(role object_r)
(role auditadm_r)
(role secadm_r)
(typeattribute cil_gen_require)
(roleattribute cil_gen_require)
(handleunknown deny)
(mls true)
(policycap network_peer_controls)
(policycap open_perms)
(policycap extended_socket_class)
(policycap nnp_nosuid_transition)
(policycap netlink_xperm)
(policycap functionfs_seclabel)
(sid devnull)
(sidcontext devnull (u object_r null_device ((s0) (s0))))
(sid UNKNOWN26)
(sidcontext UNKNOWN26 (u object_r unlabeled ((s0) (s0))))
(sid UNKNOWN25)
(sidcontext UNKNOWN25 (u object_r unlabeled ((s0) (s0))))
(sid UNKNOWN24)
(sidcontext UNKNOWN24 (u object_r unlabeled ((s0) (s0))))
(sid UNKNOWN23)
(sidcontext UNKNOWN23 (u object_r unlabeled ((s0) (s0))))
(sid UNKNOWN22)
(sidcontext UNKNOWN22 (u object_r unlabeled ((s0) (s0))))
(sid UNKNOWN21)
(sidcontext UNKNOWN21 (u object_r unlabeled ((s0) (s0))))
(sid UNKNOWN20)
(sidcontext UNKNOWN20 (u object_r unlabeled ((s0) (s0))))
(sid UNKNOWN19)
(sidcontext UNKNOWN19 (u object_r unlabeled ((s0) (s0))))
(sid UNKNOWN18)
(sidcontext UNKNOWN18 (u object_r unlabeled ((s0) (s0))))
(sid UNKNOWN17)
(sidcontext UNKNOWN17 (u object_r proc ((s0) (s0))))
(sid UNKNOWN16)
(sidcontext UNKNOWN16 (u object_r unlabeled ((s0) (s0))))
(sid UNKNOWN15)
(sidcontext UNKNOWN15 (u object_r unlabeled ((s0) (s0))))
(sid UNKNOWN14)
(sidcontext UNKNOWN14 (u object_r unlabeled ((s0) (s0))))
(sid UNKNOWN13)
(sidcontext UNKNOWN13 (u object_r unlabeled ((s0) (s0))))
(sid node)
(sidcontext node (u object_r node ((s0) (s0))))
(sid netmsg)
(sidcontext netmsg (u object_r unlabeled ((s0) (s0))))
(sid netif)
(sidcontext netif (u object_r netif ((s0) (s0))))
(sid port)
(sidcontext port (u object_r port ((s0) (s0))))
(sid any_socket)
(sidcontext any_socket (u object_r unlabeled ((s0) (s0))))
(sid init)
(sidcontext init (u object_r unlabeled ((s0) (s0))))
(sid UNKNOWN6)
(sidcontext UNKNOWN6 (u object_r unlabeled ((s0) (s0))))
(sid file)
(sidcontext file (u object_r unlabeled ((s0) (s0))))
(sid UNKNOWN4)
(sidcontext UNKNOWN4 (u object_r labeledfs ((s0) (s0))))
(sid unlabeled)
(sidcontext unlabeled (u object_r unlabeled ((s0) (s0))))
(sid security)
(sidcontext security (u object_r kernel ((s0) (s0))))
(sid kernel)
(sidcontext kernel (u r kernel ((s0) (s0))))
(sidorder (kernel security unlabeled UNKNOWN4 file UNKNOWN6 init any_socket port netif netmsg node UNKNOWN13 UNKNOWN14 UNKNOWN15 UNKNOWN16 UNKNOWN17 UNKNOWN18 UNKNOWN19 UNKNOWN20 UNKNOWN21 UNKNOWN22 UNKNOWN23 UNKNOWN24 UNKNOWN25 UNKNOWN26 devnull ))
(fsuse trans mqueue (u object_r mqueue ((s0) (s0))))
(fsuse trans shm (u object_r shm ((s0) (s0))))
(fsuse trans devtmpfs (u object_r device ((s0) (s0))))
(fsuse trans tmpfs (u object_r tmpfs ((s0) (s0))))
(fsuse trans devpts (u object_r devpts ((s0) (s0))))
(fsuse task sockfs (u object_r sockfs ((s0) (s0))))
(fsuse task pipefs (u object_r pipefs ((s0) (s0))))
(fsuse xattr virtiofs (u object_r labeledfs ((s0) (s0))))
(fsuse xattr incremental-fs (u object_r labeledfs ((s0) (s0))))
(fsuse xattr erofs (u object_r labeledfs ((s0) (s0))))
(fsuse xattr overlay (u object_r labeledfs ((s0) (s0))))
(fsuse xattr squashfs (u object_r labeledfs ((s0) (s0))))
(fsuse xattr f2fs (u object_r labeledfs ((s0) (s0))))
(fsuse xattr btrfs (u object_r labeledfs ((s0) (s0))))
(fsuse xattr xfs (u object_r labeledfs ((s0) (s0))))
(fsuse xattr ext4 (u object_r labeledfs ((s0) (s0))))
(fsuse xattr ext3 (u object_r labeledfs ((s0) (s0))))
(fsuse xattr ext2 (u object_r labeledfs ((s0) (s0))))
(fsuse xattr jffs2 (u object_r labeledfs ((s0) (s0))))
(fsuse xattr yaffs2 (u object_r labeledfs ((s0) (s0))))
(genfscon binder "/binder_logs/failed_transaction_log" (u object_r binderfs_logs_transaction_history ((s0) (s0))))
(genfscon binder "/binder_logs/transactions_hashed" (u object_r binderfs_logs_transaction_history ((s0) (s0))))
(genfscon binder "/binder_logs/transaction_log" (u object_r binderfs_logs_transaction_history ((s0) (s0))))
(genfscon binder "/binder_logs/state_hashed" (u object_r binderfs_logs_state_hashed ((s0) (s0))))
(genfscon binder "/binder_logs/transactions" (u object_r binderfs_logs_transactions ((s0) (s0))))
(genfscon binder "/binder_logs/stats" (u object_r binderfs_logs_stats ((s0) (s0))))
(genfscon binder "/binder_logs/proc" (u object_r binderfs_logs_proc ((s0) (s0))))
(genfscon binder "/binder_logs" (u object_r binderfs_logs ((s0) (s0))))
(genfscon binder "/vndbinder" (u object_r vndbinder_device ((s0) (s0))))
(genfscon binder "/hwbinder" (u object_r hwbinder_device ((s0) (s0))))
(genfscon binder "/features" (u object_r binderfs_features ((s0) (s0))))
(genfscon binder "/binder" (u object_r binder_device ((s0) (s0))))
(genfscon binder "/" (u object_r binderfs ((s0) (s0))))
(genfscon binfmt_misc "/" (u object_r binfmt_miscfs ((s0) (s0))))
(genfscon bpf "/kernelwakelockduration" (u object_r fs_bpf_kernelwakelockduration ((s0) (s0))))
(genfscon bpf "/lock_contention" (u object_r fs_bpf_lock_contention ((s0) (s0))))
(genfscon bpf "/cputimeinstate" (u object_r fs_bpf_cputimeinstate ((s0) (s0))))
(genfscon bpf "/netd_readonly" (u object_r fs_bpf_netd_readonly ((s0) (s0))))
(genfscon bpf "/net_private" (u object_r fs_bpf_net_private ((s0) (s0))))
(genfscon bpf "/netd_shared" (u object_r fs_bpf_netd_shared ((s0) (s0))))
(genfscon bpf "/uprobestats" (u object_r fs_bpf_uprobestats ((s0) (s0))))
(genfscon bpf "/net_shared" (u object_r fs_bpf_net_shared ((s0) (s0))))
(genfscon bpf "/memevents" (u object_r fs_bpf_memevents ((s0) (s0))))
(genfscon bpf "/tethering" (u object_r fs_bpf_tethering ((s0) (s0))))
(genfscon bpf "/dmabuf" (u object_r fs_bpf_dmabuf ((s0) (s0))))
(genfscon bpf "/loader" (u object_r fs_bpf_loader ((s0) (s0))))
(genfscon bpf "/vendor" (u object_r fs_bpf_vendor ((s0) (s0))))
(genfscon bpf "/" (u object_r fs_bpf ((s0) (s0))))
(genfscon cgroup "/" (u object_r cgroup ((s0) (s0))))
(genfscon cgroup2 "/" (u object_r cgroup_v2 ((s0) (s0))))
(genfscon configfs "/" (u object_r configfs ((s0) (s0))))
(genfscon debugfs "/tracing/instances/bootreceiver" (u object_r debugfs_bootreceiver_tracing ((s0) (s0))))
(genfscon debugfs "/tracing/instances/mm_events" (u object_r debugfs_mm_events_tracing ((s0) (s0))))
(genfscon debugfs "/tracing/instances/wifi" (u object_r debugfs_wifi_tracing ((s0) (s0))))
(genfscon debugfs "/tracing/printk_formats" (u object_r debugfs_tracing_printk_formats ((s0) (s0))))
(genfscon debugfs "/tracing/trace_marker" (u object_r debugfs_trace_marker ((s0) (s0))))
(genfscon debugfs "/tracing/instances" (u object_r debugfs_tracing_instances ((s0) (s0))))
(genfscon debugfs "/wakeup_sources" (u object_r debugfs_wakeup_sources ((s0) (s0))))
(genfscon debugfs "/kprobes" (u object_r debugfs_kprobes ((s0) (s0))))
(genfscon debugfs "/tracing" (u object_r debugfs_tracing_debug ((s0) (s0))))
(genfscon debugfs "/mmc0" (u object_r debugfs_mmc ((s0) (s0))))
(genfscon debugfs "/kcov" (u object_r debugfs_kcov ((s0) (s0))))
(genfscon debugfs "/" (u object_r debugfs ((s0) (s0))))
(genfscon esdfs "/" (u object_r sdcardfs ((s0) (s0))))
(genfscon exfat "/" (u object_r exfat ((s0) (s0))))
(genfscon functionfs "/" (u object_r functionfs ((s0) (s0))))
(genfscon fuse "/" (u object_r fuse ((s0) (s0))))
(genfscon fuseblk "/" (u object_r fuseblk ((s0) (s0))))
(genfscon fusectl "/" (u object_r fusectlfs ((s0) (s0))))
(genfscon inotifyfs "/" (u object_r inotify ((s0) (s0))))
(genfscon proc "/sys/kernel/sched_util_clamp_min_rt_default" (u object_r proc_sched ((s0) (s0))))
(genfscon proc "/sys/kernel/sched_wakeup_granularity_ns" (u object_r proc_sched ((s0) (s0))))
(genfscon proc "/sys/kernel/perf_event_max_sample_rate" (u object_r proc_perf ((s0) (s0))))
(genfscon proc "/sys/kernel/perf_cpu_time_max_percent" (u object_r proc_perf ((s0) (s0))))
(genfscon proc "/sys/vm/percpu_pagelist_high_fraction" (u object_r proc_percpu_pagelist_high_fraction ((s0) (s0))))
(genfscon proc "/sys/kernel/sched_child_runs_first" (u object_r proc_sched ((s0) (s0))))
(genfscon proc "/sys/kernel/sched_tunable_scaling" (u object_r proc_sched ((s0) (s0))))
(genfscon proc "/sys/vm/dirty_writeback_centisecs" (u object_r proc_dirty ((s0) (s0))))
(genfscon proc "/sys/kernel/sched_util_clamp_max" (u object_r proc_sched ((s0) (s0))))
(genfscon proc "/sys/kernel/sched_util_clamp_min" (u object_r proc_sched ((s0) (s0))))
(genfscon proc "/sys/kernel/perf_event_paranoid" (u object_r proc_perf ((s0) (s0))))
(genfscon proc "/sys/kernel/perf_event_mlock_kb" (u object_r proc_perf ((s0) (s0))))
(genfscon proc "/sys/kernel/sched_rt_runtime_us" (u object_r proc_sched ((s0) (s0))))
(genfscon proc "/sys/kernel/randomize_va_space" (u object_r proc_security ((s0) (s0))))
(genfscon proc "/sys/kernel/sched_rt_period_us" (u object_r proc_sched ((s0) (s0))))
(genfscon proc "/sys/vm/dirty_background_ratio" (u object_r proc_dirty ((s0) (s0))))
(genfscon proc "/sys/vm/dirty_expire_centisecs" (u object_r proc_dirty ((s0) (s0))))
(genfscon proc "/sys/vm/watermark_boost_factor" (u object_r proc_watermark_boost_factor ((s0) (s0))))
(genfscon proc "/sys/vm/watermark_scale_factor" (u object_r proc_watermark_scale_factor ((s0) (s0))))
(genfscon proc "/sys/kernel/unprivileged_bpf_" (u object_r proc_bpf ((s0) (s0))))
(genfscon proc "/uid_cputime/remove_uid_range" (u object_r proc_uid_cputime_removeuid ((s0) (s0))))
(genfscon proc "/sys/kernel/modules_disabled" (u object_r proc_security ((s0) (s0))))
(genfscon proc "/sys/kernel/sched_latency_ns" (u object_r proc_sched ((s0) (s0))))
(genfscon proc "/sys/kernel/sched_schedstats" (u object_r proc_sched ((s0) (s0))))
(genfscon proc "/sys/vm/mmap_rnd_compat_bits" (u object_r proc_security ((s0) (s0))))
(genfscon proc "/sys/vm/min_free_order_shift" (u object_r proc_min_free_order_shift ((s0) (s0))))
(genfscon proc "/sys/fs/protected_hardlinks" (u object_r proc_security ((s0) (s0))))
(genfscon proc "/sys/kernel/core_pipe_limit" (u object_r usermodehelper ((s0) (s0))))
(genfscon proc "/uid_concurrent_active_time" (u object_r proc_uid_concurrent_active_time ((s0) (s0))))
(genfscon proc "/uid_concurrent_policy_time" (u object_r proc_uid_concurrent_policy_time ((s0) (s0))))
(genfscon proc "/sys/fs/protected_symlinks" (u object_r proc_security ((s0) (s0))))
(genfscon proc "/sys/kernel/dmesg_restrict" (u object_r proc_security ((s0) (s0))))
(genfscon proc "/sys/kernel/usermodehelper" (u object_r usermodehelper ((s0) (s0))))
(genfscon proc "/uid_cputime/show_uid_stat" (u object_r proc_uid_cputime_showstat ((s0) (s0))))
(genfscon proc "/sys/kernel/kptr_restrict" (u object_r proc_security ((s0) (s0))))
(genfscon proc "/sys/kernel/panic_on_oops" (u object_r proc_panic ((s0) (s0))))
(genfscon proc "/sys/vm/extra_free_kbytes" (u object_r proc_extra_free_kbytes ((s0) (s0))))
(genfscon proc "/sys/vm/overcommit_memory" (u object_r proc_overcommit_memory ((s0) (s0))))
(genfscon proc "/sys/kernel/android_bpf_" (u object_r proc_bpf ((s0) (s0))))
(genfscon proc "/sys/kernel/core_pattern" (u object_r usermodehelper ((s0) (s0))))
(genfscon proc "/sys/kernel/poweroff_cmd" (u object_r usermodehelper ((s0) (s0))))
(genfscon proc "/sys/kernel/domainname" (u object_r proc_hostname ((s0) (s0))))
(genfscon proc "/sys/kernel/hung_task_" (u object_r proc_hung_task ((s0) (s0))))
(genfscon proc "/sys/fs/pipe-max-size" (u object_r proc_pipe_conf ((s0) (s0))))
(genfscon proc "/sys/fs/suid_dumpable" (u object_r proc_security ((s0) (s0))))
(genfscon proc "/sys/vm/max_map_count" (u object_r proc_max_map_count ((s0) (s0))))
(genfscon proc "/sys/vm/mmap_min_addr" (u object_r proc_security ((s0) (s0))))
(genfscon proc "/sys/vm/mmap_rnd_bits" (u object_r proc_security ((s0) (s0))))
(genfscon proc "/net/xt_qtaguid/ctrl" (u object_r proc_qtaguid_ctrl ((s0) (s0))))
(genfscon proc "/sys/kernel/hostname" (u object_r proc_hostname ((s0) (s0))))
(genfscon proc "/sys/kernel/modprobe" (u object_r usermodehelper ((s0) (s0))))
(genfscon proc "/sys/vm/page-cluster" (u object_r proc_page_cluster ((s0) (s0))))
(genfscon proc "/sys/kernel/hotplug" (u object_r usermodehelper ((s0) (s0))))
(genfscon proc "/sys/kernel/pid_max" (u object_r proc_pid_max ((s0) (s0))))
(genfscon proc "/sys/vm/drop_caches" (u object_r proc_drop_caches ((s0) (s0))))
(genfscon proc "/sys/kernel/random" (u object_r proc_random ((s0) (s0))))
(genfscon proc "/sys/net/core/bpf_" (u object_r proc_bpf ((s0) (s0))))
(genfscon proc "/uid_time_in_state" (u object_r proc_uid_time_in_state ((s0) (s0))))
(genfscon proc "/sys/kernel/sysrq" (u object_r proc_sysrq ((s0) (s0))))
(genfscon proc "/uid_procstat/set" (u object_r proc_uid_procstat_set ((s0) (s0))))
(genfscon proc "/device-tree/avf" (u object_r proc_dt_avf ((s0) (s0))))
(genfscon proc "/lowmemorykiller" (u object_r proc_lowmemorykiller ((s0) (s0))))
(genfscon proc "/net/xt_qtaguid/" (u object_r proc_qtaguid_stat ((s0) (s0))))
(genfscon proc "/pressure/memory" (u object_r proc_pressure_mem ((s0) (s0))))
(genfscon proc "/sys/kernel/bpf_" (u object_r proc_bpf ((s0) (s0))))
(genfscon proc "/cpu/alignment" (u object_r proc_cpu_alignment ((s0) (s0))))
(genfscon proc "/sysrq-trigger" (u object_r proc_sysrq ((s0) (s0))))
(genfscon proc "/uid_cpupower/" (u object_r proc_uid_cpupower ((s0) (s0))))
(genfscon proc "/pagetypeinfo" (u object_r proc_pagetypeinfo ((s0) (s0))))
(genfscon proc "/pressure/cpu" (u object_r proc_pressure_cpu ((s0) (s0))))
(genfscon proc "/uid_io/stats" (u object_r proc_uid_io_stats ((s0) (s0))))
(genfscon proc "/vendor_sched" (u object_r proc_vendor_sched ((s0) (s0))))
(genfscon proc "/filesystems" (u object_r proc_filesystems ((s0) (s0))))
(genfscon proc "/pressure/io" (u object_r proc_pressure_io ((s0) (s0))))
(genfscon proc "/sys/abi/swp" (u object_r proc_abi ((s0) (s0))))
(genfscon proc "/timer_stats" (u object_r proc_timer ((s0) (s0))))
(genfscon proc "/tty/drivers" (u object_r proc_tty_drivers ((s0) (s0))))
(genfscon proc "/vmallocinfo" (u object_r proc_vmallocinfo ((s0) (s0))))
(genfscon proc "/bootconfig" (u object_r proc_bootconfig ((s0) (s0))))
(genfscon proc "/interrupts" (u object_r proc_interrupts ((s0) (s0))))
(genfscon proc "/kpageflags" (u object_r proc_kpageflags ((s0) (s0))))
(genfscon proc "/timer_list" (u object_r proc_timer ((s0) (s0))))
(genfscon proc "/allocinfo" (u object_r proc_allocinfo ((s0) (s0))))
(genfscon proc "/buddyinfo" (u object_r proc_buddyinfo ((s0) (s0))))
(genfscon proc "/config.gz" (u object_r config_gz ((s0) (s0))))
(genfscon proc "/diskstats" (u object_r proc_diskstats ((s0) (s0))))
(genfscon proc "/consoles" (u object_r proc_consoles ((s0) (s0))))
(genfscon proc "/kallsyms" (u object_r proc_kallsyms ((s0) (s0))))
(genfscon proc "/slabinfo" (u object_r proc_slabinfo ((s0) (s0))))
(genfscon proc "/softirqs" (u object_r proc_timer ((s0) (s0))))
(genfscon proc "/zoneinfo" (u object_r proc_zoneinfo ((s0) (s0))))
(genfscon proc "/cgroups" (u object_r proc_cgroups ((s0) (s0))))
(genfscon proc "/cmdline" (u object_r proc_cmdline ((s0) (s0))))
(genfscon proc "/loadavg" (u object_r proc_loadavg ((s0) (s0))))
(genfscon proc "/meminfo" (u object_r proc_meminfo ((s0) (s0))))
(genfscon proc "/modules" (u object_r proc_modules ((s0) (s0))))
(genfscon proc "/net/tcp" (u object_r proc_net_tcp_udp ((s0) (s0))))
(genfscon proc "/net/udp" (u object_r proc_net_tcp_udp ((s0) (s0))))
(genfscon proc "/cpuinfo" (u object_r proc_cpuinfo ((s0) (s0))))
(genfscon proc "/sys/net" (u object_r proc_net ((s0) (s0))))
(genfscon proc "/version" (u object_r proc_version ((s0) (s0))))
(genfscon proc "/asound" (u object_r proc_asound ((s0) (s0))))
(genfscon proc "/mounts" (u object_r proc_mounts ((s0) (s0))))
(genfscon proc "/uptime" (u object_r proc_uptime ((s0) (s0))))
(genfscon proc "/vmstat" (u object_r proc_vmstat ((s0) (s0))))
(genfscon proc "/iomem" (u object_r proc_iomem ((s0) (s0))))
(genfscon proc "/locks" (u object_r proc_locks ((s0) (s0))))
(genfscon proc "/swaps" (u object_r proc_swaps ((s0) (s0))))
(genfscon proc "/keys" (u object_r proc_keys ((s0) (s0))))
(genfscon proc "/kmsg" (u object_r proc_kmsg ((s0) (s0))))
(genfscon proc "/misc" (u object_r proc_misc ((s0) (s0))))
(genfscon proc "/stat" (u object_r proc_stat ((s0) (s0))))
(genfscon proc "/uid/" (u object_r proc_uid_time_in_state ((s0) (s0))))
(genfscon proc "/net" (u object_r proc_net ((s0) (s0))))
(genfscon proc "/" (u object_r proc ((s0) (s0))))
(genfscon pstore "/" (u object_r pstorefs ((s0) (s0))))
(genfscon rootfs "/" (u object_r rootfs ((s0) (s0))))
(genfscon sdcardfs "/" (u object_r sdcardfs ((s0) (s0))))
(genfscon securityfs "/safesetid/uid_allowlist_policy" (u object_r uid_allowlist_policy ((s0) (s0))))
(genfscon securityfs "/" (u object_r securityfs ((s0) (s0))))
(genfscon selinuxfs "/" (u object_r selinuxfs ((s0) (s0))))
(genfscon sysfs "/module/libcomposite/parameters/android_kernel_aoa_enabled" (u object_r sysfs_usb ((s0) (s0))))
(genfscon sysfs "/module/usbcore/parameters/authorized_default" (u object_r sysfs_usbcore ((s0) (s0))))
(genfscon sysfs "/module/dm_verity/parameters/prefetch_cluster" (u object_r sysfs_dm_verity ((s0) (s0))))
(genfscon sysfs "/devices/virtual/timed_output/vibrator/enable" (u object_r sysfs_vibrator ((s0) (s0))))
(genfscon sysfs "/module/dm_bufio/parameters/max_age_seconds" (u object_r sysfs_dm_verity ((s0) (s0))))
(genfscon sysfs "/firmware/devicetree/base/firmware/android" (u object_r sysfs_dt_firmware_android ((s0) (s0))))
(genfscon sysfs "/module/suspend/parameters/pm_fs_abort" (u object_r sysfs_suspend_params ((s0) (s0))))
(genfscon sysfs "/devices/platform/nfc-power/nfc_power" (u object_r sysfs_nfc_power_writable ((s0) (s0))))
(genfscon sysfs "/devices/virtual/block/zram0/uevent" (u object_r sysfs_zram_uevent ((s0) (s0))))
(genfscon sysfs "/devices/virtual/block/zram1/uevent" (u object_r sysfs_zram_uevent ((s0) (s0))))
(genfscon sysfs "/devices/virtual/misc/ublk-control/" (u object_r sysfs_ublk ((s0) (s0))))
(genfscon sysfs "/kernel/mm/pgsize_migration/enabled" (u object_r sysfs_pgsize_migration ((s0) (s0))))
(genfscon sysfs "/devices/virtual/misc/hw_random" (u object_r sysfs_hwrandom ((s0) (s0))))
(genfscon sysfs "/kernel/mm/transparent_hugepage" (u object_r sysfs_transparent_hugepage ((s0) (s0))))
(genfscon sysfs "/module/wlan/parameters/fwpath" (u object_r sysfs_wlan_fwpath ((s0) (s0))))
(genfscon sysfs "/module/binder/parameters/impl" (u object_r sysfs_binder_impl ((s0) (s0))))
(genfscon sysfs "/firmware/devicetree/base/avf" (u object_r sysfs_dt_avf ((s0) (s0))))
(genfscon sysfs "/devices/virtual/android_usb" (u object_r sysfs_android_usb ((s0) (s0))))
(genfscon sysfs "/devices/virtual/block/zram0" (u object_r sysfs_zram ((s0) (s0))))
(genfscon sysfs "/devices/virtual/block/zram1" (u object_r sysfs_zram ((s0) (s0))))
(genfscon sysfs "/fs/incremental-fs/instances" (u object_r sysfs_fs_incfs_metrics ((s0) (s0))))
(genfscon sysfs "/module/tcp_cubic/parameters" (u object_r sysfs_net ((s0) (s0))))
(genfscon sysfs "/class/rfkill/rfkill0/state" (u object_r sysfs_bluetooth_writable ((s0) (s0))))
(genfscon sysfs "/class/rfkill/rfkill1/state" (u object_r sysfs_bluetooth_writable ((s0) (s0))))
(genfscon sysfs "/class/rfkill/rfkill2/state" (u object_r sysfs_bluetooth_writable ((s0) (s0))))
(genfscon sysfs "/class/rfkill/rfkill3/state" (u object_r sysfs_bluetooth_writable ((s0) (s0))))
(genfscon sysfs "/devices/virtual/block/loop" (u object_r sysfs_loop ((s0) (s0))))
(genfscon sysfs "/devices/virtual/block/ublk" (u object_r sysfs_ublk ((s0) (s0))))
(genfscon sysfs "/fs/fuse/bpf_prog_type_fuse" (u object_r sysfs_fs_fuse_bpf ((s0) (s0))))
(genfscon sysfs "/fs/incremental-fs/features" (u object_r sysfs_fs_incfs_features ((s0) (s0))))
(genfscon sysfs "/devices/virtual/block/dm-" (u object_r sysfs_dm ((s0) (s0))))
(genfscon sysfs "/kernel/mm/lru_gen/enabled" (u object_r sysfs_lru_gen_enabled ((s0) (s0))))
(genfscon sysfs "/devices/virtual/misc/uhid" (u object_r sysfs_uhid ((s0) (s0))))
(genfscon sysfs "/class/usb_power_delivery" (u object_r sysfs_usb_pd ((s0) (s0))))
(genfscon sysfs "/kernel/memory_state_time" (u object_r sysfs_power ((s0) (s0))))
(genfscon sysfs "/bus/thunderbolt/devices" (u object_r sysfs_thunderbolt ((s0) (s0))))
(genfscon sysfs "/devices/virtual/block/" (u object_r sysfs_devices_block ((s0) (s0))))
(genfscon sysfs "/devices/virtual/switch" (u object_r sysfs_switch ((s0) (s0))))
(genfscon sysfs "/devices/virtual/wakeup" (u object_r sysfs_wakeup ((s0) (s0))))
(genfscon sysfs "/module/lowmemorykiller" (u object_r sysfs_lowmemorykiller ((s0) (s0))))
(genfscon sysfs "/power/sync_on_suspend" (u object_r sysfs_sync_on_suspend ((s0) (s0))))
(genfscon sysfs "/kernel/wakeup_reasons" (u object_r sysfs_wakeup_reasons ((s0) (s0))))
(genfscon sysfs "/kernel/dmabuf/buffers" (u object_r sysfs_dmabuf_stats ((s0) (s0))))
(genfscon sysfs "/firmware/acpi/tables" (u object_r sysfs_firmware_acpi_tables ((s0) (s0))))
(genfscon sysfs "/kernel/uevent_helper" (u object_r sysfs_usermodehelper ((s0) (s0))))
(genfscon sysfs "/devices/virtual/net" (u object_r sysfs_net ((s0) (s0))))
(genfscon sysfs "/power/suspend_stats" (u object_r sysfs_suspend_stats ((s0) (s0))))
(genfscon sysfs "/kernel/vendor_sched" (u object_r sysfs_vendor_sched ((s0) (s0))))
(genfscon sysfs "/devices/system/cpu" (u object_r sysfs_devices_system_cpu ((s0) (s0))))
(genfscon sysfs "/power/wakeup_count" (u object_r sysfs_power ((s0) (s0))))
(genfscon sysfs "/class/android_usb" (u object_r sysfs_android_usb ((s0) (s0))))
(genfscon sysfs "/power/wake_unlock" (u object_r sysfs_wake_lock ((s0) (s0))))
(genfscon sysfs "/class/ublk-char/" (u object_r sysfs_ublk ((s0) (s0))))
(genfscon sysfs "/fs/ext4/features" (u object_r sysfs_fs_ext4_features ((s0) (s0))))
(genfscon sysfs "/fs/fuse/features" (u object_r sysfs_fs_fuse_features ((s0) (s0))))
(genfscon sysfs "/bus/usb/devices" (u object_r sysfs_usb ((s0) (s0))))
(genfscon sysfs "/power/autosleep" (u object_r sysfs_power ((s0) (s0))))
(genfscon sysfs "/power/wake_lock" (u object_r sysfs_wake_lock ((s0) (s0))))
(genfscon sysfs "/kernel/dma_heap" (u object_r sysfs_dma_heap ((s0) (s0))))
(genfscon sysfs "/devices/cs_etm" (u object_r sysfs_devices_cs_etm ((s0) (s0))))
(genfscon sysfs "/devices/uprobe" (u object_r sysfs_uprobe ((s0) (s0))))
(genfscon sysfs "/kernel/mm/cma" (u object_r sysfs_cma ((s0) (s0))))
(genfscon sysfs "/class/extcon" (u object_r sysfs_extcon ((s0) (s0))))
(genfscon sysfs "/class/switch" (u object_r sysfs_switch ((s0) (s0))))
(genfscon sysfs "/class/wakeup" (u object_r sysfs_wakeup ((s0) (s0))))
(genfscon sysfs "/kernel/notes" (u object_r sysfs_kernel_notes ((s0) (s0))))
(genfscon sysfs "/class/block" (u object_r sysfs_block ((s0) (s0))))
(genfscon sysfs "/power/state" (u object_r sysfs_power ((s0) (s0))))
(genfscon sysfs "/kernel/ipv4" (u object_r sysfs_ipv4 ((s0) (s0))))
(genfscon sysfs "/class/leds" (u object_r sysfs_leds ((s0) (s0))))
(genfscon sysfs "/kernel/btf" (u object_r sysfs_btf ((s0) (s0))))
(genfscon sysfs "/class/gpu" (u object_r sysfs_gpu ((s0) (s0))))
(genfscon sysfs "/class/net" (u object_r sysfs_net ((s0) (s0))))
(genfscon sysfs "/class/rtc" (u object_r sysfs_rtc ((s0) (s0))))
(genfscon sysfs "/fs/f2fs" (u object_r sysfs_fs_f2fs ((s0) (s0))))
(genfscon sysfs "/" (u object_r sysfs ((s0) (s0))))
(genfscon tracefs "/events/filemap/mm_filemap_delete_from_page_cache/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/vmscan/mm_vmscan_direct_reclaim_begin/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/filemap/mm_filemap_add_to_page_cache/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/kmem/mm_calculate_totalreserve_pages/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/vmscan/mm_vmscan_direct_reclaim_end/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/binder/binder_transaction_alloc_buf/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/binder/binder_transaction_received/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/ext4/ext4_es_lookup_extent_enter/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/ext4/ext4_es_lookup_extent_exit/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/synthetic/suspend_resume_minimal" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/vmscan/mm_vmscan_kswapd_sleep/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/vmscan/mm_vmscan_kswapd_wake/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/synthetic/rss_stat_throttled" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/thermal/thermal_temperature/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/sched/sched_blocked_reason/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/power/cpu_frequency_limits/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/binder/binder_set_priority/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/f2fs/f2fs_sync_file_enter/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/ext4/ext4_sync_file_enter/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/devfreq/devfreq_frequency/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/binder/binder_transaction/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/f2fs/f2fs_get_data_block/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/f2fs/f2fs_set_page_dirty/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/f2fs/f2fs_sync_file_exit/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/ext4/ext4_da_write_begin/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/ext4/ext4_sync_file_exit/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/sched/sched_process_exit/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/sched/sched_process_free/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/mm_event/mm_event_record/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/oom/oom_score_adj_update/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/block/block_rq_complete/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/sched/sched_cpu_hotplug/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/ext4/ext4_da_write_end/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/sched/sched_wakeup_new/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/sched/sched_pi_setprio/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/f2fs/f2fs_write_begin/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/lock/contention_begin/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/power/gpu_work_period/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/power/gpu_power_state/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/binder/binder_command/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/ext4/ext4_load_inode/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/block/block_rq_issue/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/power/clock_set_rate/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/power/suspend_resume/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/binder/binder_locked/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/binder/binder_unlock/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/binder/binder_return/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/kmem/dmabuf_rss_stat/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/gpu_mem/gpu_mem_total" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/f2fs/f2fs_write_end/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/lock/contention_end/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/power/cpu_frequency/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/power/clock_disable/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/power/gpu_frequency/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/cpufreq_interactive/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/thermal/cdev_update/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/sched/sched_switch/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/sched/sched_wakeup/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/sched/sched_waking/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/power/clock_enable/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/android_vendor_lmk/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/binder/binder_lock/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/task/task_newtask/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/cpuhp/cpuhp_enter/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/cpuhp/cpuhp_pause/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/task/task_rename/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/cpuhp/cpuhp_exit/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/clk/clk_set_rate/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/lowmemorykiller/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/oom/mark_victim/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/clk/clk_disable/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/instances/bootreceiver" (u object_r debugfs_bootreceiver_tracing ((s0) (s0))))
(genfscon tracefs "/events/f2fs/f2fs_iget/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/power/cpu_idle/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/clk/clk_enable/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/kmem/rss_stat/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/ftrace/print/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/instances/mm_events" (u object_r debugfs_mm_events_tracing ((s0) (s0))))
(genfscon tracefs "/options/record-tgid" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/saved_cmdlines_size" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/header_page" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/options/print-tgid" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/options/overwrite" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/dma_fence/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/synthetic_events" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/instances/wifi" (u object_r debugfs_wifi_tracing ((s0) (s0))))
(genfscon tracefs "/printk_formats" (u object_r debugfs_tracing_printk_formats ((s0) (s0))))
(genfscon tracefs "/buffer_percent" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/buffer_size_kb" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/cgroup/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/fence/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/trace_marker" (u object_r debugfs_trace_marker ((s0) (s0))))
(genfscon tracefs "/events/sync/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/per_cpu/cpu" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/trace_clock" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/ipi/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/events/irq/" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/tracing_on" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/hypervisor" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/instances" (u object_r debugfs_tracing_instances ((s0) (s0))))
(genfscon tracefs "/trace" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/hyp" (u object_r debugfs_tracing ((s0) (s0))))
(genfscon tracefs "/" (u object_r debugfs_tracing_debug ((s0) (s0))))
(genfscon usbfs "/" (u object_r usbfs ((s0) (s0))))
(genfscon vfat "/" (u object_r vfat ((s0) (s0))))
(common socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind ))
(common file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads ))
(common cap2 (mac_override mac_admin syslog wake_alarm block_suspend audit_read perfmon checkpoint_restore bpf ))
(common cap (chown dac_override dac_read_search fowner fsetid kill setgid setuid setpcap linux_immutable net_bind_service net_broadcast net_admin net_raw ipc_lock ipc_owner sys_module sys_rawio sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_nice sys_resource sys_time sys_tty_config mknod lease audit_write audit_control setfcap ))
(common ipc (create destroy getattr setattr read write associate unix_read unix_write ))
(typealias rs_data_file)
(typealiasactual rs_data_file app_exec_data_file)
(class security (compute_av compute_create compute_member check_context load_policy compute_relabel compute_user setenforce setbool setsecparam setcheckreqprot read_policy validate_trans ))
(class process (fork transition sigchld sigkill sigstop signull signal ptrace getsched setsched getsession getpgid setpgid getcap setcap share getattr setexec setfscreate noatsecure siginh setrlimit rlimitinh dyntransition setcurrent execmem execstack execheap setkeycreate setsockcreate getrlimit ))
(mlsconstrain (process (sigkill sigstop signal ptrace setsched setpgid setcap share setrlimit)) (or (eq l1 l2) (eq t1 mlstrustedsubject)))
(mlsconstrain (process (ptrace getsched getsession getpgid getcap share getattr)) (or (dom l1 l2) (eq t1 mlstrustedsubject)))
(mlsconstrain (process (transition dyntransition)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class system (ipc_info syslog_read syslog_mod syslog_console module_request module_load firmware_load kexec_image_load kexec_initramfs_load policy_load x509_certificate_load ))
(class capability ())
(classcommon capability cap)
(class filesystem (mount remount unmount getattr relabelfrom relabelto associate quotamod quotaget watch ))
(class file (execute_no_trans entrypoint ))
(classcommon file file)
(mlsconstrain (file (write setattr append unlink link rename)) (or (or (or (or (eq t2 app_data_file_type) (eq t2 appdomain_tmpfs)) (eq l1 l2)) (eq t1 mlstrustedsubject)) (eq t2 mlstrustedobject)))
(mlsconstrain (file (read getattr execute)) (or (or (or (or (eq t2 app_data_file_type) (eq t2 appdomain_tmpfs)) (dom l1 l2)) (eq t1 mlstrustedsubject)) (eq t2 mlstrustedobject)))
(mlsconstrain (file (setattr unlink link rename open)) (or (or (and (neq t2 app_data_file_type) (neq t2 appdomain_tmpfs)) (dom l1 l2)) (eq t1 mlstrustedsubject)))
(mlsconstrain (file (create relabelfrom relabelto)) (and (eq l2 h2) (or (eq l1 l2) (eq t1 mlstrustedsubject))))
(class anon_inode ())
(classcommon anon_inode file)
(mlsconstrain (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute open execmod)) (or (eq l1 l2) (eq t2 mlstrustedobject)))
(class dir (add_name remove_name reparent search rmdir ))
(classcommon dir file)
(mlsconstrain (dir (write setattr rename add_name remove_name reparent rmdir)) (or (or (or (eq t2 app_data_file_type) (eq l1 l2)) (eq t1 mlstrustedsubject)) (eq t2 mlstrustedobject)))
(mlsconstrain (dir (read getattr search)) (or (or (or (or (eq t2 app_data_file_type) (dom l1 l2)) (eq t1 mlstrustedsubject)) (eq t2 mlstrustedobject)) (and (eq t1 mlsvendorcompat) (or (eq t2 system_data_file) (eq t2 user_profile_root_file)))))
(mlsconstrain (dir (getattr setattr rename open add_name remove_name reparent search rmdir)) (or (or (neq t2 app_data_file_type) (dom l1 l2)) (eq t1 mlstrustedsubject)))
(mlsconstrain (dir (create relabelfrom relabelto)) (and (eq l2 h2) (or (eq l1 l2) (eq t1 mlstrustedsubject))))
(class memfd_file (execute_no_trans entrypoint ))
(classcommon memfd_file file)
(class fd (use ))
(class lnk_file ())
(classcommon lnk_file file)
(mlsconstrain (lnk_file (write setattr append unlink link rename)) (or (or (or (or (eq t2 app_data_file_type) (eq t2 appdomain_tmpfs)) (eq l1 l2)) (eq t1 mlstrustedsubject)) (eq t2 mlstrustedobject)))
(mlsconstrain (lnk_file (read getattr execute)) (or (or (or (or (eq t2 app_data_file_type) (eq t2 appdomain_tmpfs)) (dom l1 l2)) (eq t1 mlstrustedsubject)) (eq t2 mlstrustedobject)))
(mlsconstrain (lnk_file (read setattr unlink link rename open)) (or (or (and (neq t2 privapp_data_file) (neq t2 appdomain_tmpfs)) (dom l1 l2)) (eq t1 mlstrustedsubject)))
(mlsconstrain (lnk_file (read setattr unlink link rename open)) (or (or (or (neq t2 app_data_file_type) (eq t2 privapp_data_file)) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(mlsconstrain (lnk_file (create relabelfrom relabelto)) (and (eq l2 h2) (or (eq l1 l2) (eq t1 mlstrustedsubject))))
(class chr_file (execute_no_trans entrypoint ))
(classcommon chr_file file)
(mlsconstrain (chr_file (write setattr append unlink link rename)) (or (or (or (or (eq t2 app_data_file_type) (eq t2 appdomain_tmpfs)) (eq l1 l2)) (eq t1 mlstrustedsubject)) (eq t2 mlstrustedobject)))
(mlsconstrain (chr_file (read getattr execute)) (or (or (or (or (eq t2 app_data_file_type) (eq t2 appdomain_tmpfs)) (dom l1 l2)) (eq t1 mlstrustedsubject)) (eq t2 mlstrustedobject)))
(mlsconstrain (chr_file (create relabelfrom relabelto)) (and (eq l2 h2) (or (eq l1 l2) (eq t1 mlstrustedsubject))))
(class blk_file ())
(classcommon blk_file file)
(mlsconstrain (blk_file (write setattr append unlink link rename)) (or (or (or (or (eq t2 app_data_file_type) (eq t2 appdomain_tmpfs)) (eq l1 l2)) (eq t1 mlstrustedsubject)) (eq t2 mlstrustedobject)))
(mlsconstrain (blk_file (read getattr execute)) (or (or (or (or (eq t2 app_data_file_type) (eq t2 appdomain_tmpfs)) (dom l1 l2)) (eq t1 mlstrustedsubject)) (eq t2 mlstrustedobject)))
(mlsconstrain (blk_file (create relabelfrom relabelto)) (and (eq l2 h2) (or (eq l1 l2) (eq t1 mlstrustedsubject))))
(class sock_file ())
(classcommon sock_file file)
(mlsconstrain (sock_file (write setattr append unlink link rename)) (or (or (or (or (eq t2 app_data_file_type) (eq t2 appdomain_tmpfs)) (eq l1 l2)) (eq t1 mlstrustedsubject)) (eq t2 mlstrustedobject)))
(mlsconstrain (sock_file (read getattr execute)) (or (or (or (or (eq t2 app_data_file_type) (eq t2 appdomain_tmpfs)) (dom l1 l2)) (eq t1 mlstrustedsubject)) (eq t2 mlstrustedobject)))
(mlsconstrain (sock_file (setattr unlink link rename open)) (or (or (and (neq t2 app_data_file_type) (neq t2 appdomain_tmpfs)) (dom l1 l2)) (eq t1 mlstrustedsubject)))
(mlsconstrain (sock_file (create relabelfrom relabelto)) (and (eq l2 h2) (or (eq l1 l2) (eq t1 mlstrustedsubject))))
(class fifo_file ())
(classcommon fifo_file file)
(mlsconstrain (fifo_file (write setattr append unlink link rename)) (or (or (or (eq l1 l2) (eq t1 mlstrustedsubject)) (eq t2 mlstrustedobject)) (eq t2 domain)))
(mlsconstrain (fifo_file (read getattr)) (or (or (or (dom l1 l2) (eq t1 mlstrustedsubject)) (eq t2 mlstrustedobject)) (eq t2 domain)))
(mlsconstrain (fifo_file (create relabelfrom relabelto)) (and (eq l2 h2) (or (eq l1 l2) (eq t1 mlstrustedsubject))))
(class socket ())
(classcommon socket socket)
(mlsconstrain (socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class tcp_socket (node_bind name_connect ))
(classcommon tcp_socket socket)
(mlsconstrain (tcp_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class udp_socket (node_bind ))
(classcommon udp_socket socket)
(mlsconstrain (udp_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class rawip_socket (node_bind ))
(classcommon rawip_socket socket)
(mlsconstrain (rawip_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class node (recvfrom sendto ))
(class netif (ingress egress ))
(class netlink_socket ())
(classcommon netlink_socket socket)
(mlsconstrain (netlink_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class packet_socket ())
(classcommon packet_socket socket)
(mlsconstrain (packet_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class key_socket ())
(classcommon key_socket socket)
(mlsconstrain (key_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class unix_stream_socket (connectto ))
(classcommon unix_stream_socket socket)
(mlsconstrain (unix_stream_socket (connectto)) (or (or (eq l1 l2) (eq t1 mlstrustedsubject)) (eq t2 mlstrustedsubject)))
(mlsconstrain (unix_stream_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class unix_dgram_socket ())
(classcommon unix_dgram_socket socket)
(mlsconstrain (unix_dgram_socket (sendto)) (or (or (eq l1 l2) (eq t1 mlstrustedsubject)) (eq t2 mlstrustedsubject)))
(mlsconstrain (unix_dgram_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class sem ())
(classcommon sem ipc)
(class msg (send receive ))
(class msgq (enqueue ))
(classcommon msgq ipc)
(class shm (lock ))
(classcommon shm ipc)
(class ipc ())
(classcommon ipc ipc)
(class netlink_route_socket (nlmsg_read nlmsg_write nlmsg_readpriv nlmsg_getneigh nlmsg ))
(classcommon netlink_route_socket socket)
(mlsconstrain (netlink_route_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class netlink_tcpdiag_socket (nlmsg_read nlmsg_write nlmsg ))
(classcommon netlink_tcpdiag_socket socket)
(mlsconstrain (netlink_tcpdiag_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class netlink_nflog_socket ())
(classcommon netlink_nflog_socket socket)
(mlsconstrain (netlink_nflog_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class netlink_xfrm_socket (nlmsg_read nlmsg_write nlmsg ))
(classcommon netlink_xfrm_socket socket)
(mlsconstrain (netlink_xfrm_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class netlink_selinux_socket ())
(classcommon netlink_selinux_socket socket)
(mlsconstrain (netlink_selinux_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class netlink_audit_socket (nlmsg_read nlmsg_write nlmsg_relay nlmsg_readpriv nlmsg_tty_audit nlmsg ))
(classcommon netlink_audit_socket socket)
(mlsconstrain (netlink_audit_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class netlink_dnrt_socket ())
(classcommon netlink_dnrt_socket socket)
(mlsconstrain (netlink_dnrt_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class association (sendto recvfrom setcontext polmatch ))
(class netlink_kobject_uevent_socket ())
(classcommon netlink_kobject_uevent_socket socket)
(mlsconstrain (netlink_kobject_uevent_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class appletalk_socket ())
(classcommon appletalk_socket socket)
(mlsconstrain (appletalk_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class packet (send recv relabelto forward_in forward_out ))
(class key (view read write search link setattr create ))
(class dccp_socket (node_bind name_connect ))
(classcommon dccp_socket socket)
(class memprotect (mmap_zero ))
(class peer (recv ))
(class capability2 ())
(classcommon capability2 cap2)
(class kernel_service (use_as_override create_files_as ))
(class tun_socket (attach_queue ))
(classcommon tun_socket socket)
(mlsconstrain (tun_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class binder (impersonate call set_context_mgr transfer ))
(class netlink_iscsi_socket ())
(classcommon netlink_iscsi_socket socket)
(mlsconstrain (netlink_iscsi_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class netlink_fib_lookup_socket ())
(classcommon netlink_fib_lookup_socket socket)
(mlsconstrain (netlink_fib_lookup_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class netlink_connector_socket ())
(classcommon netlink_connector_socket socket)
(mlsconstrain (netlink_connector_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class netlink_netfilter_socket ())
(classcommon netlink_netfilter_socket socket)
(mlsconstrain (netlink_netfilter_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class netlink_generic_socket ())
(classcommon netlink_generic_socket socket)
(mlsconstrain (netlink_generic_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class netlink_scsitransport_socket ())
(classcommon netlink_scsitransport_socket socket)
(mlsconstrain (netlink_scsitransport_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class netlink_rdma_socket ())
(classcommon netlink_rdma_socket socket)
(mlsconstrain (netlink_rdma_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class netlink_crypto_socket ())
(classcommon netlink_crypto_socket socket)
(mlsconstrain (netlink_crypto_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class infiniband_pkey (access ))
(class infiniband_endport (manage_subnet ))
(class cap_userns ())
(classcommon cap_userns cap)
(class cap2_userns ())
(classcommon cap2_userns cap2)
(class sctp_socket (node_bind name_connect association ))
(classcommon sctp_socket socket)
(mlsconstrain (sctp_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class icmp_socket (node_bind ))
(classcommon icmp_socket socket)
(mlsconstrain (icmp_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class ax25_socket ())
(classcommon ax25_socket socket)
(mlsconstrain (ax25_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class ipx_socket ())
(classcommon ipx_socket socket)
(mlsconstrain (ipx_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class netrom_socket ())
(classcommon netrom_socket socket)
(mlsconstrain (netrom_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class atmpvc_socket ())
(classcommon atmpvc_socket socket)
(mlsconstrain (atmpvc_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class x25_socket ())
(classcommon x25_socket socket)
(mlsconstrain (x25_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class rose_socket ())
(classcommon rose_socket socket)
(mlsconstrain (rose_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class decnet_socket ())
(classcommon decnet_socket socket)
(mlsconstrain (decnet_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class atmsvc_socket ())
(classcommon atmsvc_socket socket)
(mlsconstrain (atmsvc_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class rds_socket ())
(classcommon rds_socket socket)
(mlsconstrain (rds_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class irda_socket ())
(classcommon irda_socket socket)
(mlsconstrain (irda_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class pppox_socket ())
(classcommon pppox_socket socket)
(mlsconstrain (pppox_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class llc_socket ())
(classcommon llc_socket socket)
(mlsconstrain (llc_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class can_socket ())
(classcommon can_socket socket)
(mlsconstrain (can_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class tipc_socket ())
(classcommon tipc_socket socket)
(mlsconstrain (tipc_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class bluetooth_socket ())
(classcommon bluetooth_socket socket)
(mlsconstrain (bluetooth_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class iucv_socket ())
(classcommon iucv_socket socket)
(mlsconstrain (iucv_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class rxrpc_socket ())
(classcommon rxrpc_socket socket)
(mlsconstrain (rxrpc_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class isdn_socket ())
(classcommon isdn_socket socket)
(mlsconstrain (isdn_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class phonet_socket ())
(classcommon phonet_socket socket)
(mlsconstrain (phonet_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class ieee802154_socket ())
(classcommon ieee802154_socket socket)
(mlsconstrain (ieee802154_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class caif_socket ())
(classcommon caif_socket socket)
(mlsconstrain (caif_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class alg_socket ())
(classcommon alg_socket socket)
(mlsconstrain (alg_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class nfc_socket ())
(classcommon nfc_socket socket)
(mlsconstrain (nfc_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class vsock_socket ())
(classcommon vsock_socket socket)
(mlsconstrain (vsock_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)) (or (eq l1 l2) (eq t1 mlstrustedsubject)))
(mlsconstrain (vsock_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class kcm_socket ())
(classcommon kcm_socket socket)
(mlsconstrain (kcm_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class qipcrtr_socket ())
(classcommon qipcrtr_socket socket)
(mlsconstrain (qipcrtr_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class smc_socket ())
(classcommon smc_socket socket)
(mlsconstrain (smc_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class xdp_socket ())
(classcommon xdp_socket socket)
(mlsconstrain (xdp_socket (create relabelfrom relabelto)) (or (and (eq h1 h2) (eq l1 l2)) (eq t1 mlstrustedsubject)))
(class mctp_socket ())
(classcommon mctp_socket socket)
(class process2 (nnp_transition nosuid_transition ))
(class bpf (map_create map_read map_write prog_load prog_run ))
(class perf_event (open cpu kernel tracepoint read write ))
(class io_uring (override_creds sqpoll cmd allowed ))
(class lockdown (integrity confidentiality ))
(class user_namespace (create ))
(class property_service (set ))
(class service_manager (add find list ))
(class hwservice_manager (add find list ))
(class keystore_key (get_state get insert delete exist list reset password lock unlock is_empty sign verify grant duplicate clear_uid add_auth user_changed gen_unique_id ))
(class keystore2 (add_auth change_password change_user clear_ns clear_uid delete_all_keys early_boot_ended get_attestation_key get_auth_token get_last_auth_time get_state list lock pull_metrics report_off_body reset unlock ))
(class keystore2_key (convert_storage_key_to_ephemeral delete gen_unique_id get_info grant manage_blob rebind req_forced_op update use use_dev_id ))
(class diced (demote demote_self derive get_attestation_chain use_seal use_sign ))
(class drmservice (consumeRights setPlaybackStatus openDecryptSession closeDecryptSession initializeDecryptUnit decrypt finalizeDecryptUnit pread ))
(class tee_service (use ))
(classorder (security process system capability filesystem file anon_inode dir memfd_file fd lnk_file chr_file blk_file sock_file fifo_file socket tcp_socket udp_socket rawip_socket node netif netlink_socket packet_socket key_socket unix_stream_socket unix_dgram_socket sem msg msgq shm ipc netlink_route_socket netlink_tcpdiag_socket netlink_nflog_socket netlink_xfrm_socket netlink_selinux_socket netlink_audit_socket netlink_dnrt_socket association netlink_kobject_uevent_socket appletalk_socket packet key dccp_socket memprotect peer capability2 kernel_service tun_socket binder netlink_iscsi_socket netlink_fib_lookup_socket netlink_connector_socket netlink_netfilter_socket netlink_generic_socket netlink_scsitransport_socket netlink_rdma_socket netlink_crypto_socket infiniband_pkey infiniband_endport cap_userns cap2_userns sctp_socket icmp_socket ax25_socket ipx_socket netrom_socket atmpvc_socket x25_socket rose_socket decnet_socket atmsvc_socket rds_socket irda_socket pppox_socket llc_socket can_socket tipc_socket bluetooth_socket iucv_socket rxrpc_socket isdn_socket phonet_socket ieee802154_socket caif_socket alg_socket nfc_socket vsock_socket kcm_socket qipcrtr_socket smc_socket xdp_socket mctp_socket process2 bpf perf_event io_uring lockdown user_namespace property_service service_manager hwservice_manager keystore_key keystore2 keystore2_key diced drmservice tee_service ))
(role r)
(roletype r domain)
(typeattribute dev_type)
(typeattributeset dev_type (device ashmem_device ashmem_libcutils_device audio_device binder_device hwbinder_device vndbinder_device block_device bt_device camera_device dm_device ublk_block_device dm_user_device ublk_control_device keychord_device loop_control_device loop_device pmsg_device radio_device ram_device rtc_device vd_device vold_device console_device fscklogs gpu_device graphics_device hw_random_device input_device port_device lowpan_device mtp_device nfc_device ptmx_device kmsg_device kmsg_debug_device null_device random_device secure_element_device sensors_device serial_device socket_device owntty_device tty_device video_device zero_device fuse_device iio_device ion_device dmabuf_heap_device dmabuf_system_heap_device dmabuf_system_secure_heap_device qtaguid_device watchdog_device uhid_device uio_device tun_device usbaccessory_device usb_device usb_serial_device gnss_device properties_device properties_serial property_info hidraw_device hci_attach_dev rpmsg_device root_block_device frp_block_device system_block_device recovery_block_device boot_block_device dtbo_block_device userdata_block_device zoned_block_device cache_block_device swap_block_device metadata_block_device misc_block_device super_block_device sdcard_block_device userdata_sysdev rootdisk_sysdev vfio_device tee_device udmabuf_device apex_dm_device wrapfd_device kvm_device ))
(typeattribute bpffs_type)
(typeattributeset bpffs_type (fs_bpf fs_bpf_tethering fs_bpf_vendor fs_bpf_net_private fs_bpf_net_shared fs_bpf_netd_readonly fs_bpf_netd_shared fs_bpf_loader fs_bpf_lock_contention fs_bpf_uprobestats fs_bpf_memevents fs_bpf_cputimeinstate fs_bpf_kernelwakelockduration fs_bpf_dmabuf ))
(typeattribute domain)
(typeattributeset domain (adbd aidl_lazy_test_server apexd app_zygote artd atrace audioserver blkid blkid_untrusted bluetooth bootanim bootstat bpfloader bufferhubd cameraserver charger charger_vendor crash_dump credstore crosvm_vendor dhcp dnsmasq drmserver dumpstate e2fs early_virtmgr_vendor ephemeral_app evsmanagerd extra_free_kbytes fastbootd fingerprintd flags_health_check fsck fsck_untrusted gatekeeperd gmscore_app gpuservice healthd heapprofd hwservicemanager idmap incident incident_helper incidentd init init_dev_config inputflinger installd isolated_app isolated_compute_app kernel keystore llkd lmkd logd logpersist mdnsd mediadrmserver mediaextractor mediametrics mediaprovider mediaserver mediaswcodec mediatranscoding mmd_setup modprobe mtp netd netutils_wrapper network_stack nfc omapi perfetto performanced platform_app platform_app_36 postinstall ppp prefetch priv_app priv_app_36 prng_seeder profman radio recovery recovery_persist recovery_refresh rkpdapp rs rss_hwm_reset runas runas_app sdcardd secure_element serialservice servicemanager sgdisk shared_relro shell simpleperf simpleperf_app_runner slideshow statsd su surfaceflinger system_app system_server tee tombstoned toolbox traced traced_perf traced_probes traceur_app ueventd uncrypt untrusted_app untrusted_app_34 untrusted_app_32 untrusted_app_30 untrusted_app_29 untrusted_app_27 untrusted_app_25 update_engine update_verifier usbd vdc vendor_init vendor_misc_writer vendor_modprobe vendor_shell virtual_camera virtual_touchpad virtualizationmanager_vendor vndservicemanager vold vold_prepare_subdirs watchdogd webview_zygote wificond zygote aconfigd aconfigd_mainline adbd_tradeinmode adservices aflags aisealhostservice aisealhostservice_virtualizationmanager aisealhostservice_virtmgr_crosvm aoad apex_test_prepostinstall apexd_derive_classpath art_boot art_exec auditctl automotive_display_service bert_collector blank_screen boringssl_self_test vendor_boringssl_self_test canhalconfigurator casefolding_remover clatd compos_fd_server compos_verify compos_verify_virtualizationmanager compos_verify_virtmgr_crosvm composd composd_virtualizationmanager composd_virtmgr_crosvm cppreopts crosvm_vu_fs crosvm_vu_snd derive_classpath derive_sdk device_as_webcam dex2oat dexopt_chroot_setup dmesgd fuseblkd fuseblkd_untrusted fwk_bufferhub gki_apex_prepostinstall gsid hal_allocator_default hal_keymint_system hal_widevine_system hidl_lazy_test_server hidservice iw kcmdlinectrl kcmdlinemodprobe linkerconfig linux_vm_setup lpdumpd mediacodeclist_generator mediaprovider_app mediatuner memcgv2_activation_depth migrate_legacy_obb_data misctrl mm_events mmd mtectrl native_app_zygote odrefresh odsign ot_ctl ot_daemon overlay_remounter pcc_component permissioncontroller_app platform_app_all_virtualizationmanager platform_app_all_virtmgr_crosvm pmgd preloads_copy preopt2cachename priv_app_all_virtualizationmanager priv_app_all_virtmgr_crosvm profcollectd remount rkp_cert_processor rkpd sdk_sandbox_34 sdk_sandbox_audit sdk_sandbox_next shell_virtualizationmanager shell_virtmgr_crosvm simpleperf_boot snapshotctl snapuserd stats storaged su_virtualizationmanager su_virtmgr_crosvm system_server_startup system_suspend trace_redactor tradeinmode untrusted_app_all_virtualizationmanager untrusted_app_all_virtmgr_crosvm uprobestats usbauthservice userdata_alias_remove vehicle_binding_util vfio_handler virtual_face virtual_fingerprint virtualizationservice virtualizationservice_virtualizationmanager virtualizationservice_virtmgr_crosvm vmlauncher_app vmnic vzwomatrigger_app wait_for_keymaster wifi_mainline_supplicant zygote_next ))
(typeattribute fs_type)
(typeattributeset fs_type (device labeledfs pipefs sockfs rootfs proc binderfs binderfs_logs binderfs_logs_proc binderfs_logs_state_hashed binderfs_logs_stats binderfs_logs_transactions binderfs_logs_transaction_history binderfs_features proc_security proc_drop_caches proc_overcommit_memory proc_min_free_order_shift proc_kpageflags proc_watermark_boost_factor proc_percpu_pagelist_high_fraction usermodehelper sysfs_usermodehelper proc_qtaguid_ctrl proc_qtaguid_stat proc_bluetooth_writable proc_abi proc_asound proc_bootconfig proc_bpf proc_buddyinfo proc_cgroups proc_cmdline proc_cpu_alignment proc_cpuinfo proc_dirty proc_diskstats proc_extra_free_kbytes proc_filesystems proc_firmware_config proc_fs_verity proc_hostname proc_hung_task proc_interrupts proc_iomem proc_kallsyms proc_keys proc_kmsg proc_loadavg proc_locks proc_lowmemorykiller proc_max_map_count proc_meminfo proc_misc proc_modules proc_mounts proc_net proc_net_tcp_udp proc_page_cluster proc_pagetypeinfo proc_panic proc_perf proc_pid_max proc_pipe_conf proc_pressure_cpu proc_pressure_io proc_pressure_mem proc_random proc_sched proc_slabinfo proc_stat proc_swaps proc_sysrq proc_timer proc_tty_drivers proc_uid_cputime_showstat proc_uid_cputime_removeuid proc_uid_io_stats proc_uid_procstat_set proc_uid_time_in_state proc_uid_concurrent_active_time proc_uid_concurrent_policy_time proc_uid_cpupower proc_uptime proc_version proc_vmallocinfo proc_vmstat proc_watermark_scale_factor proc_zoneinfo proc_vendor_sched selinuxfs fusectlfs cgroup cgroup_v2 sysfs sysfs_android_usb sysfs_uio sysfs_batteryinfo sysfs_block sysfs_bluetooth_writable sysfs_cma sysfs_devfreq_cur sysfs_devfreq_dir sysfs_devices_block sysfs_dm sysfs_dm_verity sysfs_dma_heap sysfs_dmabuf_stats sysfs_dt_firmware_android sysfs_extcon sysfs_ion sysfs_ipv4 sysfs_kernel_notes sysfs_leds sysfs_loop sysfs_gpu sysfs_hwrandom sysfs_nfc_power_writable sysfs_wake_lock sysfs_net sysfs_power sysfs_rtc sysfs_mem_sleep sysfs_suspend_params sysfs_suspend_stats sysfs_switch sysfs_sync_on_suspend sysfs_transparent_hugepage sysfs_lru_gen_enabled sysfs_usb sysfs_wakeup sysfs_wakeup_reasons sysfs_fs_ext4_features sysfs_fs_f2fs sysfs_fs_fuse_bpf sysfs_fs_fuse_features sysfs_fs_incfs_features sysfs_fs_incfs_metrics sysfs_vendor_sched fs_bpf fs_bpf_tethering fs_bpf_vendor configfs sysfs_devices_cs_etm sysfs_devices_system_cpu sysfs_lowmemorykiller sysfs_wlan_fwpath sysfs_vibrator sysfs_uhid sysfs_thermal sysfs_zram sysfs_zram_uevent inotify devpts tmpfs shm mqueue fuse fuseblk sdcardfs vfat exfat debugfs debugfs_kprobes debugfs_mmc debugfs_mm_events_tracing debugfs_trace_marker debugfs_tracing debugfs_tracing_debug debugfs_tracing_instances debugfs_tracing_printk_formats debugfs_wakeup_sources debugfs_wifi_tracing securityfs pstorefs functionfs oemfs usbfs binfmt_miscfs app_fusefs debugfs_bootreceiver_tracing sysfs_udc sysfs_thunderbolt sysfs_typec sysfs_usb_pd sysfs_usbcore apex_test_prepostinstall_devpts apexd_devpts proc_allocinfo config_gz proc_consoles fs_bpf_net_private fs_bpf_net_shared fs_bpf_netd_readonly fs_bpf_netd_shared fs_bpf_loader fs_bpf_lock_contention fs_bpf_uprobestats fs_bpf_memevents fs_bpf_cputimeinstate fs_bpf_kernelwakelockduration fs_bpf_dmabuf debugfs_kcov sysfs_dt_avf proc_dt_avf sysfs_uprobe sysfs_pgsize_migration sysfs_btf sysfs_firmware_acpi_tables sysfs_ublk sysfs_binder_impl odsign_devpts priv_app_devpts priv_app_36_devpts serialservice_devpts untrusted_app_all_devpts vmlauncher_app_devpts ))
(typeattribute contextmount_type)
(typeattributeset contextmount_type (oemfs app_fusefs ))
(typeattribute fusefs_type)
(typeattributeset fusefs_type (fuse fuseblk app_fusefs ))
(typeattribute file_type)
(typeattributeset file_type (adbd_exec aidl_lazy_test_server_exec apexd_exec appdomain_tmpfs app_zygote_tmpfs audioserver_tmpfs bootanim_exec bootstat_exec bufferhubd_exec cameraserver_exec cameraserver_tmpfs charger_exec crash_dump_exec credstore_exec dhcp_exec dnsmasq_exec drmserver_exec drmserver_socket dumpstate_exec e2fs_exec early_virtmgr_exec extra_free_kbytes_exec unlabeled system_file system_asan_options_file system_event_log_tags_file system_lib_file system_bootstrap_lib_file system_group_file system_linker_exec system_linker_config_file system_passwd_file system_seccomp_policy_file system_security_cacerts_file tcpdump_exec system_zoneinfo_file cgroup_desc_file vendor_cgroup_desc_file task_profiles_file vendor_task_profiles_file vendor_dma_heap_config_file art_apex_dir linkerconfig_file incremental_control_file bootanim_oem_file vendor_hal_file vendor_file vendor_app_file vendor_configs_file same_process_hal_file vndk_sp_file vendor_framework_file vendor_overlay_file vendor_public_lib_file vendor_public_framework_file vendor_microdroid_file vendor_boot_ota_file vendor_keylayout_file vendor_keychars_file vendor_idc_file vendor_uuid_mapping_config_file vendor_vm_file vendor_vm_data_file metadata_file vold_metadata_file gsi_metadata_file gsi_public_metadata_file password_slot_metadata_file apex_metadata_file ota_metadata_file metadata_bootstat_file userspace_reboot_metadata_file staged_install_file watchdog_metadata_file repair_mode_metadata_file aconfig_storage_metadata_file aconfig_storage_flags_metadata_file dev_cpu_variant runtime_event_log_tags_file logcat_exec cgroup_rc_file coredump_file system_data_root_file system_data_file system_userdir_file packages_list_file game_mode_intervention_list_file vendor_data_file vendor_userdir_file unencrypted_data_file install_data_file drm_data_file adb_data_file anr_data_file tombstone_data_file tombstone_wifi_data_file apex_data_file apk_data_file apk_tmp_file apk_private_data_file apk_private_tmp_file dalvikcache_data_file ota_package_file user_profile_root_file user_profile_data_file profman_dump_data_file prereboot_data_file resourcecache_data_file shell_data_file property_data_file bootchart_data_file dropbox_data_file heapdump_data_file nativetest_data_file shell_test_data_file ringtone_file preloads_data_file preloads_media_file dhcp_data_file server_configurable_flags_data_file staging_data_file vendor_apex_file vendor_apex_metadata_file shutdown_checkpoints_system_data_file mnt_media_rw_file mnt_user_file mnt_pass_through_file mnt_expand_file mnt_sdcard_file storage_file mnt_media_rw_stub_file storage_stub_file mnt_vendor_file mnt_product_file apex_mnt_dir apex_info_file postinstall_mnt_dir postinstall_file mirror_data_file adb_keys_file apex_system_server_data_file apex_module_data_file apex_ota_reserved_file apex_rollback_data_file appcompat_data_file audio_data_file audioserver_data_file bluetooth_data_file bluetooth_logs_data_file bootstat_data_file boottrace_data_file camera_data_file credstore_data_file gatekeeper_data_file incident_data_file keychain_data_file keystore_data_file media_data_file media_rw_data_file media_userdir_file misc_user_data_file net_data_file network_watchlist_data_file nfc_data_file nfc_logs_data_file radio_data_file recovery_data_file shared_relro_file snapshotctl_log_data_file stats_config_data_file stats_data_file systemkeys_data_file textclassifier_data_file trace_data_file vpn_data_file wifi_data_file vold_data_file tee_data_file update_engine_data_file update_engine_log_data_file snapuserd_log_data_file method_trace_data_file gsi_data_file radio_core_data_file app_data_file privapp_data_file system_app_data_file cache_file overlayfs_file cache_backup_file cache_private_backup_file cache_recovery_file efs_file wallpaper_file shortcut_manager_icons icon_file asec_apk_file asec_public_file asec_image_file backup_data_file bluetooth_efs_file fingerprintd_data_file fingerprint_vendor_data_file app_fuse_file face_vendor_data_file iris_vendor_data_file adbd_socket bluetooth_socket dnsproxyd_socket dumpstate_socket fwmarkd_socket lmkd_socket logd_socket logdr_socket logdw_socket mdns_socket mdnsd_socket misc_logd_file mtpd_socket ot_daemon_socket property_socket racoon_socket recovery_socket rild_socket rild_debug_socket snapuserd_socket snapuserd_proxy_socket statsdw_socket system_wpa_socket system_ndebug_socket system_unsolzygote_socket tombstoned_crash_socket tombstoned_java_trace_socket tombstoned_intercept_socket traced_consumer_socket traced_perf_socket traced_producer_socket uncrypt_socket wpa_socket zygote_socket heapprofd_socket gps_control pdx_display_dir pdx_performance_dir pdx_bufferhub_dir pdx_display_client_endpoint_socket pdx_display_manager_endpoint_socket pdx_display_screenshot_endpoint_socket pdx_display_vsync_endpoint_socket pdx_performance_client_endpoint_socket pdx_bufferhub_client_endpoint_socket file_contexts_file mac_perms_file property_contexts_file seapp_contexts_file sepolicy_file service_contexts_file keystore2_key_contexts_file vendor_service_contexts_file hwservice_contexts_file vndservice_contexts_file vendor_kernel_modules system_dlkm_file audiohal_data_file tee_service_contexts_file virtualizationservice_data_file wifi_vendor_user_data_file wpa_user_data_file fingerprintd_exec flags_health_check_exec fsck_exec gatekeeperd_exec hal_graphics_composer_server_tmpfs hwservicemanager_exec idmap_exec init_exec init_tmpfs init_dev_config_exec inputflinger_exec installd_exec keystore_exec llkd_exec lmkd_exec logd_exec mediadrmserver_exec mediaextractor_exec mediaextractor_tmpfs mediametrics_exec mediaserver_exec mediaserver_tmpfs mediaswcodec_exec netd_exec netutils_wrapper_exec performanced_exec profman_exec recovery_persist_exec recovery_refresh_exec rs_exec runas_exec sdcardd_exec servicemanager_exec sgdisk_exec shell_exec simpleperf_app_runner_exec statsd_exec su_exec surfaceflinger_tmpfs system_server_tmpfs tombstoned_exec toolbox_exec traced_tmpfs ueventd_tmpfs uncrypt_exec update_engine_exec update_verifier_exec usbd_exec vdc_exec vendor_misc_writer_exec vendor_shell_exec vendor_toolbox_exec virtual_camera_exec virtual_touchpad_exec virtualizationmanager_exec vold_exec vold_prepare_subdirs_exec watchdogd_exec webview_zygote_exec webview_zygote_tmpfs wificond_exec zygote_tmpfs zygote_exec aconfigd_exec aconfigd_mainline_exec aflags_exec aisealhostservice_exec aoad_exec apex_test_prepostinstall_exec art_boot_exec art_exec_exec artd_exec artd_tmpfs atrace_exec audioserver_exec auditctl_exec automotive_display_service_exec bert_collector_exec blank_screen_exec blkid_exec boringssl_self_test_exec vendor_boringssl_self_test_exec boringssl_self_test_marker bpfloader_exec bpfloader_platform_exec canhalconfigurator_exec casefolding_remover_exec clatd_exec compos_verify_exec composd_exec cppreopts_exec crosvm_exec crosvm_domain_tmpfs crosvm_vu_fs_tmpfs crosvm_vu_fs_exec crosvm_vu_snd_tmpfs crosvm_vu_snd_exec derive_classpath_exec derive_sdk_exec dex2oat_exec dexopt_chroot_setup_exec dexopt_chroot_setup_tmpfs dexoptanalyzer_exec dmesgd_exec dumpstate_tmpfs evsmanagerd_exec mediadrm_system_data_file user_list_data_file storaged_data_file wm_trace_data_file accessibility_trace_data_file perfetto_traces_data_file perfetto_traces_bugreport_data_file perfetto_traces_profiling_data_file perfetto_configs_data_file system_perfetto_config_file uprobestats_configs_data_file oatdump_exec sdk_sandbox_system_data_file sdk_sandbox_data_file pcc_data_file app_exec_data_file rollback_data_file checkin_data_file ota_image_data_file gsi_persistent_data_file emergency_data_file profcollectd_data_file apex_art_data_file apex_art_staging_data_file apex_compos_data_file apex_virt_data_file apex_tethering_data_file apex_uwb_data_file apex_wifi_data_file apex_appsearch_data_file apex_permission_data_file apex_scheduling_data_file appsearch_data_file font_data_file dmesgd_data_file odrefresh_data_file odsign_data_file odsign_metrics_file vm_data_file environ_system_data_file pcc_auditlogs_data_file bootanim_data_file surfaceflinger_data_file per_boot_file fd_server_exec compos_exec compos_key_helper_exec prng_seeder_socket system_font_fallback_file aconfigd_socket device_config_exec aconfigd_mainline_socket system_aconfig_storage_file vendor_aconfig_storage_file connectivityblob_data_file mainline_supplicant_data_file pre_reboot_dexopt_file pre_reboot_dexopt_artd_file apk_metadata_file pbtombstone_exec microdroid_managed_socket_file storage_area_app_dir storage_area_dir storage_area_content_file storage_area_key_file tradeinmode_metadata_file prefetch_metadata_file libprocessgroup_metadata_file exp_partition_data_file statsd_atoms_list_file aiseal_data_file zygote_next_socket uid_allowlist_policy fuseblkd_exec fuseblkd_untrusted_exec fwk_bufferhub_exec gki_apex_prepostinstall_exec gpuservice_exec gsid_exec hal_allocator_default_exec hal_keymint_system_exec hal_widevine_system_exec heapprofd_exec heapprofd_tmpfs hidl_lazy_test_server_exec hidservice_exec incident_exec incident_helper_exec incidentd_exec iw_exec kcmdlinectrl_exec kcmdlinemodprobe_exec linkerconfig_exec linux_vm_setup_exec lpdumpd_exec mdnsd_exec mediacodeclist_generator_exec mediatranscoding_exec mediatranscoding_tmpfs mediatuner_exec memcgv2_activation_depth_exec migrate_legacy_obb_data_exec misctrl_exec mm_events_exec mmd_exec mmd_setup_exec zram_data_file mtectrl_exec odrefresh_exec odsign_exec omapi_exec ot_ctl_exec ot_daemon_exec overlay_remounter_exec perfetto_exec perfetto_tmpfs pmgd_exec pmgd_data_file postinstall_exec prefetch_exec preloads_copy_exec preopt2cachename_exec prng_seeder_exec profcollectd_exec remount_exec rkp_cert_processor_exec rkpd_exec rss_hwm_reset_exec serialservice_exec simpleperf_exec simpleperf_boot_data_file snapshotctl_exec snapuserd_exec stats_exec storaged_exec surfaceflinger_exec app_backup_staging_file system_server_startup_tmpfs system_suspend_exec trace_redactor_exec traced_exec traced_perf_exec traced_probes_exec traced_probes_tmpfs tradeinmode_exec uprobestats_exec usbauthservice_exec userdata_alias_remove_exec vehicle_binding_util_exec vfio_handler_exec virtual_face_exec virtual_fingerprint_exec virtualizationservice_exec vmnic_exec wait_for_keymaster_exec wifi_mainline_supplicant_exec zygote_next_exec ))
(typeattribute exec_type)
(typeattributeset exec_type (adbd_exec aidl_lazy_test_server_exec apexd_exec bootanim_exec bootstat_exec bufferhubd_exec cameraserver_exec charger_exec crash_dump_exec credstore_exec dhcp_exec dnsmasq_exec drmserver_exec dumpstate_exec e2fs_exec early_virtmgr_exec extra_free_kbytes_exec tcpdump_exec logcat_exec fingerprintd_exec flags_health_check_exec fsck_exec gatekeeperd_exec hwservicemanager_exec idmap_exec init_exec init_dev_config_exec inputflinger_exec installd_exec keystore_exec llkd_exec lmkd_exec logd_exec mediadrmserver_exec mediaextractor_exec mediametrics_exec mediaserver_exec mediaswcodec_exec netd_exec netutils_wrapper_exec performanced_exec profman_exec recovery_persist_exec recovery_refresh_exec rs_exec runas_exec sdcardd_exec servicemanager_exec sgdisk_exec shell_exec simpleperf_app_runner_exec statsd_exec su_exec tombstoned_exec toolbox_exec uncrypt_exec update_engine_exec update_verifier_exec usbd_exec vdc_exec vendor_misc_writer_exec vendor_shell_exec vendor_toolbox_exec virtual_camera_exec virtual_touchpad_exec virtualizationmanager_exec vold_exec vold_prepare_subdirs_exec watchdogd_exec webview_zygote_exec wificond_exec zygote_exec aconfigd_exec aconfigd_mainline_exec aflags_exec aisealhostservice_exec aoad_exec apex_test_prepostinstall_exec art_boot_exec art_exec_exec artd_exec atrace_exec audioserver_exec auditctl_exec automotive_display_service_exec bert_collector_exec blank_screen_exec blkid_exec boringssl_self_test_exec vendor_boringssl_self_test_exec bpfloader_exec bpfloader_platform_exec canhalconfigurator_exec casefolding_remover_exec clatd_exec compos_verify_exec composd_exec cppreopts_exec crosvm_exec crosvm_vu_fs_exec crosvm_vu_snd_exec derive_classpath_exec derive_sdk_exec dex2oat_exec dexopt_chroot_setup_exec dexoptanalyzer_exec dmesgd_exec evsmanagerd_exec oatdump_exec fd_server_exec compos_exec compos_key_helper_exec device_config_exec pbtombstone_exec fuseblkd_exec fuseblkd_untrusted_exec fwk_bufferhub_exec gki_apex_prepostinstall_exec gpuservice_exec gsid_exec hal_allocator_default_exec hal_keymint_system_exec hal_widevine_system_exec heapprofd_exec hidl_lazy_test_server_exec hidservice_exec incident_exec incident_helper_exec incidentd_exec iw_exec kcmdlinectrl_exec kcmdlinemodprobe_exec linkerconfig_exec linux_vm_setup_exec lpdumpd_exec mdnsd_exec mediacodeclist_generator_exec mediatranscoding_exec mediatuner_exec memcgv2_activation_depth_exec migrate_legacy_obb_data_exec misctrl_exec mm_events_exec mmd_exec mmd_setup_exec mtectrl_exec odrefresh_exec odsign_exec omapi_exec ot_ctl_exec ot_daemon_exec overlay_remounter_exec perfetto_exec pmgd_exec postinstall_exec prefetch_exec preloads_copy_exec preopt2cachename_exec prng_seeder_exec profcollectd_exec remount_exec rkp_cert_processor_exec rkpd_exec rss_hwm_reset_exec serialservice_exec simpleperf_exec snapshotctl_exec snapuserd_exec stats_exec storaged_exec surfaceflinger_exec system_suspend_exec trace_redactor_exec traced_exec traced_perf_exec traced_probes_exec tradeinmode_exec uprobestats_exec usbauthservice_exec userdata_alias_remove_exec vehicle_binding_util_exec vfio_handler_exec virtual_face_exec virtual_fingerprint_exec virtualizationservice_exec vmnic_exec wait_for_keymaster_exec wifi_mainline_supplicant_exec zygote_next_exec ))
(typeattribute data_file_type)
(expandtypeattribute (data_file_type) false)
(typeattributeset data_file_type (incremental_control_file vendor_vm_data_file system_data_root_file system_data_file system_userdir_file packages_list_file game_mode_intervention_list_file vendor_data_file vendor_userdir_file unencrypted_data_file install_data_file drm_data_file adb_data_file anr_data_file tombstone_data_file tombstone_wifi_data_file apex_data_file apk_data_file apk_tmp_file apk_private_data_file apk_private_tmp_file dalvikcache_data_file ota_package_file user_profile_root_file user_profile_data_file profman_dump_data_file prereboot_data_file resourcecache_data_file shell_data_file property_data_file bootchart_data_file dropbox_data_file heapdump_data_file nativetest_data_file shell_test_data_file ringtone_file preloads_data_file preloads_media_file dhcp_data_file server_configurable_flags_data_file staging_data_file shutdown_checkpoints_system_data_file adb_keys_file apex_system_server_data_file apex_module_data_file apex_ota_reserved_file apex_rollback_data_file appcompat_data_file audio_data_file audioserver_data_file bluetooth_data_file bluetooth_logs_data_file bootstat_data_file boottrace_data_file camera_data_file credstore_data_file gatekeeper_data_file incident_data_file keychain_data_file keystore_data_file media_data_file media_rw_data_file media_userdir_file misc_user_data_file net_data_file network_watchlist_data_file nfc_data_file nfc_logs_data_file radio_data_file recovery_data_file shared_relro_file snapshotctl_log_data_file stats_config_data_file stats_data_file systemkeys_data_file textclassifier_data_file trace_data_file vpn_data_file wifi_data_file vold_data_file tee_data_file update_engine_data_file update_engine_log_data_file snapuserd_log_data_file method_trace_data_file gsi_data_file radio_core_data_file app_data_file privapp_data_file system_app_data_file cache_file overlayfs_file cache_backup_file cache_private_backup_file cache_recovery_file wallpaper_file shortcut_manager_icons icon_file asec_apk_file asec_public_file asec_image_file backup_data_file fingerprintd_data_file fingerprint_vendor_data_file app_fuse_file face_vendor_data_file iris_vendor_data_file bluetooth_socket misc_logd_file system_wpa_socket system_ndebug_socket system_unsolzygote_socket wpa_socket audiohal_data_file virtualizationservice_data_file wifi_vendor_user_data_file wpa_user_data_file mediadrm_system_data_file user_list_data_file storaged_data_file wm_trace_data_file accessibility_trace_data_file perfetto_traces_data_file perfetto_traces_bugreport_data_file perfetto_traces_profiling_data_file perfetto_configs_data_file uprobestats_configs_data_file sdk_sandbox_system_data_file sdk_sandbox_data_file pcc_data_file app_exec_data_file rollback_data_file checkin_data_file ota_image_data_file gsi_persistent_data_file emergency_data_file profcollectd_data_file apex_art_data_file apex_art_staging_data_file apex_compos_data_file apex_virt_data_file apex_tethering_data_file apex_uwb_data_file apex_wifi_data_file apex_appsearch_data_file apex_permission_data_file apex_scheduling_data_file appsearch_data_file font_data_file dmesgd_data_file odrefresh_data_file odsign_data_file odsign_metrics_file environ_system_data_file pcc_auditlogs_data_file bootanim_data_file surfaceflinger_data_file per_boot_file connectivityblob_data_file mainline_supplicant_data_file apk_metadata_file storage_area_app_dir storage_area_dir storage_area_content_file storage_area_key_file exp_partition_data_file statsd_atoms_list_file aiseal_data_file zram_data_file pmgd_data_file app_backup_staging_file ))
(typeattribute core_data_file_type)
(expandtypeattribute (core_data_file_type) false)
(typeattributeset core_data_file_type (incremental_control_file system_data_root_file system_data_file system_userdir_file packages_list_file game_mode_intervention_list_file vendor_userdir_file unencrypted_data_file install_data_file drm_data_file adb_data_file anr_data_file tombstone_data_file apex_data_file apk_data_file apk_tmp_file apk_private_data_file apk_private_tmp_file dalvikcache_data_file ota_package_file user_profile_root_file user_profile_data_file profman_dump_data_file prereboot_data_file resourcecache_data_file shell_data_file property_data_file bootchart_data_file dropbox_data_file heapdump_data_file nativetest_data_file shell_test_data_file ringtone_file preloads_data_file preloads_media_file dhcp_data_file server_configurable_flags_data_file staging_data_file shutdown_checkpoints_system_data_file mirror_data_file adb_keys_file apex_system_server_data_file apex_module_data_file apex_ota_reserved_file apex_rollback_data_file appcompat_data_file audio_data_file audioserver_data_file bluetooth_data_file bluetooth_logs_data_file bootstat_data_file boottrace_data_file camera_data_file credstore_data_file gatekeeper_data_file incident_data_file keychain_data_file keystore_data_file media_data_file media_rw_data_file media_userdir_file misc_user_data_file net_data_file network_watchlist_data_file nfc_data_file nfc_logs_data_file radio_data_file recovery_data_file shared_relro_file snapshotctl_log_data_file stats_config_data_file stats_data_file systemkeys_data_file textclassifier_data_file trace_data_file vpn_data_file wifi_data_file vold_data_file update_engine_data_file update_engine_log_data_file snapuserd_log_data_file method_trace_data_file gsi_data_file radio_core_data_file app_data_file privapp_data_file system_app_data_file cache_file overlayfs_file cache_backup_file cache_private_backup_file cache_recovery_file wallpaper_file shortcut_manager_icons icon_file asec_apk_file asec_public_file asec_image_file backup_data_file fingerprintd_data_file app_fuse_file bluetooth_socket misc_logd_file system_wpa_socket system_ndebug_socket system_unsolzygote_socket wpa_socket audiohal_data_file virtualizationservice_data_file mediadrm_system_data_file user_list_data_file storaged_data_file wm_trace_data_file accessibility_trace_data_file perfetto_traces_data_file perfetto_traces_bugreport_data_file perfetto_traces_profiling_data_file perfetto_configs_data_file uprobestats_configs_data_file sdk_sandbox_system_data_file sdk_sandbox_data_file pcc_data_file app_exec_data_file rollback_data_file checkin_data_file ota_image_data_file gsi_persistent_data_file emergency_data_file profcollectd_data_file apex_art_data_file apex_art_staging_data_file apex_compos_data_file apex_virt_data_file apex_tethering_data_file apex_uwb_data_file apex_wifi_data_file apex_appsearch_data_file apex_permission_data_file apex_scheduling_data_file appsearch_data_file font_data_file dmesgd_data_file odrefresh_data_file odsign_data_file odsign_metrics_file vm_data_file environ_system_data_file pcc_auditlogs_data_file bootanim_data_file surfaceflinger_data_file per_boot_file connectivityblob_data_file mainline_supplicant_data_file apk_metadata_file storage_area_app_dir storage_area_dir storage_area_content_file storage_area_key_file exp_partition_data_file statsd_atoms_list_file aiseal_data_file zram_data_file pmgd_data_file app_backup_staging_file ))
(typeattribute app_data_file_type)
(expandtypeattribute (app_data_file_type) false)
(typeattributeset app_data_file_type (shell_data_file bluetooth_data_file nfc_data_file radio_data_file app_data_file privapp_data_file system_app_data_file sdk_sandbox_data_file pcc_data_file storage_area_app_dir storage_area_dir storage_area_content_file ))
(typeattribute system_file_type)
(typeattributeset system_file_type (adbd_exec aidl_lazy_test_server_exec apexd_exec bootanim_exec bootstat_exec bufferhubd_exec cameraserver_exec charger_exec crash_dump_exec credstore_exec dhcp_exec dnsmasq_exec drmserver_exec dumpstate_exec e2fs_exec early_virtmgr_exec extra_free_kbytes_exec system_file system_asan_options_file system_event_log_tags_file system_lib_file system_bootstrap_lib_file system_group_file system_linker_exec system_linker_config_file system_passwd_file system_seccomp_policy_file system_security_cacerts_file tcpdump_exec system_zoneinfo_file cgroup_desc_file task_profiles_file art_apex_dir bootanim_oem_file logcat_exec file_contexts_file mac_perms_file property_contexts_file seapp_contexts_file sepolicy_file service_contexts_file keystore2_key_contexts_file hwservice_contexts_file tee_service_contexts_file fingerprintd_exec flags_health_check_exec fsck_exec gatekeeperd_exec hwservicemanager_exec idmap_exec init_exec inputflinger_exec installd_exec keystore_exec llkd_exec lmkd_exec logd_exec mediadrmserver_exec mediaextractor_exec mediametrics_exec mediaserver_exec mediaswcodec_exec netd_exec netutils_wrapper_exec performanced_exec profman_exec recovery_persist_exec recovery_refresh_exec rs_exec runas_exec sdcardd_exec servicemanager_exec sgdisk_exec shell_exec simpleperf_app_runner_exec statsd_exec su_exec tombstoned_exec toolbox_exec uncrypt_exec update_engine_exec update_verifier_exec usbd_exec vdc_exec virtual_camera_exec virtual_touchpad_exec virtualizationmanager_exec vold_exec vold_prepare_subdirs_exec watchdogd_exec wificond_exec zygote_exec aconfigd_exec aconfigd_mainline_exec aflags_exec aisealhostservice_exec aoad_exec apex_test_prepostinstall_exec art_boot_exec art_exec_exec artd_exec atrace_exec audioserver_exec auditctl_exec automotive_display_service_exec bert_collector_exec blank_screen_exec blkid_exec boringssl_self_test_exec bpfloader_exec bpfloader_platform_exec canhalconfigurator_exec casefolding_remover_exec clatd_exec compos_verify_exec composd_exec cppreopts_exec crosvm_exec crosvm_vu_fs_exec crosvm_vu_snd_exec derive_classpath_exec derive_sdk_exec dex2oat_exec dexopt_chroot_setup_exec dexoptanalyzer_exec dmesgd_exec evsmanagerd_exec system_perfetto_config_file oatdump_exec fd_server_exec compos_exec compos_key_helper_exec system_font_fallback_file device_config_exec system_aconfig_storage_file pbtombstone_exec fuseblkd_exec fuseblkd_untrusted_exec fwk_bufferhub_exec gki_apex_prepostinstall_exec gpuservice_exec gsid_exec hal_allocator_default_exec hal_keymint_system_exec hal_widevine_system_exec heapprofd_exec hidl_lazy_test_server_exec hidservice_exec incident_exec incident_helper_exec incidentd_exec iw_exec kcmdlinectrl_exec kcmdlinemodprobe_exec linkerconfig_exec linux_vm_setup_exec lpdumpd_exec mdnsd_exec mediacodeclist_generator_exec mediatranscoding_exec mediatuner_exec memcgv2_activation_depth_exec migrate_legacy_obb_data_exec misctrl_exec mm_events_exec mmd_exec mmd_setup_exec mtectrl_exec odrefresh_exec odsign_exec omapi_exec ot_ctl_exec ot_daemon_exec overlay_remounter_exec perfetto_exec pmgd_exec postinstall_exec prefetch_exec preloads_copy_exec preopt2cachename_exec prng_seeder_exec profcollectd_exec remount_exec rkp_cert_processor_exec rkpd_exec rss_hwm_reset_exec serialservice_exec simpleperf_exec snapshotctl_exec snapuserd_exec stats_exec storaged_exec surfaceflinger_exec system_suspend_exec trace_redactor_exec traced_exec traced_perf_exec traced_probes_exec tradeinmode_exec uprobestats_exec usbauthservice_exec userdata_alias_remove_exec vehicle_binding_util_exec vfio_handler_exec virtual_face_exec virtual_fingerprint_exec virtualizationservice_exec vmnic_exec wait_for_keymaster_exec wifi_mainline_supplicant_exec zygote_next_exec ))
(typeattribute system_dlkm_file_type)
(typeattributeset system_dlkm_file_type (system_dlkm_file ))
(typeattribute vendor_file_type)
(typeattributeset vendor_file_type (vendor_cgroup_desc_file vendor_task_profiles_file vendor_dma_heap_config_file vendor_hal_file vendor_file vendor_app_file vendor_configs_file same_process_hal_file vndk_sp_file vendor_framework_file vendor_overlay_file vendor_public_lib_file vendor_public_framework_file vendor_microdroid_file vendor_boot_ota_file vendor_keylayout_file vendor_keychars_file vendor_idc_file vendor_uuid_mapping_config_file vendor_vm_file vendor_apex_file vendor_apex_metadata_file vendor_service_contexts_file vendor_kernel_modules init_dev_config_exec vendor_misc_writer_exec vendor_shell_exec vendor_toolbox_exec vendor_boringssl_self_test_exec vendor_aconfig_storage_file ))
(typeattribute proc_type)
(expandtypeattribute (proc_type) false)
(typeattributeset proc_type (proc proc_security proc_drop_caches proc_overcommit_memory proc_min_free_order_shift proc_kpageflags proc_watermark_boost_factor proc_percpu_pagelist_high_fraction usermodehelper proc_qtaguid_ctrl proc_qtaguid_stat proc_bluetooth_writable proc_abi proc_asound proc_bootconfig proc_bpf proc_buddyinfo proc_cgroups proc_cmdline proc_cpu_alignment proc_cpuinfo proc_dirty proc_diskstats proc_extra_free_kbytes proc_filesystems proc_firmware_config proc_fs_verity proc_hostname proc_hung_task proc_interrupts proc_iomem proc_kallsyms proc_keys proc_kmsg proc_loadavg proc_locks proc_lowmemorykiller proc_max_map_count proc_meminfo proc_misc proc_modules proc_mounts proc_net proc_net_tcp_udp proc_page_cluster proc_pagetypeinfo proc_panic proc_perf proc_pid_max proc_pipe_conf proc_pressure_cpu proc_pressure_io proc_pressure_mem proc_random proc_sched proc_slabinfo proc_stat proc_swaps proc_sysrq proc_timer proc_tty_drivers proc_uid_cputime_showstat proc_uid_cputime_removeuid proc_uid_io_stats proc_uid_procstat_set proc_uid_time_in_state proc_uid_concurrent_active_time proc_uid_concurrent_policy_time proc_uid_cpupower proc_uptime proc_version proc_vmallocinfo proc_vmstat proc_watermark_scale_factor proc_zoneinfo proc_vendor_sched proc_allocinfo config_gz proc_consoles proc_dt_avf ))
(typeattribute proc_net_type)
(expandtypeattribute (proc_net_type) true)
(typeattributeset proc_net_type (proc_net ))
(typeattribute sysfs_type)
(typeattributeset sysfs_type (sysfs_usermodehelper sysfs sysfs_android_usb sysfs_uio sysfs_batteryinfo sysfs_block sysfs_bluetooth_writable sysfs_cma sysfs_devfreq_cur sysfs_devfreq_dir sysfs_devices_block sysfs_dm sysfs_dm_verity sysfs_dma_heap sysfs_dmabuf_stats sysfs_dt_firmware_android sysfs_extcon sysfs_ion sysfs_ipv4 sysfs_kernel_notes sysfs_leds sysfs_loop sysfs_gpu sysfs_hwrandom sysfs_nfc_power_writable sysfs_wake_lock sysfs_net sysfs_power sysfs_rtc sysfs_mem_sleep sysfs_suspend_params sysfs_suspend_stats sysfs_switch sysfs_sync_on_suspend sysfs_transparent_hugepage sysfs_lru_gen_enabled sysfs_usb sysfs_wakeup sysfs_wakeup_reasons sysfs_fs_ext4_features sysfs_fs_f2fs sysfs_fs_fuse_bpf sysfs_fs_fuse_features sysfs_fs_incfs_features sysfs_fs_incfs_metrics sysfs_vendor_sched sysfs_devices_cs_etm sysfs_devices_system_cpu sysfs_lowmemorykiller sysfs_wlan_fwpath sysfs_vibrator sysfs_uhid sysfs_thermal sysfs_zram sysfs_zram_uevent sysfs_udc sysfs_thunderbolt sysfs_typec sysfs_usb_pd sysfs_usbcore sysfs_dt_avf sysfs_uprobe sysfs_pgsize_migration sysfs_btf sysfs_firmware_acpi_tables sysfs_ublk sysfs_binder_impl ))
(typeattribute debugfs_type)
(typeattributeset debugfs_type (debugfs debugfs_kprobes debugfs_mmc debugfs_mm_events_tracing debugfs_trace_marker debugfs_tracing debugfs_tracing_debug debugfs_tracing_instances debugfs_tracing_printk_formats debugfs_wakeup_sources debugfs_wifi_tracing debugfs_bootreceiver_tracing debugfs_kcov ))
(typeattribute tracefs_type)
(typeattributeset tracefs_type (debugfs_mm_events_tracing debugfs_trace_marker debugfs_tracing debugfs_tracing_debug debugfs_tracing_instances debugfs_tracing_printk_formats debugfs_wifi_tracing debugfs_bootreceiver_tracing ))
(typeattribute sdcard_type)
(typeattributeset sdcard_type (fuseblk sdcardfs vfat exfat ))
(typeattribute node_type)
(typeattributeset node_type (node ))
(typeattribute netif_type)
(typeattributeset netif_type (netif ))
(typeattribute port_type)
(typeattributeset port_type (port ))
(typeattribute property_type)
(typeattributeset property_type (apexd_prop bootloader_boot_reason_prop device_config_activity_manager_native_boot_prop device_config_boot_count_prop device_config_input_native_boot_prop device_config_netd_native_prop device_config_reset_performed_prop firstboot_prop boottime_prop charger_prop cold_boot_done_prop ctl_adbd_prop ctl_apexd_prop ctl_bootanim_prop ctl_bugreport_prop ctl_console_prop ctl_dumpstate_prop ctl_fuse_prop ctl_gsid_prop ctl_interface_restart_prop ctl_interface_stop_prop ctl_mdnsd_prop ctl_restart_prop ctl_rildaemon_prop ctl_sigstop_prop dynamic_system_prop heapprofd_enabled_prop llkd_prop lpdumpd_prop mmc_prop mock_ota_prop net_dns_prop overlay_prop persistent_properties_ready_prop safemode_prop system_lmk_prop system_trace_prop test_boot_reason_prop time_prop traced_enabled_prop traced_lazy_prop aac_drc_prop adaptive_haptics_prop apex_ready_prop arm64_memtag_prop binder_cache_bluetooth_server_prop binder_cache_system_server_prop binder_cache_telephony_server_prop boot_status_prop bootanim_system_prop bootloader_prop boottime_public_prop bq_config_prop build_bootimage_prop build_prop composd_vm_art_prop device_config_aconfig_flags_prop device_config_camera_native_prop device_config_edgetpu_native_prop device_config_media_native_prop device_config_nnapi_native_prop device_config_runtime_native_boot_prop device_config_runtime_native_prop device_config_surface_flinger_native_boot_prop device_config_vendor_system_native_prop device_config_vendor_system_native_boot_prop drm_forcel3_prop fingerprint_prop gwp_asan_prop hal_instrumentation_prop userdebug_or_eng_prop init_service_status_prop libc_debug_prop module_sdkextensions_prop nnapi_ext_deny_product_prop persist_wm_debug_prop power_debug_prop profcollectd_etr_prop property_service_version_prop provisioned_prop restorecon_prop retaildemo_prop servicemanager_prop smart_idle_maint_enabled_prop socket_hook_prop sqlite_log_prop surfaceflinger_display_prop system_boot_reason_prop system_jvmti_agent_prop traced_oome_heap_session_count_prop ab_update_gki_prop usb_prop userspace_reboot_exported_prop vold_status_prop vts_status_prop config_prop cppreopt_prop dalvik_prop debuggerd_prop device_logging_prop dhcp_prop dumpstate_prop exported3_system_prop exported_dumpstate_prop exported_secure_prop heapprofd_prop net_radio_prop pan_result_prop persist_debug_prop shell_prop test_harness_prop theme_prop use_memfd_prop vold_prop apexd_config_prop aaudio_config_prop audio_config_prop bootanim_config_prop bluetooth_config_prop build_attestation_prop build_config_prop build_odm_prop build_vendor_prop camera_calibration_prop camera_config_prop camera2_extensions_prop camerax_extensions_prop charger_config_prop codec2_config_prop composd_vm_vendor_prop cpu_variant_prop debugfs_restriction_prop drm_config_prop drm_service_config_prop enable_16k_pages_prop exported_camera_prop exported_config_prop exported_default_prop ffs_config_prop framework_watchdog_config_prop graphics_config_prop hdmi_config_prop hw_timeout_multiplier_prop hypervisor_prop hypervisor_restricted_prop incremental_prop input_device_config_prop keyguard_config_prop keystore_config_prop lmkd_config_prop media_config_prop mediadrm_config_prop mm_events_config_prop oem_unlock_prop ota_build_prop packagemanager_config_prop quick_start_prop recovery_config_prop recovery_usb_config_prop sendbug_config_prop soc_prop storage_config_prop storagemanager_config_prop surfaceflinger_prop suspend_prop systemsound_config_prop telephony_config_prop threadnetwork_config_prop tombstone_config_prop usb_config_prop userspace_reboot_config_prop vehicle_hal_prop vendor_security_patch_level_prop vendor_socket_hook_prop virtual_ab_prop vndk_prop vts_config_prop vold_config_prop wifi_config_prop zram_config_prop zygote_config_prop dck_prop tuner_config_prop usb_uvc_enabled_prop setupwizard_mode_prop pm_archiving_enabled_prop trusty_security_vm_sys_vendor_prop wallet_prop usb_userspace_aoa_enabled_prop mmd_config_prop adbd_config_prop audio_prop bluetooth_a2dp_offload_prop bluetooth_audio_hal_prop bluetooth_finder_prop bluetooth_prop bpf_progs_loaded_prop charger_status_prop ctl_default_prop ctl_interface_start_prop ctl_start_prop ctl_stop_prop dalvik_config_prop dalvik_dynamic_config_prop dalvik_runtime_prop debug_prop device_config_memory_safety_native_boot_prop device_config_memory_safety_native_prop dumpstate_options_prop exported_system_prop exported_bluetooth_prop exported_overlay_prop exported_pm_prop future_pm_prop ffs_control_prop framework_status_prop gesture_prop graphics_config_writable_prop hal_dumpstate_config_prop sota_prop hwservicemanager_prop lmkd_prop locale_prop logd_prop logpersistd_logging_prop log_prop log_tag_prop lowpan_prop media_variant_prop nfc_prop ota_prop permissive_mte_prop powerctl_prop qemu_hw_prop qemu_sf_lcd_density_prop radio_control_prop radio_prop remote_prov_prop serialno_prop surfaceflinger_color_prop system_prop system_user_mode_emulation_prop telephony_status_prop timezone_prop usb_control_prop vold_post_fs_data_prop wifi_hal_prop wifi_log_prop wifi_prop zram_control_prop default_prop rebootescrow_hal_prop virtual_face_hal_prop virtual_face_prop virtual_fingerprint_hal_prop virtual_fingerprint_prop persist_vendor_debug_wifi_prop apexd_select_prop vendor_default_prop adb_timeout_prop adbd_prop adbd_tradeinmode_prop aiseal_prop apexd_payload_metadata_prop apexd_private_prop appsearch_vm_prop bluetooth_lea_prop casefolding_status_prop casefolding_override_prop ctl_snapuserd_prop ctl_prefetch_prop ctl_uprobestats_prop crashrecovery_prop debug_tracing_desktop_mode_visible_tasks_prop device_config_core_experiments_team_internal_prop device_config_lmkd_native_prop device_config_memory_management_native_boot_prop device_config_mglru_native_prop device_config_mmd_native_prop device_config_profcollect_native_boot_prop device_config_remote_key_provisioning_native_prop device_config_statsd_native_prop device_config_statsd_native_boot_prop device_config_storage_native_boot_prop device_config_sys_traced_prop device_config_window_manager_native_boot_prop device_config_configuration_prop device_config_connectivity_prop device_config_swcodec_native_prop device_config_tethering_u_or_later_native_prop dmesgd_start_prop fastbootd_protocol_prop gsid_prop hsum_boot_strategy_prop init_mnt_ns_prop init_perf_lsm_hooks_prop init_service_status_private_prop init_storage_prop init_svc_debug_prop kcmdline_prop keystore_diagnostics_prop keystore_listen_prop last_boot_reason_prop localization_prop logd_auditrate_prop lower_kptr_restrict_prop mmd_status_prop net_464xlat_fromvendor_prop net_connectivity_prop netd_stable_secret_prop next_boot_prop odsign_prop misctrl_prop perf_drop_caches_prop pm_prop prefetch_service_prop profcollectd_enabled_prop profcollectd_node_id_prop radio_cdma_ecm_prop remote_prov_cert_prop rollback_test_prop setupwizard_prop snapshotctl_prop snapuserd_prop system_adbd_prop system_audio_config_prop timezone_metadata_prop traced_config_prop traced_perf_enabled_prop traced_relay_relay_port_prop uprobestats_start_with_config_prop tuner_server_ctl_prop userspace_reboot_log_prop userspace_reboot_test_prop verity_status_prop zygote_wrap_prop ctl_mediatranscoding_prop ctl_odsign_prop virtualizationservice_prop ctl_apex_load_prop sensors_config_prop hypervisor_pvmfw_prop hypervisor_virtualizationmanager_prop game_manager_config_prop hidl_memory_prop suspend_debug_prop system_service_enable_prop ctl_artd_pre_reboot_prop trusty_security_vm_sys_prop trusty_widevine_vm_sys_prop hint_manager_config_prop avf_vm_traced_relay_enabled_prop zygote_zygote_next_server_status_prop zygote_zygote_next_boot_config_prop pcc_audit_mode_prop binder_cache_adservices_server_prop bionic_linker_16kb_app_compat_prop device_config_virtualization_framework_native_prop fstype_prop log_file_logger_prop mmd_shared_status_prop page_size_prop pm_16kb_app_compat_prop service_sf_present_timestamp_prop statsd_atoms_list_version_prop trusty_coverage_prop pcc_audit_mode_client_prop dumpstate_last_id_prop thermal_profile_prop arm64_memtag_bootctl_prop avf_virtualizationservice_prop context_hub_chipset_prop high_barometer_quality_prop mmd_prop mmd_shared_prop prefetch_boot_prop sensors_hal_prop strongbox_prop usb_disable_when_locked_prop userdata_alias_remove_prop ))
(typeattribute core_property_type)
(typeattributeset core_property_type (restorecon_prop usb_prop config_prop cppreopt_prop dalvik_prop debuggerd_prop dhcp_prop dumpstate_prop net_radio_prop pan_result_prop persist_debug_prop shell_prop vold_prop audio_prop debug_prop logd_prop nfc_prop ota_prop powerctl_prop radio_prop system_prop ))
(typeattribute log_property_type)
(typeattributeset log_property_type (log_prop log_tag_prop wifi_log_prop ))
(typeattribute extended_core_property_type)
(typeattribute system_property_type)
(expandtypeattribute (system_property_type) false)
(typeattributeset system_property_type (apexd_prop bootloader_boot_reason_prop device_config_activity_manager_native_boot_prop device_config_boot_count_prop device_config_input_native_boot_prop device_config_netd_native_prop device_config_reset_performed_prop firstboot_prop boottime_prop charger_prop cold_boot_done_prop ctl_adbd_prop ctl_apexd_prop ctl_bootanim_prop ctl_bugreport_prop ctl_console_prop ctl_dumpstate_prop ctl_fuse_prop ctl_gsid_prop ctl_interface_restart_prop ctl_interface_stop_prop ctl_mdnsd_prop ctl_restart_prop ctl_rildaemon_prop ctl_sigstop_prop dynamic_system_prop heapprofd_enabled_prop llkd_prop lpdumpd_prop mmc_prop mock_ota_prop net_dns_prop overlay_prop persistent_properties_ready_prop safemode_prop system_lmk_prop system_trace_prop test_boot_reason_prop time_prop traced_enabled_prop traced_lazy_prop aac_drc_prop adaptive_haptics_prop apex_ready_prop arm64_memtag_prop binder_cache_bluetooth_server_prop binder_cache_system_server_prop binder_cache_telephony_server_prop boot_status_prop bootanim_system_prop bootloader_prop boottime_public_prop bq_config_prop build_bootimage_prop build_prop composd_vm_art_prop device_config_aconfig_flags_prop device_config_camera_native_prop device_config_edgetpu_native_prop device_config_media_native_prop device_config_nnapi_native_prop device_config_runtime_native_boot_prop device_config_runtime_native_prop device_config_surface_flinger_native_boot_prop device_config_vendor_system_native_prop device_config_vendor_system_native_boot_prop drm_forcel3_prop fingerprint_prop gwp_asan_prop hal_instrumentation_prop userdebug_or_eng_prop init_service_status_prop libc_debug_prop module_sdkextensions_prop nnapi_ext_deny_product_prop persist_wm_debug_prop power_debug_prop profcollectd_etr_prop property_service_version_prop provisioned_prop restorecon_prop retaildemo_prop servicemanager_prop smart_idle_maint_enabled_prop socket_hook_prop sqlite_log_prop surfaceflinger_display_prop system_boot_reason_prop system_jvmti_agent_prop traced_oome_heap_session_count_prop ab_update_gki_prop usb_prop userspace_reboot_exported_prop vold_status_prop vts_status_prop config_prop cppreopt_prop dalvik_prop debuggerd_prop device_logging_prop dhcp_prop dumpstate_prop exported3_system_prop exported_dumpstate_prop exported_secure_prop heapprofd_prop net_radio_prop pan_result_prop persist_debug_prop shell_prop test_harness_prop theme_prop use_memfd_prop vold_prop apexd_config_prop aaudio_config_prop audio_config_prop bootanim_config_prop bluetooth_config_prop build_attestation_prop build_config_prop build_odm_prop build_vendor_prop camera_calibration_prop camera_config_prop camera2_extensions_prop camerax_extensions_prop charger_config_prop codec2_config_prop composd_vm_vendor_prop cpu_variant_prop debugfs_restriction_prop drm_config_prop drm_service_config_prop enable_16k_pages_prop exported_camera_prop exported_config_prop exported_default_prop ffs_config_prop framework_watchdog_config_prop graphics_config_prop hdmi_config_prop hw_timeout_multiplier_prop hypervisor_prop hypervisor_restricted_prop incremental_prop input_device_config_prop keyguard_config_prop keystore_config_prop lmkd_config_prop media_config_prop mediadrm_config_prop mm_events_config_prop oem_unlock_prop ota_build_prop packagemanager_config_prop quick_start_prop recovery_config_prop recovery_usb_config_prop sendbug_config_prop soc_prop storage_config_prop storagemanager_config_prop surfaceflinger_prop suspend_prop systemsound_config_prop telephony_config_prop threadnetwork_config_prop tombstone_config_prop usb_config_prop userspace_reboot_config_prop vehicle_hal_prop vendor_security_patch_level_prop vendor_socket_hook_prop virtual_ab_prop vndk_prop vts_config_prop vold_config_prop wifi_config_prop zram_config_prop zygote_config_prop dck_prop tuner_config_prop usb_uvc_enabled_prop setupwizard_mode_prop pm_archiving_enabled_prop trusty_security_vm_sys_vendor_prop wallet_prop usb_userspace_aoa_enabled_prop mmd_config_prop adbd_config_prop audio_prop bluetooth_a2dp_offload_prop bluetooth_audio_hal_prop bluetooth_finder_prop bluetooth_prop bpf_progs_loaded_prop charger_status_prop ctl_default_prop ctl_interface_start_prop ctl_start_prop ctl_stop_prop dalvik_config_prop dalvik_dynamic_config_prop dalvik_runtime_prop debug_prop device_config_memory_safety_native_boot_prop device_config_memory_safety_native_prop dumpstate_options_prop exported_system_prop exported_bluetooth_prop exported_overlay_prop exported_pm_prop future_pm_prop ffs_control_prop framework_status_prop gesture_prop graphics_config_writable_prop hal_dumpstate_config_prop sota_prop hwservicemanager_prop lmkd_prop locale_prop logd_prop logpersistd_logging_prop log_prop log_tag_prop lowpan_prop media_variant_prop nfc_prop ota_prop permissive_mte_prop powerctl_prop qemu_hw_prop qemu_sf_lcd_density_prop radio_control_prop radio_prop remote_prov_prop serialno_prop surfaceflinger_color_prop system_prop system_user_mode_emulation_prop telephony_status_prop timezone_prop usb_control_prop vold_post_fs_data_prop wifi_hal_prop wifi_log_prop wifi_prop zram_control_prop default_prop virtual_face_prop virtual_fingerprint_prop apexd_select_prop adb_timeout_prop adbd_prop adbd_tradeinmode_prop aiseal_prop apexd_payload_metadata_prop apexd_private_prop appsearch_vm_prop bluetooth_lea_prop casefolding_status_prop casefolding_override_prop ctl_snapuserd_prop ctl_prefetch_prop ctl_uprobestats_prop crashrecovery_prop debug_tracing_desktop_mode_visible_tasks_prop device_config_core_experiments_team_internal_prop device_config_lmkd_native_prop device_config_memory_management_native_boot_prop device_config_mglru_native_prop device_config_mmd_native_prop device_config_profcollect_native_boot_prop device_config_remote_key_provisioning_native_prop device_config_statsd_native_prop device_config_statsd_native_boot_prop device_config_storage_native_boot_prop device_config_sys_traced_prop device_config_window_manager_native_boot_prop device_config_configuration_prop device_config_connectivity_prop device_config_swcodec_native_prop device_config_tethering_u_or_later_native_prop dmesgd_start_prop fastbootd_protocol_prop gsid_prop hsum_boot_strategy_prop init_mnt_ns_prop init_perf_lsm_hooks_prop init_service_status_private_prop init_storage_prop init_svc_debug_prop kcmdline_prop keystore_diagnostics_prop keystore_listen_prop last_boot_reason_prop localization_prop logd_auditrate_prop lower_kptr_restrict_prop mmd_status_prop net_464xlat_fromvendor_prop net_connectivity_prop netd_stable_secret_prop next_boot_prop odsign_prop misctrl_prop perf_drop_caches_prop pm_prop prefetch_service_prop profcollectd_enabled_prop profcollectd_node_id_prop radio_cdma_ecm_prop remote_prov_cert_prop rollback_test_prop setupwizard_prop snapshotctl_prop snapuserd_prop system_adbd_prop system_audio_config_prop timezone_metadata_prop traced_config_prop traced_perf_enabled_prop traced_relay_relay_port_prop uprobestats_start_with_config_prop tuner_server_ctl_prop userspace_reboot_log_prop userspace_reboot_test_prop verity_status_prop zygote_wrap_prop ctl_mediatranscoding_prop ctl_odsign_prop virtualizationservice_prop ctl_apex_load_prop sensors_config_prop hypervisor_pvmfw_prop hypervisor_virtualizationmanager_prop game_manager_config_prop hidl_memory_prop suspend_debug_prop system_service_enable_prop ctl_artd_pre_reboot_prop trusty_security_vm_sys_prop trusty_widevine_vm_sys_prop hint_manager_config_prop avf_vm_traced_relay_enabled_prop zygote_zygote_next_server_status_prop zygote_zygote_next_boot_config_prop pcc_audit_mode_prop binder_cache_adservices_server_prop bionic_linker_16kb_app_compat_prop device_config_virtualization_framework_native_prop fstype_prop log_file_logger_prop mmd_shared_status_prop page_size_prop pm_16kb_app_compat_prop service_sf_present_timestamp_prop statsd_atoms_list_version_prop trusty_coverage_prop pcc_audit_mode_client_prop dumpstate_last_id_prop thermal_profile_prop arm64_memtag_bootctl_prop avf_virtualizationservice_prop context_hub_chipset_prop high_barometer_quality_prop mmd_prop mmd_shared_prop prefetch_boot_prop sensors_hal_prop strongbox_prop usb_disable_when_locked_prop userdata_alias_remove_prop ))
(typeattribute system_internal_property_type)
(expandtypeattribute (system_internal_property_type) false)
(typeattributeset system_internal_property_type (apexd_prop bootloader_boot_reason_prop device_config_activity_manager_native_boot_prop device_config_boot_count_prop device_config_input_native_boot_prop device_config_netd_native_prop device_config_reset_performed_prop firstboot_prop boottime_prop charger_prop cold_boot_done_prop ctl_adbd_prop ctl_apexd_prop ctl_bootanim_prop ctl_bugreport_prop ctl_console_prop ctl_dumpstate_prop ctl_fuse_prop ctl_gsid_prop ctl_interface_restart_prop ctl_interface_stop_prop ctl_mdnsd_prop ctl_restart_prop ctl_rildaemon_prop ctl_sigstop_prop dynamic_system_prop heapprofd_enabled_prop llkd_prop lpdumpd_prop mmc_prop mock_ota_prop net_dns_prop overlay_prop persistent_properties_ready_prop safemode_prop system_lmk_prop system_trace_prop test_boot_reason_prop time_prop traced_enabled_prop traced_lazy_prop default_prop adb_timeout_prop adbd_prop adbd_tradeinmode_prop aiseal_prop apexd_payload_metadata_prop apexd_private_prop appsearch_vm_prop bluetooth_lea_prop casefolding_status_prop casefolding_override_prop ctl_snapuserd_prop ctl_prefetch_prop ctl_uprobestats_prop crashrecovery_prop debug_tracing_desktop_mode_visible_tasks_prop device_config_core_experiments_team_internal_prop device_config_lmkd_native_prop device_config_memory_management_native_boot_prop device_config_mglru_native_prop device_config_mmd_native_prop device_config_profcollect_native_boot_prop device_config_remote_key_provisioning_native_prop device_config_statsd_native_prop device_config_statsd_native_boot_prop device_config_storage_native_boot_prop device_config_sys_traced_prop device_config_window_manager_native_boot_prop device_config_configuration_prop device_config_connectivity_prop device_config_swcodec_native_prop device_config_tethering_u_or_later_native_prop dmesgd_start_prop fastbootd_protocol_prop gsid_prop hsum_boot_strategy_prop init_mnt_ns_prop init_perf_lsm_hooks_prop init_service_status_private_prop init_storage_prop init_svc_debug_prop kcmdline_prop keystore_diagnostics_prop keystore_listen_prop last_boot_reason_prop localization_prop logd_auditrate_prop lower_kptr_restrict_prop mmd_status_prop net_464xlat_fromvendor_prop net_connectivity_prop netd_stable_secret_prop next_boot_prop odsign_prop misctrl_prop perf_drop_caches_prop pm_prop prefetch_service_prop profcollectd_enabled_prop profcollectd_node_id_prop radio_cdma_ecm_prop remote_prov_cert_prop rollback_test_prop setupwizard_prop snapshotctl_prop snapuserd_prop system_adbd_prop system_audio_config_prop timezone_metadata_prop traced_config_prop traced_perf_enabled_prop traced_relay_relay_port_prop uprobestats_start_with_config_prop tuner_server_ctl_prop userspace_reboot_log_prop userspace_reboot_test_prop verity_status_prop zygote_wrap_prop ctl_mediatranscoding_prop ctl_odsign_prop virtualizationservice_prop ctl_apex_load_prop sensors_config_prop hypervisor_pvmfw_prop hypervisor_virtualizationmanager_prop game_manager_config_prop hidl_memory_prop suspend_debug_prop system_service_enable_prop ctl_artd_pre_reboot_prop trusty_security_vm_sys_prop trusty_widevine_vm_sys_prop hint_manager_config_prop avf_vm_traced_relay_enabled_prop zygote_zygote_next_server_status_prop zygote_zygote_next_boot_config_prop pcc_audit_mode_prop ))
(typeattribute system_restricted_property_type)
(expandtypeattribute (system_restricted_property_type) false)
(typeattributeset system_restricted_property_type (aac_drc_prop adaptive_haptics_prop apex_ready_prop arm64_memtag_prop binder_cache_bluetooth_server_prop binder_cache_system_server_prop binder_cache_telephony_server_prop boot_status_prop bootanim_system_prop bootloader_prop boottime_public_prop bq_config_prop build_bootimage_prop build_prop composd_vm_art_prop device_config_aconfig_flags_prop device_config_camera_native_prop device_config_edgetpu_native_prop device_config_media_native_prop device_config_nnapi_native_prop device_config_runtime_native_boot_prop device_config_runtime_native_prop device_config_surface_flinger_native_boot_prop device_config_vendor_system_native_prop device_config_vendor_system_native_boot_prop drm_forcel3_prop fingerprint_prop gwp_asan_prop hal_instrumentation_prop userdebug_or_eng_prop init_service_status_prop libc_debug_prop module_sdkextensions_prop nnapi_ext_deny_product_prop persist_wm_debug_prop power_debug_prop profcollectd_etr_prop property_service_version_prop provisioned_prop restorecon_prop retaildemo_prop servicemanager_prop smart_idle_maint_enabled_prop socket_hook_prop sqlite_log_prop surfaceflinger_display_prop system_boot_reason_prop system_jvmti_agent_prop traced_oome_heap_session_count_prop ab_update_gki_prop usb_prop userspace_reboot_exported_prop vold_status_prop vts_status_prop config_prop cppreopt_prop dalvik_prop debuggerd_prop device_logging_prop dhcp_prop dumpstate_prop exported3_system_prop exported_dumpstate_prop exported_secure_prop heapprofd_prop net_radio_prop pan_result_prop persist_debug_prop shell_prop test_harness_prop theme_prop use_memfd_prop vold_prop binder_cache_adservices_server_prop bionic_linker_16kb_app_compat_prop device_config_virtualization_framework_native_prop fstype_prop log_file_logger_prop mmd_shared_status_prop page_size_prop pm_16kb_app_compat_prop service_sf_present_timestamp_prop statsd_atoms_list_version_prop trusty_coverage_prop pcc_audit_mode_client_prop dumpstate_last_id_prop thermal_profile_prop ))
(typeattribute system_public_property_type)
(expandtypeattribute (system_public_property_type) false)
(typeattributeset system_public_property_type (apexd_config_prop aaudio_config_prop audio_config_prop bootanim_config_prop bluetooth_config_prop build_attestation_prop build_config_prop build_odm_prop build_vendor_prop camera_calibration_prop camera_config_prop camera2_extensions_prop camerax_extensions_prop charger_config_prop codec2_config_prop composd_vm_vendor_prop cpu_variant_prop debugfs_restriction_prop drm_config_prop drm_service_config_prop enable_16k_pages_prop exported_camera_prop exported_config_prop exported_default_prop ffs_config_prop framework_watchdog_config_prop graphics_config_prop hdmi_config_prop hw_timeout_multiplier_prop hypervisor_prop hypervisor_restricted_prop incremental_prop input_device_config_prop keyguard_config_prop keystore_config_prop lmkd_config_prop media_config_prop mediadrm_config_prop mm_events_config_prop oem_unlock_prop ota_build_prop packagemanager_config_prop quick_start_prop recovery_config_prop recovery_usb_config_prop sendbug_config_prop soc_prop storage_config_prop storagemanager_config_prop surfaceflinger_prop suspend_prop systemsound_config_prop telephony_config_prop threadnetwork_config_prop tombstone_config_prop usb_config_prop userspace_reboot_config_prop vehicle_hal_prop vendor_security_patch_level_prop vendor_socket_hook_prop virtual_ab_prop vndk_prop vts_config_prop vold_config_prop wifi_config_prop zram_config_prop zygote_config_prop dck_prop tuner_config_prop usb_uvc_enabled_prop setupwizard_mode_prop pm_archiving_enabled_prop trusty_security_vm_sys_vendor_prop wallet_prop usb_userspace_aoa_enabled_prop mmd_config_prop adbd_config_prop audio_prop bluetooth_a2dp_offload_prop bluetooth_audio_hal_prop bluetooth_finder_prop bluetooth_prop bpf_progs_loaded_prop charger_status_prop ctl_default_prop ctl_interface_start_prop ctl_start_prop ctl_stop_prop dalvik_config_prop dalvik_dynamic_config_prop dalvik_runtime_prop debug_prop device_config_memory_safety_native_boot_prop device_config_memory_safety_native_prop dumpstate_options_prop exported_system_prop exported_bluetooth_prop exported_overlay_prop exported_pm_prop future_pm_prop ffs_control_prop framework_status_prop gesture_prop graphics_config_writable_prop hal_dumpstate_config_prop sota_prop hwservicemanager_prop lmkd_prop locale_prop logd_prop logpersistd_logging_prop log_prop log_tag_prop lowpan_prop media_variant_prop nfc_prop ota_prop permissive_mte_prop powerctl_prop qemu_hw_prop qemu_sf_lcd_density_prop radio_control_prop radio_prop remote_prov_prop serialno_prop surfaceflinger_color_prop system_prop system_user_mode_emulation_prop telephony_status_prop timezone_prop usb_control_prop vold_post_fs_data_prop wifi_hal_prop wifi_log_prop wifi_prop zram_control_prop virtual_face_prop virtual_fingerprint_prop apexd_select_prop arm64_memtag_bootctl_prop avf_virtualizationservice_prop context_hub_chipset_prop high_barometer_quality_prop mmd_prop mmd_shared_prop prefetch_boot_prop sensors_hal_prop strongbox_prop usb_disable_when_locked_prop userdata_alias_remove_prop ))
(typeattribute keystore2_key_type)
(typeattributeset keystore2_key_type (keystore wifi_key shell_key su_key vold_key odsign_key locksettings_key keychain_key resume_on_reboot_key ))
(typeattribute vendor_property_type)
(expandtypeattribute (vendor_property_type) false)
(typeattributeset vendor_property_type (rebootescrow_hal_prop virtual_face_hal_prop virtual_fingerprint_hal_prop persist_vendor_debug_wifi_prop vendor_default_prop ))
(typeattribute vendor_internal_property_type)
(expandtypeattribute (vendor_internal_property_type) false)
(typeattributeset vendor_internal_property_type (rebootescrow_hal_prop virtual_face_hal_prop virtual_fingerprint_hal_prop vendor_default_prop ))
(typeattribute vendor_restricted_property_type)
(expandtypeattribute (vendor_restricted_property_type) false)
(typeattribute vendor_public_property_type)
(expandtypeattribute (vendor_public_property_type) false)
(typeattributeset vendor_public_property_type (persist_vendor_debug_wifi_prop ))
(typeattribute system_server_service)
(typeattributeset system_server_service (anomaly_detector_service device_config_updatable_service npu_service ondevicepersonalization_system_service profiling_service accessibility_service account_service activity_service activity_task_service adb_service adservices_manager_service alarm_service app_binding_service app_function_service app_hibernation_service app_integrity_service app_prediction_service app_search_service appops_service appwidget_service archive_service assetatlas_service attestation_verification_service audio_service auth_service autofill_service backup_service batterystats_service battery_service binder_calls_stats_service blob_store_service bluetooth_manager_service broadcastradio_service cacheinfo_service cameraproxy_service clipboard_service cloudsearch_service contexthub_service contextual_search_service crossprofileapps_service IProxyService_service companion_device_service connectivity_native_service connectivity_service connmetrics_service consumer_ir_service content_capture_service content_suggestions_service content_service country_detector_service coverage_service cpuinfo_service cpu_monitor_service credential_service dataloader_manager_service dbinfo_service device_config_service device_policy_service device_state_service deviceidle_service device_identifiers_service devicestoragemonitor_service diskstats_service display_service domain_verification_service color_display_service ecm_enhanced_confirmation_service external_vibrator_service file_integrity_service font_service netd_listener_service network_watchlist_service devicelock_service DockObserver_service dreams_service dropbox_service ethernet_service biometric_service bugreport_service platform_compat_service face_service fingerprint_service fwk_altitude_service fwk_stats_service fwk_sensor_service fwk_vibrator_control_service game_service gfxinfo_service gnss_time_update_service grammatical_inflection_service graphicsstats_service hardware_service hardware_properties_service hdmi_control_service healthconnect_service hint_service imms_service incremental_service input_method_service input_service intrusion_detection_service ipsec_service iris_service jobscheduler_service launcherapps_service legacy_permission_service light_service locale_service location_service location_time_zone_manager_service lock_settings_service looper_stats_service media_communication_service media_metrics_service media_projection_service media_quality_service media_router_service media_session_service meminfo_service memtrackproxy_service midi_service mount_service music_recognition_service nearby_service netpolicy_service netstats_service network_management_service network_score_service network_stack_service network_time_update_service notification_service oem_lock_service overlay_service pac_proxy_service package_service package_native_service people_service permission_service permissionmgr_service permission_checker_service persistent_data_block_service pinner_service powerstats_service power_service print_service processinfo_service procstats_service reboot_readiness_service recovery_service registry_service remote_auth_service remote_provisioning_service resources_manager_service restrictions_service role_service rollback_service runtime_service rttmanager_service samplingprofiler_service scheduling_policy_service search_service search_ui_service sec_key_att_app_id_provider_service security_state_service selection_toolbar_service sensitive_content_protection_service sensorservice_service sensor_privacy_service serial_service servicediscovery_service settings_service shortcut_service slice_service smartspace_service statusbar_service storagestats_service sdk_sandbox_service system_config_service system_server_dumper_service system_update_service soundtrigger_middleware_service speech_recognition_service tare_service task_service testharness_service textclassification_service textservices_service texttospeech_service telecom_service thermal_service threadnetwork_service timedetector_service timezonedetector_service translation_service trust_service tv_ad_service tv_iapp_service tv_input_service tv_tuner_resource_mgr_service uimode_service updatelock_service uri_grants_service usagestats_service usb_service user_service uwb_service vcn_management_service vibrator_service vibrator_manager_service virtual_device_service virtual_device_native_service voiceinteraction_service vpn_management_service vr_manager_service wallpaper_service wallpaper_effects_generation_service webviewupdate_service wifip2p_service wifiscanner_service wifi_service wifiaware_service wifi_usd_service window_service inputflinger_service tethering_service emergency_affordance_service activity_structured_service allowlist_service ambient_context_service authentication_policy_service contextual_mode_service attention_service bg_install_control_service binder_stats_consumer_service communal_service content_restriction_service d2d_connectivity_service dynamic_system_service feature_flags_service file_service fwk_devicestate_service incidentcompanion_service logcat_service on_device_intelligence_service content_safety_service pcc_sandbox_native_service pcc_sandbox_service personal_context_service protolog_configuration_service resolver_service safety_center_service statsbootstrap_service statscompanion_service statsmanager_service supervision_service task_continuity_service tracingproxy_service tradeinmode_service transparency_service trust_token_service vm_tethering_service ui_latency_stats_service wearable_sensing_service dynamic_instrumentation_service uprobestats_bridge_service advanced_protection_service multisensory_manager_service app_data_backup_service ranging_service theme_service ))
(typeattribute app_api_service)
