common/private/backuptool.te - LeafOS-Project/android_device_lineage_sepolicy - Gitiles

 type backuptool, domain, coredomain;

 neverallow {
     domain
     -recovery
     -update_engine
 } backuptool:process transition;

 userdebug_or_eng(`
     permissive backuptool;
 ')
	type backuptool, domain, coredomain;

	neverallow {
	domain
	-recovery
	-update_engine
	} backuptool:process transition;

	userdebug_or_eng(`
	permissive backuptool;
	')