl read getattr lock map open)))
(allow init self (process (setexec setfscreate setsockcreate)))
(allow init file_contexts_file (file (ioctl read getattr lock map open)))
(allow init sepolicy_file (file (ioctl read getattr lock map open)))
(allow init selinuxfs (dir (ioctl read getattr lock search open)))
(allow init selinuxfs (file (ioctl read getattr lock map open)))
(allow init selinuxfs (lnk_file (ioctl read getattr lock map open)))
(allow init selinuxfs (file (write lock append map open)))
(allow init kernel (security (compute_av)))
(allow init self (netlink_selinux_socket (read write create getattr setattr lock relabelfrom relabelto append bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(allow init kernel (security (compute_create)))
(allow init domain (unix_stream_socket (create bind setopt)))
(allow init domain (unix_dgram_socket (create bind setopt)))
(allow init property_data_file (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
(allow init property_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow init property_type (property_service (set)))
(allow init self (netlink_audit_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown nlmsg_relay)))
(allow init self (capability (audit_write)))
(allow init self (cap_userns (audit_write)))
(allow init self (udp_socket (ioctl create)))
(allowx init self (ioctl udp_socket (0x8914)))
(allow init self (capability (net_raw)))
(allow init self (cap_userns (net_raw)))
(allow init kernel (process (getsched setsched)))
(allow init swap_block_device (blk_file (ioctl read write getattr lock append map open)))
(allow init hw_random_device (chr_file (ioctl read getattr lock map open)))
(allow init device (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow init input_device (dir (ioctl read getattr lock search open)))
(allow init input_device (chr_file (ioctl read write getattr lock append map open)))
(allow init dm_device (chr_file (ioctl read write getattr lock append map open)))
(allow init dm_device (blk_file (ioctl read write getattr lock append map open)))
(allow init metadata_block_device (blk_file (ioctl read write getattr lock append map open)))
(allow init pstorefs (dir (search)))
(allow init pstorefs (file (ioctl read getattr lock map open)))
(allow init kernel (system (syslog_read)))
(allow init init (key (write search setattr)))
(allow init unencrypted_data_file (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
(allowx init data_file_type (ioctl dir (0x6613 0x6615)))
(allow init proc_overcommit_memory (file (write)))
(allow init misc_block_device (blk_file (write lock append map open)))
(allow init system_file (dir (ioctl read getattr lock search open)))
(allow init system_file (file (ioctl read getattr lock map open)))
(allow init system_file (lnk_file (ioctl read getattr lock map open)))
(allow init vendor_file_type (dir (ioctl read getattr lock search open)))
(allow init vendor_file_type (file (ioctl read getattr lock map open)))
(allow init vendor_file_type (lnk_file (ioctl read getattr lock map open)))
(allow init system_data_file (file (read getattr)))
(allow init system_data_file (lnk_file (ioctl read getattr lock map open)))
(allow init vendor_shell_exec (file (execute)))
(allow init vold_metadata_file (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
(allow init vold_metadata_file (file (getattr)))
(allow init servicemanager (binder (call transfer)))
(allow servicemanager init (dir (search)))
(allow servicemanager init (file (read open)))
(allow servicemanager init (process (getattr)))
(allow init apex_service (service_manager (find)))
(allow servicemanager init (binder (transfer)))
(allow init apexd (binder (call)))
(allow init proc_pressure_mem (file (ioctl read write getattr setattr lock append map open)))
(allow init system_bootstrap_lib_file (dir (ioctl read getattr lock search open)))
(allow init system_bootstrap_lib_file (file (read getattr map execute open)))
;;* lmx 571 system/sepolicy/prebuilts/api/29.0/public/init.te

(neverallow domain init (process (dyntransition)))
;;* lme

;;* lmx 572 system/sepolicy/prebuilts/api/29.0/public/init.te

(neverallow base_typeattr_203 init (process (transition)))
;;* lme

;;* lmx 573 system/sepolicy/prebuilts/api/29.0/public/init.te

(neverallow init base_typeattr_421 (file (entrypoint)))
;;* lme

;;* lmx 576 system/sepolicy/prebuilts/api/29.0/public/init.te

(neverallow init shell_data_file (lnk_file (read)))
;;* lme

;;* lmx 577 system/sepolicy/prebuilts/api/29.0/public/init.te

(neverallow init app_data_file (lnk_file (read)))
(neverallow init privapp_data_file (lnk_file (read)))
;;* lme

;;* lmx 580 system/sepolicy/prebuilts/api/29.0/public/init.te

(neverallow init fs_type (file (execute_no_trans)))
(neverallow init file_type (file (execute_no_trans)))
;;* lme

;;* lmx 583 system/sepolicy/prebuilts/api/29.0/public/init.te

(neverallow init base_typeattr_422 (service_manager (find)))
;;* lme

;;* lmx 585 system/sepolicy/prebuilts/api/29.0/public/init.te

(neverallow init service_manager_type (service_manager (add)))
;;* lme

;;* lmx 587 system/sepolicy/prebuilts/api/29.0/public/init.te

(neverallow init servicemanager (service_manager (list)))
;;* lme

;;* lmx 590 system/sepolicy/prebuilts/api/29.0/public/init.te

(neverallow init shell_data_file (dir (write add_name remove_name)))
;;* lme

;;* lmx 593 system/sepolicy/prebuilts/api/29.0/public/init.te

(neverallow init sysfs (file (read write open)))
;;* lme

;;* lmx 596 system/sepolicy/prebuilts/api/29.0/public/init.te

(neverallow base_typeattr_167 init (process (ptrace)))
;;* lme

(allow inputflinger servicemanager (binder (call transfer)))
(allow servicemanager inputflinger (dir (search)))
(allow servicemanager inputflinger (file (read open)))
(allow servicemanager inputflinger (process (getattr)))
(allow inputflinger system_server (binder (call transfer)))
(allow system_server inputflinger (binder (transfer)))
(allow inputflinger system_server (fd (use)))
(allow inputflinger sysfs_wake_lock (file (ioctl read write getattr lock append map open)))
(allow inputflinger self (capability2 (block_suspend)))
(allow inputflinger self (cap2_userns (block_suspend)))
(allow inputflinger system_suspend_server (binder (call transfer)))
(allow system_suspend_server inputflinger (binder (transfer)))
(allow inputflinger system_suspend_server (fd (use)))
(allow inputflinger system_suspend_hwservice (hwservice_manager (find)))
(allow inputflinger hwservicemanager (binder (call transfer)))
(allow hwservicemanager inputflinger (binder (call transfer)))
(allow hwservicemanager inputflinger (dir (search)))
(allow hwservicemanager inputflinger (file (read map open)))
(allow hwservicemanager inputflinger (process (getattr)))
(allow inputflinger hwservicemanager_prop (file (read getattr map open)))
(allow inputflinger hidl_manager_hwservice (hwservice_manager (find)))
(allow inputflinger input_device (dir (ioctl read getattr lock search open)))
(allow inputflinger input_device (chr_file (ioctl read write getattr lock append map open)))
(allow inputflinger cgroup (dir (ioctl read getattr lock search open)))
(allow inputflinger cgroup (file (ioctl read getattr lock map open)))
(allow inputflinger cgroup (lnk_file (ioctl read getattr lock map open)))
(allow install_recovery self (capability (dac_override dac_read_search)))
(allow install_recovery self (cap_userns (dac_override dac_read_search)))
(allow install_recovery shell_exec (file (ioctl read getattr lock map execute execute_no_trans open)))
(allow install_recovery system_file (file (ioctl read getattr lock map execute execute_no_trans open)))
(allow install_recovery toolbox_exec (file (ioctl read getattr lock map execute execute_no_trans open)))
(allow install_recovery block_device (dir (search)))
(allow install_recovery boot_block_device (blk_file (ioctl read getattr lock map open)))
(allow install_recovery recovery_block_device (blk_file (ioctl read write getattr lock append map open)))
(allow install_recovery cache_file (dir (ioctl read write getattr lock add_name remove_name search open)))
(allow install_recovery cache_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow install_recovery proc_drop_caches (file (write lock append map open)))
(allow installd self (capability (chown dac_override dac_read_search fowner fsetid setgid setuid sys_admin)))
(allow installd self (cap_userns (chown dac_override dac_read_search fowner fsetid setgid setuid sys_admin)))
(allow installd dalvikcache_data_file (dir (relabelto)))
(allow installd dalvikcache_data_file (file (relabelto link)))
(allow installd apk_data_file (dir (ioctl read write create getattr setattr lock relabelfrom rename add_name remove_name reparent search rmdir open)))
(allow installd apk_data_file (file (ioctl read write create getattr setattr lock relabelfrom append map unlink link rename open)))
(allow installd apk_data_file (lnk_file (ioctl read create getattr lock map unlink open)))
(allowx installd apk_data_file (ioctl file ((range 0x6685 0x6686))))
(allow installd asec_apk_file (file (ioctl read getattr lock map open)))
(allow installd apk_tmp_file (file (ioctl read getattr lock map unlink open)))
(allow installd apk_tmp_file (dir (ioctl read write create getattr setattr lock relabelfrom rename add_name remove_name reparent search rmdir open)))
(allow installd oemfs (dir (ioctl read getattr lock search open)))
(allow installd oemfs (file (ioctl read getattr lock map open)))
(allow installd cgroup (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
(allow installd mnt_expand_file (dir (getattr search)))
(allow installd selinuxfs (dir (ioctl read getattr lock search open)))
(allow installd selinuxfs (file (ioctl read getattr lock map open)))
(allow installd selinuxfs (lnk_file (ioctl read getattr lock map open)))
(allow installd selinuxfs (file (write lock append map open)))
(allow installd kernel (security (check_context)))
(allow installd rootfs (dir (ioctl read getattr lock search open)))
(allow installd rootfs (file (ioctl read getattr lock map open)))
(allow installd rootfs (lnk_file (ioctl read getattr lock map open)))
(allow installd system_file (dir (ioctl read getattr lock search open)))
(allow installd system_file (file (ioctl read getattr lock map open)))
(allow installd system_file (lnk_file (ioctl read getattr lock map open)))
(allow installd vendor_app_file (dir (ioctl read getattr lock search open)))
(allow installd vendor_app_file (file (ioctl read getattr lock map open)))
(allow installd vendor_app_file (lnk_file (ioctl read getattr lock map open)))
(allow installd vendor_framework_file (dir (ioctl read getattr lock search open)))
(allow installd vendor_framework_file (file (ioctl read getattr lock map open)))
(allow installd vendor_framework_file (lnk_file (ioctl read getattr lock map open)))
(allow installd vendor_overlay_file (dir (ioctl read getattr lock search open)))
(allow installd vendor_overlay_file (file (ioctl read getattr lock map open)))
(allow installd vendor_overlay_file (lnk_file (ioctl read getattr lock map open)))
(allow installd file_contexts_file (file (ioctl read getattr lock map open)))
(allow installd seapp_contexts_file (file (ioctl read getattr lock map open)))
(allow installd asec_image_file (dir (search)))
(allow installd asec_image_file (file (getattr)))
(allow installd system_data_file (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
(allow installd system_data_file (lnk_file (read create getattr setattr unlink)))
(allow installd media_rw_data_file (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
(allow installd media_rw_data_file (file (getattr unlink)))
(allow installd system_data_file (dir (relabelfrom)))
(allow installd media_rw_data_file (dir (relabelto)))
(allow installd tmpfs (dir (ioctl read getattr lock search open)))
(allow installd storage_file (dir (search)))
(allow installd sdcard_type (dir (read write getattr remove_name search rmdir open)))
(allow installd sdcard_type (file (getattr unlink)))
(allow installd misc_user_data_file (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
(allow installd misc_user_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow installd keychain_data_file (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
(allow installd keychain_data_file (file (ioctl read getattr lock map unlink open)))
(allow installd install_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow installd dalvikcache_data_file (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
(allow installd dalvikcache_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow installd dalvikcache_data_file (lnk_file (getattr)))
(allow installd resourcecache_data_file (dir (ioctl read write getattr lock add_name remove_name search open)))
(allow installd resourcecache_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow installd unlabeled (dir (ioctl read write getattr lock relabelfrom add_name remove_name search rmdir open)))
(allow installd unlabeled (file (getattr setattr relabelfrom unlink rename)))
(allow installd unlabeled (lnk_file (getattr setattr relabelfrom unlink rename)))
(allow installd unlabeled (sock_file (getattr setattr relabelfrom unlink rename)))
(allow installd unlabeled (fifo_file (getattr setattr relabelfrom unlink rename)))
(allow installd unlabeled (file (ioctl read getattr lock map open)))
(allow installd system_data_file (file (getattr relabelfrom unlink)))
(allow installd system_data_file (lnk_file (getattr relabelfrom unlink)))
(allow installd system_data_file (sock_file (getattr relabelfrom unlink)))
(allow installd system_data_file (fifo_file (getattr relabelfrom unlink)))
(allow installd shell_data_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto rename add_name remove_name reparent search rmdir open)))
(allow installd bluetooth_data_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto rename add_name remove_name reparent search rmdir open)))
(allow installd nfc_data_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto rename add_name remove_name reparent search rmdir open)))
(allow installd radio_data_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto rename add_name remove_name reparent search rmdir open)))
(allow installd app_data_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto rename add_name remove_name reparent search rmdir open)))
(allow installd privapp_data_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto rename add_name remove_name reparent search rmdir open)))
(allow installd system_app_data_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto rename add_name remove_name reparent search rmdir open)))
(allow installd shell_data_file (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink rename open)))
(allow installd shell_data_file (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink rename open)))
(allow installd shell_data_file (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink rename open)))
(allow installd shell_data_file (fifo_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink rename open)))
(allow installd bluetooth_data_file (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink rename open)))
(allow installd bluetooth_data_file (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink rename open)))
(allow installd bluetooth_data_file (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink rename open)))
(allow installd bluetooth_data_file (fifo_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink rename open)))
(allow installd nfc_data_file (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink rename open)))
(allow installd nfc_data_file (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink rename open)))
(allow installd nfc_data_file (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink rename open)))
(allow installd nfc_data_file (fifo_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink rename open)))
(allow installd radio_data_file (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink rename open)))
(allow installd radio_data_file (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink rename open)))
(allow installd radio_data_file (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink rename open)))
(allow installd radio_data_file (fifo_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink rename open)))
(allow installd app_data_file (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink rename open)))
(allow installd app_data_file (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink rename open)))
(allow installd app_data_file (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink rename open)))
(allow installd app_data_file (fifo_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink rename open)))
(allow installd privapp_data_file (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink rename open)))
(allow installd privapp_data_file (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink rename open)))
(allow installd privapp_data_file (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink rename open)))
(allow installd privapp_data_file (fifo_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink rename open)))
(allow installd system_app_data_file (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink rename open)))
(allow installd system_app_data_file (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink rename open)))
(allow installd system_app_data_file (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink rename open)))
(allow installd system_app_data_file (fifo_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink rename open)))
(allow installd user_profile_data_file (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
(allow installd user_profile_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow installd user_profile_data_file (dir (rmdir)))
(allow installd user_profile_data_file (file (unlink)))
(allow installd profman_dump_data_file (dir (write add_name search)))
(allow installd profman_dump_data_file (file (write create setattr open)))
(allow installd devpts (chr_file (ioctl read write getattr lock append map open)))
(allow installd toolbox_exec (file (ioctl read getattr lock map execute execute_no_trans open)))
(allow installd servicemanager (binder (call transfer)))
(allow servicemanager installd (dir (search)))
(allow servicemanager installd (file (read open)))
(allow servicemanager installd (process (getattr)))
(allow installd installd_service (service_manager (add find)))
;;* lmx 146 system/sepolicy/prebuilts/api/29.0/public/installd.te

(neverallow base_typeattr_423 installd_service (service_manager (add)))
;;* lme

(allow installd dumpstate (fifo_file (write getattr)))
(allow installd system_server (binder (call transfer)))
(allow system_server installd (binder (transfer)))
(allow installd system_server (fd (use)))
(allow installd permission_service (service_manager (find)))
(allow installd block_device (dir (search)))
(allow installd labeledfs (filesystem (quotamod quotaget)))
(allow installd preloads_data_file (file (ioctl read getattr lock map unlink open)))
(allow installd preloads_data_file (dir (ioctl read write getattr lock remove_name search rmdir open)))
(allow installd preloads_media_file (file (ioctl read getattr lock map unlink open)))
(allow installd preloads_media_file (dir (ioctl read write getattr lock remove_name search rmdir open)))
;;* lmx 169 system/sepolicy/prebuilts/api/29.0/public/installd.te

(neverallow base_typeattr_424 installd_service (service_manager (find)))
;;* lme

;;* lmx 170 system/sepolicy/prebuilts/api/29.0/public/installd.te

(neverallow base_typeattr_425 installd (binder (call)))
;;* lme

;;* lmx 177 system/sepolicy/prebuilts/api/29.0/public/installd.te

(neverallow installd base_typeattr_426 (binder (call)))
;;* lme

(allow iorapd rootfs (dir (ioctl read getattr lock search open)))
(allow iorapd rootfs (file (ioctl read getattr lock map open)))
(allow iorapd rootfs (lnk_file (ioctl read getattr lock map open)))
(allow iorapd proc_drop_caches (file (ioctl read write getattr lock append map open)))
(allow iorapd iorapd_data_file (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
(allow iorapd iorapd_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow iorapd servicemanager (binder (call transfer)))
(allow servicemanager iorapd (dir (search)))
(allow servicemanager iorapd (file (read open)))
(allow servicemanager iorapd (process (getattr)))
(allow iorapd iorapd_service (service_manager (add find)))
;;* lmx 17 system/sepolicy/prebuilts/api/29.0/public/iorapd.te

(neverallow base_typeattr_427 iorapd_service (service_manager (add)))
;;* lme

(allow iorapd system_server (binder (call transfer)))
(allow system_server iorapd (binder (transfer)))
(allow iorapd system_server (fd (use)))
(allow iorapd permission_service (service_manager (find)))
(allow iorapd user_service (service_manager (find)))
(allow iorapd package_native_service (service_manager (find)))
(allow iorapd healthd (binder (call transfer)))
(allow healthd iorapd (binder (transfer)))
(allow iorapd healthd (fd (use)))
(allow iorapd self (capability (sys_nice)))
(allow iorapd self (cap_userns (sys_nice)))
(allow iorapd traced_consumer_socket (sock_file (write)))
(allow iorapd traced (unix_stream_socket (connectto)))
;;* lmx 46 system/sepolicy/prebuilts/api/29.0/public/iorapd.te

(neverallow base_typeattr_427 iorapd_data_file (dir (write lock relabelfrom append map unlink link rename execute quotaon mounton add_name remove_name reparent rmdir audit_access execmod)))
;;* lme

;;* lmx 52 system/sepolicy/prebuilts/api/29.0/public/iorapd.te

(neverallow base_typeattr_428 iorapd_data_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton add_name remove_name reparent search rmdir open audit_access execmod)))
;;* lme

;;* lmx 58 system/sepolicy/prebuilts/api/29.0/public/iorapd.te

(neverallow base_typeattr_429 iorapd_data_file (file (ioctl read write create setattr lock relabelfrom append map unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod open audit_access)))
(neverallow base_typeattr_429 iorapd_data_file (lnk_file (ioctl read write create setattr lock relabelfrom append map unlink link rename execute quotaon mounton open audit_access execmod)))
(neverallow base_typeattr_429 iorapd_data_file (sock_file (ioctl read write create setattr lock relabelfrom append map unlink link rename execute quotaon mounton open audit_access execmod)))
(neverallow base_typeattr_429 iorapd_data_file (fifo_file (ioctl read write create setattr lock relabelfrom append map unlink link rename execute quotaon mounton open audit_access execmod)))
;;* lme

;;* lmx 66 system/sepolicy/prebuilts/api/29.0/public/iorapd.te

(neverallow base_typeattr_430 iorapd_data_file (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod open audit_access)))
(neverallow base_typeattr_430 iorapd_data_file (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton open audit_access execmod)))
(neverallow base_typeattr_430 iorapd_data_file (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton open audit_access execmod)))
(neverallow base_typeattr_430 iorapd_data_file (fifo_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton open audit_access execmod)))
;;* lme

;;* lmx 69 system/sepolicy/prebuilts/api/29.0/public/iorapd.te

(neverallow base_typeattr_431 iorapd_service (service_manager (find)))
;;* lme

;;* lmx 76 system/sepolicy/prebuilts/api/29.0/public/iorapd.te

(neverallow iorapd base_typeattr_432 (binder (call)))
;;* lme

;;* lmx 78 system/sepolicy/prebuilts/api/29.0/public/iorapd.te

(neverallow base_typeattr_166 iorapd (process (transition dyntransition)))
;;* lme

;;* lmx 79 system/sepolicy/prebuilts/api/29.0/public/iorapd.te

(neverallow iorapd domain (tcp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind name_connect)))
(neverallow iorapd domain (udp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind)))
(neverallow iorapd domain (rawip_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind)))
;;* lme

(allow kernel self (capability (sys_nice)))
(allow kernel self (cap_userns (sys_nice)))
(allow kernel rootfs (dir (ioctl read getattr lock search open)))
(allow kernel rootfs (file (ioctl read getattr lock map open)))
(allow kernel rootfs (lnk_file (ioctl read getattr lock map open)))
(allow kernel proc_cmdline (file (ioctl read getattr lock map open)))
(allow kernel selinuxfs (dir (ioctl read getattr lock search open)))
(allow kernel selinuxfs (file (ioctl read getattr lock map open)))
(allow kernel file_contexts_file (file (ioctl read getattr lock map open)))
(allow kernel rootfs (file (relabelfrom)))
(allow kernel init_exec (file (relabelto)))
(allow kernel init (process (share)))
(allow kernel unlabeled (dir (search)))
(allow kernel usbfs (filesystem (mount)))
(allow kernel usbfs (dir (search)))
(dontaudit kernel self (security (setenforce)))
(allow kernel self (capability (sys_resource)))
(allow kernel self (cap_userns (sys_resource)))
(allow kernel self (capability (sys_boot)))
(allow kernel self (cap_userns (sys_boot)))
(allow kernel proc_sysrq (file (write lock append map open)))
(allow kernel tmpfs (chr_file (write)))
(allow kernel selinuxfs (file (write)))
(allow kernel self (security (setcheckreqprot)))
(allow kernel sdcard_type (file (read write)))
(allow kernel mediaprovider (fd (use)))
(allow kernel vold (fd (use)))
(allow kernel app_data_file (file (read)))
(allow kernel privapp_data_file (file (read)))
(allow kernel asec_image_file (file (read)))
(allow kernel media_rw_data_file (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
(allow kernel media_rw_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow kernel vold_data_file (file (read write)))
(allow kernel apexd (fd (use)))
(allow kernel apex_data_file (file (read)))
(allow kernel staging_data_file (file (read)))
(allow kernel system_file (file (execute)))
(allow kernel appdomain_tmpfs (file (read)))
;;* lmx 115 system/sepolicy/prebuilts/api/29.0/public/kernel.te

(neverallow base_typeattr_167 kernel (process (transition dyntransition)))
;;* lme

;;* lmx 125 system/sepolicy/prebuilts/api/29.0/public/kernel.te

(neverallow kernel base_typeattr_167 (file (execute_no_trans entrypoint)))
;;* lme

;;* lmx 130 system/sepolicy/prebuilts/api/29.0/public/kernel.te

(neverallow kernel self (capability (dac_override dac_read_search)))
(neverallow kernel self (cap_userns (dac_override dac_read_search)))
;;* lme

;;* lmx 133 system/sepolicy/prebuilts/api/29.0/public/kernel.te

(neverallow base_typeattr_167 kernel (process (ptrace)))
;;* lme

(allow keystore servicemanager (binder (call transfer)))
(allow servicemanager keystore (dir (search)))
(allow servicemanager keystore (file (read open)))
(allow servicemanager keystore (process (getattr)))
(allow keystore system_server (binder (call transfer)))
(allow system_server keystore (binder (transfer)))
(allow keystore system_server (fd (use)))
(allow keystore keystore_data_file (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
(allow keystore keystore_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow keystore keystore_data_file (lnk_file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow keystore keystore_data_file (sock_file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow keystore keystore_data_file (fifo_file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow keystore keystore_exec (file (getattr)))
(allow keystore keystore_service (service_manager (add find)))
;;* lmx 14 system/sepolicy/prebuilts/api/29.0/public/keystore.te

(neverallow base_typeattr_433 keystore_service (service_manager (add)))
;;* lme

(allow keystore sec_key_att_app_id_provider_service (service_manager (find)))
(allow keystore dropbox_service (service_manager (find)))
(allow keystore selinuxfs (dir (ioctl read getattr lock search open)))
(allow keystore selinuxfs (file (ioctl read getattr lock map open)))
(allow keystore selinuxfs (lnk_file (ioctl read getattr lock map open)))
(allow keystore selinuxfs (file (write lock append map open)))
(allow keystore kernel (security (compute_av)))
(allow keystore self (netlink_selinux_socket (read write create getattr setattr lock relabelfrom relabelto append bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(allow keystore cgroup (dir (ioctl read getattr lock search open)))
(allow keystore cgroup (file (ioctl read getattr lock map open)))
(allow keystore cgroup (lnk_file (ioctl read getattr lock map open)))
;;* lmx 29 system/sepolicy/prebuilts/api/29.0/public/keystore.te

(neverallow base_typeattr_433 keystore_data_file (dir (write lock relabelfrom append map unlink link rename execute quotaon mounton add_name remove_name reparent rmdir audit_access execmod)))
;;* lme

;;* lmx 30 system/sepolicy/prebuilts/api/29.0/public/keystore.te

(neverallow base_typeattr_433 keystore_data_file (file (ioctl read write create setattr lock relabelfrom append map unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod open audit_access)))
(neverallow base_typeattr_433 keystore_data_file (lnk_file (ioctl read write create setattr lock relabelfrom append map unlink link rename execute quotaon mounton open audit_access execmod)))
(neverallow base_typeattr_433 keystore_data_file (sock_file (ioctl read write create setattr lock relabelfrom append map unlink link rename execute quotaon mounton open audit_access execmod)))
(neverallow base_typeattr_433 keystore_data_file (fifo_file (ioctl read write create setattr lock relabelfrom append map unlink link rename execute quotaon mounton open audit_access execmod)))
;;* lme

;;* lmx 32 system/sepolicy/prebuilts/api/29.0/public/keystore.te

(neverallow base_typeattr_434 keystore_data_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton add_name remove_name reparent search rmdir open audit_access execmod)))
;;* lme

;;* lmx 33 system/sepolicy/prebuilts/api/29.0/public/keystore.te

(neverallow base_typeattr_434 keystore_data_file (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod open audit_access)))
(neverallow base_typeattr_434 keystore_data_file (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton open audit_access execmod)))
(neverallow base_typeattr_434 keystore_data_file (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton open audit_access execmod)))
(neverallow base_typeattr_434 keystore_data_file (fifo_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton open audit_access execmod)))
;;* lme

;;* lmx 35 system/sepolicy/prebuilts/api/29.0/public/keystore.te

(neverallow base_typeattr_167 keystore (process (ptrace)))
;;* lme

(allow lmkd self (capability (dac_override dac_read_search kill sys_resource)))
(allow lmkd self (cap_userns (dac_override dac_read_search kill sys_resource)))
(allow lmkd self (capability (ipc_lock)))
(allow lmkd self (cap_userns (ipc_lock)))
(allow lmkd appdomain (dir (ioctl read getattr lock search open)))
(allow lmkd appdomain (file (ioctl read getattr lock map open)))
(allow lmkd appdomain (lnk_file (ioctl read getattr lock map open)))
(allow lmkd appdomain (file (write)))
(allow lmkd system_server (dir (ioctl read getattr lock search open)))
(allow lmkd system_server (file (ioctl read getattr lock map open)))
(allow lmkd system_server (lnk_file (ioctl read getattr lock map open)))
(allow lmkd system_server (file (write)))
(allow lmkd sysfs_lowmemorykiller (dir (ioctl read getattr lock search open)))
(allow lmkd sysfs_lowmemorykiller (file (ioctl read getattr lock map open)))
(allow lmkd sysfs_lowmemorykiller (lnk_file (ioctl read getattr lock map open)))
(allow lmkd sysfs_lowmemorykiller (file (write lock append map open)))
(allow lmkd appdomain (process (sigkill setsched)))
(allow lmkd kernel (process (setsched)))
(allow lmkd cgroup (dir (remove_name rmdir)))
(allow lmkd cgroup (file (ioctl read getattr lock map open)))
(allow lmkd self (capability (sys_nice)))
(allow lmkd self (cap_userns (sys_nice)))
(allow lmkd proc_zoneinfo (file (ioctl read getattr lock map open)))
(allow lmkd property_socket (sock_file (write)))
(allow lmkd init (unix_stream_socket (connectto)))
(allow lmkd system_lmk_prop (property_service (set)))
(allow lmkd system_lmk_prop (file (read getattr map open)))
(allow lmkd domain (dir (read search open)))
(allow lmkd domain (file (read open)))
(allow lmkd proc_sysrq (file (ioctl read write getattr lock append map open)))
(allow lmkd proc_meminfo (file (ioctl read getattr lock map open)))
(allow lmkd proc_pressure_cpu (file (ioctl read getattr lock map open)))
(allow lmkd proc_pressure_io (file (ioctl read getattr lock map open)))
(allow lmkd proc_pressure_mem (file (ioctl read write getattr lock append map open)))
(allow lmkd statsdw_socket (sock_file (write)))
(allow lmkd statsd (unix_dgram_socket (sendto)))
;;* lmx 66 system/sepolicy/prebuilts/api/29.0/public/lmkd.te

(neverallow base_typeattr_167 lmkd (process (noatsecure)))
;;* lme

(allow logd cgroup (dir (ioctl read getattr lock search open)))
(allow logd cgroup (file (ioctl read getattr lock map open)))
(allow logd cgroup (lnk_file (ioctl read getattr lock map open)))
(allow logd proc_kmsg (dir (ioctl read getattr lock search open)))
(allow logd proc_kmsg (file (ioctl read getattr lock map open)))
(allow logd proc_kmsg (lnk_file (ioctl read getattr lock map open)))
(allow logd proc_meminfo (dir (ioctl read getattr lock search open)))
(allow logd proc_meminfo (file (ioctl read getattr lock map open)))
(allow logd proc_meminfo (lnk_file (ioctl read getattr lock map open)))
(allow logd self (capability (setgid setuid setpcap sys_nice audit_control)))
(allow logd self (cap_userns (setgid setuid setpcap sys_nice audit_control)))
(allow logd self (capability2 (syslog)))
(allow logd self (cap2_userns (syslog)))
(allow logd self (netlink_audit_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown nlmsg_write)))
(allow logd kernel (system (syslog_read)))
(allow logd kmsg_device (chr_file (write getattr lock append map open)))
(allow logd system_data_file (file (ioctl read getattr lock map open)))
(allow logd system_data_file (lnk_file (ioctl read getattr lock map open)))
(allow logd packages_list_file (file (ioctl read getattr lock map open)))
(allow logd pstorefs (dir (search)))
(allow logd pstorefs (file (ioctl read getattr lock map open)))
(allow logd runtime_event_log_tags_file (file (ioctl read write getattr lock append map open)))
(allow logd device_logging_prop (file (read getattr map open)))
(allow logd domain (dir (ioctl read getattr lock search open)))
(allow logd domain (file (ioctl read getattr lock map open)))
(allow logd domain (lnk_file (ioctl read getattr lock map open)))
(allow logd kernel (system (syslog_mod)))
(allow logd logd_socket (sock_file (write)))
(allow logd logd (unix_stream_socket (connectto)))
(allow logd runtime_event_log_tags_file (file (ioctl read getattr lock map open)))
(allow runtime_event_log_tags_file tmpfs (filesystem (associate)))
(dontaudit domain runtime_event_log_tags_file (file (read map open)))
;;* lmx 50 system/sepolicy/prebuilts/api/29.0/public/logd.te

(neverallow logd dev_type (blk_file (read write)))
;;* lme

;;* lmx 53 system/sepolicy/prebuilts/api/29.0/public/logd.te

(neverallow logd domain (process (ptrace)))
;;* lme

;;* lmx 56 system/sepolicy/prebuilts/api/29.0/public/logd.te

(neverallow domain logd (process (ptrace)))
;;* lme

;;* lmx 59 system/sepolicy/prebuilts/api/29.0/public/logd.te

(neverallow logd system_file (file (write)))
(neverallow logd system_file (dir (write)))
(neverallow logd system_file (lnk_file (write)))
(neverallow logd system_file (chr_file (write)))
(neverallow logd system_file (blk_file (write)))
(neverallow logd system_file (sock_file (write)))
(neverallow logd system_file (fifo_file (write)))
;;* lme

;;* lmx 62 system/sepolicy/prebuilts/api/29.0/public/logd.te

(neverallow logd system_data_file (file (write)))
(neverallow logd system_data_file (dir (write)))
(neverallow logd system_data_file (lnk_file (write)))
(neverallow logd system_data_file (chr_file (write)))
(neverallow logd system_data_file (blk_file (write)))
(neverallow logd system_data_file (sock_file (write)))
(neverallow logd system_data_file (fifo_file (write)))
(neverallow logd packages_list_file (file (write)))
(neverallow logd packages_list_file (dir (write)))
(neverallow logd packages_list_file (lnk_file (write)))
(neverallow logd packages_list_file (chr_file (write)))
(neverallow logd packages_list_file (blk_file (write)))
(neverallow logd packages_list_file (sock_file (write)))
(neverallow logd packages_list_file (fifo_file (write)))
(neverallow logd app_data_file (file (write)))
(neverallow logd app_data_file (dir (write)))
(neverallow logd app_data_file (lnk_file (write)))
(neverallow logd app_data_file (chr_file (write)))
(neverallow logd app_data_file (blk_file (write)))
(neverallow logd app_data_file (sock_file (write)))
(neverallow logd app_data_file (fifo_file (write)))
(neverallow logd privapp_data_file (file (write)))
(neverallow logd privapp_data_file (dir (write)))
(neverallow logd privapp_data_file (lnk_file (write)))
(neverallow logd privapp_data_file (chr_file (write)))
(neverallow logd privapp_data_file (blk_file (write)))
(neverallow logd privapp_data_file (sock_file (write)))
(neverallow logd privapp_data_file (fifo_file (write)))
;;* lme

;;* lmx 65 system/sepolicy/prebuilts/api/29.0/public/logd.te

(neverallow base_typeattr_166 logd (process (transition)))
;;* lme

;;* lmx 66 system/sepolicy/prebuilts/api/29.0/public/logd.te

(neverallow base_typeattr_167 logd (process (dyntransition)))
;;* lme

;;* lmx 73 system/sepolicy/prebuilts/api/29.0/public/logd.te

(neverallow base_typeattr_435 runtime_event_log_tags_file (file (write create setattr relabelfrom append unlink link rename)))
;;* lme

;;* lmx 11 system/sepolicy/prebuilts/api/29.0/public/logpersist.te

(neverallow logpersist dev_type (blk_file (read write)))
;;* lme

;;* lmx 14 system/sepolicy/prebuilts/api/29.0/public/logpersist.te

(neverallow logpersist domain (process (ptrace)))
;;* lme

;;* lmx 17 system/sepolicy/prebuilts/api/29.0/public/logpersist.te

(neverallow logpersist system_data_file (file (write)))
(neverallow logpersist system_data_file (dir (write)))
(neverallow logpersist system_data_file (lnk_file (write)))
(neverallow logpersist system_data_file (chr_file (write)))
(neverallow logpersist system_data_file (blk_file (write)))
(neverallow logpersist system_data_file (sock_file (write)))
(neverallow logpersist system_data_file (fifo_file (write)))
(neverallow logpersist app_data_file (file (write)))
(neverallow logpersist app_data_file (dir (write)))
(neverallow logpersist app_data_file (lnk_file (write)))
(neverallow logpersist app_data_file (chr_file (write)))
(neverallow logpersist app_data_file (blk_file (write)))
(neverallow logpersist app_data_file (sock_file (write)))
(neverallow logpersist app_data_file (fifo_file (write)))
(neverallow logpersist privapp_data_file (file (write)))
(neverallow logpersist privapp_data_file (dir (write)))
(neverallow logpersist privapp_data_file (lnk_file (write)))
(neverallow logpersist privapp_data_file (chr_file (write)))
(neverallow logpersist privapp_data_file (blk_file (write)))
(neverallow logpersist privapp_data_file (sock_file (write)))
(neverallow logpersist privapp_data_file (fifo_file (write)))
;;* lme

;;* lmx 27 system/sepolicy/prebuilts/api/29.0/public/logpersist.te

(neverallow base_typeattr_167 logpersist (process (dyntransition)))
;;* lme

(allow mediadrmserver servicemanager (binder (call transfer)))
(allow servicemanager mediadrmserver (dir (search)))
(allow servicemanager mediadrmserver (file (read open)))
(allow servicemanager mediadrmserver (process (getattr)))
(allow mediadrmserver binderservicedomain (binder (call transfer)))
(allow binderservicedomain mediadrmserver (binder (transfer)))
(allow mediadrmserver binderservicedomain (fd (use)))
(allow mediadrmserver appdomain (binder (call transfer)))
(allow appdomain mediadrmserver (binder (transfer)))
(allow mediadrmserver appdomain (fd (use)))
(allow mediadrmserver mediadrmserver_service (service_manager (add find)))
;;* lmx 14 system/sepolicy/prebuilts/api/29.0/public/mediadrmserver.te

(neverallow base_typeattr_436 mediadrmserver_service (service_manager (add)))
;;* lme

(allow mediadrmserver mediaserver_service (service_manager (find)))
(allow mediadrmserver mediametrics_service (service_manager (find)))
(allow mediadrmserver processinfo_service (service_manager (find)))
(allow mediadrmserver surfaceflinger_service (service_manager (find)))
(allow mediadrmserver system_file (dir (ioctl read getattr lock search open)))
(allow mediadrmserver hal_omx_server (binder (call transfer)))
(allow hal_omx_server mediadrmserver (binder (transfer)))
(allow mediadrmserver hal_omx_server (fd (use)))
;;* lmx 30 system/sepolicy/prebuilts/api/29.0/public/mediadrmserver.te

(neverallow mediadrmserver fs_type (file (execute_no_trans)))
(neverallow mediadrmserver file_type (file (execute_no_trans)))
;;* lme

;;* lmx 33 system/sepolicy/prebuilts/api/29.0/public/mediadrmserver.te

(neverallowx mediadrmserver domain (ioctl tcp_socket (0x6900 0x6902)))
(neverallowx mediadrmserver domain (ioctl udp_socket (0x6900 0x6902)))
(neverallowx mediadrmserver domain (ioctl rawip_socket (0x6900 0x6902)))
;;* lme

;;* lmx 33 system/sepolicy/prebuilts/api/29.0/public/mediadrmserver.te

(neverallowx mediadrmserver domain (ioctl tcp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx mediadrmserver domain (ioctl udp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx mediadrmserver domain (ioctl rawip_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
;;* lme

;;* lmx 33 system/sepolicy/prebuilts/api/29.0/public/mediadrmserver.te

(neverallowx mediadrmserver domain (ioctl tcp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx mediadrmserver domain (ioctl udp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx mediadrmserver domain (ioctl rawip_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
;;* lme

(allow mediaextractor servicemanager (binder (call transfer)))
(allow servicemanager mediaextractor (dir (search)))
(allow servicemanager mediaextractor (file (read open)))
(allow servicemanager mediaextractor (process (getattr)))
(allow mediaextractor binderservicedomain (binder (call transfer)))
(allow binderservicedomain mediaextractor (binder (transfer)))
(allow mediaextractor binderservicedomain (fd (use)))
(allow mediaextractor appdomain (binder (call transfer)))
(allow appdomain mediaextractor (binder (transfer)))
(allow mediaextractor appdomain (fd (use)))
(allow mediaextractor mediaextractor_service (service_manager (add find)))
;;* lmx 13 system/sepolicy/prebuilts/api/29.0/public/mediaextractor.te

(neverallow base_typeattr_437 mediaextractor_service (service_manager (add)))
;;* lme

(allow mediaextractor mediametrics_service (service_manager (find)))
(allow mediaextractor hidl_token_hwservice (hwservice_manager (find)))
(allow mediaextractor system_server (fd (use)))
(allow mediaextractor cgroup (dir (ioctl read getattr lock search open)))
(allow mediaextractor cgroup (file (ioctl read getattr lock map open)))
(allow mediaextractor cgroup (lnk_file (ioctl read getattr lock map open)))
(allow mediaextractor proc_meminfo (file (ioctl read getattr lock map open)))
(allow mediaextractor anr_data_file (file (append)))
(allow mediaextractor dumpstate (fd (use)))
(allow mediaextractor incidentd (fd (use)))
(allow mediaextractor dumpstate (fifo_file (write append)))
(allow mediaextractor incidentd (fifo_file (write append)))
(allow mediaextractor system_server (fifo_file (write append)))
(allow mediaextractor tombstoned (unix_stream_socket (connectto)))
(allow mediaextractor tombstoned (fd (use)))
(allow mediaextractor tombstoned_crash_socket (sock_file (write)))
(allow mediaextractor tombstone_data_file (file (append)))
(allow mediaextractor sdcard_type (file (read getattr)))
(allow mediaextractor media_rw_data_file (file (read getattr)))
(allow mediaextractor app_data_file (file (read getattr)))
(allow mediaextractor privapp_data_file (file (read getattr)))
(allow mediaextractor apk_data_file (file (read getattr)))
(allow mediaextractor asec_apk_file (file (read getattr)))
(allow mediaextractor ringtone_file (file (read getattr)))
(allow mediaextractor system_file (dir (read open)))
(allow mediaextractor device_config_media_native_prop (file (read getattr map open)))
;;* lmx 48 system/sepolicy/prebuilts/api/29.0/public/mediaextractor.te

(neverallow mediaextractor fs_type (file (execute_no_trans)))
(neverallow mediaextractor file_type (file (execute_no_trans)))
;;* lme

;;* lmx 60 system/sepolicy/prebuilts/api/29.0/public/mediaextractor.te

(neverallow mediaextractor domain (tcp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind name_connect)))
(neverallow mediaextractor domain (udp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind)))
(neverallow mediaextractor domain (rawip_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind)))
;;* lme

;;* lmx 70 system/sepolicy/prebuilts/api/29.0/public/mediaextractor.te

(neverallow mediaextractor base_typeattr_438 (file (open)))
;;* lme

(allow mediametrics servicemanager (binder (call transfer)))
(allow servicemanager mediametrics (dir (search)))
(allow servicemanager mediametrics (file (read open)))
(allow servicemanager mediametrics (process (getattr)))
(allow mediametrics binderservicedomain (binder (call transfer)))
(allow binderservicedomain mediametrics (binder (transfer)))
(allow mediametrics binderservicedomain (fd (use)))
(allow mediametrics mediametrics_service (service_manager (add find)))
;;* lmx 10 system/sepolicy/prebuilts/api/29.0/public/mediametrics.te

(neverallow base_typeattr_439 mediametrics_service (service_manager (add)))
;;* lme

(allow mediametrics system_server (fd (use)))
(allow mediametrics cgroup (dir (ioctl read getattr lock search open)))
(allow mediametrics cgroup (file (ioctl read getattr lock map open)))
(allow mediametrics cgroup (lnk_file (ioctl read getattr lock map open)))
(allow mediametrics proc_meminfo (file (ioctl read getattr lock map open)))
(allow mediametrics app_data_file (file (write)))
(allow mediametrics privapp_data_file (file (write)))
(allow mediametrics package_native_service (service_manager (find)))
(allow mediametrics statsdw_socket (sock_file (write)))
(allow mediametrics statsd (unix_dgram_socket (sendto)))
;;* lmx 32 system/sepolicy/prebuilts/api/29.0/public/mediametrics.te

(neverallow mediametrics fs_type (file (execute_no_trans)))
(neverallow mediametrics file_type (file (execute_no_trans)))
;;* lme

;;* lmx 44 system/sepolicy/prebuilts/api/29.0/public/mediametrics.te

(neverallow mediametrics domain (tcp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind name_connect)))
(neverallow mediametrics domain (udp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind)))
(neverallow mediametrics domain (rawip_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind)))
;;* lme

(allow mediaserver sdcard_type (dir (ioctl read getattr lock search open)))
(allow mediaserver sdcard_type (file (ioctl read getattr lock map open)))
(allow mediaserver sdcard_type (lnk_file (ioctl read getattr lock map open)))
(allow mediaserver cgroup (dir (ioctl read getattr lock search open)))
(allow mediaserver cgroup (file (ioctl read getattr lock map open)))
(allow mediaserver cgroup (lnk_file (ioctl read getattr lock map open)))
(allow mediaserver proc (lnk_file (getattr)))
(allow mediaserver system_file (dir (ioctl read getattr lock search open)))
(allow mediaserver servicemanager (binder (call transfer)))
(allow servicemanager mediaserver (dir (search)))
(allow servicemanager mediaserver (file (read open)))
(allow servicemanager mediaserver (process (getattr)))
(allow mediaserver binderservicedomain (binder (call transfer)))
(allow binderservicedomain mediaserver (binder (transfer)))
(allow mediaserver binderservicedomain (fd (use)))
(allow mediaserver appdomain (binder (call transfer)))
(allow appdomain mediaserver (binder (transfer)))
(allow mediaserver appdomain (fd (use)))
(allow mediaserver media_data_file (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
(allow mediaserver media_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow mediaserver app_data_file (file (ioctl read write getattr lock append map)))
(allow mediaserver privapp_data_file (file (ioctl read write getattr lock append map)))
(allow mediaserver sdcard_type (file (write)))
(allow mediaserver gpu_device (chr_file (ioctl read write getattr lock append map open)))
(allow mediaserver video_device (dir (ioctl read getattr lock search open)))
(allow mediaserver video_device (chr_file (ioctl read write getattr lock append map open)))
(allow mediaserver property_socket (sock_file (write)))
(allow mediaserver init (unix_stream_socket (connectto)))
(allow mediaserver audio_prop (property_service (set)))
(allow mediaserver audio_prop (file (read getattr map open)))
(allow mediaserver apk_data_file (file (read getattr)))
(allow mediaserver asec_apk_file (file (read getattr)))
(allow mediaserver ringtone_file (file (read getattr)))
(allow mediaserver radio_data_file (file (read getattr)))
(allow mediaserver appdomain (fifo_file (read write getattr)))
(allow mediaserver rpmsg_device (chr_file (ioctl read write getattr lock append map open)))
(allow mediaserver system_server (fifo_file (ioctl read getattr lock map open)))
(allow mediaserver media_rw_data_file (dir (ioctl read getattr lock search open)))
(allow mediaserver media_rw_data_file (file (ioctl read getattr lock map open)))
(allow mediaserver media_rw_data_file (lnk_file (ioctl read getattr lock map open)))
(allow mediaserver app_fuse_file (file (read getattr)))
(allow mediaserver drmserver_socket (sock_file (write)))
(allow mediaserver drmserver (unix_stream_socket (connectto)))
(allow mediaserver bluetooth_socket (sock_file (write)))
(allow mediaserver bluetooth (unix_stream_socket (connectto)))
(allow mediaserver mediaserver_service (service_manager (add find)))
;;* lmx 68 system/sepolicy/prebuilts/api/29.0/public/mediaserver.te

(neverallow base_typeattr_440 mediaserver_service (service_manager (add)))
;;* lme

(allow mediaserver activity_service (service_manager (find)))
(allow mediaserver appops_service (service_manager (find)))
(allow mediaserver audio_service (service_manager (find)))
(allow mediaserver audioserver_service (service_manager (find)))
(allow mediaserver cameraserver_service (service_manager (find)))
(allow mediaserver batterystats_service (service_manager (find)))
(allow mediaserver drmserver_service (service_manager (find)))
(allow mediaserver mediaextractor_service (service_manager (find)))
(allow mediaserver mediacodec_service (service_manager (find)))
(allow mediaserver mediametrics_service (service_manager (find)))
(allow mediaserver media_session_service (service_manager (find)))
(allow mediaserver permission_service (service_manager (find)))
(allow mediaserver power_service (service_manager (find)))
(allow mediaserver processinfo_service (service_manager (find)))
(allow mediaserver scheduling_policy_service (service_manager (find)))
(allow mediaserver surfaceflinger_service (service_manager (find)))
(allow mediaserver mediadrmserver_service (service_manager (find)))
(allow mediaserver hidl_token_hwservice (hwservice_manager (find)))
(allow mediaserver oemfs (dir (search)))
(allow mediaserver oemfs (file (ioctl read getattr lock map open)))
(allow mediaserver vendor_app_file (file (read getattr map)))
(allow drmserver mediaserver (dir (search)))
(allow drmserver mediaserver (file (read open)))
(allow drmserver mediaserver (process (getattr)))
(allow mediaserver drmserver (drmservice (consumeRights setPlaybackStatus openDecryptSession closeDecryptSession initializeDecryptUnit decrypt finalizeDecryptUnit pread)))
(allowx mediaserver self (ioctl tcp_socket ((range 0x5401 0x5403) 0x540b (range 0x540e 0x5411) (range 0x5413 0x5414) (range 0x5450 0x5451))))
(allowx mediaserver self (ioctl udp_socket ((range 0x5401 0x5403) 0x540b (range 0x540e 0x5411) (range 0x5413 0x5414) (range 0x5450 0x5451))))
(allowx mediaserver self (ioctl rawip_socket ((range 0x5401 0x5403) 0x540b (range 0x540e 0x5411) (range 0x5413 0x5414) (range 0x5450 0x5451))))
(allowx mediaserver self (ioctl tcp_socket ((range 0x8906 0x8907) 0x8910 (range 0x8912 0x8913) 0x8915 0x8917 0x8919 0x891b 0x8921 0x8933 0x8938 0x8942)))
(allowx mediaserver self (ioctl udp_socket ((range 0x8906 0x8907) 0x8910 (range 0x8912 0x8913) 0x8915 0x8917 0x8919 0x891b 0x8921 0x8933 0x8938 0x8942)))
(allowx mediaserver self (ioctl rawip_socket ((range 0x8906 0x8907) 0x8910 (range 0x8912 0x8913) 0x8915 0x8917 0x8919 0x891b 0x8921 0x8933 0x8938 0x8942)))
(allowx mediaserver self (ioctl tcp_socket (0x8b01 0x8b05 0x8b07 0x8b09 0x8b0b 0x8b0d 0x8b0f (range 0x8b11 0x8b13) 0x8b21 0x8b23 0x8b25 0x8b27 0x8b29 0x8b2d)))
(allowx mediaserver self (ioctl udp_socket (0x8b01 0x8b05 0x8b07 0x8b09 0x8b0b 0x8b0d 0x8b0f (range 0x8b11 0x8b13) 0x8b21 0x8b23 0x8b25 0x8b27 0x8b29 0x8b2d)))
(allowx mediaserver self (ioctl rawip_socket (0x8b01 0x8b05 0x8b07 0x8b09 0x8b0b 0x8b0d 0x8b0f (range 0x8b11 0x8b13) 0x8b21 0x8b23 0x8b25 0x8b27 0x8b29 0x8b2d)))
(allow mediaserver media_rw_data_file (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
(allow mediaserver media_rw_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow mediaserver preloads_media_file (file (ioctl read getattr)))
(allow mediaserver ion_device (chr_file (ioctl read getattr lock map open)))
(allow mediaserver hal_graphics_allocator (fd (use)))
(allow mediaserver hal_graphics_composer (fd (use)))
(allow mediaserver hal_camera (fd (use)))
(allow mediaserver system_server (fd (use)))
(allow mediaserver vold (fd (use)))
;;* lmx 142 system/sepolicy/prebuilts/api/29.0/public/mediaserver.te

(neverallow mediaserver fs_type (file (execute_no_trans)))
(neverallow mediaserver file_type (file (execute_no_trans)))
;;* lme

;;* lmx 145 system/sepolicy/prebuilts/api/29.0/public/mediaserver.te

(neverallowx mediaserver domain (ioctl tcp_socket (0x6900 0x6902)))
(neverallowx mediaserver domain (ioctl udp_socket (0x6900 0x6902)))
(neverallowx mediaserver domain (ioctl rawip_socket (0x6900 0x6902)))
;;* lme

;;* lmx 145 system/sepolicy/prebuilts/api/29.0/public/mediaserver.te

(neverallowx mediaserver domain (ioctl tcp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx mediaserver domain (ioctl udp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx mediaserver domain (ioctl rawip_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
;;* lme

;;* lmx 145 system/sepolicy/prebuilts/api/29.0/public/mediaserver.te

(neverallowx mediaserver domain (ioctl tcp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx mediaserver domain (ioctl udp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx mediaserver domain (ioctl rawip_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
;;* lme

(allow mediaswcodec device_config_media_native_prop (file (read getattr map open)))
(allow mediaswcodec anr_data_file (file (append)))
(allow mediaswcodec dumpstate (fd (use)))
(allow mediaswcodec incidentd (fd (use)))
(allow mediaswcodec dumpstate (fifo_file (write append)))
(allow mediaswcodec incidentd (fifo_file (write append)))
(allow mediaswcodec system_server (fifo_file (write append)))
(allow mediaswcodec tombstoned (unix_stream_socket (connectto)))
(allow mediaswcodec tombstoned (fd (use)))
(allow mediaswcodec tombstoned_crash_socket (sock_file (write)))
(allow mediaswcodec tombstone_data_file (file (append)))
;;* lmx 20 system/sepolicy/prebuilts/api/29.0/public/mediaswcodec.te

(neverallow mediaswcodec fs_type (file (execute_no_trans)))
(neverallow mediaswcodec file_type (file (execute_no_trans)))
;;* lme

;;* lmx 26 system/sepolicy/prebuilts/api/29.0/public/mediaswcodec.te

(neverallow mediaswcodec domain (tcp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind name_connect)))
(neverallow mediaswcodec domain (udp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind)))
(neverallow mediaswcodec domain (rawip_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind)))
;;* lme

(allow modprobe proc_modules (file (ioctl read getattr lock map open)))
(allow modprobe self (capability (sys_module)))
(allow modprobe self (cap_userns (sys_module)))
(allow modprobe kernel (key (search)))
(allow mtp self (socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
(allow mtp self (pppox_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
(allow mtp self (capability (net_raw)))
(allow mtp self (cap_userns (net_raw)))
(allow mtp ppp (process (signal)))
(allow mtp vpn_data_file (dir (search)))
(allow netdomain self (tcp_socket (ioctl read write create getattr setattr lock append map bind connect listen accept getopt setopt shutdown)))
(allow netdomain self (udp_socket (ioctl read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
(allow netdomain self (rawip_socket (ioctl read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
(allow netdomain self (icmp_socket (ioctl read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
(allow netdomain port_type (tcp_socket (name_connect)))
(allow base_typeattr_441 node_type (tcp_socket (node_bind)))
(allow base_typeattr_441 node_type (udp_socket (node_bind)))
(allow base_typeattr_441 node_type (rawip_socket (node_bind)))
(allow base_typeattr_441 node_type (icmp_socket (node_bind)))
(allow base_typeattr_441 port_type (udp_socket (name_bind)))
(allow base_typeattr_441 port_type (tcp_socket (name_bind)))
(allow netdomain self (netlink_route_socket (read write create getattr setattr lock append bind connect getopt setopt shutdown nlmsg_read)))
(allow netdomain dnsproxyd_socket (sock_file (write)))
(allow netdomain netd (unix_stream_socket (connectto)))
(allow netdomain fwmarkd_socket (sock_file (write)))
(allow netdomain netd (unix_stream_socket (connectto)))
(allow netdomain mdnsd_socket (sock_file (write)))
(allow netdomain mdnsd (unix_stream_socket (connectto)))
(allowx netd self (ioctl udp_socket (0x6900 0x6902)))
(allowx netd self (ioctl udp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(allowx netd self (ioctl udp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(allow netd cgroup (dir (ioctl read getattr lock search open)))
(allow netd cgroup (file (ioctl read getattr lock map open)))
(allow netd cgroup (lnk_file (ioctl read getattr lock map open)))
(allow netd system_server (fd (use)))
(allow netd self (capability (kill net_admin net_raw)))
(allow netd self (cap_userns (kill net_admin net_raw)))
(dontaudit netd self (capability (fsetid)))
(dontaudit netd self (cap_userns (fsetid)))
(allow netd tun_device (chr_file (ioctl read write getattr lock append map open)))
(allowx netd tun_device (ioctl chr_file (0x54ca 0x54d2)))
(allow netd self (tun_socket (create)))
(allow netd self (netlink_kobject_uevent_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
(allow netd self (netlink_route_socket (nlmsg_write)))
(allow netd self (netlink_nflog_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
(allow netd self (netlink_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
(allow netd self (netlink_tcpdiag_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown nlmsg_read nlmsg_write)))
(allow netd self (netlink_generic_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
(allow netd self (netlink_netfilter_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
(allow netd shell_exec (file (ioctl read getattr lock map execute execute_no_trans open)))
(allow netd system_file (file (getattr map execute execute_no_trans)))
(allow netd devpts (chr_file (ioctl read write getattr lock append map open)))
(allow netd system_file (file (lock)))
(allow netd proc_qtaguid_ctrl (file (ioctl read write getattr lock append map open)))
(allow netd qtaguid_device (chr_file (ioctl read getattr lock map open)))
(allow netd proc_net_type (dir (ioctl read getattr lock search open)))
(allow netd proc_net_type (file (ioctl read getattr lock map open)))
(allow netd proc_net_type (lnk_file (ioctl read getattr lock map open)))
(allow netd proc_net_type (file (ioctl read write getattr lock append map open)))
(allow netd sysfs (dir (ioctl read getattr lock search open)))
(allow netd sysfs_net (dir (ioctl read getattr lock search open)))
(allow netd sysfs_net (file (ioctl read getattr lock map open)))
(allow netd sysfs_net (lnk_file (ioctl read getattr lock map open)))
(allow netd sysfs_net (file (write lock append map open)))
(allow netd sysfs_usb (file (write)))
(allow netd cgroup_bpf (dir (ioctl read getattr lock search open)))
(allow netd cgroup_bpf (file (ioctl read getattr lock map open)))
(allow netd cgroup_bpf (lnk_file (ioctl read getattr lock map open)))
(allow netd fs_bpf (dir (search)))
(allow netd fs_bpf (file (read write setattr)))
(allow netd self (capability (chown dac_override dac_read_search)))
(allow netd self (cap_userns (chown dac_override dac_read_search)))
(allow netd net_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow netd net_data_file (dir (ioctl read write getattr lock add_name remove_name search open)))
(allow netd self (capability (fowner)))
(allow netd self (cap_userns (fowner)))
(allow netd system_file (file (lock)))
(allow netd dnsmasq (process (signal)))
(allow netd clatd (process (signal)))
(allow netd property_socket (sock_file (write)))
(allow netd init (unix_stream_socket (connectto)))
(allow netd ctl_mdnsd_prop (property_service (set)))
(allow netd ctl_mdnsd_prop (file (read getattr map open)))
(allow netd property_socket (sock_file (write)))
(allow netd init (unix_stream_socket (connectto)))
(allow netd netd_stable_secret_prop (property_service (set)))
(allow netd netd_stable_secret_prop (file (read getattr map open)))
(allow netd servicemanager (binder (call transfer)))
(allow servicemanager netd (dir (search)))
(allow servicemanager netd (file (read open)))
(allow servicemanager netd (process (getattr)))
(allow netd netd_service (service_manager (add find)))
;;* lmx 92 system/sepolicy/prebuilts/api/29.0/public/netd.te

(neverallow base_typeattr_442 netd_service (service_manager (add)))
;;* lme

(allow netd dnsresolver_service (service_manager (add find)))
;;* lmx 93 system/sepolicy/prebuilts/api/29.0/public/netd.te

(neverallow base_typeattr_442 dnsresolver_service (service_manager (add)))
;;* lme

(allow netd dumpstate (fifo_file (write getattr)))
(allow netd system_server (binder (call)))
(allow netd permission_service (service_manager (find)))
(allow netd netd_listener_service (service_manager (find)))
(allow netd netdomain (tcp_socket (read write getattr setattr getopt setopt)))
(allow netd netdomain (udp_socket (read write getattr setattr getopt setopt)))
(allow netd netdomain (rawip_socket (read write getattr setattr getopt setopt)))
(allow netd netdomain (tun_socket (read write getattr setattr getopt setopt)))
(allow netd netdomain (icmp_socket (read write getattr setattr getopt setopt)))
(allow netd netdomain (fd (use)))
(allow netd self (netlink_xfrm_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown nlmsg_read nlmsg_write)))
(allow netd system_net_netd_hwservice (hwservice_manager (add find)))
(allow netd hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 117 system/sepolicy/prebuilts/api/29.0/public/netd.te

(neverallow base_typeattr_442 system_net_netd_hwservice (hwservice_manager (add)))
;;* lme

(allow netd hwservicemanager (binder (call transfer)))
(allow hwservicemanager netd (binder (call transfer)))
(allow hwservicemanager netd (dir (search)))
(allow hwservicemanager netd (file (read map open)))
(allow hwservicemanager netd (process (getattr)))
(allow netd hwservicemanager_prop (file (read getattr map open)))
(allow netd device_config_netd_native_prop (file (read getattr map open)))
;;* lmx 128 system/sepolicy/prebuilts/api/29.0/public/netd.te

(neverallow netd dev_type (blk_file (read write)))
;;* lme

;;* lmx 131 system/sepolicy/prebuilts/api/29.0/public/netd.te

(neverallow netd domain (process (ptrace)))
;;* lme

;;* lmx 134 system/sepolicy/prebuilts/api/29.0/public/netd.te

(neverallow netd system_file (file (write)))
(neverallow netd system_file (dir (write)))
(neverallow netd system_file (lnk_file (write)))
(neverallow netd system_file (chr_file (write)))
(neverallow netd system_file (blk_file (write)))
(neverallow netd system_file (sock_file (write)))
(neverallow netd system_file (fifo_file (write)))
;;* lme

;;* lmx 137 system/sepolicy/prebuilts/api/29.0/public/netd.te

(neverallow netd system_data_file (file (write)))
(neverallow netd system_data_file (dir (write)))
(neverallow netd system_data_file (lnk_file (write)))
(neverallow netd system_data_file (chr_file (write)))
(neverallow netd system_data_file (blk_file (write)))
(neverallow netd system_data_file (sock_file (write)))
(neverallow netd system_data_file (fifo_file (write)))
(neverallow netd app_data_file (file (write)))
(neverallow netd app_data_file (dir (write)))
(neverallow netd app_data_file (lnk_file (write)))
(neverallow netd app_data_file (chr_file (write)))
(neverallow netd app_data_file (blk_file (write)))
(neverallow netd app_data_file (sock_file (write)))
(neverallow netd app_data_file (fifo_file (write)))
(neverallow netd privapp_data_file (file (write)))
(neverallow netd privapp_data_file (dir (write)))
(neverallow netd privapp_data_file (lnk_file (write)))
(neverallow netd privapp_data_file (chr_file (write)))
(neverallow netd privapp_data_file (blk_file (write)))
(neverallow netd privapp_data_file (sock_file (write)))
(neverallow netd privapp_data_file (fifo_file (write)))
;;* lme

;;* lmx 147 system/sepolicy/prebuilts/api/29.0/public/netd.te

(neverallow base_typeattr_443 netd_service (service_manager (find)))
;;* lme

;;* lmx 157 system/sepolicy/prebuilts/api/29.0/public/netd.te

(neverallow base_typeattr_443 dnsresolver_service (service_manager (find)))
;;* lme

;;* lmx 160 system/sepolicy/prebuilts/api/29.0/public/netd.te

(neverallow base_typeattr_444 netd (binder (call)))
;;* lme

;;* lmx 161 system/sepolicy/prebuilts/api/29.0/public/netd.te

(neverallow netd base_typeattr_444 (binder (call)))
;;* lme

;;* lmx 165 system/sepolicy/prebuilts/api/29.0/public/netd.te

(neverallow base_typeattr_445 netd_stable_secret_prop (file (ioctl read getattr lock map open)))
;;* lme

;;* lmx 169 system/sepolicy/prebuilts/api/29.0/public/netd.te

(neverallow base_typeattr_446 netd_stable_secret_prop (property_service (set)))
;;* lme

;;* lmx 174 system/sepolicy/prebuilts/api/29.0/public/netd.te

(neverallow netd proc_net (dir (write create setattr relabelfrom link rename add_name remove_name reparent rmdir)))
;;* lme

(dontaudit netd proc_net (dir (write)))
;;* lmx 177 system/sepolicy/prebuilts/api/29.0/public/netd.te

(neverallow netd sysfs_net (dir (write create setattr relabelfrom link rename add_name remove_name reparent rmdir)))
;;* lme

(dontaudit netd sysfs_net (dir (write)))
;;* lmx 5 system/sepolicy/prebuilts/api/29.0/public/netutils_wrapper.te

(neverallow domain netutils_wrapper_exec (file (execute_no_trans)))
;;* lme

(allow performanced servicemanager (binder (call transfer)))
(allow servicemanager performanced (dir (search)))
(allow servicemanager performanced (file (read open)))
(allow servicemanager performanced (process (getattr)))
(allow performanced system_server (binder (call transfer)))
(allow system_server performanced (binder (transfer)))
(allow performanced system_server (fd (use)))
(allow performanced permission_service (service_manager (find)))
(allow init pdx_performance_client_endpoint_socket_type (unix_stream_socket (create bind)))
(allow performanced pdx_performance_client_endpoint_socket_type (unix_stream_socket (read write getattr setattr lock append listen accept getopt setopt shutdown)))
(allow performanced self (process (setsockcreate)))
(allow performanced pdx_performance_client_channel_socket_type (unix_stream_socket (ioctl read write create getattr setattr lock append map bind connect listen accept getopt setopt shutdown)))
;;* lmx 10 system/sepolicy/prebuilts/api/29.0/public/performanced.te

(neverallow base_typeattr_447 pdx_performance_client_endpoint_socket_type (unix_stream_socket (listen accept)))
;;* lme

(allow performanced self (capability (setgid setuid sys_nice)))
(allow performanced self (cap_userns (setgid setuid sys_nice)))
(allow performanced appdomain (dir (ioctl read getattr lock search open)))
(allow performanced bufferhubd (dir (ioctl read getattr lock search open)))
(allow performanced kernel (dir (ioctl read getattr lock search open)))
(allow performanced surfaceflinger (dir (ioctl read getattr lock search open)))
(allow performanced appdomain (file (ioctl read getattr lock map open)))
(allow performanced appdomain (lnk_file (ioctl read getattr lock map open)))
(allow performanced bufferhubd (file (ioctl read getattr lock map open)))
(allow performanced bufferhubd (lnk_file (ioctl read getattr lock map open)))
(allow performanced kernel (file (ioctl read getattr lock map open)))
(allow performanced kernel (lnk_file (ioctl read getattr lock map open)))
(allow performanced surfaceflinger (file (ioctl read getattr lock map open)))
(allow performanced surfaceflinger (lnk_file (ioctl read getattr lock map open)))
(dontaudit performanced domain (dir (read)))
(allow performanced appdomain (process (setsched)))
(allow performanced bufferhubd (process (setsched)))
(allow performanced kernel (process (setsched)))
(allow performanced surfaceflinger (process (setsched)))
(allow performanced cgroup (dir (ioctl read getattr lock search open)))
(allow performanced cgroup (file (ioctl read getattr lock map open)))
(allow performanced cgroup (lnk_file (ioctl read getattr lock map open)))
(allow postinstall update_engine_common (fd (use)))
(allow postinstall update_engine_common (fifo_file (ioctl read write getattr lock append map open)))
(allow postinstall postinstall_file (file (ioctl read getattr lock map execute execute_no_trans open)))
(allow postinstall postinstall_file (lnk_file (ioctl read getattr lock map open)))
(allow postinstall postinstall_file (dir (ioctl read getattr lock search open)))
(allow postinstall shell_exec (file (ioctl read getattr lock map execute execute_no_trans open)))
(allow postinstall system_file (file (ioctl read getattr lock map execute execute_no_trans open)))
(allow postinstall toolbox_exec (file (ioctl read getattr lock map execute execute_no_trans open)))
(allow postinstall servicemanager (binder (call transfer)))
(allow servicemanager postinstall (dir (search)))
(allow servicemanager postinstall (file (read open)))
(allow servicemanager postinstall (process (getattr)))
(allow postinstall system_server (binder (call transfer)))
(allow system_server postinstall (binder (transfer)))
(allow postinstall system_server (fd (use)))
(allow postinstall otadexopt_service (service_manager (find)))
(allow postinstall sysfs_fs_f2fs (file (ioctl read write getattr lock append map open)))
(allow postinstall sysfs_fs_f2fs (dir (ioctl read getattr lock search open)))
;;* lmx 45 system/sepolicy/prebuilts/api/29.0/public/postinstall.te

(neverallow base_typeattr_448 postinstall (process (transition dyntransition)))
;;* lme

(allow ppp proc_net_type (dir (ioctl read getattr lock search open)))
(allow ppp proc_net_type (file (ioctl read getattr lock map open)))
(allow ppp proc_net_type (lnk_file (ioctl read getattr lock map open)))
(allow ppp mtp (socket (ioctl read write getattr setattr lock append map bind connect getopt setopt shutdown)))
(allow ppp mtp (pppox_socket (ioctl read write getattr setattr lock append map bind connect getopt setopt shutdown)))
(allowx ppp self (ioctl udp_socket (0x6900 0x6902)))
(allowx ppp self (ioctl udp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(allowx ppp self (ioctl udp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(allowx ppp mtp (ioctl socket ((range 0x7436 0x7441) (range 0x7446 0x7447) (range 0x744b 0x745a) (range 0x7480 0x7488))))
(allowx ppp mtp (ioctl pppox_socket ((range 0x7436 0x7441) (range 0x7446 0x7447) (range 0x744b 0x745a) (range 0x7480 0x7488))))
(allow ppp mtp (unix_dgram_socket (ioctl read write getattr setattr lock append map bind connect getopt setopt shutdown)))
(allow ppp ppp_device (chr_file (ioctl read write getattr lock append map open)))
(allow ppp self (capability (net_admin)))
(allow ppp self (cap_userns (net_admin)))
(allow ppp system_file (file (ioctl read getattr lock map execute execute_no_trans open)))
(allow ppp vpn_data_file (dir (write lock add_name remove_name search open)))
(allow ppp vpn_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow ppp mtp (fd (use)))
(allow profman user_profile_data_file (file (read write getattr lock map)))
(allow profman asec_apk_file (file (read map)))
(allow profman apk_data_file (file (read getattr map)))
(allow profman apk_data_file (dir (read getattr search)))
(allow profman oemfs (file (read map)))
(allow profman tmpfs (file (read map)))
(allow profman profman_dump_data_file (file (write map)))
(allow profman installd (fd (use)))
(allow profman app_data_file (file (read write getattr lock map)))
(allow profman privapp_data_file (file (read write getattr lock map)))
(allow profman app_data_file (dir (read getattr search)))
(allow profman privapp_data_file (dir (read getattr search)))
;;* lmx 30 system/sepolicy/prebuilts/api/29.0/public/profman.te

(neverallow profman app_data_file (file (open)))
(neverallow profman app_data_file (lnk_file (open)))
(neverallow profman app_data_file (sock_file (open)))
(neverallow profman app_data_file (fifo_file (open)))
(neverallow profman privapp_data_file (file (open)))
(neverallow profman privapp_data_file (lnk_file (open)))
(neverallow profman privapp_data_file (sock_file (open)))
(neverallow profman privapp_data_file (fifo_file (open)))
;;* lme

(allow property_type tmpfs (filesystem (associate)))
;;* lmx 135 system/sepolicy/prebuilts/api/29.0/public/property.te

(neverallow domain property_type (file (ioctl lock)))
;;* lme

;;* lmx 169 system/sepolicy/prebuilts/api/29.0/public/property.te

(neverallow base_typeattr_167 base_typeattr_449 (file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
;;* lme

;;* lmx 177 system/sepolicy/prebuilts/api/29.0/public/property.te

(neverallow base_typeattr_208 ctl_sigstop_prop (property_service (set)))
;;* lme

(dontaudit domain ctl_bootanim_prop (property_service (set)))
(dontaudit domain ctl_bugreport_prop (property_service (set)))
(dontaudit domain ctl_console_prop (property_service (set)))
(dontaudit domain ctl_default_prop (property_service (set)))
(dontaudit domain ctl_dumpstate_prop (property_service (set)))
(dontaudit domain ctl_fuse_prop (property_service (set)))
(dontaudit domain ctl_mdnsd_prop (property_service (set)))
(dontaudit domain ctl_rildaemon_prop (property_service (set)))
;;* lmx 191 system/sepolicy/prebuilts/api/29.0/public/property.te

(neverallow base_typeattr_450 base_typeattr_451 (property_service (set)))
;;* lme

;;* lmx 191 system/sepolicy/prebuilts/api/29.0/public/property.te

(neverallow base_typeattr_452 nfc_prop (property_service (set)))
;;* lme

;;* lmx 191 system/sepolicy/prebuilts/api/29.0/public/property.te

(neverallow base_typeattr_453 exported_radio_prop (property_service (set)))
(neverallow base_typeattr_453 exported3_radio_prop (property_service (set)))
;;* lme

;;* lmx 191 system/sepolicy/prebuilts/api/29.0/public/property.te

(neverallow base_typeattr_454 radio_prop (property_service (set)))
(neverallow base_typeattr_454 exported2_radio_prop (property_service (set)))
;;* lme

;;* lmx 191 system/sepolicy/prebuilts/api/29.0/public/property.te

(neverallow base_typeattr_455 bluetooth_prop (property_service (set)))
;;* lme

;;* lmx 191 system/sepolicy/prebuilts/api/29.0/public/property.te

(neverallow base_typeattr_456 exported_bluetooth_prop (property_service (set)))
;;* lme

;;* lmx 191 system/sepolicy/prebuilts/api/29.0/public/property.te

(neverallow base_typeattr_457 wifi_prop (property_service (set)))
;;* lme

;;* lmx 191 system/sepolicy/prebuilts/api/29.0/public/property.te

(neverallow base_typeattr_458 exported_wifi_prop (property_service (set)))
;;* lme

;;* lmx 191 system/sepolicy/prebuilts/api/29.0/public/property.te

(neverallow base_typeattr_450 base_typeattr_459 (file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
;;* lme

;;* lmx 191 system/sepolicy/prebuilts/api/29.0/public/property.te

(neverallow base_typeattr_452 nfc_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
;;* lme

;;* lmx 191 system/sepolicy/prebuilts/api/29.0/public/property.te

(neverallow base_typeattr_454 radio_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
;;* lme

;;* lmx 191 system/sepolicy/prebuilts/api/29.0/public/property.te

(neverallow base_typeattr_455 bluetooth_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
;;* lme

;;* lmx 191 system/sepolicy/prebuilts/api/29.0/public/property.te

(neverallow base_typeattr_457 wifi_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
;;* lme

;;* lmx 350 system/sepolicy/prebuilts/api/29.0/public/property.te

(neverallow base_typeattr_460 base_typeattr_461 (property_service (set)))
;;* lme

(allowx racoon self (ioctl udp_socket (0x8914 0x8916 0x891c)))
(allow racoon servicemanager (binder (call transfer)))
(allow servicemanager racoon (dir (search)))
(allow servicemanager racoon (file (read open)))
(allow servicemanager racoon (process (getattr)))
(allow racoon tun_device (chr_file (ioctl read getattr lock map open)))
(allowx racoon tun_device (ioctl chr_file (0x54ca)))
(allow racoon cgroup (dir (create add_name)))
(allow racoon kernel (system (module_request)))
(allow racoon self (key_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
(allow racoon self (tun_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
(allow racoon self (capability (net_bind_service net_admin net_raw)))
(allow racoon self (cap_userns (net_bind_service net_admin net_raw)))
(allow racoon system_file (file (ioctl read getattr lock map execute execute_no_trans open)))
(allow racoon vpn_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow racoon vpn_data_file (dir (write lock add_name remove_name search open)))
(allow keystore racoon (dir (search)))
(allow keystore racoon (file (read open)))
(allow keystore racoon (process (getattr)))
(allow racoon keystore_service (service_manager (find)))
(allow racoon keystore (binder (call transfer)))
(allow keystore racoon (binder (transfer)))
(allow racoon keystore (fd (use)))
(allow keystore racoon (binder (call transfer)))
(allow racoon keystore (binder (transfer)))
(allow keystore racoon (fd (use)))
(allow racoon keystore (keystore_key (get sign verify)))
(allow radio radio_data_file (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
(allow radio radio_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow radio radio_data_file (lnk_file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow radio radio_data_file (sock_file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow radio radio_data_file (fifo_file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow radio net_data_file (dir (search)))
(allow radio net_data_file (file (ioctl read getattr lock map open)))
(allow radio property_socket (sock_file (write)))
(allow radio init (unix_stream_socket (connectto)))
(allow radio radio_prop (property_service (set)))
(allow radio radio_prop (file (read getattr map open)))
(allow radio property_socket (sock_file (write)))
(allow radio init (unix_stream_socket (connectto)))
(allow radio exported_radio_prop (property_service (set)))
(allow radio exported_radio_prop (file (read getattr map open)))
(allow radio property_socket (sock_file (write)))
(allow radio init (unix_stream_socket (connectto)))
(allow radio exported2_radio_prop (property_service (set)))
(allow radio exported2_radio_prop (file (read getattr map open)))
(allow radio property_socket (sock_file (write)))
(allow radio init (unix_stream_socket (connectto)))
(allow radio exported3_radio_prop (property_service (set)))
(allow radio exported3_radio_prop (file (read getattr map open)))
(allow radio property_socket (sock_file (write)))
(allow radio init (unix_stream_socket (connectto)))
(allow radio net_radio_prop (property_service (set)))
(allow radio net_radio_prop (file (read getattr map open)))
(allow radio property_socket (sock_file (write)))
(allow radio init (unix_stream_socket (connectto)))
(allow radio ctl_rildaemon_prop (property_service (set)))
(allow radio ctl_rildaemon_prop (file (read getattr map open)))
(allow radio radio_service (service_manager (add find)))
;;* lmx 29 system/sepolicy/prebuilts/api/29.0/public/radio.te

(neverallow base_typeattr_462 radio_service (service_manager (add)))
;;* lme

(allow radio audioserver_service (service_manager (find)))
(allow radio cameraserver_service (service_manager (find)))
(allow radio drmserver_service (service_manager (find)))
(allow radio mediaserver_service (service_manager (find)))
(allow radio nfc_service (service_manager (find)))
(allow radio app_api_service (service_manager (find)))
(allow radio system_api_service (service_manager (find)))
(allow radio timedetector_service (service_manager (find)))
(allow radio hwservicemanager (binder (call transfer)))
(allow hwservicemanager radio (binder (call transfer)))
(allow hwservicemanager radio (dir (search)))
(allow hwservicemanager radio (file (read map open)))
(allow hwservicemanager radio (process (getattr)))
(allow radio proc_cmdline (file (ioctl read getattr lock map open)))
;;* lmx 162 system/sepolicy/prebuilts/api/29.0/public/recovery.te

(neverallow recovery base_typeattr_463 (file (write create setattr relabelfrom append unlink link rename execute execute_no_trans)))
;;* lme

;;* lmx 168 system/sepolicy/prebuilts/api/29.0/public/recovery.te

(neverallow recovery base_typeattr_463 (dir (write create setattr relabelfrom link rename add_name remove_name reparent rmdir)))
;;* lme

(allow recovery_persist pstorefs (dir (search)))
(allow recovery_persist pstorefs (file (ioctl read getattr lock map open)))
(allow recovery_persist recovery_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow recovery_persist recovery_data_file (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
(allow recovery_persist cache_file (dir (search)))
(allow recovery_persist cache_file (lnk_file (read)))
(allow recovery_persist cache_recovery_file (dir (ioctl read write getattr lock add_name remove_name search open)))
(allow recovery_persist cache_recovery_file (file (ioctl read getattr lock map unlink open)))
;;* lmx 23 system/sepolicy/prebuilts/api/29.0/public/recovery_persist.te

(neverallow recovery_persist dev_type (blk_file (read write)))
;;* lme

;;* lmx 26 system/sepolicy/prebuilts/api/29.0/public/recovery_persist.te

(neverallow recovery_persist domain (process (ptrace)))
;;* lme

;;* lmx 29 system/sepolicy/prebuilts/api/29.0/public/recovery_persist.te

(neverallow recovery_persist system_file (file (write)))
(neverallow recovery_persist system_file (dir (write)))
(neverallow recovery_persist system_file (lnk_file (write)))
(neverallow recovery_persist system_file (chr_file (write)))
(neverallow recovery_persist system_file (blk_file (write)))
(neverallow recovery_persist system_file (sock_file (write)))
(neverallow recovery_persist system_file (fifo_file (write)))
;;* lme