(typeattributeset app_api_service (anomaly_detector_service batteryproperties_service gatekeeper_service gpu_service credstore_service mediatranscoding_service profiling_service surfaceflinger_service accessibility_service account_service activity_service activity_task_service alarm_service app_function_service app_hibernation_service app_prediction_service app_search_service appops_service appwidget_service archive_service assetatlas_service attestation_verification_service audio_service auth_service autofill_service backup_service batterystats_service blob_store_service bluetooth_manager_service broadcastradio_service clipboard_service cloudsearch_service contexthub_service contextual_search_service crossprofileapps_service IProxyService_service companion_device_service connectivity_native_service connectivity_service connmetrics_service consumer_ir_service content_capture_service content_suggestions_service content_service country_detector_service credential_service device_policy_service device_state_service deviceidle_service device_identifiers_service display_service domain_verification_service color_display_service ecm_enhanced_confirmation_service file_integrity_service font_service devicelock_service dreams_service dropbox_service ethernet_service biometric_service bugreport_service platform_compat_service face_service fingerprint_service fwk_stats_service game_service grammatical_inflection_service graphicsstats_service hardware_properties_service hdmi_control_service healthconnect_service hint_service imms_service input_method_service input_service intrusion_detection_service ipsec_service iris_service jobscheduler_service launcherapps_service legacy_permission_service light_service locale_service location_service lock_settings_service media_communication_service media_metrics_service media_projection_service media_quality_service media_router_service media_session_service memtrackproxy_service midi_service mount_service music_recognition_service nearby_service netpolicy_service netstats_service network_management_service notification_service pac_proxy_service package_service package_native_service people_service permission_service permissionmgr_service permission_checker_service persistent_data_block_service powerstats_service power_service print_service procstats_service reboot_readiness_service registry_service remote_auth_service restrictions_service role_service rollback_service rttmanager_service search_service search_ui_service sec_key_att_app_id_provider_service security_state_service selection_toolbar_service sensitive_content_protection_service sensorservice_service sensor_privacy_service serial_service servicediscovery_service settings_service shortcut_service slice_service smartspace_service statusbar_service storagestats_service sdk_sandbox_service speech_recognition_service tare_service textclassification_service textservices_service texttospeech_service telecom_service thermal_service threadnetwork_service timedetector_service timezonedetector_service translation_service trust_service tv_ad_service tv_iapp_service tv_input_service tv_tuner_resource_mgr_service uimode_service uri_grants_service usagestats_service usb_service user_service uwb_service vcn_management_service vibrator_service vibrator_manager_service virtual_device_service virtual_device_native_service voiceinteraction_service vpn_management_service wallpaper_service wallpaper_effects_generation_service webviewupdate_service wifip2p_service wifiscanner_service wifi_service wifiaware_service wifi_usd_service tethering_service allowlist_service ambient_context_service authentication_policy_service contextual_mode_service attention_service communal_service content_restriction_service feature_flags_service file_service incidentcompanion_service mediatuner_service on_device_intelligence_service content_safety_service pcc_sandbox_native_service pcc_sandbox_service personal_context_service protolog_configuration_service safety_center_service supervision_service task_continuity_service wearable_sensing_service dynamic_instrumentation_service uprobestats_bridge_service advanced_protection_service multisensory_manager_service ranging_service theme_service hid_service ))
(typeattribute ephemeral_app_api_service)
(typeattributeset ephemeral_app_api_service (batteryproperties_service gpu_service surfaceflinger_service accessibility_service account_service activity_service activity_task_service alarm_service app_search_service appops_service appwidget_service assetatlas_service audio_service autofill_service backup_service batterystats_service bluetooth_manager_service clipboard_service IProxyService_service companion_device_service connectivity_native_service connectivity_service connmetrics_service consumer_ir_service content_capture_service content_suggestions_service content_service country_detector_service credential_service deviceidle_service device_identifiers_service display_service font_service devicelock_service dreams_service dropbox_service platform_compat_service fwk_stats_service game_service grammatical_inflection_service graphicsstats_service hardware_properties_service hint_service imms_service input_method_service input_service ipsec_service jobscheduler_service launcherapps_service legacy_permission_service light_service locale_service location_service media_communication_service media_metrics_service media_projection_service media_quality_service media_router_service media_session_service memtrackproxy_service midi_service mount_service music_recognition_service netpolicy_service netstats_service network_management_service notification_service package_service package_native_service permission_service permissionmgr_service permission_checker_service power_service print_service procstats_service registry_service restrictions_service rttmanager_service search_service security_state_service selection_toolbar_service sensorservice_service sensor_privacy_service servicediscovery_service settings_service statusbar_service storagestats_service speech_recognition_service textclassification_service textservices_service texttospeech_service telecom_service thermal_service timedetector_service translation_service tv_ad_service tv_iapp_service tv_input_service uimode_service uri_grants_service usagestats_service user_service vcn_management_service vibrator_service vibrator_manager_service virtual_device_native_service voiceinteraction_service webviewupdate_service tethering_service content_restriction_service file_service personal_context_service protolog_configuration_service supervision_service multisensory_manager_service ))
(typeattribute system_api_service)
(typeattributeset system_api_service (device_config_updatable_service npu_service ondevicepersonalization_system_service adb_service adservices_manager_service app_hibernation_service app_integrity_service cacheinfo_service cpuinfo_service credential_service dbinfo_service device_state_service diskstats_service color_display_service gfxinfo_service intrusion_detection_service lock_settings_service meminfo_service network_score_service oem_lock_service overlay_service persistent_data_block_service resources_manager_service serial_service system_config_service system_server_dumper_service updatelock_service window_service inputflinger_service activity_structured_service authentication_policy_service bg_install_control_service d2d_connectivity_service dynamic_system_service incidentcompanion_service protolog_configuration_service safety_center_service statsmanager_service trust_token_service ui_latency_stats_service app_data_backup_service ))
(typeattribute protected_service)
(typeattributeset protected_service (hal_npu_scheduling_service hal_audio_service hal_authgraph_service hal_authsecret_service hal_bluetooth_service hal_bluetooth_lpp_service hal_bootctl_service hal_broadcastradio_service hal_camera_service hal_can_controller_service hal_confirmationui_service hal_contexthub_service hal_dumpstate_service hal_evs_service hal_face_service hal_fastboot_service hal_frp_service hal_fingerprint_service hal_gnss_service hal_graphics_composer_service hal_health_service hal_health_storage_service hal_hwcrypto_service hal_identity_service hal_input_processor_service hal_ir_service hal_ivn_service hal_keymint_service hal_light_service hal_macsec_service hal_mediaquality_service hal_memtrack_service hal_motioncontext_service hal_nfc_service hal_oemlock_service hal_power_service hal_power_stats_service hal_radio_service hal_rebootescrow_service hal_remoteaccess_service hal_remotelyprovisionedcomponent_avf_service hal_remotelyprovisionedcomponent_service hal_sensors_service hal_secretkeeper_service hal_secureclock_service hal_secure_element_service hal_sharedsecret_service hal_system_suspend_service hal_tetheroffload_service hal_thermal_service hal_timestamp_service hal_tv_hdmi_cec_service hal_tv_hdmi_connection_service hal_tv_hdmi_earc_service hal_tv_input_service hal_threadnetwork_service hal_tv_tuner_service hal_usb_service hal_usb_gadget_service hal_uwb_service hal_vehicle_service hal_vibrator_service hal_weaver_service hal_nlinterceptor_service hal_wifi_service hal_wifi_hostapd_service hal_wifi_supplicant_service hal_gatekeeper_service hal_vm_capabilities_service ))
(typeattribute service_manager_type)
(typeattributeset service_manager_type (aidl_lazy_test_service anomaly_detector_service hal_npu_scheduling_service apc_service apex_service artd_service artd_pre_reboot_service audioserver_service authorization_service batteryproperties_service bluetooth_service cameraserver_service fwk_camera_service default_android_service device_config_updatable_service dexopt_chroot_setup_service dnsresolver_service drmserver_service dumpstate_service evsmanagerd_service fingerprintd_service fwk_automotive_display_service fwk_vold_service gatekeeper_service gpu_service idmap_service incident_service installd_service credstore_service keystore_compat_hal_service keystore_maintenance_service keystore_metrics_service keystore_service legacykeystore_service lpdump_service mdns_service mediaserver_service mediametrics_service mediaextractor_service mediadrmserver_service mediatranscoding_service native_serial_service netd_service nfc_service npu_service ondevicepersonalization_system_service ot_daemon_service profiling_service radio_service secure_element_service service_manager_service storaged_service surfaceflinger_service system_app_service system_net_netd_service system_suspend_control_internal_service system_suspend_control_service update_engine_service update_engine_stable_service virtualization_service virtual_camera_service virtual_touchpad_service vold_service vr_hwc_service vrflinger_vsync_service accessibility_service account_service activity_service activity_task_service adb_service adservices_manager_service alarm_service app_binding_service app_function_service app_hibernation_service app_integrity_service app_prediction_service app_search_service appops_service appwidget_service archive_service assetatlas_service attestation_verification_service audio_service auth_service autofill_service backup_service batterystats_service battery_service binder_calls_stats_service blob_store_service bluetooth_manager_service broadcastradio_service cacheinfo_service cameraproxy_service clipboard_service cloudsearch_service contexthub_service contextual_search_service crossprofileapps_service IProxyService_service companion_device_service connectivity_native_service connectivity_service connmetrics_service consumer_ir_service content_capture_service content_suggestions_service content_service country_detector_service coverage_service cpuinfo_service cpu_monitor_service credential_service dataloader_manager_service dbinfo_service device_config_service device_policy_service device_state_service deviceidle_service device_identifiers_service devicestoragemonitor_service diskstats_service display_service domain_verification_service color_display_service ecm_enhanced_confirmation_service external_vibrator_service file_integrity_service font_service netd_listener_service network_watchlist_service devicelock_service DockObserver_service dreams_service dropbox_service ethernet_service biometric_service bugreport_service platform_compat_service face_service fingerprint_service fwk_altitude_service fwk_stats_service fwk_sensor_service fwk_vibrator_control_service game_service gfxinfo_service gnss_time_update_service grammatical_inflection_service graphicsstats_service hardware_service hardware_properties_service hdmi_control_service healthconnect_service hint_service imms_service incremental_service input_method_service input_service intrusion_detection_service ipsec_service iris_service jobscheduler_service launcherapps_service legacy_permission_service light_service locale_service location_service location_time_zone_manager_service lock_settings_service looper_stats_service media_communication_service media_metrics_service media_projection_service media_quality_service media_router_service media_session_service meminfo_service memtrackproxy_service midi_service mount_service music_recognition_service nearby_service netpolicy_service netstats_service network_management_service network_score_service network_stack_service network_time_update_service notification_service oem_lock_service overlay_service pac_proxy_service package_service package_native_service people_service permission_service permissionmgr_service permission_checker_service persistent_data_block_service pinner_service powerstats_service power_service print_service processinfo_service procstats_service reboot_readiness_service recovery_service registry_service remote_auth_service remote_provisioning_service resources_manager_service restrictions_service role_service rollback_service runtime_service rttmanager_service samplingprofiler_service scheduling_policy_service search_service search_ui_service sec_key_att_app_id_provider_service security_state_service selection_toolbar_service sensitive_content_protection_service sensorservice_service sensor_privacy_service serial_service servicediscovery_service settings_service shortcut_service slice_service smartspace_service statusbar_service storagestats_service sdk_sandbox_service system_config_service system_server_dumper_service system_update_service soundtrigger_middleware_service speech_recognition_service tare_service task_service testharness_service textclassification_service textservices_service texttospeech_service telecom_service thermal_service threadnetwork_service timedetector_service timezonedetector_service translation_service trust_service tv_ad_service tv_iapp_service tv_input_service tv_tuner_resource_mgr_service uimode_service updatelock_service uri_grants_service usagestats_service usb_service user_service uwb_service vcn_management_service vibrator_service vibrator_manager_service virtual_device_service virtual_device_native_service voiceinteraction_service vpn_management_service vr_manager_service wallpaper_service wallpaper_effects_generation_service webviewupdate_service wifip2p_service wifiscanner_service wifi_service wifinl80211_service wifiaware_service wifi_usd_service window_service inputflinger_service tethering_service emergency_affordance_service hal_audio_service hal_audiocontrol_service hal_authgraph_service hal_authsecret_service hal_bluetooth_service hal_bluetooth_lpp_service hal_bootctl_service hal_broadcastradio_service hal_camera_service hal_can_controller_service hal_cas_service hal_codec2_service hal_confirmationui_service hal_contexthub_service hal_drm_service hal_dumpstate_service hal_evs_service hal_face_service hal_fastboot_service hal_frp_service hal_fingerprint_service hal_gnss_service hal_graphics_allocator_service hal_graphics_composer_service hal_graphics_mapper_service hal_health_service hal_health_storage_service hal_hwcrypto_service hal_identity_service hal_input_processor_service hal_ir_service hal_ivn_service hal_keymint_service hal_light_service hal_macsec_service hal_mediaquality_service hal_memtrack_service hal_motioncontext_service hal_neuralnetworks_service hal_nfc_service hal_oemlock_service hal_power_service hal_power_stats_service hal_radio_service hal_rebootescrow_service hal_remoteaccess_service hal_remotelyprovisionedcomponent_avf_service hal_remotelyprovisionedcomponent_service hal_sensors_service hal_secretkeeper_service hal_secureclock_service hal_secure_element_service hal_sharedsecret_service hal_system_suspend_service hal_tetheroffload_service hal_thermal_service hal_timestamp_service hal_tv_hdmi_cec_service hal_tv_hdmi_connection_service hal_tv_hdmi_earc_service hal_tv_input_service hal_threadnetwork_service hal_tv_tuner_service hal_usb_service hal_usb_gadget_service hal_uwb_service hal_vehicle_service hal_vibrator_service hal_weaver_service hal_nlinterceptor_service hal_wifi_service hal_wifi_hostapd_service hal_wifi_supplicant_service hal_gatekeeper_service hal_vm_capabilities_service activity_structured_service allowlist_service ambient_context_service aoad_service authentication_policy_service casefolding_remover_service contextual_mode_service attention_service bg_install_control_service binder_stats_consumer_service compos_service communal_service content_restriction_service d2d_connectivity_service dynamic_system_service feature_flags_service file_service fwk_devicestate_service gsi_service incidentcompanion_service logcat_service logd_service mediacodeclist_generator_service mediatuner_service mmd_service on_device_intelligence_service content_safety_service pcc_sandbox_native_service pcc_sandbox_service personal_context_service profcollectd_service protolog_configuration_service resolver_service rkpd_registrar_service rkpd_refresh_service rkp_cert_processor_service safety_center_service stats_service statsbootstrap_service statscompanion_service statsmanager_service supervision_service task_continuity_service tracingproxy_service tradeinmode_service transparency_service trust_token_service accessor_trusty_keymint_comm_service trusty_keymint_comm_service accessor_trusty_gatekeeper_service accessor_trusty_hwcrypto_sharedsecret_service accessor_trusty_widevine_comm_service trusty_widevine_comm_service accessor_trusty_keymint_provisioning_service accessor_trusty_keymint_provisioning_thal_service trusty_keymint_provisioning_thal_service accessor_trusty_keymint_remotelyprovisionedcomponent_service accessor_trusty_keymint_secureclock_service vfio_handler_service virtualization_maintenance_service vm_tethering_service vmnic_service uce_service ui_latency_stats_service wearable_sensing_service wifi_mainline_supplicant_service dynamic_instrumentation_service uprobestats_service uprobestats_bridge_service advanced_protection_service multisensory_manager_service app_data_backup_service ranging_service aiseal_host_service aiseal_internal_service theme_service usb_auth_service hid_service ))
(typeattribute hwservice_manager_type)
(typeattributeset hwservice_manager_type (default_android_hwservice fwk_camera_hwservice fwk_display_hwservice fwk_scheduler_hwservice fwk_sensor_hwservice fwk_stats_hwservice fwk_automotive_display_hwservice hal_atrace_hwservice hal_audio_hwservice hal_audiocontrol_hwservice hal_authsecret_hwservice hal_bluetooth_hwservice hal_bootctl_hwservice hal_broadcastradio_hwservice hal_camera_hwservice hal_can_bus_hwservice hal_can_controller_hwservice hal_confirmationui_hwservice hal_contexthub_hwservice hal_dumpstate_hwservice hal_evs_hwservice hal_face_hwservice hal_fingerprint_hwservice hal_gatekeeper_hwservice hal_gnss_hwservice hal_graphics_composer_hwservice hal_health_hwservice hal_health_storage_hwservice hal_input_classifier_hwservice hal_ir_hwservice hal_keymaster_hwservice hal_light_hwservice hal_lowpan_hwservice hal_memtrack_hwservice hal_nfc_hwservice hal_oemlock_hwservice hal_power_hwservice hal_power_stats_hwservice hal_secure_element_hwservice hal_sensors_hwservice hal_telephony_hwservice hal_tetheroffload_hwservice hal_thermal_hwservice hal_tv_cec_hwservice hal_tv_input_hwservice hal_tv_tuner_hwservice hal_usb_gadget_hwservice hal_usb_hwservice hal_vehicle_hwservice hal_vibrator_hwservice hal_vr_hwservice hal_weaver_hwservice hal_wifi_hostapd_hwservice hal_wifi_hwservice hal_wifi_supplicant_hwservice system_net_netd_hwservice system_suspend_hwservice system_wifi_keystore_hwservice fwk_bufferhub_hwservice hal_cas_hwservice hal_codec2_hwservice hal_configstore_ISurfaceFlingerConfigs hal_drm_hwservice hal_graphics_allocator_hwservice hal_graphics_mapper_hwservice hal_neuralnetworks_hwservice hal_omx_hwservice hal_renderscript_hwservice hidl_allocator_hwservice hidl_base_hwservice hidl_manager_hwservice hidl_memory_hwservice hidl_token_hwservice hal_lazy_test_hwservice ))
(typeattribute same_process_hwservice)
(typeattributeset same_process_hwservice (hal_graphics_mapper_hwservice hal_renderscript_hwservice ))
(typeattribute coredomain_hwservice)
(typeattributeset coredomain_hwservice (fwk_camera_hwservice fwk_display_hwservice fwk_scheduler_hwservice fwk_sensor_hwservice fwk_stats_hwservice fwk_automotive_display_hwservice system_net_netd_hwservice system_suspend_hwservice system_wifi_keystore_hwservice fwk_bufferhub_hwservice hidl_allocator_hwservice hidl_manager_hwservice hidl_memory_hwservice hidl_token_hwservice ))
(typeattribute protected_hwservice)
(typeattributeset protected_hwservice (default_android_hwservice fwk_camera_hwservice fwk_display_hwservice fwk_scheduler_hwservice fwk_sensor_hwservice fwk_stats_hwservice fwk_automotive_display_hwservice hal_atrace_hwservice hal_audio_hwservice hal_audiocontrol_hwservice hal_authsecret_hwservice hal_bluetooth_hwservice hal_bootctl_hwservice hal_broadcastradio_hwservice hal_camera_hwservice hal_can_bus_hwservice hal_can_controller_hwservice hal_confirmationui_hwservice hal_contexthub_hwservice hal_dumpstate_hwservice hal_evs_hwservice hal_face_hwservice hal_fingerprint_hwservice hal_gatekeeper_hwservice hal_gnss_hwservice hal_graphics_composer_hwservice hal_health_hwservice hal_health_storage_hwservice hal_input_classifier_hwservice hal_ir_hwservice hal_keymaster_hwservice hal_light_hwservice hal_lowpan_hwservice hal_memtrack_hwservice hal_nfc_hwservice hal_oemlock_hwservice hal_power_hwservice hal_power_stats_hwservice hal_secure_element_hwservice hal_sensors_hwservice hal_telephony_hwservice hal_tetheroffload_hwservice hal_thermal_hwservice hal_tv_cec_hwservice hal_tv_input_hwservice hal_tv_tuner_hwservice hal_usb_gadget_hwservice hal_usb_hwservice hal_vehicle_hwservice hal_vibrator_hwservice hal_vr_hwservice hal_weaver_hwservice hal_wifi_hostapd_hwservice hal_wifi_hwservice hal_wifi_supplicant_hwservice system_net_netd_hwservice system_suspend_hwservice system_wifi_keystore_hwservice hal_lazy_test_hwservice ))
(typeattribute vndservice_manager_type)
(typeattributeset vndservice_manager_type (service_manager_vndservice default_android_vndservice ))
(typeattribute hal_service_type)
(typeattributeset hal_service_type (hal_npu_scheduling_service hal_audio_service hal_audiocontrol_service hal_authgraph_service hal_authsecret_service hal_bluetooth_service hal_bluetooth_lpp_service hal_bootctl_service hal_broadcastradio_service hal_camera_service hal_can_controller_service hal_cas_service hal_codec2_service hal_confirmationui_service hal_contexthub_service hal_drm_service hal_dumpstate_service hal_evs_service hal_face_service hal_fastboot_service hal_frp_service hal_fingerprint_service hal_gnss_service hal_graphics_allocator_service hal_graphics_composer_service hal_graphics_mapper_service hal_health_service hal_health_storage_service hal_hwcrypto_service hal_identity_service hal_input_processor_service hal_ir_service hal_ivn_service hal_keymint_service hal_light_service hal_macsec_service hal_mediaquality_service hal_memtrack_service hal_motioncontext_service hal_neuralnetworks_service hal_nfc_service hal_oemlock_service hal_power_service hal_power_stats_service hal_radio_service hal_rebootescrow_service hal_remoteaccess_service hal_remotelyprovisionedcomponent_avf_service hal_remotelyprovisionedcomponent_service hal_sensors_service hal_secretkeeper_service hal_secureclock_service hal_secure_element_service hal_sharedsecret_service hal_system_suspend_service hal_tetheroffload_service hal_thermal_service hal_timestamp_service hal_tv_hdmi_cec_service hal_tv_hdmi_connection_service hal_tv_hdmi_earc_service hal_tv_input_service hal_threadnetwork_service hal_tv_tuner_service hal_usb_service hal_usb_gadget_service hal_uwb_service hal_vehicle_service hal_vibrator_service hal_weaver_service hal_nlinterceptor_service hal_wifi_service hal_wifi_hostapd_service hal_wifi_supplicant_service hal_gatekeeper_service hal_vm_capabilities_service ))
(typeattribute mlstrustedsubject)
(typeattributeset mlstrustedsubject (adbd artd bluetooth bufferhubd drmserver dumpstate pdx_display_client_endpoint_socket pdx_display_manager_endpoint_socket pdx_display_screenshot_endpoint_socket pdx_display_vsync_endpoint_socket pdx_performance_client_endpoint_socket pdx_bufferhub_client_endpoint_socket heapprofd hwservicemanager incidentd init installd kernel keystore llkd lmkd logd mdnsd mediadrmserver mediaextractor mediaserver netd network_stack nfc performanced prng_seeder radio rss_hwm_reset runas servicemanager shell simpleperf_app_runner statsd su surfaceflinger system_app system_server tombstoned traced traced_perf traced_probes uncrypt vendor_init vold vold_prepare_subdirs webview_zygote zygote aconfigd aconfigd_mainline aisealhostservice casefolding_remover cppreopts device_as_webcam mediaprovider_app profcollectd simpleperf_boot storaged virtualizationservice zygote_next ))
(typeattribute mlstrustedobject)
(typeattributeset mlstrustedobject (app_zygote_tmpfs ashmem_device ashmem_libcutils_device binder_device hwbinder_device pmsg_device gpu_device mtp_device ptmx_device kmsg_device null_device random_device serial_device owntty_device zero_device fuse_device ion_device dmabuf_heap_device dmabuf_system_heap_device dmabuf_system_secure_heap_device uhid_device tun_device usbaccessory_device usb_device usb_serial_device proc_qtaguid_ctrl proc_qtaguid_stat proc_pressure_mem selinuxfs cgroup sysfs sysfs_bluetooth_writable sysfs_kernel_notes sysfs_nfc_power_writable sysfs_vendor_sched inotify devpts fuse fuseblk sdcardfs vfat exfat debugfs_trace_marker debugfs_tracing debugfs_tracing_debug functionfs anr_data_file tombstone_data_file apk_tmp_file apk_private_tmp_file ota_package_file user_profile_data_file shell_data_file heapdump_data_file ringtone_file media_rw_data_file radio_data_file shared_relro_file trace_data_file method_trace_data_file system_app_data_file cache_file cache_backup_file cache_recovery_file wallpaper_file shortcut_manager_icons asec_apk_file backup_data_file app_fuse_file dnsproxyd_socket fwmarkd_socket logd_socket logdr_socket logdw_socket mdnsd_socket property_socket statsdw_socket system_ndebug_socket system_unsolzygote_socket tombstoned_crash_socket tombstoned_java_trace_socket traced_consumer_socket traced_perf_socket traced_producer_socket heapprofd_socket pdx_display_client_endpoint_socket pdx_display_manager_endpoint_socket pdx_display_screenshot_endpoint_socket pdx_display_vsync_endpoint_socket pdx_performance_client_endpoint_socket pdx_bufferhub_client_endpoint_socket virtualizationservice_data_file serialservice system_server_tmpfs system_server_wrapfd traced_tmpfs udmabuf_device wm_trace_data_file kvm_device prng_seeder_socket aconfigd_socket aconfigd_mainline_socket microdroid_managed_socket_file heapprofd_tmpfs ))
(typeattribute appdomain)
(typeattributeset appdomain (bluetooth ephemeral_app gmscore_app isolated_app isolated_compute_app mediaprovider network_stack nfc platform_app platform_app_36 priv_app priv_app_36 radio rkpdapp runas_app secure_element shared_relro shell simpleperf su system_app traceur_app untrusted_app untrusted_app_34 untrusted_app_32 untrusted_app_30 untrusted_app_29 untrusted_app_27 untrusted_app_25 adservices device_as_webcam mediaprovider_app pcc_component permissioncontroller_app sdk_sandbox_34 sdk_sandbox_audit sdk_sandbox_next vmlauncher_app vzwomatrigger_app ))
(typeattribute untrusted_app_all)
(typeattributeset untrusted_app_all (runas_app untrusted_app untrusted_app_34 untrusted_app_32 untrusted_app_30 untrusted_app_29 untrusted_app_27 untrusted_app_25 ))
(typeattribute priv_app_all)
(typeattributeset priv_app_all (priv_app priv_app_36 vmlauncher_app ))
(typeattribute platform_app_all)
(typeattributeset platform_app_all (platform_app platform_app_36 ))
(typeattribute isolated_app_all)
(typeattributeset isolated_app_all (isolated_app isolated_compute_app ))
(typeattribute isolated_compute_allowed_service)
(typeattributeset isolated_compute_allowed_service (audioserver_service cameraserver_service mediaserver_service npu_service content_capture_service device_state_service speech_recognition_service hal_codec2_service on_device_intelligence_service content_safety_service ))
(typeattribute isolated_compute_allowed_device)
(typeattributeset isolated_compute_allowed_device (hwbinder_device gpu_device ion_device dmabuf_system_heap_device ))
(typeattribute isolated_compute_allowed_property_type)
(typeattribute netdomain)
(typeattributeset netdomain (adbd bluetooth dhcp dnsmasq drmserver dumpstate ephemeral_app gmscore_app mdnsd mediadrmserver mediaprovider mediaserver netd network_stack nfc platform_app platform_app_36 priv_app priv_app_36 radio rkpdapp runas_app shell su system_app system_server untrusted_app untrusted_app_34 untrusted_app_32 untrusted_app_30 untrusted_app_29 untrusted_app_27 untrusted_app_25 update_engine adbd_tradeinmode adservices clatd ot_daemon pcc_component rkp_cert_processor sdk_sandbox_34 sdk_sandbox_audit sdk_sandbox_next vmlauncher_app ))
(typeattribute bluetoothdomain)
(typeattributeset bluetoothdomain (platform_app platform_app_36 priv_app priv_app_36 radio runas_app system_server untrusted_app untrusted_app_34 untrusted_app_32 untrusted_app_30 untrusted_app_29 untrusted_app_27 untrusted_app_25 ))
(typeattribute binderservicedomain)
(typeattributeset binderservicedomain (audioserver cameraserver credstore drmserver evsmanagerd gatekeeperd idmap inputflinger keystore logd mediadrmserver mediaextractor mediametrics mediaserver mediatranscoding nfc omapi radio secure_element surfaceflinger system_app system_server virtual_touchpad gsid hidservice mediatuner rkpd ))
(typeattribute bpfdomain)
(expandtypeattribute (bpfdomain) false)
(typeattributeset bpfdomain (bpfloader charger_vendor dumpstate gpuservice lmkd netd netutils_wrapper network_stack system_server traced_probes mediaprovider_app system_suspend uprobestats ))
(typeattribute update_engine_common)
(typeattributeset update_engine_common (update_engine ))
(typeattribute coredomain)
(typeattributeset coredomain (adbd aidl_lazy_test_server apexd app_zygote artd atrace audioserver blkid blkid_untrusted bluetooth bootanim bootstat bpfloader bufferhubd cameraserver charger crash_dump credstore crosvm_vendor dhcp dnsmasq drmserver dumpstate e2fs early_virtmgr_vendor ephemeral_app evsmanagerd extra_free_kbytes fastbootd fingerprintd flags_health_check fsck fsck_untrusted gatekeeperd gmscore_app gpuservice healthd heapprofd hwservicemanager idmap incident incident_helper incidentd init inputflinger installd isolated_app isolated_compute_app kernel keystore llkd lmkd logd logpersist mdnsd mediadrmserver mediaextractor mediametrics mediaprovider mediaserver mediaswcodec mediatranscoding mmd_setup modprobe netd netutils_wrapper network_stack nfc omapi perfetto performanced platform_app platform_app_36 postinstall prefetch priv_app priv_app_36 prng_seeder profman radio recovery recovery_persist recovery_refresh rkpdapp rs rss_hwm_reset runas runas_app sdcardd secure_element serialservice servicemanager sgdisk shared_relro shell simpleperf simpleperf_app_runner slideshow statsd su surfaceflinger system_app system_server tombstoned toolbox traced traced_perf traced_probes traceur_app ueventd uncrypt untrusted_app untrusted_app_34 untrusted_app_32 untrusted_app_30 untrusted_app_29 untrusted_app_27 untrusted_app_25 update_engine update_verifier usbd vdc virtual_camera virtual_touchpad virtualizationmanager_vendor vold vold_prepare_subdirs watchdogd webview_zygote wificond zygote aconfigd aconfigd_mainline adbd_tradeinmode adservices aflags aisealhostservice aisealhostservice_virtualizationmanager aisealhostservice_virtmgr_crosvm aoad apex_test_prepostinstall apexd_derive_classpath art_boot art_exec auditctl automotive_display_service bert_collector blank_screen boringssl_self_test canhalconfigurator casefolding_remover clatd compos_fd_server compos_verify compos_verify_virtualizationmanager compos_verify_virtmgr_crosvm composd composd_virtualizationmanager composd_virtmgr_crosvm cppreopts crosvm_vu_fs crosvm_vu_snd derive_classpath derive_sdk device_as_webcam dex2oat dexopt_chroot_setup dmesgd fuseblkd fuseblkd_untrusted fwk_bufferhub gki_apex_prepostinstall gsid hal_allocator_default hal_keymint_system hal_widevine_system hidl_lazy_test_server hidservice iw kcmdlinectrl kcmdlinemodprobe linkerconfig linux_vm_setup lpdumpd mediacodeclist_generator mediaprovider_app mediatuner memcgv2_activation_depth migrate_legacy_obb_data misctrl mm_events mmd mtectrl native_app_zygote odrefresh odsign ot_ctl ot_daemon overlay_remounter pcc_component permissioncontroller_app platform_app_all_virtualizationmanager platform_app_all_virtmgr_crosvm pmgd preloads_copy preopt2cachename priv_app_all_virtualizationmanager priv_app_all_virtmgr_crosvm profcollectd remount rkp_cert_processor rkpd sdk_sandbox_34 sdk_sandbox_audit sdk_sandbox_next shell_virtualizationmanager shell_virtmgr_crosvm simpleperf_boot snapshotctl snapuserd stats storaged su_virtualizationmanager su_virtmgr_crosvm system_server_startup system_suspend trace_redactor tradeinmode untrusted_app_all_virtualizationmanager untrusted_app_all_virtmgr_crosvm uprobestats usbauthservice userdata_alias_remove vehicle_binding_util vfio_handler virtual_face virtual_fingerprint virtualizationservice virtualizationservice_virtualizationmanager virtualizationservice_virtmgr_crosvm vmlauncher_app vmnic wait_for_keymaster wifi_mainline_supplicant zygote_next ))
(typeattribute vendor_hwservice_type)
(typeattribute coredomain_socket)
(expandtypeattribute (coredomain_socket) false)
(typeattributeset coredomain_socket (drmserver_socket adbd_socket bluetooth_socket dnsproxyd_socket dumpstate_socket fwmarkd_socket lmkd_socket logd_socket logdr_socket logdw_socket mdns_socket mdnsd_socket misc_logd_file mtpd_socket ot_daemon_socket property_socket racoon_socket recovery_socket snapuserd_socket snapuserd_proxy_socket statsdw_socket system_wpa_socket system_ndebug_socket system_unsolzygote_socket tombstoned_crash_socket tombstoned_intercept_socket traced_consumer_socket traced_perf_socket traced_producer_socket uncrypt_socket zygote_socket heapprofd_socket pdx_display_client_endpoint_socket pdx_display_client_channel_socket pdx_display_manager_endpoint_socket pdx_display_manager_channel_socket pdx_display_screenshot_endpoint_socket pdx_display_screenshot_channel_socket pdx_display_vsync_endpoint_socket pdx_display_vsync_channel_socket pdx_performance_client_endpoint_socket pdx_performance_client_channel_socket pdx_bufferhub_client_endpoint_socket pdx_bufferhub_client_channel_socket prng_seeder_socket aconfigd_socket aconfigd_mainline_socket microdroid_managed_socket_file zygote_next_socket ))
(typeattribute socket_between_core_and_vendor_violators)
(expandtypeattribute (socket_between_core_and_vendor_violators) false)
(typeattribute unconstrained_vsock_violators)
(expandtypeattribute (unconstrained_vsock_violators) false)
(typeattribute vendor_executes_system_violators)
(expandtypeattribute (vendor_executes_system_violators) false)
(typeattribute data_between_core_and_vendor_violators)
(expandtypeattribute (data_between_core_and_vendor_violators) false)
(typeattribute system_executes_vendor_violators)
(expandtypeattribute (system_executes_vendor_violators) false)
(typeattribute system_writes_vendor_properties_violators)
(expandtypeattribute (system_writes_vendor_properties_violators) false)
(typeattribute system_writes_mnt_vendor_violators)
(expandtypeattribute (system_writes_mnt_vendor_violators) false)
(typeattribute untrusted_app_visible_hwservice_violators)
(expandtypeattribute (untrusted_app_visible_hwservice_violators) false)
(typeattribute untrusted_app_visible_halserver_violators)
(expandtypeattribute (untrusted_app_visible_halserver_violators) false)
(typeattribute pdx_endpoint_dir_type)
(typeattributeset pdx_endpoint_dir_type (pdx_display_dir pdx_performance_dir pdx_bufferhub_dir ))
(typeattribute pdx_endpoint_socket_type)
(expandtypeattribute (pdx_endpoint_socket_type) false)
(typeattributeset pdx_endpoint_socket_type (pdx_display_client_endpoint_socket pdx_display_manager_endpoint_socket pdx_display_screenshot_endpoint_socket pdx_display_vsync_endpoint_socket pdx_performance_client_endpoint_socket pdx_bufferhub_client_endpoint_socket ))
(typeattribute pdx_channel_socket_type)
(expandtypeattribute (pdx_channel_socket_type) false)
(typeattributeset pdx_channel_socket_type (pdx_display_client_channel_socket pdx_display_manager_channel_socket pdx_display_screenshot_channel_socket pdx_display_vsync_channel_socket pdx_performance_client_channel_socket pdx_bufferhub_client_channel_socket ))
(typeattribute pdx_display_client_endpoint_dir_type)
(typeattributeset pdx_display_client_endpoint_dir_type (pdx_display_dir ))
(typeattribute pdx_display_client_endpoint_socket_type)
(typeattributeset pdx_display_client_endpoint_socket_type (pdx_display_client_endpoint_socket ))
(typeattribute pdx_display_client_channel_socket_type)
(typeattributeset pdx_display_client_channel_socket_type (pdx_display_client_channel_socket ))
(typeattribute pdx_display_client_server_type)
(typeattributeset pdx_display_client_server_type (surfaceflinger ))
(typeattribute pdx_display_manager_endpoint_dir_type)
(typeattributeset pdx_display_manager_endpoint_dir_type (pdx_display_dir ))
(typeattribute pdx_display_manager_endpoint_socket_type)
(typeattributeset pdx_display_manager_endpoint_socket_type (pdx_display_manager_endpoint_socket ))
(typeattribute pdx_display_manager_channel_socket_type)
(typeattributeset pdx_display_manager_channel_socket_type (pdx_display_manager_channel_socket ))
(typeattribute pdx_display_manager_server_type)
(typeattributeset pdx_display_manager_server_type (surfaceflinger ))
(typeattribute pdx_display_screenshot_endpoint_dir_type)
(typeattributeset pdx_display_screenshot_endpoint_dir_type (pdx_display_dir ))
(typeattribute pdx_display_screenshot_endpoint_socket_type)
(typeattributeset pdx_display_screenshot_endpoint_socket_type (pdx_display_screenshot_endpoint_socket ))
(typeattribute pdx_display_screenshot_channel_socket_type)
(typeattributeset pdx_display_screenshot_channel_socket_type (pdx_display_screenshot_channel_socket ))
(typeattribute pdx_display_screenshot_server_type)
(typeattributeset pdx_display_screenshot_server_type (surfaceflinger ))
(typeattribute pdx_display_vsync_endpoint_dir_type)
(typeattributeset pdx_display_vsync_endpoint_dir_type (pdx_display_dir ))
(typeattribute pdx_display_vsync_endpoint_socket_type)
(typeattributeset pdx_display_vsync_endpoint_socket_type (pdx_display_vsync_endpoint_socket ))
(typeattribute pdx_display_vsync_channel_socket_type)
(typeattributeset pdx_display_vsync_channel_socket_type (pdx_display_vsync_channel_socket ))
(typeattribute pdx_display_vsync_server_type)
(typeattributeset pdx_display_vsync_server_type (surfaceflinger ))
(typeattribute pdx_performance_client_endpoint_dir_type)
(typeattributeset pdx_performance_client_endpoint_dir_type (pdx_performance_dir ))
(typeattribute pdx_performance_client_endpoint_socket_type)
(typeattributeset pdx_performance_client_endpoint_socket_type (pdx_performance_client_endpoint_socket ))
(typeattribute pdx_performance_client_channel_socket_type)
(typeattributeset pdx_performance_client_channel_socket_type (pdx_performance_client_channel_socket ))
(typeattribute pdx_performance_client_server_type)
(typeattributeset pdx_performance_client_server_type (performanced ))
(typeattribute pdx_bufferhub_client_endpoint_dir_type)
(typeattributeset pdx_bufferhub_client_endpoint_dir_type (pdx_bufferhub_dir ))
(typeattribute pdx_bufferhub_client_endpoint_socket_type)
(typeattributeset pdx_bufferhub_client_endpoint_socket_type (pdx_bufferhub_client_endpoint_socket ))
(typeattribute pdx_bufferhub_client_channel_socket_type)
(typeattributeset pdx_bufferhub_client_channel_socket_type (pdx_bufferhub_client_channel_socket ))
(typeattribute pdx_bufferhub_client_server_type)
(typeattributeset pdx_bufferhub_client_server_type (bufferhubd ))
(typeattribute halserverdomain)
(typeattributeset halserverdomain (charger_vendor mediaswcodec hal_allocator_default hal_keymint_system hal_widevine_system hidl_lazy_test_server virtual_face virtual_fingerprint virtualizationservice ))
(typeattribute halclientdomain)
(expandtypeattribute (halclientdomain) true)
(typeattributeset halclientdomain (adbd atrace audioserver bluetooth bootanim bootstat bufferhubd cameraserver charger credstore crosvm_vendor dumpstate evsmanagerd gatekeeperd isolated_compute_app keystore mediadrmserver mediaextractor mediaserver mediaswcodec mediatranscoding network_stack nfc omapi radio rkpdapp secure_element shell statsd su surfaceflinger system_app system_server traced_probes traceur_app update_engine update_verifier usbd virtual_camera vold wificond aisealhostservice_virtualizationmanager aisealhostservice_virtmgr_crosvm automotive_display_service blank_screen canhalconfigurator compos_verify_virtualizationmanager compos_verify_virtmgr_crosvm composd_virtualizationmanager composd_virtmgr_crosvm fwk_bufferhub mediacodeclist_generator mediatuner odsign ot_daemon platform_app_all_virtualizationmanager platform_app_all_virtmgr_crosvm priv_app_all_virtualizationmanager priv_app_all_virtmgr_crosvm shell_virtualizationmanager shell_virtmgr_crosvm snapshotctl storaged su_virtualizationmanager su_virtmgr_crosvm untrusted_app_all_virtualizationmanager untrusted_app_all_virtmgr_crosvm vehicle_binding_util virtualizationservice virtualizationservice_virtualizationmanager virtualizationservice_virtmgr_crosvm ))
(typeattribute hal_automotive_socket_exemption)
(typeattribute hal_allocator)
(expandtypeattribute (hal_allocator) true)
(typeattributeset hal_allocator (hal_allocator_default ))
(typeattribute hal_allocator_client)
(expandtypeattribute (hal_allocator_client) true)
(typeattributeset hal_allocator_client (audioserver cameraserver isolated_compute_app mediaextractor mediaserver mediaswcodec mediatranscoding su system_server ))
(typeattribute hal_allocator_server)
(expandtypeattribute (hal_allocator_server) false)
(typeattributeset hal_allocator_server (hal_allocator_default ))
(typeattribute hal_atrace)
(expandtypeattribute (hal_atrace) true)
(typeattribute hal_atrace_client)
(expandtypeattribute (hal_atrace_client) true)
(typeattributeset hal_atrace_client (atrace shell su traced_probes traceur_app ))
(typeattribute hal_atrace_server)
(expandtypeattribute (hal_atrace_server) false)
(typeattribute hal_audio)
(expandtypeattribute (hal_audio) true)
(typeattribute hal_audio_client)
(expandtypeattribute (hal_audio_client) true)
(typeattributeset hal_audio_client (audioserver bluetooth dumpstate su system_server ))
(typeattribute hal_audio_server)
(expandtypeattribute (hal_audio_server) false)
(typeattribute hal_audiocontrol)
(expandtypeattribute (hal_audiocontrol) true)
(typeattribute hal_audiocontrol_client)
(expandtypeattribute (hal_audiocontrol_client) true)
(typeattributeset hal_audiocontrol_client (dumpstate ))
(typeattribute hal_audiocontrol_server)
(expandtypeattribute (hal_audiocontrol_server) false)
(typeattribute hal_authgraph)
(expandtypeattribute (hal_authgraph) true)
(typeattribute hal_authgraph_client)
(expandtypeattribute (hal_authgraph_client) true)
(typeattributeset hal_authgraph_client (dumpstate system_server ))
(typeattribute hal_authgraph_server)
(expandtypeattribute (hal_authgraph_server) false)
(typeattribute hal_authsecret)
(expandtypeattribute (hal_authsecret) true)
(typeattribute hal_authsecret_client)
(expandtypeattribute (hal_authsecret_client) true)
(typeattributeset hal_authsecret_client (dumpstate su system_server ))
(typeattribute hal_authsecret_server)
(expandtypeattribute (hal_authsecret_server) false)
(typeattribute hal_bluetooth)
(expandtypeattribute (hal_bluetooth) true)
(typeattribute hal_bluetooth_client)
(expandtypeattribute (hal_bluetooth_client) true)
(typeattributeset hal_bluetooth_client (bluetooth dumpstate su system_server ))
(typeattribute hal_bluetooth_server)
(expandtypeattribute (hal_bluetooth_server) false)
(typeattribute hal_bluetooth_lpp)
(expandtypeattribute (hal_bluetooth_lpp) true)
(typeattribute hal_bluetooth_lpp_client)
(expandtypeattribute (hal_bluetooth_lpp_client) true)
(typeattributeset hal_bluetooth_lpp_client (bluetooth ))
(typeattribute hal_bluetooth_lpp_server)
(expandtypeattribute (hal_bluetooth_lpp_server) false)
(typeattribute hal_bootctl)
(expandtypeattribute (hal_bootctl) true)
(typeattribute hal_bootctl_client)
(expandtypeattribute (hal_bootctl_client) true)
(typeattributeset hal_bootctl_client (su system_server update_engine update_verifier vold snapshotctl ))
(typeattribute hal_bootctl_server)
(expandtypeattribute (hal_bootctl_server) false)
(typeattribute hal_broadcastradio)
(expandtypeattribute (hal_broadcastradio) true)
(typeattribute hal_broadcastradio_client)
(expandtypeattribute (hal_broadcastradio_client) true)
(typeattributeset hal_broadcastradio_client (dumpstate system_server ))
(typeattribute hal_broadcastradio_server)
(expandtypeattribute (hal_broadcastradio_server) false)
(typeattribute hal_camera)
(expandtypeattribute (hal_camera) true)
(typeattribute hal_camera_client)
(expandtypeattribute (hal_camera_client) true)
(typeattributeset hal_camera_client (atrace cameraserver dumpstate su ))
(typeattribute hal_camera_server)
(expandtypeattribute (hal_camera_server) false)
(typeattribute hal_can_bus)
(expandtypeattribute (hal_can_bus) true)
(typeattribute hal_can_bus_client)
(expandtypeattribute (hal_can_bus_client) true)
(typeattribute hal_can_bus_server)
(expandtypeattribute (hal_can_bus_server) false)
(typeattribute hal_can_controller)
(expandtypeattribute (hal_can_controller) true)
(typeattribute hal_can_controller_client)
(expandtypeattribute (hal_can_controller_client) true)
(typeattributeset hal_can_controller_client (canhalconfigurator ))
(typeattribute hal_can_controller_server)
(expandtypeattribute (hal_can_controller_server) false)
(typeattribute hal_cas)
(expandtypeattribute (hal_cas) true)
(typeattribute hal_cas_client)
(expandtypeattribute (hal_cas_client) true)
(typeattributeset hal_cas_client (mediaextractor su ))
(typeattribute hal_cas_server)
(expandtypeattribute (hal_cas_server) false)
(typeattribute hal_codec2)
(expandtypeattribute (hal_codec2) true)
(typeattributeset hal_codec2 (mediaswcodec ))
(typeattribute hal_codec2_client)
(expandtypeattribute (hal_codec2_client) true)
(typeattributeset hal_codec2_client (cameraserver dumpstate isolated_compute_app mediaserver mediaswcodec mediatranscoding surfaceflinger system_server virtual_camera mediacodeclist_generator ))
(typeattribute hal_codec2_server)
(expandtypeattribute (hal_codec2_server) false)
(typeattributeset hal_codec2_server (mediaswcodec ))
(typeattribute hal_configstore)
(expandtypeattribute (hal_configstore) true)
(typeattribute hal_configstore_client)
(expandtypeattribute (hal_configstore_client) true)
(typeattributeset hal_configstore_client (bootanim mediaserver mediatranscoding su surfaceflinger system_server ))
(typeattribute hal_configstore_server)
(expandtypeattribute (hal_configstore_server) false)
(typeattribute hal_confirmationui)
(expandtypeattribute (hal_confirmationui) true)
(typeattribute hal_confirmationui_client)
(expandtypeattribute (hal_confirmationui_client) true)
(typeattributeset hal_confirmationui_client (keystore su ))
(typeattribute hal_confirmationui_server)
(expandtypeattribute (hal_confirmationui_server) false)
(typeattribute hal_contexthub)
(expandtypeattribute (hal_contexthub) true)
(typeattribute hal_contexthub_client)
(expandtypeattribute (hal_contexthub_client) true)
(typeattributeset hal_contexthub_client (dumpstate su system_server ))
(typeattribute hal_contexthub_server)
(expandtypeattribute (hal_contexthub_server) false)
(typeattribute hal_drm)
(expandtypeattribute (hal_drm) true)
(typeattributeset hal_drm (hal_widevine_system ))
(typeattribute hal_drm_client)
(expandtypeattribute (hal_drm_client) true)
(typeattributeset hal_drm_client (dumpstate mediadrmserver mediaserver su ))
(typeattribute hal_drm_server)
(expandtypeattribute (hal_drm_server) false)
(typeattributeset hal_drm_server (hal_widevine_system ))
(typeattribute hal_dumpstate)
(expandtypeattribute (hal_dumpstate) true)
(typeattribute hal_dumpstate_client)
(expandtypeattribute (hal_dumpstate_client) true)
(typeattributeset hal_dumpstate_client (dumpstate su system_app ))
(typeattribute hal_dumpstate_server)
(expandtypeattribute (hal_dumpstate_server) false)
(typeattribute hal_evs)
(expandtypeattribute (hal_evs) true)
(typeattribute hal_evs_client)
(expandtypeattribute (hal_evs_client) true)
(typeattributeset hal_evs_client (dumpstate evsmanagerd ))
(typeattribute hal_evs_server)
(expandtypeattribute (hal_evs_server) false)
(typeattribute hal_face)
(expandtypeattribute (hal_face) true)
(typeattributeset hal_face (virtual_face ))
(typeattribute hal_face_client)
(expandtypeattribute (hal_face_client) true)
(typeattributeset hal_face_client (dumpstate system_server ))
(typeattribute hal_face_server)
(expandtypeattribute (hal_face_server) false)
(typeattributeset hal_face_server (virtual_face ))
(typeattribute hal_fastboot)
(expandtypeattribute (hal_fastboot) true)
(typeattribute hal_fastboot_client)
(expandtypeattribute (hal_fastboot_client) true)
(typeattribute hal_fastboot_server)
(expandtypeattribute (hal_fastboot_server) false)
(typeattribute hal_fingerprint)
(expandtypeattribute (hal_fingerprint) true)
(typeattributeset hal_fingerprint (virtual_fingerprint ))
(typeattribute hal_fingerprint_client)
(expandtypeattribute (hal_fingerprint_client) true)
(typeattributeset hal_fingerprint_client (dumpstate su system_server ))
(typeattribute hal_fingerprint_server)
(expandtypeattribute (hal_fingerprint_server) false)
(typeattributeset hal_fingerprint_server (virtual_fingerprint ))
(typeattribute hal_gatekeeper)
(expandtypeattribute (hal_gatekeeper) true)
(typeattribute hal_gatekeeper_client)
(expandtypeattribute (hal_gatekeeper_client) true)
(typeattributeset hal_gatekeeper_client (gatekeeperd su ))
(typeattribute hal_gatekeeper_server)
(expandtypeattribute (hal_gatekeeper_server) false)
(typeattribute hal_gnss)
(expandtypeattribute (hal_gnss) true)
(typeattribute hal_gnss_client)
(expandtypeattribute (hal_gnss_client) true)
(typeattributeset hal_gnss_client (dumpstate su system_server ))
(typeattribute hal_gnss_server)
(expandtypeattribute (hal_gnss_server) false)
(typeattribute hal_graphics_allocator)
(expandtypeattribute (hal_graphics_allocator) true)
(typeattribute hal_graphics_allocator_client)
(expandtypeattribute (hal_graphics_allocator_client) true)
(typeattributeset hal_graphics_allocator_client (adbd bootanim bufferhubd cameraserver crosvm_vendor dumpstate mediadrmserver mediaserver mediaswcodec mediatranscoding su surfaceflinger system_server virtual_camera aisealhostservice_virtmgr_crosvm automotive_display_service compos_verify_virtmgr_crosvm composd_virtmgr_crosvm fwk_bufferhub platform_app_all_virtmgr_crosvm priv_app_all_virtmgr_crosvm shell_virtmgr_crosvm su_virtmgr_crosvm untrusted_app_all_virtmgr_crosvm virtualizationservice_virtmgr_crosvm ))
(typeattribute hal_graphics_allocator_server)
(expandtypeattribute (hal_graphics_allocator_server) false)
(typeattribute hal_graphics_composer)
(expandtypeattribute (hal_graphics_composer) true)
(typeattribute hal_graphics_composer_client)
(expandtypeattribute (hal_graphics_composer_client) true)
(typeattributeset hal_graphics_composer_client (bootanim dumpstate su surfaceflinger automotive_display_service ))
(typeattribute hal_graphics_composer_server)
(expandtypeattribute (hal_graphics_composer_server) false)
(typeattribute hal_health)
(expandtypeattribute (hal_health) true)
(typeattributeset hal_health (charger_vendor ))
(typeattribute hal_health_client)
(expandtypeattribute (hal_health_client) true)
(typeattributeset hal_health_client (audioserver bootstat charger dumpstate statsd su system_server traced_probes storaged ))
(typeattribute hal_health_server)
(expandtypeattribute (hal_health_server) false)
(typeattributeset hal_health_server (charger_vendor ))
(typeattribute hal_health_storage)
(expandtypeattribute (hal_health_storage) true)
(typeattribute hal_health_storage_client)
(expandtypeattribute (hal_health_storage_client) true)
(typeattributeset hal_health_storage_client (vold ))
(typeattribute hal_health_storage_server)
(expandtypeattribute (hal_health_storage_server) false)
(typeattribute hal_hwcrypto)
(expandtypeattribute (hal_hwcrypto) true)
(typeattribute hal_hwcrypto_client)
(expandtypeattribute (hal_hwcrypto_client) true)
(typeattributeset hal_hwcrypto_client (keystore ))
(typeattribute hal_hwcrypto_server)
(expandtypeattribute (hal_hwcrypto_server) false)
(typeattribute hal_identity)
(expandtypeattribute (hal_identity) true)
(typeattribute hal_identity_client)
(expandtypeattribute (hal_identity_client) true)
(typeattributeset hal_identity_client (credstore dumpstate ))
(typeattribute hal_identity_server)
(expandtypeattribute (hal_identity_server) false)
(typeattribute hal_input_classifier)
(expandtypeattribute (hal_input_classifier) true)
(typeattribute hal_input_classifier_client)
(expandtypeattribute (hal_input_classifier_client) true)
(typeattributeset hal_input_classifier_client (su system_server ))
(typeattribute hal_input_classifier_server)
(expandtypeattribute (hal_input_classifier_server) false)
(typeattribute hal_input_processor)
(expandtypeattribute (hal_input_processor) true)
(typeattribute hal_input_processor_client)
(expandtypeattribute (hal_input_processor_client) true)
(typeattributeset hal_input_processor_client (dumpstate system_server ))
(typeattribute hal_input_processor_server)
(expandtypeattribute (hal_input_processor_server) false)
(typeattribute hal_ir)
(expandtypeattribute (hal_ir) true)
(typeattribute hal_ir_client)
(expandtypeattribute (hal_ir_client) true)
(typeattributeset hal_ir_client (su system_server ))
(typeattribute hal_ir_server)
(expandtypeattribute (hal_ir_server) false)
(typeattribute hal_ivn)
(expandtypeattribute (hal_ivn) true)
(typeattribute hal_ivn_client)
(expandtypeattribute (hal_ivn_client) true)
(typeattribute hal_ivn_server)
(expandtypeattribute (hal_ivn_server) false)
(typeattribute hal_keymaster)
(expandtypeattribute (hal_keymaster) true)
(typeattribute hal_keymaster_client)
(expandtypeattribute (hal_keymaster_client) true)
(typeattributeset hal_keymaster_client (keystore su odsign ))
(typeattribute hal_keymaster_server)
(expandtypeattribute (hal_keymaster_server) false)
(typeattribute hal_keymint)
(expandtypeattribute (hal_keymint) true)
(typeattributeset hal_keymint (hal_keymint_system ))
(typeattribute hal_keymint_client)
(expandtypeattribute (hal_keymint_client) true)
(typeattributeset hal_keymint_client (credstore dumpstate keystore rkpdapp system_server ))
(typeattribute hal_keymint_server)
(expandtypeattribute (hal_keymint_server) false)
(typeattributeset hal_keymint_server (hal_keymint_system ))
(typeattribute hal_light)
(expandtypeattribute (hal_light) true)
(typeattribute hal_light_client)
(expandtypeattribute (hal_light_client) true)
(typeattributeset hal_light_client (dumpstate su system_server blank_screen ))
(typeattribute hal_light_server)
(expandtypeattribute (hal_light_server) false)
(typeattribute hal_lowpan)
(expandtypeattribute (hal_lowpan) true)
(typeattribute hal_lowpan_client)
(expandtypeattribute (hal_lowpan_client) true)
(typeattribute hal_lowpan_server)
(expandtypeattribute (hal_lowpan_server) false)
(typeattribute hal_macsec)
(expandtypeattribute (hal_macsec) true)
(typeattribute hal_macsec_client)
(expandtypeattribute (hal_macsec_client) true)
(typeattribute hal_macsec_server)
(expandtypeattribute (hal_macsec_server) false)
(typeattribute hal_mediaquality)
(expandtypeattribute (hal_mediaquality) true)
(typeattribute hal_mediaquality_client)
(expandtypeattribute (hal_mediaquality_client) true)
(typeattributeset hal_mediaquality_client (su system_server ))
(typeattribute hal_mediaquality_server)
(expandtypeattribute (hal_mediaquality_server) false)
(typeattribute hal_memtrack)
(expandtypeattribute (hal_memtrack) true)
(typeattribute hal_memtrack_client)
(expandtypeattribute (hal_memtrack_client) true)
(typeattributeset hal_memtrack_client (dumpstate su system_server ))
(typeattribute hal_memtrack_server)
(expandtypeattribute (hal_memtrack_server) false)
(typeattribute hal_motioncontext)
(expandtypeattribute (hal_motioncontext) true)
(typeattribute hal_motioncontext_client)
(expandtypeattribute (hal_motioncontext_client) true)
(typeattribute hal_motioncontext_server)
(expandtypeattribute (hal_motioncontext_server) false)
(typeattribute hal_neuralnetworks)
(expandtypeattribute (hal_neuralnetworks) true)
(typeattribute hal_neuralnetworks_client)
(expandtypeattribute (hal_neuralnetworks_client) true)
(typeattributeset hal_neuralnetworks_client (dumpstate su system_server ))
(typeattribute hal_neuralnetworks_server)
(expandtypeattribute (hal_neuralnetworks_server) false)
(typeattribute hal_nfc)
(expandtypeattribute (hal_nfc) true)
(typeattribute hal_nfc_client)
(expandtypeattribute (hal_nfc_client) true)
(typeattributeset hal_nfc_client (dumpstate nfc su ))
(typeattribute hal_nfc_server)
(expandtypeattribute (hal_nfc_server) false)
(typeattribute hal_nlinterceptor)
(expandtypeattribute (hal_nlinterceptor) true)
(typeattribute hal_nlinterceptor_client)
(expandtypeattribute (hal_nlinterceptor_client) true)
(typeattributeset hal_nlinterceptor_client (wificond ))
(typeattribute hal_nlinterceptor_server)
(expandtypeattribute (hal_nlinterceptor_server) false)
(typeattribute hal_oemlock)
(expandtypeattribute (hal_oemlock) true)
(typeattribute hal_oemlock_client)
(expandtypeattribute (hal_oemlock_client) true)
(typeattributeset hal_oemlock_client (dumpstate su system_server ))
(typeattribute hal_oemlock_server)
(expandtypeattribute (hal_oemlock_server) false)
(typeattribute hal_omx)
(expandtypeattribute (hal_omx) true)
(typeattribute hal_omx_client)
(expandtypeattribute (hal_omx_client) true)
(typeattributeset hal_omx_client (cameraserver mediaserver mediaswcodec mediatranscoding surfaceflinger system_server virtual_camera mediacodeclist_generator ))
(typeattribute hal_omx_server)
(expandtypeattribute (hal_omx_server) false)
(typeattribute hal_power)
(expandtypeattribute (hal_power) true)
(typeattribute hal_power_client)
(expandtypeattribute (hal_power_client) true)
(typeattributeset hal_power_client (dumpstate statsd su surfaceflinger system_server ))
(typeattribute hal_power_server)
(expandtypeattribute (hal_power_server) false)
(typeattribute hal_power_stats)
(expandtypeattribute (hal_power_stats) true)
(typeattribute hal_power_stats_client)
(expandtypeattribute (hal_power_stats_client) true)
(typeattributeset hal_power_stats_client (audioserver dumpstate statsd system_server traced_probes ))
(typeattribute hal_power_stats_server)
(expandtypeattribute (hal_power_stats_server) false)
(typeattribute hal_rebootescrow)
(expandtypeattribute (hal_rebootescrow) true)
(typeattribute hal_rebootescrow_client)
(expandtypeattribute (hal_rebootescrow_client) true)
(typeattributeset hal_rebootescrow_client (dumpstate su system_server ))
(typeattribute hal_rebootescrow_server)
(expandtypeattribute (hal_rebootescrow_server) false)
(typeattribute hal_remoteaccess)
(expandtypeattribute (hal_remoteaccess) true)
(typeattribute hal_remoteaccess_client)
(expandtypeattribute (hal_remoteaccess_client) true)
(typeattribute hal_remoteaccess_server)
(expandtypeattribute (hal_remoteaccess_server) false)
(typeattribute hal_secretkeeper)
(expandtypeattribute (hal_secretkeeper) true)
(typeattribute hal_secretkeeper_client)
(expandtypeattribute (hal_secretkeeper_client) true)
(typeattributeset hal_secretkeeper_client (dumpstate su system_server aisealhostservice_virtualizationmanager compos_verify_virtualizationmanager composd_virtualizationmanager platform_app_all_virtualizationmanager priv_app_all_virtualizationmanager shell_virtualizationmanager su_virtualizationmanager untrusted_app_all_virtualizationmanager virtualizationservice virtualizationservice_virtualizationmanager ))
(typeattribute hal_secretkeeper_server)
(expandtypeattribute (hal_secretkeeper_server) false)
(typeattribute hal_remotelyprovisionedcomponent_avf)
(expandtypeattribute (hal_remotelyprovisionedcomponent_avf) true)
(typeattributeset hal_remotelyprovisionedcomponent_avf (virtualizationservice ))
(typeattribute hal_remotelyprovisionedcomponent_avf_client)
(expandtypeattribute (hal_remotelyprovisionedcomponent_avf_client) true)
(typeattributeset hal_remotelyprovisionedcomponent_avf_client (rkpdapp system_server ))
(typeattribute hal_remotelyprovisionedcomponent_avf_server)
(expandtypeattribute (hal_remotelyprovisionedcomponent_avf_server) false)
(typeattributeset hal_remotelyprovisionedcomponent_avf_server (virtualizationservice ))
(typeattribute hal_secure_element)
(expandtypeattribute (hal_secure_element) true)
(typeattribute hal_secure_element_client)
(expandtypeattribute (hal_secure_element_client) true)
(typeattributeset hal_secure_element_client (omapi secure_element su ))
(typeattribute hal_secure_element_server)
(expandtypeattribute (hal_secure_element_server) false)
(typeattribute hal_sensors)
(expandtypeattribute (hal_sensors) true)
(typeattribute hal_sensors_client)
(expandtypeattribute (hal_sensors_client) true)
(typeattributeset hal_sensors_client (dumpstate su system_server ))
(typeattribute hal_sensors_server)
(expandtypeattribute (hal_sensors_server) false)
(typeattribute hal_telephony)
(expandtypeattribute (hal_telephony) true)
(typeattribute hal_telephony_client)
(expandtypeattribute (hal_telephony_client) true)
(typeattributeset hal_telephony_client (bluetooth radio su ))
(typeattribute hal_telephony_server)
(expandtypeattribute (hal_telephony_server) false)
(typeattribute hal_tetheroffload)
(expandtypeattribute (hal_tetheroffload) true)
(typeattribute hal_tetheroffload_client)
(expandtypeattribute (hal_tetheroffload_client) true)
(typeattributeset hal_tetheroffload_client (network_stack su system_server ))
(typeattribute hal_tetheroffload_server)
(expandtypeattribute (hal_tetheroffload_server) false)
(typeattribute hal_thermal)
(expandtypeattribute (hal_thermal) true)
(typeattribute hal_thermal_client)
(expandtypeattribute (hal_thermal_client) true)
(typeattributeset hal_thermal_client (dumpstate statsd su system_server ))
(typeattribute hal_thermal_server)
(expandtypeattribute (hal_thermal_server) false)
(typeattribute hal_threadnetwork)
(expandtypeattribute (hal_threadnetwork) true)
(typeattribute hal_threadnetwork_client)
(expandtypeattribute (hal_threadnetwork_client) true)
(typeattributeset hal_threadnetwork_client (system_server ot_daemon ))
(typeattribute hal_threadnetwork_server)
(expandtypeattribute (hal_threadnetwork_server) false)
(typeattribute hal_tv_cec)
(expandtypeattribute (hal_tv_cec) true)
(typeattribute hal_tv_cec_client)
(expandtypeattribute (hal_tv_cec_client) true)
(typeattributeset hal_tv_cec_client (su system_server ))
(typeattribute hal_tv_cec_server)
(expandtypeattribute (hal_tv_cec_server) false)
(typeattribute hal_tv_hdmi_cec)
(expandtypeattribute (hal_tv_hdmi_cec) true)
(typeattribute hal_tv_hdmi_cec_client)
(expandtypeattribute (hal_tv_hdmi_cec_client) true)
(typeattributeset hal_tv_hdmi_cec_client (su system_server ))
(typeattribute hal_tv_hdmi_cec_server)
(expandtypeattribute (hal_tv_hdmi_cec_server) false)
(typeattribute hal_tv_hdmi_connection)
(expandtypeattribute (hal_tv_hdmi_connection) true)
(typeattribute hal_tv_hdmi_connection_client)
(expandtypeattribute (hal_tv_hdmi_connection_client) true)
(typeattributeset hal_tv_hdmi_connection_client (su system_server ))
(typeattribute hal_tv_hdmi_connection_server)
(expandtypeattribute (hal_tv_hdmi_connection_server) false)
(typeattribute hal_tv_hdmi_earc)
(expandtypeattribute (hal_tv_hdmi_earc) true)
(typeattribute hal_tv_hdmi_earc_client)
(expandtypeattribute (hal_tv_hdmi_earc_client) true)
(typeattributeset hal_tv_hdmi_earc_client (su system_server ))
(typeattribute hal_tv_hdmi_earc_server)
(expandtypeattribute (hal_tv_hdmi_earc_server) false)
(typeattribute hal_tv_input)
(expandtypeattribute (hal_tv_input) true)
(typeattribute hal_tv_input_client)
(expandtypeattribute (hal_tv_input_client) true)
(typeattributeset hal_tv_input_client (su system_server ))
(typeattribute hal_tv_input_server)
(expandtypeattribute (hal_tv_input_server) false)
(typeattribute hal_tv_tuner)
(expandtypeattribute (hal_tv_tuner) true)
(typeattribute hal_tv_tuner_client)
(expandtypeattribute (hal_tv_tuner_client) true)
(typeattributeset hal_tv_tuner_client (su mediatuner ))
(typeattribute hal_tv_tuner_server)
(expandtypeattribute (hal_tv_tuner_server) false)
(typeattribute hal_usb)
(expandtypeattribute (hal_usb) true)
(typeattribute hal_usb_client)
(expandtypeattribute (hal_usb_client) true)
(typeattributeset hal_usb_client (su system_server ))
(typeattribute hal_usb_server)
(expandtypeattribute (hal_usb_server) false)
(typeattribute hal_usb_gadget)
(expandtypeattribute (hal_usb_gadget) true)
(typeattribute hal_usb_gadget_client)
(expandtypeattribute (hal_usb_gadget_client) true)
(typeattributeset hal_usb_gadget_client (system_server usbd ))
(typeattribute hal_usb_gadget_server)
(expandtypeattribute (hal_usb_gadget_server) false)
(typeattribute hal_uwb)
(expandtypeattribute (hal_uwb) true)
(typeattribute hal_uwb_client)
(expandtypeattribute (hal_uwb_client) true)
(typeattributeset hal_uwb_client (system_server ))
(typeattribute hal_uwb_server)
(expandtypeattribute (hal_uwb_server) false)
(typeattribute hal_uwb_vendor)
(expandtypeattribute (hal_uwb_vendor) true)
(typeattribute hal_uwb_vendor_client)
(expandtypeattribute (hal_uwb_vendor_client) true)
(typeattribute hal_uwb_vendor_server)
(expandtypeattribute (hal_uwb_vendor_server) false)
(typeattribute hal_vehicle)
(expandtypeattribute (hal_vehicle) true)
(typeattribute hal_vehicle_client)
(expandtypeattribute (hal_vehicle_client) true)
(typeattributeset hal_vehicle_client (dumpstate vehicle_binding_util ))
(typeattribute hal_vehicle_server)
(expandtypeattribute (hal_vehicle_server) false)
(typeattribute hal_vibrator)
(expandtypeattribute (hal_vibrator) true)
(typeattribute hal_vibrator_client)
(expandtypeattribute (hal_vibrator_client) true)
(typeattributeset hal_vibrator_client (atrace dumpstate su system_server ))
(typeattribute hal_vibrator_server)
(expandtypeattribute (hal_vibrator_server) false)
(typeattribute hal_vr)
(expandtypeattribute (hal_vr) true)
(typeattribute hal_vr_client)
(expandtypeattribute (hal_vr_client) true)
(typeattributeset hal_vr_client (su system_server ))
(typeattribute hal_vr_server)
(expandtypeattribute (hal_vr_server) false)
(typeattribute hal_weaver)
(expandtypeattribute (hal_weaver) true)
(typeattribute hal_weaver_client)
(expandtypeattribute (hal_weaver_client) true)
(typeattributeset hal_weaver_client (dumpstate su system_server ))
(typeattribute hal_weaver_server)
(expandtypeattribute (hal_weaver_server) false)
(typeattribute hal_wifi)
(expandtypeattribute (hal_wifi) true)
(typeattribute hal_wifi_client)
(expandtypeattribute (hal_wifi_client) true)
(typeattributeset hal_wifi_client (dumpstate su system_server ))
(typeattribute hal_wifi_server)
(expandtypeattribute (hal_wifi_server) false)
(typeattribute hal_wifi_hostapd)
(expandtypeattribute (hal_wifi_hostapd) true)
(typeattribute hal_wifi_hostapd_client)
(expandtypeattribute (hal_wifi_hostapd_client) true)
(typeattributeset hal_wifi_hostapd_client (su system_server ))
(typeattribute hal_wifi_hostapd_server)
(expandtypeattribute (hal_wifi_hostapd_server) false)
(typeattribute hal_wifi_supplicant)
(expandtypeattribute (hal_wifi_supplicant) true)
(typeattribute hal_wifi_supplicant_client)
(expandtypeattribute (hal_wifi_supplicant_client) true)
(typeattributeset hal_wifi_supplicant_client (su system_server ))
(typeattribute hal_wifi_supplicant_server)
(expandtypeattribute (hal_wifi_supplicant_server) false)
(typeattribute automotive_display_service_server)
(typeattributeset automotive_display_service_server (automotive_display_service ))
(typeattribute camera_service_server)
(typeattributeset camera_service_server (cameraserver ))
(typeattribute display_service_server)
(typeattributeset display_service_server (surfaceflinger ))
(typeattribute evsmanager_service_server)
(typeattributeset evsmanager_service_server (evsmanagerd ))
(typeattribute remote_provisioning_service_server)
(typeattributeset remote_provisioning_service_server (system_server ))
(typeattribute scheduler_service_server)
(typeattributeset scheduler_service_server (system_server ))
(typeattribute sensor_service_server)
(typeattributeset sensor_service_server (system_server ))
(typeattribute stats_service_server)
(typeattributeset stats_service_server (system_server ))
(typeattribute system_suspend_internal_server)
(typeattributeset system_suspend_internal_server (system_suspend ))
(typeattribute system_suspend_server)
(typeattributeset system_suspend_server (system_suspend ))
(typeattribute wifi_keystore_service_server)
(typeattributeset wifi_keystore_service_server (wificond ))
(typeattribute super_block_device_type)
(typeattributeset super_block_device_type (super_block_device ))
(typeattribute dmabuf_heap_device_type)
(expandtypeattribute (dmabuf_heap_device_type) false)
(typeattributeset dmabuf_heap_device_type (dmabuf_heap_device dmabuf_system_heap_device dmabuf_system_secure_heap_device ))
(typeattribute vm_manager_device_type)
(typeattributeset vm_manager_device_type (kvm_device ))
(typeattribute gsi_metadata_file_type)
(typeattributeset gsi_metadata_file_type (gsi_metadata_file gsi_public_metadata_file ))
(typeattribute apex_data_file_type)
(typeattributeset apex_data_file_type (apex_system_server_data_file apex_art_data_file apex_compos_data_file apex_virt_data_file apex_tethering_data_file apex_uwb_data_file apex_wifi_data_file apex_appsearch_data_file apex_permission_data_file apex_scheduling_data_file ))
(typeattribute charger_type)
(typeattributeset charger_type (charger charger_vendor ))
(typeattribute dalvik_config_prop_type)
(typeattributeset dalvik_config_prop_type (dalvik_config_prop dalvik_dynamic_config_prop ))
(typeattribute tee_service_type)
(typeattributeset tee_service_type (test_pkvm_tee_service guest_ffa_tee_service ))
(typeattribute hal_vm_capabilities)
(expandtypeattribute (hal_vm_capabilities) true)
(typeattribute hal_vm_capabilities_client)
(expandtypeattribute (hal_vm_capabilities_client) true)
(typeattributeset hal_vm_capabilities_client (dumpstate su aisealhostservice_virtualizationmanager compos_verify_virtualizationmanager composd_virtualizationmanager platform_app_all_virtualizationmanager priv_app_all_virtualizationmanager shell_virtualizationmanager su_virtualizationmanager untrusted_app_all_virtualizationmanager virtualizationservice_virtualizationmanager ))
(typeattribute hal_vm_capabilities_server)
(expandtypeattribute (hal_vm_capabilities_server) false)
(typeattribute treble_labeling_violators)
(expandtypeattribute (treble_labeling_violators) false)
(typeattributeset treble_labeling_violators (aidl_lazy_test_server su hidl_lazy_test_server su_virtualizationmanager su_virtmgr_crosvm ))
(typeattribute mapper_sphal_domain)
(expandtypeattribute (mapper_sphal_domain) false)
(typeattribute gpu_sphal_domain)
(expandtypeattribute (gpu_sphal_domain) false)
(typeattributeset gpu_sphal_domain (adbd bluetooth bootanim bufferhubd cameraserver crosvm_vendor dumpstate gpuservice isolated_compute_app mediaserver mediaswcodec mediatranscoding surfaceflinger system_server virtual_camera aisealhostservice_virtmgr_crosvm automotive_display_service compos_verify_virtmgr_crosvm composd_virtmgr_crosvm mediaprovider_app platform_app_all_virtmgr_crosvm priv_app_all_virtmgr_crosvm shell_virtmgr_crosvm su_virtmgr_crosvm untrusted_app_all_virtmgr_crosvm virtualizationservice_virtmgr_crosvm ))
(typeattribute hal_npu_scheduling)
(expandtypeattribute (hal_npu_scheduling) true)
(typeattribute hal_npu_scheduling_client)
(expandtypeattribute (hal_npu_scheduling_client) true)
(typeattributeset hal_npu_scheduling_client (system_server ))
(typeattribute hal_npu_scheduling_server)
(expandtypeattribute (hal_npu_scheduling_server) false)
(typeattribute virtualizationmanager_domain)
(expandtypeattribute (virtualizationmanager_domain) false)
(typeattributeset virtualizationmanager_domain (virtualizationmanager_vendor aisealhostservice_virtualizationmanager compos_verify_virtualizationmanager composd_virtualizationmanager platform_app_all_virtualizationmanager priv_app_all_virtualizationmanager shell_virtualizationmanager su_virtualizationmanager untrusted_app_all_virtualizationmanager virtualizationservice_virtualizationmanager ))
(typeattribute early_virtmgr_domain)
(expandtypeattribute (early_virtmgr_domain) false)
(typeattributeset early_virtmgr_domain (early_virtmgr_vendor ))
(typeattribute crosvm_domain)
(expandtypeattribute (crosvm_domain) false)
(typeattributeset crosvm_domain (crosvm_vendor aisealhostservice_virtmgr_crosvm compos_verify_virtmgr_crosvm composd_virtmgr_crosvm platform_app_all_virtmgr_crosvm priv_app_all_virtmgr_crosvm shell_virtmgr_crosvm su_virtmgr_crosvm untrusted_app_all_virtmgr_crosvm virtualizationservice_virtmgr_crosvm ))
(typeattribute wrapfd_hal_domain)
(expandtypeattribute (wrapfd_hal_domain) false)
(type adbd)
(roletype object_r adbd)
(type adbd_exec)
(roletype object_r adbd_exec)
(type aidl_lazy_test_server)
(roletype object_r aidl_lazy_test_server)
(type aidl_lazy_test_server_exec)
(roletype object_r aidl_lazy_test_server_exec)
(type apexd)
(roletype object_r apexd)
(type apexd_exec)
(roletype object_r apexd_exec)
(type appdomain_tmpfs)
(roletype object_r appdomain_tmpfs)
(type app_zygote)
(roletype object_r app_zygote)
(type app_zygote_tmpfs)
(roletype object_r app_zygote_tmpfs)
(type artd)
(roletype object_r artd)
(type atrace)
(roletype object_r atrace)
(type audioserver)
(roletype object_r audioserver)
(type audioserver_tmpfs)
(roletype object_r audioserver_tmpfs)
(type blkid)
(roletype object_r blkid)
(type blkid_untrusted)
(roletype object_r blkid_untrusted)
(type bluetooth)
(roletype object_r bluetooth)
(type bootanim)
(roletype object_r bootanim)
(type bootanim_exec)
(roletype object_r bootanim_exec)
(type bootstat)
(roletype object_r bootstat)
(type bootstat_exec)
(roletype object_r bootstat_exec)
(type bpfloader)
(roletype object_r bpfloader)
(type bufferhubd)
(roletype object_r bufferhubd)
(type bufferhubd_exec)
(roletype object_r bufferhubd_exec)
(type cameraserver)
(roletype object_r cameraserver)
(type cameraserver_exec)
(roletype object_r cameraserver_exec)
(type cameraserver_tmpfs)
(roletype object_r cameraserver_tmpfs)
(type charger)
(roletype object_r charger)
(type charger_exec)
(roletype object_r charger_exec)
(type charger_vendor)
(roletype object_r charger_vendor)
(type crash_dump)
(roletype object_r crash_dump)
(type crash_dump_exec)
(roletype object_r crash_dump_exec)
(type credstore)
(roletype object_r credstore)
(type credstore_exec)
(roletype object_r credstore_exec)
(type crosvm_vendor)
(roletype object_r crosvm_vendor)
(type device)
(roletype object_r device)
(type ashmem_device)
(roletype object_r ashmem_device)
(type ashmem_libcutils_device)
(roletype object_r ashmem_libcutils_device)
(type audio_device)
(roletype object_r audio_device)
(type binder_device)
(roletype object_r binder_device)
(type hwbinder_device)
(roletype object_r hwbinder_device)
(type vndbinder_device)
(roletype object_r vndbinder_device)
(type block_device)
(roletype object_r block_device)
(type bt_device)
(roletype object_r bt_device)
(type camera_device)
(roletype object_r camera_device)
(type dm_device)
(roletype object_r dm_device)
(type ublk_block_device)
(roletype object_r ublk_block_device)
(type dm_user_device)
(roletype object_r dm_user_device)
(type ublk_control_device)
(roletype object_r ublk_control_device)
(type keychord_device)
(roletype object_r keychord_device)
(type loop_control_device)
(roletype object_r loop_control_device)
(type loop_device)
(roletype object_r loop_device)
(type pmsg_device)
(roletype object_r pmsg_device)
(type radio_device)
(roletype object_r radio_device)
(type ram_device)
(roletype object_r ram_device)
(type rtc_device)
(roletype object_r rtc_device)
(type vd_device)
(roletype object_r vd_device)
(type vold_device)
(roletype object_r vold_device)
(type console_device)
(roletype object_r console_device)
(type fscklogs)
(roletype object_r fscklogs)
(type gpu_device)
(roletype object_r gpu_device)
(type graphics_device)
(roletype object_r graphics_device)
(type hw_random_device)
(roletype object_r hw_random_device)
(type input_device)
(roletype object_r input_device)
(type port_device)
(roletype object_r port_device)
(type lowpan_device)
(roletype object_r lowpan_device)
(type mtp_device)
(roletype object_r mtp_device)
(type nfc_device)
(roletype object_r nfc_device)
(type ptmx_device)
(roletype object_r ptmx_device)
(type kmsg_device)
(roletype object_r kmsg_device)
(type kmsg_debug_device)
(roletype object_r kmsg_debug_device)
(type null_device)
(roletype object_r null_device)
(type random_device)
(roletype object_r random_device)
(type secure_element_device)
(roletype object_r secure_element_device)
(type sensors_device)
(roletype object_r sensors_device)
(type serial_device)
(roletype object_r serial_device)
(type socket_device)
(roletype object_r socket_device)
(type owntty_device)
(roletype object_r owntty_device)
(type tty_device)
(roletype object_r tty_device)
(type video_device)
(roletype object_r video_device)
(type zero_device)
(roletype object_r zero_device)
(type fuse_device)
(roletype object_r fuse_device)
(type iio_device)
(roletype object_r iio_device)
(type ion_device)
(roletype object_r ion_device)
(type dmabuf_heap_device)
(roletype object_r dmabuf_heap_device)
(type dmabuf_system_heap_device)
(roletype object_r dmabuf_system_heap_device)
(type dmabuf_system_secure_heap_device)
(roletype object_r dmabuf_system_secure_heap_device)
(type qtaguid_device)
(roletype object_r qtaguid_device)
(type watchdog_device)
(roletype object_r watchdog_device)
(type uhid_device)
(roletype object_r uhid_device)
(type uio_device)
(roletype object_r uio_device)
(type tun_device)
(roletype object_r tun_device)
(type usbaccessory_device)
(roletype object_r usbaccessory_device)
(type usb_device)
(roletype object_r usb_device)
(type usb_serial_device)
(roletype object_r usb_serial_device)
(type gnss_device)
(roletype object_r gnss_device)
(type properties_device)
(roletype object_r properties_device)
(type properties_serial)
(roletype object_r properties_serial)
(type property_info)
(roletype object_r property_info)
(type hidraw_device)
(roletype object_r hidraw_device)
(type hci_attach_dev)
(roletype object_r hci_attach_dev)
(type rpmsg_device)
(roletype object_r rpmsg_device)
(type root_block_device)
(roletype object_r root_block_device)
(type frp_block_device)
(roletype object_r frp_block_device)
(type system_block_device)
(roletype object_r system_block_device)
(type recovery_block_device)
(roletype object_r recovery_block_device)
(type boot_block_device)
(roletype object_r boot_block_device)
(type dtbo_block_device)
(roletype object_r dtbo_block_device)
(type userdata_block_device)
(roletype object_r userdata_block_device)
(type zoned_block_device)
(roletype object_r zoned_block_device)
(type cache_block_device)
(roletype object_r cache_block_device)
(type swap_block_device)
(roletype object_r swap_block_device)
(type metadata_block_device)
(roletype object_r metadata_block_device)
(type misc_block_device)
(roletype object_r misc_block_device)
(type super_block_device)
(roletype object_r super_block_device)
(type sdcard_block_device)
(roletype object_r sdcard_block_device)
(type userdata_sysdev)
(roletype object_r userdata_sysdev)
(type rootdisk_sysdev)
(roletype object_r rootdisk_sysdev)
(type vfio_device)
(roletype object_r vfio_device)
(type dhcp)
(roletype object_r dhcp)
(type dhcp_exec)
(roletype object_r dhcp_exec)
(type dnsmasq)
(roletype object_r dnsmasq)
(type dnsmasq_exec)
(roletype object_r dnsmasq_exec)
(type drmserver)
(roletype object_r drmserver)
(type drmserver_exec)
(roletype object_r drmserver_exec)
(type drmserver_socket)
(roletype object_r drmserver_socket)
(type dumpstate)
(roletype object_r dumpstate)
(type dumpstate_exec)
(roletype object_r dumpstate_exec)
(type e2fs)
(roletype object_r e2fs)
(type e2fs_exec)
(roletype object_r e2fs_exec)
(type early_virtmgr_vendor)
(roletype object_r early_virtmgr_vendor)
(type early_virtmgr_exec)
(roletype object_r early_virtmgr_exec)
(type ephemeral_app)
(roletype object_r ephemeral_app)
(type evsmanagerd)
(roletype object_r evsmanagerd)
(type extra_free_kbytes)
(roletype object_r extra_free_kbytes)
(type extra_free_kbytes_exec)
(roletype object_r extra_free_kbytes_exec)
(type fastbootd)
(roletype object_r fastbootd)
(type labeledfs)
(roletype object_r labeledfs)
(type pipefs)
(roletype object_r pipefs)
(type sockfs)
(roletype object_r sockfs)
(type rootfs)
(roletype object_r rootfs)
(type proc)
(roletype object_r proc)
(type binderfs)
(roletype object_r binderfs)
(type binderfs_logs)
(roletype object_r binderfs_logs)
(type binderfs_logs_proc)
(roletype object_r binderfs_logs_proc)
(type binderfs_logs_state_hashed)
(roletype object_r binderfs_logs_state_hashed)
(type binderfs_logs_stats)
(roletype object_r binderfs_logs_stats)
(type binderfs_logs_transactions)
(roletype object_r binderfs_logs_transactions)
(type binderfs_logs_transaction_history)
(roletype object_r binderfs_logs_transaction_history)
(type binderfs_features)
(roletype object_r binderfs_features)
(type proc_security)
(roletype object_r proc_security)
(type proc_drop_caches)
(roletype object_r proc_drop_caches)
(type proc_overcommit_memory)
(roletype object_r proc_overcommit_memory)
(type proc_min_free_order_shift)
(roletype object_r proc_min_free_order_shift)
(type proc_kpageflags)
(roletype object_r proc_kpageflags)
(type proc_watermark_boost_factor)
(roletype object_r proc_watermark_boost_factor)
(type proc_percpu_pagelist_high_fraction)
(roletype object_r proc_percpu_pagelist_high_fraction)
(type usermodehelper)
(roletype object_r usermodehelper)
(type sysfs_usermodehelper)
(roletype object_r sysfs_usermodehelper)
(type proc_qtaguid_ctrl)
(roletype object_r proc_qtaguid_ctrl)
(type proc_qtaguid_stat)
(roletype object_r proc_qtaguid_stat)
(type proc_bluetooth_writable)
(roletype object_r proc_bluetooth_writable)
(type proc_abi)
(roletype object_r proc_abi)
(type proc_asound)
(roletype object_r proc_asound)
(type proc_bootconfig)
(roletype object_r proc_bootconfig)
(type proc_bpf)
(roletype object_r proc_bpf)
(type proc_buddyinfo)
(roletype object_r proc_buddyinfo)
(type proc_cgroups)
(roletype object_r proc_cgroups)
(type proc_cmdline)
(roletype object_r proc_cmdline)
(type proc_cpu_alignment)
(roletype object_r proc_cpu_alignment)
(type proc_cpuinfo)
(roletype object_r proc_cpuinfo)
(type proc_dirty)
(roletype object_r proc_dirty)
(type proc_diskstats)
(roletype object_r proc_diskstats)
(type proc_extra_free_kbytes)
(roletype object_r proc_extra_free_kbytes)
(type proc_filesystems)
(roletype object_r proc_filesystems)
(type proc_firmware_config)
(roletype object_r proc_firmware_config)
(type proc_fs_verity)
(roletype object_r proc_fs_verity)
(type proc_hostname)
(roletype object_r proc_hostname)
(type proc_hung_task)
(roletype object_r proc_hung_task)
(type proc_interrupts)
(roletype object_r proc_interrupts)
(type proc_iomem)
(roletype object_r proc_iomem)
(type proc_kallsyms)
(roletype object_r proc_kallsyms)
(type proc_keys)
(roletype object_r proc_keys)
(type proc_kmsg)
(roletype object_r proc_kmsg)
(type proc_loadavg)
(roletype object_r proc_loadavg)
(type proc_locks)
(roletype object_r proc_locks)
(type proc_lowmemorykiller)
(roletype object_r proc_lowmemorykiller)
(type proc_max_map_count)
(roletype object_r proc_max_map_count)
(type proc_meminfo)
(roletype object_r proc_meminfo)
(type proc_misc)
(roletype object_r proc_misc)
(type proc_modules)
(roletype object_r proc_modules)
(type proc_mounts)
(roletype object_r proc_mounts)
(type proc_net)
(roletype object_r proc_net)
(type proc_net_tcp_udp)
(roletype object_r proc_net_tcp_udp)
(type proc_page_cluster)
(roletype object_r proc_page_cluster)
(type proc_pagetypeinfo)
(roletype object_r proc_pagetypeinfo)
(type proc_panic)
(roletype object_r proc_panic)
(type proc_perf)
(roletype object_r proc_perf)
(type proc_pid_max)
(roletype object_r proc_pid_max)
(type proc_pipe_conf)
(roletype object_r proc_pipe_conf)
(type proc_pressure_cpu)
(roletype object_r proc_pressure_cpu)
(type proc_pressure_io)
(roletype object_r proc_pressure_io)
(type proc_pressure_mem)
(roletype object_r proc_pressure_mem)
(type proc_random)
(roletype object_r proc_random)
(type proc_sched)
(roletype object_r proc_sched)
(type proc_slabinfo)
(roletype object_r proc_slabinfo)
(type proc_stat)
(roletype object_r proc_stat)
(type proc_swaps)
(roletype object_r proc_swaps)
(type proc_sysrq)
(roletype object_r proc_sysrq)
(type proc_timer)
(roletype object_r proc_timer)
(type proc_tty_drivers)
(roletype object_r proc_tty_drivers)
(type proc_uid_cputime_showstat)
(roletype object_r proc_uid_cputime_showstat)
(type proc_uid_cputime_removeuid)
(roletype object_r proc_uid_cputime_removeuid)
(type proc_uid_io_stats)
(roletype object_r proc_uid_io_stats)
(type proc_uid_procstat_set)
(roletype object_r proc_uid_procstat_set)
(type proc_uid_time_in_state)
(roletype object_r proc_uid_time_in_state)
(type proc_uid_concurrent_active_time)
(roletype object_r proc_uid_concurrent_active_time)
(type proc_uid_concurrent_policy_time)
(roletype object_r proc_uid_concurrent_policy_time)
(type proc_uid_cpupower)
(roletype object_r proc_uid_cpupower)
(type proc_uptime)
(roletype object_r proc_uptime)
(type proc_version)
(roletype object_r proc_version)
(type proc_vmallocinfo)
(roletype object_r proc_vmallocinfo)
(type proc_vmstat)
(roletype object_r proc_vmstat)
(type proc_watermark_scale_factor)
(roletype object_r proc_watermark_scale_factor)
(type proc_zoneinfo)
(roletype object_r proc_zoneinfo)
(type proc_vendor_sched)
(roletype object_r proc_vendor_sched)
(type selinuxfs)
(roletype object_r selinuxfs)
(type fusectlfs)
(roletype object_r fusectlfs)
(type cgroup)
(roletype object_r cgroup)
(type cgroup_v2)
(roletype object_r cgroup_v2)
(type sysfs)
(roletype object_r sysfs)
(type sysfs_android_usb)
(roletype object_r sysfs_android_usb)
(type sysfs_uio)
(roletype object_r sysfs_uio)
(type sysfs_batteryinfo)
(roletype object_r sysfs_batteryinfo)
(type sysfs_block)
(roletype object_r sysfs_block)
(type sysfs_bluetooth_writable)
(roletype object_r sysfs_bluetooth_writable)
(type sysfs_cma)
(roletype object_r sysfs_cma)
(type sysfs_devfreq_cur)
(roletype object_r sysfs_devfreq_cur)
(type sysfs_devfreq_dir)
(roletype object_r sysfs_devfreq_dir)
(type sysfs_devices_block)
(roletype object_r sysfs_devices_block)
(type sysfs_dm)
(roletype object_r sysfs_dm)
(type sysfs_dm_verity)
(roletype object_r sysfs_dm_verity)
(type sysfs_dma_heap)
(roletype object_r sysfs_dma_heap)
(type sysfs_dmabuf_stats)
(roletype object_r sysfs_dmabuf_stats)
(type sysfs_dt_firmware_android)
(roletype object_r sysfs_dt_firmware_android)
(type sysfs_extcon)
(roletype object_r sysfs_extcon)
(type sysfs_ion)
(roletype object_r sysfs_ion)
(type sysfs_ipv4)
(roletype object_r sysfs_ipv4)
(type sysfs_kernel_notes)
(roletype object_r sysfs_kernel_notes)
(type sysfs_leds)
(roletype object_r sysfs_leds)
(type sysfs_loop)
(roletype object_r sysfs_loop)
(type sysfs_gpu)
(roletype object_r sysfs_gpu)
(type sysfs_hwrandom)
(roletype object_r sysfs_hwrandom)
(type sysfs_nfc_power_writable)
(roletype object_r sysfs_nfc_power_writable)
(type sysfs_wake_lock)
(roletype object_r sysfs_wake_lock)
(type sysfs_net)
(roletype object_r sysfs_net)
(type sysfs_power)
(roletype object_r sysfs_power)
(type sysfs_rtc)
(roletype object_r sysfs_rtc)
(type sysfs_mem_sleep)
(roletype object_r sysfs_mem_sleep)
(type sysfs_suspend_params)
(roletype object_r sysfs_suspend_params)
(type sysfs_suspend_stats)
(roletype object_r sysfs_suspend_stats)
(type sysfs_switch)
(roletype object_r sysfs_switch)
(type sysfs_sync_on_suspend)
(roletype object_r sysfs_sync_on_suspend)
(type sysfs_transparent_hugepage)
(roletype object_r sysfs_transparent_hugepage)
(type sysfs_lru_gen_enabled)
(roletype object_r sysfs_lru_gen_enabled)
(type sysfs_usb)
(roletype object_r sysfs_usb)
(type sysfs_wakeup)
(roletype object_r sysfs_wakeup)
(type sysfs_wakeup_reasons)
(roletype object_r sysfs_wakeup_reasons)
(type sysfs_fs_ext4_features)
(roletype object_r sysfs_fs_ext4_features)
(type sysfs_fs_f2fs)
(roletype object_r sysfs_fs_f2fs)
(type sysfs_fs_fuse_bpf)
(roletype object_r sysfs_fs_fuse_bpf)
(type sysfs_fs_fuse_features)
(roletype object_r sysfs_fs_fuse_features)
(type sysfs_fs_incfs_features)
(roletype object_r sysfs_fs_incfs_features)
(type sysfs_fs_incfs_metrics)
(roletype object_r sysfs_fs_incfs_metrics)
(type sysfs_vendor_sched)
(roletype object_r sysfs_vendor_sched)
(type fs_bpf)
(roletype object_r fs_bpf)
(type fs_bpf_tethering)
(roletype object_r fs_bpf_tethering)
(type fs_bpf_vendor)
(roletype object_r fs_bpf_vendor)
(type configfs)
(roletype object_r configfs)
(type sysfs_devices_cs_etm)
(roletype object_r sysfs_devices_cs_etm)
(type sysfs_devices_system_cpu)
(roletype object_r sysfs_devices_system_cpu)
(type sysfs_lowmemorykiller)
(roletype object_r sysfs_lowmemorykiller)
(type sysfs_wlan_fwpath)
(roletype object_r sysfs_wlan_fwpath)
(type sysfs_vibrator)
(roletype object_r sysfs_vibrator)
(type sysfs_uhid)
(roletype object_r sysfs_uhid)
(type sysfs_thermal)
(roletype object_r sysfs_thermal)
(type sysfs_zram)
(roletype object_r sysfs_zram)
(type sysfs_zram_uevent)
(roletype object_r sysfs_zram_uevent)
(type inotify)
(roletype object_r inotify)
(type devpts)
(roletype object_r devpts)
(type tmpfs)
(roletype object_r tmpfs)
(type shm)
(roletype object_r shm)
(type mqueue)
(roletype object_r mqueue)
(type fuse)
(roletype object_r fuse)
(type fuseblk)
(roletype object_r fuseblk)
(type sdcardfs)
(roletype object_r sdcardfs)
(type vfat)
(roletype object_r vfat)
(type exfat)
(roletype object_r exfat)
(type debugfs)
(roletype object_r debugfs)
(type debugfs_kprobes)
(roletype object_r debugfs_kprobes)
(type debugfs_mmc)
(roletype object_r debugfs_mmc)
(type debugfs_mm_events_tracing)
(roletype object_r debugfs_mm_events_tracing)
(type debugfs_trace_marker)
(roletype object_r debugfs_trace_marker)
(type debugfs_tracing)
(roletype object_r debugfs_tracing)
(type debugfs_tracing_debug)
(roletype object_r debugfs_tracing_debug)
(type debugfs_tracing_instances)
(roletype object_r debugfs_tracing_instances)
(type debugfs_tracing_printk_formats)
(roletype object_r debugfs_tracing_printk_formats)
(type debugfs_wakeup_sources)
(roletype object_r debugfs_wakeup_sources)
(type debugfs_wifi_tracing)
(roletype object_r debugfs_wifi_tracing)
(type securityfs)
(roletype object_r securityfs)
(type pstorefs)
(roletype object_r pstorefs)
(type functionfs)
(roletype object_r functionfs)
(type oemfs)
(roletype object_r oemfs)
(type usbfs)
(roletype object_r usbfs)
(type binfmt_miscfs)
(roletype object_r binfmt_miscfs)
(type app_fusefs)
(roletype object_r app_fusefs)
(type unlabeled)
(roletype object_r unlabeled)
(type system_file)
(roletype object_r system_file)
(type system_asan_options_file)
(roletype object_r system_asan_options_file)
(type system_event_log_tags_file)
(roletype object_r system_event_log_tags_file)
(type system_lib_file)
(roletype object_r system_lib_file)
(type system_bootstrap_lib_file)
(roletype object_r system_bootstrap_lib_file)
(type system_group_file)
(roletype object_r system_group_file)
(type system_linker_exec)
(roletype object_r system_linker_exec)
(type system_linker_config_file)
(roletype object_r system_linker_config_file)
(type system_passwd_file)
(roletype object_r system_passwd_file)
(type system_seccomp_policy_file)
(roletype object_r system_seccomp_policy_file)
(type system_security_cacerts_file)
(roletype object_r system_security_cacerts_file)
(type tcpdump_exec)
(roletype object_r tcpdump_exec)
(type system_zoneinfo_file)
(roletype object_r system_zoneinfo_file)
(type cgroup_desc_file)
(roletype object_r cgroup_desc_file)
(type vendor_cgroup_desc_file)
(roletype object_r vendor_cgroup_desc_file)
(type task_profiles_file)
(roletype object_r task_profiles_file)
(type vendor_task_profiles_file)
(roletype object_r vendor_task_profiles_file)
(type vendor_dma_heap_config_file)
(roletype object_r vendor_dma_heap_config_file)
(type art_apex_dir)
(roletype object_r art_apex_dir)
(type linkerconfig_file)
(roletype object_r linkerconfig_file)
(type incremental_control_file)
(roletype object_r incremental_control_file)
(type bootanim_oem_file)
(roletype object_r bootanim_oem_file)
(type vendor_hal_file)
(roletype object_r vendor_hal_file)
(type vendor_file)
(roletype object_r vendor_file)
(type vendor_app_file)
(roletype object_r vendor_app_file)
(type vendor_configs_file)
(roletype object_r vendor_configs_file)
(type same_process_hal_file)
(roletype object_r same_process_hal_file)
(type vndk_sp_file)
(roletype object_r vndk_sp_file)
(type vendor_framework_file)
(roletype object_r vendor_framework_file)
(type vendor_overlay_file)
(roletype object_r vendor_overlay_file)
(type vendor_public_lib_file)
(roletype object_r vendor_public_lib_file)
(type vendor_public_framework_file)
(roletype object_r vendor_public_framework_file)
(type vendor_microdroid_file)
(roletype object_r vendor_microdroid_file)
(type vendor_boot_ota_file)
(roletype object_r vendor_boot_ota_file)
(type vendor_keylayout_file)
(roletype object_r vendor_keylayout_file)
(type vendor_keychars_file)
(roletype object_r vendor_keychars_file)
(type vendor_idc_file)
(roletype object_r vendor_idc_file)
(type vendor_uuid_mapping_config_file)
(roletype object_r vendor_uuid_mapping_config_file)
(type vendor_vm_file)
(roletype object_r vendor_vm_file)
(type vendor_vm_data_file)
(roletype object_r vendor_vm_data_file)
(type metadata_file)
(roletype object_r metadata_file)
(type vold_metadata_file)
(roletype object_r vold_metadata_file)
(type gsi_metadata_file)
(roletype object_r gsi_metadata_file)
(type gsi_public_metadata_file)
(roletype object_r gsi_public_metadata_file)
(type password_slot_metadata_file)
(roletype object_r password_slot_metadata_file)
(type apex_metadata_file)
(roletype object_r apex_metadata_file)
(type ota_metadata_file)
(roletype object_r ota_metadata_file)
(type metadata_bootstat_file)
(roletype object_r metadata_bootstat_file)
(type userspace_reboot_metadata_file)
(roletype object_r userspace_reboot_metadata_file)
(type staged_install_file)
(roletype object_r staged_install_file)
(type watchdog_metadata_file)
(roletype object_r watchdog_metadata_file)
(type repair_mode_metadata_file)
(roletype object_r repair_mode_metadata_file)
(type aconfig_storage_metadata_file)
(roletype object_r aconfig_storage_metadata_file)
(type aconfig_storage_flags_metadata_file)
(roletype object_r aconfig_storage_flags_metadata_file)
(type dev_cpu_variant)
(roletype object_r dev_cpu_variant)
(type runtime_event_log_tags_file)
(roletype object_r runtime_event_log_tags_file)
(type logcat_exec)
(roletype object_r logcat_exec)
(type cgroup_rc_file)
(roletype object_r cgroup_rc_file)
(type coredump_file)
(roletype object_r coredump_file)
(type system_data_root_file)
(roletype object_r system_data_root_file)
(type system_data_file)
(roletype object_r system_data_file)
(type system_userdir_file)
(roletype object_r system_userdir_file)
(type packages_list_file)
(roletype object_r packages_list_file)
(type game_mode_intervention_list_file)
(roletype object_r game_mode_intervention_list_file)
(type vendor_data_file)
(roletype object_r vendor_data_file)
(type vendor_userdir_file)
(roletype object_r vendor_userdir_file)
(type unencrypted_data_file)
(roletype object_r unencrypted_data_file)
(type install_data_file)
(roletype object_r install_data_file)
(type drm_data_file)
(roletype object_r drm_data_file)
(type adb_data_file)
(roletype object_r adb_data_file)
(type anr_data_file)
(roletype object_r anr_data_file)
(type tombstone_data_file)
(roletype object_r tombstone_data_file)
(type tombstone_wifi_data_file)
(roletype object_r tombstone_wifi_data_file)
(type apex_data_file)
(roletype object_r apex_data_file)
(type apk_data_file)
(roletype object_r apk_data_file)
(type apk_tmp_file)
(roletype object_r apk_tmp_file)
(type apk_private_data_file)
(roletype object_r apk_private_data_file)
(type apk_private_tmp_file)
(roletype object_r apk_private_tmp_file)
(type dalvikcache_data_file)
(roletype object_r dalvikcache_data_file)
(type ota_package_file)
(roletype object_r ota_package_file)
(type user_profile_root_file)
(roletype object_r user_profile_root_file)
(type user_profile_data_file)
(roletype object_r user_profile_data_file)
(type profman_dump_data_file)
(roletype object_r profman_dump_data_file)
(type prereboot_data_file)
(roletype object_r prereboot_data_file)
(type resourcecache_data_file)
(roletype object_r resourcecache_data_file)
(type shell_data_file)
(roletype object_r shell_data_file)
(type property_data_file)
(roletype object_r property_data_file)
(type bootchart_data_file)
(roletype object_r bootchart_data_file)
(type dropbox_data_file)
(roletype object_r dropbox_data_file)
(type heapdump_data_file)
(roletype object_r heapdump_data_file)
(type nativetest_data_file)
(roletype object_r nativetest_data_file)
(type shell_test_data_file)
(roletype object_r shell_test_data_file)
(type ringtone_file)
(roletype object_r ringtone_file)
(type preloads_data_file)
(roletype object_r preloads_data_file)
(type preloads_media_file)
(roletype object_r preloads_media_file)
(type dhcp_data_file)
(roletype object_r dhcp_data_file)
(type server_configurable_flags_data_file)
(roletype object_r server_configurable_flags_data_file)
(type staging_data_file)
(roletype object_r staging_data_file)
(type vendor_apex_file)
(roletype object_r vendor_apex_file)
(type vendor_apex_metadata_file)
(roletype object_r vendor_apex_metadata_file)
(type shutdown_checkpoints_system_data_file)
(roletype object_r shutdown_checkpoints_system_data_file)
(type mnt_media_rw_file)
(roletype object_r mnt_media_rw_file)
(type mnt_user_file)
(roletype object_r mnt_user_file)
(type mnt_pass_through_file)
(roletype object_r mnt_pass_through_file)
(type mnt_expand_file)
(roletype object_r mnt_expand_file)
(type mnt_sdcard_file)
(roletype object_r mnt_sdcard_file)
(type storage_file)
(roletype object_r storage_file)
(type mnt_media_rw_stub_file)
(roletype object_r mnt_media_rw_stub_file)
(type storage_stub_file)
(roletype object_r storage_stub_file)
(type mnt_vendor_file)
(roletype object_r mnt_vendor_file)
(type mnt_product_file)
(roletype object_r mnt_product_file)
(type apex_mnt_dir)
(roletype object_r apex_mnt_dir)
(type apex_info_file)
(roletype object_r apex_info_file)
(type postinstall_mnt_dir)
(roletype object_r postinstall_mnt_dir)
(type postinstall_file)
(roletype object_r postinstall_file)
(type mirror_data_file)
(roletype object_r mirror_data_file)
(type adb_keys_file)
(roletype object_r adb_keys_file)
(type apex_system_server_data_file)
(roletype object_r apex_system_server_data_file)
(type apex_module_data_file)
(roletype object_r apex_module_data_file)
(type apex_ota_reserved_file)
(roletype object_r apex_ota_reserved_file)
(type apex_rollback_data_file)
(roletype object_r apex_rollback_data_file)
(type appcompat_data_file)
(roletype object_r appcompat_data_file)
(type audio_data_file)
(roletype object_r audio_data_file)
(type audioserver_data_file)
(roletype object_r audioserver_data_file)
(type bluetooth_data_file)
(roletype object_r bluetooth_data_file)
(type bluetooth_logs_data_file)
(roletype object_r bluetooth_logs_data_file)
(type bootstat_data_file)
(roletype object_r bootstat_data_file)
(type boottrace_data_file)
(roletype object_r boottrace_data_file)
(type camera_data_file)
(roletype object_r camera_data_file)
(type credstore_data_file)
(roletype object_r credstore_data_file)
(type gatekeeper_data_file)
(roletype object_r gatekeeper_data_file)
(type incident_data_file)
(roletype object_r incident_data_file)
(type keychain_data_file)
(roletype object_r keychain_data_file)
(type keystore_data_file)
(roletype object_r keystore_data_file)
(type media_data_file)
(roletype object_r media_data_file)
(type media_rw_data_file)
(roletype object_r media_rw_data_file)
(type media_userdir_file)
(roletype object_r media_userdir_file)
(type misc_user_data_file)
(roletype object_r misc_user_data_file)
(type net_data_file)
(roletype object_r net_data_file)
(type network_watchlist_data_file)
(roletype object_r network_watchlist_data_file)
(type nfc_data_file)
(roletype object_r nfc_data_file)
(type nfc_logs_data_file)
(roletype object_r nfc_logs_data_file)
(type radio_data_file)
(roletype object_r radio_data_file)
(type recovery_data_file)
(roletype object_r recovery_data_file)
(type shared_relro_file)
(roletype object_r shared_relro_file)
(type snapshotctl_log_data_file)
(roletype object_r snapshotctl_log_data_file)
(type stats_config_data_file)
(roletype object_r stats_config_data_file)
(type stats_data_file)
(roletype object_r stats_data_file)
(type systemkeys_data_file)
(roletype object_r systemkeys_data_file)
(type textclassifier_data_file)
(roletype object_r textclassifier_data_file)
(type trace_data_file)
(roletype object_r trace_data_file)
(type vpn_data_file)
(roletype object_r vpn_data_file)
(type wifi_data_file)
(roletype object_r wifi_data_file)
(type vold_data_file)
(roletype object_r vold_data_file)
(type tee_data_file)
(roletype object_r tee_data_file)
(type update_engine_data_file)
(roletype object_r update_engine_data_file)
(type update_engine_log_data_file)
(roletype object_r update_engine_log_data_file)
(type snapuserd_log_data_file)
(roletype object_r snapuserd_log_data_file)
(type method_trace_data_file)
(roletype object_r method_trace_data_file)
(type gsi_data_file)
(roletype object_r gsi_data_file)
(type radio_core_data_file)
(roletype object_r radio_core_data_file)
(type app_data_file)
(roletype object_r app_data_file)
(type privapp_data_file)
(roletype object_r privapp_data_file)
(type system_app_data_file)
(roletype object_r system_app_data_file)
(type cache_file)
(roletype object_r cache_file)
(type overlayfs_file)
(roletype object_r overlayfs_file)
(type cache_backup_file)
(roletype object_r cache_backup_file)
(type cache_private_backup_file)
(roletype object_r cache_private_backup_file)
(type cache_recovery_file)
(roletype object_r cache_recovery_file)
(type efs_file)
(roletype object_r efs_file)
(type wallpaper_file)
(roletype object_r wallpaper_file)
(type shortcut_manager_icons)
(roletype object_r shortcut_manager_icons)
(type icon_file)
(roletype object_r icon_file)
(type asec_apk_file)
(roletype object_r asec_apk_file)
(type asec_public_file)
(roletype object_r asec_public_file)
(type asec_image_file)
(roletype object_r asec_image_file)
(type backup_data_file)
(roletype object_r backup_data_file)
(type bluetooth_efs_file)
(roletype object_r bluetooth_efs_file)
(type fingerprintd_data_file)
(roletype object_r fingerprintd_data_file)
(type fingerprint_vendor_data_file)
(roletype object_r fingerprint_vendor_data_file)
(type app_fuse_file)
(roletype object_r app_fuse_file)
(type face_vendor_data_file)
(roletype object_r face_vendor_data_file)
(type iris_vendor_data_file)
(roletype object_r iris_vendor_data_file)
(type adbd_socket)
(roletype object_r adbd_socket)
(type bluetooth_socket)
(roletype object_r bluetooth_socket)
(type dnsproxyd_socket)
(roletype object_r dnsproxyd_socket)
(type dumpstate_socket)
(roletype object_r dumpstate_socket)
(type fwmarkd_socket)
(roletype object_r fwmarkd_socket)
(type lmkd_socket)
(roletype object_r lmkd_socket)
(type logd_socket)
(roletype object_r logd_socket)
(type logdr_socket)
(roletype object_r logdr_socket)
(type logdw_socket)
(roletype object_r logdw_socket)
(type mdns_socket)
(roletype object_r mdns_socket)
(type mdnsd_socket)
(roletype object_r mdnsd_socket)
(type misc_logd_file)
(roletype object_r misc_logd_file)
(type mtpd_socket)
(roletype object_r mtpd_socket)
(type ot_daemon_socket)
(roletype object_r ot_daemon_socket)
(type property_socket)
(roletype object_r property_socket)
(type racoon_socket)
(roletype object_r racoon_socket)
(type recovery_socket)
(roletype object_r recovery_socket)
(type rild_socket)
(roletype object_r rild_socket)
(type rild_debug_socket)
(roletype object_r rild_debug_socket)
(type snapuserd_socket)
(roletype object_r snapuserd_socket)
(type snapuserd_proxy_socket)
(roletype object_r snapuserd_proxy_socket)
(type statsdw_socket)
(roletype object_r statsdw_socket)
(type system_wpa_socket)
(roletype object_r system_wpa_socket)
(type system_ndebug_socket)
(roletype object_r system_ndebug_socket)
(type system_unsolzygote_socket)
(roletype object_r system_unsolzygote_socket)
(type tombstoned_crash_socket)
(roletype object_r tombstoned_crash_socket)
(type tombstoned_java_trace_socket)
(roletype object_r tombstoned_java_trace_socket)
(type tombstoned_intercept_socket)
(roletype object_r tombstoned_intercept_socket)
(type traced_consumer_socket)
(roletype object_r traced_consumer_socket)
(type traced_perf_socket)
(roletype object_r traced_perf_socket)
(type traced_producer_socket)
(roletype object_r traced_producer_socket)
(type uncrypt_socket)
(roletype object_r uncrypt_socket)
(type wpa_socket)
(roletype object_r wpa_socket)
(type zygote_socket)
(roletype object_r zygote_socket)
(type heapprofd_socket)
(roletype object_r heapprofd_socket)
(type gps_control)
(roletype object_r gps_control)
(type pdx_display_dir)
(roletype object_r pdx_display_dir)
(type pdx_performance_dir)
(roletype object_r pdx_performance_dir)
(type pdx_bufferhub_dir)
(roletype object_r pdx_bufferhub_dir)
(type pdx_display_client_endpoint_socket)
(roletype object_r pdx_display_client_endpoint_socket)
(type pdx_display_client_channel_socket)
(roletype object_r pdx_display_client_channel_socket)
(type pdx_display_manager_endpoint_socket)
(roletype object_r pdx_display_manager_endpoint_socket)
(type pdx_display_manager_channel_socket)
(roletype object_r pdx_display_manager_channel_socket)
(type pdx_display_screenshot_endpoint_socket)
(roletype object_r pdx_display_screenshot_endpoint_socket)
(type pdx_display_screenshot_channel_socket)
(roletype object_r pdx_display_screenshot_channel_socket)
(type pdx_display_vsync_endpoint_socket)
(roletype object_r pdx_display_vsync_endpoint_socket)
(type pdx_display_vsync_channel_socket)
(roletype object_r pdx_display_vsync_channel_socket)
(type pdx_performance_client_endpoint_socket)
(roletype object_r pdx_performance_client_endpoint_socket)
(type pdx_performance_client_channel_socket)
(roletype object_r pdx_performance_client_channel_socket)
(type pdx_bufferhub_client_endpoint_socket)
(roletype object_r pdx_bufferhub_client_endpoint_socket)
(type pdx_bufferhub_client_channel_socket)
(roletype object_r pdx_bufferhub_client_channel_socket)
(type file_contexts_file)
(roletype object_r file_contexts_file)
(type mac_perms_file)
(roletype object_r mac_perms_file)
(type property_contexts_file)
(roletype object_r property_contexts_file)
(type seapp_contexts_file)
(roletype object_r seapp_contexts_file)
(type sepolicy_file)
(roletype object_r sepolicy_file)
(type service_contexts_file)
(roletype object_r service_contexts_file)
(type keystore2_key_contexts_file)
(roletype object_r keystore2_key_contexts_file)
(type vendor_service_contexts_file)
(roletype object_r vendor_service_contexts_file)
(type hwservice_contexts_file)
(roletype object_r hwservice_contexts_file)
(type vndservice_contexts_file)
(roletype object_r vndservice_contexts_file)
(type debugfs_bootreceiver_tracing)
(roletype object_r debugfs_bootreceiver_tracing)
(type vendor_kernel_modules)
(roletype object_r vendor_kernel_modules)
(type system_dlkm_file)
(roletype object_r system_dlkm_file)
(type audiohal_data_file)
(roletype object_r audiohal_data_file)
(type sysfs_udc)
(roletype object_r sysfs_udc)
(type tee_service_contexts_file)
(roletype object_r tee_service_contexts_file)
(type virtualizationservice_data_file)
(roletype object_r virtualizationservice_data_file)
(type sysfs_thunderbolt)
(roletype object_r sysfs_thunderbolt)
(type sysfs_typec)
(roletype object_r sysfs_typec)
(type sysfs_usb_pd)
(roletype object_r sysfs_usb_pd)
(type sysfs_usbcore)
(roletype object_r sysfs_usbcore)
(type wifi_vendor_user_data_file)
(roletype object_r wifi_vendor_user_data_file)
(type wpa_user_data_file)
(roletype object_r wpa_user_data_file)
(type fingerprintd)
(roletype object_r fingerprintd)
(type fingerprintd_exec)
(roletype object_r fingerprintd_exec)
(type flags_health_check)
(roletype object_r flags_health_check)
(type flags_health_check_exec)
(roletype object_r flags_health_check_exec)
(type fsck)
(roletype object_r fsck)
(type fsck_exec)
(roletype object_r fsck_exec)
(type fsck_untrusted)
(roletype object_r fsck_untrusted)
(type gatekeeperd)
(roletype object_r gatekeeperd)
(type gatekeeperd_exec)
(roletype object_r gatekeeperd_exec)
(type gmscore_app)
(roletype object_r gmscore_app)
(type gpuservice)
(roletype object_r gpuservice)
(type hal_graphics_composer_server_tmpfs)
(roletype object_r hal_graphics_composer_server_tmpfs)
(typeattribute hal_graphics_composer_client_tmpfs)
(expandtypeattribute (hal_graphics_composer_client_tmpfs) true)
(typeattributeset hal_graphics_composer_client_tmpfs (surfaceflinger_tmpfs ))
(type healthd)
(roletype object_r healthd)
(type heapprofd)
(roletype object_r heapprofd)
(type default_android_hwservice)
(roletype object_r default_android_hwservice)
(type fwk_camera_hwservice)
(roletype object_r fwk_camera_hwservice)
(type fwk_display_hwservice)
(roletype object_r fwk_display_hwservice)
(type fwk_scheduler_hwservice)
(roletype object_r fwk_scheduler_hwservice)
(type fwk_sensor_hwservice)
(roletype object_r fwk_sensor_hwservice)
(type fwk_stats_hwservice)
(roletype object_r fwk_stats_hwservice)
(type fwk_automotive_display_hwservice)
(roletype object_r fwk_automotive_display_hwservice)
(type hal_atrace_hwservice)
(roletype object_r hal_atrace_hwservice)
(type hal_audio_hwservice)
(roletype object_r hal_audio_hwservice)
(type hal_audiocontrol_hwservice)
(roletype object_r hal_audiocontrol_hwservice)
(type hal_authsecret_hwservice)
(roletype object_r hal_authsecret_hwservice)
(type hal_bluetooth_hwservice)
(roletype object_r hal_bluetooth_hwservice)
(type hal_bootctl_hwservice)
(roletype object_r hal_bootctl_hwservice)
(type hal_broadcastradio_hwservice)
(roletype object_r hal_broadcastradio_hwservice)
(type hal_camera_hwservice)
(roletype object_r hal_camera_hwservice)
(type hal_can_bus_hwservice)
(roletype object_r hal_can_bus_hwservice)
(type hal_can_controller_hwservice)
(roletype object_r hal_can_controller_hwservice)
(type hal_confirmationui_hwservice)
(roletype object_r hal_confirmationui_hwservice)
(type hal_contexthub_hwservice)
(roletype object_r hal_contexthub_hwservice)
(type hal_dumpstate_hwservice)
(roletype object_r hal_dumpstate_hwservice)
(type hal_evs_hwservice)
(roletype object_r hal_evs_hwservice)
(type hal_face_hwservice)
(roletype object_r hal_face_hwservice)
(type hal_fingerprint_hwservice)
(roletype object_r hal_fingerprint_hwservice)
(type hal_gatekeeper_hwservice)
(roletype object_r hal_gatekeeper_hwservice)
(type hal_gnss_hwservice)
(roletype object_r hal_gnss_hwservice)
(type hal_graphics_composer_hwservice)
(roletype object_r hal_graphics_composer_hwservice)
(type hal_health_hwservice)
(roletype object_r hal_health_hwservice)
(type hal_health_storage_hwservice)
(roletype object_r hal_health_storage_hwservice)
(type hal_input_classifier_hwservice)
(roletype object_r hal_input_classifier_hwservice)
(type hal_ir_hwservice)
(roletype object_r hal_ir_hwservice)
(type hal_keymaster_hwservice)
(roletype object_r hal_keymaster_hwservice)
(type hal_light_hwservice)
(roletype object_r hal_light_hwservice)
(type hal_lowpan_hwservice)
(roletype object_r hal_lowpan_hwservice)
(type hal_memtrack_hwservice)
(roletype object_r hal_memtrack_hwservice)
(type hal_nfc_hwservice)
(roletype object_r hal_nfc_hwservice)
(type hal_oemlock_hwservice)
(roletype object_r hal_oemlock_hwservice)
(type hal_power_hwservice)
(roletype object_r hal_power_hwservice)
(type hal_power_stats_hwservice)
(roletype object_r hal_power_stats_hwservice)
(type hal_secure_element_hwservice)
(roletype object_r hal_secure_element_hwservice)
(type hal_sensors_hwservice)
(roletype object_r hal_sensors_hwservice)
(type hal_telephony_hwservice)
(roletype object_r hal_telephony_hwservice)
(type hal_tetheroffload_hwservice)
(roletype object_r hal_tetheroffload_hwservice)
(type hal_thermal_hwservice)
(roletype object_r hal_thermal_hwservice)
(type hal_tv_cec_hwservice)
(roletype object_r hal_tv_cec_hwservice)
(type hal_tv_input_hwservice)
(roletype object_r hal_tv_input_hwservice)
(type hal_tv_tuner_hwservice)
(roletype object_r hal_tv_tuner_hwservice)
(type hal_usb_gadget_hwservice)
(roletype object_r hal_usb_gadget_hwservice)
(type hal_usb_hwservice)
(roletype object_r hal_usb_hwservice)
(type hal_vehicle_hwservice)
(roletype object_r hal_vehicle_hwservice)
(type hal_vibrator_hwservice)
(roletype object_r hal_vibrator_hwservice)
(type hal_vr_hwservice)
(roletype object_r hal_vr_hwservice)
(type hal_weaver_hwservice)
(roletype object_r hal_weaver_hwservice)
(type hal_wifi_hostapd_hwservice)
(roletype object_r hal_wifi_hostapd_hwservice)
(type hal_wifi_hwservice)
(roletype object_r hal_wifi_hwservice)
(type hal_wifi_supplicant_hwservice)
(roletype object_r hal_wifi_supplicant_hwservice)
(type system_net_netd_hwservice)
(roletype object_r system_net_netd_hwservice)
(type system_suspend_hwservice)
(roletype object_r system_suspend_hwservice)
(type system_wifi_keystore_hwservice)
(roletype object_r system_wifi_keystore_hwservice)
(type fwk_bufferhub_hwservice)
(roletype object_r fwk_bufferhub_hwservice)
(type hal_cas_hwservice)
(roletype object_r hal_cas_hwservice)
(type hal_codec2_hwservice)
(roletype object_r hal_codec2_hwservice)
(type hal_configstore_ISurfaceFlingerConfigs)
(roletype object_r hal_configstore_ISurfaceFlingerConfigs)
(type hal_drm_hwservice)
(roletype object_r hal_drm_hwservice)
(type hal_graphics_allocator_hwservice)
(roletype object_r hal_graphics_allocator_hwservice)
(type hal_graphics_mapper_hwservice)
(roletype object_r hal_graphics_mapper_hwservice)
(type hal_neuralnetworks_hwservice)
(roletype object_r hal_neuralnetworks_hwservice)
(type hal_omx_hwservice)
(roletype object_r hal_omx_hwservice)
(type hal_renderscript_hwservice)
(roletype object_r hal_renderscript_hwservice)
(type hidl_allocator_hwservice)
(roletype object_r hidl_allocator_hwservice)
(type hidl_base_hwservice)
(roletype object_r hidl_base_hwservice)
(type hidl_manager_hwservice)
(roletype object_r hidl_manager_hwservice)
(type hidl_memory_hwservice)
(roletype object_r hidl_memory_hwservice)
(type hidl_token_hwservice)
(roletype object_r hidl_token_hwservice)
(type hwservicemanager)
(roletype object_r hwservicemanager)
(type hwservicemanager_exec)
(roletype object_r hwservicemanager_exec)
(type idmap)
(roletype object_r idmap)
(type idmap_exec)
(roletype object_r idmap_exec)
(type incident)
(roletype object_r incident)
(type incident_helper)
(roletype object_r incident_helper)
(type incidentd)
(roletype object_r incidentd)
(type init)
(roletype object_r init)
(type init_exec)
(roletype object_r init_exec)
(type init_tmpfs)
(roletype object_r init_tmpfs)
(type init_dev_config)
(roletype object_r init_dev_config)
(type init_dev_config_exec)
(roletype object_r init_dev_config_exec)
(type inputflinger)
(roletype object_r inputflinger)
(type inputflinger_exec)
(roletype object_r inputflinger_exec)
(type installd)
(roletype object_r installd)
(type installd_exec)
(roletype object_r installd_exec)
(type isolated_app)
(roletype object_r isolated_app)
(type isolated_compute_app)
(roletype object_r isolated_compute_app)
(type kernel)
(roletype object_r kernel)
(type keystore)
(roletype object_r keystore)
(type keystore_exec)
(roletype object_r keystore_exec)
(type wifi_key)
(roletype object_r wifi_key)
(type llkd)
(roletype object_r llkd)
(type llkd_exec)
(roletype object_r llkd_exec)
(type lmkd)
(roletype object_r lmkd)
(type lmkd_exec)
(roletype object_r lmkd_exec)
(type logd)
(roletype object_r logd)
(type logd_exec)
(roletype object_r logd_exec)
(type logpersist)
(roletype object_r logpersist)
(type mdnsd)
(roletype object_r mdnsd)
(type mediadrmserver)
(roletype object_r mediadrmserver)
(type mediadrmserver_exec)
(roletype object_r mediadrmserver_exec)
(type mediaextractor)
(roletype object_r mediaextractor)
(type mediaextractor_exec)
(roletype object_r mediaextractor_exec)
(type mediaextractor_tmpfs)
(roletype object_r mediaextractor_tmpfs)
(type mediametrics)
(roletype object_r mediametrics)
(type mediametrics_exec)
(roletype object_r mediametrics_exec)
(type mediaprovider)
(roletype object_r mediaprovider)
(type mediaserver)
(roletype object_r mediaserver)
(type mediaserver_exec)
(roletype object_r mediaserver_exec)
(type mediaserver_tmpfs)
(roletype object_r mediaserver_tmpfs)
(type mediaswcodec)
(roletype object_r mediaswcodec)
(type mediaswcodec_exec)
(roletype object_r mediaswcodec_exec)
(type mediatranscoding)
(roletype object_r mediatranscoding)
(type mmd_setup)
(roletype object_r mmd_setup)
(type modprobe)
(roletype object_r modprobe)
(type mtp)
(roletype object_r mtp)
(type node)
(roletype object_r node)
(type netif)
(roletype object_r netif)
(type port)
(roletype object_r port)
(type netd)
(roletype object_r netd)
(type netd_exec)
(roletype object_r netd_exec)
(type netutils_wrapper)
(roletype object_r netutils_wrapper)
(type netutils_wrapper_exec)
(roletype object_r netutils_wrapper_exec)
(type network_stack)
(roletype object_r network_stack)
(type nfc)
(roletype object_r nfc)
(type omapi)
(roletype object_r omapi)
(type perfetto)
(roletype object_r perfetto)
(type performanced)
(roletype object_r performanced)
(type performanced_exec)
(roletype object_r performanced_exec)
(type platform_app)
(roletype object_r platform_app)
(type platform_app_36)
(roletype object_r platform_app_36)
(type postinstall)
(roletype object_r postinstall)
(type ppp)
(roletype object_r ppp)
(type prefetch)
(roletype object_r prefetch)
(type priv_app)
(roletype object_r priv_app)
(type priv_app_36)
(roletype object_r priv_app_36)
(type prng_seeder)
(roletype object_r prng_seeder)
(type profman)
(roletype object_r profman)
(type profman_exec)
(roletype object_r profman_exec)
(type apexd_prop)
(roletype object_r apexd_prop)
(type bootloader_boot_reason_prop)
(roletype object_r bootloader_boot_reason_prop)
(type device_config_activity_manager_native_boot_prop)
(roletype object_r device_config_activity_manager_native_boot_prop)
(type device_config_boot_count_prop)
(roletype object_r device_config_boot_count_prop)
(type device_config_input_native_boot_prop)
(roletype object_r device_config_input_native_boot_prop)
(type device_config_netd_native_prop)
(roletype object_r device_config_netd_native_prop)
(type device_config_reset_performed_prop)
(roletype object_r device_config_reset_performed_prop)
(type firstboot_prop)
(roletype object_r firstboot_prop)
(type boottime_prop)
(roletype object_r boottime_prop)
(type charger_prop)
(roletype object_r charger_prop)
(type cold_boot_done_prop)
(roletype object_r cold_boot_done_prop)
(type ctl_adbd_prop)
(roletype object_r ctl_adbd_prop)
(type ctl_apexd_prop)
(roletype object_r ctl_apexd_prop)
(type ctl_bootanim_prop)
(roletype object_r ctl_bootanim_prop)
(type ctl_bugreport_prop)
(roletype object_r ctl_bugreport_prop)
(type ctl_console_prop)
(roletype object_r ctl_console_prop)
(type ctl_dumpstate_prop)
(roletype object_r ctl_dumpstate_prop)
(type ctl_fuse_prop)
(roletype object_r ctl_fuse_prop)
(type ctl_gsid_prop)
(roletype object_r ctl_gsid_prop)
(type ctl_interface_restart_prop)
(roletype object_r ctl_interface_restart_prop)
(type ctl_interface_stop_prop)
(roletype object_r ctl_interface_stop_prop)
(type ctl_mdnsd_prop)
(roletype object_r ctl_mdnsd_prop)
(type ctl_restart_prop)
(roletype object_r ctl_restart_prop)
(type ctl_rildaemon_prop)
(roletype object_r ctl_rildaemon_prop)
(type ctl_sigstop_prop)
(roletype object_r ctl_sigstop_prop)
(type dynamic_system_prop)
(roletype object_r dynamic_system_prop)
(type heapprofd_enabled_prop)
(roletype object_r heapprofd_enabled_prop)
(type llkd_prop)
(roletype object_r llkd_prop)
(type lpdumpd_prop)
(roletype object_r lpdumpd_prop)
(type mmc_prop)
(roletype object_r mmc_prop)
(type mock_ota_prop)
(roletype object_r mock_ota_prop)
(type net_dns_prop)
(roletype object_r net_dns_prop)
(type overlay_prop)
(roletype object_r overlay_prop)
(type persistent_properties_ready_prop)
(roletype object_r persistent_properties_ready_prop)
(type safemode_prop)
(roletype object_r safemode_prop)
(type system_lmk_prop)
(roletype object_r system_lmk_prop)
(type system_trace_prop)
(roletype object_r system_trace_prop)
(type test_boot_reason_prop)
(roletype object_r test_boot_reason_prop)
(type time_prop)
