| # Domain for shell processes spawned by ADB or console service. | |
| type shell, domain, shelldomain, mlstrustedsubject; | |
| type shell_exec, exec_type, file_type; | |
| # Create and use network sockets. | |
| net_domain(shell) | |
| # Run app_process. | |
| # XXX Transition into its own domain? | |
| app_domain(shell) | |
| # logd access | |
| read_logd(shell) | |
| control_logd(shell) | |
| # read files in /data/anr | |
| allow shell anr_data_file:dir r_dir_perms; | |
| allow shell anr_data_file:file r_file_perms; | |
| # inherits from shelldomain.te |