;;* lmx 32 system/sepolicy/prebuilts/api/29.0/public/recovery_persist.te

(neverallow recovery_persist system_data_file (file (write)))
(neverallow recovery_persist system_data_file (dir (write)))
(neverallow recovery_persist system_data_file (lnk_file (write)))
(neverallow recovery_persist system_data_file (chr_file (write)))
(neverallow recovery_persist system_data_file (blk_file (write)))
(neverallow recovery_persist system_data_file (sock_file (write)))
(neverallow recovery_persist system_data_file (fifo_file (write)))
(neverallow recovery_persist app_data_file (file (write)))
(neverallow recovery_persist app_data_file (dir (write)))
(neverallow recovery_persist app_data_file (lnk_file (write)))
(neverallow recovery_persist app_data_file (chr_file (write)))
(neverallow recovery_persist app_data_file (blk_file (write)))
(neverallow recovery_persist app_data_file (sock_file (write)))
(neverallow recovery_persist app_data_file (fifo_file (write)))
(neverallow recovery_persist privapp_data_file (file (write)))
(neverallow recovery_persist privapp_data_file (dir (write)))
(neverallow recovery_persist privapp_data_file (lnk_file (write)))
(neverallow recovery_persist privapp_data_file (chr_file (write)))
(neverallow recovery_persist privapp_data_file (blk_file (write)))
(neverallow recovery_persist privapp_data_file (sock_file (write)))
(neverallow recovery_persist privapp_data_file (fifo_file (write)))
;;* lme

(allow recovery_refresh pstorefs (dir (search)))
(allow recovery_refresh pstorefs (file (ioctl read getattr lock map open)))
;;* lmx 16 system/sepolicy/prebuilts/api/29.0/public/recovery_refresh.te

(neverallow recovery_refresh dev_type (blk_file (read write)))
;;* lme

;;* lmx 19 system/sepolicy/prebuilts/api/29.0/public/recovery_refresh.te

(neverallow recovery_refresh domain (process (ptrace)))
;;* lme

;;* lmx 22 system/sepolicy/prebuilts/api/29.0/public/recovery_refresh.te

(neverallow recovery_refresh system_file (file (write)))
(neverallow recovery_refresh system_file (dir (write)))
(neverallow recovery_refresh system_file (lnk_file (write)))
(neverallow recovery_refresh system_file (chr_file (write)))
(neverallow recovery_refresh system_file (blk_file (write)))
(neverallow recovery_refresh system_file (sock_file (write)))
(neverallow recovery_refresh system_file (fifo_file (write)))
;;* lme

;;* lmx 25 system/sepolicy/prebuilts/api/29.0/public/recovery_refresh.te

(neverallow recovery_refresh system_data_file (file (write)))
(neverallow recovery_refresh system_data_file (dir (write)))
(neverallow recovery_refresh system_data_file (lnk_file (write)))
(neverallow recovery_refresh system_data_file (chr_file (write)))
(neverallow recovery_refresh system_data_file (blk_file (write)))
(neverallow recovery_refresh system_data_file (sock_file (write)))
(neverallow recovery_refresh system_data_file (fifo_file (write)))
(neverallow recovery_refresh app_data_file (file (write)))
(neverallow recovery_refresh app_data_file (dir (write)))
(neverallow recovery_refresh app_data_file (lnk_file (write)))
(neverallow recovery_refresh app_data_file (chr_file (write)))
(neverallow recovery_refresh app_data_file (blk_file (write)))
(neverallow recovery_refresh app_data_file (sock_file (write)))
(neverallow recovery_refresh app_data_file (fifo_file (write)))
(neverallow recovery_refresh privapp_data_file (file (write)))
(neverallow recovery_refresh privapp_data_file (dir (write)))
(neverallow recovery_refresh privapp_data_file (lnk_file (write)))
(neverallow recovery_refresh privapp_data_file (chr_file (write)))
(neverallow recovery_refresh privapp_data_file (blk_file (write)))
(neverallow recovery_refresh privapp_data_file (sock_file (write)))
(neverallow recovery_refresh privapp_data_file (fifo_file (write)))
;;* lme

(allow runas adbd (fd (use)))
(allow runas adbd (process (sigchld)))
(allow runas adbd (unix_stream_socket (read write)))
(allow runas shell (fd (use)))
(allow runas shell (fifo_file (read write)))
(allow runas shell (unix_stream_socket (read write)))
(allow runas devpts (chr_file (ioctl read write)))
(allow runas shell_data_file (file (read write)))
(allow runas system_data_file (file (ioctl read getattr lock map open)))
(allow runas system_data_file (lnk_file (getattr)))
(allow runas packages_list_file (file (ioctl read getattr lock map open)))
(allow runas system_data_file (lnk_file (read)))
(dontaudit runas self (capability (dac_override dac_read_search)))
(dontaudit runas self (cap_userns (dac_override dac_read_search)))
(allow runas app_data_file (dir (getattr search)))
(allow runas self (capability (setgid setuid)))
(allow runas self (cap_userns (setgid setuid)))
(allow runas selinuxfs (dir (ioctl read getattr lock search open)))
(allow runas selinuxfs (file (ioctl read getattr lock map open)))
(allow runas selinuxfs (lnk_file (ioctl read getattr lock map open)))
(allow runas selinuxfs (file (write lock append map open)))
(allow runas kernel (security (check_context)))
(allow runas self (process (setcurrent)))
(allow runas base_typeattr_464 (process (dyntransition)))
(allow runas seapp_contexts_file (file (ioctl read getattr lock map open)))
;;* lmx 42 system/sepolicy/prebuilts/api/29.0/public/runas.te

(neverallow runas self (capability (chown dac_override dac_read_search fowner fsetid kill setpcap linux_immutable net_bind_service net_broadcast net_admin net_raw ipc_lock ipc_owner sys_module sys_rawio sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_nice sys_resource sys_time sys_tty_config mknod lease audit_write audit_control setfcap)))
(neverallow runas self (cap_userns (chown dac_override dac_read_search fowner fsetid kill setpcap linux_immutable net_bind_service net_broadcast net_admin net_raw ipc_lock ipc_owner sys_module sys_rawio sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_nice sys_resource sys_time sys_tty_config mknod lease audit_write audit_control setfcap)))
;;* lme

;;* lmx 43 system/sepolicy/prebuilts/api/29.0/public/runas.te

(neverallow runas self (capability2 (mac_override mac_admin syslog wake_alarm block_suspend audit_read)))
(neverallow runas self (cap2_userns (mac_override mac_admin syslog wake_alarm block_suspend audit_read)))
;;* lme

(allow scheduler_service_server fwk_scheduler_hwservice (hwservice_manager (add find)))
(allow scheduler_service_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 1 system/sepolicy/prebuilts/api/29.0/public/scheduler_service_server.te

(neverallow base_typeattr_465 fwk_scheduler_hwservice (hwservice_manager (add)))
;;* lme

(allow sdcardd cgroup (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
(allow sdcardd fuse_device (chr_file (ioctl read write getattr lock append map open)))
(allow sdcardd rootfs (dir (mounton)))
(allow sdcardd sdcardfs (filesystem (remount)))
(allow sdcardd tmpfs (dir (ioctl read getattr lock search open)))
(allow sdcardd mnt_media_rw_file (dir (ioctl read getattr lock search open)))
(allow sdcardd storage_file (dir (search)))
(allow sdcardd storage_stub_file (dir (mounton search)))
(allow sdcardd sdcard_type (filesystem (mount unmount)))
(allow sdcardd self (capability (dac_override dac_read_search setgid setuid sys_admin sys_resource)))
(allow sdcardd self (cap_userns (dac_override dac_read_search setgid setuid sys_admin sys_resource)))
(allow sdcardd sdcard_type (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
(allow sdcardd sdcard_type (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow sdcardd media_rw_data_file (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
(allow sdcardd media_rw_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow sdcardd system_data_file (file (ioctl read getattr lock map open)))
(allow sdcardd packages_list_file (file (ioctl read getattr lock map open)))
(allow sdcardd install_data_file (file (ioctl read getattr lock map open)))
(allow sdcardd vold (fd (use)))
(allow sdcardd vold (fifo_file (read write getattr)))
(allow sdcardd mnt_expand_file (dir (search)))
(allow sdcardd proc_filesystems (file (ioctl read getattr lock map open)))
;;* lmx 44 system/sepolicy/prebuilts/api/29.0/public/sdcardd.te

(neverallow init sdcardd_exec (file (execute)))
;;* lme

;;* lmx 45 system/sepolicy/prebuilts/api/29.0/public/sdcardd.te

(neverallow init sdcardd (process (transition dyntransition)))
;;* lme

(allow sensor_service_server fwk_sensor_hwservice (hwservice_manager (add find)))
(allow sensor_service_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 1 system/sepolicy/prebuilts/api/29.0/public/sensor_service_server.te

(neverallow base_typeattr_466 fwk_sensor_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 199 system/sepolicy/prebuilts/api/29.0/public/service.te

(neverallow domain base_typeattr_467 (service_manager (add find)))
;;* lme

(allow servicemanager self (binder (set_context_mgr)))
(allow servicemanager base_typeattr_468 (binder (transfer)))
(allow servicemanager service_contexts_file (file (ioctl read getattr lock map open)))
(allow servicemanager selinuxfs (dir (ioctl read getattr lock search open)))
(allow servicemanager selinuxfs (file (ioctl read getattr lock map open)))
(allow servicemanager selinuxfs (lnk_file (ioctl read getattr lock map open)))
(allow servicemanager selinuxfs (file (write lock append map open)))
(allow servicemanager kernel (security (compute_av)))
(allow servicemanager self (netlink_selinux_socket (read write create getattr setattr lock relabelfrom relabelto append bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(allow sgdisk block_device (dir (search)))
(allow sgdisk vold_device (blk_file (ioctl read write getattr lock append map open)))
(allowx sgdisk vold_device (ioctl blk_file (0x301)))
(allowx sgdisk vold_device (ioctl blk_file (0x1260)))
(allowx sgdisk vold_device (ioctl blk_file (0x125f)))
(allow sgdisk devpts (chr_file (ioctl read write getattr)))
(allow sgdisk vold (fd (use)))
(allow sgdisk vold (fifo_file (read write getattr)))
(allow sgdisk self (capability (sys_admin)))
(allow sgdisk self (cap_userns (sys_admin)))
;;* lmx 33 system/sepolicy/prebuilts/api/29.0/public/sgdisk.te

(neverallow base_typeattr_293 sgdisk (process (transition)))
;;* lme

;;* lmx 34 system/sepolicy/prebuilts/api/29.0/public/sgdisk.te

(neverallow base_typeattr_167 sgdisk (process (dyntransition)))
;;* lme

;;* lmx 35 system/sepolicy/prebuilts/api/29.0/public/sgdisk.te

(neverallow sgdisk base_typeattr_469 (file (entrypoint)))
;;* lme

(allow shared_relro shared_relro_file (dir (ioctl read write getattr lock add_name remove_name search open)))
(allow shared_relro shared_relro_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow shared_relro activity_service (service_manager (find)))
(allow shared_relro webviewupdate_service (service_manager (find)))
(allow shared_relro package_service (service_manager (find)))
(allow shell logcat_exec (file (ioctl read getattr lock map execute execute_no_trans open)))
(allow shell logdr_socket (sock_file (write)))
(allow shell logd (unix_stream_socket (connectto)))
(allow shell logd_socket (sock_file (write)))
(allow shell logd (unix_stream_socket (connectto)))
(allow shell pstorefs (dir (search)))
(allow shell pstorefs (file (ioctl read getattr lock map open)))
(allow shell rootfs (dir (ioctl read getattr lock search open)))
(allow shell anr_data_file (dir (ioctl read getattr lock search open)))
(allow shell anr_data_file (file (ioctl read getattr lock map open)))
(allow shell shell_data_file (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
(allow shell shell_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow shell shell_data_file (file (ioctl read getattr lock map execute execute_no_trans open)))
(allow shell shell_data_file (lnk_file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow shell trace_data_file (file (ioctl read getattr lock map unlink open)))
(allow shell trace_data_file (dir (ioctl read write getattr lock remove_name search open)))
(allow shell profman_dump_data_file (dir (ioctl read write getattr lock remove_name search open)))
(allow shell profman_dump_data_file (file (ioctl read getattr lock map unlink open)))
(allow shell dumpstate_socket (sock_file (write)))
(allow shell dumpstate (unix_stream_socket (connectto)))
(allow shell devpts (chr_file (ioctl read write getattr lock append map open)))
(allow shell tty_device (chr_file (ioctl read write getattr lock append map open)))
(allow shell console_device (chr_file (ioctl read write getattr lock append map open)))
(allow shell input_device (dir (ioctl read getattr lock search open)))
(allow shell input_device (chr_file (ioctl read getattr lock map open)))
(allow shell system_file (dir (ioctl read getattr lock search open)))
(allow shell system_file (file (ioctl read getattr lock map open)))
(allow shell system_file (lnk_file (ioctl read getattr lock map open)))
(allow shell system_file (file (getattr map execute execute_no_trans)))
(allow shell toolbox_exec (file (ioctl read getattr lock map execute execute_no_trans open)))
(allow shell tzdatacheck_exec (file (ioctl read getattr lock map execute execute_no_trans open)))
(allow shell shell_exec (file (ioctl read getattr lock map execute execute_no_trans open)))
(allow shell zygote_exec (file (ioctl read getattr lock map execute execute_no_trans open)))
(allow shell apk_data_file (dir (ioctl read getattr lock search open)))
(allow shell apk_data_file (file (ioctl read getattr lock map open)))
(allow shell apk_data_file (lnk_file (ioctl read getattr lock map open)))
(allow shell property_socket (sock_file (write)))
(allow shell init (unix_stream_socket (connectto)))
(allow shell shell_prop (property_service (set)))
(allow shell shell_prop (file (read getattr map open)))
(allow shell property_socket (sock_file (write)))
(allow shell init (unix_stream_socket (connectto)))
(allow shell ctl_bugreport_prop (property_service (set)))
(allow shell ctl_bugreport_prop (file (read getattr map open)))
(allow shell property_socket (sock_file (write)))
(allow shell init (unix_stream_socket (connectto)))
(allow shell ctl_dumpstate_prop (property_service (set)))
(allow shell ctl_dumpstate_prop (file (read getattr map open)))
(allow shell property_socket (sock_file (write)))
(allow shell init (unix_stream_socket (connectto)))
(allow shell dumpstate_prop (property_service (set)))
(allow shell dumpstate_prop (file (read getattr map open)))
(allow shell property_socket (sock_file (write)))
(allow shell init (unix_stream_socket (connectto)))
(allow shell exported_dumpstate_prop (property_service (set)))
(allow shell exported_dumpstate_prop (file (read getattr map open)))
(allow shell property_socket (sock_file (write)))
(allow shell init (unix_stream_socket (connectto)))
(allow shell debug_prop (property_service (set)))
(allow shell debug_prop (file (read getattr map open)))
(allow shell property_socket (sock_file (write)))
(allow shell init (unix_stream_socket (connectto)))
(allow shell powerctl_prop (property_service (set)))
(allow shell powerctl_prop (file (read getattr map open)))
(allow shell property_socket (sock_file (write)))
(allow shell init (unix_stream_socket (connectto)))
(allow shell log_tag_prop (property_service (set)))
(allow shell log_tag_prop (file (read getattr map open)))
(allow shell property_socket (sock_file (write)))
(allow shell init (unix_stream_socket (connectto)))
(allow shell wifi_log_prop (property_service (set)))
(allow shell wifi_log_prop (file (read getattr map open)))
(allow shell property_socket (sock_file (write)))
(allow shell init (unix_stream_socket (connectto)))
(allow shell traced_enabled_prop (property_service (set)))
(allow shell traced_enabled_prop (file (read getattr map open)))
(allow shell property_socket (sock_file (write)))
(allow shell init (unix_stream_socket (connectto)))
(allow shell heapprofd_enabled_prop (property_service (set)))
(allow shell heapprofd_enabled_prop (file (read getattr map open)))
(allow shell property_socket (sock_file (write)))
(allow shell init (unix_stream_socket (connectto)))
(allow shell ctl_gsid_prop (property_service (set)))
(allow shell ctl_gsid_prop (file (read getattr map open)))
(allow shell property_socket (sock_file (write)))
(allow shell init (unix_stream_socket (connectto)))
(allow shell dynamic_system_prop (property_service (set)))
(allow shell dynamic_system_prop (file (read getattr map open)))
(allow shell serialno_prop (file (read getattr map open)))
(allow shell vendor_security_patch_level_prop (file (read getattr map open)))
(allow shell device_logging_prop (file (read getattr map open)))
(allow shell bootloader_boot_reason_prop (file (read getattr map open)))
(allow shell last_boot_reason_prop (file (read getattr map open)))
(allow shell system_boot_reason_prop (file (read getattr map open)))
(allow shell servicemanager (service_manager (list)))
(allow shell base_typeattr_470 (service_manager (find)))
(allow shell dumpstate (binder (call)))
(allow shell hwservicemanager (binder (call transfer)))
(allow hwservicemanager shell (binder (call transfer)))
(allow hwservicemanager shell (dir (search)))
(allow hwservicemanager shell (file (read map open)))
(allow hwservicemanager shell (process (getattr)))
(allow shell hwservicemanager (hwservice_manager (list)))
(allow shell proc_net_type (dir (ioctl read getattr lock search open)))
(allow shell proc_net_type (file (ioctl read getattr lock map open)))
(allow shell proc_net_type (lnk_file (ioctl read getattr lock map open)))
(allow shell proc_asound (file (ioctl read getattr lock map open)))
(allow shell proc_filesystems (file (ioctl read getattr lock map open)))
(allow shell proc_interrupts (file (ioctl read getattr lock map open)))
(allow shell proc_loadavg (file (ioctl read getattr lock map open)))
(allow shell proc_meminfo (file (ioctl read getattr lock map open)))
(allow shell proc_modules (file (ioctl read getattr lock map open)))
(allow shell proc_pid_max (file (ioctl read getattr lock map open)))
(allow shell proc_slabinfo (file (ioctl read getattr lock map open)))
(allow shell proc_stat (file (ioctl read getattr lock map open)))
(allow shell proc_timer (file (ioctl read getattr lock map open)))
(allow shell proc_uptime (file (ioctl read getattr lock map open)))
(allow shell proc_version (file (ioctl read getattr lock map open)))
(allow shell proc_zoneinfo (file (ioctl read getattr lock map open)))
(allow shell sysfs_net (dir (ioctl read getattr lock search open)))
(allow shell cgroup (dir (ioctl read getattr lock search open)))
(allow shell cgroup (file (ioctl read getattr lock map open)))
(allow shell cgroup (lnk_file (ioctl read getattr lock map open)))
(allow shell domain (dir (read getattr search open)))
(allow shell domain (file (read getattr open)))
(allow shell domain (lnk_file (read getattr open)))
(allow shell labeledfs (filesystem (getattr)))
(allow shell proc (filesystem (getattr)))
(allow shell device (dir (getattr)))
(allow shell domain (process (getattr)))
(allow shell selinuxfs (dir (ioctl read getattr lock search open)))
(allow shell selinuxfs (file (ioctl read getattr lock map open)))
(allow shell bootchart_data_file (dir (ioctl read write getattr lock add_name remove_name search open)))
(allow shell bootchart_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow shell self (process (ptrace)))
(allow shell sysfs (dir (ioctl read getattr lock search open)))
(allow shell sysfs_batteryinfo (dir (ioctl read getattr lock search open)))
(allow shell sysfs_batteryinfo (file (ioctl read getattr lock map open)))
(allow shell ion_device (chr_file (ioctl read write getattr lock append map open)))
(allow shell dev_type (dir (ioctl read getattr lock search open)))
(allow shell dev_type (chr_file (getattr)))
(allow shell proc (lnk_file (getattr)))
(allow shell dev_type (blk_file (getattr)))
(allow shell file_contexts_file (file (ioctl read getattr lock map open)))
(allow shell property_contexts_file (file (ioctl read getattr lock map open)))
(allow shell seapp_contexts_file (file (ioctl read getattr lock map open)))
(allow shell service_contexts_file (file (ioctl read getattr lock map open)))
(allow shell sepolicy_file (file (ioctl read getattr lock map open)))
(allow shell vendor_shell_exec (file (ioctl read getattr lock map execute execute_no_trans open)))
;;* lmx 232 system/sepolicy/prebuilts/api/29.0/public/shell.te

(neverallow shell file_type (file (link)))
;;* lme

;;* lmx 235 system/sepolicy/prebuilts/api/29.0/public/shell.te

(neverallowx shell domain (ioctl tcp_socket (0x6900 0x6902)))
(neverallowx shell domain (ioctl udp_socket (0x6900 0x6902)))
(neverallowx shell domain (ioctl rawip_socket (0x6900 0x6902)))
;;* lme

;;* lmx 235 system/sepolicy/prebuilts/api/29.0/public/shell.te

(neverallowx shell domain (ioctl tcp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx shell domain (ioctl udp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx shell domain (ioctl rawip_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
;;* lme

;;* lmx 235 system/sepolicy/prebuilts/api/29.0/public/shell.te

(neverallowx shell domain (ioctl tcp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx shell domain (ioctl udp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx shell domain (ioctl rawip_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
;;* lme

;;* lmx 243 system/sepolicy/prebuilts/api/29.0/public/shell.te

(neverallow shell hw_random_device (chr_file (ioctl read write create setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod open audit_access)))
(neverallow shell port_device (chr_file (ioctl read write create setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod open audit_access)))
(neverallow shell fuse_device (chr_file (ioctl read write create setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod open audit_access)))
;;* lme

;;* lmx 246 system/sepolicy/prebuilts/api/29.0/public/shell.te

(neverallow shell dev_type (blk_file (ioctl read write create setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton open audit_access execmod)))
;;* lme

;;* lmx 255 system/sepolicy/prebuilts/api/29.0/public/shell.te

(neverallow shell input_device (chr_file (write create setattr relabelfrom append unlink link rename)))
;;* lme

(allow simpleperf_app_runner adbd (fd (use)))
(allow simpleperf_app_runner shell (fd (use)))
(allow simpleperf_app_runner devpts (chr_file (ioctl read write)))
(allow simpleperf_app_runner system_data_file (file (ioctl read getattr lock map open)))
(allow simpleperf_app_runner system_data_file (lnk_file (getattr)))
(allow simpleperf_app_runner packages_list_file (file (ioctl read getattr lock map open)))
(allow simpleperf_app_runner system_data_file (lnk_file (read)))
(allow simpleperf_app_runner self (capability (setgid setuid)))
(allow simpleperf_app_runner self (cap_userns (setgid setuid)))
(allow simpleperf_app_runner selinuxfs (dir (ioctl read getattr lock search open)))
(allow simpleperf_app_runner selinuxfs (file (ioctl read getattr lock map open)))
(allow simpleperf_app_runner selinuxfs (lnk_file (ioctl read getattr lock map open)))
(allow simpleperf_app_runner selinuxfs (file (write lock append map open)))
(allow simpleperf_app_runner kernel (security (check_context)))
(allow simpleperf_app_runner self (process (setcurrent)))
(allow simpleperf_app_runner untrusted_app_all (process (dyntransition)))
(allow simpleperf_app_runner seapp_contexts_file (file (ioctl read getattr lock map open)))
(allow simpleperf_app_runner shell (fifo_file (read)))
(allow simpleperf_app_runner shell_data_file (dir (getattr search)))
(allow simpleperf_app_runner shell_data_file (file (write getattr)))
;;* lmx 42 system/sepolicy/prebuilts/api/29.0/public/simpleperf_app_runner.te

(neverallow simpleperf_app_runner self (capability (chown dac_override dac_read_search fowner fsetid kill setpcap linux_immutable net_bind_service net_broadcast net_admin net_raw ipc_lock ipc_owner sys_module sys_rawio sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_nice sys_resource sys_time sys_tty_config mknod lease audit_write audit_control setfcap)))
(neverallow simpleperf_app_runner self (cap_userns (chown dac_override dac_read_search fowner fsetid kill setpcap linux_immutable net_bind_service net_broadcast net_admin net_raw ipc_lock ipc_owner sys_module sys_rawio sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_nice sys_resource sys_time sys_tty_config mknod lease audit_write audit_control setfcap)))
;;* lme

;;* lmx 43 system/sepolicy/prebuilts/api/29.0/public/simpleperf_app_runner.te

(neverallow simpleperf_app_runner self (capability2 (mac_override mac_admin syslog wake_alarm block_suspend audit_read)))
(neverallow simpleperf_app_runner self (cap2_userns (mac_override mac_admin syslog wake_alarm block_suspend audit_read)))
;;* lme

(allow slideshow kmsg_device (chr_file (ioctl read write getattr lock append map open)))
(allow slideshow sysfs_wake_lock (file (ioctl read write getattr lock append map open)))
(allow slideshow self (capability2 (block_suspend)))
(allow slideshow self (cap2_userns (block_suspend)))
(allow slideshow system_suspend_server (binder (call transfer)))
(allow system_suspend_server slideshow (binder (transfer)))
(allow slideshow system_suspend_server (fd (use)))
(allow slideshow system_suspend_hwservice (hwservice_manager (find)))
(allow slideshow hwservicemanager (binder (call transfer)))
(allow hwservicemanager slideshow (binder (call transfer)))
(allow hwservicemanager slideshow (dir (search)))
(allow hwservicemanager slideshow (file (read map open)))
(allow hwservicemanager slideshow (process (getattr)))
(allow slideshow hwservicemanager_prop (file (read getattr map open)))
(allow slideshow hidl_manager_hwservice (hwservice_manager (find)))
(allow slideshow device (dir (ioctl read getattr lock search open)))
(allow slideshow self (capability (sys_tty_config)))
(allow slideshow self (cap_userns (sys_tty_config)))
(allow slideshow graphics_device (dir (ioctl read getattr lock search open)))
(allow slideshow graphics_device (chr_file (ioctl read write getattr lock append map open)))
(allow slideshow input_device (dir (ioctl read getattr lock search open)))
(allow slideshow input_device (chr_file (ioctl read getattr lock map open)))
(allow slideshow tty_device (chr_file (ioctl read write getattr lock append map open)))
(allow stats_service_server fwk_stats_hwservice (hwservice_manager (add find)))
(allow stats_service_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 1 system/sepolicy/prebuilts/api/29.0/public/stats_service_server.te

(neverallow base_typeattr_471 fwk_stats_hwservice (hwservice_manager (add)))
;;* lme

(allow statsd servicemanager (binder (call transfer)))
(allow servicemanager statsd (dir (search)))
(allow servicemanager statsd (file (read open)))
(allow servicemanager statsd (process (getattr)))
(allow statsd domain (dir (ioctl read getattr lock search open)))
(allow statsd domain (file (ioctl read getattr lock map open)))
(allow statsd domain (lnk_file (ioctl read getattr lock map open)))
(allow statsd devpts (chr_file (ioctl read write getattr)))
(allow statsd shell_exec (file (ioctl read getattr lock map execute execute_no_trans open)))
(allow statsd system_file (file (execute_no_trans)))
(allow statsd toolbox_exec (file (ioctl read getattr lock map execute execute_no_trans open)))
(allow statsd stats_data_file (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
(allow statsd stats_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow statsd appdomain (binder (call transfer)))
(allow appdomain statsd (binder (transfer)))
(allow statsd appdomain (fd (use)))
(allow statsd healthd (binder (call transfer)))
(allow healthd statsd (binder (transfer)))
(allow statsd healthd (fd (use)))
(allow statsd incidentd (binder (call transfer)))
(allow incidentd statsd (binder (transfer)))
(allow statsd incidentd (fd (use)))
(allow statsd system_server (binder (call transfer)))
(allow system_server statsd (binder (transfer)))
(allow statsd system_server (fd (use)))
(allow statsd gpu_service (service_manager (find)))
(allow statsd gpuservice (binder (call transfer)))
(allow gpuservice statsd (binder (transfer)))
(allow statsd gpuservice (fd (use)))
(allow statsd logcat_exec (file (ioctl read getattr lock map execute execute_no_trans open)))
(allow statsd logdr_socket (sock_file (write)))
(allow statsd logd (unix_stream_socket (connectto)))
(allow statsd logd_socket (sock_file (write)))
(allow statsd logd (unix_stream_socket (connectto)))
(allow statsd app_api_service (service_manager (find)))
(allow statsd system_api_service (service_manager (find)))
(allow statsd incident_service (service_manager (find)))
(allow statsd hal_health_hwservice (hwservice_manager (find)))
(allow statsd dumpstate (fd (use)))
(allow statsd dumpstate (fifo_file (write getattr)))
(allow statsd proc_uid_cputime_showstat (file (read getattr open)))
(allow statsd adbd (fd (use)))
(allow statsd adbd (unix_stream_socket (read write getattr)))
(allow statsd shell (fifo_file (read write getattr)))
(allow statsd statsdw_socket (sock_file (write)))
(allow statsd statsd (unix_dgram_socket (sendto)))
;;* lmx 81 system/sepolicy/prebuilts/api/29.0/public/statsd.te

(neverallow base_typeattr_472 stats_data_file (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod open audit_access)))
;;* lme

;;* lmx 84 system/sepolicy/prebuilts/api/29.0/public/statsd.te

(neverallow base_typeattr_472 stats_data_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton add_name remove_name reparent search rmdir open audit_access execmod)))
;;* lme

(allow system_suspend_server hwservicemanager (binder (call transfer)))
(allow hwservicemanager system_suspend_server (binder (call transfer)))
(allow hwservicemanager system_suspend_server (dir (search)))
(allow hwservicemanager system_suspend_server (file (read map open)))
(allow hwservicemanager system_suspend_server (process (getattr)))
(allow system_suspend_server hwservicemanager_prop (file (read getattr map open)))
(allow system_suspend_server system_suspend_hwservice (hwservice_manager (add find)))
(allow system_suspend_server hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 6 system/sepolicy/prebuilts/api/29.0/public/system_suspend_server.te

(neverallow base_typeattr_473 system_suspend_hwservice (hwservice_manager (add)))
;;* lme

(allow tee fingerprint_vendor_data_file (dir (ioctl read write getattr lock add_name remove_name search open)))
(allow tee fingerprint_vendor_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow tombstoned domain (fd (use)))
(allow tombstoned domain (fifo_file (write)))
(allow tombstoned domain (dir (ioctl read getattr lock search open)))
(allow tombstoned domain (file (ioctl read getattr lock map open)))
(allow tombstoned tombstone_data_file (dir (ioctl read write getattr lock add_name remove_name search open)))
(allow tombstoned tombstone_data_file (file (ioctl read write create getattr setattr lock append map unlink link rename open)))
(allow tombstoned anr_data_file (dir (ioctl read write getattr lock add_name remove_name search open)))
(allow tombstoned anr_data_file (file (create getattr append unlink link open)))
(allow toolbox tmpfs (chr_file (ioctl read write)))
(allow toolbox devpts (chr_file (ioctl read write getattr)))
(allow toolbox block_device (dir (search)))
(allow toolbox swap_block_device (blk_file (ioctl read write getattr lock append map open)))
;;* lmx 23 system/sepolicy/prebuilts/api/29.0/public/toolbox.te

(neverallow base_typeattr_166 toolbox (process (transition)))
;;* lme

;;* lmx 24 system/sepolicy/prebuilts/api/29.0/public/toolbox.te

(neverallow base_typeattr_167 toolbox (process (dyntransition)))
;;* lme

;;* lmx 25 system/sepolicy/prebuilts/api/29.0/public/toolbox.te

(neverallow toolbox base_typeattr_474 (file (entrypoint)))
;;* lme

(allow traceur_app servicemanager (service_manager (list)))
(allow traceur_app hwservicemanager (hwservice_manager (list)))
(allow traceur_app property_socket (sock_file (write)))
(allow traceur_app init (unix_stream_socket (connectto)))
(allow traceur_app traced_enabled_prop (property_service (set)))
(allow traceur_app traced_enabled_prop (file (read getattr map open)))
(allow traceur_app property_socket (sock_file (write)))
(allow traceur_app init (unix_stream_socket (connectto)))
(allow traceur_app debug_prop (property_service (set)))
(allow traceur_app debug_prop (file (read getattr map open)))
(allow traceur_app base_typeattr_475 (service_manager (find)))
(dontaudit traceur_app service_manager_type (service_manager (find)))
(dontaudit traceur_app hwservice_manager_type (hwservice_manager (find)))
(dontaudit traceur_app domain (binder (call)))
(allow tzdatacheck zoneinfo_data_file (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
(allow tzdatacheck zoneinfo_data_file (file (unlink)))
;;* lmx 18 system/sepolicy/prebuilts/api/29.0/public/tzdatacheck.te

(neverallow base_typeattr_476 zoneinfo_data_file (file (write create setattr relabelfrom append unlink link rename)))
;;* lme

;;* lmx 19 system/sepolicy/prebuilts/api/29.0/public/tzdatacheck.te

(neverallow base_typeattr_476 zoneinfo_data_file (dir (write create setattr relabelfrom link rename add_name remove_name reparent rmdir)))
;;* lme

(allow ueventd kmsg_device (chr_file (ioctl read write getattr lock append map open)))
(allow ueventd self (capability (chown dac_override dac_read_search fowner fsetid setgid net_admin sys_rawio mknod)))
(allow ueventd self (cap_userns (chown dac_override dac_read_search fowner fsetid setgid net_admin sys_rawio mknod)))
(allow ueventd device (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow ueventd rootfs (dir (ioctl read getattr lock search open)))
(allow ueventd rootfs (file (ioctl read getattr lock map open)))
(allow ueventd rootfs (lnk_file (ioctl read getattr lock map open)))
(allow ueventd sysfs_type (file (write lock append map open)))
(allow ueventd sysfs_type (dir (ioctl read getattr lock search open)))
(allow ueventd sysfs_type (file (ioctl read getattr lock map open)))
(allow ueventd sysfs_type (lnk_file (ioctl read getattr lock map open)))
(allow ueventd sysfs_type (file (setattr relabelfrom relabelto)))
(allow ueventd sysfs_type (lnk_file (setattr relabelfrom relabelto)))
(allow ueventd sysfs_type (dir (setattr relabelfrom relabelto)))
(allow ueventd tmpfs (chr_file (ioctl read write getattr lock append map open)))
(allow ueventd dev_type (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
(allow ueventd dev_type (lnk_file (create unlink)))
(allow ueventd dev_type (chr_file (create getattr setattr unlink)))
(allow ueventd dev_type (blk_file (create getattr setattr relabelfrom relabelto unlink)))
(allow ueventd self (netlink_kobject_uevent_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
(allow ueventd efs_file (dir (search)))
(allow ueventd efs_file (file (ioctl read getattr lock map open)))
(allow ueventd selinuxfs (dir (ioctl read getattr lock search open)))
(allow ueventd selinuxfs (file (ioctl read getattr lock map open)))
(allow ueventd selinuxfs (lnk_file (ioctl read getattr lock map open)))
(allow ueventd base_typeattr_477 (dir (ioctl read getattr lock search open)))
(allow ueventd base_typeattr_477 (file (ioctl read getattr lock map open)))
(allow ueventd base_typeattr_477 (lnk_file (ioctl read getattr lock map open)))
(allow ueventd file_contexts_file (file (ioctl read getattr lock map open)))
(allow ueventd self (process (setfscreate)))
(allow ueventd proc_cmdline (file (ioctl read getattr lock map open)))
(dontaudit ueventd postinstall_mnt_dir (dir (getattr)))
(allow ueventd self (capability (sys_module)))
(allow ueventd self (cap_userns (sys_module)))
(allow ueventd vendor_file (system (module_load)))
(allow ueventd kernel (key (search)))
(allow ueventd system_bootstrap_lib_file (dir (ioctl read getattr lock search open)))
(allow ueventd system_bootstrap_lib_file (file (read getattr map execute open)))
;;* lmx 69 system/sepolicy/prebuilts/api/29.0/public/ueventd.te

(neverallow ueventd property_socket (sock_file (write)))
;;* lme

;;* lmx 70 system/sepolicy/prebuilts/api/29.0/public/ueventd.te

(neverallow ueventd init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 71 system/sepolicy/prebuilts/api/29.0/public/ueventd.te

(neverallow ueventd property_type (property_service (set)))
;;* lme

;;* lmx 74 system/sepolicy/prebuilts/api/29.0/public/ueventd.te

(neverallow ueventd dev_type (blk_file (ioctl read write lock append map link rename execute quotaon mounton open audit_access execmod)))
;;* lme

;;* lmx 77 system/sepolicy/prebuilts/api/29.0/public/ueventd.te

(neverallow ueventd port_device (chr_file (ioctl read write lock relabelfrom append map link rename execute quotaon mounton execute_no_trans entrypoint execmod open audit_access)))
;;* lme

;;* lmx 80 system/sepolicy/prebuilts/api/29.0/public/ueventd.te

(neverallow base_typeattr_167 ueventd (process (ptrace)))
;;* lme

(allow uncrypt self (capability (dac_override dac_read_search)))
(allow uncrypt self (cap_userns (dac_override dac_read_search)))
(allow uncrypt cache_file (dir (search)))
(allow uncrypt cache_recovery_file (dir (ioctl read write getattr lock add_name remove_name search open)))
(allow uncrypt cache_recovery_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow uncrypt ota_package_file (dir (ioctl read getattr lock search open)))
(allow uncrypt ota_package_file (file (ioctl read getattr lock map open)))
(allow uncrypt uncrypt_socket (sock_file (write)))
(allow uncrypt uncrypt (unix_stream_socket (connectto)))
(allow uncrypt property_socket (sock_file (write)))
(allow uncrypt init (unix_stream_socket (connectto)))
(allow uncrypt powerctl_prop (property_service (set)))
(allow uncrypt powerctl_prop (file (read getattr map open)))
(allow uncrypt self (capability (sys_rawio)))
(allow uncrypt self (cap_userns (sys_rawio)))
(allow uncrypt misc_block_device (blk_file (write lock append map open)))
(allow uncrypt block_device (dir (ioctl read getattr lock search open)))
(allow uncrypt userdata_block_device (blk_file (write lock append map open)))
(allow uncrypt rootfs (dir (ioctl read getattr lock search open)))
(allow uncrypt rootfs (file (ioctl read getattr lock map open)))
(allow uncrypt rootfs (lnk_file (ioctl read getattr lock map open)))
(allow uncrypt proc_cmdline (file (ioctl read getattr lock map open)))
(allow uncrypt sysfs_dt_firmware_android (dir (ioctl read getattr lock search open)))
(allow uncrypt sysfs_dt_firmware_android (file (ioctl read getattr lock map open)))
(allow uncrypt sysfs_dt_firmware_android (lnk_file (ioctl read getattr lock map open)))
(allow update_engine self (process (setsched)))
(allow update_engine self (capability (fowner sys_admin)))
(allow update_engine self (cap_userns (fowner sys_admin)))
(dontaudit update_engine self (capability (fsetid)))
(dontaudit update_engine self (cap_userns (fsetid)))
(allow update_engine kmsg_device (chr_file (write getattr lock append map open)))
(allow update_engine update_engine_exec (file (ioctl read getattr lock map execute execute_no_trans open)))
(allow update_engine sysfs_wake_lock (file (ioctl read write getattr lock append map open)))
(allow update_engine self (capability2 (block_suspend)))
(allow update_engine self (cap2_userns (block_suspend)))
(allow update_engine system_suspend_server (binder (call transfer)))
(allow system_suspend_server update_engine (binder (transfer)))
(allow update_engine system_suspend_server (fd (use)))
(allow update_engine system_suspend_hwservice (hwservice_manager (find)))
(allow update_engine hwservicemanager (binder (call transfer)))
(allow hwservicemanager update_engine (binder (call transfer)))
(allow hwservicemanager update_engine (dir (search)))
(allow hwservicemanager update_engine (file (read map open)))
(allow hwservicemanager update_engine (process (getattr)))
(allow update_engine hwservicemanager_prop (file (read getattr map open)))
(allow update_engine hidl_manager_hwservice (hwservice_manager (find)))
(dontaudit update_engine kernel (process (setsched)))
(dontaudit update_engine self (capability (sys_rawio)))
(dontaudit update_engine self (cap_userns (sys_rawio)))
(allow update_engine update_engine_data_file (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
(allow update_engine update_engine_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow update_engine update_engine_log_data_file (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
(allow update_engine update_engine_log_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(dontaudit update_engine kernel (system (module_request)))
(allow update_engine servicemanager (binder (call transfer)))
(allow servicemanager update_engine (dir (search)))
(allow servicemanager update_engine (file (read open)))
(allow servicemanager update_engine (process (getattr)))
(allow update_engine update_engine_service (service_manager (add find)))
;;* lmx 37 system/sepolicy/prebuilts/api/29.0/public/update_engine.te

(neverallow base_typeattr_478 update_engine_service (service_manager (add)))
;;* lme

(allow update_engine priv_app (binder (call transfer)))
(allow priv_app update_engine (binder (transfer)))
(allow update_engine priv_app (fd (use)))
(allow update_engine system_server (binder (call transfer)))
(allow system_server update_engine (binder (transfer)))
(allow update_engine system_server (fd (use)))
(allow update_engine ota_package_file (file (ioctl read getattr lock map open)))
(allow update_engine ota_package_file (dir (ioctl read getattr lock search open)))
(allow update_engine proc_misc (file (ioctl read getattr lock map open)))
(allow update_engine system_file (dir (ioctl read getattr lock search open)))
(allow update_engine_common block_device (dir (search)))
(allow update_engine_common boot_block_device (blk_file (ioctl read write getattr lock append map open)))
(allow update_engine_common system_block_device (blk_file (ioctl read write getattr lock append map open)))
(allowx update_engine_common dev_type (ioctl blk_file ((range 0x125d 0x125e) 0x1277 (range 0x127c 0x127d) 0x127f)))
(allow update_engine_common misc_block_device (blk_file (ioctl read write getattr lock append map open)))
(allow update_engine_common rootfs (dir (getattr)))
(allow update_engine_common rootfs (file (ioctl read getattr lock map open)))
(allow update_engine_common postinstall_mnt_dir (dir (getattr mounton search)))
(allow update_engine_common postinstall_file (filesystem (mount unmount relabelfrom relabelto)))
(allow update_engine_common labeledfs (filesystem (relabelfrom)))
(allow update_engine_common postinstall_file (file (ioctl read getattr lock map execute execute_no_trans open)))
(allow update_engine_common postinstall_file (lnk_file (ioctl read getattr lock map open)))
(allow update_engine_common postinstall_file (dir (ioctl read getattr lock search open)))
(allow update_engine_common cache_file (dir (ioctl read getattr lock search open)))
(allow update_engine_common cache_file (file (ioctl read getattr lock map open)))
(allow update_engine_common cache_file (lnk_file (ioctl read getattr lock map open)))
(allow update_engine_common shell_exec (file (ioctl read getattr lock map execute execute_no_trans open)))
(allow update_engine_common postinstall (process (sigkill sigstop signal)))
(allow update_engine_common proc_cmdline (file (ioctl read getattr lock map open)))
(allow update_engine_common sysfs_dt_firmware_android (dir (ioctl read getattr lock search open)))
(allow update_engine_common sysfs_dt_firmware_android (file (ioctl read getattr lock map open)))
(allow update_engine_common sysfs_dt_firmware_android (lnk_file (ioctl read getattr lock map open)))
(allow update_engine_common dm_device (chr_file (ioctl read write getattr lock append map open)))
(allow update_engine_common dm_device (blk_file (ioctl read write getattr lock append map open)))
(allow update_engine_common super_block_device_type (blk_file (ioctl read write getattr lock append map open)))
(allowx update_engine_common super_block_device_type (ioctl blk_file (0x1278 0x127a)))
(allow update_engine_common block_device (dir (ioctl read getattr lock search open)))
(allow update_engine_common statsdw_socket (sock_file (write)))
(allow update_engine_common statsd (unix_dgram_socket (sendto)))
(allow update_verifier block_device (dir (search)))
(allow update_verifier ota_package_file (dir (ioctl read getattr lock search open)))
(allow update_verifier ota_package_file (file (ioctl read getattr lock map open)))
(allow update_verifier sysfs (dir (ioctl read getattr lock search open)))
(allow update_verifier sysfs_dm (dir (ioctl read getattr lock search open)))
(allow update_verifier sysfs_dm (file (ioctl read getattr lock map open)))
(allow update_verifier dm_device (blk_file (ioctl read getattr lock map open)))
(allow update_verifier kmsg_device (chr_file (write getattr lock append map open)))
(allow update_verifier property_socket (sock_file (write)))
(allow update_verifier init (unix_stream_socket (connectto)))
(allow update_verifier powerctl_prop (property_service (set)))
(allow update_verifier powerctl_prop (file (read getattr map open)))
(allow update_verifier vold_service (service_manager (find)))
(allow update_verifier servicemanager (binder (call transfer)))
(allow servicemanager update_verifier (binder (transfer)))
(allow update_verifier servicemanager (fd (use)))
(allow update_verifier vold (binder (call transfer)))
(allow vold update_verifier (binder (transfer)))
(allow update_verifier vold (fd (use)))
(allow usbd property_socket (sock_file (write)))
(allow usbd init (unix_stream_socket (connectto)))
(allow usbd ctl_adbd_prop (property_service (set)))
(allow usbd ctl_adbd_prop (file (read getattr map open)))
(allow vdc devpts (chr_file (ioctl read write getattr lock append map open)))
(allow vdc kmsg_device (chr_file (write getattr lock append map open)))
(allow vdc servicemanager (binder (call transfer)))
(allow servicemanager vdc (dir (search)))
(allow servicemanager vdc (file (read open)))
(allow servicemanager vdc (process (getattr)))
(allow vdc vold (binder (call transfer)))
(allow vold vdc (binder (transfer)))
(allow vdc vold (fd (use)))
(allow vdc vold_service (service_manager (find)))
(allow vendor_init init (unix_stream_socket (read write)))
(allow vendor_init kmsg_device (chr_file (write getattr open)))
(allow vendor_init device (dir (mounton)))
(allow vendor_init rootfs (lnk_file (create unlink)))
(allow vendor_init cgroup (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
(allow vendor_init cgroup (file (write lock append map open)))
(allow vendor_init configfs (dir (mounton)))
(allow vendor_init configfs (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
(allow vendor_init configfs (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow vendor_init configfs (lnk_file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow vendor_init self (capability (dac_override dac_read_search)))
(allow vendor_init self (cap_userns (dac_override dac_read_search)))
(allow vendor_init self (capability (chown fowner fsetid)))
(allow vendor_init self (cap_userns (chown fowner fsetid)))
(allow vendor_init unencrypted_data_file (dir (search)))
(allow vendor_init unencrypted_data_file (file (ioctl read getattr lock map open)))
(allowx vendor_init data_file_type (ioctl dir (0x6613 0x6615)))
(allow vendor_init system_data_file (dir (getattr)))
(allow vendor_init base_typeattr_479 (dir (ioctl read write create getattr setattr relabelfrom add_name remove_name search rmdir open)))
(allow vendor_init unlabeled (file (getattr relabelfrom)))
(allow vendor_init unlabeled (dir (getattr relabelfrom)))
(allow vendor_init unlabeled (lnk_file (getattr relabelfrom)))
(allow vendor_init unlabeled (sock_file (getattr relabelfrom)))
(allow vendor_init unlabeled (fifo_file (getattr relabelfrom)))
(allow vendor_init base_typeattr_480 (file (read write create getattr setattr relabelfrom map unlink open)))
(allow vendor_init base_typeattr_481 (sock_file (read create getattr setattr relabelfrom unlink open)))
(allow vendor_init base_typeattr_481 (fifo_file (read create getattr setattr relabelfrom unlink open)))
(allow vendor_init base_typeattr_482 (lnk_file (create getattr setattr relabelfrom unlink)))
(allow vendor_init base_typeattr_483 (file (relabelto)))
(allow vendor_init base_typeattr_483 (dir (relabelto)))
(allow vendor_init base_typeattr_483 (lnk_file (relabelto)))
(allow vendor_init base_typeattr_483 (chr_file (relabelto)))
(allow vendor_init base_typeattr_483 (blk_file (relabelto)))
(allow vendor_init base_typeattr_483 (sock_file (relabelto)))
(allow vendor_init base_typeattr_483 (fifo_file (relabelto)))
(allow vendor_init dev_type (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
(allow vendor_init dev_type (lnk_file (create)))
(allow vendor_init debugfs_tracing (file (write lock append map open)))
(allow vendor_init base_typeattr_484 (file (read setattr map open)))
(allow vendor_init base_typeattr_485 (dir (read setattr search open)))
(allow vendor_init base_typeattr_486 (chr_file (setattr)))
(allow vendor_init dev_type (blk_file (getattr)))
(allow vendor_init proc_net_type (dir (ioctl read getattr lock search open)))
(allow vendor_init proc_net_type (file (ioctl read getattr lock map open)))
(allow vendor_init proc_net_type (lnk_file (ioctl read getattr lock map open)))
(allow vendor_init proc_net_type (file (write lock append map open)))
(allow vendor_init self (capability (net_admin)))
(allow vendor_init self (cap_userns (net_admin)))
(allow vendor_init proc_page_cluster (file (write lock append map open)))
(allow vendor_init sysfs_type (dir (ioctl read getattr lock search open)))
(allow vendor_init sysfs_type (lnk_file (read)))
(allow vendor_init base_typeattr_487 (file (ioctl read write getattr lock append map open)))
(allow vendor_init self (process (setfscreate)))
(allow vendor_init vendor_file_type (dir (ioctl read getattr lock search open)))
(allow vendor_init vendor_file_type (file (ioctl read getattr lock map open)))
(allow vendor_init vendor_file_type (lnk_file (ioctl read getattr lock map open)))
(allow vendor_init serialno_prop (file (read getattr map open)))
(allow vendor_init self (capability (sys_admin)))
(allow vendor_init self (cap_userns (sys_admin)))
(allow vendor_init misc_block_device (blk_file (write lock append map open)))
(allow vendor_init system_bootstrap_lib_file (dir (ioctl read getattr lock search open)))
(allow vendor_init system_bootstrap_lib_file (file (read getattr map execute open)))
(allow vendor_init file_contexts_file (file (ioctl read getattr lock map open)))
(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init bluetooth_a2dp_offload_prop (property_service (set)))
(allow vendor_init bluetooth_a2dp_offload_prop (file (read getattr map open)))
(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init bluetooth_audio_hal_prop (property_service (set)))
(allow vendor_init bluetooth_audio_hal_prop (file (read getattr map open)))
(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init cpu_variant_prop (property_service (set)))
(allow vendor_init cpu_variant_prop (file (read getattr map open)))
(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init debug_prop (property_service (set)))
(allow vendor_init debug_prop (file (read getattr map open)))
(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init exported_audio_prop (property_service (set)))
(allow vendor_init exported_audio_prop (file (read getattr map open)))
(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init exported_bluetooth_prop (property_service (set)))
(allow vendor_init exported_bluetooth_prop (file (read getattr map open)))
(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init exported_config_prop (property_service (set)))
(allow vendor_init exported_config_prop (file (read getattr map open)))
(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init exported_dalvik_prop (property_service (set)))
(allow vendor_init exported_dalvik_prop (file (read getattr map open)))
(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init exported_default_prop (property_service (set)))
(allow vendor_init exported_default_prop (file (read getattr map open)))
(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init exported_ffs_prop (property_service (set)))
(allow vendor_init exported_ffs_prop (file (read getattr map open)))
(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init exported_overlay_prop (property_service (set)))
(allow vendor_init exported_overlay_prop (file (read getattr map open)))
(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init exported_pm_prop (property_service (set)))
(allow vendor_init exported_pm_prop (file (read getattr map open)))
(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init exported_radio_prop (property_service (set)))
(allow vendor_init exported_radio_prop (file (read getattr map open)))
(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init exported_system_radio_prop (property_service (set)))
(allow vendor_init exported_system_radio_prop (file (read getattr map open)))
(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init exported_wifi_prop (property_service (set)))
(allow vendor_init exported_wifi_prop (file (read getattr map open)))
(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init exported2_config_prop (property_service (set)))
(allow vendor_init exported2_config_prop (file (read getattr map open)))
(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init exported2_system_prop (property_service (set)))
(allow vendor_init exported2_system_prop (file (read getattr map open)))
(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init exported2_vold_prop (property_service (set)))
(allow vendor_init exported2_vold_prop (file (read getattr map open)))
(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init exported3_default_prop (property_service (set)))
(allow vendor_init exported3_default_prop (file (read getattr map open)))
(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init exported3_radio_prop (property_service (set)))
(allow vendor_init exported3_radio_prop (file (read getattr map open)))
(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init logd_prop (property_service (set)))
(allow vendor_init logd_prop (file (read getattr map open)))
(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init log_tag_prop (property_service (set)))
(allow vendor_init log_tag_prop (file (read getattr map open)))
(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init log_prop (property_service (set)))
(allow vendor_init log_prop (file (read getattr map open)))
(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init serialno_prop (property_service (set)))
(allow vendor_init serialno_prop (file (read getattr map open)))
(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init vendor_default_prop (property_service (set)))
(allow vendor_init vendor_default_prop (file (read getattr map open)))
(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init vendor_security_patch_level_prop (property_service (set)))
(allow vendor_init vendor_security_patch_level_prop (file (read getattr map open)))
(allow vendor_init property_socket (sock_file (write)))
(allow vendor_init init (unix_stream_socket (connectto)))
(allow vendor_init wifi_log_prop (property_service (set)))
(allow vendor_init wifi_log_prop (file (read getattr map open)))
(allow vendor_init exported2_radio_prop (file (read getattr map open)))
(allow vendor_init exported3_system_prop (file (read getattr map open)))
(allow vendor_init theme_prop (file (read getattr map open)))
;;* lmx 257 system/sepolicy/prebuilts/api/29.0/public/vendor_init.te

(neverallow vendor_init base_typeattr_488 (socket (connect sendto)))
(neverallow vendor_init base_typeattr_488 (tcp_socket (connect sendto)))
(neverallow vendor_init base_typeattr_488 (udp_socket (connect sendto)))
(neverallow vendor_init base_typeattr_488 (rawip_socket (connect sendto)))
(neverallow vendor_init base_typeattr_488 (netlink_socket (connect sendto)))
(neverallow vendor_init base_typeattr_488 (packet_socket (connect sendto)))
(neverallow vendor_init base_typeattr_488 (key_socket (connect sendto)))
(neverallow vendor_init base_typeattr_488 (unix_stream_socket (connect sendto)))
(neverallow vendor_init base_typeattr_488 (unix_dgram_socket (connect sendto)))
(neverallow vendor_init base_typeattr_488 (netlink_route_socket (connect sendto)))
(neverallow vendor_init base_typeattr_488 (netlink_tcpdiag_socket (connect sendto)))
(neverallow vendor_init base_typeattr_488 (netlink_nflog_socket (connect sendto)))
(neverallow vendor_init base_typeattr_488 (netlink_xfrm_socket (connect sendto)))
(neverallow vendor_init base_typeattr_488 (netlink_selinux_socket (connect sendto)))
(neverallow vendor_init base_typeattr_488 (netlink_audit_socket (connect sendto)))
(neverallow vendor_init base_typeattr_488 (netlink_dnrt_socket (connect sendto)))
(neverallow vendor_init base_typeattr_488 (netlink_kobject_uevent_socket (connect sendto)))
(neverallow vendor_init base_typeattr_488 (appletalk_socket (connect sendto)))
(neverallow vendor_init base_typeattr_488 (tun_socket (connect sendto)))
(neverallow vendor_init base_typeattr_488 (netlink_iscsi_socket (connect sendto)))
(neverallow vendor_init base_typeattr_488 (netlink_fib_lookup_socket (connect sendto)))
(neverallow vendor_init base_typeattr_488 (netlink_connector_socket (connect sendto)))
(neverallow vendor_init base_typeattr_488 (netlink_netfilter_socket (connect sendto)))
(neverallow vendor_init base_typeattr_488 (netlink_generic_socket (connect sendto)))
(neverallow vendor_init base_typeattr_488 (netlink_scsitransport_socket (connect sendto)))
(neverallow vendor_init base_typeattr_488 (netlink_rdma_socket (connect sendto)))
(neverallow vendor_init base_typeattr_488 (netlink_crypto_socket (connect sendto)))
(neverallow vendor_init base_typeattr_488 (sctp_socket (connect sendto)))
(neverallow vendor_init base_typeattr_488 (icmp_socket (connect sendto)))
(neverallow vendor_init base_typeattr_488 (ax25_socket (connect sendto)))
(neverallow vendor_init base_typeattr_488 (ipx_socket (connect sendto)))
(neverallow vendor_init base_typeattr_488 (netrom_socket (connect sendto)))
(neverallow vendor_init base_typeattr_488 (atmpvc_socket (connect sendto)))
(neverallow vendor_init base_typeattr_488 (x25_socket (connect sendto)))
(neverallow vendor_init base_typeattr_488 (rose_socket (connect sendto)))
(neverallow vendor_init base_typeattr_488 (decnet_socket (connect sendto)))
(neverallow vendor_init base_typeattr_488 (atmsvc_socket (connect sendto)))
(neverallow vendor_init base_typeattr_488 (rds_socket (connect sendto)))
(neverallow vendor_init base_typeattr_488 (irda_socket (connect sendto)))
(neverallow vendor_init base_typeattr_488 (pppox_socket (connect sendto)))
(neverallow vendor_init base_typeattr_488 (llc_socket (connect sendto)))
(neverallow vendor_init base_typeattr_488 (can_socket (connect sendto)))
(neverallow vendor_init base_typeattr_488 (tipc_socket (connect sendto)))
(neverallow vendor_init base_typeattr_488 (bluetooth_socket (connect sendto)))
(neverallow vendor_init base_typeattr_488 (iucv_socket (connect sendto)))
(neverallow vendor_init base_typeattr_488 (rxrpc_socket (connect sendto)))
(neverallow vendor_init base_typeattr_488 (isdn_socket (connect sendto)))
(neverallow vendor_init base_typeattr_488 (phonet_socket (connect sendto)))
(neverallow vendor_init base_typeattr_488 (ieee802154_socket (connect sendto)))
(neverallow vendor_init base_typeattr_488 (caif_socket (connect sendto)))
(neverallow vendor_init base_typeattr_488 (alg_socket (connect sendto)))
(neverallow vendor_init base_typeattr_488 (nfc_socket (connect sendto)))
(neverallow vendor_init base_typeattr_488 (vsock_socket (connect sendto)))
(neverallow vendor_init base_typeattr_488 (kcm_socket (connect sendto)))
(neverallow vendor_init base_typeattr_488 (qipcrtr_socket (connect sendto)))
(neverallow vendor_init base_typeattr_488 (smc_socket (connect sendto)))
(neverallow vendor_init base_typeattr_488 (xdp_socket (connect sendto)))
;;* lme

;;* lmx 257 system/sepolicy/prebuilts/api/29.0/public/vendor_init.te

(neverallow vendor_init base_typeattr_488 (unix_stream_socket (connectto)))
;;* lme

;;* lmx 261 system/sepolicy/prebuilts/api/29.0/public/vendor_init.te

(neverallow domain vendor_init (process (dyntransition)))
;;* lme

;;* lmx 262 system/sepolicy/prebuilts/api/29.0/public/vendor_init.te

(neverallow base_typeattr_166 vendor_init (process (transition)))
;;* lme

;;* lmx 263 system/sepolicy/prebuilts/api/29.0/public/vendor_init.te

(neverallow vendor_init base_typeattr_421 (file (entrypoint)))
;;* lme

;;* lmx 266 system/sepolicy/prebuilts/api/29.0/public/vendor_init.te

(neverallow vendor_init app_data_file (lnk_file (read)))
(neverallow vendor_init privapp_data_file (lnk_file (read)))
;;* lme

;;* lmx 267 system/sepolicy/prebuilts/api/29.0/public/vendor_init.te

(neverallow vendor_init shell_data_file (lnk_file (read)))
;;* lme

;;* lmx 269 system/sepolicy/prebuilts/api/29.0/public/vendor_init.te

(neverallow vendor_init shell_data_file (dir (write add_name remove_name)))
;;* lme

;;* lmx 272 system/sepolicy/prebuilts/api/29.0/public/vendor_init.te

(neverallow vendor_init fs_type (file (execute_no_trans)))
(neverallow vendor_init file_type (file (execute_no_trans)))
;;* lme

;;* lmx 275 system/sepolicy/prebuilts/api/29.0/public/vendor_init.te

(neverallow vendor_init service_manager_type (service_manager (add find)))
;;* lme

;;* lmx 276 system/sepolicy/prebuilts/api/29.0/public/vendor_init.te

(neverallow vendor_init servicemanager (service_manager (list)))
;;* lme

;;* lmx 279 system/sepolicy/prebuilts/api/29.0/public/vendor_init.te

(neverallow base_typeattr_167 vendor_init (process (ptrace)))
;;* lme

(allow vendor_misc_writer misc_block_device (blk_file (write lock append map open)))
(allow vendor_misc_writer block_device (dir (ioctl read getattr lock search open)))
(dontaudit vendor_misc_writer proc_cmdline (file (read)))
(dontaudit vendor_misc_writer metadata_file (dir (search)))
(dontaudit vendor_misc_writer sysfs_dt_firmware_android (dir (search)))
(allow vendor_shell vendor_shell_exec (file (ioctl read getattr lock map execute execute_no_trans open)))
(allow vendor_shell vendor_toolbox_exec (file (ioctl read getattr lock map execute execute_no_trans open)))
(allow vendor_shell shell (fd (use)))
(allow vendor_shell adbd (fd (use)))
(allow vendor_shell adbd (process (sigchld)))
(allow vendor_shell adbd (unix_stream_socket (ioctl read write getattr)))
(allow vendor_shell devpts (chr_file (ioctl read write getattr lock append map open)))
(allow vendor_shell tty_device (chr_file (ioctl read write getattr lock append map open)))
(allow vendor_shell console_device (chr_file (ioctl read write getattr lock append map open)))
(allow vendor_shell input_device (dir (ioctl read getattr lock search open)))
(allow vendor_shell input_device (chr_file (ioctl read write getattr lock append map open)))
;;* lmx 8 system/sepolicy/prebuilts/api/29.0/public/vendor_toolbox.te

(neverallow base_typeattr_489 vendor_toolbox_exec (file (execute execute_no_trans entrypoint)))
;;* lme

(allow virtual_touchpad servicemanager (binder (call transfer)))
(allow servicemanager virtual_touchpad (dir (search)))
(allow servicemanager virtual_touchpad (file (read open)))
(allow servicemanager virtual_touchpad (process (getattr)))
(allow virtual_touchpad virtual_touchpad_service (service_manager (add find)))
;;* lmx 6 system/sepolicy/prebuilts/api/29.0/public/virtual_touchpad.te

(neverallow base_typeattr_490 virtual_touchpad_service (service_manager (add)))
;;* lme

(allow virtual_touchpad system_server (binder (call transfer)))
(allow system_server virtual_touchpad (binder (transfer)))
(allow virtual_touchpad system_server (fd (use)))
(allow virtual_touchpad uhid_device (chr_file (ioctl write lock append map open)))
(allow virtual_touchpad permission_service (service_manager (find)))
(allow vold cache_file (dir (ioctl read getattr lock search open)))
(allow vold cache_file (file (read getattr)))
(allow vold cache_file (lnk_file (ioctl read getattr lock map open)))
(allow vold base_typeattr_491 (dir (ioctl read getattr lock search open)))
(allow vold base_typeattr_491 (file (ioctl read getattr lock map open)))
(allow vold base_typeattr_491 (lnk_file (ioctl read getattr lock map open)))
(allow vold sysfs (file (write lock append map open)))
(allow vold sysfs_devices_block (file (write lock append map open)))
(allow vold sysfs_dm (file (write lock append map open)))
(allow vold sysfs_loop (file (write lock append map open)))
(allow vold sysfs_usb (file (write lock append map open)))
(allow vold sysfs_fs_f2fs (file (write lock append map open)))
(allow vold sysfs_zram_uevent (file (write lock append map open)))
(allow vold rootfs (dir (ioctl read getattr lock search open)))
(allow vold rootfs (file (ioctl read getattr lock map open)))
(allow vold rootfs (lnk_file (ioctl read getattr lock map open)))
(allow vold metadata_file (dir (ioctl read getattr lock search open)))
(allow vold metadata_file (file (ioctl read getattr lock map open)))
(allow vold metadata_file (lnk_file (ioctl read getattr lock map open)))
(allow vold proc (file (ioctl read getattr lock map open)))
(allow vold proc_drop_caches (file (ioctl read getattr lock map open)))
(allow vold proc_cmdline (file (ioctl read getattr lock map open)))
(allow vold proc_filesystems (file (ioctl read getattr lock map open)))
(allow vold proc_meminfo (file (ioctl read getattr lock map open)))
(allow vold proc_mounts (file (ioctl read getattr lock map open)))
(allow vold file_contexts_file (file (ioctl read getattr lock map open)))
(allow vold self (process (setexec)))
(allow vold e2fs_exec (file (ioctl read getattr lock map execute execute_no_trans open)))
(allowx vold fs_type (ioctl dir (0x5879)))
(allowx vold file_type (ioctl dir (0x5879)))
(allowx vold data_file_type (ioctl dir (0x6613 0x6615)))
(allowx vold vold_data_file (ioctl file (0x660b)))
(allow vold self (process (setfscreate)))
(allow vold system_file (file (getattr map execute execute_no_trans)))
(allow vold block_device (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
(allow vold device (dir (write)))
(allow vold devpts (chr_file (ioctl read write getattr lock append map open)))
(allow vold rootfs (dir (mounton)))
(allow vold sdcard_type (dir (mounton)))
(allow vold sdcard_type (filesystem (mount remount unmount)))
(allow vold sdcard_type (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
(allow vold sdcard_type (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow vold sdcard_type (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
(allow vold mnt_media_rw_file (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
(allow vold storage_file (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
(allow vold sdcard_type (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow vold mnt_media_rw_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow vold storage_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow vold media_rw_data_file (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
(allow vold media_rw_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow vold mnt_media_rw_stub_file (dir (create getattr setattr mounton rmdir)))
(allow vold storage_stub_file (dir (create getattr setattr mounton rmdir)))
(allow vold mnt_user_file (dir (ioctl read write create getattr setattr lock rename mounton add_name remove_name reparent search rmdir open)))
(allow vold mnt_user_file (lnk_file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow vold mnt_user_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow vold mnt_expand_file (dir (ioctl read write create getattr setattr lock rename mounton add_name remove_name reparent search rmdir open)))
(allow vold apk_data_file (dir (create getattr setattr)))
(allow vold shell_data_file (dir (create getattr setattr)))
(allow vold tmpfs (filesystem (mount unmount)))
(allow vold tmpfs (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
(allow vold tmpfs (dir (mounton)))
(allow vold self (capability (chown dac_override dac_read_search fowner fsetid net_admin sys_admin mknod)))
(allow vold self (cap_userns (chown dac_override dac_read_search fowner fsetid net_admin sys_admin mknod)))
(allow vold self (netlink_kobject_uevent_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
(allow vold loop_control_device (chr_file (ioctl read write getattr lock append map open)))
(allow vold loop_device (blk_file (ioctl read write create getattr setattr lock append map unlink open)))
(allowx vold loop_device (ioctl blk_file ((range 0x4c00 0x4c01) (range 0x4c04 0x4c05) 0x4c82)))
(allow vold vold_device (blk_file (ioctl read write create getattr setattr lock append map unlink open)))
(allowx vold vold_device (ioctl blk_file (0x1260 0x1277)))
(allow vold dm_device (chr_file (ioctl read write getattr lock append map open)))
(allow vold dm_device (blk_file (ioctl read write getattr lock append map open)))
(allowx vold dm_device (ioctl blk_file (0x127d)))
(allow vold domain (dir (ioctl read getattr lock search open)))
(allow vold domain (file (ioctl read getattr lock map open)))
(allow vold domain (lnk_file (ioctl read getattr lock map open)))
(allow vold domain (process (sigkill signal)))
(allow vold self (capability (kill sys_ptrace)))
(allow vold self (cap_userns (kill sys_ptrace)))
(allow vold kmsg_device (chr_file (ioctl read write getattr lock append map open)))
(allow vold fsck_exec (file (ioctl read getattr lock map execute open)))
(allow vold fscklogs (dir (ioctl read write getattr lock add_name remove_name search open)))
(allow vold fscklogs (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow vold labeledfs (filesystem (mount remount unmount)))
(allow vold efs_file (file (ioctl read write getattr lock append map open)))
(allow vold system_data_file (dir (ioctl read write create getattr setattr lock mounton add_name remove_name search rmdir open)))
(allow vold system_data_file (lnk_file (getattr)))
(allow vold vendor_data_file (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
(allow vold system_data_file (file (read)))
(allow vold kernel (process (setsched)))
(allow vold property_socket (sock_file (write)))
(allow vold init (unix_stream_socket (connectto)))
(allow vold vold_prop (property_service (set)))
(allow vold vold_prop (file (read getattr map open)))
(allow vold property_socket (sock_file (write)))
(allow vold init (unix_stream_socket (connectto)))
(allow vold exported_vold_prop (property_service (set)))
(allow vold exported_vold_prop (file (read getattr map open)))
(allow vold property_socket (sock_file (write)))
(allow vold init (unix_stream_socket (connectto)))
(allow vold exported2_vold_prop (property_service (set)))
(allow vold exported2_vold_prop (file (read getattr map open)))
(allow vold property_socket (sock_file (write)))
(allow vold init (unix_stream_socket (connectto)))
(allow vold powerctl_prop (property_service (set)))
(allow vold powerctl_prop (file (read getattr map open)))
(allow vold property_socket (sock_file (write)))
(allow vold init (unix_stream_socket (connectto)))
(allow vold ctl_fuse_prop (property_service (set)))
(allow vold ctl_fuse_prop (file (read getattr map open)))
(allow vold property_socket (sock_file (write)))
(allow vold init (unix_stream_socket (connectto)))
(allow vold restorecon_prop (property_service (set)))
(allow vold restorecon_prop (file (read getattr map open)))
(allow vold asec_image_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow vold asec_image_file (dir (ioctl read write getattr lock add_name remove_name search open)))
(allow vold asec_apk_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto rename mounton add_name remove_name reparent search rmdir open)))
(allow vold asec_public_file (dir (setattr relabelto)))
(allow vold asec_apk_file (file (ioctl read getattr setattr lock relabelfrom relabelto map open)))
(allow vold asec_public_file (file (setattr relabelto)))
(allow vold unlabeled (dir (ioctl read getattr setattr lock relabelfrom search open)))
(allow vold unlabeled (file (ioctl read getattr setattr lock relabelfrom map open)))
(allow vold sysfs_wake_lock (file (ioctl read write getattr lock append map open)))
(allow vold self (capability2 (block_suspend)))
(allow vold self (cap2_userns (block_suspend)))
(allow vold system_suspend_server (binder (call transfer)))
(allow system_suspend_server vold (binder (transfer)))
(allow vold system_suspend_server (fd (use)))
(allow vold system_suspend_hwservice (hwservice_manager (find)))
(allow vold hwservicemanager (binder (call transfer)))
(allow hwservicemanager vold (binder (call transfer)))
(allow hwservicemanager vold (dir (search)))
(allow hwservicemanager vold (file (read map open)))
(allow hwservicemanager vold (process (getattr)))
(allow vold hwservicemanager_prop (file (read getattr map open)))
(allow vold hidl_manager_hwservice (hwservice_manager (find)))
(allow vold servicemanager (binder (call transfer)))
(allow servicemanager vold (dir (search)))
(allow servicemanager vold (file (read open)))
(allow servicemanager vold (process (getattr)))
(allow vold vold_service (service_manager (add find)))
;;* lmx 174 system/sepolicy/prebuilts/api/29.0/public/vold.te

(neverallow base_typeattr_293 vold_service (service_manager (add)))
;;* lme

(allow vold system_server (binder (call transfer)))
(allow system_server vold (binder (transfer)))
(allow vold system_server (fd (use)))
(allow vold permission_service (service_manager (find)))
(allow vold healthd (binder (call transfer)))
(allow healthd vold (binder (transfer)))
(allow vold healthd (fd (use)))
(allow vold userdata_block_device (blk_file (ioctl read write getattr lock append map open)))
(allowx vold userdata_block_device (ioctl blk_file (0x127d)))
(allow vold metadata_block_device (blk_file (ioctl read write getattr lock append map open)))
(allow vold unencrypted_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow vold unencrypted_data_file (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
(allow vold proc_drop_caches (file (write lock append map open)))
(allow vold vold_data_file (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
(allow vold vold_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow vold vold_metadata_file (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
(allow vold vold_metadata_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow vold init (key (write search setattr)))
(allow vold vold (key (write search setattr)))
(allow vold self (capability (sys_nice)))
(allow vold self (cap_userns (sys_nice)))
(allow vold self (capability (sys_chroot)))
(allow vold self (cap_userns (sys_chroot)))
(allow vold storage_file (dir (mounton)))
(allow vold fuse_device (chr_file (ioctl read write getattr lock append map open)))
(allow vold fuse (filesystem (relabelfrom)))
(allow vold app_fusefs (filesystem (relabelfrom relabelto)))
(allow vold app_fusefs (filesystem (mount unmount)))
(allow vold app_fuse_file (dir (ioctl read write getattr lock add_name remove_name search open)))
(allow vold app_fuse_file (file (read write getattr append open)))
(allow vold toolbox_exec (file (ioctl read getattr lock map execute execute_no_trans open)))
(allow vold user_profile_data_file (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
(allow vold misc_block_device (blk_file (write lock append map open)))
(allow vold mnt_vendor_file (dir (search)))
(dontaudit vold self (capability (sys_resource)))
(dontaudit vold self (cap_userns (sys_resource)))
(allow vold gsi_metadata_file (dir (ioctl read getattr lock search open)))
(allow vold gsi_metadata_file (file (ioctl read getattr lock map open)))
;;* lmx 255 system/sepolicy/prebuilts/api/29.0/public/vold.te

(neverallow base_typeattr_492 vold_data_file (dir (write lock append map unlink link rename execute quotaon mounton add_name remove_name reparent rmdir audit_access execmod)))
;;* lme

;;* lmx 262 system/sepolicy/prebuilts/api/29.0/public/vold.te

(neverallow base_typeattr_493 vold_data_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton add_name remove_name reparent search rmdir open audit_access execmod)))
;;* lme

;;* lmx 268 system/sepolicy/prebuilts/api/29.0/public/vold.te

(neverallow base_typeattr_291 vold_metadata_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton add_name remove_name reparent search rmdir open audit_access execmod)))
;;* lme

;;* lmx 275 system/sepolicy/prebuilts/api/29.0/public/vold.te

(neverallow base_typeattr_494 vold_data_file (file (ioctl read write create setattr lock relabelfrom append map unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod open audit_access)))
(neverallow base_typeattr_494 vold_data_file (lnk_file (ioctl read write create setattr lock relabelfrom append map unlink link rename execute quotaon mounton open audit_access execmod)))
(neverallow base_typeattr_494 vold_data_file (sock_file (ioctl read write create setattr lock relabelfrom append map unlink link rename execute quotaon mounton open audit_access execmod)))
(neverallow base_typeattr_494 vold_data_file (fifo_file (ioctl read write create setattr lock relabelfrom append map unlink link rename execute quotaon mounton open audit_access execmod)))
;;* lme

;;* lmx 282 system/sepolicy/prebuilts/api/29.0/public/vold.te

(neverallow base_typeattr_493 vold_metadata_file (file (ioctl read write create setattr lock relabelfrom append map unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod open audit_access)))
(neverallow base_typeattr_493 vold_metadata_file (lnk_file (ioctl read write create setattr lock relabelfrom append map unlink link rename execute quotaon mounton open audit_access execmod)))
(neverallow base_typeattr_493 vold_metadata_file (sock_file (ioctl read write create setattr lock relabelfrom append map unlink link rename execute quotaon mounton open audit_access execmod)))
(neverallow base_typeattr_493 vold_metadata_file (fifo_file (ioctl read write create setattr lock relabelfrom append map unlink link rename execute quotaon mounton open audit_access execmod)))
;;* lme

;;* lmx 290 system/sepolicy/prebuilts/api/29.0/public/vold.te

(neverallow base_typeattr_495 vold_metadata_file (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod open audit_access)))
(neverallow base_typeattr_495 vold_metadata_file (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton open audit_access execmod)))
(neverallow base_typeattr_495 vold_metadata_file (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton open audit_access execmod)))
(neverallow base_typeattr_495 vold_metadata_file (fifo_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton open audit_access execmod)))
(neverallow base_typeattr_495 vold_data_file (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod open audit_access)))
(neverallow base_typeattr_495 vold_data_file (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton open audit_access execmod)))
(neverallow base_typeattr_495 vold_data_file (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton open audit_access execmod)))
(neverallow base_typeattr_495 vold_data_file (fifo_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton open audit_access execmod)))
;;* lme

;;* lmx 292 system/sepolicy/prebuilts/api/29.0/public/vold.te

(neverallow base_typeattr_291 restorecon_prop (property_service (set)))
;;* lme

;;* lmx 301 system/sepolicy/prebuilts/api/29.0/public/vold.te

(neverallow base_typeattr_496 vold_service (service_manager (find)))
;;* lme

;;* lmx 316 system/sepolicy/prebuilts/api/29.0/public/vold.te

(neverallow vold base_typeattr_497 (binder (call)))
;;* lme

;;* lmx 318 system/sepolicy/prebuilts/api/29.0/public/vold.te

(neverallow vold fsck_exec (file (execute_no_trans)))
;;* lme

;;* lmx 319 system/sepolicy/prebuilts/api/29.0/public/vold.te

(neverallow base_typeattr_166 vold (process (transition dyntransition)))
;;* lme

;;* lmx 320 system/sepolicy/prebuilts/api/29.0/public/vold.te

(neverallow vold base_typeattr_167 (process (ptrace)))
;;* lme

;;* lmx 321 system/sepolicy/prebuilts/api/29.0/public/vold.te

(neverallow vold base_typeattr_167 (rawip_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind)))
;;* lme

(allow vr_hwc servicemanager (binder (call transfer)))
(allow servicemanager vr_hwc (dir (search)))
(allow servicemanager vr_hwc (file (read open)))
(allow servicemanager vr_hwc (process (getattr)))
(allow vr_hwc surfaceflinger (binder (call transfer)))
(allow surfaceflinger vr_hwc (binder (transfer)))
(allow vr_hwc surfaceflinger (fd (use)))
(allow vr_hwc system_server (binder (call transfer)))
(allow system_server vr_hwc (binder (transfer)))
(allow vr_hwc system_server (fd (use)))
(allow vr_hwc vr_hwc_service (service_manager (add find)))
;;* lmx 14 system/sepolicy/prebuilts/api/29.0/public/vr_hwc.te

(neverallow base_typeattr_498 vr_hwc_service (service_manager (add)))
;;* lme

(allow vr_hwc hwservicemanager (binder (call transfer)))
(allow hwservicemanager vr_hwc (binder (call transfer)))
(allow hwservicemanager vr_hwc (dir (search)))
(allow hwservicemanager vr_hwc (file (read map open)))
(allow hwservicemanager vr_hwc (process (getattr)))
(allow vr_hwc system_file (dir (ioctl read getattr lock search open)))
(allow vr_hwc ion_device (chr_file (ioctl read getattr lock map open)))
(allow vr_hwc pdx_display_client_endpoint_dir_type (dir (ioctl read getattr lock search open)))
(allow vr_hwc pdx_display_client_endpoint_socket_type (sock_file (ioctl read write getattr lock append map open)))
(allow vr_hwc pdx_display_client_endpoint_socket_type (unix_stream_socket (read write shutdown connectto)))
(allow vr_hwc pdx_display_client_channel_socket_type (unix_stream_socket (read write getattr setattr lock append getopt setopt shutdown)))
(allow vr_hwc pdx_display_client_server_type (fd (use)))
(allow pdx_display_client_server_type vr_hwc (fd (use)))
(allow vr_hwc permission_service (service_manager (find)))
(allow vr_hwc vrflinger_vsync_service (service_manager (find)))
(allow watchdogd watchdog_device (chr_file (ioctl read write getattr lock append map open)))
(allow watchdogd kmsg_device (chr_file (ioctl read write getattr lock append map open)))
(allow wificond servicemanager (binder (call transfer)))
(allow servicemanager wificond (dir (search)))
(allow servicemanager wificond (file (read open)))
(allow servicemanager wificond (process (getattr)))
(allow wificond system_server (binder (call transfer)))
(allow system_server wificond (binder (transfer)))
(allow wificond system_server (fd (use)))
(allow wificond wificond_service (service_manager (add find)))
;;* lmx 8 system/sepolicy/prebuilts/api/29.0/public/wificond.te

