| type updater_app, domain, coredomain; |
| |
| app_domain(updater_app) |
| net_domain(updater_app) |
| |
| binder_call(updater_app, gpuservice) |
| binder_call(updater_app, update_engine) |
| |
| allow updater_app app_api_service:service_manager find; |
| allow updater_app recovery_service:service_manager find; |
| allow updater_app system_api_service:service_manager find; |
| allow updater_app update_engine_service:service_manager find; |
| |
| allow updater_app app_data_file:dir create_dir_perms; |
| allow updater_app app_data_file:{ file lnk_file } create_file_perms; |
| |
| allow updater_app cache_file:dir r_dir_perms; |
| |
| allow updater_app cache_recovery_file:dir rw_dir_perms; |
| allow updater_app cache_recovery_file:file create_file_perms; |
| |
| allow updater_app ota_package_file:dir create_dir_perms; |
| allow updater_app ota_package_file:file create_file_perms; |
| |
| get_prop(updater_app, default_prop) |
| get_prop(updater_app, build_prop) |
| |
| set_prop(updater_app, recovery_update_prop) |