(roletype object_r time_prop)
(type traced_enabled_prop)
(roletype object_r traced_enabled_prop)
(type traced_lazy_prop)
(roletype object_r traced_lazy_prop)
(type aac_drc_prop)
(roletype object_r aac_drc_prop)
(type adaptive_haptics_prop)
(roletype object_r adaptive_haptics_prop)
(type apex_ready_prop)
(roletype object_r apex_ready_prop)
(type arm64_memtag_prop)
(roletype object_r arm64_memtag_prop)
(type binder_cache_bluetooth_server_prop)
(roletype object_r binder_cache_bluetooth_server_prop)
(type binder_cache_system_server_prop)
(roletype object_r binder_cache_system_server_prop)
(type binder_cache_telephony_server_prop)
(roletype object_r binder_cache_telephony_server_prop)
(type boot_status_prop)
(roletype object_r boot_status_prop)
(type bootanim_system_prop)
(roletype object_r bootanim_system_prop)
(type bootloader_prop)
(roletype object_r bootloader_prop)
(type boottime_public_prop)
(roletype object_r boottime_public_prop)
(type bq_config_prop)
(roletype object_r bq_config_prop)
(type build_bootimage_prop)
(roletype object_r build_bootimage_prop)
(type build_prop)
(roletype object_r build_prop)
(type composd_vm_art_prop)
(roletype object_r composd_vm_art_prop)
(type device_config_aconfig_flags_prop)
(roletype object_r device_config_aconfig_flags_prop)
(type device_config_camera_native_prop)
(roletype object_r device_config_camera_native_prop)
(type device_config_edgetpu_native_prop)
(roletype object_r device_config_edgetpu_native_prop)
(type device_config_media_native_prop)
(roletype object_r device_config_media_native_prop)
(type device_config_nnapi_native_prop)
(roletype object_r device_config_nnapi_native_prop)
(type device_config_runtime_native_boot_prop)
(roletype object_r device_config_runtime_native_boot_prop)
(type device_config_runtime_native_prop)
(roletype object_r device_config_runtime_native_prop)
(type device_config_surface_flinger_native_boot_prop)
(roletype object_r device_config_surface_flinger_native_boot_prop)
(type device_config_vendor_system_native_prop)
(roletype object_r device_config_vendor_system_native_prop)
(type device_config_vendor_system_native_boot_prop)
(roletype object_r device_config_vendor_system_native_boot_prop)
(type drm_forcel3_prop)
(roletype object_r drm_forcel3_prop)
(type fingerprint_prop)
(roletype object_r fingerprint_prop)
(type gwp_asan_prop)
(roletype object_r gwp_asan_prop)
(type hal_instrumentation_prop)
(roletype object_r hal_instrumentation_prop)
(type userdebug_or_eng_prop)
(roletype object_r userdebug_or_eng_prop)
(type init_service_status_prop)
(roletype object_r init_service_status_prop)
(type libc_debug_prop)
(roletype object_r libc_debug_prop)
(type module_sdkextensions_prop)
(roletype object_r module_sdkextensions_prop)
(type nnapi_ext_deny_product_prop)
(roletype object_r nnapi_ext_deny_product_prop)
(type persist_wm_debug_prop)
(roletype object_r persist_wm_debug_prop)
(type power_debug_prop)
(roletype object_r power_debug_prop)
(type profcollectd_etr_prop)
(roletype object_r profcollectd_etr_prop)
(type property_service_version_prop)
(roletype object_r property_service_version_prop)
(type provisioned_prop)
(roletype object_r provisioned_prop)
(type restorecon_prop)
(roletype object_r restorecon_prop)
(type retaildemo_prop)
(roletype object_r retaildemo_prop)
(type servicemanager_prop)
(roletype object_r servicemanager_prop)
(type smart_idle_maint_enabled_prop)
(roletype object_r smart_idle_maint_enabled_prop)
(type socket_hook_prop)
(roletype object_r socket_hook_prop)
(type sqlite_log_prop)
(roletype object_r sqlite_log_prop)
(type surfaceflinger_display_prop)
(roletype object_r surfaceflinger_display_prop)
(type system_boot_reason_prop)
(roletype object_r system_boot_reason_prop)
(type system_jvmti_agent_prop)
(roletype object_r system_jvmti_agent_prop)
(type traced_oome_heap_session_count_prop)
(roletype object_r traced_oome_heap_session_count_prop)
(type ab_update_gki_prop)
(roletype object_r ab_update_gki_prop)
(type usb_prop)
(roletype object_r usb_prop)
(type userspace_reboot_exported_prop)
(roletype object_r userspace_reboot_exported_prop)
(type vold_status_prop)
(roletype object_r vold_status_prop)
(type vts_status_prop)
(roletype object_r vts_status_prop)
(type config_prop)
(roletype object_r config_prop)
(type cppreopt_prop)
(roletype object_r cppreopt_prop)
(type dalvik_prop)
(roletype object_r dalvik_prop)
(type debuggerd_prop)
(roletype object_r debuggerd_prop)
(type device_logging_prop)
(roletype object_r device_logging_prop)
(type dhcp_prop)
(roletype object_r dhcp_prop)
(type dumpstate_prop)
(roletype object_r dumpstate_prop)
(type exported3_system_prop)
(roletype object_r exported3_system_prop)
(type exported_dumpstate_prop)
(roletype object_r exported_dumpstate_prop)
(type exported_secure_prop)
(roletype object_r exported_secure_prop)
(type heapprofd_prop)
(roletype object_r heapprofd_prop)
(type net_radio_prop)
(roletype object_r net_radio_prop)
(type pan_result_prop)
(roletype object_r pan_result_prop)
(type persist_debug_prop)
(roletype object_r persist_debug_prop)
(type shell_prop)
(roletype object_r shell_prop)
(type test_harness_prop)
(roletype object_r test_harness_prop)
(type theme_prop)
(roletype object_r theme_prop)
(type use_memfd_prop)
(roletype object_r use_memfd_prop)
(type vold_prop)
(roletype object_r vold_prop)
(type apexd_config_prop)
(roletype object_r apexd_config_prop)
(type aaudio_config_prop)
(roletype object_r aaudio_config_prop)
(type audio_config_prop)
(roletype object_r audio_config_prop)
(type bootanim_config_prop)
(roletype object_r bootanim_config_prop)
(type bluetooth_config_prop)
(roletype object_r bluetooth_config_prop)
(type build_attestation_prop)
(roletype object_r build_attestation_prop)
(type build_config_prop)
(roletype object_r build_config_prop)
(type build_odm_prop)
(roletype object_r build_odm_prop)
(type build_vendor_prop)
(roletype object_r build_vendor_prop)
(type camera_calibration_prop)
(roletype object_r camera_calibration_prop)
(type camera_config_prop)
(roletype object_r camera_config_prop)
(type camera2_extensions_prop)
(roletype object_r camera2_extensions_prop)
(type camerax_extensions_prop)
(roletype object_r camerax_extensions_prop)
(type charger_config_prop)
(roletype object_r charger_config_prop)
(type codec2_config_prop)
(roletype object_r codec2_config_prop)
(type composd_vm_vendor_prop)
(roletype object_r composd_vm_vendor_prop)
(type cpu_variant_prop)
(roletype object_r cpu_variant_prop)
(type debugfs_restriction_prop)
(roletype object_r debugfs_restriction_prop)
(type drm_config_prop)
(roletype object_r drm_config_prop)
(type drm_service_config_prop)
(roletype object_r drm_service_config_prop)
(type enable_16k_pages_prop)
(roletype object_r enable_16k_pages_prop)
(type exported_camera_prop)
(roletype object_r exported_camera_prop)
(type exported_config_prop)
(roletype object_r exported_config_prop)
(type exported_default_prop)
(roletype object_r exported_default_prop)
(type ffs_config_prop)
(roletype object_r ffs_config_prop)
(type framework_watchdog_config_prop)
(roletype object_r framework_watchdog_config_prop)
(type graphics_config_prop)
(roletype object_r graphics_config_prop)
(type hdmi_config_prop)
(roletype object_r hdmi_config_prop)
(type hw_timeout_multiplier_prop)
(roletype object_r hw_timeout_multiplier_prop)
(type hypervisor_prop)
(roletype object_r hypervisor_prop)
(type hypervisor_restricted_prop)
(roletype object_r hypervisor_restricted_prop)
(type incremental_prop)
(roletype object_r incremental_prop)
(type input_device_config_prop)
(roletype object_r input_device_config_prop)
(type keyguard_config_prop)
(roletype object_r keyguard_config_prop)
(type keystore_config_prop)
(roletype object_r keystore_config_prop)
(type lmkd_config_prop)
(roletype object_r lmkd_config_prop)
(type media_config_prop)
(roletype object_r media_config_prop)
(type mediadrm_config_prop)
(roletype object_r mediadrm_config_prop)
(type mm_events_config_prop)
(roletype object_r mm_events_config_prop)
(type oem_unlock_prop)
(roletype object_r oem_unlock_prop)
(type ota_build_prop)
(roletype object_r ota_build_prop)
(type packagemanager_config_prop)
(roletype object_r packagemanager_config_prop)
(type quick_start_prop)
(roletype object_r quick_start_prop)
(type recovery_config_prop)
(roletype object_r recovery_config_prop)
(type recovery_usb_config_prop)
(roletype object_r recovery_usb_config_prop)
(type sendbug_config_prop)
(roletype object_r sendbug_config_prop)
(type soc_prop)
(roletype object_r soc_prop)
(type storage_config_prop)
(roletype object_r storage_config_prop)
(type storagemanager_config_prop)
(roletype object_r storagemanager_config_prop)
(type surfaceflinger_prop)
(roletype object_r surfaceflinger_prop)
(type suspend_prop)
(roletype object_r suspend_prop)
(type systemsound_config_prop)
(roletype object_r systemsound_config_prop)
(type telephony_config_prop)
(roletype object_r telephony_config_prop)
(type threadnetwork_config_prop)
(roletype object_r threadnetwork_config_prop)
(type tombstone_config_prop)
(roletype object_r tombstone_config_prop)
(type usb_config_prop)
(roletype object_r usb_config_prop)
(type userspace_reboot_config_prop)
(roletype object_r userspace_reboot_config_prop)
(type vehicle_hal_prop)
(roletype object_r vehicle_hal_prop)
(type vendor_security_patch_level_prop)
(roletype object_r vendor_security_patch_level_prop)
(type vendor_socket_hook_prop)
(roletype object_r vendor_socket_hook_prop)
(type virtual_ab_prop)
(roletype object_r virtual_ab_prop)
(type vndk_prop)
(roletype object_r vndk_prop)
(type vts_config_prop)
(roletype object_r vts_config_prop)
(type vold_config_prop)
(roletype object_r vold_config_prop)
(type wifi_config_prop)
(roletype object_r wifi_config_prop)
(type zram_config_prop)
(roletype object_r zram_config_prop)
(type zygote_config_prop)
(roletype object_r zygote_config_prop)
(type dck_prop)
(roletype object_r dck_prop)
(type tuner_config_prop)
(roletype object_r tuner_config_prop)
(type usb_uvc_enabled_prop)
(roletype object_r usb_uvc_enabled_prop)
(type setupwizard_mode_prop)
(roletype object_r setupwizard_mode_prop)
(type pm_archiving_enabled_prop)
(roletype object_r pm_archiving_enabled_prop)
(type trusty_security_vm_sys_vendor_prop)
(roletype object_r trusty_security_vm_sys_vendor_prop)
(type wallet_prop)
(roletype object_r wallet_prop)
(type usb_userspace_aoa_enabled_prop)
(roletype object_r usb_userspace_aoa_enabled_prop)
(type mmd_config_prop)
(roletype object_r mmd_config_prop)
(type adbd_config_prop)
(roletype object_r adbd_config_prop)
(type audio_prop)
(roletype object_r audio_prop)
(type bluetooth_a2dp_offload_prop)
(roletype object_r bluetooth_a2dp_offload_prop)
(type bluetooth_audio_hal_prop)
(roletype object_r bluetooth_audio_hal_prop)
(type bluetooth_finder_prop)
(roletype object_r bluetooth_finder_prop)
(type bluetooth_prop)
(roletype object_r bluetooth_prop)
(type bpf_progs_loaded_prop)
(roletype object_r bpf_progs_loaded_prop)
(type charger_status_prop)
(roletype object_r charger_status_prop)
(type ctl_default_prop)
(roletype object_r ctl_default_prop)
(type ctl_interface_start_prop)
(roletype object_r ctl_interface_start_prop)
(type ctl_start_prop)
(roletype object_r ctl_start_prop)
(type ctl_stop_prop)
(roletype object_r ctl_stop_prop)
(type dalvik_config_prop)
(roletype object_r dalvik_config_prop)
(type dalvik_dynamic_config_prop)
(roletype object_r dalvik_dynamic_config_prop)
(type dalvik_runtime_prop)
(roletype object_r dalvik_runtime_prop)
(type debug_prop)
(roletype object_r debug_prop)
(type device_config_memory_safety_native_boot_prop)
(roletype object_r device_config_memory_safety_native_boot_prop)
(type device_config_memory_safety_native_prop)
(roletype object_r device_config_memory_safety_native_prop)
(type dumpstate_options_prop)
(roletype object_r dumpstate_options_prop)
(type exported_system_prop)
(roletype object_r exported_system_prop)
(type exported_bluetooth_prop)
(roletype object_r exported_bluetooth_prop)
(type exported_overlay_prop)
(roletype object_r exported_overlay_prop)
(type exported_pm_prop)
(roletype object_r exported_pm_prop)
(type future_pm_prop)
(roletype object_r future_pm_prop)
(type ffs_control_prop)
(roletype object_r ffs_control_prop)
(type framework_status_prop)
(roletype object_r framework_status_prop)
(type gesture_prop)
(roletype object_r gesture_prop)
(type graphics_config_writable_prop)
(roletype object_r graphics_config_writable_prop)
(type hal_dumpstate_config_prop)
(roletype object_r hal_dumpstate_config_prop)
(type sota_prop)
(roletype object_r sota_prop)
(type hwservicemanager_prop)
(roletype object_r hwservicemanager_prop)
(type lmkd_prop)
(roletype object_r lmkd_prop)
(type locale_prop)
(roletype object_r locale_prop)
(type logd_prop)
(roletype object_r logd_prop)
(type logpersistd_logging_prop)
(roletype object_r logpersistd_logging_prop)
(type log_prop)
(roletype object_r log_prop)
(type log_tag_prop)
(roletype object_r log_tag_prop)
(type lowpan_prop)
(roletype object_r lowpan_prop)
(type media_variant_prop)
(roletype object_r media_variant_prop)
(type nfc_prop)
(roletype object_r nfc_prop)
(type ota_prop)
(roletype object_r ota_prop)
(type permissive_mte_prop)
(roletype object_r permissive_mte_prop)
(type powerctl_prop)
(roletype object_r powerctl_prop)
(type qemu_hw_prop)
(roletype object_r qemu_hw_prop)
(type qemu_sf_lcd_density_prop)
(roletype object_r qemu_sf_lcd_density_prop)
(type radio_control_prop)
(roletype object_r radio_control_prop)
(type radio_prop)
(roletype object_r radio_prop)
(type remote_prov_prop)
(roletype object_r remote_prov_prop)
(type serialno_prop)
(roletype object_r serialno_prop)
(type surfaceflinger_color_prop)
(roletype object_r surfaceflinger_color_prop)
(type system_prop)
(roletype object_r system_prop)
(type system_user_mode_emulation_prop)
(roletype object_r system_user_mode_emulation_prop)
(type telephony_status_prop)
(roletype object_r telephony_status_prop)
(type timezone_prop)
(roletype object_r timezone_prop)
(type usb_control_prop)
(roletype object_r usb_control_prop)
(type vold_post_fs_data_prop)
(roletype object_r vold_post_fs_data_prop)
(type wifi_hal_prop)
(roletype object_r wifi_hal_prop)
(type wifi_log_prop)
(roletype object_r wifi_log_prop)
(type wifi_prop)
(roletype object_r wifi_prop)
(type zram_control_prop)
(roletype object_r zram_control_prop)
(type default_prop)
(roletype object_r default_prop)
(type rebootescrow_hal_prop)
(roletype object_r rebootescrow_hal_prop)
(type virtual_face_hal_prop)
(roletype object_r virtual_face_hal_prop)
(type virtual_face_prop)
(roletype object_r virtual_face_prop)
(type virtual_fingerprint_hal_prop)
(roletype object_r virtual_fingerprint_hal_prop)
(type virtual_fingerprint_prop)
(roletype object_r virtual_fingerprint_prop)
(type persist_vendor_debug_wifi_prop)
(roletype object_r persist_vendor_debug_wifi_prop)
(type apexd_select_prop)
(roletype object_r apexd_select_prop)
(type vendor_default_prop)
(roletype object_r vendor_default_prop)
(type radio)
(roletype object_r radio)
(type recovery)
(roletype object_r recovery)
(type recovery_persist)
(roletype object_r recovery_persist)
(type recovery_persist_exec)
(roletype object_r recovery_persist_exec)
(type recovery_refresh)
(roletype object_r recovery_refresh)
(type recovery_refresh_exec)
(roletype object_r recovery_refresh_exec)
(type rkpdapp)
(roletype object_r rkpdapp)
(type rs)
(roletype object_r rs)
(type rs_exec)
(roletype object_r rs_exec)
(type rss_hwm_reset)
(roletype object_r rss_hwm_reset)
(type runas)
(roletype object_r runas)
(type runas_exec)
(roletype object_r runas_exec)
(type runas_app)
(roletype object_r runas_app)
(type sdcardd)
(roletype object_r sdcardd)
(type sdcardd_exec)
(roletype object_r sdcardd_exec)
(type secure_element)
(roletype object_r secure_element)
(type serialservice)
(roletype object_r serialservice)
(type aidl_lazy_test_service)
(roletype object_r aidl_lazy_test_service)
(type anomaly_detector_service)
(roletype object_r anomaly_detector_service)
(type hal_npu_scheduling_service)
(roletype object_r hal_npu_scheduling_service)
(type apc_service)
(roletype object_r apc_service)
(type apex_service)
(roletype object_r apex_service)
(type artd_service)
(roletype object_r artd_service)
(type artd_pre_reboot_service)
(roletype object_r artd_pre_reboot_service)
(type audioserver_service)
(roletype object_r audioserver_service)
(type authorization_service)
(roletype object_r authorization_service)
(type batteryproperties_service)
(roletype object_r batteryproperties_service)
(type bluetooth_service)
(roletype object_r bluetooth_service)
(type cameraserver_service)
(roletype object_r cameraserver_service)
(type fwk_camera_service)
(roletype object_r fwk_camera_service)
(type default_android_service)
(roletype object_r default_android_service)
(type device_config_updatable_service)
(roletype object_r device_config_updatable_service)
(type dexopt_chroot_setup_service)
(roletype object_r dexopt_chroot_setup_service)
(type dnsresolver_service)
(roletype object_r dnsresolver_service)
(type drmserver_service)
(roletype object_r drmserver_service)
(type dumpstate_service)
(roletype object_r dumpstate_service)
(type evsmanagerd_service)
(roletype object_r evsmanagerd_service)
(type fingerprintd_service)
(roletype object_r fingerprintd_service)
(type fwk_automotive_display_service)
(roletype object_r fwk_automotive_display_service)
(type fwk_vold_service)
(roletype object_r fwk_vold_service)
(type gatekeeper_service)
(roletype object_r gatekeeper_service)
(type gpu_service)
(roletype object_r gpu_service)
(type idmap_service)
(roletype object_r idmap_service)
(type incident_service)
(roletype object_r incident_service)
(type installd_service)
(roletype object_r installd_service)
(type credstore_service)
(roletype object_r credstore_service)
(type keystore_compat_hal_service)
(roletype object_r keystore_compat_hal_service)
(type keystore_maintenance_service)
(roletype object_r keystore_maintenance_service)
(type keystore_metrics_service)
(roletype object_r keystore_metrics_service)
(type keystore_service)
(roletype object_r keystore_service)
(type legacykeystore_service)
(roletype object_r legacykeystore_service)
(type lpdump_service)
(roletype object_r lpdump_service)
(type mdns_service)
(roletype object_r mdns_service)
(type mediaserver_service)
(roletype object_r mediaserver_service)
(type mediametrics_service)
(roletype object_r mediametrics_service)
(type mediaextractor_service)
(roletype object_r mediaextractor_service)
(type mediadrmserver_service)
(roletype object_r mediadrmserver_service)
(type mediatranscoding_service)
(roletype object_r mediatranscoding_service)
(type native_serial_service)
(roletype object_r native_serial_service)
(type netd_service)
(roletype object_r netd_service)
(type nfc_service)
(roletype object_r nfc_service)
(type npu_service)
(roletype object_r npu_service)
(type ondevicepersonalization_system_service)
(roletype object_r ondevicepersonalization_system_service)
(type ot_daemon_service)
(roletype object_r ot_daemon_service)
(type profiling_service)
(roletype object_r profiling_service)
(type radio_service)
(roletype object_r radio_service)
(type secure_element_service)
(roletype object_r secure_element_service)
(type service_manager_service)
(roletype object_r service_manager_service)
(type storaged_service)
(roletype object_r storaged_service)
(type surfaceflinger_service)
(roletype object_r surfaceflinger_service)
(type system_app_service)
(roletype object_r system_app_service)
(type system_net_netd_service)
(roletype object_r system_net_netd_service)
(type system_suspend_control_internal_service)
(roletype object_r system_suspend_control_internal_service)
(type system_suspend_control_service)
(roletype object_r system_suspend_control_service)
(type update_engine_service)
(roletype object_r update_engine_service)
(type update_engine_stable_service)
(roletype object_r update_engine_stable_service)
(type virtualization_service)
(roletype object_r virtualization_service)
(type virtual_camera_service)
(roletype object_r virtual_camera_service)
(type virtual_touchpad_service)
(roletype object_r virtual_touchpad_service)
(type vold_service)
(roletype object_r vold_service)
(type vr_hwc_service)
(roletype object_r vr_hwc_service)
(type vrflinger_vsync_service)
(roletype object_r vrflinger_vsync_service)
(type accessibility_service)
(roletype object_r accessibility_service)
(type account_service)
(roletype object_r account_service)
(type activity_service)
(roletype object_r activity_service)
(type activity_task_service)
(roletype object_r activity_task_service)
(type adb_service)
(roletype object_r adb_service)
(type adservices_manager_service)
(roletype object_r adservices_manager_service)
(type alarm_service)
(roletype object_r alarm_service)
(type app_binding_service)
(roletype object_r app_binding_service)
(type app_function_service)
(roletype object_r app_function_service)
(type app_hibernation_service)
(roletype object_r app_hibernation_service)
(type app_integrity_service)
(roletype object_r app_integrity_service)
(type app_prediction_service)
(roletype object_r app_prediction_service)
(type app_search_service)
(roletype object_r app_search_service)
(type appops_service)
(roletype object_r appops_service)
(type appwidget_service)
(roletype object_r appwidget_service)
(type archive_service)
(roletype object_r archive_service)
(type assetatlas_service)
(roletype object_r assetatlas_service)
(type attestation_verification_service)
(roletype object_r attestation_verification_service)
(type audio_service)
(roletype object_r audio_service)
(type auth_service)
(roletype object_r auth_service)
(type autofill_service)
(roletype object_r autofill_service)
(type backup_service)
(roletype object_r backup_service)
(type batterystats_service)
(roletype object_r batterystats_service)
(type battery_service)
(roletype object_r battery_service)
(type binder_calls_stats_service)
(roletype object_r binder_calls_stats_service)
(type blob_store_service)
(roletype object_r blob_store_service)
(type bluetooth_manager_service)
(roletype object_r bluetooth_manager_service)
(type broadcastradio_service)
(roletype object_r broadcastradio_service)
(type cacheinfo_service)
(roletype object_r cacheinfo_service)
(type cameraproxy_service)
(roletype object_r cameraproxy_service)
(type clipboard_service)
(roletype object_r clipboard_service)
(type cloudsearch_service)
(roletype object_r cloudsearch_service)
(type contexthub_service)
(roletype object_r contexthub_service)
(type contextual_search_service)
(roletype object_r contextual_search_service)
(type crossprofileapps_service)
(roletype object_r crossprofileapps_service)
(type IProxyService_service)
(roletype object_r IProxyService_service)
(type companion_device_service)
(roletype object_r companion_device_service)
(type connectivity_native_service)
(roletype object_r connectivity_native_service)
(type connectivity_service)
(roletype object_r connectivity_service)
(type connmetrics_service)
(roletype object_r connmetrics_service)
(type consumer_ir_service)
(roletype object_r consumer_ir_service)
(type content_capture_service)
(roletype object_r content_capture_service)
(type content_suggestions_service)
(roletype object_r content_suggestions_service)
(type content_service)
(roletype object_r content_service)
(type country_detector_service)
(roletype object_r country_detector_service)
(type coverage_service)
(roletype object_r coverage_service)
(type cpuinfo_service)
(roletype object_r cpuinfo_service)
(type cpu_monitor_service)
(roletype object_r cpu_monitor_service)
(type credential_service)
(roletype object_r credential_service)
(type dataloader_manager_service)
(roletype object_r dataloader_manager_service)
(type dbinfo_service)
(roletype object_r dbinfo_service)
(type device_config_service)
(roletype object_r device_config_service)
(type device_policy_service)
(roletype object_r device_policy_service)
(type device_state_service)
(roletype object_r device_state_service)
(type deviceidle_service)
(roletype object_r deviceidle_service)
(type device_identifiers_service)
(roletype object_r device_identifiers_service)
(type devicestoragemonitor_service)
(roletype object_r devicestoragemonitor_service)
(type diskstats_service)
(roletype object_r diskstats_service)
(type display_service)
(roletype object_r display_service)
(type domain_verification_service)
(roletype object_r domain_verification_service)
(type color_display_service)
(roletype object_r color_display_service)
(type ecm_enhanced_confirmation_service)
(roletype object_r ecm_enhanced_confirmation_service)
(type external_vibrator_service)
(roletype object_r external_vibrator_service)
(type file_integrity_service)
(roletype object_r file_integrity_service)
(type font_service)
(roletype object_r font_service)
(type netd_listener_service)
(roletype object_r netd_listener_service)
(type network_watchlist_service)
(roletype object_r network_watchlist_service)
(type devicelock_service)
(roletype object_r devicelock_service)
(type DockObserver_service)
(roletype object_r DockObserver_service)
(type dreams_service)
(roletype object_r dreams_service)
(type dropbox_service)
(roletype object_r dropbox_service)
(type ethernet_service)
(roletype object_r ethernet_service)
(type biometric_service)
(roletype object_r biometric_service)
(type bugreport_service)
(roletype object_r bugreport_service)
(type platform_compat_service)
(roletype object_r platform_compat_service)
(type face_service)
(roletype object_r face_service)
(type fingerprint_service)
(roletype object_r fingerprint_service)
(type fwk_altitude_service)
(roletype object_r fwk_altitude_service)
(type fwk_stats_service)
(roletype object_r fwk_stats_service)
(type fwk_sensor_service)
(roletype object_r fwk_sensor_service)
(type fwk_vibrator_control_service)
(roletype object_r fwk_vibrator_control_service)
(type game_service)
(roletype object_r game_service)
(type gfxinfo_service)
(roletype object_r gfxinfo_service)
(type gnss_time_update_service)
(roletype object_r gnss_time_update_service)
(type grammatical_inflection_service)
(roletype object_r grammatical_inflection_service)
(type graphicsstats_service)
(roletype object_r graphicsstats_service)
(type hardware_service)
(roletype object_r hardware_service)
(type hardware_properties_service)
(roletype object_r hardware_properties_service)
(type hdmi_control_service)
(roletype object_r hdmi_control_service)
(type healthconnect_service)
(roletype object_r healthconnect_service)
(type hint_service)
(roletype object_r hint_service)
(type imms_service)
(roletype object_r imms_service)
(type incremental_service)
(roletype object_r incremental_service)
(type input_method_service)
(roletype object_r input_method_service)
(type input_service)
(roletype object_r input_service)
(type intrusion_detection_service)
(roletype object_r intrusion_detection_service)
(type ipsec_service)
(roletype object_r ipsec_service)
(type iris_service)
(roletype object_r iris_service)
(type jobscheduler_service)
(roletype object_r jobscheduler_service)
(type launcherapps_service)
(roletype object_r launcherapps_service)
(type legacy_permission_service)
(roletype object_r legacy_permission_service)
(type light_service)
(roletype object_r light_service)
(type locale_service)
(roletype object_r locale_service)
(type location_service)
(roletype object_r location_service)
(type location_time_zone_manager_service)
(roletype object_r location_time_zone_manager_service)
(type lock_settings_service)
(roletype object_r lock_settings_service)
(type looper_stats_service)
(roletype object_r looper_stats_service)
(type media_communication_service)
(roletype object_r media_communication_service)
(type media_metrics_service)
(roletype object_r media_metrics_service)
(type media_projection_service)
(roletype object_r media_projection_service)
(type media_quality_service)
(roletype object_r media_quality_service)
(type media_router_service)
(roletype object_r media_router_service)
(type media_session_service)
(roletype object_r media_session_service)
(type meminfo_service)
(roletype object_r meminfo_service)
(type memtrackproxy_service)
(roletype object_r memtrackproxy_service)
(type midi_service)
(roletype object_r midi_service)
(type mount_service)
(roletype object_r mount_service)
(type music_recognition_service)
(roletype object_r music_recognition_service)
(type nearby_service)
(roletype object_r nearby_service)
(type netpolicy_service)
(roletype object_r netpolicy_service)
(type netstats_service)
(roletype object_r netstats_service)
(type network_management_service)
(roletype object_r network_management_service)
(type network_score_service)
(roletype object_r network_score_service)
(type network_stack_service)
(roletype object_r network_stack_service)
(type network_time_update_service)
(roletype object_r network_time_update_service)
(type notification_service)
(roletype object_r notification_service)
(type oem_lock_service)
(roletype object_r oem_lock_service)
(type overlay_service)
(roletype object_r overlay_service)
(type pac_proxy_service)
(roletype object_r pac_proxy_service)
(type package_service)
(roletype object_r package_service)
(type package_native_service)
(roletype object_r package_native_service)
(type people_service)
(roletype object_r people_service)
(type permission_service)
(roletype object_r permission_service)
(type permissionmgr_service)
(roletype object_r permissionmgr_service)
(type permission_checker_service)
(roletype object_r permission_checker_service)
(type persistent_data_block_service)
(roletype object_r persistent_data_block_service)
(type pinner_service)
(roletype object_r pinner_service)
(type powerstats_service)
(roletype object_r powerstats_service)
(type power_service)
(roletype object_r power_service)
(type print_service)
(roletype object_r print_service)
(type processinfo_service)
(roletype object_r processinfo_service)
(type procstats_service)
(roletype object_r procstats_service)
(type reboot_readiness_service)
(roletype object_r reboot_readiness_service)
(type recovery_service)
(roletype object_r recovery_service)
(type registry_service)
(roletype object_r registry_service)
(type remote_auth_service)
(roletype object_r remote_auth_service)
(type remote_provisioning_service)
(roletype object_r remote_provisioning_service)
(type resources_manager_service)
(roletype object_r resources_manager_service)
(type restrictions_service)
(roletype object_r restrictions_service)
(type role_service)
(roletype object_r role_service)
(type rollback_service)
(roletype object_r rollback_service)
(type runtime_service)
(roletype object_r runtime_service)
(type rttmanager_service)
(roletype object_r rttmanager_service)
(type samplingprofiler_service)
(roletype object_r samplingprofiler_service)
(type scheduling_policy_service)
(roletype object_r scheduling_policy_service)
(type search_service)
(roletype object_r search_service)
(type search_ui_service)
(roletype object_r search_ui_service)
(type sec_key_att_app_id_provider_service)
(roletype object_r sec_key_att_app_id_provider_service)
(type security_state_service)
(roletype object_r security_state_service)
(type selection_toolbar_service)
(roletype object_r selection_toolbar_service)
(type sensitive_content_protection_service)
(roletype object_r sensitive_content_protection_service)
(type sensorservice_service)
(roletype object_r sensorservice_service)
(type sensor_privacy_service)
(roletype object_r sensor_privacy_service)
(type serial_service)
(roletype object_r serial_service)
(type servicediscovery_service)
(roletype object_r servicediscovery_service)
(type settings_service)
(roletype object_r settings_service)
(type shortcut_service)
(roletype object_r shortcut_service)
(type slice_service)
(roletype object_r slice_service)
(type smartspace_service)
(roletype object_r smartspace_service)
(type statusbar_service)
(roletype object_r statusbar_service)
(type storagestats_service)
(roletype object_r storagestats_service)
(type sdk_sandbox_service)
(roletype object_r sdk_sandbox_service)
(type system_config_service)
(roletype object_r system_config_service)
(type system_server_dumper_service)
(roletype object_r system_server_dumper_service)
(type system_update_service)
(roletype object_r system_update_service)
(type soundtrigger_middleware_service)
(roletype object_r soundtrigger_middleware_service)
(type speech_recognition_service)
(roletype object_r speech_recognition_service)
(type tare_service)
(roletype object_r tare_service)
(type task_service)
(roletype object_r task_service)
(type testharness_service)
(roletype object_r testharness_service)
(type textclassification_service)
(roletype object_r textclassification_service)
(type textservices_service)
(roletype object_r textservices_service)
(type texttospeech_service)
(roletype object_r texttospeech_service)
(type telecom_service)
(roletype object_r telecom_service)
(type thermal_service)
(roletype object_r thermal_service)
(type threadnetwork_service)
(roletype object_r threadnetwork_service)
(type timedetector_service)
(roletype object_r timedetector_service)
(type timezonedetector_service)
(roletype object_r timezonedetector_service)
(type translation_service)
(roletype object_r translation_service)
(type trust_service)
(roletype object_r trust_service)
(type tv_ad_service)
(roletype object_r tv_ad_service)
(type tv_iapp_service)
(roletype object_r tv_iapp_service)
(type tv_input_service)
(roletype object_r tv_input_service)
(type tv_tuner_resource_mgr_service)
(roletype object_r tv_tuner_resource_mgr_service)
(type uimode_service)
(roletype object_r uimode_service)
(type updatelock_service)
(roletype object_r updatelock_service)
(type uri_grants_service)
(roletype object_r uri_grants_service)
(type usagestats_service)
(roletype object_r usagestats_service)
(type usb_service)
(roletype object_r usb_service)
(type user_service)
(roletype object_r user_service)
(type uwb_service)
(roletype object_r uwb_service)
(type vcn_management_service)
(roletype object_r vcn_management_service)
(type vibrator_service)
(roletype object_r vibrator_service)
(type vibrator_manager_service)
(roletype object_r vibrator_manager_service)
(type virtual_device_service)
(roletype object_r virtual_device_service)
(type virtual_device_native_service)
(roletype object_r virtual_device_native_service)
(type voiceinteraction_service)
(roletype object_r voiceinteraction_service)
(type vpn_management_service)
(roletype object_r vpn_management_service)
(type vr_manager_service)
(roletype object_r vr_manager_service)
(type wallpaper_service)
(roletype object_r wallpaper_service)
(type wallpaper_effects_generation_service)
(roletype object_r wallpaper_effects_generation_service)
(type webviewupdate_service)
(roletype object_r webviewupdate_service)
(type wifip2p_service)
(roletype object_r wifip2p_service)
(type wifiscanner_service)
(roletype object_r wifiscanner_service)
(type wifi_service)
(roletype object_r wifi_service)
(type wifinl80211_service)
(roletype object_r wifinl80211_service)
(type wifiaware_service)
(roletype object_r wifiaware_service)
(type wifi_usd_service)
(roletype object_r wifi_usd_service)
(type window_service)
(roletype object_r window_service)
(type inputflinger_service)
(roletype object_r inputflinger_service)
(type tethering_service)
(roletype object_r tethering_service)
(type emergency_affordance_service)
(roletype object_r emergency_affordance_service)
(type hal_audio_service)
(roletype object_r hal_audio_service)
(type hal_audiocontrol_service)
(roletype object_r hal_audiocontrol_service)
(type hal_authgraph_service)
(roletype object_r hal_authgraph_service)
(type hal_authsecret_service)
(roletype object_r hal_authsecret_service)
(type hal_bluetooth_service)
(roletype object_r hal_bluetooth_service)
(type hal_bluetooth_lpp_service)
(roletype object_r hal_bluetooth_lpp_service)
(type hal_bootctl_service)
(roletype object_r hal_bootctl_service)
(type hal_broadcastradio_service)
(roletype object_r hal_broadcastradio_service)
(type hal_camera_service)
(roletype object_r hal_camera_service)
(type hal_can_controller_service)
(roletype object_r hal_can_controller_service)
(type hal_cas_service)
(roletype object_r hal_cas_service)
(type hal_codec2_service)
(roletype object_r hal_codec2_service)
(type hal_confirmationui_service)
(roletype object_r hal_confirmationui_service)
(type hal_contexthub_service)
(roletype object_r hal_contexthub_service)
(type hal_drm_service)
(roletype object_r hal_drm_service)
(type hal_dumpstate_service)
(roletype object_r hal_dumpstate_service)
(type hal_evs_service)
(roletype object_r hal_evs_service)
(type hal_face_service)
(roletype object_r hal_face_service)
(type hal_fastboot_service)
(roletype object_r hal_fastboot_service)
(type hal_frp_service)
(roletype object_r hal_frp_service)
(type hal_fingerprint_service)
(roletype object_r hal_fingerprint_service)
(type hal_gnss_service)
(roletype object_r hal_gnss_service)
(type hal_graphics_allocator_service)
(roletype object_r hal_graphics_allocator_service)
(type hal_graphics_composer_service)
(roletype object_r hal_graphics_composer_service)
(type hal_graphics_mapper_service)
(roletype object_r hal_graphics_mapper_service)
(type hal_health_service)
(roletype object_r hal_health_service)
(type hal_health_storage_service)
(roletype object_r hal_health_storage_service)
(type hal_hwcrypto_service)
(roletype object_r hal_hwcrypto_service)
(type hal_identity_service)
(roletype object_r hal_identity_service)
(type hal_input_processor_service)
(roletype object_r hal_input_processor_service)
(type hal_ir_service)
(roletype object_r hal_ir_service)
(type hal_ivn_service)
(roletype object_r hal_ivn_service)
(type hal_keymint_service)
(roletype object_r hal_keymint_service)
(type hal_light_service)
(roletype object_r hal_light_service)
(type hal_macsec_service)
(roletype object_r hal_macsec_service)
(type hal_mediaquality_service)
(roletype object_r hal_mediaquality_service)
(type hal_memtrack_service)
(roletype object_r hal_memtrack_service)
(type hal_motioncontext_service)
(roletype object_r hal_motioncontext_service)
(type hal_neuralnetworks_service)
(roletype object_r hal_neuralnetworks_service)
(type hal_nfc_service)
(roletype object_r hal_nfc_service)
(type hal_oemlock_service)
(roletype object_r hal_oemlock_service)
(type hal_power_service)
(roletype object_r hal_power_service)
(type hal_power_stats_service)
(roletype object_r hal_power_stats_service)
(type hal_radio_service)
(roletype object_r hal_radio_service)
(type hal_rebootescrow_service)
(roletype object_r hal_rebootescrow_service)
(type hal_remoteaccess_service)
(roletype object_r hal_remoteaccess_service)
(type hal_remotelyprovisionedcomponent_avf_service)
(roletype object_r hal_remotelyprovisionedcomponent_avf_service)
(type hal_remotelyprovisionedcomponent_service)
(roletype object_r hal_remotelyprovisionedcomponent_service)
(type hal_sensors_service)
(roletype object_r hal_sensors_service)
(type hal_secretkeeper_service)
(roletype object_r hal_secretkeeper_service)
(type hal_secureclock_service)
(roletype object_r hal_secureclock_service)
(type hal_secure_element_service)
(roletype object_r hal_secure_element_service)
(type hal_sharedsecret_service)
(roletype object_r hal_sharedsecret_service)
(type hal_system_suspend_service)
(roletype object_r hal_system_suspend_service)
(type hal_tetheroffload_service)
(roletype object_r hal_tetheroffload_service)
(type hal_thermal_service)
(roletype object_r hal_thermal_service)
(type hal_timestamp_service)
(roletype object_r hal_timestamp_service)
(type hal_tv_hdmi_cec_service)
(roletype object_r hal_tv_hdmi_cec_service)
(type hal_tv_hdmi_connection_service)
(roletype object_r hal_tv_hdmi_connection_service)
(type hal_tv_hdmi_earc_service)
(roletype object_r hal_tv_hdmi_earc_service)
(type hal_tv_input_service)
(roletype object_r hal_tv_input_service)
(type hal_threadnetwork_service)
(roletype object_r hal_threadnetwork_service)
(type hal_tv_tuner_service)
(roletype object_r hal_tv_tuner_service)
(type hal_usb_service)
(roletype object_r hal_usb_service)
(type hal_usb_gadget_service)
(roletype object_r hal_usb_gadget_service)
(type hal_uwb_service)
(roletype object_r hal_uwb_service)
(type hal_vehicle_service)
(roletype object_r hal_vehicle_service)
(type hal_vibrator_service)
(roletype object_r hal_vibrator_service)
(type hal_weaver_service)
(roletype object_r hal_weaver_service)
(type hal_nlinterceptor_service)
(roletype object_r hal_nlinterceptor_service)
(type hal_wifi_service)
(roletype object_r hal_wifi_service)
(type hal_wifi_hostapd_service)
(roletype object_r hal_wifi_hostapd_service)
(type hal_wifi_supplicant_service)
(roletype object_r hal_wifi_supplicant_service)
(type hal_gatekeeper_service)
(roletype object_r hal_gatekeeper_service)
(type hal_vm_capabilities_service)
(roletype object_r hal_vm_capabilities_service)
(type servicemanager)
(roletype object_r servicemanager)
(type servicemanager_exec)
(roletype object_r servicemanager_exec)
(type sgdisk)
(roletype object_r sgdisk)
(type sgdisk_exec)
(roletype object_r sgdisk_exec)
(type shared_relro)
(roletype object_r shared_relro)
(type shell)
(roletype object_r shell)
(type shell_exec)
(roletype object_r shell_exec)
(type simpleperf)
(roletype object_r simpleperf)
(type simpleperf_app_runner)
(roletype object_r simpleperf_app_runner)
(type simpleperf_app_runner_exec)
(roletype object_r simpleperf_app_runner_exec)
(type slideshow)
(roletype object_r slideshow)
(type statsd)
(roletype object_r statsd)
(type statsd_exec)
(roletype object_r statsd_exec)
(type su)
(roletype object_r su)
(typepermissive su)
(type su_exec)
(roletype object_r su_exec)
(type surfaceflinger)
(roletype object_r surfaceflinger)
(type surfaceflinger_tmpfs)
(roletype object_r surfaceflinger_tmpfs)
(type system_app)
(roletype object_r system_app)
(type system_server)
(roletype object_r system_server)
(type system_server_tmpfs)
(roletype object_r system_server_tmpfs)
(type system_server_wrapfd)
(roletype object_r system_server_wrapfd)
(type tee)
(roletype object_r tee)
(type tee_device)
(roletype object_r tee_device)
(type tombstoned)
(roletype object_r tombstoned)
(type tombstoned_exec)
(roletype object_r tombstoned_exec)
(type toolbox)
(roletype object_r toolbox)
(type toolbox_exec)
(roletype object_r toolbox_exec)
(type traced)
(roletype object_r traced)
(type traced_tmpfs)
(roletype object_r traced_tmpfs)
(type traced_perf)
(roletype object_r traced_perf)
(type traced_probes)
(roletype object_r traced_probes)
(type traceur_app)
(roletype object_r traceur_app)
(type ueventd)
(roletype object_r ueventd)
(type ueventd_tmpfs)
(roletype object_r ueventd_tmpfs)
(type uncrypt)
(roletype object_r uncrypt)
(type uncrypt_exec)
(roletype object_r uncrypt_exec)
(type untrusted_app)
(roletype object_r untrusted_app)
(type untrusted_app_34)
(roletype object_r untrusted_app_34)
(type untrusted_app_32)
(roletype object_r untrusted_app_32)
(type untrusted_app_30)
(roletype object_r untrusted_app_30)
(type untrusted_app_29)
(roletype object_r untrusted_app_29)
(type untrusted_app_27)
(roletype object_r untrusted_app_27)
(type untrusted_app_25)
(roletype object_r untrusted_app_25)
(type update_engine)
(roletype object_r update_engine)
(type update_engine_exec)
(roletype object_r update_engine_exec)
(type update_verifier)
(roletype object_r update_verifier)
(type update_verifier_exec)
(roletype object_r update_verifier_exec)
(type usbd)
(roletype object_r usbd)
(type usbd_exec)
(roletype object_r usbd_exec)
(type vdc)
(roletype object_r vdc)
(type vdc_exec)
(roletype object_r vdc_exec)
(type vendor_init)
(roletype object_r vendor_init)
(type vendor_misc_writer)
(roletype object_r vendor_misc_writer)
(type vendor_misc_writer_exec)
(roletype object_r vendor_misc_writer_exec)
(type vendor_modprobe)
(roletype object_r vendor_modprobe)
(type vendor_shell)
(roletype object_r vendor_shell)
(type vendor_shell_exec)
(roletype object_r vendor_shell_exec)
(type vendor_toolbox_exec)
(roletype object_r vendor_toolbox_exec)
(type virtual_camera)
(roletype object_r virtual_camera)
(type virtual_camera_exec)
(roletype object_r virtual_camera_exec)
(type virtual_touchpad)
(roletype object_r virtual_touchpad)
(type virtual_touchpad_exec)
(roletype object_r virtual_touchpad_exec)
(type virtualizationmanager_vendor)
(roletype object_r virtualizationmanager_vendor)
(type virtualizationmanager_exec)
(roletype object_r virtualizationmanager_exec)
(type service_manager_vndservice)
(roletype object_r service_manager_vndservice)
(type default_android_vndservice)
(roletype object_r default_android_vndservice)
(type vndservicemanager)
(roletype object_r vndservicemanager)
(type vold)
(roletype object_r vold)
(type vold_exec)
(roletype object_r vold_exec)
(type vold_prepare_subdirs)
(roletype object_r vold_prepare_subdirs)
(type vold_prepare_subdirs_exec)
(roletype object_r vold_prepare_subdirs_exec)
(type watchdogd)
(roletype object_r watchdogd)
(type watchdogd_exec)
(roletype object_r watchdogd_exec)
(type webview_zygote)
(roletype object_r webview_zygote)
(type webview_zygote_exec)
(roletype object_r webview_zygote_exec)
(type webview_zygote_tmpfs)
(roletype object_r webview_zygote_tmpfs)
(type wificond)
(roletype object_r wificond)
(type wificond_exec)
(roletype object_r wificond_exec)
(type zygote)
(roletype object_r zygote)
(type zygote_tmpfs)
(roletype object_r zygote_tmpfs)
(type zygote_exec)
(roletype object_r zygote_exec)
(typeattribute hal_lazy_test)
(expandtypeattribute (hal_lazy_test) true)
(typeattributeset hal_lazy_test (hidl_lazy_test_server ))
(typeattribute hal_lazy_test_client)
(expandtypeattribute (hal_lazy_test_client) true)
(typeattribute hal_lazy_test_server)
(expandtypeattribute (hal_lazy_test_server) false)
(typeattributeset hal_lazy_test_server (hidl_lazy_test_server ))
(typeattribute mlsvendorcompat)
(typeattribute system_and_vendor_property_type)
(expandtypeattribute (system_and_vendor_property_type) false)
(typeattribute sdk_sandbox_all)
(typeattributeset sdk_sandbox_all (sdk_sandbox_34 sdk_sandbox_audit sdk_sandbox_next ))
(typeattribute sdk_sandbox_current)
(typeattributeset sdk_sandbox_current (sdk_sandbox_34 sdk_sandbox_audit ))
(typeattribute adbd_common)
(typeattributeset adbd_common (adbd adbd_tradeinmode ))
(typeattribute sdcard_posix_contextmount_type)
(typeattribute update_provider)
(expandtypeattribute (update_provider) false)
(typeattribute omapi_server)
(typeattributeset omapi_server (omapi secure_element ))
(type aconfigd)
(roletype object_r aconfigd)
(type aconfigd_exec)
(roletype object_r aconfigd_exec)
(type aconfigd_mainline)
(roletype object_r aconfigd_mainline)
(type aconfigd_mainline_exec)
(roletype object_r aconfigd_mainline_exec)
(type adbd_tradeinmode)
(roletype object_r adbd_tradeinmode)
(type adservices)
(roletype object_r adservices)
(type adservices_userfaultfd)
(roletype object_r adservices_userfaultfd)
(type adservices_block_io_uring)
(roletype object_r adservices_block_io_uring)
(type adservices_wrapfd)
(roletype object_r adservices_wrapfd)
(type aflags)
(roletype object_r aflags)
(type aflags_exec)
(roletype object_r aflags_exec)
(type aisealhostservice_exec)
(roletype object_r aisealhostservice_exec)
(type aisealhostservice)
(roletype object_r aisealhostservice)
(type aisealhostservice_virtualizationmanager)
(roletype object_r aisealhostservice_virtualizationmanager)
(type aisealhostservice_virtmgr_crosvm)
(roletype object_r aisealhostservice_virtmgr_crosvm)
(type aoad)
(roletype object_r aoad)
(type aoad_exec)
(roletype object_r aoad_exec)
(type apex_test_prepostinstall)
(roletype object_r apex_test_prepostinstall)
(type apex_test_prepostinstall_exec)
(roletype object_r apex_test_prepostinstall_exec)
(type apex_test_prepostinstall_devpts)
(roletype object_r apex_test_prepostinstall_devpts)
(type apexd_devpts)
(roletype object_r apexd_devpts)
(type apexd_derive_classpath)
(roletype object_r apexd_derive_classpath)
(type app_zygote_userfaultfd)
(roletype object_r app_zygote_userfaultfd)
(type art_boot)
(roletype object_r art_boot)
(type art_boot_exec)
(roletype object_r art_boot_exec)
(type art_exec)
(roletype object_r art_exec)
(type art_exec_exec)
(roletype object_r art_exec_exec)
(type artd_exec)
(roletype object_r artd_exec)
(type artd_tmpfs)
(roletype object_r artd_tmpfs)
(typeattribute artd_subprocess_type)
(typeattributeset artd_subprocess_type (profman derive_classpath dex2oat odrefresh ))
(type artd_userfaultfd)
(roletype object_r artd_userfaultfd)
(type atrace_exec)
(roletype object_r atrace_exec)
(type audioserver_exec)
(roletype object_r audioserver_exec)
(type auditctl)
(roletype object_r auditctl)
(type auditctl_exec)
(roletype object_r auditctl_exec)
(type automotive_display_service)
(roletype object_r automotive_display_service)
(type automotive_display_service_exec)
(roletype object_r automotive_display_service_exec)
(type bert_collector)
(roletype object_r bert_collector)
(type bert_collector_exec)
(roletype object_r bert_collector_exec)
(type blank_screen)
(roletype object_r blank_screen)
(type blank_screen_exec)
(roletype object_r blank_screen_exec)
(type blkid_exec)
(roletype object_r blkid_exec)
(type bluetooth_userfaultfd)
(roletype object_r bluetooth_userfaultfd)
(type bluetooth_block_io_uring)
(roletype object_r bluetooth_block_io_uring)
(type bluetooth_wrapfd)
(roletype object_r bluetooth_wrapfd)
(type boringssl_self_test)
(roletype object_r boringssl_self_test)
(type boringssl_self_test_exec)
(roletype object_r boringssl_self_test_exec)
(type vendor_boringssl_self_test)
(roletype object_r vendor_boringssl_self_test)
(type vendor_boringssl_self_test_exec)
(roletype object_r vendor_boringssl_self_test_exec)
(type boringssl_self_test_marker)
(roletype object_r boringssl_self_test_marker)
(type bpfloader_exec)
(roletype object_r bpfloader_exec)
(type bpfloader_platform_exec)
(roletype object_r bpfloader_platform_exec)
(type canhalconfigurator)
(roletype object_r canhalconfigurator)
(type canhalconfigurator_exec)
(roletype object_r canhalconfigurator_exec)
(type casefolding_remover)
(roletype object_r casefolding_remover)
(type casefolding_remover_exec)
(roletype object_r casefolding_remover_exec)
(type clatd)
(roletype object_r clatd)
(type clatd_exec)
(roletype object_r clatd_exec)
(type compos_fd_server)
(roletype object_r compos_fd_server)
(type compos_verify)
(roletype object_r compos_verify)
(type compos_verify_exec)
(roletype object_r compos_verify_exec)
(type compos_verify_virtualizationmanager)
(roletype object_r compos_verify_virtualizationmanager)
(type compos_verify_virtmgr_crosvm)
(roletype object_r compos_verify_virtmgr_crosvm)
(type composd)
(roletype object_r composd)
(type composd_exec)
(roletype object_r composd_exec)
(type composd_virtualizationmanager)
(roletype object_r composd_virtualizationmanager)
(type composd_virtmgr_crosvm)
(roletype object_r composd_virtmgr_crosvm)
(type cppreopts)
(roletype object_r cppreopts)
(type cppreopts_exec)
(roletype object_r cppreopts_exec)
(type crosvm_exec)
(roletype object_r crosvm_exec)
(type crosvm_domain_tmpfs)
(roletype object_r crosvm_domain_tmpfs)
(type crosvm_vu_fs)
(roletype object_r crosvm_vu_fs)
(type crosvm_vu_fs_tmpfs)
(roletype object_r crosvm_vu_fs_tmpfs)
(type crosvm_vu_fs_exec)
(roletype object_r crosvm_vu_fs_exec)
(type crosvm_vu_snd)
(roletype object_r crosvm_vu_snd)
(type crosvm_vu_snd_tmpfs)
(roletype object_r crosvm_vu_snd_tmpfs)
(type crosvm_vu_snd_exec)
(roletype object_r crosvm_vu_snd_exec)
(type derive_classpath)
(roletype object_r derive_classpath)
(type derive_classpath_exec)
(roletype object_r derive_classpath_exec)
(type derive_sdk)
(roletype object_r derive_sdk)
(type derive_sdk_exec)
(roletype object_r derive_sdk_exec)
(type udmabuf_device)
(roletype object_r udmabuf_device)
(type apex_dm_device)
(roletype object_r apex_dm_device)
(type wrapfd_device)
(roletype object_r wrapfd_device)
(type device_as_webcam)
(roletype object_r device_as_webcam)
(type device_as_webcam_userfaultfd)
(roletype object_r device_as_webcam_userfaultfd)
(type device_as_webcam_block_io_uring)
(roletype object_r device_as_webcam_block_io_uring)
(type device_as_webcam_wrapfd)
(roletype object_r device_as_webcam_wrapfd)
(type dex2oat)
(roletype object_r dex2oat)
(type dex2oat_exec)
(roletype object_r dex2oat_exec)
(type dex2oat_userfaultfd)
(roletype object_r dex2oat_userfaultfd)
(type dexopt_chroot_setup)
(roletype object_r dexopt_chroot_setup)
(type dexopt_chroot_setup_exec)
(roletype object_r dexopt_chroot_setup_exec)
(type dexopt_chroot_setup_tmpfs)
(roletype object_r dexopt_chroot_setup_tmpfs)
(type dexopt_chroot_setup_userfaultfd)
(roletype object_r dexopt_chroot_setup_userfaultfd)
(type dexoptanalyzer_exec)
(roletype object_r dexoptanalyzer_exec)
(type dmesgd)
(roletype object_r dmesgd)
(type dmesgd_exec)
(roletype object_r dmesgd_exec)
(type dumpstate_tmpfs)
(roletype object_r dumpstate_tmpfs)
(type ephemeral_app_userfaultfd)
(roletype object_r ephemeral_app_userfaultfd)
(type ephemeral_app_block_io_uring)
(roletype object_r ephemeral_app_block_io_uring)
(type ephemeral_app_wrapfd)
(roletype object_r ephemeral_app_wrapfd)
(type evsmanagerd_exec)
(roletype object_r evsmanagerd_exec)
(type fastbootd_iouring)
(roletype object_r fastbootd_iouring)
(type proc_allocinfo)
(roletype object_r proc_allocinfo)
(type config_gz)
(roletype object_r config_gz)
(type proc_consoles)
(roletype object_r proc_consoles)
(type fs_bpf_net_private)
(roletype object_r fs_bpf_net_private)
(type fs_bpf_net_shared)
(roletype object_r fs_bpf_net_shared)
(type fs_bpf_netd_readonly)
(roletype object_r fs_bpf_netd_readonly)
(type fs_bpf_netd_shared)
(roletype object_r fs_bpf_netd_shared)
(type fs_bpf_loader)
(roletype object_r fs_bpf_loader)
(type fs_bpf_lock_contention)
(roletype object_r fs_bpf_lock_contention)
(type fs_bpf_uprobestats)
(roletype object_r fs_bpf_uprobestats)
(type fs_bpf_memevents)
(roletype object_r fs_bpf_memevents)
(type fs_bpf_cputimeinstate)
(roletype object_r fs_bpf_cputimeinstate)
(type fs_bpf_kernelwakelockduration)
(roletype object_r fs_bpf_kernelwakelockduration)
(type fs_bpf_dmabuf)
(roletype object_r fs_bpf_dmabuf)
(type mediadrm_system_data_file)
(roletype object_r mediadrm_system_data_file)
(type user_list_data_file)
(roletype object_r user_list_data_file)
(type storaged_data_file)
(roletype object_r storaged_data_file)
(type wm_trace_data_file)
(roletype object_r wm_trace_data_file)
(type accessibility_trace_data_file)
(roletype object_r accessibility_trace_data_file)
(type perfetto_traces_data_file)
(roletype object_r perfetto_traces_data_file)
(type perfetto_traces_bugreport_data_file)
(roletype object_r perfetto_traces_bugreport_data_file)
(type perfetto_traces_profiling_data_file)
(roletype object_r perfetto_traces_profiling_data_file)
(type perfetto_configs_data_file)
(roletype object_r perfetto_configs_data_file)
(type system_perfetto_config_file)
(roletype object_r system_perfetto_config_file)
(type uprobestats_configs_data_file)
(roletype object_r uprobestats_configs_data_file)
(type oatdump_exec)
(roletype object_r oatdump_exec)
(type sdk_sandbox_system_data_file)
(roletype object_r sdk_sandbox_system_data_file)
(type sdk_sandbox_data_file)
(roletype object_r sdk_sandbox_data_file)
(type pcc_data_file)
(roletype object_r pcc_data_file)
(type debugfs_kcov)
(roletype object_r debugfs_kcov)
(type app_exec_data_file)
(roletype object_r app_exec_data_file)
(type rollback_data_file)
(roletype object_r rollback_data_file)
(type checkin_data_file)
(roletype object_r checkin_data_file)
(type ota_image_data_file)
(roletype object_r ota_image_data_file)
(type gsi_persistent_data_file)
(roletype object_r gsi_persistent_data_file)
(type emergency_data_file)
(roletype object_r emergency_data_file)
(type profcollectd_data_file)
(roletype object_r profcollectd_data_file)
(type apex_art_data_file)
(roletype object_r apex_art_data_file)
(type apex_art_staging_data_file)
(roletype object_r apex_art_staging_data_file)
(type apex_compos_data_file)
(roletype object_r apex_compos_data_file)
(type apex_virt_data_file)
(roletype object_r apex_virt_data_file)
(type apex_tethering_data_file)
(roletype object_r apex_tethering_data_file)
(type apex_uwb_data_file)
(roletype object_r apex_uwb_data_file)
(type apex_wifi_data_file)
(roletype object_r apex_wifi_data_file)
(type apex_appsearch_data_file)
(roletype object_r apex_appsearch_data_file)
(type apex_permission_data_file)
(roletype object_r apex_permission_data_file)
(type apex_scheduling_data_file)
(roletype object_r apex_scheduling_data_file)
(type appsearch_data_file)
(roletype object_r appsearch_data_file)
(type font_data_file)
(roletype object_r font_data_file)
(type dmesgd_data_file)
(roletype object_r dmesgd_data_file)
(type odrefresh_data_file)
(roletype object_r odrefresh_data_file)
(type odsign_data_file)
(roletype object_r odsign_data_file)
(type odsign_metrics_file)
(roletype object_r odsign_metrics_file)
(type vm_data_file)
(roletype object_r vm_data_file)
(type environ_system_data_file)
(roletype object_r environ_system_data_file)
(type pcc_auditlogs_data_file)
(roletype object_r pcc_auditlogs_data_file)
(type bootanim_data_file)
(roletype object_r bootanim_data_file)
(type surfaceflinger_data_file)
(roletype object_r surfaceflinger_data_file)
(type per_boot_file)
(roletype object_r per_boot_file)
(type kvm_device)
(roletype object_r kvm_device)
(type fd_server_exec)
(roletype object_r fd_server_exec)
(type compos_exec)
(roletype object_r compos_exec)
(type compos_key_helper_exec)
(roletype object_r compos_key_helper_exec)
(type prng_seeder_socket)
(roletype object_r prng_seeder_socket)
(type sysfs_dt_avf)
(roletype object_r sysfs_dt_avf)
(type proc_dt_avf)
(roletype object_r proc_dt_avf)
(type system_font_fallback_file)
(roletype object_r system_font_fallback_file)
(type sysfs_uprobe)
(roletype object_r sysfs_uprobe)
(type aconfigd_socket)
(roletype object_r aconfigd_socket)
(type device_config_exec)
(roletype object_r device_config_exec)
(type aconfigd_mainline_socket)
(roletype object_r aconfigd_mainline_socket)
(type system_aconfig_storage_file)
(roletype object_r system_aconfig_storage_file)
(type vendor_aconfig_storage_file)
(roletype object_r vendor_aconfig_storage_file)
(type connectivityblob_data_file)
(roletype object_r connectivityblob_data_file)
(type mainline_supplicant_data_file)
(roletype object_r mainline_supplicant_data_file)
(type pre_reboot_dexopt_file)
(roletype object_r pre_reboot_dexopt_file)
(type pre_reboot_dexopt_artd_file)
(roletype object_r pre_reboot_dexopt_artd_file)
(type apk_metadata_file)
(roletype object_r apk_metadata_file)
(type sysfs_pgsize_migration)
(roletype object_r sysfs_pgsize_migration)
(type sysfs_btf)
(roletype object_r sysfs_btf)
(type sysfs_firmware_acpi_tables)
(roletype object_r sysfs_firmware_acpi_tables)
(type pbtombstone_exec)
(roletype object_r pbtombstone_exec)
(type microdroid_managed_socket_file)
(roletype object_r microdroid_managed_socket_file)
(type storage_area_app_dir)
(roletype object_r storage_area_app_dir)
(type storage_area_dir)
(roletype object_r storage_area_dir)
(type storage_area_content_file)
(roletype object_r storage_area_content_file)
(type storage_area_key_file)
(roletype object_r storage_area_key_file)
(type tradeinmode_metadata_file)
(roletype object_r tradeinmode_metadata_file)
(type prefetch_metadata_file)
(roletype object_r prefetch_metadata_file)
(type libprocessgroup_metadata_file)
(roletype object_r libprocessgroup_metadata_file)
(type exp_partition_data_file)
(roletype object_r exp_partition_data_file)
(type statsd_atoms_list_file)
(roletype object_r statsd_atoms_list_file)
(type sysfs_ublk)
(roletype object_r sysfs_ublk)
(type aiseal_data_file)
(roletype object_r aiseal_data_file)
(type zygote_next_socket)
(roletype object_r zygote_next_socket)
(type uid_allowlist_policy)
(roletype object_r uid_allowlist_policy)
(type sysfs_binder_impl)
(roletype object_r sysfs_binder_impl)
(type fuseblkd_exec)
(roletype object_r fuseblkd_exec)
(type fuseblkd)
(roletype object_r fuseblkd)
(type fuseblkd_untrusted_exec)
(roletype object_r fuseblkd_untrusted_exec)
(type fuseblkd_untrusted)
(roletype object_r fuseblkd_untrusted)
(type fwk_bufferhub)
(roletype object_r fwk_bufferhub)
(type fwk_bufferhub_exec)
(roletype object_r fwk_bufferhub_exec)
(type gki_apex_prepostinstall)
(roletype object_r gki_apex_prepostinstall)
(type gki_apex_prepostinstall_exec)
(roletype object_r gki_apex_prepostinstall_exec)
(type gmscore_app_userfaultfd)
(roletype object_r gmscore_app_userfaultfd)
(type gmscore_app_block_io_uring)
(roletype object_r gmscore_app_block_io_uring)
(type gmscore_app_wrapfd)
(roletype object_r gmscore_app_wrapfd)
(type gpuservice_exec)
(roletype object_r gpuservice_exec)
(type gsid)
(roletype object_r gsid)
(type gsid_exec)
(roletype object_r gsid_exec)
(type hal_allocator_default)
(roletype object_r hal_allocator_default)
(type hal_allocator_default_exec)
(roletype object_r hal_allocator_default_exec)
(type hal_keymint_system)
(roletype object_r hal_keymint_system)
(type hal_keymint_system_exec)
(roletype object_r hal_keymint_system_exec)
(type hal_widevine_system)
(roletype object_r hal_widevine_system)
(type hal_widevine_system_exec)
(roletype object_r hal_widevine_system_exec)
(type heapprofd_exec)
(roletype object_r heapprofd_exec)
(type heapprofd_tmpfs)
(roletype object_r heapprofd_tmpfs)
(type hidl_lazy_test_server)
(roletype object_r hidl_lazy_test_server)
(type hidl_lazy_test_server_exec)
(roletype object_r hidl_lazy_test_server_exec)
(type hidservice)
(roletype object_r hidservice)
(type hidservice_exec)
(roletype object_r hidservice_exec)
(type hal_lazy_test_hwservice)
(roletype object_r hal_lazy_test_hwservice)
(type incident_exec)
(roletype object_r incident_exec)
(type incident_helper_exec)
(roletype object_r incident_helper_exec)
(type incidentd_exec)
(roletype object_r incidentd_exec)
(type incidentd_userfaultfd)
(roletype object_r incidentd_userfaultfd)
(type isolated_app_userfaultfd)
(roletype object_r isolated_app_userfaultfd)
(type isolated_app_block_io_uring)
(roletype object_r isolated_app_block_io_uring)
(type isolated_app_wrapfd)
(roletype object_r isolated_app_wrapfd)
(type isolated_compute_app_userfaultfd)
(roletype object_r isolated_compute_app_userfaultfd)
(type isolated_compute_app_block_io_uring)
(roletype object_r isolated_compute_app_block_io_uring)
(type isolated_compute_app_wrapfd)
(roletype object_r isolated_compute_app_wrapfd)
(type iw)
(roletype object_r iw)
(type iw_exec)
(roletype object_r iw_exec)
(type kcmdlinectrl)
(roletype object_r kcmdlinectrl)
(type kcmdlinectrl_exec)
(roletype object_r kcmdlinectrl_exec)
(type kcmdlinemodprobe)
(roletype object_r kcmdlinemodprobe)
(type kcmdlinemodprobe_exec)
(roletype object_r kcmdlinemodprobe_exec)
(type shell_key)
(roletype object_r shell_key)
(type su_key)
(roletype object_r su_key)
(type vold_key)
(roletype object_r vold_key)
(type odsign_key)
(roletype object_r odsign_key)
(type locksettings_key)
(roletype object_r locksettings_key)
(type keychain_key)
(roletype object_r keychain_key)
(type resume_on_reboot_key)
(roletype object_r resume_on_reboot_key)
(type linkerconfig)
(roletype object_r linkerconfig)
(type linkerconfig_exec)
(roletype object_r linkerconfig_exec)
(type linux_vm_setup)
(roletype object_r linux_vm_setup)
(type linux_vm_setup_exec)
(roletype object_r linux_vm_setup_exec)
(type logd_iouring)
(roletype object_r logd_iouring)
(type lpdumpd)
(roletype object_r lpdumpd)
(type lpdumpd_exec)
(roletype object_r lpdumpd_exec)
(type mdnsd_exec)
(roletype object_r mdnsd_exec)
(type mediacodeclist_generator)
(roletype object_r mediacodeclist_generator)
(type mediacodeclist_generator_exec)
(roletype object_r mediacodeclist_generator_exec)
(type mediaprovider_userfaultfd)
(roletype object_r mediaprovider_userfaultfd)
(type mediaprovider_block_io_uring)
(roletype object_r mediaprovider_block_io_uring)
(type mediaprovider_wrapfd)
(roletype object_r mediaprovider_wrapfd)
(type mediaprovider_app)
(roletype object_r mediaprovider_app)
(type mediaprovider_app_userfaultfd)
(roletype object_r mediaprovider_app_userfaultfd)
(type mediaprovider_app_block_io_uring)
(roletype object_r mediaprovider_app_block_io_uring)
(type mediaprovider_app_wrapfd)
(roletype object_r mediaprovider_app_wrapfd)
(type mediatranscoding_exec)
(roletype object_r mediatranscoding_exec)
(type mediatranscoding_tmpfs)
(roletype object_r mediatranscoding_tmpfs)
(type mediatuner)
(roletype object_r mediatuner)
(type mediatuner_exec)
(roletype object_r mediatuner_exec)
(type memcgv2_activation_depth)
(roletype object_r memcgv2_activation_depth)
(type memcgv2_activation_depth_exec)
(roletype object_r memcgv2_activation_depth_exec)
(type migrate_legacy_obb_data)
(roletype object_r migrate_legacy_obb_data)
(type migrate_legacy_obb_data_exec)
(roletype object_r migrate_legacy_obb_data_exec)
(type misctrl)
(roletype object_r misctrl)
(type misctrl_exec)
(roletype object_r misctrl_exec)
(type mm_events)
(roletype object_r mm_events)
(type mm_events_exec)
(roletype object_r mm_events_exec)
(type mmd)
(roletype object_r mmd)
(type mmd_exec)
(roletype object_r mmd_exec)
(type mmd_setup_exec)
(roletype object_r mmd_setup_exec)
(type zram_data_file)
(roletype object_r zram_data_file)
(type mtectrl)
(roletype object_r mtectrl)
(type mtectrl_exec)
(roletype object_r mtectrl_exec)
(type native_app_zygote)
(roletype object_r native_app_zygote)
(type network_stack_userfaultfd)
(roletype object_r network_stack_userfaultfd)
(type network_stack_block_io_uring)
(roletype object_r network_stack_block_io_uring)
(type network_stack_wrapfd)
(roletype object_r network_stack_wrapfd)
(type nfc_userfaultfd)
(roletype object_r nfc_userfaultfd)
(type nfc_block_io_uring)
(roletype object_r nfc_block_io_uring)
(type nfc_wrapfd)
(roletype object_r nfc_wrapfd)
(type odrefresh)
(roletype object_r odrefresh)
(type odrefresh_exec)
(roletype object_r odrefresh_exec)
(type odrefresh_userfaultfd)
(roletype object_r odrefresh_userfaultfd)
(type odsign)
(roletype object_r odsign)
(type odsign_exec)
(roletype object_r odsign_exec)
(type odsign_devpts)
(roletype object_r odsign_devpts)
(type omapi_exec)
(roletype object_r omapi_exec)
(type ot_ctl)
(roletype object_r ot_ctl)
(type ot_ctl_exec)
(roletype object_r ot_ctl_exec)
(type ot_daemon)
(roletype object_r ot_daemon)
(type ot_daemon_exec)
(roletype object_r ot_daemon_exec)
(type overlay_remounter)
(roletype object_r overlay_remounter)
(type overlay_remounter_exec)
(roletype object_r overlay_remounter_exec)
(type pcc_component)
(roletype object_r pcc_component)
(type pcc_component_userfaultfd)
(roletype object_r pcc_component_userfaultfd)
(type pcc_component_block_io_uring)
(roletype object_r pcc_component_block_io_uring)
(type pcc_component_wrapfd)
(roletype object_r pcc_component_wrapfd)
(type perfetto_exec)
(roletype object_r perfetto_exec)
(type perfetto_tmpfs)
(roletype object_r perfetto_tmpfs)
(type permissioncontroller_app)
(roletype object_r permissioncontroller_app)
(type permissioncontroller_app_userfaultfd)
(roletype object_r permissioncontroller_app_userfaultfd)
(type permissioncontroller_app_block_io_uring)
(roletype object_r permissioncontroller_app_block_io_uring)
(type permissioncontroller_app_wrapfd)
(roletype object_r permissioncontroller_app_wrapfd)
(type platform_app_userfaultfd)
(roletype object_r platform_app_userfaultfd)
(type platform_app_block_io_uring)
(roletype object_r platform_app_block_io_uring)
(type platform_app_wrapfd)
(roletype object_r platform_app_wrapfd)
(type platform_app_36_userfaultfd)
(roletype object_r platform_app_36_userfaultfd)
(type platform_app_36_block_io_uring)
(roletype object_r platform_app_36_block_io_uring)
(type platform_app_36_wrapfd)
(roletype object_r platform_app_36_wrapfd)
(type platform_app_all_virtualizationmanager)
(roletype object_r platform_app_all_virtualizationmanager)
(type platform_app_all_virtmgr_crosvm)
(roletype object_r platform_app_all_virtmgr_crosvm)
(type pmgd)
(roletype object_r pmgd)
(type pmgd_exec)
(roletype object_r pmgd_exec)
(type pmgd_data_file)
(roletype object_r pmgd_data_file)
(type postinstall_exec)
(roletype object_r postinstall_exec)
(type prefetch_exec)
(roletype object_r prefetch_exec)
(type preloads_copy)
(roletype object_r preloads_copy)
(type preloads_copy_exec)
(roletype object_r preloads_copy_exec)
(type preopt2cachename)
(roletype object_r preopt2cachename)
(type preopt2cachename_exec)
(roletype object_r preopt2cachename_exec)
(type priv_app_userfaultfd)
(roletype object_r priv_app_userfaultfd)
(type priv_app_block_io_uring)
(roletype object_r priv_app_block_io_uring)
(type priv_app_wrapfd)
(roletype object_r priv_app_wrapfd)
(type priv_app_devpts)
(roletype object_r priv_app_devpts)
(type priv_app_36_userfaultfd)
(roletype object_r priv_app_36_userfaultfd)
(type priv_app_36_block_io_uring)
(roletype object_r priv_app_36_block_io_uring)
(type priv_app_36_wrapfd)
(roletype object_r priv_app_36_wrapfd)
(type priv_app_36_devpts)
(roletype object_r priv_app_36_devpts)
(type priv_app_all_virtualizationmanager)
(roletype object_r priv_app_all_virtualizationmanager)
(type priv_app_all_virtmgr_crosvm)
(roletype object_r priv_app_all_virtmgr_crosvm)
(type prng_seeder_exec)
(roletype object_r prng_seeder_exec)
(type profcollectd)
(roletype object_r profcollectd)
(type profcollectd_exec)
(roletype object_r profcollectd_exec)
(type adb_timeout_prop)
(roletype object_r adb_timeout_prop)
(type adbd_prop)
(roletype object_r adbd_prop)
(type adbd_tradeinmode_prop)
(roletype object_r adbd_tradeinmode_prop)
(type aiseal_prop)
(roletype object_r aiseal_prop)
(type apexd_payload_metadata_prop)
(roletype object_r apexd_payload_metadata_prop)
(type apexd_private_prop)
(roletype object_r apexd_private_prop)
(type appsearch_vm_prop)
(roletype object_r appsearch_vm_prop)
(type bluetooth_lea_prop)
(roletype object_r bluetooth_lea_prop)
(type casefolding_status_prop)
(roletype object_r casefolding_status_prop)
(type casefolding_override_prop)
(roletype object_r casefolding_override_prop)
(type ctl_snapuserd_prop)
(roletype object_r ctl_snapuserd_prop)
(type ctl_prefetch_prop)
(roletype object_r ctl_prefetch_prop)
(type ctl_uprobestats_prop)
(roletype object_r ctl_uprobestats_prop)
(type crashrecovery_prop)
(roletype object_r crashrecovery_prop)
(type debug_tracing_desktop_mode_visible_tasks_prop)
(roletype object_r debug_tracing_desktop_mode_visible_tasks_prop)
(type device_config_core_experiments_team_internal_prop)
(roletype object_r device_config_core_experiments_team_internal_prop)
(type device_config_lmkd_native_prop)
(roletype object_r device_config_lmkd_native_prop)
(type device_config_memory_management_native_boot_prop)
(roletype object_r device_config_memory_management_native_boot_prop)
(type device_config_mglru_native_prop)
(roletype object_r device_config_mglru_native_prop)
(type device_config_mmd_native_prop)
(roletype object_r device_config_mmd_native_prop)
(type device_config_profcollect_native_boot_prop)
(roletype object_r device_config_profcollect_native_boot_prop)
(type device_config_remote_key_provisioning_native_prop)
(roletype object_r device_config_remote_key_provisioning_native_prop)
(type device_config_statsd_native_prop)
(roletype object_r device_config_statsd_native_prop)
(type device_config_statsd_native_boot_prop)
(roletype object_r device_config_statsd_native_boot_prop)
(type device_config_storage_native_boot_prop)
(roletype object_r device_config_storage_native_boot_prop)
(type device_config_sys_traced_prop)
(roletype object_r device_config_sys_traced_prop)
(type device_config_window_manager_native_boot_prop)
(roletype object_r device_config_window_manager_native_boot_prop)
(type device_config_configuration_prop)
(roletype object_r device_config_configuration_prop)
(type device_config_connectivity_prop)
(roletype object_r device_config_connectivity_prop)
(type device_config_swcodec_native_prop)
(roletype object_r device_config_swcodec_native_prop)
(type device_config_tethering_u_or_later_native_prop)
(roletype object_r device_config_tethering_u_or_later_native_prop)
(type dmesgd_start_prop)
(roletype object_r dmesgd_start_prop)
(type fastbootd_protocol_prop)
(roletype object_r fastbootd_protocol_prop)
(type gsid_prop)
(roletype object_r gsid_prop)
(type hsum_boot_strategy_prop)
(roletype object_r hsum_boot_strategy_prop)
(type init_mnt_ns_prop)
(roletype object_r init_mnt_ns_prop)
(type init_perf_lsm_hooks_prop)
(roletype object_r init_perf_lsm_hooks_prop)
(type init_service_status_private_prop)
(roletype object_r init_service_status_private_prop)
(type init_storage_prop)
(roletype object_r init_storage_prop)
(type init_svc_debug_prop)
(roletype object_r init_svc_debug_prop)
(type kcmdline_prop)
(roletype object_r kcmdline_prop)
(type keystore_diagnostics_prop)
(roletype object_r keystore_diagnostics_prop)
(type keystore_listen_prop)
(roletype object_r keystore_listen_prop)
(type last_boot_reason_prop)
(roletype object_r last_boot_reason_prop)
(type localization_prop)
(roletype object_r localization_prop)
(type logd_auditrate_prop)
(roletype object_r logd_auditrate_prop)
(type lower_kptr_restrict_prop)
(roletype object_r lower_kptr_restrict_prop)
(type mmd_status_prop)
(roletype object_r mmd_status_prop)
(type net_464xlat_fromvendor_prop)
(roletype object_r net_464xlat_fromvendor_prop)
(type net_connectivity_prop)
(roletype object_r net_connectivity_prop)
(type netd_stable_secret_prop)
(roletype object_r netd_stable_secret_prop)
(type next_boot_prop)
(roletype object_r next_boot_prop)
(type odsign_prop)
(roletype object_r odsign_prop)
(type misctrl_prop)
(roletype object_r misctrl_prop)
(type perf_drop_caches_prop)
(roletype object_r perf_drop_caches_prop)
(type pm_prop)
(roletype object_r pm_prop)
(type prefetch_service_prop)
(roletype object_r prefetch_service_prop)
(type profcollectd_enabled_prop)
(roletype object_r profcollectd_enabled_prop)
(type profcollectd_node_id_prop)
(roletype object_r profcollectd_node_id_prop)
(type radio_cdma_ecm_prop)
(roletype object_r radio_cdma_ecm_prop)
(type remote_prov_cert_prop)
(roletype object_r remote_prov_cert_prop)
(type rollback_test_prop)
(roletype object_r rollback_test_prop)
(type setupwizard_prop)
(roletype object_r setupwizard_prop)
(type snapshotctl_prop)
(roletype object_r snapshotctl_prop)
(type snapuserd_prop)
(roletype object_r snapuserd_prop)
(type system_adbd_prop)
(roletype object_r system_adbd_prop)
(type system_audio_config_prop)
(roletype object_r system_audio_config_prop)
(type timezone_metadata_prop)
(roletype object_r timezone_metadata_prop)
(type traced_config_prop)
(roletype object_r traced_config_prop)
(type traced_perf_enabled_prop)
(roletype object_r traced_perf_enabled_prop)
(type traced_relay_relay_port_prop)
(roletype object_r traced_relay_relay_port_prop)
(type uprobestats_start_with_config_prop)
(roletype object_r uprobestats_start_with_config_prop)
(type tuner_server_ctl_prop)
(roletype object_r tuner_server_ctl_prop)
(type userspace_reboot_log_prop)
(roletype object_r userspace_reboot_log_prop)
(type userspace_reboot_test_prop)
(roletype object_r userspace_reboot_test_prop)
(type verity_status_prop)
(roletype object_r verity_status_prop)
(type zygote_wrap_prop)
(roletype object_r zygote_wrap_prop)
(type ctl_mediatranscoding_prop)
(roletype object_r ctl_mediatranscoding_prop)
(type ctl_odsign_prop)
(roletype object_r ctl_odsign_prop)
(type virtualizationservice_prop)
(roletype object_r virtualizationservice_prop)
(type ctl_apex_load_prop)
(roletype object_r ctl_apex_load_prop)
(type sensors_config_prop)
(roletype object_r sensors_config_prop)
(type hypervisor_pvmfw_prop)
(roletype object_r hypervisor_pvmfw_prop)
(type hypervisor_virtualizationmanager_prop)
(roletype object_r hypervisor_virtualizationmanager_prop)
(type game_manager_config_prop)
(roletype object_r game_manager_config_prop)
(type hidl_memory_prop)
(roletype object_r hidl_memory_prop)
(type suspend_debug_prop)
(roletype object_r suspend_debug_prop)
(type system_service_enable_prop)
(roletype object_r system_service_enable_prop)
(type ctl_artd_pre_reboot_prop)
(roletype object_r ctl_artd_pre_reboot_prop)
(type trusty_security_vm_sys_prop)
(roletype object_r trusty_security_vm_sys_prop)
(type trusty_widevine_vm_sys_prop)
(roletype object_r trusty_widevine_vm_sys_prop)
(type hint_manager_config_prop)
(roletype object_r hint_manager_config_prop)
(type avf_vm_traced_relay_enabled_prop)
(roletype object_r avf_vm_traced_relay_enabled_prop)
(type zygote_zygote_next_server_status_prop)
(roletype object_r zygote_zygote_next_server_status_prop)
(type zygote_zygote_next_boot_config_prop)
(roletype object_r zygote_zygote_next_boot_config_prop)
(type pcc_audit_mode_prop)
(roletype object_r pcc_audit_mode_prop)
(type binder_cache_adservices_server_prop)
(roletype object_r binder_cache_adservices_server_prop)
(type bionic_linker_16kb_app_compat_prop)
(roletype object_r bionic_linker_16kb_app_compat_prop)
(type device_config_virtualization_framework_native_prop)
(roletype object_r device_config_virtualization_framework_native_prop)
(type fstype_prop)
(roletype object_r fstype_prop)
(type log_file_logger_prop)
(roletype object_r log_file_logger_prop)
(type mmd_shared_status_prop)
(roletype object_r mmd_shared_status_prop)
(type page_size_prop)
(roletype object_r page_size_prop)
(type pm_16kb_app_compat_prop)
(roletype object_r pm_16kb_app_compat_prop)
(type service_sf_present_timestamp_prop)
(roletype object_r service_sf_present_timestamp_prop)
(type statsd_atoms_list_version_prop)
(roletype object_r statsd_atoms_list_version_prop)
(type trusty_coverage_prop)
(roletype object_r trusty_coverage_prop)
(type pcc_audit_mode_client_prop)
(roletype object_r pcc_audit_mode_client_prop)
(type dumpstate_last_id_prop)
(roletype object_r dumpstate_last_id_prop)
(type thermal_profile_prop)
(roletype object_r thermal_profile_prop)
(type arm64_memtag_bootctl_prop)
(roletype object_r arm64_memtag_bootctl_prop)
(type avf_virtualizationservice_prop)
(roletype object_r avf_virtualizationservice_prop)
(type context_hub_chipset_prop)
(roletype object_r context_hub_chipset_prop)
(type high_barometer_quality_prop)
(roletype object_r high_barometer_quality_prop)
(type mmd_prop)
(roletype object_r mmd_prop)
(type mmd_shared_prop)
(roletype object_r mmd_shared_prop)
(type prefetch_boot_prop)
(roletype object_r prefetch_boot_prop)
(type sensors_hal_prop)
(roletype object_r sensors_hal_prop)
(type strongbox_prop)
(roletype object_r strongbox_prop)
(type usb_disable_when_locked_prop)
(roletype object_r usb_disable_when_locked_prop)
(type userdata_alias_remove_prop)
(roletype object_r userdata_alias_remove_prop)
(type radio_userfaultfd)
(roletype object_r radio_userfaultfd)
(type radio_block_io_uring)
(roletype object_r radio_block_io_uring)
(type radio_wrapfd)
(roletype object_r radio_wrapfd)
(type remount)
(roletype object_r remount)
(type remount_exec)
(roletype object_r remount_exec)
(type rkp_cert_processor)
(roletype object_r rkp_cert_processor)
(type rkp_cert_processor_exec)
(roletype object_r rkp_cert_processor_exec)
(type rkpd)
(roletype object_r rkpd)
(type rkpd_exec)
(roletype object_r rkpd_exec)
(type rkpdapp_userfaultfd)
(roletype object_r rkpdapp_userfaultfd)
(type rkpdapp_block_io_uring)
(roletype object_r rkpdapp_block_io_uring)
(type rkpdapp_wrapfd)
(roletype object_r rkpdapp_wrapfd)
(type rss_hwm_reset_exec)
(roletype object_r rss_hwm_reset_exec)
(type runas_app_userfaultfd)
(roletype object_r runas_app_userfaultfd)
(type runas_app_block_io_uring)
(roletype object_r runas_app_block_io_uring)
(type runas_app_wrapfd)
(roletype object_r runas_app_wrapfd)
(type sdk_sandbox_34)
(roletype object_r sdk_sandbox_34)
(type sdk_sandbox_34_userfaultfd)
(roletype object_r sdk_sandbox_34_userfaultfd)
(type sdk_sandbox_34_block_io_uring)
(roletype object_r sdk_sandbox_34_block_io_uring)
(type sdk_sandbox_34_wrapfd)
(roletype object_r sdk_sandbox_34_wrapfd)
(type sdk_sandbox_audit)
(roletype object_r sdk_sandbox_audit)
(type sdk_sandbox_audit_userfaultfd)
(roletype object_r sdk_sandbox_audit_userfaultfd)
(type sdk_sandbox_audit_block_io_uring)
(roletype object_r sdk_sandbox_audit_block_io_uring)
(type sdk_sandbox_audit_wrapfd)
(roletype object_r sdk_sandbox_audit_wrapfd)
(type sdk_sandbox_next)
(roletype object_r sdk_sandbox_next)
(type sdk_sandbox_next_userfaultfd)
(roletype object_r sdk_sandbox_next_userfaultfd)
(type sdk_sandbox_next_block_io_uring)
(roletype object_r sdk_sandbox_next_block_io_uring)
(type sdk_sandbox_next_wrapfd)
(roletype object_r sdk_sandbox_next_wrapfd)
(type secure_element_userfaultfd)
(roletype object_r secure_element_userfaultfd)
(type secure_element_block_io_uring)
(roletype object_r secure_element_block_io_uring)
(type secure_element_wrapfd)
(roletype object_r secure_element_wrapfd)
(type serialservice_exec)
(roletype object_r serialservice_exec)
(type serialservice_devpts)
(roletype object_r serialservice_devpts)
(type activity_structured_service)
(roletype object_r activity_structured_service)
(type allowlist_service)
(roletype object_r allowlist_service)
(type ambient_context_service)
(roletype object_r ambient_context_service)
(type aoad_service)
(roletype object_r aoad_service)
(type authentication_policy_service)
(roletype object_r authentication_policy_service)
(type casefolding_remover_service)
(roletype object_r casefolding_remover_service)
(type contextual_mode_service)
(roletype object_r contextual_mode_service)
(type attention_service)
(roletype object_r attention_service)
(type bg_install_control_service)
(roletype object_r bg_install_control_service)
(type binder_stats_consumer_service)
(roletype object_r binder_stats_consumer_service)
(type compos_service)
(roletype object_r compos_service)
(type communal_service)
(roletype object_r communal_service)
(type content_restriction_service)
(roletype object_r content_restriction_service)
(type d2d_connectivity_service)
(roletype object_r d2d_connectivity_service)
(type dynamic_system_service)
(roletype object_r dynamic_system_service)
(type feature_flags_service)
(roletype object_r feature_flags_service)
(type file_service)
(roletype object_r file_service)
(type fwk_devicestate_service)
(roletype object_r fwk_devicestate_service)
(type gsi_service)
(roletype object_r gsi_service)
(type incidentcompanion_service)
(roletype object_r incidentcompanion_service)
(type logcat_service)
(roletype object_r logcat_service)
(type logd_service)
(roletype object_r logd_service)
(type mediacodeclist_generator_service)
(roletype object_r mediacodeclist_generator_service)
(type mediatuner_service)
(roletype object_r mediatuner_service)
(type mmd_service)
(roletype object_r mmd_service)
(type on_device_intelligence_service)
(roletype object_r on_device_intelligence_service)
(type content_safety_service)
(roletype object_r content_safety_service)
(type pcc_sandbox_native_service)
(roletype object_r pcc_sandbox_native_service)
(type pcc_sandbox_service)
(roletype object_r pcc_sandbox_service)
(type personal_context_service)
(roletype object_r personal_context_service)
(type profcollectd_service)
(roletype object_r profcollectd_service)
(type protolog_configuration_service)
(roletype object_r protolog_configuration_service)
(type resolver_service)
(roletype object_r resolver_service)
(type rkpd_registrar_service)
(roletype object_r rkpd_registrar_service)
(type rkpd_refresh_service)
(roletype object_r rkpd_refresh_service)
(type rkp_cert_processor_service)
(roletype object_r rkp_cert_processor_service)
(type safety_center_service)
(roletype object_r safety_center_service)
(type stats_service)
(roletype object_r stats_service)
(type statsbootstrap_service)
(roletype object_r statsbootstrap_service)
(type statscompanion_service)
(roletype object_r statscompanion_service)
(type statsmanager_service)
(roletype object_r statsmanager_service)
(type supervision_service)
(roletype object_r supervision_service)
(type task_continuity_service)
(roletype object_r task_continuity_service)
(type tracingproxy_service)
(roletype object_r tracingproxy_service)
(type tradeinmode_service)
(roletype object_r tradeinmode_service)
(type transparency_service)
(roletype object_r transparency_service)
(type trust_token_service)
(roletype object_r trust_token_service)
(type accessor_trusty_keymint_comm_service)
(roletype object_r accessor_trusty_keymint_comm_service)
(type trusty_keymint_comm_service)
(roletype object_r trusty_keymint_comm_service)
(type accessor_trusty_gatekeeper_service)
(roletype object_r accessor_trusty_gatekeeper_service)
(type accessor_trusty_hwcrypto_sharedsecret_service)
(roletype object_r accessor_trusty_hwcrypto_sharedsecret_service)
(type accessor_trusty_widevine_comm_service)
(roletype object_r accessor_trusty_widevine_comm_service)
(type trusty_widevine_comm_service)
(roletype object_r trusty_widevine_comm_service)
(type accessor_trusty_keymint_provisioning_service)
(roletype object_r accessor_trusty_keymint_provisioning_service)
(type accessor_trusty_keymint_provisioning_thal_service)
(roletype object_r accessor_trusty_keymint_provisioning_thal_service)
(type trusty_keymint_provisioning_thal_service)
(roletype object_r trusty_keymint_provisioning_thal_service)
(type accessor_trusty_keymint_remotelyprovisionedcomponent_service)
(roletype object_r accessor_trusty_keymint_remotelyprovisionedcomponent_service)
(type accessor_trusty_keymint_secureclock_service)
(roletype object_r accessor_trusty_keymint_secureclock_service)
(type vfio_handler_service)
(roletype object_r vfio_handler_service)
(type virtualization_maintenance_service)
(roletype object_r virtualization_maintenance_service)
(type vm_tethering_service)
(roletype object_r vm_tethering_service)
(type vmnic_service)
(roletype object_r vmnic_service)
(type uce_service)
(roletype object_r uce_service)
(type ui_latency_stats_service)
(roletype object_r ui_latency_stats_service)
(type wearable_sensing_service)
(roletype object_r wearable_sensing_service)
(type wifi_mainline_supplicant_service)
(roletype object_r wifi_mainline_supplicant_service)
(type dynamic_instrumentation_service)
(roletype object_r dynamic_instrumentation_service)
(type uprobestats_service)
(roletype object_r uprobestats_service)
(type uprobestats_bridge_service)
(roletype object_r uprobestats_bridge_service)
(type advanced_protection_service)
(roletype object_r advanced_protection_service)
(type multisensory_manager_service)
(roletype object_r multisensory_manager_service)
(type app_data_backup_service)
(roletype object_r app_data_backup_service)
(type ranging_service)
(roletype object_r ranging_service)
(type aiseal_host_service)
(roletype object_r aiseal_host_service)
(type aiseal_internal_service)
(roletype object_r aiseal_internal_service)
(type theme_service)
(roletype object_r theme_service)
(type usb_auth_service)
(roletype object_r usb_auth_service)
(type hid_service)
(roletype object_r hid_service)
(type shared_relro_userfaultfd)
(roletype object_r shared_relro_userfaultfd)
(type shared_relro_block_io_uring)
(roletype object_r shared_relro_block_io_uring)
(type shared_relro_wrapfd)
(roletype object_r shared_relro_wrapfd)
(type shell_userfaultfd)
(roletype object_r shell_userfaultfd)
(type shell_block_io_uring)
(roletype object_r shell_block_io_uring)
(type shell_wrapfd)
(roletype object_r shell_wrapfd)
(type shell_virtualizationmanager)
(roletype object_r shell_virtualizationmanager)
(type shell_virtmgr_crosvm)
(roletype object_r shell_virtmgr_crosvm)
(type simpleperf_exec)
(roletype object_r simpleperf_exec)
(type simpleperf_userfaultfd)
(roletype object_r simpleperf_userfaultfd)
(type simpleperf_block_io_uring)
(roletype object_r simpleperf_block_io_uring)
(type simpleperf_wrapfd)
(roletype object_r simpleperf_wrapfd)
(type simpleperf_boot)
(roletype object_r simpleperf_boot)
(type simpleperf_boot_data_file)
(roletype object_r simpleperf_boot_data_file)
(type snapshotctl)
(roletype object_r snapshotctl)
(type snapshotctl_exec)
(roletype object_r snapshotctl_exec)
(type snapuserd)
(roletype object_r snapuserd)
(type snapuserd_exec)
(roletype object_r snapuserd_exec)
(type snapuserd_iouring)
(roletype object_r snapuserd_iouring)
(type stats)
(roletype object_r stats)
(type stats_exec)
(roletype object_r stats_exec)
(type statsd_iouring)
(roletype object_r statsd_iouring)
(type storaged)
(roletype object_r storaged)
(type storaged_exec)
(roletype object_r storaged_exec)
(type su_virtualizationmanager)
(roletype object_r su_virtualizationmanager)
(type su_virtmgr_crosvm)
(roletype object_r su_virtmgr_crosvm)
(type su_userfaultfd)
(roletype object_r su_userfaultfd)
(type su_block_io_uring)
(roletype object_r su_block_io_uring)
(type su_wrapfd)
(roletype object_r su_wrapfd)
(type surfaceflinger_exec)
(roletype object_r surfaceflinger_exec)
(type system_app_userfaultfd)
(roletype object_r system_app_userfaultfd)
(type system_app_block_io_uring)
(roletype object_r system_app_block_io_uring)
(type system_app_wrapfd)
(roletype object_r system_app_wrapfd)
(type system_server_userfaultfd)
(roletype object_r system_server_userfaultfd)
(type app_backup_staging_file)
(roletype object_r app_backup_staging_file)
(type system_server_startup)
(roletype object_r system_server_startup)
(type system_server_startup_tmpfs)
(roletype object_r system_server_startup_tmpfs)
(type system_suspend)
(roletype object_r system_suspend)
(type system_suspend_exec)
(roletype object_r system_suspend_exec)
(type test_pkvm_tee_service)
(roletype object_r test_pkvm_tee_service)
(type guest_ffa_tee_service)
(roletype object_r guest_ffa_tee_service)
(type trace_redactor_exec)
(roletype object_r trace_redactor_exec)
(type trace_redactor)
(roletype object_r trace_redactor)
(type traced_exec)
(roletype object_r traced_exec)
(type traced_perf_exec)
(roletype object_r traced_perf_exec)
(type traced_probes_exec)
(roletype object_r traced_probes_exec)
(type traced_probes_tmpfs)
(roletype object_r traced_probes_tmpfs)
(type traceur_app_userfaultfd)
(roletype object_r traceur_app_userfaultfd)
(type traceur_app_block_io_uring)
(roletype object_r traceur_app_block_io_uring)
(type traceur_app_wrapfd)
(roletype object_r traceur_app_wrapfd)
(type tradeinmode)
(roletype object_r tradeinmode)
(type tradeinmode_exec)
(roletype object_r tradeinmode_exec)
(type untrusted_app_userfaultfd)
(roletype object_r untrusted_app_userfaultfd)
(type untrusted_app_block_io_uring)
(roletype object_r untrusted_app_block_io_uring)
(type untrusted_app_wrapfd)
(roletype object_r untrusted_app_wrapfd)
(type untrusted_app_25_userfaultfd)
(roletype object_r untrusted_app_25_userfaultfd)
(type untrusted_app_25_block_io_uring)
(roletype object_r untrusted_app_25_block_io_uring)
(type untrusted_app_25_wrapfd)
(roletype object_r untrusted_app_25_wrapfd)
(type untrusted_app_27_userfaultfd)
(roletype object_r untrusted_app_27_userfaultfd)
(type untrusted_app_27_block_io_uring)
(roletype object_r untrusted_app_27_block_io_uring)
(type untrusted_app_27_wrapfd)
(roletype object_r untrusted_app_27_wrapfd)
(type untrusted_app_29_userfaultfd)
(roletype object_r untrusted_app_29_userfaultfd)
(type untrusted_app_29_block_io_uring)
(roletype object_r untrusted_app_29_block_io_uring)
(type untrusted_app_29_wrapfd)
(roletype object_r untrusted_app_29_wrapfd)
(type untrusted_app_30_userfaultfd)
(roletype object_r untrusted_app_30_userfaultfd)
(type untrusted_app_30_block_io_uring)
(roletype object_r untrusted_app_30_block_io_uring)
(type untrusted_app_30_wrapfd)
(roletype object_r untrusted_app_30_wrapfd)
(type untrusted_app_32_userfaultfd)
(roletype object_r untrusted_app_32_userfaultfd)
(type untrusted_app_32_block_io_uring)
(roletype object_r untrusted_app_32_block_io_uring)
(type untrusted_app_32_wrapfd)
(roletype object_r untrusted_app_32_wrapfd)
(type untrusted_app_34_userfaultfd)
(roletype object_r untrusted_app_34_userfaultfd)
(type untrusted_app_34_block_io_uring)
(roletype object_r untrusted_app_34_block_io_uring)
(type untrusted_app_34_wrapfd)
(roletype object_r untrusted_app_34_wrapfd)
(type untrusted_app_all_devpts)
(roletype object_r untrusted_app_all_devpts)
(type untrusted_app_all_virtualizationmanager)
(roletype object_r untrusted_app_all_virtualizationmanager)
(type untrusted_app_all_virtmgr_crosvm)
(roletype object_r untrusted_app_all_virtmgr_crosvm)
(type uprobestats)
(roletype object_r uprobestats)
(type uprobestats_exec)
(roletype object_r uprobestats_exec)
(type usbauthservice)
(roletype object_r usbauthservice)
(type usbauthservice_exec)
(roletype object_r usbauthservice_exec)
(type userdata_alias_remove)
(roletype object_r userdata_alias_remove)
(type userdata_alias_remove_exec)
(roletype object_r userdata_alias_remove_exec)
(type vehicle_binding_util)
(roletype object_r vehicle_binding_util)
(type vehicle_binding_util_exec)
(roletype object_r vehicle_binding_util_exec)
(type vfio_handler)
(roletype object_r vfio_handler)
(type vfio_handler_exec)
(roletype object_r vfio_handler_exec)
(type virtual_face)
(roletype object_r virtual_face)
(type virtual_face_exec)
(roletype object_r virtual_face_exec)
(type virtual_fingerprint)
(roletype object_r virtual_fingerprint)
(type virtual_fingerprint_exec)
(roletype object_r virtual_fingerprint_exec)
(type virtualizationservice)
(roletype object_r virtualizationservice)
(type virtualizationservice_exec)
(roletype object_r virtualizationservice_exec)
(type virtualizationservice_virtualizationmanager)
(roletype object_r virtualizationservice_virtualizationmanager)
(type virtualizationservice_virtmgr_crosvm)
(roletype object_r virtualizationservice_virtmgr_crosvm)
(type vmlauncher_app)
(roletype object_r vmlauncher_app)
(type vmlauncher_app_userfaultfd)
(roletype object_r vmlauncher_app_userfaultfd)
(type vmlauncher_app_block_io_uring)
(roletype object_r vmlauncher_app_block_io_uring)
(type vmlauncher_app_wrapfd)
(roletype object_r vmlauncher_app_wrapfd)
(type vmlauncher_app_devpts)
(roletype object_r vmlauncher_app_devpts)
(type vmnic)
(roletype object_r vmnic)
(type vmnic_exec)
(roletype object_r vmnic_exec)
(type vzwomatrigger_app)
(roletype object_r vzwomatrigger_app)
(type vzwomatrigger_app_userfaultfd)
(roletype object_r vzwomatrigger_app_userfaultfd)
(type vzwomatrigger_app_block_io_uring)
(roletype object_r vzwomatrigger_app_block_io_uring)
(type vzwomatrigger_app_wrapfd)
(roletype object_r vzwomatrigger_app_wrapfd)
(type wait_for_keymaster)
(roletype object_r wait_for_keymaster)
(type wait_for_keymaster_exec)
(roletype object_r wait_for_keymaster_exec)
(type webview_zygote_userfaultfd)
(roletype object_r webview_zygote_userfaultfd)
(type wifi_mainline_supplicant)
(roletype object_r wifi_mainline_supplicant)
(type wifi_mainline_supplicant_exec)
(roletype object_r wifi_mainline_supplicant_exec)
(type zygote_userfaultfd)
(roletype object_r zygote_userfaultfd)
(type zygote_next)
(roletype object_r zygote_next)
(type zygote_next_exec)
(roletype object_r zygote_next_exec)
(user u)
(userrole u object_r)
(userrole u r)
(userlevel u (s0 ))
(userrange u ((s0 ) (s0 (range c0 c1023))))
(sensitivity s0)
(sensitivitycategory s0 (c0 c1 c2 c3 c4 c5 c6 c7 c8 c9 c10 c11 c12 c13 c14 c15 c16 c17 c18 c19 c20 c21 c22 c23 c24 c25 c26 c27 c28 c29 c30 c31 c32 c33 c34 c35 c36 c37 c38 c39 c40 c41 c42 c43 c44 c45 c46 c47 c48 c49 c50 c51 c52 c53 c54 c55 c56 c57 c58 c59 c60 c61 c62 c63 c64 c65 c66 c67 c68 c69 c70 c71 c72 c73 c74 c75 c76 c77 c78 c79 c80 c81 c82 c83 c84 c85 c86 c87 c88 c89 c90 c91 c92 c93 c94 c95 c96 c97 c98 c99 c100 c101 c102 c103 c104 c105 c106 c107 c108 c109 c110 c111 c112 c113 c114 c115 c116 c117 c118 c119 c120 c121 c122 c123 c124 c125 c126 c127 c128 c129 c130 c131 c132 c133 c134 c135 c136 c137 c138 c139 c140 c141 c142 c143 c144 c145 c146 c147 c148 c149 c150 c151 c152 c153 c154 c155 c156 c157 c158 c159 c160 c161 c162 c163 c164 c165 c166 c167 c168 c169 c170 c171 c172 c173 c174 c175 c176 c177 c178 c179 c180 c181 c182 c183 c184 c185 c186 c187 c188 c189 c190 c191 c192 c193 c194 c195 c196 c197 c198 c199 c200 c201 c202 c203 c204 c205 c206 c207 c208 c209 c210 c211 c212 c213 c214 c215 c216 c217 c218 c219 c220 c221 c222 c223 c224 c225 c226 c227 c228 c229 c230 c231 c232 c233 c234 c235 c236 c237 c238 c239 c240 c241 c242 c243 c244 c245 c246 c247 c248 c249 c250 c251 c252 c253 c254 c255 c256 c257 c258 c259 c260 c261 c262 c263 c264 c265 c266 c267 c268 c269 c270 c271 c272 c273 c274 c275 c276 c277 c278 c279 c280 c281 c282 c283 c284 c285 c286 c287 c288 c289 c290 c291 c292 c293 c294 c295 c296 c297 c298 c299 c300 c301 c302 c303 c304 c305 c306 c307 c308 c309 c310 c311 c312 c313 c314 c315 c316 c317 c318 c319 c320 c321 c322 c323 c324 c325 c326 c327 c328 c329 c330 c331 c332 c333 c334 c335 c336 c337 c338 c339 c340 c341 c342 c343 c344 c345 c346 c347 c348 c349 c350 c351 c352 c353 c354 c355 c356 c357 c358 c359 c360 c361 c362 c363 c364 c365 c366 c367 c368 c369 c370 c371 c372 c373 c374 c375 c376 c377 c378 c379 c380 c381 c382 c383 c384 c385 c386 c387 c388 c389 c390 c391 c392 c393 c394 c395 c396 c397 c398 c399 c400 c401 c402 c403 c404 c405 c406 c407 c408 c409 c410 c411 c412 c413 c414 c415 c416 c417 c418 c419 c420 c421 c422 c423 c424 c425 c426 c427 c428 c429 c430 c431 c432 c433 c434 c435 c436 c437 c438 c439 c440 c441 c442 c443 c444 c445 c446 c447 c448 c449 c450 c451 c452 c453 c454 c455 c456 c457 c458 c459 c460 c461 c462 c463 c464 c465 c466 c467 c468 c469 c470 c471 c472 c473 c474 c475 c476 c477 c478 c479 c480 c481 c482 c483 c484 c485 c486 c487 c488 c489 c490 c491 c492 c493 c494 c495 c496 c497 c498 c499 c500 c501 c502 c503 c504 c505 c506 c507 c508 c509 c510 c511 c512 c513 c514 c515 c516 c517 c518 c519 c520 c521 c522 c523 c524 c525 c526 c527 c528 c529 c530 c531 c532 c533 c534 c535 c536 c537 c538 c539 c540 c541 c542 c543 c544 c545 c546 c547 c548 c549 c550 c551 c552 c553 c554 c555 c556 c557 c558 c559 c560 c561 c562 c563 c564 c565 c566 c567 c568 c569 c570 c571 c572 c573 c574 c575 c576 c577 c578 c579 c580 c581 c582 c583 c584 c585 c586 c587 c588 c589 c590 c591 c592 c593 c594 c595 c596 c597 c598 c599 c600 c601 c602 c603 c604 c605 c606 c607 c608 c609 c610 c611 c612 c613 c614 c615 c616 c617 c618 c619 c620 c621 c622 c623 c624 c625 c626 c627 c628 c629 c630 c631 c632 c633 c634 c635 c636 c637 c638 c639 c640 c641 c642 c643 c644 c645 c646 c647 c648 c649 c650 c651 c652 c653 c654 c655 c656 c657 c658 c659 c660 c661 c662 c663 c664 c665 c666 c667 c668 c669 c670 c671 c672 c673 c674 c675 c676 c677 c678 c679 c680 c681 c682 c683 c684 c685 c686 c687 c688 c689 c690 c691 c692 c693 c694 c695 c696 c697 c698 c699 c700 c701 c702 c703 c704 c705 c706 c707 c708 c709 c710 c711 c712 c713 c714 c715 c716 c717 c718 c719 c720 c721 c722 c723 c724 c725 c726 c727 c728 c729 c730 c731 c732 c733 c734 c735 c736 c737 c738 c739 c740 c741 c742 c743 c744 c745 c746 c747 c748 c749 c750 c751 c752 c753 c754 c755 c756 c757 c758 c759 c760 c761 c762 c763 c764 c765 c766 c767 c768 c769 c770 c771 c772 c773 c774 c775 c776 c777 c778 c779 c780 c781 c782 c783 c784 c785 c786 c787 c788 c789 c790 c791 c792 c793 c794 c795 c796 c797 c798 c799 c800 c801 c802 c803 c804 c805 c806 c807 c808 c809 c810 c811 c812 c813 c814 c815 c816 c817 c818 c819 c820 c821 c822 c823 c824 c825 c826 c827 c828 c829 c830 c831 c832 c833 c834 c835 c836 c837 c838 c839 c840 c841 c842 c843 c844 c845 c846 c847 c848 c849 c850 c851 c852 c853 c854 c855 c856 c857 c858 c859 c860 c861 c862 c863 c864 c865 c866 c867 c868 c869 c870 c871 c872 c873 c874 c875 c876 c877 c878 c879 c880 c881 c882 c883 c884 c885 c886 c887 c888 c889 c890 c891 c892 c893 c894 c895 c896 c897 c898 c899 c900 c901 c902 c903 c904 c905 c906 c907 c908 c909 c910 c911 c912 c913 c914 c915 c916 c917 c918 c919 c920 c921 c922 c923 c924 c925 c926 c927 c928 c929 c930 c931 c932 c933 c934 c935 c936 c937 c938 c939 c940 c941 c942 c943 c944 c945 c946 c947 c948 c949 c950 c951 c952 c953 c954 c955 c956 c957 c958 c959 c960 c961 c962 c963 c964 c965 c966 c967 c968 c969 c970 c971 c972 c973 c974 c975 c976 c977 c978 c979 c980 c981 c982 c983 c984 c985 c986 c987 c988 c989 c990 c991 c992 c993 c994 c995 c996 c997 c998 c999 c1000 c1001 c1002 c1003 c1004 c1005 c1006 c1007 c1008 c1009 c1010 c1011 c1012 c1013 c1014 c1015 c1016 c1017 c1018 c1019 c1020 c1021 c1022 c1023 ))
(sensitivityorder (s0 ))
(category c0)
(category c1)
(category c2)
(category c3)
(category c4)
(category c5)
(category c6)
(category c7)
(category c8)
(category c9)
(category c10)
(category c11)
(category c12)
(category c13)
(category c14)
(category c15)
(category c16)
(category c17)
(category c18)
(category c19)
(category c20)
(category c21)
(category c22)
(category c23)
(category c24)
(category c25)
(category c26)
(category c27)
(category c28)
(category c29)
(category c30)
(category c31)
(category c32)
(category c33)
(category c34)
(category c35)
(category c36)
(category c37)
(category c38)
(category c39)
(category c40)
(category c41)
(category c42)
(category c43)
(category c44)
(category c45)
(category c46)
(category c47)
(category c48)
(category c49)
(category c50)
(category c51)
(category c52)
(category c53)
(category c54)
(category c55)
(category c56)
(category c57)
(category c58)
(category c59)
(category c60)
(category c61)
(category c62)
(category c63)
(category c64)
(category c65)
(category c66)
(category c67)
(category c68)
(category c69)
(category c70)
(category c71)
(category c72)
(category c73)
(category c74)
(category c75)
(category c76)
(category c77)
(category c78)
(category c79)
(category c80)
(category c81)
(category c82)
(category c83)
(category c84)
(category c85)
(category c86)
(category c87)
(category c88)
(category c89)
(category c90)
(category c91)
(category c92)
(category c93)
(category c94)
(category c95)
(category c96)
(category c97)
(category c98)
(category c99)
(category c100)
(category c101)
(category c102)
(category c103)
(category c104)
(category c105)
(category c106)
(category c107)
(category c108)
(category c109)
(category c110)
(category c111)
(category c112)
(category c113)
(category c114)
(category c115)
(category c116)
(category c117)
(category c118)
(category c119)
(category c120)
(category c121)
(category c122)
(category c123)
(category c124)
(category c125)
(category c126)
(category c127)
(category c128)
(category c129)
(category c130)
(category c131)
(category c132)
(category c133)
(category c134)
(category c135)
(category c136)
(category c137)
(category c138)
(category c139)
(category c140)
(category c141)
(category c142)
(category c143)
(category c144)
(category c145)
(category c146)
(category c147)
(category c148)
(category c149)
(category c150)
(category c151)
(category c152)
(category c153)
(category c154)
(category c155)
(category c156)
(category c157)
(category c158)
(category c159)
(category c160)
(category c161)
(category c162)
(category c163)
(category c164)
(category c165)
(category c166)
(category c167)
(category c168)
(category c169)
(category c170)
(category c171)
(category c172)
(category c173)
(category c174)
(category c175)
(category c176)
(category c177)
(category c178)
(category c179)
(category c180)
(category c181)
(category c182)
(category c183)
(category c184)
(category c185)
(category c186)
(category c187)
(category c188)
(category c189)
(category c190)
(category c191)
(category c192)
(category c193)
(category c194)
(category c195)
(category c196)
(category c197)
(category c198)
(category c199)
(category c200)
(category c201)
(category c202)
(category c203)
(category c204)
(category c205)
(category c206)
(category c207)
(category c208)
(category c209)
(category c210)
(category c211)
(category c212)
(category c213)
(category c214)
(category c215)
(category c216)
(category c217)
(category c218)
(category c219)
(category c220)
(category c221)
(category c222)
(category c223)
(category c224)
(category c225)
(category c226)
(category c227)
(category c228)
(category c229)
(category c230)
(category c231)
(category c232)
(category c233)
(category c234)
(category c235)
(category c236)
(category c237)
(category c238)
(category c239)
(category c240)
(category c241)
(category c242)
(category c243)
(category c244)
(category c245)
(category c246)
(category c247)
(category c248)
(category c249)
(category c250)
(category c251)
(category c252)
(category c253)
(category c254)
(category c255)
(category c256)
(category c257)
(category c258)
(category c259)
(category c260)
(category c261)
(category c262)
(category c263)
(category c264)
(category c265)
(category c266)
(category c267)
(category c268)
(category c269)
(category c270)
(category c271)
(category c272)
(category c273)
(category c274)
(category c275)
(category c276)
(category c277)
(category c278)
(category c279)
(category c280)
(category c281)
(category c282)
(category c283)
(category c284)
(category c285)
(category c286)
(category c287)
(category c288)
(category c289)
(category c290)
(category c291)
(category c292)
(category c293)
(category c294)
(category c295)
(category c296)
(category c297)
(category c298)
(category c299)
(category c300)
(category c301)
(category c302)
(category c303)
(category c304)
(category c305)
(category c306)
(category c307)
(category c308)
(category c309)
(category c310)
(category c311)
(category c312)
(category c313)
(category c314)
(category c315)
(category c316)
(category c317)
(category c318)
(category c319)
(category c320)
(category c321)
(category c322)
(category c323)
(category c324)
(category c325)
(category c326)
(category c327)
(category c328)
(category c329)
(category c330)
(category c331)
(category c332)
(category c333)
(category c334)
(category c335)
(category c336)
(category c337)
(category c338)
(category c339)
(category c340)
(category c341)
(category c342)
(category c343)
(category c344)
(category c345)
(category c346)
(category c347)
(category c348)
(category c349)
(category c350)
(category c351)
(category c352)
(category c353)
(category c354)
(category c355)
(category c356)
(category c357)
(category c358)
(category c359)
(category c360)
(category c361)
(category c362)
(category c363)
(category c364)
(category c365)
(category c366)
(category c367)
(category c368)
(category c369)
(category c370)
(category c371)
(category c372)
(category c373)
(category c374)
(category c375)
(category c376)
(category c377)
(category c378)
(category c379)
(category c380)
(category c381)
(category c382)
(category c383)
(category c384)
(category c385)
(category c386)
(category c387)
(category c388)
(category c389)
(category c390)
(category c391)
(category c392)
(category c393)
(category c394)
(category c395)
(category c396)
(category c397)
(category c398)
(category c399)
(category c400)
(category c401)
(category c402)
(category c403)
(category c404)
(category c405)
(category c406)
(category c407)
(category c408)
(category c409)
(category c410)
(category c411)
(category c412)
(category c413)
(category c414)
(category c415)
(category c416)
(category c417)
(category c418)
(category c419)
(category c420)
(category c421)
(category c422)
(category c423)
(category c424)
(category c425)
(category c426)
(category c427)
(category c428)
(category c429)
(category c430)
(category c431)
(category c432)
(category c433)
(category c434)
(category c435)
(category c436)
(category c437)
(category c438)
(category c439)
(category c440)
(category c441)
(category c442)
(category c443)
(category c444)
(category c445)
(category c446)
(category c447)
(category c448)
(category c449)
(category c450)
(category c451)
(category c452)
(category c453)
(category c454)
(category c455)
(category c456)
(category c457)
(category c458)
(category c459)
(category c460)
(category c461)
(category c462)
(category c463)
(category c464)
(category c465)
(category c466)
(category c467)
(category c468)
(category c469)
(category c470)
(category c471)
(category c472)
(category c473)
(category c474)
(category c475)
(category c476)
(category c477)
(category c478)
(category c479)
(category c480)
(category c481)
(category c482)
(category c483)
(category c484)
(category c485)
(category c486)
(category c487)
(category c488)
(category c489)
(category c490)
(category c491)
(category c492)
(category c493)
(category c494)
(category c495)
(category c496)
(category c497)
(category c498)
(category c499)
(category c500)
(category c501)
(category c502)
(category c503)
(category c504)
(category c505)
(category c506)
(category c507)
(category c508)
(category c509)
(category c510)
(category c511)
(category c512)
(category c513)
(category c514)
(category c515)
(category c516)
(category c517)
(category c518)
(category c519)
(category c520)
(category c521)
(category c522)
(category c523)
(category c524)
(category c525)
(category c526)
(category c527)
(category c528)
(category c529)
(category c530)
(category c531)
(category c532)
(category c533)
(category c534)
(category c535)
(category c536)
(category c537)
(category c538)
(category c539)
(category c540)
(category c541)
(category c542)
(category c543)
(category c544)
(category c545)
(category c546)
(category c547)
(category c548)
(category c549)
(category c550)
(category c551)
(category c552)
(category c553)
(category c554)
(category c555)
(category c556)
(category c557)
(category c558)
(category c559)
(category c560)
(category c561)
(category c562)
(category c563)
(category c564)
(category c565)
(category c566)
(category c567)
(category c568)
(category c569)
(category c570)
(category c571)
(category c572)
(category c573)
(category c574)
(category c575)
(category c576)
(category c577)
(category c578)
(category c579)
(category c580)
(category c581)
(category c582)
(category c583)
(category c584)
(category c585)
(category c586)
(category c587)
(category c588)
(category c589)
(category c590)
(category c591)
(category c592)
(category c593)
(category c594)
(category c595)
(category c596)
(category c597)
(category c598)
(category c599)
(category c600)
(category c601)
(category c602)
(category c603)
(category c604)
(category c605)
(category c606)
(category c607)
(category c608)
(category c609)
(category c610)
(category c611)
(category c612)
(category c613)
(category c614)
(category c615)
(category c616)
(category c617)
(category c618)
(category c619)
(category c620)
(category c621)
(category c622)
(category c623)
(category c624)
(category c625)
(category c626)
(category c627)
(category c628)
(category c629)
(category c630)
(category c631)
(category c632)
(category c633)
(category c634)
(category c635)
(category c636)
(category c637)
(category c638)
(category c639)
(category c640)
(category c641)
(category c642)
(category c643)
(category c644)
(category c645)
(category c646)
(category c647)
(category c648)
(category c649)
(category c650)
(category c651)
(category c652)
(category c653)
(category c654)
(category c655)
(category c656)
(category c657)
(category c658)
(category c659)
(category c660)
(category c661)
(category c662)
(category c663)
(category c664)
(category c665)
(category c666)
(category c667)
(category c668)
(category c669)
(category c670)
(category c671)
(category c672)
(category c673)
(category c674)
(category c675)
(category c676)
(category c677)
(category c678)
(category c679)
(category c680)
(category c681)
(category c682)
(category c683)
(category c684)
(category c685)
(category c686)
(category c687)
(category c688)
(category c689)
(category c690)
(category c691)
(category c692)
(category c693)
(category c694)
(category c695)
(category c696)
(category c697)
(category c698)
(category c699)
(category c700)
(category c701)
(category c702)
(category c703)
(category c704)
(category c705)
(category c706)
(category c707)
(category c708)
(category c709)
(category c710)
(category c711)
(category c712)
(category c713)
(category c714)
(category c715)
(category c716)
(category c717)
(category c718)
(category c719)
(category c720)
(category c721)
(category c722)
(category c723)
(category c724)
(category c725)
(category c726)
(category c727)
(category c728)
(category c729)
(category c730)
(category c731)
(category c732)
(category c733)
(category c734)
(category c735)
(category c736)
(category c737)
(category c738)
(category c739)
(category c740)
(category c741)
(category c742)
(category c743)
(category c744)
(category c745)
(category c746)
(category c747)
(category c748)
(category c749)
(category c750)
(category c751)
(category c752)
(category c753)
(category c754)
(category c755)
(category c756)
(category c757)
(category c758)
(category c759)
(category c760)
(category c761)
(category c762)
(category c763)
(category c764)
(category c765)
(category c766)
(category c767)
(category c768)
(category c769)
(category c770)
(category c771)
(category c772)
(category c773)
(category c774)
(category c775)
(category c776)
(category c777)
(category c778)
(category c779)
(category c780)
(category c781)
(category c782)
(category c783)
(category c784)
(category c785)
(category c786)
(category c787)
(category c788)
(category c789)
(category c790)
(category c791)
(category c792)
(category c793)
(category c794)
(category c795)
(category c796)
(category c797)
(category c798)
(category c799)
(category c800)
(category c801)
(category c802)
(category c803)
(category c804)
(category c805)
(category c806)
(category c807)
(category c808)
(category c809)
(category c810)
(category c811)
(category c812)
(category c813)
(category c814)
(category c815)
(category c816)
(category c817)
(category c818)
(category c819)
(category c820)
(category c821)
(category c822)
(category c823)
(category c824)
(category c825)
(category c826)
(category c827)
(category c828)
(category c829)
(category c830)
(category c831)
(category c832)
(category c833)
(category c834)
(category c835)
(category c836)
(category c837)
(category c838)
(category c839)
(category c840)
(category c841)
(category c842)
(category c843)
(category c844)
(category c845)
(category c846)
(category c847)
(category c848)
(category c849)
(category c850)
(category c851)
(category c852)
(category c853)
(category c854)
(category c855)
(category c856)
(category c857)
(category c858)
(category c859)
(category c860)
(category c861)
(category c862)
(category c863)
(category c864)
(category c865)
(category c866)
(category c867)
(category c868)
(category c869)
(category c870)
(category c871)
(category c872)
(category c873)
(category c874)
(category c875)
(category c876)
(category c877)
(category c878)
(category c879)
(category c880)
(category c881)
(category c882)
(category c883)
(category c884)
(category c885)
(category c886)
(category c887)
(category c888)
(category c889)
(category c890)
(category c891)
(category c892)
(category c893)
(category c894)
(category c895)
(category c896)
(category c897)
(category c898)
(category c899)
(category c900)
(category c901)
(category c902)
(category c903)
(category c904)
(category c905)
(category c906)
(category c907)
(category c908)
(category c909)
(category c910)
(category c911)
(category c912)
(category c913)
(category c914)
(category c915)
(category c916)
(category c917)
(category c918)
(category c919)
(category c920)
(category c921)
(category c922)
(category c923)
(category c924)
(category c925)
(category c926)
(category c927)
(category c928)
(category c929)
(category c930)
(category c931)
(category c932)
(category c933)
(category c934)
(category c935)
(category c936)
(category c937)
(category c938)
(category c939)
(category c940)
(category c941)
(category c942)
(category c943)
(category c944)
(category c945)
(category c946)
(category c947)
(category c948)
(category c949)
(category c950)
(category c951)
(category c952)
(category c953)
(category c954)
(category c955)
(category c956)
(category c957)
(category c958)
(category c959)
(category c960)
(category c961)
(category c962)
(category c963)
(category c964)
(category c965)
(category c966)
(category c967)
(category c968)
(category c969)
(category c970)
(category c971)
(category c972)
(category c973)
(category c974)
(category c975)
(category c976)
(category c977)
(category c978)
(category c979)
(category c980)
(category c981)
(category c982)
(category c983)
(category c984)
(category c985)
(category c986)
(category c987)
(category c988)
(category c989)
(category c990)
(category c991)
(category c992)
(category c993)
(category c994)
(category c995)
(category c996)
(category c997)
(category c998)
(category c999)
(category c1000)
(category c1001)
(category c1002)
(category c1003)
(category c1004)
(category c1005)
(category c1006)
(category c1007)
(category c1008)
(category c1009)
(category c1010)
(category c1011)
(category c1012)
(category c1013)
(category c1014)
(category c1015)
(category c1016)
(category c1017)
(category c1018)
(category c1019)
(category c1020)
(category c1021)
(category c1022)
(category c1023)
(categoryorder (c0 c1 c2 c3 c4 c5 c6 c7 c8 c9 c10 c11 c12 c13 c14 c15 c16 c17 c18 c19 c20 c21 c22 c23 c24 c25 c26 c27 c28 c29 c30 c31 c32 c33 c34 c35 c36 c37 c38 c39 c40 c41 c42 c43 c44 c45 c46 c47 c48 c49 c50 c51 c52 c53 c54 c55 c56 c57 c58 c59 c60 c61 c62 c63 c64 c65 c66 c67 c68 c69 c70 c71 c72 c73 c74 c75 c76 c77 c78 c79 c80 c81 c82 c83 c84 c85 c86 c87 c88 c89 c90 c91 c92 c93 c94 c95 c96 c97 c98 c99 c100 c101 c102 c103 c104 c105 c106 c107 c108 c109 c110 c111 c112 c113 c114 c115 c116 c117 c118 c119 c120 c121 c122 c123 c124 c125 c126 c127 c128 c129 c130 c131 c132 c133 c134 c135 c136 c137 c138 c139 c140 c141 c142 c143 c144 c145 c146 c147 c148 c149 c150 c151 c152 c153 c154 c155 c156 c157 c158 c159 c160 c161 c162 c163 c164 c165 c166 c167 c168 c169 c170 c171 c172 c173 c174 c175 c176 c177 c178 c179 c180 c181 c182 c183 c184 c185 c186 c187 c188 c189 c190 c191 c192 c193 c194 c195 c196 c197 c198 c199 c200 c201 c202 c203 c204 c205 c206 c207 c208 c209 c210 c211 c212 c213 c214 c215 c216 c217 c218 c219 c220 c221 c222 c223 c224 c225 c226 c227 c228 c229 c230 c231 c232 c233 c234 c235 c236 c237 c238 c239 c240 c241 c242 c243 c244 c245 c246 c247 c248 c249 c250 c251 c252 c253 c254 c255 c256 c257 c258 c259 c260 c261 c262 c263 c264 c265 c266 c267 c268 c269 c270 c271 c272 c273 c274 c275 c276 c277 c278 c279 c280 c281 c282 c283 c284 c285 c286 c287 c288 c289 c290 c291 c292 c293 c294 c295 c296 c297 c298 c299 c300 c301 c302 c303 c304 c305 c306 c307 c308 c309 c310 c311 c312 c313 c314 c315 c316 c317 c318 c319 c320 c321 c322 c323 c324 c325 c326 c327 c328 c329 c330 c331 c332 c333 c334 c335 c336 c337 c338 c339 c340 c341 c342 c343 c344 c345 c346 c347 c348 c349 c350 c351 c352 c353 c354 c355 c356 c357 c358 c359 c360 c361 c362 c363 c364 c365 c366 c367 c368 c369 c370 c371 c372 c373 c374 c375 c376 c377 c378 c379 c380 c381 c382 c383 c384 c385 c386 c387 c388 c389 c390 c391 c392 c393 c394 c395 c396 c397 c398 c399 c400 c401 c402 c403 c404 c405 c406 c407 c408 c409 c410 c411 c412 c413 c414 c415 c416 c417 c418 c419 c420 c421 c422 c423 c424 c425 c426 c427 c428 c429 c430 c431 c432 c433 c434 c435 c436 c437 c438 c439 c440 c441 c442 c443 c444 c445 c446 c447 c448 c449 c450 c451 c452 c453 c454 c455 c456 c457 c458 c459 c460 c461 c462 c463 c464 c465 c466 c467 c468 c469 c470 c471 c472 c473 c474 c475 c476 c477 c478 c479 c480 c481 c482 c483 c484 c485 c486 c487 c488 c489 c490 c491 c492 c493 c494 c495 c496 c497 c498 c499 c500 c501 c502 c503 c504 c505 c506 c507 c508 c509 c510 c511 c512 c513 c514 c515 c516 c517 c518 c519 c520 c521 c522 c523 c524 c525 c526 c527 c528 c529 c530 c531 c532 c533 c534 c535 c536 c537 c538 c539 c540 c541 c542 c543 c544 c545 c546 c547 c548 c549 c550 c551 c552 c553 c554 c555 c556 c557 c558 c559 c560 c561 c562 c563 c564 c565 c566 c567 c568 c569 c570 c571 c572 c573 c574 c575 c576 c577 c578 c579 c580 c581 c582 c583 c584 c585 c586 c587 c588 c589 c590 c591 c592 c593 c594 c595 c596 c597 c598 c599 c600 c601 c602 c603 c604 c605 c606 c607 c608 c609 c610 c611 c612 c613 c614 c615 c616 c617 c618 c619 c620 c621 c622 c623 c624 c625 c626 c627 c628 c629 c630 c631 c632 c633 c634 c635 c636 c637 c638 c639 c640 c641 c642 c643 c644 c645 c646 c647 c648 c649 c650 c651 c652 c653 c654 c655 c656 c657 c658 c659 c660 c661 c662 c663 c664 c665 c666 c667 c668 c669 c670 c671 c672 c673 c674 c675 c676 c677 c678 c679 c680 c681 c682 c683 c684 c685 c686 c687 c688 c689 c690 c691 c692 c693 c694 c695 c696 c697 c698 c699 c700 c701 c702 c703 c704 c705 c706 c707 c708 c709 c710 c711 c712 c713 c714 c715 c716 c717 c718 c719 c720 c721 c722 c723 c724 c725 c726 c727 c728 c729 c730 c731 c732 c733 c734 c735 c736 c737 c738 c739 c740 c741 c742 c743 c744 c745 c746 c747 c748 c749 c750 c751 c752 c753 c754 c755 c756 c757 c758 c759 c760 c761 c762 c763 c764 c765 c766 c767 c768 c769 c770 c771 c772 c773 c774 c775 c776 c777 c778 c779 c780 c781 c782 c783 c784 c785 c786 c787 c788 c789 c790 c791 c792 c793 c794 c795 c796 c797 c798 c799 c800 c801 c802 c803 c804 c805 c806 c807 c808 c809 c810 c811 c812 c813 c814 c815 c816 c817 c818 c819 c820 c821 c822 c823 c824 c825 c826 c827 c828 c829 c830 c831 c832 c833 c834 c835 c836 c837 c838 c839 c840 c841 c842 c843 c844 c845 c846 c847 c848 c849 c850 c851 c852 c853 c854 c855 c856 c857 c858 c859 c860 c861 c862 c863 c864 c865 c866 c867 c868 c869 c870 c871 c872 c873 c874 c875 c876 c877 c878 c879 c880 c881 c882 c883 c884 c885 c886 c887 c888 c889 c890 c891 c892 c893 c894 c895 c896 c897 c898 c899 c900 c901 c902 c903 c904 c905 c906 c907 c908 c909 c910 c911 c912 c913 c914 c915 c916 c917 c918 c919 c920 c921 c922 c923 c924 c925 c926 c927 c928 c929 c930 c931 c932 c933 c934 c935 c936 c937 c938 c939 c940 c941 c942 c943 c944 c945 c946 c947 c948 c949 c950 c951 c952 c953 c954 c955 c956 c957 c958 c959 c960 c961 c962 c963 c964 c965 c966 c967 c968 c969 c970 c971 c972 c973 c974 c975 c976 c977 c978 c979 c980 c981 c982 c983 c984 c985 c986 c987 c988 c989 c990 c991 c992 c993 c994 c995 c996 c997 c998 c999 c1000 c1001 c1002 c1003 c1004 c1005 c1006 c1007 c1008 c1009 c1010 c1011 c1012 c1013 c1014 c1015 c1016 c1017 c1018 c1019 c1020 c1021 c1022 c1023 ))
;;* lmx 347 system/sepolicy/public/attributes