(neverallow base_typeattr_499 wificond_service (service_manager (add)))
;;* lme

(allow wificond property_socket (sock_file (write)))
(allow wificond init (unix_stream_socket (connectto)))
(allow wificond exported_wifi_prop (property_service (set)))
(allow wificond exported_wifi_prop (file (read getattr map open)))
(allow wificond property_socket (sock_file (write)))
(allow wificond init (unix_stream_socket (connectto)))
(allow wificond wifi_prop (property_service (set)))
(allow wificond wifi_prop (file (read getattr map open)))
(allow wificond property_socket (sock_file (write)))
(allow wificond init (unix_stream_socket (connectto)))
(allow wificond ctl_default_prop (property_service (set)))
(allow wificond ctl_default_prop (file (read getattr map open)))
(allow wificond self (udp_socket (ioctl read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
(allowx wificond self (ioctl udp_socket (0x8914 0x8924)))
(allow wificond self (capability (net_admin net_raw)))
(allow wificond self (cap_userns (net_admin net_raw)))
(allow wificond self (netlink_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
(allow wificond self (netlink_generic_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
(allow wificond proc_net_type (dir (ioctl read getattr lock search open)))
(allow wificond proc_net_type (file (ioctl read getattr lock map open)))
(allow wificond proc_net_type (lnk_file (ioctl read getattr lock map open)))
(allow wificond permission_service (service_manager (find)))
(allow wificond dumpstate (fd (use)))
(allow wificond dumpstate (fifo_file (write)))
(allow wpantund servicemanager (binder (call transfer)))
(allow servicemanager wpantund (dir (search)))
(allow servicemanager wpantund (file (read open)))
(allow servicemanager wpantund (process (getattr)))
(allow wpantund system_server (binder (call transfer)))
(allow system_server wpantund (binder (transfer)))
(allow wpantund system_server (fd (use)))
(allow wpantund lowpan_service (service_manager (find)))
(allow wpantund priv_app (binder (call)))
(allow wpantund shell (binder (call)))
(allow wpantund self (udp_socket (ioctl read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
(allowx wpantund self (ioctl udp_socket (0x8914 0x8922)))
(allow wpantund tun_device (chr_file (ioctl read write getattr lock append map open)))
(allow wpantund self (capability (net_admin net_raw)))
(allow wpantund self (cap_userns (net_admin net_raw)))
(allow wpantund self (tun_socket (create)))
(allow init adbd_exec (file (read getattr map execute open)))
(allow init adbd (process (transition)))
(allow adbd adbd_exec (file (read getattr map execute entrypoint open)))
(dontaudit init adbd (process (noatsecure)))
(allow init adbd (process (siginh rlimitinh)))
(typetransition init adbd_exec process adbd)
(allow adbd shell_exec (file (read getattr map execute open)))
(allow adbd shell (process (transition)))
(allow shell shell_exec (file (read getattr map execute entrypoint open)))
(allow shell adbd (process (sigchld)))
(dontaudit adbd shell (process (noatsecure)))
(allow adbd shell (process (siginh rlimitinh)))
(typetransition adbd shell_exec process shell)
(allow adbd traced_consumer_socket (sock_file (write)))
(allow adbd traced (unix_stream_socket (connectto)))
(allow adbd shell (process (signal noatsecure)))
(allow adbd self (capability (setgid setuid)))
(allow adbd self (cap_userns (setgid setuid)))
(allow adbd self (capability (setpcap)))
(allow adbd self (cap_userns (setpcap)))
(dontaudit adbd self (capability (sys_resource)))
(dontaudit adbd self (cap_userns (sys_resource)))
(dontaudit adbd self (socket (create)))
(dontaudit adbd self (vsock_socket (create)))
(allow adbd functionfs (dir (search)))
(allow adbd functionfs (file (ioctl read write getattr lock append map open)))
(allowx adbd functionfs (ioctl file (0x6703 0x6782)))
(allow adbd devpts (chr_file (ioctl read write getattr lock append map open)))
(allow adbd shell_data_file (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
(allow adbd shell_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow adbd trace_data_file (dir (ioctl read getattr lock search open)))
(allow adbd trace_data_file (file (ioctl read getattr lock map open)))
(allow adbd profman_dump_data_file (dir (ioctl read getattr lock search open)))
(allow adbd profman_dump_data_file (file (ioctl read getattr lock map open)))
(allow adbd tmpfs (dir (search)))
(allow adbd rootfs (lnk_file (ioctl read getattr lock map open)))
(allow adbd tmpfs (lnk_file (ioctl read getattr lock map open)))
(allow adbd sdcard_type (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
(allow adbd sdcard_type (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow adbd anr_data_file (dir (ioctl read getattr lock search open)))
(allow adbd anr_data_file (file (ioctl read getattr lock map open)))
(allow adbd property_socket (sock_file (write)))
(allow adbd init (unix_stream_socket (connectto)))
(allow adbd shell_prop (property_service (set)))
(allow adbd shell_prop (file (read getattr map open)))
(allow adbd property_socket (sock_file (write)))
(allow adbd init (unix_stream_socket (connectto)))
(allow adbd powerctl_prop (property_service (set)))
(allow adbd powerctl_prop (file (read getattr map open)))
(allow adbd property_socket (sock_file (write)))
(allow adbd init (unix_stream_socket (connectto)))
(allow adbd ffs_prop (property_service (set)))
(allow adbd ffs_prop (file (read getattr map open)))
(allow adbd property_socket (sock_file (write)))
(allow adbd init (unix_stream_socket (connectto)))
(allow adbd exported_ffs_prop (property_service (set)))
(allow adbd exported_ffs_prop (file (read getattr map open)))
(allow adbd device_logging_prop (file (read getattr map open)))
(allow adbd serialno_prop (file (read getattr map open)))
(allow adbd test_harness_prop (file (read getattr map open)))
(allow adbd system_file (file (ioctl read getattr lock map execute execute_no_trans open)))
(allow adbd servicemanager (binder (call transfer)))
(allow servicemanager adbd (dir (search)))
(allow servicemanager adbd (file (read open)))
(allow servicemanager adbd (process (getattr)))
(allow adbd surfaceflinger (binder (call transfer)))
(allow surfaceflinger adbd (binder (transfer)))
(allow adbd surfaceflinger (fd (use)))
(allow adbd gpuservice (binder (call transfer)))
(allow gpuservice adbd (binder (transfer)))
(allow adbd gpuservice (fd (use)))
(allow adbd gpu_device (chr_file (ioctl read write getattr lock append map open)))
(allow adbd ion_device (chr_file (ioctl read write getattr lock append map open)))
(allow adbd system_file (dir (ioctl read getattr lock search open)))
(allow adbd system_file (file (ioctl read getattr lock map open)))
(allow adbd system_file (lnk_file (ioctl read getattr lock map open)))
(allow adbd adb_keys_file (dir (search)))
(allow adbd adb_keys_file (file (ioctl read getattr lock map open)))
(allow adbd app_data_file (dir (search)))
(allow adbd app_data_file (sock_file (write)))
(allow adbd appdomain (unix_stream_socket (connectto)))
(allow adbd zygote_exec (file (ioctl read getattr lock map open)))
(allow adbd system_file (file (ioctl read getattr lock map open)))
(allow adbd selinuxfs (dir (ioctl read getattr lock search open)))
(allow adbd selinuxfs (file (ioctl read getattr lock map open)))
(allow adbd kernel (security (read_policy)))
(allow adbd service_contexts_file (file (ioctl read getattr lock map open)))
(allow adbd file_contexts_file (file (ioctl read getattr lock map open)))
(allow adbd seapp_contexts_file (file (ioctl read getattr lock map open)))
(allow adbd property_contexts_file (file (ioctl read getattr lock map open)))
(allow adbd sepolicy_file (file (ioctl read getattr lock map open)))
(allow adbd config_gz (file (ioctl read getattr lock map open)))
(allow adbd proc_net_tcp_udp (file (ioctl read getattr lock map open)))
(allow adbd gpu_service (service_manager (find)))
(allow adbd surfaceflinger_service (service_manager (find)))
(allow adbd bootchart_data_file (dir (search)))
(allow adbd bootchart_data_file (file (ioctl read getattr lock map open)))
(allow adbd storage_file (dir (ioctl read getattr lock search open)))
(allow adbd storage_file (lnk_file (ioctl read getattr lock map open)))
(allow adbd mnt_user_file (dir (ioctl read getattr lock search open)))
(allow adbd mnt_user_file (lnk_file (ioctl read getattr lock map open)))
(allow adbd media_rw_data_file (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
(allow adbd media_rw_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow adbd apk_data_file (dir (ioctl read getattr lock search open)))
(allow adbd apk_data_file (file (ioctl read getattr lock map open)))
(allow adbd apk_data_file (lnk_file (ioctl read getattr lock map open)))
(allow adbd rootfs (dir (ioctl read getattr lock search open)))
(allow adbd perfetto_traces_data_file (file (ioctl read getattr lock map open)))
(allow adbd perfetto_traces_data_file (dir (ioctl read getattr lock search open)))
(allow adbd shell (unix_stream_socket (read write)))
(allow adbd shell (fd (use)))
;;* lmx 196 system/sepolicy/prebuilts/api/29.0/private/adbd.te

(neverallow adbd base_typeattr_500 (process (transition)))
;;* lme

;;* lmx 197 system/sepolicy/prebuilts/api/29.0/private/adbd.te

(neverallow adbd domain (process (dyntransition)))
;;* lme

(allow init apexd_exec (file (read getattr map execute open)))
(allow init apexd (process (transition)))
(allow apexd apexd_exec (file (read getattr map execute entrypoint open)))
(dontaudit init apexd (process (noatsecure)))
(allow init apexd (process (siginh rlimitinh)))
(typetransition init apexd_exec process apexd)
(allow apexd apex_data_file (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
(allow apexd apex_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow apexd metadata_file (dir (search)))
(allow apexd apex_metadata_file (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
(allow apexd apex_metadata_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow apexd loop_control_device (chr_file (ioctl read write getattr lock append map open)))
(allow apexd loop_device (blk_file (ioctl read write getattr lock append map open)))
(allowx apexd loop_device (ioctl blk_file (0x1261)))
(allowx apexd loop_device (ioctl blk_file ((range 0x4c00 0x4c01) (range 0x4c04 0x4c05) (range 0x4c08 0x4c09))))
(allow apexd block_device (dir (ioctl read getattr lock search open)))
(allow apexd dm_device (chr_file (ioctl read write getattr lock append map open)))
(allow apexd dm_device (blk_file (ioctl read write getattr lock append map open)))
(allow apexd self (capability (sys_admin)))
(allow apexd self (cap_userns (sys_admin)))
(allow apexd apex_mnt_dir (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
(allow apexd apex_mnt_dir (filesystem (mount unmount)))
(allow apexd apex_mnt_dir (dir (mounton)))
(allow apexd apex_mnt_dir (lnk_file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow apexd staging_data_file (file (unlink)))
(allow apexd staging_data_file (dir (ioctl read getattr lock search open)))
(allow apexd staging_data_file (file (ioctl read getattr lock map link open)))
(allow apexd labeledfs (filesystem (mount unmount)))
(allow apexd sysfs_type (dir (search)))
(allow apexd sysfs_dm (dir (ioctl read getattr lock search open)))
(allow apexd sysfs_dm (file (ioctl read write getattr lock append map open)))
(allow apexd sysfs_loop (dir (ioctl read getattr lock search open)))
(allow apexd sysfs_loop (file (ioctl read write getattr lock append map open)))
(dontaudit apexd self (capability (dac_override dac_read_search)))
(dontaudit apexd self (cap_userns (dac_override dac_read_search)))
(allow apexd kmsg_device (chr_file (write lock append map open)))
(allow apexd property_socket (sock_file (write)))
(allow apexd init (unix_stream_socket (connectto)))
(allow apexd powerctl_prop (property_service (set)))
(allow apexd powerctl_prop (file (read getattr map open)))
(allow apexd vold_service (service_manager (find)))
(allow apexd vold (binder (call transfer)))
(allow vold apexd (binder (transfer)))
(allow apexd vold (fd (use)))
(allow apexd apexd_exec (file (execute_no_trans)))
(allow apexd rootfs (dir (mounton)))
(allow apexd shell_exec (file (ioctl read getattr lock map execute open)))
(allow apexd system_bootstrap_lib_file (dir (ioctl read getattr lock search open)))
(allow apexd system_bootstrap_lib_file (file (read getattr map execute open)))
(allow apexd art_apex_preinstall_exec (file (read getattr map execute open)))
(allow apexd art_apex_preinstall (process (transition)))
(allow art_apex_preinstall art_apex_preinstall_exec (file (read getattr map execute entrypoint open)))
(allow art_apex_preinstall apexd (process (sigchld)))
(dontaudit apexd art_apex_preinstall (process (noatsecure)))
(allow apexd art_apex_preinstall (process (siginh rlimitinh)))
(typetransition apexd art_apex_preinstall_exec process art_apex_preinstall)
(allow apexd art_apex_postinstall_exec (file (read getattr map execute open)))
(allow apexd art_apex_postinstall (process (transition)))
(allow art_apex_postinstall art_apex_postinstall_exec (file (read getattr map execute entrypoint open)))
(allow art_apex_postinstall apexd (process (sigchld)))
(dontaudit apexd art_apex_postinstall (process (noatsecure)))
(allow apexd art_apex_postinstall (process (siginh rlimitinh)))
(typetransition apexd art_apex_postinstall_exec process art_apex_postinstall)
;;* lmx 110 system/sepolicy/prebuilts/api/29.0/private/apexd.te

(neverallow base_typeattr_170 apex_data_file (dir (write create setattr relabelfrom link rename add_name remove_name reparent rmdir)))
;;* lme

;;* lmx 111 system/sepolicy/prebuilts/api/29.0/private/apexd.te

(neverallow base_typeattr_170 apex_metadata_file (dir (write create setattr relabelfrom link rename add_name remove_name reparent rmdir)))
;;* lme

;;* lmx 112 system/sepolicy/prebuilts/api/29.0/private/apexd.te

(neverallow base_typeattr_501 apex_data_file (file (write create setattr relabelfrom append unlink link rename)))
;;* lme

;;* lmx 113 system/sepolicy/prebuilts/api/29.0/private/apexd.te

(neverallow base_typeattr_501 apex_metadata_file (file (write create setattr relabelfrom append unlink link rename)))
;;* lme

;;* lmx 114 system/sepolicy/prebuilts/api/29.0/private/apexd.te

(neverallow base_typeattr_168 apex_mnt_dir (lnk_file (write create setattr relabelfrom append unlink link rename)))
;;* lme

(allow appdomain test_harness_prop (file (read getattr map open)))
;;* lmx 7 system/sepolicy/prebuilts/api/29.0/private/app.te

(neverallow appdomain system_server (udp_socket (ioctl create setattr lock relabelfrom relabelto append bind listen accept shutdown name_bind)))
;;* lme

;;* lmx 15 system/sepolicy/prebuilts/api/29.0/private/app.te

(neverallow base_typeattr_182 base_typeattr_502 (process (transition)))
;;* lme

;;* lmx 17 system/sepolicy/prebuilts/api/29.0/private/app.te

(neverallow base_typeattr_182 base_typeattr_180 (process (dyntransition)))
;;* lme

;;* lmx 15 system/sepolicy/prebuilts/api/29.0/private/app_neverallows.te

(neverallow untrusted_app_all domain (netlink_kobject_uevent_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow ephemeral_app domain (netlink_kobject_uevent_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app domain (netlink_kobject_uevent_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider domain (netlink_kobject_uevent_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app domain (netlink_kobject_uevent_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_27 domain (netlink_kobject_uevent_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_25 domain (netlink_kobject_uevent_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
;;* lme

;;* lmx 18 system/sepolicy/prebuilts/api/29.0/private/app_neverallows.te

(neverallow untrusted_app_all domain (netlink_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow ephemeral_app domain (netlink_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app domain (netlink_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider domain (netlink_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app domain (netlink_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_27 domain (netlink_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_25 domain (netlink_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
;;* lme

;;* lmx 22 system/sepolicy/prebuilts/api/29.0/private/app_neverallows.te

(neverallow untrusted_app_all base_typeattr_503 (file (read)))
(neverallow ephemeral_app base_typeattr_503 (file (read)))
(neverallow isolated_app base_typeattr_503 (file (read)))
(neverallow mediaprovider base_typeattr_503 (file (read)))
(neverallow untrusted_app base_typeattr_503 (file (read)))
(neverallow untrusted_app_27 base_typeattr_503 (file (read)))
(neverallow untrusted_app_25 base_typeattr_503 (file (read)))
;;* lme

;;* lmx 23 system/sepolicy/prebuilts/api/29.0/private/app_neverallows.te

(neverallow untrusted_app_all debugfs_type (file (read)))
(neverallow untrusted_app_all debugfs_type (lnk_file (read)))
(neverallow ephemeral_app debugfs_type (file (read)))
(neverallow ephemeral_app debugfs_type (lnk_file (read)))
(neverallow isolated_app debugfs_type (file (read)))
(neverallow isolated_app debugfs_type (lnk_file (read)))
(neverallow mediaprovider debugfs_type (file (read)))
(neverallow mediaprovider debugfs_type (lnk_file (read)))
(neverallow untrusted_app debugfs_type (file (read)))
(neverallow untrusted_app debugfs_type (lnk_file (read)))
(neverallow untrusted_app_27 debugfs_type (file (read)))
(neverallow untrusted_app_27 debugfs_type (lnk_file (read)))
(neverallow untrusted_app_25 debugfs_type (file (read)))
(neverallow untrusted_app_25 debugfs_type (lnk_file (read)))
;;* lme

;;* lmx 28 system/sepolicy/prebuilts/api/29.0/private/app_neverallows.te

(neverallow untrusted_app_all service_manager_type (service_manager (add)))
(neverallow ephemeral_app service_manager_type (service_manager (add)))
(neverallow isolated_app service_manager_type (service_manager (add)))
(neverallow mediaprovider service_manager_type (service_manager (add)))
(neverallow untrusted_app service_manager_type (service_manager (add)))
(neverallow untrusted_app_27 service_manager_type (service_manager (add)))
(neverallow untrusted_app_25 service_manager_type (service_manager (add)))
;;* lme

;;* lmx 31 system/sepolicy/prebuilts/api/29.0/private/app_neverallows.te

(neverallow untrusted_app_all vndbinder_device (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod open audit_access)))
(neverallow ephemeral_app vndbinder_device (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod open audit_access)))
(neverallow isolated_app vndbinder_device (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod open audit_access)))
(neverallow mediaprovider vndbinder_device (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod open audit_access)))
(neverallow untrusted_app vndbinder_device (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod open audit_access)))
(neverallow untrusted_app_27 vndbinder_device (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod open audit_access)))
(neverallow untrusted_app_25 vndbinder_device (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod open audit_access)))
;;* lme

;;* lmx 32 system/sepolicy/prebuilts/api/29.0/private/app_neverallows.te

(neverallow untrusted_app_all vndservice_manager_type (service_manager (add find list)))
(neverallow ephemeral_app vndservice_manager_type (service_manager (add find list)))
(neverallow isolated_app vndservice_manager_type (service_manager (add find list)))
(neverallow mediaprovider vndservice_manager_type (service_manager (add find list)))
(neverallow untrusted_app vndservice_manager_type (service_manager (add find list)))
(neverallow untrusted_app_27 vndservice_manager_type (service_manager (add find list)))
(neverallow untrusted_app_25 vndservice_manager_type (service_manager (add find list)))
;;* lme

;;* lmx 36 system/sepolicy/prebuilts/api/29.0/private/app_neverallows.te

(neverallow base_typeattr_504 property_socket (sock_file (write)))
;;* lme

;;* lmx 37 system/sepolicy/prebuilts/api/29.0/private/app_neverallows.te

(neverallow base_typeattr_504 init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 38 system/sepolicy/prebuilts/api/29.0/private/app_neverallows.te

(neverallow base_typeattr_504 property_type (property_service (set)))
;;* lme

;;* lmx 42 system/sepolicy/prebuilts/api/29.0/private/app_neverallows.te

(neverallow base_typeattr_505 net_dns_prop (file (read)))
;;* lme

;;* lmx 48 system/sepolicy/prebuilts/api/29.0/private/app_neverallows.te

(neverallow untrusted_app_all app_exec_data_file (file (write create setattr relabelfrom relabelto append link rename)))
(neverallow ephemeral_app app_exec_data_file (file (write create setattr relabelfrom relabelto append link rename)))
(neverallow isolated_app app_exec_data_file (file (write create setattr relabelfrom relabelto append link rename)))
(neverallow mediaprovider app_exec_data_file (file (write create setattr relabelfrom relabelto append link rename)))
(neverallow untrusted_app app_exec_data_file (file (write create setattr relabelfrom relabelto append link rename)))
(neverallow untrusted_app_27 app_exec_data_file (file (write create setattr relabelfrom relabelto append link rename)))
(neverallow untrusted_app_25 app_exec_data_file (file (write create setattr relabelfrom relabelto append link rename)))
;;* lme

;;* lmx 59 system/sepolicy/prebuilts/api/29.0/private/app_neverallows.te

(neverallow base_typeattr_506 app_data_file (file (execute_no_trans)))
(neverallow base_typeattr_506 privapp_data_file (file (execute_no_trans)))
;;* lme

;;* lmx 68 system/sepolicy/prebuilts/api/29.0/private/app_neverallows.te

(neverallow base_typeattr_507 dex2oat_exec (file (execute execute_no_trans)))
;;* lme

;;* lmx 78 system/sepolicy/prebuilts/api/29.0/private/app_neverallows.te

(neverallow untrusted_app_all mlstrustedsubject (process (fork)))
(neverallow ephemeral_app mlstrustedsubject (process (fork)))
(neverallow isolated_app mlstrustedsubject (process (fork)))
(neverallow mediaprovider mlstrustedsubject (process (fork)))
(neverallow untrusted_app mlstrustedsubject (process (fork)))
(neverallow untrusted_app_27 mlstrustedsubject (process (fork)))
(neverallow untrusted_app_25 mlstrustedsubject (process (fork)))
;;* lme

;;* lmx 86 system/sepolicy/prebuilts/api/29.0/private/app_neverallows.te

(neverallow untrusted_app_all file_type (file (link)))
(neverallow ephemeral_app file_type (file (link)))
(neverallow isolated_app file_type (file (link)))
(neverallow mediaprovider file_type (file (link)))
(neverallow untrusted_app file_type (file (link)))
(neverallow untrusted_app_27 file_type (file (link)))
(neverallow untrusted_app_25 file_type (file (link)))
;;* lme

;;* lmx 89 system/sepolicy/prebuilts/api/29.0/private/app_neverallows.te

(neverallow untrusted_app_all sysfs_mac_address (file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
(neverallow ephemeral_app sysfs_mac_address (file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
(neverallow isolated_app sysfs_mac_address (file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
(neverallow mediaprovider sysfs_mac_address (file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
(neverallow untrusted_app sysfs_mac_address (file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
(neverallow untrusted_app_27 sysfs_mac_address (file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
(neverallow untrusted_app_25 sysfs_mac_address (file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
;;* lme

;;* lmx 92 system/sepolicy/prebuilts/api/29.0/private/app_neverallows.te

(neverallow untrusted_app_all sysfs_type (file (write create setattr relabelfrom append unlink link rename execute execute_no_trans)))
(neverallow ephemeral_app sysfs_type (file (write create setattr relabelfrom append unlink link rename execute execute_no_trans)))
(neverallow isolated_app sysfs_type (file (write create setattr relabelfrom append unlink link rename execute execute_no_trans)))
(neverallow mediaprovider sysfs_type (file (write create setattr relabelfrom append unlink link rename execute execute_no_trans)))
(neverallow untrusted_app sysfs_type (file (write create setattr relabelfrom append unlink link rename execute execute_no_trans)))
(neverallow untrusted_app_27 sysfs_type (file (write create setattr relabelfrom append unlink link rename execute execute_no_trans)))
(neverallow untrusted_app_25 sysfs_type (file (write create setattr relabelfrom append unlink link rename execute execute_no_trans)))
;;* lme

;;* lmx 95 system/sepolicy/prebuilts/api/29.0/private/app_neverallows.te

(neverallow untrusted_app_all sysfs (file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
(neverallow ephemeral_app sysfs (file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
(neverallow isolated_app sysfs (file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
(neverallow mediaprovider sysfs (file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
(neverallow untrusted_app sysfs (file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
(neverallow untrusted_app_27 sysfs (file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
(neverallow untrusted_app_25 sysfs (file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
;;* lme

;;* lmx 99 system/sepolicy/prebuilts/api/29.0/private/app_neverallows.te

(neverallowx untrusted_app_all domain (ioctl tcp_socket (0x6900 0x6902)))
(neverallowx untrusted_app_all domain (ioctl udp_socket (0x6900 0x6902)))
(neverallowx untrusted_app_all domain (ioctl rawip_socket (0x6900 0x6902)))
(neverallowx untrusted_app_all domain (ioctl icmp_socket (0x6900 0x6902)))
(neverallowx ephemeral_app domain (ioctl tcp_socket (0x6900 0x6902)))
(neverallowx ephemeral_app domain (ioctl udp_socket (0x6900 0x6902)))
(neverallowx ephemeral_app domain (ioctl rawip_socket (0x6900 0x6902)))
(neverallowx ephemeral_app domain (ioctl icmp_socket (0x6900 0x6902)))
(neverallowx isolated_app domain (ioctl tcp_socket (0x6900 0x6902)))
(neverallowx isolated_app domain (ioctl udp_socket (0x6900 0x6902)))
(neverallowx isolated_app domain (ioctl rawip_socket (0x6900 0x6902)))
(neverallowx isolated_app domain (ioctl icmp_socket (0x6900 0x6902)))
(neverallowx mediaprovider domain (ioctl tcp_socket (0x6900 0x6902)))
(neverallowx mediaprovider domain (ioctl udp_socket (0x6900 0x6902)))
(neverallowx mediaprovider domain (ioctl rawip_socket (0x6900 0x6902)))
(neverallowx mediaprovider domain (ioctl icmp_socket (0x6900 0x6902)))
(neverallowx untrusted_app domain (ioctl tcp_socket (0x6900 0x6902)))
(neverallowx untrusted_app domain (ioctl udp_socket (0x6900 0x6902)))
(neverallowx untrusted_app domain (ioctl rawip_socket (0x6900 0x6902)))
(neverallowx untrusted_app domain (ioctl icmp_socket (0x6900 0x6902)))
(neverallowx untrusted_app_27 domain (ioctl tcp_socket (0x6900 0x6902)))
(neverallowx untrusted_app_27 domain (ioctl udp_socket (0x6900 0x6902)))
(neverallowx untrusted_app_27 domain (ioctl rawip_socket (0x6900 0x6902)))
(neverallowx untrusted_app_27 domain (ioctl icmp_socket (0x6900 0x6902)))
(neverallowx untrusted_app_25 domain (ioctl tcp_socket (0x6900 0x6902)))
(neverallowx untrusted_app_25 domain (ioctl udp_socket (0x6900 0x6902)))
(neverallowx untrusted_app_25 domain (ioctl rawip_socket (0x6900 0x6902)))
(neverallowx untrusted_app_25 domain (ioctl icmp_socket (0x6900 0x6902)))
;;* lme

;;* lmx 99 system/sepolicy/prebuilts/api/29.0/private/app_neverallows.te

(neverallowx untrusted_app_all domain (ioctl tcp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx untrusted_app_all domain (ioctl udp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx untrusted_app_all domain (ioctl rawip_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx untrusted_app_all domain (ioctl icmp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx ephemeral_app domain (ioctl tcp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx ephemeral_app domain (ioctl udp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx ephemeral_app domain (ioctl rawip_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx ephemeral_app domain (ioctl icmp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx isolated_app domain (ioctl tcp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx isolated_app domain (ioctl udp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx isolated_app domain (ioctl rawip_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx isolated_app domain (ioctl icmp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx mediaprovider domain (ioctl tcp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx mediaprovider domain (ioctl udp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx mediaprovider domain (ioctl rawip_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx mediaprovider domain (ioctl icmp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx untrusted_app domain (ioctl tcp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx untrusted_app domain (ioctl udp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx untrusted_app domain (ioctl rawip_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx untrusted_app domain (ioctl icmp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx untrusted_app_27 domain (ioctl tcp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx untrusted_app_27 domain (ioctl udp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx untrusted_app_27 domain (ioctl rawip_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx untrusted_app_27 domain (ioctl icmp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx untrusted_app_25 domain (ioctl tcp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx untrusted_app_25 domain (ioctl udp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx untrusted_app_25 domain (ioctl rawip_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx untrusted_app_25 domain (ioctl icmp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
;;* lme

;;* lmx 99 system/sepolicy/prebuilts/api/29.0/private/app_neverallows.te

(neverallowx untrusted_app_all domain (ioctl tcp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx untrusted_app_all domain (ioctl udp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx untrusted_app_all domain (ioctl rawip_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx untrusted_app_all domain (ioctl icmp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx ephemeral_app domain (ioctl tcp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx ephemeral_app domain (ioctl udp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx ephemeral_app domain (ioctl rawip_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx ephemeral_app domain (ioctl icmp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx isolated_app domain (ioctl tcp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx isolated_app domain (ioctl udp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx isolated_app domain (ioctl rawip_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx isolated_app domain (ioctl icmp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx mediaprovider domain (ioctl tcp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx mediaprovider domain (ioctl udp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx mediaprovider domain (ioctl rawip_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx mediaprovider domain (ioctl icmp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx untrusted_app domain (ioctl tcp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx untrusted_app domain (ioctl udp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx untrusted_app domain (ioctl rawip_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx untrusted_app domain (ioctl icmp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx untrusted_app_27 domain (ioctl tcp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx untrusted_app_27 domain (ioctl udp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx untrusted_app_27 domain (ioctl rawip_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx untrusted_app_27 domain (ioctl icmp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx untrusted_app_25 domain (ioctl tcp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx untrusted_app_25 domain (ioctl udp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx untrusted_app_25 domain (ioctl rawip_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx untrusted_app_25 domain (ioctl icmp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
;;* lme

;;* lmx 100 system/sepolicy/prebuilts/api/29.0/private/app_neverallows.te

(neverallow untrusted_app_all base_typeattr_167 (netlink_route_socket (ioctl)))
(neverallow untrusted_app_all base_typeattr_167 (netlink_selinux_socket (ioctl)))
(neverallow ephemeral_app base_typeattr_167 (netlink_route_socket (ioctl)))
(neverallow ephemeral_app base_typeattr_167 (netlink_selinux_socket (ioctl)))
(neverallow isolated_app base_typeattr_167 (netlink_route_socket (ioctl)))
(neverallow isolated_app base_typeattr_167 (netlink_selinux_socket (ioctl)))
(neverallow mediaprovider base_typeattr_167 (netlink_route_socket (ioctl)))
(neverallow mediaprovider base_typeattr_167 (netlink_selinux_socket (ioctl)))
(neverallow untrusted_app base_typeattr_167 (netlink_route_socket (ioctl)))
(neverallow untrusted_app base_typeattr_167 (netlink_selinux_socket (ioctl)))
(neverallow untrusted_app_27 base_typeattr_167 (netlink_route_socket (ioctl)))
(neverallow untrusted_app_27 base_typeattr_167 (netlink_selinux_socket (ioctl)))
(neverallow untrusted_app_25 base_typeattr_167 (netlink_route_socket (ioctl)))
(neverallow untrusted_app_25 base_typeattr_167 (netlink_selinux_socket (ioctl)))
;;* lme

;;* lmx 113 system/sepolicy/prebuilts/api/29.0/private/app_neverallows.te

(neverallow untrusted_app_all base_typeattr_167 (socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_all base_typeattr_167 (netlink_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_all base_typeattr_167 (packet_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_all base_typeattr_167 (key_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_all base_typeattr_167 (netlink_tcpdiag_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write)))
(neverallow untrusted_app_all base_typeattr_167 (netlink_nflog_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_all base_typeattr_167 (netlink_xfrm_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write)))
(neverallow untrusted_app_all base_typeattr_167 (netlink_audit_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write nlmsg_relay nlmsg_readpriv nlmsg_tty_audit)))
(neverallow untrusted_app_all base_typeattr_167 (netlink_dnrt_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_all base_typeattr_167 (netlink_kobject_uevent_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_all base_typeattr_167 (appletalk_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_all base_typeattr_167 (tun_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind attach_queue)))
(neverallow untrusted_app_all base_typeattr_167 (netlink_iscsi_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_all base_typeattr_167 (netlink_fib_lookup_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_all base_typeattr_167 (netlink_connector_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_all base_typeattr_167 (netlink_netfilter_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_all base_typeattr_167 (netlink_generic_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_all base_typeattr_167 (netlink_scsitransport_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_all base_typeattr_167 (netlink_rdma_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_all base_typeattr_167 (netlink_crypto_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_all base_typeattr_167 (sctp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind name_connect association)))
(neverallow untrusted_app_all base_typeattr_167 (ax25_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_all base_typeattr_167 (ipx_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_all base_typeattr_167 (netrom_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_all base_typeattr_167 (atmpvc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_all base_typeattr_167 (x25_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_all base_typeattr_167 (rose_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_all base_typeattr_167 (decnet_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_all base_typeattr_167 (atmsvc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_all base_typeattr_167 (rds_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_all base_typeattr_167 (irda_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_all base_typeattr_167 (pppox_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_all base_typeattr_167 (llc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_all base_typeattr_167 (can_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_all base_typeattr_167 (tipc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_all base_typeattr_167 (bluetooth_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_all base_typeattr_167 (iucv_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_all base_typeattr_167 (rxrpc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_all base_typeattr_167 (isdn_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_all base_typeattr_167 (phonet_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_all base_typeattr_167 (ieee802154_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_all base_typeattr_167 (caif_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_all base_typeattr_167 (alg_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_all base_typeattr_167 (nfc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_all base_typeattr_167 (vsock_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_all base_typeattr_167 (kcm_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_all base_typeattr_167 (qipcrtr_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_all base_typeattr_167 (smc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_all base_typeattr_167 (xdp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow ephemeral_app base_typeattr_167 (socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow ephemeral_app base_typeattr_167 (netlink_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow ephemeral_app base_typeattr_167 (packet_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow ephemeral_app base_typeattr_167 (key_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow ephemeral_app base_typeattr_167 (netlink_tcpdiag_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write)))
(neverallow ephemeral_app base_typeattr_167 (netlink_nflog_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow ephemeral_app base_typeattr_167 (netlink_xfrm_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write)))
(neverallow ephemeral_app base_typeattr_167 (netlink_audit_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write nlmsg_relay nlmsg_readpriv nlmsg_tty_audit)))
(neverallow ephemeral_app base_typeattr_167 (netlink_dnrt_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow ephemeral_app base_typeattr_167 (netlink_kobject_uevent_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow ephemeral_app base_typeattr_167 (appletalk_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow ephemeral_app base_typeattr_167 (tun_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind attach_queue)))
(neverallow ephemeral_app base_typeattr_167 (netlink_iscsi_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow ephemeral_app base_typeattr_167 (netlink_fib_lookup_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow ephemeral_app base_typeattr_167 (netlink_connector_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow ephemeral_app base_typeattr_167 (netlink_netfilter_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow ephemeral_app base_typeattr_167 (netlink_generic_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow ephemeral_app base_typeattr_167 (netlink_scsitransport_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow ephemeral_app base_typeattr_167 (netlink_rdma_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow ephemeral_app base_typeattr_167 (netlink_crypto_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow ephemeral_app base_typeattr_167 (sctp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind name_connect association)))
(neverallow ephemeral_app base_typeattr_167 (ax25_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow ephemeral_app base_typeattr_167 (ipx_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow ephemeral_app base_typeattr_167 (netrom_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow ephemeral_app base_typeattr_167 (atmpvc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow ephemeral_app base_typeattr_167 (x25_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow ephemeral_app base_typeattr_167 (rose_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow ephemeral_app base_typeattr_167 (decnet_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow ephemeral_app base_typeattr_167 (atmsvc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow ephemeral_app base_typeattr_167 (rds_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow ephemeral_app base_typeattr_167 (irda_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow ephemeral_app base_typeattr_167 (pppox_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow ephemeral_app base_typeattr_167 (llc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow ephemeral_app base_typeattr_167 (can_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow ephemeral_app base_typeattr_167 (tipc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow ephemeral_app base_typeattr_167 (bluetooth_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow ephemeral_app base_typeattr_167 (iucv_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow ephemeral_app base_typeattr_167 (rxrpc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow ephemeral_app base_typeattr_167 (isdn_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow ephemeral_app base_typeattr_167 (phonet_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow ephemeral_app base_typeattr_167 (ieee802154_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow ephemeral_app base_typeattr_167 (caif_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow ephemeral_app base_typeattr_167 (alg_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow ephemeral_app base_typeattr_167 (nfc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow ephemeral_app base_typeattr_167 (vsock_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow ephemeral_app base_typeattr_167 (kcm_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow ephemeral_app base_typeattr_167 (qipcrtr_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow ephemeral_app base_typeattr_167 (smc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow ephemeral_app base_typeattr_167 (xdp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app base_typeattr_167 (socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app base_typeattr_167 (netlink_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app base_typeattr_167 (packet_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app base_typeattr_167 (key_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app base_typeattr_167 (netlink_tcpdiag_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write)))
(neverallow isolated_app base_typeattr_167 (netlink_nflog_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app base_typeattr_167 (netlink_xfrm_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write)))
(neverallow isolated_app base_typeattr_167 (netlink_audit_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write nlmsg_relay nlmsg_readpriv nlmsg_tty_audit)))
(neverallow isolated_app base_typeattr_167 (netlink_dnrt_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app base_typeattr_167 (netlink_kobject_uevent_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app base_typeattr_167 (appletalk_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app base_typeattr_167 (tun_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind attach_queue)))
(neverallow isolated_app base_typeattr_167 (netlink_iscsi_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app base_typeattr_167 (netlink_fib_lookup_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app base_typeattr_167 (netlink_connector_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app base_typeattr_167 (netlink_netfilter_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app base_typeattr_167 (netlink_generic_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app base_typeattr_167 (netlink_scsitransport_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app base_typeattr_167 (netlink_rdma_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app base_typeattr_167 (netlink_crypto_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app base_typeattr_167 (sctp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind name_connect association)))
(neverallow isolated_app base_typeattr_167 (ax25_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app base_typeattr_167 (ipx_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app base_typeattr_167 (netrom_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app base_typeattr_167 (atmpvc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app base_typeattr_167 (x25_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app base_typeattr_167 (rose_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app base_typeattr_167 (decnet_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app base_typeattr_167 (atmsvc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app base_typeattr_167 (rds_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app base_typeattr_167 (irda_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app base_typeattr_167 (pppox_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app base_typeattr_167 (llc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app base_typeattr_167 (can_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app base_typeattr_167 (tipc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app base_typeattr_167 (bluetooth_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app base_typeattr_167 (iucv_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app base_typeattr_167 (rxrpc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app base_typeattr_167 (isdn_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app base_typeattr_167 (phonet_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app base_typeattr_167 (ieee802154_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app base_typeattr_167 (caif_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app base_typeattr_167 (alg_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app base_typeattr_167 (nfc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app base_typeattr_167 (vsock_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app base_typeattr_167 (kcm_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app base_typeattr_167 (qipcrtr_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app base_typeattr_167 (smc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app base_typeattr_167 (xdp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider base_typeattr_167 (socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider base_typeattr_167 (netlink_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider base_typeattr_167 (packet_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider base_typeattr_167 (key_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider base_typeattr_167 (netlink_tcpdiag_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write)))
(neverallow mediaprovider base_typeattr_167 (netlink_nflog_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider base_typeattr_167 (netlink_xfrm_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write)))
(neverallow mediaprovider base_typeattr_167 (netlink_audit_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write nlmsg_relay nlmsg_readpriv nlmsg_tty_audit)))
(neverallow mediaprovider base_typeattr_167 (netlink_dnrt_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider base_typeattr_167 (netlink_kobject_uevent_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider base_typeattr_167 (appletalk_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider base_typeattr_167 (tun_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind attach_queue)))
(neverallow mediaprovider base_typeattr_167 (netlink_iscsi_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider base_typeattr_167 (netlink_fib_lookup_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider base_typeattr_167 (netlink_connector_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider base_typeattr_167 (netlink_netfilter_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider base_typeattr_167 (netlink_generic_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider base_typeattr_167 (netlink_scsitransport_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider base_typeattr_167 (netlink_rdma_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider base_typeattr_167 (netlink_crypto_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider base_typeattr_167 (sctp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind name_connect association)))
(neverallow mediaprovider base_typeattr_167 (ax25_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider base_typeattr_167 (ipx_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider base_typeattr_167 (netrom_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider base_typeattr_167 (atmpvc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider base_typeattr_167 (x25_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider base_typeattr_167 (rose_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider base_typeattr_167 (decnet_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider base_typeattr_167 (atmsvc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider base_typeattr_167 (rds_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider base_typeattr_167 (irda_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider base_typeattr_167 (pppox_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider base_typeattr_167 (llc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider base_typeattr_167 (can_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider base_typeattr_167 (tipc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider base_typeattr_167 (bluetooth_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider base_typeattr_167 (iucv_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider base_typeattr_167 (rxrpc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider base_typeattr_167 (isdn_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider base_typeattr_167 (phonet_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider base_typeattr_167 (ieee802154_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider base_typeattr_167 (caif_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider base_typeattr_167 (alg_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider base_typeattr_167 (nfc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider base_typeattr_167 (vsock_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider base_typeattr_167 (kcm_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider base_typeattr_167 (qipcrtr_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider base_typeattr_167 (smc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider base_typeattr_167 (xdp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app base_typeattr_167 (socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app base_typeattr_167 (netlink_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app base_typeattr_167 (packet_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app base_typeattr_167 (key_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app base_typeattr_167 (netlink_tcpdiag_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write)))
(neverallow untrusted_app base_typeattr_167 (netlink_nflog_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app base_typeattr_167 (netlink_xfrm_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write)))
(neverallow untrusted_app base_typeattr_167 (netlink_audit_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write nlmsg_relay nlmsg_readpriv nlmsg_tty_audit)))
(neverallow untrusted_app base_typeattr_167 (netlink_dnrt_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app base_typeattr_167 (netlink_kobject_uevent_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app base_typeattr_167 (appletalk_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app base_typeattr_167 (tun_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind attach_queue)))
(neverallow untrusted_app base_typeattr_167 (netlink_iscsi_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app base_typeattr_167 (netlink_fib_lookup_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app base_typeattr_167 (netlink_connector_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app base_typeattr_167 (netlink_netfilter_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app base_typeattr_167 (netlink_generic_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app base_typeattr_167 (netlink_scsitransport_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app base_typeattr_167 (netlink_rdma_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app base_typeattr_167 (netlink_crypto_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app base_typeattr_167 (sctp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind name_connect association)))
(neverallow untrusted_app base_typeattr_167 (ax25_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app base_typeattr_167 (ipx_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app base_typeattr_167 (netrom_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app base_typeattr_167 (atmpvc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app base_typeattr_167 (x25_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app base_typeattr_167 (rose_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app base_typeattr_167 (decnet_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app base_typeattr_167 (atmsvc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app base_typeattr_167 (rds_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app base_typeattr_167 (irda_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app base_typeattr_167 (pppox_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app base_typeattr_167 (llc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app base_typeattr_167 (can_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app base_typeattr_167 (tipc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app base_typeattr_167 (bluetooth_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app base_typeattr_167 (iucv_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app base_typeattr_167 (rxrpc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app base_typeattr_167 (isdn_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app base_typeattr_167 (phonet_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app base_typeattr_167 (ieee802154_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app base_typeattr_167 (caif_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app base_typeattr_167 (alg_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app base_typeattr_167 (nfc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app base_typeattr_167 (vsock_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app base_typeattr_167 (kcm_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app base_typeattr_167 (qipcrtr_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app base_typeattr_167 (smc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app base_typeattr_167 (xdp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_27 base_typeattr_167 (socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_27 base_typeattr_167 (netlink_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_27 base_typeattr_167 (packet_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_27 base_typeattr_167 (key_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_27 base_typeattr_167 (netlink_tcpdiag_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write)))
(neverallow untrusted_app_27 base_typeattr_167 (netlink_nflog_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_27 base_typeattr_167 (netlink_xfrm_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write)))
(neverallow untrusted_app_27 base_typeattr_167 (netlink_audit_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write nlmsg_relay nlmsg_readpriv nlmsg_tty_audit)))
(neverallow untrusted_app_27 base_typeattr_167 (netlink_dnrt_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_27 base_typeattr_167 (netlink_kobject_uevent_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_27 base_typeattr_167 (appletalk_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_27 base_typeattr_167 (tun_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind attach_queue)))
(neverallow untrusted_app_27 base_typeattr_167 (netlink_iscsi_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_27 base_typeattr_167 (netlink_fib_lookup_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_27 base_typeattr_167 (netlink_connector_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_27 base_typeattr_167 (netlink_netfilter_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_27 base_typeattr_167 (netlink_generic_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_27 base_typeattr_167 (netlink_scsitransport_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_27 base_typeattr_167 (netlink_rdma_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_27 base_typeattr_167 (netlink_crypto_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_27 base_typeattr_167 (sctp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind name_connect association)))
(neverallow untrusted_app_27 base_typeattr_167 (ax25_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_27 base_typeattr_167 (ipx_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_27 base_typeattr_167 (netrom_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_27 base_typeattr_167 (atmpvc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_27 base_typeattr_167 (x25_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_27 base_typeattr_167 (rose_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_27 base_typeattr_167 (decnet_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_27 base_typeattr_167 (atmsvc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_27 base_typeattr_167 (rds_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_27 base_typeattr_167 (irda_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_27 base_typeattr_167 (pppox_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_27 base_typeattr_167 (llc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_27 base_typeattr_167 (can_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_27 base_typeattr_167 (tipc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_27 base_typeattr_167 (bluetooth_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_27 base_typeattr_167 (iucv_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_27 base_typeattr_167 (rxrpc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_27 base_typeattr_167 (isdn_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_27 base_typeattr_167 (phonet_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_27 base_typeattr_167 (ieee802154_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_27 base_typeattr_167 (caif_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_27 base_typeattr_167 (alg_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_27 base_typeattr_167 (nfc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_27 base_typeattr_167 (vsock_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_27 base_typeattr_167 (kcm_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_27 base_typeattr_167 (qipcrtr_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_27 base_typeattr_167 (smc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_27 base_typeattr_167 (xdp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_25 base_typeattr_167 (socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_25 base_typeattr_167 (netlink_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_25 base_typeattr_167 (packet_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_25 base_typeattr_167 (key_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_25 base_typeattr_167 (netlink_tcpdiag_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write)))
(neverallow untrusted_app_25 base_typeattr_167 (netlink_nflog_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_25 base_typeattr_167 (netlink_xfrm_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write)))
(neverallow untrusted_app_25 base_typeattr_167 (netlink_audit_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write nlmsg_relay nlmsg_readpriv nlmsg_tty_audit)))
(neverallow untrusted_app_25 base_typeattr_167 (netlink_dnrt_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_25 base_typeattr_167 (netlink_kobject_uevent_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_25 base_typeattr_167 (appletalk_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_25 base_typeattr_167 (tun_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind attach_queue)))
(neverallow untrusted_app_25 base_typeattr_167 (netlink_iscsi_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_25 base_typeattr_167 (netlink_fib_lookup_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_25 base_typeattr_167 (netlink_connector_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_25 base_typeattr_167 (netlink_netfilter_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_25 base_typeattr_167 (netlink_generic_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_25 base_typeattr_167 (netlink_scsitransport_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_25 base_typeattr_167 (netlink_rdma_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_25 base_typeattr_167 (netlink_crypto_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_25 base_typeattr_167 (sctp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind name_connect association)))
(neverallow untrusted_app_25 base_typeattr_167 (ax25_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_25 base_typeattr_167 (ipx_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_25 base_typeattr_167 (netrom_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_25 base_typeattr_167 (atmpvc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_25 base_typeattr_167 (x25_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_25 base_typeattr_167 (rose_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_25 base_typeattr_167 (decnet_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_25 base_typeattr_167 (atmsvc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_25 base_typeattr_167 (rds_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_25 base_typeattr_167 (irda_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_25 base_typeattr_167 (pppox_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_25 base_typeattr_167 (llc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_25 base_typeattr_167 (can_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_25 base_typeattr_167 (tipc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_25 base_typeattr_167 (bluetooth_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_25 base_typeattr_167 (iucv_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_25 base_typeattr_167 (rxrpc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_25 base_typeattr_167 (isdn_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_25 base_typeattr_167 (phonet_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_25 base_typeattr_167 (ieee802154_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_25 base_typeattr_167 (caif_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_25 base_typeattr_167 (alg_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_25 base_typeattr_167 (nfc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_25 base_typeattr_167 (vsock_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_25 base_typeattr_167 (kcm_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_25 base_typeattr_167 (qipcrtr_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_25 base_typeattr_167 (smc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_25 base_typeattr_167 (xdp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
;;* lme

;;* lmx 116 system/sepolicy/prebuilts/api/29.0/private/app_neverallows.te

(neverallow base_typeattr_504 cache_file (dir (write create setattr relabelfrom relabelto append map unlink link rename execute quotaon mounton add_name remove_name reparent rmdir audit_access execmod)))
(neverallow base_typeattr_504 cache_recovery_file (dir (write create setattr relabelfrom relabelto append map unlink link rename execute quotaon mounton add_name remove_name reparent rmdir audit_access execmod)))
;;* lme

;;* lmx 117 system/sepolicy/prebuilts/api/29.0/private/app_neverallows.te

(neverallow base_typeattr_504 cache_file (file (ioctl write create setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod open audit_access)))
(neverallow base_typeattr_504 cache_recovery_file (file (ioctl write create setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod open audit_access)))
;;* lme

;;* lmx 138 system/sepolicy/prebuilts/api/29.0/private/app_neverallows.te

(neverallow base_typeattr_504 base_typeattr_508 (file (create unlink)))
(neverallow base_typeattr_504 base_typeattr_508 (dir (create unlink)))
(neverallow base_typeattr_504 base_typeattr_508 (lnk_file (create unlink)))
(neverallow base_typeattr_504 base_typeattr_508 (chr_file (create unlink)))
(neverallow base_typeattr_504 base_typeattr_508 (blk_file (create unlink)))
(neverallow base_typeattr_504 base_typeattr_508 (sock_file (create unlink)))
(neverallow base_typeattr_504 base_typeattr_508 (fifo_file (create unlink)))
;;* lme

;;* lmx 141 system/sepolicy/prebuilts/api/29.0/private/app_neverallows.te

(neverallow untrusted_app_all fuse_device (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod open audit_access)))
(neverallow ephemeral_app fuse_device (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod open audit_access)))
(neverallow isolated_app fuse_device (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod open audit_access)))
(neverallow mediaprovider fuse_device (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod open audit_access)))
(neverallow untrusted_app fuse_device (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod open audit_access)))
(neverallow untrusted_app_27 fuse_device (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod open audit_access)))
(neverallow untrusted_app_25 fuse_device (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod open audit_access)))
;;* lme

;;* lmx 144 system/sepolicy/prebuilts/api/29.0/private/app_neverallows.te

(neverallow untrusted_app_all tun_device (chr_file (open)))
(neverallow ephemeral_app tun_device (chr_file (open)))
(neverallow isolated_app tun_device (chr_file (open)))
(neverallow mediaprovider tun_device (chr_file (open)))
(neverallow untrusted_app tun_device (chr_file (open)))
(neverallow untrusted_app_27 tun_device (chr_file (open)))
(neverallow untrusted_app_25 tun_device (chr_file (open)))
;;* lme

;;* lmx 169 system/sepolicy/prebuilts/api/29.0/private/app_neverallows.te

(neverallowx untrusted_app_all tun_device (ioctl chr_file ((range 0x54c8 0x54d1) (range 0x54d3 0x54d9) 0x54db)))
(neverallowx ephemeral_app tun_device (ioctl chr_file ((range 0x54c8 0x54d1) (range 0x54d3 0x54d9) 0x54db)))
(neverallowx isolated_app tun_device (ioctl chr_file ((range 0x54c8 0x54d1) (range 0x54d3 0x54d9) 0x54db)))
(neverallowx mediaprovider tun_device (ioctl chr_file ((range 0x54c8 0x54d1) (range 0x54d3 0x54d9) 0x54db)))
(neverallowx untrusted_app tun_device (ioctl chr_file ((range 0x54c8 0x54d1) (range 0x54d3 0x54d9) 0x54db)))
(neverallowx untrusted_app_27 tun_device (ioctl chr_file ((range 0x54c8 0x54d1) (range 0x54d3 0x54d9) 0x54db)))
(neverallowx untrusted_app_25 tun_device (ioctl chr_file ((range 0x54c8 0x54d1) (range 0x54d3 0x54d9) 0x54db)))
;;* lme

;;* lmx 169 system/sepolicy/prebuilts/api/29.0/private/app_neverallows.te

(neverallowx untrusted_app_all tun_device (ioctl chr_file (0x8924 0x8927)))
(neverallowx ephemeral_app tun_device (ioctl chr_file (0x8924 0x8927)))
(neverallowx isolated_app tun_device (ioctl chr_file (0x8924 0x8927)))
(neverallowx mediaprovider tun_device (ioctl chr_file (0x8924 0x8927)))
(neverallowx untrusted_app tun_device (ioctl chr_file (0x8924 0x8927)))
(neverallowx untrusted_app_27 tun_device (ioctl chr_file (0x8924 0x8927)))
(neverallowx untrusted_app_25 tun_device (ioctl chr_file (0x8924 0x8927)))
;;* lme

;;* lmx 172 system/sepolicy/prebuilts/api/29.0/private/app_neverallows.te

(neverallow untrusted_app_all anr_data_file (file (ioctl read write create getattr setattr lock relabelfrom relabelto map unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod audit_access)))
(neverallow ephemeral_app anr_data_file (file (ioctl read write create getattr setattr lock relabelfrom relabelto map unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod audit_access)))
(neverallow isolated_app anr_data_file (file (ioctl read write create getattr setattr lock relabelfrom relabelto map unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod audit_access)))
(neverallow mediaprovider anr_data_file (file (ioctl read write create getattr setattr lock relabelfrom relabelto map unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod audit_access)))
(neverallow untrusted_app anr_data_file (file (ioctl read write create getattr setattr lock relabelfrom relabelto map unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod audit_access)))
(neverallow untrusted_app_27 anr_data_file (file (ioctl read write create getattr setattr lock relabelfrom relabelto map unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod audit_access)))
(neverallow untrusted_app_25 anr_data_file (file (ioctl read write create getattr setattr lock relabelfrom relabelto map unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod audit_access)))
;;* lme

;;* lmx 173 system/sepolicy/prebuilts/api/29.0/private/app_neverallows.te

(neverallow untrusted_app_all anr_data_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton add_name remove_name reparent rmdir open audit_access execmod)))
(neverallow ephemeral_app anr_data_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton add_name remove_name reparent rmdir open audit_access execmod)))
(neverallow isolated_app anr_data_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton add_name remove_name reparent rmdir open audit_access execmod)))
(neverallow mediaprovider anr_data_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton add_name remove_name reparent rmdir open audit_access execmod)))
(neverallow untrusted_app anr_data_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton add_name remove_name reparent rmdir open audit_access execmod)))
(neverallow untrusted_app_27 anr_data_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton add_name remove_name reparent rmdir open audit_access execmod)))
(neverallow untrusted_app_25 anr_data_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton add_name remove_name reparent rmdir open audit_access execmod)))
;;* lme

;;* lmx 192 system/sepolicy/prebuilts/api/29.0/private/app_neverallows.te

(neverallow untrusted_app_all proc (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute execute_no_trans open)))
(neverallow untrusted_app_all proc_asound (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute execute_no_trans open)))
(neverallow untrusted_app_all proc_filesystems (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute execute_no_trans open)))
(neverallow untrusted_app_all proc_kmsg (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute execute_no_trans open)))
(neverallow untrusted_app_all proc_loadavg (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute execute_no_trans open)))
(neverallow untrusted_app_all proc_mounts (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute execute_no_trans open)))
(neverallow untrusted_app_all proc_pagetypeinfo (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute execute_no_trans open)))
(neverallow untrusted_app_all proc_slabinfo (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute execute_no_trans open)))
(neverallow untrusted_app_all proc_stat (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute execute_no_trans open)))
(neverallow untrusted_app_all proc_swaps (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute execute_no_trans open)))
(neverallow untrusted_app_all proc_uptime (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute execute_no_trans open)))
(neverallow untrusted_app_all proc_version (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute execute_no_trans open)))
(neverallow untrusted_app_all proc_vmallocinfo (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute execute_no_trans open)))
(neverallow untrusted_app_all proc_vmstat (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute execute_no_trans open)))
(neverallow ephemeral_app proc (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute execute_no_trans open)))
(neverallow ephemeral_app proc_asound (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute execute_no_trans open)))
(neverallow ephemeral_app proc_filesystems (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute execute_no_trans open)))
(neverallow ephemeral_app proc_kmsg (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute execute_no_trans open)))
(neverallow ephemeral_app proc_loadavg (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute execute_no_trans open)))
(neverallow ephemeral_app proc_mounts (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute execute_no_trans open)))
(neverallow ephemeral_app proc_pagetypeinfo (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute execute_no_trans open)))
(neverallow ephemeral_app proc_slabinfo (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute execute_no_trans open)))
(neverallow ephemeral_app proc_stat (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute execute_no_trans open)))
(neverallow ephemeral_app proc_swaps (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute execute_no_trans open)))
(neverallow ephemeral_app proc_uptime (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute execute_no_trans open)))
(neverallow ephemeral_app proc_version (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute execute_no_trans open)))
(neverallow ephemeral_app proc_vmallocinfo (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute execute_no_trans open)))
(neverallow ephemeral_app proc_vmstat (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute execute_no_trans open)))
(neverallow isolated_app proc (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute execute_no_trans open)))
(neverallow isolated_app proc_asound (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute execute_no_trans open)))
(neverallow isolated_app proc_filesystems (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute execute_no_trans open)))
(neverallow isolated_app proc_kmsg (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute execute_no_trans open)))
(neverallow isolated_app proc_loadavg (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute execute_no_trans open)))
(neverallow isolated_app proc_mounts (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute execute_no_trans open)))
(neverallow isolated_app proc_pagetypeinfo (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute execute_no_trans open)))
(neverallow isolated_app proc_slabinfo (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute execute_no_trans open)))
(neverallow isolated_app proc_stat (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute execute_no_trans open)))
(neverallow isolated_app proc_swaps (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute execute_no_trans open)))
(neverallow isolated_app proc_uptime (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute execute_no_trans open)))
(neverallow isolated_app proc_version (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute execute_no_trans open)))
(neverallow isolated_app proc_vmallocinfo (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute execute_no_trans open)))
(neverallow isolated_app proc_vmstat (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute execute_no_trans open)))
(neverallow mediaprovider proc (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute execute_no_trans open)))
(neverallow mediaprovider proc_asound (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute execute_no_trans open)))
(neverallow mediaprovider proc_filesystems (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute execute_no_trans open)))
(neverallow mediaprovider proc_kmsg (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute execute_no_trans open)))
(neverallow mediaprovider proc_loadavg (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute execute_no_trans open)))
(neverallow mediaprovider proc_mounts (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute execute_no_trans open)))
(neverallow mediaprovider proc_pagetypeinfo (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute execute_no_trans open)))
(neverallow mediaprovider proc_slabinfo (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute execute_no_trans open)))
(neverallow mediaprovider proc_stat (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute execute_no_trans open)))
(neverallow mediaprovider proc_swaps (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute execute_no_trans open)))
(neverallow mediaprovider proc_uptime (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute execute_no_trans open)))
(neverallow mediaprovider proc_version (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute execute_no_trans open)))
(neverallow mediaprovider proc_vmallocinfo (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute execute_no_trans open)))
(neverallow mediaprovider proc_vmstat (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute execute_no_trans open)))
(neverallow untrusted_app proc (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute execute_no_trans open)))
(neverallow untrusted_app proc_asound (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute execute_no_trans open)))
(neverallow untrusted_app proc_filesystems (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute execute_no_trans open)))
(neverallow untrusted_app proc_kmsg (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute execute_no_trans open)))
(neverallow untrusted_app proc_loadavg (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute execute_no_trans open)))
(neverallow untrusted_app proc_mounts (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute execute_no_trans open)))
(neverallow untrusted_app proc_pagetypeinfo (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute execute_no_trans open)))
(neverallow untrusted_app proc_slabinfo (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute execute_no_trans open)))
(neverallow untrusted_app proc_stat (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute execute_no_trans open)))
(neverallow untrusted_app proc_swaps (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute execute_no_trans open)))
(neverallow untrusted_app proc_uptime (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute execute_no_trans open)))
(neverallow untrusted_app proc_version (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute execute_no_trans open)))
(neverallow untrusted_app proc_vmallocinfo (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute execute_no_trans open)))
(neverallow untrusted_app proc_vmstat (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute execute_no_trans open)))
(neverallow untrusted_app_27 proc (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute execute_no_trans open)))
(neverallow untrusted_app_27 proc_asound (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute execute_no_trans open)))
(neverallow untrusted_app_27 proc_filesystems (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute execute_no_trans open)))
(neverallow untrusted_app_27 proc_kmsg (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute execute_no_trans open)))
(neverallow untrusted_app_27 proc_loadavg (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute execute_no_trans open)))
(neverallow untrusted_app_27 proc_mounts (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute execute_no_trans open)))
(neverallow untrusted_app_27 proc_pagetypeinfo (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute execute_no_trans open)))
(neverallow untrusted_app_27 proc_slabinfo (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute execute_no_trans open)))
(neverallow untrusted_app_27 proc_stat (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute execute_no_trans open)))
(neverallow untrusted_app_27 proc_swaps (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute execute_no_trans open)))
(neverallow untrusted_app_27 proc_uptime (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute execute_no_trans open)))
(neverallow untrusted_app_27 proc_version (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute execute_no_trans open)))
(neverallow untrusted_app_27 proc_vmallocinfo (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute execute_no_trans open)))
(neverallow untrusted_app_27 proc_vmstat (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute execute_no_trans open)))
(neverallow untrusted_app_25 proc (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute execute_no_trans open)))
(neverallow untrusted_app_25 proc_asound (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute execute_no_trans open)))
(neverallow untrusted_app_25 proc_filesystems (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute execute_no_trans open)))
(neverallow untrusted_app_25 proc_kmsg (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute execute_no_trans open)))
(neverallow untrusted_app_25 proc_loadavg (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute execute_no_trans open)))
(neverallow untrusted_app_25 proc_mounts (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute execute_no_trans open)))
(neverallow untrusted_app_25 proc_pagetypeinfo (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute execute_no_trans open)))
(neverallow untrusted_app_25 proc_slabinfo (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute execute_no_trans open)))
(neverallow untrusted_app_25 proc_stat (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute execute_no_trans open)))
(neverallow untrusted_app_25 proc_swaps (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute execute_no_trans open)))
(neverallow untrusted_app_25 proc_uptime (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute execute_no_trans open)))
(neverallow untrusted_app_25 proc_version (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute execute_no_trans open)))
(neverallow untrusted_app_25 proc_vmallocinfo (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute execute_no_trans open)))
(neverallow untrusted_app_25 proc_vmstat (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute execute_no_trans open)))
;;* lme

;;* lmx 195 system/sepolicy/prebuilts/api/29.0/private/app_neverallows.te

(neverallow untrusted_app_all config_gz (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute execute_no_trans open)))
(neverallow ephemeral_app config_gz (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute execute_no_trans open)))
(neverallow isolated_app config_gz (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute execute_no_trans open)))
(neverallow mediaprovider config_gz (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute execute_no_trans open)))
(neverallow untrusted_app config_gz (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute execute_no_trans open)))
(neverallow untrusted_app_27 config_gz (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute execute_no_trans open)))
(neverallow untrusted_app_25 config_gz (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute execute_no_trans open)))
;;* lme

;;* lmx 198 system/sepolicy/prebuilts/api/29.0/private/app_neverallows.te

(neverallow untrusted_app_all preloads_data_file (file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
(neverallow ephemeral_app preloads_data_file (file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
(neverallow isolated_app preloads_data_file (file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
(neverallow mediaprovider preloads_data_file (file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
(neverallow untrusted_app preloads_data_file (file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
(neverallow untrusted_app_27 preloads_data_file (file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
(neverallow untrusted_app_25 preloads_data_file (file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
;;* lme

;;* lmx 202 system/sepolicy/prebuilts/api/29.0/private/app_neverallows.te

(neverallow untrusted_app_all system_file (file (lock)))
(neverallow ephemeral_app system_file (file (lock)))
(neverallow isolated_app system_file (file (lock)))
(neverallow mediaprovider system_file (file (lock)))
(neverallow untrusted_app system_file (file (lock)))
(neverallow untrusted_app_27 system_file (file (lock)))
(neverallow untrusted_app_25 system_file (file (lock)))
;;* lme

;;* lmx 206 system/sepolicy/prebuilts/api/29.0/private/app_neverallows.te

(neverallow untrusted_app_all base_typeattr_167 (hwservice_manager (add list)))
(neverallow ephemeral_app base_typeattr_167 (hwservice_manager (add list)))
(neverallow isolated_app base_typeattr_167 (hwservice_manager (add list)))
(neverallow mediaprovider base_typeattr_167 (hwservice_manager (add list)))
(neverallow untrusted_app base_typeattr_167 (hwservice_manager (add list)))
(neverallow untrusted_app_27 base_typeattr_167 (hwservice_manager (add list)))
(neverallow untrusted_app_25 base_typeattr_167 (hwservice_manager (add list)))
;;* lme

;;* lmx 246 system/sepolicy/prebuilts/api/29.0/private/app_neverallows.te

(neverallow untrusted_app_all base_typeattr_509 (hwservice_manager (find)))
(neverallow ephemeral_app base_typeattr_509 (hwservice_manager (find)))
(neverallow isolated_app base_typeattr_509 (hwservice_manager (find)))
(neverallow mediaprovider base_typeattr_509 (hwservice_manager (find)))
(neverallow untrusted_app base_typeattr_509 (hwservice_manager (find)))
(neverallow untrusted_app_27 base_typeattr_509 (hwservice_manager (find)))
(neverallow untrusted_app_25 base_typeattr_509 (hwservice_manager (find)))
;;* lme

;;* lmx 291 system/sepolicy/prebuilts/api/29.0/private/app_neverallows.te

(neverallow untrusted_app_all default_android_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_all hal_atrace_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_all hal_audio_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_all hal_authsecret_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_all hal_bluetooth_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_all hal_bootctl_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_all hal_camera_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_all hal_confirmationui_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_all hal_contexthub_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_all hal_drm_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_all hal_dumpstate_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_all hal_fingerprint_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_all hal_gatekeeper_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_all hal_gnss_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_all hal_graphics_composer_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_all hal_health_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_all hal_input_classifier_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_all hal_ir_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_all hal_keymaster_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_all hal_light_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_all hal_memtrack_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_all hal_nfc_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_all hal_oemlock_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_all hal_power_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_all hal_power_stats_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_all hal_secure_element_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_all hal_sensors_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_all hal_telephony_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_all hal_thermal_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_all hal_tv_cec_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_all hal_tv_input_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_all hal_usb_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_all hal_vibrator_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_all hal_vr_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_all hal_weaver_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_all hal_wifi_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_all hal_wifi_offload_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_all hal_wifi_supplicant_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_all hidl_base_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_all system_net_netd_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_all thermalcallback_hwservice (hwservice_manager (find)))
(neverallow ephemeral_app default_android_hwservice (hwservice_manager (find)))
(neverallow ephemeral_app hal_atrace_hwservice (hwservice_manager (find)))
(neverallow ephemeral_app hal_audio_hwservice (hwservice_manager (find)))
(neverallow ephemeral_app hal_authsecret_hwservice (hwservice_manager (find)))
(neverallow ephemeral_app hal_bluetooth_hwservice (hwservice_manager (find)))
(neverallow ephemeral_app hal_bootctl_hwservice (hwservice_manager (find)))
(neverallow ephemeral_app hal_camera_hwservice (hwservice_manager (find)))
(neverallow ephemeral_app hal_confirmationui_hwservice (hwservice_manager (find)))
(neverallow ephemeral_app hal_contexthub_hwservice (hwservice_manager (find)))
(neverallow ephemeral_app hal_drm_hwservice (hwservice_manager (find)))
(neverallow ephemeral_app hal_dumpstate_hwservice (hwservice_manager (find)))
(neverallow ephemeral_app hal_fingerprint_hwservice (hwservice_manager (find)))
(neverallow ephemeral_app hal_gatekeeper_hwservice (hwservice_manager (find)))
(neverallow ephemeral_app hal_gnss_hwservice (hwservice_manager (find)))
(neverallow ephemeral_app hal_graphics_composer_hwservice (hwservice_manager (find)))
(neverallow ephemeral_app hal_health_hwservice (hwservice_manager (find)))
(neverallow ephemeral_app hal_input_classifier_hwservice (hwservice_manager (find)))
(neverallow ephemeral_app hal_ir_hwservice (hwservice_manager (find)))
(neverallow ephemeral_app hal_keymaster_hwservice (hwservice_manager (find)))
(neverallow ephemeral_app hal_light_hwservice (hwservice_manager (find)))
(neverallow ephemeral_app hal_memtrack_hwservice (hwservice_manager (find)))
(neverallow ephemeral_app hal_nfc_hwservice (hwservice_manager (find)))
(neverallow ephemeral_app hal_oemlock_hwservice (hwservice_manager (find)))
(neverallow ephemeral_app hal_power_hwservice (hwservice_manager (find)))
(neverallow ephemeral_app hal_power_stats_hwservice (hwservice_manager (find)))
(neverallow ephemeral_app hal_secure_element_hwservice (hwservice_manager (find)))
(neverallow ephemeral_app hal_sensors_hwservice (hwservice_manager (find)))
(neverallow ephemeral_app hal_telephony_hwservice (hwservice_manager (find)))
(neverallow ephemeral_app hal_thermal_hwservice (hwservice_manager (find)))
(neverallow ephemeral_app hal_tv_cec_hwservice (hwservice_manager (find)))
(neverallow ephemeral_app hal_tv_input_hwservice (hwservice_manager (find)))
(neverallow ephemeral_app hal_usb_hwservice (hwservice_manager (find)))
(neverallow ephemeral_app hal_vibrator_hwservice (hwservice_manager (find)))
(neverallow ephemeral_app hal_vr_hwservice (hwservice_manager (find)))
(neverallow ephemeral_app hal_weaver_hwservice (hwservice_manager (find)))
(neverallow ephemeral_app hal_wifi_hwservice (hwservice_manager (find)))
(neverallow ephemeral_app hal_wifi_offload_hwservice (hwservice_manager (find)))
(neverallow ephemeral_app hal_wifi_supplicant_hwservice (hwservice_manager (find)))
(neverallow ephemeral_app hidl_base_hwservice (hwservice_manager (find)))
(neverallow ephemeral_app system_net_netd_hwservice (hwservice_manager (find)))
(neverallow ephemeral_app thermalcallback_hwservice (hwservice_manager (find)))
(neverallow isolated_app default_android_hwservice (hwservice_manager (find)))
(neverallow isolated_app hal_atrace_hwservice (hwservice_manager (find)))
(neverallow isolated_app hal_audio_hwservice (hwservice_manager (find)))
(neverallow isolated_app hal_authsecret_hwservice (hwservice_manager (find)))
(neverallow isolated_app hal_bluetooth_hwservice (hwservice_manager (find)))
(neverallow isolated_app hal_bootctl_hwservice (hwservice_manager (find)))
(neverallow isolated_app hal_camera_hwservice (hwservice_manager (find)))
(neverallow isolated_app hal_confirmationui_hwservice (hwservice_manager (find)))
(neverallow isolated_app hal_contexthub_hwservice (hwservice_manager (find)))
(neverallow isolated_app hal_drm_hwservice (hwservice_manager (find)))
(neverallow isolated_app hal_dumpstate_hwservice (hwservice_manager (find)))
(neverallow isolated_app hal_fingerprint_hwservice (hwservice_manager (find)))
(neverallow isolated_app hal_gatekeeper_hwservice (hwservice_manager (find)))
(neverallow isolated_app hal_gnss_hwservice (hwservice_manager (find)))
(neverallow isolated_app hal_graphics_composer_hwservice (hwservice_manager (find)))
(neverallow isolated_app hal_health_hwservice (hwservice_manager (find)))
(neverallow isolated_app hal_input_classifier_hwservice (hwservice_manager (find)))
(neverallow isolated_app hal_ir_hwservice (hwservice_manager (find)))
(neverallow isolated_app hal_keymaster_hwservice (hwservice_manager (find)))
(neverallow isolated_app hal_light_hwservice (hwservice_manager (find)))
(neverallow isolated_app hal_memtrack_hwservice (hwservice_manager (find)))
(neverallow isolated_app hal_nfc_hwservice (hwservice_manager (find)))
(neverallow isolated_app hal_oemlock_hwservice (hwservice_manager (find)))
(neverallow isolated_app hal_power_hwservice (hwservice_manager (find)))
(neverallow isolated_app hal_power_stats_hwservice (hwservice_manager (find)))
(neverallow isolated_app hal_secure_element_hwservice (hwservice_manager (find)))
(neverallow isolated_app hal_sensors_hwservice (hwservice_manager (find)))
(neverallow isolated_app hal_telephony_hwservice (hwservice_manager (find)))
(neverallow isolated_app hal_thermal_hwservice (hwservice_manager (find)))
(neverallow isolated_app hal_tv_cec_hwservice (hwservice_manager (find)))
(neverallow isolated_app hal_tv_input_hwservice (hwservice_manager (find)))
(neverallow isolated_app hal_usb_hwservice (hwservice_manager (find)))
(neverallow isolated_app hal_vibrator_hwservice (hwservice_manager (find)))
(neverallow isolated_app hal_vr_hwservice (hwservice_manager (find)))
(neverallow isolated_app hal_weaver_hwservice (hwservice_manager (find)))
(neverallow isolated_app hal_wifi_hwservice (hwservice_manager (find)))
(neverallow isolated_app hal_wifi_offload_hwservice (hwservice_manager (find)))
(neverallow isolated_app hal_wifi_supplicant_hwservice (hwservice_manager (find)))
(neverallow isolated_app hidl_base_hwservice (hwservice_manager (find)))
(neverallow isolated_app system_net_netd_hwservice (hwservice_manager (find)))
(neverallow isolated_app thermalcallback_hwservice (hwservice_manager (find)))
(neverallow mediaprovider default_android_hwservice (hwservice_manager (find)))
(neverallow mediaprovider hal_atrace_hwservice (hwservice_manager (find)))
(neverallow mediaprovider hal_audio_hwservice (hwservice_manager (find)))
(neverallow mediaprovider hal_authsecret_hwservice (hwservice_manager (find)))
(neverallow mediaprovider hal_bluetooth_hwservice (hwservice_manager (find)))
(neverallow mediaprovider hal_bootctl_hwservice (hwservice_manager (find)))
(neverallow mediaprovider hal_camera_hwservice (hwservice_manager (find)))
(neverallow mediaprovider hal_confirmationui_hwservice (hwservice_manager (find)))
(neverallow mediaprovider hal_contexthub_hwservice (hwservice_manager (find)))
(neverallow mediaprovider hal_drm_hwservice (hwservice_manager (find)))
(neverallow mediaprovider hal_dumpstate_hwservice (hwservice_manager (find)))
(neverallow mediaprovider hal_fingerprint_hwservice (hwservice_manager (find)))
(neverallow mediaprovider hal_gatekeeper_hwservice (hwservice_manager (find)))
(neverallow mediaprovider hal_gnss_hwservice (hwservice_manager (find)))
(neverallow mediaprovider hal_graphics_composer_hwservice (hwservice_manager (find)))
(neverallow mediaprovider hal_health_hwservice (hwservice_manager (find)))
(neverallow mediaprovider hal_input_classifier_hwservice (hwservice_manager (find)))
(neverallow mediaprovider hal_ir_hwservice (hwservice_manager (find)))
(neverallow mediaprovider hal_keymaster_hwservice (hwservice_manager (find)))
(neverallow mediaprovider hal_light_hwservice (hwservice_manager (find)))
(neverallow mediaprovider hal_memtrack_hwservice (hwservice_manager (find)))
(neverallow mediaprovider hal_nfc_hwservice (hwservice_manager (find)))
(neverallow mediaprovider hal_oemlock_hwservice (hwservice_manager (find)))
(neverallow mediaprovider hal_power_hwservice (hwservice_manager (find)))
(neverallow mediaprovider hal_power_stats_hwservice (hwservice_manager (find)))
(neverallow mediaprovider hal_secure_element_hwservice (hwservice_manager (find)))
(neverallow mediaprovider hal_sensors_hwservice (hwservice_manager (find)))
(neverallow mediaprovider hal_telephony_hwservice (hwservice_manager (find)))
(neverallow mediaprovider hal_thermal_hwservice (hwservice_manager (find)))
(neverallow mediaprovider hal_tv_cec_hwservice (hwservice_manager (find)))
(neverallow mediaprovider hal_tv_input_hwservice (hwservice_manager (find)))
(neverallow mediaprovider hal_usb_hwservice (hwservice_manager (find)))
(neverallow mediaprovider hal_vibrator_hwservice (hwservice_manager (find)))
(neverallow mediaprovider hal_vr_hwservice (hwservice_manager (find)))
(neverallow mediaprovider hal_weaver_hwservice (hwservice_manager (find)))
(neverallow mediaprovider hal_wifi_hwservice (hwservice_manager (find)))
(neverallow mediaprovider hal_wifi_offload_hwservice (hwservice_manager (find)))
(neverallow mediaprovider hal_wifi_supplicant_hwservice (hwservice_manager (find)))
(neverallow mediaprovider hidl_base_hwservice (hwservice_manager (find)))
(neverallow mediaprovider system_net_netd_hwservice (hwservice_manager (find)))
(neverallow mediaprovider thermalcallback_hwservice (hwservice_manager (find)))
(neverallow untrusted_app default_android_hwservice (hwservice_manager (find)))
(neverallow untrusted_app hal_atrace_hwservice (hwservice_manager (find)))
(neverallow untrusted_app hal_audio_hwservice (hwservice_manager (find)))
(neverallow untrusted_app hal_authsecret_hwservice (hwservice_manager (find)))
(neverallow untrusted_app hal_bluetooth_hwservice (hwservice_manager (find)))
(neverallow untrusted_app hal_bootctl_hwservice (hwservice_manager (find)))
(neverallow untrusted_app hal_camera_hwservice (hwservice_manager (find)))
(neverallow untrusted_app hal_confirmationui_hwservice (hwservice_manager (find)))
(neverallow untrusted_app hal_contexthub_hwservice (hwservice_manager (find)))
(neverallow untrusted_app hal_drm_hwservice (hwservice_manager (find)))
(neverallow untrusted_app hal_dumpstate_hwservice (hwservice_manager (find)))
(neverallow untrusted_app hal_fingerprint_hwservice (hwservice_manager (find)))
(neverallow untrusted_app hal_gatekeeper_hwservice (hwservice_manager (find)))
(neverallow untrusted_app hal_gnss_hwservice (hwservice_manager (find)))
(neverallow untrusted_app hal_graphics_composer_hwservice (hwservice_manager (find)))
(neverallow untrusted_app hal_health_hwservice (hwservice_manager (find)))
(neverallow untrusted_app hal_input_classifier_hwservice (hwservice_manager (find)))
(neverallow untrusted_app hal_ir_hwservice (hwservice_manager (find)))
(neverallow untrusted_app hal_keymaster_hwservice (hwservice_manager (find)))
(neverallow untrusted_app hal_light_hwservice (hwservice_manager (find)))
(neverallow untrusted_app hal_memtrack_hwservice (hwservice_manager (find)))
(neverallow untrusted_app hal_nfc_hwservice (hwservice_manager (find)))
(neverallow untrusted_app hal_oemlock_hwservice (hwservice_manager (find)))
(neverallow untrusted_app hal_power_hwservice (hwservice_manager (find)))
(neverallow untrusted_app hal_power_stats_hwservice (hwservice_manager (find)))
(neverallow untrusted_app hal_secure_element_hwservice (hwservice_manager (find)))
(neverallow untrusted_app hal_sensors_hwservice (hwservice_manager (find)))
(neverallow untrusted_app hal_telephony_hwservice (hwservice_manager (find)))
(neverallow untrusted_app hal_thermal_hwservice (hwservice_manager (find)))
(neverallow untrusted_app hal_tv_cec_hwservice (hwservice_manager (find)))
(neverallow untrusted_app hal_tv_input_hwservice (hwservice_manager (find)))
(neverallow untrusted_app hal_usb_hwservice (hwservice_manager (find)))
(neverallow untrusted_app hal_vibrator_hwservice (hwservice_manager (find)))
(neverallow untrusted_app hal_vr_hwservice (hwservice_manager (find)))
(neverallow untrusted_app hal_weaver_hwservice (hwservice_manager (find)))
(neverallow untrusted_app hal_wifi_hwservice (hwservice_manager (find)))
(neverallow untrusted_app hal_wifi_offload_hwservice (hwservice_manager (find)))
(neverallow untrusted_app hal_wifi_supplicant_hwservice (hwservice_manager (find)))
(neverallow untrusted_app hidl_base_hwservice (hwservice_manager (find)))
(neverallow untrusted_app system_net_netd_hwservice (hwservice_manager (find)))
(neverallow untrusted_app thermalcallback_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_27 default_android_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_27 hal_atrace_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_27 hal_audio_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_27 hal_authsecret_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_27 hal_bluetooth_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_27 hal_bootctl_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_27 hal_camera_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_27 hal_confirmationui_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_27 hal_contexthub_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_27 hal_drm_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_27 hal_dumpstate_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_27 hal_fingerprint_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_27 hal_gatekeeper_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_27 hal_gnss_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_27 hal_graphics_composer_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_27 hal_health_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_27 hal_input_classifier_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_27 hal_ir_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_27 hal_keymaster_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_27 hal_light_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_27 hal_memtrack_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_27 hal_nfc_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_27 hal_oemlock_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_27 hal_power_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_27 hal_power_stats_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_27 hal_secure_element_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_27 hal_sensors_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_27 hal_telephony_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_27 hal_thermal_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_27 hal_tv_cec_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_27 hal_tv_input_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_27 hal_usb_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_27 hal_vibrator_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_27 hal_vr_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_27 hal_weaver_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_27 hal_wifi_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_27 hal_wifi_offload_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_27 hal_wifi_supplicant_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_27 hidl_base_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_27 system_net_netd_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_27 thermalcallback_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_25 default_android_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_25 hal_atrace_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_25 hal_audio_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_25 hal_authsecret_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_25 hal_bluetooth_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_25 hal_bootctl_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_25 hal_camera_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_25 hal_confirmationui_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_25 hal_contexthub_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_25 hal_drm_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_25 hal_dumpstate_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_25 hal_fingerprint_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_25 hal_gatekeeper_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_25 hal_gnss_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_25 hal_graphics_composer_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_25 hal_health_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_25 hal_input_classifier_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_25 hal_ir_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_25 hal_keymaster_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_25 hal_light_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_25 hal_memtrack_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_25 hal_nfc_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_25 hal_oemlock_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_25 hal_power_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_25 hal_power_stats_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_25 hal_secure_element_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_25 hal_sensors_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_25 hal_telephony_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_25 hal_thermal_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_25 hal_tv_cec_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_25 hal_tv_input_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_25 hal_usb_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_25 hal_vibrator_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_25 hal_vr_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_25 hal_weaver_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_25 hal_wifi_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_25 hal_wifi_offload_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_25 hal_wifi_supplicant_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_25 hidl_base_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_25 system_net_netd_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_25 thermalcallback_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 302 system/sepolicy/prebuilts/api/29.0/private/app_neverallows.te