(neverallow base_typeattr_1 domain (process (fork)))
;;* lme

;;* lmx 347 system/sepolicy/public/attributes

(neverallow base_typeattr_2 domain (process (fork)))
;;* lme

;;* lmx 347 system/sepolicy/public/attributes

(neverallow base_typeattr_3 domain (process (fork)))
;;* lme

;;* lmx 348 system/sepolicy/public/attributes

(neverallow base_typeattr_4 domain (process (fork)))
;;* lme

;;* lmx 348 system/sepolicy/public/attributes

(neverallow base_typeattr_5 domain (process (fork)))
;;* lme

;;* lmx 348 system/sepolicy/public/attributes

(neverallow base_typeattr_6 domain (process (fork)))
;;* lme

;;* lmx 349 system/sepolicy/public/attributes

(neverallow base_typeattr_7 domain (process (fork)))
;;* lme

;;* lmx 349 system/sepolicy/public/attributes

(neverallow base_typeattr_8 domain (process (fork)))
;;* lme

;;* lmx 349 system/sepolicy/public/attributes

(neverallow base_typeattr_9 domain (process (fork)))
;;* lme

;;* lmx 350 system/sepolicy/public/attributes

(neverallow base_typeattr_10 domain (process (fork)))
;;* lme

;;* lmx 350 system/sepolicy/public/attributes

(neverallow base_typeattr_11 domain (process (fork)))
;;* lme

;;* lmx 350 system/sepolicy/public/attributes

(neverallow base_typeattr_12 domain (process (fork)))
;;* lme

;;* lmx 351 system/sepolicy/public/attributes

(neverallow base_typeattr_13 domain (process (fork)))
;;* lme

;;* lmx 351 system/sepolicy/public/attributes

(neverallow base_typeattr_14 domain (process (fork)))
;;* lme

;;* lmx 351 system/sepolicy/public/attributes

(neverallow base_typeattr_15 domain (process (fork)))
;;* lme

;;* lmx 352 system/sepolicy/public/attributes

(neverallow base_typeattr_16 domain (process (fork)))
;;* lme

;;* lmx 352 system/sepolicy/public/attributes

(neverallow base_typeattr_17 domain (process (fork)))
;;* lme

;;* lmx 352 system/sepolicy/public/attributes

(neverallow base_typeattr_18 domain (process (fork)))
;;* lme

;;* lmx 353 system/sepolicy/public/attributes

(neverallow base_typeattr_19 domain (process (fork)))
;;* lme

;;* lmx 353 system/sepolicy/public/attributes

(neverallow base_typeattr_20 domain (process (fork)))
;;* lme

;;* lmx 353 system/sepolicy/public/attributes

(neverallow base_typeattr_21 domain (process (fork)))
;;* lme

;;* lmx 354 system/sepolicy/public/attributes

(neverallow base_typeattr_22 domain (process (fork)))
;;* lme

;;* lmx 354 system/sepolicy/public/attributes

(neverallow base_typeattr_23 domain (process (fork)))
;;* lme

;;* lmx 354 system/sepolicy/public/attributes

(neverallow base_typeattr_24 domain (process (fork)))
;;* lme

;;* lmx 355 system/sepolicy/public/attributes

(neverallow base_typeattr_25 domain (process (fork)))
;;* lme

;;* lmx 355 system/sepolicy/public/attributes

(neverallow base_typeattr_26 domain (process (fork)))
;;* lme

;;* lmx 355 system/sepolicy/public/attributes

(neverallow base_typeattr_27 domain (process (fork)))
;;* lme

;;* lmx 356 system/sepolicy/public/attributes

(neverallow base_typeattr_28 domain (process (fork)))
;;* lme

;;* lmx 356 system/sepolicy/public/attributes

(neverallow base_typeattr_29 domain (process (fork)))
;;* lme

;;* lmx 356 system/sepolicy/public/attributes

(neverallow base_typeattr_30 domain (process (fork)))
;;* lme

;;* lmx 357 system/sepolicy/public/attributes

(neverallow base_typeattr_31 domain (process (fork)))
;;* lme

;;* lmx 357 system/sepolicy/public/attributes

(neverallow base_typeattr_32 domain (process (fork)))
;;* lme

;;* lmx 357 system/sepolicy/public/attributes

(neverallow base_typeattr_33 domain (process (fork)))
;;* lme

;;* lmx 358 system/sepolicy/public/attributes

(neverallow base_typeattr_34 domain (process (fork)))
;;* lme

;;* lmx 358 system/sepolicy/public/attributes

(neverallow base_typeattr_35 domain (process (fork)))
;;* lme

;;* lmx 358 system/sepolicy/public/attributes

(neverallow base_typeattr_36 domain (process (fork)))
;;* lme

;;* lmx 359 system/sepolicy/public/attributes

(neverallow base_typeattr_37 domain (process (fork)))
;;* lme

;;* lmx 359 system/sepolicy/public/attributes

(neverallow base_typeattr_38 domain (process (fork)))
;;* lme

;;* lmx 359 system/sepolicy/public/attributes

(neverallow base_typeattr_39 domain (process (fork)))
;;* lme

;;* lmx 360 system/sepolicy/public/attributes

(neverallow base_typeattr_40 domain (process (fork)))
;;* lme

;;* lmx 360 system/sepolicy/public/attributes

(neverallow base_typeattr_41 domain (process (fork)))
;;* lme

;;* lmx 360 system/sepolicy/public/attributes

(neverallow base_typeattr_42 domain (process (fork)))
;;* lme

;;* lmx 361 system/sepolicy/public/attributes

(neverallow base_typeattr_43 domain (process (fork)))
;;* lme

;;* lmx 361 system/sepolicy/public/attributes

(neverallow base_typeattr_44 domain (process (fork)))
;;* lme

;;* lmx 361 system/sepolicy/public/attributes

(neverallow base_typeattr_45 domain (process (fork)))
;;* lme

;;* lmx 362 system/sepolicy/public/attributes

(neverallow base_typeattr_46 domain (process (fork)))
;;* lme

;;* lmx 362 system/sepolicy/public/attributes

(neverallow base_typeattr_47 domain (process (fork)))
;;* lme

;;* lmx 362 system/sepolicy/public/attributes

(neverallow base_typeattr_48 domain (process (fork)))
;;* lme

;;* lmx 363 system/sepolicy/public/attributes

(neverallow base_typeattr_49 domain (process (fork)))
;;* lme

;;* lmx 363 system/sepolicy/public/attributes

(neverallow base_typeattr_50 domain (process (fork)))
;;* lme

;;* lmx 363 system/sepolicy/public/attributes

(neverallow base_typeattr_51 domain (process (fork)))
;;* lme

;;* lmx 364 system/sepolicy/public/attributes

(neverallow base_typeattr_52 domain (process (fork)))
;;* lme

;;* lmx 364 system/sepolicy/public/attributes

(neverallow base_typeattr_53 domain (process (fork)))
;;* lme

;;* lmx 364 system/sepolicy/public/attributes

(neverallow base_typeattr_54 domain (process (fork)))
;;* lme

;;* lmx 365 system/sepolicy/public/attributes

(neverallow base_typeattr_55 domain (process (fork)))
;;* lme

;;* lmx 365 system/sepolicy/public/attributes

(neverallow base_typeattr_56 domain (process (fork)))
;;* lme

;;* lmx 365 system/sepolicy/public/attributes

(neverallow base_typeattr_57 domain (process (fork)))
;;* lme

;;* lmx 366 system/sepolicy/public/attributes

(neverallow base_typeattr_58 domain (process (fork)))
;;* lme

;;* lmx 366 system/sepolicy/public/attributes

(neverallow base_typeattr_59 domain (process (fork)))
;;* lme

;;* lmx 366 system/sepolicy/public/attributes

(neverallow base_typeattr_60 domain (process (fork)))
;;* lme

;;* lmx 367 system/sepolicy/public/attributes

(neverallow base_typeattr_61 domain (process (fork)))
;;* lme

;;* lmx 367 system/sepolicy/public/attributes

(neverallow base_typeattr_62 domain (process (fork)))
;;* lme

;;* lmx 367 system/sepolicy/public/attributes

(neverallow base_typeattr_63 domain (process (fork)))
;;* lme

;;* lmx 368 system/sepolicy/public/attributes

(neverallow base_typeattr_64 domain (process (fork)))
;;* lme

;;* lmx 368 system/sepolicy/public/attributes

(neverallow base_typeattr_65 domain (process (fork)))
;;* lme

;;* lmx 368 system/sepolicy/public/attributes

(neverallow base_typeattr_66 domain (process (fork)))
;;* lme

;;* lmx 369 system/sepolicy/public/attributes

(neverallow base_typeattr_67 domain (process (fork)))
;;* lme

;;* lmx 369 system/sepolicy/public/attributes

(neverallow base_typeattr_68 domain (process (fork)))
;;* lme

;;* lmx 369 system/sepolicy/public/attributes

(neverallow base_typeattr_69 domain (process (fork)))
;;* lme

;;* lmx 370 system/sepolicy/public/attributes

(neverallow base_typeattr_70 domain (process (fork)))
;;* lme

;;* lmx 370 system/sepolicy/public/attributes

(neverallow base_typeattr_71 domain (process (fork)))
;;* lme

;;* lmx 370 system/sepolicy/public/attributes

(neverallow base_typeattr_72 domain (process (fork)))
;;* lme

;;* lmx 371 system/sepolicy/public/attributes

(neverallow base_typeattr_73 domain (process (fork)))
;;* lme

;;* lmx 371 system/sepolicy/public/attributes

(neverallow base_typeattr_74 domain (process (fork)))
;;* lme

;;* lmx 371 system/sepolicy/public/attributes

(neverallow base_typeattr_75 domain (process (fork)))
;;* lme

;;* lmx 372 system/sepolicy/public/attributes

(neverallow base_typeattr_76 domain (process (fork)))
;;* lme

;;* lmx 372 system/sepolicy/public/attributes

(neverallow base_typeattr_77 domain (process (fork)))
;;* lme

;;* lmx 372 system/sepolicy/public/attributes

(neverallow base_typeattr_78 domain (process (fork)))
;;* lme

;;* lmx 373 system/sepolicy/public/attributes

(neverallow base_typeattr_79 domain (process (fork)))
;;* lme

;;* lmx 373 system/sepolicy/public/attributes

(neverallow base_typeattr_80 domain (process (fork)))
;;* lme

;;* lmx 373 system/sepolicy/public/attributes

(neverallow base_typeattr_81 domain (process (fork)))
;;* lme

;;* lmx 374 system/sepolicy/public/attributes

(neverallow base_typeattr_82 domain (process (fork)))
;;* lme

;;* lmx 374 system/sepolicy/public/attributes

(neverallow base_typeattr_83 domain (process (fork)))
;;* lme

;;* lmx 374 system/sepolicy/public/attributes

(neverallow base_typeattr_84 domain (process (fork)))
;;* lme

;;* lmx 375 system/sepolicy/public/attributes

(neverallow base_typeattr_85 domain (process (fork)))
;;* lme

;;* lmx 375 system/sepolicy/public/attributes

(neverallow base_typeattr_86 domain (process (fork)))
;;* lme

;;* lmx 375 system/sepolicy/public/attributes

(neverallow base_typeattr_87 domain (process (fork)))
;;* lme

;;* lmx 376 system/sepolicy/public/attributes

(neverallow base_typeattr_88 domain (process (fork)))
;;* lme

;;* lmx 376 system/sepolicy/public/attributes

(neverallow base_typeattr_89 domain (process (fork)))
;;* lme

;;* lmx 376 system/sepolicy/public/attributes

(neverallow base_typeattr_90 domain (process (fork)))
;;* lme

;;* lmx 377 system/sepolicy/public/attributes

(neverallow base_typeattr_91 domain (process (fork)))
;;* lme

;;* lmx 377 system/sepolicy/public/attributes

(neverallow base_typeattr_92 domain (process (fork)))
;;* lme

;;* lmx 377 system/sepolicy/public/attributes

(neverallow base_typeattr_93 domain (process (fork)))
;;* lme

;;* lmx 378 system/sepolicy/public/attributes

(neverallow base_typeattr_94 domain (process (fork)))
;;* lme

;;* lmx 378 system/sepolicy/public/attributes

(neverallow base_typeattr_95 domain (process (fork)))
;;* lme

;;* lmx 378 system/sepolicy/public/attributes

(neverallow base_typeattr_96 domain (process (fork)))
;;* lme

;;* lmx 379 system/sepolicy/public/attributes

(neverallow base_typeattr_97 domain (process (fork)))
;;* lme

;;* lmx 379 system/sepolicy/public/attributes

(neverallow base_typeattr_98 domain (process (fork)))
;;* lme

;;* lmx 379 system/sepolicy/public/attributes

(neverallow base_typeattr_99 domain (process (fork)))
;;* lme

;;* lmx 380 system/sepolicy/public/attributes

(neverallow base_typeattr_100 domain (process (fork)))
;;* lme

;;* lmx 380 system/sepolicy/public/attributes

(neverallow base_typeattr_101 domain (process (fork)))
;;* lme

;;* lmx 380 system/sepolicy/public/attributes

(neverallow base_typeattr_102 domain (process (fork)))
;;* lme

;;* lmx 381 system/sepolicy/public/attributes

(neverallow base_typeattr_103 domain (process (fork)))
;;* lme

;;* lmx 381 system/sepolicy/public/attributes

(neverallow base_typeattr_104 domain (process (fork)))
;;* lme

;;* lmx 381 system/sepolicy/public/attributes

(neverallow base_typeattr_105 domain (process (fork)))
;;* lme

;;* lmx 382 system/sepolicy/public/attributes

(neverallow base_typeattr_106 domain (process (fork)))
;;* lme

;;* lmx 382 system/sepolicy/public/attributes

(neverallow base_typeattr_107 domain (process (fork)))
;;* lme

;;* lmx 382 system/sepolicy/public/attributes

(neverallow base_typeattr_108 domain (process (fork)))
;;* lme

;;* lmx 383 system/sepolicy/public/attributes

(neverallow base_typeattr_109 domain (process (fork)))
;;* lme

;;* lmx 383 system/sepolicy/public/attributes

(neverallow base_typeattr_110 domain (process (fork)))
;;* lme

;;* lmx 383 system/sepolicy/public/attributes

(neverallow base_typeattr_111 domain (process (fork)))
;;* lme

;;* lmx 384 system/sepolicy/public/attributes

(neverallow base_typeattr_112 domain (process (fork)))
;;* lme

;;* lmx 384 system/sepolicy/public/attributes

(neverallow base_typeattr_113 domain (process (fork)))
;;* lme

;;* lmx 384 system/sepolicy/public/attributes

(neverallow base_typeattr_114 domain (process (fork)))
;;* lme

;;* lmx 385 system/sepolicy/public/attributes

(neverallow base_typeattr_115 domain (process (fork)))
;;* lme

;;* lmx 385 system/sepolicy/public/attributes

(neverallow base_typeattr_116 domain (process (fork)))
;;* lme

;;* lmx 385 system/sepolicy/public/attributes

(neverallow base_typeattr_117 domain (process (fork)))
;;* lme

;;* lmx 386 system/sepolicy/public/attributes

(neverallow base_typeattr_118 domain (process (fork)))
;;* lme

;;* lmx 386 system/sepolicy/public/attributes

(neverallow base_typeattr_119 domain (process (fork)))
;;* lme

;;* lmx 386 system/sepolicy/public/attributes

(neverallow base_typeattr_120 domain (process (fork)))
;;* lme

;;* lmx 387 system/sepolicy/public/attributes

(neverallow base_typeattr_121 domain (process (fork)))
;;* lme

;;* lmx 387 system/sepolicy/public/attributes

(neverallow base_typeattr_122 domain (process (fork)))
;;* lme

;;* lmx 387 system/sepolicy/public/attributes

(neverallow base_typeattr_123 domain (process (fork)))
;;* lme

;;* lmx 388 system/sepolicy/public/attributes

(neverallow base_typeattr_124 domain (process (fork)))
;;* lme

;;* lmx 388 system/sepolicy/public/attributes

(neverallow base_typeattr_125 domain (process (fork)))
;;* lme

;;* lmx 388 system/sepolicy/public/attributes

(neverallow base_typeattr_126 domain (process (fork)))
;;* lme

;;* lmx 389 system/sepolicy/public/attributes

(neverallow base_typeattr_127 domain (process (fork)))
;;* lme

;;* lmx 389 system/sepolicy/public/attributes

(neverallow base_typeattr_128 domain (process (fork)))
;;* lme

;;* lmx 389 system/sepolicy/public/attributes

(neverallow base_typeattr_129 domain (process (fork)))
;;* lme

;;* lmx 390 system/sepolicy/public/attributes

(neverallow base_typeattr_130 domain (process (fork)))
;;* lme

;;* lmx 390 system/sepolicy/public/attributes

(neverallow base_typeattr_131 domain (process (fork)))
;;* lme

;;* lmx 390 system/sepolicy/public/attributes

(neverallow base_typeattr_132 domain (process (fork)))
;;* lme

;;* lmx 391 system/sepolicy/public/attributes

(neverallow base_typeattr_133 domain (process (fork)))
;;* lme

;;* lmx 391 system/sepolicy/public/attributes

(neverallow base_typeattr_134 domain (process (fork)))
;;* lme

;;* lmx 391 system/sepolicy/public/attributes

(neverallow base_typeattr_135 domain (process (fork)))
;;* lme

;;* lmx 392 system/sepolicy/public/attributes

(neverallow base_typeattr_136 domain (process (fork)))
;;* lme

;;* lmx 392 system/sepolicy/public/attributes

(neverallow base_typeattr_137 domain (process (fork)))
;;* lme

;;* lmx 392 system/sepolicy/public/attributes

(neverallow base_typeattr_138 domain (process (fork)))
;;* lme

;;* lmx 393 system/sepolicy/public/attributes

(neverallow base_typeattr_139 domain (process (fork)))
;;* lme

;;* lmx 393 system/sepolicy/public/attributes

(neverallow base_typeattr_140 domain (process (fork)))
;;* lme

;;* lmx 393 system/sepolicy/public/attributes

(neverallow base_typeattr_141 domain (process (fork)))
;;* lme

;;* lmx 394 system/sepolicy/public/attributes

(neverallow base_typeattr_142 domain (process (fork)))
;;* lme

;;* lmx 394 system/sepolicy/public/attributes

(neverallow base_typeattr_143 domain (process (fork)))
;;* lme

;;* lmx 394 system/sepolicy/public/attributes

(neverallow base_typeattr_144 domain (process (fork)))
;;* lme

;;* lmx 395 system/sepolicy/public/attributes

(neverallow base_typeattr_145 domain (process (fork)))
;;* lme

;;* lmx 395 system/sepolicy/public/attributes

(neverallow base_typeattr_146 domain (process (fork)))
;;* lme

;;* lmx 395 system/sepolicy/public/attributes

(neverallow base_typeattr_147 domain (process (fork)))
;;* lme

;;* lmx 396 system/sepolicy/public/attributes

(neverallow base_typeattr_148 domain (process (fork)))
;;* lme

;;* lmx 396 system/sepolicy/public/attributes

(neverallow base_typeattr_149 domain (process (fork)))
;;* lme

;;* lmx 396 system/sepolicy/public/attributes

(neverallow base_typeattr_150 domain (process (fork)))
;;* lme

;;* lmx 397 system/sepolicy/public/attributes

(neverallow base_typeattr_151 domain (process (fork)))
;;* lme

;;* lmx 397 system/sepolicy/public/attributes

(neverallow base_typeattr_152 domain (process (fork)))
;;* lme

;;* lmx 397 system/sepolicy/public/attributes

(neverallow base_typeattr_153 domain (process (fork)))
;;* lme

;;* lmx 398 system/sepolicy/public/attributes

(neverallow base_typeattr_154 domain (process (fork)))
;;* lme

;;* lmx 398 system/sepolicy/public/attributes

(neverallow base_typeattr_155 domain (process (fork)))
;;* lme

;;* lmx 398 system/sepolicy/public/attributes

(neverallow base_typeattr_156 domain (process (fork)))
;;* lme

;;* lmx 399 system/sepolicy/public/attributes

(neverallow base_typeattr_157 domain (process (fork)))
;;* lme

;;* lmx 399 system/sepolicy/public/attributes

(neverallow base_typeattr_158 domain (process (fork)))
;;* lme

;;* lmx 399 system/sepolicy/public/attributes

(neverallow base_typeattr_159 domain (process (fork)))
;;* lme

;;* lmx 400 system/sepolicy/public/attributes

(neverallow base_typeattr_160 domain (process (fork)))
;;* lme

;;* lmx 400 system/sepolicy/public/attributes

(neverallow base_typeattr_161 domain (process (fork)))
;;* lme

;;* lmx 400 system/sepolicy/public/attributes

(neverallow base_typeattr_162 domain (process (fork)))
;;* lme

;;* lmx 401 system/sepolicy/public/attributes

(neverallow base_typeattr_163 domain (process (fork)))
;;* lme

;;* lmx 401 system/sepolicy/public/attributes

(neverallow base_typeattr_164 domain (process (fork)))
;;* lme

;;* lmx 401 system/sepolicy/public/attributes

(neverallow base_typeattr_165 domain (process (fork)))
;;* lme

;;* lmx 402 system/sepolicy/public/attributes

(neverallow base_typeattr_166 domain (process (fork)))
;;* lme

;;* lmx 402 system/sepolicy/public/attributes

(neverallow base_typeattr_167 domain (process (fork)))
;;* lme

;;* lmx 402 system/sepolicy/public/attributes

(neverallow base_typeattr_168 domain (process (fork)))
;;* lme

;;* lmx 403 system/sepolicy/public/attributes

(neverallow base_typeattr_169 domain (process (fork)))
;;* lme

;;* lmx 403 system/sepolicy/public/attributes

(neverallow base_typeattr_170 domain (process (fork)))
;;* lme

;;* lmx 403 system/sepolicy/public/attributes

(neverallow base_typeattr_171 domain (process (fork)))
;;* lme

;;* lmx 404 system/sepolicy/public/attributes

(neverallow base_typeattr_172 domain (process (fork)))
;;* lme

;;* lmx 404 system/sepolicy/public/attributes

(neverallow base_typeattr_173 domain (process (fork)))
;;* lme

;;* lmx 404 system/sepolicy/public/attributes

(neverallow base_typeattr_174 domain (process (fork)))
;;* lme

;;* lmx 405 system/sepolicy/public/attributes

(neverallow base_typeattr_175 domain (process (fork)))
;;* lme

;;* lmx 405 system/sepolicy/public/attributes

(neverallow base_typeattr_176 domain (process (fork)))
;;* lme

;;* lmx 405 system/sepolicy/public/attributes

(neverallow base_typeattr_177 domain (process (fork)))
;;* lme

;;* lmx 406 system/sepolicy/public/attributes

(neverallow base_typeattr_178 domain (process (fork)))
;;* lme

;;* lmx 406 system/sepolicy/public/attributes

(neverallow base_typeattr_179 domain (process (fork)))
;;* lme

;;* lmx 406 system/sepolicy/public/attributes

(neverallow base_typeattr_180 domain (process (fork)))
;;* lme

;;* lmx 407 system/sepolicy/public/attributes

(neverallow base_typeattr_181 domain (process (fork)))
;;* lme

;;* lmx 407 system/sepolicy/public/attributes

(neverallow base_typeattr_182 domain (process (fork)))
;;* lme

;;* lmx 407 system/sepolicy/public/attributes

(neverallow base_typeattr_183 domain (process (fork)))
;;* lme

;;* lmx 408 system/sepolicy/public/attributes

(neverallow base_typeattr_184 domain (process (fork)))
;;* lme

;;* lmx 408 system/sepolicy/public/attributes

(neverallow base_typeattr_185 domain (process (fork)))
;;* lme

;;* lmx 408 system/sepolicy/public/attributes

(neverallow base_typeattr_186 domain (process (fork)))
;;* lme

;;* lmx 409 system/sepolicy/public/attributes

(neverallow base_typeattr_187 domain (process (fork)))
;;* lme

;;* lmx 409 system/sepolicy/public/attributes

(neverallow base_typeattr_188 domain (process (fork)))
;;* lme

;;* lmx 409 system/sepolicy/public/attributes

(neverallow base_typeattr_189 domain (process (fork)))
;;* lme

;;* lmx 410 system/sepolicy/public/attributes

(neverallow base_typeattr_190 domain (process (fork)))
;;* lme

;;* lmx 410 system/sepolicy/public/attributes

(neverallow base_typeattr_191 domain (process (fork)))
;;* lme

;;* lmx 410 system/sepolicy/public/attributes

(neverallow base_typeattr_192 domain (process (fork)))
;;* lme

;;* lmx 411 system/sepolicy/public/attributes

(neverallow base_typeattr_193 domain (process (fork)))
;;* lme

;;* lmx 411 system/sepolicy/public/attributes

(neverallow base_typeattr_194 domain (process (fork)))
;;* lme

;;* lmx 411 system/sepolicy/public/attributes

(neverallow base_typeattr_195 domain (process (fork)))
;;* lme

;;* lmx 412 system/sepolicy/public/attributes

(neverallow base_typeattr_196 domain (process (fork)))
;;* lme

;;* lmx 412 system/sepolicy/public/attributes

(neverallow base_typeattr_197 domain (process (fork)))
;;* lme

;;* lmx 412 system/sepolicy/public/attributes

(neverallow base_typeattr_198 domain (process (fork)))
;;* lme

;;* lmx 413 system/sepolicy/public/attributes

(neverallow base_typeattr_199 domain (process (fork)))
;;* lme

;;* lmx 413 system/sepolicy/public/attributes

(neverallow base_typeattr_200 domain (process (fork)))
;;* lme

;;* lmx 413 system/sepolicy/public/attributes

(neverallow base_typeattr_201 domain (process (fork)))
;;* lme

;;* lmx 414 system/sepolicy/public/attributes

(neverallow base_typeattr_202 domain (process (fork)))
;;* lme

;;* lmx 414 system/sepolicy/public/attributes

(neverallow base_typeattr_203 domain (process (fork)))
;;* lme

;;* lmx 414 system/sepolicy/public/attributes

(neverallow base_typeattr_204 domain (process (fork)))
;;* lme

;;* lmx 415 system/sepolicy/public/attributes

(neverallow base_typeattr_205 domain (process (fork)))
;;* lme

;;* lmx 415 system/sepolicy/public/attributes

(neverallow base_typeattr_206 domain (process (fork)))
;;* lme

;;* lmx 415 system/sepolicy/public/attributes

(neverallow base_typeattr_207 domain (process (fork)))
;;* lme

;;* lmx 416 system/sepolicy/public/attributes

(neverallow base_typeattr_208 domain (process (fork)))
;;* lme

;;* lmx 416 system/sepolicy/public/attributes

(neverallow base_typeattr_209 domain (process (fork)))
;;* lme

;;* lmx 416 system/sepolicy/public/attributes

(neverallow base_typeattr_210 domain (process (fork)))
;;* lme

;;* lmx 419 system/sepolicy/public/attributes

(neverallow base_typeattr_211 domain (process (fork)))
;;* lme

;;* lmx 419 system/sepolicy/public/attributes

(neverallow base_typeattr_212 domain (process (fork)))
;;* lme

;;* lmx 419 system/sepolicy/public/attributes

(neverallow base_typeattr_213 domain (process (fork)))
;;* lme

;;* lmx 420 system/sepolicy/public/attributes

(neverallow base_typeattr_214 domain (process (fork)))
;;* lme

;;* lmx 420 system/sepolicy/public/attributes

(neverallow base_typeattr_215 domain (process (fork)))
;;* lme

;;* lmx 420 system/sepolicy/public/attributes

(neverallow base_typeattr_216 domain (process (fork)))
;;* lme

;;* lmx 421 system/sepolicy/public/attributes

(neverallow base_typeattr_217 domain (process (fork)))
;;* lme

;;* lmx 421 system/sepolicy/public/attributes

(neverallow base_typeattr_218 domain (process (fork)))
;;* lme

;;* lmx 421 system/sepolicy/public/attributes

(neverallow base_typeattr_219 domain (process (fork)))
;;* lme

;;* lmx 422 system/sepolicy/public/attributes

(neverallow base_typeattr_220 domain (process (fork)))
;;* lme

;;* lmx 422 system/sepolicy/public/attributes

(neverallow base_typeattr_221 domain (process (fork)))
;;* lme

;;* lmx 422 system/sepolicy/public/attributes

(neverallow base_typeattr_222 domain (process (fork)))
;;* lme

;;* lmx 423 system/sepolicy/public/attributes

(neverallow base_typeattr_223 domain (process (fork)))
;;* lme

;;* lmx 423 system/sepolicy/public/attributes

(neverallow base_typeattr_224 domain (process (fork)))
;;* lme

;;* lmx 423 system/sepolicy/public/attributes

(neverallow base_typeattr_225 domain (process (fork)))
;;* lme

;;* lmx 424 system/sepolicy/public/attributes

(neverallow base_typeattr_226 domain (process (fork)))
;;* lme

;;* lmx 424 system/sepolicy/public/attributes

(neverallow base_typeattr_227 domain (process (fork)))
;;* lme

;;* lmx 424 system/sepolicy/public/attributes

(neverallow base_typeattr_228 domain (process (fork)))
;;* lme

;;* lmx 425 system/sepolicy/public/attributes

(neverallow base_typeattr_229 domain (process (fork)))
;;* lme

;;* lmx 425 system/sepolicy/public/attributes

(neverallow base_typeattr_230 domain (process (fork)))
;;* lme

;;* lmx 425 system/sepolicy/public/attributes

(neverallow base_typeattr_231 domain (process (fork)))
;;* lme

;;* lmx 426 system/sepolicy/public/attributes

(neverallow base_typeattr_232 domain (process (fork)))
;;* lme

;;* lmx 426 system/sepolicy/public/attributes

(neverallow base_typeattr_233 domain (process (fork)))
;;* lme

;;* lmx 426 system/sepolicy/public/attributes

(neverallow base_typeattr_234 domain (process (fork)))
;;* lme

;;* lmx 478 system/sepolicy/public/attributes

(neverallow base_typeattr_235 domain (process (fork)))
;;* lme

;;* lmx 478 system/sepolicy/public/attributes

(neverallow base_typeattr_236 domain (process (fork)))
;;* lme

;;* lmx 478 system/sepolicy/public/attributes

(neverallow base_typeattr_237 domain (process (fork)))
;;* lme

;;* lmx 494 system/sepolicy/public/attributes

(neverallow base_typeattr_238 domain (process (fork)))
;;* lme

;;* lmx 494 system/sepolicy/public/attributes

(neverallow base_typeattr_239 domain (process (fork)))
;;* lme

;;* lmx 494 system/sepolicy/public/attributes

(neverallow base_typeattr_240 domain (process (fork)))
;;* lme

(dontaudit su pdx_display_client_endpoint_socket (unix_stream_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind connectto)))
(dontaudit su pdx_display_client_channel_socket (unix_stream_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind connectto)))
(dontaudit su pdx_display_manager_endpoint_socket (unix_stream_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind connectto)))
(dontaudit su pdx_display_manager_channel_socket (unix_stream_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind connectto)))
(dontaudit su pdx_display_screenshot_endpoint_socket (unix_stream_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind connectto)))
(dontaudit su pdx_display_screenshot_channel_socket (unix_stream_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind connectto)))
(dontaudit su pdx_display_vsync_endpoint_socket (unix_stream_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind connectto)))
(dontaudit su pdx_display_vsync_channel_socket (unix_stream_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind connectto)))
(dontaudit su pdx_performance_client_endpoint_socket (unix_stream_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind connectto)))
(dontaudit su pdx_performance_client_channel_socket (unix_stream_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind connectto)))
(dontaudit su pdx_bufferhub_client_endpoint_socket (unix_stream_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind connectto)))
(dontaudit su pdx_bufferhub_client_channel_socket (unix_stream_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind connectto)))
;;* lmx 6 system/sepolicy/public/property.te

(neverallow base_typeattr_241 apexd_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 7 system/sepolicy/public/property.te

(neverallow base_typeattr_241 bootloader_boot_reason_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 8 system/sepolicy/public/property.te

(neverallow base_typeattr_241 device_config_activity_manager_native_boot_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 9 system/sepolicy/public/property.te

(neverallow base_typeattr_241 device_config_boot_count_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 10 system/sepolicy/public/property.te

(neverallow base_typeattr_241 device_config_input_native_boot_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 11 system/sepolicy/public/property.te

(neverallow base_typeattr_241 device_config_netd_native_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 12 system/sepolicy/public/property.te

(neverallow base_typeattr_241 device_config_reset_performed_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 13 system/sepolicy/public/property.te

(neverallow base_typeattr_241 firstboot_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 15 system/sepolicy/public/property.te

(neverallow base_typeattr_241 boottime_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 15 system/sepolicy/public/property.te

(neverallow base_typeattr_241 charger_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 15 system/sepolicy/public/property.te

(neverallow base_typeattr_241 cold_boot_done_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 15 system/sepolicy/public/property.te

(neverallow base_typeattr_241 ctl_adbd_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 15 system/sepolicy/public/property.te

(neverallow base_typeattr_241 ctl_apexd_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 15 system/sepolicy/public/property.te

(neverallow base_typeattr_241 ctl_bootanim_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 15 system/sepolicy/public/property.te

(neverallow base_typeattr_241 ctl_bugreport_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 15 system/sepolicy/public/property.te

(neverallow base_typeattr_241 ctl_console_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 15 system/sepolicy/public/property.te

(neverallow base_typeattr_241 ctl_dumpstate_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 15 system/sepolicy/public/property.te

(neverallow base_typeattr_241 ctl_fuse_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 15 system/sepolicy/public/property.te

(neverallow base_typeattr_241 ctl_gsid_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 15 system/sepolicy/public/property.te

(neverallow base_typeattr_241 ctl_interface_restart_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 15 system/sepolicy/public/property.te

(neverallow base_typeattr_241 ctl_interface_stop_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 15 system/sepolicy/public/property.te

(neverallow base_typeattr_241 ctl_mdnsd_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 15 system/sepolicy/public/property.te

(neverallow base_typeattr_241 ctl_restart_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 15 system/sepolicy/public/property.te

(neverallow base_typeattr_241 ctl_rildaemon_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 15 system/sepolicy/public/property.te

(neverallow base_typeattr_241 ctl_sigstop_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 15 system/sepolicy/public/property.te

(neverallow base_typeattr_241 dynamic_system_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 15 system/sepolicy/public/property.te

(neverallow base_typeattr_241 heapprofd_enabled_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 15 system/sepolicy/public/property.te

(neverallow base_typeattr_241 llkd_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 15 system/sepolicy/public/property.te

(neverallow base_typeattr_241 lpdumpd_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 15 system/sepolicy/public/property.te

(neverallow base_typeattr_241 mmc_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 15 system/sepolicy/public/property.te

(neverallow base_typeattr_241 mock_ota_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 15 system/sepolicy/public/property.te

(neverallow base_typeattr_241 net_dns_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 15 system/sepolicy/public/property.te

(neverallow base_typeattr_241 overlay_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 15 system/sepolicy/public/property.te

(neverallow base_typeattr_241 persistent_properties_ready_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 15 system/sepolicy/public/property.te

(neverallow base_typeattr_241 safemode_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 15 system/sepolicy/public/property.te

(neverallow base_typeattr_241 system_lmk_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 15 system/sepolicy/public/property.te

(neverallow base_typeattr_241 system_trace_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 15 system/sepolicy/public/property.te

(neverallow base_typeattr_241 test_boot_reason_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 15 system/sepolicy/public/property.te

(neverallow base_typeattr_241 time_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 15 system/sepolicy/public/property.te

(neverallow base_typeattr_241 traced_enabled_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 15 system/sepolicy/public/property.te

(neverallow base_typeattr_241 traced_lazy_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 53 system/sepolicy/public/property.te

(neverallow base_typeattr_241 aac_drc_prop (property_service (set)))
;;* lme

;;* lmx 54 system/sepolicy/public/property.te

(neverallow base_typeattr_241 adaptive_haptics_prop (property_service (set)))
;;* lme

;;* lmx 55 system/sepolicy/public/property.te

(neverallow base_typeattr_241 apex_ready_prop (property_service (set)))
;;* lme

;;* lmx 56 system/sepolicy/public/property.te

(neverallow base_typeattr_241 arm64_memtag_prop (property_service (set)))
;;* lme

;;* lmx 57 system/sepolicy/public/property.te

(neverallow base_typeattr_241 binder_cache_bluetooth_server_prop (property_service (set)))
;;* lme

;;* lmx 58 system/sepolicy/public/property.te

(neverallow base_typeattr_241 binder_cache_system_server_prop (property_service (set)))
;;* lme

;;* lmx 59 system/sepolicy/public/property.te

(neverallow base_typeattr_241 binder_cache_telephony_server_prop (property_service (set)))
;;* lme

;;* lmx 60 system/sepolicy/public/property.te

(neverallow base_typeattr_241 boot_status_prop (property_service (set)))
;;* lme

;;* lmx 61 system/sepolicy/public/property.te

(neverallow base_typeattr_241 bootanim_system_prop (property_service (set)))
;;* lme

;;* lmx 62 system/sepolicy/public/property.te

(neverallow base_typeattr_241 bootloader_prop (property_service (set)))
;;* lme

;;* lmx 63 system/sepolicy/public/property.te

(neverallow base_typeattr_241 boottime_public_prop (property_service (set)))
;;* lme

;;* lmx 64 system/sepolicy/public/property.te

(neverallow base_typeattr_241 bq_config_prop (property_service (set)))
;;* lme

;;* lmx 65 system/sepolicy/public/property.te

(neverallow base_typeattr_241 build_bootimage_prop (property_service (set)))
;;* lme

;;* lmx 66 system/sepolicy/public/property.te

(neverallow base_typeattr_241 build_prop (property_service (set)))
;;* lme

;;* lmx 67 system/sepolicy/public/property.te

(neverallow base_typeattr_241 composd_vm_art_prop (property_service (set)))
;;* lme

;;* lmx 68 system/sepolicy/public/property.te

(neverallow base_typeattr_241 device_config_aconfig_flags_prop (property_service (set)))
;;* lme

;;* lmx 69 system/sepolicy/public/property.te

(neverallow base_typeattr_241 device_config_camera_native_prop (property_service (set)))
;;* lme

;;* lmx 70 system/sepolicy/public/property.te

(neverallow base_typeattr_241 device_config_edgetpu_native_prop (property_service (set)))
;;* lme

;;* lmx 71 system/sepolicy/public/property.te

(neverallow base_typeattr_241 device_config_media_native_prop (property_service (set)))
;;* lme

;;* lmx 72 system/sepolicy/public/property.te

(neverallow base_typeattr_241 device_config_nnapi_native_prop (property_service (set)))
;;* lme

;;* lmx 73 system/sepolicy/public/property.te

(neverallow base_typeattr_241 device_config_runtime_native_boot_prop (property_service (set)))
;;* lme

;;* lmx 74 system/sepolicy/public/property.te

(neverallow base_typeattr_241 device_config_runtime_native_prop (property_service (set)))
;;* lme

;;* lmx 75 system/sepolicy/public/property.te

(neverallow base_typeattr_241 device_config_surface_flinger_native_boot_prop (property_service (set)))
;;* lme

;;* lmx 76 system/sepolicy/public/property.te

(neverallow base_typeattr_241 device_config_vendor_system_native_prop (property_service (set)))
;;* lme

;;* lmx 77 system/sepolicy/public/property.te

(neverallow base_typeattr_241 device_config_vendor_system_native_boot_prop (property_service (set)))
;;* lme

;;* lmx 78 system/sepolicy/public/property.te

(neverallow base_typeattr_241 drm_forcel3_prop (property_service (set)))
;;* lme

;;* lmx 79 system/sepolicy/public/property.te

(neverallow base_typeattr_241 fingerprint_prop (property_service (set)))
;;* lme

;;* lmx 80 system/sepolicy/public/property.te

(neverallow base_typeattr_241 gwp_asan_prop (property_service (set)))
;;* lme

;;* lmx 81 system/sepolicy/public/property.te

(neverallow base_typeattr_241 hal_instrumentation_prop (property_service (set)))
;;* lme

;;* lmx 82 system/sepolicy/public/property.te

(neverallow base_typeattr_241 userdebug_or_eng_prop (property_service (set)))
;;* lme

;;* lmx 83 system/sepolicy/public/property.te

(neverallow base_typeattr_241 init_service_status_prop (property_service (set)))
;;* lme

;;* lmx 84 system/sepolicy/public/property.te

(neverallow base_typeattr_241 libc_debug_prop (property_service (set)))
;;* lme

;;* lmx 85 system/sepolicy/public/property.te

(neverallow base_typeattr_241 module_sdkextensions_prop (property_service (set)))
;;* lme

;;* lmx 86 system/sepolicy/public/property.te

(neverallow base_typeattr_241 nnapi_ext_deny_product_prop (property_service (set)))
;;* lme

;;* lmx 87 system/sepolicy/public/property.te

(neverallow base_typeattr_241 persist_wm_debug_prop (property_service (set)))
;;* lme

;;* lmx 88 system/sepolicy/public/property.te

(neverallow base_typeattr_241 power_debug_prop (property_service (set)))
;;* lme

;;* lmx 89 system/sepolicy/public/property.te

(neverallow base_typeattr_241 profcollectd_etr_prop (property_service (set)))
;;* lme

;;* lmx 90 system/sepolicy/public/property.te

(neverallow base_typeattr_241 property_service_version_prop (property_service (set)))
;;* lme

;;* lmx 91 system/sepolicy/public/property.te

(neverallow base_typeattr_241 provisioned_prop (property_service (set)))
;;* lme

;;* lmx 92 system/sepolicy/public/property.te

(neverallow base_typeattr_241 restorecon_prop (property_service (set)))
;;* lme

;;* lmx 93 system/sepolicy/public/property.te

(neverallow base_typeattr_241 retaildemo_prop (property_service (set)))
;;* lme

;;* lmx 94 system/sepolicy/public/property.te

(neverallow base_typeattr_241 servicemanager_prop (property_service (set)))
;;* lme

;;* lmx 95 system/sepolicy/public/property.te

(neverallow base_typeattr_241 smart_idle_maint_enabled_prop (property_service (set)))
;;* lme

;;* lmx 96 system/sepolicy/public/property.te

(neverallow base_typeattr_241 socket_hook_prop (property_service (set)))
;;* lme

;;* lmx 97 system/sepolicy/public/property.te

(neverallow base_typeattr_241 sqlite_log_prop (property_service (set)))
;;* lme

;;* lmx 98 system/sepolicy/public/property.te

(neverallow base_typeattr_241 surfaceflinger_display_prop (property_service (set)))
;;* lme

;;* lmx 99 system/sepolicy/public/property.te

(neverallow base_typeattr_241 system_boot_reason_prop (property_service (set)))
;;* lme

;;* lmx 100 system/sepolicy/public/property.te

(neverallow base_typeattr_241 system_jvmti_agent_prop (property_service (set)))
;;* lme

;;* lmx 101 system/sepolicy/public/property.te

(neverallow base_typeattr_241 traced_oome_heap_session_count_prop (property_service (set)))
;;* lme

;;* lmx 102 system/sepolicy/public/property.te

(neverallow base_typeattr_241 ab_update_gki_prop (property_service (set)))
;;* lme

;;* lmx 103 system/sepolicy/public/property.te

(neverallow base_typeattr_241 usb_prop (property_service (set)))
;;* lme

;;* lmx 104 system/sepolicy/public/property.te

(neverallow base_typeattr_241 userspace_reboot_exported_prop (property_service (set)))
;;* lme

;;* lmx 105 system/sepolicy/public/property.te

(neverallow base_typeattr_241 vold_status_prop (property_service (set)))
;;* lme

;;* lmx 106 system/sepolicy/public/property.te

(neverallow base_typeattr_241 vts_status_prop (property_service (set)))
;;* lme

;;* lmx 108 system/sepolicy/public/property.te

(neverallow base_typeattr_241 config_prop (property_service (set)))
;;* lme

;;* lmx 108 system/sepolicy/public/property.te

(neverallow base_typeattr_241 cppreopt_prop (property_service (set)))
;;* lme

;;* lmx 108 system/sepolicy/public/property.te

(neverallow base_typeattr_241 dalvik_prop (property_service (set)))
;;* lme

;;* lmx 108 system/sepolicy/public/property.te

(neverallow base_typeattr_241 debuggerd_prop (property_service (set)))
;;* lme

;;* lmx 108 system/sepolicy/public/property.te

(neverallow base_typeattr_241 device_logging_prop (property_service (set)))
;;* lme

;;* lmx 108 system/sepolicy/public/property.te

(neverallow base_typeattr_241 dhcp_prop (property_service (set)))
;;* lme

;;* lmx 108 system/sepolicy/public/property.te

(neverallow base_typeattr_241 dumpstate_prop (property_service (set)))
;;* lme

;;* lmx 108 system/sepolicy/public/property.te

(neverallow base_typeattr_241 exported3_system_prop (property_service (set)))
;;* lme

;;* lmx 108 system/sepolicy/public/property.te

(neverallow base_typeattr_241 exported_dumpstate_prop (property_service (set)))
;;* lme

;;* lmx 108 system/sepolicy/public/property.te

(neverallow base_typeattr_241 exported_secure_prop (property_service (set)))
;;* lme

;;* lmx 108 system/sepolicy/public/property.te

(neverallow base_typeattr_241 heapprofd_prop (property_service (set)))
;;* lme

;;* lmx 108 system/sepolicy/public/property.te

(neverallow base_typeattr_241 net_radio_prop (property_service (set)))
;;* lme

;;* lmx 108 system/sepolicy/public/property.te

(neverallow base_typeattr_241 pan_result_prop (property_service (set)))
;;* lme

;;* lmx 108 system/sepolicy/public/property.te

(neverallow base_typeattr_241 persist_debug_prop (property_service (set)))
;;* lme

;;* lmx 108 system/sepolicy/public/property.te

(neverallow base_typeattr_241 shell_prop (property_service (set)))
;;* lme

;;* lmx 108 system/sepolicy/public/property.te

(neverallow base_typeattr_241 test_harness_prop (property_service (set)))
;;* lme

;;* lmx 108 system/sepolicy/public/property.te

(neverallow base_typeattr_241 theme_prop (property_service (set)))
;;* lme

;;* lmx 108 system/sepolicy/public/property.te

(neverallow base_typeattr_241 use_memfd_prop (property_service (set)))
;;* lme

;;* lmx 108 system/sepolicy/public/property.te

(neverallow base_typeattr_241 vold_prop (property_service (set)))
;;* lme

;;* lmx 132 system/sepolicy/public/property.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 132 system/sepolicy/public/property.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 132 system/sepolicy/public/property.te

(allow vendor_init apexd_config_prop (property_service (set)))
;;* lme

;;* lmx 132 system/sepolicy/public/property.te

(allow vendor_init apexd_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 132 system/sepolicy/public/property.te

(neverallow base_typeattr_242 apexd_config_prop (property_service (set)))
;;* lme

;;* lmx 133 system/sepolicy/public/property.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 133 system/sepolicy/public/property.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 133 system/sepolicy/public/property.te

(allow vendor_init aaudio_config_prop (property_service (set)))
;;* lme

;;* lmx 133 system/sepolicy/public/property.te

(allow vendor_init aaudio_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 133 system/sepolicy/public/property.te

(neverallow base_typeattr_242 aaudio_config_prop (property_service (set)))
;;* lme

;;* lmx 134 system/sepolicy/public/property.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 134 system/sepolicy/public/property.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 134 system/sepolicy/public/property.te

(allow vendor_init audio_config_prop (property_service (set)))
;;* lme

;;* lmx 134 system/sepolicy/public/property.te

(allow vendor_init audio_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 134 system/sepolicy/public/property.te

(neverallow base_typeattr_242 audio_config_prop (property_service (set)))
;;* lme

;;* lmx 135 system/sepolicy/public/property.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 135 system/sepolicy/public/property.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 135 system/sepolicy/public/property.te

(allow vendor_init bootanim_config_prop (property_service (set)))
;;* lme

;;* lmx 135 system/sepolicy/public/property.te

(allow vendor_init bootanim_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 135 system/sepolicy/public/property.te

(neverallow base_typeattr_242 bootanim_config_prop (property_service (set)))
;;* lme

;;* lmx 136 system/sepolicy/public/property.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 136 system/sepolicy/public/property.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 136 system/sepolicy/public/property.te

(allow vendor_init bluetooth_config_prop (property_service (set)))
;;* lme

;;* lmx 136 system/sepolicy/public/property.te

(allow vendor_init bluetooth_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 136 system/sepolicy/public/property.te

(neverallow base_typeattr_242 bluetooth_config_prop (property_service (set)))
;;* lme

;;* lmx 137 system/sepolicy/public/property.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 137 system/sepolicy/public/property.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 137 system/sepolicy/public/property.te

(allow vendor_init build_attestation_prop (property_service (set)))
;;* lme

;;* lmx 137 system/sepolicy/public/property.te

(allow vendor_init build_attestation_prop (file (read getattr map open)))
;;* lme

;;* lmx 137 system/sepolicy/public/property.te

(neverallow base_typeattr_242 build_attestation_prop (property_service (set)))
;;* lme

;;* lmx 138 system/sepolicy/public/property.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 138 system/sepolicy/public/property.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 138 system/sepolicy/public/property.te

(allow vendor_init build_config_prop (property_service (set)))
;;* lme

;;* lmx 138 system/sepolicy/public/property.te

(allow vendor_init build_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 138 system/sepolicy/public/property.te

(neverallow base_typeattr_242 build_config_prop (property_service (set)))
;;* lme

;;* lmx 139 system/sepolicy/public/property.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 139 system/sepolicy/public/property.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 139 system/sepolicy/public/property.te

(allow vendor_init build_odm_prop (property_service (set)))
;;* lme

;;* lmx 139 system/sepolicy/public/property.te

(allow vendor_init build_odm_prop (file (read getattr map open)))
;;* lme

;;* lmx 139 system/sepolicy/public/property.te

(neverallow base_typeattr_242 build_odm_prop (property_service (set)))
;;* lme

;;* lmx 140 system/sepolicy/public/property.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 140 system/sepolicy/public/property.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 140 system/sepolicy/public/property.te

(allow vendor_init build_vendor_prop (property_service (set)))
;;* lme

;;* lmx 140 system/sepolicy/public/property.te

(allow vendor_init build_vendor_prop (file (read getattr map open)))
;;* lme

;;* lmx 140 system/sepolicy/public/property.te

(neverallow base_typeattr_242 build_vendor_prop (property_service (set)))
;;* lme

;;* lmx 141 system/sepolicy/public/property.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 141 system/sepolicy/public/property.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 141 system/sepolicy/public/property.te

(allow vendor_init camera_calibration_prop (property_service (set)))
;;* lme

;;* lmx 141 system/sepolicy/public/property.te

(allow vendor_init camera_calibration_prop (file (read getattr map open)))
;;* lme

;;* lmx 141 system/sepolicy/public/property.te

(neverallow base_typeattr_242 camera_calibration_prop (property_service (set)))
;;* lme

;;* lmx 142 system/sepolicy/public/property.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 142 system/sepolicy/public/property.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 142 system/sepolicy/public/property.te

(allow vendor_init camera_config_prop (property_service (set)))
;;* lme

;;* lmx 142 system/sepolicy/public/property.te

(allow vendor_init camera_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 142 system/sepolicy/public/property.te

(neverallow base_typeattr_242 camera_config_prop (property_service (set)))
;;* lme

;;* lmx 143 system/sepolicy/public/property.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 143 system/sepolicy/public/property.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 143 system/sepolicy/public/property.te

(allow vendor_init camera2_extensions_prop (property_service (set)))
;;* lme

;;* lmx 143 system/sepolicy/public/property.te

(allow vendor_init camera2_extensions_prop (file (read getattr map open)))
;;* lme

;;* lmx 143 system/sepolicy/public/property.te

(neverallow base_typeattr_242 camera2_extensions_prop (property_service (set)))
;;* lme

;;* lmx 144 system/sepolicy/public/property.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 144 system/sepolicy/public/property.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 144 system/sepolicy/public/property.te

(allow vendor_init camerax_extensions_prop (property_service (set)))
;;* lme

;;* lmx 144 system/sepolicy/public/property.te

(allow vendor_init camerax_extensions_prop (file (read getattr map open)))
;;* lme

;;* lmx 144 system/sepolicy/public/property.te

(neverallow base_typeattr_242 camerax_extensions_prop (property_service (set)))
;;* lme

;;* lmx 145 system/sepolicy/public/property.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 145 system/sepolicy/public/property.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 145 system/sepolicy/public/property.te

(allow vendor_init charger_config_prop (property_service (set)))
;;* lme

;;* lmx 145 system/sepolicy/public/property.te

(allow vendor_init charger_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 145 system/sepolicy/public/property.te

(neverallow base_typeattr_242 charger_config_prop (property_service (set)))
;;* lme

;;* lmx 146 system/sepolicy/public/property.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 146 system/sepolicy/public/property.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 146 system/sepolicy/public/property.te

(allow vendor_init codec2_config_prop (property_service (set)))
;;* lme

;;* lmx 146 system/sepolicy/public/property.te

(allow vendor_init codec2_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 146 system/sepolicy/public/property.te

(neverallow base_typeattr_242 codec2_config_prop (property_service (set)))
;;* lme

;;* lmx 147 system/sepolicy/public/property.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 147 system/sepolicy/public/property.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 147 system/sepolicy/public/property.te

(allow vendor_init composd_vm_vendor_prop (property_service (set)))
;;* lme

;;* lmx 147 system/sepolicy/public/property.te

(allow vendor_init composd_vm_vendor_prop (file (read getattr map open)))
;;* lme

;;* lmx 147 system/sepolicy/public/property.te

(neverallow base_typeattr_242 composd_vm_vendor_prop (property_service (set)))
;;* lme

;;* lmx 148 system/sepolicy/public/property.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 148 system/sepolicy/public/property.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 148 system/sepolicy/public/property.te

(allow vendor_init cpu_variant_prop (property_service (set)))
;;* lme

;;* lmx 148 system/sepolicy/public/property.te

(allow vendor_init cpu_variant_prop (file (read getattr map open)))
;;* lme

;;* lmx 148 system/sepolicy/public/property.te

(neverallow base_typeattr_242 cpu_variant_prop (property_service (set)))
;;* lme

;;* lmx 149 system/sepolicy/public/property.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 149 system/sepolicy/public/property.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 149 system/sepolicy/public/property.te

(allow vendor_init debugfs_restriction_prop (property_service (set)))
;;* lme

;;* lmx 149 system/sepolicy/public/property.te

(allow vendor_init debugfs_restriction_prop (file (read getattr map open)))
;;* lme

;;* lmx 149 system/sepolicy/public/property.te

(neverallow base_typeattr_242 debugfs_restriction_prop (property_service (set)))
;;* lme

;;* lmx 150 system/sepolicy/public/property.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 150 system/sepolicy/public/property.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 150 system/sepolicy/public/property.te

(allow vendor_init drm_config_prop (property_service (set)))
;;* lme

;;* lmx 150 system/sepolicy/public/property.te

(allow vendor_init drm_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 150 system/sepolicy/public/property.te

(neverallow base_typeattr_242 drm_config_prop (property_service (set)))
;;* lme

;;* lmx 151 system/sepolicy/public/property.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 151 system/sepolicy/public/property.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 151 system/sepolicy/public/property.te

(allow vendor_init drm_service_config_prop (property_service (set)))
;;* lme

;;* lmx 151 system/sepolicy/public/property.te

(allow vendor_init drm_service_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 151 system/sepolicy/public/property.te

(neverallow base_typeattr_242 drm_service_config_prop (property_service (set)))
;;* lme

;;* lmx 152 system/sepolicy/public/property.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 152 system/sepolicy/public/property.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 152 system/sepolicy/public/property.te

(allow vendor_init enable_16k_pages_prop (property_service (set)))
;;* lme

;;* lmx 152 system/sepolicy/public/property.te

(allow vendor_init enable_16k_pages_prop (file (read getattr map open)))
;;* lme

;;* lmx 152 system/sepolicy/public/property.te

(neverallow base_typeattr_242 enable_16k_pages_prop (property_service (set)))
;;* lme

;;* lmx 153 system/sepolicy/public/property.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 153 system/sepolicy/public/property.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 153 system/sepolicy/public/property.te

(allow vendor_init exported_camera_prop (property_service (set)))
;;* lme

;;* lmx 153 system/sepolicy/public/property.te

(allow vendor_init exported_camera_prop (file (read getattr map open)))
;;* lme

;;* lmx 153 system/sepolicy/public/property.te

(neverallow base_typeattr_242 exported_camera_prop (property_service (set)))
;;* lme

;;* lmx 154 system/sepolicy/public/property.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 154 system/sepolicy/public/property.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 154 system/sepolicy/public/property.te

(allow vendor_init exported_config_prop (property_service (set)))
;;* lme

;;* lmx 154 system/sepolicy/public/property.te

(allow vendor_init exported_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 154 system/sepolicy/public/property.te

(neverallow base_typeattr_242 exported_config_prop (property_service (set)))
;;* lme

;;* lmx 155 system/sepolicy/public/property.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 155 system/sepolicy/public/property.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 155 system/sepolicy/public/property.te

(allow vendor_init exported_default_prop (property_service (set)))
;;* lme

;;* lmx 155 system/sepolicy/public/property.te

(allow vendor_init exported_default_prop (file (read getattr map open)))
;;* lme

;;* lmx 155 system/sepolicy/public/property.te

(neverallow base_typeattr_242 exported_default_prop (property_service (set)))
;;* lme

;;* lmx 156 system/sepolicy/public/property.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 156 system/sepolicy/public/property.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 156 system/sepolicy/public/property.te

(allow vendor_init ffs_config_prop (property_service (set)))
;;* lme

;;* lmx 156 system/sepolicy/public/property.te

(allow vendor_init ffs_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 156 system/sepolicy/public/property.te

(neverallow base_typeattr_242 ffs_config_prop (property_service (set)))
;;* lme

;;* lmx 157 system/sepolicy/public/property.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 157 system/sepolicy/public/property.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 157 system/sepolicy/public/property.te

(allow vendor_init framework_watchdog_config_prop (property_service (set)))
;;* lme

;;* lmx 157 system/sepolicy/public/property.te

(allow vendor_init framework_watchdog_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 157 system/sepolicy/public/property.te

(neverallow base_typeattr_242 framework_watchdog_config_prop (property_service (set)))
;;* lme

;;* lmx 158 system/sepolicy/public/property.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 158 system/sepolicy/public/property.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 158 system/sepolicy/public/property.te

(allow vendor_init graphics_config_prop (property_service (set)))
;;* lme

;;* lmx 158 system/sepolicy/public/property.te

(allow vendor_init graphics_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 158 system/sepolicy/public/property.te

(neverallow base_typeattr_242 graphics_config_prop (property_service (set)))
;;* lme

;;* lmx 159 system/sepolicy/public/property.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 159 system/sepolicy/public/property.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 159 system/sepolicy/public/property.te

(allow vendor_init hdmi_config_prop (property_service (set)))
;;* lme

;;* lmx 159 system/sepolicy/public/property.te

(allow vendor_init hdmi_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 159 system/sepolicy/public/property.te

(neverallow base_typeattr_242 hdmi_config_prop (property_service (set)))
;;* lme

;;* lmx 160 system/sepolicy/public/property.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 160 system/sepolicy/public/property.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 160 system/sepolicy/public/property.te

(allow vendor_init hw_timeout_multiplier_prop (property_service (set)))
;;* lme

;;* lmx 160 system/sepolicy/public/property.te

(allow vendor_init hw_timeout_multiplier_prop (file (read getattr map open)))
;;* lme

;;* lmx 160 system/sepolicy/public/property.te

(neverallow base_typeattr_242 hw_timeout_multiplier_prop (property_service (set)))
;;* lme

;;* lmx 161 system/sepolicy/public/property.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 161 system/sepolicy/public/property.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 161 system/sepolicy/public/property.te

(allow vendor_init hypervisor_prop (property_service (set)))
;;* lme

;;* lmx 161 system/sepolicy/public/property.te

(allow vendor_init hypervisor_prop (file (read getattr map open)))
;;* lme

;;* lmx 161 system/sepolicy/public/property.te

(neverallow base_typeattr_242 hypervisor_prop (property_service (set)))
;;* lme

;;* lmx 162 system/sepolicy/public/property.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 162 system/sepolicy/public/property.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 162 system/sepolicy/public/property.te

(allow vendor_init hypervisor_restricted_prop (property_service (set)))
;;* lme

;;* lmx 162 system/sepolicy/public/property.te

(allow vendor_init hypervisor_restricted_prop (file (read getattr map open)))
;;* lme

;;* lmx 162 system/sepolicy/public/property.te

(neverallow base_typeattr_242 hypervisor_restricted_prop (property_service (set)))
;;* lme

;;* lmx 163 system/sepolicy/public/property.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 163 system/sepolicy/public/property.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 163 system/sepolicy/public/property.te

(allow vendor_init incremental_prop (property_service (set)))
;;* lme

;;* lmx 163 system/sepolicy/public/property.te

(allow vendor_init incremental_prop (file (read getattr map open)))
;;* lme

;;* lmx 163 system/sepolicy/public/property.te

(neverallow base_typeattr_242 incremental_prop (property_service (set)))
;;* lme

;;* lmx 164 system/sepolicy/public/property.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 164 system/sepolicy/public/property.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 164 system/sepolicy/public/property.te

(allow vendor_init input_device_config_prop (property_service (set)))
;;* lme

;;* lmx 164 system/sepolicy/public/property.te

(allow vendor_init input_device_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 164 system/sepolicy/public/property.te

(neverallow base_typeattr_242 input_device_config_prop (property_service (set)))
;;* lme

;;* lmx 165 system/sepolicy/public/property.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 165 system/sepolicy/public/property.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 165 system/sepolicy/public/property.te

(allow vendor_init keyguard_config_prop (property_service (set)))
;;* lme

;;* lmx 165 system/sepolicy/public/property.te

(allow vendor_init keyguard_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 165 system/sepolicy/public/property.te

(neverallow base_typeattr_242 keyguard_config_prop (property_service (set)))
;;* lme

;;* lmx 166 system/sepolicy/public/property.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 166 system/sepolicy/public/property.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 166 system/sepolicy/public/property.te

(allow vendor_init keystore_config_prop (property_service (set)))
;;* lme

;;* lmx 166 system/sepolicy/public/property.te

(allow vendor_init keystore_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 166 system/sepolicy/public/property.te

(neverallow base_typeattr_242 keystore_config_prop (property_service (set)))
;;* lme

;;* lmx 167 system/sepolicy/public/property.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 167 system/sepolicy/public/property.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 167 system/sepolicy/public/property.te

(allow vendor_init lmkd_config_prop (property_service (set)))
;;* lme

;;* lmx 167 system/sepolicy/public/property.te

(allow vendor_init lmkd_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 167 system/sepolicy/public/property.te

(neverallow base_typeattr_242 lmkd_config_prop (property_service (set)))
;;* lme

;;* lmx 168 system/sepolicy/public/property.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 168 system/sepolicy/public/property.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 168 system/sepolicy/public/property.te

(allow vendor_init media_config_prop (property_service (set)))
;;* lme

;;* lmx 168 system/sepolicy/public/property.te

(allow vendor_init media_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 168 system/sepolicy/public/property.te

(neverallow base_typeattr_242 media_config_prop (property_service (set)))
;;* lme

;;* lmx 169 system/sepolicy/public/property.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 169 system/sepolicy/public/property.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 169 system/sepolicy/public/property.te

(allow vendor_init mediadrm_config_prop (property_service (set)))
;;* lme

;;* lmx 169 system/sepolicy/public/property.te

(allow vendor_init mediadrm_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 169 system/sepolicy/public/property.te

(neverallow base_typeattr_242 mediadrm_config_prop (property_service (set)))
;;* lme

;;* lmx 170 system/sepolicy/public/property.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 170 system/sepolicy/public/property.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 170 system/sepolicy/public/property.te

(allow vendor_init mm_events_config_prop (property_service (set)))
;;* lme

;;* lmx 170 system/sepolicy/public/property.te

(allow vendor_init mm_events_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 170 system/sepolicy/public/property.te

(neverallow base_typeattr_242 mm_events_config_prop (property_service (set)))
;;* lme

;;* lmx 171 system/sepolicy/public/property.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 171 system/sepolicy/public/property.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 171 system/sepolicy/public/property.te

(allow vendor_init oem_unlock_prop (property_service (set)))
;;* lme

;;* lmx 171 system/sepolicy/public/property.te

(allow vendor_init oem_unlock_prop (file (read getattr map open)))
;;* lme

;;* lmx 171 system/sepolicy/public/property.te

(neverallow base_typeattr_242 oem_unlock_prop (property_service (set)))
;;* lme

;;* lmx 172 system/sepolicy/public/property.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 172 system/sepolicy/public/property.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 172 system/sepolicy/public/property.te

(allow vendor_init ota_build_prop (property_service (set)))
;;* lme

;;* lmx 172 system/sepolicy/public/property.te

(allow vendor_init ota_build_prop (file (read getattr map open)))
;;* lme

;;* lmx 172 system/sepolicy/public/property.te

(neverallow base_typeattr_242 ota_build_prop (property_service (set)))
;;* lme

;;* lmx 173 system/sepolicy/public/property.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 173 system/sepolicy/public/property.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 173 system/sepolicy/public/property.te

(allow vendor_init packagemanager_config_prop (property_service (set)))
;;* lme

;;* lmx 173 system/sepolicy/public/property.te

(allow vendor_init packagemanager_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 173 system/sepolicy/public/property.te

(neverallow base_typeattr_242 packagemanager_config_prop (property_service (set)))
;;* lme

;;* lmx 174 system/sepolicy/public/property.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 174 system/sepolicy/public/property.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 174 system/sepolicy/public/property.te

(allow vendor_init quick_start_prop (property_service (set)))
;;* lme

;;* lmx 174 system/sepolicy/public/property.te

(allow vendor_init quick_start_prop (file (read getattr map open)))
;;* lme

;;* lmx 174 system/sepolicy/public/property.te

(neverallow base_typeattr_242 quick_start_prop (property_service (set)))
;;* lme

;;* lmx 175 system/sepolicy/public/property.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 175 system/sepolicy/public/property.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 175 system/sepolicy/public/property.te

(allow vendor_init recovery_config_prop (property_service (set)))
;;* lme

;;* lmx 175 system/sepolicy/public/property.te

(allow vendor_init recovery_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 175 system/sepolicy/public/property.te

(neverallow base_typeattr_242 recovery_config_prop (property_service (set)))
;;* lme

;;* lmx 176 system/sepolicy/public/property.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 176 system/sepolicy/public/property.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 176 system/sepolicy/public/property.te

(allow vendor_init recovery_usb_config_prop (property_service (set)))
;;* lme

;;* lmx 176 system/sepolicy/public/property.te

(allow vendor_init recovery_usb_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 176 system/sepolicy/public/property.te

(neverallow base_typeattr_242 recovery_usb_config_prop (property_service (set)))
;;* lme

;;* lmx 177 system/sepolicy/public/property.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 177 system/sepolicy/public/property.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 177 system/sepolicy/public/property.te

(allow vendor_init sendbug_config_prop (property_service (set)))
;;* lme

;;* lmx 177 system/sepolicy/public/property.te

(allow vendor_init sendbug_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 177 system/sepolicy/public/property.te

(neverallow base_typeattr_242 sendbug_config_prop (property_service (set)))
;;* lme

;;* lmx 178 system/sepolicy/public/property.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 178 system/sepolicy/public/property.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 178 system/sepolicy/public/property.te

(allow vendor_init soc_prop (property_service (set)))
;;* lme

;;* lmx 178 system/sepolicy/public/property.te

(allow vendor_init soc_prop (file (read getattr map open)))
;;* lme

;;* lmx 178 system/sepolicy/public/property.te

(neverallow base_typeattr_242 soc_prop (property_service (set)))
;;* lme

;;* lmx 179 system/sepolicy/public/property.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 179 system/sepolicy/public/property.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 179 system/sepolicy/public/property.te

(allow vendor_init storage_config_prop (property_service (set)))
;;* lme

;;* lmx 179 system/sepolicy/public/property.te

(allow vendor_init storage_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 179 system/sepolicy/public/property.te

(neverallow base_typeattr_242 storage_config_prop (property_service (set)))
;;* lme

;;* lmx 180 system/sepolicy/public/property.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 180 system/sepolicy/public/property.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 180 system/sepolicy/public/property.te

(allow vendor_init storagemanager_config_prop (property_service (set)))
;;* lme

;;* lmx 180 system/sepolicy/public/property.te

(allow vendor_init storagemanager_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 180 system/sepolicy/public/property.te

(neverallow base_typeattr_242 storagemanager_config_prop (property_service (set)))
;;* lme

;;* lmx 181 system/sepolicy/public/property.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 181 system/sepolicy/public/property.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 181 system/sepolicy/public/property.te

(allow vendor_init surfaceflinger_prop (property_service (set)))
;;* lme

;;* lmx 181 system/sepolicy/public/property.te

(allow vendor_init surfaceflinger_prop (file (read getattr map open)))
;;* lme

;;* lmx 181 system/sepolicy/public/property.te

(neverallow base_typeattr_242 surfaceflinger_prop (property_service (set)))
;;* lme

;;* lmx 182 system/sepolicy/public/property.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 182 system/sepolicy/public/property.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 182 system/sepolicy/public/property.te

(allow vendor_init suspend_prop (property_service (set)))
;;* lme

;;* lmx 182 system/sepolicy/public/property.te

(allow vendor_init suspend_prop (file (read getattr map open)))
;;* lme

;;* lmx 182 system/sepolicy/public/property.te

(neverallow base_typeattr_242 suspend_prop (property_service (set)))
;;* lme

;;* lmx 183 system/sepolicy/public/property.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 183 system/sepolicy/public/property.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 183 system/sepolicy/public/property.te

(allow vendor_init systemsound_config_prop (property_service (set)))
;;* lme

;;* lmx 183 system/sepolicy/public/property.te

(allow vendor_init systemsound_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 183 system/sepolicy/public/property.te

(neverallow base_typeattr_242 systemsound_config_prop (property_service (set)))
;;* lme

;;* lmx 184 system/sepolicy/public/property.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 184 system/sepolicy/public/property.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 184 system/sepolicy/public/property.te

(allow vendor_init telephony_config_prop (property_service (set)))
;;* lme

;;* lmx 184 system/sepolicy/public/property.te

(allow vendor_init telephony_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 184 system/sepolicy/public/property.te

(neverallow base_typeattr_242 telephony_config_prop (property_service (set)))
;;* lme

;;* lmx 185 system/sepolicy/public/property.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 185 system/sepolicy/public/property.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 185 system/sepolicy/public/property.te

(allow vendor_init threadnetwork_config_prop (property_service (set)))
;;* lme

;;* lmx 185 system/sepolicy/public/property.te

(allow vendor_init threadnetwork_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 185 system/sepolicy/public/property.te

(neverallow base_typeattr_242 threadnetwork_config_prop (property_service (set)))
;;* lme

;;* lmx 186 system/sepolicy/public/property.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 186 system/sepolicy/public/property.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 186 system/sepolicy/public/property.te

(allow vendor_init tombstone_config_prop (property_service (set)))
;;* lme

;;* lmx 186 system/sepolicy/public/property.te

(allow vendor_init tombstone_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 186 system/sepolicy/public/property.te

(neverallow base_typeattr_242 tombstone_config_prop (property_service (set)))
;;* lme

;;* lmx 187 system/sepolicy/public/property.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 187 system/sepolicy/public/property.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 187 system/sepolicy/public/property.te

(allow vendor_init usb_config_prop (property_service (set)))
;;* lme

;;* lmx 187 system/sepolicy/public/property.te

(allow vendor_init usb_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 187 system/sepolicy/public/property.te

(neverallow base_typeattr_242 usb_config_prop (property_service (set)))
;;* lme

;;* lmx 188 system/sepolicy/public/property.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 188 system/sepolicy/public/property.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 188 system/sepolicy/public/property.te

(allow vendor_init userspace_reboot_config_prop (property_service (set)))
;;* lme

;;* lmx 188 system/sepolicy/public/property.te

(allow vendor_init userspace_reboot_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 188 system/sepolicy/public/property.te

(neverallow base_typeattr_242 userspace_reboot_config_prop (property_service (set)))
;;* lme

;;* lmx 189 system/sepolicy/public/property.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 189 system/sepolicy/public/property.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 189 system/sepolicy/public/property.te

(allow vendor_init vehicle_hal_prop (property_service (set)))
;;* lme

;;* lmx 189 system/sepolicy/public/property.te

(allow vendor_init vehicle_hal_prop (file (read getattr map open)))
;;* lme

;;* lmx 189 system/sepolicy/public/property.te

(neverallow base_typeattr_242 vehicle_hal_prop (property_service (set)))
;;* lme

;;* lmx 190 system/sepolicy/public/property.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 190 system/sepolicy/public/property.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 190 system/sepolicy/public/property.te

(allow vendor_init vendor_security_patch_level_prop (property_service (set)))
;;* lme

;;* lmx 190 system/sepolicy/public/property.te

(allow vendor_init vendor_security_patch_level_prop (file (read getattr map open)))
;;* lme

;;* lmx 190 system/sepolicy/public/property.te

(neverallow base_typeattr_242 vendor_security_patch_level_prop (property_service (set)))
;;* lme

;;* lmx 191 system/sepolicy/public/property.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 191 system/sepolicy/public/property.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 191 system/sepolicy/public/property.te

(allow vendor_init vendor_socket_hook_prop (property_service (set)))
;;* lme

;;* lmx 191 system/sepolicy/public/property.te

(allow vendor_init vendor_socket_hook_prop (file (read getattr map open)))
;;* lme

;;* lmx 191 system/sepolicy/public/property.te

(neverallow base_typeattr_242 vendor_socket_hook_prop (property_service (set)))
;;* lme

;;* lmx 192 system/sepolicy/public/property.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 192 system/sepolicy/public/property.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 192 system/sepolicy/public/property.te

(allow vendor_init virtual_ab_prop (property_service (set)))
;;* lme

;;* lmx 192 system/sepolicy/public/property.te

(allow vendor_init virtual_ab_prop (file (read getattr map open)))
;;* lme

;;* lmx 192 system/sepolicy/public/property.te

(neverallow base_typeattr_242 virtual_ab_prop (property_service (set)))
;;* lme

;;* lmx 193 system/sepolicy/public/property.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 193 system/sepolicy/public/property.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 193 system/sepolicy/public/property.te

(allow vendor_init vndk_prop (property_service (set)))
;;* lme

;;* lmx 193 system/sepolicy/public/property.te

(allow vendor_init vndk_prop (file (read getattr map open)))
;;* lme

;;* lmx 193 system/sepolicy/public/property.te

(neverallow base_typeattr_242 vndk_prop (property_service (set)))
;;* lme

;;* lmx 194 system/sepolicy/public/property.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 194 system/sepolicy/public/property.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 194 system/sepolicy/public/property.te

(allow vendor_init vts_config_prop (property_service (set)))
;;* lme

;;* lmx 194 system/sepolicy/public/property.te

(allow vendor_init vts_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 194 system/sepolicy/public/property.te

(neverallow base_typeattr_242 vts_config_prop (property_service (set)))
;;* lme

;;* lmx 195 system/sepolicy/public/property.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 195 system/sepolicy/public/property.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 195 system/sepolicy/public/property.te

(allow vendor_init vold_config_prop (property_service (set)))
;;* lme

;;* lmx 195 system/sepolicy/public/property.te

(allow vendor_init vold_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 195 system/sepolicy/public/property.te

(neverallow base_typeattr_242 vold_config_prop (property_service (set)))
;;* lme

;;* lmx 196 system/sepolicy/public/property.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 196 system/sepolicy/public/property.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 196 system/sepolicy/public/property.te

(allow vendor_init wifi_config_prop (property_service (set)))
;;* lme

;;* lmx 196 system/sepolicy/public/property.te

(allow vendor_init wifi_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 196 system/sepolicy/public/property.te

(neverallow base_typeattr_242 wifi_config_prop (property_service (set)))
;;* lme

;;* lmx 197 system/sepolicy/public/property.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 197 system/sepolicy/public/property.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 197 system/sepolicy/public/property.te

(allow vendor_init zram_config_prop (property_service (set)))
;;* lme

;;* lmx 197 system/sepolicy/public/property.te

(allow vendor_init zram_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 197 system/sepolicy/public/property.te

(neverallow base_typeattr_242 zram_config_prop (property_service (set)))
;;* lme

;;* lmx 198 system/sepolicy/public/property.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 198 system/sepolicy/public/property.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 198 system/sepolicy/public/property.te

(allow vendor_init zygote_config_prop (property_service (set)))
;;* lme

;;* lmx 198 system/sepolicy/public/property.te

(allow vendor_init zygote_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 198 system/sepolicy/public/property.te

(neverallow base_typeattr_242 zygote_config_prop (property_service (set)))
;;* lme

;;* lmx 199 system/sepolicy/public/property.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 199 system/sepolicy/public/property.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 199 system/sepolicy/public/property.te

(allow vendor_init dck_prop (property_service (set)))
;;* lme

;;* lmx 199 system/sepolicy/public/property.te

(allow vendor_init dck_prop (file (read getattr map open)))
;;* lme

;;* lmx 199 system/sepolicy/public/property.te

(neverallow base_typeattr_242 dck_prop (property_service (set)))
;;* lme

;;* lmx 200 system/sepolicy/public/property.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 200 system/sepolicy/public/property.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 200 system/sepolicy/public/property.te

(allow vendor_init tuner_config_prop (property_service (set)))
;;* lme

;;* lmx 200 system/sepolicy/public/property.te

(allow vendor_init tuner_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 200 system/sepolicy/public/property.te

(neverallow base_typeattr_242 tuner_config_prop (property_service (set)))
;;* lme

;;* lmx 201 system/sepolicy/public/property.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 201 system/sepolicy/public/property.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 201 system/sepolicy/public/property.te

(allow vendor_init usb_uvc_enabled_prop (property_service (set)))
;;* lme

;;* lmx 201 system/sepolicy/public/property.te

(allow vendor_init usb_uvc_enabled_prop (file (read getattr map open)))
;;* lme

;;* lmx 201 system/sepolicy/public/property.te

(neverallow base_typeattr_242 usb_uvc_enabled_prop (property_service (set)))
;;* lme

;;* lmx 202 system/sepolicy/public/property.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 202 system/sepolicy/public/property.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 202 system/sepolicy/public/property.te

(allow vendor_init setupwizard_mode_prop (property_service (set)))
;;* lme

;;* lmx 202 system/sepolicy/public/property.te

(allow vendor_init setupwizard_mode_prop (file (read getattr map open)))
;;* lme

;;* lmx 202 system/sepolicy/public/property.te

(neverallow base_typeattr_242 setupwizard_mode_prop (property_service (set)))
;;* lme

;;* lmx 203 system/sepolicy/public/property.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 203 system/sepolicy/public/property.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 203 system/sepolicy/public/property.te

(allow vendor_init pm_archiving_enabled_prop (property_service (set)))
;;* lme

;;* lmx 203 system/sepolicy/public/property.te

(allow vendor_init pm_archiving_enabled_prop (file (read getattr map open)))
;;* lme

;;* lmx 203 system/sepolicy/public/property.te

(neverallow base_typeattr_242 pm_archiving_enabled_prop (property_service (set)))
;;* lme

;;* lmx 204 system/sepolicy/public/property.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 204 system/sepolicy/public/property.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 204 system/sepolicy/public/property.te

(allow vendor_init trusty_security_vm_sys_vendor_prop (property_service (set)))
;;* lme

;;* lmx 204 system/sepolicy/public/property.te

(allow vendor_init trusty_security_vm_sys_vendor_prop (file (read getattr map open)))
;;* lme

;;* lmx 204 system/sepolicy/public/property.te

(neverallow base_typeattr_242 trusty_security_vm_sys_vendor_prop (property_service (set)))
;;* lme

;;* lmx 205 system/sepolicy/public/property.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 205 system/sepolicy/public/property.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 205 system/sepolicy/public/property.te

(allow vendor_init wallet_prop (property_service (set)))
;;* lme

;;* lmx 205 system/sepolicy/public/property.te

(allow vendor_init wallet_prop (file (read getattr map open)))
;;* lme

;;* lmx 205 system/sepolicy/public/property.te

(neverallow base_typeattr_242 wallet_prop (property_service (set)))
;;* lme

;;* lmx 206 system/sepolicy/public/property.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 206 system/sepolicy/public/property.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 206 system/sepolicy/public/property.te

(allow vendor_init usb_userspace_aoa_enabled_prop (property_service (set)))
;;* lme

;;* lmx 206 system/sepolicy/public/property.te

(allow vendor_init usb_userspace_aoa_enabled_prop (file (read getattr map open)))
;;* lme

;;* lmx 206 system/sepolicy/public/property.te

(neverallow base_typeattr_242 usb_userspace_aoa_enabled_prop (property_service (set)))
;;* lme

;;* lmx 207 system/sepolicy/public/property.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 207 system/sepolicy/public/property.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 207 system/sepolicy/public/property.te

(allow vendor_init mmd_config_prop (property_service (set)))
;;* lme

;;* lmx 207 system/sepolicy/public/property.te

(allow vendor_init mmd_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 207 system/sepolicy/public/property.te

(neverallow base_typeattr_242 mmd_config_prop (property_service (set)))
;;* lme

;;* lmx 272 system/sepolicy/public/property.te

(neverallow base_typeattr_241 default_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 275 system/sepolicy/public/property.te

(neverallow base_typeattr_243 rebootescrow_hal_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 278 system/sepolicy/public/property.te

(neverallow base_typeattr_243 virtual_face_hal_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 282 system/sepolicy/public/property.te

(neverallow base_typeattr_243 virtual_fingerprint_hal_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 353 system/sepolicy/public/property.te

(neverallow base_typeattr_243 vendor_default_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 1 system/sepolicy/private/attributes

(neverallow base_typeattr_244 domain (process (fork)))
;;* lme

;;* lmx 1 system/sepolicy/private/attributes

(neverallow base_typeattr_245 domain (process (fork)))
;;* lme

;;* lmx 1 system/sepolicy/private/attributes

(neverallow base_typeattr_246 domain (process (fork)))
;;* lme

;;* lmx 5 system/sepolicy/private/aconfigd.te

(allow init aconfigd_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 5 system/sepolicy/private/aconfigd.te

(allow init aconfigd (process (transition)))
;;* lme

;;* lmx 5 system/sepolicy/private/aconfigd.te

(allow aconfigd aconfigd_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init aconfigd (process (noatsecure)))
;;* lmx 5 system/sepolicy/private/aconfigd.te

(allow init aconfigd (process (siginh rlimitinh)))
;;* lme

(typetransition init aconfigd_exec process aconfigd)
;;* lmx 7 system/sepolicy/private/aconfigd.te

(allow aconfigd metadata_file (dir (search)))
;;* lme

;;* lmx 12 system/sepolicy/private/aconfigd.te

(allow aconfigd aconfig_storage_metadata_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
(allow aconfigd aconfig_storage_flags_metadata_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 17 system/sepolicy/private/aconfigd.te

(allow aconfigd aconfig_storage_metadata_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow aconfigd aconfig_storage_flags_metadata_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 21 system/sepolicy/private/aconfigd.te

(allow aconfigd kmsg_device (chr_file (write)))
;;* lme

;;* lmx 24 system/sepolicy/private/aconfigd.te

(allow aconfigd vendor_aconfig_storage_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 25 system/sepolicy/private/aconfigd.te

(allow aconfigd vendor_aconfig_storage_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 28 system/sepolicy/private/aconfigd.te

(allow aconfigd apex_mnt_dir (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 29 system/sepolicy/private/aconfigd.te

(allow aconfigd apex_mnt_dir (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

(dontaudit aconfigd apex_info_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lmx 33 system/sepolicy/private/aconfigd.te

(allow aconfigd property_socket (sock_file (write)))
;;* lme

;;* lmx 33 system/sepolicy/private/aconfigd.te

(allow aconfigd init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 33 system/sepolicy/private/aconfigd.te

(allow aconfigd kcmdline_prop (property_service (set)))
;;* lme

;;* lmx 33 system/sepolicy/private/aconfigd.te

(allow aconfigd kcmdline_prop (file (read getattr map open)))
;;* lme

(dontaudit aconfigd unlabeled (dir (search)))
;;* lmx 47 system/sepolicy/private/aconfigd.te

(neverallow base_typeattr_247 aconfigd (process (transition)))
;;* lme

;;* lmx 48 system/sepolicy/private/aconfigd.te

(neverallow base_typeattr_248 aconfigd (process (dyntransition)))
;;* lme

;;* lmx 58 system/sepolicy/private/aconfigd.te

(neverallow base_typeattr_249 aconfig_storage_metadata_file (dir (write create setattr relabelfrom link rename add_name remove_name reparent rmdir)))
;;* lme

;;* lmx 64 system/sepolicy/private/aconfigd.te

(neverallow base_typeattr_249 aconfig_storage_metadata_file (file (write create setattr relabelfrom append unlink link rename)))
;;* lme

;;* lmx 74 system/sepolicy/private/aconfigd.te

(neverallow base_typeattr_249 aconfig_storage_flags_metadata_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 80 system/sepolicy/private/aconfigd.te

(neverallow base_typeattr_249 aconfig_storage_flags_metadata_file (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 5 system/sepolicy/private/aconfigd_mainline.te

(allow init aconfigd_mainline_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 5 system/sepolicy/private/aconfigd_mainline.te

(allow init aconfigd_mainline (process (transition)))
;;* lme

;;* lmx 5 system/sepolicy/private/aconfigd_mainline.te

(allow aconfigd_mainline aconfigd_mainline_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init aconfigd_mainline (process (noatsecure)))
;;* lmx 5 system/sepolicy/private/aconfigd_mainline.te

(allow init aconfigd_mainline (process (siginh rlimitinh)))
;;* lme

(typetransition init aconfigd_mainline_exec process aconfigd_mainline)
;;* lmx 9 system/sepolicy/private/aconfigd_mainline.te

(allow aconfigd_mainline metadata_file (dir (search)))
;;* lme

;;* lmx 15 system/sepolicy/private/aconfigd_mainline.te

(allow aconfigd_mainline aconfig_storage_metadata_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
(allow aconfigd_mainline aconfig_storage_flags_metadata_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 20 system/sepolicy/private/aconfigd_mainline.te

(allow aconfigd_mainline aconfig_storage_metadata_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow aconfigd_mainline aconfig_storage_flags_metadata_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 23 system/sepolicy/private/aconfigd_mainline.te

(allow aconfigd_mainline kmsg_device (chr_file (write)))
;;* lme

;;* lmx 26 system/sepolicy/private/aconfigd_mainline.te

(allow aconfigd_mainline property_socket (sock_file (write)))
;;* lme

;;* lmx 26 system/sepolicy/private/aconfigd_mainline.te

(allow aconfigd_mainline init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 26 system/sepolicy/private/aconfigd_mainline.te

(allow aconfigd_mainline kcmdline_prop (property_service (set)))
;;* lme

;;* lmx 26 system/sepolicy/private/aconfigd_mainline.te

(allow aconfigd_mainline kcmdline_prop (file (read getattr map open)))
;;* lme

;;* lmx 31 system/sepolicy/private/aconfigd_mainline.te

(allow aconfigd_mainline apex_mnt_dir (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 32 system/sepolicy/private/aconfigd_mainline.te

(allow aconfigd_mainline apex_mnt_dir (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

(dontaudit aconfigd_mainline apex_info_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lmx 40 system/sepolicy/private/aconfigd_mainline.te

(neverallow base_typeattr_247 aconfigd_mainline (process (transition)))
;;* lme

;;* lmx 41 system/sepolicy/private/aconfigd_mainline.te

(neverallow base_typeattr_248 aconfigd_mainline (process (dyntransition)))
;;* lme

;;* lmx 7 system/sepolicy/private/adbd.te

(allow init adbd_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 7 system/sepolicy/private/adbd.te

(allow init adbd (process (transition)))
;;* lme

;;* lmx 7 system/sepolicy/private/adbd.te

(allow adbd adbd_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init adbd (process (noatsecure)))
;;* lmx 7 system/sepolicy/private/adbd.te

(allow init adbd (process (siginh rlimitinh)))
;;* lme

(typetransition init adbd_exec process adbd)
;;* lmx 9 system/sepolicy/private/adbd.te

(allow adbd shell_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 9 system/sepolicy/private/adbd.te

(allow adbd shell (process (transition)))
;;* lme

;;* lmx 9 system/sepolicy/private/adbd.te

(allow shell shell_exec (file (read getattr map execute open entrypoint)))
;;* lme

;;* lmx 9 system/sepolicy/private/adbd.te

(allow shell adbd (process (sigchld)))
;;* lme

(dontaudit adbd shell (process (noatsecure)))
;;* lmx 9 system/sepolicy/private/adbd.te

(allow adbd shell (process (siginh rlimitinh)))
;;* lme

(typetransition adbd shell_exec process shell)
;;* lmx 12 system/sepolicy/private/adbd.te

(allow adbd self (vsock_socket (read write create getattr setattr lock append map bind connect listen accept getopt setopt shutdown)))
;;* lme

;;* lmx 15 system/sepolicy/private/adbd.te

(allow adbd self (process (setcurrent)))
;;* lme

;;* lmx 16 system/sepolicy/private/adbd.te

(allow adbd adbd_tradeinmode (process (dyntransition)))
;;* lme

;;* lmx 17 system/sepolicy/private/adbd.te

(allow adbd su (process (dyntransition)))
;;* lme

;;* lmx 32 system/sepolicy/private/adbd.te

(allow adbd traced_consumer_socket (sock_file (write)))
;;* lme

;;* lmx 32 system/sepolicy/private/adbd.te

(allow adbd traced (unix_stream_socket (connectto)))
;;* lme

;;* lmx 36 system/sepolicy/private/adbd.te

(allow adbd shell (process (signal noatsecure)))
;;* lme

;;* lmx 39 system/sepolicy/private/adbd.te

(allow adbd self (capability (setgid setuid)))
(allow adbd self (cap_userns (setgid setuid)))
;;* lme

;;* lmx 42 system/sepolicy/private/adbd.te

(allow adbd self (capability (setpcap)))
(allow adbd self (cap_userns (setpcap)))
;;* lme

(dontaudit adbd self (capability (sys_resource)))
(dontaudit adbd self (cap_userns (sys_resource)))
;;* lmx 50 system/sepolicy/private/adbd.te

(allow adbd functionfs (dir (search)))
;;* lme

;;* lmx 51 system/sepolicy/private/adbd.te

(allow adbd functionfs (file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 55 system/sepolicy/private/adbd.te

(allowx adbd functionfs (ioctl file (0x6703 0x6782)))
;;* lme

;;* lmx 58 system/sepolicy/private/adbd.te

(allow adbd trace_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 59 system/sepolicy/private/adbd.te

(allow adbd trace_data_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 62 system/sepolicy/private/adbd.te

(allow adbd profman_dump_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 63 system/sepolicy/private/adbd.te

(allow adbd profman_dump_data_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 66 system/sepolicy/private/adbd.te

(allow adbd tmpfs (dir (search)))
;;* lme

;;* lmx 67 system/sepolicy/private/adbd.te

(allow adbd rootfs (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 68 system/sepolicy/private/adbd.te

(allow adbd tmpfs (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 69 system/sepolicy/private/adbd.te

(allow adbd sdcard_type (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
(allow adbd fuse (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 70 system/sepolicy/private/adbd.te

(allow adbd sdcard_type (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow adbd fuse (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 73 system/sepolicy/private/adbd.te

(allow adbd anr_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 74 system/sepolicy/private/adbd.te

(allow adbd anr_data_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 77 system/sepolicy/private/adbd.te

(allow adbd vendor_framework_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 78 system/sepolicy/private/adbd.te

(allow adbd vendor_framework_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 81 system/sepolicy/private/adbd.te

(allow adbd property_socket (sock_file (write)))
;;* lme

;;* lmx 81 system/sepolicy/private/adbd.te

(allow adbd init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 81 system/sepolicy/private/adbd.te

(allow adbd shell_prop (property_service (set)))
;;* lme

;;* lmx 81 system/sepolicy/private/adbd.te

(allow adbd shell_prop (file (read getattr map open)))
;;* lme

;;* lmx 82 system/sepolicy/private/adbd.te

(allow adbd property_socket (sock_file (write)))
;;* lme

;;* lmx 82 system/sepolicy/private/adbd.te

(allow adbd init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 82 system/sepolicy/private/adbd.te

(allow adbd powerctl_prop (property_service (set)))
;;* lme

;;* lmx 82 system/sepolicy/private/adbd.te

(allow adbd powerctl_prop (file (read getattr map open)))
;;* lme

;;* lmx 83 system/sepolicy/private/adbd.te

(allow adbd ffs_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 84 system/sepolicy/private/adbd.te

(allow adbd property_socket (sock_file (write)))
;;* lme

;;* lmx 84 system/sepolicy/private/adbd.te

(allow adbd init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 84 system/sepolicy/private/adbd.te

(allow adbd ffs_control_prop (property_service (set)))
;;* lme

;;* lmx 84 system/sepolicy/private/adbd.te

(allow adbd ffs_control_prop (file (read getattr map open)))
;;* lme

;;* lmx 85 system/sepolicy/private/adbd.te

(allow adbd property_socket (sock_file (write)))
;;* lme

;;* lmx 85 system/sepolicy/private/adbd.te

(allow adbd init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 85 system/sepolicy/private/adbd.te

(allow adbd adbd_tradeinmode_prop (property_service (set)))
;;* lme

;;* lmx 85 system/sepolicy/private/adbd.te

(allow adbd adbd_tradeinmode_prop (file (read getattr map open)))
;;* lme

;;* lmx 88 system/sepolicy/private/adbd.te

(allow adbd property_socket (sock_file (write)))
;;* lme

;;* lmx 88 system/sepolicy/private/adbd.te

(allow adbd init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 88 system/sepolicy/private/adbd.te

(allow adbd ctl_mdnsd_prop (property_service (set)))
;;* lme

;;* lmx 88 system/sepolicy/private/adbd.te

(allow adbd ctl_mdnsd_prop (file (read getattr map open)))
;;* lme

;;* lmx 91 system/sepolicy/private/adbd.te

(allow adbd persistent_properties_ready_prop (file (read getattr map open)))
;;* lme

;;* lmx 91 system/sepolicy/private/adbd.te

(allow adbd sysfs_dt_firmware_android (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 91 system/sepolicy/private/adbd.te

(allow adbd sysfs_dt_firmware_android (file (ioctl read getattr lock map open watch watch_reads)))
(allow adbd sysfs_dt_firmware_android (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 97 system/sepolicy/private/adbd.te

(allow adbd system_file (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lme

;;* lmx 101 system/sepolicy/private/adbd.te

(allow adbd servicemanager (binder (call transfer)))
;;* lme

;;* lmx 101 system/sepolicy/private/adbd.te

(allow servicemanager adbd (binder (call transfer)))
;;* lme

;;* lmx 102 system/sepolicy/private/adbd.te

(allow adbd surfaceflinger (binder (call transfer)))
;;* lme

;;* lmx 102 system/sepolicy/private/adbd.te

(allow surfaceflinger adbd (binder (transfer)))
;;* lme

;;* lmx 102 system/sepolicy/private/adbd.te

(allow adbd surfaceflinger (fd (use)))
;;* lme

;;* lmx 103 system/sepolicy/private/adbd.te

(allow adbd gpuservice (binder (call transfer)))
;;* lme

;;* lmx 103 system/sepolicy/private/adbd.te

(allow gpuservice adbd (binder (transfer)))
;;* lme

;;* lmx 103 system/sepolicy/private/adbd.te

(allow adbd gpuservice (fd (use)))
;;* lme

;;* lmx 106 system/sepolicy/private/adbd.te

(allow adbd system_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 106 system/sepolicy/private/adbd.te

(allow adbd system_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow adbd system_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 109 system/sepolicy/private/adbd.te

(allow adbd hal_graphics_allocator (memfd_file (read write getattr map)))
;;* lme

;;* lmx 109 system/sepolicy/private/adbd.te

(allow hal_graphics_allocator adbd (memfd_file (read write getattr map)))
;;* lme

;;* lmx 112 system/sepolicy/private/adbd.te

(allow adbd adb_keys_file (dir (search)))
;;* lme

;;* lmx 113 system/sepolicy/private/adbd.te

(allow adbd adb_keys_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 115 system/sepolicy/private/adbd.te

(allow adbd adb_data_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
;;* lme

;;* lmx 115 system/sepolicy/private/adbd.te

(allow adbd adb_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 124 system/sepolicy/private/adbd.te

(allow adbd app_data_file (dir (search)))
;;* lme

;;* lmx 125 system/sepolicy/private/adbd.te

(allow adbd app_data_file (sock_file (write)))
;;* lme

;;* lmx 126 system/sepolicy/private/adbd.te

(allow adbd appdomain (unix_stream_socket (connectto)))
;;* lme

;;* lmx 129 system/sepolicy/private/adbd.te

(allow adbd zygote_exec (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 130 system/sepolicy/private/adbd.te

(allow adbd system_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 133 system/sepolicy/private/adbd.te

(allow adbd selinuxfs (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 134 system/sepolicy/private/adbd.te

(allow adbd selinuxfs (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 135 system/sepolicy/private/adbd.te

(allow adbd kernel (security (read_policy)))
;;* lme

;;* lmx 136 system/sepolicy/private/adbd.te

(allow adbd service_contexts_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 137 system/sepolicy/private/adbd.te

(allow adbd file_contexts_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 138 system/sepolicy/private/adbd.te

(allow adbd seapp_contexts_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 139 system/sepolicy/private/adbd.te

(allow adbd property_contexts_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 140 system/sepolicy/private/adbd.te

(allow adbd sepolicy_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 143 system/sepolicy/private/adbd.te

(allow adbd config_gz (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 146 system/sepolicy/private/adbd.te

(allow adbd proc_net_tcp_udp (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 149 system/sepolicy/private/adbd.te

(allow adbd proc_cmdline (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 151 system/sepolicy/private/adbd.te

(allow adbd gpu_service (service_manager (find)))
;;* lme

;;* lmx 152 system/sepolicy/private/adbd.te

(allow adbd surfaceflinger_service (service_manager (find)))
;;* lme

;;* lmx 153 system/sepolicy/private/adbd.te

(allow adbd bootchart_data_file (dir (search)))
;;* lme

;;* lmx 154 system/sepolicy/private/adbd.te

(allow adbd bootchart_data_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 158 system/sepolicy/private/adbd.te

(allow adbd storage_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 159 system/sepolicy/private/adbd.te

(allow adbd storage_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 160 system/sepolicy/private/adbd.te

(allow adbd mnt_user_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 161 system/sepolicy/private/adbd.te

(allow adbd mnt_user_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 166 system/sepolicy/private/adbd.te

(allow adbd media_rw_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 167 system/sepolicy/private/adbd.te

(allow adbd media_rw_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 169 system/sepolicy/private/adbd.te

(allow adbd apk_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 169 system/sepolicy/private/adbd.te

(allow adbd apk_data_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow adbd apk_data_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 171 system/sepolicy/private/adbd.te

(allow adbd rootfs (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 176 system/sepolicy/private/adbd.te

(allow adbd perfetto (process (signal)))
;;* lme

;;* lmx 179 system/sepolicy/private/adbd.te

(allow adbd perfetto_traces_data_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 180 system/sepolicy/private/adbd.te

(allow adbd perfetto_traces_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 183 system/sepolicy/private/adbd.te

(allow adbd perfetto_traces_profiling_data_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 184 system/sepolicy/private/adbd.te

(allow adbd perfetto_traces_profiling_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 187 system/sepolicy/private/adbd.te

(allow adbd perfetto_configs_data_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
;;* lme

;;* lmx 188 system/sepolicy/private/adbd.te

(allow adbd perfetto_configs_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 192 system/sepolicy/private/adbd.te

(allow adbd shell (unix_stream_socket (read write shutdown)))
;;* lme

;;* lmx 193 system/sepolicy/private/adbd.te

(allow adbd shell (fd (use)))
;;* lme

;;* lmx 196 system/sepolicy/private/adbd.te

(allow adbd shell_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 197 system/sepolicy/private/adbd.te

(allow adbd shell_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 200 system/sepolicy/private/adbd.te

(allow adbd vendor_apex_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 200 system/sepolicy/private/adbd.te

(allow adbd vendor_apex_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow adbd vendor_apex_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 203 system/sepolicy/private/adbd.te

(allow adbd apex_data_file (dir (search)))
;;* lme

;;* lmx 204 system/sepolicy/private/adbd.te

(allow adbd staging_data_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 206 system/sepolicy/private/adbd.te

(allow adbd apex_dm_device (blk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 207 system/sepolicy/private/adbd.te

(allow adbd block_device (dir (search)))
;;* lme

;;* lmx 210 system/sepolicy/private/adbd.te

(allow adbd apex_info_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 213 system/sepolicy/private/adbd.te

(allow adbd tombstone_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 214 system/sepolicy/private/adbd.te

(allow adbd tombstone_data_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 217 system/sepolicy/private/adbd.te

(allow adbd shell_test_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 218 system/sepolicy/private/adbd.te

(allow adbd shell_test_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 219 system/sepolicy/private/adbd.te

(allow adbd shell_test_data_file (lnk_file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 228 system/sepolicy/private/adbd.te

(neverallow adbd base_typeattr_250 (process (transition)))
;;* lme

;;* lmx 234 system/sepolicy/private/adbd.te

(neverallow adbd base_typeattr_251 (process (dyntransition)))
;;* lme

;;* lmx 237 system/sepolicy/private/adbd.te

(neverallow base_typeattr_247 adbd (process (transition)))
;;* lme

;;* lmx 238 system/sepolicy/private/adbd.te

(neverallow base_typeattr_248 adbd (process (dyntransition)))
;;* lme

;;* lmx 241 system/sepolicy/private/adbd.te

(allow adbd cgroup_v2 (file (read)))
;;* lme

;;* lmx 244 system/sepolicy/private/adbd.te

(allow adbd adb_timeout_prop (file (read getattr map open)))
;;* lme

;;* lmx 5 system/sepolicy/private/adbd_common.te

(allow adbd_common mdnsd_socket (sock_file (write)))
;;* lme

;;* lmx 5 system/sepolicy/private/adbd_common.te

(allow adbd_common mdnsd (unix_stream_socket (connectto)))
;;* lme

;;* lmx 8 system/sepolicy/private/adbd_common.te

(allow adbd_common device_logging_prop (file (read getattr map open)))
;;* lme

;;* lmx 11 system/sepolicy/private/adbd_common.te

(allow adbd_common devpts (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 14 system/sepolicy/private/adbd_common.te

(allow adbd_common system_adbd_prop (file (read getattr map open)))
;;* lme

;;* lmx 17 system/sepolicy/private/adbd_common.te

(allow adbd_common test_harness_prop (file (read getattr map open)))
;;* lme

;;* lmx 20 system/sepolicy/private/adbd_common.te

(allow adbd_common property_socket (sock_file (write)))
;;* lme

;;* lmx 20 system/sepolicy/private/adbd_common.te

(allow adbd_common init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 20 system/sepolicy/private/adbd_common.te

(allow adbd_common adbd_prop (property_service (set)))
;;* lme

;;* lmx 20 system/sepolicy/private/adbd_common.te

(allow adbd_common adbd_prop (file (read getattr map open)))
;;* lme

;;* lmx 21 system/sepolicy/private/adbd_common.te

(allow adbd_common property_socket (sock_file (write)))
;;* lme

;;* lmx 21 system/sepolicy/private/adbd_common.te

(allow adbd_common init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 21 system/sepolicy/private/adbd_common.te

(allow adbd_common adbd_config_prop (property_service (set)))
;;* lme

;;* lmx 21 system/sepolicy/private/adbd_common.te

(allow adbd_common adbd_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 24 system/sepolicy/private/adbd_common.te

(allow adbd_common serialno_prop (file (read getattr map open)))
;;* lme

;;* lmx 27 system/sepolicy/private/adbd_common.te

(neverallow base_typeattr_252 self (vsock_socket (connect)))
;;* lme

;;* lmx 8 system/sepolicy/private/adbd_tradeinmode.te

(allow adbd_tradeinmode tradeinmode_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 8 system/sepolicy/private/adbd_tradeinmode.te

(allow adbd_tradeinmode tradeinmode (process (transition)))
;;* lme

;;* lmx 8 system/sepolicy/private/adbd_tradeinmode.te

(allow tradeinmode tradeinmode_exec (file (read getattr map execute open entrypoint)))
;;* lme

;;* lmx 8 system/sepolicy/private/adbd_tradeinmode.te

(allow tradeinmode adbd_tradeinmode (process (sigchld)))
;;* lme

(dontaudit adbd_tradeinmode tradeinmode (process (noatsecure)))
;;* lmx 8 system/sepolicy/private/adbd_tradeinmode.te

(allow adbd_tradeinmode tradeinmode (process (siginh rlimitinh)))
;;* lme

(typetransition adbd_tradeinmode tradeinmode_exec process tradeinmode)
;;* lmx 15 system/sepolicy/private/adbd_tradeinmode.te

(allow adbd_tradeinmode adbd (unix_stream_socket (read write getattr setattr lock append map bind connect listen accept getopt setopt shutdown)))
;;* lme

;;* lmx 16 system/sepolicy/private/adbd_tradeinmode.te

(allow adbd_tradeinmode adbd (fd (use)))
;;* lme

;;* lmx 17 system/sepolicy/private/adbd_tradeinmode.te

(allow adbd_tradeinmode adbd (unix_dgram_socket (write connect)))
;;* lme

;;* lmx 18 system/sepolicy/private/adbd_tradeinmode.te

(allow adbd_tradeinmode functionfs (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 19 system/sepolicy/private/adbd_tradeinmode.te

(allow adbd_tradeinmode functionfs (file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 20 system/sepolicy/private/adbd_tradeinmode.te

(allow adbd_tradeinmode proc_uptime (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 21 system/sepolicy/private/adbd_tradeinmode.te

(allow adbd_tradeinmode rootfs (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 26 system/sepolicy/private/adbd_tradeinmode.te

(allow adbd_tradeinmode self (vsock_socket (read write create getattr setattr lock append map bind listen accept getopt setopt shutdown)))
;;* lme

;;* lmx 28 system/sepolicy/private/adbd_tradeinmode.te

(allow adbd_tradeinmode property_socket (sock_file (write)))
;;* lme

;;* lmx 28 system/sepolicy/private/adbd_tradeinmode.te

(allow adbd_tradeinmode init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 28 system/sepolicy/private/adbd_tradeinmode.te

(allow adbd_tradeinmode ffs_control_prop (property_service (set)))
;;* lme

;;* lmx 28 system/sepolicy/private/adbd_tradeinmode.te

(allow adbd_tradeinmode ffs_control_prop (file (read getattr map open)))
;;* lme

;;* lmx 31 system/sepolicy/private/adbd_tradeinmode.te

(allow adbd_tradeinmode property_socket (sock_file (write)))
;;* lme

;;* lmx 31 system/sepolicy/private/adbd_tradeinmode.te

(allow adbd_tradeinmode init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 31 system/sepolicy/private/adbd_tradeinmode.te

(allow adbd_tradeinmode shell_prop (property_service (set)))
;;* lme

;;* lmx 31 system/sepolicy/private/adbd_tradeinmode.te

(allow adbd_tradeinmode shell_prop (file (read getattr map open)))
;;* lme

(typetransition adservices tmpfs file appdomain_tmpfs)
;;* lmx 4 system/sepolicy/private/adservices.te

(allow adservices adservices_userfaultfd (anon_inode (ioctl read create)))
;;* lme

(dontaudit su adservices_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lmx 4 system/sepolicy/private/adservices.te

(neverallow base_typeattr_253 adservices_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 4 system/sepolicy/private/adservices.te

(allow adservices appdomain_tmpfs (file (read write getattr map execute)))
;;* lme

;;* lmx 4 system/sepolicy/private/adservices.te

(allow adservices appdomain (memfd_file (read write getattr map execute)))
;;* lme

;;* lmx 4 system/sepolicy/private/adservices.te

(neverallow base_typeattr_254 base_typeattr_253 (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 4 system/sepolicy/private/adservices.te

(neverallow base_typeattr_255 adservices (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 4 system/sepolicy/private/adservices.te

(neverallow base_typeattr_256 adservices (process (ptrace)))
;;* lme

;;* lmx 4 system/sepolicy/private/adservices.te

(neverallow adservices base_typeattr_257 (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 6 system/sepolicy/private/adservices.te

(allow adservices radio_service (service_manager (find)))
;;* lme

;;* lmx 9 system/sepolicy/private/adservices.te

(allow adservices property_socket (sock_file (write)))
;;* lme

;;* lmx 9 system/sepolicy/private/adservices.te

(allow adservices init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 9 system/sepolicy/private/adservices.te

(allow adservices binder_cache_adservices_server_prop (property_service (set)))
;;* lme

;;* lmx 9 system/sepolicy/private/adservices.te

(allow adservices binder_cache_adservices_server_prop (file (read getattr map open)))
;;* lme

;;* lmx 11 system/sepolicy/private/adservices.te

(allow adservices app_api_service (service_manager (find)))
;;* lme

;;* lmx 12 system/sepolicy/private/adservices.te

(allow adservices adservices_manager_service (service_manager (find)))
;;* lme

;;* lmx 16 system/sepolicy/private/adservices.te

(neverallow base_typeattr_258 binder_cache_adservices_server_prop (property_service (set)))
;;* lme

;;* lmx 6 system/sepolicy/private/aflags.te

(allow aflags aflags_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lme

;;* lmx 9 system/sepolicy/private/aflags.te

(allow aflags adbd (fd (use)))
(allow aflags dumpstate (fd (use)))
(allow aflags shell (fd (use)))
(allow aflags su (fd (use)))
(allow aflags traced_probes (fd (use)))
;;* lme

;;* lmx 10 system/sepolicy/private/aflags.te

(allow aflags adbd (fifo_file (ioctl read write getattr lock append map open watch watch_reads)))
(allow aflags dumpstate (fifo_file (ioctl read write getattr lock append map open watch watch_reads)))
(allow aflags shell (fifo_file (ioctl read write getattr lock append map open watch watch_reads)))
(allow aflags su (fifo_file (ioctl read write getattr lock append map open watch watch_reads)))
(allow aflags traced_probes (fifo_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 11 system/sepolicy/private/aflags.te

(allow aflags adbd (unix_stream_socket (read write)))
;;* lme

;;* lmx 12 system/sepolicy/private/aflags.te

(allow aflags devpts (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 15 system/sepolicy/private/aflags.te

(allow aflags aconfigd_socket (sock_file (write)))
;;* lme

;;* lmx 15 system/sepolicy/private/aflags.te

(allow aflags aconfigd (unix_stream_socket (connectto)))
;;* lme

;;* lmx 16 system/sepolicy/private/aflags.te

(allow aflags aconfigd_mainline_socket (sock_file (write)))
;;* lme

;;* lmx 16 system/sepolicy/private/aflags.te

(allow aflags aconfigd_mainline (unix_stream_socket (connectto)))
;;* lme

;;* lmx 19 system/sepolicy/private/aflags.te

(allow aflags metadata_file (dir (search)))
;;* lme

;;* lmx 20 system/sepolicy/private/aflags.te

(allow aflags aconfig_storage_metadata_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 20 system/sepolicy/private/aflags.te

(allow aflags aconfig_storage_metadata_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow aflags aconfig_storage_metadata_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 21 system/sepolicy/private/aflags.te

(allow aflags apex_mnt_dir (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 21 system/sepolicy/private/aflags.te

(allow aflags apex_mnt_dir (file (ioctl read getattr lock map open watch watch_reads)))
(allow aflags apex_mnt_dir (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 22 system/sepolicy/private/aflags.te

(allow aflags apex_mnt_dir (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 22 system/sepolicy/private/aflags.te

(allow aflags apex_info_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 22 system/sepolicy/private/aflags.te

(allow aflags vendor_apex_metadata_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 22 system/sepolicy/private/aflags.te

(allow aflags vendor_apex_metadata_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow aflags vendor_apex_metadata_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 23 system/sepolicy/private/aflags.te

(allow aflags system_aconfig_storage_file (dir (ioctl read getattr lock open watch watch_reads search)))
(allow aflags vendor_aconfig_storage_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 23 system/sepolicy/private/aflags.te

(allow aflags system_aconfig_storage_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow aflags system_aconfig_storage_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow aflags vendor_aconfig_storage_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow aflags vendor_aconfig_storage_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 26 system/sepolicy/private/aflags.te

(allow aflags shell_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
(allow aflags toolbox_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
(allow aflags device_config_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lme

;;* lmx 29 system/sepolicy/private/aflags.te

(allow aflags system_file (file (execute_no_trans)))
;;* lme

;;* lmx 32 system/sepolicy/private/aflags.te

(allow aflags servicemanager (binder (call transfer)))
;;* lme

;;* lmx 32 system/sepolicy/private/aflags.te

(allow servicemanager aflags (binder (call transfer)))
;;* lme

;;* lmx 33 system/sepolicy/private/aflags.te

(allow aflags system_server (binder (call transfer)))
;;* lme

;;* lmx 33 system/sepolicy/private/aflags.te

(allow system_server aflags (binder (transfer)))
;;* lme

;;* lmx 33 system/sepolicy/private/aflags.te

(allow aflags system_server (fd (use)))
;;* lme

;;* lmx 34 system/sepolicy/private/aflags.te

(allow system_server aflags (binder (call transfer)))
;;* lme

;;* lmx 34 system/sepolicy/private/aflags.te

(allow aflags system_server (binder (transfer)))
;;* lme

;;* lmx 34 system/sepolicy/private/aflags.te

(allow system_server aflags (fd (use)))
;;* lme

;;* lmx 38 system/sepolicy/private/aflags.te

(allow aflags device_config_updatable_service (service_manager (find)))
(allow aflags device_config_service (service_manager (find)))
;;* lme

;;* lmx 41 system/sepolicy/private/aflags.te

(allow system_server aflags (fd (use)))
;;* lme

;;* lmx 42 system/sepolicy/private/aflags.te

(allow system_server aflags (fifo_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 1 system/sepolicy/private/aidl_lazy_test_server.te

(allow init aidl_lazy_test_server_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 1 system/sepolicy/private/aidl_lazy_test_server.te

(allow init aidl_lazy_test_server (process (transition)))
;;* lme

;;* lmx 1 system/sepolicy/private/aidl_lazy_test_server.te

(allow aidl_lazy_test_server aidl_lazy_test_server_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init aidl_lazy_test_server (process (noatsecure)))
;;* lmx 1 system/sepolicy/private/aidl_lazy_test_server.te

(allow init aidl_lazy_test_server (process (siginh rlimitinh)))
;;* lme

(typetransition init aidl_lazy_test_server_exec process aidl_lazy_test_server)
;;* lmx 1 system/sepolicy/private/aidl_lazy_test_server.te

(allow aidl_lazy_test_server servicemanager (binder (call transfer)))
;;* lme

;;* lmx 1 system/sepolicy/private/aidl_lazy_test_server.te

(allow servicemanager aidl_lazy_test_server (binder (call transfer)))
;;* lme

;;* lmx 1 system/sepolicy/private/aidl_lazy_test_server.te

(allow aidl_lazy_test_server binderservicedomain (binder (call transfer)))
;;* lme

;;* lmx 1 system/sepolicy/private/aidl_lazy_test_server.te

(allow binderservicedomain aidl_lazy_test_server (binder (transfer)))
;;* lme

;;* lmx 1 system/sepolicy/private/aidl_lazy_test_server.te

(allow aidl_lazy_test_server binderservicedomain (fd (use)))
;;* lme

;;* lmx 1 system/sepolicy/private/aidl_lazy_test_server.te

(allow aidl_lazy_test_server aidl_lazy_test_service (service_manager (add find)))
;;* lme

;;* lmx 1 system/sepolicy/private/aidl_lazy_test_server.te

(neverallow base_typeattr_259 aidl_lazy_test_service (service_manager (add)))
;;* lme

;;* lmx 1 system/sepolicy/private/aidl_lazy_test_server.te

(allow aidl_lazy_test_server su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 3 system/sepolicy/private/aisealhostservice.te

(allow init aisealhostservice_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 3 system/sepolicy/private/aisealhostservice.te

(allow init aisealhostservice (process (transition)))
;;* lme

;;* lmx 3 system/sepolicy/private/aisealhostservice.te

(allow aisealhostservice aisealhostservice_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init aisealhostservice (process (noatsecure)))
;;* lmx 3 system/sepolicy/private/aisealhostservice.te

(allow init aisealhostservice (process (siginh rlimitinh)))
;;* lme

(typetransition init aisealhostservice_exec process aisealhostservice)
;;* lmx 3 system/sepolicy/private/aisealhostservice.te

(allow aisealhostservice servicemanager (binder (call transfer)))
;;* lme

;;* lmx 3 system/sepolicy/private/aisealhostservice.te

(allow servicemanager aisealhostservice (binder (call transfer)))
;;* lme

;;* lmx 3 system/sepolicy/private/aisealhostservice.te

(allow aisealhostservice aiseal_host_service (service_manager (add find)))
;;* lme

;;* lmx 3 system/sepolicy/private/aisealhostservice.te

(neverallow base_typeattr_260 aiseal_host_service (service_manager (add)))
;;* lme

;;* lmx 3 system/sepolicy/private/aisealhostservice.te

(allow aisealhostservice su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 3 system/sepolicy/private/aisealhostservice.te

(allow aisealhostservice aiseal_internal_service (service_manager (add find)))
;;* lme

;;* lmx 3 system/sepolicy/private/aisealhostservice.te

(neverallow base_typeattr_260 aiseal_internal_service (service_manager (add)))
;;* lme

;;* lmx 3 system/sepolicy/private/aisealhostservice.te

(allow aisealhostservice su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 3 system/sepolicy/private/aisealhostservice.te

(allow aisealhostservice aiseal_prop (file (read getattr map open)))
;;* lme

;;* lmx 3 system/sepolicy/private/aisealhostservice.te

(allow aisealhostservice virtualizationmanager_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 3 system/sepolicy/private/aisealhostservice.te

(allow aisealhostservice aisealhostservice_virtualizationmanager (process (transition)))
;;* lme

;;* lmx 3 system/sepolicy/private/aisealhostservice.te

(allow aisealhostservice_virtualizationmanager virtualizationmanager_exec (file (read getattr map execute open entrypoint)))
;;* lme

;;* lmx 3 system/sepolicy/private/aisealhostservice.te

(allow aisealhostservice_virtualizationmanager aisealhostservice (process (sigchld)))
;;* lme

(dontaudit aisealhostservice aisealhostservice_virtualizationmanager (process (noatsecure)))
;;* lmx 3 system/sepolicy/private/aisealhostservice.te

(allow aisealhostservice aisealhostservice_virtualizationmanager (process (siginh rlimitinh)))
;;* lme

(typetransition aisealhostservice virtualizationmanager_exec process aisealhostservice_virtualizationmanager)
;;* lmx 3 system/sepolicy/private/aisealhostservice.te

(allow aisealhostservice_virtualizationmanager crosvm_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 3 system/sepolicy/private/aisealhostservice.te

(allow aisealhostservice_virtualizationmanager aisealhostservice_virtmgr_crosvm (process (transition)))
;;* lme

;;* lmx 3 system/sepolicy/private/aisealhostservice.te

(allow aisealhostservice_virtmgr_crosvm crosvm_exec (file (read getattr map execute open entrypoint)))
;;* lme

;;* lmx 3 system/sepolicy/private/aisealhostservice.te

(allow aisealhostservice_virtmgr_crosvm aisealhostservice_virtualizationmanager (process (sigchld)))
;;* lme

(dontaudit aisealhostservice_virtualizationmanager aisealhostservice_virtmgr_crosvm (process (noatsecure)))
;;* lmx 3 system/sepolicy/private/aisealhostservice.te

(allow aisealhostservice_virtualizationmanager aisealhostservice_virtmgr_crosvm (process (siginh rlimitinh)))
;;* lme

(typetransition aisealhostservice_virtualizationmanager crosvm_exec process aisealhostservice_virtmgr_crosvm)
;;* lmx 3 system/sepolicy/private/aisealhostservice.te

(allow aisealhostservice_virtualizationmanager hal_secretkeeper (memfd_file (read write getattr map)))
;;* lme

;;* lmx 3 system/sepolicy/private/aisealhostservice.te

(allow hal_secretkeeper aisealhostservice_virtualizationmanager (memfd_file (read write getattr map)))
;;* lme

;;* lmx 3 system/sepolicy/private/aisealhostservice.te

(allow aisealhostservice_virtualizationmanager hal_vm_capabilities (memfd_file (read write getattr map)))
;;* lme

;;* lmx 3 system/sepolicy/private/aisealhostservice.te

(allow hal_vm_capabilities aisealhostservice_virtualizationmanager (memfd_file (read write getattr map)))
;;* lme

;;* lmx 3 system/sepolicy/private/aisealhostservice.te

(allow aisealhostservice_virtualizationmanager aisealhostservice (unix_stream_socket (ioctl read write getattr getopt)))
(allow aisealhostservice_virtmgr_crosvm aisealhostservice (unix_stream_socket (ioctl read write getattr getopt)))
;;* lme

;;* lmx 3 system/sepolicy/private/aisealhostservice.te

(allow aisealhostservice_virtualizationmanager aisealhostservice (fd (use)))
(allow aisealhostservice_virtmgr_crosvm aisealhostservice (fd (use)))
;;* lme

;;* lmx 3 system/sepolicy/private/aisealhostservice.te

(allow aisealhostservice aisealhostservice_virtualizationmanager (fd (use)))
;;* lme

;;* lmx 3 system/sepolicy/private/aisealhostservice.te

(allow aisealhostservice_virtualizationmanager aisealhostservice (fifo_file (ioctl read write getattr)))
(allow aisealhostservice_virtmgr_crosvm aisealhostservice (fifo_file (ioctl read write getattr)))
;;* lme

;;* lmx 3 system/sepolicy/private/aisealhostservice.te

(allow aisealhostservice aisealhostservice_virtualizationmanager (vsock_socket (read write getattr getopt)))
;;* lme

;;* lmx 3 system/sepolicy/private/aisealhostservice.te

(allow aisealhostservice hypervisor_prop (file (read getattr map open)))
;;* lme

;;* lmx 3 system/sepolicy/private/aisealhostservice.te

(allow aisealhostservice virtualizationservice_data_file (file (read getattr)))
;;* lme

;;* lmx 3 system/sepolicy/private/aisealhostservice.te

(allow aisealhostservice_virtualizationmanager aisealhostservice (dir (search)))
;;* lme

;;* lmx 3 system/sepolicy/private/aisealhostservice.te

(allow aisealhostservice_virtualizationmanager aisealhostservice (file (read)))
;;* lme

;;* lmx 3 system/sepolicy/private/aisealhostservice.te

(allow aisealhostservice_virtualizationmanager aisealhostservice (lnk_file (read)))
;;* lme

;;* lmx 3 system/sepolicy/private/aisealhostservice.te

(allow aisealhostservice aisealhostservice_virtmgr_crosvm (process (sigkill)))
;;* lme

;;* lmx 3 system/sepolicy/private/aisealhostservice.te

(allow aisealhostservice_virtmgr_crosvm hal_graphics_allocator (memfd_file (read write getattr map)))
;;* lme

;;* lmx 3 system/sepolicy/private/aisealhostservice.te

(allow hal_graphics_allocator aisealhostservice_virtmgr_crosvm (memfd_file (read write getattr map)))
;;* lme

;;* lmx 3 system/sepolicy/private/aisealhostservice.te

(allow aisealhostservice system_server (binder (call transfer)))
;;* lme

;;* lmx 3 system/sepolicy/private/aisealhostservice.te

(allow system_server aisealhostservice (binder (transfer)))
;;* lme

;;* lmx 3 system/sepolicy/private/aisealhostservice.te

(allow aisealhostservice system_server (fd (use)))
;;* lme

;;* lmx 3 system/sepolicy/private/aisealhostservice.te

(allow aisealhostservice package_native_service (service_manager (find)))
(allow aisealhostservice permission_service (service_manager (find)))
;;* lme

;;* lmx 3 system/sepolicy/private/aisealhostservice.te

(allow aisealhostservice apk_data_file (dir (search)))
;;* lme

;;* lmx 3 system/sepolicy/private/aisealhostservice.te

(allow aisealhostservice apk_data_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 3 system/sepolicy/private/aisealhostservice.te

(allow aisealhostservice aiseal_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 3 system/sepolicy/private/aisealhostservice.te

(allow aisealhostservice aiseal_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 3 system/sepolicy/private/aisealhostservice.te

(allow aisealhostservice self (vsock_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
;;* lme

;;* lmx 3 system/sepolicy/private/aisealhostservice.te

(neverallow base_typeattr_260 aisealhostservice (vsock_socket (create bind connect listen accept)))
;;* lme

;;* lmx 3 system/sepolicy/private/aisealhostservice.te

(allow aisealhostservice self (process (setsockcreate)))
;;* lme

;;* lmx 3 system/sepolicy/private/aisealhostservice.te

(allow system_server aiseal_data_file (dir (ioctl read write getattr lock relabelto open watch watch_reads add_name remove_name search)))
;;* lme

;;* lmx 3 system/sepolicy/private/aisealhostservice.te

(allow system_server aiseal_data_file (file (getattr unlink)))
;;* lme

;;* lmx 3 system/sepolicy/private/aisealhostservice.te

(neverallow base_typeattr_261 aiseal_internal_service (service_manager (find)))
;;* lme

;;* lmx 7 system/sepolicy/private/aoad.te

(allow init aoad_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 7 system/sepolicy/private/aoad.te

(allow init aoad (process (transition)))
;;* lme

;;* lmx 7 system/sepolicy/private/aoad.te

(allow aoad aoad_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init aoad (process (noatsecure)))
;;* lmx 7 system/sepolicy/private/aoad.te

(allow init aoad (process (siginh rlimitinh)))
;;* lme

(typetransition init aoad_exec process aoad)
;;* lmx 9 system/sepolicy/private/aoad.te

(allow aoad system_server (binder (call transfer)))
;;* lme

;;* lmx 9 system/sepolicy/private/aoad.te

(allow system_server aoad (binder (transfer)))
;;* lme

;;* lmx 9 system/sepolicy/private/aoad.te

(allow aoad system_server (fd (use)))
;;* lme

;;* lmx 12 system/sepolicy/private/aoad.te

(allow aoad servicemanager (binder (call transfer)))
;;* lme

;;* lmx 12 system/sepolicy/private/aoad.te

(allow servicemanager aoad (binder (call transfer)))
;;* lme

;;* lmx 13 system/sepolicy/private/aoad.te

(allow aoad aoad_service (service_manager (add find)))
;;* lme

;;* lmx 13 system/sepolicy/private/aoad.te

(neverallow base_typeattr_262 aoad_service (service_manager (add)))
;;* lme

;;* lmx 13 system/sepolicy/private/aoad.te

(allow aoad su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 16 system/sepolicy/private/aoad.te

(allow aoad functionfs (dir (search)))
;;* lme

;;* lmx 17 system/sepolicy/private/aoad.te

(allow aoad functionfs (file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 20 system/sepolicy/private/aoad.te

(allow aoad sysfs_android_usb (dir (search)))
;;* lme

;;* lmx 21 system/sepolicy/private/aoad.te

(allow aoad sysfs_android_usb (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 24 system/sepolicy/private/aoad.te

(allow aoad uhid_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 27 system/sepolicy/private/aoad.te

(allow aoad selinuxfs (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 28 system/sepolicy/private/aoad.te

(allow aoad file_contexts_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 31 system/sepolicy/private/aoad.te

(allow aoad functionfs (file (ioctl read write getattr lock relabelfrom append map open watch watch_reads)))
;;* lme

;;* lmx 34 system/sepolicy/private/aoad.te

(allow aoad usbaccessory_device (file (ioctl read write getattr lock relabelto append map open watch watch_reads)))
;;* lme

;;* lmx 36 system/sepolicy/private/aoad.te

(allowx aoad usbaccessory_device (ioctl file (0x6782)))
;;* lme

;;* lmx 37 system/sepolicy/private/aoad.te

(allow usbaccessory_device functionfs (filesystem (associate)))
;;* lme

;;* lmx 9 system/sepolicy/private/apex_test_prepostinstall.te

(allow apex_test_prepostinstall apexd (fd (use)))
;;* lme

(typetransition apex_test_prepostinstall devpts chr_file apex_test_prepostinstall_devpts)
;;* lmx 9 system/sepolicy/private/apex_test_prepostinstall.te

(allow apex_test_prepostinstall apex_test_prepostinstall_devpts (chr_file (ioctl read write getattr open)))
;;* lme

;;* lmx 9 system/sepolicy/private/apex_test_prepostinstall.te

(allowx apex_test_prepostinstall apex_test_prepostinstall_devpts (ioctl chr_file ((range 0x5401 0x5404) 0x540b (range 0x540e 0x5411) (range 0x5413 0x5414) (range 0x5450 0x5451))))
;;* lme

;;* lmx 9 system/sepolicy/private/apex_test_prepostinstall.te

(neverallowx base_typeattr_248 apex_test_prepostinstall_devpts (ioctl chr_file (0x5412)))
;;* lme

;;* lmx 9 system/sepolicy/private/apex_test_prepostinstall.te

(allow apex_test_prepostinstall shell_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lme

;;* lmx 9 system/sepolicy/private/apex_test_prepostinstall.te

(allow apex_test_prepostinstall system_file (file (execute_no_trans)))
;;* lme

;;* lmx 9 system/sepolicy/private/apex_test_prepostinstall.te

(allow apex_test_prepostinstall toolbox_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lme

;;* lmx 3 system/sepolicy/private/apexd.te

(allow init apexd_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 3 system/sepolicy/private/apexd.te

(allow init apexd (process (transition)))
;;* lme

;;* lmx 3 system/sepolicy/private/apexd.te

(allow apexd apexd_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init apexd (process (noatsecure)))
;;* lmx 3 system/sepolicy/private/apexd.te

(allow init apexd (process (siginh rlimitinh)))
;;* lme

(typetransition init apexd_exec process apexd)
;;* lmx 5 system/sepolicy/private/apexd.te

(allow apexd servicemanager (binder (call transfer)))
;;* lme

;;* lmx 5 system/sepolicy/private/apexd.te

(allow servicemanager apexd (binder (call transfer)))
;;* lme

;;* lmx 6 system/sepolicy/private/apexd.te

(allow apexd apex_service (service_manager (add find)))
;;* lme

;;* lmx 6 system/sepolicy/private/apexd.te

(neverallow base_typeattr_263 apex_service (service_manager (add)))
;;* lme

;;* lmx 6 system/sepolicy/private/apexd.te

(allow apexd su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 9 system/sepolicy/private/apexd.te

(allow apexd apex_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 10 system/sepolicy/private/apexd.te

(allow apexd apex_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 12 system/sepolicy/private/apexd.te

(allow apexd apex_data_file (file (relabelfrom)))
;;* lme

;;* lmx 15 system/sepolicy/private/apexd.te

(allow apexd metadata_file (dir (search)))
;;* lme

;;* lmx 16 system/sepolicy/private/apexd.te

(allow apexd apex_metadata_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 17 system/sepolicy/private/apexd.te

(allow apexd apex_metadata_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 20 system/sepolicy/private/apexd.te

(allow apexd apex_ota_reserved_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 21 system/sepolicy/private/apexd.te

(allow apexd apex_ota_reserved_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 24 system/sepolicy/private/apexd.te

(allow apexd apex_data_file_type (dir (ioctl read write create getattr setattr lock relabelto rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 25 system/sepolicy/private/apexd.te

(allow apexd apex_data_file_type (file (ioctl read write create getattr setattr lock relabelto append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 26 system/sepolicy/private/apexd.te

(allow apexd apex_module_data_file (dir (ioctl read write create getattr setattr lock relabelfrom rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 27 system/sepolicy/private/apexd.te

(allow apexd apex_module_data_file (file (ioctl read write create getattr setattr lock relabelfrom append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 28 system/sepolicy/private/apexd.te

(allow apexd apex_rollback_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 29 system/sepolicy/private/apexd.te

(allow apexd apex_rollback_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 36 system/sepolicy/private/apexd.te

(allow apexd system_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
(allow apexd system_userdir_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 39 system/sepolicy/private/apexd.te

(allow apexd loop_control_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 41 system/sepolicy/private/apexd.te

(allow apexd loop_device (blk_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 52 system/sepolicy/private/apexd.te

(allowx apexd loop_device (ioctl blk_file ((range 0x1261 0x1262))))
;;* lme

;;* lmx 52 system/sepolicy/private/apexd.te

(allowx apexd loop_device (ioctl blk_file ((range 0x4c00 0x4c01) (range 0x4c04 0x4c05) (range 0x4c08 0x4c0a))))
;;* lme

;;* lmx 54 system/sepolicy/private/apexd.te

(allow apexd dev_type (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 55 system/sepolicy/private/apexd.te

(allow apexd dev_type (blk_file (getattr)))
;;* lme

;;* lmx 58 system/sepolicy/private/apexd.te

(allow apexd vd_device (blk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 62 system/sepolicy/private/apexd.te

(allow apexd dm_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 63 system/sepolicy/private/apexd.te

(allow apexd dm_device (blk_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 64 system/sepolicy/private/apexd.te

(allow apexd apex_dm_device (blk_file (ioctl read write getattr setattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 65 system/sepolicy/private/apexd.te

(allowx apexd dm_device (ioctl blk_file (0x1262)))
;;* lme

;;* lmx 66 system/sepolicy/private/apexd.te

(allowx apexd apex_dm_device (ioctl blk_file (0x1262)))
;;* lme

;;* lmx 70 system/sepolicy/private/apexd.te

(allow apexd self (capability (chown dac_override dac_read_search fowner sys_admin)))
(allow apexd self (cap_userns (chown dac_override dac_read_search fowner sys_admin)))
;;* lme

(dontaudit apexd self (capability (fsetid)))
(dontaudit apexd self (cap_userns (fsetid)))
;;* lmx 81 system/sepolicy/private/apexd.te

(allow apexd apex_mnt_dir (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 83 system/sepolicy/private/apexd.te

(allow apexd apex_mnt_dir (filesystem (mount unmount)))
;;* lme

;;* lmx 84 system/sepolicy/private/apexd.te

(allow apexd apex_mnt_dir (dir (mounton)))
;;* lme

;;* lmx 86 system/sepolicy/private/apexd.te

(allow apexd apex_mnt_dir (lnk_file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 88 system/sepolicy/private/apexd.te

(allow apexd apex_mnt_dir (file (ioctl read write create getattr setattr lock relabelfrom append map unlink rename mounton open watch watch_reads)))
;;* lme

;;* lmx 89 system/sepolicy/private/apexd.te

(allow apexd apex_info_file (file (relabelto)))
;;* lme

;;* lmx 91 system/sepolicy/private/apexd.te

(allow apexd apex_info_file (file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 96 system/sepolicy/private/apexd.te

(allow apexd staging_data_file (file (unlink)))
;;* lme

;;* lmx 99 system/sepolicy/private/apexd.te

(allow apexd staging_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 100 system/sepolicy/private/apexd.te

(allow apexd staging_data_file (file (ioctl read getattr lock map link open watch watch_reads)))
;;* lme

;;* lmx 102 system/sepolicy/private/apexd.te

(allow apexd staging_data_file (file (relabelto)))
;;* lme

;;* lmx 104 system/sepolicy/private/apexd.te

(allow apexd staging_data_file (file (rename)))
;;* lme

;;* lmx 107 system/sepolicy/private/apexd.te

(allow apexd vendor_apex_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 107 system/sepolicy/private/apexd.te

(allow apexd vendor_apex_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow apexd vendor_apex_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 108 system/sepolicy/private/apexd.te

(allow apexd vendor_apex_metadata_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 108 system/sepolicy/private/apexd.te

(allow apexd vendor_apex_metadata_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow apexd vendor_apex_metadata_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 111 system/sepolicy/private/apexd.te

(allow apexd labeledfs (filesystem (mount unmount)))
;;* lme

;;* lmx 114 system/sepolicy/private/apexd.te

(allow apexd sysfs_type (dir (search)))
;;* lme

;;* lmx 116 system/sepolicy/private/apexd.te

(allow apexd sysfs_type (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 117 system/sepolicy/private/apexd.te

(allow apexd sysfs_type (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 120 system/sepolicy/private/apexd.te

(allow apexd sysfs_dm (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 121 system/sepolicy/private/apexd.te

(allow apexd sysfs_dm (file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 123 system/sepolicy/private/apexd.te

(allow apexd sysfs_loop (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 124 system/sepolicy/private/apexd.te

(allow apexd sysfs_loop (file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 127 system/sepolicy/private/apexd.te

(allow apexd kmsg_device (chr_file (write lock append map open)))
;;* lme

;;* lmx 131 system/sepolicy/private/apexd.te

(allow apexd property_socket (sock_file (write)))
;;* lme

;;* lmx 131 system/sepolicy/private/apexd.te

(allow apexd init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 131 system/sepolicy/private/apexd.te

(allow apexd powerctl_prop (property_service (set)))
;;* lme

;;* lmx 131 system/sepolicy/private/apexd.te

(allow apexd powerctl_prop (file (read getattr map open)))
;;* lme

;;* lmx 134 system/sepolicy/private/apexd.te

(allow apexd property_socket (sock_file (write)))
;;* lme

;;* lmx 134 system/sepolicy/private/apexd.te

(allow apexd init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 134 system/sepolicy/private/apexd.te

(allow apexd ctl_apexd_prop (property_service (set)))
;;* lme

;;* lmx 134 system/sepolicy/private/apexd.te

(allow apexd ctl_apexd_prop (file (read getattr map open)))
;;* lme

;;* lmx 137 system/sepolicy/private/apexd.te

(allow apexd property_socket (sock_file (write)))
;;* lme

;;* lmx 137 system/sepolicy/private/apexd.te

(allow apexd init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 137 system/sepolicy/private/apexd.te

(allow apexd ctl_apex_load_prop (property_service (set)))
;;* lme

;;* lmx 137 system/sepolicy/private/apexd.te

(allow apexd ctl_apex_load_prop (file (read getattr map open)))
;;* lme

;;* lmx 140 system/sepolicy/private/apexd.te

(allow apexd vold_service (service_manager (find)))
;;* lme

;;* lmx 141 system/sepolicy/private/apexd.te

(allow apexd vold (binder (call transfer)))
;;* lme

;;* lmx 141 system/sepolicy/private/apexd.te

(allow vold apexd (binder (transfer)))
;;* lme

;;* lmx 141 system/sepolicy/private/apexd.te

(allow apexd vold (fd (use)))
;;* lme

;;* lmx 144 system/sepolicy/private/apexd.te

(allow apexd vold_metadata_file (dir (search)))
;;* lme

;;* lmx 145 system/sepolicy/private/apexd.te

(allow apexd vold_metadata_file (file (read write getattr open)))
;;* lme

;;* lmx 148 system/sepolicy/private/apexd.te

(allow apexd system_bootstrap_lib_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 148 system/sepolicy/private/apexd.te

(allow apexd system_bootstrap_lib_file (file (read getattr map execute open)))
;;* lme

;;* lmx 151 system/sepolicy/private/apexd.te

(allow apexd devpts (chr_file (read write)))
;;* lme

(typetransition apexd devpts chr_file apexd_devpts)
;;* lmx 155 system/sepolicy/private/apexd.te

(allow apexd apexd_devpts (chr_file (ioctl read write getattr open)))
;;* lme

;;* lmx 155 system/sepolicy/private/apexd.te

(allowx apexd apexd_devpts (ioctl chr_file ((range 0x5401 0x5404) 0x540b (range 0x540e 0x5411) (range 0x5413 0x5414) (range 0x5450 0x5451))))
;;* lme

;;* lmx 155 system/sepolicy/private/apexd.te

(neverallowx base_typeattr_248 apexd_devpts (ioctl chr_file (0x5412)))
;;* lme

;;* lmx 158 system/sepolicy/private/apexd.te

(allow apexd file_contexts_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 161 system/sepolicy/private/apexd.te

(allow apexd toolbox_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lme

;;* lmx 167 system/sepolicy/private/apexd.te

(allowx apexd staging_data_file (ioctl file (0x6601)))
;;* lme

;;* lmx 167 system/sepolicy/private/apexd.te

(allowx apexd staging_data_file (ioctl file (0xf512)))
;;* lme

;;* lmx 170 system/sepolicy/private/apexd.te

(allowx apexd apex_data_file (ioctl file (0x660b)))
;;* lme

;;* lmx 173 system/sepolicy/private/apexd.te

(allowx apexd userdata_block_device (ioctl blk_file (0x1272 0x1278 0x127a)))
;;* lme

;;* lmx 173 system/sepolicy/private/apexd.te

(allowx apexd userdata_block_device (ioctl blk_file (0x660b)))
;;* lme

;;* lmx 176 system/sepolicy/private/apexd.te

(allow apexd userdata_block_device (blk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 180 system/sepolicy/private/apexd.te

(allow apexd cold_boot_done_prop (file (read getattr map open)))
;;* lme

;;* lmx 183 system/sepolicy/private/apexd.te

(allow apexd apexd_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 187 system/sepolicy/private/apexd.te

(allow apexd apexd_select_prop (file (read getattr map open)))
;;* lme

;;* lmx 190 system/sepolicy/private/apexd.te

(allow apexd apexd_payload_metadata_prop (file (read getattr map open)))
;;* lme

;;* lmx 192 system/sepolicy/private/apexd.te

(allow apexd property_socket (sock_file (write)))
;;* lme

;;* lmx 192 system/sepolicy/private/apexd.te

(allow apexd init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 192 system/sepolicy/private/apexd.te

(allow apexd apexd_prop (property_service (set)))
;;* lme

;;* lmx 192 system/sepolicy/private/apexd.te

(allow apexd apexd_prop (file (read getattr map open)))
;;* lme

;;* lmx 195 system/sepolicy/private/apexd.te

(allow apexd property_socket (sock_file (write)))
;;* lme

;;* lmx 195 system/sepolicy/private/apexd.te

(allow apexd init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 195 system/sepolicy/private/apexd.te

(allow apexd apexd_private_prop (property_service (set)))
;;* lme

;;* lmx 195 system/sepolicy/private/apexd.te

(allow apexd apexd_private_prop (file (read getattr map open)))
;;* lme

;;* lmx 198 system/sepolicy/private/apexd.te

(allow apexd property_socket (sock_file (write)))
;;* lme

;;* lmx 198 system/sepolicy/private/apexd.te

(allow apexd init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 198 system/sepolicy/private/apexd.te

(allow apexd gsid_prop (property_service (set)))
;;* lme

;;* lmx 198 system/sepolicy/private/apexd.te

(allow apexd gsid_prop (file (read getattr map open)))
;;* lme

;;* lmx 201 system/sepolicy/private/apexd.te

(allow apexd proc_filesystems (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 204 system/sepolicy/private/apexd.te

(allow apexd dexopt_chroot_setup (fd (use)))
;;* lme

;;* lmx 207 system/sepolicy/private/apexd.te

(allow apexd derive_classpath_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 207 system/sepolicy/private/apexd.te

(allow apexd apexd_derive_classpath (process (transition)))
;;* lme

;;* lmx 207 system/sepolicy/private/apexd.te

(allow apexd_derive_classpath derive_classpath_exec (file (read getattr map execute open entrypoint)))
;;* lme

;;* lmx 207 system/sepolicy/private/apexd.te

(allow apexd_derive_classpath apexd (process (sigchld)))
;;* lme

(dontaudit apexd apexd_derive_classpath (process (noatsecure)))
;;* lmx 207 system/sepolicy/private/apexd.te

(allow apexd apexd_derive_classpath (process (siginh rlimitinh)))
;;* lme

(typetransition apexd derive_classpath_exec process apexd_derive_classpath)
;;* lmx 210 system/sepolicy/private/apexd.te

(allow apexd property_socket (sock_file (write)))
;;* lme

;;* lmx 210 system/sepolicy/private/apexd.te

(allow apexd init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 210 system/sepolicy/private/apexd.te

(allow apexd apex_ready_prop (property_service (set)))
;;* lme

;;* lmx 210 system/sepolicy/private/apexd.te

(allow apexd apex_ready_prop (file (read getattr map open)))
;;* lme

;;* lmx 213 system/sepolicy/private/apexd.te

(allow apexd statsdw_socket (sock_file (write)))
;;* lme

;;* lmx 213 system/sepolicy/private/apexd.te

(allow apexd statsd (unix_dgram_socket (sendto)))
;;* lme

;;* lmx 215 system/sepolicy/private/apexd.te

(allow apexd statsbootstrap_service (service_manager (find)))
;;* lme

;;* lmx 216 system/sepolicy/private/apexd.te

(allow apexd system_server (binder (call transfer)))
;;* lme

;;* lmx 216 system/sepolicy/private/apexd.te

(allow system_server apexd (binder (transfer)))
;;* lme

;;* lmx 216 system/sepolicy/private/apexd.te

(allow apexd system_server (fd (use)))
;;* lme

;;* lmx 222 system/sepolicy/private/apexd.te

(allow apexd self (capability (mknod)))
(allow apexd self (cap_userns (mknod)))
;;* lme

;;* lmx 223 system/sepolicy/private/apexd.te

(allow apexd loop_device (blk_file (create)))
(allow apexd apex_dm_device (blk_file (create)))
;;* lme

;;* lmx 224 system/sepolicy/private/apexd.te

(allow apexd block_device (dir (write add_name)))
;;* lme

;;* lmx 225 system/sepolicy/private/apexd.te

(allow apexd self (process (setfscreate)))
;;* lme

;;* lmx 231 system/sepolicy/private/apexd.te

(neverallow base_typeattr_264 apex_data_file (dir (write create setattr relabelfrom link rename add_name remove_name reparent rmdir)))
;;* lme

;;* lmx 232 system/sepolicy/private/apexd.te

(neverallow base_typeattr_264 apex_metadata_file (dir (write create setattr relabelfrom link rename add_name remove_name reparent rmdir)))
;;* lme

;;* lmx 233 system/sepolicy/private/apexd.te

(neverallow base_typeattr_265 apex_data_file (file (write create setattr relabelfrom append unlink link rename)))
;;* lme

;;* lmx 234 system/sepolicy/private/apexd.te

(neverallow base_typeattr_265 apex_metadata_file (file (write create setattr relabelfrom append unlink link rename)))
;;* lme

;;* lmx 235 system/sepolicy/private/apexd.te

(neverallow base_typeattr_263 apex_mnt_dir (lnk_file (write create setattr relabelfrom append unlink link rename)))
;;* lme

;;* lmx 237 system/sepolicy/private/apexd.te

(neverallow base_typeattr_266 apex_module_data_file (dir (write create setattr relabelfrom link rename add_name remove_name reparent rmdir)))
;;* lme

;;* lmx 238 system/sepolicy/private/apexd.te

(neverallow base_typeattr_266 apex_module_data_file (file (write create setattr relabelfrom append unlink link rename)))
;;* lme

;;* lmx 240 system/sepolicy/private/apexd.te

(neverallow base_typeattr_266 apex_rollback_data_file (dir (write create setattr relabelfrom link rename add_name remove_name reparent rmdir)))
;;* lme

;;* lmx 241 system/sepolicy/private/apexd.te

(neverallow base_typeattr_266 apex_rollback_data_file (file (write create setattr relabelfrom append unlink link rename)))
;;* lme

;;* lmx 244 system/sepolicy/private/apexd.te

(neverallow base_typeattr_264 apexd_prop (property_service (set)))
;;* lme

;;* lmx 247 system/sepolicy/private/apexd.te

(neverallow base_typeattr_263 apex_info_file (file (write create setattr relabelfrom append unlink link rename)))
;;* lme

;;* lmx 252 system/sepolicy/private/apexd.te

(neverallow base_typeattr_264 apex_mnt_dir (filesystem (mount unmount)))
;;* lme

;;* lmx 253 system/sepolicy/private/apexd.te

(neverallow base_typeattr_267 apex_mnt_dir (dir (mounton)))
;;* lme

;;* lmx 258 system/sepolicy/private/apexd.te

(neverallow base_typeattr_268 apex_service (service_manager (find)))
;;* lme

;;* lmx 260 system/sepolicy/private/apexd.te

(neverallow base_typeattr_269 apexd (binder (call)))
;;* lme

;;* lmx 262 system/sepolicy/private/apexd.te

(neverallow base_typeattr_270 apexd (process (ptrace)))
;;* lme

;;* lmx 264 system/sepolicy/private/apexd.te

(neverallow base_typeattr_263 apex_dm_device (blk_file (write)))
;;* lme

;;* lmx 265 system/sepolicy/private/apexd.te

(neverallow base_typeattr_271 apex_dm_device (blk_file (write create setattr relabelfrom append unlink link rename)))
;;* lme

;;* lmx 277 system/sepolicy/private/apexd.te

(neverallow base_typeattr_272 apex_dm_device (blk_file (read)))
;;* lme

;;* lmx 5 system/sepolicy/private/apexd_derive_classpath.te

(allow apexd_derive_classpath apexd (fd (use)))
;;* lme

;;* lmx 6 system/sepolicy/private/apexd_derive_classpath.te

(allow apexd_derive_classpath apex_mnt_dir (file (write open)))
;;* lme

;;* lmx 8 system/sepolicy/private/apexd_derive_classpath.te

(allow apexd_derive_classpath apexd_devpts (chr_file (read write)))
;;* lme

;;* lmx 5 system/sepolicy/private/app.te

(allow base_typeattr_273 proc_net_type (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 5 system/sepolicy/private/app.te

(allow base_typeattr_273 proc_net_type (file (ioctl read getattr lock map open watch watch_reads)))
(allow base_typeattr_273 proc_net_type (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

(auditallow base_typeattr_274 proc_net_type (file (read getattr open)))
(auditallow base_typeattr_274 proc_net_type (dir (read getattr open)))
(auditallow base_typeattr_274 proc_net_type (lnk_file (read getattr open)))
;;* lmx 38 system/sepolicy/private/app.te

(allow appdomain test_harness_prop (file (read getattr map open)))
;;* lme

;;* lmx 40 system/sepolicy/private/app.te

(allow appdomain boot_status_prop (file (read getattr map open)))
;;* lme

;;* lmx 43 system/sepolicy/private/app.te

(allow base_typeattr_275 context_hub_chipset_prop (file (read getattr map open)))
;;* lme

;;* lmx 45 system/sepolicy/private/app.te

(allow appdomain dalvik_config_prop_type (file (read getattr map open)))
;;* lme

;;* lmx 46 system/sepolicy/private/app.te

(allow appdomain media_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 47 system/sepolicy/private/app.te

(allow appdomain packagemanager_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 48 system/sepolicy/private/app.te

(allow appdomain radio_control_prop (file (read getattr map open)))
;;* lme

;;* lmx 49 system/sepolicy/private/app.te

(allow appdomain surfaceflinger_color_prop (file (read getattr map open)))
;;* lme

;;* lmx 50 system/sepolicy/private/app.te

(allow appdomain systemsound_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 51 system/sepolicy/private/app.te

(allow appdomain telephony_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 52 system/sepolicy/private/app.te

(allow appdomain userspace_reboot_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 53 system/sepolicy/private/app.te

(allow appdomain vold_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 54 system/sepolicy/private/app.te

(allow appdomain adbd_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 55 system/sepolicy/private/app.te