(neverallow untrusted_app_all base_typeattr_510 (hwservice_manager (find)))
(neverallow ephemeral_app base_typeattr_510 (hwservice_manager (find)))
(neverallow isolated_app base_typeattr_510 (hwservice_manager (find)))
(neverallow mediaprovider base_typeattr_510 (hwservice_manager (find)))
(neverallow untrusted_app base_typeattr_510 (hwservice_manager (find)))
(neverallow untrusted_app_27 base_typeattr_510 (hwservice_manager (find)))
(neverallow untrusted_app_25 base_typeattr_510 (hwservice_manager (find)))
;;* lme

;;* lmx 305 system/sepolicy/prebuilts/api/29.0/private/app_neverallows.te

(neverallow untrusted_app_all selinuxfs (file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
(neverallow ephemeral_app selinuxfs (file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
(neverallow isolated_app selinuxfs (file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
(neverallow mediaprovider selinuxfs (file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
(neverallow untrusted_app selinuxfs (file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
(neverallow untrusted_app_27 selinuxfs (file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
(neverallow untrusted_app_25 selinuxfs (file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
;;* lme

;;* lmx 310 system/sepolicy/prebuilts/api/29.0/private/app_neverallows.te

(neverallow untrusted_app_all base_typeattr_511 (binder (call transfer)))
(neverallow ephemeral_app base_typeattr_511 (binder (call transfer)))
(neverallow isolated_app base_typeattr_511 (binder (call transfer)))
(neverallow mediaprovider base_typeattr_511 (binder (call transfer)))
(neverallow untrusted_app base_typeattr_511 (binder (call transfer)))
(neverallow untrusted_app_27 base_typeattr_511 (binder (call transfer)))
(neverallow untrusted_app_25 base_typeattr_511 (binder (call transfer)))
;;* lme

;;* lmx 330 system/sepolicy/prebuilts/api/29.0/private/app_neverallows.te

(neverallow base_typeattr_505 proc_tty_drivers (file (ioctl read getattr lock map open)))
;;* lme

;;* lmx 331 system/sepolicy/prebuilts/api/29.0/private/app_neverallows.te

(neverallow untrusted_app_all proc_tty_drivers (file (write create setattr relabelfrom relabelto append unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod audit_access)))
(neverallow ephemeral_app proc_tty_drivers (file (write create setattr relabelfrom relabelto append unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod audit_access)))
(neverallow isolated_app proc_tty_drivers (file (write create setattr relabelfrom relabelto append unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod audit_access)))
(neverallow mediaprovider proc_tty_drivers (file (write create setattr relabelfrom relabelto append unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod audit_access)))
(neverallow untrusted_app proc_tty_drivers (file (write create setattr relabelfrom relabelto append unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod audit_access)))
(neverallow untrusted_app_27 proc_tty_drivers (file (write create setattr relabelfrom relabelto append unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod audit_access)))
(neverallow untrusted_app_25 proc_tty_drivers (file (write create setattr relabelfrom relabelto append unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod audit_access)))
;;* lme

;;* lmx 334 system/sepolicy/prebuilts/api/29.0/private/app_neverallows.te

(neverallow untrusted_app_all cgroup (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod open audit_access)))
(neverallow ephemeral_app cgroup (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod open audit_access)))
(neverallow isolated_app cgroup (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod open audit_access)))
(neverallow mediaprovider cgroup (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod open audit_access)))
(neverallow untrusted_app cgroup (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod open audit_access)))
(neverallow untrusted_app_27 cgroup (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod open audit_access)))
(neverallow untrusted_app_25 cgroup (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod open audit_access)))
;;* lme

;;* lmx 343 system/sepolicy/prebuilts/api/29.0/private/app_neverallows.te

(neverallow base_typeattr_512 ashmem_device (chr_file (open)))
;;* lme

(typetransition app_zygote tmpfs file app_zygote_tmpfs)
(allow app_zygote app_zygote_tmpfs (file (read write getattr map)))
(allow app_zygote self (capability (setgid setuid)))
(allow app_zygote self (cap_userns (setgid setuid)))
(allow app_zygote self (capability (setpcap)))
(allow app_zygote self (cap_userns (setpcap)))
(allow app_zygote self (process (setcurrent)))
(allow app_zygote isolated_app (process (dyntransition)))
(allow app_zygote self (process (execmem)))
(allow app_zygote debugfs_trace_marker (file (getattr)))
(allow app_zygote system_server (process (getpgid)))
(allow app_zygote isolated_app (process (setpgid)))
(dontaudit app_zygote mnt_expand_file (dir (getattr)))
(allow app_zygote seapp_contexts_file (file (ioctl read getattr lock map open)))
(allow app_zygote selinuxfs (dir (ioctl read getattr lock search open)))
(allow app_zygote selinuxfs (file (ioctl read getattr lock map open)))
(allow app_zygote selinuxfs (lnk_file (ioctl read getattr lock map open)))
(allow app_zygote selinuxfs (file (write lock append map open)))
(allow app_zygote kernel (security (check_context)))
(allow app_zygote selinuxfs (dir (ioctl read getattr lock search open)))
(allow app_zygote selinuxfs (file (ioctl read getattr lock map open)))
(allow app_zygote selinuxfs (lnk_file (ioctl read getattr lock map open)))
(allow app_zygote selinuxfs (file (write lock append map open)))
(allow app_zygote kernel (security (compute_av)))
(allow app_zygote self (netlink_selinux_socket (read write create getattr setattr lock relabelfrom relabelto append bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(allow app_zygote zygote (fd (use)))
(allow app_zygote zygote (process (sigchld)))
(allow app_zygote dalvikcache_data_file (dir (ioctl read getattr lock search open)))
(allow app_zygote dalvikcache_data_file (file (ioctl read getattr lock map open)))
(allow app_zygote dalvikcache_data_file (lnk_file (ioctl read getattr lock map open)))
(allow app_zygote dalvikcache_data_file (file (execute)))
(allow app_zygote apk_data_file (dir (ioctl read getattr lock search open)))
(allow app_zygote apk_data_file (file (ioctl read getattr lock map execute open)))
(allow app_zygote vendor_overlay_file (dir (ioctl read getattr lock search open)))
(allow app_zygote vendor_overlay_file (file (ioctl read getattr lock map open)))
(allow app_zygote vendor_overlay_file (lnk_file (ioctl read getattr lock map open)))
(allow app_zygote system_data_file (lnk_file (ioctl read getattr lock map open)))
(allow app_zygote system_data_file (file (read getattr map)))
;;* lmx 75 system/sepolicy/prebuilts/api/29.0/private/app_zygote.te

(neverallow app_zygote base_typeattr_513 (process (dyntransition)))
;;* lme

;;* lmx 78 system/sepolicy/prebuilts/api/29.0/private/app_zygote.te

(neverallow app_zygote base_typeattr_514 (process (transition)))
;;* lme

;;* lmx 82 system/sepolicy/prebuilts/api/29.0/private/app_zygote.te

(neverallow app_zygote base_typeattr_167 (file (execute_no_trans)))
;;* lme

;;* lmx 86 system/sepolicy/prebuilts/api/29.0/private/app_zygote.te

(neverallow base_typeattr_515 app_zygote (process (dyntransition)))
;;* lme

;;* lmx 89 system/sepolicy/prebuilts/api/29.0/private/app_zygote.te

(neverallow app_zygote property_socket (sock_file (write)))
;;* lme

;;* lmx 90 system/sepolicy/prebuilts/api/29.0/private/app_zygote.te

(neverallow app_zygote property_type (property_service (set)))
;;* lme

;;* lmx 98 system/sepolicy/prebuilts/api/29.0/private/app_zygote.te

(neverallow app_zygote shell_data_file (file (ioctl read write getattr lock append map execute execute_no_trans open)))
(neverallow app_zygote bluetooth_data_file (file (ioctl read write getattr lock append map execute execute_no_trans open)))
(neverallow app_zygote nfc_data_file (file (ioctl read write getattr lock append map execute execute_no_trans open)))
(neverallow app_zygote radio_data_file (file (ioctl read write getattr lock append map execute execute_no_trans open)))
;;* lme

;;* lmx 105 system/sepolicy/prebuilts/api/29.0/private/app_zygote.te

(neverallow app_zygote base_typeattr_516 (service_manager (find)))
;;* lme

;;* lmx 108 system/sepolicy/prebuilts/api/29.0/private/app_zygote.te

(neverallow app_zygote gpu_device (chr_file (ioctl read write getattr lock append map execute execute_no_trans open)))
;;* lme

;;* lmx 111 system/sepolicy/prebuilts/api/29.0/private/app_zygote.te

(neverallow app_zygote cache_file (dir (write create setattr relabelfrom relabelto append map unlink link rename execute quotaon mounton add_name remove_name reparent rmdir audit_access execmod)))
;;* lme

;;* lmx 112 system/sepolicy/prebuilts/api/29.0/private/app_zygote.te

(neverallow app_zygote cache_file (file (ioctl write create setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod open audit_access)))
;;* lme

;;* lmx 128 system/sepolicy/prebuilts/api/29.0/private/app_zygote.te

(neverallow app_zygote domain (socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow app_zygote domain (tcp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind name_connect)))
(neverallow app_zygote domain (udp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind)))
(neverallow app_zygote domain (rawip_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind)))
(neverallow app_zygote domain (netlink_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow app_zygote domain (packet_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow app_zygote domain (key_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow app_zygote domain (netlink_route_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write)))
(neverallow app_zygote domain (netlink_tcpdiag_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write)))
(neverallow app_zygote domain (netlink_nflog_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow app_zygote domain (netlink_xfrm_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write)))
(neverallow app_zygote domain (netlink_audit_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write nlmsg_relay nlmsg_readpriv nlmsg_tty_audit)))
(neverallow app_zygote domain (netlink_dnrt_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow app_zygote domain (netlink_kobject_uevent_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow app_zygote domain (appletalk_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow app_zygote domain (tun_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind attach_queue)))
(neverallow app_zygote domain (netlink_iscsi_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow app_zygote domain (netlink_fib_lookup_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow app_zygote domain (netlink_connector_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow app_zygote domain (netlink_netfilter_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow app_zygote domain (netlink_generic_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow app_zygote domain (netlink_scsitransport_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow app_zygote domain (netlink_rdma_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow app_zygote domain (netlink_crypto_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow app_zygote domain (sctp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind name_connect association)))
(neverallow app_zygote domain (icmp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind)))
(neverallow app_zygote domain (ax25_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow app_zygote domain (ipx_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow app_zygote domain (netrom_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow app_zygote domain (atmpvc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow app_zygote domain (x25_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow app_zygote domain (rose_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow app_zygote domain (decnet_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow app_zygote domain (atmsvc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow app_zygote domain (rds_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow app_zygote domain (irda_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow app_zygote domain (pppox_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow app_zygote domain (llc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow app_zygote domain (can_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow app_zygote domain (tipc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow app_zygote domain (bluetooth_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow app_zygote domain (iucv_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow app_zygote domain (rxrpc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow app_zygote domain (isdn_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow app_zygote domain (phonet_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow app_zygote domain (ieee802154_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow app_zygote domain (caif_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow app_zygote domain (alg_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow app_zygote domain (nfc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow app_zygote domain (vsock_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow app_zygote domain (kcm_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow app_zygote domain (qipcrtr_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow app_zygote domain (smc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
;;* lme

;;* lmx 139 system/sepolicy/prebuilts/api/29.0/private/app_zygote.te

(neverallow app_zygote base_typeattr_517 (unix_dgram_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
;;* lme

;;* lmx 146 system/sepolicy/prebuilts/api/29.0/private/app_zygote.te

(neverallow app_zygote base_typeattr_518 (unix_stream_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind connectto)))
;;* lme

;;* lmx 149 system/sepolicy/prebuilts/api/29.0/private/app_zygote.te

(neverallow app_zygote base_typeattr_167 (process (ptrace)))
;;* lme

;;* lmx 158 system/sepolicy/prebuilts/api/29.0/private/app_zygote.te

(neverallow app_zygote bluetooth_a2dp_offload_prop (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(neverallow app_zygote bluetooth_audio_hal_prop (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(neverallow app_zygote bluetooth_prop (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(neverallow app_zygote exported_bluetooth_prop (file (ioctl read write create getattr setattr lock append map unlink rename open)))
;;* lme

(allow init art_apex_boot_integrity_exec (file (read getattr map execute open)))
(allow init art_apex_boot_integrity (process (transition)))
(allow art_apex_boot_integrity art_apex_boot_integrity_exec (file (read getattr map execute entrypoint open)))
(dontaudit init art_apex_boot_integrity (process (noatsecure)))
(allow init art_apex_boot_integrity (process (siginh rlimitinh)))
(typetransition init art_apex_boot_integrity_exec process art_apex_boot_integrity)
(allow art_apex_boot_integrity dalvikcache_data_file (dir (ioctl read write getattr lock remove_name search open)))
(allow art_apex_boot_integrity dalvikcache_data_file (file (ioctl read getattr lock map unlink open)))
(allow art_apex_boot_integrity shell_exec (file (ioctl read getattr lock map execute execute_no_trans open)))
(allow art_apex_boot_integrity toolbox_exec (file (ioctl read getattr lock map execute execute_no_trans open)))
(allow art_apex_boot_integrity system_file (file (execute_no_trans)))
(allowx art_apex_boot_integrity dalvikcache_data_file (ioctl file ((range 0x6685 0x6686))))
(allow art_apex_postinstall apexd (fd (use)))
(allow art_apex_postinstall ota_data_file (dir (ioctl read write getattr lock relabelfrom rename remove_name reparent search open)))
(allow art_apex_postinstall ota_data_file (file (ioctl read getattr lock relabelfrom map open)))
(allow art_apex_postinstall dalvikcache_data_file (dir (ioctl read write create getattr setattr lock relabelto rename add_name remove_name reparent search rmdir open)))
(allow art_apex_postinstall dalvikcache_data_file (file (ioctl read getattr lock relabelto map unlink open)))
(allow art_apex_postinstall file_contexts_file (file (ioctl read getattr lock map open)))
(allow art_apex_postinstall self (capability (sys_admin)))
(allow art_apex_postinstall self (cap_userns (sys_admin)))
(allow art_apex_postinstall shell_exec (file (ioctl read getattr lock map execute execute_no_trans open)))
(allow art_apex_postinstall toolbox_exec (file (ioctl read getattr lock map execute execute_no_trans open)))
(allow art_apex_postinstall system_file (file (execute_no_trans)))
(allowx art_apex_postinstall ota_data_file (ioctl file ((range 0x6685 0x6686))))
(allow art_apex_preinstall apexd (fd (use)))
(allow art_apex_preinstall ota_data_file (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
(allow art_apex_preinstall ota_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow art_apex_preinstall dalvikcache_data_file (dir (ioctl read getattr lock mounton search open)))
(allow art_apex_preinstall self (capability (sys_admin)))
(allow art_apex_preinstall shell_exec (file (ioctl read getattr lock map execute execute_no_trans open)))
(allow art_apex_preinstall toolbox_exec (file (ioctl read getattr lock map execute execute_no_trans open)))
(allow art_apex_preinstall art_apex_preinstall_exec (file (execute_no_trans)))
(allow art_apex_preinstall dex2oat_exec (file (read getattr map execute open)))
(allow art_apex_preinstall dex2oat (process (transition)))
(allow dex2oat dex2oat_exec (file (read getattr map execute entrypoint open)))
(allow dex2oat art_apex_preinstall (process (sigchld)))
(dontaudit art_apex_preinstall dex2oat (process (noatsecure)))
(allow art_apex_preinstall dex2oat (process (siginh rlimitinh)))
(typetransition art_apex_preinstall dex2oat_exec process dex2oat)
(allow art_apex_preinstall system_file (file (execute_no_trans)))
(allowx art_apex_preinstall ota_data_file (ioctl file ((range 0x6685 0x6686))))
(allow init ashmemd_exec (file (read getattr map execute open)))
(allow init ashmemd (process (transition)))
(allow ashmemd ashmemd_exec (file (read getattr map execute entrypoint open)))
(dontaudit init ashmemd (process (noatsecure)))
(allow init ashmemd (process (siginh rlimitinh)))
(typetransition init ashmemd_exec process ashmemd)
(allow ashmemd servicemanager (binder (call transfer)))
(allow servicemanager ashmemd (dir (search)))
(allow servicemanager ashmemd (file (read open)))
(allow servicemanager ashmemd (process (getattr)))
(allow ashmemd ashmem_device_service (service_manager (add find)))
;;* lmx 7 system/sepolicy/prebuilts/api/29.0/private/ashmemd.te

(neverallow base_typeattr_519 ashmem_device_service (service_manager (add)))
;;* lme

(allow ashmemd ashmem_device (chr_file (ioctl read write getattr lock append map open)))
(allow atrace boottrace_data_file (dir (search)))
(allow atrace boottrace_data_file (file (ioctl read getattr lock map open)))
(allow atrace debugfs_tracing (dir (ioctl read getattr lock search open)))
(allow atrace debugfs_tracing (file (ioctl read write getattr lock append map open)))
(allow atrace debugfs_trace_marker (file (getattr)))
(allow atrace traced_probes (fd (use)))
(allow atrace traced_probes (fifo_file (write)))
(allow atrace property_socket (sock_file (write)))
(allow atrace init (unix_stream_socket (connectto)))
(allow atrace debug_prop (property_service (set)))
(allow atrace debug_prop (file (read getattr map open)))
(allow atrace servicemanager (binder (call transfer)))
(allow servicemanager atrace (dir (search)))
(allow servicemanager atrace (file (read open)))
(allow servicemanager atrace (process (getattr)))
(allow atrace healthd (binder (call)))
(allow atrace surfaceflinger (binder (call)))
(allow atrace system_server (binder (call)))
(allow atrace hwservicemanager_prop (file (read getattr map open)))
(allow atrace base_typeattr_520 (service_manager (find)))
(allow atrace servicemanager (service_manager (list)))
(allow init audioserver_exec (file (read getattr map execute open)))
(allow init audioserver (process (transition)))
(allow audioserver audioserver_exec (file (read getattr map execute entrypoint open)))
(dontaudit init audioserver (process (noatsecure)))
(allow init audioserver (process (siginh rlimitinh)))
(typetransition init audioserver_exec process audioserver)
(typetransition audioserver tmpfs file audioserver_tmpfs)
(allow audioserver audioserver_tmpfs (file (read write getattr map)))
(allow audioserver sdcard_type (dir (ioctl read getattr lock search open)))
(allow audioserver sdcard_type (file (ioctl read getattr lock map open)))
(allow audioserver sdcard_type (lnk_file (ioctl read getattr lock map open)))
(allow audioserver servicemanager (binder (call transfer)))
(allow servicemanager audioserver (dir (search)))
(allow servicemanager audioserver (file (read open)))
(allow servicemanager audioserver (process (getattr)))
(allow audioserver binderservicedomain (binder (call transfer)))
(allow binderservicedomain audioserver (binder (transfer)))
(allow audioserver binderservicedomain (fd (use)))
(allow audioserver appdomain (binder (call transfer)))
(allow appdomain audioserver (binder (transfer)))
(allow audioserver appdomain (fd (use)))
(allow audioserver system_file (dir (ioctl read getattr lock search open)))
(allow audioserver system_file (file (ioctl read getattr lock map open)))
(allow audioserver system_file (lnk_file (ioctl read getattr lock map open)))
(allow audioserver audioserver_service (service_manager (add find)))
;;* lmx 32 system/sepolicy/prebuilts/api/29.0/private/audioserver.te

(neverallow base_typeattr_521 audioserver_service (service_manager (add)))
;;* lme

(allow audioserver activity_service (service_manager (find)))
(allow audioserver appops_service (service_manager (find)))
(allow audioserver batterystats_service (service_manager (find)))
(allow audioserver external_vibrator_service (service_manager (find)))
(allow audioserver package_native_service (service_manager (find)))
(allow audioserver permission_service (service_manager (find)))
(allow audioserver power_service (service_manager (find)))
(allow audioserver scheduling_policy_service (service_manager (find)))
(allow audioserver mediametrics_service (service_manager (find)))
(allow audioserver sensor_privacy_service (service_manager (find)))
(allow audioserver property_socket (sock_file (write)))
(allow audioserver init (unix_stream_socket (connectto)))
(allow audioserver bluetooth_a2dp_offload_prop (property_service (set)))
(allow audioserver bluetooth_a2dp_offload_prop (file (read getattr map open)))
(allow audioserver property_socket (sock_file (write)))
(allow audioserver init (unix_stream_socket (connectto)))
(allow audioserver bluetooth_audio_hal_prop (property_service (set)))
(allow audioserver bluetooth_audio_hal_prop (file (read getattr map open)))
(allow audioserver property_socket (sock_file (write)))
(allow audioserver init (unix_stream_socket (connectto)))
(allow audioserver bluetooth_prop (property_service (set)))
(allow audioserver bluetooth_prop (file (read getattr map open)))
(allow audioserver property_socket (sock_file (write)))
(allow audioserver init (unix_stream_socket (connectto)))
(allow audioserver exported_bluetooth_prop (property_service (set)))
(allow audioserver exported_bluetooth_prop (file (read getattr map open)))
(allow audioserver audio_data_file (dir (ioctl read write getattr lock add_name search open)))
(allow audioserver audio_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow audioserver audio_device (chr_file (read write)))
(allow audioserver bluetooth_socket (sock_file (write)))
(allow audioserver bluetooth (unix_stream_socket (connectto)))
(allow audioserver adbd (fd (use)))
(allow audioserver adbd (unix_stream_socket (read write)))
(allow audioserver shell (fifo_file (read write)))
(allow audioserver property_socket (sock_file (write)))
(allow audioserver init (unix_stream_socket (connectto)))
(allow audioserver log_tag_prop (property_service (set)))
(allow audioserver log_tag_prop (file (read getattr map open)))
;;* lmx 84 system/sepolicy/prebuilts/api/29.0/private/audioserver.te

(neverallow audioserver fs_type (file (execute_no_trans)))
(neverallow audioserver file_type (file (execute_no_trans)))
;;* lme

;;* lmx 96 system/sepolicy/prebuilts/api/29.0/private/audioserver.te

(neverallow audioserver domain (tcp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind name_connect)))
(neverallow audioserver domain (udp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind)))
(neverallow audioserver domain (rawip_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind)))
;;* lme

(allow audioserver sysfs_wake_lock (file (ioctl read write getattr lock append map open)))
(allow audioserver self (capability2 (block_suspend)))
(allow audioserver self (cap2_userns (block_suspend)))
(allow audioserver system_suspend_server (binder (call transfer)))
(allow system_suspend_server audioserver (binder (transfer)))
(allow audioserver system_suspend_server (fd (use)))
(allow audioserver system_suspend_hwservice (hwservice_manager (find)))
(allow audioserver hwservicemanager (binder (call transfer)))
(allow hwservicemanager audioserver (binder (call transfer)))
(allow hwservicemanager audioserver (dir (search)))
(allow hwservicemanager audioserver (file (read map open)))
(allow hwservicemanager audioserver (process (getattr)))
(allow audioserver hwservicemanager_prop (file (read getattr map open)))
(allow audioserver hidl_manager_hwservice (hwservice_manager (find)))
(allow init auditctl_exec (file (read getattr map execute open)))
(allow init auditctl (process (transition)))
(allow auditctl auditctl_exec (file (read getattr map execute entrypoint open)))
(dontaudit init auditctl (process (noatsecure)))
(allow init auditctl (process (siginh rlimitinh)))
(typetransition init auditctl_exec process auditctl)
(allow auditctl self (capability (audit_control)))
(allow auditctl self (cap_userns (audit_control)))
(allow auditctl self (netlink_audit_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown nlmsg_write)))
(allow binder_in_vendor_violators binder_device (chr_file (ioctl read write getattr lock append map open)))
(allow binderservicedomain dumpstate (fd (use)))
(allow binderservicedomain incidentd (fd (use)))
(allow binderservicedomain dumpstate (unix_stream_socket (read write getattr getopt)))
(allow binderservicedomain incidentd (unix_stream_socket (read write getattr getopt)))
(allow binderservicedomain dumpstate (fifo_file (write getattr)))
(allow binderservicedomain incidentd (fifo_file (write getattr)))
(allow binderservicedomain shell_data_file (file (write getattr)))
(allow binderservicedomain devpts (chr_file (ioctl read write getattr lock append map open)))
(allow binderservicedomain console_device (chr_file (ioctl read write getattr lock append map open)))
(allow binderservicedomain appdomain (fd (use)))
(allow binderservicedomain appdomain (fifo_file (write)))
(allow binderservicedomain permission_service (service_manager (find)))
(allow binderservicedomain keystore (keystore_key (get_state get insert delete exist list sign verify)))
(allow keystore binderservicedomain (dir (search)))
(allow keystore binderservicedomain (file (read open)))
(allow keystore binderservicedomain (process (getattr)))
(allow binderservicedomain keystore_service (service_manager (find)))
(allow binderservicedomain keystore (binder (call transfer)))
(allow keystore binderservicedomain (binder (transfer)))
(allow binderservicedomain keystore (fd (use)))
(allow keystore binderservicedomain (binder (call transfer)))
(allow binderservicedomain keystore (binder (transfer)))
(allow keystore binderservicedomain (fd (use)))
(allow init blank_screen_exec (file (read getattr map execute open)))
(allow init blank_screen (process (transition)))
(allow blank_screen blank_screen_exec (file (read getattr map execute entrypoint open)))
(dontaudit init blank_screen (process (noatsecure)))
(allow init blank_screen (process (siginh rlimitinh)))
(typetransition init blank_screen_exec process blank_screen)
(allow blkid block_device (dir (search)))
(allow blkid userdata_block_device (blk_file (ioctl read getattr lock map open)))
(allow blkid dm_device (blk_file (ioctl read getattr lock map open)))
(allow blkid vold (fd (use)))
(allow blkid vold (fifo_file (read write getattr)))
(allow blkid blkid_exec (file (ioctl read getattr lock map execute execute_no_trans open)))
;;* lmx 21 system/sepolicy/prebuilts/api/29.0/private/blkid.te

(neverallow base_typeattr_293 blkid (process (transition)))
;;* lme

;;* lmx 22 system/sepolicy/prebuilts/api/29.0/private/blkid.te

(neverallow base_typeattr_167 blkid (process (dyntransition)))
;;* lme

;;* lmx 23 system/sepolicy/prebuilts/api/29.0/private/blkid.te

(neverallow blkid base_typeattr_522 (file (entrypoint)))
;;* lme

(allow blkid_untrusted block_device (dir (search)))
(allow blkid_untrusted vold_device (blk_file (ioctl read getattr lock map open)))
(allow blkid_untrusted vold (fd (use)))
(allow blkid_untrusted vold (fifo_file (read write getattr)))
(allow blkid_untrusted blkid_exec (file (ioctl read getattr lock map execute execute_no_trans open)))
;;* lmx 33 system/sepolicy/prebuilts/api/29.0/private/blkid_untrusted.te

(neverallow blkid_untrusted dm_device (blk_file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
(neverallow blkid_untrusted root_block_device (blk_file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
(neverallow blkid_untrusted frp_block_device (blk_file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
(neverallow blkid_untrusted system_block_device (blk_file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
(neverallow blkid_untrusted recovery_block_device (blk_file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
(neverallow blkid_untrusted boot_block_device (blk_file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
(neverallow blkid_untrusted userdata_block_device (blk_file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
(neverallow blkid_untrusted cache_block_device (blk_file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
(neverallow blkid_untrusted swap_block_device (blk_file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
(neverallow blkid_untrusted metadata_block_device (blk_file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
;;* lme

;;* lmx 36 system/sepolicy/prebuilts/api/29.0/private/blkid_untrusted.te

(neverallow base_typeattr_293 blkid_untrusted (process (transition)))
;;* lme

;;* lmx 37 system/sepolicy/prebuilts/api/29.0/private/blkid_untrusted.te

(neverallow base_typeattr_167 blkid_untrusted (process (dyntransition)))
;;* lme

;;* lmx 38 system/sepolicy/prebuilts/api/29.0/private/blkid_untrusted.te

(neverallow blkid_untrusted base_typeattr_522 (file (entrypoint)))
;;* lme

(typetransition bluetooth tmpfs file appdomain_tmpfs)
(allow bluetooth appdomain_tmpfs (file (read write getattr map execute)))
;;* lmx 5 system/sepolicy/prebuilts/api/29.0/private/bluetooth.te

(neverallow base_typeattr_523 base_typeattr_524 (file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
;;* lme

;;* lmx 5 system/sepolicy/prebuilts/api/29.0/private/bluetooth.te

(neverallow base_typeattr_525 bluetooth (file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
;;* lme

;;* lmx 5 system/sepolicy/prebuilts/api/29.0/private/bluetooth.te

(neverallow base_typeattr_526 bluetooth (process (ptrace)))
;;* lme

(typetransition bluetooth bluetooth_data_file sock_file bluetooth_socket)
(allowx bluetooth self (ioctl udp_socket (0x6900 0x6902)))
(allowx bluetooth self (ioctl udp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(allowx bluetooth self (ioctl udp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(allow bluetooth sysfs_wake_lock (file (ioctl read write getattr lock append map open)))
(allow bluetooth self (capability2 (block_suspend)))
(allow bluetooth self (cap2_userns (block_suspend)))
(allow bluetooth system_suspend_server (binder (call transfer)))
(allow system_suspend_server bluetooth (binder (transfer)))
(allow bluetooth system_suspend_server (fd (use)))
(allow bluetooth system_suspend_hwservice (hwservice_manager (find)))
(allow bluetooth hwservicemanager (binder (call transfer)))
(allow hwservicemanager bluetooth (binder (call transfer)))
(allow hwservicemanager bluetooth (dir (search)))
(allow hwservicemanager bluetooth (file (read map open)))
(allow hwservicemanager bluetooth (process (getattr)))
(allow bluetooth hwservicemanager_prop (file (read getattr map open)))
(allow bluetooth hidl_manager_hwservice (hwservice_manager (find)))
(allow bluetooth bluetooth_data_file (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
(allow bluetooth bluetooth_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow bluetooth bluetooth_data_file (lnk_file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow bluetooth bluetooth_data_file (sock_file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow bluetooth bluetooth_data_file (fifo_file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow bluetooth bluetooth_logs_data_file (dir (ioctl read write getattr lock add_name remove_name search open)))
(allow bluetooth bluetooth_logs_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow bluetooth bluetooth_socket (sock_file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow bluetooth self (capability (net_admin)))
(allow bluetooth self (cap_userns (net_admin)))
(allow bluetooth self (capability2 (wake_alarm)))
(allow bluetooth self (cap2_userns (wake_alarm)))
(allow bluetooth self (packet_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
(allow bluetooth self (capability (net_bind_service net_admin net_raw)))
(allow bluetooth self (cap_userns (net_bind_service net_admin net_raw)))
(allow bluetooth self (tun_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
(allow bluetooth tun_device (chr_file (ioctl read write getattr lock append map open)))
(allowx bluetooth tun_device (ioctl chr_file (0x54ca 0x54d2)))
(allow bluetooth efs_file (dir (search)))
(allow bluetooth uhid_device (chr_file (ioctl read write getattr lock append map open)))
(allow bluetooth proc_bluetooth_writable (file (ioctl read write getattr lock append map open)))
(allow bluetooth property_socket (sock_file (write)))
(allow bluetooth init (unix_stream_socket (connectto)))
(allow bluetooth bluetooth_a2dp_offload_prop (property_service (set)))
(allow bluetooth bluetooth_a2dp_offload_prop (file (read getattr map open)))
(allow bluetooth property_socket (sock_file (write)))
(allow bluetooth init (unix_stream_socket (connectto)))
(allow bluetooth bluetooth_audio_hal_prop (property_service (set)))
(allow bluetooth bluetooth_audio_hal_prop (file (read getattr map open)))
(allow bluetooth property_socket (sock_file (write)))
(allow bluetooth init (unix_stream_socket (connectto)))
(allow bluetooth bluetooth_prop (property_service (set)))
(allow bluetooth bluetooth_prop (file (read getattr map open)))
(allow bluetooth property_socket (sock_file (write)))
(allow bluetooth init (unix_stream_socket (connectto)))
(allow bluetooth exported_bluetooth_prop (property_service (set)))
(allow bluetooth exported_bluetooth_prop (file (read getattr map open)))
(allow bluetooth property_socket (sock_file (write)))
(allow bluetooth init (unix_stream_socket (connectto)))
(allow bluetooth pan_result_prop (property_service (set)))
(allow bluetooth pan_result_prop (file (read getattr map open)))
(allow bluetooth audioserver_service (service_manager (find)))
(allow bluetooth bluetooth_service (service_manager (find)))
(allow bluetooth drmserver_service (service_manager (find)))
(allow bluetooth mediaserver_service (service_manager (find)))
(allow bluetooth radio_service (service_manager (find)))
(allow bluetooth app_api_service (service_manager (find)))
(allow bluetooth system_api_service (service_manager (find)))
(allow bluetooth network_stack_service (service_manager (find)))
(allow bluetooth shell_data_file (file (read)))
(allow bluetooth self (capability (sys_nice)))
(allow bluetooth self (cap_userns (sys_nice)))
(allow bluetooth runtime_event_log_tags_file (file (ioctl read getattr lock map open)))
;;* lmx 82 system/sepolicy/prebuilts/api/29.0/private/bluetooth.te

(neverallow bluetooth self (capability (chown dac_override dac_read_search fowner fsetid kill setgid setuid setpcap linux_immutable net_broadcast ipc_lock ipc_owner sys_module sys_rawio sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_resource sys_time sys_tty_config mknod lease audit_write audit_control setfcap)))
(neverallow bluetooth self (cap_userns (chown dac_override dac_read_search fowner fsetid kill setgid setuid setpcap linux_immutable net_broadcast ipc_lock ipc_owner sys_module sys_rawio sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_resource sys_time sys_tty_config mknod lease audit_write audit_control setfcap)))
;;* lme

;;* lmx 83 system/sepolicy/prebuilts/api/29.0/private/bluetooth.te

(neverallow bluetooth self (capability2 (mac_override mac_admin syslog audit_read)))
(neverallow bluetooth self (cap2_userns (mac_override mac_admin syslog audit_read)))
;;* lme

(allow bluetoothdomain bluetooth (unix_stream_socket (ioctl read write getattr getopt setopt shutdown)))
(allow init bootanim_exec (file (read getattr map execute open)))
(allow init bootanim (process (transition)))
(allow bootanim bootanim_exec (file (read getattr map execute entrypoint open)))
(dontaudit init bootanim (process (noatsecure)))
(allow init bootanim (process (siginh rlimitinh)))
(typetransition init bootanim_exec process bootanim)
(dontaudit bootanim unlabeled (dir (search)))
(allow init bootstat_exec (file (read getattr map execute open)))
(allow init bootstat (process (transition)))
(allow bootstat bootstat_exec (file (read getattr map execute entrypoint open)))
(dontaudit init bootstat (process (noatsecure)))
(allow init bootstat (process (siginh rlimitinh)))
(typetransition init bootstat_exec process bootstat)
(allow bpfloader fs_bpf (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
(allow bpfloader fs_bpf (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow bpfloader devpts (chr_file (read write)))
(allow bpfloader self (bpf (map_create map_read map_write prog_load prog_run)))
(allow bpfloader self (capability (sys_admin)))
(allow bpfloader self (cap_userns (sys_admin)))
;;* lmx 21 system/sepolicy/prebuilts/api/29.0/private/bpfloader.te

(neverallow base_typeattr_527 base_typeattr_167 (bpf (map_create prog_load)))
;;* lme

;;* lmx 22 system/sepolicy/prebuilts/api/29.0/private/bpfloader.te

(neverallow base_typeattr_528 base_typeattr_167 (bpf (prog_run)))
;;* lme

;;* lmx 23 system/sepolicy/prebuilts/api/29.0/private/bpfloader.te

(neverallow base_typeattr_529 bpfloader_exec (file (execute execute_no_trans)))
;;* lme

;;* lmx 24 system/sepolicy/prebuilts/api/29.0/private/bpfloader.te

(neverallow bpfloader domain (tcp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind name_connect)))
(neverallow bpfloader domain (udp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind)))
(neverallow bpfloader domain (rawip_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind)))
;;* lme

;;* lmx 26 system/sepolicy/prebuilts/api/29.0/private/bpfloader.te

(neverallow base_typeattr_530 base_typeattr_167 (bpf (map_read map_write)))
;;* lme

;;* lmx 29 system/sepolicy/prebuilts/api/29.0/private/bpfloader.te

(neverallow domain bpfloader (process (ptrace)))
;;* lme

(allow bpfloader property_socket (sock_file (write)))
(allow bpfloader init (unix_stream_socket (connectto)))
(allow bpfloader bpf_progs_loaded_prop (property_service (set)))
(allow bpfloader bpf_progs_loaded_prop (file (read getattr map open)))
(allow init bufferhubd_exec (file (read getattr map execute open)))
(allow init bufferhubd (process (transition)))
(allow bufferhubd bufferhubd_exec (file (read getattr map execute entrypoint open)))
(dontaudit init bufferhubd (process (noatsecure)))
(allow init bufferhubd (process (siginh rlimitinh)))
(typetransition init bufferhubd_exec process bufferhubd)
(allow init cameraserver_exec (file (read getattr map execute open)))
(allow init cameraserver (process (transition)))
(allow cameraserver cameraserver_exec (file (read getattr map execute entrypoint open)))
(dontaudit init cameraserver (process (noatsecure)))
(allow init cameraserver (process (siginh rlimitinh)))
(typetransition init cameraserver_exec process cameraserver)
(typetransition cameraserver tmpfs file cameraserver_tmpfs)
(allow cameraserver cameraserver_tmpfs (file (read write getattr map)))
(allow coredomain pm_prop (file (read getattr map open)))
(allow coredomain exported_pm_prop (file (read getattr map open)))
;;* lmx 4 system/sepolicy/prebuilts/api/29.0/private/coredomain.te

(neverallow base_typeattr_531 sysfs_leds (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod open audit_access)))
;;* lme

;;* lmx 19 system/sepolicy/prebuilts/api/29.0/private/coredomain.te

(neverallow base_typeattr_532 vendor_app_file (dir (read getattr search open)))
;;* lme

;;* lmx 36 system/sepolicy/prebuilts/api/29.0/private/coredomain.te

(neverallow base_typeattr_533 vendor_app_file (file (ioctl read getattr lock map open)))
;;* lme

;;* lmx 53 system/sepolicy/prebuilts/api/29.0/private/coredomain.te

(neverallow base_typeattr_534 vendor_overlay_file (dir (read getattr search open)))
;;* lme

;;* lmx 71 system/sepolicy/prebuilts/api/29.0/private/coredomain.te

(neverallow base_typeattr_534 vendor_overlay_file (file (ioctl read getattr lock map open)))
;;* lme

;;* lmx 91 system/sepolicy/prebuilts/api/29.0/private/coredomain.te

(neverallow base_typeattr_535 proc (file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
;;* lme

;;* lmx 91 system/sepolicy/prebuilts/api/29.0/private/coredomain.te

(neverallow base_typeattr_531 sysfs (file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
;;* lme

;;* lmx 91 system/sepolicy/prebuilts/api/29.0/private/coredomain.te

(neverallow base_typeattr_536 device (file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
(neverallow base_typeattr_536 device (blk_file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
;;* lme

;;* lmx 91 system/sepolicy/prebuilts/api/29.0/private/coredomain.te

(neverallow base_typeattr_537 debugfs (file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
;;* lme

;;* lmx 91 system/sepolicy/prebuilts/api/29.0/private/coredomain.te

(neverallow base_typeattr_538 debugfs_tracing (file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
;;* lme

;;* lmx 91 system/sepolicy/prebuilts/api/29.0/private/coredomain.te

(neverallow base_typeattr_539 inotify (file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
;;* lme

;;* lmx 91 system/sepolicy/prebuilts/api/29.0/private/coredomain.te

(neverallow base_typeattr_540 pstorefs (file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
;;* lme

;;* lmx 91 system/sepolicy/prebuilts/api/29.0/private/coredomain.te

(neverallow base_typeattr_541 configfs (file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
;;* lme

;;* lmx 91 system/sepolicy/prebuilts/api/29.0/private/coredomain.te

(neverallow base_typeattr_542 functionfs (file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
;;* lme

;;* lmx 91 system/sepolicy/prebuilts/api/29.0/private/coredomain.te

(neverallow base_typeattr_539 usbfs (file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
(neverallow base_typeattr_539 binfmt_miscfs (file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
;;* lme

;;* lmx 186 system/sepolicy/prebuilts/api/29.0/private/coredomain.te

(neverallow coredomain radio_device (chr_file (ioctl read write append open)))
(neverallow coredomain iio_device (chr_file (ioctl read write append open)))
;;* lme

;;* lmx 190 system/sepolicy/prebuilts/api/29.0/private/coredomain.te

(neverallow coredomain tee_device (chr_file (ioctl read write append open)))
;;* lme

(allow base_typeattr_543 ashmem_device_service (service_manager (find)))
(allow base_typeattr_543 ashmemd (binder (call transfer)))
(allow ashmemd base_typeattr_543 (binder (transfer)))
(allow base_typeattr_543 ashmemd (fd (use)))
(allow init cppreopts_exec (file (read getattr map execute open)))
(allow init cppreopts (process (transition)))
(allow cppreopts cppreopts_exec (file (read getattr map execute entrypoint open)))
(dontaudit init cppreopts (process (noatsecure)))
(allow init cppreopts (process (siginh rlimitinh)))
(typetransition init cppreopts_exec process cppreopts)
(allow cppreopts preopt2cachename_exec (file (read getattr map execute open)))
(allow cppreopts preopt2cachename (process (transition)))
(allow preopt2cachename preopt2cachename_exec (file (read getattr map execute entrypoint open)))
(allow preopt2cachename cppreopts (process (sigchld)))
(dontaudit cppreopts preopt2cachename (process (noatsecure)))
(allow cppreopts preopt2cachename (process (siginh rlimitinh)))
(typetransition cppreopts preopt2cachename_exec process preopt2cachename)
(allow cppreopts dalvikcache_data_file (dir (write add_name remove_name search)))
(allow cppreopts dalvikcache_data_file (file (read write create getattr unlink rename open)))
(allow cppreopts shell_exec (file (ioctl read getattr lock map execute execute_no_trans open)))
(allow cppreopts system_file (dir (read open)))
(allow cppreopts toolbox_exec (file (ioctl read getattr lock map execute execute_no_trans open)))
(dontaudit crash_dump dev_type (chr_file (read write)))
(dontaudit crash_dump devpts (chr_file (read write)))
(allow crash_dump base_typeattr_544 (process (sigchld sigkill sigstop signal ptrace)))
;;* lmx 46 system/sepolicy/prebuilts/api/29.0/private/crash_dump.te

(neverallow crash_dump apexd (process (sigkill sigstop signal)))
(neverallow crash_dump init (process (sigkill sigstop signal)))
(neverallow crash_dump kernel (process (sigkill sigstop signal)))
(neverallow crash_dump keystore (process (sigkill sigstop signal)))
(neverallow crash_dump llkd (process (sigkill sigstop signal)))
(neverallow crash_dump logd (process (sigkill sigstop signal)))
(neverallow crash_dump ueventd (process (sigkill sigstop signal)))
(neverallow crash_dump vendor_init (process (sigkill sigstop signal)))
(neverallow crash_dump vold (process (sigkill sigstop signal)))
(neverallow crash_dump bpfloader (process (sigkill sigstop signal)))
;;* lme

;;* lmx 48 system/sepolicy/prebuilts/api/29.0/private/crash_dump.te

(neverallow crash_dump self (process (ptrace)))
;;* lme

;;* lmx 49 system/sepolicy/prebuilts/api/29.0/private/crash_dump.te

(neverallow crash_dump gpu_device (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod open audit_access)))
;;* lme

(allow dex2oat apk_data_file (dir (ioctl read getattr lock search open)))
(allow dex2oat apk_data_file (file (ioctl read getattr lock map open)))
(allow dex2oat apk_data_file (lnk_file (ioctl read getattr lock map open)))
(allow dex2oat vendor_app_file (dir (ioctl read getattr lock search open)))
(allow dex2oat vendor_app_file (file (ioctl read getattr lock map open)))
(allow dex2oat vendor_app_file (lnk_file (ioctl read getattr lock map open)))
(allow dex2oat vendor_framework_file (dir (getattr search)))
(allow dex2oat vendor_framework_file (file (read getattr map open)))
(allow dex2oat tmpfs (file (read getattr map)))
(allow dex2oat dalvikcache_data_file (dir (ioctl read getattr lock search open)))
(allow dex2oat dalvikcache_data_file (file (ioctl read getattr lock map open)))
(allow dex2oat dalvikcache_data_file (lnk_file (ioctl read getattr lock map open)))
(allow dex2oat dalvikcache_data_file (file (write)))
(allow dex2oat dalvikcache_data_file (lnk_file (read)))
(allow dex2oat installd (fd (use)))
(allow dex2oat system_file (file (lock)))
(allow dex2oat asec_apk_file (file (read map)))
(allow dex2oat unlabeled (file (read map)))
(allow dex2oat oemfs (file (read map)))
(allow dex2oat apk_tmp_file (dir (search)))
(allow dex2oat apk_tmp_file (file (ioctl read getattr lock map open)))
(allow dex2oat user_profile_data_file (file (read getattr lock map)))
(allow dex2oat app_data_file (file (read write getattr lock map)))
(allow dex2oat privapp_data_file (file (read write getattr lock map)))
(allow dex2oat postinstall_dexopt (fd (use)))
(allow dex2oat postinstall_file (dir (ioctl read getattr lock search open)))
(allow dex2oat postinstall_file (filesystem (getattr)))
(allow dex2oat postinstall_file (lnk_file (read getattr)))
(allow dex2oat postinstall_file (file (read)))
(allow dex2oat postinstall_file (file (getattr execute open)))
(allow dex2oat postinstall_apex_mnt_dir (dir (getattr search)))
(allow dex2oat ota_data_file (dir (ioctl read write getattr lock add_name search open)))
(allow dex2oat ota_data_file (file (ioctl read getattr lock map open)))
(allow dex2oat ota_data_file (lnk_file (read create)))
(allow dex2oat ota_data_file (file (write create setattr lock append map open)))
(allow dex2oat apexd (fd (use)))
(allow dex2oat art_apex_preinstall (fd (use)))
;;* lmx 84 system/sepolicy/prebuilts/api/29.0/private/dex2oat.te

(neverallow dex2oat app_data_file (file (open)))
(neverallow dex2oat app_data_file (lnk_file (open)))
(neverallow dex2oat app_data_file (sock_file (open)))
(neverallow dex2oat app_data_file (fifo_file (open)))
(neverallow dex2oat privapp_data_file (file (open)))
(neverallow dex2oat privapp_data_file (lnk_file (open)))
(neverallow dex2oat privapp_data_file (sock_file (open)))
(neverallow dex2oat privapp_data_file (fifo_file (open)))
;;* lme

(typetransition dexoptanalyzer tmpfs file dexoptanalyzer_tmpfs)
(allow dexoptanalyzer dexoptanalyzer_tmpfs (file (read write getattr map)))
(allow dexoptanalyzer dalvikcache_data_file (dir (getattr search)))
(allow dexoptanalyzer dalvikcache_data_file (file (ioctl read getattr lock map open)))
(allow dexoptanalyzer dalvikcache_data_file (lnk_file (read)))
(allow dexoptanalyzer installd (fd (use)))
(allow dexoptanalyzer installd (fifo_file (write getattr)))
(allow dexoptanalyzer app_data_file (dir (getattr search)))
(allow dexoptanalyzer privapp_data_file (dir (getattr search)))
(allow dexoptanalyzer app_data_file (file (read getattr map)))
(allow dexoptanalyzer privapp_data_file (file (read getattr map)))
(dontaudit dexoptanalyzer app_data_file (dir (audit_access)))
(dontaudit dexoptanalyzer privapp_data_file (dir (audit_access)))
(allow dexoptanalyzer system_data_file (lnk_file (getattr)))
(allow init dhcp_exec (file (read getattr map execute open)))
(allow init dhcp (process (transition)))
(allow dhcp dhcp_exec (file (read getattr map execute entrypoint open)))
(dontaudit init dhcp (process (noatsecure)))
(allow init dhcp (process (siginh rlimitinh)))
(typetransition init dhcp_exec process dhcp)
(typetransition dhcp system_data_file dir dhcp_data_file)
(typetransition dhcp system_data_file file dhcp_data_file)
(allow domain crash_dump_exec (file (read getattr map execute open)))
(allow domain crash_dump (process (transition)))
(allow crash_dump crash_dump_exec (file (read getattr map execute entrypoint open)))
(allow crash_dump domain (process (sigchld)))
(dontaudit domain crash_dump (process (noatsecure)))
(allow domain crash_dump (process (siginh rlimitinh)))
(typetransition domain crash_dump_exec process crash_dump)
(allow domain crash_dump (process (sigchld)))
(allow domain heapprofd_prop (file (read getattr map open)))
(allow domain cgroup (dir (search)))
(allow base_typeattr_545 cgroup (dir (write lock add_name remove_name search open)))
(allow base_typeattr_545 cgroup (file (write lock append map open)))
(allow domain cgroup_rc_file (dir (search)))
(allow domain cgroup_rc_file (file (ioctl read getattr lock map open)))
(allow domain task_profiles_file (file (ioctl read getattr lock map open)))
(allow domain vendor_task_profiles_file (file (ioctl read getattr lock map open)))
(allow domain use_memfd_prop (file (read getattr map open)))
(allow appdomain core_property_type (file (read getattr map open)))
(allow coredomain core_property_type (file (read getattr map open)))
(allow shell core_property_type (file (read getattr map open)))
(allow appdomain exported_dalvik_prop (file (read getattr map open)))
(allow coredomain exported_dalvik_prop (file (read getattr map open)))
(allow shell exported_dalvik_prop (file (read getattr map open)))
(allow appdomain exported_ffs_prop (file (read getattr map open)))
(allow coredomain exported_ffs_prop (file (read getattr map open)))
(allow shell exported_ffs_prop (file (read getattr map open)))
(allow appdomain exported_system_radio_prop (file (read getattr map open)))
(allow coredomain exported_system_radio_prop (file (read getattr map open)))
(allow shell exported_system_radio_prop (file (read getattr map open)))
(allow appdomain exported2_config_prop (file (read getattr map open)))
(allow coredomain exported2_config_prop (file (read getattr map open)))
(allow shell exported2_config_prop (file (read getattr map open)))
(allow appdomain exported2_radio_prop (file (read getattr map open)))
(allow coredomain exported2_radio_prop (file (read getattr map open)))
(allow shell exported2_radio_prop (file (read getattr map open)))
(allow appdomain exported2_system_prop (file (read getattr map open)))
(allow coredomain exported2_system_prop (file (read getattr map open)))
(allow shell exported2_system_prop (file (read getattr map open)))
(allow appdomain exported2_vold_prop (file (read getattr map open)))
(allow coredomain exported2_vold_prop (file (read getattr map open)))
(allow shell exported2_vold_prop (file (read getattr map open)))
(allow appdomain exported3_default_prop (file (read getattr map open)))
(allow coredomain exported3_default_prop (file (read getattr map open)))
(allow shell exported3_default_prop (file (read getattr map open)))
(allow appdomain exported3_radio_prop (file (read getattr map open)))
(allow coredomain exported3_radio_prop (file (read getattr map open)))
(allow shell exported3_radio_prop (file (read getattr map open)))
(allow appdomain exported3_system_prop (file (read getattr map open)))
(allow coredomain exported3_system_prop (file (read getattr map open)))
(allow shell exported3_system_prop (file (read getattr map open)))
(allow base_typeattr_546 vendor_default_prop (file (read getattr map open)))
(allow domain kernel (key (search)))
(allow domain fsverity_init (key (search)))
;;* lmx 96 system/sepolicy/prebuilts/api/29.0/private/domain.te

(neverallow base_typeattr_547 self (capability (sys_ptrace)))
(neverallow base_typeattr_547 self (cap_userns (sys_ptrace)))
;;* lme

;;* lmx 99 system/sepolicy/prebuilts/api/29.0/private/domain.te

(neverallow base_typeattr_548 base_typeattr_167 (keystore_key (gen_unique_id)))
;;* lme

;;* lmx 106 system/sepolicy/prebuilts/api/29.0/private/domain.te

(neverallow base_typeattr_208 debugfs_tracing_debug (file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
;;* lme

;;* lmx 110 system/sepolicy/prebuilts/api/29.0/private/domain.te

(neverallow base_typeattr_212 dropbox_data_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton add_name remove_name reparent search rmdir open audit_access execmod)))
;;* lme

;;* lmx 111 system/sepolicy/prebuilts/api/29.0/private/domain.te

(neverallow base_typeattr_212 dropbox_data_file (file (ioctl write create setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod open audit_access)))
;;* lme

;;* lmx 119 system/sepolicy/prebuilts/api/29.0/private/domain.te

(neverallow base_typeattr_269 app_data_file (file (create unlink)))
(neverallow base_typeattr_269 app_data_file (dir (create unlink)))
(neverallow base_typeattr_269 app_data_file (lnk_file (create unlink)))
(neverallow base_typeattr_269 app_data_file (chr_file (create unlink)))
(neverallow base_typeattr_269 app_data_file (blk_file (create unlink)))
(neverallow base_typeattr_269 app_data_file (sock_file (create unlink)))
(neverallow base_typeattr_269 app_data_file (fifo_file (create unlink)))
(neverallow base_typeattr_269 privapp_data_file (file (create unlink)))
(neverallow base_typeattr_269 privapp_data_file (dir (create unlink)))
(neverallow base_typeattr_269 privapp_data_file (lnk_file (create unlink)))
(neverallow base_typeattr_269 privapp_data_file (chr_file (create unlink)))
(neverallow base_typeattr_269 privapp_data_file (blk_file (create unlink)))
(neverallow base_typeattr_269 privapp_data_file (sock_file (create unlink)))
(neverallow base_typeattr_269 privapp_data_file (fifo_file (create unlink)))
;;* lme

;;* lmx 136 system/sepolicy/prebuilts/api/29.0/private/domain.te

(neverallow base_typeattr_549 app_data_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton add_name remove_name reparent search rmdir open audit_access execmod)))
(neverallow base_typeattr_549 privapp_data_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton add_name remove_name reparent search rmdir open audit_access execmod)))
;;* lme

;;* lmx 145 system/sepolicy/prebuilts/api/29.0/private/domain.te

(neverallow base_typeattr_550 app_data_file (dir (write create setattr relabelfrom relabelto append map unlink link rename execute quotaon mounton add_name remove_name reparent rmdir audit_access execmod)))
(neverallow base_typeattr_550 privapp_data_file (dir (write create setattr relabelfrom relabelto append map unlink link rename execute quotaon mounton add_name remove_name reparent rmdir audit_access execmod)))
;;* lme

;;* lmx 154 system/sepolicy/prebuilts/api/29.0/private/domain.te

(neverallow base_typeattr_551 app_data_file (file (open)))
(neverallow base_typeattr_551 app_data_file (lnk_file (open)))
(neverallow base_typeattr_551 app_data_file (chr_file (open)))
(neverallow base_typeattr_551 app_data_file (blk_file (open)))
(neverallow base_typeattr_551 app_data_file (sock_file (open)))
(neverallow base_typeattr_551 app_data_file (fifo_file (open)))
(neverallow base_typeattr_551 privapp_data_file (file (open)))
(neverallow base_typeattr_551 privapp_data_file (lnk_file (open)))
(neverallow base_typeattr_551 privapp_data_file (chr_file (open)))
(neverallow base_typeattr_551 privapp_data_file (blk_file (open)))
(neverallow base_typeattr_551 privapp_data_file (sock_file (open)))
(neverallow base_typeattr_551 privapp_data_file (fifo_file (open)))
;;* lme

;;* lmx 160 system/sepolicy/prebuilts/api/29.0/private/domain.te

(neverallow base_typeattr_269 app_data_file (file (create unlink)))
(neverallow base_typeattr_269 app_data_file (dir (create unlink)))
(neverallow base_typeattr_269 app_data_file (lnk_file (create unlink)))
(neverallow base_typeattr_269 app_data_file (chr_file (create unlink)))
(neverallow base_typeattr_269 app_data_file (blk_file (create unlink)))
(neverallow base_typeattr_269 app_data_file (sock_file (create unlink)))
(neverallow base_typeattr_269 app_data_file (fifo_file (create unlink)))
(neverallow base_typeattr_269 privapp_data_file (file (create unlink)))
(neverallow base_typeattr_269 privapp_data_file (dir (create unlink)))
(neverallow base_typeattr_269 privapp_data_file (lnk_file (create unlink)))
(neverallow base_typeattr_269 privapp_data_file (chr_file (create unlink)))
(neverallow base_typeattr_269 privapp_data_file (blk_file (create unlink)))
(neverallow base_typeattr_269 privapp_data_file (sock_file (create unlink)))
(neverallow base_typeattr_269 privapp_data_file (fifo_file (create unlink)))
;;* lme

;;* lmx 165 system/sepolicy/prebuilts/api/29.0/private/domain.te

(neverallow base_typeattr_423 app_data_file (file (relabelfrom relabelto)))
(neverallow base_typeattr_423 app_data_file (dir (relabelfrom relabelto)))
(neverallow base_typeattr_423 app_data_file (lnk_file (relabelfrom relabelto)))
(neverallow base_typeattr_423 app_data_file (chr_file (relabelfrom relabelto)))
(neverallow base_typeattr_423 app_data_file (blk_file (relabelfrom relabelto)))
(neverallow base_typeattr_423 app_data_file (sock_file (relabelfrom relabelto)))
(neverallow base_typeattr_423 app_data_file (fifo_file (relabelfrom relabelto)))
(neverallow base_typeattr_423 privapp_data_file (file (relabelfrom relabelto)))
(neverallow base_typeattr_423 privapp_data_file (dir (relabelfrom relabelto)))
(neverallow base_typeattr_423 privapp_data_file (lnk_file (relabelfrom relabelto)))
(neverallow base_typeattr_423 privapp_data_file (chr_file (relabelfrom relabelto)))
(neverallow base_typeattr_423 privapp_data_file (blk_file (relabelfrom relabelto)))
(neverallow base_typeattr_423 privapp_data_file (sock_file (relabelfrom relabelto)))
(neverallow base_typeattr_423 privapp_data_file (fifo_file (relabelfrom relabelto)))
;;* lme

;;* lmx 171 system/sepolicy/prebuilts/api/29.0/private/domain.te

(neverallow base_typeattr_552 staging_data_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton add_name remove_name reparent search rmdir open audit_access execmod)))
;;* lme

;;* lmx 172 system/sepolicy/prebuilts/api/29.0/private/domain.te

(neverallow base_typeattr_553 staging_data_file (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod open audit_access)))
;;* lme

;;* lmx 173 system/sepolicy/prebuilts/api/29.0/private/domain.te

(neverallow base_typeattr_554 staging_data_file (dir (write create setattr relabelfrom link rename add_name remove_name reparent rmdir)))
;;* lme

;;* lmx 177 system/sepolicy/prebuilts/api/29.0/private/domain.te

(neverallow base_typeattr_212 staging_data_file (file (write create setattr relabelfrom append rename execute execute_no_trans)))
;;* lme

;;* lmx 184 system/sepolicy/prebuilts/api/29.0/private/domain.te

(neverallow base_typeattr_555 base_typeattr_556 (file (execute)))
;;* lme

;;* lmx 213 system/sepolicy/prebuilts/api/29.0/private/domain.te

(neverallow base_typeattr_557 base_typeattr_558 (file (execute)))
;;* lme

;;* lmx 220 system/sepolicy/prebuilts/api/29.0/private/domain.te

(neverallow base_typeattr_208 cgroup_rc_file (file (write create setattr relabelfrom append unlink link rename)))
;;* lme

;;* lmx 234 system/sepolicy/prebuilts/api/29.0/private/domain.te

(neverallow base_typeattr_559 dalvikcache_data_file (file (write create setattr relabelfrom append unlink link rename)))
;;* lme

;;* lmx 247 system/sepolicy/prebuilts/api/29.0/private/domain.te

(neverallow base_typeattr_559 dalvikcache_data_file (dir (write create setattr relabelfrom link rename add_name remove_name reparent rmdir)))
;;* lme

;;* lmx 275 system/sepolicy/prebuilts/api/29.0/private/domain.te

(neverallow base_typeattr_560 self (capability (dac_override)))
(neverallow base_typeattr_560 self (cap_userns (dac_override)))
;;* lme

;;* lmx 284 system/sepolicy/prebuilts/api/29.0/private/domain.te

(neverallow base_typeattr_561 self (capability (dac_read_search)))
(neverallow base_typeattr_561 self (cap_userns (dac_read_search)))
;;* lme

;;* lmx 300 system/sepolicy/prebuilts/api/29.0/private/domain.te

(neverallow base_typeattr_562 base_typeattr_563 (filesystem (mount remount relabelfrom relabelto)))
;;* lme

;;* lmx 315 system/sepolicy/prebuilts/api/29.0/private/domain.te

(neverallow base_typeattr_564 self (capability (sys_rawio)))
(neverallow base_typeattr_564 self (cap_userns (sys_rawio)))
;;* lme

(allow init drmserver_exec (file (read getattr map execute open)))
(allow init drmserver (process (transition)))
(allow drmserver drmserver_exec (file (read getattr map execute entrypoint open)))
(dontaudit init drmserver (process (noatsecure)))
(allow init drmserver (process (siginh rlimitinh)))
(typetransition init drmserver_exec process drmserver)
(typetransition drmserver apk_data_file sock_file drmserver_socket)
(allow init dumpstate_exec (file (read getattr map execute open)))
(allow init dumpstate (process (transition)))
(allow dumpstate dumpstate_exec (file (read getattr map execute entrypoint open)))
(dontaudit init dumpstate (process (noatsecure)))
(allow init dumpstate (process (siginh rlimitinh)))
(typetransition init dumpstate_exec process dumpstate)
(allow dumpstate vdc_exec (file (read getattr map execute open)))
(allow dumpstate vdc (process (transition)))
(allow vdc vdc_exec (file (read getattr map execute entrypoint open)))
(allow vdc dumpstate (process (sigchld)))
(dontaudit dumpstate vdc (process (noatsecure)))
(allow dumpstate vdc (process (siginh rlimitinh)))
(typetransition dumpstate vdc_exec process vdc)
(allow dumpstate system_file (file (lock)))
(allow dumpstate storaged_exec (file (ioctl read getattr lock map execute execute_no_trans open)))
(allow dumpstate incidentd (binder (call transfer)))
(allow incidentd dumpstate (binder (transfer)))
(allow dumpstate incidentd (fd (use)))
(allow dumpstate storaged (binder (call transfer)))
(allow storaged dumpstate (binder (transfer)))
(allow dumpstate storaged (fd (use)))
(allow dumpstate statsd (binder (call transfer)))
(allow statsd dumpstate (binder (transfer)))
(allow dumpstate statsd (fd (use)))
(allow dumpstate gpuservice (binder (call transfer)))
(allow gpuservice dumpstate (binder (transfer)))
(allow dumpstate gpuservice (fd (use)))
(allow dumpstate idmap (binder (call transfer)))
(allow idmap dumpstate (binder (transfer)))
(allow dumpstate idmap (fd (use)))
(allow dumpstate boottime_prop (file (read getattr map open)))
(allow dumpstate netd (process (signal)))
(allow dumpstate statsd (process (signal)))
(allow dumpstate debugfs_wakeup_sources (file (ioctl read getattr lock map open)))
(allow dumpstate dev_type (blk_file (getattr)))
(allow dumpstate webview_zygote (process (signal)))
(dontaudit dumpstate perfprofd (binder (call)))
(dontaudit dumpstate update_engine (binder (call)))
(allow dumpstate proc_net_tcp_udp (file (ioctl read getattr lock map open)))
(allow dumpstate incidentcompanion_service (binder (call transfer)))
(allow incidentcompanion_service dumpstate (binder (transfer)))
(allow dumpstate incidentcompanion_service (fd (use)))
(typetransition ephemeral_app tmpfs file appdomain_tmpfs)
(allow ephemeral_app appdomain_tmpfs (file (read write getattr map execute)))
;;* lmx 17 system/sepolicy/prebuilts/api/29.0/private/ephemeral_app.te

(neverallow base_typeattr_565 base_typeattr_566 (file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
;;* lme

;;* lmx 17 system/sepolicy/prebuilts/api/29.0/private/ephemeral_app.te

(neverallow base_typeattr_567 ephemeral_app (file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
;;* lme

;;* lmx 17 system/sepolicy/prebuilts/api/29.0/private/ephemeral_app.te

(neverallow base_typeattr_568 ephemeral_app (process (ptrace)))
;;* lme

(allow ephemeral_app sdcard_type (file (ioctl read write getattr lock append)))
(allow ephemeral_app media_rw_data_file (file (ioctl read write getattr lock append)))
(allow ephemeral_app privapp_data_file (file (ioctl read getattr lock map execute open)))
(allow ephemeral_app app_data_file (file (ioctl read getattr lock map execute open)))
(allow ephemeral_app privapp_data_file (lnk_file (ioctl read getattr lock map open)))
(allow ephemeral_app rs_exec (file (read getattr map execute open)))
(allow ephemeral_app rs (process (transition)))
(allow rs rs_exec (file (read getattr map execute entrypoint open)))
(allow rs ephemeral_app (process (sigchld)))
(dontaudit ephemeral_app rs (process (noatsecure)))
(allow ephemeral_app rs (process (siginh rlimitinh)))
(typetransition ephemeral_app rs_exec process rs)
(allow ephemeral_app app_exec_data_file (file (ioctl read getattr lock map unlink execute open)))
(allow ephemeral_app audioserver_service (service_manager (find)))
(allow ephemeral_app cameraserver_service (service_manager (find)))
(allow ephemeral_app mediaserver_service (service_manager (find)))
(allow ephemeral_app mediaextractor_service (service_manager (find)))
(allow ephemeral_app mediacodec_service (service_manager (find)))
(allow ephemeral_app mediametrics_service (service_manager (find)))
(allow ephemeral_app mediadrmserver_service (service_manager (find)))
(allow ephemeral_app drmserver_service (service_manager (find)))
(allow ephemeral_app radio_service (service_manager (find)))
(allow ephemeral_app ephemeral_app_api_service (service_manager (find)))
(allow ephemeral_app gpu_service (service_manager (find)))
(allow ephemeral_app gpuservice (binder (call transfer)))
(allow gpuservice ephemeral_app (binder (transfer)))
(allow ephemeral_app gpuservice (fd (use)))
(allow ephemeral_app traced (fd (use)))
(allow ephemeral_app traced_tmpfs (file (read write getattr map)))
(allow ephemeral_app traced_producer_socket (sock_file (write)))
(allow ephemeral_app traced (unix_stream_socket (connectto)))
(allow heapprofd ephemeral_app (process (signal)))
(allow ephemeral_app heapprofd_exec (file (ioctl read getattr lock map execute execute_no_trans open)))
(allow heapprofd ephemeral_app (file (ioctl read getattr lock map open)))
(allow heapprofd ephemeral_app (dir (ioctl read getattr lock search open)))
(allow ephemeral_app system_server (udp_socket (read write getattr connect getopt setopt recvfrom sendto)))
(allow ephemeral_app ashmem_device (chr_file (ioctl read write getattr lock append map open)))
;;* lmx 74 system/sepolicy/prebuilts/api/29.0/private/ephemeral_app.te

(neverallow ephemeral_app app_data_file (file (execute_no_trans)))
(neverallow ephemeral_app privapp_data_file (file (execute_no_trans)))
;;* lme

;;* lmx 77 system/sepolicy/prebuilts/api/29.0/private/ephemeral_app.te

(neverallow ephemeral_app domain (netlink_kobject_uevent_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
;;* lme

;;* lmx 80 system/sepolicy/prebuilts/api/29.0/private/ephemeral_app.te

(neverallow ephemeral_app domain (netlink_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
;;* lme

;;* lmx 84 system/sepolicy/prebuilts/api/29.0/private/ephemeral_app.te

(neverallow ephemeral_app debugfs (file (read)))
;;* lme

;;* lmx 87 system/sepolicy/prebuilts/api/29.0/private/ephemeral_app.te

(neverallow ephemeral_app gpu_device (chr_file (execute)))
;;* lme

;;* lmx 90 system/sepolicy/prebuilts/api/29.0/private/ephemeral_app.te

(neverallow ephemeral_app sysfs (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod open audit_access)))
;;* lme

;;* lmx 94 system/sepolicy/prebuilts/api/29.0/private/ephemeral_app.te

(neverallow ephemeral_app proc (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute execute_no_trans open)))
;;* lme

;;* lmx 97 system/sepolicy/prebuilts/api/29.0/private/ephemeral_app.te

(neverallow ephemeral_app sdcard_type (file (create open)))
(neverallow ephemeral_app media_rw_data_file (file (create open)))
;;* lme

;;* lmx 98 system/sepolicy/prebuilts/api/29.0/private/ephemeral_app.te

(neverallow ephemeral_app sdcard_type (dir (search)))
(neverallow ephemeral_app media_rw_data_file (dir (search)))
;;* lme

;;* lmx 102 system/sepolicy/prebuilts/api/29.0/private/ephemeral_app.te

(neverallow ephemeral_app proc_net (file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
;;* lme

(allow init fingerprintd_exec (file (read getattr map execute open)))
(allow init fingerprintd (process (transition)))
(allow fingerprintd fingerprintd_exec (file (read getattr map execute entrypoint open)))
(dontaudit init fingerprintd (process (noatsecure)))
(allow init fingerprintd (process (siginh rlimitinh)))
(typetransition init fingerprintd_exec process fingerprintd)
(allow init flags_health_check_exec (file (read getattr map execute open)))
(allow init flags_health_check (process (transition)))
(allow flags_health_check flags_health_check_exec (file (read getattr map execute entrypoint open)))
(dontaudit init flags_health_check (process (noatsecure)))
(allow init flags_health_check (process (siginh rlimitinh)))
(typetransition init flags_health_check_exec process flags_health_check)
(allow init fsck_exec (file (read getattr map execute open)))
(allow init fsck (process (transition)))
(allow fsck fsck_exec (file (read getattr map execute entrypoint open)))
(dontaudit init fsck (process (noatsecure)))
(allow init fsck (process (siginh rlimitinh)))
(typetransition init fsck_exec process fsck)
(allow fsck metadata_block_device (blk_file (ioctl read write getattr lock append map open)))
(allow init fsverity_init_exec (file (read getattr map execute open)))
(allow init fsverity_init (process (transition)))
(allow fsverity_init fsverity_init_exec (file (read getattr map execute entrypoint open)))
(dontaudit init fsverity_init (process (noatsecure)))
(allow init fsverity_init (process (siginh rlimitinh)))
(typetransition init fsverity_init_exec process fsverity_init)
(allow fsverity_init shell_exec (file (ioctl read getattr lock map execute execute_no_trans open)))
(allow fsverity_init toolbox_exec (file (ioctl read getattr lock map execute execute_no_trans open)))
(allow fsverity_init proc_keys (file (ioctl read getattr lock map open)))
(dontaudit fsverity_init init (key (view)))
(dontaudit fsverity_init vold (key (view)))
(allow fsverity_init kernel (key (view write search setattr)))
(allow fsverity_init fsverity_init (key (view write search)))
(allow fsverity_init proc_fs_verity (file (write lock append map open)))
(dontaudit fsverity_init kernel (system (module_request)))
(allow fwk_bufferhub ion_device (chr_file (ioctl read getattr lock map open)))
(allow init fwk_bufferhub_exec (file (read getattr map execute open)))
(allow init fwk_bufferhub (process (transition)))
(allow fwk_bufferhub fwk_bufferhub_exec (file (read getattr map execute entrypoint open)))
(dontaudit init fwk_bufferhub (process (noatsecure)))
(allow init fwk_bufferhub (process (siginh rlimitinh)))
(typetransition init fwk_bufferhub_exec process fwk_bufferhub)
(allow init gatekeeperd_exec (file (read getattr map execute open)))
(allow init gatekeeperd (process (transition)))
(allow gatekeeperd gatekeeperd_exec (file (read getattr map execute entrypoint open)))
(dontaudit init gatekeeperd (process (noatsecure)))
(allow init gatekeeperd (process (siginh rlimitinh)))
(typetransition init gatekeeperd_exec process gatekeeperd)
(allow init gpuservice_exec (file (read getattr map execute open)))
(allow init gpuservice (process (transition)))
(allow gpuservice gpuservice_exec (file (read getattr map execute entrypoint open)))
(dontaudit init gpuservice (process (noatsecure)))
(allow init gpuservice (process (siginh rlimitinh)))
(typetransition init gpuservice_exec process gpuservice)
(allow gpuservice adbd (binder (call transfer)))
(allow adbd gpuservice (binder (transfer)))
(allow gpuservice adbd (fd (use)))
(allow gpuservice shell (binder (call transfer)))
(allow shell gpuservice (binder (transfer)))
(allow gpuservice shell (fd (use)))
(allow gpuservice servicemanager (binder (call transfer)))
(allow servicemanager gpuservice (dir (search)))
(allow servicemanager gpuservice (file (read open)))
(allow servicemanager gpuservice (process (getattr)))
(allow gpuservice gpu_device (chr_file (ioctl read write getattr lock append map open)))
(allow gpuservice same_process_hal_file (file (read getattr map execute open)))
(allow gpuservice ion_device (chr_file (ioctl read getattr lock map open)))
(allow gpuservice hwservicemanager_prop (file (read getattr map open)))
(allow gpuservice hwservicemanager (binder (call transfer)))
(allow hwservicemanager gpuservice (binder (call transfer)))
(allow hwservicemanager gpuservice (dir (search)))
(allow hwservicemanager gpuservice (file (read map open)))
(allow hwservicemanager gpuservice (process (getattr)))
(allow gpuservice graphics_device (dir (search)))
(allow gpuservice graphics_device (chr_file (ioctl read write getattr lock append map open)))
(allow gpuservice shell (fifo_file (write)))
(allow gpuservice adbd (unix_stream_socket (read write getattr)))
(allow gpuservice devpts (chr_file (read write getattr)))
(allow gpuservice dumpstate (fd (use)))
(allow gpuservice dumpstate (fifo_file (write)))
(allow gpuservice gpu_service (service_manager (add find)))
;;* lmx 38 system/sepolicy/prebuilts/api/29.0/private/gpuservice.te

(neverallow base_typeattr_569 gpu_service (service_manager (add)))
;;* lme

(allow init gsid_exec (file (read getattr map execute open)))
(allow init gsid (process (transition)))
(allow gsid gsid_exec (file (read getattr map execute entrypoint open)))
(dontaudit init gsid (process (noatsecure)))
(allow init gsid (process (siginh rlimitinh)))
(typetransition init gsid_exec process gsid)
(allow gsid servicemanager (binder (call transfer)))
(allow servicemanager gsid (dir (search)))
(allow servicemanager gsid (file (read open)))
(allow servicemanager gsid (process (getattr)))
(allow gsid gsi_service (service_manager (add find)))
;;* lmx 11 system/sepolicy/prebuilts/api/29.0/private/gsid.te

(neverallow base_typeattr_570 gsi_service (service_manager (add)))
;;* lme

(allow gsid property_socket (sock_file (write)))
(allow gsid init (unix_stream_socket (connectto)))
(allow gsid gsid_prop (property_service (set)))
(allow gsid gsid_prop (file (read getattr map open)))
(allow gsid dm_device (chr_file (ioctl read write getattr lock append map open)))
(allow gsid dm_device (blk_file (ioctl read write getattr lock append map open)))
(allow gsid self (capability (sys_admin)))
(allow gsid self (cap_userns (sys_admin)))
(dontaudit gsid self (capability (dac_override)))
(dontaudit gsid self (cap_userns (dac_override)))
(allow gsid sysfs_dm (dir (ioctl read getattr lock search open)))
(allow gsid proc_cmdline (file (ioctl read getattr lock map open)))
(allow gsid sysfs_dt_firmware_android (dir (ioctl read getattr lock search open)))
(allow gsid sysfs_dt_firmware_android (file (ioctl read getattr lock map open)))
(allow gsid block_device (dir (ioctl read getattr lock search open)))
(allowx gsid userdata_block_device (ioctl blk_file (0x1278 0x127a)))
(allowx gsid sdcard_block_device (ioctl blk_file (0x1278 0x127a)))
(allow gsid mnt_media_rw_file (dir (ioctl read getattr lock search open)))
(allow gsid vfat (dir (ioctl read write getattr lock add_name remove_name search open)))
(allow gsid vfat (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow gsid sdcard_block_device (blk_file (ioctl read getattr lock map open)))
(allow gsid self (capability (sys_rawio)))
(allow gsid self (cap_userns (sys_rawio)))
(allow gsid adbd (fd (use)))
(allow gsid adbd (unix_stream_socket (ioctl read write getattr setattr lock append map bind connect getopt setopt shutdown)))
;;* lmx 59 system/sepolicy/prebuilts/api/29.0/private/gsid.te

(neverallow base_typeattr_571 gsid_prop (property_service (set)))
;;* lme

(allow gsid userdata_block_device (blk_file (ioctl read getattr lock map open)))
(allow gsid metadata_file (dir (search)))
(allow gsid gsi_metadata_file (dir (ioctl read write getattr lock add_name remove_name search open)))
(allow gsid gsi_metadata_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow gsid gsi_data_file (dir (ioctl read write getattr lock add_name remove_name search open)))
(allow gsid gsi_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allowx gsid gsi_data_file (ioctl file (0x660b)))
;;* lmx 100 system/sepolicy/prebuilts/api/29.0/private/gsid.te

(neverallow base_typeattr_572 gsi_metadata_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton add_name remove_name reparent search rmdir open audit_access execmod)))
;;* lme

;;* lmx 108 system/sepolicy/prebuilts/api/29.0/private/gsid.te

(neverallow base_typeattr_572 gsi_metadata_file (file (ioctl read write create setattr lock relabelfrom append map unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod open audit_access)))
(neverallow base_typeattr_572 gsi_metadata_file (lnk_file (ioctl read write create setattr lock relabelfrom append map unlink link rename execute quotaon mounton open audit_access execmod)))
(neverallow base_typeattr_572 gsi_metadata_file (sock_file (ioctl read write create setattr lock relabelfrom append map unlink link rename execute quotaon mounton open audit_access execmod)))
(neverallow base_typeattr_572 gsi_metadata_file (fifo_file (ioctl read write create setattr lock relabelfrom append map unlink link rename execute quotaon mounton open audit_access execmod)))
;;* lme

;;* lmx 116 system/sepolicy/prebuilts/api/29.0/private/gsid.te

(neverallow base_typeattr_572 gsi_metadata_file (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod open audit_access)))
(neverallow base_typeattr_572 gsi_metadata_file (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton open audit_access execmod)))
(neverallow base_typeattr_572 gsi_metadata_file (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton open audit_access execmod)))
(neverallow base_typeattr_572 gsi_metadata_file (fifo_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton open audit_access execmod)))
(neverallow base_typeattr_572 gsi_data_file (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod open audit_access)))
(neverallow base_typeattr_572 gsi_data_file (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton open audit_access execmod)))
(neverallow base_typeattr_572 gsi_data_file (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton open audit_access execmod)))
(neverallow base_typeattr_572 gsi_data_file (fifo_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton open audit_access execmod)))
;;* lme

;;* lmx 121 system/sepolicy/prebuilts/api/29.0/private/gsid.te

(neverallow base_typeattr_570 gsi_data_file (dir (write lock relabelfrom append map unlink link rename execute quotaon mounton add_name remove_name reparent rmdir audit_access execmod)))
;;* lme

;;* lmx 127 system/sepolicy/prebuilts/api/29.0/private/gsid.te

(neverallow base_typeattr_571 gsi_data_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton add_name remove_name reparent search rmdir open audit_access execmod)))
;;* lme

;;* lmx 132 system/sepolicy/prebuilts/api/29.0/private/gsid.te

(neverallow base_typeattr_570 gsi_data_file (file (ioctl read write create setattr lock relabelfrom append map unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod open audit_access)))
(neverallow base_typeattr_570 gsi_data_file (lnk_file (ioctl read write create setattr lock relabelfrom append map unlink link rename execute quotaon mounton open audit_access execmod)))
(neverallow base_typeattr_570 gsi_data_file (sock_file (ioctl read write create setattr lock relabelfrom append map unlink link rename execute quotaon mounton open audit_access execmod)))
(neverallow base_typeattr_570 gsi_data_file (fifo_file (ioctl read write create setattr lock relabelfrom append map unlink link rename execute quotaon mounton open audit_access execmod)))
;;* lme

(allow init hal_allocator_default_exec (file (read getattr map execute open)))
(allow init hal_allocator_default (process (transition)))
(allow hal_allocator_default hal_allocator_default_exec (file (read getattr map execute entrypoint open)))
(dontaudit init hal_allocator_default (process (noatsecure)))
(allow init hal_allocator_default (process (siginh rlimitinh)))
(typetransition init hal_allocator_default_exec process hal_allocator_default)
(allow hal_allocator_default servicemanager (binder (call transfer)))
(allow servicemanager hal_allocator_default (dir (search)))
(allow servicemanager hal_allocator_default (file (read open)))
(allow servicemanager hal_allocator_default (process (getattr)))
(allow halclientdomain hwservicemanager (binder (call transfer)))
(allow hwservicemanager halclientdomain (binder (call transfer)))
(allow hwservicemanager halclientdomain (dir (search)))
(allow hwservicemanager halclientdomain (file (read map open)))
(allow hwservicemanager halclientdomain (process (getattr)))
(allow halclientdomain hwservicemanager_prop (file (read getattr map open)))
(allow halclientdomain hidl_manager_hwservice (hwservice_manager (find)))
(allow halserverdomain hwservicemanager (binder (call transfer)))
(allow hwservicemanager halserverdomain (binder (call transfer)))
(allow hwservicemanager halserverdomain (dir (search)))
(allow hwservicemanager halserverdomain (file (read map open)))
(allow hwservicemanager halserverdomain (process (getattr)))
(allow halserverdomain system_file (dir (ioctl read getattr lock search open)))
(allow halserverdomain hwservicemanager_prop (file (read getattr map open)))
(allow init healthd_exec (file (read getattr map execute open)))
(allow init healthd (process (transition)))
(allow healthd healthd_exec (file (read getattr map execute entrypoint open)))
(dontaudit init healthd (process (noatsecure)))
(allow init healthd (process (siginh rlimitinh)))
(typetransition init healthd_exec process healthd)
(allow init heapprofd_exec (file (read getattr map execute open)))
(allow init heapprofd (process (transition)))
(allow heapprofd heapprofd_exec (file (read getattr map execute entrypoint open)))
(dontaudit init heapprofd (process (noatsecure)))
(allow init heapprofd (process (siginh rlimitinh)))
(typetransition init heapprofd_exec process heapprofd)
(typetransition heapprofd tmpfs file heapprofd_tmpfs)
(allow heapprofd heapprofd_tmpfs (file (read write getattr map)))
(allow heapprofd property_socket (sock_file (write)))
(allow heapprofd init (unix_stream_socket (connectto)))
(allow heapprofd heapprofd_prop (property_service (set)))
(allow heapprofd heapprofd_prop (file (read getattr map open)))
(allow heapprofd self (capability (kill)))
(dontaudit heapprofd domain (dir (search open)))
(allow heapprofd traced (fd (use)))
(allow heapprofd traced_tmpfs (file (read write getattr map)))
(allow heapprofd traced_producer_socket (sock_file (write)))
(allow heapprofd traced (unix_stream_socket (connectto)))
(dontaudit heapprofd self (capability (dac_override dac_read_search)))
(dontaudit heapprofd self (cap_userns (dac_override dac_read_search)))
;;* lmx 62 system/sepolicy/prebuilts/api/29.0/private/heapprofd.te

(neverallow heapprofd init (file (read)))
(neverallow heapprofd kernel (file (read)))
(neverallow heapprofd keystore (file (read)))
(neverallow heapprofd llkd (file (read)))
(neverallow heapprofd logd (file (read)))
(neverallow heapprofd ueventd (file (read)))
(neverallow heapprofd vendor_init (file (read)))
(neverallow heapprofd vold (file (read)))
(neverallow heapprofd bpfloader (file (read)))
;;* lme

;;* lmx 62 system/sepolicy/prebuilts/api/29.0/private/heapprofd.te

(neverallow heapprofd init (process (signal)))
(neverallow heapprofd kernel (process (signal)))
(neverallow heapprofd keystore (process (signal)))
(neverallow heapprofd llkd (process (signal)))
(neverallow heapprofd logd (process (signal)))
(neverallow heapprofd ueventd (process (signal)))
(neverallow heapprofd vendor_init (process (signal)))
(neverallow heapprofd vold (process (signal)))
(neverallow heapprofd bpfloader (process (signal)))
;;* lme

;;* lmx 74 system/sepolicy/prebuilts/api/29.0/private/heapprofd.te

(neverallow heapprofd vendor_file (file (write create setattr relabelfrom append unlink link rename execute execute_no_trans)))
;;* lme

(allow init hwservicemanager_exec (file (read getattr map execute open)))
(allow init hwservicemanager (process (transition)))
(allow hwservicemanager hwservicemanager_exec (file (read getattr map execute entrypoint open)))
(dontaudit init hwservicemanager (process (noatsecure)))
(allow init hwservicemanager (process (siginh rlimitinh)))
(typetransition init hwservicemanager_exec process hwservicemanager)
(allow hwservicemanager hidl_manager_hwservice (hwservice_manager (add find)))
(allow hwservicemanager hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 5 system/sepolicy/prebuilts/api/29.0/private/hwservicemanager.te

(neverallow base_typeattr_573 hidl_manager_hwservice (hwservice_manager (add)))
;;* lme

(allow hwservicemanager hidl_token_hwservice (hwservice_manager (add find)))
(allow hwservicemanager hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 6 system/sepolicy/prebuilts/api/29.0/private/hwservicemanager.te

(neverallow base_typeattr_573 hidl_token_hwservice (hwservice_manager (add)))
;;* lme

(allow hwservicemanager property_socket (sock_file (write)))
(allow hwservicemanager init (unix_stream_socket (connectto)))
(allow hwservicemanager ctl_interface_start_prop (property_service (set)))
(allow hwservicemanager ctl_interface_start_prop (file (read getattr map open)))
(allow init idmap_exec (file (read getattr map execute open)))
(allow init idmap (process (transition)))
(allow idmap idmap_exec (file (read getattr map execute entrypoint open)))
(dontaudit init idmap (process (noatsecure)))
(allow init idmap (process (siginh rlimitinh)))
(typetransition init idmap_exec process idmap)
(allow shell incident_exec (file (read getattr map execute open)))
(allow shell incident (process (transition)))
(allow incident incident_exec (file (read getattr map execute entrypoint open)))
(allow incident shell (process (sigchld)))
(dontaudit shell incident (process (noatsecure)))
(allow shell incident (process (siginh rlimitinh)))
(typetransition shell incident_exec process incident)
(allow incident shell (fd (use)))
(allow incident devpts (chr_file (read write)))
(allow incident adbd (fd (use)))
(allow incident adbd (unix_stream_socket (read write)))
(allow incident adbd (process (sigchld)))
(allow incident servicemanager (binder (call transfer)))
(allow servicemanager incident (dir (search)))
(allow servicemanager incident (file (read open)))
(allow servicemanager incident (process (getattr)))
(allow incident incident_service (service_manager (find)))
(allow incident incidentd (binder (call transfer)))
(allow incidentd incident (binder (transfer)))
(allow incident incidentd (fd (use)))
(allow incident incidentd (fifo_file (write)))
;;* lmx 30 system/sepolicy/prebuilts/api/29.0/private/incident.te

(neverallow base_typeattr_574 incident_exec (file (execute execute_no_trans)))
;;* lme

(allow incidentd incident_helper_exec (file (read getattr map execute open)))
(allow incidentd incident_helper (process (transition)))
(allow incident_helper incident_helper_exec (file (read getattr map execute entrypoint open)))
(allow incident_helper incidentd (process (sigchld)))
(dontaudit incidentd incident_helper (process (noatsecure)))
(allow incidentd incident_helper (process (siginh rlimitinh)))
(typetransition incidentd incident_helper_exec process incident_helper)
(allow incident_helper dumpstate (fd (use)))
(allow incident_helper incident (fd (use)))
(allow incident_helper incidentd (fd (use)))
(allow incident_helper shell (fd (use)))
(allow incident_helper dumpstate (fifo_file (read write getattr)))
(allow incident_helper incident (fifo_file (read write getattr)))
(allow incident_helper incidentd (fifo_file (read write getattr)))
(allow incident_helper shell (fifo_file (read write getattr)))
(allow incident_helper incidentd (unix_stream_socket (read write)))
;;* lmx 14 system/sepolicy/prebuilts/api/29.0/private/incident_helper.te

(neverallow base_typeattr_575 incident_helper_exec (file (execute execute_no_trans)))
;;* lme

(allow init incidentd_exec (file (read getattr map execute open)))
(allow init incidentd (process (transition)))
(allow incidentd incidentd_exec (file (read getattr map execute entrypoint open)))
(dontaudit init incidentd (process (noatsecure)))
(allow init incidentd (process (siginh rlimitinh)))
(typetransition init incidentd_exec process incidentd)
(allow incidentd servicemanager (binder (call transfer)))
(allow servicemanager incidentd (dir (search)))
(allow servicemanager incidentd (file (read open)))
(allow servicemanager incidentd (process (getattr)))
(allow incidentd sysfs_wake_lock (file (ioctl read write getattr lock append map open)))
(allow incidentd self (capability2 (block_suspend)))
(allow incidentd self (cap2_userns (block_suspend)))
(allow incidentd system_suspend_server (binder (call transfer)))
(allow system_suspend_server incidentd (binder (transfer)))
(allow incidentd system_suspend_server (fd (use)))
(allow incidentd system_suspend_hwservice (hwservice_manager (find)))
(allow incidentd hwservicemanager (binder (call transfer)))
(allow hwservicemanager incidentd (binder (call transfer)))
(allow hwservicemanager incidentd (dir (search)))
(allow hwservicemanager incidentd (file (read map open)))
(allow hwservicemanager incidentd (process (getattr)))
(allow incidentd hwservicemanager_prop (file (read getattr map open)))
(allow incidentd hidl_manager_hwservice (hwservice_manager (find)))
(allow incidentd domain (dir (ioctl read getattr lock search open)))
(allow incidentd domain (file (ioctl read getattr lock map open)))
(allow incidentd domain (lnk_file (ioctl read getattr lock map open)))
(allow incidentd incident_helper (process (sigkill)))
(allow incidentd system_file (file (execute_no_trans)))
(allow incidentd toolbox_exec (file (ioctl read getattr lock map execute execute_no_trans open)))
(allow incidentd proc_version (file (ioctl read getattr lock map open)))
(allow incidentd proc_pagetypeinfo (file (ioctl read getattr lock map open)))
(allow incidentd debugfs_wakeup_sources (file (ioctl read getattr lock map open)))
(allow incidentd proc_meminfo (file (read open)))
(allow incidentd sysfs_devices_system_cpu (file (ioctl read getattr lock map open)))
(allow incidentd domain (process (getattr)))
(allow incidentd sysfs_batteryinfo (dir (search)))
(allow incidentd sysfs_batteryinfo (file (ioctl read getattr lock map open)))
(allow incidentd stats_service (service_manager (find)))
(allow incidentd statsd (binder (call transfer)))
(allow statsd incidentd (binder (transfer)))
(allow incidentd statsd (fd (use)))
(allow incidentd incident_data_file (dir (ioctl read write getattr lock add_name remove_name search open)))
(allow incidentd incident_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow incidentd servicemanager (binder (call transfer)))
(allow servicemanager incidentd (dir (search)))
(allow servicemanager incidentd (file (read open)))
(allow servicemanager incidentd (process (getattr)))
(allow incidentd hwservicemanager (binder (call transfer)))
(allow hwservicemanager incidentd (binder (call transfer)))
(allow hwservicemanager incidentd (dir (search)))
(allow hwservicemanager incidentd (file (read map open)))
(allow hwservicemanager incidentd (process (getattr)))
(allow incidentd hwservicemanager (hwservice_manager (list)))
(allow incidentd hwservicemanager_prop (file (read getattr map open)))
(allow incidentd hidl_manager_hwservice (hwservice_manager (find)))
(allow incidentd proc_cmdline (file (ioctl read getattr lock map open)))
(allow incidentd proc_pipe_conf (file (ioctl read getattr lock map open)))
(allow incidentd proc_stat (file (ioctl read getattr lock map open)))
(allow incidentd appdomain (process (signal)))
(allow incidentd ephemeral_app (process (signal)))
(allow incidentd system_server (process (signal)))
(allow incidentd hal_audio_server (process (signal)))
(allow incidentd hal_bluetooth_server (process (signal)))
(allow incidentd hal_camera_server (process (signal)))
(allow incidentd hal_codec2_server (process (signal)))
(allow incidentd hal_face_server (process (signal)))
(allow incidentd hal_graphics_allocator_server (process (signal)))
(allow incidentd hal_graphics_composer_server (process (signal)))
(allow incidentd hal_health_server (process (signal)))
(allow incidentd hal_omx_server (process (signal)))
(allow incidentd hal_sensors_server (process (signal)))
(allow incidentd hal_vr_server (process (signal)))
(allow incidentd audioserver (process (signal)))
(allow incidentd cameraserver (process (signal)))
(allow incidentd drmserver (process (signal)))
(allow incidentd inputflinger (process (signal)))
(allow incidentd mediadrmserver (process (signal)))
(allow incidentd mediaextractor (process (signal)))
(allow incidentd mediametrics (process (signal)))
(allow incidentd mediaserver (process (signal)))
(allow incidentd sdcardd (process (signal)))
(allow incidentd statsd (process (signal)))
(allow incidentd surfaceflinger (process (signal)))
(allow incidentd system_server (binder (call transfer)))
(allow system_server incidentd (binder (transfer)))
(allow incidentd system_server (fd (use)))
(allow incidentd appdomain (binder (call transfer)))
(allow appdomain incidentd (binder (transfer)))
(allow incidentd appdomain (fd (use)))
;;* lmx 111 system/sepolicy/prebuilts/api/29.0/private/incidentd.te

(neverallow incidentd base_typeattr_167 (process (ptrace)))
;;* lme

(allow incidentd self (capability (kill)))
(allow incidentd self (cap_userns (kill)))
(allow incidentd tombstoned_intercept_socket (sock_file (write)))
(allow incidentd tombstoned (unix_stream_socket (connectto)))
(allow incidentd shell_exec (file (ioctl read getattr lock map execute execute_no_trans open)))
(allow incidentd system_server_service (service_manager (find)))
(allow incidentd app_api_service (service_manager (find)))
(allow incidentd system_api_service (service_manager (find)))
(allow incidentd incident_service (service_manager (add find)))
;;* lmx 137 system/sepolicy/prebuilts/api/29.0/private/incidentd.te

(neverallow base_typeattr_576 incident_service (service_manager (add)))
;;* lme

(allow incidentd dumpstate (fd (use)))
(allow incidentd incident (fd (use)))
(allow incidentd dumpstate (fifo_file (write)))
(allow incidentd incident (fifo_file (write)))
(allow incidentd incident (binder (call transfer)))
(allow incident incidentd (binder (transfer)))
(allow incidentd incident (fd (use)))
;;* lmx 160 system/sepolicy/prebuilts/api/29.0/private/incidentd.te

(neverallow base_typeattr_577 incident_service (service_manager (find)))
;;* lme

;;* lmx 174 system/sepolicy/prebuilts/api/29.0/private/incidentd.te

(neverallow base_typeattr_578 incident_data_file (file (write create getattr setattr lock append map unlink rename execute execute_no_trans open)))
;;* lme

;;* lmx 176 system/sepolicy/prebuilts/api/29.0/private/incidentd.te

(neverallow base_typeattr_579 incident_data_file (file (ioctl read getattr lock map open)))
;;* lme

;;* lmx 178 system/sepolicy/prebuilts/api/29.0/private/incidentd.te

(neverallow base_typeattr_578 incident_data_file (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
;;* lme

(typetransition init tmpfs file init_tmpfs)
(allow init init_tmpfs (file (read write getattr map)))
(allow init rootfs (file (read getattr map execute open)))
(allow init healthd (process (transition)))
(allow healthd rootfs (file (read getattr map execute entrypoint open)))
(dontaudit init healthd (process (noatsecure)))
(allow init healthd (process (siginh rlimitinh)))
(allow init rootfs (file (read getattr map execute open)))
(allow init slideshow (process (transition)))
(allow slideshow rootfs (file (read getattr map execute entrypoint open)))
(dontaudit init slideshow (process (noatsecure)))
(allow init slideshow (process (siginh rlimitinh)))
(allow init charger_exec (file (read getattr map execute open)))
(allow init charger (process (transition)))
(allow charger charger_exec (file (read getattr map execute entrypoint open)))
(dontaudit init charger (process (noatsecure)))
(allow init charger (process (siginh rlimitinh)))
(typetransition init charger_exec process charger)
(allow init e2fs_exec (file (read getattr map execute open)))
(allow init e2fs (process (transition)))
(allow e2fs e2fs_exec (file (read getattr map execute entrypoint open)))
(dontaudit init e2fs (process (noatsecure)))
(allow init e2fs (process (siginh rlimitinh)))
(typetransition init e2fs_exec process e2fs)
(allow init bpfloader_exec (file (read getattr map execute open)))
(allow init bpfloader (process (transition)))
(allow bpfloader bpfloader_exec (file (read getattr map execute entrypoint open)))
(dontaudit init bpfloader (process (noatsecure)))
(allow init bpfloader (process (siginh rlimitinh)))
(typetransition init bpfloader_exec process bpfloader)
(allow init shell_exec (file (read getattr map execute open)))
(allow init shell (process (transition)))
(allow shell shell_exec (file (read getattr map execute entrypoint open)))
(dontaudit init shell (process (noatsecure)))
(allow init shell (process (siginh rlimitinh)))
(allow init init_exec (file (read getattr map execute open)))
(allow init ueventd (process (transition)))
(allow ueventd init_exec (file (read getattr map execute entrypoint open)))
(dontaudit init ueventd (process (noatsecure)))
(allow init ueventd (process (siginh rlimitinh)))
(allow init init_exec (file (read getattr map execute open)))
(allow init vendor_init (process (transition)))
(allow vendor_init init_exec (file (read getattr map execute entrypoint open)))
(dontaudit init vendor_init (process (noatsecure)))
(allow init vendor_init (process (siginh rlimitinh)))
(allow init rootfs (file (read getattr map execute open)))
(allow init toolbox_exec (file (read getattr map execute open)))
(allow init modprobe (process (transition)))
(allow modprobe rootfs (file (read getattr map execute entrypoint open)))
(allow modprobe toolbox_exec (file (read getattr map execute entrypoint open)))
(dontaudit init modprobe (process (noatsecure)))
(allow init modprobe (process (siginh rlimitinh)))
(allow init property_socket (sock_file (write)))
(allow init init (unix_stream_socket (connectto)))
(allow init powerctl_prop (property_service (set)))
(allow init powerctl_prop (file (read getattr map open)))
(allow init inputflinger_exec (file (read getattr map execute open)))
(allow init inputflinger (process (transition)))
(allow inputflinger inputflinger_exec (file (read getattr map execute entrypoint open)))
(dontaudit init inputflinger (process (noatsecure)))
(allow init inputflinger (process (siginh rlimitinh)))
(typetransition init inputflinger_exec process inputflinger)
(allow init install_recovery_exec (file (read getattr map execute open)))
(allow init install_recovery (process (transition)))
(allow install_recovery install_recovery_exec (file (read getattr map execute entrypoint open)))
(dontaudit init install_recovery (process (noatsecure)))
(allow init install_recovery (process (siginh rlimitinh)))
(typetransition init install_recovery_exec process install_recovery)
(allow init installd_exec (file (read getattr map execute open)))
(allow init installd (process (transition)))
(allow installd installd_exec (file (read getattr map execute entrypoint open)))
(dontaudit init installd (process (noatsecure)))
(allow init installd (process (siginh rlimitinh)))
(typetransition init installd_exec process installd)
(allow installd dex2oat_exec (file (read getattr map execute open)))
(allow installd dex2oat (process (transition)))
(allow dex2oat dex2oat_exec (file (read getattr map execute entrypoint open)))
(allow dex2oat installd (process (sigchld)))
(dontaudit installd dex2oat (process (noatsecure)))
(allow installd dex2oat (process (siginh rlimitinh)))
(typetransition installd dex2oat_exec process dex2oat)
(allow installd dexoptanalyzer_exec (file (read getattr map execute open)))
(allow installd dexoptanalyzer (process (transition)))
(allow dexoptanalyzer dexoptanalyzer_exec (file (read getattr map execute entrypoint open)))
(allow dexoptanalyzer installd (process (sigchld)))
(dontaudit installd dexoptanalyzer (process (noatsecure)))
(allow installd dexoptanalyzer (process (siginh rlimitinh)))
(typetransition installd dexoptanalyzer_exec process dexoptanalyzer)
(allow installd viewcompiler_exec (file (read getattr map execute open)))
(allow installd viewcompiler (process (transition)))
(allow viewcompiler viewcompiler_exec (file (read getattr map execute entrypoint open)))
(allow viewcompiler installd (process (sigchld)))
(dontaudit installd viewcompiler (process (noatsecure)))
(allow installd viewcompiler (process (siginh rlimitinh)))
(typetransition installd viewcompiler_exec process viewcompiler)
(allow installd profman_exec (file (read getattr map execute open)))
(allow installd profman (process (transition)))
(allow profman profman_exec (file (read getattr map execute entrypoint open)))
(allow profman installd (process (sigchld)))
(dontaudit installd profman (process (noatsecure)))
(allow installd profman (process (siginh rlimitinh)))
(typetransition installd profman_exec process profman)
(allow installd idmap_exec (file (read getattr map execute open)))
(allow installd idmap (process (transition)))
(allow idmap idmap_exec (file (read getattr map execute entrypoint open)))
(allow idmap installd (process (sigchld)))
(dontaudit installd idmap (process (noatsecure)))
(allow installd idmap (process (siginh rlimitinh)))
(typetransition installd idmap_exec process idmap)
(allow installd migrate_legacy_obb_data_exec (file (read getattr map execute open)))
(allow installd migrate_legacy_obb_data (process (transition)))
(allow migrate_legacy_obb_data migrate_legacy_obb_data_exec (file (read getattr map execute entrypoint open)))
(allow migrate_legacy_obb_data installd (process (sigchld)))
(dontaudit installd migrate_legacy_obb_data (process (noatsecure)))
(allow installd migrate_legacy_obb_data (process (siginh rlimitinh)))
(typetransition installd migrate_legacy_obb_data_exec process migrate_legacy_obb_data)
(allow installd shell_exec (file (ioctl read getattr lock map execute execute_no_trans open)))
(typetransition installd system_data_file file install_data_file)
(allow installd dumpstate (fd (use)))
(allow installd dumpstate (fifo_file (ioctl read getattr lock map open)))
(allow installd app_exec_data_file (file (unlink)))
(allow installd rollback_data_file (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
(allow installd rollback_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow installd device_config_runtime_native_prop (file (read getattr map open)))
(allow installd device_config_runtime_native_boot_prop (file (read getattr map open)))
(allow installd staging_data_file (file (unlink)))
(allow installd staging_data_file (dir (read write remove_name search rmdir open)))
(allow init iorapd_exec (file (read getattr map execute open)))
(allow init iorapd (process (transition)))
(allow iorapd iorapd_exec (file (read getattr map execute entrypoint open)))
(dontaudit init iorapd (process (noatsecure)))
(allow init iorapd (process (siginh rlimitinh)))
(typetransition init iorapd_exec process iorapd)
(typetransition iorapd tmpfs file iorapd_tmpfs)
(allow iorapd iorapd_tmpfs (file (read write getattr map)))
(typetransition isolated_app tmpfs file appdomain_tmpfs)
(allow isolated_app appdomain_tmpfs (file (read write getattr map execute)))
;;* lmx 11 system/sepolicy/prebuilts/api/29.0/private/isolated_app.te

(neverallow base_typeattr_580 base_typeattr_513 (file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
;;* lme

;;* lmx 11 system/sepolicy/prebuilts/api/29.0/private/isolated_app.te

(neverallow base_typeattr_581 isolated_app (file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
;;* lme

;;* lmx 11 system/sepolicy/prebuilts/api/29.0/private/isolated_app.te

(neverallow base_typeattr_582 isolated_app (process (ptrace)))
;;* lme

(allow isolated_app app_data_file (file (read write getattr lock append map)))
(allow isolated_app privapp_data_file (file (read write getattr lock append map)))
(allow isolated_app activity_service (service_manager (find)))
(allow isolated_app display_service (service_manager (find)))
(allow isolated_app webviewupdate_service (service_manager (find)))
(allow isolated_app self (process (ptrace)))
(allow isolated_app sdcard_type (file (read write getattr lock append map)))
(allow isolated_app media_rw_data_file (file (read write getattr lock append map)))
(allow isolated_app webview_zygote (fd (use)))
(allow isolated_app webview_zygote (process (sigchld)))
(allow isolated_app webview_zygote (unix_dgram_socket (write)))
(allow isolated_app webview_zygote_tmpfs (file (read)))
(allow isolated_app app_zygote (fd (use)))
(allow isolated_app app_zygote (process (sigchld)))
(allow isolated_app app_zygote (unix_dgram_socket (write)))
(dontaudit isolated_app shell_data_file (dir (search)))
(allow isolated_app traced (fd (use)))
(allow isolated_app traced_tmpfs (file (read write getattr map)))
(allow isolated_app traced_producer_socket (sock_file (write)))
(allow isolated_app traced (unix_stream_socket (connectto)))
(allow heapprofd isolated_app (process (signal)))
(allow isolated_app heapprofd_exec (file (ioctl read getattr lock map execute execute_no_trans open)))
(allow heapprofd isolated_app (file (ioctl read getattr lock map open)))
(allow heapprofd isolated_app (dir (ioctl read getattr lock search open)))
(allow isolated_app ashmem_device (chr_file (ioctl read write getattr lock append map)))
;;* lmx 74 system/sepolicy/prebuilts/api/29.0/private/isolated_app.te

(neverallow isolated_app app_data_file (file (open)))
(neverallow isolated_app privapp_data_file (file (open)))
;;* lme

;;* lmx 79 system/sepolicy/prebuilts/api/29.0/private/isolated_app.te

(neverallow isolated_app anr_data_file (file (ioctl read write create getattr setattr lock relabelfrom relabelto map unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod audit_access)))
;;* lme

;;* lmx 80 system/sepolicy/prebuilts/api/29.0/private/isolated_app.te

(neverallow isolated_app anr_data_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton add_name remove_name reparent rmdir open audit_access execmod)))
;;* lme

;;* lmx 83 system/sepolicy/prebuilts/api/29.0/private/isolated_app.te

(neverallow isolated_app hwbinder_device (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod open audit_access)))
;;* lme

;;* lmx 84 system/sepolicy/prebuilts/api/29.0/private/isolated_app.te

(neverallow isolated_app base_typeattr_167 (hwservice_manager (add find list)))
;;* lme

;;* lmx 87 system/sepolicy/prebuilts/api/29.0/private/isolated_app.te

(neverallow isolated_app vndbinder_device (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod open audit_access)))
;;* lme

;;* lmx 91 system/sepolicy/prebuilts/api/29.0/private/isolated_app.te

(neverallow isolated_app base_typeattr_167 (service_manager (add list)))
;;* lme

;;* lmx 103 system/sepolicy/prebuilts/api/29.0/private/isolated_app.te

(neverallow isolated_app base_typeattr_583 (service_manager (find)))
;;* lme

;;* lmx 106 system/sepolicy/prebuilts/api/29.0/private/isolated_app.te

(neverallow isolated_app gpu_device (chr_file (ioctl read write getattr lock append map execute open)))
;;* lme

;;* lmx 109 system/sepolicy/prebuilts/api/29.0/private/isolated_app.te

(neverallow isolated_app cache_file (dir (write create setattr relabelfrom relabelto append map unlink link rename execute quotaon mounton add_name remove_name reparent rmdir audit_access execmod)))
;;* lme

;;* lmx 110 system/sepolicy/prebuilts/api/29.0/private/isolated_app.te

(neverallow isolated_app cache_file (file (ioctl write create setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod open audit_access)))
;;* lme

;;* lmx 114 system/sepolicy/prebuilts/api/29.0/private/isolated_app.te

(neverallow isolated_app sdcard_type (dir (ioctl read write create setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton add_name remove_name reparent search rmdir open audit_access execmod)))
(neverallow isolated_app mnt_user_file (dir (ioctl read write create setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton add_name remove_name reparent search rmdir open audit_access execmod)))
(neverallow isolated_app storage_file (dir (ioctl read write create setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton add_name remove_name reparent search rmdir open audit_access execmod)))
;;* lme

;;* lmx 115 system/sepolicy/prebuilts/api/29.0/private/isolated_app.te

(neverallow isolated_app mnt_user_file (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod open audit_access)))
(neverallow isolated_app mnt_user_file (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton open audit_access execmod)))
(neverallow isolated_app mnt_user_file (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod open audit_access)))
(neverallow isolated_app mnt_user_file (blk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton open audit_access execmod)))
(neverallow isolated_app mnt_user_file (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton open audit_access execmod)))
(neverallow isolated_app mnt_user_file (fifo_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton open audit_access execmod)))
(neverallow isolated_app storage_file (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod open audit_access)))
(neverallow isolated_app storage_file (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton open audit_access execmod)))
(neverallow isolated_app storage_file (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod open audit_access)))
(neverallow isolated_app storage_file (blk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton open audit_access execmod)))
(neverallow isolated_app storage_file (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton open audit_access execmod)))
(neverallow isolated_app storage_file (fifo_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton open audit_access execmod)))
;;* lme

;;* lmx 116 system/sepolicy/prebuilts/api/29.0/private/isolated_app.te

(neverallow isolated_app sdcard_type (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton open audit_access execmod)))
(neverallow isolated_app sdcard_type (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod open audit_access)))
(neverallow isolated_app sdcard_type (blk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton open audit_access execmod)))
(neverallow isolated_app sdcard_type (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton open audit_access execmod)))
(neverallow isolated_app sdcard_type (fifo_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton open audit_access execmod)))
;;* lme

;;* lmx 117 system/sepolicy/prebuilts/api/29.0/private/isolated_app.te

(neverallow isolated_app sdcard_type (file (ioctl create setattr relabelfrom relabelto unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod open audit_access)))
;;* lme

;;* lmx 120 system/sepolicy/prebuilts/api/29.0/private/isolated_app.te

(neverallow isolated_app usbaccessory_device (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod open audit_access)))
(neverallow isolated_app usb_device (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod open audit_access)))
;;* lme

;;* lmx 123 system/sepolicy/prebuilts/api/29.0/private/isolated_app.te

(neverallow isolated_app webview_zygote (sock_file (write)))
;;* lme

;;* lmx 132 system/sepolicy/prebuilts/api/29.0/private/isolated_app.te

(neverallow isolated_app base_typeattr_584 (file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
;;* lme

;;* lmx 153 system/sepolicy/prebuilts/api/29.0/private/isolated_app.te

(neverallow isolated_app self (socket (create)))
(neverallow isolated_app self (tcp_socket (create)))
(neverallow isolated_app self (udp_socket (create)))
(neverallow isolated_app self (rawip_socket (create)))
(neverallow isolated_app self (netlink_socket (create)))
(neverallow isolated_app self (packet_socket (create)))
(neverallow isolated_app self (key_socket (create)))
(neverallow isolated_app self (netlink_route_socket (create)))
(neverallow isolated_app self (netlink_tcpdiag_socket (create)))
(neverallow isolated_app self (netlink_nflog_socket (create)))
(neverallow isolated_app self (netlink_xfrm_socket (create)))
(neverallow isolated_app self (netlink_selinux_socket (create)))
(neverallow isolated_app self (netlink_audit_socket (create)))
(neverallow isolated_app self (netlink_dnrt_socket (create)))
(neverallow isolated_app self (netlink_kobject_uevent_socket (create)))
(neverallow isolated_app self (appletalk_socket (create)))
(neverallow isolated_app self (tun_socket (create)))
(neverallow isolated_app self (netlink_iscsi_socket (create)))
(neverallow isolated_app self (netlink_fib_lookup_socket (create)))
(neverallow isolated_app self (netlink_connector_socket (create)))
(neverallow isolated_app self (netlink_netfilter_socket (create)))
(neverallow isolated_app self (netlink_generic_socket (create)))
(neverallow isolated_app self (netlink_scsitransport_socket (create)))
(neverallow isolated_app self (netlink_rdma_socket (create)))
(neverallow isolated_app self (netlink_crypto_socket (create)))
(neverallow isolated_app self (sctp_socket (create)))
(neverallow isolated_app self (icmp_socket (create)))
(neverallow isolated_app self (ax25_socket (create)))
(neverallow isolated_app self (ipx_socket (create)))
(neverallow isolated_app self (netrom_socket (create)))
(neverallow isolated_app self (atmpvc_socket (create)))
(neverallow isolated_app self (x25_socket (create)))
(neverallow isolated_app self (rose_socket (create)))
(neverallow isolated_app self (decnet_socket (create)))
(neverallow isolated_app self (atmsvc_socket (create)))
(neverallow isolated_app self (rds_socket (create)))
(neverallow isolated_app self (irda_socket (create)))
(neverallow isolated_app self (pppox_socket (create)))
(neverallow isolated_app self (llc_socket (create)))
(neverallow isolated_app self (can_socket (create)))
(neverallow isolated_app self (tipc_socket (create)))
(neverallow isolated_app self (bluetooth_socket (create)))
(neverallow isolated_app self (iucv_socket (create)))
(neverallow isolated_app self (rxrpc_socket (create)))
(neverallow isolated_app self (isdn_socket (create)))
(neverallow isolated_app self (phonet_socket (create)))
(neverallow isolated_app self (ieee802154_socket (create)))
(neverallow isolated_app self (caif_socket (create)))
(neverallow isolated_app self (alg_socket (create)))
(neverallow isolated_app self (nfc_socket (create)))
(neverallow isolated_app self (vsock_socket (create)))
(neverallow isolated_app self (kcm_socket (create)))
(neverallow isolated_app self (qipcrtr_socket (create)))
(neverallow isolated_app self (smc_socket (create)))
(neverallow isolated_app self (xdp_socket (create)))
;;* lme

(allow init iw_exec (file (read getattr map execute open)))
(allow init iw (process (transition)))
(allow iw iw_exec (file (read getattr map execute entrypoint open)))
(dontaudit init iw (process (noatsecure)))
(allow init iw (process (siginh rlimitinh)))
(typetransition init iw_exec process iw)
(allow kernel init_exec (file (read getattr map execute open)))
(allow kernel init (process (transition)))
(allow init init_exec (file (read getattr map execute entrypoint open)))
(allow init kernel (process (sigchld)))
(dontaudit kernel init (process (noatsecure)))
(allow kernel init (process (siginh rlimitinh)))
(typetransition kernel init_exec process init)
(allow kernel otapreopt_chroot (fd (use)))
(allow kernel postinstall_file (file (read)))
(allow init keystore_exec (file (read getattr map execute open)))
(allow init keystore (process (transition)))
(allow keystore keystore_exec (file (read getattr map execute entrypoint open)))
(dontaudit init keystore (process (noatsecure)))
(allow init keystore (process (siginh rlimitinh)))
(typetransition init keystore_exec process keystore)
(allow keystore platform_app (binder (call)))
(allow keystore system_wifi_keystore_hwservice (hwservice_manager (add find)))
(allow keystore hidl_base_hwservice (hwservice_manager (add)))
;;* lmx 16 system/sepolicy/prebuilts/api/29.0/private/keystore.te

(neverallow base_typeattr_433 system_wifi_keystore_hwservice (hwservice_manager (add)))
;;* lme

(allow keystore device_logging_prop (file (read getattr map open)))
(allow init llkd_exec (file (read getattr map execute open)))
(allow init llkd (process (transition)))
(allow llkd llkd_exec (file (read getattr map execute entrypoint open)))
(dontaudit init llkd (process (noatsecure)))
(allow init llkd (process (siginh rlimitinh)))
(typetransition init llkd_exec process llkd)
(allow llkd llkd_prop (file (read getattr map open)))
(allow llkd self (capability (kill)))
(allow llkd self (cap_userns (kill)))
(allow llkd self (capability (ipc_lock)))
(allow llkd self (cap_userns (ipc_lock)))
(allow llkd domain (process (sigkill)))
(allow llkd domain (dir (ioctl read getattr lock search open)))
(allow llkd domain (file (ioctl read getattr lock map open)))
(allow llkd domain (lnk_file (read)))
(allow llkd proc_hung_task (file (ioctl read write getattr lock append map open)))
(allow llkd proc_sysrq (file (write lock append map open)))
(allow llkd kmsg_device (chr_file (write lock append map open)))
;;* lmx 49 system/sepolicy/prebuilts/api/29.0/private/llkd.te

(neverallow base_typeattr_166 llkd (process (transition dyntransition)))
;;* lme

;;* lmx 50 system/sepolicy/prebuilts/api/29.0/private/llkd.te

(neverallow domain llkd (process (ptrace)))
;;* lme

;;* lmx 53 system/sepolicy/prebuilts/api/29.0/private/llkd.te

(neverallow base_typeattr_167 llkd (process (noatsecure)))
;;* lme

(allow init lmkd_exec (file (read getattr map execute open)))
(allow init lmkd (process (transition)))
(allow lmkd lmkd_exec (file (read getattr map execute entrypoint open)))
(dontaudit init lmkd (process (noatsecure)))
(allow init lmkd (process (siginh rlimitinh)))
(typetransition init lmkd_exec process lmkd)
(allow init logd_exec (file (read getattr map execute open)))
(allow init logd (process (transition)))
(allow logd logd_exec (file (read getattr map execute entrypoint open)))
(dontaudit init logd (process (noatsecure)))
(allow init logd (process (siginh rlimitinh)))
(typetransition init logd_exec process logd)
;;* lmx 12 system/sepolicy/prebuilts/api/29.0/private/logd.te

(neverallow logd base_typeattr_585 (file (write create append)))
;;* lme

;;* lmx 27 system/sepolicy/prebuilts/api/29.0/private/logd.te

(neverallow base_typeattr_586 runtime_event_log_tags_file (file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
;;* lme

;;* lmx 38 system/sepolicy/prebuilts/api/29.0/private/logd.te

(neverallow base_typeattr_587 runtime_event_log_tags_file (file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
;;* lme

;;* lmx 26 system/sepolicy/prebuilts/api/29.0/private/logpersist.te

(neverallow logpersist file_type (file (write create append)))
;;* lme

;;* lmx 27 system/sepolicy/prebuilts/api/29.0/private/logpersist.te

(neverallow base_typeattr_166 misc_logd_file (file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
;;* lme

;;* lmx 28 system/sepolicy/prebuilts/api/29.0/private/logpersist.te

(neverallow base_typeattr_166 misc_logd_file (dir (write relabelfrom link rename add_name remove_name reparent rmdir)))
;;* lme

(allow init lpdumpd_exec (file (read getattr map execute open)))
(allow init lpdumpd (process (transition)))
(allow lpdumpd lpdumpd_exec (file (read getattr map execute entrypoint open)))
(dontaudit init lpdumpd (process (noatsecure)))
(allow init lpdumpd (process (siginh rlimitinh)))
(typetransition init lpdumpd_exec process lpdumpd)
(allow lpdumpd servicemanager (binder (call transfer)))
(allow servicemanager lpdumpd (dir (search)))
(allow servicemanager lpdumpd (file (read open)))
(allow servicemanager lpdumpd (process (getattr)))
(allow lpdumpd lpdump_service (service_manager (add find)))
;;* lmx 8 system/sepolicy/prebuilts/api/29.0/private/lpdumpd.te

(neverallow base_typeattr_588 lpdump_service (service_manager (add)))
;;* lme

(allow lpdumpd block_device (dir (ioctl read getattr lock search open)))
(allow lpdumpd super_block_device_type (blk_file (ioctl read getattr lock map open)))
(allow lpdumpd sysfs_dt_firmware_android (dir (ioctl read getattr lock search open)))
(allow lpdumpd sysfs_dt_firmware_android (file (ioctl read getattr lock map open)))
(dontaudit lpdumpd metadata_file (dir (ioctl read getattr lock search open)))
(dontaudit lpdumpd metadata_file (file (ioctl read getattr lock map open)))
(dontaudit lpdumpd gsi_metadata_file (dir (ioctl read getattr lock search open)))
(dontaudit lpdumpd gsi_metadata_file (file (ioctl read getattr lock map open)))
;;* lmx 34 system/sepolicy/prebuilts/api/29.0/private/lpdumpd.te

(neverallow base_typeattr_589 lpdump_service (service_manager (find)))
;;* lme

;;* lmx 41 system/sepolicy/prebuilts/api/29.0/private/lpdumpd.te

(neverallow base_typeattr_589 lpdumpd (binder (call)))
;;* lme

(allow init mdnsd_exec (file (read getattr map execute open)))
(allow init mdnsd (process (transition)))
(allow mdnsd mdnsd_exec (file (read getattr map execute entrypoint open)))
(dontaudit init mdnsd (process (noatsecure)))
(allow init mdnsd (process (siginh rlimitinh)))
(typetransition init mdnsd_exec process mdnsd)
(allow mdnsd proc_net_type (dir (ioctl read getattr lock search open)))
(allow mdnsd proc_net_type (file (ioctl read getattr lock map open)))
(allow mdnsd proc_net_type (lnk_file (ioctl read getattr lock map open)))
(allow init mediadrmserver_exec (file (read getattr map execute open)))
(allow init mediadrmserver (process (transition)))
(allow mediadrmserver mediadrmserver_exec (file (read getattr map execute entrypoint open)))
(dontaudit init mediadrmserver (process (noatsecure)))
(allow init mediadrmserver (process (siginh rlimitinh)))
(typetransition init mediadrmserver_exec process mediadrmserver)
(auditallow mediadrmserver hal_graphics_allocator_server (binder (call)))
(allow init mediaextractor_exec (file (read getattr map execute open)))
(allow init mediaextractor (process (transition)))
(allow mediaextractor mediaextractor_exec (file (read getattr map execute entrypoint open)))
(dontaudit init mediaextractor (process (noatsecure)))
(allow init mediaextractor (process (siginh rlimitinh)))
(typetransition init mediaextractor_exec process mediaextractor)
(typetransition mediaextractor tmpfs file mediaextractor_tmpfs)
(allow mediaextractor mediaextractor_tmpfs (file (read write getattr map)))
(allow mediaextractor appdomain_tmpfs (file (read write getattr map)))
(allow mediaextractor mediaserver_tmpfs (file (read write getattr map)))
(allow mediaextractor system_server_tmpfs (file (read write getattr map)))
(allow init mediametrics_exec (file (read getattr map execute open)))
(allow init mediametrics (process (transition)))
(allow mediametrics mediametrics_exec (file (read getattr map execute entrypoint open)))
(dontaudit init mediametrics (process (noatsecure)))
(allow init mediametrics (process (siginh rlimitinh)))
(typetransition init mediametrics_exec process mediametrics)
(typetransition mediaprovider tmpfs file appdomain_tmpfs)
(allow mediaprovider appdomain_tmpfs (file (read write getattr map execute)))
;;* lmx 7 system/sepolicy/prebuilts/api/29.0/private/mediaprovider.te

(neverallow base_typeattr_590 base_typeattr_591 (file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
;;* lme

;;* lmx 7 system/sepolicy/prebuilts/api/29.0/private/mediaprovider.te

(neverallow base_typeattr_592 mediaprovider (file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
;;* lme

;;* lmx 7 system/sepolicy/prebuilts/api/29.0/private/mediaprovider.te

(neverallow base_typeattr_593 mediaprovider (process (ptrace)))
;;* lme

(allow mediaprovider cache_file (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
(allow mediaprovider cache_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow mediaprovider cache_file (lnk_file (ioctl read getattr lock map open)))
(dontaudit mediaprovider cache_private_backup_file (dir (getattr)))
(dontaudit mediaprovider cache_recovery_file (dir (getattr)))
(allow mediaprovider mnt_media_rw_file (dir (search)))
(allow mediaprovider app_api_service (service_manager (find)))
(allow mediaprovider audioserver_service (service_manager (find)))
(allow mediaprovider drmserver_service (service_manager (find)))
(allow mediaprovider mediaextractor_service (service_manager (find)))
(allow mediaprovider mediaserver_service (service_manager (find)))
(allow mediaprovider ringtone_file (file (read write getattr)))
(allow mediaprovider mtp_device (chr_file (ioctl read write getattr lock append map open)))
(allow mediaprovider functionfs (dir (search)))
(allow mediaprovider functionfs (file (ioctl read write getattr lock append map open)))
(allowx mediaprovider functionfs (ioctl file (0x6782)))
(allow mediaprovider property_socket (sock_file (write)))
(allow mediaprovider init (unix_stream_socket (connectto)))
(allow mediaprovider ffs_prop (property_service (set)))
(allow mediaprovider ffs_prop (file (read getattr map open)))
(allow mediaprovider property_socket (sock_file (write)))
(allow mediaprovider init (unix_stream_socket (connectto)))
(allow mediaprovider exported_ffs_prop (property_service (set)))
(allow mediaprovider exported_ffs_prop (file (read getattr map open)))
(allow mediaprovider ashmem_device (chr_file (ioctl read write getattr lock append map)))
(allow init mediaserver_exec (file (read getattr map execute open)))
(allow init mediaserver (process (transition)))
(allow mediaserver mediaserver_exec (file (read getattr map execute entrypoint open)))
(dontaudit init mediaserver (process (noatsecure)))
(allow init mediaserver (process (siginh rlimitinh)))
(typetransition init mediaserver_exec process mediaserver)
(typetransition mediaserver tmpfs file mediaserver_tmpfs)
(allow mediaserver mediaserver_tmpfs (file (read write getattr map)))
(allow init mediaswcodec_exec (file (read getattr map execute open)))
(allow init mediaswcodec (process (transition)))
(allow mediaswcodec mediaswcodec_exec (file (read getattr map execute entrypoint open)))
(dontaudit init mediaswcodec (process (noatsecure)))
(allow init mediaswcodec (process (siginh rlimitinh)))
(typetransition init mediaswcodec_exec process mediaswcodec)
(allow migrate_legacy_obb_data media_rw_data_file (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
(allow migrate_legacy_obb_data media_rw_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow migrate_legacy_obb_data shell_exec (file (ioctl read getattr lock map execute execute_no_trans open)))
(allow migrate_legacy_obb_data toolbox_exec (file (ioctl read getattr lock map execute execute_no_trans open)))
(allow migrate_legacy_obb_data self (capability (chown dac_override dac_read_search fowner fsetid)))
(allow migrate_legacy_obb_data mnt_user_file (dir (search)))
(allow migrate_legacy_obb_data mnt_user_file (lnk_file (read)))
(allow migrate_legacy_obb_data storage_file (dir (search)))
(allow migrate_legacy_obb_data storage_file (lnk_file (read)))
(allow migrate_legacy_obb_data sdcard_type (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
(allow migrate_legacy_obb_data sdcard_type (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow migrate_legacy_obb_data installd (fd (use)))
(allow migrate_legacy_obb_data installd (file (read)))
(allow init mtp_exec (file (read getattr map execute open)))
(allow init mtp (process (transition)))
(allow mtp mtp_exec (file (read getattr map execute entrypoint open)))
(dontaudit init mtp (process (noatsecure)))
(allow init mtp (process (siginh rlimitinh)))
(typetransition init mtp_exec process mtp)
(allow init netd_exec (file (read getattr map execute open)))
(allow init netd (process (transition)))
(allow netd netd_exec (file (read getattr map execute entrypoint open)))
(dontaudit init netd (process (noatsecure)))
(allow init netd (process (siginh rlimitinh)))
(typetransition init netd_exec process netd)
(allow netd dnsmasq_exec (file (read getattr map execute open)))
(allow netd dnsmasq (process (transition)))
(allow dnsmasq dnsmasq_exec (file (read getattr map execute entrypoint open)))
(allow dnsmasq netd (process (sigchld)))
(dontaudit netd dnsmasq (process (noatsecure)))
(allow netd dnsmasq (process (siginh rlimitinh)))
(typetransition netd dnsmasq_exec process dnsmasq)
(allow netd clatd_exec (file (read getattr map execute open)))
(allow netd clatd (process (transition)))
(allow clatd clatd_exec (file (read getattr map execute entrypoint open)))
(allow clatd netd (process (sigchld)))
(dontaudit netd clatd (process (noatsecure)))
(allow netd clatd (process (siginh rlimitinh)))
(typetransition netd clatd_exec process clatd)
(allow netd bpfloader (bpf (map_read map_write prog_run)))
(allow netd self (key_socket (create)))
(allow netd bpf_progs_loaded_prop (file (read getattr map open)))
(allow netd statsdw_socket (sock_file (write)))
(allow netd statsd (unix_dgram_socket (sendto)))
(allow netd network_stack (binder (call transfer)))
(allow network_stack netd (binder (transfer)))
(allow netd network_stack (fd (use)))
(allow netd dumpstate (fd (use)))
(allow netd dumpstate (fifo_file (write getattr)))
(allow netutils_wrapper system_file (dir (ioctl read getattr lock search open)))
(allow netutils_wrapper system_file (file (ioctl read getattr lock map open)))
(allow netutils_wrapper system_file (lnk_file (ioctl read getattr lock map open)))
(allow netutils_wrapper self (capability (net_raw)))
(allow netutils_wrapper self (cap_userns (net_raw)))
(allow netutils_wrapper system_file (file (execute execute_no_trans)))
(allow netutils_wrapper proc_net_type (file (read getattr open)))
(allow netutils_wrapper self (rawip_socket (ioctl read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
(allow netutils_wrapper self (udp_socket (ioctl read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
(allow netutils_wrapper self (capability (net_admin)))
(allow netutils_wrapper self (cap_userns (net_admin)))
(allow netutils_wrapper self (netlink_route_socket (read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write)))
(allow netutils_wrapper self (netlink_xfrm_socket (read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write)))
(allow netutils_wrapper netd_service (service_manager (find)))
(allow netutils_wrapper dnsresolver_service (service_manager (find)))
(allow netutils_wrapper servicemanager (binder (call transfer)))
(allow servicemanager netutils_wrapper (dir (search)))
(allow servicemanager netutils_wrapper (file (read open)))
(allow servicemanager netutils_wrapper (process (getattr)))
(allow netutils_wrapper netd (binder (call transfer)))
(allow netd netutils_wrapper (binder (transfer)))
(allow netutils_wrapper netd (fd (use)))
(allow netutils_wrapper fs_bpf (dir (search)))
(allow netutils_wrapper fs_bpf (file (read write)))
(allow netutils_wrapper bpfloader (bpf (prog_run)))
(allow netutils_wrapper net_data_file (dir (ioctl read getattr lock search open)))
(allow netutils_wrapper net_data_file (file (ioctl read getattr lock map open)))
(allow netutils_wrapper net_data_file (lnk_file (ioctl read getattr lock map open)))
(allow base_typeattr_546 netutils_wrapper_exec (file (read getattr map execute open)))
(allow base_typeattr_546 netutils_wrapper (process (transition)))
(allow netutils_wrapper netutils_wrapper_exec (file (read getattr map execute entrypoint open)))
(allow netutils_wrapper base_typeattr_546 (process (sigchld)))
(dontaudit base_typeattr_546 netutils_wrapper (process (noatsecure)))
(allow base_typeattr_546 netutils_wrapper (process (siginh rlimitinh)))
(typetransition base_typeattr_546 netutils_wrapper_exec process netutils_wrapper)
(dontaudit netutils_wrapper self (capability (sys_resource)))
(dontaudit netutils_wrapper self (cap_userns (sys_resource)))
(dontaudit netutils_wrapper sysfs_type (file (read)))
;;* lmx 44 system/sepolicy/prebuilts/api/29.0/private/netutils_wrapper.te

(neverallow netutils_wrapper self (capability (chown dac_override dac_read_search fowner fsetid kill setgid setuid setpcap linux_immutable net_bind_service net_broadcast ipc_lock ipc_owner sys_module sys_rawio sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_nice sys_resource sys_time sys_tty_config mknod lease audit_write audit_control setfcap)))
(neverallow netutils_wrapper self (cap_userns (chown dac_override dac_read_search fowner fsetid kill setgid setuid setpcap linux_immutable net_bind_service net_broadcast ipc_lock ipc_owner sys_module sys_rawio sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_nice sys_resource sys_time sys_tty_config mknod lease audit_write audit_control setfcap)))
;;* lme

(typetransition network_stack tmpfs file appdomain_tmpfs)
(allow network_stack appdomain_tmpfs (file (read write getattr map execute)))
;;* lmx 4 system/sepolicy/prebuilts/api/29.0/private/network_stack.te

(neverallow base_typeattr_594 base_typeattr_595 (file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
;;* lme

;;* lmx 4 system/sepolicy/prebuilts/api/29.0/private/network_stack.te

(neverallow base_typeattr_596 network_stack (file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
;;* lme

;;* lmx 4 system/sepolicy/prebuilts/api/29.0/private/network_stack.te

(neverallow base_typeattr_597 network_stack (process (ptrace)))
;;* lme

(allow network_stack self (capability (net_bind_service net_broadcast net_admin net_raw)))
(allow network_stack self (cap_userns (net_bind_service net_broadcast net_admin net_raw)))
(allowx network_stack self (ioctl udp_socket (0x6900 0x6902)))
(allowx network_stack self (ioctl udp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(allowx network_stack self (ioctl udp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(allow network_stack self (packet_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
(allow network_stack self (netlink_route_socket (nlmsg_write)))
(allow network_stack app_api_service (service_manager (find)))
(allow network_stack dnsresolver_service (service_manager (find)))
(allow network_stack netd_service (service_manager (find)))
(allow network_stack radio_service (service_manager (find)))
(allow network_stack radio_data_file (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
(allow network_stack radio_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow network_stack netd (binder (call transfer)))
(allow netd network_stack (binder (transfer)))
(allow network_stack netd (fd (use)))
(typetransition nfc tmpfs file appdomain_tmpfs)
(allow nfc appdomain_tmpfs (file (read write getattr map execute)))
;;* lmx 3 system/sepolicy/prebuilts/api/29.0/private/nfc.te

(neverallow base_typeattr_598 base_typeattr_599 (file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
;;* lme

;;* lmx 3 system/sepolicy/prebuilts/api/29.0/private/nfc.te

(neverallow base_typeattr_600 nfc (file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
;;* lme

;;* lmx 3 system/sepolicy/prebuilts/api/29.0/private/nfc.te

(neverallow base_typeattr_601 nfc (process (ptrace)))
;;* lme

(allow nfc nfc_service (service_manager (add find)))
;;* lmx 7 system/sepolicy/prebuilts/api/29.0/private/nfc.te

(neverallow base_typeattr_599 nfc_service (service_manager (add)))
;;* lme

(allow nfc nfc_data_file (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
(allow nfc nfc_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow nfc nfc_data_file (lnk_file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow nfc nfc_data_file (sock_file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow nfc nfc_data_file (fifo_file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow nfc audioserver_service (service_manager (find)))
(allow nfc drmserver_service (service_manager (find)))
(allow nfc mediacodec_service (service_manager (find)))
(allow nfc mediametrics_service (service_manager (find)))
(allow nfc mediaextractor_service (service_manager (find)))
(allow nfc mediaserver_service (service_manager (find)))
(allow nfc radio_service (service_manager (find)))
(allow nfc app_api_service (service_manager (find)))
(allow nfc system_api_service (service_manager (find)))
(allow nfc vr_manager_service (service_manager (find)))
(allow nfc secure_element_service (service_manager (find)))
(allow nfc property_socket (sock_file (write)))
(allow nfc init (unix_stream_socket (connectto)))
(allow nfc nfc_prop (property_service (set)))
(allow nfc nfc_prop (file (read getattr map open)))
(allow nfc shell_data_file (file (read)))
(allow init notify_traceur_exec (file (read getattr map execute open)))
(allow init notify_traceur (process (transition)))
(allow notify_traceur notify_traceur_exec (file (read getattr map execute entrypoint open)))
(dontaudit init notify_traceur (process (noatsecure)))
(allow init notify_traceur (process (siginh rlimitinh)))
(typetransition init notify_traceur_exec process notify_traceur)
(allow notify_traceur servicemanager (binder (call transfer)))
(allow servicemanager notify_traceur (dir (search)))
(allow servicemanager notify_traceur (file (read open)))
(allow servicemanager notify_traceur (process (getattr)))
(allow notify_traceur activity_service (service_manager (find)))
(allow notify_traceur shell_exec (file (ioctl read getattr lock map execute execute_no_trans open)))
(allow notify_traceur system_file (file (ioctl read getattr lock map execute execute_no_trans open)))
(allow notify_traceur system_server (binder (call transfer)))
(allow system_server notify_traceur (binder (transfer)))
(allow notify_traceur system_server (fd (use)))
(allow otapreopt_chroot postinstall_file (dir (mounton search)))
(allow otapreopt_chroot self (capability (sys_chroot sys_admin)))
(allow otapreopt_chroot self (cap_userns (sys_chroot sys_admin)))
(allow otapreopt_chroot block_device (dir (search)))
(allow otapreopt_chroot labeledfs (filesystem (mount unmount)))
(allow otapreopt_chroot dm_device (chr_file (ioctl read write getattr lock append map open)))
(allow otapreopt_chroot postinstall_file (filesystem (unmount)))
(dontaudit otapreopt_chroot kernel (process (setsched)))
(allow otapreopt_chroot file_contexts_file (file (ioctl read getattr lock map open)))
(allow otapreopt_chroot postinstall_file (dir (ioctl read getattr lock search open)))
(allow otapreopt_chroot apexd_prop (file (read getattr map open)))
(allow otapreopt_chroot postinstall (fd (use)))
(allow otapreopt_chroot update_engine (fd (use)))
(allow otapreopt_chroot update_engine (fifo_file (write)))
(allow otapreopt_chroot postinstall_file (file (read getattr map execute open)))
(allow otapreopt_chroot postinstall_dexopt (process (transition)))
(allow postinstall_dexopt postinstall_file (file (read getattr map execute entrypoint open)))
(allow postinstall_dexopt otapreopt_chroot (process (sigchld)))
(dontaudit otapreopt_chroot postinstall_dexopt (process (noatsecure)))
(allow otapreopt_chroot postinstall_dexopt (process (siginh rlimitinh)))
(typetransition otapreopt_chroot postinstall_file process postinstall_dexopt)
(allow otapreopt_chroot loop_control_device (chr_file (ioctl read write getattr lock append map open)))
(allow otapreopt_chroot loop_device (blk_file (ioctl read write getattr lock append map open)))
(allowx otapreopt_chroot loop_device (ioctl blk_file (0x1261)))
(allowx otapreopt_chroot loop_device (ioctl blk_file ((range 0x4c00 0x4c01) (range 0x4c04 0x4c05) (range 0x4c08 0x4c09))))
(allow otapreopt_chroot sysfs_loop (dir (ioctl read getattr lock search open)))
(allow otapreopt_chroot sysfs_loop (file (ioctl read write getattr lock append map open)))
(allow otapreopt_chroot tmpfs (filesystem (mount)))
(allow otapreopt_chroot tmpfs (dir (relabelfrom)))
(allow otapreopt_chroot postinstall_apex_mnt_dir (dir (relabelto)))
(allow otapreopt_chroot postinstall_apex_mnt_dir (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
(allow otapreopt_chroot postinstall_apex_mnt_dir (dir (mounton)))
(allow otapreopt_chroot block_device (dir (ioctl read getattr lock search open)))
(allow otapreopt_chroot postinstall_file (lnk_file (ioctl read getattr lock map open)))
(allow init otapreopt_slot_exec (file (read getattr map execute open)))
(allow init otapreopt_slot (process (transition)))
(allow otapreopt_slot otapreopt_slot_exec (file (read getattr map execute entrypoint open)))
(dontaudit init otapreopt_slot (process (noatsecure)))
(allow init otapreopt_slot (process (siginh rlimitinh)))
(typetransition init otapreopt_slot_exec process otapreopt_slot)
(allow otapreopt_slot ota_data_file (dir (ioctl read write getattr lock rename add_name remove_name reparent search rmdir open)))
(allow otapreopt_slot ota_data_file (file (getattr)))
(allow otapreopt_slot ota_data_file (lnk_file (getattr)))
(allow otapreopt_slot ota_data_file (lnk_file (read)))
(allow otapreopt_slot dalvikcache_data_file (dir (read write getattr add_name remove_name search rmdir open)))
(allow otapreopt_slot dalvikcache_data_file (file (getattr unlink)))
(allow otapreopt_slot dalvikcache_data_file (lnk_file (read getattr unlink)))
(allow otapreopt_slot shell_exec (file (ioctl read getattr lock map execute execute_no_trans open)))
(allow otapreopt_slot toolbox_exec (file (ioctl read getattr lock map execute execute_no_trans open)))
(typetransition perfetto tmpfs file perfetto_tmpfs)
(allow perfetto perfetto_tmpfs (file (read write getattr map)))
(allow perfetto traced_consumer_socket (sock_file (write)))
(allow perfetto traced (unix_stream_socket (connectto)))
(allow perfetto traced (fd (use)))
(allow perfetto traced_tmpfs (file (read write getattr map)))
(allow perfetto traced_producer_socket (sock_file (write)))
(allow perfetto traced (unix_stream_socket (connectto)))
(allow perfetto perfetto_traces_data_file (dir (ioctl read write getattr lock add_name remove_name search open)))
(allow perfetto perfetto_traces_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow perfetto servicemanager (binder (call transfer)))
(allow servicemanager perfetto (dir (search)))
(allow servicemanager perfetto (file (read open)))
(allow servicemanager perfetto (process (getattr)))
(allow perfetto system_server (binder (call transfer)))
(allow system_server perfetto (binder (transfer)))
(allow perfetto system_server (fd (use)))
(allow perfetto dropbox_service (service_manager (find)))
(allow perfetto shell (fd (use)))
(allow perfetto statsd (fd (use)))
(allow perfetto su (fd (use)))
(allow perfetto shell (fifo_file (read write getattr)))
(allow perfetto statsd (fifo_file (read write getattr)))
(allow perfetto su (fifo_file (read write getattr)))
(allow perfetto adbd (fd (use)))
(allow perfetto adbd (unix_stream_socket (read write)))
(allow perfetto adbd (process (sigchld)))
(allow perfetto devpts (chr_file (ioctl read write getattr lock append map open)))
;;* lmx 53 system/sepolicy/prebuilts/api/29.0/private/perfetto.te

(neverallow perfetto self (process (execmem)))
;;* lme

;;* lmx 56 system/sepolicy/prebuilts/api/29.0/private/perfetto.te

(neverallow perfetto dev_type (blk_file (read write)))
;;* lme

;;* lmx 59 system/sepolicy/prebuilts/api/29.0/private/perfetto.te

(neverallow perfetto domain (process (ptrace)))
;;* lme

;;* lmx 71 system/sepolicy/prebuilts/api/29.0/private/perfetto.te

(neverallow perfetto base_typeattr_602 (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton add_name remove_name reparent search rmdir open audit_access execmod)))
;;* lme

;;* lmx 72 system/sepolicy/prebuilts/api/29.0/private/perfetto.te

(neverallow perfetto base_typeattr_603 (dir (ioctl read write create setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton add_name remove_name reparent rmdir open audit_access execmod)))
;;* lme

;;* lmx 73 system/sepolicy/prebuilts/api/29.0/private/perfetto.te

(neverallow perfetto zoneinfo_data_file (dir (write create setattr relabelfrom relabelto append map unlink link rename execute quotaon mounton add_name remove_name reparent rmdir audit_access execmod)))
;;* lme

;;* lmx 74 system/sepolicy/prebuilts/api/29.0/private/perfetto.te

(neverallow perfetto base_typeattr_604 (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton open audit_access execmod)))
;;* lme

;;* lmx 80 system/sepolicy/prebuilts/api/29.0/private/perfetto.te

(neverallow perfetto base_typeattr_604 (file (ioctl read create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod open audit_access)))
;;* lme

(allow init performanced_exec (file (read getattr map execute open)))
(allow init performanced (process (transition)))
(allow performanced performanced_exec (file (read getattr map execute entrypoint open)))
(dontaudit init performanced (process (noatsecure)))
(allow init performanced (process (siginh rlimitinh)))
(typetransition init performanced_exec process performanced)
;;* lmx 15 system/sepolicy/prebuilts/api/29.0/private/performanced.te

(neverallow domain perfprofd (binder (call)))
;;* lme

;;* lmx 28 system/sepolicy/prebuilts/api/29.0/private/performanced.te

(neverallow perfprofd domain (binder (call)))
;;* lme

(typetransition platform_app tmpfs file appdomain_tmpfs)
(allow platform_app appdomain_tmpfs (file (read write getattr map execute)))
;;* lmx 7 system/sepolicy/prebuilts/api/29.0/private/platform_app.te

(neverallow base_typeattr_605 base_typeattr_606 (file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
;;* lme

;;* lmx 7 system/sepolicy/prebuilts/api/29.0/private/platform_app.te

(neverallow base_typeattr_607 platform_app (file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
;;* lme

;;* lmx 7 system/sepolicy/prebuilts/api/29.0/private/platform_app.te

(neverallow base_typeattr_608 platform_app (process (ptrace)))
;;* lme

(allow platform_app shell_data_file (dir (search)))
(allow platform_app shell_data_file (file (read getattr open)))
(allow platform_app icon_file (file (read getattr open)))
(allow platform_app apk_tmp_file (dir (ioctl read write getattr lock add_name remove_name search open)))
(allow platform_app apk_private_tmp_file (dir (ioctl read write getattr lock add_name remove_name search open)))
(allow platform_app apk_tmp_file (file (ioctl read write getattr lock append map open)))
(allow platform_app apk_private_tmp_file (file (ioctl read write getattr lock append map open)))
(allow platform_app apk_private_data_file (dir (search)))
(allow platform_app asec_apk_file (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
(allow platform_app asec_apk_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow platform_app media_rw_data_file (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
(allow platform_app media_rw_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow platform_app cache_file (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
(allow platform_app cache_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow platform_app mnt_media_rw_file (dir (ioctl read getattr lock search open)))
(allow platform_app sdcard_type (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
(allow platform_app sdcard_type (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow platform_app rootfs (dir (getattr)))
(allow platform_app proc_vmstat (file (ioctl read getattr lock map open)))
(allow platform_app proc_net_type (dir (ioctl read getattr lock search open)))
(allow platform_app proc_net_type (file (ioctl read getattr lock map open)))
(allow platform_app proc_net_type (lnk_file (ioctl read getattr lock map open)))
(allow platform_app audioserver_service (service_manager (find)))
(allow platform_app cameraserver_service (service_manager (find)))
(allow platform_app drmserver_service (service_manager (find)))
(allow platform_app mediaserver_service (service_manager (find)))
(allow platform_app mediametrics_service (service_manager (find)))
(allow platform_app mediaextractor_service (service_manager (find)))
(allow platform_app mediacodec_service (service_manager (find)))
(allow platform_app mediadrmserver_service (service_manager (find)))
(allow platform_app persistent_data_block_service (service_manager (find)))
(allow platform_app radio_service (service_manager (find)))
(allow platform_app thermal_service (service_manager (find)))
(allow platform_app timezone_service (service_manager (find)))
(allow platform_app app_api_service (service_manager (find)))
(allow platform_app system_api_service (service_manager (find)))
(allow platform_app vr_manager_service (service_manager (find)))
(allow platform_app gpu_service (service_manager (find)))
(allow platform_app stats_service (service_manager (find)))
(allow platform_app gpuservice (binder (call transfer)))
(allow gpuservice platform_app (binder (transfer)))
(allow platform_app gpuservice (fd (use)))
(allow platform_app statsd (binder (call)))
(allow platform_app preloads_data_file (file (ioctl read getattr lock map open)))
(allow platform_app preloads_data_file (dir (ioctl read getattr lock search open)))
(allow platform_app preloads_media_file (file (ioctl read getattr lock map open)))
(allow platform_app preloads_media_file (dir (ioctl read getattr lock search open)))
(allow platform_app runtime_event_log_tags_file (file (ioctl read getattr lock map open)))
(allow platform_app system_server (udp_socket (read write getattr connect getopt setopt recvfrom sendto)))
(allow platform_app property_socket (sock_file (write)))
(allow platform_app init (unix_stream_socket (connectto)))
(allow platform_app test_boot_reason_prop (property_service (set)))
(allow platform_app test_boot_reason_prop (file (read getattr map open)))
(allow platform_app app_data_file (lnk_file (ioctl read write create getattr setattr lock append map unlink rename open)))
;;* lmx 103 system/sepolicy/prebuilts/api/29.0/private/platform_app.te

(neverallow platform_app fuse_device (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod open audit_access)))
;;* lme

(allow postinstall otapreopt_chroot_exec (file (read getattr map execute open)))
(allow postinstall otapreopt_chroot (process (transition)))
(allow otapreopt_chroot otapreopt_chroot_exec (file (read getattr map execute entrypoint open)))
(allow otapreopt_chroot postinstall (process (sigchld)))
(dontaudit postinstall otapreopt_chroot (process (noatsecure)))
(allow postinstall otapreopt_chroot (process (siginh rlimitinh)))
(typetransition postinstall otapreopt_chroot_exec process otapreopt_chroot)
(allow postinstall_dexopt dex2oat_exec (file (read getattr map execute open)))
(allow postinstall_dexopt dex2oat (process (transition)))
(allow dex2oat dex2oat_exec (file (read getattr map execute entrypoint open)))
(allow dex2oat postinstall_dexopt (process (sigchld)))
(dontaudit postinstall_dexopt dex2oat (process (noatsecure)))
(allow postinstall_dexopt dex2oat (process (siginh rlimitinh)))
(typetransition postinstall_dexopt dex2oat_exec process dex2oat)
(allow postinstall_dexopt postinstall_file (file (read getattr map execute open)))
(allow postinstall_dexopt dex2oat (process (transition)))
(allow dex2oat postinstall_file (file (read getattr map execute entrypoint open)))
(allow dex2oat postinstall_dexopt (process (sigchld)))
(dontaudit postinstall_dexopt dex2oat (process (noatsecure)))
(allow postinstall_dexopt dex2oat (process (siginh rlimitinh)))
(typetransition postinstall_dexopt postinstall_file process dex2oat)
(allow postinstall_dexopt self (capability (chown dac_override dac_read_search fowner fsetid setgid setuid)))
(allow postinstall_dexopt self (cap_userns (chown dac_override dac_read_search fowner fsetid setgid setuid)))
(allow postinstall_dexopt postinstall_file (filesystem (getattr)))
(allow postinstall_dexopt postinstall_file (dir (read getattr search)))
(allow postinstall_dexopt postinstall_file (lnk_file (read getattr)))
(allow postinstall_dexopt proc_filesystems (file (read getattr open)))
(allow postinstall_dexopt tmpfs (file (read)))
(allow postinstall_dexopt postinstall_apex_mnt_dir (dir (getattr search)))
(allow postinstall_dexopt apk_data_file (dir (ioctl read getattr lock search open)))
(allow postinstall_dexopt apk_data_file (file (ioctl read getattr lock map open)))
(allow postinstall_dexopt apk_data_file (lnk_file (ioctl read getattr lock map open)))
(allow postinstall_dexopt vendor_app_file (dir (ioctl read getattr lock search open)))
(allow postinstall_dexopt vendor_app_file (file (ioctl read getattr lock map open)))
(allow postinstall_dexopt vendor_app_file (lnk_file (ioctl read getattr lock map open)))
(allow postinstall_dexopt vendor_overlay_file (dir (ioctl read getattr lock search open)))
(allow postinstall_dexopt vendor_overlay_file (file (ioctl read getattr lock map open)))
(allow postinstall_dexopt vendor_overlay_file (lnk_file (ioctl read getattr lock map open)))
(allow postinstall_dexopt dalvikcache_data_file (dir (ioctl read getattr lock search open)))
(allow postinstall_dexopt dalvikcache_data_file (file (ioctl read getattr lock map open)))
(allow postinstall_dexopt dalvikcache_data_file (lnk_file (ioctl read getattr lock map open)))
(allow postinstall_dexopt user_profile_data_file (dir (getattr search)))
(allow postinstall_dexopt user_profile_data_file (file (ioctl read getattr lock map open)))
(dontaudit postinstall_dexopt user_profile_data_file (file (write)))
(allow postinstall_dexopt ota_data_file (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
(allow postinstall_dexopt ota_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow postinstall_dexopt ota_data_file (lnk_file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow postinstall_dexopt dalvikcache_data_file (dir (ioctl read write getattr lock add_name remove_name search open)))
(allow postinstall_dexopt dalvikcache_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow postinstall_dexopt dalvikcache_data_file (dir (relabelto)))
(allow postinstall_dexopt dalvikcache_data_file (file (relabelto link)))
(allow postinstall_dexopt selinuxfs (dir (ioctl read getattr lock search open)))
(allow postinstall_dexopt selinuxfs (file (ioctl read getattr lock map open)))
(allow postinstall_dexopt selinuxfs (lnk_file (ioctl read getattr lock map open)))
(allow postinstall_dexopt selinuxfs (file (write lock append map open)))
(allow postinstall_dexopt kernel (security (check_context)))
(allow postinstall_dexopt selinuxfs (dir (ioctl read getattr lock search open)))
(allow postinstall_dexopt selinuxfs (file (ioctl read getattr lock map open)))
(allow postinstall_dexopt selinuxfs (lnk_file (ioctl read getattr lock map open)))
(allow postinstall_dexopt selinuxfs (file (write lock append map open)))
(allow postinstall_dexopt kernel (security (compute_av)))
(allow postinstall_dexopt self (netlink_selinux_socket (read write create getattr setattr lock relabelfrom relabelto append bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(allow postinstall_dexopt postinstall (process (sigchld)))
(allow postinstall_dexopt otapreopt_chroot (fd (use)))
(allow postinstall_dexopt device_config_runtime_native_prop (file (read getattr map open)))
(allow postinstall_dexopt device_config_runtime_native_boot_prop (file (read getattr map open)))
(allow mtp ppp_exec (file (read getattr map execute open)))
(allow mtp ppp (process (transition)))
(allow ppp ppp_exec (file (read getattr map execute entrypoint open)))
(allow ppp mtp (process (sigchld)))
(dontaudit mtp ppp (process (noatsecure)))
(allow mtp ppp (process (siginh rlimitinh)))
(typetransition mtp ppp_exec process ppp)
(allow init preloads_copy_exec (file (read getattr map execute open)))
(allow init preloads_copy (process (transition)))
(allow preloads_copy preloads_copy_exec (file (read getattr map execute entrypoint open)))
(dontaudit init preloads_copy (process (noatsecure)))
(allow init preloads_copy (process (siginh rlimitinh)))
(typetransition init preloads_copy_exec process preloads_copy)
(allow preloads_copy shell_exec (file (ioctl read getattr lock map execute execute_no_trans open)))
(allow preloads_copy toolbox_exec (file (ioctl read getattr lock map execute execute_no_trans open)))
(allow preloads_copy preloads_data_file (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
(allow preloads_copy preloads_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow preloads_copy preloads_media_file (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
(allow preloads_copy preloads_media_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow preloads_copy system_file (dir (ioctl read getattr lock search open)))
(allow preopt2cachename cppreopts (fd (use)))
(allow preopt2cachename cppreopts (fifo_file (read write getattr)))
(allow preopt2cachename proc_net_type (file (ioctl read getattr lock map open)))
(typetransition priv_app tmpfs file appdomain_tmpfs)
(allow priv_app appdomain_tmpfs (file (read write getattr map execute)))
;;* lmx 6 system/sepolicy/prebuilts/api/29.0/private/priv_app.te

(neverallow base_typeattr_609 base_typeattr_548 (file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
;;* lme

;;* lmx 6 system/sepolicy/prebuilts/api/29.0/private/priv_app.te

(neverallow base_typeattr_610 priv_app (file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
;;* lme

;;* lmx 6 system/sepolicy/prebuilts/api/29.0/private/priv_app.te

(neverallow base_typeattr_611 priv_app (process (ptrace)))
;;* lme

(typetransition priv_app devpts chr_file priv_app_devpts)
(allow priv_app priv_app_devpts (chr_file (ioctl read write getattr open)))
(allowx priv_app priv_app_devpts (ioctl chr_file ((range 0x5401 0x5403) 0x540b (range 0x540e 0x5411) (range 0x5413 0x5414) (range 0x5450 0x5451))))
;;* lmx 15 system/sepolicy/prebuilts/api/29.0/private/priv_app.te

(neverallowx base_typeattr_167 priv_app_devpts (ioctl chr_file (0x5412)))
;;* lme