(allow appdomain dck_prop (file (read getattr map open)))
;;* lme

;;* lmx 56 system/sepolicy/private/app.te

(allow appdomain persist_wm_debug_prop (file (read getattr map open)))
;;* lme

;;* lmx 59 system/sepolicy/private/app.te

(allow appdomain traced_oome_heap_session_count_prop (file (read getattr map open)))
;;* lme

;;* lmx 62 system/sepolicy/private/app.te

(allow appdomain camera2_extensions_prop (file (read getattr map open)))
;;* lme

;;* lmx 65 system/sepolicy/private/app.te

(allow appdomain camerax_extensions_prop (file (read getattr map open)))
;;* lme

(dontaudit appdomain storage_stub_file (dir (getattr)))
(dontaudit appdomain system_data_file (dir (write)))
(dontaudit appdomain vendor_default_prop (file (read)))
;;* lmx 86 system/sepolicy/private/app.te

(allow base_typeattr_276 mnt_media_rw_file (dir (search)))
;;* lme

;;* lmx 91 system/sepolicy/private/app.te

(allow appdomain system_server (udp_socket (read write getattr connect getopt setopt recvfrom sendto)))
;;* lme

;;* lmx 94 system/sepolicy/private/app.te

(allow appdomain system_server_wrapfd (anon_inode (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 95 system/sepolicy/private/app.te

(allowx appdomain system_server_wrapfd (ioctl anon_inode ((range 0x6200 0x6203))))
;;* lme

;;* lmx 98 system/sepolicy/private/app.te

(allow appdomain sendbug_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 101 system/sepolicy/private/app.te

(allow appdomain graphics_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 104 system/sepolicy/private/app.te

(allow appdomain camera_calibration_prop (file (read getattr map open)))
;;* lme

;;* lmx 107 system/sepolicy/private/app.te

(allow appdomain sqlite_log_prop (file (read getattr map open)))
;;* lme

;;* lmx 110 system/sepolicy/private/app.te

(allow appdomain pcc_audit_mode_client_prop (file (read getattr map open)))
;;* lme

;;* lmx 113 system/sepolicy/private/app.te

(allow appdomain system_user_mode_emulation_prop (file (read getattr map open)))
;;* lme

;;* lmx 116 system/sepolicy/private/app.te

(allow appdomain font_data_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 117 system/sepolicy/private/app.te

(allow appdomain font_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 120 system/sepolicy/private/app.te

(allow appdomain apex_module_data_file (dir (search)))
;;* lme

;;* lmx 122 system/sepolicy/private/app.te

(allow appdomain apex_art_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 123 system/sepolicy/private/app.te

(allow appdomain apex_art_data_file (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lme

;;* lmx 127 system/sepolicy/private/app.te

(allow appdomain tombstone_data_file (file (read getattr)))
;;* lme

;;* lmx 130 system/sepolicy/private/app.te

(allow base_typeattr_277 shell_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lme

;;* lmx 131 system/sepolicy/private/app.te

(allow base_typeattr_277 toolbox_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lme

;;* lmx 136 system/sepolicy/private/app.te

(allow base_typeattr_277 vendor_app_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 136 system/sepolicy/private/app.te

(allow base_typeattr_277 vendor_app_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow base_typeattr_277 vendor_app_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 137 system/sepolicy/private/app.te

(allow base_typeattr_277 vendor_app_file (file (execute)))
;;* lme

;;* lmx 140 system/sepolicy/private/app.te

(allow base_typeattr_275 vendor_microdroid_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 140 system/sepolicy/private/app.te

(allow base_typeattr_275 vendor_microdroid_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow base_typeattr_275 vendor_microdroid_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 143 system/sepolicy/private/app.te

(allow appdomain sdk_sandbox_all (binder (call transfer)))
;;* lme

;;* lmx 143 system/sepolicy/private/app.te

(allow sdk_sandbox_all appdomain (binder (transfer)))
;;* lme

;;* lmx 143 system/sepolicy/private/app.te

(allow appdomain sdk_sandbox_all (fd (use)))
;;* lme

;;* lmx 146 system/sepolicy/private/app.te

(allow appdomain virtual_camera (binder (call transfer)))
;;* lme

;;* lmx 146 system/sepolicy/private/app.te

(allow virtual_camera appdomain (binder (transfer)))
;;* lme

;;* lmx 146 system/sepolicy/private/app.te

(allow appdomain virtual_camera (fd (use)))
;;* lme

;;* lmx 150 system/sepolicy/private/app.te

(allow base_typeattr_278 storage_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 151 system/sepolicy/private/app.te

(allow base_typeattr_278 storage_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 152 system/sepolicy/private/app.te

(allow base_typeattr_278 mnt_user_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 153 system/sepolicy/private/app.te

(allow base_typeattr_278 mnt_user_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 156 system/sepolicy/private/app.te

(allow base_typeattr_275 sdcard_type (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
(allow base_typeattr_275 fuse (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 157 system/sepolicy/private/app.te

(allow base_typeattr_275 sdcard_type (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow base_typeattr_275 fuse (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 160 system/sepolicy/private/app.te

(allow base_typeattr_275 media_rw_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 161 system/sepolicy/private/app.te

(allow base_typeattr_275 media_rw_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 168 system/sepolicy/private/app.te

(allow base_typeattr_275 usb_device (chr_file (ioctl read write getattr)))
;;* lme

;;* lmx 169 system/sepolicy/private/app.te

(allow base_typeattr_275 usbaccessory_device (file (read write getattr)))
(allow base_typeattr_275 usbaccessory_device (chr_file (read write getattr)))
;;* lme

;;* lmx 174 system/sepolicy/private/app.te

(allow base_typeattr_278 serialservice (fd (use)))
;;* lme

;;* lmx 177 system/sepolicy/private/app.te

(allow base_typeattr_275 serial_device (chr_file (ioctl read write getattr)))
(allow base_typeattr_275 usb_serial_device (chr_file (ioctl read write getattr)))
;;* lme

;;* lmx 180 system/sepolicy/private/app.te

(allowx base_typeattr_275 serial_device (ioctl chr_file ((range 0x5401 0x540d) 0x5411 (range 0x5413 0x541b) (range 0x5423 0x5425) (range 0x5427 0x5428) (range 0x542a 0x542d) 0x5440 0x5456 0x5459 (range 0x545c 0x545d))))
(allowx base_typeattr_275 usb_serial_device (ioctl chr_file ((range 0x5401 0x540d) 0x5411 (range 0x5413 0x541b) (range 0x5423 0x5425) (range 0x5427 0x5428) (range 0x542a 0x542d) 0x5440 0x5456 0x5459 (range 0x545c 0x545d))))
;;* lme

;;* lmx 183 system/sepolicy/private/app.te

(allow base_typeattr_277 logd_socket (sock_file (write)))
;;* lme

;;* lmx 183 system/sepolicy/private/app.te

(allow base_typeattr_277 logd (unix_stream_socket (connectto)))
;;* lme

;;* lmx 186 system/sepolicy/private/app.te

(allow base_typeattr_278 keystore (keystore2_key (delete get_info grant rebind update use)))
;;* lme

;;* lmx 188 system/sepolicy/private/app.te

(allow base_typeattr_275 keystore_maintenance_service (service_manager (find)))
;;* lme

;;* lmx 190 system/sepolicy/private/app.te

(allow base_typeattr_278 apc_service (service_manager (find)))
;;* lme

;;* lmx 190 system/sepolicy/private/app.te

(allow base_typeattr_278 keystore_service (service_manager (find)))
;;* lme

;;* lmx 190 system/sepolicy/private/app.te

(allow base_typeattr_278 legacykeystore_service (service_manager (find)))
;;* lme

;;* lmx 190 system/sepolicy/private/app.te

(allow base_typeattr_278 keystore (binder (call transfer)))
;;* lme

;;* lmx 190 system/sepolicy/private/app.te

(allow keystore base_typeattr_278 (binder (transfer)))
;;* lme

;;* lmx 190 system/sepolicy/private/app.te

(allow base_typeattr_278 keystore (fd (use)))
;;* lme

;;* lmx 190 system/sepolicy/private/app.te

(allow keystore base_typeattr_278 (binder (call transfer)))
;;* lme

;;* lmx 190 system/sepolicy/private/app.te

(allow base_typeattr_278 keystore (binder (transfer)))
;;* lme

;;* lmx 190 system/sepolicy/private/app.te

(allow keystore base_typeattr_278 (fd (use)))
;;* lme

;;* lmx 192 system/sepolicy/private/app.te

(allow base_typeattr_275 credstore_service (service_manager (find)))
;;* lme

;;* lmx 192 system/sepolicy/private/app.te

(allow base_typeattr_275 credstore (binder (call transfer)))
;;* lme

;;* lmx 192 system/sepolicy/private/app.te

(allow credstore base_typeattr_275 (binder (transfer)))
;;* lme

;;* lmx 192 system/sepolicy/private/app.te

(allow base_typeattr_275 credstore (fd (use)))
;;* lme

;;* lmx 192 system/sepolicy/private/app.te

(allow credstore base_typeattr_275 (binder (call transfer)))
;;* lme

;;* lmx 192 system/sepolicy/private/app.te

(allow base_typeattr_275 credstore (binder (transfer)))
;;* lme

;;* lmx 192 system/sepolicy/private/app.te

(allow credstore base_typeattr_275 (fd (use)))
;;* lme

;;* lmx 194 system/sepolicy/private/app.te

(allow base_typeattr_278 secure_element_service (service_manager (find)))
;;* lme

;;* lmx 194 system/sepolicy/private/app.te

(allow base_typeattr_278 omapi (binder (call transfer)))
;;* lme

;;* lmx 194 system/sepolicy/private/app.te

(allow omapi base_typeattr_278 (binder (transfer)))
;;* lme

;;* lmx 194 system/sepolicy/private/app.te

(allow base_typeattr_278 omapi (fd (use)))
;;* lme

;;* lmx 194 system/sepolicy/private/app.te

(allow omapi base_typeattr_278 (binder (call transfer)))
;;* lme

;;* lmx 194 system/sepolicy/private/app.te

(allow base_typeattr_278 omapi (binder (transfer)))
;;* lme

;;* lmx 194 system/sepolicy/private/app.te

(allow omapi base_typeattr_278 (fd (use)))
;;* lme

;;* lmx 196 system/sepolicy/private/app.te

(allow base_typeattr_275 persistent_data_block_service (service_manager (find)))
;;* lme

;;* lmx 199 system/sepolicy/private/app.te

(allow base_typeattr_275 pdx_display_client_endpoint_dir_type (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 199 system/sepolicy/private/app.te

(allow base_typeattr_275 pdx_display_client_endpoint_socket_type (sock_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 199 system/sepolicy/private/app.te

(allow base_typeattr_275 pdx_display_client_endpoint_socket_type (unix_stream_socket (read write shutdown connectto)))
;;* lme

;;* lmx 199 system/sepolicy/private/app.te

(allow base_typeattr_275 pdx_display_client_channel_socket_type (unix_stream_socket (read write getattr setattr lock append getopt setopt shutdown)))
;;* lme

;;* lmx 199 system/sepolicy/private/app.te

(allow base_typeattr_275 pdx_display_client_server_type (fd (use)))
;;* lme

;;* lmx 199 system/sepolicy/private/app.te

(allow pdx_display_client_server_type base_typeattr_275 (fd (use)))
;;* lme

;;* lmx 200 system/sepolicy/private/app.te

(allow base_typeattr_275 pdx_display_manager_endpoint_dir_type (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 200 system/sepolicy/private/app.te

(allow base_typeattr_275 pdx_display_manager_endpoint_socket_type (sock_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 200 system/sepolicy/private/app.te

(allow base_typeattr_275 pdx_display_manager_endpoint_socket_type (unix_stream_socket (read write shutdown connectto)))
;;* lme

;;* lmx 200 system/sepolicy/private/app.te

(allow base_typeattr_275 pdx_display_manager_channel_socket_type (unix_stream_socket (read write getattr setattr lock append getopt setopt shutdown)))
;;* lme

;;* lmx 200 system/sepolicy/private/app.te

(allow base_typeattr_275 pdx_display_manager_server_type (fd (use)))
;;* lme

;;* lmx 200 system/sepolicy/private/app.te

(allow pdx_display_manager_server_type base_typeattr_275 (fd (use)))
;;* lme

;;* lmx 201 system/sepolicy/private/app.te

(allow base_typeattr_275 pdx_display_vsync_endpoint_dir_type (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 201 system/sepolicy/private/app.te

(allow base_typeattr_275 pdx_display_vsync_endpoint_socket_type (sock_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 201 system/sepolicy/private/app.te

(allow base_typeattr_275 pdx_display_vsync_endpoint_socket_type (unix_stream_socket (read write shutdown connectto)))
;;* lme

;;* lmx 201 system/sepolicy/private/app.te

(allow base_typeattr_275 pdx_display_vsync_channel_socket_type (unix_stream_socket (read write getattr setattr lock append getopt setopt shutdown)))
;;* lme

;;* lmx 201 system/sepolicy/private/app.te

(allow base_typeattr_275 pdx_display_vsync_server_type (fd (use)))
;;* lme

;;* lmx 201 system/sepolicy/private/app.te

(allow pdx_display_vsync_server_type base_typeattr_275 (fd (use)))
;;* lme

;;* lmx 202 system/sepolicy/private/app.te

(allow base_typeattr_275 pdx_performance_client_endpoint_dir_type (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 202 system/sepolicy/private/app.te

(allow base_typeattr_275 pdx_performance_client_endpoint_socket_type (sock_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 202 system/sepolicy/private/app.te

(allow base_typeattr_275 pdx_performance_client_endpoint_socket_type (unix_stream_socket (read write shutdown connectto)))
;;* lme

;;* lmx 202 system/sepolicy/private/app.te

(allow base_typeattr_275 pdx_performance_client_channel_socket_type (unix_stream_socket (read write getattr setattr lock append getopt setopt shutdown)))
;;* lme

;;* lmx 202 system/sepolicy/private/app.te

(allow base_typeattr_275 pdx_performance_client_server_type (fd (use)))
;;* lme

;;* lmx 202 system/sepolicy/private/app.te

(allow pdx_performance_client_server_type base_typeattr_275 (fd (use)))
;;* lme

;;* lmx 204 system/sepolicy/private/app.te

(allow base_typeattr_275 pdx_bufferhub_client_channel_socket_type (unix_stream_socket (read write getattr setattr lock append getopt setopt shutdown)))
;;* lme

;;* lmx 204 system/sepolicy/private/app.te

(allow base_typeattr_275 pdx_bufferhub_client_server_type (fd (use)))
;;* lme

;;* lmx 204 system/sepolicy/private/app.te

(allow pdx_bufferhub_client_server_type base_typeattr_275 (fd (use)))
;;* lme

;;* lmx 208 system/sepolicy/private/app.te

(allow base_typeattr_275 tun_device (chr_file (ioctl read write getattr append)))
;;* lme

;;* lmx 209 system/sepolicy/private/app.te

(allowx base_typeattr_275 tun_device (ioctl chr_file (0x54d2)))
;;* lme

;;* lmx 213 system/sepolicy/private/app.te

(allow appdomain self (process (execmem)))
;;* lme

;;* lmx 215 system/sepolicy/private/app.te

(allow appdomain ashmem_device (chr_file (execute)))
(allow appdomain ashmem_libcutils_device (chr_file (execute)))
;;* lme

;;* lmx 218 system/sepolicy/private/app.te

(allow appdomain zygote (fd (use)))
;;* lme

;;* lmx 219 system/sepolicy/private/app.te

(allow appdomain zygote_next (fd (use)))
;;* lme

;;* lmx 222 system/sepolicy/private/app.te

(allow appdomain app_zygote (fd (use)))
;;* lme

;;* lmx 225 system/sepolicy/private/app.te

(allow appdomain app_zygote_tmpfs (file (read write getattr map)))
;;* lme

;;* lmx 226 system/sepolicy/private/app.te

(allow appdomain app_zygote (memfd_file (read write getattr map)))
;;* lme

;;* lmx 230 system/sepolicy/private/app.te

(allow appdomain zygote_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lme

;;* lmx 231 system/sepolicy/private/app.te

(allow appdomain zygote_next_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lme

;;* lmx 234 system/sepolicy/private/app.te

(allow appdomain zygote (process (sigchld)))
;;* lme

;;* lmx 237 system/sepolicy/private/app.te

(allow appdomain dalvikcache_data_file (dir (getattr search)))
;;* lme

;;* lmx 238 system/sepolicy/private/app.te

(allow appdomain dalvikcache_data_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 241 system/sepolicy/private/app.te

(allow base_typeattr_279 rootfs (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 242 system/sepolicy/private/app.te

(allow base_typeattr_279 tmpfs (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 245 system/sepolicy/private/app.te

(allow base_typeattr_276 tmpfs (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 248 system/sepolicy/private/app.te

(allow appdomain zygote (fifo_file (write)))
;;* lme

;;* lmx 250 system/sepolicy/private/app.te

(allow appdomain method_trace_data_file (dir (write lock open add_name remove_name search)))
;;* lme

;;* lmx 250 system/sepolicy/private/app.te

(allow appdomain method_trace_data_file (file (write create lock append map open)))
;;* lme

;;* lmx 257 system/sepolicy/private/app.te

(allow appdomain shell (process (sigchld)))
;;* lme

;;* lmx 258 system/sepolicy/private/app.te

(allow appdomain adbd (process (sigchld)))
;;* lme

;;* lmx 261 system/sepolicy/private/app.te

(allow appdomain devpts (chr_file (ioctl read write getattr)))
;;* lme

;;* lmx 264 system/sepolicy/private/app.te

(allow appdomain system_server (fd (use)))
;;* lme

;;* lmx 265 system/sepolicy/private/app.te

(allow appdomain system_server (fifo_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 266 system/sepolicy/private/app.te

(allow appdomain system_server (unix_stream_socket (read write getattr getopt setopt shutdown)))
;;* lme

;;* lmx 267 system/sepolicy/private/app.te

(allow appdomain system_server (tcp_socket (read write getattr getopt shutdown)))
;;* lme

;;* lmx 270 system/sepolicy/private/app.te

(allow appdomain aoad (fd (use)))
;;* lme

;;* lmx 271 system/sepolicy/private/app.te

(allow appdomain aoad (unix_stream_socket (read write getattr setattr lock append getopt shutdown)))
;;* lme

;;* lmx 274 system/sepolicy/private/app.te

(allow appdomain vold (fd (use)))
;;* lme

;;* lmx 277 system/sepolicy/private/app.te

(allow base_typeattr_280 appdomain (fifo_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 280 system/sepolicy/private/app.te

(allow appdomain surfaceflinger (unix_stream_socket (read write getattr getopt setopt shutdown)))
;;* lme

;;* lmx 287 system/sepolicy/private/app.te

(allow base_typeattr_281 app_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
(allow base_typeattr_281 privapp_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 292 system/sepolicy/private/app.te

(allow base_typeattr_281 app_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow base_typeattr_281 privapp_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 305 system/sepolicy/private/app.te

(allowx base_typeattr_282 app_data_file (ioctl file (0x6686)))
(allowx base_typeattr_282 privapp_data_file (ioctl file (0x6686)))
;;* lme

;;* lmx 313 system/sepolicy/private/app.te

(allow base_typeattr_283 app_data_file (file (read write getattr map)))
(allow base_typeattr_283 privapp_data_file (file (read write getattr map)))
(allow base_typeattr_283 system_app_data_file (file (read write getattr map)))
;;* lme

;;* lmx 316 system/sepolicy/private/app.te

(allow appdomain sdk_sandbox_data_file (file (read getattr)))
;;* lme

;;* lmx 319 system/sepolicy/private/app.te

(allow appdomain mnt_expand_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 322 system/sepolicy/private/app.te

(allow appdomain keychain_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 322 system/sepolicy/private/app.te

(allow appdomain keychain_data_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow appdomain keychain_data_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 323 system/sepolicy/private/app.te

(allow appdomain misc_user_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 324 system/sepolicy/private/app.te

(allow appdomain misc_user_data_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 327 system/sepolicy/private/app.te

(allow base_typeattr_284 textclassifier_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 327 system/sepolicy/private/app.te

(allow base_typeattr_284 textclassifier_data_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow base_typeattr_284 textclassifier_data_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 330 system/sepolicy/private/app.te

(allow appdomain oemfs (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 331 system/sepolicy/private/app.te

(allow appdomain oemfs (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lme

;;* lmx 333 system/sepolicy/private/app.te

(allow appdomain system_file (file (getattr map execute execute_no_trans)))
;;* lme

;;* lmx 336 system/sepolicy/private/app.te

(allow appdomain system_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 337 system/sepolicy/private/app.te

(allow appdomain system_file (lnk_file (read getattr open)))
;;* lme

;;* lmx 344 system/sepolicy/private/app.te

(allow base_typeattr_284 vendor_file (dir (read open)))
;;* lme

;;* lmx 350 system/sepolicy/private/app.te

(allow appdomain vendor_overlay_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 350 system/sepolicy/private/app.te

(allow appdomain vendor_overlay_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow appdomain vendor_overlay_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 354 system/sepolicy/private/app.te

(allow appdomain vendor_framework_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 354 system/sepolicy/private/app.te

(allow appdomain vendor_framework_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow appdomain vendor_framework_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 357 system/sepolicy/private/app.te

(allow appdomain vendor_public_lib_file (dir (ioctl read getattr lock open watch watch_reads search)))
(allow appdomain vendor_public_framework_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 358 system/sepolicy/private/app.te

(allow appdomain vendor_public_lib_file (file (read getattr map execute open)))
(allow appdomain vendor_public_framework_file (file (read getattr map execute open)))
;;* lme

;;* lmx 361 system/sepolicy/private/app.te

(allow base_typeattr_280 wallpaper_file (file (read write getattr map)))
;;* lme

;;* lmx 364 system/sepolicy/private/app.te

(allow base_typeattr_280 ringtone_file (file (read write getattr map)))
;;* lme

;;* lmx 367 system/sepolicy/private/app.te

(allow appdomain shortcut_manager_icons (file (read getattr map)))
;;* lme

;;* lmx 370 system/sepolicy/private/app.te

(allow appdomain icon_file (file (read getattr map)))
;;* lme

;;* lmx 377 system/sepolicy/private/app.te

(allow appdomain anr_data_file (dir (search)))
;;* lme

;;* lmx 378 system/sepolicy/private/app.te

(allow appdomain anr_data_file (file (append open)))
;;* lme

;;* lmx 388 system/sepolicy/private/app.te

(allow appdomain tombstoned_java_trace_socket (sock_file (write)))
;;* lme

;;* lmx 388 system/sepolicy/private/app.te

(allow appdomain tombstoned (unix_stream_socket (connectto)))
;;* lme

;;* lmx 389 system/sepolicy/private/app.te

(allow appdomain tombstoned (fd (use)))
;;* lme

;;* lmx 390 system/sepolicy/private/app.te

(allow appdomain dumpstate (fifo_file (append)))
;;* lme

;;* lmx 391 system/sepolicy/private/app.te

(allow appdomain incidentd (fifo_file (append)))
;;* lme

;;* lmx 394 system/sepolicy/private/app.te

(allow appdomain dumpstate (fd (use)))
;;* lme

;;* lmx 395 system/sepolicy/private/app.te

(allow appdomain dumpstate (unix_stream_socket (read write getattr getopt shutdown)))
;;* lme

;;* lmx 396 system/sepolicy/private/app.te

(allow appdomain dumpstate (fifo_file (write getattr)))
;;* lme

;;* lmx 397 system/sepolicy/private/app.te

(allow base_typeattr_280 shell_data_file (file (write getattr)))
;;* lme

;;* lmx 400 system/sepolicy/private/app.te

(allow appdomain incidentd (fd (use)))
;;* lme

;;* lmx 401 system/sepolicy/private/app.te

(allow appdomain incidentd (fifo_file (write getattr)))
;;* lme

;;* lmx 404 system/sepolicy/private/app.te

(allow appdomain statsdw_socket (sock_file (write)))
;;* lme

;;* lmx 404 system/sepolicy/private/app.te

(allow appdomain statsd (unix_dgram_socket (sendto)))
;;* lme

;;* lmx 407 system/sepolicy/private/app.te

(allow appdomain user_profile_root_file (dir (search)))
;;* lme

;;* lmx 408 system/sepolicy/private/app.te

(allow appdomain user_profile_data_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
;;* lme

;;* lmx 409 system/sepolicy/private/app.te

(allow appdomain user_profile_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 415 system/sepolicy/private/app.te

(allow appdomain traced (fd (use)))
;;* lme

;;* lmx 415 system/sepolicy/private/app.te

(allow appdomain traced_tmpfs (file (read write getattr map)))
;;* lme

;;* lmx 415 system/sepolicy/private/app.te

(allow appdomain traced (memfd_file (read write getattr map)))
;;* lme

;;* lmx 415 system/sepolicy/private/app.te

(allow appdomain traced_producer_socket (sock_file (write)))
;;* lme

;;* lmx 415 system/sepolicy/private/app.te

(allow appdomain traced (unix_stream_socket (connectto)))
;;* lme

;;* lmx 415 system/sepolicy/private/app.te

(allow traced appdomain (fd (use)))
;;* lme

;;* lmx 421 system/sepolicy/private/app.te

(allow appdomain heapdump_data_file (file (append)))
;;* lme

;;* lmx 427 system/sepolicy/private/app.te

(allow appdomain servicemanager (binder (call transfer)))
;;* lme

;;* lmx 427 system/sepolicy/private/app.te

(allow servicemanager appdomain (binder (call transfer)))
;;* lme

;;* lmx 429 system/sepolicy/private/app.te

(allow appdomain binderservicedomain (binder (call transfer)))
;;* lme

;;* lmx 429 system/sepolicy/private/app.te

(allow binderservicedomain appdomain (binder (transfer)))
;;* lme

;;* lmx 429 system/sepolicy/private/app.te

(allow appdomain binderservicedomain (fd (use)))
;;* lme

;;* lmx 431 system/sepolicy/private/app.te

(allow appdomain appdomain (binder (call transfer)))
;;* lme

;;* lmx 431 system/sepolicy/private/app.te

(allow appdomain appdomain (binder (transfer)))
;;* lme

;;* lmx 431 system/sepolicy/private/app.te

(allow appdomain appdomain (fd (use)))
;;* lme

;;* lmx 433 system/sepolicy/private/app.te

(allow appdomain ephemeral_app (binder (call transfer)))
;;* lme

;;* lmx 433 system/sepolicy/private/app.te

(allow ephemeral_app appdomain (binder (transfer)))
;;* lme

;;* lmx 433 system/sepolicy/private/app.te

(allow appdomain ephemeral_app (fd (use)))
;;* lme

;;* lmx 435 system/sepolicy/private/app.te

(allow base_typeattr_284 gpuservice (binder (call transfer)))
;;* lme

;;* lmx 435 system/sepolicy/private/app.te

(allow gpuservice base_typeattr_284 (binder (transfer)))
;;* lme

;;* lmx 435 system/sepolicy/private/app.te

(allow base_typeattr_284 gpuservice (fd (use)))
;;* lme

;;* lmx 438 system/sepolicy/private/app.te

(allow appdomain hal_graphics_composer (fd (use)))
;;* lme

;;* lmx 444 system/sepolicy/private/app.te

(allow base_typeattr_280 appdomain (unix_stream_socket (read write getattr getopt shutdown)))
;;* lme

;;* lmx 448 system/sepolicy/private/app.te

(allow appdomain backup_data_file (file (read write getattr map)))
;;* lme

;;* lmx 449 system/sepolicy/private/app.te

(allow appdomain cache_backup_file (file (read write getattr map)))
;;* lme

;;* lmx 450 system/sepolicy/private/app.te

(allow appdomain cache_backup_file (dir (getattr)))
;;* lme

;;* lmx 452 system/sepolicy/private/app.te

(allow appdomain system_data_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 453 system/sepolicy/private/app.te

(allow appdomain system_data_file (file (read getattr map)))
;;* lme

;;* lmx 456 system/sepolicy/private/app.te

(allow base_typeattr_279 media_rw_data_file (file (read getattr)))
;;* lme

;;* lmx 459 system/sepolicy/private/app.te

(allow base_typeattr_284 radio_data_file (file (read write getattr)))
;;* lme

;;* lmx 462 system/sepolicy/private/app.te

(allow appdomain dalvikcache_data_file (file (execute)))
;;* lme

;;* lmx 463 system/sepolicy/private/app.te

(allow appdomain dalvikcache_data_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 466 system/sepolicy/private/app.te

(allow appdomain shared_relro_file (dir (search)))
;;* lme

;;* lmx 467 system/sepolicy/private/app.te

(allow appdomain shared_relro_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 470 system/sepolicy/private/app.te

(allow appdomain apk_data_file (dir (ioctl read getattr lock open search)))
;;* lme

;;* lmx 471 system/sepolicy/private/app.te

(allow appdomain apk_data_file (file (ioctl read getattr lock map execute open execute_no_trans)))
;;* lme

;;* lmx 474 system/sepolicy/private/app.te

(allow appdomain resourcecache_data_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 475 system/sepolicy/private/app.te

(allow appdomain resourcecache_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 478 system/sepolicy/private/app.te

(allow appdomain logcat_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lme

;;* lmx 478 system/sepolicy/private/app.te

(allow appdomain logdr_socket (sock_file (write)))
;;* lme

;;* lmx 478 system/sepolicy/private/app.te

(allow appdomain logd (unix_stream_socket (connectto)))
;;* lme

;;* lmx 480 system/sepolicy/private/app.te

(allow appdomain zygote (unix_dgram_socket (write)))
;;* lme

;;* lmx 481 system/sepolicy/private/app.te

(allow appdomain zygote_next (unix_dgram_socket (write)))
;;* lme

;;* lmx 482 system/sepolicy/private/app.te

(allow appdomain zygote_socket (unix_stream_socket (getattr getopt)))
;;* lme

;;* lmx 484 system/sepolicy/private/app.te

(allow appdomain console_device (chr_file (read write)))
;;* lme

;;* lmx 488 system/sepolicy/private/app.te

(allowx base_typeattr_285 self (ioctl tcp_socket ((range 0x5401 0x5404) 0x540b (range 0x540e 0x5411) (range 0x5413 0x5414) (range 0x5450 0x5451))))
(allowx base_typeattr_285 self (ioctl udp_socket ((range 0x5401 0x5404) 0x540b (range 0x540e 0x5411) (range 0x5413 0x5414) (range 0x5450 0x5451))))
(allowx base_typeattr_285 self (ioctl rawip_socket ((range 0x5401 0x5404) 0x540b (range 0x540e 0x5411) (range 0x5413 0x5414) (range 0x5450 0x5451))))
;;* lme

;;* lmx 488 system/sepolicy/private/app.te

(allowx base_typeattr_285 self (ioctl tcp_socket ((range 0x8906 0x8907) 0x8910 (range 0x8912 0x8913) 0x8915 0x8917 0x8919 0x891b 0x8921 0x8933 0x8938 0x8942)))
(allowx base_typeattr_285 self (ioctl udp_socket ((range 0x8906 0x8907) 0x8910 (range 0x8912 0x8913) 0x8915 0x8917 0x8919 0x891b 0x8921 0x8933 0x8938 0x8942)))
(allowx base_typeattr_285 self (ioctl rawip_socket ((range 0x8906 0x8907) 0x8910 (range 0x8912 0x8913) 0x8915 0x8917 0x8919 0x891b 0x8921 0x8933 0x8938 0x8942)))
;;* lme

;;* lmx 488 system/sepolicy/private/app.te

(allowx base_typeattr_285 self (ioctl tcp_socket (0x8b01 0x8b05 0x8b07 0x8b09 0x8b0b 0x8b0d 0x8b0f (range 0x8b11 0x8b13) 0x8b21 0x8b23 0x8b25 0x8b27 0x8b29 0x8b2d)))
(allowx base_typeattr_285 self (ioctl udp_socket (0x8b01 0x8b05 0x8b07 0x8b09 0x8b0b 0x8b0d 0x8b0f (range 0x8b11 0x8b13) 0x8b21 0x8b23 0x8b25 0x8b27 0x8b29 0x8b2d)))
(allowx base_typeattr_285 self (ioctl rawip_socket (0x8b01 0x8b05 0x8b07 0x8b09 0x8b0b 0x8b0d 0x8b0f (range 0x8b11 0x8b13) 0x8b21 0x8b23 0x8b25 0x8b27 0x8b29 0x8b2d)))
;;* lme

;;* lmx 490 system/sepolicy/private/app.te

(allow base_typeattr_284 dmabuf_system_heap_device (chr_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 491 system/sepolicy/private/app.te

(allow base_typeattr_284 dmabuf_system_secure_heap_device (chr_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 494 system/sepolicy/private/app.te

(allow base_typeattr_284 hal_audio (fd (use)))
;;* lme

;;* lmx 497 system/sepolicy/private/app.te

(allow base_typeattr_284 hal_camera (fd (use)))
;;* lme

;;* lmx 500 system/sepolicy/private/app.te

(allow base_typeattr_284 hal_tv_tuner_server (fd (use)))
;;* lme

;;* lmx 503 system/sepolicy/private/app.te

(allow base_typeattr_284 hal_power_server (fd (use)))
;;* lme

;;* lmx 504 system/sepolicy/private/app.te

(allow base_typeattr_284 hal_power_server (memfd_file (read write getattr map)))
;;* lme

;;* lmx 507 system/sepolicy/private/app.te

(allow base_typeattr_284 hal_renderscript_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 508 system/sepolicy/private/app.te

(allow appdomain same_process_hal_file (file (read getattr map execute open)))
;;* lme

;;* lmx 511 system/sepolicy/private/app.te

(allow appdomain proc_meminfo (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 514 system/sepolicy/private/app.te

(allow appdomain app_fuse_file (file (read write getattr append map)))
;;* lme

;;* lmx 522 system/sepolicy/private/app.te

(allow appdomain runas_exec (file (getattr)))
;;* lme

;;* lmx 525 system/sepolicy/private/app.te

(allow appdomain high_barometer_quality_prop (file (read getattr map open)))
;;* lme

;;* lmx 529 system/sepolicy/private/app.te

(allow appdomain adbd (unix_stream_socket (connectto)))
;;* lme

;;* lmx 530 system/sepolicy/private/app.te

(allow appdomain adbd (fd (use)))
;;* lme

;;* lmx 531 system/sepolicy/private/app.te

(allow appdomain adbd (unix_stream_socket (ioctl read write getattr getopt shutdown)))
;;* lme

;;* lmx 533 system/sepolicy/private/app.te

(allow appdomain cache_file (dir (getattr)))
;;* lme

;;* lmx 539 system/sepolicy/private/app.te

(allow appdomain dropbox_data_file (file (read getattr)))
;;* lme

;;* lmx 542 system/sepolicy/private/app.te

(allow appdomain audioserver_tmpfs (file (read write getattr map)))
;;* lme

;;* lmx 543 system/sepolicy/private/app.te

(allow appdomain system_server_tmpfs (file (read write getattr map)))
;;* lme

;;* lmx 544 system/sepolicy/private/app.te

(allow appdomain audioserver (memfd_file (read write getattr map)))
;;* lme

;;* lmx 545 system/sepolicy/private/app.te

(allow appdomain system_server (memfd_file (read write getattr map)))
;;* lme

;;* lmx 546 system/sepolicy/private/app.te

(allow appdomain zygote_tmpfs (file (read map)))
;;* lme

;;* lmx 547 system/sepolicy/private/app.te

(allow appdomain zygote (memfd_file (read map)))
;;* lme

;;* lmx 548 system/sepolicy/private/app.te

(allow appdomain hal_codec2 (memfd_file (read write getattr map)))
;;* lme

;;* lmx 549 system/sepolicy/private/app.te

(allow appdomain cameraserver (memfd_file (read write getattr map)))
;;* lme

;;* lmx 551 system/sepolicy/private/app.te

(allow appdomain mediaextractor (memfd_file (read write getattr map)))
;;* lme

;;* lmx 553 system/sepolicy/private/app.te

(allow appdomain mediaserver (memfd_file (read write getattr map)))
;;* lme

;;* lmx 559 system/sepolicy/private/app.te

(allow appdomain hal_contexthub (fd (use)))
;;* lme

;;* lmx 560 system/sepolicy/private/app.te

(allow hal_contexthub appdomain (fd (use)))
;;* lme

;;* lmx 561 system/sepolicy/private/app.te

(allow appdomain hal_contexthub (memfd_file (read write getattr map)))
;;* lme

;;* lmx 574 system/sepolicy/private/app.te

(allow base_typeattr_286 ashmem_libcutils_device (chr_file (open)))
;;* lme

;;* lmx 583 system/sepolicy/private/app.te

(allow base_typeattr_286 domain (memfd_file (ioctl)))
;;* lme

;;* lmx 590 system/sepolicy/private/app.te

(allowx base_typeattr_286 domain (ioctl memfd_file ((range 0x7701 0x770b))))
;;* lme

;;* lmx 601 system/sepolicy/private/app.te

(neverallow base_typeattr_287 self (capability (chown dac_override dac_read_search fowner fsetid kill setgid setuid setpcap linux_immutable net_bind_service net_broadcast net_admin net_raw ipc_lock ipc_owner sys_module sys_rawio sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_nice sys_resource sys_time sys_tty_config mknod lease audit_write audit_control setfcap)))
(neverallow base_typeattr_287 self (capability2 (mac_override mac_admin syslog wake_alarm block_suspend audit_read perfmon checkpoint_restore bpf)))
(neverallow base_typeattr_287 self (cap_userns (chown dac_override dac_read_search fowner fsetid kill setgid setuid setpcap linux_immutable net_bind_service net_broadcast net_admin net_raw ipc_lock ipc_owner sys_module sys_rawio sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_nice sys_resource sys_time sys_tty_config mknod lease audit_write audit_control setfcap)))
(neverallow base_typeattr_287 self (cap2_userns (mac_override mac_admin syslog wake_alarm block_suspend audit_read perfmon checkpoint_restore bpf)))
;;* lme

;;* lmx 604 system/sepolicy/private/app.te

(neverallow appdomain base_typeattr_288 (blk_file (read write)))
;;* lme

;;* lmx 607 system/sepolicy/private/app.te

(neverallow isolated_app graphics_device (chr_file (read write)))
(neverallow shell graphics_device (chr_file (read write)))
(neverallow untrusted_app graphics_device (chr_file (read write)))
;;* lme

;;* lmx 610 system/sepolicy/private/app.te

(neverallow base_typeattr_289 nfc_device (chr_file (read write)))
;;* lme

;;* lmx 612 system/sepolicy/private/app.te

(neverallow base_typeattr_285 hci_attach_dev (chr_file (read write)))
;;* lme

;;* lmx 613 system/sepolicy/private/app.te

(neverallow appdomain tee_device (chr_file (read write)))
;;* lme

;;* lmx 623 system/sepolicy/private/app.te

(neverallow base_typeattr_290 domain (netlink_tcpdiag_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write nlmsg)))
(neverallow base_typeattr_290 domain (netlink_nflog_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow base_typeattr_290 domain (netlink_xfrm_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write nlmsg)))
(neverallow base_typeattr_290 domain (netlink_audit_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write nlmsg_relay nlmsg_readpriv nlmsg_tty_audit nlmsg)))
(neverallow base_typeattr_290 domain (netlink_dnrt_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
;;* lme

;;* lmx 629 system/sepolicy/private/app.te

(neverallow base_typeattr_290 domain (netlink_kobject_uevent_socket (write append)))
;;* lme

;;* lmx 632 system/sepolicy/private/app.te

(neverallow appdomain socket_device (sock_file (write)))
;;* lme

;;* lmx 635 system/sepolicy/private/app.te

(neverallow appdomain adbd_socket (sock_file (write)))
;;* lme

;;* lmx 636 system/sepolicy/private/app.te

(neverallow base_typeattr_291 rild_socket (sock_file (write)))
;;* lme

;;* lmx 639 system/sepolicy/private/app.te

(neverallow appdomain base_typeattr_292 (process (ptrace)))
;;* lme

;;* lmx 653 system/sepolicy/private/app.te

(neverallow base_typeattr_293 appdomain (process (ptrace)))
;;* lme

;;* lmx 657 system/sepolicy/private/app.te

(neverallow appdomain base_typeattr_292 (file (write create setattr relabelfrom append unlink link rename)))
;;* lme

;;* lmx 658 system/sepolicy/private/app.te

(neverallow base_typeattr_294 base_typeattr_292 (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 668 system/sepolicy/private/app.te

(neverallow appdomain base_typeattr_295 (process (sigkill sigstop signal)))
;;* lme

;;* lmx 672 system/sepolicy/private/app.te

(neverallow appdomain rootfs (file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain rootfs (dir (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain rootfs (lnk_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain rootfs (chr_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain rootfs (blk_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain rootfs (sock_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain rootfs (fifo_file (write create setattr relabelfrom relabelto append unlink link rename)))
;;* lme

;;* lmx 676 system/sepolicy/private/app.te

(neverallow appdomain system_file_type (file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain system_file_type (dir (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain system_file_type (lnk_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain system_file_type (chr_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain system_file_type (blk_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain system_file_type (sock_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain system_file_type (fifo_file (write create setattr relabelfrom relabelto append unlink link rename)))
;;* lme

;;* lmx 680 system/sepolicy/private/app.te

(neverallow appdomain exec_type (file (write create setattr relabelfrom relabelto append unlink link rename)))
;;* lme

;;* lmx 687 system/sepolicy/private/app.te

(neverallow appdomain system_data_file (file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain system_data_file (dir (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain system_data_file (lnk_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain system_data_file (chr_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain system_data_file (blk_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain system_data_file (sock_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain system_data_file (fifo_file (write create setattr relabelfrom relabelto append unlink link rename)))
;;* lme

;;* lmx 691 system/sepolicy/private/app.te

(neverallow appdomain mediadrm_system_data_file (file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain mediadrm_system_data_file (dir (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain mediadrm_system_data_file (lnk_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain mediadrm_system_data_file (chr_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain mediadrm_system_data_file (blk_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain mediadrm_system_data_file (sock_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain mediadrm_system_data_file (fifo_file (write create setattr relabelfrom relabelto append unlink link rename)))
;;* lme

;;* lmx 693 system/sepolicy/private/app.te

(neverallow appdomain drm_data_file (file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain drm_data_file (dir (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain drm_data_file (lnk_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain drm_data_file (chr_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain drm_data_file (blk_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain drm_data_file (sock_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain drm_data_file (fifo_file (write create setattr relabelfrom relabelto append unlink link rename)))
;;* lme

;;* lmx 696 system/sepolicy/private/app.te

(neverallow base_typeattr_296 apk_data_file (file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow base_typeattr_296 apk_data_file (dir (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow base_typeattr_296 apk_data_file (lnk_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow base_typeattr_296 apk_data_file (chr_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow base_typeattr_296 apk_data_file (blk_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow base_typeattr_296 apk_data_file (sock_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow base_typeattr_296 apk_data_file (fifo_file (write create setattr relabelfrom relabelto append unlink link rename)))
;;* lme

;;* lmx 699 system/sepolicy/private/app.te

(neverallow base_typeattr_296 apk_private_data_file (file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow base_typeattr_296 apk_private_data_file (dir (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow base_typeattr_296 apk_private_data_file (lnk_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow base_typeattr_296 apk_private_data_file (chr_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow base_typeattr_296 apk_private_data_file (blk_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow base_typeattr_296 apk_private_data_file (sock_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow base_typeattr_296 apk_private_data_file (fifo_file (write create setattr relabelfrom relabelto append unlink link rename)))
;;* lme

;;* lmx 702 system/sepolicy/private/app.te

(neverallow base_typeattr_296 apk_private_tmp_file (file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow base_typeattr_296 apk_private_tmp_file (dir (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow base_typeattr_296 apk_private_tmp_file (lnk_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow base_typeattr_296 apk_private_tmp_file (chr_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow base_typeattr_296 apk_private_tmp_file (blk_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow base_typeattr_296 apk_private_tmp_file (sock_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow base_typeattr_296 apk_private_tmp_file (fifo_file (write create setattr relabelfrom relabelto append unlink link rename)))
;;* lme

;;* lmx 705 system/sepolicy/private/app.te

(neverallow base_typeattr_294 shell_data_file (file (create setattr relabelfrom relabelto append unlink link rename)))
(neverallow base_typeattr_294 shell_data_file (dir (create setattr relabelfrom relabelto append unlink link rename)))
(neverallow base_typeattr_294 shell_data_file (lnk_file (create setattr relabelfrom relabelto append unlink link rename)))
(neverallow base_typeattr_294 shell_data_file (chr_file (create setattr relabelfrom relabelto append unlink link rename)))
(neverallow base_typeattr_294 shell_data_file (blk_file (create setattr relabelfrom relabelto append unlink link rename)))
(neverallow base_typeattr_294 shell_data_file (sock_file (create setattr relabelfrom relabelto append unlink link rename)))
(neverallow base_typeattr_294 shell_data_file (fifo_file (create setattr relabelfrom relabelto append unlink link rename)))
;;* lme

;;* lmx 708 system/sepolicy/private/app.te

(neverallow base_typeattr_285 bluetooth_data_file (file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow base_typeattr_285 bluetooth_data_file (dir (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow base_typeattr_285 bluetooth_data_file (lnk_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow base_typeattr_285 bluetooth_data_file (chr_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow base_typeattr_285 bluetooth_data_file (blk_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow base_typeattr_285 bluetooth_data_file (sock_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow base_typeattr_285 bluetooth_data_file (fifo_file (write create setattr relabelfrom relabelto append unlink link rename)))
;;* lme

;;* lmx 709 system/sepolicy/private/app.te

(neverallow base_typeattr_297 credstore_data_file (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow base_typeattr_297 credstore_data_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
(neverallow base_typeattr_297 credstore_data_file (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow base_typeattr_297 credstore_data_file (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow base_typeattr_297 credstore_data_file (blk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow base_typeattr_297 credstore_data_file (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow base_typeattr_297 credstore_data_file (fifo_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 712 system/sepolicy/private/app.te

(neverallow appdomain keystore_data_file (file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain keystore_data_file (dir (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain keystore_data_file (lnk_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain keystore_data_file (chr_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain keystore_data_file (blk_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain keystore_data_file (sock_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain keystore_data_file (fifo_file (write create setattr relabelfrom relabelto append unlink link rename)))
;;* lme

;;* lmx 715 system/sepolicy/private/app.te

(neverallow appdomain systemkeys_data_file (file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain systemkeys_data_file (dir (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain systemkeys_data_file (lnk_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain systemkeys_data_file (chr_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain systemkeys_data_file (blk_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain systemkeys_data_file (sock_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain systemkeys_data_file (fifo_file (write create setattr relabelfrom relabelto append unlink link rename)))
;;* lme

;;* lmx 718 system/sepolicy/private/app.te

(neverallow appdomain wifi_data_file (file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain wifi_data_file (dir (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain wifi_data_file (lnk_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain wifi_data_file (chr_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain wifi_data_file (blk_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain wifi_data_file (sock_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain wifi_data_file (fifo_file (write create setattr relabelfrom relabelto append unlink link rename)))
;;* lme

;;* lmx 721 system/sepolicy/private/app.te

(neverallow appdomain dhcp_data_file (file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain dhcp_data_file (dir (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain dhcp_data_file (lnk_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain dhcp_data_file (chr_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain dhcp_data_file (blk_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain dhcp_data_file (sock_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow appdomain dhcp_data_file (fifo_file (write create setattr relabelfrom relabelto append unlink link rename)))
;;* lme

;;* lmx 726 system/sepolicy/private/app.te

(neverallow base_typeattr_296 apk_tmp_file (file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow base_typeattr_296 apk_tmp_file (dir (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow base_typeattr_296 apk_tmp_file (lnk_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow base_typeattr_296 apk_tmp_file (chr_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow base_typeattr_296 apk_tmp_file (blk_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow base_typeattr_296 apk_tmp_file (sock_file (write create setattr relabelfrom relabelto append unlink link rename)))
(neverallow base_typeattr_296 apk_tmp_file (fifo_file (write create setattr relabelfrom relabelto append unlink link rename)))
;;* lme

;;* lmx 729 system/sepolicy/private/app.te

(neverallow appdomain efs_file (file (write)))
(neverallow appdomain efs_file (dir (write)))
(neverallow appdomain efs_file (lnk_file (write)))
(neverallow appdomain efs_file (chr_file (write)))
(neverallow appdomain efs_file (blk_file (write)))
(neverallow appdomain efs_file (sock_file (write)))
(neverallow appdomain efs_file (fifo_file (write)))
;;* lme

;;* lmx 730 system/sepolicy/private/app.te

(neverallow base_typeattr_294 efs_file (file (read)))
(neverallow base_typeattr_294 efs_file (dir (read)))
(neverallow base_typeattr_294 efs_file (lnk_file (read)))
(neverallow base_typeattr_294 efs_file (chr_file (read)))
(neverallow base_typeattr_294 efs_file (blk_file (read)))
(neverallow base_typeattr_294 efs_file (sock_file (read)))
(neverallow base_typeattr_294 efs_file (fifo_file (read)))
;;* lme

;;* lmx 734 system/sepolicy/private/app.te

(neverallow base_typeattr_298 sysfs (file (write)))
(neverallow base_typeattr_298 sysfs (dir (write)))
(neverallow base_typeattr_298 sysfs (lnk_file (write)))
(neverallow base_typeattr_298 sysfs (chr_file (write)))
(neverallow base_typeattr_298 sysfs (blk_file (write)))
(neverallow base_typeattr_298 sysfs (sock_file (write)))
(neverallow base_typeattr_298 sysfs (fifo_file (write)))
;;* lme

;;* lmx 736 system/sepolicy/private/app.te

(neverallow appdomain proc (file (write)))
(neverallow appdomain proc (dir (write)))
(neverallow appdomain proc (lnk_file (write)))
(neverallow appdomain proc (chr_file (write)))
(neverallow appdomain proc (blk_file (write)))
(neverallow appdomain proc (sock_file (write)))
(neverallow appdomain proc (fifo_file (write)))
;;* lme

;;* lmx 739 system/sepolicy/private/app.te

(neverallow appdomain kernel (system (syslog_read syslog_mod syslog_console)))
;;* lme

;;* lmx 742 system/sepolicy/private/app.te

(neverallow base_typeattr_294 base_typeattr_248 (security (compute_av check_context)))
;;* lme

;;* lmx 743 system/sepolicy/private/app.te

(neverallow base_typeattr_294 base_typeattr_248 (netlink_selinux_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
;;* lme

;;* lmx 747 system/sepolicy/private/app.te

(neverallow appdomain fs_type (filesystem (mount remount unmount relabelfrom relabelto associate quotamod quotaget watch)))
;;* lme

;;* lmx 758 system/sepolicy/private/app.te

(neverallow appdomain dev_type (lnk_file (write create setattr relabelfrom append unlink link rename)))
(neverallow appdomain rootfs (lnk_file (write create setattr relabelfrom append unlink link rename)))
(neverallow appdomain tmpfs (lnk_file (write create setattr relabelfrom append unlink link rename)))
(neverallow appdomain system_file (lnk_file (write create setattr relabelfrom append unlink link rename)))
(neverallow appdomain apk_data_file (lnk_file (write create setattr relabelfrom append unlink link rename)))
(neverallow appdomain cache_file (lnk_file (write create setattr relabelfrom append unlink link rename)))
(neverallow appdomain cache_recovery_file (lnk_file (write create setattr relabelfrom append unlink link rename)))
;;* lme

;;* lmx 764 system/sepolicy/private/app.te

(neverallow base_typeattr_294 input_device (chr_file (ioctl read write create setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
;;* lme

;;* lmx 772 system/sepolicy/private/app.te

(neverallow base_typeattr_299 bluetooth_a2dp_offload_prop (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(neverallow base_typeattr_299 bluetooth_audio_hal_prop (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(neverallow base_typeattr_299 bluetooth_prop (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(neverallow base_typeattr_299 exported_bluetooth_prop (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 775 system/sepolicy/private/app.te

(allow system_app property_socket (sock_file (write)))
;;* lme

;;* lmx 775 system/sepolicy/private/app.te

(allow system_app init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 775 system/sepolicy/private/app.te

(allow system_app nfc_prop (property_service (set)))
;;* lme

;;* lmx 775 system/sepolicy/private/app.te

(allow system_app nfc_prop (file (read getattr map open)))
;;* lme

;;* lmx 778 system/sepolicy/private/app.te

(allow system_app property_socket (sock_file (write)))
;;* lme

;;* lmx 778 system/sepolicy/private/app.te

(allow system_app init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 778 system/sepolicy/private/app.te

(allow system_app radio_control_prop (property_service (set)))
;;* lme

;;* lmx 778 system/sepolicy/private/app.te

(allow system_app radio_control_prop (file (read getattr map open)))
;;* lme

;;* lmx 781 system/sepolicy/private/app.te

(neverallow appdomain proc_uid_time_in_state (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
;;* lme

;;* lmx 784 system/sepolicy/private/app.te

(neverallow appdomain proc_uid_concurrent_active_time (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
;;* lme

;;* lmx 787 system/sepolicy/private/app.te

(neverallow appdomain proc_uid_concurrent_policy_time (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
;;* lme

;;* lmx 790 system/sepolicy/private/app.te

(neverallow appdomain proc_uid_cpupower (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
;;* lme

;;* lmx 795 system/sepolicy/private/app.te

(neverallow base_typeattr_294 proc_net_tcp_udp (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
;;* lme

;;* lmx 803 system/sepolicy/private/app.te

(neverallow appdomain system_bootstrap_lib_file (file (read write append map execute open execute_no_trans)))
;;* lme

;;* lmx 805 system/sepolicy/private/app.te

(neverallow appdomain system_bootstrap_lib_file (dir (read getattr open search)))
;;* lme

;;* lmx 824 system/sepolicy/private/app.te

(neverallow isolated_app_all base_typeattr_300 (file (execute execute_no_trans)))
(neverallow bluetooth base_typeattr_300 (file (execute execute_no_trans)))
(neverallow nfc base_typeattr_300 (file (execute execute_no_trans)))
(neverallow radio base_typeattr_300 (file (execute execute_no_trans)))
(neverallow shared_relro base_typeattr_300 (file (execute execute_no_trans)))
(neverallow system_app base_typeattr_300 (file (execute execute_no_trans)))
(neverallow sdk_sandbox_all base_typeattr_300 (file (execute execute_no_trans)))
;;* lme

;;* lmx 833 system/sepolicy/private/app.te

(neverallow appdomain audio_device (chr_file (read write)))
(neverallow appdomain camera_device (chr_file (read write)))
(neverallow appdomain dm_device (chr_file (read write)))
(neverallow appdomain radio_device (chr_file (read write)))
(neverallow appdomain rpmsg_device (chr_file (read write)))
;;* lme

;;* lmx 840 system/sepolicy/private/app.te

(neverallow base_typeattr_301 video_device (chr_file (read write)))
;;* lme

;;* lmx 852 system/sepolicy/private/app.te

(neverallow base_typeattr_302 apk_data_file (dir (watch watch_reads)))
;;* lme

;;* lmx 860 system/sepolicy/private/app.te

(neverallow base_typeattr_302 apk_data_file (file (watch watch_reads)))
;;* lme

;;* lmx 864 system/sepolicy/private/app.te

(neverallow appdomain system_server (udp_socket (ioctl create setattr lock relabelfrom relabelto append bind listen accept shutdown name_bind)))
;;* lme

;;* lmx 873 system/sepolicy/private/app.te

(neverallow base_typeattr_303 base_typeattr_304 (process (transition)))
;;* lme

;;* lmx 875 system/sepolicy/private/app.te

(neverallow base_typeattr_303 base_typeattr_292 (process (dyntransition)))
;;* lme

;;* lmx 878 system/sepolicy/private/app.te

(neverallow base_typeattr_305 storage_config_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

(dontaudit appdomain system_font_fallback_file (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lmx 882 system/sepolicy/private/app.te

(neverallow appdomain system_font_fallback_file (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 884 system/sepolicy/private/app.te

(neverallow base_typeattr_294 tombstone_data_file (file (ioctl write create setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
;;* lme

;;* lmx 899 system/sepolicy/private/app.te

(allow appdomain trace_data_file (file (read write getattr)))
;;* lme

;;* lmx 900 system/sepolicy/private/app.te

(neverallow base_typeattr_306 trace_data_file (file (ioctl create setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
;;* lme

;;* lmx 901 system/sepolicy/private/app.te

(neverallow base_typeattr_306 trace_data_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 904 system/sepolicy/private/app.te

(neverallowx appdomain system_server_wrapfd (ioctl anon_inode ((range 0x0 0x61ff) (range 0x6300 0xffff))))
;;* lme

;;* lmx 904 system/sepolicy/private/app.te

(neverallowx appdomain system_server_wrapfd (ioctl anon_inode ((range 0x6204 0x62ff))))
;;* lme

;;* lmx 20 system/sepolicy/private/app_neverallows.te

(neverallow untrusted_app_all domain (netlink_kobject_uevent_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app_all domain (netlink_kobject_uevent_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow ephemeral_app domain (netlink_kobject_uevent_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app domain (netlink_kobject_uevent_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_compute_app domain (netlink_kobject_uevent_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider domain (netlink_kobject_uevent_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app domain (netlink_kobject_uevent_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_30 domain (netlink_kobject_uevent_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_29 domain (netlink_kobject_uevent_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_27 domain (netlink_kobject_uevent_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_25 domain (netlink_kobject_uevent_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider_app domain (netlink_kobject_uevent_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
;;* lme

;;* lmx 23 system/sepolicy/private/app_neverallows.te

(neverallow untrusted_app_all domain (netlink_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app_all domain (netlink_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow ephemeral_app domain (netlink_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app domain (netlink_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_compute_app domain (netlink_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider domain (netlink_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app domain (netlink_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_30 domain (netlink_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_29 domain (netlink_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_27 domain (netlink_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_25 domain (netlink_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider_app domain (netlink_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
;;* lme

;;* lmx 26 system/sepolicy/private/app_neverallows.te

(neverallow untrusted_app_all kmsg_device (chr_file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow isolated_app_all kmsg_device (chr_file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow ephemeral_app kmsg_device (chr_file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow isolated_app kmsg_device (chr_file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow isolated_compute_app kmsg_device (chr_file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow mediaprovider kmsg_device (chr_file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow untrusted_app kmsg_device (chr_file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow untrusted_app_30 kmsg_device (chr_file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow untrusted_app_29 kmsg_device (chr_file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow untrusted_app_27 kmsg_device (chr_file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow untrusted_app_25 kmsg_device (chr_file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow mediaprovider_app kmsg_device (chr_file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 30 system/sepolicy/private/app_neverallows.te

(neverallow untrusted_app_all base_typeattr_307 (file (read)))
(neverallow isolated_app_all base_typeattr_307 (file (read)))
(neverallow ephemeral_app base_typeattr_307 (file (read)))
(neverallow isolated_app base_typeattr_307 (file (read)))
(neverallow isolated_compute_app base_typeattr_307 (file (read)))
(neverallow mediaprovider base_typeattr_307 (file (read)))
(neverallow untrusted_app base_typeattr_307 (file (read)))
(neverallow untrusted_app_30 base_typeattr_307 (file (read)))
(neverallow untrusted_app_29 base_typeattr_307 (file (read)))
(neverallow untrusted_app_27 base_typeattr_307 (file (read)))
(neverallow untrusted_app_25 base_typeattr_307 (file (read)))
(neverallow mediaprovider_app base_typeattr_307 (file (read)))
;;* lme

;;* lmx 31 system/sepolicy/private/app_neverallows.te

(neverallow base_typeattr_308 debugfs_type (file (read)))
(neverallow base_typeattr_308 debugfs_type (lnk_file (read)))
;;* lme

;;* lmx 36 system/sepolicy/private/app_neverallows.te

(neverallow untrusted_app_all service_manager_type (service_manager (add)))
(neverallow isolated_app_all service_manager_type (service_manager (add)))
(neverallow ephemeral_app service_manager_type (service_manager (add)))
(neverallow isolated_app service_manager_type (service_manager (add)))
(neverallow isolated_compute_app service_manager_type (service_manager (add)))
(neverallow mediaprovider service_manager_type (service_manager (add)))
(neverallow untrusted_app service_manager_type (service_manager (add)))
(neverallow untrusted_app_30 service_manager_type (service_manager (add)))
(neverallow untrusted_app_29 service_manager_type (service_manager (add)))
(neverallow untrusted_app_27 service_manager_type (service_manager (add)))
(neverallow untrusted_app_25 service_manager_type (service_manager (add)))
(neverallow mediaprovider_app service_manager_type (service_manager (add)))
;;* lme

;;* lmx 39 system/sepolicy/private/app_neverallows.te

(neverallow untrusted_app_all vndbinder_device (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow isolated_app_all vndbinder_device (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow ephemeral_app vndbinder_device (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow isolated_app vndbinder_device (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow isolated_compute_app vndbinder_device (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow mediaprovider vndbinder_device (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow untrusted_app vndbinder_device (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow untrusted_app_30 vndbinder_device (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow untrusted_app_29 vndbinder_device (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow untrusted_app_27 vndbinder_device (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow untrusted_app_25 vndbinder_device (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow mediaprovider_app vndbinder_device (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
;;* lme

;;* lmx 40 system/sepolicy/private/app_neverallows.te

(neverallow untrusted_app_all vndservice_manager_type (service_manager (add find list)))
(neverallow isolated_app_all vndservice_manager_type (service_manager (add find list)))
(neverallow ephemeral_app vndservice_manager_type (service_manager (add find list)))
(neverallow isolated_app vndservice_manager_type (service_manager (add find list)))
(neverallow isolated_compute_app vndservice_manager_type (service_manager (add find list)))
(neverallow mediaprovider vndservice_manager_type (service_manager (add find list)))
(neverallow untrusted_app vndservice_manager_type (service_manager (add find list)))
(neverallow untrusted_app_30 vndservice_manager_type (service_manager (add find list)))
(neverallow untrusted_app_29 vndservice_manager_type (service_manager (add find list)))
(neverallow untrusted_app_27 vndservice_manager_type (service_manager (add find list)))
(neverallow untrusted_app_25 vndservice_manager_type (service_manager (add find list)))
(neverallow mediaprovider_app vndservice_manager_type (service_manager (add find list)))
;;* lme

;;* lmx 44 system/sepolicy/private/app_neverallows.te

(neverallow base_typeattr_309 property_socket (sock_file (write)))
;;* lme

;;* lmx 45 system/sepolicy/private/app_neverallows.te

(neverallow base_typeattr_309 init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 46 system/sepolicy/private/app_neverallows.te

(neverallow base_typeattr_309 property_type (property_service (set)))
;;* lme

;;* lmx 49 system/sepolicy/private/app_neverallows.te

(neverallow untrusted_app_all apk_tmp_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
(neverallow untrusted_app_all apk_tmp_file (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow untrusted_app_all apk_tmp_file (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow untrusted_app_all apk_tmp_file (blk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow untrusted_app_all apk_tmp_file (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow untrusted_app_all apk_tmp_file (fifo_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow untrusted_app_all apk_private_tmp_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
(neverallow untrusted_app_all apk_private_tmp_file (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow untrusted_app_all apk_private_tmp_file (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow untrusted_app_all apk_private_tmp_file (blk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow untrusted_app_all apk_private_tmp_file (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow untrusted_app_all apk_private_tmp_file (fifo_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow isolated_app_all apk_tmp_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
(neverallow isolated_app_all apk_tmp_file (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow isolated_app_all apk_tmp_file (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow isolated_app_all apk_tmp_file (blk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow isolated_app_all apk_tmp_file (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow isolated_app_all apk_tmp_file (fifo_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow isolated_app_all apk_private_tmp_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
(neverallow isolated_app_all apk_private_tmp_file (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow isolated_app_all apk_private_tmp_file (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow isolated_app_all apk_private_tmp_file (blk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow isolated_app_all apk_private_tmp_file (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow isolated_app_all apk_private_tmp_file (fifo_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow ephemeral_app apk_tmp_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
(neverallow ephemeral_app apk_tmp_file (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow ephemeral_app apk_tmp_file (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow ephemeral_app apk_tmp_file (blk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow ephemeral_app apk_tmp_file (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow ephemeral_app apk_tmp_file (fifo_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow ephemeral_app apk_private_tmp_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
(neverallow ephemeral_app apk_private_tmp_file (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow ephemeral_app apk_private_tmp_file (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow ephemeral_app apk_private_tmp_file (blk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow ephemeral_app apk_private_tmp_file (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow ephemeral_app apk_private_tmp_file (fifo_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow isolated_app apk_tmp_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
(neverallow isolated_app apk_tmp_file (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow isolated_app apk_tmp_file (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow isolated_app apk_tmp_file (blk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow isolated_app apk_tmp_file (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow isolated_app apk_tmp_file (fifo_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow isolated_app apk_private_tmp_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
(neverallow isolated_app apk_private_tmp_file (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow isolated_app apk_private_tmp_file (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow isolated_app apk_private_tmp_file (blk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow isolated_app apk_private_tmp_file (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow isolated_app apk_private_tmp_file (fifo_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow isolated_compute_app apk_tmp_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
(neverallow isolated_compute_app apk_tmp_file (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow isolated_compute_app apk_tmp_file (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow isolated_compute_app apk_tmp_file (blk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow isolated_compute_app apk_tmp_file (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow isolated_compute_app apk_tmp_file (fifo_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow isolated_compute_app apk_private_tmp_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
(neverallow isolated_compute_app apk_private_tmp_file (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow isolated_compute_app apk_private_tmp_file (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow isolated_compute_app apk_private_tmp_file (blk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow isolated_compute_app apk_private_tmp_file (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow isolated_compute_app apk_private_tmp_file (fifo_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow mediaprovider apk_tmp_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
(neverallow mediaprovider apk_tmp_file (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow mediaprovider apk_tmp_file (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow mediaprovider apk_tmp_file (blk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow mediaprovider apk_tmp_file (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow mediaprovider apk_tmp_file (fifo_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow mediaprovider apk_private_tmp_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
(neverallow mediaprovider apk_private_tmp_file (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow mediaprovider apk_private_tmp_file (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow mediaprovider apk_private_tmp_file (blk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow mediaprovider apk_private_tmp_file (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow mediaprovider apk_private_tmp_file (fifo_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow untrusted_app apk_tmp_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
(neverallow untrusted_app apk_tmp_file (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow untrusted_app apk_tmp_file (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow untrusted_app apk_tmp_file (blk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow untrusted_app apk_tmp_file (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow untrusted_app apk_tmp_file (fifo_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow untrusted_app apk_private_tmp_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
(neverallow untrusted_app apk_private_tmp_file (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow untrusted_app apk_private_tmp_file (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow untrusted_app apk_private_tmp_file (blk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow untrusted_app apk_private_tmp_file (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow untrusted_app apk_private_tmp_file (fifo_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow untrusted_app_30 apk_tmp_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
(neverallow untrusted_app_30 apk_tmp_file (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow untrusted_app_30 apk_tmp_file (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow untrusted_app_30 apk_tmp_file (blk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow untrusted_app_30 apk_tmp_file (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow untrusted_app_30 apk_tmp_file (fifo_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow untrusted_app_30 apk_private_tmp_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
(neverallow untrusted_app_30 apk_private_tmp_file (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow untrusted_app_30 apk_private_tmp_file (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow untrusted_app_30 apk_private_tmp_file (blk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow untrusted_app_30 apk_private_tmp_file (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow untrusted_app_30 apk_private_tmp_file (fifo_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow untrusted_app_29 apk_tmp_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
(neverallow untrusted_app_29 apk_tmp_file (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow untrusted_app_29 apk_tmp_file (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow untrusted_app_29 apk_tmp_file (blk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow untrusted_app_29 apk_tmp_file (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow untrusted_app_29 apk_tmp_file (fifo_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow untrusted_app_29 apk_private_tmp_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
(neverallow untrusted_app_29 apk_private_tmp_file (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow untrusted_app_29 apk_private_tmp_file (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow untrusted_app_29 apk_private_tmp_file (blk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow untrusted_app_29 apk_private_tmp_file (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow untrusted_app_29 apk_private_tmp_file (fifo_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow untrusted_app_27 apk_tmp_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
(neverallow untrusted_app_27 apk_tmp_file (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow untrusted_app_27 apk_tmp_file (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow untrusted_app_27 apk_tmp_file (blk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow untrusted_app_27 apk_tmp_file (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow untrusted_app_27 apk_tmp_file (fifo_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow untrusted_app_27 apk_private_tmp_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
(neverallow untrusted_app_27 apk_private_tmp_file (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow untrusted_app_27 apk_private_tmp_file (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow untrusted_app_27 apk_private_tmp_file (blk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow untrusted_app_27 apk_private_tmp_file (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow untrusted_app_27 apk_private_tmp_file (fifo_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow untrusted_app_25 apk_tmp_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
(neverallow untrusted_app_25 apk_tmp_file (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow untrusted_app_25 apk_tmp_file (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow untrusted_app_25 apk_tmp_file (blk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow untrusted_app_25 apk_tmp_file (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow untrusted_app_25 apk_tmp_file (fifo_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow untrusted_app_25 apk_private_tmp_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
(neverallow untrusted_app_25 apk_private_tmp_file (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow untrusted_app_25 apk_private_tmp_file (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow untrusted_app_25 apk_private_tmp_file (blk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow untrusted_app_25 apk_private_tmp_file (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow untrusted_app_25 apk_private_tmp_file (fifo_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow mediaprovider_app apk_tmp_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
(neverallow mediaprovider_app apk_tmp_file (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow mediaprovider_app apk_tmp_file (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow mediaprovider_app apk_tmp_file (blk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow mediaprovider_app apk_tmp_file (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow mediaprovider_app apk_tmp_file (fifo_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow mediaprovider_app apk_private_tmp_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
(neverallow mediaprovider_app apk_private_tmp_file (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow mediaprovider_app apk_private_tmp_file (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow mediaprovider_app apk_private_tmp_file (blk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow mediaprovider_app apk_private_tmp_file (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow mediaprovider_app apk_private_tmp_file (fifo_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 50 system/sepolicy/private/app_neverallows.te

(neverallow untrusted_app_all apk_tmp_file (file (ioctl write create setattr lock relabelfrom relabelto append unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow untrusted_app_all apk_private_tmp_file (file (ioctl write create setattr lock relabelfrom relabelto append unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow isolated_app_all apk_tmp_file (file (ioctl write create setattr lock relabelfrom relabelto append unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow isolated_app_all apk_private_tmp_file (file (ioctl write create setattr lock relabelfrom relabelto append unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow ephemeral_app apk_tmp_file (file (ioctl write create setattr lock relabelfrom relabelto append unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow ephemeral_app apk_private_tmp_file (file (ioctl write create setattr lock relabelfrom relabelto append unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow isolated_app apk_tmp_file (file (ioctl write create setattr lock relabelfrom relabelto append unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow isolated_app apk_private_tmp_file (file (ioctl write create setattr lock relabelfrom relabelto append unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow isolated_compute_app apk_tmp_file (file (ioctl write create setattr lock relabelfrom relabelto append unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow isolated_compute_app apk_private_tmp_file (file (ioctl write create setattr lock relabelfrom relabelto append unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow mediaprovider apk_tmp_file (file (ioctl write create setattr lock relabelfrom relabelto append unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow mediaprovider apk_private_tmp_file (file (ioctl write create setattr lock relabelfrom relabelto append unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow untrusted_app apk_tmp_file (file (ioctl write create setattr lock relabelfrom relabelto append unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow untrusted_app apk_private_tmp_file (file (ioctl write create setattr lock relabelfrom relabelto append unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow untrusted_app_30 apk_tmp_file (file (ioctl write create setattr lock relabelfrom relabelto append unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow untrusted_app_30 apk_private_tmp_file (file (ioctl write create setattr lock relabelfrom relabelto append unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow untrusted_app_29 apk_tmp_file (file (ioctl write create setattr lock relabelfrom relabelto append unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow untrusted_app_29 apk_private_tmp_file (file (ioctl write create setattr lock relabelfrom relabelto append unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow untrusted_app_27 apk_tmp_file (file (ioctl write create setattr lock relabelfrom relabelto append unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow untrusted_app_27 apk_private_tmp_file (file (ioctl write create setattr lock relabelfrom relabelto append unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow untrusted_app_25 apk_tmp_file (file (ioctl write create setattr lock relabelfrom relabelto append unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow untrusted_app_25 apk_private_tmp_file (file (ioctl write create setattr lock relabelfrom relabelto append unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow mediaprovider_app apk_tmp_file (file (ioctl write create setattr lock relabelfrom relabelto append unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow mediaprovider_app apk_private_tmp_file (file (ioctl write create setattr lock relabelfrom relabelto append unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
;;* lme

;;* lmx 53 system/sepolicy/private/app_neverallows.te

(neverallow untrusted_app_all net_dns_prop (file (read)))
(neverallow isolated_app_all net_dns_prop (file (read)))
(neverallow ephemeral_app net_dns_prop (file (read)))
(neverallow isolated_app net_dns_prop (file (read)))
(neverallow isolated_compute_app net_dns_prop (file (read)))
(neverallow mediaprovider net_dns_prop (file (read)))
(neverallow untrusted_app net_dns_prop (file (read)))
(neverallow untrusted_app_30 net_dns_prop (file (read)))
(neverallow untrusted_app_29 net_dns_prop (file (read)))
(neverallow untrusted_app_27 net_dns_prop (file (read)))
(neverallow untrusted_app_25 net_dns_prop (file (read)))
(neverallow mediaprovider_app net_dns_prop (file (read)))
;;* lme

;;* lmx 56 system/sepolicy/private/app_neverallows.te

(neverallow untrusted_app_all radio_cdma_ecm_prop (file (read)))
(neverallow isolated_app_all radio_cdma_ecm_prop (file (read)))
(neverallow ephemeral_app radio_cdma_ecm_prop (file (read)))
(neverallow isolated_app radio_cdma_ecm_prop (file (read)))
(neverallow isolated_compute_app radio_cdma_ecm_prop (file (read)))
(neverallow mediaprovider radio_cdma_ecm_prop (file (read)))
(neverallow untrusted_app radio_cdma_ecm_prop (file (read)))
(neverallow untrusted_app_30 radio_cdma_ecm_prop (file (read)))
(neverallow untrusted_app_29 radio_cdma_ecm_prop (file (read)))
(neverallow untrusted_app_27 radio_cdma_ecm_prop (file (read)))
(neverallow untrusted_app_25 radio_cdma_ecm_prop (file (read)))
(neverallow mediaprovider_app radio_cdma_ecm_prop (file (read)))
;;* lme

;;* lmx 62 system/sepolicy/private/app_neverallows.te

(neverallow untrusted_app_all app_exec_data_file (file (write create setattr relabelfrom relabelto append link rename)))
(neverallow isolated_app_all app_exec_data_file (file (write create setattr relabelfrom relabelto append link rename)))
(neverallow ephemeral_app app_exec_data_file (file (write create setattr relabelfrom relabelto append link rename)))
(neverallow isolated_app app_exec_data_file (file (write create setattr relabelfrom relabelto append link rename)))
(neverallow isolated_compute_app app_exec_data_file (file (write create setattr relabelfrom relabelto append link rename)))
(neverallow mediaprovider app_exec_data_file (file (write create setattr relabelfrom relabelto append link rename)))
(neverallow untrusted_app app_exec_data_file (file (write create setattr relabelfrom relabelto append link rename)))
(neverallow untrusted_app_30 app_exec_data_file (file (write create setattr relabelfrom relabelto append link rename)))
(neverallow untrusted_app_29 app_exec_data_file (file (write create setattr relabelfrom relabelto append link rename)))
(neverallow untrusted_app_27 app_exec_data_file (file (write create setattr relabelfrom relabelto append link rename)))
(neverallow untrusted_app_25 app_exec_data_file (file (write create setattr relabelfrom relabelto append link rename)))
(neverallow mediaprovider_app app_exec_data_file (file (write create setattr relabelfrom relabelto append link rename)))
;;* lme

;;* lmx 73 system/sepolicy/private/app_neverallows.te

(neverallow base_typeattr_310 app_data_file (file (execute_no_trans)))
(neverallow base_typeattr_310 privapp_data_file (file (execute_no_trans)))
;;* lme

;;* lmx 97 system/sepolicy/private/app_neverallows.te

(neverallow base_typeattr_311 dex2oat_exec (file (execute execute_no_trans)))
;;* lme

;;* lmx 107 system/sepolicy/private/app_neverallows.te

(neverallow base_typeattr_312 mlstrustedsubject (process (fork)))
;;* lme

;;* lmx 115 system/sepolicy/private/app_neverallows.te

(neverallow untrusted_app_all file_type (file (link)))
(neverallow isolated_app_all file_type (file (link)))
(neverallow ephemeral_app file_type (file (link)))
(neverallow isolated_app file_type (file (link)))
(neverallow isolated_compute_app file_type (file (link)))
(neverallow mediaprovider file_type (file (link)))
(neverallow untrusted_app file_type (file (link)))
(neverallow untrusted_app_30 file_type (file (link)))
(neverallow untrusted_app_29 file_type (file (link)))
(neverallow untrusted_app_27 file_type (file (link)))
(neverallow untrusted_app_25 file_type (file (link)))
(neverallow mediaprovider_app file_type (file (link)))
;;* lme

;;* lmx 118 system/sepolicy/private/app_neverallows.te

(neverallow untrusted_app_all sysfs_net (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow isolated_app_all sysfs_net (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow ephemeral_app sysfs_net (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow isolated_app sysfs_net (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow isolated_compute_app sysfs_net (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow mediaprovider sysfs_net (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow untrusted_app sysfs_net (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow untrusted_app_30 sysfs_net (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow untrusted_app_29 sysfs_net (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow untrusted_app_27 sysfs_net (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow untrusted_app_25 sysfs_net (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow mediaprovider_app sysfs_net (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 121 system/sepolicy/private/app_neverallows.te

(neverallow untrusted_app_all sysfs_type (file (write create setattr relabelfrom append unlink link rename execute execute_no_trans)))
(neverallow isolated_app_all sysfs_type (file (write create setattr relabelfrom append unlink link rename execute execute_no_trans)))
(neverallow ephemeral_app sysfs_type (file (write create setattr relabelfrom append unlink link rename execute execute_no_trans)))
(neverallow isolated_app sysfs_type (file (write create setattr relabelfrom append unlink link rename execute execute_no_trans)))
(neverallow isolated_compute_app sysfs_type (file (write create setattr relabelfrom append unlink link rename execute execute_no_trans)))
(neverallow mediaprovider sysfs_type (file (write create setattr relabelfrom append unlink link rename execute execute_no_trans)))
(neverallow untrusted_app sysfs_type (file (write create setattr relabelfrom append unlink link rename execute execute_no_trans)))
(neverallow untrusted_app_30 sysfs_type (file (write create setattr relabelfrom append unlink link rename execute execute_no_trans)))
(neverallow untrusted_app_29 sysfs_type (file (write create setattr relabelfrom append unlink link rename execute execute_no_trans)))
(neverallow untrusted_app_27 sysfs_type (file (write create setattr relabelfrom append unlink link rename execute execute_no_trans)))
(neverallow untrusted_app_25 sysfs_type (file (write create setattr relabelfrom append unlink link rename execute execute_no_trans)))
(neverallow mediaprovider_app sysfs_type (file (write create setattr relabelfrom append unlink link rename execute execute_no_trans)))
;;* lme

;;* lmx 124 system/sepolicy/private/app_neverallows.te

(neverallow untrusted_app_all sysfs (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow isolated_app_all sysfs (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow ephemeral_app sysfs (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow isolated_app sysfs (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow isolated_compute_app sysfs (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow mediaprovider sysfs (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow untrusted_app sysfs (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow untrusted_app_30 sysfs (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow untrusted_app_29 sysfs (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow untrusted_app_27 sysfs (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow untrusted_app_25 sysfs (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow mediaprovider_app sysfs (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 128 system/sepolicy/private/app_neverallows.te

(neverallowx untrusted_app_all domain (ioctl tcp_socket (0x6900 0x6902)))
(neverallowx untrusted_app_all domain (ioctl udp_socket (0x6900 0x6902)))
(neverallowx untrusted_app_all domain (ioctl rawip_socket (0x6900 0x6902)))
(neverallowx untrusted_app_all domain (ioctl icmp_socket (0x6900 0x6902)))
(neverallowx isolated_app_all domain (ioctl tcp_socket (0x6900 0x6902)))
(neverallowx isolated_app_all domain (ioctl udp_socket (0x6900 0x6902)))
(neverallowx isolated_app_all domain (ioctl rawip_socket (0x6900 0x6902)))
(neverallowx isolated_app_all domain (ioctl icmp_socket (0x6900 0x6902)))
(neverallowx ephemeral_app domain (ioctl tcp_socket (0x6900 0x6902)))
(neverallowx ephemeral_app domain (ioctl udp_socket (0x6900 0x6902)))
(neverallowx ephemeral_app domain (ioctl rawip_socket (0x6900 0x6902)))
(neverallowx ephemeral_app domain (ioctl icmp_socket (0x6900 0x6902)))
(neverallowx isolated_app domain (ioctl tcp_socket (0x6900 0x6902)))
(neverallowx isolated_app domain (ioctl udp_socket (0x6900 0x6902)))
(neverallowx isolated_app domain (ioctl rawip_socket (0x6900 0x6902)))
(neverallowx isolated_app domain (ioctl icmp_socket (0x6900 0x6902)))
(neverallowx isolated_compute_app domain (ioctl tcp_socket (0x6900 0x6902)))
(neverallowx isolated_compute_app domain (ioctl udp_socket (0x6900 0x6902)))
(neverallowx isolated_compute_app domain (ioctl rawip_socket (0x6900 0x6902)))
(neverallowx isolated_compute_app domain (ioctl icmp_socket (0x6900 0x6902)))
(neverallowx mediaprovider domain (ioctl tcp_socket (0x6900 0x6902)))
(neverallowx mediaprovider domain (ioctl udp_socket (0x6900 0x6902)))
(neverallowx mediaprovider domain (ioctl rawip_socket (0x6900 0x6902)))
(neverallowx mediaprovider domain (ioctl icmp_socket (0x6900 0x6902)))
(neverallowx untrusted_app domain (ioctl tcp_socket (0x6900 0x6902)))
(neverallowx untrusted_app domain (ioctl udp_socket (0x6900 0x6902)))
(neverallowx untrusted_app domain (ioctl rawip_socket (0x6900 0x6902)))
(neverallowx untrusted_app domain (ioctl icmp_socket (0x6900 0x6902)))
(neverallowx untrusted_app_30 domain (ioctl tcp_socket (0x6900 0x6902)))
(neverallowx untrusted_app_30 domain (ioctl udp_socket (0x6900 0x6902)))
(neverallowx untrusted_app_30 domain (ioctl rawip_socket (0x6900 0x6902)))
(neverallowx untrusted_app_30 domain (ioctl icmp_socket (0x6900 0x6902)))
(neverallowx untrusted_app_29 domain (ioctl tcp_socket (0x6900 0x6902)))
(neverallowx untrusted_app_29 domain (ioctl udp_socket (0x6900 0x6902)))
(neverallowx untrusted_app_29 domain (ioctl rawip_socket (0x6900 0x6902)))
(neverallowx untrusted_app_29 domain (ioctl icmp_socket (0x6900 0x6902)))
(neverallowx untrusted_app_27 domain (ioctl tcp_socket (0x6900 0x6902)))
(neverallowx untrusted_app_27 domain (ioctl udp_socket (0x6900 0x6902)))
(neverallowx untrusted_app_27 domain (ioctl rawip_socket (0x6900 0x6902)))
(neverallowx untrusted_app_27 domain (ioctl icmp_socket (0x6900 0x6902)))
(neverallowx untrusted_app_25 domain (ioctl tcp_socket (0x6900 0x6902)))
(neverallowx untrusted_app_25 domain (ioctl udp_socket (0x6900 0x6902)))
(neverallowx untrusted_app_25 domain (ioctl rawip_socket (0x6900 0x6902)))
(neverallowx untrusted_app_25 domain (ioctl icmp_socket (0x6900 0x6902)))
(neverallowx mediaprovider_app domain (ioctl tcp_socket (0x6900 0x6902)))
(neverallowx mediaprovider_app domain (ioctl udp_socket (0x6900 0x6902)))
(neverallowx mediaprovider_app domain (ioctl rawip_socket (0x6900 0x6902)))
(neverallowx mediaprovider_app domain (ioctl icmp_socket (0x6900 0x6902)))
;;* lme

;;* lmx 128 system/sepolicy/private/app_neverallows.te

(neverallowx untrusted_app_all domain (ioctl tcp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx untrusted_app_all domain (ioctl udp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx untrusted_app_all domain (ioctl rawip_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx untrusted_app_all domain (ioctl icmp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx isolated_app_all domain (ioctl tcp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx isolated_app_all domain (ioctl udp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx isolated_app_all domain (ioctl rawip_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx isolated_app_all domain (ioctl icmp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx ephemeral_app domain (ioctl tcp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx ephemeral_app domain (ioctl udp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx ephemeral_app domain (ioctl rawip_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx ephemeral_app domain (ioctl icmp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx isolated_app domain (ioctl tcp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx isolated_app domain (ioctl udp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx isolated_app domain (ioctl rawip_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx isolated_app domain (ioctl icmp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx isolated_compute_app domain (ioctl tcp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx isolated_compute_app domain (ioctl udp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx isolated_compute_app domain (ioctl rawip_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx isolated_compute_app domain (ioctl icmp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx mediaprovider domain (ioctl tcp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx mediaprovider domain (ioctl udp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx mediaprovider domain (ioctl rawip_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx mediaprovider domain (ioctl icmp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx untrusted_app domain (ioctl tcp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx untrusted_app domain (ioctl udp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx untrusted_app domain (ioctl rawip_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx untrusted_app domain (ioctl icmp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx untrusted_app_30 domain (ioctl tcp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx untrusted_app_30 domain (ioctl udp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx untrusted_app_30 domain (ioctl rawip_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx untrusted_app_30 domain (ioctl icmp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx untrusted_app_29 domain (ioctl tcp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx untrusted_app_29 domain (ioctl udp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx untrusted_app_29 domain (ioctl rawip_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx untrusted_app_29 domain (ioctl icmp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx untrusted_app_27 domain (ioctl tcp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx untrusted_app_27 domain (ioctl udp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx untrusted_app_27 domain (ioctl rawip_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx untrusted_app_27 domain (ioctl icmp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx untrusted_app_25 domain (ioctl tcp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx untrusted_app_25 domain (ioctl udp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx untrusted_app_25 domain (ioctl rawip_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx untrusted_app_25 domain (ioctl icmp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx mediaprovider_app domain (ioctl tcp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx mediaprovider_app domain (ioctl udp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx mediaprovider_app domain (ioctl rawip_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx mediaprovider_app domain (ioctl icmp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
;;* lme

;;* lmx 128 system/sepolicy/private/app_neverallows.te

(neverallowx untrusted_app_all domain (ioctl tcp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx untrusted_app_all domain (ioctl udp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx untrusted_app_all domain (ioctl rawip_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx untrusted_app_all domain (ioctl icmp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx isolated_app_all domain (ioctl tcp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx isolated_app_all domain (ioctl udp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx isolated_app_all domain (ioctl rawip_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx isolated_app_all domain (ioctl icmp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx ephemeral_app domain (ioctl tcp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx ephemeral_app domain (ioctl udp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx ephemeral_app domain (ioctl rawip_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx ephemeral_app domain (ioctl icmp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx isolated_app domain (ioctl tcp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx isolated_app domain (ioctl udp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx isolated_app domain (ioctl rawip_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx isolated_app domain (ioctl icmp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx isolated_compute_app domain (ioctl tcp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx isolated_compute_app domain (ioctl udp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx isolated_compute_app domain (ioctl rawip_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx isolated_compute_app domain (ioctl icmp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx mediaprovider domain (ioctl tcp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx mediaprovider domain (ioctl udp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx mediaprovider domain (ioctl rawip_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx mediaprovider domain (ioctl icmp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx untrusted_app domain (ioctl tcp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx untrusted_app domain (ioctl udp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx untrusted_app domain (ioctl rawip_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx untrusted_app domain (ioctl icmp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx untrusted_app_30 domain (ioctl tcp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx untrusted_app_30 domain (ioctl udp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx untrusted_app_30 domain (ioctl rawip_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx untrusted_app_30 domain (ioctl icmp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx untrusted_app_29 domain (ioctl tcp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx untrusted_app_29 domain (ioctl udp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx untrusted_app_29 domain (ioctl rawip_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx untrusted_app_29 domain (ioctl icmp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx untrusted_app_27 domain (ioctl tcp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx untrusted_app_27 domain (ioctl udp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx untrusted_app_27 domain (ioctl rawip_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx untrusted_app_27 domain (ioctl icmp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx untrusted_app_25 domain (ioctl tcp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx untrusted_app_25 domain (ioctl udp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx untrusted_app_25 domain (ioctl rawip_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx untrusted_app_25 domain (ioctl icmp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx mediaprovider_app domain (ioctl tcp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx mediaprovider_app domain (ioctl udp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx mediaprovider_app domain (ioctl rawip_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx mediaprovider_app domain (ioctl icmp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
;;* lme

;;* lmx 129 system/sepolicy/private/app_neverallows.te

(neverallow untrusted_app_all base_typeattr_248 (netlink_route_socket (ioctl)))
(neverallow untrusted_app_all base_typeattr_248 (netlink_selinux_socket (ioctl)))
(neverallow isolated_app_all base_typeattr_248 (netlink_route_socket (ioctl)))
(neverallow isolated_app_all base_typeattr_248 (netlink_selinux_socket (ioctl)))
(neverallow ephemeral_app base_typeattr_248 (netlink_route_socket (ioctl)))
(neverallow ephemeral_app base_typeattr_248 (netlink_selinux_socket (ioctl)))
(neverallow isolated_app base_typeattr_248 (netlink_route_socket (ioctl)))
(neverallow isolated_app base_typeattr_248 (netlink_selinux_socket (ioctl)))
(neverallow isolated_compute_app base_typeattr_248 (netlink_route_socket (ioctl)))
(neverallow isolated_compute_app base_typeattr_248 (netlink_selinux_socket (ioctl)))
(neverallow mediaprovider base_typeattr_248 (netlink_route_socket (ioctl)))
(neverallow mediaprovider base_typeattr_248 (netlink_selinux_socket (ioctl)))
(neverallow untrusted_app base_typeattr_248 (netlink_route_socket (ioctl)))
(neverallow untrusted_app base_typeattr_248 (netlink_selinux_socket (ioctl)))
(neverallow untrusted_app_30 base_typeattr_248 (netlink_route_socket (ioctl)))
(neverallow untrusted_app_30 base_typeattr_248 (netlink_selinux_socket (ioctl)))
(neverallow untrusted_app_29 base_typeattr_248 (netlink_route_socket (ioctl)))
(neverallow untrusted_app_29 base_typeattr_248 (netlink_selinux_socket (ioctl)))
(neverallow untrusted_app_27 base_typeattr_248 (netlink_route_socket (ioctl)))
(neverallow untrusted_app_27 base_typeattr_248 (netlink_selinux_socket (ioctl)))
(neverallow untrusted_app_25 base_typeattr_248 (netlink_route_socket (ioctl)))
(neverallow untrusted_app_25 base_typeattr_248 (netlink_selinux_socket (ioctl)))
(neverallow mediaprovider_app base_typeattr_248 (netlink_route_socket (ioctl)))
(neverallow mediaprovider_app base_typeattr_248 (netlink_selinux_socket (ioctl)))
;;* lme

;;* lmx 142 system/sepolicy/private/app_neverallows.te

(neverallow untrusted_app_all base_typeattr_248 (socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_all base_typeattr_248 (netlink_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_all base_typeattr_248 (packet_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_all base_typeattr_248 (key_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_all base_typeattr_248 (netlink_tcpdiag_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write nlmsg)))
(neverallow untrusted_app_all base_typeattr_248 (netlink_nflog_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_all base_typeattr_248 (netlink_xfrm_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write nlmsg)))
(neverallow untrusted_app_all base_typeattr_248 (netlink_audit_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write nlmsg_relay nlmsg_readpriv nlmsg_tty_audit nlmsg)))
(neverallow untrusted_app_all base_typeattr_248 (netlink_dnrt_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_all base_typeattr_248 (netlink_kobject_uevent_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_all base_typeattr_248 (appletalk_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_all base_typeattr_248 (tun_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind attach_queue)))
(neverallow untrusted_app_all base_typeattr_248 (netlink_iscsi_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_all base_typeattr_248 (netlink_fib_lookup_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_all base_typeattr_248 (netlink_connector_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_all base_typeattr_248 (netlink_netfilter_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_all base_typeattr_248 (netlink_generic_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_all base_typeattr_248 (netlink_scsitransport_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_all base_typeattr_248 (netlink_rdma_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_all base_typeattr_248 (netlink_crypto_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_all base_typeattr_248 (sctp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind name_connect association)))
(neverallow untrusted_app_all base_typeattr_248 (ax25_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_all base_typeattr_248 (ipx_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_all base_typeattr_248 (netrom_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_all base_typeattr_248 (atmpvc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_all base_typeattr_248 (x25_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_all base_typeattr_248 (rose_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_all base_typeattr_248 (decnet_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_all base_typeattr_248 (atmsvc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_all base_typeattr_248 (rds_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_all base_typeattr_248 (irda_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_all base_typeattr_248 (pppox_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_all base_typeattr_248 (llc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_all base_typeattr_248 (can_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_all base_typeattr_248 (tipc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_all base_typeattr_248 (bluetooth_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_all base_typeattr_248 (iucv_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_all base_typeattr_248 (rxrpc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_all base_typeattr_248 (isdn_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_all base_typeattr_248 (phonet_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_all base_typeattr_248 (ieee802154_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_all base_typeattr_248 (caif_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_all base_typeattr_248 (alg_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_all base_typeattr_248 (nfc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_all base_typeattr_248 (kcm_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_all base_typeattr_248 (qipcrtr_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_all base_typeattr_248 (smc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_all base_typeattr_248 (xdp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app_all base_typeattr_248 (socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app_all base_typeattr_248 (netlink_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app_all base_typeattr_248 (packet_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app_all base_typeattr_248 (key_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app_all base_typeattr_248 (netlink_tcpdiag_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write nlmsg)))
(neverallow isolated_app_all base_typeattr_248 (netlink_nflog_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app_all base_typeattr_248 (netlink_xfrm_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write nlmsg)))
(neverallow isolated_app_all base_typeattr_248 (netlink_audit_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write nlmsg_relay nlmsg_readpriv nlmsg_tty_audit nlmsg)))
(neverallow isolated_app_all base_typeattr_248 (netlink_dnrt_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app_all base_typeattr_248 (netlink_kobject_uevent_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app_all base_typeattr_248 (appletalk_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app_all base_typeattr_248 (tun_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind attach_queue)))
(neverallow isolated_app_all base_typeattr_248 (netlink_iscsi_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app_all base_typeattr_248 (netlink_fib_lookup_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app_all base_typeattr_248 (netlink_connector_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app_all base_typeattr_248 (netlink_netfilter_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app_all base_typeattr_248 (netlink_generic_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app_all base_typeattr_248 (netlink_scsitransport_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app_all base_typeattr_248 (netlink_rdma_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app_all base_typeattr_248 (netlink_crypto_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app_all base_typeattr_248 (sctp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind name_connect association)))
(neverallow isolated_app_all base_typeattr_248 (ax25_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app_all base_typeattr_248 (ipx_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app_all base_typeattr_248 (netrom_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app_all base_typeattr_248 (atmpvc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app_all base_typeattr_248 (x25_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app_all base_typeattr_248 (rose_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app_all base_typeattr_248 (decnet_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app_all base_typeattr_248 (atmsvc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app_all base_typeattr_248 (rds_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app_all base_typeattr_248 (irda_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app_all base_typeattr_248 (pppox_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app_all base_typeattr_248 (llc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app_all base_typeattr_248 (can_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app_all base_typeattr_248 (tipc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app_all base_typeattr_248 (bluetooth_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app_all base_typeattr_248 (iucv_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app_all base_typeattr_248 (rxrpc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app_all base_typeattr_248 (isdn_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app_all base_typeattr_248 (phonet_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app_all base_typeattr_248 (ieee802154_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app_all base_typeattr_248 (caif_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app_all base_typeattr_248 (alg_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app_all base_typeattr_248 (nfc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app_all base_typeattr_248 (kcm_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app_all base_typeattr_248 (qipcrtr_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app_all base_typeattr_248 (smc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app_all base_typeattr_248 (xdp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow ephemeral_app base_typeattr_248 (socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow ephemeral_app base_typeattr_248 (netlink_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow ephemeral_app base_typeattr_248 (packet_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow ephemeral_app base_typeattr_248 (key_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow ephemeral_app base_typeattr_248 (netlink_tcpdiag_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write nlmsg)))
(neverallow ephemeral_app base_typeattr_248 (netlink_nflog_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow ephemeral_app base_typeattr_248 (netlink_xfrm_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write nlmsg)))
(neverallow ephemeral_app base_typeattr_248 (netlink_audit_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write nlmsg_relay nlmsg_readpriv nlmsg_tty_audit nlmsg)))
(neverallow ephemeral_app base_typeattr_248 (netlink_dnrt_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow ephemeral_app base_typeattr_248 (netlink_kobject_uevent_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow ephemeral_app base_typeattr_248 (appletalk_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow ephemeral_app base_typeattr_248 (tun_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind attach_queue)))
(neverallow ephemeral_app base_typeattr_248 (netlink_iscsi_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow ephemeral_app base_typeattr_248 (netlink_fib_lookup_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow ephemeral_app base_typeattr_248 (netlink_connector_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow ephemeral_app base_typeattr_248 (netlink_netfilter_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow ephemeral_app base_typeattr_248 (netlink_generic_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow ephemeral_app base_typeattr_248 (netlink_scsitransport_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow ephemeral_app base_typeattr_248 (netlink_rdma_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow ephemeral_app base_typeattr_248 (netlink_crypto_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow ephemeral_app base_typeattr_248 (sctp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind name_connect association)))
(neverallow ephemeral_app base_typeattr_248 (ax25_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow ephemeral_app base_typeattr_248 (ipx_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow ephemeral_app base_typeattr_248 (netrom_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow ephemeral_app base_typeattr_248 (atmpvc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow ephemeral_app base_typeattr_248 (x25_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow ephemeral_app base_typeattr_248 (rose_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow ephemeral_app base_typeattr_248 (decnet_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow ephemeral_app base_typeattr_248 (atmsvc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow ephemeral_app base_typeattr_248 (rds_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow ephemeral_app base_typeattr_248 (irda_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow ephemeral_app base_typeattr_248 (pppox_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow ephemeral_app base_typeattr_248 (llc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow ephemeral_app base_typeattr_248 (can_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow ephemeral_app base_typeattr_248 (tipc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow ephemeral_app base_typeattr_248 (bluetooth_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow ephemeral_app base_typeattr_248 (iucv_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow ephemeral_app base_typeattr_248 (rxrpc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow ephemeral_app base_typeattr_248 (isdn_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow ephemeral_app base_typeattr_248 (phonet_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow ephemeral_app base_typeattr_248 (ieee802154_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow ephemeral_app base_typeattr_248 (caif_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow ephemeral_app base_typeattr_248 (alg_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow ephemeral_app base_typeattr_248 (nfc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow ephemeral_app base_typeattr_248 (kcm_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow ephemeral_app base_typeattr_248 (qipcrtr_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow ephemeral_app base_typeattr_248 (smc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow ephemeral_app base_typeattr_248 (xdp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app base_typeattr_248 (socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app base_typeattr_248 (netlink_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app base_typeattr_248 (packet_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app base_typeattr_248 (key_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app base_typeattr_248 (netlink_tcpdiag_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write nlmsg)))
(neverallow isolated_app base_typeattr_248 (netlink_nflog_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app base_typeattr_248 (netlink_xfrm_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write nlmsg)))
(neverallow isolated_app base_typeattr_248 (netlink_audit_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write nlmsg_relay nlmsg_readpriv nlmsg_tty_audit nlmsg)))
(neverallow isolated_app base_typeattr_248 (netlink_dnrt_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app base_typeattr_248 (netlink_kobject_uevent_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app base_typeattr_248 (appletalk_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app base_typeattr_248 (tun_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind attach_queue)))
(neverallow isolated_app base_typeattr_248 (netlink_iscsi_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app base_typeattr_248 (netlink_fib_lookup_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app base_typeattr_248 (netlink_connector_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app base_typeattr_248 (netlink_netfilter_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app base_typeattr_248 (netlink_generic_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app base_typeattr_248 (netlink_scsitransport_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app base_typeattr_248 (netlink_rdma_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app base_typeattr_248 (netlink_crypto_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app base_typeattr_248 (sctp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind name_connect association)))
(neverallow isolated_app base_typeattr_248 (ax25_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app base_typeattr_248 (ipx_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app base_typeattr_248 (netrom_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app base_typeattr_248 (atmpvc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app base_typeattr_248 (x25_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app base_typeattr_248 (rose_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app base_typeattr_248 (decnet_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app base_typeattr_248 (atmsvc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app base_typeattr_248 (rds_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app base_typeattr_248 (irda_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app base_typeattr_248 (pppox_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app base_typeattr_248 (llc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app base_typeattr_248 (can_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app base_typeattr_248 (tipc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app base_typeattr_248 (bluetooth_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app base_typeattr_248 (iucv_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app base_typeattr_248 (rxrpc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app base_typeattr_248 (isdn_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app base_typeattr_248 (phonet_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app base_typeattr_248 (ieee802154_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app base_typeattr_248 (caif_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app base_typeattr_248 (alg_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app base_typeattr_248 (nfc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app base_typeattr_248 (kcm_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app base_typeattr_248 (qipcrtr_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app base_typeattr_248 (smc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app base_typeattr_248 (xdp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_compute_app base_typeattr_248 (socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_compute_app base_typeattr_248 (netlink_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_compute_app base_typeattr_248 (packet_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_compute_app base_typeattr_248 (key_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_compute_app base_typeattr_248 (netlink_tcpdiag_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write nlmsg)))
(neverallow isolated_compute_app base_typeattr_248 (netlink_nflog_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_compute_app base_typeattr_248 (netlink_xfrm_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write nlmsg)))
(neverallow isolated_compute_app base_typeattr_248 (netlink_audit_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write nlmsg_relay nlmsg_readpriv nlmsg_tty_audit nlmsg)))
(neverallow isolated_compute_app base_typeattr_248 (netlink_dnrt_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_compute_app base_typeattr_248 (netlink_kobject_uevent_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_compute_app base_typeattr_248 (appletalk_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_compute_app base_typeattr_248 (tun_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind attach_queue)))
(neverallow isolated_compute_app base_typeattr_248 (netlink_iscsi_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_compute_app base_typeattr_248 (netlink_fib_lookup_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_compute_app base_typeattr_248 (netlink_connector_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_compute_app base_typeattr_248 (netlink_netfilter_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_compute_app base_typeattr_248 (netlink_generic_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_compute_app base_typeattr_248 (netlink_scsitransport_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_compute_app base_typeattr_248 (netlink_rdma_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_compute_app base_typeattr_248 (netlink_crypto_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_compute_app base_typeattr_248 (sctp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind name_connect association)))
(neverallow isolated_compute_app base_typeattr_248 (ax25_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_compute_app base_typeattr_248 (ipx_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_compute_app base_typeattr_248 (netrom_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_compute_app base_typeattr_248 (atmpvc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_compute_app base_typeattr_248 (x25_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_compute_app base_typeattr_248 (rose_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_compute_app base_typeattr_248 (decnet_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_compute_app base_typeattr_248 (atmsvc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_compute_app base_typeattr_248 (rds_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_compute_app base_typeattr_248 (irda_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_compute_app base_typeattr_248 (pppox_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_compute_app base_typeattr_248 (llc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_compute_app base_typeattr_248 (can_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_compute_app base_typeattr_248 (tipc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_compute_app base_typeattr_248 (bluetooth_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_compute_app base_typeattr_248 (iucv_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_compute_app base_typeattr_248 (rxrpc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_compute_app base_typeattr_248 (isdn_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_compute_app base_typeattr_248 (phonet_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_compute_app base_typeattr_248 (ieee802154_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_compute_app base_typeattr_248 (caif_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_compute_app base_typeattr_248 (alg_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_compute_app base_typeattr_248 (nfc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_compute_app base_typeattr_248 (kcm_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_compute_app base_typeattr_248 (qipcrtr_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_compute_app base_typeattr_248 (smc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_compute_app base_typeattr_248 (xdp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider base_typeattr_248 (socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider base_typeattr_248 (netlink_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider base_typeattr_248 (packet_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider base_typeattr_248 (key_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider base_typeattr_248 (netlink_tcpdiag_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write nlmsg)))
(neverallow mediaprovider base_typeattr_248 (netlink_nflog_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider base_typeattr_248 (netlink_xfrm_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write nlmsg)))
(neverallow mediaprovider base_typeattr_248 (netlink_audit_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write nlmsg_relay nlmsg_readpriv nlmsg_tty_audit nlmsg)))
(neverallow mediaprovider base_typeattr_248 (netlink_dnrt_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider base_typeattr_248 (netlink_kobject_uevent_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider base_typeattr_248 (appletalk_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider base_typeattr_248 (tun_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind attach_queue)))
(neverallow mediaprovider base_typeattr_248 (netlink_iscsi_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider base_typeattr_248 (netlink_fib_lookup_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider base_typeattr_248 (netlink_connector_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider base_typeattr_248 (netlink_netfilter_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider base_typeattr_248 (netlink_generic_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider base_typeattr_248 (netlink_scsitransport_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider base_typeattr_248 (netlink_rdma_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider base_typeattr_248 (netlink_crypto_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider base_typeattr_248 (sctp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind name_connect association)))
(neverallow mediaprovider base_typeattr_248 (ax25_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider base_typeattr_248 (ipx_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider base_typeattr_248 (netrom_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider base_typeattr_248 (atmpvc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider base_typeattr_248 (x25_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider base_typeattr_248 (rose_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider base_typeattr_248 (decnet_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider base_typeattr_248 (atmsvc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider base_typeattr_248 (rds_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider base_typeattr_248 (irda_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider base_typeattr_248 (pppox_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider base_typeattr_248 (llc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider base_typeattr_248 (can_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider base_typeattr_248 (tipc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider base_typeattr_248 (bluetooth_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider base_typeattr_248 (iucv_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider base_typeattr_248 (rxrpc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider base_typeattr_248 (isdn_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider base_typeattr_248 (phonet_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider base_typeattr_248 (ieee802154_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider base_typeattr_248 (caif_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider base_typeattr_248 (alg_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider base_typeattr_248 (nfc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider base_typeattr_248 (kcm_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider base_typeattr_248 (qipcrtr_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider base_typeattr_248 (smc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider base_typeattr_248 (xdp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app base_typeattr_248 (socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app base_typeattr_248 (netlink_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app base_typeattr_248 (packet_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app base_typeattr_248 (key_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app base_typeattr_248 (netlink_tcpdiag_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write nlmsg)))
(neverallow untrusted_app base_typeattr_248 (netlink_nflog_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app base_typeattr_248 (netlink_xfrm_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write nlmsg)))
(neverallow untrusted_app base_typeattr_248 (netlink_audit_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write nlmsg_relay nlmsg_readpriv nlmsg_tty_audit nlmsg)))
(neverallow untrusted_app base_typeattr_248 (netlink_dnrt_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app base_typeattr_248 (netlink_kobject_uevent_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app base_typeattr_248 (appletalk_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app base_typeattr_248 (tun_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind attach_queue)))
(neverallow untrusted_app base_typeattr_248 (netlink_iscsi_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app base_typeattr_248 (netlink_fib_lookup_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app base_typeattr_248 (netlink_connector_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app base_typeattr_248 (netlink_netfilter_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app base_typeattr_248 (netlink_generic_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app base_typeattr_248 (netlink_scsitransport_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app base_typeattr_248 (netlink_rdma_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app base_typeattr_248 (netlink_crypto_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app base_typeattr_248 (sctp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind name_connect association)))
(neverallow untrusted_app base_typeattr_248 (ax25_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app base_typeattr_248 (ipx_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app base_typeattr_248 (netrom_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app base_typeattr_248 (atmpvc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app base_typeattr_248 (x25_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app base_typeattr_248 (rose_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app base_typeattr_248 (decnet_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app base_typeattr_248 (atmsvc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app base_typeattr_248 (rds_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app base_typeattr_248 (irda_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app base_typeattr_248 (pppox_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app base_typeattr_248 (llc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app base_typeattr_248 (can_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app base_typeattr_248 (tipc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app base_typeattr_248 (bluetooth_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app base_typeattr_248 (iucv_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app base_typeattr_248 (rxrpc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app base_typeattr_248 (isdn_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app base_typeattr_248 (phonet_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app base_typeattr_248 (ieee802154_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app base_typeattr_248 (caif_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app base_typeattr_248 (alg_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app base_typeattr_248 (nfc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app base_typeattr_248 (kcm_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app base_typeattr_248 (qipcrtr_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app base_typeattr_248 (smc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app base_typeattr_248 (xdp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_30 base_typeattr_248 (socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_30 base_typeattr_248 (netlink_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_30 base_typeattr_248 (packet_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_30 base_typeattr_248 (key_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_30 base_typeattr_248 (netlink_tcpdiag_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write nlmsg)))
(neverallow untrusted_app_30 base_typeattr_248 (netlink_nflog_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_30 base_typeattr_248 (netlink_xfrm_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write nlmsg)))
(neverallow untrusted_app_30 base_typeattr_248 (netlink_audit_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write nlmsg_relay nlmsg_readpriv nlmsg_tty_audit nlmsg)))
(neverallow untrusted_app_30 base_typeattr_248 (netlink_dnrt_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_30 base_typeattr_248 (netlink_kobject_uevent_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_30 base_typeattr_248 (appletalk_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_30 base_typeattr_248 (tun_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind attach_queue)))
(neverallow untrusted_app_30 base_typeattr_248 (netlink_iscsi_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_30 base_typeattr_248 (netlink_fib_lookup_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_30 base_typeattr_248 (netlink_connector_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_30 base_typeattr_248 (netlink_netfilter_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_30 base_typeattr_248 (netlink_generic_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_30 base_typeattr_248 (netlink_scsitransport_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_30 base_typeattr_248 (netlink_rdma_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_30 base_typeattr_248 (netlink_crypto_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_30 base_typeattr_248 (sctp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind name_connect association)))
(neverallow untrusted_app_30 base_typeattr_248 (ax25_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_30 base_typeattr_248 (ipx_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_30 base_typeattr_248 (netrom_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_30 base_typeattr_248 (atmpvc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_30 base_typeattr_248 (x25_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_30 base_typeattr_248 (rose_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_30 base_typeattr_248 (decnet_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_30 base_typeattr_248 (atmsvc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_30 base_typeattr_248 (rds_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_30 base_typeattr_248 (irda_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_30 base_typeattr_248 (pppox_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_30 base_typeattr_248 (llc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_30 base_typeattr_248 (can_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_30 base_typeattr_248 (tipc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_30 base_typeattr_248 (bluetooth_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_30 base_typeattr_248 (iucv_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_30 base_typeattr_248 (rxrpc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_30 base_typeattr_248 (isdn_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_30 base_typeattr_248 (phonet_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_30 base_typeattr_248 (ieee802154_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_30 base_typeattr_248 (caif_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_30 base_typeattr_248 (alg_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_30 base_typeattr_248 (nfc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_30 base_typeattr_248 (kcm_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_30 base_typeattr_248 (qipcrtr_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_30 base_typeattr_248 (smc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_30 base_typeattr_248 (xdp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_29 base_typeattr_248 (socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_29 base_typeattr_248 (netlink_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_29 base_typeattr_248 (packet_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_29 base_typeattr_248 (key_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_29 base_typeattr_248 (netlink_tcpdiag_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write nlmsg)))
(neverallow untrusted_app_29 base_typeattr_248 (netlink_nflog_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_29 base_typeattr_248 (netlink_xfrm_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write nlmsg)))
(neverallow untrusted_app_29 base_typeattr_248 (netlink_audit_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write nlmsg_relay nlmsg_readpriv nlmsg_tty_audit nlmsg)))
(neverallow untrusted_app_29 base_typeattr_248 (netlink_dnrt_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_29 base_typeattr_248 (netlink_kobject_uevent_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_29 base_typeattr_248 (appletalk_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_29 base_typeattr_248 (tun_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind attach_queue)))
(neverallow untrusted_app_29 base_typeattr_248 (netlink_iscsi_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_29 base_typeattr_248 (netlink_fib_lookup_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_29 base_typeattr_248 (netlink_connector_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_29 base_typeattr_248 (netlink_netfilter_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_29 base_typeattr_248 (netlink_generic_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_29 base_typeattr_248 (netlink_scsitransport_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_29 base_typeattr_248 (netlink_rdma_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_29 base_typeattr_248 (netlink_crypto_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_29 base_typeattr_248 (sctp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind name_connect association)))
(neverallow untrusted_app_29 base_typeattr_248 (ax25_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_29 base_typeattr_248 (ipx_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_29 base_typeattr_248 (netrom_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_29 base_typeattr_248 (atmpvc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_29 base_typeattr_248 (x25_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_29 base_typeattr_248 (rose_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_29 base_typeattr_248 (decnet_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_29 base_typeattr_248 (atmsvc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_29 base_typeattr_248 (rds_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_29 base_typeattr_248 (irda_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_29 base_typeattr_248 (pppox_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_29 base_typeattr_248 (llc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_29 base_typeattr_248 (can_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_29 base_typeattr_248 (tipc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_29 base_typeattr_248 (bluetooth_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_29 base_typeattr_248 (iucv_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_29 base_typeattr_248 (rxrpc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_29 base_typeattr_248 (isdn_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_29 base_typeattr_248 (phonet_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_29 base_typeattr_248 (ieee802154_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_29 base_typeattr_248 (caif_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_29 base_typeattr_248 (alg_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_29 base_typeattr_248 (nfc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_29 base_typeattr_248 (kcm_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_29 base_typeattr_248 (qipcrtr_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_29 base_typeattr_248 (smc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_29 base_typeattr_248 (xdp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_27 base_typeattr_248 (socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_27 base_typeattr_248 (netlink_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_27 base_typeattr_248 (packet_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_27 base_typeattr_248 (key_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_27 base_typeattr_248 (netlink_tcpdiag_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write nlmsg)))
(neverallow untrusted_app_27 base_typeattr_248 (netlink_nflog_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_27 base_typeattr_248 (netlink_xfrm_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write nlmsg)))
(neverallow untrusted_app_27 base_typeattr_248 (netlink_audit_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write nlmsg_relay nlmsg_readpriv nlmsg_tty_audit nlmsg)))
(neverallow untrusted_app_27 base_typeattr_248 (netlink_dnrt_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_27 base_typeattr_248 (netlink_kobject_uevent_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_27 base_typeattr_248 (appletalk_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_27 base_typeattr_248 (tun_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind attach_queue)))
(neverallow untrusted_app_27 base_typeattr_248 (netlink_iscsi_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_27 base_typeattr_248 (netlink_fib_lookup_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_27 base_typeattr_248 (netlink_connector_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_27 base_typeattr_248 (netlink_netfilter_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_27 base_typeattr_248 (netlink_generic_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_27 base_typeattr_248 (netlink_scsitransport_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_27 base_typeattr_248 (netlink_rdma_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_27 base_typeattr_248 (netlink_crypto_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_27 base_typeattr_248 (sctp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind name_connect association)))
(neverallow untrusted_app_27 base_typeattr_248 (ax25_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_27 base_typeattr_248 (ipx_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_27 base_typeattr_248 (netrom_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_27 base_typeattr_248 (atmpvc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_27 base_typeattr_248 (x25_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_27 base_typeattr_248 (rose_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_27 base_typeattr_248 (decnet_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_27 base_typeattr_248 (atmsvc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_27 base_typeattr_248 (rds_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_27 base_typeattr_248 (irda_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_27 base_typeattr_248 (pppox_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_27 base_typeattr_248 (llc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_27 base_typeattr_248 (can_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_27 base_typeattr_248 (tipc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_27 base_typeattr_248 (bluetooth_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_27 base_typeattr_248 (iucv_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_27 base_typeattr_248 (rxrpc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_27 base_typeattr_248 (isdn_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_27 base_typeattr_248 (phonet_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_27 base_typeattr_248 (ieee802154_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_27 base_typeattr_248 (caif_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_27 base_typeattr_248 (alg_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_27 base_typeattr_248 (nfc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_27 base_typeattr_248 (kcm_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_27 base_typeattr_248 (qipcrtr_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_27 base_typeattr_248 (smc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_27 base_typeattr_248 (xdp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_25 base_typeattr_248 (socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_25 base_typeattr_248 (netlink_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_25 base_typeattr_248 (packet_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_25 base_typeattr_248 (key_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_25 base_typeattr_248 (netlink_tcpdiag_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write nlmsg)))
(neverallow untrusted_app_25 base_typeattr_248 (netlink_nflog_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_25 base_typeattr_248 (netlink_xfrm_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write nlmsg)))
(neverallow untrusted_app_25 base_typeattr_248 (netlink_audit_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write nlmsg_relay nlmsg_readpriv nlmsg_tty_audit nlmsg)))
(neverallow untrusted_app_25 base_typeattr_248 (netlink_dnrt_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_25 base_typeattr_248 (netlink_kobject_uevent_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_25 base_typeattr_248 (appletalk_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_25 base_typeattr_248 (tun_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind attach_queue)))
(neverallow untrusted_app_25 base_typeattr_248 (netlink_iscsi_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_25 base_typeattr_248 (netlink_fib_lookup_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_25 base_typeattr_248 (netlink_connector_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_25 base_typeattr_248 (netlink_netfilter_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_25 base_typeattr_248 (netlink_generic_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_25 base_typeattr_248 (netlink_scsitransport_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_25 base_typeattr_248 (netlink_rdma_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_25 base_typeattr_248 (netlink_crypto_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_25 base_typeattr_248 (sctp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind name_connect association)))
(neverallow untrusted_app_25 base_typeattr_248 (ax25_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_25 base_typeattr_248 (ipx_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_25 base_typeattr_248 (netrom_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_25 base_typeattr_248 (atmpvc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_25 base_typeattr_248 (x25_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_25 base_typeattr_248 (rose_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_25 base_typeattr_248 (decnet_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_25 base_typeattr_248 (atmsvc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_25 base_typeattr_248 (rds_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_25 base_typeattr_248 (irda_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_25 base_typeattr_248 (pppox_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_25 base_typeattr_248 (llc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_25 base_typeattr_248 (can_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_25 base_typeattr_248 (tipc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_25 base_typeattr_248 (bluetooth_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_25 base_typeattr_248 (iucv_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_25 base_typeattr_248 (rxrpc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_25 base_typeattr_248 (isdn_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_25 base_typeattr_248 (phonet_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_25 base_typeattr_248 (ieee802154_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_25 base_typeattr_248 (caif_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_25 base_typeattr_248 (alg_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_25 base_typeattr_248 (nfc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_25 base_typeattr_248 (kcm_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_25 base_typeattr_248 (qipcrtr_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_25 base_typeattr_248 (smc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_25 base_typeattr_248 (xdp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider_app base_typeattr_248 (socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider_app base_typeattr_248 (netlink_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider_app base_typeattr_248 (packet_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider_app base_typeattr_248 (key_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider_app base_typeattr_248 (netlink_tcpdiag_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write nlmsg)))
(neverallow mediaprovider_app base_typeattr_248 (netlink_nflog_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider_app base_typeattr_248 (netlink_xfrm_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write nlmsg)))
(neverallow mediaprovider_app base_typeattr_248 (netlink_audit_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write nlmsg_relay nlmsg_readpriv nlmsg_tty_audit nlmsg)))
(neverallow mediaprovider_app base_typeattr_248 (netlink_dnrt_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider_app base_typeattr_248 (netlink_kobject_uevent_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider_app base_typeattr_248 (appletalk_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider_app base_typeattr_248 (tun_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind attach_queue)))
(neverallow mediaprovider_app base_typeattr_248 (netlink_iscsi_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider_app base_typeattr_248 (netlink_fib_lookup_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider_app base_typeattr_248 (netlink_connector_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider_app base_typeattr_248 (netlink_netfilter_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider_app base_typeattr_248 (netlink_generic_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider_app base_typeattr_248 (netlink_scsitransport_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider_app base_typeattr_248 (netlink_rdma_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider_app base_typeattr_248 (netlink_crypto_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider_app base_typeattr_248 (sctp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind name_connect association)))
(neverallow mediaprovider_app base_typeattr_248 (ax25_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider_app base_typeattr_248 (ipx_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider_app base_typeattr_248 (netrom_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider_app base_typeattr_248 (atmpvc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider_app base_typeattr_248 (x25_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider_app base_typeattr_248 (rose_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider_app base_typeattr_248 (decnet_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider_app base_typeattr_248 (atmsvc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider_app base_typeattr_248 (rds_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider_app base_typeattr_248 (irda_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider_app base_typeattr_248 (pppox_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider_app base_typeattr_248 (llc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider_app base_typeattr_248 (can_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider_app base_typeattr_248 (tipc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider_app base_typeattr_248 (bluetooth_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider_app base_typeattr_248 (iucv_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider_app base_typeattr_248 (rxrpc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider_app base_typeattr_248 (isdn_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider_app base_typeattr_248 (phonet_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider_app base_typeattr_248 (ieee802154_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider_app base_typeattr_248 (caif_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider_app base_typeattr_248 (alg_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider_app base_typeattr_248 (nfc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider_app base_typeattr_248 (kcm_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider_app base_typeattr_248 (qipcrtr_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider_app base_typeattr_248 (smc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider_app base_typeattr_248 (xdp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
;;* lme