(allow priv_app self (process (ptrace)))
(allow priv_app privapp_data_file (file (execute)))
(allow priv_app privapp_data_file (lnk_file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow priv_app app_api_service (service_manager (find)))
(allow priv_app system_api_service (service_manager (find)))
(allow priv_app audioserver_service (service_manager (find)))
(allow priv_app cameraserver_service (service_manager (find)))
(allow priv_app drmserver_service (service_manager (find)))
(allow priv_app mediacodec_service (service_manager (find)))
(allow priv_app mediadrmserver_service (service_manager (find)))
(allow priv_app mediaextractor_service (service_manager (find)))
(allow priv_app mediametrics_service (service_manager (find)))
(allow priv_app mediaserver_service (service_manager (find)))
(allow priv_app network_watchlist_service (service_manager (find)))
(allow priv_app nfc_service (service_manager (find)))
(allow priv_app oem_lock_service (service_manager (find)))
(allow priv_app persistent_data_block_service (service_manager (find)))
(allow priv_app radio_service (service_manager (find)))
(allow priv_app recovery_service (service_manager (find)))
(allow priv_app stats_service (service_manager (find)))
(allow priv_app gpuservice (binder (call transfer)))
(allow gpuservice priv_app (binder (transfer)))
(allow priv_app gpuservice (fd (use)))
(allow priv_app gpu_service (service_manager (find)))
(allow priv_app cache_file (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
(allow priv_app cache_recovery_file (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
(allow priv_app cache_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow priv_app cache_recovery_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow priv_app cache_file (lnk_file (ioctl read getattr lock map open)))
(allow priv_app ota_package_file (dir (ioctl read write getattr lock add_name remove_name search open)))
(allow priv_app ota_package_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow priv_app media_rw_data_file (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
(allow priv_app media_rw_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow priv_app shell_data_file (file (ioctl read getattr lock map open)))
(allow priv_app shell_data_file (dir (ioctl read getattr lock search open)))
(allow priv_app trace_data_file (file (read getattr)))
(allow priv_app apk_tmp_file (dir (ioctl read getattr lock search open)))
(allow priv_app apk_private_tmp_file (dir (ioctl read getattr lock search open)))
(allow priv_app apk_tmp_file (file (ioctl read getattr lock map open)))
(allow priv_app apk_private_tmp_file (file (ioctl read getattr lock map open)))
(allow priv_app anr_data_file (file (ioctl read getattr lock map open)))
(allow priv_app vold (fd (use)))
(allow priv_app fuse_device (chr_file (read write)))
(allow priv_app proc_vmstat (file (ioctl read getattr lock map open)))
(allow priv_app sysfs_type (dir (search)))
(allow priv_app sysfs_net (dir (ioctl read getattr lock search open)))
(allow priv_app sysfs_net (file (ioctl read getattr lock map open)))
(allow priv_app sysfs_net (lnk_file (ioctl read getattr lock map open)))
(allow priv_app sysfs_zram (dir (ioctl read getattr lock search open)))
(allow priv_app sysfs_zram (file (ioctl read getattr lock map open)))
(allow priv_app sysfs_zram (lnk_file (ioctl read getattr lock map open)))
(allow priv_app rootfs (dir (ioctl read getattr lock search open)))
(allow priv_app rootfs (file (ioctl read getattr lock map open)))
(allow priv_app rootfs (lnk_file (ioctl read getattr lock map open)))
(allow priv_app config_gz (file (read getattr open)))
(allowx priv_app self (ioctl udp_socket (0x8927)))
(allow priv_app update_engine (binder (call transfer)))
(allow update_engine priv_app (binder (transfer)))
(allow priv_app update_engine (fd (use)))
(allow priv_app update_engine_service (service_manager (find)))
(allow priv_app storaged (binder (call transfer)))
(allow storaged priv_app (binder (transfer)))
(allow priv_app storaged (fd (use)))
(allow priv_app storaged_service (service_manager (find)))
(allow priv_app system_update_service (service_manager (find)))
(allow priv_app statsd (binder (call transfer)))
(allow statsd priv_app (binder (transfer)))
(allow priv_app statsd (fd (use)))
(allow priv_app ringtone_file (file (read write getattr)))
(allow priv_app preloads_data_file (file (ioctl read getattr lock map open)))
(allow priv_app preloads_data_file (dir (ioctl read getattr lock search open)))
(allow priv_app preloads_media_file (file (ioctl read getattr lock map open)))
(allow priv_app preloads_media_file (dir (ioctl read getattr lock search open)))
(allow priv_app keystore (keystore_key (gen_unique_id)))
(allow priv_app selinuxfs (file (ioctl read getattr lock map open)))
(allow priv_app runtime_event_log_tags_file (file (ioctl read getattr lock map open)))
(allow priv_app traced (fd (use)))
(allow priv_app traced_tmpfs (file (read write getattr map)))
(allow priv_app traced_producer_socket (sock_file (write)))
(allow priv_app traced (unix_stream_socket (connectto)))
(allow priv_app incident_service (service_manager (find)))
(allow priv_app incidentd (binder (call transfer)))
(allow incidentd priv_app (binder (transfer)))
(allow priv_app incidentd (fd (use)))
(allow priv_app incidentd (fifo_file (read write)))
(allow heapprofd priv_app (process (signal)))
(allow priv_app heapprofd_exec (file (ioctl read getattr lock map execute execute_no_trans open)))
(allow heapprofd priv_app (file (ioctl read getattr lock map open)))
(allow heapprofd priv_app (dir (ioctl read getattr lock search open)))
(allow priv_app dynamic_system_prop (file (read getattr map open)))
(dontaudit priv_app exec_type (file (getattr)))
(dontaudit priv_app device (dir (read)))
(dontaudit priv_app fs_bpf (dir (search)))
(dontaudit priv_app net_dns_prop (file (read)))
(dontaudit priv_app proc (file (read)))
(dontaudit priv_app proc_interrupts (file (read)))
(dontaudit priv_app proc_modules (file (read)))
(dontaudit priv_app proc_stat (file (read)))
(dontaudit priv_app proc_version (file (read)))
(dontaudit priv_app sysfs (dir (read)))
(dontaudit priv_app sysfs (file (read)))
(dontaudit priv_app sysfs_android_usb (file (read)))
(dontaudit priv_app wifi_prop (file (read)))
(dontaudit priv_app wifi_prop (file (read)))
(dontaudit priv_app exported_wifi_prop (file (read)))
(allow priv_app system_server (udp_socket (read write getattr connect getopt setopt recvfrom sendto)))
(dontaudit priv_app system_data_file (dir (write)))
;;* lmx 200 system/sepolicy/prebuilts/api/29.0/private/priv_app.te

(neverallow priv_app domain (netlink_kobject_uevent_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
;;* lme

;;* lmx 203 system/sepolicy/prebuilts/api/29.0/private/priv_app.te

(neverallow priv_app domain (netlink_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
;;* lme

;;* lmx 207 system/sepolicy/prebuilts/api/29.0/private/priv_app.te

(neverallow priv_app debugfs (file (read)))
;;* lme

;;* lmx 212 system/sepolicy/prebuilts/api/29.0/private/priv_app.te

(neverallow priv_app service_manager_type (service_manager (add)))
;;* lme

;;* lmx 216 system/sepolicy/prebuilts/api/29.0/private/priv_app.te

(neverallow priv_app property_socket (sock_file (write)))
;;* lme

;;* lmx 217 system/sepolicy/prebuilts/api/29.0/private/priv_app.te

(neverallow priv_app init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 218 system/sepolicy/prebuilts/api/29.0/private/priv_app.te

(neverallow priv_app property_type (property_service (set)))
;;* lme

;;* lmx 228 system/sepolicy/prebuilts/api/29.0/private/priv_app.te

(neverallow priv_app mlstrustedsubject (process (fork)))
;;* lme

;;* lmx 236 system/sepolicy/prebuilts/api/29.0/private/priv_app.te

(neverallow priv_app file_type (file (link)))
;;* lme

;;* lmx 240 system/sepolicy/prebuilts/api/29.0/private/priv_app.te

(neverallow priv_app trace_data_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton add_name remove_name reparent search rmdir open audit_access execmod)))
;;* lme

;;* lmx 241 system/sepolicy/prebuilts/api/29.0/private/priv_app.te

(neverallow priv_app trace_data_file (file (write create setattr relabelfrom append unlink link rename open)))
;;* lme

;;* lmx 244 system/sepolicy/prebuilts/api/29.0/private/priv_app.te

(neverallow priv_app cgroup (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod open audit_access)))
;;* lme

;;* lmx 250 system/sepolicy/prebuilts/api/29.0/private/priv_app.te

(neverallow priv_app app_data_file (file (execute execute_no_trans)))
;;* lme

;;* lmx 253 system/sepolicy/prebuilts/api/29.0/private/priv_app.te

(neverallow priv_app app_data_file (lnk_file (read getattr open)))
;;* lme

(allow init racoon_exec (file (read getattr map execute open)))
(allow init racoon (process (transition)))
(allow racoon racoon_exec (file (read getattr map execute entrypoint open)))
(dontaudit init racoon (process (noatsecure)))
(allow init racoon (process (siginh rlimitinh)))
(typetransition init racoon_exec process racoon)
(typetransition radio tmpfs file appdomain_tmpfs)
(allow radio appdomain_tmpfs (file (read write getattr map execute)))
;;* lmx 3 system/sepolicy/prebuilts/api/29.0/private/radio.te

(neverallow base_typeattr_612 base_typeattr_462 (file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
;;* lme

;;* lmx 3 system/sepolicy/prebuilts/api/29.0/private/radio.te

(neverallow base_typeattr_613 radio (file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
;;* lme

;;* lmx 3 system/sepolicy/prebuilts/api/29.0/private/radio.te

(neverallow base_typeattr_614 radio (process (ptrace)))
;;* lme

(allow radio runtime_event_log_tags_file (file (ioctl read getattr lock map open)))
(allow radio time_prop (file (read getattr map open)))
(allow init recovery_persist_exec (file (read getattr map execute open)))
(allow init recovery_persist (process (transition)))
(allow recovery_persist recovery_persist_exec (file (read getattr map execute entrypoint open)))
(dontaudit init recovery_persist (process (noatsecure)))
(allow init recovery_persist (process (siginh rlimitinh)))
(typetransition init recovery_persist_exec process recovery_persist)
;;* lmx 11 system/sepolicy/prebuilts/api/29.0/private/recovery_persist.te

(neverallow recovery_persist base_typeattr_615 (file (write)))
;;* lme

(allow init recovery_refresh_exec (file (read getattr map execute open)))
(allow init recovery_refresh (process (transition)))
(allow recovery_refresh recovery_refresh_exec (file (read getattr map execute entrypoint open)))
(dontaudit init recovery_refresh (process (noatsecure)))
(allow init recovery_refresh (process (siginh rlimitinh)))
(typetransition init recovery_refresh_exec process recovery_refresh)
;;* lmx 10 system/sepolicy/prebuilts/api/29.0/private/recovery_refresh.te

(neverallow recovery_refresh file_type (file (write)))
;;* lme

(allow rs app_data_file (dir (ioctl read write getattr lock add_name search open)))
(allow rs app_exec_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(typetransition rs app_data_file file app_exec_data_file)
(allow rs system_data_file (lnk_file (read)))
(allow rs app_data_file (file (ioctl read getattr lock map open)))
(allow rs app_data_file (dir (ioctl read getattr lock search open)))
(allow rs app_data_file (dir (remove_name)))
(allow rs vendor_file (dir (ioctl read getattr lock search open)))
(allow rs vendor_overlay_file (dir (ioctl read getattr lock search open)))
(allow rs vendor_overlay_file (file (ioctl read getattr lock map open)))
(allow rs vendor_overlay_file (lnk_file (ioctl read getattr lock map open)))
(allow rs vendor_app_file (dir (ioctl read getattr lock search open)))
(allow rs vendor_app_file (file (ioctl read getattr lock map open)))
(allow rs vendor_app_file (lnk_file (ioctl read getattr lock map open)))
(allow rs apk_data_file (dir (ioctl read getattr lock search open)))
(allow rs apk_data_file (file (ioctl read getattr lock map open)))
(allow rs apk_data_file (lnk_file (ioctl read getattr lock map open)))
(allow rs gpu_device (chr_file (ioctl read write getattr lock append map open)))
(allow rs ion_device (chr_file (ioctl read getattr lock map open)))
(allow rs same_process_hal_file (file (ioctl read getattr lock map execute open)))
(allow rs untrusted_app_all (fd (use)))
(allow rs ephemeral_app (fd (use)))
;;* lmx 34 system/sepolicy/prebuilts/api/29.0/private/rs.te

(neverallow rs rs (capability (chown dac_override dac_read_search fowner fsetid kill setgid setuid setpcap linux_immutable net_bind_service net_broadcast net_admin net_raw ipc_lock ipc_owner sys_module sys_rawio sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_nice sys_resource sys_time sys_tty_config mknod lease audit_write audit_control setfcap)))
(neverallow rs rs (capability2 (mac_override mac_admin syslog wake_alarm block_suspend audit_read)))
(neverallow rs rs (cap_userns (chown dac_override dac_read_search fowner fsetid kill setgid setuid setpcap linux_immutable net_bind_service net_broadcast net_admin net_raw ipc_lock ipc_owner sys_module sys_rawio sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_nice sys_resource sys_time sys_tty_config mknod lease audit_write audit_control setfcap)))
(neverallow rs rs (cap2_userns (mac_override mac_admin syslog wake_alarm block_suspend audit_read)))
;;* lme

;;* lmx 35 system/sepolicy/prebuilts/api/29.0/private/rs.te

(neverallow base_typeattr_180 rs (process (transition dyntransition)))
;;* lme

;;* lmx 36 system/sepolicy/prebuilts/api/29.0/private/rs.te

(neverallow rs base_typeattr_514 (process (transition dyntransition)))
;;* lme

;;* lmx 37 system/sepolicy/prebuilts/api/29.0/private/rs.te

(neverallow rs app_data_file (file (write create setattr relabelfrom relabelto append unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod audit_access)))
(neverallow rs app_data_file (lnk_file (write create setattr relabelfrom relabelto append unlink link rename execute quotaon mounton audit_access execmod)))
(neverallow rs app_data_file (chr_file (write create setattr relabelfrom relabelto append unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod audit_access)))
(neverallow rs app_data_file (blk_file (write create setattr relabelfrom relabelto append unlink link rename execute quotaon mounton audit_access execmod)))
(neverallow rs app_data_file (sock_file (write create setattr relabelfrom relabelto append unlink link rename execute quotaon mounton audit_access execmod)))
(neverallow rs app_data_file (fifo_file (write create setattr relabelfrom relabelto append unlink link rename execute quotaon mounton audit_access execmod)))
;;* lme

;;* lmx 39 system/sepolicy/prebuilts/api/29.0/private/rs.te

(neverallow rs base_typeattr_167 (tcp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind name_connect)))
(neverallow rs base_typeattr_167 (udp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind)))
(neverallow rs base_typeattr_167 (rawip_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind)))
(neverallow rs base_typeattr_167 (icmp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind)))
;;* lme

(allow init rss_hwm_reset_exec (file (read getattr map execute open)))
(allow init rss_hwm_reset (process (transition)))
(allow rss_hwm_reset rss_hwm_reset_exec (file (read getattr map execute entrypoint open)))
(dontaudit init rss_hwm_reset (process (noatsecure)))
(allow init rss_hwm_reset (process (siginh rlimitinh)))
(typetransition init rss_hwm_reset_exec process rss_hwm_reset)
(allow rss_hwm_reset domain (dir (search)))
(allow rss_hwm_reset self (capability (dac_override)))
(allow rss_hwm_reset self (cap_userns (dac_override)))
(allow rss_hwm_reset domain (file (write lock append map open)))
(allow shell runas_exec (file (read getattr map execute open)))
(allow shell runas (process (transition)))
(allow runas runas_exec (file (read getattr map execute entrypoint open)))
(allow runas shell (process (sigchld)))
(dontaudit shell runas (process (noatsecure)))
(allow shell runas (process (siginh rlimitinh)))
(typetransition shell runas_exec process runas)
(typetransition runas_app tmpfs file appdomain_tmpfs)
(allow runas_app appdomain_tmpfs (file (read write getattr map execute)))
;;* lmx 3 system/sepolicy/prebuilts/api/29.0/private/runas_app.te

(neverallow base_typeattr_616 base_typeattr_617 (file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
;;* lme

;;* lmx 3 system/sepolicy/prebuilts/api/29.0/private/runas_app.te

(neverallow base_typeattr_618 runas_app (file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
;;* lme

;;* lmx 3 system/sepolicy/prebuilts/api/29.0/private/runas_app.te

(neverallow base_typeattr_619 runas_app (process (ptrace)))
;;* lme

(allow runas_app app_data_file (file (execute_no_trans)))
(allow runas_app untrusted_app_all (dir (ioctl read getattr lock search open)))
(allow runas_app untrusted_app_all (file (ioctl read getattr lock map open)))
(allow runas_app untrusted_app_all (lnk_file (ioctl read getattr lock map open)))
(allow runas_app untrusted_app_all (process (sigstop signal ptrace)))
(allow runas_app untrusted_app_all (unix_stream_socket (connectto)))
(typetransition sdcardd system_data_file dir media_rw_data_file)
(typetransition sdcardd system_data_file file media_rw_data_file)
(typetransition secure_element tmpfs file appdomain_tmpfs)
(allow secure_element appdomain_tmpfs (file (read write getattr map execute)))
;;* lmx 3 system/sepolicy/prebuilts/api/29.0/private/secure_element.te

(neverallow base_typeattr_620 base_typeattr_621 (file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
;;* lme

;;* lmx 3 system/sepolicy/prebuilts/api/29.0/private/secure_element.te

(neverallow base_typeattr_622 secure_element (file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
;;* lme

;;* lmx 3 system/sepolicy/prebuilts/api/29.0/private/secure_element.te

(neverallow base_typeattr_623 secure_element (process (ptrace)))
;;* lme

(allow secure_element secure_element_service (service_manager (add find)))
;;* lmx 6 system/sepolicy/prebuilts/api/29.0/private/secure_element.te

(neverallow base_typeattr_621 secure_element_service (service_manager (add)))
;;* lme

(allow secure_element app_api_service (service_manager (find)))
(allow secure_element shell_data_file (file (read)))
(allow init servicemanager_exec (file (read getattr map execute open)))
(allow init servicemanager (process (transition)))
(allow servicemanager servicemanager_exec (file (read getattr map execute entrypoint open)))
(dontaudit init servicemanager (process (noatsecure)))
(allow init servicemanager (process (siginh rlimitinh)))
(typetransition init servicemanager_exec process servicemanager)
(allow servicemanager runtime_event_log_tags_file (file (ioctl read getattr lock map open)))
(typetransition shared_relro tmpfs file appdomain_tmpfs)
(allow shared_relro appdomain_tmpfs (file (read write getattr map execute)))
;;* lmx 5 system/sepolicy/prebuilts/api/29.0/private/shared_relro.te

(neverallow base_typeattr_624 base_typeattr_625 (file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
;;* lme

;;* lmx 5 system/sepolicy/prebuilts/api/29.0/private/shared_relro.te

(neverallow base_typeattr_626 shared_relro (file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
;;* lme

;;* lmx 5 system/sepolicy/prebuilts/api/29.0/private/shared_relro.te

(neverallow base_typeattr_627 shared_relro (process (ptrace)))
;;* lme

(allow shell uhid_device (chr_file (ioctl read write getattr lock append map open)))
(allow shell debugfs_tracing_debug (dir (ioctl read getattr lock search open)))
(allow shell debugfs_tracing (dir (ioctl read getattr lock search open)))
(allow shell debugfs_tracing (file (ioctl read write getattr lock append map open)))
(allow shell debugfs_trace_marker (file (getattr)))
(allow shell atrace_exec (file (ioctl read getattr lock map execute execute_no_trans open)))
(allow shell config_gz (file (ioctl read getattr lock map open)))
(typetransition shell tmpfs file appdomain_tmpfs)
(allow shell appdomain_tmpfs (file (read write getattr map execute)))
;;* lmx 22 system/sepolicy/prebuilts/api/29.0/private/shell.te

(neverallow base_typeattr_628 base_typeattr_629 (file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
;;* lme

;;* lmx 22 system/sepolicy/prebuilts/api/29.0/private/shell.te

(neverallow base_typeattr_618 shell (file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
;;* lme

;;* lmx 22 system/sepolicy/prebuilts/api/29.0/private/shell.te

(neverallow base_typeattr_630 shell (process (ptrace)))
;;* lme

(allow shell storaged (binder (call transfer)))
(allow storaged shell (binder (transfer)))
(allow shell storaged (fd (use)))
(allow shell selinuxfs (dir (ioctl read getattr lock search open)))
(allow shell selinuxfs (file (ioctl read getattr lock map open)))
(allow shell selinuxfs (lnk_file (ioctl read getattr lock map open)))
(allow shell selinuxfs (file (write lock append map open)))
(allow shell kernel (security (compute_av)))
(allow shell self (netlink_selinux_socket (read write create getattr setattr lock relabelfrom relabelto append bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(allow shell selinuxfs (dir (ioctl read getattr lock search open)))
(allow shell selinuxfs (file (ioctl read getattr lock map open)))
(allow shell selinuxfs (lnk_file (ioctl read getattr lock map open)))
(allow shell selinuxfs (file (write lock append map open)))
(allow shell kernel (security (check_context)))
(allow shell traced_consumer_socket (sock_file (write)))
(allow shell traced (unix_stream_socket (connectto)))
(allow shell traced (fd (use)))
(allow shell traced_tmpfs (file (read write getattr map)))
(allow shell traced_producer_socket (sock_file (write)))
(allow shell traced (unix_stream_socket (connectto)))
(allow shell vendor_shell_exec (file (read getattr map execute open)))
(allow shell vendor_shell (process (transition)))
(allow vendor_shell vendor_shell_exec (file (read getattr map execute entrypoint open)))
(allow vendor_shell shell (process (sigchld)))
(dontaudit shell vendor_shell (process (noatsecure)))
(allow shell vendor_shell (process (siginh rlimitinh)))
(typetransition shell vendor_shell_exec process vendor_shell)
(allow shell perfetto_exec (file (read getattr map execute open)))
(allow shell perfetto (process (transition)))
(allow perfetto perfetto_exec (file (read getattr map execute entrypoint open)))
(allow perfetto shell (process (sigchld)))
(dontaudit shell perfetto (process (noatsecure)))
(allow shell perfetto (process (siginh rlimitinh)))
(typetransition shell perfetto_exec process perfetto)
(allow shell perfetto (process (signal)))
(allow shell statsd (binder (call transfer)))
(allow statsd shell (binder (transfer)))
(allow shell statsd (fd (use)))
(allow shell perfetto_traces_data_file (dir (ioctl read write getattr lock add_name remove_name search open)))
(allow shell perfetto_traces_data_file (file (ioctl read getattr lock map open)))
(allow shell gpuservice (binder (call transfer)))
(allow gpuservice shell (binder (transfer)))
(allow shell gpuservice (fd (use)))
(allow shell proc_net_tcp_udp (file (ioctl read getattr lock map open)))
(allow shell system_linker_exec (file (ioctl read getattr lock map execute execute_no_trans open)))
(allow shell rs_exec (file (ioctl read getattr lock map execute execute_no_trans open)))
(allow shell property_socket (sock_file (write)))
(allow shell init (unix_stream_socket (connectto)))
(allow shell lpdumpd_prop (property_service (set)))
(allow shell lpdumpd_prop (file (read getattr map open)))
(allow shell lpdumpd (binder (call transfer)))
(allow lpdumpd shell (binder (transfer)))
(allow shell lpdumpd (fd (use)))
(allow shell simpleperf_app_runner_exec (file (read getattr map execute open)))
(allow shell simpleperf_app_runner (process (transition)))
(allow simpleperf_app_runner simpleperf_app_runner_exec (file (read getattr map execute entrypoint open)))
(allow simpleperf_app_runner shell (process (sigchld)))
(dontaudit shell simpleperf_app_runner (process (noatsecure)))
(allow shell simpleperf_app_runner (process (siginh rlimitinh)))
(typetransition shell simpleperf_app_runner_exec process simpleperf_app_runner)
(allow shell stats_exec (file (read getattr map execute open)))
(allow shell stats (process (transition)))
(allow stats stats_exec (file (read getattr map execute entrypoint open)))
(allow stats shell (process (sigchld)))
(dontaudit shell stats (process (noatsecure)))
(allow shell stats (process (siginh rlimitinh)))
(typetransition shell stats_exec process stats)
(allow stats shell (fd (use)))
(allow stats adbd (fd (use)))
(allow stats adbd (unix_stream_socket (read write)))
(allow stats adbd (process (sigchld)))
(allow stats servicemanager (binder (call transfer)))
(allow servicemanager stats (dir (search)))
(allow servicemanager stats (file (read open)))
(allow servicemanager stats (process (getattr)))
(allow stats stats_service (service_manager (find)))
(allow stats statsd (binder (call transfer)))
(allow statsd stats (binder (transfer)))
(allow stats statsd (fd (use)))
(allow stats statsd (fifo_file (write)))
(allow statsd stats_service (service_manager (add find)))
;;* lmx 27 system/sepolicy/prebuilts/api/29.0/private/stats.te

(neverallow base_typeattr_631 stats_service (service_manager (add)))
;;* lme

(allow statsd stats (fd (use)))
(allow statsd stats (fifo_file (write)))
(allow statsd stats (binder (call transfer)))
(allow stats statsd (binder (transfer)))
(allow statsd stats (fd (use)))
;;* lmx 52 system/sepolicy/prebuilts/api/29.0/private/stats.te

(neverallow base_typeattr_632 stats_service (service_manager (find)))
;;* lme

(allow init statsd_exec (file (read getattr map execute open)))
(allow init statsd (process (transition)))
(allow statsd statsd_exec (file (read getattr map execute entrypoint open)))
(dontaudit init statsd (process (noatsecure)))
(allow init statsd (process (siginh rlimitinh)))
(typetransition init statsd_exec process statsd)
(allow statsd statscompanion_service (binder (call transfer)))
(allow statscompanion_service statsd (binder (transfer)))
(allow statsd statscompanion_service (fd (use)))
(allow statsd perfetto_exec (file (ioctl read getattr lock map execute execute_no_trans open)))
(allow statsd perfetto_exec (file (read getattr map execute open)))
(allow statsd perfetto (process (transition)))
(allow perfetto perfetto_exec (file (read getattr map execute entrypoint open)))
(allow perfetto statsd (process (sigchld)))
(dontaudit statsd perfetto (process (noatsecure)))
(allow statsd perfetto (process (siginh rlimitinh)))
(typetransition statsd perfetto_exec process perfetto)
(allow statsd statscompanion_service (service_manager (find)))
(allow statsd incidentd (fifo_file (write)))
(allow init storaged_exec (file (read getattr map execute open)))
(allow init storaged (process (transition)))
(allow storaged storaged_exec (file (read getattr map execute entrypoint open)))
(dontaudit init storaged (process (noatsecure)))
(allow init storaged (process (siginh rlimitinh)))
(typetransition init storaged_exec process storaged)
(allow storaged domain (dir (ioctl read getattr lock search open)))
(allow storaged domain (file (ioctl read getattr lock map open)))
(allow storaged domain (lnk_file (ioctl read getattr lock map open)))
(allow storaged proc_uid_io_stats (file (ioctl read getattr lock map open)))
(allow storaged system_data_file (file (ioctl read getattr lock map open)))
(allow storaged packages_list_file (file (ioctl read getattr lock map open)))
(allow storaged storaged_data_file (dir (ioctl read write getattr lock add_name remove_name search open)))
(allow storaged storaged_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow storaged shell (fd (use)))
(allow storaged shell (fifo_file (write)))
(allow storaged priv_app (fd (use)))
(allow storaged app_data_file (file (write)))
(allow storaged privapp_data_file (file (write)))
(allow storaged permission_service (service_manager (find)))
(allow storaged storaged_service (service_manager (add find)))
;;* lmx 37 system/sepolicy/prebuilts/api/29.0/private/storaged.te

(neverallow base_typeattr_633 storaged_service (service_manager (add)))
;;* lme

(allow storaged servicemanager (binder (call transfer)))
(allow servicemanager storaged (dir (search)))
(allow servicemanager storaged (file (read open)))
(allow servicemanager storaged (process (getattr)))
(allow storaged system_server (binder (call transfer)))
(allow system_server storaged (binder (transfer)))
(allow storaged system_server (fd (use)))
(allow storaged dumpstate (fd (use)))
(allow storaged package_native_service (service_manager (find)))
(dontaudit storaged self (capability (dac_override dac_read_search)))
(dontaudit storaged self (cap_userns (dac_override dac_read_search)))
(allow storaged dumpstate (fifo_file (write)))
;;* lmx 60 system/sepolicy/prebuilts/api/29.0/private/storaged.te

(neverallow storaged domain (process (ptrace)))
;;* lme

;;* lmx 61 system/sepolicy/prebuilts/api/29.0/private/storaged.te

(neverallow storaged self (capability (chown dac_override dac_read_search fowner fsetid kill setgid setuid setpcap linux_immutable net_bind_service net_broadcast net_admin net_raw ipc_lock ipc_owner sys_module sys_rawio sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_nice sys_resource sys_time sys_tty_config mknod lease audit_write audit_control setfcap)))
(neverallow storaged self (capability2 (mac_override mac_admin syslog wake_alarm block_suspend audit_read)))
(neverallow storaged self (cap_userns (chown dac_override dac_read_search fowner fsetid kill setgid setuid setpcap linux_immutable net_bind_service net_broadcast net_admin net_raw ipc_lock ipc_owner sys_module sys_rawio sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_nice sys_resource sys_time sys_tty_config mknod lease audit_write audit_control setfcap)))
(neverallow storaged self (cap2_userns (mac_override mac_admin syslog wake_alarm block_suspend audit_read)))
;;* lme

(allow init surfaceflinger_exec (file (read getattr map execute open)))
(allow init surfaceflinger (process (transition)))
(allow surfaceflinger surfaceflinger_exec (file (read getattr map execute entrypoint open)))
(dontaudit init surfaceflinger (process (noatsecure)))
(allow init surfaceflinger (process (siginh rlimitinh)))
(typetransition init surfaceflinger_exec process surfaceflinger)
(typetransition surfaceflinger tmpfs file surfaceflinger_tmpfs)
(allow surfaceflinger surfaceflinger_tmpfs (file (read write getattr map)))
(allow surfaceflinger runtime_event_log_tags_file (file (ioctl read getattr lock map open)))
(allow surfaceflinger hidl_token_hwservice (hwservice_manager (find)))
(allow surfaceflinger servicemanager (binder (call transfer)))
(allow servicemanager surfaceflinger (dir (search)))
(allow servicemanager surfaceflinger (file (read open)))
(allow servicemanager surfaceflinger (process (getattr)))
(allow surfaceflinger binderservicedomain (binder (call transfer)))
(allow binderservicedomain surfaceflinger (binder (transfer)))
(allow surfaceflinger binderservicedomain (fd (use)))
(allow surfaceflinger appdomain (binder (call transfer)))
(allow appdomain surfaceflinger (binder (transfer)))
(allow surfaceflinger appdomain (fd (use)))
(allow surfaceflinger bootanim (binder (call transfer)))
(allow bootanim surfaceflinger (binder (transfer)))
(allow surfaceflinger bootanim (fd (use)))
(allow surfaceflinger adbd (binder (call transfer)))
(allow adbd surfaceflinger (binder (transfer)))
(allow surfaceflinger adbd (fd (use)))
(allow surfaceflinger binderservicedomain (dir (ioctl read getattr lock search open)))
(allow surfaceflinger binderservicedomain (file (ioctl read getattr lock map open)))
(allow surfaceflinger binderservicedomain (lnk_file (ioctl read getattr lock map open)))
(allow surfaceflinger appdomain (dir (ioctl read getattr lock search open)))
(allow surfaceflinger appdomain (file (ioctl read getattr lock map open)))
(allow surfaceflinger appdomain (lnk_file (ioctl read getattr lock map open)))
(allow surfaceflinger gpu_device (chr_file (ioctl read write getattr lock append map open)))
(allow surfaceflinger graphics_device (dir (search)))
(allow surfaceflinger graphics_device (chr_file (ioctl read write getattr lock append map open)))
(allow surfaceflinger video_device (dir (ioctl read getattr lock search open)))
(allow surfaceflinger video_device (chr_file (ioctl read write getattr lock append map open)))
(allow surfaceflinger self (netlink_kobject_uevent_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
(allow surfaceflinger property_socket (sock_file (write)))
(allow surfaceflinger init (unix_stream_socket (connectto)))
(allow surfaceflinger system_prop (property_service (set)))
(allow surfaceflinger system_prop (file (read getattr map open)))
(allow surfaceflinger property_socket (sock_file (write)))
(allow surfaceflinger init (unix_stream_socket (connectto)))
(allow surfaceflinger exported_system_prop (property_service (set)))
(allow surfaceflinger exported_system_prop (file (read getattr map open)))
(allow surfaceflinger property_socket (sock_file (write)))
(allow surfaceflinger init (unix_stream_socket (connectto)))
(allow surfaceflinger exported2_system_prop (property_service (set)))
(allow surfaceflinger exported2_system_prop (file (read getattr map open)))
(allow surfaceflinger property_socket (sock_file (write)))
(allow surfaceflinger init (unix_stream_socket (connectto)))
(allow surfaceflinger exported3_system_prop (property_service (set)))
(allow surfaceflinger exported3_system_prop (file (read getattr map open)))
(allow surfaceflinger property_socket (sock_file (write)))
(allow surfaceflinger init (unix_stream_socket (connectto)))
(allow surfaceflinger ctl_bootanim_prop (property_service (set)))
(allow surfaceflinger ctl_bootanim_prop (file (read getattr map open)))
(allow surfaceflinger appdomain (fd (use)))
(allow surfaceflinger app_data_file (file (read write)))
(allow surfaceflinger privapp_data_file (file (read write)))
(allow surfaceflinger adbd (unix_stream_socket (read write getattr)))
(allow surfaceflinger dumpstate (binder (call transfer)))
(allow dumpstate surfaceflinger (binder (transfer)))
(allow surfaceflinger dumpstate (fd (use)))
(allow surfaceflinger shell (binder (call transfer)))
(allow shell surfaceflinger (binder (transfer)))
(allow surfaceflinger shell (fd (use)))
(allow surfaceflinger dumpstate (dir (ioctl read getattr lock search open)))
(allow surfaceflinger dumpstate (file (ioctl read getattr lock map open)))
(allow surfaceflinger dumpstate (lnk_file (ioctl read getattr lock map open)))
(allow surfaceflinger surfaceflinger_service (service_manager (add find)))
(allow surfaceflinger vrflinger_vsync_service (service_manager (add find)))
;;* lmx 84 system/sepolicy/prebuilts/api/29.0/private/surfaceflinger.te

(neverallow base_typeattr_634 vrflinger_vsync_service (service_manager (add)))
;;* lme

(allow surfaceflinger mediaserver_service (service_manager (find)))
(allow surfaceflinger permission_service (service_manager (find)))
(allow surfaceflinger power_service (service_manager (find)))
(allow surfaceflinger vr_manager_service (service_manager (find)))
(allow surfaceflinger window_service (service_manager (find)))
(allow surfaceflinger inputflinger_service (service_manager (find)))
(allow surfaceflinger self (capability (sys_nice)))
(allow surfaceflinger self (cap_userns (sys_nice)))
(allow surfaceflinger proc_meminfo (file (ioctl read getattr lock map open)))
(allow surfaceflinger cgroup (dir (ioctl read getattr lock search open)))
(allow surfaceflinger cgroup (file (ioctl read getattr lock map open)))
(allow surfaceflinger cgroup (lnk_file (ioctl read getattr lock map open)))
(allow surfaceflinger system_file (dir (ioctl read getattr lock search open)))
(allow surfaceflinger system_file (file (ioctl read getattr lock map open)))
(allow surfaceflinger system_file (lnk_file (ioctl read getattr lock map open)))
(allow surfaceflinger tmpfs (dir (ioctl read getattr lock search open)))
(allow surfaceflinger system_server (fd (use)))
(allow surfaceflinger system_server (unix_stream_socket (read write)))
(allow surfaceflinger ion_device (chr_file (ioctl read getattr lock map open)))
(allow init pdx_display_client_endpoint_socket_type (unix_stream_socket (create bind)))
(allow surfaceflinger pdx_display_client_endpoint_socket_type (unix_stream_socket (read write getattr setattr lock append listen accept getopt setopt shutdown)))
(allow surfaceflinger self (process (setsockcreate)))
(allow surfaceflinger pdx_display_client_channel_socket_type (unix_stream_socket (ioctl read write create getattr setattr lock append map bind connect listen accept getopt setopt shutdown)))
;;* lmx 105 system/sepolicy/prebuilts/api/29.0/private/surfaceflinger.te

(neverallow base_typeattr_634 pdx_display_client_endpoint_socket_type (unix_stream_socket (listen accept)))
;;* lme

(allow init pdx_display_manager_endpoint_socket_type (unix_stream_socket (create bind)))
(allow surfaceflinger pdx_display_manager_endpoint_socket_type (unix_stream_socket (read write getattr setattr lock append listen accept getopt setopt shutdown)))
(allow surfaceflinger self (process (setsockcreate)))
(allow surfaceflinger pdx_display_manager_channel_socket_type (unix_stream_socket (ioctl read write create getattr setattr lock append map bind connect listen accept getopt setopt shutdown)))
;;* lmx 106 system/sepolicy/prebuilts/api/29.0/private/surfaceflinger.te

(neverallow base_typeattr_634 pdx_display_manager_endpoint_socket_type (unix_stream_socket (listen accept)))
;;* lme

(allow init pdx_display_screenshot_endpoint_socket_type (unix_stream_socket (create bind)))
(allow surfaceflinger pdx_display_screenshot_endpoint_socket_type (unix_stream_socket (read write getattr setattr lock append listen accept getopt setopt shutdown)))
(allow surfaceflinger self (process (setsockcreate)))
(allow surfaceflinger pdx_display_screenshot_channel_socket_type (unix_stream_socket (ioctl read write create getattr setattr lock append map bind connect listen accept getopt setopt shutdown)))
;;* lmx 107 system/sepolicy/prebuilts/api/29.0/private/surfaceflinger.te

(neverallow base_typeattr_634 pdx_display_screenshot_endpoint_socket_type (unix_stream_socket (listen accept)))
;;* lme

(allow init pdx_display_vsync_endpoint_socket_type (unix_stream_socket (create bind)))
(allow surfaceflinger pdx_display_vsync_endpoint_socket_type (unix_stream_socket (read write getattr setattr lock append listen accept getopt setopt shutdown)))
(allow surfaceflinger self (process (setsockcreate)))
(allow surfaceflinger pdx_display_vsync_channel_socket_type (unix_stream_socket (ioctl read write create getattr setattr lock append map bind connect listen accept getopt setopt shutdown)))
;;* lmx 108 system/sepolicy/prebuilts/api/29.0/private/surfaceflinger.te

(neverallow base_typeattr_634 pdx_display_vsync_endpoint_socket_type (unix_stream_socket (listen accept)))
;;* lme

(allow surfaceflinger pdx_bufferhub_client_endpoint_dir_type (dir (ioctl read getattr lock search open)))
(allow surfaceflinger pdx_bufferhub_client_endpoint_socket_type (sock_file (ioctl read write getattr lock append map open)))
(allow surfaceflinger pdx_bufferhub_client_endpoint_socket_type (unix_stream_socket (read write shutdown connectto)))
(allow surfaceflinger pdx_bufferhub_client_channel_socket_type (unix_stream_socket (read write getattr setattr lock append getopt setopt shutdown)))
(allow surfaceflinger pdx_bufferhub_client_server_type (fd (use)))
(allow pdx_bufferhub_client_server_type surfaceflinger (fd (use)))
(allow surfaceflinger pdx_performance_client_endpoint_dir_type (dir (ioctl read getattr lock search open)))
(allow surfaceflinger pdx_performance_client_endpoint_socket_type (sock_file (ioctl read write getattr lock append map open)))
(allow surfaceflinger pdx_performance_client_endpoint_socket_type (unix_stream_socket (read write shutdown connectto)))
(allow surfaceflinger pdx_performance_client_channel_socket_type (unix_stream_socket (read write getattr setattr lock append getopt setopt shutdown)))
(allow surfaceflinger pdx_performance_client_server_type (fd (use)))
(allow pdx_performance_client_server_type surfaceflinger (fd (use)))
;;* lmx 120 system/sepolicy/prebuilts/api/29.0/private/surfaceflinger.te

(neverallow surfaceflinger sdcard_type (file (ioctl read write getattr lock append map open)))
;;* lme

(dontaudit surfaceflinger unlabeled (dir (search)))
(typetransition system_app tmpfs file appdomain_tmpfs)
(allow system_app appdomain_tmpfs (file (read write getattr map execute)))
;;* lmx 9 system/sepolicy/prebuilts/api/29.0/private/system_app.te

(neverallow base_typeattr_635 base_typeattr_636 (file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
;;* lme

;;* lmx 9 system/sepolicy/prebuilts/api/29.0/private/system_app.te

(neverallow base_typeattr_637 system_app (file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
;;* lme

;;* lmx 9 system/sepolicy/prebuilts/api/29.0/private/system_app.te

(neverallow base_typeattr_638 system_app (process (ptrace)))
;;* lme

(allow system_app rootfs (dir (getattr)))
(allow system_app system_app_data_file (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
(allow system_app system_app_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow system_app system_app_data_file (lnk_file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow system_app misc_user_data_file (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
(allow system_app misc_user_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow system_app mnt_media_rw_file (dir (search)))
(allow system_app apex_data_file (dir (search)))
(allow system_app staging_data_file (file (ioctl read getattr lock map open)))
(allow system_app wallpaper_file (file (ioctl read getattr lock map open)))
(allow system_app icon_file (file (ioctl read getattr lock map open)))
(allow system_app property_socket (sock_file (write)))
(allow system_app init (unix_stream_socket (connectto)))
(allow system_app bluetooth_a2dp_offload_prop (property_service (set)))
(allow system_app bluetooth_a2dp_offload_prop (file (read getattr map open)))
(allow system_app property_socket (sock_file (write)))
(allow system_app init (unix_stream_socket (connectto)))
(allow system_app bluetooth_audio_hal_prop (property_service (set)))
(allow system_app bluetooth_audio_hal_prop (file (read getattr map open)))
(allow system_app property_socket (sock_file (write)))
(allow system_app init (unix_stream_socket (connectto)))
(allow system_app bluetooth_prop (property_service (set)))
(allow system_app bluetooth_prop (file (read getattr map open)))
(allow system_app property_socket (sock_file (write)))
(allow system_app init (unix_stream_socket (connectto)))
(allow system_app debug_prop (property_service (set)))
(allow system_app debug_prop (file (read getattr map open)))
(allow system_app property_socket (sock_file (write)))
(allow system_app init (unix_stream_socket (connectto)))
(allow system_app system_prop (property_service (set)))
(allow system_app system_prop (file (read getattr map open)))
(allow system_app property_socket (sock_file (write)))
(allow system_app init (unix_stream_socket (connectto)))
(allow system_app exported_bluetooth_prop (property_service (set)))
(allow system_app exported_bluetooth_prop (file (read getattr map open)))
(allow system_app property_socket (sock_file (write)))
(allow system_app init (unix_stream_socket (connectto)))
(allow system_app exported_system_prop (property_service (set)))
(allow system_app exported_system_prop (file (read getattr map open)))
(allow system_app property_socket (sock_file (write)))
(allow system_app init (unix_stream_socket (connectto)))
(allow system_app exported2_system_prop (property_service (set)))
(allow system_app exported2_system_prop (file (read getattr map open)))
(allow system_app property_socket (sock_file (write)))
(allow system_app init (unix_stream_socket (connectto)))
(allow system_app exported3_system_prop (property_service (set)))
(allow system_app exported3_system_prop (file (read getattr map open)))
(allow system_app property_socket (sock_file (write)))
(allow system_app init (unix_stream_socket (connectto)))
(allow system_app logd_prop (property_service (set)))
(allow system_app logd_prop (file (read getattr map open)))
(allow system_app property_socket (sock_file (write)))
(allow system_app init (unix_stream_socket (connectto)))
(allow system_app net_radio_prop (property_service (set)))
(allow system_app net_radio_prop (file (read getattr map open)))
(allow system_app property_socket (sock_file (write)))
(allow system_app init (unix_stream_socket (connectto)))
(allow system_app system_radio_prop (property_service (set)))
(allow system_app system_radio_prop (file (read getattr map open)))
(allow system_app property_socket (sock_file (write)))
(allow system_app init (unix_stream_socket (connectto)))
(allow system_app exported_system_radio_prop (property_service (set)))
(allow system_app exported_system_radio_prop (file (read getattr map open)))
(allow system_app property_socket (sock_file (write)))
(allow system_app init (unix_stream_socket (connectto)))
(allow system_app log_tag_prop (property_service (set)))
(allow system_app log_tag_prop (file (read getattr map open)))
(auditallow system_app net_radio_prop (property_service (set)))
(auditallow system_app system_radio_prop (property_service (set)))
(auditallow system_app exported_system_radio_prop (property_service (set)))
(allow system_app property_socket (sock_file (write)))
(allow system_app init (unix_stream_socket (connectto)))
(allow system_app dynamic_system_prop (property_service (set)))
(allow system_app dynamic_system_prop (file (read getattr map open)))
(allow system_app property_socket (sock_file (write)))
(allow system_app init (unix_stream_socket (connectto)))
(allow system_app ctl_default_prop (property_service (set)))
(allow system_app ctl_default_prop (file (read getattr map open)))
(allow system_app property_socket (sock_file (write)))
(allow system_app init (unix_stream_socket (connectto)))
(allow system_app ctl_bugreport_prop (property_service (set)))
(allow system_app ctl_bugreport_prop (file (read getattr map open)))
(allow system_app anr_data_file (dir (ioctl read write getattr lock add_name search open)))
(allow system_app anr_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow system_app asec_apk_file (file (ioctl read getattr lock map open)))
(allow system_app statsd (binder (call transfer)))
(allow statsd system_app (binder (transfer)))
(allow system_app statsd (fd (use)))
(allow system_app incidentd (binder (call transfer)))
(allow incidentd system_app (binder (transfer)))
(allow system_app incidentd (fd (use)))
(allow system_app gpuservice (binder (call transfer)))
(allow gpuservice system_app (binder (transfer)))
(allow system_app gpuservice (fd (use)))
(allow system_app servicemanager (service_manager (list)))
(allow system_app base_typeattr_639 (service_manager (find)))
(dontaudit system_app dnsresolver_service (service_manager (find)))
(dontaudit system_app dumpstate_service (service_manager (find)))
(dontaudit system_app iorapd_service (service_manager (find)))
(dontaudit system_app installd_service (service_manager (find)))
(dontaudit system_app netd_service (service_manager (find)))
(dontaudit system_app virtual_touchpad_service (service_manager (find)))
(dontaudit system_app vold_service (service_manager (find)))
(dontaudit system_app vr_hwc_service (service_manager (find)))
(allow system_app keystore (keystore_key (get_state get insert delete exist list reset password lock unlock is_empty sign verify grant duplicate clear_uid user_changed)))
(allow system_app proc_version (file (ioctl read getattr lock map open)))
(allow system_app cgroup (file (write lock append map open)))
(allow system_app logd_socket (sock_file (write)))
(allow system_app logd (unix_stream_socket (connectto)))
(allow system_app runtime_event_log_tags_file (file (ioctl read getattr lock map open)))
(allow system_app device_logging_prop (file (read getattr map open)))
(allow system_app system_server (udp_socket (read write getattr connect getopt setopt recvfrom sendto)))
;;* lmx 151 system/sepolicy/prebuilts/api/29.0/private/system_app.te

(neverallow system_app fuse_device (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod open audit_access)))
;;* lme

(typetransition system_server tmpfs file system_server_tmpfs)
(allow system_server system_server_tmpfs (file (read write getattr map)))
(allow system_server zygote_tmpfs (file (read)))
(allow system_server appdomain_tmpfs (file (read write getattr map)))
(allow system_server dalvikcache_data_file (dir (ioctl read getattr lock search open)))
(allow system_server dalvikcache_data_file (file (ioctl read getattr lock map open)))
(allow system_server resourcecache_data_file (file (ioctl read getattr lock map open)))
(allow system_server resourcecache_data_file (dir (ioctl read getattr lock search open)))
(allow system_server self (process (ptrace)))
(allow system_server zygote (fd (use)))
(allow system_server zygote (process (sigchld)))
(allow system_server zygote (process (sigkill)))
(allow system_server crash_dump (process (sigkill)))
(allow system_server webview_zygote (process (sigkill)))
(allow system_server app_zygote (process (sigkill)))
(allow system_server zygote_exec (file (ioctl read getattr lock map open)))
(allow system_server zygote (unix_stream_socket (getattr getopt)))
(allowx system_server self (ioctl udp_socket (0x6900 0x6902)))
(allowx system_server self (ioctl udp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(allowx system_server self (ioctl udp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(allow system_server appdomain (tcp_socket (ioctl)))
(allow system_server self (capability (kill net_bind_service net_broadcast net_admin net_raw ipc_lock sys_ptrace sys_boot sys_nice sys_time sys_tty_config)))
(allow system_server self (cap_userns (kill net_bind_service net_broadcast net_admin net_raw ipc_lock sys_ptrace sys_boot sys_nice sys_time sys_tty_config)))
(allow system_server kernel (system (module_request)))
(allow system_server self (capability2 (wake_alarm)))
(allow system_server self (cap2_userns (wake_alarm)))
(allow system_server self (netlink_netfilter_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
(allow system_server self (netlink_tcpdiag_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown nlmsg_read)))
(allow system_server self (netlink_kobject_uevent_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
(allow system_server self (netlink_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
(allow system_server self (netlink_generic_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
(allow system_server config_gz (file (read open)))
(allow system_server self (socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
(allow system_server self (netlink_route_socket (nlmsg_write)))
(allow system_server appdomain (process (sigkill signal getpgid)))
(allow system_server appdomain (process (getsched setsched)))
(allow system_server audioserver (process (getsched setsched)))
(allow system_server hal_audio (process (getsched setsched)))
(allow system_server hal_bluetooth (process (getsched setsched)))
(allow system_server hal_codec2_server (process (getsched setsched)))
(allow system_server hal_omx_server (process (getsched setsched)))
(allow system_server mediaswcodec (process (getsched setsched)))
(allow system_server cameraserver (process (getsched setsched)))
(allow system_server hal_camera (process (getsched setsched)))
(allow system_server mediaserver (process (getsched setsched)))
(allow system_server bootanim (process (getsched setsched)))
(allow system_server kernel (process (getsched setsched)))
(allow system_server domain (file (write lock append map open)))
(allow system_server domain (dir (ioctl read getattr lock search open)))
(allow system_server domain (file (ioctl read getattr lock map open)))
(allow system_server domain (lnk_file (ioctl read getattr lock map open)))
(allow system_server proc_uid_cputime_removeuid (file (write getattr lock append map open)))
(allow system_server proc_uid_procstat_set (file (write getattr lock append map open)))
(allow system_server proc_sysrq (file (ioctl read write getattr lock append map open)))
(allow system_server stats_data_file (dir (read write remove_name search open)))
(allow system_server stats_data_file (file (unlink)))
(allow system_server debugfs_wakeup_sources (file (ioctl read getattr lock map open)))
(allow system_server self (packet_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
(allow system_server self (tun_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
(allow system_server lmkd_socket (sock_file (write)))
(allow system_server lmkd (unix_stream_socket (connectto)))
(allow system_server mtpd_socket (sock_file (write)))
(allow system_server mtp (unix_stream_socket (connectto)))
(allow system_server zygote_socket (sock_file (write)))
(allow system_server zygote (unix_stream_socket (connectto)))
(allow system_server racoon_socket (sock_file (write)))
(allow system_server racoon (unix_stream_socket (connectto)))
(allow system_server uncrypt_socket (sock_file (write)))
(allow system_server uncrypt (unix_stream_socket (connectto)))
(allow system_server statsdw_socket (sock_file (write)))
(allow system_server statsd (unix_dgram_socket (sendto)))
(allow system_server surfaceflinger (unix_stream_socket (read write setopt)))
(allow system_server gpuservice (unix_stream_socket (read write setopt)))
(allow system_server webview_zygote (unix_stream_socket (read write setopt connectto)))
(allow system_server app_zygote (unix_stream_socket (read write setopt connectto)))
(allow system_server servicemanager (binder (call transfer)))
(allow servicemanager system_server (dir (search)))
(allow servicemanager system_server (file (read open)))
(allow servicemanager system_server (process (getattr)))
(allow system_server appdomain (binder (call transfer)))
(allow appdomain system_server (binder (transfer)))
(allow system_server appdomain (fd (use)))
(allow system_server binderservicedomain (binder (call transfer)))
(allow binderservicedomain system_server (binder (transfer)))
(allow system_server binderservicedomain (fd (use)))
(allow system_server dumpstate (binder (call transfer)))
(allow dumpstate system_server (binder (transfer)))
(allow system_server dumpstate (fd (use)))
(allow system_server fingerprintd (binder (call transfer)))
(allow fingerprintd system_server (binder (transfer)))
(allow system_server fingerprintd (fd (use)))
(allow system_server gatekeeperd (binder (call transfer)))
(allow gatekeeperd system_server (binder (transfer)))
(allow system_server gatekeeperd (fd (use)))
(allow system_server idmap (binder (call transfer)))
(allow idmap system_server (binder (transfer)))
(allow system_server idmap (fd (use)))
(allow system_server installd (binder (call transfer)))
(allow installd system_server (binder (transfer)))
(allow system_server installd (fd (use)))
(allow system_server incidentd (binder (call transfer)))
(allow incidentd system_server (binder (transfer)))
(allow system_server incidentd (fd (use)))
(allow system_server iorapd (binder (call transfer)))
(allow iorapd system_server (binder (transfer)))
(allow system_server iorapd (fd (use)))
(allow system_server netd (binder (call transfer)))
(allow netd system_server (binder (transfer)))
(allow system_server netd (fd (use)))
(allow system_server notify_traceur (binder (call transfer)))
(allow notify_traceur system_server (binder (transfer)))
(allow system_server notify_traceur (fd (use)))
(allow system_server statsd (binder (call transfer)))
(allow statsd system_server (binder (transfer)))
(allow system_server statsd (fd (use)))
(allow system_server storaged (binder (call transfer)))
(allow storaged system_server (binder (transfer)))
(allow system_server storaged (fd (use)))
(allow system_server update_engine (binder (call transfer)))
(allow update_engine system_server (binder (transfer)))
(allow system_server update_engine (fd (use)))
(allow system_server vold (binder (call transfer)))
(allow vold system_server (binder (transfer)))
(allow system_server vold (fd (use)))
(allow system_server wificond (binder (call transfer)))
(allow wificond system_server (binder (transfer)))
(allow system_server wificond (fd (use)))
(allow system_server wpantund (binder (call transfer)))
(allow wpantund system_server (binder (transfer)))
(allow system_server wpantund (fd (use)))
(allow system_server hal_graphics_composer (fd (use)))
(allow system_server hal_renderscript_hwservice (hwservice_manager (find)))
(allow system_server same_process_hal_file (file (read getattr map execute open)))
(allow system_server tombstoned_intercept_socket (sock_file (write)))
(allow system_server tombstoned (unix_stream_socket (connectto)))
(allow system_server hwservicemanager (hwservice_manager (list)))
(allow system_server hal_audio_server (process (signal)))
(allow system_server hal_bluetooth_server (process (signal)))
(allow system_server hal_camera_server (process (signal)))
(allow system_server hal_codec2_server (process (signal)))
(allow system_server hal_face_server (process (signal)))
(allow system_server hal_graphics_allocator_server (process (signal)))
(allow system_server hal_graphics_composer_server (process (signal)))
(allow system_server hal_health_server (process (signal)))
(allow system_server hal_omx_server (process (signal)))
(allow system_server hal_power_stats_server (process (signal)))
(allow system_server hal_sensors_server (process (signal)))
(allow system_server hal_vr_server (process (signal)))
(allow system_server audioserver (process (signal)))
(allow system_server cameraserver (process (signal)))
(allow system_server drmserver (process (signal)))
(allow system_server gpuservice (process (signal)))
(allow system_server inputflinger (process (signal)))
(allow system_server mediadrmserver (process (signal)))
(allow system_server mediaextractor (process (signal)))
(allow system_server mediametrics (process (signal)))
(allow system_server mediaserver (process (signal)))
(allow system_server mediaswcodec (process (signal)))
(allow system_server sdcardd (process (signal)))
(allow system_server statsd (process (signal)))
(allow system_server surfaceflinger (process (signal)))
(allow system_server vold (process (signal)))
(allow system_server audioserver (tcp_socket (ioctl read write getattr setattr lock append map bind connect getopt setopt shutdown)))
(allow system_server audioserver (udp_socket (ioctl read write getattr setattr lock append map bind connect getopt setopt shutdown)))
(allow system_server mediaserver (tcp_socket (ioctl read write getattr setattr lock append map bind connect getopt setopt shutdown)))
(allow system_server mediaserver (udp_socket (ioctl read write getattr setattr lock append map bind connect getopt setopt shutdown)))
(allow system_server mediadrmserver (tcp_socket (ioctl read write getattr setattr lock append map bind connect getopt setopt shutdown)))
(allow system_server mediadrmserver (udp_socket (ioctl read write getattr setattr lock append map bind connect getopt setopt shutdown)))
(allow system_server file_contexts_file (file (ioctl read getattr lock map open)))
(allow system_server mac_perms_file (file (ioctl read getattr lock map open)))
(allow system_server selinuxfs (dir (ioctl read getattr lock search open)))
(allow system_server selinuxfs (file (ioctl read getattr lock map open)))
(allow system_server selinuxfs (lnk_file (ioctl read getattr lock map open)))
(allow system_server selinuxfs (file (write lock append map open)))
(allow system_server kernel (security (compute_av)))
(allow system_server self (netlink_selinux_socket (read write create getattr setattr lock relabelfrom relabelto append bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(allow system_server sysfs_type (dir (search)))
(allow system_server sysfs_android_usb (dir (ioctl read getattr lock search open)))
(allow system_server sysfs_android_usb (file (ioctl read getattr lock map open)))
(allow system_server sysfs_android_usb (lnk_file (ioctl read getattr lock map open)))
(allow system_server sysfs_android_usb (file (write lock append map open)))
(allow system_server sysfs_extcon (dir (ioctl read getattr lock search open)))
(allow system_server sysfs_ipv4 (dir (ioctl read getattr lock search open)))
(allow system_server sysfs_ipv4 (file (ioctl read getattr lock map open)))
(allow system_server sysfs_ipv4 (lnk_file (ioctl read getattr lock map open)))
(allow system_server sysfs_ipv4 (file (write lock append map open)))
(allow system_server sysfs_rtc (dir (ioctl read getattr lock search open)))
(allow system_server sysfs_rtc (file (ioctl read getattr lock map open)))
(allow system_server sysfs_rtc (lnk_file (ioctl read getattr lock map open)))
(allow system_server sysfs_switch (dir (ioctl read getattr lock search open)))
(allow system_server sysfs_switch (file (ioctl read getattr lock map open)))
(allow system_server sysfs_switch (lnk_file (ioctl read getattr lock map open)))
(allow system_server sysfs_wakeup_reasons (dir (ioctl read getattr lock search open)))
(allow system_server sysfs_wakeup_reasons (file (ioctl read getattr lock map open)))
(allow system_server sysfs_wakeup_reasons (lnk_file (ioctl read getattr lock map open)))
(allow system_server sysfs_nfc_power_writable (file (ioctl read write getattr lock append map open)))
(allow system_server sysfs_mac_address (file (ioctl read getattr lock map open)))
(allow system_server sysfs_power (dir (search)))
(allow system_server sysfs_power (file (ioctl read write getattr lock append map open)))
(allow system_server sysfs_thermal (dir (search)))
(allow system_server sysfs_thermal (file (ioctl read getattr lock map open)))
(allow system_server sysfs_vibrator (file (write append)))
(allow system_server sysfs_usb (file (write lock append map open)))
(allow system_server device (dir (ioctl read getattr lock search open)))
(allow system_server mdns_socket (sock_file (ioctl read write getattr lock append map open)))
(allow system_server gpu_device (chr_file (ioctl read write getattr lock append map open)))
(allow system_server input_device (dir (ioctl read getattr lock search open)))
(allow system_server input_device (chr_file (ioctl read write getattr lock append map open)))
(allow system_server tty_device (chr_file (ioctl read write getattr lock append map open)))
(allow system_server usbaccessory_device (chr_file (ioctl read write getattr lock append map open)))
(allow system_server video_device (dir (ioctl read getattr lock search open)))
(allow system_server video_device (chr_file (ioctl read write getattr lock append map open)))
(allow system_server adbd_socket (sock_file (ioctl read write getattr lock append map open)))
(allow system_server rtc_device (chr_file (ioctl read write getattr lock append map open)))
(allow system_server audio_device (dir (ioctl read getattr lock search open)))
(allow system_server audio_device (chr_file (ioctl read write getattr lock append map open)))
(allow system_server tun_device (chr_file (ioctl read write getattr lock append map open)))
(allowx system_server tun_device (ioctl chr_file (0x54ca 0x54d2)))
(allow system_server ota_package_file (dir (ioctl read write getattr lock add_name remove_name search open)))
(allow system_server ota_package_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow system_server system_data_file (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
(allow system_server system_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow system_server system_data_file (lnk_file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow system_server system_data_file (sock_file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow system_server system_data_file (fifo_file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow system_server packages_list_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow system_server keychain_data_file (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
(allow system_server keychain_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow system_server keychain_data_file (lnk_file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow system_server apk_data_file (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
(allow system_server apk_data_file (file (ioctl read write create getattr setattr lock append map unlink link rename open)))
(allow system_server apk_data_file (lnk_file (ioctl read write create getattr setattr lock append map unlink link rename open)))
(allow system_server apk_tmp_file (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
(allow system_server apk_tmp_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow system_server vendor_keylayout_file (dir (ioctl read getattr lock search open)))
(allow system_server vendor_keylayout_file (file (ioctl read getattr lock map open)))
(allow system_server vendor_keylayout_file (lnk_file (ioctl read getattr lock map open)))
(allow system_server vendor_keychars_file (dir (ioctl read getattr lock search open)))
(allow system_server vendor_keychars_file (file (ioctl read getattr lock map open)))
(allow system_server vendor_keychars_file (lnk_file (ioctl read getattr lock map open)))
(allow system_server vendor_idc_file (dir (ioctl read getattr lock search open)))
(allow system_server vendor_idc_file (file (ioctl read getattr lock map open)))
(allow system_server vendor_idc_file (lnk_file (ioctl read getattr lock map open)))
(allow system_server vendor_app_file (dir (ioctl read getattr lock search open)))
(allow system_server vendor_app_file (file (ioctl read getattr lock map open)))
(allow system_server vendor_app_file (lnk_file (ioctl read getattr lock map open)))
(allow system_server vendor_framework_file (dir (ioctl read getattr lock search open)))
(allow system_server vendor_framework_file (file (ioctl read getattr lock map open)))
(allow system_server vendor_framework_file (lnk_file (ioctl read getattr lock map open)))
(allow system_server vendor_overlay_file (dir (ioctl read getattr lock search open)))
(allow system_server vendor_overlay_file (file (ioctl read getattr lock map open)))
(allow system_server vendor_overlay_file (lnk_file (ioctl read getattr lock map open)))
(allow system_server apk_private_data_file (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
(allow system_server apk_private_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow system_server apk_private_tmp_file (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
(allow system_server apk_private_tmp_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow system_server asec_apk_file (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
(allow system_server asec_apk_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow system_server asec_public_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow system_server anr_data_file (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
(allow system_server anr_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow system_server tombstoned_java_trace_socket (sock_file (write)))
(allow system_server tombstoned (unix_stream_socket (connectto)))
(allow system_server tombstoned (fd (use)))
(allow system_server dumpstate (fifo_file (append)))
(allow system_server incidentd (fifo_file (append)))
(allow system_server incidentd (fifo_file (read)))
(allow system_server incident_data_file (file (read)))
(allow system_server perfetto_traces_data_file (file (read)))
(allow system_server perfetto (fd (use)))
(allow system_server backup_data_file (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
(allow system_server backup_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow system_server dropbox_data_file (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
(allow system_server dropbox_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow system_server heapdump_data_file (dir (ioctl read write getattr lock add_name remove_name search open)))
(allow system_server heapdump_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow system_server adb_keys_file (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
(allow system_server adb_keys_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow system_server network_watchlist_data_file (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
(allow system_server network_watchlist_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow system_server radio_data_file (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
(allow system_server radio_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow system_server systemkeys_data_file (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
(allow system_server systemkeys_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow system_server textclassifier_data_file (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
(allow system_server textclassifier_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow system_server tombstone_data_file (dir (ioctl read getattr lock search open)))
(allow system_server tombstone_data_file (file (ioctl read getattr lock map open)))
(allow system_server vpn_data_file (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
(allow system_server vpn_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow system_server wifi_data_file (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
(allow system_server wifi_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow system_server zoneinfo_data_file (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
(allow system_server zoneinfo_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow system_server staging_data_file (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
(allow system_server staging_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow system_server shell_data_file (dir (read getattr search)))
(allow system_server bluetooth_data_file (dir (read getattr search)))
(allow system_server nfc_data_file (dir (read getattr search)))
(allow system_server radio_data_file (dir (read getattr search)))
(allow system_server app_data_file (dir (read getattr search)))
(allow system_server privapp_data_file (dir (read getattr search)))
(allow system_server system_app_data_file (dir (read getattr search)))
(allow system_server unlabeled (dir (ioctl read getattr lock search open)))
(allow system_server unlabeled (file (ioctl read getattr lock map open)))
(allow system_server system_app_data_file (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
(allow system_server system_app_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow system_server shell_data_file (file (read write getattr append map)))
(allow system_server bluetooth_data_file (file (read write getattr append map)))
(allow system_server nfc_data_file (file (read write getattr append map)))
(allow system_server radio_data_file (file (read write getattr append map)))
(allow system_server app_data_file (file (read write getattr append map)))
(allow system_server privapp_data_file (file (read write getattr append map)))
(allow system_server system_app_data_file (file (read write getattr append map)))
(allow system_server media_rw_data_file (dir (read getattr search open)))
(allow system_server media_rw_data_file (file (read write getattr append)))
(allow system_server system_server (process (setfscreate)))
(allow system_server apk_tmp_file (file (relabelfrom relabelto)))
(allow system_server apk_tmp_file (dir (relabelfrom relabelto)))
(allow system_server apk_private_tmp_file (file (relabelfrom relabelto)))
(allow system_server apk_private_tmp_file (dir (relabelfrom relabelto)))
(allow system_server apk_data_file (file (relabelfrom relabelto)))
(allow system_server apk_data_file (dir (relabelfrom relabelto)))
(allow system_server apk_private_data_file (file (relabelfrom relabelto)))
(allow system_server apk_private_data_file (dir (relabelfrom relabelto)))
(allow system_server system_data_file (file (relabelfrom)))
(allow system_server wallpaper_file (file (relabelto)))
(allow system_server wallpaper_file (file (ioctl read write getattr lock append map unlink rename open)))
(allow system_server system_data_file (file (link)))
(allow system_server wallpaper_file (file (link)))
(allow system_server system_data_file (dir (relabelfrom)))
(allow system_server shortcut_manager_icons (dir (ioctl read write create getattr setattr lock relabelto rename add_name remove_name reparent search rmdir open)))
(allow system_server shortcut_manager_icons (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow system_server ringtone_file (dir (ioctl read write create getattr setattr lock relabelto rename add_name remove_name reparent search rmdir open)))
(allow system_server ringtone_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow system_server icon_file (file (relabelto)))
(allow system_server icon_file (file (ioctl read write getattr lock append map unlink open)))
(allow system_server system_data_file (dir (relabelfrom)))
(allow system_server server_configurable_flags_data_file (dir (ioctl read getattr lock search open)))
(allow system_server server_configurable_flags_data_file (file (ioctl read getattr lock map open)))
(allow system_server property_socket (sock_file (write)))
(allow system_server init (unix_stream_socket (connectto)))
(allow system_server system_prop (property_service (set)))
(allow system_server system_prop (file (read getattr map open)))
(allow system_server property_socket (sock_file (write)))
(allow system_server init (unix_stream_socket (connectto)))
(allow system_server exported_system_prop (property_service (set)))
(allow system_server exported_system_prop (file (read getattr map open)))
(allow system_server property_socket (sock_file (write)))
(allow system_server init (unix_stream_socket (connectto)))
(allow system_server exported2_system_prop (property_service (set)))
(allow system_server exported2_system_prop (file (read getattr map open)))
(allow system_server property_socket (sock_file (write)))
(allow system_server init (unix_stream_socket (connectto)))
(allow system_server exported3_system_prop (property_service (set)))
(allow system_server exported3_system_prop (file (read getattr map open)))
(allow system_server property_socket (sock_file (write)))
(allow system_server init (unix_stream_socket (connectto)))
(allow system_server safemode_prop (property_service (set)))
(allow system_server safemode_prop (file (read getattr map open)))
(allow system_server property_socket (sock_file (write)))
(allow system_server init (unix_stream_socket (connectto)))
(allow system_server theme_prop (property_service (set)))
(allow system_server theme_prop (file (read getattr map open)))
(allow system_server property_socket (sock_file (write)))
(allow system_server init (unix_stream_socket (connectto)))
(allow system_server dhcp_prop (property_service (set)))
(allow system_server dhcp_prop (file (read getattr map open)))
(allow system_server property_socket (sock_file (write)))
(allow system_server init (unix_stream_socket (connectto)))
(allow system_server net_radio_prop (property_service (set)))
(allow system_server net_radio_prop (file (read getattr map open)))
(allow system_server property_socket (sock_file (write)))
(allow system_server init (unix_stream_socket (connectto)))
(allow system_server net_dns_prop (property_service (set)))
(allow system_server net_dns_prop (file (read getattr map open)))
(allow system_server property_socket (sock_file (write)))
(allow system_server init (unix_stream_socket (connectto)))
(allow system_server system_radio_prop (property_service (set)))
(allow system_server system_radio_prop (file (read getattr map open)))
(allow system_server property_socket (sock_file (write)))
(allow system_server init (unix_stream_socket (connectto)))
(allow system_server exported_system_radio_prop (property_service (set)))
(allow system_server exported_system_radio_prop (file (read getattr map open)))
(allow system_server property_socket (sock_file (write)))
(allow system_server init (unix_stream_socket (connectto)))
(allow system_server debug_prop (property_service (set)))
(allow system_server debug_prop (file (read getattr map open)))
(allow system_server property_socket (sock_file (write)))
(allow system_server init (unix_stream_socket (connectto)))
(allow system_server powerctl_prop (property_service (set)))
(allow system_server powerctl_prop (file (read getattr map open)))
(allow system_server property_socket (sock_file (write)))
(allow system_server init (unix_stream_socket (connectto)))
(allow system_server fingerprint_prop (property_service (set)))
(allow system_server fingerprint_prop (file (read getattr map open)))
(allow system_server property_socket (sock_file (write)))
(allow system_server init (unix_stream_socket (connectto)))
(allow system_server exported_fingerprint_prop (property_service (set)))
(allow system_server exported_fingerprint_prop (file (read getattr map open)))
(allow system_server property_socket (sock_file (write)))
(allow system_server init (unix_stream_socket (connectto)))
(allow system_server device_logging_prop (property_service (set)))
(allow system_server device_logging_prop (file (read getattr map open)))
(allow system_server property_socket (sock_file (write)))
(allow system_server init (unix_stream_socket (connectto)))
(allow system_server dumpstate_options_prop (property_service (set)))
(allow system_server dumpstate_options_prop (file (read getattr map open)))
(allow system_server property_socket (sock_file (write)))
(allow system_server init (unix_stream_socket (connectto)))
(allow system_server overlay_prop (property_service (set)))
(allow system_server overlay_prop (file (read getattr map open)))
(allow system_server property_socket (sock_file (write)))
(allow system_server init (unix_stream_socket (connectto)))
(allow system_server exported_overlay_prop (property_service (set)))
(allow system_server exported_overlay_prop (file (read getattr map open)))
(allow system_server property_socket (sock_file (write)))
(allow system_server init (unix_stream_socket (connectto)))
(allow system_server pm_prop (property_service (set)))
(allow system_server pm_prop (file (read getattr map open)))
(allow system_server property_socket (sock_file (write)))
(allow system_server init (unix_stream_socket (connectto)))
(allow system_server exported_pm_prop (property_service (set)))
(allow system_server exported_pm_prop (file (read getattr map open)))
(allow system_server property_socket (sock_file (write)))
(allow system_server init (unix_stream_socket (connectto)))
(allow system_server ctl_default_prop (property_service (set)))
(allow system_server ctl_default_prop (file (read getattr map open)))
(allow system_server property_socket (sock_file (write)))
(allow system_server init (unix_stream_socket (connectto)))
(allow system_server ctl_bugreport_prop (property_service (set)))
(allow system_server ctl_bugreport_prop (file (read getattr map open)))
(allow system_server property_socket (sock_file (write)))
(allow system_server init (unix_stream_socket (connectto)))
(allow system_server ctl_gsid_prop (property_service (set)))
(allow system_server ctl_gsid_prop (file (read getattr map open)))
(allow system_server property_socket (sock_file (write)))
(allow system_server init (unix_stream_socket (connectto)))
(allow system_server cppreopt_prop (property_service (set)))
(allow system_server cppreopt_prop (file (read getattr map open)))
(allow system_server property_socket (sock_file (write)))
(allow system_server init (unix_stream_socket (connectto)))
(allow system_server device_config_input_native_boot_prop (property_service (set)))
(allow system_server device_config_input_native_boot_prop (file (read getattr map open)))
(allow system_server property_socket (sock_file (write)))
(allow system_server init (unix_stream_socket (connectto)))
(allow system_server device_config_netd_native_prop (property_service (set)))
(allow system_server device_config_netd_native_prop (file (read getattr map open)))
(allow system_server property_socket (sock_file (write)))
(allow system_server init (unix_stream_socket (connectto)))
(allow system_server device_config_activity_manager_native_boot_prop (property_service (set)))
(allow system_server device_config_activity_manager_native_boot_prop (file (read getattr map open)))
(allow system_server property_socket (sock_file (write)))
(allow system_server init (unix_stream_socket (connectto)))
(allow system_server device_config_runtime_native_boot_prop (property_service (set)))
(allow system_server device_config_runtime_native_boot_prop (file (read getattr map open)))
(allow system_server property_socket (sock_file (write)))
(allow system_server init (unix_stream_socket (connectto)))
(allow system_server device_config_runtime_native_prop (property_service (set)))
(allow system_server device_config_runtime_native_prop (file (read getattr map open)))
(allow system_server property_socket (sock_file (write)))
(allow system_server init (unix_stream_socket (connectto)))
(allow system_server device_config_media_native_prop (property_service (set)))
(allow system_server device_config_media_native_prop (file (read getattr map open)))
(allow system_server bootloader_boot_reason_prop (file (read getattr map open)))
(allow system_server system_boot_reason_prop (file (read getattr map open)))
(allow system_server boottime_prop (file (read getattr map open)))
(allow system_server serialno_prop (file (read getattr map open)))
(allow system_server property_socket (sock_file (write)))
(allow system_server init (unix_stream_socket (connectto)))
(allow system_server firstboot_prop (property_service (set)))
(allow system_server firstboot_prop (file (read getattr map open)))
(allow system_server exported_audio_prop (file (read getattr map open)))
(allow system_server device_config_reset_performed_prop (file (read getattr map open)))
(allow system_server property_socket (sock_file (write)))
(allow system_server init (unix_stream_socket (connectto)))
(allow system_server test_harness_prop (property_service (set)))
(allow system_server test_harness_prop (file (read getattr map open)))
(allow system_server gsid_prop (file (read getattr map open)))
(allow system_server system_ndebug_socket (sock_file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow system_server cache_file (lnk_file (ioctl read getattr lock map open)))
(allow system_server cache_file (dir (ioctl read write create getattr setattr lock relabelfrom rename add_name remove_name reparent search rmdir open)))
(allow system_server cache_recovery_file (dir (ioctl read write create getattr setattr lock relabelfrom rename add_name remove_name reparent search rmdir open)))
(allow system_server cache_file (file (ioctl read write create getattr setattr lock relabelfrom append map unlink rename open)))
(allow system_server cache_recovery_file (file (ioctl read write create getattr setattr lock relabelfrom append map unlink rename open)))
(allow system_server cache_file (fifo_file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow system_server cache_recovery_file (fifo_file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow system_server system_file (dir (ioctl read getattr lock search open)))
(allow system_server system_file (lnk_file (ioctl read getattr lock map open)))
(allow system_server system_file (file (lock)))
(allow system_server gps_control (file (ioctl read write getattr lock append map open)))
(allow system_server appdomain (tcp_socket (read write getattr getopt setopt shutdown)))
(allow system_server appdomain (udp_socket (read write getattr getopt setopt shutdown)))
(allow system_server appdomain (fifo_file (read write getattr)))
(allow system_server appdomain (unix_stream_socket (read write getattr)))
(allow system_server cache_backup_file (dir (ioctl read write getattr lock add_name remove_name search open)))
(allow system_server cache_backup_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow system_server cache_private_backup_file (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
(allow system_server cache_private_backup_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow system_server usb_device (chr_file (ioctl read write getattr lock append map open)))
(allow system_server usb_device (dir (ioctl read getattr lock search open)))
(allow system_server hw_random_device (chr_file (ioctl read getattr lock map open)))
(allow system_server fscklogs (dir (ioctl read getattr lock search open)))
(allow system_server fscklogs (file (ioctl read getattr lock map open)))
(allow system_server fscklogs (lnk_file (ioctl read getattr lock map open)))
(allow system_server fscklogs (dir (write remove_name)))
(allow system_server fscklogs (file (unlink)))
(allow system_server zygote (unix_dgram_socket (write)))
(allow system_server logcat_exec (file (ioctl read getattr lock map execute execute_no_trans open)))
(allow system_server logdr_socket (sock_file (write)))
(allow system_server logd (unix_stream_socket (connectto)))
(allow system_server runtime_event_log_tags_file (file (ioctl read getattr lock map open)))
(allow system_server sysfs_lowmemorykiller (file (write getattr lock append map open)))
(allow system_server pstorefs (dir (ioctl read getattr lock search open)))
(allow system_server pstorefs (file (ioctl read getattr lock map open)))
(allow system_server sysfs_zram (dir (search)))
(allow system_server sysfs_zram (file (ioctl read write getattr lock append map open)))
(allow system_server system_server_service (service_manager (add find)))
;;* lmx 703 system/sepolicy/prebuilts/api/29.0/private/system_server.te

(neverallow base_typeattr_258 system_server_service (service_manager (add)))
;;* lme

(allow system_server audioserver_service (service_manager (find)))
(allow system_server batteryproperties_service (service_manager (find)))
(allow system_server cameraserver_service (service_manager (find)))
(allow system_server dnsresolver_service (service_manager (find)))
(allow system_server drmserver_service (service_manager (find)))
(allow system_server dumpstate_service (service_manager (find)))
(allow system_server fingerprintd_service (service_manager (find)))
(allow system_server gatekeeper_service (service_manager (find)))
(allow system_server gpu_service (service_manager (find)))
(allow system_server gsi_service (service_manager (find)))
(allow system_server hal_fingerprint_service (service_manager (find)))
(allow system_server idmap_service (service_manager (find)))
(allow system_server incident_service (service_manager (find)))
(allow system_server installd_service (service_manager (find)))
(allow system_server iorapd_service (service_manager (find)))
(allow system_server keystore_service (service_manager (find)))
(allow system_server mediaserver_service (service_manager (find)))
(allow system_server mediametrics_service (service_manager (find)))
(allow system_server mediaextractor_service (service_manager (find)))
(allow system_server mediacodec_service (service_manager (find)))
(allow system_server mediadrmserver_service (service_manager (find)))
(allow system_server netd_service (service_manager (find)))
(allow system_server nfc_service (service_manager (find)))
(allow system_server radio_service (service_manager (find)))
(allow system_server stats_service (service_manager (find)))
(allow system_server storaged_service (service_manager (find)))
(allow system_server surfaceflinger_service (service_manager (find)))
(allow system_server update_engine_service (service_manager (find)))
(allow system_server vold_service (service_manager (find)))
(allow system_server wificond_service (service_manager (find)))
(allow system_server batteryproperties_service (service_manager (add find)))
;;* lmx 738 system/sepolicy/prebuilts/api/29.0/private/system_server.te

(neverallow base_typeattr_258 batteryproperties_service (service_manager (add)))
;;* lme

(allow system_server keystore (keystore_key (get_state get insert delete exist list reset password lock unlock is_empty sign verify grant duplicate clear_uid add_auth user_changed)))
(allow system_server block_device (dir (search)))
(allow system_server frp_block_device (blk_file (ioctl read write getattr lock append map open)))
(allowx system_server frp_block_device (ioctl blk_file (0x1277 0x127d)))
(allow system_server cgroup (dir (remove_name rmdir)))
(allow system_server oemfs (dir (ioctl read getattr lock search open)))
(allow system_server oemfs (file (ioctl read getattr lock map open)))
(allow system_server oemfs (lnk_file (ioctl read getattr lock map open)))
(allow system_server mnt_user_file (dir (getattr search)))
(allow system_server storage_file (dir (getattr search)))
(allow system_server mnt_user_file (lnk_file (read getattr)))
(allow system_server storage_file (lnk_file (read getattr)))
(allow system_server sdcard_type (dir (getattr search)))
(allow system_server mnt_expand_file (dir (ioctl read getattr lock search open)))
(allow system_server fingerprintd_data_file (dir (ioctl read write getattr lock relabelto remove_name search rmdir open)))
(allow system_server fingerprintd_data_file (file (getattr unlink)))
(allow system_server sysfs_mac_address (file (ioctl read getattr lock map open)))
(allow system_server vold (fd (use)))
(allow system_server fuse_device (chr_file (ioctl read write getattr)))
(allow system_server app_fuse_file (file (read write getattr)))
(allow system_server configfs (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
(allow system_server configfs (file (write create getattr unlink open)))
(allow system_server adbd (unix_stream_socket (connectto)))
(allow system_server adbd (fd (use)))
(allow system_server adbd (unix_stream_socket (ioctl read write getattr getopt shutdown)))
(allow system_server toolbox_exec (file (ioctl read getattr lock map execute execute_no_trans open)))
(allowx system_server apk_data_file (ioctl file ((range 0x6685 0x6686))))
(allow system_server postinstall (binder (call transfer)))
(allow postinstall system_server (binder (transfer)))
(allow system_server postinstall (fd (use)))
(allow system_server postinstall (fifo_file (write)))
(allow system_server update_engine (fd (use)))
(allow system_server update_engine (fifo_file (write)))
(allow system_server preloads_data_file (file (ioctl read getattr lock map unlink open)))
(allow system_server preloads_data_file (dir (ioctl read write getattr lock remove_name search rmdir open)))
(allow system_server preloads_media_file (file (ioctl read getattr lock map unlink open)))
(allow system_server preloads_media_file (dir (ioctl read write getattr lock remove_name search rmdir open)))
(allow system_server cgroup (dir (ioctl read getattr lock search open)))
(allow system_server cgroup (file (ioctl read getattr lock map open)))
(allow system_server cgroup (lnk_file (ioctl read getattr lock map open)))
(allow system_server ion_device (chr_file (ioctl read getattr lock map open)))
(allow system_server proc_asound (dir (ioctl read getattr lock search open)))
(allow system_server proc_asound (file (ioctl read getattr lock map open)))
(allow system_server proc_asound (lnk_file (ioctl read getattr lock map open)))
(allow system_server proc_net_type (dir (ioctl read getattr lock search open)))
(allow system_server proc_net_type (file (ioctl read getattr lock map open)))
(allow system_server proc_net_type (lnk_file (ioctl read getattr lock map open)))
(allow system_server proc_qtaguid_stat (dir (ioctl read getattr lock search open)))
(allow system_server proc_qtaguid_stat (file (ioctl read getattr lock map open)))
(allow system_server proc_qtaguid_stat (lnk_file (ioctl read getattr lock map open)))
(allow system_server proc_cmdline (file (ioctl read getattr lock map open)))
(allow system_server proc_loadavg (file (ioctl read getattr lock map open)))
(allow system_server proc_meminfo (file (ioctl read getattr lock map open)))
(allow system_server proc_pagetypeinfo (file (ioctl read getattr lock map open)))
(allow system_server proc_pipe_conf (file (ioctl read getattr lock map open)))
(allow system_server proc_stat (file (ioctl read getattr lock map open)))
(allow system_server proc_uid_cputime_showstat (file (ioctl read getattr lock map open)))
(allow system_server proc_uid_io_stats (file (ioctl read getattr lock map open)))
(allow system_server proc_uid_time_in_state (file (ioctl read getattr lock map open)))
(allow system_server proc_uid_concurrent_active_time (file (ioctl read getattr lock map open)))
(allow system_server proc_uid_concurrent_policy_time (file (ioctl read getattr lock map open)))
(allow system_server proc_version (file (ioctl read getattr lock map open)))
(allow system_server proc_vmallocinfo (file (ioctl read getattr lock map open)))
(allow system_server proc_uid_time_in_state (dir (ioctl read getattr lock search open)))
(allow system_server proc_uid_cpupower (file (ioctl read getattr lock map open)))
(allow system_server rootfs (dir (ioctl read getattr lock search open)))
(allow system_server rootfs (file (ioctl read getattr lock map open)))
(allow system_server rootfs (lnk_file (ioctl read getattr lock map open)))
(allow system_server debugfs_tracing_instances (dir (search)))
(allow system_server debugfs_wifi_tracing (dir (search)))
(allow system_server debugfs_wifi_tracing (file (ioctl read write getattr lock append map open)))
(allow system_server fs_bpf (dir (search)))
(allow system_server fs_bpf (file (read write)))
(allow system_server bpfloader (bpf (map_read map_write)))
(allow system_server user_profile_data_file (dir (getattr search)))
(allow system_server user_profile_data_file (file (read getattr open)))
(allow system_server profman_dump_data_file (file (write create getattr setattr lock append map open)))
(allow system_server profman_dump_data_file (dir (write lock add_name remove_name search open)))
(allow system_server functionfs (dir (search)))
(allow system_server functionfs (file (ioctl read write getattr lock append map open)))
(allow system_server time_prop (file (read getattr map open)))
;;* lmx 920 system/sepolicy/prebuilts/api/29.0/private/system_server.te

(neverallow system_server sdcard_type (dir (read write open)))
;;* lme

;;* lmx 921 system/sepolicy/prebuilts/api/29.0/private/system_server.te

(neverallow system_server sdcard_type (file (ioctl read write getattr lock append map open)))
;;* lme

;;* lmx 934 system/sepolicy/prebuilts/api/29.0/private/system_server.te

(neverallow system_server shell_data_file (file (create unlink link open)))
(neverallow system_server bluetooth_data_file (file (create unlink link open)))
(neverallow system_server nfc_data_file (file (create unlink link open)))
(neverallow system_server app_data_file (file (create unlink link open)))
(neverallow system_server privapp_data_file (file (create unlink link open)))
;;* lme

;;* lmx 945 system/sepolicy/prebuilts/api/29.0/private/system_server.te

(neverallow system_server base_typeattr_640 (file (execute_no_trans)))
;;* lme

;;* lmx 949 system/sepolicy/prebuilts/api/29.0/private/system_server.te

(neverallow system_server base_typeattr_514 (process (transition)))
;;* lme

;;* lmx 950 system/sepolicy/prebuilts/api/29.0/private/system_server.te

(neverallow system_server base_typeattr_167 (process (dyntransition)))
;;* lme

;;* lmx 953 system/sepolicy/prebuilts/api/29.0/private/system_server.te

(neverallow base_typeattr_641 system_ndebug_socket (sock_file (write open)))
;;* lme

;;* lmx 968 system/sepolicy/prebuilts/api/29.0/private/system_server.te

(neverallow base_typeattr_642 device_config_activity_manager_native_boot_prop (property_service (set)))
(neverallow base_typeattr_642 device_config_input_native_boot_prop (property_service (set)))
(neverallow base_typeattr_642 device_config_netd_native_prop (property_service (set)))
(neverallow base_typeattr_642 device_config_runtime_native_boot_prop (property_service (set)))
(neverallow base_typeattr_642 device_config_runtime_native_prop (property_service (set)))
(neverallow base_typeattr_642 device_config_media_native_prop (property_service (set)))
;;* lme

;;* lmx 974 system/sepolicy/prebuilts/api/29.0/private/system_server.te

(neverallow system_server dex2oat_exec (file (execute execute_no_trans)))
;;* lme

;;* lmx 979 system/sepolicy/prebuilts/api/29.0/private/system_server.te

(neverallow system_server data_file_type (file (execute execute_no_trans)))
;;* lme

;;* lmx 984 system/sepolicy/prebuilts/api/29.0/private/system_server.te

(neverallow system_server base_typeattr_643 (blk_file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
;;* lme

;;* lmx 989 system/sepolicy/prebuilts/api/29.0/private/system_server.te

(neverallow system_server self (process (execmem)))
;;* lme

;;* lmx 990 system/sepolicy/prebuilts/api/29.0/private/system_server.te

(neverallow system_server ashmem_device (chr_file (execute)))
;;* lme

;;* lmx 993 system/sepolicy/prebuilts/api/29.0/private/system_server.te

(neverallow system_server system_server_tmpfs (file (execute)))
;;* lme

(allow system_server system_server_startup (fd (use)))
(allow system_server system_server_startup_tmpfs (file (read write map)))
(allow system_server system_server_startup (unix_dgram_socket (write)))
(allow system_server apex_service (service_manager (find)))
(allow system_server apexd (binder (call)))
(allow system_server system_suspend_control_service (service_manager (find)))
(allow system_server system_suspend (binder (call transfer)))
(allow system_suspend system_server (binder (transfer)))
(allow system_server system_suspend (fd (use)))
(allow system_suspend system_server (binder (call transfer)))
(allow system_server system_suspend (binder (transfer)))
(allow system_suspend system_server (fd (use)))
(allow system_server sysfs_wake_lock (file (ioctl read write getattr lock append map open)))
(allow system_server self (capability2 (block_suspend)))
(allow system_server self (cap2_userns (block_suspend)))
(allow system_server system_suspend_server (binder (call transfer)))
(allow system_suspend_server system_server (binder (transfer)))
(allow system_server system_suspend_server (fd (use)))
(allow system_server system_suspend_hwservice (hwservice_manager (find)))
(allow system_server hwservicemanager (binder (call transfer)))
(allow hwservicemanager system_server (binder (call transfer)))
(allow hwservicemanager system_server (dir (search)))
(allow hwservicemanager system_server (file (read map open)))
(allow hwservicemanager system_server (process (getattr)))
(allow system_server hwservicemanager_prop (file (read getattr map open)))
(allow system_server hidl_manager_hwservice (hwservice_manager (find)))
(allow system_server apex_data_file (dir (getattr search)))
(allow system_server apex_data_file (file (ioctl read getattr lock map open)))
(allow system_server metadata_file (dir (search)))
(allow system_server password_slot_metadata_file (dir (ioctl read write getattr lock add_name remove_name search open)))
(allow system_server password_slot_metadata_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow system_server proc_pressure_mem (file (ioctl read write getattr lock append map open)))
;;* lmx 1030 system/sepolicy/prebuilts/api/29.0/private/system_server.te

(neverallow system_server dexoptanalyzer_exec (file (execute execute_no_trans)))
;;* lme

;;* lmx 1033 system/sepolicy/prebuilts/api/29.0/private/system_server.te

(neverallow system_server base_typeattr_258 (process (ptrace)))
;;* lme

;;* lmx 1037 system/sepolicy/prebuilts/api/29.0/private/system_server.te

(neverallow system_server system_server (capability (sys_resource)))
(neverallow system_server system_server (cap_userns (sys_resource)))
;;* lme

;;* lmx 1040 system/sepolicy/prebuilts/api/29.0/private/system_server.te

(neverallow base_typeattr_212 password_slot_metadata_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton add_name remove_name reparent search rmdir open audit_access execmod)))
;;* lme

;;* lmx 1045 system/sepolicy/prebuilts/api/29.0/private/system_server.te

(neverallow base_typeattr_212 password_slot_metadata_file (file (ioctl read write create setattr lock relabelfrom append map unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod open audit_access)))
(neverallow base_typeattr_212 password_slot_metadata_file (lnk_file (ioctl read write create setattr lock relabelfrom append map unlink link rename execute quotaon mounton open audit_access execmod)))
(neverallow base_typeattr_212 password_slot_metadata_file (sock_file (ioctl read write create setattr lock relabelfrom append map unlink link rename execute quotaon mounton open audit_access execmod)))
(neverallow base_typeattr_212 password_slot_metadata_file (fifo_file (ioctl read write create setattr lock relabelfrom append map unlink link rename execute quotaon mounton open audit_access execmod)))
;;* lme

;;* lmx 1046 system/sepolicy/prebuilts/api/29.0/private/system_server.te

(neverallow base_typeattr_212 password_slot_metadata_file (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod open audit_access)))
(neverallow base_typeattr_212 password_slot_metadata_file (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton open audit_access execmod)))
(neverallow base_typeattr_212 password_slot_metadata_file (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton open audit_access execmod)))
(neverallow base_typeattr_212 password_slot_metadata_file (fifo_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton open audit_access execmod)))
;;* lme

(typetransition system_server_startup tmpfs file system_server_startup_tmpfs)
(allow system_server_startup system_server_startup_tmpfs (file (read write getattr map)))
(allow system_server_startup self (process (execmem)))
(allow system_server_startup system_server_startup_tmpfs (file (read write map execute open)))
(allow system_server_startup dalvikcache_data_file (dir (ioctl read getattr lock search open)))
(allow system_server_startup dalvikcache_data_file (file (ioctl read getattr lock map execute open)))
(allow system_server_startup mnt_expand_file (dir (getattr)))
(allow system_server_startup self (process (setcurrent)))
(allow system_server_startup system_server (process (dyntransition)))
(allow system_server_startup zygote (process (sigchld)))
(allow init system_suspend_exec (file (read getattr map execute open)))
(allow init system_suspend (process (transition)))
(allow system_suspend system_suspend_exec (file (read getattr map execute entrypoint open)))
(dontaudit init system_suspend (process (noatsecure)))
(allow init system_suspend (process (siginh rlimitinh)))
(typetransition init system_suspend_exec process system_suspend)
(allow system_suspend servicemanager (binder (call transfer)))
(allow servicemanager system_suspend (dir (search)))
(allow servicemanager system_suspend (file (read open)))
(allow servicemanager system_suspend (process (getattr)))
(allow system_suspend system_suspend_control_service (service_manager (add find)))
;;* lmx 8 system/sepolicy/prebuilts/api/29.0/private/system_suspend.te

(neverallow base_typeattr_644 system_suspend_control_service (service_manager (add)))
;;* lme

(allow system_suspend sysfs_power (file (ioctl read write getattr lock append map open)))
(allow system_suspend self (capability2 (block_suspend)))
(allow system_suspend self (cap2_userns (block_suspend)))
(allow system_suspend sysfs_wake_lock (file (ioctl read write getattr lock append map open)))
;;* lmx 25 system/sepolicy/prebuilts/api/29.0/private/system_suspend.te

(neverallow base_typeattr_645 system_suspend_control_service (service_manager (find)))
;;* lme

(allow init tombstoned_exec (file (read getattr map execute open)))
(allow init tombstoned (process (transition)))
(allow tombstoned tombstoned_exec (file (read getattr map execute entrypoint open)))
(dontaudit init tombstoned (process (noatsecure)))
(allow init tombstoned (process (siginh rlimitinh)))
(typetransition init tombstoned_exec process tombstoned)
(allow init toolbox_exec (file (read getattr map execute open)))
(allow init toolbox (process (transition)))
(allow toolbox toolbox_exec (file (read getattr map execute entrypoint open)))
(dontaudit init toolbox (process (noatsecure)))
(allow init toolbox (process (siginh rlimitinh)))
(typetransition init toolbox_exec process toolbox)
(allow init traced_exec (file (read getattr map execute open)))
(allow init traced (process (transition)))
(allow traced traced_exec (file (read getattr map execute entrypoint open)))
(dontaudit init traced (process (noatsecure)))
(allow init traced (process (siginh rlimitinh)))
(typetransition init traced_exec process traced)
(typetransition traced tmpfs file traced_tmpfs)
(allow traced traced_tmpfs (file (read write getattr map)))
(allow traced self (capability (sys_nice)))
(allow traced self (cap_userns (sys_nice)))
(allow traced perfetto (fd (use)))
(allow traced shell (fd (use)))
(allow traced shell (fifo_file (read write)))
(allow traced perfetto_traces_data_file (file (read write)))
(allow traced traceur_app (fd (use)))
(allow traced trace_data_file (file (read write)))
(allow traced iorapd (fd (use)))
(allow traced iorapd_tmpfs (file (read write)))
(allow traced property_socket (sock_file (write)))
(allow traced init (unix_stream_socket (connectto)))
(allow traced system_trace_prop (property_service (set)))
(allow traced system_trace_prop (file (read getattr map open)))
(allow traced property_socket (sock_file (write)))
(allow traced init (unix_stream_socket (connectto)))
(allow traced traced_lazy_prop (property_service (set)))
(allow traced traced_lazy_prop (file (read getattr map open)))
;;* lmx 52 system/sepolicy/prebuilts/api/29.0/private/traced.te

(neverallow traced self (process (execmem)))
;;* lme

;;* lmx 55 system/sepolicy/prebuilts/api/29.0/private/traced.te

(neverallow traced dev_type (blk_file (read write)))
;;* lme

;;* lmx 58 system/sepolicy/prebuilts/api/29.0/private/traced.te

(neverallow traced domain (process (ptrace)))
;;* lme

;;* lmx 70 system/sepolicy/prebuilts/api/29.0/private/traced.te

(neverallow traced base_typeattr_646 (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton add_name remove_name reparent search rmdir open audit_access execmod)))
;;* lme

;;* lmx 71 system/sepolicy/prebuilts/api/29.0/private/traced.te

(neverallow traced system_data_file (dir (ioctl read write create setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton add_name remove_name reparent rmdir open audit_access execmod)))
;;* lme

;;* lmx 72 system/sepolicy/prebuilts/api/29.0/private/traced.te

(neverallow traced zoneinfo_data_file (dir (write create setattr relabelfrom relabelto append map unlink link rename execute quotaon mounton add_name remove_name reparent rmdir audit_access execmod)))
;;* lme

;;* lmx 73 system/sepolicy/prebuilts/api/29.0/private/traced.te

(neverallow traced base_typeattr_438 (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton open audit_access execmod)))
;;* lme

;;* lmx 80 system/sepolicy/prebuilts/api/29.0/private/traced.te

(neverallow traced base_typeattr_647 (file (ioctl read create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod open audit_access)))
;;* lme

;;* lmx 83 system/sepolicy/prebuilts/api/29.0/private/traced.te

(neverallow base_typeattr_166 traced (process (transition)))
;;* lme

;;* lmx 84 system/sepolicy/prebuilts/api/29.0/private/traced.te

(neverallow base_typeattr_167 traced (process (dyntransition)))
;;* lme

(allow init traced_probes_exec (file (read getattr map execute open)))
(allow init traced_probes (process (transition)))
(allow traced_probes traced_probes_exec (file (read getattr map execute entrypoint open)))
(dontaudit init traced_probes (process (noatsecure)))
(allow init traced_probes (process (siginh rlimitinh)))
(typetransition init traced_probes_exec process traced_probes)
(allow traced_probes traced (fd (use)))
(allow traced_probes traced_tmpfs (file (read write getattr map)))
(allow traced_probes traced_producer_socket (sock_file (write)))
(allow traced_probes traced (unix_stream_socket (connectto)))
(allow traced_probes debugfs_tracing (dir (ioctl read getattr lock search open)))
(allow traced_probes debugfs_tracing (file (ioctl read write getattr lock append map open)))
(allow traced_probes debugfs_trace_marker (file (getattr)))
(allow traced_probes self (capability (sys_nice)))
(allow traced_probes self (cap_userns (sys_nice)))
(allow traced_probes domain (dir (ioctl read getattr lock search open)))
(allow traced_probes domain (file (ioctl read getattr lock map open)))
(allow traced_probes domain (lnk_file (ioctl read getattr lock map open)))
(allow traced_probes packages_list_file (file (ioctl read getattr lock map open)))
(allow traced_probes kmsg_device (chr_file (write)))
(allow traced_probes system_file (dir (read open)))
(allow traced_probes self (capability (dac_read_search)))
(allow traced_probes self (cap_userns (dac_read_search)))
(allow traced_probes apk_data_file (dir (read getattr search open)))
(allow traced_probes dalvikcache_data_file (dir (read getattr search open)))
(allow traced_probes system_app_data_file (dir (read getattr search open)))
(allow traced_probes backup_data_file (dir (read getattr search open)))
(allow traced_probes bootstat_data_file (dir (read getattr search open)))
(allow traced_probes update_engine_data_file (dir (read getattr search open)))
(allow traced_probes update_engine_log_data_file (dir (read getattr search open)))
(allow traced_probes user_profile_data_file (dir (read getattr search open)))
(allow traced_probes atrace_exec (file (read getattr map execute open)))
(allow traced_probes atrace (process (transition)))
(allow atrace atrace_exec (file (read getattr map execute entrypoint open)))
(allow atrace traced_probes (process (sigchld)))
(dontaudit traced_probes atrace (process (noatsecure)))
(allow traced_probes atrace (process (siginh rlimitinh)))
(typetransition traced_probes atrace_exec process atrace)
(allow traced_probes atrace (process (sigkill)))
(allow traced_probes proc_meminfo (file (ioctl read getattr lock map open)))
(allow traced_probes proc_stat (file (ioctl read getattr lock map open)))
(allow traced_probes proc_vmstat (file (ioctl read getattr lock map open)))
;;* lmx 87 system/sepolicy/prebuilts/api/29.0/private/traced_probes.te

(neverallow traced_probes self (process (execmem)))
;;* lme

;;* lmx 90 system/sepolicy/prebuilts/api/29.0/private/traced_probes.te

(neverallow traced_probes dev_type (blk_file (read write)))
;;* lme

;;* lmx 93 system/sepolicy/prebuilts/api/29.0/private/traced_probes.te

(neverallow traced_probes domain (process (ptrace)))
;;* lme

;;* lmx 112 system/sepolicy/prebuilts/api/29.0/private/traced_probes.te

(neverallow traced_probes base_typeattr_648 (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton add_name remove_name reparent search rmdir open audit_access execmod)))
;;* lme

;;* lmx 113 system/sepolicy/prebuilts/api/29.0/private/traced_probes.te

(neverallow traced_probes system_data_file (dir (ioctl read write create setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton add_name remove_name reparent rmdir open audit_access execmod)))
;;* lme

;;* lmx 114 system/sepolicy/prebuilts/api/29.0/private/traced_probes.te

(neverallow traced_probes zoneinfo_data_file (dir (write create setattr relabelfrom relabelto append map unlink link rename execute quotaon mounton add_name remove_name reparent rmdir audit_access execmod)))
;;* lme

;;* lmx 115 system/sepolicy/prebuilts/api/29.0/private/traced_probes.te

(neverallow traced_probes base_typeattr_438 (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton open audit_access execmod)))
;;* lme

;;* lmx 121 system/sepolicy/prebuilts/api/29.0/private/traced_probes.te

(neverallow traced_probes base_typeattr_649 (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod open audit_access)))
;;* lme

;;* lmx 124 system/sepolicy/prebuilts/api/29.0/private/traced_probes.te

(neverallow base_typeattr_166 traced_probes (process (transition)))
;;* lme

;;* lmx 125 system/sepolicy/prebuilts/api/29.0/private/traced_probes.te

(neverallow base_typeattr_167 traced_probes (process (dyntransition)))
;;* lme

(typetransition traceur_app tmpfs file appdomain_tmpfs)
(allow traceur_app appdomain_tmpfs (file (read write getattr map execute)))
;;* lmx 3 system/sepolicy/prebuilts/api/29.0/private/traceur_app.te

(neverallow base_typeattr_650 base_typeattr_651 (file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
;;* lme

;;* lmx 3 system/sepolicy/prebuilts/api/29.0/private/traceur_app.te

(neverallow base_typeattr_652 traceur_app (file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
;;* lme

;;* lmx 3 system/sepolicy/prebuilts/api/29.0/private/traceur_app.te

(neverallow base_typeattr_653 traceur_app (process (ptrace)))
;;* lme

(allow traceur_app debugfs_tracing (file (ioctl read write getattr lock append map open)))
(allow traceur_app debugfs_tracing_debug (dir (ioctl read getattr lock search open)))
(allow traceur_app trace_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow traceur_app trace_data_file (dir (ioctl read write getattr lock add_name remove_name search open)))
(allow traceur_app atrace_exec (file (ioctl read getattr lock map execute execute_no_trans open)))
(allow traceur_app perfetto_exec (file (ioctl read getattr lock map execute execute_no_trans open)))
(allow traceur_app traced_consumer_socket (sock_file (write)))
(allow traceur_app traced (unix_stream_socket (connectto)))
(dontaudit traceur_app debugfs_tracing_debug (file (audit_access)))
(allow init tzdatacheck_exec (file (read getattr map execute open)))
(allow init tzdatacheck (process (transition)))
(allow tzdatacheck tzdatacheck_exec (file (read getattr map execute entrypoint open)))
(dontaudit init tzdatacheck (process (noatsecure)))
(allow init tzdatacheck (process (siginh rlimitinh)))
(typetransition init tzdatacheck_exec process tzdatacheck)
(typetransition ueventd tmpfs file ueventd_tmpfs)
(allow ueventd ueventd_tmpfs (file (read write getattr map)))
(allow init uncrypt_exec (file (read getattr map execute open)))
(allow init uncrypt (process (transition)))
(allow uncrypt uncrypt_exec (file (read getattr map execute entrypoint open)))
(dontaudit init uncrypt (process (noatsecure)))
(allow init uncrypt (process (siginh rlimitinh)))
(typetransition init uncrypt_exec process uncrypt)
(typetransition untrusted_app tmpfs file appdomain_tmpfs)
(allow untrusted_app appdomain_tmpfs (file (read write getattr map execute)))
;;* lmx 22 system/sepolicy/prebuilts/api/29.0/private/untrusted_app.te

(neverallow base_typeattr_654 base_typeattr_655 (file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
;;* lme

;;* lmx 22 system/sepolicy/prebuilts/api/29.0/private/untrusted_app.te

(neverallow base_typeattr_656 untrusted_app (file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
;;* lme

;;* lmx 22 system/sepolicy/prebuilts/api/29.0/private/untrusted_app.te

(neverallow base_typeattr_657 untrusted_app (process (ptrace)))
;;* lme

(typetransition untrusted_app_25 tmpfs file appdomain_tmpfs)
(allow untrusted_app_25 appdomain_tmpfs (file (read write getattr map execute)))
;;* lmx 24 system/sepolicy/prebuilts/api/29.0/private/untrusted_app_25.te

(neverallow base_typeattr_658 base_typeattr_659 (file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
;;* lme

;;* lmx 24 system/sepolicy/prebuilts/api/29.0/private/untrusted_app_25.te

(neverallow base_typeattr_660 untrusted_app_25 (file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
;;* lme

;;* lmx 24 system/sepolicy/prebuilts/api/29.0/private/untrusted_app_25.te

(neverallow base_typeattr_661 untrusted_app_25 (process (ptrace)))
;;* lme

(allow untrusted_app_25 net_dns_prop (file (read getattr map open)))
(auditallow untrusted_app_25 net_dns_prop (file (read)))
(allow untrusted_app_25 proc_misc (file (ioctl read getattr lock map open)))
(allow untrusted_app_25 proc_tty_drivers (file (ioctl read getattr lock map open)))
(allow untrusted_app_25 apk_data_file (file (execmod)))
(allow untrusted_app_25 app_data_file (file (execmod)))
(allow untrusted_app_25 asec_public_file (file (execmod)))
(allow untrusted_app_25 app_data_file (file (execute_no_trans)))
(auditallow untrusted_app_25 app_data_file (file (execute execute_no_trans)))
(allow untrusted_app_25 dex2oat_exec (file (ioctl read getattr lock map execute execute_no_trans open)))
(allow untrusted_app_25 ashmem_device (chr_file (ioctl read write getattr lock append map open)))
(auditallow untrusted_app_25 ashmem_device (chr_file (open)))
(typetransition untrusted_app_27 tmpfs file appdomain_tmpfs)
(allow untrusted_app_27 appdomain_tmpfs (file (read write getattr map execute)))
;;* lmx 25 system/sepolicy/prebuilts/api/29.0/private/untrusted_app_27.te

(neverallow base_typeattr_662 base_typeattr_663 (file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
;;* lme

;;* lmx 25 system/sepolicy/prebuilts/api/29.0/private/untrusted_app_27.te

(neverallow base_typeattr_664 untrusted_app_27 (file (ioctl read write create setattr lock relabelfrom append unlink link rename open)))
;;* lme

;;* lmx 25 system/sepolicy/prebuilts/api/29.0/private/untrusted_app_27.te

(neverallow base_typeattr_665 untrusted_app_27 (process (ptrace)))
;;* lme

(allow untrusted_app_27 apk_data_file (file (execmod)))
(allow untrusted_app_27 app_data_file (file (execmod)))
(allow untrusted_app_27 asec_public_file (file (execmod)))
(allow untrusted_app_27 app_data_file (file (execute_no_trans)))
(auditallow untrusted_app_27 app_data_file (file (execute execute_no_trans)))
(allow untrusted_app_27 dex2oat_exec (file (ioctl read getattr lock map execute execute_no_trans open)))
(allow untrusted_app_27 ashmem_device (chr_file (ioctl read write getattr lock append map open)))
(auditallow untrusted_app_27 ashmem_device (chr_file (open)))
(allow untrusted_app_all privapp_data_file (file (ioctl read getattr lock map execute open)))
(allow untrusted_app_all app_data_file (file (ioctl read getattr lock map execute open)))
(auditallow untrusted_app_all app_data_file (file (execute)))
(allow untrusted_app_all system_linker_exec (file (execute_no_trans)))
(allow untrusted_app_all privapp_data_file (lnk_file (ioctl read getattr lock map open)))
(allow untrusted_app_all app_data_file (lnk_file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow untrusted_app_all app_data_file (sock_file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow untrusted_app_all app_data_file (fifo_file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow untrusted_app_all app_exec_data_file (file (ioctl read getattr lock map unlink execute open)))
(allow untrusted_app_all asec_apk_file (file (ioctl read getattr lock map open)))
(allow untrusted_app_all asec_apk_file (dir (ioctl read getattr lock search open)))
(allow untrusted_app_all asec_public_file (file (execute)))
(allow untrusted_app_all shell_data_file (file (ioctl read getattr lock map open)))
(allow untrusted_app_all shell_data_file (dir (ioctl read getattr lock search open)))
(allow untrusted_app_all trace_data_file (file (read getattr)))
;;* lmx 64 system/sepolicy/prebuilts/api/29.0/private/untrusted_app_all.te

(neverallow untrusted_app_all trace_data_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton add_name remove_name reparent search rmdir open audit_access execmod)))
;;* lme

;;* lmx 65 system/sepolicy/prebuilts/api/29.0/private/untrusted_app_all.te

(neverallow untrusted_app_all trace_data_file (file (write create setattr relabelfrom append unlink link rename open)))
;;* lme

(allow untrusted_app_all apk_tmp_file (file (read getattr)))
(allow untrusted_app_all apk_private_tmp_file (file (read getattr)))
(allow untrusted_app_all system_app_data_file (file (read write getattr)))
(allow untrusted_app_all media_rw_data_file (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
(allow untrusted_app_all media_rw_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow untrusted_app_all mnt_media_rw_file (dir (search)))
(allow untrusted_app_all servicemanager (service_manager (list)))
(allow untrusted_app_all audioserver_service (service_manager (find)))
(allow untrusted_app_all cameraserver_service (service_manager (find)))
(allow untrusted_app_all drmserver_service (service_manager (find)))
(allow untrusted_app_all mediaserver_service (service_manager (find)))
(allow untrusted_app_all mediaextractor_service (service_manager (find)))
(allow untrusted_app_all mediacodec_service (service_manager (find)))
(allow untrusted_app_all mediametrics_service (service_manager (find)))
(allow untrusted_app_all mediadrmserver_service (service_manager (find)))
(allow untrusted_app_all nfc_service (service_manager (find)))
(allow untrusted_app_all radio_service (service_manager (find)))
(allow untrusted_app_all app_api_service (service_manager (find)))
(allow untrusted_app_all vr_manager_service (service_manager (find)))
(allow untrusted_app_all gpu_service (service_manager (find)))
(allow untrusted_app_all gpuservice (binder (call transfer)))
(allow gpuservice untrusted_app_all (binder (transfer)))
(allow untrusted_app_all gpuservice (fd (use)))
(allow untrusted_app_all self (process (ptrace)))
(allow untrusted_app_all runas_app (unix_stream_socket (connectto)))
(allow untrusted_app_all runas_app (process (sigchld)))
(allow untrusted_app_all sysfs_hwrandom (dir (search)))
(allow untrusted_app_all sysfs_hwrandom (file (ioctl read getattr lock map open)))
(allow untrusted_app_all preloads_media_file (dir (ioctl read getattr lock search open)))
(allow untrusted_app_all preloads_media_file (file (ioctl read getattr lock map open)))
(allow untrusted_app_all preloads_data_file (dir (search)))
(allow untrusted_app_all vendor_app_file (dir (read getattr search open)))
(allow untrusted_app_all vendor_app_file (file (ioctl read getattr lock map execute open)))
(allow untrusted_app_all vendor_app_file (lnk_file (read getattr open)))
(allow untrusted_app_all traced (fd (use)))
(allow untrusted_app_all traced_tmpfs (file (read write getattr map)))
(allow untrusted_app_all traced_producer_socket (sock_file (write)))
(allow untrusted_app_all traced (unix_stream_socket (connectto)))
(allow heapprofd untrusted_app_all (process (signal)))
(allow untrusted_app_all heapprofd_exec (file (ioctl read getattr lock map execute execute_no_trans open)))
(allow heapprofd untrusted_app_all (file (ioctl read getattr lock map open)))
(allow heapprofd untrusted_app_all (dir (ioctl read getattr lock search open)))
(allow untrusted_app_all system_server (udp_socket (read write getattr connect getopt setopt recvfrom sendto)))
(allow untrusted_app_all rs_exec (file (read getattr map execute open)))
(allow untrusted_app_all rs (process (transition)))
(allow rs rs_exec (file (read getattr map execute entrypoint open)))
(allow rs untrusted_app_all (process (sigchld)))
(dontaudit untrusted_app_all rs (process (noatsecure)))
(allow untrusted_app_all rs (process (siginh rlimitinh)))
(typetransition untrusted_app_all rs_exec process rs)
(dontaudit untrusted_app_all net_dns_prop (file (read)))
(dontaudit untrusted_app_all proc_stat (file (read)))
(dontaudit untrusted_app_all proc_vmstat (file (read)))
(dontaudit untrusted_app_all proc_uptime (file (read)))
(typetransition untrusted_app_all devpts chr_file untrusted_app_all_devpts)
(allow untrusted_app_all untrusted_app_all_devpts (chr_file (ioctl read write getattr open)))
(allowx untrusted_app_all untrusted_app_all_devpts (ioctl chr_file ((range 0x5401 0x5403) 0x540b (range 0x540e 0x5411) (range 0x5413 0x5414) (range 0x5450 0x5451))))
;;* lmx 174 system/sepolicy/prebuilts/api/29.0/private/untrusted_app_all.te

(neverallowx base_typeattr_167 untrusted_app_all_devpts (ioctl chr_file (0x5412)))
;;* lme

(dontaudit untrusted_app_all system_data_file (dir (write)))
(allow untrusted_app_all ashmemd (binder (call transfer)))
(allow ashmemd untrusted_app_all (binder (transfer)))
(allow untrusted_app_all ashmemd (fd (use)))
(allow untrusted_app_all ashmem_device (chr_file (ioctl read write getattr lock append map)))
(allow init update_engine_exec (file (read getattr map execute open)))
(allow init update_engine (process (transition)))
(allow update_engine update_engine_exec (file (read getattr map execute entrypoint open)))
(dontaudit init update_engine (process (noatsecure)))
(allow init update_engine (process (siginh rlimitinh)))
(typetransition init update_engine_exec process update_engine)
(allow update_engine_common postinstall_file (file (read getattr map execute open)))
(allow update_engine_common postinstall (process (transition)))
(allow postinstall postinstall_file (file (read getattr map execute entrypoint open)))
(allow postinstall update_engine_common (process (sigchld)))
(dontaudit update_engine_common postinstall (process (noatsecure)))
(allow update_engine_common postinstall (process (siginh rlimitinh)))
(typetransition update_engine_common postinstall_file process postinstall)
(allow init update_verifier_exec (file (read getattr map execute open)))
(allow init update_verifier (process (transition)))
(allow update_verifier update_verifier_exec (file (read getattr map execute entrypoint open)))
(dontaudit init update_verifier (process (noatsecure)))
(allow init update_verifier (process (siginh rlimitinh)))
(typetransition init update_verifier_exec process update_verifier)
(allow init usbd_exec (file (read getattr map execute open)))
(allow init usbd (process (transition)))
(allow usbd usbd_exec (file (read getattr map execute entrypoint open)))
(dontaudit init usbd (process (noatsecure)))
(allow init usbd (process (siginh rlimitinh)))
(typetransition init usbd_exec process usbd)
(allow usbd system_prop (file (read getattr map open)))
(allow usbd property_socket (sock_file (write)))
(allow usbd init (unix_stream_socket (connectto)))
(allow usbd ctl_default_prop (property_service (set)))
(allow usbd ctl_default_prop (file (read getattr map open)))
(allow init vdc_exec (file (read getattr map execute open)))
(allow init vdc (process (transition)))
(allow vdc vdc_exec (file (read getattr map execute entrypoint open)))
(dontaudit init vdc (process (noatsecure)))
(allow init vdc (process (siginh rlimitinh)))
(typetransition init vdc_exec process vdc)
(dontaudit vendor_init sysfs (dir (write)))
(typetransition viewcompiler tmpfs file viewcompiler_tmpfs)
(allow viewcompiler viewcompiler_tmpfs (file (read write getattr map)))
(allow viewcompiler installd (fd (use)))
(allow viewcompiler app_data_file (file (write getattr)))
(allow viewcompiler apk_data_file (file (read)))
;;* lmx 25 system/sepolicy/prebuilts/api/29.0/private/viewcompiler.te

(neverallow viewcompiler privapp_data_file (file (write create setattr relabelfrom append unlink link rename)))
;;* lme

(allow init virtual_touchpad_exec (file (read getattr map execute open)))
(allow init virtual_touchpad (process (transition)))
(allow virtual_touchpad virtual_touchpad_exec (file (read getattr map execute entrypoint open)))
(dontaudit init virtual_touchpad (process (noatsecure)))
(allow init virtual_touchpad (process (siginh rlimitinh)))
(typetransition init virtual_touchpad_exec process virtual_touchpad)
(allow init vold_exec (file (read getattr map execute open)))
(allow init vold (process (transition)))
(allow vold vold_exec (file (read getattr map execute entrypoint open)))
(dontaudit init vold (process (noatsecure)))
(allow init vold (process (siginh rlimitinh)))
(typetransition init vold_exec process vold)
(allow vold sgdisk_exec (file (read getattr map execute open)))
(allow vold sgdisk (process (transition)))
(allow sgdisk sgdisk_exec (file (read getattr map execute entrypoint open)))
(allow sgdisk vold (process (sigchld)))
(dontaudit vold sgdisk (process (noatsecure)))
(allow vold sgdisk (process (siginh rlimitinh)))
(typetransition vold sgdisk_exec process sgdisk)
(allow vold sdcardd_exec (file (read getattr map execute open)))
(allow vold sdcardd (process (transition)))
(allow sdcardd sdcardd_exec (file (read getattr map execute entrypoint open)))
(allow sdcardd vold (process (sigchld)))
(dontaudit vold sdcardd (process (noatsecure)))
(allow vold sdcardd (process (siginh rlimitinh)))
(typetransition vold sdcardd_exec process sdcardd)
(allow vold blkid_exec (file (read getattr map execute open)))
(allow vold blkid (process (transition)))
(allow blkid blkid_exec (file (read getattr map execute entrypoint open)))
(allow blkid vold (process (sigchld)))
(dontaudit vold blkid (process (noatsecure)))
(allow vold blkid (process (siginh rlimitinh)))
(allow vold blkid_exec (file (read getattr map execute open)))
(allow vold blkid_untrusted (process (transition)))
(allow blkid_untrusted blkid_exec (file (read getattr map execute entrypoint open)))
(allow blkid_untrusted vold (process (sigchld)))
(dontaudit vold blkid_untrusted (process (noatsecure)))
(allow vold blkid_untrusted (process (siginh rlimitinh)))
(allow vold fsck_exec (file (read getattr map execute open)))
(allow vold fsck (process (transition)))
(allow fsck fsck_exec (file (read getattr map execute entrypoint open)))
(allow fsck vold (process (sigchld)))
(dontaudit vold fsck (process (noatsecure)))
(allow vold fsck (process (siginh rlimitinh)))
(allow vold fsck_exec (file (read getattr map execute open)))
(allow vold fsck_untrusted (process (transition)))
(allow fsck_untrusted fsck_exec (file (read getattr map execute entrypoint open)))
(allow fsck_untrusted vold (process (sigchld)))
(dontaudit vold fsck_untrusted (process (noatsecure)))
(allow vold fsck_untrusted (process (siginh rlimitinh)))
(typetransition vold storage_file dir storage_stub_file)
(typetransition vold mnt_media_rw_file dir mnt_media_rw_stub_file)
(allow vold vold_prepare_subdirs_exec (file (read getattr map execute open)))
(allow vold vold_prepare_subdirs (process (transition)))
(allow vold_prepare_subdirs vold_prepare_subdirs_exec (file (read getattr map execute entrypoint open)))
(allow vold_prepare_subdirs vold (process (sigchld)))
(dontaudit vold vold_prepare_subdirs (process (noatsecure)))
(allow vold vold_prepare_subdirs (process (siginh rlimitinh)))
(typetransition vold vold_prepare_subdirs_exec process vold_prepare_subdirs)
(allow vold_prepare_subdirs system_file (file (execute_no_trans)))
(allow vold_prepare_subdirs shell_exec (file (ioctl read getattr lock map execute execute_no_trans open)))
(allow vold_prepare_subdirs toolbox_exec (file (ioctl read getattr lock map execute execute_no_trans open)))
(allow vold_prepare_subdirs devpts (chr_file (ioctl read write getattr lock append map open)))
(allow vold_prepare_subdirs vold (fd (use)))
(allow vold_prepare_subdirs vold (fifo_file (read write)))
(allow vold_prepare_subdirs file_contexts_file (file (ioctl read getattr lock map open)))
(allow vold_prepare_subdirs self (capability (chown dac_override dac_read_search fowner)))
(allow vold_prepare_subdirs self (cap_userns (chown dac_override dac_read_search fowner)))
(allow vold_prepare_subdirs self (process (setfscreate)))
(allow vold_prepare_subdirs system_data_file (dir (read write relabelfrom add_name remove_name rmdir open)))
(allow vold_prepare_subdirs vendor_data_file (dir (read write relabelfrom add_name remove_name rmdir open)))
(allow vold_prepare_subdirs vold_data_file (dir (ioctl read write create getattr setattr lock relabelto rename add_name remove_name reparent search rmdir open)))
(allow vold_prepare_subdirs backup_data_file (dir (ioctl read write create getattr setattr lock relabelto rename add_name remove_name reparent search rmdir open)))
(allow vold_prepare_subdirs fingerprint_vendor_data_file (dir (ioctl read write create getattr setattr lock relabelto rename add_name remove_name reparent search rmdir open)))
(allow vold_prepare_subdirs face_vendor_data_file (dir (ioctl read write create getattr setattr lock relabelto rename add_name remove_name reparent search rmdir open)))
(allow vold_prepare_subdirs iris_vendor_data_file (dir (ioctl read write create getattr setattr lock relabelto rename add_name remove_name reparent search rmdir open)))
(allow vold_prepare_subdirs storaged_data_file (dir (ioctl read write create getattr setattr lock relabelto rename add_name remove_name reparent search rmdir open)))
(allow vold_prepare_subdirs rollback_data_file (dir (ioctl read write create getattr setattr lock relabelto rename add_name remove_name reparent search rmdir open)))
(allow vold_prepare_subdirs system_data_file (file (getattr unlink)))
(allow vold_prepare_subdirs vold_data_file (file (getattr unlink)))
(allow vold_prepare_subdirs backup_data_file (file (getattr unlink)))
(allow vold_prepare_subdirs fingerprint_vendor_data_file (file (getattr unlink)))
(allow vold_prepare_subdirs face_vendor_data_file (file (getattr unlink)))
(allow vold_prepare_subdirs iris_vendor_data_file (file (getattr unlink)))
(allow vold_prepare_subdirs storaged_data_file (file (getattr unlink)))
(allow vold_prepare_subdirs rollback_data_file (file (getattr unlink)))
(dontaudit vold_prepare_subdirs proc (file (ioctl read getattr lock map open)))
(dontaudit vold_prepare_subdirs unlabeled (file (ioctl read getattr lock map open)))
(allow init vr_hwc_exec (file (read getattr map execute open)))
(allow init vr_hwc (process (transition)))
(allow vr_hwc vr_hwc_exec (file (read getattr map execute entrypoint open)))
(dontaudit init vr_hwc (process (noatsecure)))
(allow init vr_hwc (process (siginh rlimitinh)))
(typetransition init vr_hwc_exec process vr_hwc)
(allow init wait_for_keymaster_exec (file (read getattr map execute open)))
(allow init wait_for_keymaster (process (transition)))
(allow wait_for_keymaster wait_for_keymaster_exec (file (read getattr map execute entrypoint open)))
(dontaudit init wait_for_keymaster (process (noatsecure)))
(allow init wait_for_keymaster (process (siginh rlimitinh)))
(typetransition init wait_for_keymaster_exec process wait_for_keymaster)
(allow wait_for_keymaster kmsg_device (chr_file (write lock append map open)))
(allow init watchdogd_exec (file (read getattr map execute open)))
(allow init watchdogd (process (transition)))
(allow watchdogd watchdogd_exec (file (read getattr map execute entrypoint open)))
(dontaudit init watchdogd (process (noatsecure)))
(allow init watchdogd (process (siginh rlimitinh)))
(typetransition init watchdogd_exec process watchdogd)
(typetransition webview_zygote tmpfs file webview_zygote_tmpfs)
(allow webview_zygote webview_zygote_tmpfs (file (read write getattr map)))
(allow webview_zygote apk_data_file (dir (ioctl read getattr lock search open)))
(allow webview_zygote apk_data_file (file (ioctl read getattr lock map execute open)))
(allow webview_zygote shared_relro_file (dir (search)))
(allow webview_zygote shared_relro_file (file (ioctl read getattr lock map open)))
(allow webview_zygote self (capability (setgid setuid)))
(allow webview_zygote self (cap_userns (setgid setuid)))
(allow webview_zygote self (capability (setpcap)))
(allow webview_zygote self (cap_userns (setpcap)))
(allow webview_zygote self (process (setcurrent)))
(allow webview_zygote isolated_app (process (dyntransition)))
(allow webview_zygote dalvikcache_data_file (dir (ioctl read getattr lock search open)))
(allow webview_zygote dalvikcache_data_file (lnk_file (ioctl read getattr lock map open)))
(allow webview_zygote dalvikcache_data_file (file (ioctl read getattr lock map execute open)))
(allow webview_zygote self (process (execmem)))
(allow webview_zygote debugfs_trace_marker (file (getattr)))
(allow webview_zygote system_server (process (getpgid)))
(allow webview_zygote isolated_app (process (setpgid)))
(dontaudit webview_zygote mnt_expand_file (dir (getattr)))
(dontaudit webview_zygote dex2oat_exec (file (execute)))
(allow webview_zygote seapp_contexts_file (file (ioctl read getattr lock map open)))
(allow webview_zygote selinuxfs (dir (ioctl read getattr lock search open)))
(allow webview_zygote selinuxfs (file (ioctl read getattr lock map open)))
(allow webview_zygote selinuxfs (lnk_file (ioctl read getattr lock map open)))
(allow webview_zygote selinuxfs (file (write lock append map open)))
(allow webview_zygote kernel (security (check_context)))
(allow webview_zygote selinuxfs (dir (ioctl read getattr lock search open)))
(allow webview_zygote selinuxfs (file (ioctl read getattr lock map open)))
(allow webview_zygote selinuxfs (lnk_file (ioctl read getattr lock map open)))
(allow webview_zygote selinuxfs (file (write lock append map open)))
(allow webview_zygote kernel (security (compute_av)))
(allow webview_zygote self (netlink_selinux_socket (read write create getattr setattr lock relabelfrom relabelto append bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(allow webview_zygote system_file (dir (ioctl read getattr lock search open)))
(allow webview_zygote zygote_tmpfs (file (read)))
(allow webview_zygote zygote (fd (use)))
(allow webview_zygote zygote (process (sigchld)))
(allow webview_zygote vendor_overlay_file (dir (ioctl read getattr lock search open)))
(allow webview_zygote vendor_overlay_file (file (ioctl read getattr lock map open)))
(allow webview_zygote vendor_overlay_file (lnk_file (ioctl read getattr lock map open)))
(allow webview_zygote same_process_hal_file (file (read getattr map execute open)))
(allow webview_zygote system_data_file (lnk_file (ioctl read getattr lock map open)))
;;* lmx 85 system/sepolicy/prebuilts/api/29.0/private/webview_zygote.te

(neverallow webview_zygote base_typeattr_513 (process (dyntransition)))
;;* lme

;;* lmx 88 system/sepolicy/prebuilts/api/29.0/private/webview_zygote.te

(neverallow webview_zygote base_typeattr_514 (process (transition)))
;;* lme

;;* lmx 92 system/sepolicy/prebuilts/api/29.0/private/webview_zygote.te

(neverallow webview_zygote base_typeattr_167 (file (execute_no_trans)))
;;* lme

;;* lmx 96 system/sepolicy/prebuilts/api/29.0/private/webview_zygote.te

(neverallow base_typeattr_515 webview_zygote (process (dyntransition)))
;;* lme

;;* lmx 99 system/sepolicy/prebuilts/api/29.0/private/webview_zygote.te

(neverallow webview_zygote property_socket (sock_file (write)))
;;* lme

;;* lmx 100 system/sepolicy/prebuilts/api/29.0/private/webview_zygote.te

(neverallow webview_zygote property_type (property_service (set)))
;;* lme

;;* lmx 111 system/sepolicy/prebuilts/api/29.0/private/webview_zygote.te

(neverallow webview_zygote shell_data_file (file (ioctl read write getattr lock append map execute execute_no_trans open)))
(neverallow webview_zygote bluetooth_data_file (file (ioctl read write getattr lock append map execute execute_no_trans open)))
(neverallow webview_zygote nfc_data_file (file (ioctl read write getattr lock append map execute execute_no_trans open)))
(neverallow webview_zygote radio_data_file (file (ioctl read write getattr lock append map execute execute_no_trans open)))
(neverallow webview_zygote app_data_file (file (ioctl read write getattr lock append map execute execute_no_trans open)))
(neverallow webview_zygote privapp_data_file (file (ioctl read write getattr lock append map execute execute_no_trans open)))
(neverallow webview_zygote system_app_data_file (file (ioctl read write getattr lock append map execute execute_no_trans open)))
;;* lme

;;* lmx 118 system/sepolicy/prebuilts/api/29.0/private/webview_zygote.te

(neverallow webview_zygote base_typeattr_516 (service_manager (find)))
;;* lme

;;* lmx 121 system/sepolicy/prebuilts/api/29.0/private/webview_zygote.te

(neverallow webview_zygote gpu_device (chr_file (ioctl read write getattr lock append map execute execute_no_trans open)))
;;* lme

;;* lmx 124 system/sepolicy/prebuilts/api/29.0/private/webview_zygote.te

(neverallow webview_zygote cache_file (dir (write create setattr relabelfrom relabelto append map unlink link rename execute quotaon mounton add_name remove_name reparent rmdir audit_access execmod)))
;;* lme

;;* lmx 125 system/sepolicy/prebuilts/api/29.0/private/webview_zygote.te

(neverallow webview_zygote cache_file (file (ioctl write create setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton execute_no_trans entrypoint execmod open audit_access)))
;;* lme

;;* lmx 142 system/sepolicy/prebuilts/api/29.0/private/webview_zygote.te

(neverallow webview_zygote domain (socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow webview_zygote domain (tcp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind name_connect)))
(neverallow webview_zygote domain (udp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind)))
(neverallow webview_zygote domain (rawip_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind)))
(neverallow webview_zygote domain (netlink_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow webview_zygote domain (packet_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow webview_zygote domain (key_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow webview_zygote domain (netlink_route_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write)))
(neverallow webview_zygote domain (netlink_tcpdiag_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write)))
(neverallow webview_zygote domain (netlink_nflog_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow webview_zygote domain (netlink_xfrm_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write)))
(neverallow webview_zygote domain (netlink_audit_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write nlmsg_relay nlmsg_readpriv nlmsg_tty_audit)))
(neverallow webview_zygote domain (netlink_dnrt_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow webview_zygote domain (netlink_kobject_uevent_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow webview_zygote domain (appletalk_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow webview_zygote domain (tun_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind attach_queue)))
(neverallow webview_zygote domain (netlink_iscsi_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow webview_zygote domain (netlink_fib_lookup_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow webview_zygote domain (netlink_connector_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow webview_zygote domain (netlink_netfilter_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow webview_zygote domain (netlink_generic_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow webview_zygote domain (netlink_scsitransport_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow webview_zygote domain (netlink_rdma_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow webview_zygote domain (netlink_crypto_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow webview_zygote domain (sctp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind name_connect association)))
(neverallow webview_zygote domain (icmp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind)))
(neverallow webview_zygote domain (ax25_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow webview_zygote domain (ipx_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow webview_zygote domain (netrom_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow webview_zygote domain (atmpvc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow webview_zygote domain (x25_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow webview_zygote domain (rose_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow webview_zygote domain (decnet_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow webview_zygote domain (atmsvc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow webview_zygote domain (rds_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow webview_zygote domain (irda_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow webview_zygote domain (pppox_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow webview_zygote domain (llc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow webview_zygote domain (can_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow webview_zygote domain (tipc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow webview_zygote domain (bluetooth_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow webview_zygote domain (iucv_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow webview_zygote domain (rxrpc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow webview_zygote domain (isdn_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow webview_zygote domain (phonet_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow webview_zygote domain (ieee802154_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow webview_zygote domain (caif_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow webview_zygote domain (alg_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow webview_zygote domain (nfc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow webview_zygote domain (vsock_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow webview_zygote domain (kcm_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow webview_zygote domain (qipcrtr_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow webview_zygote domain (smc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow webview_zygote domain (xdp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
;;* lme

;;* lmx 151 system/sepolicy/prebuilts/api/29.0/private/webview_zygote.te

(neverallow webview_zygote bluetooth_a2dp_offload_prop (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(neverallow webview_zygote bluetooth_audio_hal_prop (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(neverallow webview_zygote bluetooth_prop (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(neverallow webview_zygote exported_bluetooth_prop (file (ioctl read write create getattr setattr lock append map unlink rename open)))
;;* lme

(allow init wificond_exec (file (read getattr map execute open)))
(allow init wificond (process (transition)))
(allow wificond wificond_exec (file (read getattr map execute entrypoint open)))
(dontaudit init wificond (process (noatsecure)))
(allow init wificond (process (siginh rlimitinh)))
(typetransition init wificond_exec process wificond)
(allow init wpantund_exec (file (read getattr map execute open)))
(allow init wpantund (process (transition)))
(allow wpantund wpantund_exec (file (read getattr map execute entrypoint open)))
(dontaudit init wpantund (process (noatsecure)))
(allow init wpantund (process (siginh rlimitinh)))
(typetransition init wpantund_exec process wpantund)
(allow init zygote_exec (file (read getattr map execute open)))
(allow init zygote (process (transition)))
(allow zygote zygote_exec (file (read getattr map execute entrypoint open)))
(dontaudit init zygote (process (noatsecure)))
(allow init zygote (process (siginh rlimitinh)))
(typetransition init zygote_exec process zygote)
(allow zygote runtime_event_log_tags_file (file (ioctl read getattr lock map open)))
(allow zygote self (capability (chown dac_override dac_read_search fowner setgid setuid)))
(allow zygote self (cap_userns (chown dac_override dac_read_search fowner setgid setuid)))
(allow zygote self (capability (setpcap)))
(allow zygote self (cap_userns (setpcap)))
(allow zygote self (process (setcurrent)))
(allow zygote system_server_startup (process (dyntransition)))
(allow zygote appdomain (process (dyntransition)))
(allow zygote webview_zygote (process (dyntransition)))
(allow zygote app_zygote (process (dyntransition)))
(allow zygote appdomain (dir (getattr search)))
(allow zygote appdomain (file (ioctl read getattr lock map open)))
(allow zygote system_server (process (getpgid setpgid)))
(allow zygote appdomain (process (getpgid setpgid)))
(allow zygote webview_zygote (process (getpgid setpgid)))
(allow zygote app_zygote (process (getpgid setpgid)))
(allow zygote system_data_file (dir (ioctl read getattr lock search open)))
(allow zygote system_data_file (file (ioctl read getattr lock map open)))
(allow zygote dalvikcache_data_file (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
(allow zygote dalvikcache_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow zygote dalvikcache_data_file (lnk_file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow zygote resourcecache_data_file (dir (ioctl read write getattr lock add_name remove_name search open)))
(allow zygote resourcecache_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow zygote dalvikcache_data_file (file (execute)))
(allow zygote self (process (execmem)))
(allow zygote idmap_exec (file (ioctl read getattr lock map execute execute_no_trans open)))
(allow zygote dex2oat_exec (file (ioctl read getattr lock map execute execute_no_trans open)))
(allow zygote vendor_overlay_file (dir (ioctl read getattr lock search open)))
(allow zygote vendor_overlay_file (file (ioctl read getattr lock map open)))
(allow zygote vendor_overlay_file (lnk_file (ioctl read getattr lock map open)))
(allow zygote cgroup (dir (ioctl read write create getattr setattr lock rename add_name remove_name reparent search rmdir open)))
(allow zygote cgroup (file (ioctl read getattr lock map open)))
(allow zygote cgroup (lnk_file (ioctl read getattr lock map open)))
(allow zygote self (capability (sys_admin)))
(allow zygote self (cap_userns (sys_admin)))
(allow zygote pmsg_device (chr_file (getattr)))
(allow zygote debugfs_trace_marker (file (getattr)))
(allow zygote seapp_contexts_file (file (ioctl read getattr lock map open)))
(allow zygote selinuxfs (dir (ioctl read getattr lock search open)))
(allow zygote selinuxfs (file (ioctl read getattr lock map open)))
(allow zygote selinuxfs (lnk_file (ioctl read getattr lock map open)))
(allow zygote selinuxfs (file (write lock append map open)))
(allow zygote kernel (security (check_context)))
(allow zygote selinuxfs (dir (ioctl read getattr lock search open)))
(allow zygote selinuxfs (file (ioctl read getattr lock map open)))
(allow zygote selinuxfs (lnk_file (ioctl read getattr lock map open)))
(allow zygote selinuxfs (file (write lock append map open)))
(allow zygote kernel (security (compute_av)))
(allow zygote self (netlink_selinux_socket (read write create getattr setattr lock relabelfrom relabelto append bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(allow zygote proc_cpuinfo (file (mounton)))
(allow zygote rootfs (dir (mounton)))
(allow zygote tmpfs (filesystem (mount unmount)))
(allow zygote fuse (filesystem (unmount)))
(allow zygote sdcardfs (filesystem (unmount)))
(allow zygote mnt_user_file (dir (ioctl read write create getattr setattr lock rename mounton add_name remove_name reparent search rmdir open)))
(allow zygote mnt_user_file (lnk_file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow zygote mnt_user_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow zygote storage_file (dir (mounton search)))
(allow zygote sdcard_type (dir (ioctl read write create getattr setattr lock rename mounton add_name remove_name reparent search rmdir open)))
(allow zygote media_rw_data_file (dir (ioctl read write create getattr setattr lock rename mounton add_name remove_name reparent search rmdir open)))
(allow zygote sdcard_type (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow zygote media_rw_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(allow zygote mnt_expand_file (dir (getattr)))
(allow zygote zygote_exec (file (ioctl read getattr lock map execute execute_no_trans open)))
(allow zygote statsdw_socket (sock_file (write)))
(allow zygote statsd (unix_dgram_socket (sendto)))
(allow zygote rootfs (dir (ioctl read getattr lock search open)))
(allow zygote rootfs (file (ioctl read getattr lock map open)))
(allow zygote rootfs (lnk_file (ioctl read getattr lock map open)))
(allow zygote system_file (dir (ioctl read getattr lock search open)))
(allow zygote system_file (file (ioctl read getattr lock map open)))
(allow zygote system_file (lnk_file (ioctl read getattr lock map open)))
(allow zygote oemfs (dir (search)))
(allow zygote ion_device (chr_file (ioctl read getattr lock map open)))
(allow zygote tmpfs (dir (ioctl read getattr lock search open)))
(allow zygote same_process_hal_file (file (read getattr map execute open)))
(allow zygote overlay_prop (file (read getattr map open)))
(allow zygote exported_overlay_prop (file (read getattr map open)))
(allow zygote device_config_runtime_native_prop (file (read getattr map open)))
(allow zygote device_config_runtime_native_boot_prop (file (read getattr map open)))
(dontaudit zygote self (capability (sys_resource)))
(dontaudit zygote self (cap_userns (sys_resource)))
;;* lmx 162 system/sepolicy/prebuilts/api/29.0/private/zygote.te

(neverallow zygote base_typeattr_666 (process (dyntransition)))
;;* lme

;;* lmx 168 system/sepolicy/prebuilts/api/29.0/private/zygote.te

(neverallow zygote base_typeattr_667 (file (execute execute_no_trans)))
;;* lme

;;* lmx 176 system/sepolicy/prebuilts/api/29.0/private/zygote.te

(neverallow zygote bluetooth_a2dp_offload_prop (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(neverallow zygote bluetooth_audio_hal_prop (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(neverallow zygote bluetooth_prop (file (ioctl read write create getattr setattr lock append map unlink rename open)))
(neverallow zygote exported_bluetooth_prop (file (ioctl read write create getattr setattr lock append map unlink rename open)))
;;* lme