;;* lmx 147 system/sepolicy/private/app_neverallows.te

(neverallow untrusted_app_all base_typeattr_248 (vsock_socket (ioctl create setattr lock relabelfrom relabelto append map bind connect listen accept setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app_all base_typeattr_248 (vsock_socket (ioctl create setattr lock relabelfrom relabelto append map bind connect listen accept setopt shutdown recvfrom sendto name_bind)))
(neverallow ephemeral_app base_typeattr_248 (vsock_socket (ioctl create setattr lock relabelfrom relabelto append map bind connect listen accept setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_app base_typeattr_248 (vsock_socket (ioctl create setattr lock relabelfrom relabelto append map bind connect listen accept setopt shutdown recvfrom sendto name_bind)))
(neverallow isolated_compute_app base_typeattr_248 (vsock_socket (ioctl create setattr lock relabelfrom relabelto append map bind connect listen accept setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider base_typeattr_248 (vsock_socket (ioctl create setattr lock relabelfrom relabelto append map bind connect listen accept setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app base_typeattr_248 (vsock_socket (ioctl create setattr lock relabelfrom relabelto append map bind connect listen accept setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_30 base_typeattr_248 (vsock_socket (ioctl create setattr lock relabelfrom relabelto append map bind connect listen accept setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_29 base_typeattr_248 (vsock_socket (ioctl create setattr lock relabelfrom relabelto append map bind connect listen accept setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_27 base_typeattr_248 (vsock_socket (ioctl create setattr lock relabelfrom relabelto append map bind connect listen accept setopt shutdown recvfrom sendto name_bind)))
(neverallow untrusted_app_25 base_typeattr_248 (vsock_socket (ioctl create setattr lock relabelfrom relabelto append map bind connect listen accept setopt shutdown recvfrom sendto name_bind)))
(neverallow mediaprovider_app base_typeattr_248 (vsock_socket (ioctl create setattr lock relabelfrom relabelto append map bind connect listen accept setopt shutdown recvfrom sendto name_bind)))
;;* lme

;;* lmx 150 system/sepolicy/private/app_neverallows.te

(neverallow untrusted_app_all domain (netlink_route_socket (bind nlmsg_readpriv)))
(neverallow isolated_app_all domain (netlink_route_socket (bind nlmsg_readpriv)))
(neverallow ephemeral_app domain (netlink_route_socket (bind nlmsg_readpriv)))
(neverallow isolated_app domain (netlink_route_socket (bind nlmsg_readpriv)))
(neverallow isolated_compute_app domain (netlink_route_socket (bind nlmsg_readpriv)))
(neverallow mediaprovider domain (netlink_route_socket (bind nlmsg_readpriv)))
(neverallow untrusted_app domain (netlink_route_socket (bind nlmsg_readpriv)))
(neverallow untrusted_app_30 domain (netlink_route_socket (bind nlmsg_readpriv)))
(neverallow untrusted_app_29 domain (netlink_route_socket (bind nlmsg_readpriv)))
(neverallow untrusted_app_27 domain (netlink_route_socket (bind nlmsg_readpriv)))
(neverallow untrusted_app_25 domain (netlink_route_socket (bind nlmsg_readpriv)))
(neverallow mediaprovider_app domain (netlink_route_socket (bind nlmsg_readpriv)))
;;* lme

;;* lmx 151 system/sepolicy/private/app_neverallows.te

(neverallowx untrusted_app_all domain (nlmsg netlink_route_socket (0x12)))
(neverallowx isolated_app_all domain (nlmsg netlink_route_socket (0x12)))
(neverallowx ephemeral_app domain (nlmsg netlink_route_socket (0x12)))
(neverallowx isolated_app domain (nlmsg netlink_route_socket (0x12)))
(neverallowx isolated_compute_app domain (nlmsg netlink_route_socket (0x12)))
(neverallowx mediaprovider domain (nlmsg netlink_route_socket (0x12)))
(neverallowx untrusted_app domain (nlmsg netlink_route_socket (0x12)))
(neverallowx untrusted_app_30 domain (nlmsg netlink_route_socket (0x12)))
(neverallowx untrusted_app_29 domain (nlmsg netlink_route_socket (0x12)))
(neverallowx untrusted_app_27 domain (nlmsg netlink_route_socket (0x12)))
(neverallowx untrusted_app_25 domain (nlmsg netlink_route_socket (0x12)))
(neverallowx mediaprovider_app domain (nlmsg netlink_route_socket (0x12)))
;;* lme

;;* lmx 160 system/sepolicy/private/app_neverallows.te

(neverallow base_typeattr_313 domain (netlink_route_socket (nlmsg_getneigh)))
;;* lme

;;* lmx 167 system/sepolicy/private/app_neverallows.te

(neverallowx base_typeattr_313 domain (nlmsg netlink_route_socket (0x1e)))
;;* lme

;;* lmx 170 system/sepolicy/private/app_neverallows.te

(neverallow base_typeattr_309 cache_file (dir (write create setattr relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access execmod watch_mount watch_sb watch_with_perm add_name remove_name reparent rmdir)))
(neverallow base_typeattr_309 cache_recovery_file (dir (write create setattr relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access execmod watch_mount watch_sb watch_with_perm add_name remove_name reparent rmdir)))
;;* lme

;;* lmx 171 system/sepolicy/private/app_neverallows.te

(neverallow base_typeattr_309 cache_file (file (ioctl write create setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow base_typeattr_309 cache_recovery_file (file (ioctl write create setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
;;* lme

;;* lmx 194 system/sepolicy/private/app_neverallows.te

(neverallow base_typeattr_309 base_typeattr_314 (file (create unlink)))
(neverallow base_typeattr_309 base_typeattr_314 (dir (create unlink)))
(neverallow base_typeattr_309 base_typeattr_314 (lnk_file (create unlink)))
(neverallow base_typeattr_309 base_typeattr_314 (chr_file (create unlink)))
(neverallow base_typeattr_309 base_typeattr_314 (blk_file (create unlink)))
(neverallow base_typeattr_309 base_typeattr_314 (sock_file (create unlink)))
(neverallow base_typeattr_309 base_typeattr_314 (fifo_file (create unlink)))
;;* lme

;;* lmx 197 system/sepolicy/private/app_neverallows.te

(neverallow base_typeattr_312 fuse_device (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
;;* lme

;;* lmx 200 system/sepolicy/private/app_neverallows.te

(neverallow untrusted_app_all tun_device (chr_file (open)))
(neverallow isolated_app_all tun_device (chr_file (open)))
(neverallow ephemeral_app tun_device (chr_file (open)))
(neverallow isolated_app tun_device (chr_file (open)))
(neverallow isolated_compute_app tun_device (chr_file (open)))
(neverallow mediaprovider tun_device (chr_file (open)))
(neverallow untrusted_app tun_device (chr_file (open)))
(neverallow untrusted_app_30 tun_device (chr_file (open)))
(neverallow untrusted_app_29 tun_device (chr_file (open)))
(neverallow untrusted_app_27 tun_device (chr_file (open)))
(neverallow untrusted_app_25 tun_device (chr_file (open)))
(neverallow mediaprovider_app tun_device (chr_file (open)))
;;* lme

;;* lmx 204 system/sepolicy/private/app_neverallows.te

(neverallowx untrusted_app_all tun_device (ioctl chr_file ((range 0x0 0x53ff) (range 0x5500 0xffff))))
(neverallowx isolated_app_all tun_device (ioctl chr_file ((range 0x0 0x53ff) (range 0x5500 0xffff))))
(neverallowx ephemeral_app tun_device (ioctl chr_file ((range 0x0 0x53ff) (range 0x5500 0xffff))))
(neverallowx isolated_app tun_device (ioctl chr_file ((range 0x0 0x53ff) (range 0x5500 0xffff))))
(neverallowx isolated_compute_app tun_device (ioctl chr_file ((range 0x0 0x53ff) (range 0x5500 0xffff))))
(neverallowx mediaprovider tun_device (ioctl chr_file ((range 0x0 0x53ff) (range 0x5500 0xffff))))
(neverallowx untrusted_app tun_device (ioctl chr_file ((range 0x0 0x53ff) (range 0x5500 0xffff))))
(neverallowx untrusted_app_30 tun_device (ioctl chr_file ((range 0x0 0x53ff) (range 0x5500 0xffff))))
(neverallowx untrusted_app_29 tun_device (ioctl chr_file ((range 0x0 0x53ff) (range 0x5500 0xffff))))
(neverallowx untrusted_app_27 tun_device (ioctl chr_file ((range 0x0 0x53ff) (range 0x5500 0xffff))))
(neverallowx untrusted_app_25 tun_device (ioctl chr_file ((range 0x0 0x53ff) (range 0x5500 0xffff))))
(neverallowx mediaprovider_app tun_device (ioctl chr_file ((range 0x0 0x53ff) (range 0x5500 0xffff))))
;;* lme

;;* lmx 204 system/sepolicy/private/app_neverallows.te

(neverallowx untrusted_app_all tun_device (ioctl chr_file ((range 0x5400 0x544f) (range 0x5452 0x54d1) (range 0x54d3 0x54ff))))
(neverallowx isolated_app_all tun_device (ioctl chr_file ((range 0x5400 0x544f) (range 0x5452 0x54d1) (range 0x54d3 0x54ff))))
(neverallowx ephemeral_app tun_device (ioctl chr_file ((range 0x5400 0x544f) (range 0x5452 0x54d1) (range 0x54d3 0x54ff))))
(neverallowx isolated_app tun_device (ioctl chr_file ((range 0x5400 0x544f) (range 0x5452 0x54d1) (range 0x54d3 0x54ff))))
(neverallowx isolated_compute_app tun_device (ioctl chr_file ((range 0x5400 0x544f) (range 0x5452 0x54d1) (range 0x54d3 0x54ff))))
(neverallowx mediaprovider tun_device (ioctl chr_file ((range 0x5400 0x544f) (range 0x5452 0x54d1) (range 0x54d3 0x54ff))))
(neverallowx untrusted_app tun_device (ioctl chr_file ((range 0x5400 0x544f) (range 0x5452 0x54d1) (range 0x54d3 0x54ff))))
(neverallowx untrusted_app_30 tun_device (ioctl chr_file ((range 0x5400 0x544f) (range 0x5452 0x54d1) (range 0x54d3 0x54ff))))
(neverallowx untrusted_app_29 tun_device (ioctl chr_file ((range 0x5400 0x544f) (range 0x5452 0x54d1) (range 0x54d3 0x54ff))))
(neverallowx untrusted_app_27 tun_device (ioctl chr_file ((range 0x5400 0x544f) (range 0x5452 0x54d1) (range 0x54d3 0x54ff))))
(neverallowx untrusted_app_25 tun_device (ioctl chr_file ((range 0x5400 0x544f) (range 0x5452 0x54d1) (range 0x54d3 0x54ff))))
(neverallowx mediaprovider_app tun_device (ioctl chr_file ((range 0x5400 0x544f) (range 0x5452 0x54d1) (range 0x54d3 0x54ff))))
;;* lme

;;* lmx 207 system/sepolicy/private/app_neverallows.te

(neverallow untrusted_app_all anr_data_file (file (ioctl read write create getattr setattr lock relabelfrom relabelto map unlink link rename execute quotaon mounton audit_access execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow isolated_app_all anr_data_file (file (ioctl read write create getattr setattr lock relabelfrom relabelto map unlink link rename execute quotaon mounton audit_access execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow ephemeral_app anr_data_file (file (ioctl read write create getattr setattr lock relabelfrom relabelto map unlink link rename execute quotaon mounton audit_access execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow isolated_app anr_data_file (file (ioctl read write create getattr setattr lock relabelfrom relabelto map unlink link rename execute quotaon mounton audit_access execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow isolated_compute_app anr_data_file (file (ioctl read write create getattr setattr lock relabelfrom relabelto map unlink link rename execute quotaon mounton audit_access execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow mediaprovider anr_data_file (file (ioctl read write create getattr setattr lock relabelfrom relabelto map unlink link rename execute quotaon mounton audit_access execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow untrusted_app anr_data_file (file (ioctl read write create getattr setattr lock relabelfrom relabelto map unlink link rename execute quotaon mounton audit_access execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow untrusted_app_30 anr_data_file (file (ioctl read write create getattr setattr lock relabelfrom relabelto map unlink link rename execute quotaon mounton audit_access execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow untrusted_app_29 anr_data_file (file (ioctl read write create getattr setattr lock relabelfrom relabelto map unlink link rename execute quotaon mounton audit_access execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow untrusted_app_27 anr_data_file (file (ioctl read write create getattr setattr lock relabelfrom relabelto map unlink link rename execute quotaon mounton audit_access execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow untrusted_app_25 anr_data_file (file (ioctl read write create getattr setattr lock relabelfrom relabelto map unlink link rename execute quotaon mounton audit_access execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow mediaprovider_app anr_data_file (file (ioctl read write create getattr setattr lock relabelfrom relabelto map unlink link rename execute quotaon mounton audit_access execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
;;* lme

;;* lmx 208 system/sepolicy/private/app_neverallows.te

(neverallow untrusted_app_all anr_data_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent rmdir)))
(neverallow isolated_app_all anr_data_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent rmdir)))
(neverallow ephemeral_app anr_data_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent rmdir)))
(neverallow isolated_app anr_data_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent rmdir)))
(neverallow isolated_compute_app anr_data_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent rmdir)))
(neverallow mediaprovider anr_data_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent rmdir)))
(neverallow untrusted_app anr_data_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent rmdir)))
(neverallow untrusted_app_30 anr_data_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent rmdir)))
(neverallow untrusted_app_29 anr_data_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent rmdir)))
(neverallow untrusted_app_27 anr_data_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent rmdir)))
(neverallow untrusted_app_25 anr_data_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent rmdir)))
(neverallow mediaprovider_app anr_data_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent rmdir)))
;;* lme

;;* lmx 227 system/sepolicy/private/app_neverallows.te

(neverallow untrusted_app_all proc (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow untrusted_app_all proc_asound (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow untrusted_app_all proc_kmsg (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow untrusted_app_all proc_loadavg (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow untrusted_app_all proc_mounts (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow untrusted_app_all proc_pagetypeinfo (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow untrusted_app_all proc_slabinfo (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow untrusted_app_all proc_stat (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow untrusted_app_all proc_swaps (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow untrusted_app_all proc_uptime (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow untrusted_app_all proc_version (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow untrusted_app_all proc_vmallocinfo (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow untrusted_app_all proc_vmstat (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow untrusted_app_all proc_allocinfo (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow isolated_app_all proc (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow isolated_app_all proc_asound (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow isolated_app_all proc_kmsg (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow isolated_app_all proc_loadavg (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow isolated_app_all proc_mounts (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow isolated_app_all proc_pagetypeinfo (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow isolated_app_all proc_slabinfo (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow isolated_app_all proc_stat (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow isolated_app_all proc_swaps (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow isolated_app_all proc_uptime (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow isolated_app_all proc_version (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow isolated_app_all proc_vmallocinfo (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow isolated_app_all proc_vmstat (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow isolated_app_all proc_allocinfo (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow ephemeral_app proc (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow ephemeral_app proc_asound (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow ephemeral_app proc_kmsg (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow ephemeral_app proc_loadavg (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow ephemeral_app proc_mounts (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow ephemeral_app proc_pagetypeinfo (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow ephemeral_app proc_slabinfo (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow ephemeral_app proc_stat (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow ephemeral_app proc_swaps (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow ephemeral_app proc_uptime (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow ephemeral_app proc_version (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow ephemeral_app proc_vmallocinfo (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow ephemeral_app proc_vmstat (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow ephemeral_app proc_allocinfo (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow isolated_app proc (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow isolated_app proc_asound (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow isolated_app proc_kmsg (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow isolated_app proc_loadavg (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow isolated_app proc_mounts (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow isolated_app proc_pagetypeinfo (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow isolated_app proc_slabinfo (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow isolated_app proc_stat (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow isolated_app proc_swaps (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow isolated_app proc_uptime (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow isolated_app proc_version (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow isolated_app proc_vmallocinfo (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow isolated_app proc_vmstat (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow isolated_app proc_allocinfo (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow isolated_compute_app proc (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow isolated_compute_app proc_asound (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow isolated_compute_app proc_kmsg (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow isolated_compute_app proc_loadavg (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow isolated_compute_app proc_mounts (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow isolated_compute_app proc_pagetypeinfo (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow isolated_compute_app proc_slabinfo (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow isolated_compute_app proc_stat (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow isolated_compute_app proc_swaps (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow isolated_compute_app proc_uptime (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow isolated_compute_app proc_version (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow isolated_compute_app proc_vmallocinfo (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow isolated_compute_app proc_vmstat (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow isolated_compute_app proc_allocinfo (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow mediaprovider proc (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow mediaprovider proc_asound (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow mediaprovider proc_kmsg (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow mediaprovider proc_loadavg (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow mediaprovider proc_mounts (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow mediaprovider proc_pagetypeinfo (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow mediaprovider proc_slabinfo (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow mediaprovider proc_stat (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow mediaprovider proc_swaps (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow mediaprovider proc_uptime (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow mediaprovider proc_version (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow mediaprovider proc_vmallocinfo (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow mediaprovider proc_vmstat (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow mediaprovider proc_allocinfo (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow untrusted_app proc (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow untrusted_app proc_asound (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow untrusted_app proc_kmsg (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow untrusted_app proc_loadavg (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow untrusted_app proc_mounts (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow untrusted_app proc_pagetypeinfo (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow untrusted_app proc_slabinfo (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow untrusted_app proc_stat (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow untrusted_app proc_swaps (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow untrusted_app proc_uptime (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow untrusted_app proc_version (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow untrusted_app proc_vmallocinfo (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow untrusted_app proc_vmstat (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow untrusted_app proc_allocinfo (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow untrusted_app_30 proc (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow untrusted_app_30 proc_asound (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow untrusted_app_30 proc_kmsg (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow untrusted_app_30 proc_loadavg (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow untrusted_app_30 proc_mounts (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow untrusted_app_30 proc_pagetypeinfo (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow untrusted_app_30 proc_slabinfo (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow untrusted_app_30 proc_stat (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow untrusted_app_30 proc_swaps (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow untrusted_app_30 proc_uptime (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow untrusted_app_30 proc_version (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow untrusted_app_30 proc_vmallocinfo (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow untrusted_app_30 proc_vmstat (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow untrusted_app_30 proc_allocinfo (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow untrusted_app_29 proc (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow untrusted_app_29 proc_asound (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow untrusted_app_29 proc_kmsg (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow untrusted_app_29 proc_loadavg (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow untrusted_app_29 proc_mounts (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow untrusted_app_29 proc_pagetypeinfo (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow untrusted_app_29 proc_slabinfo (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow untrusted_app_29 proc_stat (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow untrusted_app_29 proc_swaps (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow untrusted_app_29 proc_uptime (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow untrusted_app_29 proc_version (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow untrusted_app_29 proc_vmallocinfo (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow untrusted_app_29 proc_vmstat (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow untrusted_app_29 proc_allocinfo (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow untrusted_app_27 proc (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow untrusted_app_27 proc_asound (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow untrusted_app_27 proc_kmsg (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow untrusted_app_27 proc_loadavg (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow untrusted_app_27 proc_mounts (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow untrusted_app_27 proc_pagetypeinfo (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow untrusted_app_27 proc_slabinfo (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow untrusted_app_27 proc_stat (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow untrusted_app_27 proc_swaps (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow untrusted_app_27 proc_uptime (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow untrusted_app_27 proc_version (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow untrusted_app_27 proc_vmallocinfo (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow untrusted_app_27 proc_vmstat (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow untrusted_app_27 proc_allocinfo (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow untrusted_app_25 proc (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow untrusted_app_25 proc_asound (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow untrusted_app_25 proc_kmsg (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow untrusted_app_25 proc_loadavg (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow untrusted_app_25 proc_mounts (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow untrusted_app_25 proc_pagetypeinfo (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow untrusted_app_25 proc_slabinfo (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow untrusted_app_25 proc_stat (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow untrusted_app_25 proc_swaps (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow untrusted_app_25 proc_uptime (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow untrusted_app_25 proc_version (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow untrusted_app_25 proc_vmallocinfo (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow untrusted_app_25 proc_vmstat (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow untrusted_app_25 proc_allocinfo (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow mediaprovider_app proc (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow mediaprovider_app proc_asound (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow mediaprovider_app proc_kmsg (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow mediaprovider_app proc_loadavg (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow mediaprovider_app proc_mounts (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow mediaprovider_app proc_pagetypeinfo (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow mediaprovider_app proc_slabinfo (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow mediaprovider_app proc_stat (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow mediaprovider_app proc_swaps (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow mediaprovider_app proc_uptime (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow mediaprovider_app proc_version (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow mediaprovider_app proc_vmallocinfo (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow mediaprovider_app proc_vmstat (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow mediaprovider_app proc_allocinfo (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
;;* lme

;;* lmx 231 system/sepolicy/private/app_neverallows.te

(neverallow base_typeattr_312 proc_filesystems (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
;;* lme

;;* lmx 234 system/sepolicy/private/app_neverallows.te

(neverallow untrusted_app_all config_gz (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow isolated_app_all config_gz (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow ephemeral_app config_gz (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow isolated_app config_gz (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow isolated_compute_app config_gz (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow mediaprovider config_gz (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow untrusted_app config_gz (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow untrusted_app_30 config_gz (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow untrusted_app_29 config_gz (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow untrusted_app_27 config_gz (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow untrusted_app_25 config_gz (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(neverallow mediaprovider_app config_gz (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
;;* lme

;;* lmx 237 system/sepolicy/private/app_neverallows.te

(neverallow untrusted_app_all preloads_data_file (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow isolated_app_all preloads_data_file (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow ephemeral_app preloads_data_file (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow isolated_app preloads_data_file (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow isolated_compute_app preloads_data_file (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow mediaprovider preloads_data_file (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow untrusted_app preloads_data_file (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow untrusted_app_30 preloads_data_file (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow untrusted_app_29 preloads_data_file (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow untrusted_app_27 preloads_data_file (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow untrusted_app_25 preloads_data_file (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow mediaprovider_app preloads_data_file (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 241 system/sepolicy/private/app_neverallows.te

(neverallow untrusted_app_all system_file (file (lock)))
(neverallow isolated_app_all system_file (file (lock)))
(neverallow ephemeral_app system_file (file (lock)))
(neverallow isolated_app system_file (file (lock)))
(neverallow isolated_compute_app system_file (file (lock)))
(neverallow mediaprovider system_file (file (lock)))
(neverallow untrusted_app system_file (file (lock)))
(neverallow untrusted_app_30 system_file (file (lock)))
(neverallow untrusted_app_29 system_file (file (lock)))
(neverallow untrusted_app_27 system_file (file (lock)))
(neverallow untrusted_app_25 system_file (file (lock)))
(neverallow mediaprovider_app system_file (file (lock)))
;;* lme

;;* lmx 245 system/sepolicy/private/app_neverallows.te

(neverallow untrusted_app_all base_typeattr_248 (hwservice_manager (add list)))
(neverallow isolated_app_all base_typeattr_248 (hwservice_manager (add list)))
(neverallow ephemeral_app base_typeattr_248 (hwservice_manager (add list)))
(neverallow isolated_app base_typeattr_248 (hwservice_manager (add list)))
(neverallow isolated_compute_app base_typeattr_248 (hwservice_manager (add list)))
(neverallow mediaprovider base_typeattr_248 (hwservice_manager (add list)))
(neverallow untrusted_app base_typeattr_248 (hwservice_manager (add list)))
(neverallow untrusted_app_30 base_typeattr_248 (hwservice_manager (add list)))
(neverallow untrusted_app_29 base_typeattr_248 (hwservice_manager (add list)))
(neverallow untrusted_app_27 base_typeattr_248 (hwservice_manager (add list)))
(neverallow untrusted_app_25 base_typeattr_248 (hwservice_manager (add list)))
(neverallow mediaprovider_app base_typeattr_248 (hwservice_manager (add list)))
;;* lme

;;* lmx 260 system/sepolicy/private/app_neverallows.te

(neverallow untrusted_app_all protected_hwservice (hwservice_manager (find)))
(neverallow isolated_app_all protected_hwservice (hwservice_manager (find)))
(neverallow ephemeral_app protected_hwservice (hwservice_manager (find)))
(neverallow isolated_app protected_hwservice (hwservice_manager (find)))
(neverallow isolated_compute_app protected_hwservice (hwservice_manager (find)))
(neverallow mediaprovider protected_hwservice (hwservice_manager (find)))
(neverallow untrusted_app protected_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_30 protected_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_29 protected_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_27 protected_hwservice (hwservice_manager (find)))
(neverallow untrusted_app_25 protected_hwservice (hwservice_manager (find)))
(neverallow mediaprovider_app protected_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 261 system/sepolicy/private/app_neverallows.te

(neverallow untrusted_app_all protected_service (service_manager (find)))
(neverallow isolated_app_all protected_service (service_manager (find)))
(neverallow ephemeral_app protected_service (service_manager (find)))
(neverallow isolated_app protected_service (service_manager (find)))
(neverallow isolated_compute_app protected_service (service_manager (find)))
(neverallow mediaprovider protected_service (service_manager (find)))
(neverallow untrusted_app protected_service (service_manager (find)))
(neverallow untrusted_app_30 protected_service (service_manager (find)))
(neverallow untrusted_app_29 protected_service (service_manager (find)))
(neverallow untrusted_app_27 protected_service (service_manager (find)))
(neverallow untrusted_app_25 protected_service (service_manager (find)))
(neverallow mediaprovider_app protected_service (service_manager (find)))
;;* lme

;;* lmx 264 system/sepolicy/private/app_neverallows.te

(neverallow untrusted_app_all selinuxfs (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow isolated_app_all selinuxfs (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow ephemeral_app selinuxfs (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow isolated_app selinuxfs (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow isolated_compute_app selinuxfs (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow mediaprovider selinuxfs (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow untrusted_app selinuxfs (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow untrusted_app_30 selinuxfs (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow untrusted_app_29 selinuxfs (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow untrusted_app_27 selinuxfs (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow untrusted_app_25 selinuxfs (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow mediaprovider_app selinuxfs (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 271 system/sepolicy/private/app_neverallows.te

(neverallow base_typeattr_315 proc_tty_drivers (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 272 system/sepolicy/private/app_neverallows.te

(neverallow untrusted_app_all proc_tty_drivers (file (write create setattr relabelfrom relabelto append unlink link rename execute quotaon mounton audit_access execmod watch_mount watch_sb watch_with_perm execute_no_trans entrypoint)))
(neverallow isolated_app_all proc_tty_drivers (file (write create setattr relabelfrom relabelto append unlink link rename execute quotaon mounton audit_access execmod watch_mount watch_sb watch_with_perm execute_no_trans entrypoint)))
(neverallow ephemeral_app proc_tty_drivers (file (write create setattr relabelfrom relabelto append unlink link rename execute quotaon mounton audit_access execmod watch_mount watch_sb watch_with_perm execute_no_trans entrypoint)))
(neverallow isolated_app proc_tty_drivers (file (write create setattr relabelfrom relabelto append unlink link rename execute quotaon mounton audit_access execmod watch_mount watch_sb watch_with_perm execute_no_trans entrypoint)))
(neverallow isolated_compute_app proc_tty_drivers (file (write create setattr relabelfrom relabelto append unlink link rename execute quotaon mounton audit_access execmod watch_mount watch_sb watch_with_perm execute_no_trans entrypoint)))
(neverallow mediaprovider proc_tty_drivers (file (write create setattr relabelfrom relabelto append unlink link rename execute quotaon mounton audit_access execmod watch_mount watch_sb watch_with_perm execute_no_trans entrypoint)))
(neverallow untrusted_app proc_tty_drivers (file (write create setattr relabelfrom relabelto append unlink link rename execute quotaon mounton audit_access execmod watch_mount watch_sb watch_with_perm execute_no_trans entrypoint)))
(neverallow untrusted_app_30 proc_tty_drivers (file (write create setattr relabelfrom relabelto append unlink link rename execute quotaon mounton audit_access execmod watch_mount watch_sb watch_with_perm execute_no_trans entrypoint)))
(neverallow untrusted_app_29 proc_tty_drivers (file (write create setattr relabelfrom relabelto append unlink link rename execute quotaon mounton audit_access execmod watch_mount watch_sb watch_with_perm execute_no_trans entrypoint)))
(neverallow untrusted_app_27 proc_tty_drivers (file (write create setattr relabelfrom relabelto append unlink link rename execute quotaon mounton audit_access execmod watch_mount watch_sb watch_with_perm execute_no_trans entrypoint)))
(neverallow untrusted_app_25 proc_tty_drivers (file (write create setattr relabelfrom relabelto append unlink link rename execute quotaon mounton audit_access execmod watch_mount watch_sb watch_with_perm execute_no_trans entrypoint)))
(neverallow mediaprovider_app proc_tty_drivers (file (write create setattr relabelfrom relabelto append unlink link rename execute quotaon mounton audit_access execmod watch_mount watch_sb watch_with_perm execute_no_trans entrypoint)))
;;* lme

;;* lmx 275 system/sepolicy/private/app_neverallows.te

(neverallow untrusted_app_all cgroup (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow isolated_app_all cgroup (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow ephemeral_app cgroup (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow isolated_app cgroup (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow isolated_compute_app cgroup (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow mediaprovider cgroup (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow untrusted_app cgroup (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow untrusted_app_30 cgroup (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow untrusted_app_29 cgroup (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow untrusted_app_27 cgroup (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow untrusted_app_25 cgroup (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow mediaprovider_app cgroup (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
;;* lme

;;* lmx 276 system/sepolicy/private/app_neverallows.te

(neverallow untrusted_app_all cgroup_v2 (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow isolated_app_all cgroup_v2 (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow ephemeral_app cgroup_v2 (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow isolated_app cgroup_v2 (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow isolated_compute_app cgroup_v2 (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow mediaprovider cgroup_v2 (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow untrusted_app cgroup_v2 (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow untrusted_app_30 cgroup_v2 (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow untrusted_app_29 cgroup_v2 (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow untrusted_app_27 cgroup_v2 (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow untrusted_app_25 cgroup_v2 (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow mediaprovider_app cgroup_v2 (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
;;* lme

;;* lmx 284 system/sepolicy/private/app_neverallows.te

(neverallow base_typeattr_311 mnt_sdcard_file (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 287 system/sepolicy/private/app_neverallows.te

(neverallow untrusted_app_all incident_service (service_manager (find)))
(neverallow isolated_app_all incident_service (service_manager (find)))
(neverallow ephemeral_app incident_service (service_manager (find)))
(neverallow isolated_app incident_service (service_manager (find)))
(neverallow isolated_compute_app incident_service (service_manager (find)))
(neverallow mediaprovider incident_service (service_manager (find)))
(neverallow untrusted_app incident_service (service_manager (find)))
(neverallow untrusted_app_30 incident_service (service_manager (find)))
(neverallow untrusted_app_29 incident_service (service_manager (find)))
(neverallow untrusted_app_27 incident_service (service_manager (find)))
(neverallow untrusted_app_25 incident_service (service_manager (find)))
(neverallow mediaprovider_app incident_service (service_manager (find)))
;;* lme

;;* lmx 290 system/sepolicy/private/app_neverallows.te

(neverallow untrusted_app_all stats_service (service_manager (find)))
(neverallow isolated_app_all stats_service (service_manager (find)))
(neverallow ephemeral_app stats_service (service_manager (find)))
(neverallow isolated_app stats_service (service_manager (find)))
(neverallow isolated_compute_app stats_service (service_manager (find)))
(neverallow mediaprovider stats_service (service_manager (find)))
(neverallow untrusted_app stats_service (service_manager (find)))
(neverallow untrusted_app_30 stats_service (service_manager (find)))
(neverallow untrusted_app_29 stats_service (service_manager (find)))
(neverallow untrusted_app_27 stats_service (service_manager (find)))
(neverallow untrusted_app_25 stats_service (service_manager (find)))
(neverallow mediaprovider_app stats_service (service_manager (find)))
;;* lme

;;* lmx 293 system/sepolicy/private/app_neverallows.te

(neverallow untrusted_app_all aiseal_host_service (service_manager (find)))
(neverallow isolated_app_all aiseal_host_service (service_manager (find)))
(neverallow ephemeral_app aiseal_host_service (service_manager (find)))
(neverallow isolated_app aiseal_host_service (service_manager (find)))
(neverallow isolated_compute_app aiseal_host_service (service_manager (find)))
(neverallow mediaprovider aiseal_host_service (service_manager (find)))
(neverallow untrusted_app aiseal_host_service (service_manager (find)))
(neverallow untrusted_app_30 aiseal_host_service (service_manager (find)))
(neverallow untrusted_app_29 aiseal_host_service (service_manager (find)))
(neverallow untrusted_app_27 aiseal_host_service (service_manager (find)))
(neverallow untrusted_app_25 aiseal_host_service (service_manager (find)))
(neverallow mediaprovider_app aiseal_host_service (service_manager (find)))
;;* lme

;;* lmx 305 system/sepolicy/private/app_neverallows.te

(neverallow base_typeattr_316 userdebug_or_eng_prop (file (read)))
;;* lme

;;* lmx 319 system/sepolicy/private/app_neverallows.te

(neverallow base_typeattr_317 mdnsd_socket (sock_file (write)))
;;* lme

;;* lmx 327 system/sepolicy/private/app_neverallows.te

(neverallow base_typeattr_317 mdnsd (unix_stream_socket (connectto)))
;;* lme

;;* lmx 333 system/sepolicy/private/app_neverallows.te

(neverallow untrusted_app_all domain (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow isolated_app_all domain (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow ephemeral_app domain (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow isolated_app domain (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow isolated_compute_app domain (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow mediaprovider domain (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow untrusted_app domain (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow untrusted_app_30 domain (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow untrusted_app_29 domain (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow untrusted_app_27 domain (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow untrusted_app_25 domain (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow mediaprovider_app domain (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 336 system/sepolicy/private/app_neverallows.te

(neverallow untrusted_app_all hidraw_device (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow isolated_app_all hidraw_device (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow ephemeral_app hidraw_device (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow isolated_app hidraw_device (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow isolated_compute_app hidraw_device (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow mediaprovider hidraw_device (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow untrusted_app hidraw_device (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow untrusted_app_30 hidraw_device (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow untrusted_app_29 hidraw_device (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow untrusted_app_27 hidraw_device (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow untrusted_app_25 hidraw_device (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow mediaprovider_app hidraw_device (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
;;* lme

;;* lmx 340 system/sepolicy/private/app_neverallows.te

(neverallow untrusted_app_all serial_device (file (open)))
(neverallow untrusted_app_all serial_device (chr_file (open)))
(neverallow untrusted_app_all usbaccessory_device (file (open)))
(neverallow untrusted_app_all usbaccessory_device (chr_file (open)))
(neverallow untrusted_app_all usb_serial_device (file (open)))
(neverallow untrusted_app_all usb_serial_device (chr_file (open)))
(neverallow isolated_app_all serial_device (file (open)))
(neverallow isolated_app_all serial_device (chr_file (open)))
(neverallow isolated_app_all usbaccessory_device (file (open)))
(neverallow isolated_app_all usbaccessory_device (chr_file (open)))
(neverallow isolated_app_all usb_serial_device (file (open)))
(neverallow isolated_app_all usb_serial_device (chr_file (open)))
(neverallow ephemeral_app serial_device (file (open)))
(neverallow ephemeral_app serial_device (chr_file (open)))
(neverallow ephemeral_app usbaccessory_device (file (open)))
(neverallow ephemeral_app usbaccessory_device (chr_file (open)))
(neverallow ephemeral_app usb_serial_device (file (open)))
(neverallow ephemeral_app usb_serial_device (chr_file (open)))
(neverallow isolated_app serial_device (file (open)))
(neverallow isolated_app serial_device (chr_file (open)))
(neverallow isolated_app usbaccessory_device (file (open)))
(neverallow isolated_app usbaccessory_device (chr_file (open)))
(neverallow isolated_app usb_serial_device (file (open)))
(neverallow isolated_app usb_serial_device (chr_file (open)))
(neverallow isolated_compute_app serial_device (file (open)))
(neverallow isolated_compute_app serial_device (chr_file (open)))
(neverallow isolated_compute_app usbaccessory_device (file (open)))
(neverallow isolated_compute_app usbaccessory_device (chr_file (open)))
(neverallow isolated_compute_app usb_serial_device (file (open)))
(neverallow isolated_compute_app usb_serial_device (chr_file (open)))
(neverallow mediaprovider serial_device (file (open)))
(neverallow mediaprovider serial_device (chr_file (open)))
(neverallow mediaprovider usbaccessory_device (file (open)))
(neverallow mediaprovider usbaccessory_device (chr_file (open)))
(neverallow mediaprovider usb_serial_device (file (open)))
(neverallow mediaprovider usb_serial_device (chr_file (open)))
(neverallow untrusted_app serial_device (file (open)))
(neverallow untrusted_app serial_device (chr_file (open)))
(neverallow untrusted_app usbaccessory_device (file (open)))
(neverallow untrusted_app usbaccessory_device (chr_file (open)))
(neverallow untrusted_app usb_serial_device (file (open)))
(neverallow untrusted_app usb_serial_device (chr_file (open)))
(neverallow untrusted_app_30 serial_device (file (open)))
(neverallow untrusted_app_30 serial_device (chr_file (open)))
(neverallow untrusted_app_30 usbaccessory_device (file (open)))
(neverallow untrusted_app_30 usbaccessory_device (chr_file (open)))
(neverallow untrusted_app_30 usb_serial_device (file (open)))
(neverallow untrusted_app_30 usb_serial_device (chr_file (open)))
(neverallow untrusted_app_29 serial_device (file (open)))
(neverallow untrusted_app_29 serial_device (chr_file (open)))
(neverallow untrusted_app_29 usbaccessory_device (file (open)))
(neverallow untrusted_app_29 usbaccessory_device (chr_file (open)))
(neverallow untrusted_app_29 usb_serial_device (file (open)))
(neverallow untrusted_app_29 usb_serial_device (chr_file (open)))
(neverallow untrusted_app_27 serial_device (file (open)))
(neverallow untrusted_app_27 serial_device (chr_file (open)))
(neverallow untrusted_app_27 usbaccessory_device (file (open)))
(neverallow untrusted_app_27 usbaccessory_device (chr_file (open)))
(neverallow untrusted_app_27 usb_serial_device (file (open)))
(neverallow untrusted_app_27 usb_serial_device (chr_file (open)))
(neverallow untrusted_app_25 serial_device (file (open)))
(neverallow untrusted_app_25 serial_device (chr_file (open)))
(neverallow untrusted_app_25 usbaccessory_device (file (open)))
(neverallow untrusted_app_25 usbaccessory_device (chr_file (open)))
(neverallow untrusted_app_25 usb_serial_device (file (open)))
(neverallow untrusted_app_25 usb_serial_device (chr_file (open)))
(neverallow mediaprovider_app serial_device (file (open)))
(neverallow mediaprovider_app serial_device (chr_file (open)))
(neverallow mediaprovider_app usbaccessory_device (file (open)))
(neverallow mediaprovider_app usbaccessory_device (chr_file (open)))
(neverallow mediaprovider_app usb_serial_device (file (open)))
(neverallow mediaprovider_app usb_serial_device (chr_file (open)))
;;* lme

;;* lmx 341 system/sepolicy/private/app_neverallows.te

(neverallow untrusted_app_all native_serial_service (service_manager (find)))
(neverallow isolated_app_all native_serial_service (service_manager (find)))
(neverallow ephemeral_app native_serial_service (service_manager (find)))
(neverallow isolated_app native_serial_service (service_manager (find)))
(neverallow isolated_compute_app native_serial_service (service_manager (find)))
(neverallow mediaprovider native_serial_service (service_manager (find)))
(neverallow untrusted_app native_serial_service (service_manager (find)))
(neverallow untrusted_app_30 native_serial_service (service_manager (find)))
(neverallow untrusted_app_29 native_serial_service (service_manager (find)))
(neverallow untrusted_app_27 native_serial_service (service_manager (find)))
(neverallow untrusted_app_25 native_serial_service (service_manager (find)))
(neverallow mediaprovider_app native_serial_service (service_manager (find)))
;;* lme

(typetransition app_zygote tmpfs file app_zygote_tmpfs)
;;* lmx 9 system/sepolicy/private/app_zygote.te

(allow app_zygote app_zygote_tmpfs (file (read write getattr map)))
;;* lme

;;* lmx 13 system/sepolicy/private/app_zygote.te

(allow app_zygote self (capability (setgid setuid)))
(allow app_zygote self (cap_userns (setgid setuid)))
;;* lme

;;* lmx 15 system/sepolicy/private/app_zygote.te

(allow app_zygote self (capability (setpcap)))
(allow app_zygote self (cap_userns (setpcap)))
;;* lme

;;* lmx 17 system/sepolicy/private/app_zygote.te

(allow app_zygote self (process (setcurrent)))
;;* lme

;;* lmx 18 system/sepolicy/private/app_zygote.te

(allow app_zygote isolated_app (process (dyntransition)))
;;* lme

;;* lmx 21 system/sepolicy/private/app_zygote.te

(allow app_zygote self (process (execmem)))
;;* lme

;;* lmx 24 system/sepolicy/private/app_zygote.te

(allow app_zygote app_zygote_tmpfs (file (execute)))
;;* lme

;;* lmx 25 system/sepolicy/private/app_zygote.te

(allow app_zygote app_zygote (memfd_file (execute)))
;;* lme

;;* lmx 30 system/sepolicy/private/app_zygote.te

(allow app_zygote debugfs_trace_marker (file (getattr)))
;;* lme

;;* lmx 33 system/sepolicy/private/app_zygote.te

(allow app_zygote system_server (process (getpgid)))
;;* lme

;;* lmx 36 system/sepolicy/private/app_zygote.te

(allow app_zygote isolated_app (process (setpgid)))
;;* lme

(dontaudit app_zygote mnt_expand_file (dir (getattr)))
;;* lmx 42 system/sepolicy/private/app_zygote.te

(allow app_zygote seapp_contexts_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 44 system/sepolicy/private/app_zygote.te

(allow app_zygote selinuxfs (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 44 system/sepolicy/private/app_zygote.te

(allow app_zygote selinuxfs (file (ioctl read getattr lock map open watch watch_reads)))
(allow app_zygote selinuxfs (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 44 system/sepolicy/private/app_zygote.te

(allow app_zygote selinuxfs (file (write lock append map open)))
;;* lme

;;* lmx 44 system/sepolicy/private/app_zygote.te

(allow app_zygote kernel (security (check_context)))
;;* lme

;;* lmx 46 system/sepolicy/private/app_zygote.te

(allow app_zygote selinuxfs (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 46 system/sepolicy/private/app_zygote.te

(allow app_zygote selinuxfs (file (ioctl read getattr lock map open watch watch_reads)))
(allow app_zygote selinuxfs (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 46 system/sepolicy/private/app_zygote.te

(allow app_zygote selinuxfs (file (write lock append map open)))
;;* lme

;;* lmx 46 system/sepolicy/private/app_zygote.te

(allow app_zygote kernel (security (compute_av)))
;;* lme

;;* lmx 46 system/sepolicy/private/app_zygote.te

(allow app_zygote self (netlink_selinux_socket (read write create getattr setattr lock relabelfrom relabelto append bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
;;* lme

;;* lmx 49 system/sepolicy/private/app_zygote.te

(allow app_zygote zygote_tmpfs (file (read getattr)))
;;* lme

;;* lmx 50 system/sepolicy/private/app_zygote.te

(allow app_zygote zygote (memfd_file (read getattr)))
;;* lme

;;* lmx 57 system/sepolicy/private/app_zygote.te

(allow app_zygote zygote (fd (use)))
;;* lme

;;* lmx 58 system/sepolicy/private/app_zygote.te

(allow app_zygote zygote (process (sigchld)))
;;* lme

;;* lmx 61 system/sepolicy/private/app_zygote.te

(allow app_zygote dalvikcache_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 61 system/sepolicy/private/app_zygote.te

(allow app_zygote dalvikcache_data_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow app_zygote dalvikcache_data_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 62 system/sepolicy/private/app_zygote.te

(allow app_zygote dalvikcache_data_file (file (execute)))
;;* lme

;;* lmx 65 system/sepolicy/private/app_zygote.te

(allow app_zygote app_zygote_userfaultfd (anon_inode (ioctl read create)))
;;* lme

(dontaudit su app_zygote_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lmx 65 system/sepolicy/private/app_zygote.te

(neverallow base_typeattr_318 app_zygote_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 68 system/sepolicy/private/app_zygote.te

(allow app_zygote apex_module_data_file (dir (search)))
;;* lme

;;* lmx 70 system/sepolicy/private/app_zygote.te

(allow app_zygote apex_art_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 70 system/sepolicy/private/app_zygote.te

(allow app_zygote apex_art_data_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow app_zygote apex_art_data_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 74 system/sepolicy/private/app_zygote.te

(allow app_zygote apk_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 75 system/sepolicy/private/app_zygote.te

(allow app_zygote apk_data_file (file (ioctl read getattr lock map execute open watch watch_reads)))
;;* lme

;;* lmx 78 system/sepolicy/private/app_zygote.te

(allow app_zygote oemfs (dir (search)))
;;* lme

;;* lmx 81 system/sepolicy/private/app_zygote.te

(allow app_zygote vendor_overlay_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 81 system/sepolicy/private/app_zygote.te

(allow app_zygote vendor_overlay_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow app_zygote vendor_overlay_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 83 system/sepolicy/private/app_zygote.te

(allow app_zygote vendor_apex_metadata_file (dir (getattr search)))
;;* lme

;;* lmx 85 system/sepolicy/private/app_zygote.te

(allow app_zygote system_data_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 86 system/sepolicy/private/app_zygote.te

(allow app_zygote system_data_file (file (read getattr map)))
;;* lme

;;* lmx 89 system/sepolicy/private/app_zygote.te

(allow app_zygote system_unsolzygote_socket (sock_file (write)))
;;* lme

;;* lmx 89 system/sepolicy/private/app_zygote.te

(allow app_zygote system_server (unix_dgram_socket (sendto)))
;;* lme

;;* lmx 92 system/sepolicy/private/app_zygote.te

(allow app_zygote device_config_runtime_native_prop (file (read getattr map open)))
;;* lme

;;* lmx 93 system/sepolicy/private/app_zygote.te

(allow app_zygote device_config_runtime_native_boot_prop (file (read getattr map open)))
;;* lme

;;* lmx 96 system/sepolicy/private/app_zygote.te

(allow app_zygote odsign_prop (file (read getattr map open)))
;;* lme

;;* lmx 99 system/sepolicy/private/app_zygote.te

(allow app_zygote resourcecache_data_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 100 system/sepolicy/private/app_zygote.te

(allow app_zygote resourcecache_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 107 system/sepolicy/private/app_zygote.te

(neverallow app_zygote base_typeattr_319 (process (dyntransition)))
;;* lme

;;* lmx 110 system/sepolicy/private/app_zygote.te

(neverallow app_zygote base_typeattr_270 (process (transition)))
;;* lme

;;* lmx 114 system/sepolicy/private/app_zygote.te

(neverallow app_zygote base_typeattr_248 (file (execute_no_trans)))
;;* lme

;;* lmx 118 system/sepolicy/private/app_zygote.te

(neverallow base_typeattr_320 app_zygote (process (dyntransition)))
;;* lme

;;* lmx 121 system/sepolicy/private/app_zygote.te

(neverallow app_zygote property_socket (sock_file (write)))
;;* lme

;;* lmx 122 system/sepolicy/private/app_zygote.te

(neverallow app_zygote property_type (property_service (set)))
;;* lme

;;* lmx 125 system/sepolicy/private/app_zygote.te

(neverallow app_zygote app_data_file_type (file (ioctl read write getattr lock append map execute open watch watch_reads execute_no_trans)))
;;* lme

;;* lmx 131 system/sepolicy/private/app_zygote.te

(neverallow app_zygote base_typeattr_321 (service_manager (find)))
;;* lme

;;* lmx 134 system/sepolicy/private/app_zygote.te

(neverallow app_zygote gpu_device (chr_file (ioctl read write getattr lock append map execute open watch watch_reads execute_no_trans)))
;;* lme

;;* lmx 137 system/sepolicy/private/app_zygote.te

(neverallow app_zygote cache_file (dir (write create setattr relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access execmod watch_mount watch_sb watch_with_perm add_name remove_name reparent rmdir)))
;;* lme

;;* lmx 138 system/sepolicy/private/app_zygote.te

(neverallow app_zygote cache_file (file (ioctl write create setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
;;* lme

;;* lmx 154 system/sepolicy/private/app_zygote.te

(neverallow app_zygote domain (socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow app_zygote domain (tcp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind name_connect)))
(neverallow app_zygote domain (udp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind)))
(neverallow app_zygote domain (rawip_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind)))
(neverallow app_zygote domain (netlink_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow app_zygote domain (packet_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow app_zygote domain (key_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow app_zygote domain (netlink_route_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write nlmsg_readpriv nlmsg_getneigh nlmsg)))
(neverallow app_zygote domain (netlink_tcpdiag_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write nlmsg)))
(neverallow app_zygote domain (netlink_nflog_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow app_zygote domain (netlink_xfrm_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write nlmsg)))
(neverallow app_zygote domain (netlink_audit_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write nlmsg_relay nlmsg_readpriv nlmsg_tty_audit nlmsg)))
(neverallow app_zygote domain (netlink_dnrt_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow app_zygote domain (netlink_kobject_uevent_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow app_zygote domain (appletalk_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow app_zygote domain (tun_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind attach_queue)))
(neverallow app_zygote domain (netlink_iscsi_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow app_zygote domain (netlink_fib_lookup_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow app_zygote domain (netlink_connector_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow app_zygote domain (netlink_netfilter_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow app_zygote domain (netlink_generic_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow app_zygote domain (netlink_scsitransport_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow app_zygote domain (netlink_rdma_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow app_zygote domain (netlink_crypto_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow app_zygote domain (sctp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind name_connect association)))
(neverallow app_zygote domain (icmp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind)))
(neverallow app_zygote domain (ax25_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow app_zygote domain (ipx_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow app_zygote domain (netrom_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow app_zygote domain (atmpvc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow app_zygote domain (x25_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow app_zygote domain (rose_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow app_zygote domain (decnet_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow app_zygote domain (atmsvc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow app_zygote domain (rds_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow app_zygote domain (irda_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow app_zygote domain (pppox_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow app_zygote domain (llc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow app_zygote domain (can_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow app_zygote domain (tipc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow app_zygote domain (bluetooth_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow app_zygote domain (iucv_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow app_zygote domain (rxrpc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow app_zygote domain (isdn_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow app_zygote domain (phonet_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow app_zygote domain (ieee802154_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow app_zygote domain (caif_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow app_zygote domain (alg_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow app_zygote domain (nfc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow app_zygote domain (vsock_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow app_zygote domain (kcm_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow app_zygote domain (qipcrtr_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow app_zygote domain (smc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
;;* lme

;;* lmx 165 system/sepolicy/private/app_zygote.te

(neverallow app_zygote base_typeattr_322 (unix_dgram_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
;;* lme

;;* lmx 172 system/sepolicy/private/app_zygote.te

(neverallow app_zygote base_typeattr_323 (unix_stream_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind connectto)))
;;* lme

;;* lmx 175 system/sepolicy/private/app_zygote.te

(neverallow app_zygote base_typeattr_248 (process (ptrace)))
;;* lme

;;* lmx 184 system/sepolicy/private/app_zygote.te

(neverallow app_zygote bluetooth_a2dp_offload_prop (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(neverallow app_zygote bluetooth_audio_hal_prop (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(neverallow app_zygote bluetooth_prop (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(neverallow app_zygote exported_bluetooth_prop (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 5 system/sepolicy/private/art_boot.te

(allow init art_boot_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 5 system/sepolicy/private/art_boot.te

(allow init art_boot (process (transition)))
;;* lme

;;* lmx 5 system/sepolicy/private/art_boot.te

(allow art_boot art_boot_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init art_boot (process (noatsecure)))
;;* lmx 5 system/sepolicy/private/art_boot.te

(allow init art_boot (process (siginh rlimitinh)))
;;* lme

(typetransition init art_boot_exec process art_boot)
;;* lmx 8 system/sepolicy/private/art_boot.te

(allow art_boot device_config_runtime_native_boot_prop (file (read getattr map open)))
;;* lme

;;* lmx 9 system/sepolicy/private/art_boot.te

(allow art_boot device_config_runtime_native_prop (file (read getattr map open)))
;;* lme

;;* lmx 13 system/sepolicy/private/art_boot.te

(allow art_boot property_socket (sock_file (write)))
;;* lme

;;* lmx 13 system/sepolicy/private/art_boot.te

(allow art_boot init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 13 system/sepolicy/private/art_boot.te

(allow art_boot dalvik_config_prop_type (property_service (set)))
;;* lme

;;* lmx 13 system/sepolicy/private/art_boot.te

(allow art_boot dalvik_config_prop_type (file (read getattr map open)))
;;* lme

;;* lmx 11 system/sepolicy/private/art_exec.te

(allow init art_exec_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 11 system/sepolicy/private/art_exec.te

(allow init art_exec (process (transition)))
;;* lme

;;* lmx 11 system/sepolicy/private/art_exec.te

(allow art_exec art_exec_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init art_exec (process (noatsecure)))
;;* lmx 11 system/sepolicy/private/art_exec.te

(allow init art_exec (process (siginh rlimitinh)))
;;* lme

(typetransition init art_exec_exec process art_exec)
;;* lmx 15 system/sepolicy/private/art_exec.te

(allow art_exec artd_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 15 system/sepolicy/private/art_exec.te

(allow art_exec artd (process (transition)))
;;* lme

;;* lmx 15 system/sepolicy/private/art_exec.te

(allow artd artd_exec (file (read getattr map execute open entrypoint)))
;;* lme

;;* lmx 15 system/sepolicy/private/art_exec.te

(allow artd art_exec (process (sigchld)))
;;* lme

(dontaudit art_exec artd (process (noatsecure)))
;;* lmx 15 system/sepolicy/private/art_exec.te

(allow art_exec artd (process (siginh rlimitinh)))
;;* lme

(typetransition art_exec artd_exec process artd)
;;* lmx 19 system/sepolicy/private/art_exec.te

(allow art_exec self (capability (sys_chroot)))
(allow art_exec self (cap_userns (sys_chroot)))
;;* lme

;;* lmx 22 system/sepolicy/private/art_exec.te

(allow art_exec pre_reboot_dexopt_file (dir (search)))
;;* lme

;;* lmx 11 system/sepolicy/private/artd.te

(allow artd servicemanager (binder (call transfer)))
;;* lme

;;* lmx 11 system/sepolicy/private/artd.te

(allow servicemanager artd (binder (call transfer)))
;;* lme

;;* lmx 12 system/sepolicy/private/artd.te

(allow artd artd_service (service_manager (add find)))
;;* lme

;;* lmx 12 system/sepolicy/private/artd.te

(neverallow base_typeattr_324 artd_service (service_manager (add)))
;;* lme

;;* lmx 12 system/sepolicy/private/artd.te

(allow artd su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 13 system/sepolicy/private/artd.te

(allow artd artd_pre_reboot_service (service_manager (add find)))
;;* lme

;;* lmx 13 system/sepolicy/private/artd.te

(neverallow base_typeattr_324 artd_pre_reboot_service (service_manager (add)))
;;* lme

;;* lmx 13 system/sepolicy/private/artd.te

(allow artd su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 14 system/sepolicy/private/artd.te

(allow artd dumpstate (fifo_file (write getattr)))
;;* lme

;;* lmx 15 system/sepolicy/private/artd.te

(allow artd dumpstate (fd (use)))
;;* lme

;;* lmx 18 system/sepolicy/private/artd.te

(allow artd compos_service (service_manager (find)))
;;* lme

;;* lmx 19 system/sepolicy/private/artd.te

(allow artd composd (binder (call transfer)))
;;* lme

;;* lmx 19 system/sepolicy/private/artd.te

(allow composd artd (binder (transfer)))
;;* lme

;;* lmx 19 system/sepolicy/private/artd.te

(allow artd composd (fd (use)))
;;* lme

;;* lmx 21 system/sepolicy/private/artd.te

(allow init artd_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 21 system/sepolicy/private/artd.te

(allow init artd (process (transition)))
;;* lme

;;* lmx 21 system/sepolicy/private/artd.te

(allow artd artd_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init artd (process (noatsecure)))
;;* lmx 21 system/sepolicy/private/artd.te

(allow init artd (process (siginh rlimitinh)))
;;* lme

(typetransition init artd_exec process artd)
;;* lmx 24 system/sepolicy/private/artd.te

(allow artd device_config_runtime_native_prop (file (read getattr map open)))
;;* lme

;;* lmx 25 system/sepolicy/private/artd.te

(allow artd device_config_runtime_native_boot_prop (file (read getattr map open)))
;;* lme

;;* lmx 29 system/sepolicy/private/artd.te

(allow artd odsign_prop (file (read getattr map open)))
;;* lme

(typetransition artd tmpfs file artd_tmpfs)
;;* lmx 36 system/sepolicy/private/artd.te

(allow artd artd_tmpfs (file (read write getattr map)))
;;* lme

;;* lmx 39 system/sepolicy/private/artd.te

(allow artd artd_userfaultfd (anon_inode (ioctl read create)))
;;* lme

(dontaudit su artd_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lmx 39 system/sepolicy/private/artd.te

(neverallow base_typeattr_324 artd_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 45 system/sepolicy/private/artd.te

(allow artd mnt_expand_file (dir (getattr search)))
;;* lme

;;* lmx 46 system/sepolicy/private/artd.te

(allow artd apk_data_file (dir (ioctl read write create getattr setattr lock relabelfrom open watch watch_reads add_name remove_name search)))
;;* lme

;;* lmx 47 system/sepolicy/private/artd.te

(allow artd apk_data_file (file (ioctl read getattr lock map unlink open watch watch_reads)))
;;* lme

;;* lmx 48 system/sepolicy/private/artd.te

(allow artd apk_tmp_file (dir (ioctl read write create getattr setattr lock relabelfrom open watch watch_reads add_name remove_name search)))
;;* lme

;;* lmx 49 system/sepolicy/private/artd.te

(allow artd apk_tmp_file (file (ioctl read getattr lock map unlink open watch watch_reads)))
;;* lme

;;* lmx 52 system/sepolicy/private/artd.te

(allow artd vendor_app_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 52 system/sepolicy/private/artd.te

(allow artd vendor_app_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow artd vendor_app_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 55 system/sepolicy/private/artd.te

(allow artd oemfs (dir (getattr search)))
;;* lme

;;* lmx 56 system/sepolicy/private/artd.te

(allow artd vendor_overlay_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 56 system/sepolicy/private/artd.te

(allow artd vendor_overlay_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow artd vendor_overlay_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 58 system/sepolicy/private/artd.te

(allow artd vendor_apex_metadata_file (dir (getattr search)))
;;* lme

;;* lmx 61 system/sepolicy/private/artd.te

(allow artd vendor_framework_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 61 system/sepolicy/private/artd.te

(allow artd vendor_framework_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow artd vendor_framework_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 65 system/sepolicy/private/artd.te

(allow artd dalvikcache_data_file (dir (ioctl read write create getattr setattr lock relabelto rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 66 system/sepolicy/private/artd.te

(allow artd dalvikcache_data_file (file (ioctl read write create getattr setattr lock relabelto append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 70 system/sepolicy/private/artd.te

(allow artd apex_module_data_file (dir (getattr search)))
;;* lme

;;* lmx 71 system/sepolicy/private/artd.te

(allow artd apex_art_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 71 system/sepolicy/private/artd.te

(allow artd apex_art_data_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow artd apex_art_data_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 75 system/sepolicy/private/artd.te

(allow artd apex_info_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 88 system/sepolicy/private/artd.te

(allow artd self (capability (chown dac_override dac_read_search fowner)))
(allow artd self (cap_userns (chown dac_override dac_read_search fowner)))
;;* lme

;;* lmx 92 system/sepolicy/private/artd.te

(allow artd user_profile_root_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 93 system/sepolicy/private/artd.te

(allow artd user_profile_data_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
;;* lme

;;* lmx 94 system/sepolicy/private/artd.te

(allow artd user_profile_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 99 system/sepolicy/private/artd.te

(allow artd app_data_file_type (dir (ioctl read write create getattr setattr lock relabelfrom relabelto rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 100 system/sepolicy/private/artd.te

(allow artd app_data_file_type (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 105 system/sepolicy/private/artd.te

(allow artd privapp_data_file (lnk_file (read getattr)))
;;* lme

;;* lmx 108 system/sepolicy/private/artd.te

(allow artd file_contexts_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 109 system/sepolicy/private/artd.te

(allow artd seapp_contexts_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 112 system/sepolicy/private/artd.te

(allow artd selinuxfs (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 112 system/sepolicy/private/artd.te

(allow artd selinuxfs (file (ioctl read getattr lock map open watch watch_reads)))
(allow artd selinuxfs (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 112 system/sepolicy/private/artd.te

(allow artd selinuxfs (file (write lock append map open)))
;;* lme

;;* lmx 112 system/sepolicy/private/artd.te

(allow artd kernel (security (check_context)))
;;* lme

;;* lmx 115 system/sepolicy/private/artd.te

(allow artd rootfs (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 118 system/sepolicy/private/artd.te

(allow artd system_data_root_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 121 system/sepolicy/private/artd.te

(allow artd tmpfs (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 124 system/sepolicy/private/artd.te

(allow artd mnt_expand_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 128 system/sepolicy/private/artd.te

(allow artd system_userdir_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 132 system/sepolicy/private/artd.te

(allow artd system_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 137 system/sepolicy/private/artd.te

(allow artd art_exec_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lme

;;* lmx 140 system/sepolicy/private/artd.te

(allow artd profman_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 140 system/sepolicy/private/artd.te

(allow artd profman (process (transition)))
;;* lme

;;* lmx 140 system/sepolicy/private/artd.te

(allow profman profman_exec (file (read getattr map execute open entrypoint)))
;;* lme

;;* lmx 140 system/sepolicy/private/artd.te

(allow profman artd (process (sigchld)))
;;* lme

(dontaudit artd profman (process (noatsecure)))
;;* lmx 140 system/sepolicy/private/artd.te

(allow artd profman (process (siginh rlimitinh)))
;;* lme

(typetransition artd profman_exec process profman)
;;* lmx 141 system/sepolicy/private/artd.te

(allow artd dex2oat_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 141 system/sepolicy/private/artd.te

(allow artd dex2oat (process (transition)))
;;* lme

;;* lmx 141 system/sepolicy/private/artd.te

(allow dex2oat dex2oat_exec (file (read getattr map execute open entrypoint)))
;;* lme

;;* lmx 141 system/sepolicy/private/artd.te

(allow dex2oat artd (process (sigchld)))
;;* lme

(dontaudit artd dex2oat (process (noatsecure)))
;;* lmx 141 system/sepolicy/private/artd.te

(allow artd dex2oat (process (siginh rlimitinh)))
;;* lme

(typetransition artd dex2oat_exec process dex2oat)
;;* lmx 144 system/sepolicy/private/artd.te

(allow artd artd_subprocess_type (process (sigkill)))
;;* lme

;;* lmx 148 system/sepolicy/private/artd.te

(allow artd profman (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 148 system/sepolicy/private/artd.te

(allow artd profman (file (ioctl read getattr lock map open watch watch_reads)))
(allow artd profman (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 149 system/sepolicy/private/artd.te

(allow artd dex2oat (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 149 system/sepolicy/private/artd.te

(allow artd dex2oat (file (ioctl read getattr lock map open watch watch_reads)))
(allow artd dex2oat (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 154 system/sepolicy/private/artd.te

(allow artd artd_tmpfs (file (open)))
;;* lme

;;* lmx 155 system/sepolicy/private/artd.te

(allow artd artd (memfd_file (open)))
;;* lme

;;* lmx 158 system/sepolicy/private/artd.te

(allow artd system_server (fd (use)))
(allow artd_subprocess_type system_server (fd (use)))
;;* lme

;;* lmx 159 system/sepolicy/private/artd.te

(allow artd system_server (fifo_file (write)))
(allow artd_subprocess_type system_server (fifo_file (write)))
;;* lme

;;* lmx 164 system/sepolicy/private/artd.te

(allow artd art_exec (fd (use)))
;;* lme

;;* lmx 171 system/sepolicy/private/artd.te

(allow artd self (capability (sys_admin)))
(allow artd self (cap_userns (sys_admin)))
;;* lme

;;* lmx 174 system/sepolicy/private/artd.te

(allow artd derive_classpath_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 174 system/sepolicy/private/artd.te

(allow artd derive_classpath (process (transition)))
;;* lme

;;* lmx 174 system/sepolicy/private/artd.te

(allow derive_classpath derive_classpath_exec (file (read getattr map execute open entrypoint)))
;;* lme

;;* lmx 174 system/sepolicy/private/artd.te

(allow derive_classpath artd (process (sigchld)))
;;* lme

(dontaudit artd derive_classpath (process (noatsecure)))
;;* lmx 174 system/sepolicy/private/artd.te

(allow artd derive_classpath (process (siginh rlimitinh)))
;;* lme

(typetransition artd derive_classpath_exec process derive_classpath)
;;* lmx 175 system/sepolicy/private/artd.te

(allow artd odrefresh_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 175 system/sepolicy/private/artd.te

(allow artd odrefresh (process (transition)))
;;* lme

;;* lmx 175 system/sepolicy/private/artd.te

(allow odrefresh odrefresh_exec (file (read getattr map execute open entrypoint)))
;;* lme

;;* lmx 175 system/sepolicy/private/artd.te

(allow odrefresh artd (process (sigchld)))
;;* lme

(dontaudit artd odrefresh (process (noatsecure)))
;;* lmx 175 system/sepolicy/private/artd.te

(allow artd odrefresh (process (siginh rlimitinh)))
;;* lme

(typetransition artd odrefresh_exec process odrefresh)
;;* lmx 178 system/sepolicy/private/artd.te

(allow artd pre_reboot_dexopt_file (dir (getattr search)))
;;* lme

;;* lmx 181 system/sepolicy/private/artd.te

(allow artd rootfs (file (read getattr open)))
;;* lme

;;* lmx 187 system/sepolicy/private/artd.te

(allow artd pre_reboot_dexopt_artd_file (dir (ioctl read write create getattr setattr lock relabelfrom rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 188 system/sepolicy/private/artd.te

(allow artd pre_reboot_dexopt_artd_file (file (ioctl read write create getattr setattr lock relabelfrom append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 192 system/sepolicy/private/artd.te

(allow artd apex_art_data_file (dir (relabelto)))
(allow artd odrefresh_data_file (dir (relabelto)))
;;* lme

;;* lmx 193 system/sepolicy/private/artd.te

(allow artd apex_art_data_file (dir (mounton)))
(allow artd odrefresh_data_file (dir (mounton)))
(allow artd pre_reboot_dexopt_artd_file (dir (mounton)))
;;* lme

;;* lmx 199 system/sepolicy/private/artd.te

(neverallow artd base_typeattr_325 (file (execute_no_trans)))
;;* lme

;;* lmx 203 system/sepolicy/private/artd.te

(neverallow artd base_typeattr_326 (process (transition)))
;;* lme

;;* lmx 210 system/sepolicy/private/artd.te

(neverallow artd_subprocess_type self (process (setpgid)))
;;* lme

;;* lmx 211 system/sepolicy/private/artd.te

(neverallow artd_subprocess_type base_typeattr_326 (process (transition)))
;;* lme

;;* lmx 7 system/sepolicy/private/atrace.te

(allow atrace boottrace_data_file (dir (search)))
;;* lme

;;* lmx 8 system/sepolicy/private/atrace.te

(allow atrace boottrace_data_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 11 system/sepolicy/private/atrace.te

(allow atrace debugfs_tracing (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 12 system/sepolicy/private/atrace.te

(allow atrace debugfs_tracing (file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 13 system/sepolicy/private/atrace.te

(allow atrace debugfs_trace_marker (file (getattr)))
;;* lme

;;* lmx 17 system/sepolicy/private/atrace.te

(allow atrace traced_probes (fd (use)))
;;* lme

;;* lmx 18 system/sepolicy/private/atrace.te

(allow atrace traced_probes (fifo_file (write getattr)))
;;* lme

;;* lmx 21 system/sepolicy/private/atrace.te

(allow atrace property_socket (sock_file (write)))
;;* lme

;;* lmx 21 system/sepolicy/private/atrace.te

(allow atrace init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 21 system/sepolicy/private/atrace.te

(allow atrace debug_prop (property_service (set)))
;;* lme

;;* lmx 21 system/sepolicy/private/atrace.te

(allow atrace debug_prop (file (read getattr map open)))
;;* lme

;;* lmx 41 system/sepolicy/private/atrace.te

(allow atrace base_typeattr_327 (service_manager (find)))
;;* lme

;;* lmx 42 system/sepolicy/private/atrace.te

(allow atrace servicemanager (service_manager (list)))
;;* lme

;;* lmx 46 system/sepolicy/private/atrace.te

(allow atrace servicemanager (binder (call transfer)))
;;* lme

;;* lmx 46 system/sepolicy/private/atrace.te

(allow servicemanager atrace (binder (call transfer)))
;;* lme

;;* lmx 47 system/sepolicy/private/atrace.te

(allow atrace surfaceflinger (binder (call)))
;;* lme

;;* lmx 48 system/sepolicy/private/atrace.te

(allow atrace system_server (binder (call)))
;;* lme

;;* lmx 49 system/sepolicy/private/atrace.te

(allow atrace cameraserver (binder (call)))
;;* lme

;;* lmx 53 system/sepolicy/private/atrace.te

(allow atrace hwservicemanager (hwservice_manager (list)))
;;* lme

;;* lmx 53 system/sepolicy/private/atrace.te

(allow atrace hal_camera (memfd_file (read write getattr map)))
;;* lme

;;* lmx 53 system/sepolicy/private/atrace.te

(allow hal_camera atrace (memfd_file (read write getattr map)))
;;* lme

;;* lmx 53 system/sepolicy/private/atrace.te

(allow atrace hal_vibrator (memfd_file (read write getattr map)))
;;* lme

;;* lmx 53 system/sepolicy/private/atrace.te

(allow hal_vibrator atrace (memfd_file (read write getattr map)))
;;* lme

(dontaudit atrace hwservice_manager_type (hwservice_manager (find)))
(dontaudit atrace service_manager_type (service_manager (find)))
(dontaudit atrace domain (binder (call)))
;;* lmx 67 system/sepolicy/private/atrace.te

(allow atrace hal_atrace (memfd_file (read write getattr map)))
;;* lme

;;* lmx 67 system/sepolicy/private/atrace.te

(allow hal_atrace atrace (memfd_file (read write getattr map)))
;;* lme

;;* lmx 69 system/sepolicy/private/atrace.te

(allow atrace hwservicemanager_prop (file (read getattr map open)))
;;* lme

;;* lmx 71 system/sepolicy/private/atrace.te

(allow init atrace_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 71 system/sepolicy/private/atrace.te

(allow init atrace (process (transition)))
;;* lme

;;* lmx 71 system/sepolicy/private/atrace.te

(allow atrace atrace_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init atrace (process (noatsecure)))
;;* lmx 71 system/sepolicy/private/atrace.te

(allow init atrace (process (siginh rlimitinh)))
;;* lme

(typetransition init atrace_exec process atrace)
;;* lmx 71 system/sepolicy/private/atrace.te

(allow atrace debugfs_tracing_debug (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 71 system/sepolicy/private/atrace.te

(allow atrace debugfs_tracing_debug (file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

(dontaudit atrace debugfs_tracing_debug (file (audit_access)))
;;* lmx 5 system/sepolicy/private/audioserver.te

(allow init audioserver_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 5 system/sepolicy/private/audioserver.te

(allow init audioserver (process (transition)))
;;* lme

;;* lmx 5 system/sepolicy/private/audioserver.te

(allow audioserver audioserver_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init audioserver (process (noatsecure)))
;;* lmx 5 system/sepolicy/private/audioserver.te

(allow init audioserver (process (siginh rlimitinh)))
;;* lme

(typetransition init audioserver_exec process audioserver)
(typetransition audioserver tmpfs file audioserver_tmpfs)
;;* lmx 6 system/sepolicy/private/audioserver.te

(allow audioserver audioserver_tmpfs (file (read write getattr map)))
;;* lme

;;* lmx 8 system/sepolicy/private/audioserver.te

(allow audioserver sdcard_type (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 8 system/sepolicy/private/audioserver.te

(allow audioserver sdcard_type (file (ioctl read getattr lock map open watch watch_reads)))
(allow audioserver sdcard_type (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 9 system/sepolicy/private/audioserver.te

(allow audioserver fuse (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 9 system/sepolicy/private/audioserver.te

(allow audioserver fuse (file (ioctl read getattr lock map open watch watch_reads)))
(allow audioserver fuse (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 11 system/sepolicy/private/audioserver.te

(allow audioserver servicemanager (binder (call transfer)))
;;* lme

;;* lmx 11 system/sepolicy/private/audioserver.te

(allow servicemanager audioserver (binder (call transfer)))
;;* lme

;;* lmx 12 system/sepolicy/private/audioserver.te

(allow audioserver binderservicedomain (binder (call transfer)))
;;* lme

;;* lmx 12 system/sepolicy/private/audioserver.te

(allow binderservicedomain audioserver (binder (transfer)))
;;* lme

;;* lmx 12 system/sepolicy/private/audioserver.te

(allow audioserver binderservicedomain (fd (use)))
;;* lme

;;* lmx 13 system/sepolicy/private/audioserver.te

(allow audioserver appdomain (binder (call transfer)))
;;* lme

;;* lmx 13 system/sepolicy/private/audioserver.te

(allow appdomain audioserver (binder (transfer)))
;;* lme

;;* lmx 13 system/sepolicy/private/audioserver.te

(allow audioserver appdomain (fd (use)))
;;* lme

;;* lmx 16 system/sepolicy/private/audioserver.te

(allow audioserver hal_allocator (memfd_file (read write getattr map)))
;;* lme

;;* lmx 16 system/sepolicy/private/audioserver.te

(allow hal_allocator audioserver (memfd_file (read write getattr map)))
;;* lme

;;* lmx 18 system/sepolicy/private/audioserver.te

(allow audioserver system_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 18 system/sepolicy/private/audioserver.te

(allow audioserver system_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow audioserver system_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 20 system/sepolicy/private/audioserver.te

(allow audioserver hal_audio (memfd_file (read write getattr map)))
;;* lme

;;* lmx 20 system/sepolicy/private/audioserver.te

(allow hal_audio audioserver (memfd_file (read write getattr map)))
;;* lme

;;* lmx 22 system/sepolicy/private/audioserver.te

(allow audioserver media_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 22 system/sepolicy/private/audioserver.te

(allow audioserver audioserver_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 22 system/sepolicy/private/audioserver.te

(allow audioserver audioserver_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 22 system/sepolicy/private/audioserver.te

(allow audioserver self (process (ptrace)))
;;* lme

;;* lmx 32 system/sepolicy/private/audioserver.te

(allow audioserver audioserver_service (service_manager (add find)))
;;* lme

;;* lmx 32 system/sepolicy/private/audioserver.te

(neverallow base_typeattr_328 audioserver_service (service_manager (add)))
;;* lme

;;* lmx 32 system/sepolicy/private/audioserver.te

(allow audioserver su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 33 system/sepolicy/private/audioserver.te

(allow audioserver activity_service (service_manager (find)))
;;* lme

;;* lmx 34 system/sepolicy/private/audioserver.te

(allow audioserver appops_service (service_manager (find)))
;;* lme

;;* lmx 35 system/sepolicy/private/audioserver.te

(allow audioserver batterystats_service (service_manager (find)))
;;* lme

;;* lmx 36 system/sepolicy/private/audioserver.te

(allow audioserver external_vibrator_service (service_manager (find)))
;;* lme

;;* lmx 37 system/sepolicy/private/audioserver.te

(allow audioserver package_native_service (service_manager (find)))
;;* lme

;;* lmx 38 system/sepolicy/private/audioserver.te

(allow audioserver permission_service (service_manager (find)))
;;* lme

;;* lmx 39 system/sepolicy/private/audioserver.te

(allow audioserver permission_checker_service (service_manager (find)))
;;* lme

;;* lmx 40 system/sepolicy/private/audioserver.te

(allow audioserver power_service (service_manager (find)))
;;* lme

;;* lmx 41 system/sepolicy/private/audioserver.te

(allow audioserver scheduling_policy_service (service_manager (find)))
;;* lme

;;* lmx 42 system/sepolicy/private/audioserver.te

(allow audioserver mediametrics_service (service_manager (find)))
;;* lme

;;* lmx 43 system/sepolicy/private/audioserver.te

(allow audioserver sensor_privacy_service (service_manager (find)))
;;* lme

;;* lmx 44 system/sepolicy/private/audioserver.te

(allow audioserver soundtrigger_middleware_service (service_manager (find)))
;;* lme

;;* lmx 45 system/sepolicy/private/audioserver.te

(allow audioserver audio_service (service_manager (find)))
;;* lme

;;* lmx 46 system/sepolicy/private/audioserver.te

(allow audioserver virtual_device_native_service (service_manager (find)))
;;* lme

;;* lmx 49 system/sepolicy/private/audioserver.te

(allow audioserver property_socket (sock_file (write)))
;;* lme

;;* lmx 49 system/sepolicy/private/audioserver.te

(allow audioserver init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 49 system/sepolicy/private/audioserver.te

(allow audioserver bluetooth_a2dp_offload_prop (property_service (set)))
;;* lme

;;* lmx 49 system/sepolicy/private/audioserver.te

(allow audioserver bluetooth_a2dp_offload_prop (file (read getattr map open)))
;;* lme

;;* lmx 50 system/sepolicy/private/audioserver.te

(allow audioserver property_socket (sock_file (write)))
;;* lme

;;* lmx 50 system/sepolicy/private/audioserver.te

(allow audioserver init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 50 system/sepolicy/private/audioserver.te

(allow audioserver bluetooth_audio_hal_prop (property_service (set)))
;;* lme

;;* lmx 50 system/sepolicy/private/audioserver.te

(allow audioserver bluetooth_audio_hal_prop (file (read getattr map open)))
;;* lme

;;* lmx 51 system/sepolicy/private/audioserver.te

(allow audioserver property_socket (sock_file (write)))
;;* lme

;;* lmx 51 system/sepolicy/private/audioserver.te

(allow audioserver init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 51 system/sepolicy/private/audioserver.te

(allow audioserver bluetooth_prop (property_service (set)))
;;* lme

;;* lmx 51 system/sepolicy/private/audioserver.te

(allow audioserver bluetooth_prop (file (read getattr map open)))
;;* lme

;;* lmx 52 system/sepolicy/private/audioserver.te

(allow audioserver property_socket (sock_file (write)))
;;* lme

;;* lmx 52 system/sepolicy/private/audioserver.te

(allow audioserver init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 52 system/sepolicy/private/audioserver.te

(allow audioserver exported_bluetooth_prop (property_service (set)))
;;* lme

;;* lmx 52 system/sepolicy/private/audioserver.te

(allow audioserver exported_bluetooth_prop (file (read getattr map open)))
;;* lme

;;* lmx 55 system/sepolicy/private/audioserver.te

(allow audioserver audio_data_file (dir (ioctl read write getattr lock open watch watch_reads add_name search)))
;;* lme

;;* lmx 56 system/sepolicy/private/audioserver.te

(allow audioserver audio_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 59 system/sepolicy/private/audioserver.te

(allow audioserver audio_device (chr_file (read write)))
;;* lme

;;* lmx 65 system/sepolicy/private/audioserver.te

(allow audioserver bluetooth_socket (sock_file (write)))
;;* lme

;;* lmx 65 system/sepolicy/private/audioserver.te

(allow audioserver bluetooth (unix_stream_socket (connectto)))
;;* lme

;;* lmx 68 system/sepolicy/private/audioserver.te

(allow audioserver adbd (fd (use)))
;;* lme

;;* lmx 69 system/sepolicy/private/audioserver.te

(allow audioserver adbd (unix_stream_socket (read write)))
;;* lme

;;* lmx 70 system/sepolicy/private/audioserver.te

(allow audioserver shell (fifo_file (read write)))
;;* lme

;;* lmx 73 system/sepolicy/private/audioserver.te

(allow audioserver su (fd (use)))
;;* lme

;;* lmx 73 system/sepolicy/private/audioserver.te

(allow audioserver su (fifo_file (read write)))
;;* lme

;;* lmx 73 system/sepolicy/private/audioserver.te

(allow audioserver su (unix_stream_socket (read write)))
;;* lme

;;* lmx 80 system/sepolicy/private/audioserver.te

(allow audioserver hal_health (memfd_file (read write getattr map)))
;;* lme

;;* lmx 80 system/sepolicy/private/audioserver.te

(allow hal_health audioserver (memfd_file (read write getattr map)))
;;* lme

;;* lmx 81 system/sepolicy/private/audioserver.te

(allow audioserver hal_power_stats (memfd_file (read write getattr map)))
;;* lme

;;* lmx 81 system/sepolicy/private/audioserver.te

(allow hal_power_stats audioserver (memfd_file (read write getattr map)))
;;* lme

;;* lmx 84 system/sepolicy/private/audioserver.te

(allow audioserver property_socket (sock_file (write)))
;;* lme

;;* lmx 84 system/sepolicy/private/audioserver.te

(allow audioserver init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 84 system/sepolicy/private/audioserver.te

(allow audioserver log_tag_prop (property_service (set)))
;;* lme

;;* lmx 84 system/sepolicy/private/audioserver.te

(allow audioserver log_tag_prop (file (read getattr map open)))
;;* lme

;;* lmx 87 system/sepolicy/private/audioserver.te

(allow audioserver hal_audio_server (process (signal)))
;;* lme

;;* lmx 90 system/sepolicy/private/audioserver.te

(allow audioserver sensorservice_service (service_manager (find)))
;;* lme

;;* lmx 91 system/sepolicy/private/audioserver.te

(allow audioserver system_server (unix_stream_socket (read write)))
;;* lme

;;* lmx 93 system/sepolicy/private/audioserver.te

(allow audioserver system_server (memfd_file (read write getattr map)))
;;* lme

;;* lmx 94 system/sepolicy/private/audioserver.te

(allow audioserver appdomain (memfd_file (read write getattr map)))
;;* lme

;;* lmx 97 system/sepolicy/private/audioserver.te

(allow audioserver sysfs_wake_lock (file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 97 system/sepolicy/private/audioserver.te

(allow audioserver self (capability2 (block_suspend)))
(allow audioserver self (cap2_userns (block_suspend)))
;;* lme

;;* lmx 97 system/sepolicy/private/audioserver.te

(allow audioserver system_suspend_server (binder (call transfer)))
;;* lme

;;* lmx 97 system/sepolicy/private/audioserver.te

(allow system_suspend_server audioserver (binder (transfer)))
;;* lme

;;* lmx 97 system/sepolicy/private/audioserver.te

(allow audioserver system_suspend_server (fd (use)))
;;* lme

;;* lmx 97 system/sepolicy/private/audioserver.te

(allow audioserver system_suspend_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 97 system/sepolicy/private/audioserver.te

(allow audioserver hwservicemanager (binder (call transfer)))
;;* lme

;;* lmx 97 system/sepolicy/private/audioserver.te

(allow hwservicemanager audioserver (binder (call transfer)))
;;* lme

;;* lmx 97 system/sepolicy/private/audioserver.te

(allow audioserver hwservicemanager_prop (file (read getattr map open)))
;;* lme

;;* lmx 97 system/sepolicy/private/audioserver.te

(allow audioserver hidl_manager_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 97 system/sepolicy/private/audioserver.te

(allow audioserver hal_system_suspend_service (service_manager (find)))
;;* lme

;;* lmx 97 system/sepolicy/private/audioserver.te

(allow audioserver servicemanager (binder (call transfer)))
;;* lme

;;* lmx 97 system/sepolicy/private/audioserver.te

(allow servicemanager audioserver (binder (call transfer)))
;;* lme

;;* lmx 100 system/sepolicy/private/audioserver.te

(allow audioserver self (capability2 (wake_alarm)))
;;* lme

;;* lmx 103 system/sepolicy/private/audioserver.te

(allow audioserver self (capability (sys_nice)))
;;* lme

;;* lmx 106 system/sepolicy/private/audioserver.te

(allow audioserver audio_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 107 system/sepolicy/private/audioserver.te

(allow audioserver system_audio_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 115 system/sepolicy/private/audioserver.te

(neverallow audioserver fs_type (file (execute_no_trans)))
(neverallow audioserver file_type (file (execute_no_trans)))
;;* lme

;;* lmx 127 system/sepolicy/private/audioserver.te

(neverallow audioserver domain (udp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind)))
(neverallow audioserver domain (rawip_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind)))
;;* lme

;;* lmx 128 system/sepolicy/private/audioserver.te

(neverallow audioserver base_typeattr_329 (tcp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind name_connect)))
;;* lme

;;* lmx 15 system/sepolicy/private/auditctl.te

(allow init auditctl_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 15 system/sepolicy/private/auditctl.te

(allow init auditctl (process (transition)))
;;* lme

;;* lmx 15 system/sepolicy/private/auditctl.te

(allow auditctl auditctl_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init auditctl (process (noatsecure)))
;;* lmx 15 system/sepolicy/private/auditctl.te

(allow init auditctl (process (siginh rlimitinh)))
;;* lme

(typetransition init auditctl_exec process auditctl)
;;* lmx 17 system/sepolicy/private/auditctl.te

(allow auditctl self (capability (audit_control)))
(allow auditctl self (cap_userns (audit_control)))
;;* lme

;;* lmx 18 system/sepolicy/private/auditctl.te

(allow auditctl self (netlink_audit_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
;;* lme

;;* lmx 21 system/sepolicy/private/auditctl.te

(allow auditctl self (netlink_audit_socket (nlmsg_write)))
;;* lme

;;* lmx 23 system/sepolicy/private/auditctl.te

(allow auditctl self (netlink_audit_socket (nlmsg)))
;;* lme

;;* lmx 24 system/sepolicy/private/auditctl.te

(allowx auditctl self (nlmsg netlink_audit_socket (0x3e9)))
;;* lme

;;* lmx 8 system/sepolicy/private/automotive_display_service.te

(allow automotive_display_service fwk_automotive_display_hwservice (hwservice_manager (add find)))
;;* lme

;;* lmx 8 system/sepolicy/private/automotive_display_service.te

(allow automotive_display_service hidl_base_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 8 system/sepolicy/private/automotive_display_service.te

(neverallow base_typeattr_330 fwk_automotive_display_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 11 system/sepolicy/private/automotive_display_service.te

(allow init automotive_display_service_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 11 system/sepolicy/private/automotive_display_service.te

(allow init automotive_display_service (process (transition)))
;;* lme

;;* lmx 11 system/sepolicy/private/automotive_display_service.te

(allow automotive_display_service automotive_display_service_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init automotive_display_service (process (noatsecure)))
;;* lmx 11 system/sepolicy/private/automotive_display_service.te

(allow init automotive_display_service (process (siginh rlimitinh)))
;;* lme

(typetransition init automotive_display_service_exec process automotive_display_service)
;;* lmx 14 system/sepolicy/private/automotive_display_service.te

(allow automotive_display_service servicemanager (binder (call transfer)))
;;* lme

;;* lmx 14 system/sepolicy/private/automotive_display_service.te

(allow servicemanager automotive_display_service (binder (call transfer)))
;;* lme

;;* lmx 17 system/sepolicy/private/automotive_display_service.te

(allow automotive_display_service hwservicemanager (binder (call transfer)))
;;* lme

;;* lmx 17 system/sepolicy/private/automotive_display_service.te

(allow hwservicemanager automotive_display_service (binder (call transfer)))
;;* lme

;;* lmx 18 system/sepolicy/private/automotive_display_service.te

(allow automotive_display_service hal_graphics_composer (memfd_file (read write getattr map)))
;;* lme

;;* lmx 18 system/sepolicy/private/automotive_display_service.te

(allow hal_graphics_composer automotive_display_service (memfd_file (read write getattr map)))
;;* lme

;;* lmx 19 system/sepolicy/private/automotive_display_service.te

(allow automotive_display_service hal_graphics_allocator (memfd_file (read write getattr map)))
;;* lme

;;* lmx 19 system/sepolicy/private/automotive_display_service.te

(allow hal_graphics_allocator automotive_display_service (memfd_file (read write getattr map)))
;;* lme

;;* lmx 22 system/sepolicy/private/automotive_display_service.te

(allow automotive_display_service hwservicemanager_prop (file (read getattr map open)))
;;* lme

;;* lmx 25 system/sepolicy/private/automotive_display_service.te

(allow automotive_display_service surfaceflinger_service (service_manager (find)))
;;* lme

;;* lmx 28 system/sepolicy/private/automotive_display_service.te

(allow automotive_display_service surfaceflinger (binder (call transfer)))
;;* lme

;;* lmx 28 system/sepolicy/private/automotive_display_service.te

(allow surfaceflinger automotive_display_service (binder (transfer)))
;;* lme

;;* lmx 28 system/sepolicy/private/automotive_display_service.te

(allow automotive_display_service surfaceflinger (fd (use)))
;;* lme

;;* lmx 31 system/sepolicy/private/automotive_display_service.te

(allow automotive_display_service hal_graphics_mapper_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 34 system/sepolicy/private/automotive_display_service.te

(allow automotive_display_service hidl_token_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 39 system/sepolicy/private/automotive_display_service.te

(allow automotive_display_service fwk_automotive_display_service (service_manager (add find)))
;;* lme

;;* lmx 39 system/sepolicy/private/automotive_display_service.te

(neverallow base_typeattr_330 fwk_automotive_display_service (service_manager (add)))
;;* lme

;;* lmx 39 system/sepolicy/private/automotive_display_service.te

(allow automotive_display_service su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 42 system/sepolicy/private/automotive_display_service.te

(allow automotive_display_service hal_evs (binder (call transfer)))
;;* lme

;;* lmx 42 system/sepolicy/private/automotive_display_service.te

(allow hal_evs automotive_display_service (binder (transfer)))
;;* lme

;;* lmx 42 system/sepolicy/private/automotive_display_service.te

(allow automotive_display_service hal_evs (fd (use)))
;;* lme

;;* lmx 4 system/sepolicy/private/bert_collector.te

(allow init bert_collector_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 4 system/sepolicy/private/bert_collector.te

(allow init bert_collector (process (transition)))
;;* lme

;;* lmx 4 system/sepolicy/private/bert_collector.te

(allow bert_collector bert_collector_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init bert_collector (process (noatsecure)))
;;* lmx 4 system/sepolicy/private/bert_collector.te

(allow init bert_collector (process (siginh rlimitinh)))
;;* lme

(typetransition init bert_collector_exec process bert_collector)
;;* lmx 6 system/sepolicy/private/bert_collector.te

(allow bert_collector sysfs_firmware_acpi_tables (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 6 system/sepolicy/private/bert_collector.te

(allow bert_collector sysfs_firmware_acpi_tables (file (ioctl read getattr lock map open watch watch_reads)))
(allow bert_collector sysfs_firmware_acpi_tables (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 8 system/sepolicy/private/bert_collector.te

(allow bert_collector servicemanager (binder (call transfer)))
;;* lme

;;* lmx 8 system/sepolicy/private/bert_collector.te

(allow servicemanager bert_collector (binder (call transfer)))
;;* lme

;;* lmx 9 system/sepolicy/private/bert_collector.te

(allow bert_collector system_server (binder (call transfer)))
;;* lme

;;* lmx 9 system/sepolicy/private/bert_collector.te

(allow system_server bert_collector (binder (transfer)))
;;* lme

;;* lmx 9 system/sepolicy/private/bert_collector.te

(allow bert_collector system_server (fd (use)))
;;* lme

;;* lmx 11 system/sepolicy/private/bert_collector.te

(allow bert_collector dropbox_service (service_manager (find)))
;;* lme

;;* lmx 12 system/sepolicy/private/bert_collector.te

(allow bert_collector proc_version (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 5 system/sepolicy/private/binderservicedomain.te

(allow binderservicedomain dumpstate (fd (use)))
(allow binderservicedomain incidentd (fd (use)))
;;* lme

;;* lmx 6 system/sepolicy/private/binderservicedomain.te

(allow binderservicedomain dumpstate (unix_stream_socket (read write getattr getopt)))
(allow binderservicedomain incidentd (unix_stream_socket (read write getattr getopt)))
;;* lme

;;* lmx 7 system/sepolicy/private/binderservicedomain.te

(allow binderservicedomain dumpstate (fifo_file (write getattr)))
(allow binderservicedomain incidentd (fifo_file (write getattr)))
;;* lme

;;* lmx 8 system/sepolicy/private/binderservicedomain.te

(allow binderservicedomain shell_data_file (file (write getattr)))
;;* lme

;;* lmx 11 system/sepolicy/private/binderservicedomain.te

(allow binderservicedomain devpts (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 12 system/sepolicy/private/binderservicedomain.te

(allow binderservicedomain console_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 15 system/sepolicy/private/binderservicedomain.te

(allow binderservicedomain appdomain (fd (use)))
;;* lme

;;* lmx 16 system/sepolicy/private/binderservicedomain.te

(allow binderservicedomain appdomain (fifo_file (write)))
;;* lme

;;* lmx 19 system/sepolicy/private/binderservicedomain.te

(allow binderservicedomain permission_service (service_manager (find)))
;;* lme

;;* lmx 21 system/sepolicy/private/binderservicedomain.te

(allow binderservicedomain keystore (keystore2_key (delete get_info rebind use)))
;;* lme

;;* lmx 23 system/sepolicy/private/binderservicedomain.te

(allow binderservicedomain apc_service (service_manager (find)))
;;* lme

;;* lmx 23 system/sepolicy/private/binderservicedomain.te

(allow binderservicedomain keystore_service (service_manager (find)))
;;* lme

;;* lmx 23 system/sepolicy/private/binderservicedomain.te

(allow binderservicedomain legacykeystore_service (service_manager (find)))
;;* lme

;;* lmx 23 system/sepolicy/private/binderservicedomain.te

(allow binderservicedomain keystore (binder (call transfer)))
;;* lme

;;* lmx 23 system/sepolicy/private/binderservicedomain.te

(allow keystore binderservicedomain (binder (transfer)))
;;* lme

;;* lmx 23 system/sepolicy/private/binderservicedomain.te

(allow binderservicedomain keystore (fd (use)))
;;* lme

;;* lmx 23 system/sepolicy/private/binderservicedomain.te

(allow keystore binderservicedomain (binder (call transfer)))
;;* lme

;;* lmx 23 system/sepolicy/private/binderservicedomain.te

(allow binderservicedomain keystore (binder (transfer)))
;;* lme

;;* lmx 23 system/sepolicy/private/binderservicedomain.te

(allow keystore binderservicedomain (fd (use)))
;;* lme

;;* lmx 25 system/sepolicy/private/binderservicedomain.te

(allow binderservicedomain apex_mnt_dir (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 25 system/sepolicy/private/binderservicedomain.te