(typetransition system_server system_data_file sock_file "ndebugsocket" system_ndebug_socket)
(typeattribute base_typeattr_667)
(typeattributeset base_typeattr_667 (and (data_file_type ) (not (dalvikcache_data_file ))))
(typeattribute base_typeattr_666)
(typeattributeset base_typeattr_666 (not (appdomain app_zygote webview_zygote system_server_startup ) ))
(typeattribute base_typeattr_665)
(typeattributeset base_typeattr_665 (and (domain ) (not (crash_dump runas_app untrusted_app_27 ))))
(typeattribute base_typeattr_664)
(typeattributeset base_typeattr_664 (and (appdomain ) (not (runas_app shell untrusted_app_27 ))))
(typeattribute base_typeattr_663)
(typeattributeset base_typeattr_663 (and (domain ) (not (untrusted_app_27 ))))
(typeattribute base_typeattr_662)
(typeattributeset base_typeattr_662 (and (untrusted_app_27 ) (not (runas_app shell ))))
(typeattribute base_typeattr_661)
(typeattributeset base_typeattr_661 (and (domain ) (not (crash_dump runas_app untrusted_app_25 ))))
(typeattribute base_typeattr_660)
(typeattributeset base_typeattr_660 (and (appdomain ) (not (runas_app shell untrusted_app_25 ))))
(typeattribute base_typeattr_659)
(typeattributeset base_typeattr_659 (and (domain ) (not (untrusted_app_25 ))))
(typeattribute base_typeattr_658)
(typeattributeset base_typeattr_658 (and (untrusted_app_25 ) (not (runas_app shell ))))
(typeattribute base_typeattr_657)
(typeattributeset base_typeattr_657 (and (domain ) (not (crash_dump runas_app untrusted_app ))))
(typeattribute base_typeattr_656)
(typeattributeset base_typeattr_656 (and (appdomain ) (not (runas_app shell untrusted_app ))))
(typeattribute base_typeattr_655)
(typeattributeset base_typeattr_655 (and (domain ) (not (untrusted_app ))))
(typeattribute base_typeattr_654)
(typeattributeset base_typeattr_654 (and (untrusted_app ) (not (runas_app shell ))))
(typeattribute base_typeattr_653)
(typeattributeset base_typeattr_653 (and (domain ) (not (crash_dump runas_app traceur_app ))))
(typeattribute base_typeattr_652)
(typeattributeset base_typeattr_652 (and (appdomain ) (not (runas_app shell traceur_app ))))
(typeattribute base_typeattr_651)
(typeattributeset base_typeattr_651 (and (domain ) (not (traceur_app ))))
(typeattribute base_typeattr_650)
(typeattributeset base_typeattr_650 (and (traceur_app ) (not (runas_app shell ))))
(typeattribute base_typeattr_649)
(typeattributeset base_typeattr_649 (and (data_file_type ) (not (packages_list_file zoneinfo_data_file ))))
(typeattribute base_typeattr_648)
(typeattributeset base_typeattr_648 (and (data_file_type ) (not (system_data_file vendor_data_file apk_data_file dalvikcache_data_file user_profile_data_file bootstat_data_file zoneinfo_data_file update_engine_data_file update_engine_log_data_file system_app_data_file backup_data_file ))))
(typeattribute base_typeattr_647)
(typeattributeset base_typeattr_647 (and (data_file_type ) (not (trace_data_file zoneinfo_data_file perfetto_traces_data_file ))))
(typeattribute base_typeattr_646)
(typeattributeset base_typeattr_646 (and (data_file_type ) (not (system_data_file vendor_data_file zoneinfo_data_file ))))
(typeattribute base_typeattr_645)
(typeattributeset base_typeattr_645 (and (domain ) (not (dumpstate system_server traceur_app atrace system_suspend ))))
(typeattribute base_typeattr_644)
(typeattributeset base_typeattr_644 (and (domain ) (not (system_suspend ))))
(typeattribute base_typeattr_643)
(typeattributeset base_typeattr_643 (and (dev_type ) (not (frp_block_device ))))
(typeattribute base_typeattr_642)
(typeattributeset base_typeattr_642 (and (domain ) (not (flags_health_check init system_server ))))
(typeattribute base_typeattr_641)
(typeattributeset base_typeattr_641 (and (domain ) (not (crash_dump init system_server ))))
(typeattribute base_typeattr_640)
(typeattributeset base_typeattr_640 (and (file_type ) (not (logcat_exec toolbox_exec ))))
(typeattribute base_typeattr_639)
(typeattributeset base_typeattr_639 (and (service_manager_type ) (not (apex_service dnsresolver_service dumpstate_service iorapd_service installd_service lpdump_service netd_service system_suspend_control_service virtual_touchpad_service vold_service vr_hwc_service ))))
(typeattribute base_typeattr_638)
(typeattributeset base_typeattr_638 (and (domain ) (not (crash_dump runas_app system_app ))))
(typeattribute base_typeattr_637)
(typeattributeset base_typeattr_637 (and (appdomain ) (not (runas_app shell system_app ))))
(typeattribute base_typeattr_636)
(typeattributeset base_typeattr_636 (and (domain ) (not (system_app ))))
(typeattribute base_typeattr_635)
(typeattributeset base_typeattr_635 (and (system_app ) (not (runas_app shell ))))
(typeattribute base_typeattr_634)
(typeattributeset base_typeattr_634 (and (domain ) (not (surfaceflinger ))))
(typeattribute base_typeattr_633)
(typeattributeset base_typeattr_633 (and (domain ) (not (storaged ))))
(typeattribute base_typeattr_632)
(typeattributeset base_typeattr_632 (and (domain ) (not (dumpstate incidentd platform_app priv_app shell statsd system_app system_server traceur_app stats ))))
(typeattribute base_typeattr_631)
(typeattributeset base_typeattr_631 (and (domain ) (not (statsd ))))
(typeattribute base_typeattr_630)
(typeattributeset base_typeattr_630 (and (domain ) (not (crash_dump runas_app shell ))))
(typeattribute base_typeattr_629)
(typeattributeset base_typeattr_629 (and (domain ) (not (shell ))))
(typeattribute base_typeattr_628)
(typeattributeset base_typeattr_628 (and (shell ) (not (runas_app shell ))))
(typeattribute base_typeattr_627)
(typeattributeset base_typeattr_627 (and (domain ) (not (crash_dump runas_app shared_relro ))))
(typeattribute base_typeattr_626)
(typeattributeset base_typeattr_626 (and (appdomain ) (not (runas_app shared_relro shell ))))
(typeattribute base_typeattr_625)
(typeattributeset base_typeattr_625 (and (domain ) (not (shared_relro ))))
(typeattribute base_typeattr_624)
(typeattributeset base_typeattr_624 (and (shared_relro ) (not (runas_app shell ))))
(typeattribute base_typeattr_623)
(typeattributeset base_typeattr_623 (and (domain ) (not (crash_dump runas_app secure_element ))))
(typeattribute base_typeattr_622)
(typeattributeset base_typeattr_622 (and (appdomain ) (not (runas_app secure_element shell ))))
(typeattribute base_typeattr_621)
(typeattributeset base_typeattr_621 (and (domain ) (not (secure_element ))))
(typeattribute base_typeattr_620)
(typeattributeset base_typeattr_620 (and (secure_element ) (not (runas_app shell ))))
(typeattribute base_typeattr_619)
(typeattributeset base_typeattr_619 (and (domain ) (not (crash_dump runas_app ))))
(typeattribute base_typeattr_618)
(typeattributeset base_typeattr_618 (and (appdomain ) (not (runas_app shell ))))
(typeattribute base_typeattr_617)
(typeattributeset base_typeattr_617 (and (domain ) (not (runas_app ))))
(typeattribute base_typeattr_616)
(typeattributeset base_typeattr_616 (and (runas_app ) (not (runas_app shell ))))
(typeattribute base_typeattr_615)
(typeattributeset base_typeattr_615 (and (file_type ) (not (recovery_data_file ))))
(typeattribute base_typeattr_614)
(typeattributeset base_typeattr_614 (and (domain ) (not (crash_dump radio runas_app ))))
(typeattribute base_typeattr_613)
(typeattributeset base_typeattr_613 (and (appdomain ) (not (radio runas_app shell ))))
(typeattribute base_typeattr_612)
(typeattributeset base_typeattr_612 (and (radio ) (not (runas_app shell ))))
(typeattribute base_typeattr_611)
(typeattributeset base_typeattr_611 (and (domain ) (not (crash_dump priv_app runas_app ))))
(typeattribute base_typeattr_610)
(typeattributeset base_typeattr_610 (and (appdomain ) (not (priv_app runas_app shell ))))
(typeattribute base_typeattr_609)
(typeattributeset base_typeattr_609 (and (priv_app ) (not (runas_app shell ))))
(typeattribute base_typeattr_608)
(typeattributeset base_typeattr_608 (and (domain ) (not (crash_dump platform_app runas_app ))))
(typeattribute base_typeattr_607)
(typeattributeset base_typeattr_607 (and (appdomain ) (not (platform_app runas_app shell ))))
(typeattribute base_typeattr_606)
(typeattributeset base_typeattr_606 (and (domain ) (not (platform_app ))))
(typeattribute base_typeattr_605)
(typeattributeset base_typeattr_605 (and (platform_app ) (not (runas_app shell ))))
(typeattribute base_typeattr_604)
(typeattributeset base_typeattr_604 (and (data_file_type ) (not (zoneinfo_data_file perfetto_traces_data_file ))))
(typeattribute base_typeattr_603)
(typeattributeset base_typeattr_603 (and (system_data_file ) (not (perfetto_traces_data_file ))))
(typeattribute base_typeattr_602)
(typeattributeset base_typeattr_602 (and (data_file_type ) (not (system_data_file vendor_data_file zoneinfo_data_file perfetto_traces_data_file ))))
(typeattribute base_typeattr_601)
(typeattributeset base_typeattr_601 (and (domain ) (not (crash_dump nfc runas_app ))))
(typeattribute base_typeattr_600)
(typeattributeset base_typeattr_600 (and (appdomain ) (not (nfc runas_app shell ))))
(typeattribute base_typeattr_599)
(typeattributeset base_typeattr_599 (and (domain ) (not (nfc ))))
(typeattribute base_typeattr_598)
(typeattributeset base_typeattr_598 (and (nfc ) (not (runas_app shell ))))
(typeattribute base_typeattr_597)
(typeattributeset base_typeattr_597 (and (domain ) (not (crash_dump network_stack runas_app ))))
(typeattribute base_typeattr_596)
(typeattributeset base_typeattr_596 (and (appdomain ) (not (network_stack runas_app shell ))))
(typeattribute base_typeattr_595)
(typeattributeset base_typeattr_595 (and (domain ) (not (network_stack ))))
(typeattribute base_typeattr_594)
(typeattributeset base_typeattr_594 (and (network_stack ) (not (runas_app shell ))))
(typeattribute base_typeattr_593)
(typeattributeset base_typeattr_593 (and (domain ) (not (crash_dump mediaprovider runas_app ))))
(typeattribute base_typeattr_592)
(typeattributeset base_typeattr_592 (and (appdomain ) (not (mediaprovider runas_app shell ))))
(typeattribute base_typeattr_591)
(typeattributeset base_typeattr_591 (and (domain ) (not (mediaprovider ))))
(typeattribute base_typeattr_590)
(typeattributeset base_typeattr_590 (and (mediaprovider ) (not (runas_app shell ))))
(typeattribute base_typeattr_589)
(typeattributeset base_typeattr_589 (and (domain ) (not (dumpstate shell lpdumpd ))))
(typeattribute base_typeattr_588)
(typeattributeset base_typeattr_588 (and (domain ) (not (lpdumpd ))))
(typeattribute base_typeattr_587)
(typeattributeset base_typeattr_587 (and (appdomain ) (not (bluetooth platform_app priv_app radio shell system_app ))))
(typeattribute base_typeattr_586)
(typeattributeset base_typeattr_586 (and (domain ) (not (appdomain bootstat dumpstate init logd servicemanager surfaceflinger system_server zygote ))))
(typeattribute base_typeattr_585)
(typeattributeset base_typeattr_585 (and (file_type ) (not (runtime_event_log_tags_file ))))
(typeattribute base_typeattr_584)
(typeattributeset base_typeattr_584 (and (sysfs_type ) (not (sysfs_transparent_hugepage sysfs_usb sysfs_devices_system_cpu ))))
(typeattribute base_typeattr_583)
(typeattributeset base_typeattr_583 (and (service_manager_type ) (not (activity_service display_service webviewupdate_service ashmem_device_service ))))
(typeattribute base_typeattr_582)
(typeattributeset base_typeattr_582 (and (domain ) (not (crash_dump isolated_app runas_app ))))
(typeattribute base_typeattr_581)
(typeattributeset base_typeattr_581 (and (appdomain ) (not (isolated_app runas_app shell ))))
(typeattribute base_typeattr_580)
(typeattributeset base_typeattr_580 (and (isolated_app ) (not (runas_app shell ))))
(typeattribute base_typeattr_579)
(typeattributeset base_typeattr_579 (and (domain ) (not (incidentd init system_server vold ))))
(typeattribute base_typeattr_578)
(typeattributeset base_typeattr_578 (and (domain ) (not (incidentd init vold ))))
(typeattribute base_typeattr_577)
(typeattributeset base_typeattr_577 (and (domain ) (not (dumpstate incident incidentd priv_app statsd system_app system_server ))))
(typeattribute base_typeattr_576)
(typeattributeset base_typeattr_576 (and (domain ) (not (incidentd ))))
(typeattribute base_typeattr_575)
(typeattributeset base_typeattr_575 (and (domain ) (not (incident_helper incidentd shell ))))
(typeattribute base_typeattr_574)
(typeattributeset base_typeattr_574 (and (domain ) (not (incident shell su ))))
(typeattribute base_typeattr_573)
(typeattributeset base_typeattr_573 (and (domain ) (not (hwservicemanager ))))
(typeattribute base_typeattr_572)
(typeattributeset base_typeattr_572 (and (domain ) (not (fastbootd init vold gsid ))))
(typeattribute base_typeattr_571)
(typeattributeset base_typeattr_571 (and (domain ) (not (init gsid ))))
(typeattribute base_typeattr_570)
(typeattributeset base_typeattr_570 (and (domain ) (not (gsid ))))
(typeattribute base_typeattr_569)
(typeattributeset base_typeattr_569 (and (domain ) (not (gpuservice ))))
(typeattribute base_typeattr_568)
(typeattributeset base_typeattr_568 (and (domain ) (not (crash_dump ephemeral_app runas_app ))))
(typeattribute base_typeattr_567)
(typeattributeset base_typeattr_567 (and (appdomain ) (not (ephemeral_app runas_app shell ))))
(typeattribute base_typeattr_566)
(typeattributeset base_typeattr_566 (and (domain ) (not (ephemeral_app ))))
(typeattribute base_typeattr_565)
(typeattributeset base_typeattr_565 (and (ephemeral_app ) (not (runas_app shell ))))
(typeattribute base_typeattr_564)
(typeattributeset base_typeattr_564 (and (domain ) (not (hal_bootctl_server healthd init kernel recovery tee ueventd uncrypt gsid ))))
(typeattribute base_typeattr_563)
(typeattributeset base_typeattr_563 (and (fs_type ) (not (sdcard_type ))))
(typeattribute base_typeattr_562)
(typeattributeset base_typeattr_562 (and (domain ) (not (apexd init kernel recovery update_engine vold zygote otapreopt_chroot ))))
(typeattribute base_typeattr_561)
(typeattributeset base_typeattr_561 (not (dnsmasq dumpstate init install_recovery installd lmkd netd perfprofd recovery rss_hwm_reset sdcardd tee traced_probes ueventd uncrypt vendor_init vold vold_prepare_subdirs zygote migrate_legacy_obb_data postinstall_dexopt ) ))
(typeattribute base_typeattr_560)
(typeattributeset base_typeattr_560 (not (dnsmasq dumpstate init install_recovery installd lmkd netd perfprofd recovery rss_hwm_reset sdcardd tee ueventd uncrypt vendor_init vold vold_prepare_subdirs zygote migrate_legacy_obb_data postinstall_dexopt ) ))
(typeattribute base_typeattr_559)
(typeattributeset base_typeattr_559 (and (domain ) (not (init installd zygote art_apex_boot_integrity art_apex_postinstall cppreopts dex2oat otapreopt_slot postinstall_dexopt ))))
(typeattribute base_typeattr_558)
(typeattributeset base_typeattr_558 (and (file_type ) (not (exec_type system_file_type vendor_file_type system_lib_file system_linker_exec postinstall_file ))))
(typeattribute base_typeattr_557)
(typeattributeset base_typeattr_557 (and (domain ) (not (appdomain app_zygote shell webview_zygote zygote system_server_startup ))))
(typeattribute base_typeattr_556)
(typeattributeset base_typeattr_556 (and (fs_type ) (not (rootfs ))))
(typeattribute base_typeattr_555)
(typeattributeset base_typeattr_555 (and (domain ) (not (appdomain bootanim recovery ))))
(typeattribute base_typeattr_554)
(typeattributeset base_typeattr_554 (and (domain ) (not (init installd system_server ))))
(typeattribute base_typeattr_553)
(typeattributeset base_typeattr_553 (and (domain ) (not (apexd init installd kernel system_app system_server ))))
(typeattribute base_typeattr_552)
(typeattributeset base_typeattr_552 (and (domain ) (not (apexd init installd system_server ))))
(typeattribute base_typeattr_551)
(typeattributeset base_typeattr_551 (and (domain ) (not (appdomain app_zygote installd rs ))))
(typeattribute base_typeattr_550)
(typeattributeset base_typeattr_550 (and (domain ) (not (appdomain installd rs ))))
(typeattribute base_typeattr_549)
(typeattributeset base_typeattr_549 (and (domain ) (not (appdomain adbd app_zygote installd profman rs runas system_server dexoptanalyzer viewcompiler ))))
(typeattribute base_typeattr_548)
(typeattributeset base_typeattr_548 (and (domain ) (not (priv_app ))))
(typeattribute base_typeattr_547)
(typeattributeset base_typeattr_547 (and (domain ) (not (dumpstate system_server vold storaged ))))
(typeattribute base_typeattr_546)
(typeattributeset base_typeattr_546 (and (domain ) (not (appdomain coredomain ))))
(typeattribute base_typeattr_545)
(typeattributeset base_typeattr_545 (and (domain ) (not (appdomain rs ))))
(typeattribute base_typeattr_544)
(typeattributeset base_typeattr_544 (and (domain ) (not (apexd crash_dump init kernel keystore llkd logd ueventd vendor_init vold bpfloader ))))
(typeattribute base_typeattr_543)
(typeattributeset base_typeattr_543 (and (coredomain ) (not (init iorapd perfprofd ))))
(typeattribute base_typeattr_542)
(typeattributeset base_typeattr_542 (and (coredomain ) (not (adbd init mediaprovider system_server ))))
(typeattribute base_typeattr_541)
(typeattributeset base_typeattr_541 (and (coredomain ) (not (init system_server ))))
(typeattribute base_typeattr_540)
(typeattributeset base_typeattr_540 (and (coredomain ) (not (bootstat charger dumpstate healthd init logd logpersist recovery_persist recovery_refresh shell system_server ))))
(typeattribute base_typeattr_539)
(typeattributeset base_typeattr_539 (and (coredomain ) (not (init ))))
(typeattribute base_typeattr_538)
(typeattributeset base_typeattr_538 (and (coredomain ) (not (dumpstate init shell traced_probes traceur_app atrace ))))
(typeattribute base_typeattr_537)
(typeattributeset base_typeattr_537 (and (coredomain ) (not (dumpstate init system_server ))))
(typeattribute base_typeattr_536)
(typeattributeset base_typeattr_536 (and (coredomain ) (not (fsck init ueventd ))))
(typeattribute base_typeattr_535)
(typeattributeset base_typeattr_535 (and (coredomain ) (not (init vold ))))
(typeattribute base_typeattr_534)
(typeattributeset base_typeattr_534 (and (coredomain ) (not (appdomain app_zygote idmap init installd rs system_server webview_zygote zygote postinstall_dexopt ))))
(typeattribute base_typeattr_533)
(typeattributeset base_typeattr_533 (and (coredomain ) (not (appdomain idmap init installd mediaserver rs system_server dex2oat postinstall_dexopt ))))
(typeattribute base_typeattr_532)
(typeattributeset base_typeattr_532 (and (coredomain ) (not (appdomain idmap init installd rs system_server dex2oat postinstall_dexopt ))))
(typeattribute base_typeattr_531)
(typeattributeset base_typeattr_531 (and (coredomain ) (not (init ueventd vold ))))
(typeattribute base_typeattr_530)
(typeattributeset base_typeattr_530 (and (domain ) (not (netd system_server bpfloader ))))
(typeattribute base_typeattr_529)
(typeattributeset base_typeattr_529 (and (domain ) (not (init bpfloader ))))
(typeattribute base_typeattr_528)
(typeattributeset base_typeattr_528 (and (domain ) (not (netd netutils_wrapper bpfloader ))))
(typeattribute base_typeattr_527)
(typeattributeset base_typeattr_527 (and (domain ) (not (bpfloader ))))
(typeattribute base_typeattr_526)
(typeattributeset base_typeattr_526 (and (domain ) (not (bluetooth crash_dump runas_app ))))
(typeattribute base_typeattr_525)
(typeattributeset base_typeattr_525 (and (appdomain ) (not (bluetooth runas_app shell ))))
(typeattribute base_typeattr_524)
(typeattributeset base_typeattr_524 (and (domain ) (not (bluetooth ))))
(typeattribute base_typeattr_523)
(typeattributeset base_typeattr_523 (and (bluetooth ) (not (runas_app shell ))))
(typeattribute base_typeattr_522)
(typeattributeset base_typeattr_522 (and (fs_type file_type ) (not (shell_exec blkid_exec ))))
(typeattribute base_typeattr_521)
(typeattributeset base_typeattr_521 (and (domain ) (not (audioserver ))))
(typeattribute base_typeattr_520)
(typeattributeset base_typeattr_520 (and (service_manager_type ) (not (apex_service dnsresolver_service dumpstate_service iorapd_service incident_service installd_service lpdump_service netd_service vold_service stats_service ))))
(typeattribute base_typeattr_519)
(typeattributeset base_typeattr_519 (and (domain ) (not (ashmemd ))))
(typeattribute base_typeattr_518)
(typeattributeset base_typeattr_518 (and (domain ) (not (app_zygote ))))
(typeattribute base_typeattr_517)
(typeattributeset base_typeattr_517 (and (domain ) (not (app_zygote logd ))))
(typeattribute base_typeattr_516)
(typeattributeset base_typeattr_516 (and (service_manager_type ) (not (activity_service webviewupdate_service ashmem_device_service ))))
(typeattribute base_typeattr_515)
(typeattributeset base_typeattr_515 (and (domain ) (not (zygote ))))
(typeattribute base_typeattr_514)
(typeattributeset base_typeattr_514 (and (domain ) (not (crash_dump ))))
(typeattribute base_typeattr_513)
(typeattributeset base_typeattr_513 (and (domain ) (not (isolated_app ))))
(typeattribute base_typeattr_512)
(typeattributeset base_typeattr_512 (and (untrusted_app_all ephemeral_app isolated_app mediaprovider untrusted_app untrusted_app_27 untrusted_app_25 ) (not (ephemeral_app untrusted_app_27 untrusted_app_25 ))))
(typeattribute base_typeattr_511)
(typeattributeset base_typeattr_511 (and (halserverdomain ) (not (coredomain binder_in_vendor_violators untrusted_app_visible_halserver_violators hal_cas_server hal_codec2_server hal_configstore_server hal_graphics_allocator_server hal_neuralnetworks_server hal_omx_server ))))
(typeattribute base_typeattr_510)
(typeattributeset base_typeattr_510 (and (coredomain_hwservice ) (not (same_process_hwservice fwk_bufferhub_hwservice hidl_allocator_hwservice hidl_manager_hwservice hidl_memory_hwservice hidl_token_hwservice ))))
(typeattribute base_typeattr_509)
(typeattributeset base_typeattr_509 (and (hwservice_manager_type ) (not (same_process_hwservice coredomain_hwservice untrusted_app_visible_hwservice_violators hal_codec2_hwservice hal_configstore_ISurfaceFlingerConfigs hal_cas_hwservice hal_graphics_allocator_hwservice hal_neuralnetworks_hwservice hal_omx_hwservice ))))
(typeattribute base_typeattr_508)
(typeattributeset base_typeattr_508 (and (fs_type file_type ) (not (sdcard_type user_profile_data_file media_rw_data_file app_data_file privapp_data_file app_exec_data_file ))))
(typeattribute base_typeattr_507)
(typeattributeset base_typeattr_507 (and (untrusted_app_all ephemeral_app isolated_app mediaprovider untrusted_app untrusted_app_27 untrusted_app_25 ) (not (untrusted_app_27 untrusted_app_25 ))))
(typeattribute base_typeattr_506)
(typeattributeset base_typeattr_506 (and (untrusted_app_all ephemeral_app isolated_app mediaprovider untrusted_app untrusted_app_27 untrusted_app_25 ) (not (runas_app untrusted_app_27 untrusted_app_25 ))))
(typeattribute base_typeattr_505)
(typeattributeset base_typeattr_505 (and (untrusted_app_all ephemeral_app isolated_app mediaprovider untrusted_app untrusted_app_27 untrusted_app_25 ) (not (untrusted_app_25 ))))
(typeattribute base_typeattr_504)
(typeattributeset base_typeattr_504 (and (untrusted_app_all ephemeral_app isolated_app mediaprovider untrusted_app untrusted_app_27 untrusted_app_25 ) (not (mediaprovider ))))
(typeattribute base_typeattr_503)
(typeattributeset base_typeattr_503 (and (debugfs_type ) (not (debugfs_kcov ))))
(typeattribute base_typeattr_502)
(typeattributeset base_typeattr_502 (and (domain ) (not (appdomain crash_dump rs ))))
(typeattribute base_typeattr_501)
(typeattributeset base_typeattr_501 (and (domain ) (not (apexd init kernel ))))
(typeattribute base_typeattr_500)
(typeattributeset base_typeattr_500 (and (domain ) (not (crash_dump shell ))))
(typeattribute base_typeattr_499)
(typeattributeset base_typeattr_499 (and (domain ) (not (wificond ))))
(typeattribute base_typeattr_498)
(typeattributeset base_typeattr_498 (and (domain ) (not (vr_hwc ))))
(typeattribute base_typeattr_497)
(typeattributeset base_typeattr_497 (and (domain ) (not (hal_bootctl_server hal_health_storage_server hal_keymaster_server system_suspend_server ashmemd healthd hwservicemanager iorapd_service servicemanager system_server ))))
(typeattribute base_typeattr_496)
(typeattributeset base_typeattr_496 (and (domain ) (not (apexd system_server update_verifier vdc vold ))))
(typeattribute base_typeattr_495)
(typeattributeset base_typeattr_495 (and (domain ) (not (init kernel vold vold_prepare_subdirs ))))
(typeattribute base_typeattr_494)
(typeattributeset base_typeattr_494 (and (domain ) (not (kernel vold vold_prepare_subdirs ))))
(typeattribute base_typeattr_493)
(typeattributeset base_typeattr_493 (and (domain ) (not (init vold vold_prepare_subdirs ))))
(typeattribute base_typeattr_492)
(typeattributeset base_typeattr_492 (and (domain ) (not (vold vold_prepare_subdirs ))))
(typeattribute base_typeattr_491)
(typeattributeset base_typeattr_491 (and (sysfs_type ) (not (sysfs_batteryinfo ))))
(typeattribute base_typeattr_490)
(typeattributeset base_typeattr_490 (and (domain ) (not (virtual_touchpad ))))
(typeattribute base_typeattr_489)
(typeattributeset base_typeattr_489 (and (coredomain ) (not (init modprobe ))))
(typeattribute base_typeattr_488)
(typeattributeset base_typeattr_488 (and (domain ) (not (init logd su vendor_init ))))
(typeattribute base_typeattr_487)
(typeattributeset base_typeattr_487 (and (sysfs_type ) (not (sysfs_usermodehelper ))))
(typeattribute base_typeattr_486)
(typeattributeset base_typeattr_486 (and (dev_type ) (not (keychord_device hw_random_device port_device lowpan_device ))))
(typeattribute base_typeattr_485)
(typeattributeset base_typeattr_485 (and (fs_type ) (not (contextmount_type sdcard_type rootfs proc_uid_time_in_state proc_uid_concurrent_active_time proc_uid_concurrent_policy_time ))))
(typeattribute base_typeattr_484)
(typeattributeset base_typeattr_484 (and (fs_type ) (not (contextmount_type sdcard_type keychord_device rootfs proc_uid_time_in_state proc_uid_concurrent_active_time proc_uid_concurrent_policy_time ))))
(typeattribute base_typeattr_483)
(typeattributeset base_typeattr_483 (and (file_type ) (not (exec_type core_data_file_type system_file_type vendor_file_type vold_metadata_file gsi_metadata_file password_slot_metadata_file apex_metadata_file mnt_product_file ))))
(typeattribute base_typeattr_482)
(typeattributeset base_typeattr_482 (and (file_type ) (not (exec_type core_data_file_type system_file_type vendor_file_type unlabeled vold_metadata_file gsi_metadata_file password_slot_metadata_file apex_metadata_file apex_mnt_dir ))))
(typeattribute base_typeattr_481)
(typeattributeset base_typeattr_481 (and (file_type ) (not (exec_type core_data_file_type system_file_type vendor_file_type unlabeled vold_metadata_file gsi_metadata_file password_slot_metadata_file apex_metadata_file ))))
(typeattribute base_typeattr_480)
(typeattributeset base_typeattr_480 (and (file_type ) (not (exec_type core_data_file_type system_file_type vendor_file_type unlabeled vold_metadata_file gsi_metadata_file password_slot_metadata_file apex_metadata_file runtime_event_log_tags_file ))))
(typeattribute base_typeattr_479)
(typeattributeset base_typeattr_479 (and (file_type ) (not (exec_type core_data_file_type system_file_type vendor_file_type unlabeled vold_metadata_file gsi_metadata_file password_slot_metadata_file apex_metadata_file mnt_product_file ))))
(typeattribute base_typeattr_478)
(typeattributeset base_typeattr_478 (and (domain ) (not (update_engine ))))
(typeattribute base_typeattr_477)
(typeattributeset base_typeattr_477 (and (vendor_file_type ) (not (vendor_app_file vendor_overlay_file ))))
(typeattribute base_typeattr_476)
(typeattributeset base_typeattr_476 (and (domain ) (not (init system_server tzdatacheck ))))
(typeattribute base_typeattr_475)
(typeattributeset base_typeattr_475 (and (service_manager_type ) (not (apex_service dnsresolver_service gatekeeper_service iorapd_service incident_service installd_service lpdump_service netd_service virtual_touchpad_service vold_service vr_hwc_service ))))
(typeattribute base_typeattr_474)
(typeattributeset base_typeattr_474 (and (fs_type file_type ) (not (toolbox_exec ))))
(typeattribute base_typeattr_473)
(typeattributeset base_typeattr_473 (and (domain ) (not (system_suspend_server ))))
(typeattribute base_typeattr_472)
(typeattributeset base_typeattr_472 (and (domain ) (not (init statsd system_server vold ))))
(typeattribute base_typeattr_471)
(typeattributeset base_typeattr_471 (and (domain ) (not (stats_service_server ))))
(typeattribute base_typeattr_470)
(typeattributeset base_typeattr_470 (and (service_manager_type ) (not (apex_service dnsresolver_service gatekeeper_service iorapd_service incident_service installd_service netd_service system_suspend_control_service virtual_touchpad_service vold_service vr_hwc_service ))))
(typeattribute base_typeattr_469)
(typeattributeset base_typeattr_469 (and (fs_type file_type ) (not (sgdisk_exec ))))
(typeattribute base_typeattr_468)
(typeattributeset base_typeattr_468 (and (domain ) (not (hwservicemanager init vendor_init vndservicemanager ))))
(typeattribute base_typeattr_467)
(typeattributeset base_typeattr_467 (not (service_manager_type vndservice_manager_type ) ))
(typeattribute base_typeattr_466)
(typeattributeset base_typeattr_466 (and (domain ) (not (sensor_service_server ))))
(typeattribute base_typeattr_465)
(typeattributeset base_typeattr_465 (and (domain ) (not (scheduler_service_server ))))
(typeattribute base_typeattr_464)
(typeattributeset base_typeattr_464 (and (appdomain ) (not (system_app ))))
(typeattribute base_typeattr_463)
(typeattributeset base_typeattr_463 (and (data_file_type ) (not (cache_file cache_recovery_file ))))
(typeattribute base_typeattr_462)
(typeattributeset base_typeattr_462 (and (domain ) (not (radio ))))
(typeattribute base_typeattr_461)
(typeattributeset base_typeattr_461 (and (property_type ) (not (extended_core_property_type apexd_prop audio_prop boottime_prop boottime_public_prop bluetooth_a2dp_offload_prop bluetooth_audio_hal_prop bluetooth_prop bpf_progs_loaded_prop bootloader_boot_reason_prop config_prop cppreopt_prop ctl_adbd_prop ctl_bootanim_prop ctl_bugreport_prop ctl_console_prop ctl_default_prop ctl_dumpstate_prop ctl_fuse_prop ctl_gsid_prop ctl_interface_restart_prop ctl_interface_start_prop ctl_interface_stop_prop ctl_mdnsd_prop ctl_restart_prop ctl_rildaemon_prop ctl_sigstop_prop ctl_start_prop ctl_stop_prop dalvik_prop debuggerd_prop debug_prop default_prop device_config_activity_manager_native_boot_prop device_config_boot_count_prop device_config_reset_performed_prop device_config_input_native_boot_prop device_config_netd_native_prop device_config_runtime_native_boot_prop device_config_runtime_native_prop device_config_media_native_prop device_logging_prop dhcp_prop dumpstate_options_prop dumpstate_prop dynamic_system_prop exported_secure_prop sota_prop ffs_prop fingerprint_prop firstboot_prop gsid_prop heapprofd_enabled_prop heapprofd_prop hwservicemanager_prop last_boot_reason_prop system_lmk_prop logd_prop logpersistd_logging_prop log_prop log_tag_prop lowpan_prop lpdumpd_prop mmc_prop net_dns_prop net_radio_prop netd_stable_secret_prop nfc_prop overlay_prop pan_result_prop persist_debug_prop persistent_properties_ready_prop pm_prop powerctl_prop radio_prop restorecon_prop safemode_prop serialno_prop shell_prop system_boot_reason_prop system_prop system_radio_prop system_trace_prop test_boot_reason_prop test_harness_prop theme_prop time_prop traced_enabled_prop traced_lazy_prop vold_prop wifi_log_prop wifi_prop vendor_security_patch_level_prop exported_bluetooth_prop exported_config_prop exported_dalvik_prop exported_default_prop exported_dumpstate_prop exported_ffs_prop exported_fingerprint_prop exported_overlay_prop exported_pm_prop exported_radio_prop exported_system_prop exported_system_radio_prop exported_vold_prop exported_wifi_prop exported2_config_prop exported2_default_prop exported2_radio_prop exported2_system_prop exported2_vold_prop exported3_default_prop exported3_radio_prop exported3_system_prop vendor_default_prop ))))
(typeattribute base_typeattr_460)
(typeattributeset base_typeattr_460 (and (coredomain ) (not (system_writes_vendor_properties_violators init ))))
(typeattribute base_typeattr_459)
(typeattributeset base_typeattr_459 (and (core_property_type extended_core_property_type exported_dalvik_prop exported_ffs_prop exported_system_radio_prop exported2_config_prop exported2_system_prop exported2_vold_prop exported3_default_prop exported3_system_prop ) (not (debug_prop logd_prop nfc_prop powerctl_prop radio_prop ))))
(typeattribute base_typeattr_458)
(typeattributeset base_typeattr_458 (and (domain ) (not (coredomain hal_wifi_server vendor_init wificond ))))
(typeattribute base_typeattr_457)
(typeattributeset base_typeattr_457 (and (domain ) (not (coredomain hal_wifi_server wificond ))))
(typeattribute base_typeattr_456)
(typeattributeset base_typeattr_456 (and (domain ) (not (coredomain hal_bluetooth_server bluetooth vendor_init ))))
(typeattribute base_typeattr_455)
(typeattributeset base_typeattr_455 (and (domain ) (not (coredomain hal_bluetooth_server bluetooth ))))
(typeattribute base_typeattr_454)
(typeattributeset base_typeattr_454 (and (domain ) (not (appdomain coredomain hal_telephony_server ))))
(typeattribute base_typeattr_453)
(typeattributeset base_typeattr_453 (and (domain ) (not (appdomain coredomain hal_telephony_server vendor_init ))))
(typeattribute base_typeattr_452)
(typeattributeset base_typeattr_452 (and (domain ) (not (appdomain coredomain hal_nfc_server ))))
(typeattribute base_typeattr_451)
(typeattributeset base_typeattr_451 (and (core_property_type extended_core_property_type exported_config_prop exported_dalvik_prop exported_default_prop exported_dumpstate_prop exported_ffs_prop exported_fingerprint_prop exported_system_prop exported_system_radio_prop exported_vold_prop exported2_config_prop exported2_default_prop exported2_system_prop exported2_vold_prop exported3_default_prop exported3_system_prop ) (not (nfc_prop powerctl_prop radio_prop ))))
(typeattribute base_typeattr_450)
(typeattributeset base_typeattr_450 (and (domain ) (not (appdomain coredomain vendor_init ))))
(typeattribute base_typeattr_449)
(typeattributeset base_typeattr_449 (and (core_property_type ) (not (audio_prop config_prop cppreopt_prop dalvik_prop debuggerd_prop debug_prop default_prop dhcp_prop dumpstate_prop ffs_prop fingerprint_prop logd_prop net_radio_prop nfc_prop pan_result_prop persist_debug_prop powerctl_prop radio_prop restorecon_prop shell_prop system_prop system_radio_prop vold_prop ))))
(typeattribute base_typeattr_448)
(typeattributeset base_typeattr_448 (and (domain ) (not (recovery update_engine ))))
(typeattribute base_typeattr_447)
(typeattributeset base_typeattr_447 (and (domain ) (not (performanced ))))
(typeattribute base_typeattr_446)
(typeattributeset base_typeattr_446 (and (domain ) (not (init netd ))))
(typeattribute base_typeattr_445)
(typeattributeset base_typeattr_445 (and (domain ) (not (dumpstate init netd ))))
(typeattribute base_typeattr_444)
(typeattributeset base_typeattr_444 (and (appdomain ) (not (network_stack ))))
(typeattribute base_typeattr_443)
(typeattributeset base_typeattr_443 (and (domain ) (not (dumpstate netd netutils_wrapper network_stack system_server ))))
(typeattribute base_typeattr_442)
(typeattributeset base_typeattr_442 (and (domain ) (not (netd ))))
(typeattribute base_typeattr_441)
(typeattributeset base_typeattr_441 (and (netdomain ) (not (ephemeral_app ))))
(typeattribute base_typeattr_440)
(typeattributeset base_typeattr_440 (and (domain ) (not (mediaserver ))))
(typeattribute base_typeattr_439)
(typeattributeset base_typeattr_439 (and (domain ) (not (mediametrics ))))
(typeattribute base_typeattr_438)
(typeattributeset base_typeattr_438 (and (data_file_type ) (not (zoneinfo_data_file ))))
(typeattribute base_typeattr_437)
(typeattributeset base_typeattr_437 (and (domain ) (not (mediaextractor ))))
(typeattribute base_typeattr_436)
(typeattributeset base_typeattr_436 (and (domain ) (not (mediadrmserver ))))
(typeattribute base_typeattr_435)
(typeattributeset base_typeattr_435 (and (domain ) (not (init logd ))))
(typeattribute base_typeattr_434)
(typeattributeset base_typeattr_434 (and (domain ) (not (init keystore ))))
(typeattribute base_typeattr_433)
(typeattributeset base_typeattr_433 (and (domain ) (not (keystore ))))
(typeattribute base_typeattr_432)
(typeattributeset base_typeattr_432 (and (domain ) (not (healthd servicemanager system_server ))))
(typeattribute base_typeattr_431)
(typeattributeset base_typeattr_431 (and (domain ) (not (iorapd system_server ))))
(typeattribute base_typeattr_430)
(typeattributeset base_typeattr_430 (and (domain ) (not (init iorapd kernel vendor_init ))))
(typeattribute base_typeattr_429)
(typeattributeset base_typeattr_429 (and (domain ) (not (iorapd kernel ))))
(typeattribute base_typeattr_428)
(typeattributeset base_typeattr_428 (and (domain ) (not (init iorapd ))))
(typeattribute base_typeattr_427)
(typeattributeset base_typeattr_427 (and (domain ) (not (iorapd ))))
(typeattribute base_typeattr_426)
(typeattributeset base_typeattr_426 (and (domain ) (not (ashmemd servicemanager system_server ))))
(typeattribute base_typeattr_425)
(typeattributeset base_typeattr_425 (and (domain ) (not (dumpstate system_server ))))
(typeattribute base_typeattr_424)
(typeattributeset base_typeattr_424 (and (domain ) (not (dumpstate installd system_server ))))
(typeattribute base_typeattr_423)
(typeattributeset base_typeattr_423 (and (domain ) (not (installd ))))
(typeattribute base_typeattr_422)
(typeattributeset base_typeattr_422 (and (service_manager_type ) (not (apex_service ))))
(typeattribute base_typeattr_421)
(typeattributeset base_typeattr_421 (and (fs_type file_type ) (not (init_exec ))))
(typeattribute base_typeattr_420)
(typeattributeset base_typeattr_420 (and (dev_type ) (not (keychord_device port_device ))))
(typeattribute base_typeattr_419)
(typeattributeset base_typeattr_419 (and (fs_type ) (not (contextmount_type sdcard_type rootfs ))))
(typeattribute base_typeattr_418)
(typeattributeset base_typeattr_418 (and (fs_type ) (not (contextmount_type proc_type sysfs_type sdcard_type keychord_device rootfs ))))
(typeattribute base_typeattr_417)
(typeattributeset base_typeattr_417 (and (file_type ) (not (exec_type system_file_type vendor_file_type app_data_file privapp_data_file ))))
(typeattribute base_typeattr_416)
(typeattributeset base_typeattr_416 (and (file_type ) (not (exec_type system_file_type vendor_file_type shell_data_file nativetest_data_file apex_mnt_dir keystore_data_file vold_data_file iorapd_data_file gsi_data_file app_data_file privapp_data_file system_app_data_file misc_logd_file ))))
(typeattribute base_typeattr_415)
(typeattributeset base_typeattr_415 (and (file_type ) (not (exec_type system_file_type vendor_file_type runtime_event_log_tags_file shell_data_file nativetest_data_file keystore_data_file vold_data_file iorapd_data_file gsi_data_file app_data_file privapp_data_file system_app_data_file misc_logd_file ))))
(typeattribute base_typeattr_414)
(typeattributeset base_typeattr_414 (and (file_type ) (not (exec_type system_file_type vendor_file_type shell_data_file nativetest_data_file keystore_data_file vold_data_file iorapd_data_file gsi_data_file app_data_file privapp_data_file system_app_data_file misc_logd_file ))))
(typeattribute base_typeattr_413)
(typeattributeset base_typeattr_413 (and (file_type ) (not (exec_type system_file_type vendor_file_type nativetest_data_file app_data_file privapp_data_file system_app_data_file misc_logd_file ))))
(typeattribute base_typeattr_412)
(typeattributeset base_typeattr_412 (and (domain ) (not (idmap ))))
(typeattribute base_typeattr_411)
(typeattributeset base_typeattr_411 (not (hwservice_manager_type ) ))
(typeattribute base_typeattr_410)
(typeattributeset base_typeattr_410 (and (domain ) (not (hal_wifi_supplicant_client hal_wifi_supplicant_server ))))
(typeattribute base_typeattr_409)
(typeattributeset base_typeattr_409 (and (domain ) (not (hal_wifi_supplicant_server ))))
(typeattribute base_typeattr_408)
(typeattributeset base_typeattr_408 (and (domain ) (not (hal_wifi_offload_client hal_wifi_offload_server ))))
(typeattribute base_typeattr_407)
(typeattributeset base_typeattr_407 (and (domain ) (not (hal_wifi_offload_server ))))
(typeattribute base_typeattr_406)
(typeattributeset base_typeattr_406 (and (domain ) (not (hal_wifi_hostapd_client hal_wifi_hostapd_server ))))
(typeattribute base_typeattr_405)
(typeattributeset base_typeattr_405 (and (domain ) (not (hal_wifi_hostapd_server ))))
(typeattribute base_typeattr_404)
(typeattributeset base_typeattr_404 (and (domain ) (not (hal_wifi_client hal_wifi_server ))))
(typeattribute base_typeattr_403)
(typeattributeset base_typeattr_403 (and (domain ) (not (hal_wifi_server ))))
(typeattribute base_typeattr_402)
(typeattributeset base_typeattr_402 (and (domain ) (not (hal_weaver_client hal_weaver_server ))))
(typeattribute base_typeattr_401)
(typeattributeset base_typeattr_401 (and (domain ) (not (hal_weaver_server ))))
(typeattribute base_typeattr_400)
(typeattributeset base_typeattr_400 (and (domain ) (not (hal_vr_client hal_vr_server ))))
(typeattribute base_typeattr_399)
(typeattributeset base_typeattr_399 (and (domain ) (not (hal_vr_server ))))
(typeattribute base_typeattr_398)
(typeattributeset base_typeattr_398 (and (domain ) (not (hal_vibrator_client hal_vibrator_server ))))
(typeattribute base_typeattr_397)
(typeattributeset base_typeattr_397 (and (domain ) (not (hal_vibrator_server ))))
(typeattribute base_typeattr_396)
(typeattributeset base_typeattr_396 (and (domain ) (not (hal_vehicle_client hal_vehicle_server ))))
(typeattribute base_typeattr_395)
(typeattributeset base_typeattr_395 (and (domain ) (not (hal_vehicle_server ))))
(typeattribute base_typeattr_394)
(typeattributeset base_typeattr_394 (and (domain ) (not (hal_usb_gadget_client hal_usb_gadget_server ))))
(typeattribute base_typeattr_393)
(typeattributeset base_typeattr_393 (and (domain ) (not (hal_usb_gadget_server ))))
(typeattribute base_typeattr_392)
(typeattributeset base_typeattr_392 (and (domain ) (not (hal_usb_client hal_usb_server ))))
(typeattribute base_typeattr_391)
(typeattributeset base_typeattr_391 (and (domain ) (not (hal_usb_server ))))
(typeattribute base_typeattr_390)
(typeattributeset base_typeattr_390 (and (domain ) (not (hal_tv_input_client hal_tv_input_server ))))
(typeattribute base_typeattr_389)
(typeattributeset base_typeattr_389 (and (domain ) (not (hal_tv_input_server ))))
(typeattribute base_typeattr_388)
(typeattributeset base_typeattr_388 (and (domain ) (not (hal_tv_cec_client hal_tv_cec_server ))))
(typeattribute base_typeattr_387)
(typeattributeset base_typeattr_387 (and (domain ) (not (hal_tv_cec_server ))))
(typeattribute base_typeattr_386)
(typeattributeset base_typeattr_386 (and (domain ) (not (hal_thermal_client hal_thermal_server ))))
(typeattribute base_typeattr_385)
(typeattributeset base_typeattr_385 (and (domain ) (not (hal_thermal_server ))))
(typeattribute base_typeattr_384)
(typeattributeset base_typeattr_384 (and (domain ) (not (hal_tetheroffload_client hal_tetheroffload_server ))))
(typeattribute base_typeattr_383)
(typeattributeset base_typeattr_383 (and (domain ) (not (hal_tetheroffload_server ))))
(typeattribute base_typeattr_382)
(typeattributeset base_typeattr_382 (and (domain ) (not (hal_telephony_client hal_telephony_server ))))
(typeattribute base_typeattr_381)
(typeattributeset base_typeattr_381 (and (domain ) (not (hal_telephony_server ))))
(typeattribute base_typeattr_380)
(typeattributeset base_typeattr_380 (and (domain ) (not (hal_sensors_client hal_sensors_server ))))
(typeattribute base_typeattr_379)
(typeattributeset base_typeattr_379 (and (domain ) (not (hal_sensors_server ))))
(typeattribute base_typeattr_378)
(typeattributeset base_typeattr_378 (and (domain ) (not (hal_secure_element_client hal_secure_element_server ))))
(typeattribute base_typeattr_377)
(typeattributeset base_typeattr_377 (and (domain ) (not (hal_secure_element_server ))))
(typeattribute base_typeattr_376)
(typeattributeset base_typeattr_376 (and (domain ) (not (hal_power_stats_client hal_power_stats_server ))))
(typeattribute base_typeattr_375)
(typeattributeset base_typeattr_375 (and (domain ) (not (hal_power_stats_server ))))
(typeattribute base_typeattr_374)
(typeattributeset base_typeattr_374 (and (domain ) (not (hal_power_client hal_power_server ))))
(typeattribute base_typeattr_373)
(typeattributeset base_typeattr_373 (and (domain ) (not (hal_power_server ))))
(typeattribute base_typeattr_372)
(typeattributeset base_typeattr_372 (and (domain ) (not (hal_omx_client hal_omx_server ))))
(typeattribute base_typeattr_371)
(typeattributeset base_typeattr_371 (and (domain ) (not (hal_omx_server ))))
(typeattribute base_typeattr_370)
(typeattributeset base_typeattr_370 (and (domain ) (not (hal_oemlock_client hal_oemlock_server ))))
(typeattribute base_typeattr_369)
(typeattributeset base_typeattr_369 (and (domain ) (not (hal_oemlock_server ))))
(typeattribute base_typeattr_368)
(typeattributeset base_typeattr_368 (and (domain ) (not (hal_nfc_client hal_nfc_server ))))
(typeattribute base_typeattr_367)
(typeattributeset base_typeattr_367 (and (domain ) (not (hal_nfc_server ))))
(typeattribute base_typeattr_366)
(typeattributeset base_typeattr_366 (and (halserverdomain ) (not (hal_dumpstate_server hal_telephony_server ))))
(typeattribute base_typeattr_365)
(typeattributeset base_typeattr_365 (and (halserverdomain ) (not (hal_automotive_socket_exemption hal_telephony_server hal_tetheroffload_server hal_wifi_server hal_wifi_hostapd_server hal_wifi_supplicant_server ))))
(typeattribute base_typeattr_364)
(typeattributeset base_typeattr_364 (and (halserverdomain ) (not (hal_bluetooth_server hal_telephony_server hal_wifi_server hal_wifi_hostapd_server hal_wifi_supplicant_server ))))
(typeattribute base_typeattr_363)
(typeattributeset base_typeattr_363 (and (domain ) (not (hal_neuralnetworks_client hal_neuralnetworks_server ))))
(typeattribute base_typeattr_362)
(typeattributeset base_typeattr_362 (and (domain ) (not (hal_neuralnetworks_server ))))
(typeattribute base_typeattr_361)
(typeattributeset base_typeattr_361 (and (domain ) (not (hal_memtrack_client hal_memtrack_server ))))
(typeattribute base_typeattr_360)
(typeattributeset base_typeattr_360 (and (domain ) (not (hal_memtrack_server ))))
(typeattribute base_typeattr_359)
(typeattributeset base_typeattr_359 (and (domain ) (not (hal_lowpan_server init ueventd ))))
(typeattribute base_typeattr_358)
(typeattributeset base_typeattr_358 (and (domain ) (not (hal_lowpan_client hal_lowpan_server ))))
(typeattribute base_typeattr_357)
(typeattributeset base_typeattr_357 (and (domain ) (not (hal_lowpan_server ))))
(typeattribute base_typeattr_356)
(typeattributeset base_typeattr_356 (and (domain ) (not (hal_light_client hal_light_server ))))
(typeattribute base_typeattr_355)
(typeattributeset base_typeattr_355 (and (domain ) (not (hal_light_server ))))
(typeattribute base_typeattr_354)
(typeattributeset base_typeattr_354 (and (domain ) (not (hal_keymaster_client hal_keymaster_server ))))
(typeattribute base_typeattr_353)
(typeattributeset base_typeattr_353 (and (domain ) (not (hal_keymaster_server ))))
(typeattribute base_typeattr_352)
(typeattributeset base_typeattr_352 (and (domain ) (not (hal_ir_client hal_ir_server ))))
(typeattribute base_typeattr_351)
(typeattributeset base_typeattr_351 (and (domain ) (not (hal_ir_server ))))
(typeattribute base_typeattr_350)
(typeattributeset base_typeattr_350 (and (domain ) (not (hal_input_classifier_client hal_input_classifier_server ))))
(typeattribute base_typeattr_349)
(typeattributeset base_typeattr_349 (and (domain ) (not (hal_input_classifier_server ))))
(typeattribute base_typeattr_348)
(typeattributeset base_typeattr_348 (and (domain ) (not (hal_health_storage_client hal_health_storage_server ))))
(typeattribute base_typeattr_347)
(typeattributeset base_typeattr_347 (and (domain ) (not (hal_health_storage_server ))))
(typeattribute base_typeattr_346)
(typeattributeset base_typeattr_346 (and (domain ) (not (hal_health_client hal_health_server ))))
(typeattribute base_typeattr_345)
(typeattributeset base_typeattr_345 (and (domain ) (not (hal_health_server ))))
(typeattribute base_typeattr_344)
(typeattributeset base_typeattr_344 (and (domain ) (not (hal_graphics_composer_client hal_graphics_composer_server ))))
(typeattribute base_typeattr_343)
(typeattributeset base_typeattr_343 (and (domain ) (not (hal_graphics_composer_server ))))
(typeattribute base_typeattr_342)
(typeattributeset base_typeattr_342 (and (domain ) (not (hal_graphics_allocator_client hal_graphics_allocator_server ))))
(typeattribute base_typeattr_341)
(typeattributeset base_typeattr_341 (and (domain ) (not (hal_graphics_allocator_server ))))
(typeattribute base_typeattr_340)
(typeattributeset base_typeattr_340 (and (domain ) (not (hal_gnss_client hal_gnss_server ))))
(typeattribute base_typeattr_339)
(typeattributeset base_typeattr_339 (and (domain ) (not (hal_gnss_server ))))
(typeattribute base_typeattr_338)
(typeattributeset base_typeattr_338 (and (domain ) (not (hal_gatekeeper_client hal_gatekeeper_server ))))
(typeattribute base_typeattr_337)
(typeattributeset base_typeattr_337 (and (domain ) (not (hal_gatekeeper_server ))))
(typeattribute base_typeattr_336)
(typeattributeset base_typeattr_336 (and (domain ) (not (hal_fingerprint_client hal_fingerprint_server ))))
(typeattribute base_typeattr_335)
(typeattributeset base_typeattr_335 (and (domain ) (not (hal_fingerprint_server ))))
(typeattribute base_typeattr_334)
(typeattributeset base_typeattr_334 (and (domain ) (not (hal_face_client hal_face_server ))))
(typeattribute base_typeattr_333)
(typeattributeset base_typeattr_333 (and (domain ) (not (hal_face_server ))))
(typeattribute base_typeattr_332)
(typeattributeset base_typeattr_332 (and (domain ) (not (hal_dumpstate_client hal_dumpstate_server ))))
(typeattribute base_typeattr_331)
(typeattributeset base_typeattr_331 (and (domain ) (not (hal_dumpstate_server ))))
(typeattribute base_typeattr_330)
(typeattributeset base_typeattr_330 (and (domain ) (not (hal_drm_client hal_drm_server ))))
(typeattribute base_typeattr_329)
(typeattributeset base_typeattr_329 (and (domain ) (not (hal_drm_server ))))
(typeattribute base_typeattr_328)
(typeattributeset base_typeattr_328 (and (domain ) (not (hal_contexthub_client hal_contexthub_server ))))
(typeattribute base_typeattr_327)
(typeattributeset base_typeattr_327 (and (domain ) (not (hal_contexthub_server ))))
(typeattribute base_typeattr_326)
(typeattributeset base_typeattr_326 (and (domain ) (not (hal_confirmationui_client hal_confirmationui_server ))))
(typeattribute base_typeattr_325)
(typeattributeset base_typeattr_325 (and (domain ) (not (hal_confirmationui_server ))))
(typeattribute base_typeattr_324)
(typeattributeset base_typeattr_324 (and (data_file_type ) (not (anr_data_file tombstone_data_file zoneinfo_data_file ))))
(typeattribute base_typeattr_323)
(typeattributeset base_typeattr_323 (and (domain ) (not (hal_configstore_server logd tombstoned ))))
(typeattribute base_typeattr_322)
(typeattributeset base_typeattr_322 (and (domain ) (not (hal_configstore_client hal_configstore_server ))))
(typeattribute base_typeattr_321)
(typeattributeset base_typeattr_321 (and (domain ) (not (hal_configstore_server ))))
(typeattribute base_typeattr_320)
(typeattributeset base_typeattr_320 (and (domain ) (not (hal_codec2_client hal_codec2_server ))))
(typeattribute base_typeattr_319)
(typeattributeset base_typeattr_319 (and (domain ) (not (hal_codec2_server ))))
(typeattribute base_typeattr_318)
(typeattributeset base_typeattr_318 (and (domain ) (not (hal_cas_client hal_cas_server ))))
(typeattribute base_typeattr_317)
(typeattributeset base_typeattr_317 (and (domain ) (not (hal_cas_server ))))
(typeattribute base_typeattr_316)
(typeattributeset base_typeattr_316 (and (halserverdomain ) (not (hal_camera_server ))))
(typeattribute base_typeattr_315)
(typeattributeset base_typeattr_315 (and (domain ) (not (hal_camera_client hal_camera_server ))))
(typeattribute base_typeattr_314)
(typeattributeset base_typeattr_314 (and (domain ) (not (hal_camera_server ))))
(typeattribute base_typeattr_313)
(typeattributeset base_typeattr_313 (and (domain ) (not (hal_broadcastradio_client hal_broadcastradio_server ))))
(typeattribute base_typeattr_312)
(typeattributeset base_typeattr_312 (and (domain ) (not (hal_broadcastradio_server ))))
(typeattribute base_typeattr_311)
(typeattributeset base_typeattr_311 (and (domain ) (not (hal_bootctl_client hal_bootctl_server ))))
(typeattribute base_typeattr_310)
(typeattributeset base_typeattr_310 (and (domain ) (not (hal_bootctl_server ))))
(typeattribute base_typeattr_309)
(typeattributeset base_typeattr_309 (and (domain ) (not (hal_bluetooth_client hal_bluetooth_server ))))
(typeattribute base_typeattr_308)
(typeattributeset base_typeattr_308 (and (domain ) (not (hal_bluetooth_server ))))
(typeattribute base_typeattr_307)
(typeattributeset base_typeattr_307 (and (domain ) (not (hal_authsecret_client hal_authsecret_server ))))
(typeattribute base_typeattr_306)
(typeattributeset base_typeattr_306 (and (domain ) (not (hal_authsecret_server ))))
(typeattribute base_typeattr_305)
(typeattributeset base_typeattr_305 (and (domain ) (not (hal_audiocontrol_client hal_audiocontrol_server ))))
(typeattribute base_typeattr_304)
(typeattributeset base_typeattr_304 (and (domain ) (not (hal_audiocontrol_server ))))
(typeattribute base_typeattr_303)
(typeattributeset base_typeattr_303 (and (halserverdomain ) (not (hal_audio_server hal_omx_server ))))
(typeattribute base_typeattr_302)
(typeattributeset base_typeattr_302 (and (domain ) (not (hal_audio_client hal_audio_server ))))
(typeattribute base_typeattr_301)
(typeattributeset base_typeattr_301 (and (domain ) (not (hal_audio_server ))))
(typeattribute base_typeattr_300)
(typeattributeset base_typeattr_300 (and (domain ) (not (hal_atrace_client hal_atrace_server ))))
(typeattribute base_typeattr_299)
(typeattributeset base_typeattr_299 (and (domain ) (not (hal_atrace_server ))))
(typeattribute base_typeattr_298)
(typeattributeset base_typeattr_298 (and (domain ) (not (hal_allocator_client hal_allocator_server ))))
(typeattribute base_typeattr_297)
(typeattributeset base_typeattr_297 (and (domain ) (not (hal_allocator_server ))))
(typeattribute base_typeattr_296)
(typeattributeset base_typeattr_296 (and (domain ) (not (gatekeeperd ))))
(typeattribute base_typeattr_295)
(typeattributeset base_typeattr_295 (and (domain ) (not (hal_bufferhub_client hal_bufferhub_server ))))
(typeattribute base_typeattr_294)
(typeattributeset base_typeattr_294 (and (domain ) (not (hal_bufferhub_server ))))
(typeattribute base_typeattr_293)
(typeattributeset base_typeattr_293 (and (domain ) (not (vold ))))
(typeattribute base_typeattr_292)
(typeattributeset base_typeattr_292 (and (fs_type file_type ) (not (fsck_exec ))))
(typeattribute base_typeattr_291)
(typeattributeset base_typeattr_291 (and (domain ) (not (init vold ))))
(typeattribute base_typeattr_290)
(typeattributeset base_typeattr_290 (and (domain ) (not (flags_health_check init ))))
(typeattribute base_typeattr_289)
(typeattributeset base_typeattr_289 (and (domain ) (not (fingerprintd ))))
(typeattribute base_typeattr_288)
(typeattributeset base_typeattr_288 (and (domain ) (not (dumpstate shell system_server traceur_app ))))
(typeattribute base_typeattr_287)
(typeattributeset base_typeattr_287 (and (domain ) (not (dumpstate ))))
(typeattribute base_typeattr_286)
(typeattributeset base_typeattr_286 (and (service_manager_type ) (not (apex_service dumpstate_service gatekeeper_service iorapd_service virtual_touchpad_service vold_service vr_hwc_service ))))
(typeattribute base_typeattr_285)
(typeattributeset base_typeattr_285 (and (domain ) (not (drmserver ))))
(typeattribute base_typeattr_284)
(typeattributeset base_typeattr_284 (and (domain ) (not (hal_codec2_server hal_omx_server ))))
(typeattribute base_typeattr_283)
(typeattributeset base_typeattr_283 (and (coredomain ) (not (charger healthd incidentd recovery shell ueventd ))))
(typeattribute base_typeattr_282)
(typeattributeset base_typeattr_282 (and (coredomain ) (not (appdomain ))))
(typeattribute base_typeattr_281)
(typeattributeset base_typeattr_281 (and (coredomain ) (not (system_writes_mnt_vendor_violators init ueventd vold ))))
(typeattribute base_typeattr_280)
(typeattributeset base_typeattr_280 (and (coredomain ) (not (appdomain bootanim crash_dump heapprofd init kernel perfprofd ueventd ))))
(typeattribute base_typeattr_279)
(typeattributeset base_typeattr_279 (not (coredomain ) ))
(typeattribute base_typeattr_278)
(typeattributeset base_typeattr_278 (not (rootfs system_file vendor_file ) ))
(typeattribute base_typeattr_277)
(typeattributeset base_typeattr_277 (and (domain ) (not (installd profman ))))
(typeattribute base_typeattr_276)
(typeattributeset base_typeattr_276 (and (domain ) (not (dumpstate init vendor_init ))))
(typeattribute base_typeattr_275)
(typeattributeset base_typeattr_275 (not (hwservicemanager ) ))
(typeattribute base_typeattr_274)
(typeattributeset base_typeattr_274 (not (servicemanager vndservicemanager ) ))
(typeattribute base_typeattr_273)
(typeattributeset base_typeattr_273 (and (domain ) (not (appdomain adbd dumpstate installd ))))
(typeattribute base_typeattr_272)
(typeattributeset base_typeattr_272 (and (domain ) (not (appdomain adbd dumpstate init installd simpleperf_app_runner system_server ))))
(typeattribute base_typeattr_271)
(typeattributeset base_typeattr_271 (and (domain ) (not (adbd dumpstate init installd shell vold ))))
(typeattribute base_typeattr_270)
(typeattributeset base_typeattr_270 (and (domain ) (not (installd shell ))))
(typeattribute base_typeattr_269)
(typeattributeset base_typeattr_269 (and (domain ) (not (appdomain installd ))))
(typeattribute base_typeattr_268)
(typeattributeset base_typeattr_268 (and (domain ) (not (app_zygote runas simpleperf_app_runner webview_zygote zygote ))))
(typeattribute base_typeattr_267)
(typeattributeset base_typeattr_267 (and (domain ) (not (adbd init runas zygote ))))
(typeattribute base_typeattr_266)
(typeattributeset base_typeattr_266 (and (domain ) (not (appdomain installd system_server traced_probes ))))
(typeattribute base_typeattr_265)
(typeattributeset base_typeattr_265 (and (domain ) (not (init installd system_app system_server vold_prepare_subdirs ))))
(typeattribute base_typeattr_264)
(typeattributeset base_typeattr_264 (not (domain ) ))
(typeattribute base_typeattr_263)
(typeattributeset base_typeattr_263 (and (domain ) (not (untrusted_app_27 untrusted_app_25 ))))
(typeattribute base_typeattr_262)
(typeattributeset base_typeattr_262 (and (file_type ) (not (apk_data_file app_data_file asec_public_file ))))
(typeattribute base_typeattr_261)
(typeattributeset base_typeattr_261 (and (domain ) (not (dumpstate incidentd system_server ))))
(typeattribute base_typeattr_260)
(typeattributeset base_typeattr_260 (and (domain ) (not (hal_codec2_server hal_omx_server crash_dump dumpstate incidentd mediaextractor system_server tombstoned ))))
(typeattribute base_typeattr_259)
(typeattributeset base_typeattr_259 (and (domain ) (not (app_zygote system_server webview_zygote ))))
(typeattribute base_typeattr_258)
(typeattributeset base_typeattr_258 (and (domain ) (not (system_server ))))
(typeattribute base_typeattr_257)
(typeattributeset base_typeattr_257 (and (domain ) (not (system_server zygote ))))
(typeattribute base_typeattr_256)
(typeattributeset base_typeattr_256 (and (system_file_type ) (not (crash_dump_exec system_event_log_tags_file system_lib_file system_linker_exec system_linker_config_file system_seccomp_policy_file system_security_cacerts_file system_zoneinfo_file task_profiles_file file_contexts_file property_contexts_file netutils_wrapper_exec ))))
(typeattribute base_typeattr_255)
(typeattributeset base_typeattr_255 (and (vendor_file_type ) (not (vendor_task_profiles_file vendor_app_file vendor_configs_file same_process_hal_file vndk_sp_file vendor_framework_file vendor_overlay_file vendor_public_lib_file vendor_keylayout_file vendor_keychars_file vendor_idc_file ))))
(typeattribute base_typeattr_254)
(typeattributeset base_typeattr_254 (and (coredomain ) (not (system_executes_vendor_violators crash_dump init kernel shell ueventd ))))
(typeattribute base_typeattr_253)
(typeattributeset base_typeattr_253 (and (vendor_file_type ) (not (same_process_hal_file ))))
(typeattribute base_typeattr_252)
(typeattributeset base_typeattr_252 (and (coredomain ) (not (system_executes_vendor_violators shell ))))
(typeattribute base_typeattr_251)
(typeattributeset base_typeattr_251 (and (vendor_file_type ) (not (vendor_app_file same_process_hal_file vndk_sp_file vendor_public_lib_file ))))
(typeattribute base_typeattr_250)
(typeattributeset base_typeattr_250 (and (coredomain ) (not (system_executes_vendor_violators init shell ))))
(typeattribute base_typeattr_249)
(typeattributeset base_typeattr_249 (and (system_file_type ) (not (crash_dump_exec system_lib_file system_linker_exec netutils_wrapper_exec ))))
(typeattribute base_typeattr_248)
(typeattributeset base_typeattr_248 (and (domain ) (not (appdomain coredomain vendor_executes_system_violators vendor_init ))))
(typeattribute base_typeattr_247)
(typeattributeset base_typeattr_247 (and (coredomain ) (not (init shell ))))
(typeattribute base_typeattr_246)
(typeattributeset base_typeattr_246 (and (coredomain ) (not (data_between_core_and_vendor_violators init ))))
(typeattribute base_typeattr_245)
(typeattributeset base_typeattr_245 (and (coredomain ) (not (data_between_core_and_vendor_violators init vold vold_prepare_subdirs ))))
(typeattribute base_typeattr_244)
(typeattributeset base_typeattr_244 (and (domain ) (not (appdomain coredomain data_between_core_and_vendor_violators ))))
(typeattribute base_typeattr_243)
(typeattributeset base_typeattr_243 (and (core_data_file_type ) (not (system_data_file vendor_data_file unencrypted_data_file zoneinfo_data_file ))))
(typeattribute base_typeattr_242)
(typeattributeset base_typeattr_242 (and (core_data_file_type ) (not (system_data_file vendor_data_file zoneinfo_data_file ))))
(typeattribute base_typeattr_241)
(typeattributeset base_typeattr_241 (and (core_data_file_type ) (not (unencrypted_data_file zoneinfo_data_file ))))
(typeattribute base_typeattr_240)
(typeattributeset base_typeattr_240 (and (vendor_init ) (not (data_between_core_and_vendor_violators ))))
(typeattribute base_typeattr_239)
(typeattributeset base_typeattr_239 (and (core_data_file_type ) (not (zoneinfo_data_file ))))
(typeattribute base_typeattr_238)
(typeattributeset base_typeattr_238 (and (domain ) (not (appdomain coredomain data_between_core_and_vendor_violators vendor_init ))))
(typeattribute base_typeattr_237)
(typeattributeset base_typeattr_237 (and (data_file_type ) (not (core_data_file_type vendor_data_file ))))
(typeattribute base_typeattr_236)
(typeattributeset base_typeattr_236 (and (data_file_type ) (not (core_data_file_type ))))
(typeattribute base_typeattr_235)
(typeattributeset base_typeattr_235 (and (coredomain ) (not (appdomain data_between_core_and_vendor_violators init vold_prepare_subdirs ))))
(typeattribute base_typeattr_234)
(typeattributeset base_typeattr_234 (and (dev_type file_type ) (not (core_data_file_type coredomain_socket unlabeled ))))
(typeattribute base_typeattr_233)
(typeattributeset base_typeattr_233 (and (coredomain ) (not (socket_between_core_and_vendor_violators init ueventd ))))
(typeattribute base_typeattr_232)
(typeattributeset base_typeattr_232 (and (core_data_file_type coredomain_socket unlabeled ) (not (pdx_endpoint_socket_type pdx_channel_socket_type app_data_file privapp_data_file ))))
(typeattribute base_typeattr_231)
(typeattributeset base_typeattr_231 (and (domain ) (not (appdomain coredomain socket_between_core_and_vendor_violators data_between_core_and_vendor_violators vendor_init ))))
(typeattribute base_typeattr_230)
(typeattributeset base_typeattr_230 (and (domain ) (not (netdomain coredomain socket_between_core_and_vendor_violators ))))
(typeattribute base_typeattr_229)
(typeattributeset base_typeattr_229 (and (coredomain ) (not (init logd mdnsd netd tombstoned ))))
(typeattribute base_typeattr_228)
(typeattributeset base_typeattr_228 (and (domain ) (not (appdomain coredomain socket_between_core_and_vendor_violators ))))
(typeattribute base_typeattr_227)
(typeattributeset base_typeattr_227 (and (domain ) (not (coredomain socket_between_core_and_vendor_violators ))))
(typeattribute base_typeattr_226)
(typeattributeset base_typeattr_226 (and (coredomain ) (not (adbd init ))))
(typeattribute base_typeattr_225)
(typeattributeset base_typeattr_225 (and (coredomain ) (not (shell ))))
(typeattribute base_typeattr_224)
(typeattributeset base_typeattr_224 (and (coredomain ) (not (shell ueventd ))))
(typeattribute base_typeattr_223)
(typeattributeset base_typeattr_223 (and (service_manager_type ) (not (app_api_service ephemeral_app_api_service audioserver_service cameraserver_service drmserver_service keystore_service mediaserver_service mediametrics_service mediaextractor_service mediadrmserver_service nfc_service radio_service virtual_touchpad_service vr_hwc_service vr_manager_service ))))
(typeattribute base_typeattr_222)
(typeattributeset base_typeattr_222 (and (domain ) (not (appdomain coredomain binder_in_vendor_violators ))))
(typeattribute base_typeattr_221)
(typeattributeset base_typeattr_221 (and (domain ) (not (hwservicemanager servicemanager vndservicemanager ))))
(typeattribute base_typeattr_220)
(typeattributeset base_typeattr_220 (and (domain ) (not (hal_bootctl_server fastbootd init recovery ueventd uncrypt update_engine vendor_init vendor_misc_writer vold ))))
(typeattribute base_typeattr_219)
(typeattributeset base_typeattr_219 (and (domain ) (not (fastbootd recovery update_engine ))))
(typeattribute base_typeattr_218)
(typeattributeset base_typeattr_218 (and (domain ) (not (e2fs fastbootd fsck init recovery vold ))))
(typeattribute base_typeattr_217)
(typeattributeset base_typeattr_217 (and (domain ) (not (init recovery shell system_server ueventd ))))
(typeattribute base_typeattr_216)
(typeattributeset base_typeattr_216 (and (domain ) (not (dumpstate init system_server ))))
(typeattribute base_typeattr_215)
(typeattributeset base_typeattr_215 (and (domain ) (not (hal_camera_server hal_cas_server hal_drm_server adbd dumpstate fastbootd init mediadrmserver recovery shell system_server vendor_init ))))
(typeattribute base_typeattr_214)
(typeattributeset base_typeattr_214 (and (domain ) (not (coredomain vendor_init ))))
(typeattribute base_typeattr_213)
(typeattributeset base_typeattr_213 (and (domain ) (not (init system_server vendor_init ))))
(typeattribute base_typeattr_212)
(typeattributeset base_typeattr_212 (and (domain ) (not (init system_server ))))
(typeattribute base_typeattr_211)
(typeattributeset base_typeattr_211 (and (fs_type ) (not (contextmount_type ))))
(typeattribute base_typeattr_210)
(typeattributeset base_typeattr_210 (and (domain ) (not (init kernel recovery ))))
(typeattribute base_typeattr_209)
(typeattributeset base_typeattr_209 (and (domain ) (not (servicemanager ))))
(typeattribute base_typeattr_208)
(typeattributeset base_typeattr_208 (and (domain ) (not (init vendor_init ))))
(typeattribute base_typeattr_207)
(typeattributeset base_typeattr_207 (and (domain ) (not (init ueventd ))))
(typeattribute base_typeattr_206)
(typeattributeset base_typeattr_206 (and (file_type ) (not (exec_type postinstall_file ))))
(typeattribute base_typeattr_205)
(typeattributeset base_typeattr_205 (and (domain ) (not (shell ueventd ))))
(typeattribute base_typeattr_204)
(typeattributeset base_typeattr_204 (and (domain ) (not (init shell system_server ueventd ))))
(typeattribute base_typeattr_203)
(typeattributeset base_typeattr_203 (and (domain ) (not (kernel ))))
(typeattribute base_typeattr_202)
(typeattributeset base_typeattr_202 (and (domain ) (not (init kernel ueventd vold ))))
(typeattribute base_typeattr_201)
(typeattributeset base_typeattr_201 (and (domain ) (not (init recovery ))))
(typeattribute base_typeattr_200)
(typeattributeset base_typeattr_200 (and (domain ) (not (domain ))))
(typeattribute base_typeattr_199)
(typeattributeset base_typeattr_199 (and (domain ) (not (coredomain ))))
(typeattribute base_typeattr_198)
(typeattributeset base_typeattr_198 (and (domain ) (not (isolated_app servicemanager vndservicemanager ))))
(typeattribute base_typeattr_197)
(typeattributeset base_typeattr_197 (and (appdomain coredomain binder_in_vendor_violators ) (not (hwservicemanager ))))
(typeattribute base_typeattr_196)
(typeattributeset base_typeattr_196 (and (domain ) (not (untrusted_app_all ephemeral_app isolated_app mediaprovider ))))
(typeattribute base_typeattr_195)
(typeattributeset base_typeattr_195 (and (domain ) (not (display_service_server ))))
(typeattribute base_typeattr_194)
(typeattributeset base_typeattr_194 (and (domain ) (not (cameraserver ))))
(typeattribute base_typeattr_193)
(typeattributeset base_typeattr_193 (and (domain ) (not (camera_service_server ))))
(typeattribute base_typeattr_192)
(typeattributeset base_typeattr_192 (and (domain ) (not (bufferhubd ))))
(typeattribute base_typeattr_191)
(typeattributeset base_typeattr_191 (and (domain ) (not (bootstat init ))))
(typeattribute base_typeattr_190)
(typeattributeset base_typeattr_190 (and (domain ) (not (bootstat init system_server ))))
(typeattribute base_typeattr_189)
(typeattributeset base_typeattr_189 (and (domain ) (not (bootanim bootstat dumpstate init recovery shell system_server ))))
(typeattribute base_typeattr_188)
(typeattributeset base_typeattr_188 (and (appdomain ) (not (bluetooth system_app ))))
(typeattribute base_typeattr_187)
(typeattributeset base_typeattr_187 (and (data_file_type ) (not (system_data_file apk_data_file dalvikcache_data_file ))))
(typeattribute base_typeattr_186)
(typeattributeset base_typeattr_186 (and (appdomain ) (not (bluetooth nfc ))))
(typeattribute base_typeattr_185)
(typeattributeset base_typeattr_185 (and (appdomain ) (not (untrusted_app_all platform_app priv_app ))))
(typeattribute base_typeattr_184)
(typeattributeset base_typeattr_184 (and (appdomain ) (not (platform_app ))))
(typeattribute base_typeattr_183)
(typeattributeset base_typeattr_183 (and (domain ) (not (appdomain perfetto ))))
(typeattribute base_typeattr_182)
(typeattributeset base_typeattr_182 (and (appdomain ) (not (shell ))))
(typeattribute base_typeattr_181)
(typeattributeset base_typeattr_181 (and (domain ) (not (appdomain crash_dump ))))
(typeattribute base_typeattr_180)
(typeattributeset base_typeattr_180 (and (domain ) (not (appdomain ))))
(typeattribute base_typeattr_179)
(typeattributeset base_typeattr_179 (and (appdomain ) (not (radio ))))
(typeattribute base_typeattr_178)
(typeattributeset base_typeattr_178 (and (appdomain ) (not (nfc ))))
(typeattribute base_typeattr_177)
(typeattributeset base_typeattr_177 (and (appdomain ) (not (bluetooth network_stack ))))
(typeattribute base_typeattr_176)
(typeattributeset base_typeattr_176 (and (appdomain ) (not (coredomain ))))
(typeattribute base_typeattr_175)
(typeattributeset base_typeattr_175 (and (appdomain ) (not (bluetooth ))))
(typeattribute base_typeattr_174)
(typeattributeset base_typeattr_174 (and (appdomain ) (not (ephemeral_app isolated_app ))))
(typeattribute base_typeattr_173)
(typeattributeset base_typeattr_173 (and (appdomain ) (not (untrusted_app_all ephemeral_app isolated_app platform_app priv_app shell system_app ))))
(typeattribute base_typeattr_172)
(typeattributeset base_typeattr_172 (and (appdomain ) (not (ephemeral_app ))))
(typeattribute base_typeattr_171)
(typeattributeset base_typeattr_171 (and (appdomain ) (not (isolated_app ))))
(typeattribute base_typeattr_170)
(typeattributeset base_typeattr_170 (and (domain ) (not (apexd init ))))
(typeattribute base_typeattr_169)
(typeattributeset base_typeattr_169 (and (domain ) (not (apexd init system_server ))))
(typeattribute base_typeattr_168)
(typeattributeset base_typeattr_168 (and (domain ) (not (apexd ))))
(typeattribute base_typeattr_167)
(typeattributeset base_typeattr_167 (all))
(typeattribute base_typeattr_166)
(typeattributeset base_typeattr_166 (and (domain ) (not (init ))))
(typeattribute base_typeattr_165)
(typeattributeset base_typeattr_165 (and (hal_wifi_supplicant_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_164)
(typeattributeset base_typeattr_164 (and (hal_wifi_supplicant_server ) (not (hal_wifi_supplicant ))))
(typeattribute base_typeattr_163)
(typeattributeset base_typeattr_163 (and (hal_wifi_supplicant_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_162)
(typeattributeset base_typeattr_162 (and (hal_wifi_offload_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_161)
(typeattributeset base_typeattr_161 (and (hal_wifi_offload_server ) (not (hal_wifi_offload ))))
(typeattribute base_typeattr_160)
(typeattributeset base_typeattr_160 (and (hal_wifi_offload_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_159)
(typeattributeset base_typeattr_159 (and (hal_wifi_hostapd_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_158)
(typeattributeset base_typeattr_158 (and (hal_wifi_hostapd_server ) (not (hal_wifi_hostapd ))))
(typeattribute base_typeattr_157)
(typeattributeset base_typeattr_157 (and (hal_wifi_hostapd_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_156)
(typeattributeset base_typeattr_156 (and (hal_wifi_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_155)
(typeattributeset base_typeattr_155 (and (hal_wifi_server ) (not (hal_wifi ))))
(typeattribute base_typeattr_154)
(typeattributeset base_typeattr_154 (and (hal_wifi_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_153)
(typeattributeset base_typeattr_153 (and (hal_weaver_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_152)
(typeattributeset base_typeattr_152 (and (hal_weaver_server ) (not (hal_weaver ))))
(typeattribute base_typeattr_151)
(typeattributeset base_typeattr_151 (and (hal_weaver_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_150)
(typeattributeset base_typeattr_150 (and (hal_vr_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_149)
(typeattributeset base_typeattr_149 (and (hal_vr_server ) (not (hal_vr ))))
(typeattribute base_typeattr_148)
(typeattributeset base_typeattr_148 (and (hal_vr_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_147)
(typeattributeset base_typeattr_147 (and (hal_vibrator_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_146)
(typeattributeset base_typeattr_146 (and (hal_vibrator_server ) (not (hal_vibrator ))))
(typeattribute base_typeattr_145)
(typeattributeset base_typeattr_145 (and (hal_vibrator_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_144)
(typeattributeset base_typeattr_144 (and (hal_vehicle_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_143)
(typeattributeset base_typeattr_143 (and (hal_vehicle_server ) (not (hal_vehicle ))))
(typeattribute base_typeattr_142)
(typeattributeset base_typeattr_142 (and (hal_vehicle_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_141)
(typeattributeset base_typeattr_141 (and (hal_usb_gadget_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_140)
(typeattributeset base_typeattr_140 (and (hal_usb_gadget_server ) (not (hal_usb_gadget ))))
(typeattribute base_typeattr_139)
(typeattributeset base_typeattr_139 (and (hal_usb_gadget_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_138)
(typeattributeset base_typeattr_138 (and (hal_usb_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_137)
(typeattributeset base_typeattr_137 (and (hal_usb_server ) (not (hal_usb ))))
(typeattribute base_typeattr_136)
(typeattributeset base_typeattr_136 (and (hal_usb_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_135)
(typeattributeset base_typeattr_135 (and (hal_tv_input_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_134)
(typeattributeset base_typeattr_134 (and (hal_tv_input_server ) (not (hal_tv_input ))))
(typeattribute base_typeattr_133)
(typeattributeset base_typeattr_133 (and (hal_tv_input_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_132)
(typeattributeset base_typeattr_132 (and (hal_tv_cec_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_131)
(typeattributeset base_typeattr_131 (and (hal_tv_cec_server ) (not (hal_tv_cec ))))
(typeattribute base_typeattr_130)
(typeattributeset base_typeattr_130 (and (hal_tv_cec_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_129)
(typeattributeset base_typeattr_129 (and (hal_thermal_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_128)
(typeattributeset base_typeattr_128 (and (hal_thermal_server ) (not (hal_thermal ))))
(typeattribute base_typeattr_127)
(typeattributeset base_typeattr_127 (and (hal_thermal_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_126)
(typeattributeset base_typeattr_126 (and (hal_tetheroffload_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_125)
(typeattributeset base_typeattr_125 (and (hal_tetheroffload_server ) (not (hal_tetheroffload ))))
(typeattribute base_typeattr_124)
(typeattributeset base_typeattr_124 (and (hal_tetheroffload_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_123)
(typeattributeset base_typeattr_123 (and (hal_telephony_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_122)
(typeattributeset base_typeattr_122 (and (hal_telephony_server ) (not (hal_telephony ))))
(typeattribute base_typeattr_121)
(typeattributeset base_typeattr_121 (and (hal_telephony_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_120)
(typeattributeset base_typeattr_120 (and (hal_sensors_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_119)
(typeattributeset base_typeattr_119 (and (hal_sensors_server ) (not (hal_sensors ))))
(typeattribute base_typeattr_118)
(typeattributeset base_typeattr_118 (and (hal_sensors_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_117)
(typeattributeset base_typeattr_117 (and (hal_secure_element_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_116)
(typeattributeset base_typeattr_116 (and (hal_secure_element_server ) (not (hal_secure_element ))))
(typeattribute base_typeattr_115)
(typeattributeset base_typeattr_115 (and (hal_secure_element_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_114)
(typeattributeset base_typeattr_114 (and (hal_power_stats_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_113)
(typeattributeset base_typeattr_113 (and (hal_power_stats_server ) (not (hal_power_stats ))))
(typeattribute base_typeattr_112)
(typeattributeset base_typeattr_112 (and (hal_power_stats_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_111)
(typeattributeset base_typeattr_111 (and (hal_power_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_110)
(typeattributeset base_typeattr_110 (and (hal_power_server ) (not (hal_power ))))
(typeattribute base_typeattr_109)
(typeattributeset base_typeattr_109 (and (hal_power_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_108)
(typeattributeset base_typeattr_108 (and (hal_omx_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_107)
(typeattributeset base_typeattr_107 (and (hal_omx_server ) (not (hal_omx ))))
(typeattribute base_typeattr_106)
(typeattributeset base_typeattr_106 (and (hal_omx_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_105)
(typeattributeset base_typeattr_105 (and (hal_oemlock_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_104)
(typeattributeset base_typeattr_104 (and (hal_oemlock_server ) (not (hal_oemlock ))))
(typeattribute base_typeattr_103)
(typeattributeset base_typeattr_103 (and (hal_oemlock_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_102)
(typeattributeset base_typeattr_102 (and (hal_nfc_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_101)
(typeattributeset base_typeattr_101 (and (hal_nfc_server ) (not (hal_nfc ))))
(typeattribute base_typeattr_100)
(typeattributeset base_typeattr_100 (and (hal_nfc_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_99)
(typeattributeset base_typeattr_99 (and (hal_neuralnetworks_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_98)
(typeattributeset base_typeattr_98 (and (hal_neuralnetworks_server ) (not (hal_neuralnetworks ))))
(typeattribute base_typeattr_97)
(typeattributeset base_typeattr_97 (and (hal_neuralnetworks_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_96)
(typeattributeset base_typeattr_96 (and (hal_memtrack_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_95)
(typeattributeset base_typeattr_95 (and (hal_memtrack_server ) (not (hal_memtrack ))))
(typeattribute base_typeattr_94)
(typeattributeset base_typeattr_94 (and (hal_memtrack_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_93)
(typeattributeset base_typeattr_93 (and (hal_lowpan_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_92)
(typeattributeset base_typeattr_92 (and (hal_lowpan_server ) (not (hal_lowpan ))))
(typeattribute base_typeattr_91)
(typeattributeset base_typeattr_91 (and (hal_lowpan_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_90)
(typeattributeset base_typeattr_90 (and (hal_light_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_89)
(typeattributeset base_typeattr_89 (and (hal_light_server ) (not (hal_light ))))
(typeattribute base_typeattr_88)
(typeattributeset base_typeattr_88 (and (hal_light_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_87)
(typeattributeset base_typeattr_87 (and (hal_keymaster_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_86)
(typeattributeset base_typeattr_86 (and (hal_keymaster_server ) (not (hal_keymaster ))))
(typeattribute base_typeattr_85)
(typeattributeset base_typeattr_85 (and (hal_keymaster_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_84)
(typeattributeset base_typeattr_84 (and (hal_ir_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_83)
(typeattributeset base_typeattr_83 (and (hal_ir_server ) (not (hal_ir ))))
(typeattribute base_typeattr_82)
(typeattributeset base_typeattr_82 (and (hal_ir_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_81)
(typeattributeset base_typeattr_81 (and (hal_input_classifier_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_80)
(typeattributeset base_typeattr_80 (and (hal_input_classifier_server ) (not (hal_input_classifier ))))
(typeattribute base_typeattr_79)
(typeattributeset base_typeattr_79 (and (hal_input_classifier_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_78)
(typeattributeset base_typeattr_78 (and (hal_health_storage_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_77)
(typeattributeset base_typeattr_77 (and (hal_health_storage_server ) (not (hal_health_storage ))))
(typeattribute base_typeattr_76)
(typeattributeset base_typeattr_76 (and (hal_health_storage_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_75)
(typeattributeset base_typeattr_75 (and (hal_health_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_74)
(typeattributeset base_typeattr_74 (and (hal_health_server ) (not (hal_health ))))
(typeattribute base_typeattr_73)
(typeattributeset base_typeattr_73 (and (hal_health_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_72)
(typeattributeset base_typeattr_72 (and (hal_graphics_composer_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_71)
(typeattributeset base_typeattr_71 (and (hal_graphics_composer_server ) (not (hal_graphics_composer ))))
(typeattribute base_typeattr_70)
(typeattributeset base_typeattr_70 (and (hal_graphics_composer_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_69)
(typeattributeset base_typeattr_69 (and (hal_graphics_allocator_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_68)
(typeattributeset base_typeattr_68 (and (hal_graphics_allocator_server ) (not (hal_graphics_allocator ))))
(typeattribute base_typeattr_67)
(typeattributeset base_typeattr_67 (and (hal_graphics_allocator_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_66)
(typeattributeset base_typeattr_66 (and (hal_gnss_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_65)
(typeattributeset base_typeattr_65 (and (hal_gnss_server ) (not (hal_gnss ))))
(typeattribute base_typeattr_64)
(typeattributeset base_typeattr_64 (and (hal_gnss_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_63)
(typeattributeset base_typeattr_63 (and (hal_gatekeeper_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_62)
(typeattributeset base_typeattr_62 (and (hal_gatekeeper_server ) (not (hal_gatekeeper ))))
(typeattribute base_typeattr_61)
(typeattributeset base_typeattr_61 (and (hal_gatekeeper_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_60)
(typeattributeset base_typeattr_60 (and (hal_fingerprint_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_59)
(typeattributeset base_typeattr_59 (and (hal_fingerprint_server ) (not (hal_fingerprint ))))
(typeattribute base_typeattr_58)
(typeattributeset base_typeattr_58 (and (hal_fingerprint_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_57)
(typeattributeset base_typeattr_57 (and (hal_face_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_56)
(typeattributeset base_typeattr_56 (and (hal_face_server ) (not (hal_face ))))
(typeattribute base_typeattr_55)
(typeattributeset base_typeattr_55 (and (hal_face_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_54)
(typeattributeset base_typeattr_54 (and (hal_evs_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_53)
(typeattributeset base_typeattr_53 (and (hal_evs_server ) (not (hal_evs ))))
(typeattribute base_typeattr_52)
(typeattributeset base_typeattr_52 (and (hal_evs_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_51)
(typeattributeset base_typeattr_51 (and (hal_dumpstate_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_50)
(typeattributeset base_typeattr_50 (and (hal_dumpstate_server ) (not (hal_dumpstate ))))
(typeattribute base_typeattr_49)
(typeattributeset base_typeattr_49 (and (hal_dumpstate_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_48)
(typeattributeset base_typeattr_48 (and (hal_drm_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_47)
(typeattributeset base_typeattr_47 (and (hal_drm_server ) (not (hal_drm ))))
(typeattribute base_typeattr_46)
(typeattributeset base_typeattr_46 (and (hal_drm_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_45)
(typeattributeset base_typeattr_45 (and (hal_contexthub_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_44)
(typeattributeset base_typeattr_44 (and (hal_contexthub_server ) (not (hal_contexthub ))))
(typeattribute base_typeattr_43)
(typeattributeset base_typeattr_43 (and (hal_contexthub_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_42)
(typeattributeset base_typeattr_42 (and (hal_confirmationui_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_41)
(typeattributeset base_typeattr_41 (and (hal_confirmationui_server ) (not (hal_confirmationui ))))
(typeattribute base_typeattr_40)
(typeattributeset base_typeattr_40 (and (hal_confirmationui_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_39)
(typeattributeset base_typeattr_39 (and (hal_configstore_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_38)
(typeattributeset base_typeattr_38 (and (hal_configstore_server ) (not (hal_configstore ))))
(typeattribute base_typeattr_37)
(typeattributeset base_typeattr_37 (and (hal_configstore_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_36)
(typeattributeset base_typeattr_36 (and (hal_codec2_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_35)
(typeattributeset base_typeattr_35 (and (hal_codec2_server ) (not (hal_codec2 ))))
(typeattribute base_typeattr_34)
(typeattributeset base_typeattr_34 (and (hal_codec2_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_33)
(typeattributeset base_typeattr_33 (and (hal_cas_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_32)
(typeattributeset base_typeattr_32 (and (hal_cas_server ) (not (hal_cas ))))
(typeattribute base_typeattr_31)
(typeattributeset base_typeattr_31 (and (hal_cas_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_30)
(typeattributeset base_typeattr_30 (and (hal_camera_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_29)
(typeattributeset base_typeattr_29 (and (hal_camera_server ) (not (hal_camera ))))
(typeattribute base_typeattr_28)
(typeattributeset base_typeattr_28 (and (hal_camera_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_27)
(typeattributeset base_typeattr_27 (and (hal_broadcastradio_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_26)
(typeattributeset base_typeattr_26 (and (hal_broadcastradio_server ) (not (hal_broadcastradio ))))
(typeattribute base_typeattr_25)
(typeattributeset base_typeattr_25 (and (hal_broadcastradio_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_24)
(typeattributeset base_typeattr_24 (and (hal_bufferhub_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_23)
(typeattributeset base_typeattr_23 (and (hal_bufferhub_server ) (not (hal_bufferhub ))))
(typeattribute base_typeattr_22)
(typeattributeset base_typeattr_22 (and (hal_bufferhub_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_21)
(typeattributeset base_typeattr_21 (and (hal_bootctl_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_20)
(typeattributeset base_typeattr_20 (and (hal_bootctl_server ) (not (hal_bootctl ))))
(typeattribute base_typeattr_19)
(typeattributeset base_typeattr_19 (and (hal_bootctl_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_18)
(typeattributeset base_typeattr_18 (and (hal_bluetooth_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_17)
(typeattributeset base_typeattr_17 (and (hal_bluetooth_server ) (not (hal_bluetooth ))))
(typeattribute base_typeattr_16)
(typeattributeset base_typeattr_16 (and (hal_bluetooth_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_15)
(typeattributeset base_typeattr_15 (and (hal_authsecret_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_14)
(typeattributeset base_typeattr_14 (and (hal_authsecret_server ) (not (hal_authsecret ))))
(typeattribute base_typeattr_13)
(typeattributeset base_typeattr_13 (and (hal_authsecret_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_12)
(typeattributeset base_typeattr_12 (and (hal_audiocontrol_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_11)
(typeattributeset base_typeattr_11 (and (hal_audiocontrol_server ) (not (hal_audiocontrol ))))
(typeattribute base_typeattr_10)
(typeattributeset base_typeattr_10 (and (hal_audiocontrol_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_9)
(typeattributeset base_typeattr_9 (and (hal_audio_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_8)
(typeattributeset base_typeattr_8 (and (hal_audio_server ) (not (hal_audio ))))
(typeattribute base_typeattr_7)
(typeattributeset base_typeattr_7 (and (hal_audio_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_6)
(typeattributeset base_typeattr_6 (and (hal_atrace_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_5)
(typeattributeset base_typeattr_5 (and (hal_atrace_server ) (not (hal_atrace ))))
(typeattribute base_typeattr_4)
(typeattributeset base_typeattr_4 (and (hal_atrace_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_3)
(typeattributeset base_typeattr_3 (and (hal_allocator_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_2)
(typeattributeset base_typeattr_2 (and (hal_allocator_server ) (not (hal_allocator ))))
(typeattribute base_typeattr_1)
(typeattributeset base_typeattr_1 (and (hal_allocator_server ) (not (halserverdomain ))))
; THIS IS A WORKAROUND for the current limitations of the module policy language
; This should be used sparingly until we figure out a saner way to achieve the
; stuff below, for example, by improving typeattribute statement of module
; language.
;
; NOTE: This file has no effect on recovery policy.

; Apps, except isolated apps, are clients of Allocator HAL
; Unfortunately, we can't currently express this in module policy language:
;     typeattribute { appdomain -isolated_app } hal_allocator_client;
;     typeattribute hal_allocator_client halclientdomain;
(typeattributeset hal_allocator_client ((and (appdomain) ((not (isolated_app))))))
(typeattributeset halclientdomain (hal_allocator_client))

; Apps, except isolated apps, are clients of OMX-related services
; Unfortunately, we can't currently express this in module policy language:
(typeattributeset hal_omx_client ((and (appdomain) ((not (isolated_app))))))

; Apps, except isolated apps, are clients of Codec2-related services
; Unfortunately, we can't currently express this in module policy language:
(typeattributeset hal_codec2_client ((and (appdomain) ((not (isolated_app))))))

; Apps, except isolated apps, are clients of Configstore HAL
; Unfortunately, we can't currently express this in module policy language:
;     typeattribute { appdomain -isolated_app } hal_configstore_client;
(typeattributeset hal_configstore_client ((and (appdomain) ((not (isolated_app))))))

; Apps, except isolated apps, are clients of Graphics Allocator HAL
; Unfortunately, we can't currently express this in module policy language:
;     typeattribute { appdomain -isolated_app } hal_graphics_allocator_client;
(typeattributeset hal_graphics_allocator_client ((and (appdomain) ((not (isolated_app))))))

; Apps, except isolated apps, are clients of Cas HAL
; Unfortunately, we can't currently express this in module policy language:
;     typeattribute { appdomain -isolated_app } hal_cas_client;
(typeattributeset hal_cas_client ((and (appdomain) ((not (isolated_app))))))

; Domains hosting Camera HAL implementations are clients of Allocator HAL
; Unfortunately, we can't currently express this in module policy language:
;     typeattribute hal_camera hal_allocator_client;
(typeattributeset hal_allocator_client (hal_camera))

; Apps, except isolated apps, are clients of Neuralnetworks HAL
; Unfortunately, we can't currently express this in module policy language:
;     typeattribute { appdomain -isolated_app } hal_neuralnetworks_client;
(typeattributeset hal_neuralnetworks_client ((and (appdomain) ((not (isolated_app))))))

; TODO(b/112056006): move these to mapping files when/if we implement 'versioned' attributes.
; Rename untrusted_app_visible_* to untrusted_app_visible_*_violators.
; Unfortunately, we can't currently express this in module policy language:
;     typeattribute untrusted_app_visible_hwservice untrusted_app_visible_hwservice_violators;
;     typeattribute untrusted_app_visible_halserver untrusted_app_visible_halserver_violators;
(typeattribute untrusted_app_visible_hwservice)
(typeattributeset untrusted_app_visible_hwservice_violators (untrusted_app_visible_hwservice))
(typeattribute untrusted_app_visible_halserver)
(typeattributeset untrusted_app_visible_halserver_violators (untrusted_app_visible_halserver))

; Apps, except isolated apps, are clients of BufferHub HAL
; Unfortunately, we can't currently express this in module policy language:
;     typeattribute { appdomain -isolated_app } hal_cas_client;
(typeattributeset hal_bufferhub_client ((and (appdomain) ((not (isolated_app))))))