(allow binderservicedomain apex_info_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 25 system/sepolicy/private/binderservicedomain.te

(allow binderservicedomain vendor_apex_metadata_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 25 system/sepolicy/private/binderservicedomain.te

(allow binderservicedomain vendor_apex_metadata_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow binderservicedomain vendor_apex_metadata_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 4 system/sepolicy/private/blank_screen.te

(allow init blank_screen_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 4 system/sepolicy/private/blank_screen.te

(allow init blank_screen (process (transition)))
;;* lme

;;* lmx 4 system/sepolicy/private/blank_screen.te

(allow blank_screen blank_screen_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init blank_screen (process (noatsecure)))
;;* lmx 4 system/sepolicy/private/blank_screen.te

(allow init blank_screen (process (siginh rlimitinh)))
;;* lme

(typetransition init blank_screen_exec process blank_screen)
;;* lmx 7 system/sepolicy/private/blank_screen.te

(allow blank_screen hal_light (memfd_file (read write getattr map)))
;;* lme

;;* lmx 7 system/sepolicy/private/blank_screen.te

(allow hal_light blank_screen (memfd_file (read write getattr map)))
;;* lme

;;* lmx 8 system/sepolicy/private/blkid.te

(allow blkid block_device (dir (search)))
;;* lme

;;* lmx 9 system/sepolicy/private/blkid.te

(allow blkid userdata_block_device (blk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 10 system/sepolicy/private/blkid.te

(allow blkid dm_device (blk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 13 system/sepolicy/private/blkid.te

(allow blkid vold (fd (use)))
;;* lme

;;* lmx 14 system/sepolicy/private/blkid.te

(allow blkid vold (fifo_file (read write getattr)))
;;* lme

;;* lmx 17 system/sepolicy/private/blkid.te

(allow blkid blkid_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lme

;;* lmx 20 system/sepolicy/private/blkid.te

(neverallow base_typeattr_331 blkid (process (transition)))
;;* lme

;;* lmx 21 system/sepolicy/private/blkid.te

(neverallow base_typeattr_248 blkid (process (dyntransition)))
;;* lme

;;* lmx 22 system/sepolicy/private/blkid.te

(neverallow blkid base_typeattr_332 (file (entrypoint)))
;;* lme

;;* lmx 6 system/sepolicy/private/blkid_untrusted.te

(allow blkid_untrusted block_device (dir (search)))
;;* lme

;;* lmx 7 system/sepolicy/private/blkid_untrusted.te

(allow blkid_untrusted vold_device (blk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 10 system/sepolicy/private/blkid_untrusted.te

(allow blkid_untrusted vold (fd (use)))
;;* lme

;;* lmx 11 system/sepolicy/private/blkid_untrusted.te

(allow blkid_untrusted vold (fifo_file (read write getattr)))
;;* lme

;;* lmx 14 system/sepolicy/private/blkid_untrusted.te

(allow blkid_untrusted blkid_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lme

;;* lmx 32 system/sepolicy/private/blkid_untrusted.te

(neverallow blkid_untrusted dm_device (blk_file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow blkid_untrusted root_block_device (blk_file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow blkid_untrusted frp_block_device (blk_file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow blkid_untrusted system_block_device (blk_file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow blkid_untrusted recovery_block_device (blk_file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow blkid_untrusted boot_block_device (blk_file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow blkid_untrusted userdata_block_device (blk_file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow blkid_untrusted cache_block_device (blk_file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow blkid_untrusted swap_block_device (blk_file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow blkid_untrusted metadata_block_device (blk_file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 35 system/sepolicy/private/blkid_untrusted.te

(neverallow base_typeattr_331 blkid_untrusted (process (transition)))
;;* lme

;;* lmx 36 system/sepolicy/private/blkid_untrusted.te

(neverallow base_typeattr_248 blkid_untrusted (process (dyntransition)))
;;* lme

;;* lmx 37 system/sepolicy/private/blkid_untrusted.te

(neverallow blkid_untrusted base_typeattr_332 (file (entrypoint)))
;;* lme

(typetransition bluetooth tmpfs file appdomain_tmpfs)
;;* lmx 5 system/sepolicy/private/bluetooth.te

(allow bluetooth bluetooth_userfaultfd (anon_inode (ioctl read create)))
;;* lme

(dontaudit su bluetooth_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lmx 5 system/sepolicy/private/bluetooth.te

(neverallow base_typeattr_333 bluetooth_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 5 system/sepolicy/private/bluetooth.te

(allow bluetooth appdomain_tmpfs (file (read write getattr map execute)))
;;* lme

;;* lmx 5 system/sepolicy/private/bluetooth.te

(allow bluetooth appdomain (memfd_file (read write getattr map execute)))
;;* lme

;;* lmx 5 system/sepolicy/private/bluetooth.te

(neverallow base_typeattr_334 base_typeattr_333 (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 5 system/sepolicy/private/bluetooth.te

(neverallow base_typeattr_335 bluetooth (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 5 system/sepolicy/private/bluetooth.te

(neverallow base_typeattr_336 bluetooth (process (ptrace)))
;;* lme

;;* lmx 5 system/sepolicy/private/bluetooth.te

(neverallow bluetooth base_typeattr_337 (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

(typetransition bluetooth bluetooth_data_file sock_file bluetooth_socket)
;;* lmx 12 system/sepolicy/private/bluetooth.te

(allowx bluetooth self (ioctl udp_socket (0x6900 0x6902)))
;;* lme

;;* lmx 12 system/sepolicy/private/bluetooth.te

(allowx bluetooth self (ioctl udp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
;;* lme

;;* lmx 12 system/sepolicy/private/bluetooth.te

(allowx bluetooth self (ioctl udp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
;;* lme

;;* lmx 14 system/sepolicy/private/bluetooth.te

(allow bluetooth sysfs_wake_lock (file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 14 system/sepolicy/private/bluetooth.te

(allow bluetooth self (capability2 (block_suspend)))
(allow bluetooth self (cap2_userns (block_suspend)))
;;* lme

;;* lmx 14 system/sepolicy/private/bluetooth.te

(allow bluetooth system_suspend_server (binder (call transfer)))
;;* lme

;;* lmx 14 system/sepolicy/private/bluetooth.te

(allow system_suspend_server bluetooth (binder (transfer)))
;;* lme

;;* lmx 14 system/sepolicy/private/bluetooth.te

(allow bluetooth system_suspend_server (fd (use)))
;;* lme

;;* lmx 14 system/sepolicy/private/bluetooth.te

(allow bluetooth system_suspend_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 14 system/sepolicy/private/bluetooth.te

(allow bluetooth hwservicemanager (binder (call transfer)))
;;* lme

;;* lmx 14 system/sepolicy/private/bluetooth.te

(allow hwservicemanager bluetooth (binder (call transfer)))
;;* lme

;;* lmx 14 system/sepolicy/private/bluetooth.te

(allow bluetooth hwservicemanager_prop (file (read getattr map open)))
;;* lme

;;* lmx 14 system/sepolicy/private/bluetooth.te

(allow bluetooth hidl_manager_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 14 system/sepolicy/private/bluetooth.te

(allow bluetooth hal_system_suspend_service (service_manager (find)))
;;* lme

;;* lmx 14 system/sepolicy/private/bluetooth.te

(allow bluetooth servicemanager (binder (call transfer)))
;;* lme

;;* lmx 14 system/sepolicy/private/bluetooth.te

(allow servicemanager bluetooth (binder (call transfer)))
;;* lme

;;* lmx 17 system/sepolicy/private/bluetooth.te

(allow bluetooth bluetooth_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 18 system/sepolicy/private/bluetooth.te

(allow bluetooth bluetooth_data_file (file (ioctl read write create getattr setattr lock append map unlink link rename open watch watch_reads)))
(allow bluetooth bluetooth_data_file (lnk_file (ioctl read write create getattr setattr lock append map unlink link rename open watch watch_reads)))
(allow bluetooth bluetooth_data_file (sock_file (ioctl read write create getattr setattr lock append map unlink link rename open watch watch_reads)))
(allow bluetooth bluetooth_data_file (fifo_file (ioctl read write create getattr setattr lock append map unlink link rename open watch watch_reads)))
;;* lme

;;* lmx 19 system/sepolicy/private/bluetooth.te

(allow bluetooth bluetooth_logs_data_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
;;* lme

;;* lmx 20 system/sepolicy/private/bluetooth.te

(allow bluetooth bluetooth_logs_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 21 system/sepolicy/private/bluetooth.te

(allow bluetooth bluetooth_logs_data_file (lnk_file (read create getattr setattr unlink)))
;;* lme

;;* lmx 24 system/sepolicy/private/bluetooth.te

(allow bluetooth bluetooth_socket (sock_file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 26 system/sepolicy/private/bluetooth.te

(allow bluetooth self (capability (net_admin)))
(allow bluetooth self (cap_userns (net_admin)))
;;* lme

;;* lmx 27 system/sepolicy/private/bluetooth.te

(allow bluetooth self (capability2 (wake_alarm)))
(allow bluetooth self (cap2_userns (wake_alarm)))
;;* lme

;;* lmx 30 system/sepolicy/private/bluetooth.te

(allow bluetooth self (packet_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
;;* lme

;;* lmx 31 system/sepolicy/private/bluetooth.te

(allow bluetooth self (capability (net_bind_service net_admin net_raw)))
(allow bluetooth self (cap_userns (net_bind_service net_admin net_raw)))
;;* lme

;;* lmx 32 system/sepolicy/private/bluetooth.te

(allow bluetooth self (tun_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
;;* lme

;;* lmx 33 system/sepolicy/private/bluetooth.te

(allow bluetooth tun_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 34 system/sepolicy/private/bluetooth.te

(allowx bluetooth tun_device (ioctl chr_file (0x54ca 0x54d2)))
;;* lme

;;* lmx 35 system/sepolicy/private/bluetooth.te

(allow bluetooth efs_file (dir (search)))
;;* lme

;;* lmx 38 system/sepolicy/private/bluetooth.te

(allow bluetooth uhid_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 42 system/sepolicy/private/bluetooth.te

(allow bluetooth proc_bluetooth_writable (file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 45 system/sepolicy/private/bluetooth.te

(allow bluetooth proc_filesystems (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 46 system/sepolicy/private/bluetooth.te

(allow bluetooth incremental_prop (file (read getattr map open)))
;;* lme

;;* lmx 49 system/sepolicy/private/bluetooth.te

(allow bluetooth device_logging_prop (file (read getattr map open)))
;;* lme

;;* lmx 52 system/sepolicy/private/bluetooth.te

(allow bluetooth property_socket (sock_file (write)))
;;* lme

;;* lmx 52 system/sepolicy/private/bluetooth.te

(allow bluetooth init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 52 system/sepolicy/private/bluetooth.te

(allow bluetooth binder_cache_bluetooth_server_prop (property_service (set)))
;;* lme

;;* lmx 52 system/sepolicy/private/bluetooth.te

(allow bluetooth binder_cache_bluetooth_server_prop (file (read getattr map open)))
;;* lme

;;* lmx 54 system/sepolicy/private/bluetooth.te

(neverallow base_typeattr_338 binder_cache_bluetooth_server_prop (property_service (set)))
;;* lme

;;* lmx 55 system/sepolicy/private/bluetooth.te

(allow bluetooth property_socket (sock_file (write)))
;;* lme

;;* lmx 55 system/sepolicy/private/bluetooth.te

(allow bluetooth init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 55 system/sepolicy/private/bluetooth.te

(allow bluetooth bluetooth_a2dp_offload_prop (property_service (set)))
;;* lme

;;* lmx 55 system/sepolicy/private/bluetooth.te

(allow bluetooth bluetooth_a2dp_offload_prop (file (read getattr map open)))
;;* lme

;;* lmx 56 system/sepolicy/private/bluetooth.te

(allow bluetooth property_socket (sock_file (write)))
;;* lme

;;* lmx 56 system/sepolicy/private/bluetooth.te

(allow bluetooth init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 56 system/sepolicy/private/bluetooth.te

(allow bluetooth bluetooth_audio_hal_prop (property_service (set)))
;;* lme

;;* lmx 56 system/sepolicy/private/bluetooth.te

(allow bluetooth bluetooth_audio_hal_prop (file (read getattr map open)))
;;* lme

;;* lmx 57 system/sepolicy/private/bluetooth.te

(allow bluetooth property_socket (sock_file (write)))
;;* lme

;;* lmx 57 system/sepolicy/private/bluetooth.te

(allow bluetooth init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 57 system/sepolicy/private/bluetooth.te

(allow bluetooth bluetooth_lea_prop (property_service (set)))
;;* lme

;;* lmx 57 system/sepolicy/private/bluetooth.te

(allow bluetooth bluetooth_lea_prop (file (read getattr map open)))
;;* lme

;;* lmx 58 system/sepolicy/private/bluetooth.te

(allow bluetooth property_socket (sock_file (write)))
;;* lme

;;* lmx 58 system/sepolicy/private/bluetooth.te

(allow bluetooth init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 58 system/sepolicy/private/bluetooth.te

(allow bluetooth bluetooth_prop (property_service (set)))
;;* lme

;;* lmx 58 system/sepolicy/private/bluetooth.te

(allow bluetooth bluetooth_prop (file (read getattr map open)))
;;* lme

;;* lmx 59 system/sepolicy/private/bluetooth.te

(allow bluetooth property_socket (sock_file (write)))
;;* lme

;;* lmx 59 system/sepolicy/private/bluetooth.te

(allow bluetooth init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 59 system/sepolicy/private/bluetooth.te

(allow bluetooth exported_bluetooth_prop (property_service (set)))
;;* lme

;;* lmx 59 system/sepolicy/private/bluetooth.te

(allow bluetooth exported_bluetooth_prop (file (read getattr map open)))
;;* lme

;;* lmx 60 system/sepolicy/private/bluetooth.te

(allow bluetooth property_socket (sock_file (write)))
;;* lme

;;* lmx 60 system/sepolicy/private/bluetooth.te

(allow bluetooth init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 60 system/sepolicy/private/bluetooth.te

(allow bluetooth pan_result_prop (property_service (set)))
;;* lme

;;* lmx 60 system/sepolicy/private/bluetooth.te

(allow bluetooth pan_result_prop (file (read getattr map open)))
;;* lme

;;* lmx 62 system/sepolicy/private/bluetooth.te

(allow bluetooth audioserver_service (service_manager (find)))
;;* lme

;;* lmx 63 system/sepolicy/private/bluetooth.te

(allow bluetooth bluetooth_service (service_manager (find)))
;;* lme

;;* lmx 64 system/sepolicy/private/bluetooth.te

(allow bluetooth drmserver_service (service_manager (find)))
;;* lme

;;* lmx 65 system/sepolicy/private/bluetooth.te

(allow bluetooth mediametrics_service (service_manager (find)))
;;* lme

;;* lmx 66 system/sepolicy/private/bluetooth.te

(allow bluetooth mediaserver_service (service_manager (find)))
;;* lme

;;* lmx 67 system/sepolicy/private/bluetooth.te

(allow bluetooth radio_service (service_manager (find)))
;;* lme

;;* lmx 68 system/sepolicy/private/bluetooth.te

(allow bluetooth app_api_service (service_manager (find)))
;;* lme

;;* lmx 69 system/sepolicy/private/bluetooth.te

(allow bluetooth system_api_service (service_manager (find)))
;;* lme

;;* lmx 70 system/sepolicy/private/bluetooth.te

(allow bluetooth network_stack_service (service_manager (find)))
;;* lme

;;* lmx 71 system/sepolicy/private/bluetooth.te

(allow bluetooth system_suspend_control_service (service_manager (find)))
;;* lme

;;* lmx 72 system/sepolicy/private/bluetooth.te

(allow bluetooth hal_audio_service (service_manager (find)))
;;* lme

;;* lmx 77 system/sepolicy/private/bluetooth.te

(allow bluetooth shell_data_file (file (read)))
;;* lme

;;* lmx 80 system/sepolicy/private/bluetooth.te

(allow bluetooth self (capability (sys_nice)))
(allow bluetooth self (cap_userns (sys_nice)))
;;* lme

;;* lmx 82 system/sepolicy/private/bluetooth.te

(allow bluetooth hal_bluetooth (memfd_file (read write getattr map)))
;;* lme

;;* lmx 82 system/sepolicy/private/bluetooth.te

(allow hal_bluetooth bluetooth (memfd_file (read write getattr map)))
;;* lme

;;* lmx 83 system/sepolicy/private/bluetooth.te

(allow bluetooth hal_bluetooth_lpp (memfd_file (read write getattr map)))
;;* lme

;;* lmx 83 system/sepolicy/private/bluetooth.te

(allow hal_bluetooth_lpp bluetooth (memfd_file (read write getattr map)))
;;* lme

;;* lmx 84 system/sepolicy/private/bluetooth.te

(allow bluetooth hal_telephony (memfd_file (read write getattr map)))
;;* lme

;;* lmx 84 system/sepolicy/private/bluetooth.te

(allow hal_telephony bluetooth (memfd_file (read write getattr map)))
;;* lme

;;* lmx 87 system/sepolicy/private/bluetooth.te

(allow bluetooth hal_audio (memfd_file (read write getattr map)))
;;* lme

;;* lmx 87 system/sepolicy/private/bluetooth.te

(allow hal_audio bluetooth (memfd_file (read write getattr map)))
;;* lme

;;* lmx 89 system/sepolicy/private/bluetooth.te

(allow bluetooth runtime_event_log_tags_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 99 system/sepolicy/private/bluetooth.te

(neverallow bluetooth self (capability (chown dac_override dac_read_search fowner fsetid kill setgid setuid setpcap linux_immutable net_broadcast ipc_lock ipc_owner sys_module sys_rawio sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_resource sys_time sys_tty_config mknod lease audit_write audit_control setfcap)))
(neverallow bluetooth self (cap_userns (chown dac_override dac_read_search fowner fsetid kill setgid setuid setpcap linux_immutable net_broadcast ipc_lock ipc_owner sys_module sys_rawio sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_resource sys_time sys_tty_config mknod lease audit_write audit_control setfcap)))
;;* lme

;;* lmx 100 system/sepolicy/private/bluetooth.te

(neverallow bluetooth self (capability2 (mac_override mac_admin syslog audit_read perfmon checkpoint_restore bpf)))
(neverallow bluetooth self (cap2_userns (mac_override mac_admin syslog audit_read perfmon checkpoint_restore bpf)))
;;* lme

;;* lmx 2 system/sepolicy/private/bluetoothdomain.te

(allow bluetoothdomain bluetooth (unix_stream_socket (ioctl read write getattr getopt setopt shutdown)))
;;* lme

;;* lmx 3 system/sepolicy/private/bootanim.te

(allow init bootanim_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 3 system/sepolicy/private/bootanim.te

(allow init bootanim (process (transition)))
;;* lme

;;* lmx 3 system/sepolicy/private/bootanim.te

(allow bootanim bootanim_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init bootanim (process (noatsecure)))
;;* lmx 3 system/sepolicy/private/bootanim.te

(allow init bootanim (process (siginh rlimitinh)))
;;* lme

(typetransition init bootanim_exec process bootanim)
(dontaudit bootanim unlabeled (dir (search)))
(dontaudit bootanim vendor_default_prop (file (read)))
;;* lmx 12 system/sepolicy/private/bootanim.te

(allow bootanim bootloader_boot_reason_prop (file (read getattr map open)))
;;* lme

;;* lmx 14 system/sepolicy/private/bootanim.te

(allow bootanim bootanim_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 17 system/sepolicy/private/bootanim.te

(allow bootanim property_socket (sock_file (write)))
;;* lme

;;* lmx 17 system/sepolicy/private/bootanim.te

(allow bootanim init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 17 system/sepolicy/private/bootanim.te

(allow bootanim bootanim_system_prop (property_service (set)))
;;* lme

;;* lmx 17 system/sepolicy/private/bootanim.te

(allow bootanim bootanim_system_prop (file (read getattr map open)))
;;* lme

;;* lmx 20 system/sepolicy/private/bootanim.te

(allow bootanim bootanim_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 20 system/sepolicy/private/bootanim.te

(allow bootanim bootanim_data_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow bootanim bootanim_data_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 23 system/sepolicy/private/bootanim.te

(allow bootanim vendor_apex_metadata_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 25 system/sepolicy/private/bootanim.te

(allow bootanim hal_configstore (memfd_file (read write getattr map)))
;;* lme

;;* lmx 25 system/sepolicy/private/bootanim.te

(allow hal_configstore bootanim (memfd_file (read write getattr map)))
;;* lme

;;* lmx 26 system/sepolicy/private/bootanim.te

(allow bootanim hal_graphics_allocator (memfd_file (read write getattr map)))
;;* lme

;;* lmx 26 system/sepolicy/private/bootanim.te

(allow hal_graphics_allocator bootanim (memfd_file (read write getattr map)))
;;* lme

;;* lmx 27 system/sepolicy/private/bootanim.te

(allow bootanim hal_graphics_composer (memfd_file (read write getattr map)))
;;* lme

;;* lmx 27 system/sepolicy/private/bootanim.te

(allow hal_graphics_composer bootanim (memfd_file (read write getattr map)))
;;* lme

;;* lmx 29 system/sepolicy/private/bootanim.te

(allow bootanim servicemanager (binder (call transfer)))
;;* lme

;;* lmx 29 system/sepolicy/private/bootanim.te

(allow servicemanager bootanim (binder (call transfer)))
;;* lme

;;* lmx 30 system/sepolicy/private/bootanim.te

(allow bootanim surfaceflinger (binder (call transfer)))
;;* lme

;;* lmx 30 system/sepolicy/private/bootanim.te

(allow surfaceflinger bootanim (binder (transfer)))
;;* lme

;;* lmx 30 system/sepolicy/private/bootanim.te

(allow bootanim surfaceflinger (fd (use)))
;;* lme

;;* lmx 31 system/sepolicy/private/bootanim.te

(allow bootanim audioserver (binder (call transfer)))
;;* lme

;;* lmx 31 system/sepolicy/private/bootanim.te

(allow audioserver bootanim (binder (transfer)))
;;* lme

;;* lmx 31 system/sepolicy/private/bootanim.te

(allow bootanim audioserver (fd (use)))
;;* lme

;;* lmx 33 system/sepolicy/private/bootanim.te

(allow bootanim hwservicemanager (binder (call transfer)))
;;* lme

;;* lmx 33 system/sepolicy/private/bootanim.te

(allow hwservicemanager bootanim (binder (call transfer)))
;;* lme

;;* lmx 37 system/sepolicy/private/bootanim.te

(allow bootanim oemfs (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 39 system/sepolicy/private/bootanim.te

(allow bootanim bootanim_oem_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 41 system/sepolicy/private/bootanim.te

(allow bootanim audio_device (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 42 system/sepolicy/private/bootanim.te

(allow bootanim audio_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 44 system/sepolicy/private/bootanim.te

(allow bootanim audioserver_service (service_manager (find)))
;;* lme

;;* lmx 45 system/sepolicy/private/bootanim.te

(allow bootanim surfaceflinger_service (service_manager (find)))
;;* lme

;;* lmx 46 system/sepolicy/private/bootanim.te

(allow bootanim surfaceflinger (unix_stream_socket (read write)))
;;* lme

;;* lmx 49 system/sepolicy/private/bootanim.te

(allow bootanim dmabuf_system_heap_device (chr_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 51 system/sepolicy/private/bootanim.te

(allow bootanim hal_graphics_allocator (fd (use)))
;;* lme

;;* lmx 54 system/sepolicy/private/bootanim.te

(allow bootanim hal_graphics_composer (fd (use)))
;;* lme

;;* lmx 57 system/sepolicy/private/bootanim.te

(allow bootanim proc_meminfo (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 60 system/sepolicy/private/bootanim.te

(allow bootanim system_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 63 system/sepolicy/private/bootanim.te

(allow bootanim statsdw_socket (sock_file (write)))
;;* lme

;;* lmx 63 system/sepolicy/private/bootanim.te

(allow bootanim statsd (unix_dgram_socket (sendto)))
;;* lme

;;* lmx 3 system/sepolicy/private/bootstat.te

(allow init bootstat_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 3 system/sepolicy/private/bootstat.te

(allow init bootstat (process (transition)))
;;* lme

;;* lmx 3 system/sepolicy/private/bootstat.te

(allow bootstat bootstat_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init bootstat (process (noatsecure)))
;;* lmx 3 system/sepolicy/private/bootstat.te

(allow init bootstat (process (siginh rlimitinh)))
;;* lme

(typetransition init bootstat_exec process bootstat)
;;* lmx 7 system/sepolicy/private/bootstat.te

(allow bootstat servicemanager (binder (call transfer)))
;;* lme

;;* lmx 7 system/sepolicy/private/bootstat.te

(allow servicemanager bootstat (binder (call transfer)))
;;* lme

;;* lmx 8 system/sepolicy/private/bootstat.te

(allow bootstat hal_health (memfd_file (read write getattr map)))
;;* lme

;;* lmx 8 system/sepolicy/private/bootstat.te

(allow hal_health bootstat (memfd_file (read write getattr map)))
;;* lme

;;* lmx 11 system/sepolicy/private/bootstat.te

(allow bootstat boottime_prop (file (read getattr map open)))
;;* lme

;;* lmx 14 system/sepolicy/private/bootstat.te

(allow bootstat property_socket (sock_file (write)))
;;* lme

;;* lmx 14 system/sepolicy/private/bootstat.te

(allow bootstat init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 14 system/sepolicy/private/bootstat.te

(allow bootstat bootloader_boot_reason_prop (property_service (set)))
;;* lme

;;* lmx 14 system/sepolicy/private/bootstat.te

(allow bootstat bootloader_boot_reason_prop (file (read getattr map open)))
;;* lme

;;* lmx 15 system/sepolicy/private/bootstat.te

(allow bootstat property_socket (sock_file (write)))
;;* lme

;;* lmx 15 system/sepolicy/private/bootstat.te

(allow bootstat init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 15 system/sepolicy/private/bootstat.te

(allow bootstat system_boot_reason_prop (property_service (set)))
;;* lme

;;* lmx 15 system/sepolicy/private/bootstat.te

(allow bootstat system_boot_reason_prop (file (read getattr map open)))
;;* lme

;;* lmx 16 system/sepolicy/private/bootstat.te

(allow bootstat property_socket (sock_file (write)))
;;* lme

;;* lmx 16 system/sepolicy/private/bootstat.te

(allow bootstat init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 16 system/sepolicy/private/bootstat.te

(allow bootstat last_boot_reason_prop (property_service (set)))
;;* lme

;;* lmx 16 system/sepolicy/private/bootstat.te

(allow bootstat last_boot_reason_prop (file (read getattr map open)))
;;* lme

;;* lmx 18 system/sepolicy/private/bootstat.te

(allow bootstat runtime_event_log_tags_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 21 system/sepolicy/private/bootstat.te

(allow bootstat bootstat_data_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
;;* lme

;;* lmx 22 system/sepolicy/private/bootstat.te

(allow bootstat bootstat_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 24 system/sepolicy/private/bootstat.te

(allow bootstat metadata_file (dir (search)))
;;* lme

;;* lmx 25 system/sepolicy/private/bootstat.te

(allow bootstat metadata_bootstat_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
;;* lme

;;* lmx 26 system/sepolicy/private/bootstat.te

(allow bootstat metadata_bootstat_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 31 system/sepolicy/private/bootstat.te

(allow bootstat pstorefs (dir (search)))
;;* lme

;;* lmx 32 system/sepolicy/private/bootstat.te

(allow bootstat pstorefs (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 33 system/sepolicy/private/bootstat.te

(allow bootstat kernel (system (syslog_read)))
;;* lme

;;* lmx 36 system/sepolicy/private/bootstat.te

(allow bootstat logcat_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lme

;;* lmx 36 system/sepolicy/private/bootstat.te

(allow bootstat logdr_socket (sock_file (write)))
;;* lme

;;* lmx 36 system/sepolicy/private/bootstat.te

(allow bootstat logd (unix_stream_socket (connectto)))
;;* lme

;;* lmx 39 system/sepolicy/private/bootstat.te

(allow bootstat statsdw_socket (sock_file (write)))
;;* lme

;;* lmx 39 system/sepolicy/private/bootstat.te

(allow bootstat statsd (unix_dgram_socket (sendto)))
;;* lme

;;* lmx 49 system/sepolicy/private/bootstat.te

(neverallow base_typeattr_339 system_boot_reason_prop (property_service (set)))
;;* lme

;;* lmx 62 system/sepolicy/private/bootstat.te

(neverallow base_typeattr_340 bootloader_boot_reason_prop (file (ioctl read getattr lock map open watch watch_reads)))
(neverallow base_typeattr_340 last_boot_reason_prop (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 64 system/sepolicy/private/bootstat.te

(neverallow bootanim last_boot_reason_prop (file (ioctl read getattr lock map open watch watch_reads)))
(neverallow recovery last_boot_reason_prop (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 71 system/sepolicy/private/bootstat.te

(neverallow base_typeattr_341 bootloader_boot_reason_prop (property_service (set)))
(neverallow base_typeattr_341 last_boot_reason_prop (property_service (set)))
;;* lme

;;* lmx 73 system/sepolicy/private/bootstat.te

(neverallow system_server bootloader_boot_reason_prop (property_service (set)))
;;* lme

;;* lmx 35 system/sepolicy/private/boringssl_self_test.te

(allow init boringssl_self_test_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 35 system/sepolicy/private/boringssl_self_test.te

(allow init boringssl_self_test (process (transition)))
;;* lme

;;* lmx 35 system/sepolicy/private/boringssl_self_test.te

(allow boringssl_self_test boringssl_self_test_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init boringssl_self_test (process (noatsecure)))
;;* lmx 35 system/sepolicy/private/boringssl_self_test.te

(allow init boringssl_self_test (process (siginh rlimitinh)))
;;* lme

(typetransition init boringssl_self_test_exec process boringssl_self_test)
;;* lmx 38 system/sepolicy/private/boringssl_self_test.te

(allow init vendor_boringssl_self_test_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 38 system/sepolicy/private/boringssl_self_test.te

(allow init vendor_boringssl_self_test (process (transition)))
;;* lme

;;* lmx 38 system/sepolicy/private/boringssl_self_test.te

(allow vendor_boringssl_self_test vendor_boringssl_self_test_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init vendor_boringssl_self_test (process (noatsecure)))
;;* lmx 38 system/sepolicy/private/boringssl_self_test.te

(allow init vendor_boringssl_self_test (process (siginh rlimitinh)))
;;* lme

(typetransition init vendor_boringssl_self_test_exec process vendor_boringssl_self_test)
;;* lmx 50 system/sepolicy/private/boringssl_self_test.te

(allow boringssl_self_test boringssl_self_test_marker (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow vendor_boringssl_self_test boringssl_self_test_marker (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 52 system/sepolicy/private/boringssl_self_test.te

(allow boringssl_self_test boringssl_self_test_marker (dir (ioctl read write getattr lock open watch watch_reads add_name search)))
(allow vendor_boringssl_self_test boringssl_self_test_marker (dir (ioctl read write getattr lock open watch watch_reads add_name search)))
;;* lme

;;* lmx 56 system/sepolicy/private/boringssl_self_test.te

(allow boringssl_self_test kmsg_debug_device (chr_file (ioctl write getattr lock append map open)))
(allow vendor_boringssl_self_test kmsg_debug_device (chr_file (ioctl write getattr lock append map open)))
;;* lme

;;* lmx 66 system/sepolicy/private/boringssl_self_test.te

(neverallow base_typeattr_342 boringssl_self_test_marker (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 74 system/sepolicy/private/boringssl_self_test.te

(neverallow base_typeattr_342 boringssl_self_test_marker (dir (write)))
;;* lme

;;* lmx 10 system/sepolicy/private/bpfdomain.te

(neverallow base_typeattr_343 self (capability (net_admin net_raw)))
(neverallow base_typeattr_343 self (cap_userns (net_admin net_raw)))
;;* lme

;;* lmx 13 system/sepolicy/private/bpfdomain.te

(neverallow base_typeattr_344 base_typeattr_248 (bpf (map_create map_read map_write prog_load prog_run)))
;;* lme

;;* lmx 14 system/sepolicy/private/bpfdomain.te

(neverallow base_typeattr_344 bpffs_type (dir (ioctl read write create setattr lock relabelfrom relabelto append map unlink link rename execute quotaon audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 15 system/sepolicy/private/bpfdomain.te

(neverallow base_typeattr_344 bpffs_type (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 16 system/sepolicy/private/bpfdomain.te

(neverallow base_typeattr_344 bpffs_type (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
;;* lme

;;* lmx 18 system/sepolicy/private/bpfdomain.te

(allow bpfdomain fs_bpf (dir (search)))
;;* lme

;;* lmx 25 system/sepolicy/private/bpfdomain.te

(allow bpfdomain bpffs_type (lnk_file (read)))
;;* lme

;;* lmx 29 system/sepolicy/private/bpfdomain.te

(allow bpfdomain bpf_progs_loaded_prop (file (read getattr map open)))
;;* lme

;;* lmx 7 system/sepolicy/private/bpfloader.te

(allow bpfloader kmsg_device (chr_file (write lock append map open)))
;;* lme

;;* lmx 10 system/sepolicy/private/bpfloader.te

(allow bpfloader sysfs_btf (dir (search)))
;;* lme

;;* lmx 11 system/sepolicy/private/bpfloader.te

(allow bpfloader sysfs_btf (file (read getattr open)))
;;* lme

;;* lmx 14 system/sepolicy/private/bpfloader.te

(allow bpfloader proc_kallsyms (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 18 system/sepolicy/private/bpfloader.te

(allow bpfloader self (perf_event (open cpu kernel write)))
;;* lme

;;* lmx 19 system/sepolicy/private/bpfloader.te

(neverallow bpfloader self (perf_event (tracepoint read)))
;;* lme

;;* lmx 22 system/sepolicy/private/bpfloader.te

(allow bpfloader debugfs_tracing (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 25 system/sepolicy/private/bpfloader.te

(allow bpfloader bpffs_type (dir (read write create setattr open add_name remove_name search)))
;;* lme

;;* lmx 26 system/sepolicy/private/bpfloader.te

(allow bpfloader bpffs_type (file (read create getattr setattr rename)))
;;* lme

;;* lmx 27 system/sepolicy/private/bpfloader.te

(allow bpfloader bpffs_type (lnk_file (read create getattr)))
;;* lme

;;* lmx 28 system/sepolicy/private/bpfloader.te

(allow base_typeattr_345 fs_bpf (filesystem (associate)))
;;* lme

;;* lmx 31 system/sepolicy/private/bpfloader.te

(allow bpfloader self (bpf (map_create map_read map_write prog_load prog_run)))
;;* lme

;;* lmx 33 system/sepolicy/private/bpfloader.te

(allow bpfloader self (capability (chown net_admin sys_admin)))
;;* lme

;;* lmx 34 system/sepolicy/private/bpfloader.te

(allow bpfloader self (capability2 (syslog perfmon bpf)))
(allow bpfloader self (cap2_userns (syslog perfmon bpf)))
;;* lme

;;* lmx 36 system/sepolicy/private/bpfloader.te

(allow bpfloader sysfs_fs_fuse_bpf (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 38 system/sepolicy/private/bpfloader.te

(allow bpfloader proc_bpf (file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 40 system/sepolicy/private/bpfloader.te

(allow bpfloader property_socket (sock_file (write)))
;;* lme

;;* lmx 40 system/sepolicy/private/bpfloader.te

(allow bpfloader init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 40 system/sepolicy/private/bpfloader.te

(allow bpfloader bpf_progs_loaded_prop (property_service (set)))
;;* lme

;;* lmx 40 system/sepolicy/private/bpfloader.te

(allow bpfloader bpf_progs_loaded_prop (file (read getattr map open)))
;;* lme

;;* lmx 42 system/sepolicy/private/bpfloader.te

(allow bpfloader bpfloader_exec (file (execute_no_trans)))
;;* lme

;;* lmx 43 system/sepolicy/private/bpfloader.te

(allow bpfloader bpfloader_platform_exec (file (read getattr map execute open execute_no_trans)))
;;* lme

;;* lmx 50 system/sepolicy/private/bpfloader.te

(neverallow domain bpffs_type (dir (ioctl lock relabelfrom relabelto append map unlink link rename execute quotaon audit_access execmod watch watch_mount watch_sb watch_with_perm watch_reads reparent rmdir)))
;;* lme

;;* lmx 51 system/sepolicy/private/bpfloader.te

(neverallow base_typeattr_346 bpffs_type (dir (read write create setattr open add_name remove_name)))
;;* lme

;;* lmx 53 system/sepolicy/private/bpfloader.te

(neverallow domain bpffs_type (file (ioctl lock relabelfrom relabelto append unlink link execute quotaon mounton audit_access execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
;;* lme

;;* lmx 54 system/sepolicy/private/bpfloader.te

(neverallow base_typeattr_346 bpffs_type (file (create setattr map rename)))
;;* lme

;;* lmx 55 system/sepolicy/private/bpfloader.te

(neverallow base_typeattr_346 base_typeattr_347 (file (open)))
;;* lme

;;* lmx 56 system/sepolicy/private/bpfloader.te

(neverallow base_typeattr_348 bpffs_type (file (open)))
;;* lme

;;* lmx 57 system/sepolicy/private/bpfloader.te

(neverallow base_typeattr_349 fs_bpf (file (read getattr)))
;;* lme

;;* lmx 58 system/sepolicy/private/bpfloader.te

(neverallow base_typeattr_350 fs_bpf_cputimeinstate (file (read write getattr)))
;;* lme

;;* lmx 59 system/sepolicy/private/bpfloader.te

(neverallow base_typeattr_351 fs_bpf_kernelwakelockduration (file (read write getattr)))
;;* lme

;;* lmx 60 system/sepolicy/private/bpfloader.te

(neverallow base_typeattr_346 fs_bpf_loader (file (read getattr)))
;;* lme

;;* lmx 61 system/sepolicy/private/bpfloader.te

(neverallow base_typeattr_352 fs_bpf_net_private (file (read getattr)))
;;* lme

;;* lmx 62 system/sepolicy/private/bpfloader.te

(neverallow base_typeattr_353 fs_bpf_net_shared (file (read getattr)))
;;* lme

;;* lmx 63 system/sepolicy/private/bpfloader.te

(neverallow base_typeattr_354 fs_bpf_netd_readonly (file (read getattr)))
;;* lme

;;* lmx 64 system/sepolicy/private/bpfloader.te

(neverallow base_typeattr_355 fs_bpf_netd_shared (file (read getattr)))
;;* lme

;;* lmx 65 system/sepolicy/private/bpfloader.te

(neverallow base_typeattr_352 fs_bpf_tethering (file (read getattr)))
;;* lme

;;* lmx 66 system/sepolicy/private/bpfloader.te

(neverallow base_typeattr_356 fs_bpf_uprobestats (file (read getattr)))
;;* lme

;;* lmx 67 system/sepolicy/private/bpfloader.te

(neverallow base_typeattr_357 base_typeattr_358 (file (write)))
;;* lme

;;* lmx 69 system/sepolicy/private/bpfloader.te

(neverallow base_typeattr_346 bpffs_type (lnk_file (ioctl write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 70 system/sepolicy/private/bpfloader.te

(neverallow base_typeattr_344 bpffs_type (lnk_file (read)))
;;* lme

;;* lmx 72 system/sepolicy/private/bpfloader.te

(neverallow base_typeattr_346 base_typeattr_248 (bpf (prog_load)))
;;* lme

;;* lmx 73 system/sepolicy/private/bpfloader.te

(neverallow base_typeattr_344 base_typeattr_248 (bpf (map_create map_read map_write prog_run)))
;;* lme

;;* lmx 76 system/sepolicy/private/bpfloader.te

(neverallow base_typeattr_346 fs_bpf_loader (bpf (map_create map_read map_write prog_load prog_run)))
;;* lme

;;* lmx 77 system/sepolicy/private/bpfloader.te

(neverallow base_typeattr_346 fs_bpf_loader (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
;;* lme

;;* lmx 79 system/sepolicy/private/bpfloader.te

(neverallow base_typeattr_359 bpfloader_exec (file (execute execute_no_trans)))
;;* lme

;;* lmx 80 system/sepolicy/private/bpfloader.te

(neverallow base_typeattr_360 bpfloader_platform_exec (file (execute execute_no_trans)))
;;* lme

;;* lmx 82 system/sepolicy/private/bpfloader.te

(neverallow base_typeattr_361 fs_bpf_vendor (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
;;* lme

;;* lmx 84 system/sepolicy/private/bpfloader.te

(neverallow bpfloader base_typeattr_248 (tcp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind name_connect)))
(neverallow bpfloader base_typeattr_248 (udp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind)))
(neverallow bpfloader base_typeattr_248 (rawip_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind)))
;;* lme

;;* lmx 87 system/sepolicy/private/bpfloader.te

(neverallow base_typeattr_362 bpfloader (process (ptrace)))
;;* lme

;;* lmx 89 system/sepolicy/private/bpfloader.te

(neverallow base_typeattr_346 proc_bpf (file (write)))
;;* lme

;;* lmx 3 system/sepolicy/private/bufferhubd.te

(allow init bufferhubd_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 3 system/sepolicy/private/bufferhubd.te

(allow init bufferhubd (process (transition)))
;;* lme

;;* lmx 3 system/sepolicy/private/bufferhubd.te

(allow bufferhubd bufferhubd_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init bufferhubd (process (noatsecure)))
;;* lmx 3 system/sepolicy/private/bufferhubd.te

(allow init bufferhubd (process (siginh rlimitinh)))
;;* lme

(typetransition init bufferhubd_exec process bufferhubd)
;;* lmx 5 system/sepolicy/private/bufferhubd.te

(allow bufferhubd hal_graphics_allocator (memfd_file (read write getattr map)))
;;* lme

;;* lmx 5 system/sepolicy/private/bufferhubd.te

(allow hal_graphics_allocator bufferhubd (memfd_file (read write getattr map)))
;;* lme

;;* lmx 8 system/sepolicy/private/bufferhubd.te

(allow init pdx_bufferhub_client_endpoint_socket_type (unix_stream_socket (create bind)))
;;* lme

;;* lmx 8 system/sepolicy/private/bufferhubd.te

(allow bufferhubd pdx_bufferhub_client_endpoint_socket_type (unix_stream_socket (read write getattr setattr lock append listen accept getopt setopt shutdown)))
;;* lme

;;* lmx 8 system/sepolicy/private/bufferhubd.te

(allow bufferhubd self (process (setsockcreate)))
;;* lme

;;* lmx 8 system/sepolicy/private/bufferhubd.te

(allow bufferhubd pdx_bufferhub_client_channel_socket_type (unix_stream_socket (ioctl read write create getattr setattr lock append map bind connect listen accept getopt setopt shutdown)))
;;* lme

;;* lmx 8 system/sepolicy/private/bufferhubd.te

(neverallow base_typeattr_363 pdx_bufferhub_client_endpoint_socket_type (unix_stream_socket (listen accept)))
;;* lme

;;* lmx 9 system/sepolicy/private/bufferhubd.te

(allow bufferhubd pdx_performance_client_endpoint_dir_type (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 9 system/sepolicy/private/bufferhubd.te

(allow bufferhubd pdx_performance_client_endpoint_socket_type (sock_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 9 system/sepolicy/private/bufferhubd.te

(allow bufferhubd pdx_performance_client_endpoint_socket_type (unix_stream_socket (read write shutdown connectto)))
;;* lme

;;* lmx 9 system/sepolicy/private/bufferhubd.te

(allow bufferhubd pdx_performance_client_channel_socket_type (unix_stream_socket (read write getattr setattr lock append getopt setopt shutdown)))
;;* lme

;;* lmx 9 system/sepolicy/private/bufferhubd.te

(allow bufferhubd pdx_performance_client_server_type (fd (use)))
;;* lme

;;* lmx 9 system/sepolicy/private/bufferhubd.te

(allow pdx_performance_client_server_type bufferhubd (fd (use)))
;;* lme

;;* lmx 18 system/sepolicy/private/bufferhubd.te

(allow bufferhubd hal_omx_server (fd (use)))
;;* lme

;;* lmx 21 system/sepolicy/private/bufferhubd.te

(allow bufferhubd hal_codec2_server (fd (use)))
;;* lme

;;* lmx 1 system/sepolicy/private/camera_service_server.te

(allow camera_service_server fwk_camera_hwservice (hwservice_manager (add find)))
;;* lme

;;* lmx 1 system/sepolicy/private/camera_service_server.te

(allow camera_service_server hidl_base_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 1 system/sepolicy/private/camera_service_server.te

(neverallow base_typeattr_364 fwk_camera_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 4 system/sepolicy/private/cameraserver.te

(allow init cameraserver_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 4 system/sepolicy/private/cameraserver.te

(allow init cameraserver (process (transition)))
;;* lme

;;* lmx 4 system/sepolicy/private/cameraserver.te

(allow cameraserver cameraserver_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init cameraserver (process (noatsecure)))
;;* lmx 4 system/sepolicy/private/cameraserver.te

(allow init cameraserver (process (siginh rlimitinh)))
;;* lme

(typetransition init cameraserver_exec process cameraserver)
(typetransition cameraserver tmpfs file cameraserver_tmpfs)
;;* lmx 5 system/sepolicy/private/cameraserver.te

(allow cameraserver cameraserver_tmpfs (file (read write getattr map)))
;;* lme

;;* lmx 8 system/sepolicy/private/cameraserver.te

(allow cameraserver virtual_camera (binder (call)))
;;* lme

;;* lmx 10 system/sepolicy/private/cameraserver.te

(allow cameraserver servicemanager (binder (call transfer)))
;;* lme

;;* lmx 10 system/sepolicy/private/cameraserver.te

(allow servicemanager cameraserver (binder (call transfer)))
;;* lme

;;* lmx 11 system/sepolicy/private/cameraserver.te

(allow cameraserver binderservicedomain (binder (call transfer)))
;;* lme

;;* lmx 11 system/sepolicy/private/cameraserver.te

(allow binderservicedomain cameraserver (binder (transfer)))
;;* lme

;;* lmx 11 system/sepolicy/private/cameraserver.te

(allow cameraserver binderservicedomain (fd (use)))
;;* lme

;;* lmx 12 system/sepolicy/private/cameraserver.te

(allow cameraserver appdomain (binder (call transfer)))
;;* lme

;;* lmx 12 system/sepolicy/private/cameraserver.te

(allow appdomain cameraserver (binder (transfer)))
;;* lme

;;* lmx 12 system/sepolicy/private/cameraserver.te

(allow cameraserver appdomain (fd (use)))
;;* lme

;;* lmx 15 system/sepolicy/private/cameraserver.te

(allow cameraserver hal_camera (memfd_file (read write getattr map)))
;;* lme

;;* lmx 15 system/sepolicy/private/cameraserver.te

(allow hal_camera cameraserver (memfd_file (read write getattr map)))
;;* lme

;;* lmx 16 system/sepolicy/private/cameraserver.te

(allow cameraserver hal_camera_server (process (signal)))
;;* lme

;;* lmx 17 system/sepolicy/private/cameraserver.te

(allow cameraserver hal_graphics_allocator (memfd_file (read write getattr map)))
;;* lme

;;* lmx 17 system/sepolicy/private/cameraserver.te

(allow hal_graphics_allocator cameraserver (memfd_file (read write getattr map)))
;;* lme

;;* lmx 19 system/sepolicy/private/cameraserver.te

(allow cameraserver dmabuf_system_heap_device (chr_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 22 system/sepolicy/private/cameraserver.te

(allow cameraserver hal_graphics_composer (fd (use)))
;;* lme

;;* lmx 24 system/sepolicy/private/cameraserver.te

(allow cameraserver cameraserver_service (service_manager (add find)))
;;* lme

;;* lmx 24 system/sepolicy/private/cameraserver.te

(neverallow base_typeattr_365 cameraserver_service (service_manager (add)))
;;* lme

;;* lmx 24 system/sepolicy/private/cameraserver.te

(allow cameraserver su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 25 system/sepolicy/private/cameraserver.te

(allow cameraserver fwk_camera_service (service_manager (add find)))
;;* lme

;;* lmx 25 system/sepolicy/private/cameraserver.te

(neverallow base_typeattr_365 fwk_camera_service (service_manager (add)))
;;* lme

;;* lmx 25 system/sepolicy/private/cameraserver.te

(allow cameraserver su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 26 system/sepolicy/private/cameraserver.te

(allow cameraserver fwk_camera_hwservice (hwservice_manager (add find)))
;;* lme

;;* lmx 26 system/sepolicy/private/cameraserver.te

(allow cameraserver hidl_base_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 26 system/sepolicy/private/cameraserver.te

(neverallow base_typeattr_365 fwk_camera_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 28 system/sepolicy/private/cameraserver.te

(allow cameraserver activity_service (service_manager (find)))
;;* lme

;;* lmx 29 system/sepolicy/private/cameraserver.te

(allow cameraserver appops_service (service_manager (find)))
;;* lme

;;* lmx 30 system/sepolicy/private/cameraserver.te

(allow cameraserver audioserver_service (service_manager (find)))
;;* lme

;;* lmx 31 system/sepolicy/private/cameraserver.te

(allow cameraserver batterystats_service (service_manager (find)))
;;* lme

;;* lmx 32 system/sepolicy/private/cameraserver.te

(allow cameraserver cameraproxy_service (service_manager (find)))
;;* lme

;;* lmx 33 system/sepolicy/private/cameraserver.te

(allow cameraserver mediaserver_service (service_manager (find)))
;;* lme

;;* lmx 34 system/sepolicy/private/cameraserver.te

(allow cameraserver package_native_service (service_manager (find)))
;;* lme

;;* lmx 35 system/sepolicy/private/cameraserver.te

(allow cameraserver permission_checker_service (service_manager (find)))
;;* lme

;;* lmx 36 system/sepolicy/private/cameraserver.te

(allow cameraserver processinfo_service (service_manager (find)))
;;* lme

;;* lmx 37 system/sepolicy/private/cameraserver.te

(allow cameraserver scheduling_policy_service (service_manager (find)))
;;* lme

;;* lmx 38 system/sepolicy/private/cameraserver.te

(allow cameraserver sensor_privacy_service (service_manager (find)))
;;* lme

;;* lmx 39 system/sepolicy/private/cameraserver.te

(allow cameraserver surfaceflinger_service (service_manager (find)))
;;* lme

;;* lmx 41 system/sepolicy/private/cameraserver.te

(allow cameraserver hidl_token_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 42 system/sepolicy/private/cameraserver.te

(allow cameraserver hal_camera_service (service_manager (find)))
;;* lme

;;* lmx 43 system/sepolicy/private/cameraserver.te

(allow cameraserver virtual_camera_service (service_manager (find)))
;;* lme

;;* lmx 46 system/sepolicy/private/cameraserver.te

(allow cameraserver surfaceflinger (unix_stream_socket (read write)))
;;* lme

;;* lmx 49 system/sepolicy/private/cameraserver.te

(allow cameraserver adbd (fd (use)))
;;* lme

;;* lmx 50 system/sepolicy/private/cameraserver.te

(allow cameraserver adbd (unix_stream_socket (read write)))
;;* lme

;;* lmx 51 system/sepolicy/private/cameraserver.te

(allow cameraserver shell (fd (use)))
;;* lme

;;* lmx 52 system/sepolicy/private/cameraserver.te

(allow cameraserver shell (unix_stream_socket (read write)))
;;* lme

;;* lmx 53 system/sepolicy/private/cameraserver.te

(allow cameraserver shell (fifo_file (read write)))
;;* lme

;;* lmx 56 system/sepolicy/private/cameraserver.te

(allow cameraserver self (capability (sys_nice)))
(allow cameraserver self (cap_userns (sys_nice)))
;;* lme

;;* lmx 59 system/sepolicy/private/cameraserver.te

(allow cameraserver mediametrics_service (service_manager (find)))
;;* lme

;;* lmx 60 system/sepolicy/private/cameraserver.te

(allow cameraserver hal_codec2 (memfd_file (read write getattr map)))
;;* lme

;;* lmx 60 system/sepolicy/private/cameraserver.te

(allow hal_codec2 cameraserver (memfd_file (read write getattr map)))
;;* lme

;;* lmx 61 system/sepolicy/private/cameraserver.te

(allow cameraserver hal_omx (memfd_file (read write getattr map)))
;;* lme

;;* lmx 61 system/sepolicy/private/cameraserver.te

(allow hal_omx cameraserver (memfd_file (read write getattr map)))
;;* lme

;;* lmx 62 system/sepolicy/private/cameraserver.te

(allow cameraserver hal_allocator (memfd_file (read write getattr map)))
;;* lme

;;* lmx 62 system/sepolicy/private/cameraserver.te

(allow hal_allocator cameraserver (memfd_file (read write getattr map)))
;;* lme

;;* lmx 65 system/sepolicy/private/cameraserver.te

(allow cameraserver su (fd (use)))
;;* lme

;;* lmx 65 system/sepolicy/private/cameraserver.te

(allow cameraserver su (fifo_file (read write)))
;;* lme

;;* lmx 65 system/sepolicy/private/cameraserver.te

(allow cameraserver su (unix_stream_socket (read write)))
;;* lme

;;* lmx 77 system/sepolicy/private/cameraserver.te

(neverallow cameraserver fs_type (file (execute_no_trans)))
(neverallow cameraserver file_type (file (execute_no_trans)))
;;* lme

;;* lmx 89 system/sepolicy/private/cameraserver.te

(neverallow cameraserver domain (udp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind)))
(neverallow cameraserver domain (rawip_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind)))
;;* lme

;;* lmx 90 system/sepolicy/private/cameraserver.te

(neverallow cameraserver base_typeattr_329 (tcp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind name_connect)))
;;* lme

;;* lmx 3 system/sepolicy/private/canhalconfigurator.te

(allow init canhalconfigurator_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 3 system/sepolicy/private/canhalconfigurator.te

(allow init canhalconfigurator (process (transition)))
;;* lme

;;* lmx 3 system/sepolicy/private/canhalconfigurator.te

(allow canhalconfigurator canhalconfigurator_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init canhalconfigurator (process (noatsecure)))
;;* lmx 3 system/sepolicy/private/canhalconfigurator.te

(allow init canhalconfigurator (process (siginh rlimitinh)))
;;* lme

(typetransition init canhalconfigurator_exec process canhalconfigurator)
;;* lmx 7 system/sepolicy/private/canhalconfigurator.te

(allow canhalconfigurator hal_can_controller (memfd_file (read write getattr map)))
;;* lme

;;* lmx 7 system/sepolicy/private/canhalconfigurator.te

(allow hal_can_controller canhalconfigurator (memfd_file (read write getattr map)))
;;* lme

;;* lmx 9 system/sepolicy/private/canhalconfigurator.te

(allow canhalconfigurator servicemanager (binder (call transfer)))
;;* lme

;;* lmx 9 system/sepolicy/private/canhalconfigurator.te

(allow servicemanager canhalconfigurator (binder (call transfer)))
;;* lme

;;* lmx 10 system/sepolicy/private/canhalconfigurator.te

(allow hal_can_controller canhalconfigurator (binder (call transfer)))
;;* lme

;;* lmx 10 system/sepolicy/private/canhalconfigurator.te

(allow canhalconfigurator hal_can_controller (binder (transfer)))
;;* lme

;;* lmx 10 system/sepolicy/private/canhalconfigurator.te

(allow hal_can_controller canhalconfigurator (fd (use)))
;;* lme

;;* lmx 10 system/sepolicy/private/casefolding_remover.te

(allow init casefolding_remover_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 10 system/sepolicy/private/casefolding_remover.te

(allow init casefolding_remover (process (transition)))
;;* lme

;;* lmx 10 system/sepolicy/private/casefolding_remover.te

(allow casefolding_remover casefolding_remover_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init casefolding_remover (process (noatsecure)))
;;* lmx 10 system/sepolicy/private/casefolding_remover.te

(allow init casefolding_remover (process (siginh rlimitinh)))
;;* lme

(typetransition init casefolding_remover_exec process casefolding_remover)
;;* lmx 12 system/sepolicy/private/casefolding_remover.te

(allow casefolding_remover storage_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 13 system/sepolicy/private/casefolding_remover.te

(allow casefolding_remover casefolding_override_prop (file (read getattr map open)))
;;* lme

;;* lmx 14 system/sepolicy/private/casefolding_remover.te

(allow casefolding_remover property_socket (sock_file (write)))
;;* lme

;;* lmx 14 system/sepolicy/private/casefolding_remover.te

(allow casefolding_remover init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 14 system/sepolicy/private/casefolding_remover.te

(allow casefolding_remover casefolding_status_prop (property_service (set)))
;;* lme

;;* lmx 14 system/sepolicy/private/casefolding_remover.te

(allow casefolding_remover casefolding_status_prop (file (read getattr map open)))
;;* lme

;;* lmx 16 system/sepolicy/private/casefolding_remover.te

(allow casefolding_remover casefolding_remover (capability (chown dac_override)))
;;* lme

;;* lmx 17 system/sepolicy/private/casefolding_remover.te

(allow casefolding_remover system_data_root_file (dir (read write create open add_name remove_name rmdir)))
;;* lme

;;* lmx 18 system/sepolicy/private/casefolding_remover.te

(allow casefolding_remover media_userdir_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 19 system/sepolicy/private/casefolding_remover.te

(allow casefolding_remover media_userdir_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 20 system/sepolicy/private/casefolding_remover.te

(allow casefolding_remover media_rw_data_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 21 system/sepolicy/private/casefolding_remover.te

(allow casefolding_remover media_rw_data_file (file (getattr setattr unlink link)))
(allow casefolding_remover media_rw_data_file (lnk_file (getattr setattr unlink link)))
;;* lme

;;* lmx 22 system/sepolicy/private/casefolding_remover.te

(allowx casefolding_remover media_userdir_file (ioctl dir ((range 0x6601 0x6602))))
;;* lme

;;* lmx 24 system/sepolicy/private/casefolding_remover.te

(allow casefolding_remover servicemanager (binder (call transfer)))
;;* lme

;;* lmx 25 system/sepolicy/private/casefolding_remover.te

(allow casefolding_remover casefolding_remover_service (service_manager (add find)))
;;* lme

;;* lmx 25 system/sepolicy/private/casefolding_remover.te

(neverallow base_typeattr_366 casefolding_remover_service (service_manager (add)))
;;* lme

;;* lmx 25 system/sepolicy/private/casefolding_remover.te

(allow casefolding_remover su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 28 system/sepolicy/private/casefolding_remover.te

(neverallow base_typeattr_247 casefolding_remover (process (transition dyntransition)))
;;* lme

;;* lmx 31 system/sepolicy/private/casefolding_remover.te

(neverallow base_typeattr_331 casefolding_remover (binder (call)))
;;* lme

;;* lmx 4 system/sepolicy/private/charger.te

(allow charger hal_health (memfd_file (read write getattr map)))
;;* lme

;;* lmx 4 system/sepolicy/private/charger.te

(allow hal_health charger (memfd_file (read write getattr map)))
;;* lme

;;* lmx 9 system/sepolicy/private/charger.te

(allow charger property_socket (sock_file (write)))
;;* lme

;;* lmx 9 system/sepolicy/private/charger.te

(allow charger init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 9 system/sepolicy/private/charger.te

(allow charger system_prop (property_service (set)))
;;* lme

;;* lmx 9 system/sepolicy/private/charger.te

(allow charger system_prop (file (read getattr map open)))
;;* lme

;;* lmx 10 system/sepolicy/private/charger.te

(allow charger property_socket (sock_file (write)))
;;* lme

;;* lmx 10 system/sepolicy/private/charger.te

(allow charger init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 10 system/sepolicy/private/charger.te

(allow charger exported_system_prop (property_service (set)))
;;* lme

;;* lmx 10 system/sepolicy/private/charger.te

(allow charger exported_system_prop (file (read getattr map open)))
;;* lme

;;* lmx 11 system/sepolicy/private/charger.te

(allow charger property_socket (sock_file (write)))
;;* lme

;;* lmx 11 system/sepolicy/private/charger.te

(allow charger init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 11 system/sepolicy/private/charger.te

(allow charger exported3_system_prop (property_service (set)))
;;* lme

;;* lmx 11 system/sepolicy/private/charger.te

(allow charger exported3_system_prop (file (read getattr map open)))
;;* lme

;;* lmx 14 system/sepolicy/private/charger.te

(allow charger charger_prop (file (read getattr map open)))
;;* lme

;;* lmx 16 system/sepolicy/private/charger.te

(neverallow base_typeattr_367 charger_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 3 system/sepolicy/private/charger_type.te

(allow charger_type property_socket (sock_file (write)))
;;* lme

;;* lmx 3 system/sepolicy/private/charger_type.te

(allow charger_type init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 3 system/sepolicy/private/charger_type.te

(allow charger_type charger_status_prop (property_service (set)))
;;* lme

;;* lmx 3 system/sepolicy/private/charger_type.te

(allow charger_type charger_status_prop (file (read getattr map open)))
;;* lme

;;* lmx 4 system/sepolicy/private/charger_type.te

(allow charger_type charger_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 7 system/sepolicy/private/charger_type.te

(allow charger_type recovery_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 10 system/sepolicy/private/charger_type.te

(allow charger_type kmsg_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 13 system/sepolicy/private/charger_type.te

(allow charger_type rootfs (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 13 system/sepolicy/private/charger_type.te

(allow charger_type rootfs (file (ioctl read getattr lock map open watch watch_reads)))
(allow charger_type rootfs (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 14 system/sepolicy/private/charger_type.te

(allow charger_type cgroup (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 14 system/sepolicy/private/charger_type.te

(allow charger_type cgroup (file (ioctl read getattr lock map open watch watch_reads)))
(allow charger_type cgroup (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 15 system/sepolicy/private/charger_type.te

(allow charger_type cgroup_v2 (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 15 system/sepolicy/private/charger_type.te

(allow charger_type cgroup_v2 (file (ioctl read getattr lock map open watch watch_reads)))
(allow charger_type cgroup_v2 (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 18 system/sepolicy/private/charger_type.te

(allow charger_type sysfs_type (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 23 system/sepolicy/private/charger_type.te

(allow charger_type self (capability (sys_boot sys_tty_config)))
(allow charger_type self (cap_userns (sys_boot sys_tty_config)))
;;* lme

;;* lmx 25 system/sepolicy/private/charger_type.te

(allow charger_type sysfs_wake_lock (file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 25 system/sepolicy/private/charger_type.te

(allow charger_type self (capability2 (block_suspend)))
(allow charger_type self (cap2_userns (block_suspend)))
;;* lme

;;* lmx 25 system/sepolicy/private/charger_type.te

(allow charger_type system_suspend_server (binder (call transfer)))
;;* lme

;;* lmx 25 system/sepolicy/private/charger_type.te

(allow system_suspend_server charger_type (binder (transfer)))
;;* lme

;;* lmx 25 system/sepolicy/private/charger_type.te

(allow charger_type system_suspend_server (fd (use)))
;;* lme

;;* lmx 25 system/sepolicy/private/charger_type.te

(allow charger_type system_suspend_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 25 system/sepolicy/private/charger_type.te

(allow charger_type hwservicemanager (binder (call transfer)))
;;* lme

;;* lmx 25 system/sepolicy/private/charger_type.te

(allow hwservicemanager charger_type (binder (call transfer)))
;;* lme

;;* lmx 25 system/sepolicy/private/charger_type.te

(allow charger_type hwservicemanager_prop (file (read getattr map open)))
;;* lme

;;* lmx 25 system/sepolicy/private/charger_type.te

(allow charger_type hidl_manager_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 25 system/sepolicy/private/charger_type.te

(allow charger_type hal_system_suspend_service (service_manager (find)))
;;* lme

;;* lmx 25 system/sepolicy/private/charger_type.te

(allow charger_type servicemanager (binder (call transfer)))
;;* lme

;;* lmx 25 system/sepolicy/private/charger_type.te

(allow servicemanager charger_type (binder (call transfer)))
;;* lme

;;* lmx 27 system/sepolicy/private/charger_type.te

(allow charger_type self (netlink_kobject_uevent_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
;;* lme

;;* lmx 30 system/sepolicy/private/charger_type.te

(allow charger_type sysfs_power (file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 32 system/sepolicy/private/charger_type.te

(allow charger_type sysfs_batteryinfo (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 32 system/sepolicy/private/charger_type.te

(allow charger_type sysfs_batteryinfo (file (ioctl read getattr lock map open watch watch_reads)))
(allow charger_type sysfs_batteryinfo (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 37 system/sepolicy/private/charger_type.te

(allow charger_type pstorefs (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 38 system/sepolicy/private/charger_type.te

(allow charger_type pstorefs (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 40 system/sepolicy/private/charger_type.te

(allow charger_type graphics_device (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 41 system/sepolicy/private/charger_type.te

(allow charger_type graphics_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 42 system/sepolicy/private/charger_type.te

(allow charger_type input_device (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 43 system/sepolicy/private/charger_type.te

(allow charger_type input_device (chr_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 44 system/sepolicy/private/charger_type.te

(allow charger_type tty_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 45 system/sepolicy/private/charger_type.te

(allow charger_type proc_sysrq (file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 54 system/sepolicy/private/charger_type.te

(neverallow base_typeattr_368 charger_config_prop (property_service (set)))
;;* lme

;;* lmx 64 system/sepolicy/private/charger_type.te

(neverallow base_typeattr_369 charger_status_prop (property_service (set)))
;;* lme

;;* lmx 76 system/sepolicy/private/charger_type.te

(neverallow base_typeattr_370 charger_config_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow base_typeattr_370 charger_status_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 8 system/sepolicy/private/clatd.te

(allow clatd system_server (fd (use)))
;;* lme

;;* lmx 9 system/sepolicy/private/clatd.te

(allow clatd system_server (packet_socket (read write)))
;;* lme

;;* lmx 10 system/sepolicy/private/clatd.te

(allow clatd system_server (rawip_socket (read write)))
;;* lme

;;* lmx 12 system/sepolicy/private/clatd.te

(allow clatd tun_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 5 system/sepolicy/private/compos_fd_server.te

(allow compos_fd_server composd (fd (use)))
;;* lme

;;* lmx 8 system/sepolicy/private/compos_fd_server.te

(allow compos_fd_server apex_art_staging_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 9 system/sepolicy/private/compos_fd_server.te

(allow compos_fd_server apex_art_staging_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 12 system/sepolicy/private/compos_fd_server.te

(allow compos_fd_server apex_art_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 13 system/sepolicy/private/compos_fd_server.te

(allow compos_fd_server apex_art_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 16 system/sepolicy/private/compos_fd_server.te

(allow compos_fd_server composd (fifo_file (write)))
;;* lme

;;* lmx 19 system/sepolicy/private/compos_fd_server.te

(allow compos_fd_server composd (fifo_file (read)))
;;* lme

;;* lmx 22 system/sepolicy/private/compos_fd_server.te

(allow compos_fd_server self (vsock_socket (read write create getattr setattr lock append map bind connect listen accept getopt setopt shutdown)))
;;* lme

;;* lmx 25 system/sepolicy/private/compos_fd_server.te

(neverallow base_typeattr_371 compos_fd_server (process (transition)))
;;* lme

;;* lmx 26 system/sepolicy/private/compos_fd_server.te

(neverallow base_typeattr_248 compos_fd_server (process (dyntransition)))
;;* lme

;;* lmx 6 system/sepolicy/private/compos_verify.te

(allow compos_verify servicemanager (binder (call transfer)))
;;* lme

;;* lmx 6 system/sepolicy/private/compos_verify.te

(allow servicemanager compos_verify (binder (call transfer)))
;;* lme

;;* lmx 7 system/sepolicy/private/compos_verify.te

(allow compos_verify virtualizationmanager_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 7 system/sepolicy/private/compos_verify.te

(allow compos_verify compos_verify_virtualizationmanager (process (transition)))
;;* lme

;;* lmx 7 system/sepolicy/private/compos_verify.te

(allow compos_verify_virtualizationmanager virtualizationmanager_exec (file (read getattr map execute open entrypoint)))
;;* lme

;;* lmx 7 system/sepolicy/private/compos_verify.te

(allow compos_verify_virtualizationmanager compos_verify (process (sigchld)))
;;* lme

(dontaudit compos_verify compos_verify_virtualizationmanager (process (noatsecure)))
;;* lmx 7 system/sepolicy/private/compos_verify.te

(allow compos_verify compos_verify_virtualizationmanager (process (siginh rlimitinh)))
;;* lme

(typetransition compos_verify virtualizationmanager_exec process compos_verify_virtualizationmanager)
;;* lmx 7 system/sepolicy/private/compos_verify.te

(allow compos_verify_virtualizationmanager crosvm_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 7 system/sepolicy/private/compos_verify.te

(allow compos_verify_virtualizationmanager compos_verify_virtmgr_crosvm (process (transition)))
;;* lme

;;* lmx 7 system/sepolicy/private/compos_verify.te

(allow compos_verify_virtmgr_crosvm crosvm_exec (file (read getattr map execute open entrypoint)))
;;* lme

;;* lmx 7 system/sepolicy/private/compos_verify.te

(allow compos_verify_virtmgr_crosvm compos_verify_virtualizationmanager (process (sigchld)))
;;* lme

(dontaudit compos_verify_virtualizationmanager compos_verify_virtmgr_crosvm (process (noatsecure)))
;;* lmx 7 system/sepolicy/private/compos_verify.te

(allow compos_verify_virtualizationmanager compos_verify_virtmgr_crosvm (process (siginh rlimitinh)))
;;* lme

(typetransition compos_verify_virtualizationmanager crosvm_exec process compos_verify_virtmgr_crosvm)
;;* lmx 7 system/sepolicy/private/compos_verify.te

(allow compos_verify_virtualizationmanager hal_secretkeeper (memfd_file (read write getattr map)))
;;* lme

;;* lmx 7 system/sepolicy/private/compos_verify.te

(allow hal_secretkeeper compos_verify_virtualizationmanager (memfd_file (read write getattr map)))
;;* lme

;;* lmx 7 system/sepolicy/private/compos_verify.te

(allow compos_verify_virtualizationmanager hal_vm_capabilities (memfd_file (read write getattr map)))
;;* lme

;;* lmx 7 system/sepolicy/private/compos_verify.te

(allow hal_vm_capabilities compos_verify_virtualizationmanager (memfd_file (read write getattr map)))
;;* lme

;;* lmx 7 system/sepolicy/private/compos_verify.te

(allow compos_verify_virtualizationmanager compos_verify (unix_stream_socket (ioctl read write getattr getopt)))
(allow compos_verify_virtmgr_crosvm compos_verify (unix_stream_socket (ioctl read write getattr getopt)))
;;* lme

;;* lmx 7 system/sepolicy/private/compos_verify.te

(allow compos_verify_virtualizationmanager compos_verify (fd (use)))
(allow compos_verify_virtmgr_crosvm compos_verify (fd (use)))
;;* lme

;;* lmx 7 system/sepolicy/private/compos_verify.te

(allow compos_verify compos_verify_virtualizationmanager (fd (use)))
;;* lme

;;* lmx 7 system/sepolicy/private/compos_verify.te

(allow compos_verify_virtualizationmanager compos_verify (fifo_file (ioctl read write getattr)))
(allow compos_verify_virtmgr_crosvm compos_verify (fifo_file (ioctl read write getattr)))
;;* lme

;;* lmx 7 system/sepolicy/private/compos_verify.te

(allow compos_verify compos_verify_virtualizationmanager (vsock_socket (read write getattr getopt)))
;;* lme

;;* lmx 7 system/sepolicy/private/compos_verify.te

(allow compos_verify hypervisor_prop (file (read getattr map open)))
;;* lme

;;* lmx 7 system/sepolicy/private/compos_verify.te

(allow compos_verify virtualizationservice_data_file (file (read getattr)))
;;* lme

;;* lmx 7 system/sepolicy/private/compos_verify.te

(allow compos_verify_virtualizationmanager compos_verify (dir (search)))
;;* lme

;;* lmx 7 system/sepolicy/private/compos_verify.te

(allow compos_verify_virtualizationmanager compos_verify (file (read)))
;;* lme

;;* lmx 7 system/sepolicy/private/compos_verify.te

(allow compos_verify_virtualizationmanager compos_verify (lnk_file (read)))
;;* lme

;;* lmx 7 system/sepolicy/private/compos_verify.te

(allow compos_verify compos_verify_virtmgr_crosvm (process (sigkill)))
;;* lme

;;* lmx 7 system/sepolicy/private/compos_verify.te

(allow compos_verify_virtmgr_crosvm hal_graphics_allocator (memfd_file (read write getattr map)))
;;* lme

;;* lmx 7 system/sepolicy/private/compos_verify.te

(allow hal_graphics_allocator compos_verify_virtmgr_crosvm (memfd_file (read write getattr map)))
;;* lme

;;* lmx 10 system/sepolicy/private/compos_verify.te

(allow compos_verify apex_module_data_file (dir (search)))
;;* lme

;;* lmx 11 system/sepolicy/private/compos_verify.te

(allow compos_verify apex_compos_data_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
;;* lme

;;* lmx 12 system/sepolicy/private/compos_verify.te

(allow compos_verify apex_compos_data_file (file (ioctl read write create getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 15 system/sepolicy/private/compos_verify.te

(allow compos_verify apex_art_data_file (dir (search)))
;;* lme

;;* lmx 16 system/sepolicy/private/compos_verify.te

(allow compos_verify apex_art_data_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 19 system/sepolicy/private/compos_verify.te

(allow compos_verify odsign (fd (use)))
;;* lme

;;* lmx 20 system/sepolicy/private/compos_verify.te

(allow compos_verify odsign_devpts (chr_file (read write)))
;;* lme

;;* lmx 25 system/sepolicy/private/compos_verify.te

(allow compos_verify odsign_devpts (chr_file (ioctl)))
;;* lme

;;* lmx 28 system/sepolicy/private/compos_verify.te

(allowx compos_verify odsign_devpts (ioctl chr_file (0x5401 (range 0x540f 0x5410))))
;;* lme

;;* lmx 31 system/sepolicy/private/compos_verify.te

(neverallow base_typeattr_372 compos_verify (process (transition)))
;;* lme

;;* lmx 32 system/sepolicy/private/compos_verify.te

(neverallow base_typeattr_248 compos_verify (process (dyntransition)))
;;* lme

;;* lmx 5 system/sepolicy/private/composd.te

(allow init composd_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 5 system/sepolicy/private/composd.te

(allow init composd (process (transition)))
;;* lme

;;* lmx 5 system/sepolicy/private/composd.te

(allow composd composd_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init composd (process (noatsecure)))
;;* lmx 5 system/sepolicy/private/composd.te

(allow init composd (process (siginh rlimitinh)))
;;* lme

(typetransition init composd_exec process composd)
;;* lmx 6 system/sepolicy/private/composd.te

(allow composd servicemanager (binder (call transfer)))
;;* lme

;;* lmx 6 system/sepolicy/private/composd.te

(allow servicemanager composd (binder (call transfer)))
;;* lme

;;* lmx 7 system/sepolicy/private/composd.te

(allow composd compos_service (service_manager (add find)))
;;* lme

;;* lmx 7 system/sepolicy/private/composd.te

(neverallow base_typeattr_371 compos_service (service_manager (add)))
;;* lme

;;* lmx 7 system/sepolicy/private/composd.te

(allow composd su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 10 system/sepolicy/private/composd.te

(allow composd system_server (binder (call transfer)))
;;* lme

;;* lmx 10 system/sepolicy/private/composd.te

(allow system_server composd (binder (transfer)))
;;* lme

;;* lmx 10 system/sepolicy/private/composd.te

(allow composd system_server (fd (use)))
;;* lme

;;* lmx 12 system/sepolicy/private/composd.te

(allow composd artd (binder (call transfer)))
;;* lme

;;* lmx 12 system/sepolicy/private/composd.te

(allow artd composd (binder (transfer)))
;;* lme

;;* lmx 12 system/sepolicy/private/composd.te

(allow composd artd (fd (use)))
;;* lme

;;* lmx 22 system/sepolicy/private/composd.te

(neverallow base_typeattr_373 composd (binder (call)))
;;* lme

;;* lmx 25 system/sepolicy/private/composd.te

(allow composd virtualizationmanager_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 25 system/sepolicy/private/composd.te

(allow composd composd_virtualizationmanager (process (transition)))
;;* lme

;;* lmx 25 system/sepolicy/private/composd.te

(allow composd_virtualizationmanager virtualizationmanager_exec (file (read getattr map execute open entrypoint)))
;;* lme

;;* lmx 25 system/sepolicy/private/composd.te

(allow composd_virtualizationmanager composd (process (sigchld)))
;;* lme

(dontaudit composd composd_virtualizationmanager (process (noatsecure)))
;;* lmx 25 system/sepolicy/private/composd.te

(allow composd composd_virtualizationmanager (process (siginh rlimitinh)))
;;* lme

(typetransition composd virtualizationmanager_exec process composd_virtualizationmanager)
;;* lmx 25 system/sepolicy/private/composd.te

(allow composd_virtualizationmanager crosvm_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 25 system/sepolicy/private/composd.te

(allow composd_virtualizationmanager composd_virtmgr_crosvm (process (transition)))
;;* lme

;;* lmx 25 system/sepolicy/private/composd.te

(allow composd_virtmgr_crosvm crosvm_exec (file (read getattr map execute open entrypoint)))
;;* lme

;;* lmx 25 system/sepolicy/private/composd.te

(allow composd_virtmgr_crosvm composd_virtualizationmanager (process (sigchld)))
;;* lme

(dontaudit composd_virtualizationmanager composd_virtmgr_crosvm (process (noatsecure)))
;;* lmx 25 system/sepolicy/private/composd.te

(allow composd_virtualizationmanager composd_virtmgr_crosvm (process (siginh rlimitinh)))
;;* lme

(typetransition composd_virtualizationmanager crosvm_exec process composd_virtmgr_crosvm)
;;* lmx 25 system/sepolicy/private/composd.te

(allow composd_virtualizationmanager hal_secretkeeper (memfd_file (read write getattr map)))
;;* lme

;;* lmx 25 system/sepolicy/private/composd.te

(allow hal_secretkeeper composd_virtualizationmanager (memfd_file (read write getattr map)))
;;* lme

;;* lmx 25 system/sepolicy/private/composd.te

(allow composd_virtualizationmanager hal_vm_capabilities (memfd_file (read write getattr map)))
;;* lme

;;* lmx 25 system/sepolicy/private/composd.te

(allow hal_vm_capabilities composd_virtualizationmanager (memfd_file (read write getattr map)))
;;* lme

;;* lmx 25 system/sepolicy/private/composd.te

(allow composd_virtualizationmanager composd (unix_stream_socket (ioctl read write getattr getopt)))
(allow composd_virtmgr_crosvm composd (unix_stream_socket (ioctl read write getattr getopt)))
;;* lme

;;* lmx 25 system/sepolicy/private/composd.te

(allow composd_virtualizationmanager composd (fd (use)))
(allow composd_virtmgr_crosvm composd (fd (use)))
;;* lme

;;* lmx 25 system/sepolicy/private/composd.te

(allow composd composd_virtualizationmanager (fd (use)))
;;* lme

;;* lmx 25 system/sepolicy/private/composd.te

(allow composd_virtualizationmanager composd (fifo_file (ioctl read write getattr)))
(allow composd_virtmgr_crosvm composd (fifo_file (ioctl read write getattr)))
;;* lme

;;* lmx 25 system/sepolicy/private/composd.te

(allow composd composd_virtualizationmanager (vsock_socket (read write getattr getopt)))
;;* lme

;;* lmx 25 system/sepolicy/private/composd.te

(allow composd hypervisor_prop (file (read getattr map open)))
;;* lme

;;* lmx 25 system/sepolicy/private/composd.te

(allow composd virtualizationservice_data_file (file (read getattr)))
;;* lme

;;* lmx 25 system/sepolicy/private/composd.te

(allow composd_virtualizationmanager composd (dir (search)))
;;* lme

;;* lmx 25 system/sepolicy/private/composd.te

(allow composd_virtualizationmanager composd (file (read)))
;;* lme

;;* lmx 25 system/sepolicy/private/composd.te

(allow composd_virtualizationmanager composd (lnk_file (read)))
;;* lme

;;* lmx 25 system/sepolicy/private/composd.te

(allow composd composd_virtmgr_crosvm (process (sigkill)))
;;* lme

;;* lmx 25 system/sepolicy/private/composd.te

(allow composd_virtmgr_crosvm hal_graphics_allocator (memfd_file (read write getattr map)))
;;* lme

;;* lmx 25 system/sepolicy/private/composd.te

(allow hal_graphics_allocator composd_virtmgr_crosvm (memfd_file (read write getattr map)))
;;* lme

;;* lmx 28 system/sepolicy/private/composd.te

(allow composd apex_art_data_file (dir (ioctl read write create getattr setattr lock relabelfrom rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 29 system/sepolicy/private/composd.te

(allow composd apex_art_staging_data_file (dir (ioctl read write create getattr setattr lock relabelto rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 30 system/sepolicy/private/composd.te

(allow composd apex_art_staging_data_file (file (getattr unlink)))
;;* lme

;;* lmx 33 system/sepolicy/private/composd.te

(allow composd apex_art_data_file (file (ioctl read write unlink open)))
;;* lme

;;* lmx 34 system/sepolicy/private/composd.te

(allowx composd apex_art_data_file (ioctl file (0x6685)))
;;* lme

;;* lmx 37 system/sepolicy/private/composd.te

(allow composd apex_module_data_file (dir (search)))
;;* lme

;;* lmx 38 system/sepolicy/private/composd.te

(allow composd apex_compos_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 39 system/sepolicy/private/composd.te

(allow composd apex_compos_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 42 system/sepolicy/private/composd.te

(allow composd fd_server_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 42 system/sepolicy/private/composd.te

(allow composd compos_fd_server (process (transition)))
;;* lme

;;* lmx 42 system/sepolicy/private/composd.te

(allow compos_fd_server fd_server_exec (file (read getattr map execute open entrypoint)))
;;* lme

;;* lmx 42 system/sepolicy/private/composd.te

(allow compos_fd_server composd (process (sigchld)))
;;* lme

(dontaudit composd compos_fd_server (process (noatsecure)))
;;* lmx 42 system/sepolicy/private/composd.te

(allow composd compos_fd_server (process (siginh rlimitinh)))
;;* lme

(typetransition composd fd_server_exec process compos_fd_server)
;;* lmx 43 system/sepolicy/private/composd.te

(allow composd compos_fd_server (process (signal)))
;;* lme

;;* lmx 46 system/sepolicy/private/composd.te

(allow composd composd_vm_art_prop (file (read getattr map open)))
;;* lme

;;* lmx 47 system/sepolicy/private/composd.te

(allow composd composd_vm_vendor_prop (file (read getattr map open)))
;;* lme

;;* lmx 50 system/sepolicy/private/composd.te

(allow composd dalvik_config_prop_type (file (read getattr map open)))
;;* lme

;;* lmx 51 system/sepolicy/private/composd.te

(allow composd device_config_runtime_native_boot_prop (file (read getattr map open)))
;;* lme

;;* lmx 54 system/sepolicy/private/composd.te

(neverallow composd apex_art_data_file (file (create)))
;;* lme

;;* lmx 57 system/sepolicy/private/composd.te

(neverallow base_typeattr_247 composd_vm_art_prop (property_service (set)))
;;* lme

;;* lmx 1 system/sepolicy/private/coredomain.te

(allow coredomain apex_ready_prop (file (read getattr map open)))
;;* lme

;;* lmx 2 system/sepolicy/private/coredomain.te

(allow coredomain boot_status_prop (file (read getattr map open)))
;;* lme

;;* lmx 3 system/sepolicy/private/coredomain.te

(allow coredomain camera_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 4 system/sepolicy/private/coredomain.te

(allow coredomain dalvik_config_prop_type (file (read getattr map open)))
;;* lme

;;* lmx 5 system/sepolicy/private/coredomain.te

(allow coredomain dalvik_runtime_prop (file (read getattr map open)))
;;* lme

;;* lmx 6 system/sepolicy/private/coredomain.te

(allow coredomain exported_pm_prop (file (read getattr map open)))
;;* lme

;;* lmx 7 system/sepolicy/private/coredomain.te

(allow coredomain ffs_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 8 system/sepolicy/private/coredomain.te

(allow coredomain graphics_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 9 system/sepolicy/private/coredomain.te

(allow coredomain graphics_config_writable_prop (file (read getattr map open)))
;;* lme

;;* lmx 10 system/sepolicy/private/coredomain.te

(allow coredomain hdmi_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 11 system/sepolicy/private/coredomain.te

(allow coredomain init_mnt_ns_prop (file (read getattr map open)))
;;* lme

;;* lmx 12 system/sepolicy/private/coredomain.te

(allow coredomain init_service_status_private_prop (file (read getattr map open)))
;;* lme

;;* lmx 13 system/sepolicy/private/coredomain.te

(allow coredomain lmkd_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 14 system/sepolicy/private/coredomain.te

(allow coredomain localization_prop (file (read getattr map open)))
;;* lme

;;* lmx 15 system/sepolicy/private/coredomain.te

(allow coredomain pm_prop (file (read getattr map open)))
;;* lme

;;* lmx 16 system/sepolicy/private/coredomain.te

(allow coredomain radio_control_prop (file (read getattr map open)))
;;* lme

;;* lmx 17 system/sepolicy/private/coredomain.te

(allow coredomain rollback_test_prop (file (read getattr map open)))
;;* lme

;;* lmx 18 system/sepolicy/private/coredomain.te

(allow coredomain setupwizard_prop (file (read getattr map open)))
;;* lme

;;* lmx 19 system/sepolicy/private/coredomain.te

(allow coredomain setupwizard_mode_prop (file (read getattr map open)))
;;* lme

;;* lmx 20 system/sepolicy/private/coredomain.te

(allow coredomain sqlite_log_prop (file (read getattr map open)))
;;* lme

;;* lmx 21 system/sepolicy/private/coredomain.te

(allow coredomain storagemanager_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 22 system/sepolicy/private/coredomain.te

(allow coredomain surfaceflinger_color_prop (file (read getattr map open)))
;;* lme

;;* lmx 23 system/sepolicy/private/coredomain.te

(allow coredomain systemsound_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 24 system/sepolicy/private/coredomain.te

(allow coredomain telephony_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 25 system/sepolicy/private/coredomain.te

(allow coredomain usb_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 26 system/sepolicy/private/coredomain.te

(allow coredomain usb_control_prop (file (read getattr map open)))
;;* lme

;;* lmx 27 system/sepolicy/private/coredomain.te

(allow coredomain userspace_reboot_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 28 system/sepolicy/private/coredomain.te

(allow coredomain vold_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 29 system/sepolicy/private/coredomain.te

(allow coredomain vts_status_prop (file (read getattr map open)))
;;* lme

;;* lmx 30 system/sepolicy/private/coredomain.te

(allow coredomain zygote_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 31 system/sepolicy/private/coredomain.te

(allow coredomain zygote_wrap_prop (file (read getattr map open)))
;;* lme

;;* lmx 32 system/sepolicy/private/coredomain.te

(allow coredomain arm64_memtag_bootctl_prop (file (read getattr map open)))
;;* lme

;;* lmx 35 system/sepolicy/private/coredomain.te

(allow coredomain device_config_memory_management_native_boot_prop (file (read getattr map open)))
;;* lme

;;* lmx 38 system/sepolicy/private/coredomain.te

(allow coredomain default_prop (file (read getattr map open)))
;;* lme

;;* lmx 40 system/sepolicy/private/coredomain.te

(neverallow base_typeattr_374 sysfs_leds (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
;;* lme

;;* lmx 56 system/sepolicy/private/coredomain.te

(neverallow base_typeattr_375 vendor_app_file (dir (read getattr open search)))
;;* lme

;;* lmx 75 system/sepolicy/private/coredomain.te

(neverallow base_typeattr_376 vendor_app_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 97 system/sepolicy/private/coredomain.te

(neverallow base_typeattr_377 vendor_overlay_file (dir (read getattr open search)))
;;* lme

;;* lmx 119 system/sepolicy/private/coredomain.te

(neverallow base_typeattr_378 vendor_overlay_file (file (open)))
;;* lme

;;* lmx 145 system/sepolicy/private/coredomain.te

(neverallow base_typeattr_379 proc (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 145 system/sepolicy/private/coredomain.te

(neverallow base_typeattr_380 sysfs (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 145 system/sepolicy/private/coredomain.te

(neverallow base_typeattr_381 device (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow base_typeattr_381 device (blk_file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 145 system/sepolicy/private/coredomain.te

(neverallow coredomain debugfs (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 145 system/sepolicy/private/coredomain.te

(neverallow base_typeattr_382 debugfs_tracing (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 145 system/sepolicy/private/coredomain.te

(neverallow base_typeattr_383 inotify (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 145 system/sepolicy/private/coredomain.te

(neverallow base_typeattr_384 pstorefs (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 145 system/sepolicy/private/coredomain.te

(neverallow base_typeattr_385 configfs (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 145 system/sepolicy/private/coredomain.te

(neverallow base_typeattr_386 functionfs (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 145 system/sepolicy/private/coredomain.te

(neverallow base_typeattr_383 usbfs (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow base_typeattr_383 binfmt_miscfs (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 145 system/sepolicy/private/coredomain.te

(neverallow base_typeattr_387 base_typeattr_388 (chr_file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 264 system/sepolicy/private/coredomain.te

(neverallow coredomain radio_device (chr_file (ioctl read write append open)))
(neverallow coredomain iio_device (chr_file (ioctl read write append open)))
;;* lme

;;* lmx 268 system/sepolicy/private/coredomain.te

(neverallow coredomain tee_device (chr_file (ioctl read write append open)))
;;* lme

;;* lmx 12 system/sepolicy/private/cppreopts.te

(allow init cppreopts_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 12 system/sepolicy/private/cppreopts.te

(allow init cppreopts (process (transition)))
;;* lme

;;* lmx 12 system/sepolicy/private/cppreopts.te

(allow cppreopts cppreopts_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init cppreopts (process (noatsecure)))
;;* lmx 12 system/sepolicy/private/cppreopts.te

(allow init cppreopts (process (siginh rlimitinh)))
;;* lme

(typetransition init cppreopts_exec process cppreopts)
;;* lmx 13 system/sepolicy/private/cppreopts.te

(allow cppreopts preopt2cachename_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 13 system/sepolicy/private/cppreopts.te

(allow cppreopts preopt2cachename (process (transition)))
;;* lme

;;* lmx 13 system/sepolicy/private/cppreopts.te

(allow preopt2cachename preopt2cachename_exec (file (read getattr map execute open entrypoint)))
;;* lme

;;* lmx 13 system/sepolicy/private/cppreopts.te

(allow preopt2cachename cppreopts (process (sigchld)))
;;* lme

(dontaudit cppreopts preopt2cachename (process (noatsecure)))
;;* lmx 13 system/sepolicy/private/cppreopts.te

(allow cppreopts preopt2cachename (process (siginh rlimitinh)))
;;* lme

(typetransition cppreopts preopt2cachename_exec process preopt2cachename)
;;* lmx 16 system/sepolicy/private/cppreopts.te

(allow cppreopts dalvikcache_data_file (dir (write add_name remove_name search)))
;;* lme

;;* lmx 17 system/sepolicy/private/cppreopts.te

(allow cppreopts dalvikcache_data_file (file (read write create getattr unlink rename open)))
;;* lme

;;* lmx 20 system/sepolicy/private/cppreopts.te

(allow cppreopts shell_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lme

;;* lmx 23 system/sepolicy/private/cppreopts.te

(allow cppreopts system_file (dir (read open)))
;;* lme

;;* lmx 27 system/sepolicy/private/cppreopts.te

(allow cppreopts toolbox_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lme

(dontaudit cppreopts postinstall_mnt_dir (dir (search)))
(dontaudit crash_dump dev_type (chr_file (read write)))
(dontaudit crash_dump devpts (chr_file (read write)))
;;* lmx 19 system/sepolicy/private/crash_dump.te

(allow crash_dump base_typeattr_389 (process (sigchld sigkill sigstop signal ptrace)))
;;* lme

;;* lmx 21 system/sepolicy/private/crash_dump.te

(allow crash_dump apexd (process (sigchld sigkill sigstop signal ptrace)))
(allow crash_dump llkd (process (sigchld sigkill sigstop signal ptrace)))
(allow crash_dump logd (process (sigchld sigkill sigstop signal ptrace)))
(allow crash_dump vold (process (sigchld sigkill sigstop signal ptrace)))
;;* lme

;;* lmx 26 system/sepolicy/private/crash_dump.te

(allow crash_dump apex_art_data_file (dir (getattr search)))
;;* lme

;;* lmx 27 system/sepolicy/private/crash_dump.te

(allow crash_dump apex_art_data_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 30 system/sepolicy/private/crash_dump.te

(allow crash_dump system_bootstrap_lib_file (dir (getattr search)))
;;* lme

;;* lmx 31 system/sepolicy/private/crash_dump.te

(allow crash_dump system_bootstrap_lib_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 34 system/sepolicy/private/crash_dump.te

(allow crash_dump vendor_apex_metadata_file (dir (getattr search)))
;;* lme

(dontaudit crash_dump self (capability (sys_ptrace)))
(dontaudit crash_dump self (cap_userns (sys_ptrace)))
;;* lmx 40 system/sepolicy/private/crash_dump.te

(allow crash_dump logd (process (sigchld sigkill sigstop signal ptrace)))
;;* lme

;;* lmx 40 system/sepolicy/private/crash_dump.te

(allow crash_dump kmsg_debug_device (chr_file (append open)))
;;* lme

;;* lmx 48 system/sepolicy/private/crash_dump.te

(allow crash_dump domain (fd (use)))
;;* lme

;;* lmx 51 system/sepolicy/private/crash_dump.te

(allow crash_dump domain (fifo_file (read write)))
;;* lme

;;* lmx 54 system/sepolicy/private/crash_dump.te

(allow crash_dump domain (fifo_file (append)))
;;* lme

;;* lmx 57 system/sepolicy/private/crash_dump.te

(allow crash_dump domain (process (getattr)))
;;* lme

;;* lmx 59 system/sepolicy/private/crash_dump.te

(allow crash_dump domain (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 59 system/sepolicy/private/crash_dump.te

(allow crash_dump domain (file (ioctl read getattr lock map open watch watch_reads)))
(allow crash_dump domain (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 60 system/sepolicy/private/crash_dump.te

(allow crash_dump exec_type (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 63 system/sepolicy/private/crash_dump.te

(allow crash_dump dalvikcache_data_file (dir (getattr search)))
;;* lme

;;* lmx 64 system/sepolicy/private/crash_dump.te

(allow crash_dump dalvikcache_data_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 67 system/sepolicy/private/crash_dump.te

(allow crash_dump apex_module_data_file (dir (getattr search)))
;;* lme

;;* lmx 70 system/sepolicy/private/crash_dump.te

(allow crash_dump proc_uptime (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 73 system/sepolicy/private/crash_dump.te

(allow crash_dump apk_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 73 system/sepolicy/private/crash_dump.te

(allow crash_dump apk_data_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow crash_dump apk_data_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 76 system/sepolicy/private/crash_dump.te

(allow crash_dump vendor_file (dir (ioctl read getattr lock open watch watch_reads search)))
(allow crash_dump same_process_hal_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 76 system/sepolicy/private/crash_dump.te

(allow crash_dump vendor_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow crash_dump vendor_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow crash_dump same_process_hal_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow crash_dump same_process_hal_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 79 system/sepolicy/private/crash_dump.te

(allow crash_dump shell_test_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 79 system/sepolicy/private/crash_dump.te

(allow crash_dump shell_test_data_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow crash_dump shell_test_data_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 82 system/sepolicy/private/crash_dump.te

(allow crash_dump tombstoned_crash_socket (sock_file (write)))
;;* lme

;;* lmx 82 system/sepolicy/private/crash_dump.te

(allow crash_dump tombstoned (unix_stream_socket (connectto)))
;;* lme

;;* lmx 85 system/sepolicy/private/crash_dump.te

(allow crash_dump system_ndebug_socket (sock_file (write)))
;;* lme

;;* lmx 85 system/sepolicy/private/crash_dump.te

(allow crash_dump system_server (unix_stream_socket (connectto)))
;;* lme

;;* lmx 88 system/sepolicy/private/crash_dump.te

(allow crash_dump anr_data_file (file (getattr append)))
;;* lme

;;* lmx 91 system/sepolicy/private/crash_dump.te

(allow crash_dump tombstone_data_file (file (getattr append)))
;;* lme

;;* lmx 95 system/sepolicy/private/crash_dump.te

(allow crash_dump logdr_socket (sock_file (write)))
;;* lme

;;* lmx 95 system/sepolicy/private/crash_dump.te

(allow crash_dump logd (unix_stream_socket (connectto)))
;;* lme

(dontaudit crash_dump core_data_file_type (dir (search)))
(dontaudit crash_dump vendor_file_type (dir (search)))
(dontaudit crash_dump app_data_file_type (file (read open)))
(dontaudit crash_dump app_data_file_type (lnk_file (read open)))
(dontaudit crash_dump property_type (file (read open)))
(dontaudit crash_dump property_type (lnk_file (read open)))
(dontaudit crash_dump system_data_file (file (read open)))
(dontaudit crash_dump system_data_file (lnk_file (read open)))
;;* lmx 113 system/sepolicy/private/crash_dump.te

(allow crash_dump misctrl_prop (file (read getattr map open)))
;;* lme

;;* lmx 124 system/sepolicy/private/crash_dump.te

(neverallow base_typeattr_390 crash_dump_exec (file (execute_no_trans)))
;;* lme

;;* lmx 143 system/sepolicy/private/crash_dump.te

(neverallow crash_dump base_typeattr_391 (process (sigkill sigstop signal ptrace)))
;;* lme

;;* lmx 145 system/sepolicy/private/crash_dump.te

(neverallow crash_dump self (process (ptrace)))
;;* lme

;;* lmx 146 system/sepolicy/private/crash_dump.te

(neverallow crash_dump gpu_device (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
;;* lme

;;* lmx 3 system/sepolicy/private/credstore.te

(allow init credstore_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 3 system/sepolicy/private/credstore.te

(allow init credstore (process (transition)))
;;* lme

;;* lmx 3 system/sepolicy/private/credstore.te

(allow credstore credstore_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init credstore (process (noatsecure)))
;;* lmx 3 system/sepolicy/private/credstore.te

(allow init credstore (process (siginh rlimitinh)))
;;* lme

(typetransition init credstore_exec process credstore)
;;* lmx 6 system/sepolicy/private/credstore.te

(allow credstore hal_identity (memfd_file (read write getattr map)))
;;* lme

;;* lmx 6 system/sepolicy/private/credstore.te

(allow hal_identity credstore (memfd_file (read write getattr map)))
;;* lme

;;* lmx 9 system/sepolicy/private/credstore.te

(allow credstore hal_keymint (memfd_file (read write getattr map)))
;;* lme

;;* lmx 9 system/sepolicy/private/credstore.te

(allow hal_keymint credstore (memfd_file (read write getattr map)))
;;* lme

;;* lmx 12 system/sepolicy/private/credstore.te

(allow credstore remote_prov_prop (file (read getattr map open)))
;;* lme

;;* lmx 13 system/sepolicy/private/credstore.te

(allow credstore remote_provisioning_service (service_manager (find)))
;;* lme

;;* lmx 15 system/sepolicy/private/credstore.te

(allow credstore servicemanager (binder (call transfer)))
;;* lme

;;* lmx 15 system/sepolicy/private/credstore.te

(allow servicemanager credstore (binder (call transfer)))
;;* lme

;;* lmx 17 system/sepolicy/private/credstore.te

(allow credstore system_server (binder (call transfer)))
;;* lme

;;* lmx 17 system/sepolicy/private/credstore.te

(allow system_server credstore (binder (transfer)))
;;* lme

;;* lmx 17 system/sepolicy/private/credstore.te

(allow credstore system_server (fd (use)))
;;* lme

;;* lmx 19 system/sepolicy/private/credstore.te

(allow credstore credstore_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 20 system/sepolicy/private/credstore.te

(allow credstore credstore_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 22 system/sepolicy/private/credstore.te

(allow credstore credstore_service (service_manager (add find)))
;;* lme

;;* lmx 22 system/sepolicy/private/credstore.te

(neverallow base_typeattr_392 credstore_service (service_manager (add)))
;;* lme

;;* lmx 22 system/sepolicy/private/credstore.te

(allow credstore su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 23 system/sepolicy/private/credstore.te

(allow credstore sec_key_att_app_id_provider_service (service_manager (find)))
;;* lme

;;* lmx 24 system/sepolicy/private/credstore.te

(allow credstore dropbox_service (service_manager (find)))
;;* lme

;;* lmx 25 system/sepolicy/private/credstore.te

(allow credstore authorization_service (service_manager (find)))
;;* lme

;;* lmx 26 system/sepolicy/private/credstore.te

(allow credstore keystore (keystore2 (get_auth_token)))
;;* lme

;;* lmx 28 system/sepolicy/private/credstore.te

(allow credstore cgroup (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 28 system/sepolicy/private/credstore.te

(allow credstore cgroup (file (ioctl read getattr lock map open watch watch_reads)))
(allow credstore cgroup (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 29 system/sepolicy/private/credstore.te

(allow credstore cgroup_v2 (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 29 system/sepolicy/private/credstore.te

(allow credstore cgroup_v2 (file (ioctl read getattr lock map open watch watch_reads)))
(allow credstore cgroup_v2 (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 5 system/sepolicy/private/crosvm.te

(allow crosvm_domain vm_manager_device_type (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 8 system/sepolicy/private/crosvm.te

(neverallow base_typeattr_393 kvm_device (chr_file (getattr)))
;;* lme

;;* lmx 9 system/sepolicy/private/crosvm.te

(neverallow base_typeattr_394 kvm_device (chr_file (ioctl read write create setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
;;* lme

;;* lmx 10 system/sepolicy/private/crosvm.te

(neverallowx base_typeattr_395 kvm_device (ioctl chr_file ((range 0x0 0xadff) (range 0xaf00 0xffff))))
;;* lme

;;* lmx 10 system/sepolicy/private/crosvm.te

(neverallowx base_typeattr_395 kvm_device (ioctl chr_file ((range 0xae00 0xae02) (range 0xae04 0xaeff))))
;;* lme

;;* lmx 15 system/sepolicy/private/crosvm.te

(neverallow base_typeattr_396 vm_manager_device_type (chr_file (getattr)))
;;* lme

;;* lmx 16 system/sepolicy/private/crosvm.te

(neverallow base_typeattr_397 vm_manager_device_type (chr_file (ioctl read write create setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
;;* lme

(typetransition crosvm_domain tmpfs file crosvm_domain_tmpfs)
;;* lmx 19 system/sepolicy/private/crosvm.te

(allow crosvm_domain crosvm_domain_tmpfs (file (read write getattr map)))
;;* lme

;;* lmx 26 system/sepolicy/private/crosvm.te

(allow crosvm_domain virtualizationmanager_domain (fd (use)))
(allow crosvm_domain early_virtmgr_domain (fd (use)))
(allow crosvm_domain virtualizationservice (fd (use)))
;;* lme

;;* lmx 32 system/sepolicy/private/crosvm.te

(allow crosvm_domain virtualizationmanager_domain (fifo_file (write)))
(allow crosvm_domain early_virtmgr_domain (fifo_file (write)))
;;* lme

;;* lmx 54 system/sepolicy/private/crosvm.te

(allow crosvm_domain vendor_microdroid_file (file (ioctl read getattr lock)))
(allow crosvm_domain vendor_vm_file (file (ioctl read getattr lock)))
(allow crosvm_domain vendor_vm_data_file (file (ioctl read getattr lock)))
(allow crosvm_domain apk_data_file (file (ioctl read getattr lock)))
(allow crosvm_domain shell_data_file (file (ioctl read getattr lock)))
(allow crosvm_domain staging_data_file (file (ioctl read getattr lock)))
(allow crosvm_domain app_data_file (file (ioctl read getattr lock)))
(allow crosvm_domain privapp_data_file (file (ioctl read getattr lock)))
(allow crosvm_domain virtualizationservice_data_file (file (ioctl read getattr lock)))
(allow crosvm_domain apex_compos_data_file (file (ioctl read getattr lock)))
(allow crosvm_domain apex_virt_data_file (file (ioctl read getattr lock)))
(allow crosvm_domain vm_data_file (file (ioctl read getattr lock)))
(allow crosvm_domain aiseal_data_file (file (ioctl read getattr lock)))
;;* lme

;;* lmx 57 system/sepolicy/private/crosvm.te

(allow crosvm_domain block_device (dir (search)))
;;* lme

;;* lmx 58 system/sepolicy/private/crosvm.te

(allow crosvm_domain apex_dm_device (blk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 64 system/sepolicy/private/crosvm.te

(allow crosvm_domain virtualizationservice_data_file (dir (search)))
(allow crosvm_domain vm_data_file (dir (search)))
;;* lme

(dontaudit crosvm_domain self (capability (ipc_lock)))
;;* lmx 76 system/sepolicy/private/crosvm.te

(allow crosvm_domain self (capability (ipc_owner sys_nice)))
(allow crosvm_domain self (cap_userns (ipc_owner sys_nice)))
;;* lme

;;* lmx 85 system/sepolicy/private/crosvm.te

(allow crosvm_domain virtualizationmanager_domain (unix_stream_socket (read write getattr accept getopt)))
(allow crosvm_domain early_virtmgr_domain (unix_stream_socket (read write getattr accept getopt)))
;;* lme

;;* lmx 88 system/sepolicy/private/crosvm.te

(allow crosvm_domain shell_data_file (dir (search)))
;;* lme

;;* lmx 88 system/sepolicy/private/crosvm.te

(allow crosvm_domain shell_data_file (file (open)))
;;* lme

;;* lmx 104 system/sepolicy/private/crosvm.te

(allow crosvm_domain vendor_vm_data_file (file (write)))
(allow crosvm_domain app_data_file (file (write)))
(allow crosvm_domain privapp_data_file (file (write)))
(allow crosvm_domain virtualizationservice_data_file (file (write)))
(allow crosvm_domain apex_compos_data_file (file (write)))
(allow crosvm_domain apex_virt_data_file (file (write)))
(allow crosvm_domain vm_data_file (file (write)))
(allow crosvm_domain aiseal_data_file (file (write)))
;;* lme

;;* lmx 107 system/sepolicy/private/crosvm.te

(allow crosvm_domain adbd (fd (use)))
;;* lme

;;* lmx 108 system/sepolicy/private/crosvm.te

(allow crosvm_domain adbd (unix_stream_socket (read write)))
;;* lme

;;* lmx 109 system/sepolicy/private/crosvm.te

(allow crosvm_domain devpts (chr_file (ioctl read write getattr)))
;;* lme

;;* lmx 111 system/sepolicy/private/crosvm.te

(allow crosvm_domain device (dir (read open)))
;;* lme

;;* lmx 111 system/sepolicy/private/crosvm.te

(allow crosvm_domain same_process_hal_file (file (read getattr map execute open)))
;;* lme

;;* lmx 111 system/sepolicy/private/crosvm.te

(allow crosvm_domain hal_graphics_allocator (fd (use)))
;;* lme

;;* lmx 111 system/sepolicy/private/crosvm.te

(allow crosvm_domain hal_graphics_allocator_server (binder (call)))
;;* lme

;;* lmx 111 system/sepolicy/private/crosvm.te

(allow crosvm_domain surfaceflinger (fd (use)))
;;* lme

;;* lmx 111 system/sepolicy/private/crosvm.te

(allow crosvm_domain vmlauncher_app (binder (call transfer)))
;;* lme

;;* lmx 111 system/sepolicy/private/crosvm.te

(allow crosvm_domain servicemanager (binder (call transfer)))
;;* lme

;;* lmx 111 system/sepolicy/private/crosvm.te

(allow crosvm_domain virtualization_service (service_manager (find)))
;;* lme

;;* lmx 111 system/sepolicy/private/crosvm.te

(allow crosvm_domain virtualizationservice (binder (call transfer)))
;;* lme

;;* lmx 111 system/sepolicy/private/crosvm.te

(allow crosvm_vendor hal_graphics_allocator (memfd_file (read write getattr map)))
;;* lme

;;* lmx 111 system/sepolicy/private/crosvm.te

(allow hal_graphics_allocator crosvm_vendor (memfd_file (read write getattr map)))
;;* lme

;;* lmx 111 system/sepolicy/private/crosvm.te

(allow crosvm_domain mnt_user_file (dir (search)))
;;* lme

;;* lmx 111 system/sepolicy/private/crosvm.te

(allow crosvm_domain hal_graphics_composer (fd (use)))
;;* lme

;;* lmx 111 system/sepolicy/private/crosvm.te

(allow crosvm_domain virtualizationservice_data_file (dir (write add_name remove_name)))
;;* lme

;;* lmx 111 system/sepolicy/private/crosvm.te

(allow crosvm_domain virtualizationservice_data_file (sock_file (write create unlink)))
;;* lme

;;* lmx 111 system/sepolicy/private/crosvm.te

(allow crosvm_domain udmabuf_device (chr_file (ioctl read write open)))
;;* lme

;;* lmx 111 system/sepolicy/private/crosvm.te

(allow crosvm_domain surfaceflinger (binder (call transfer)))
;;* lme

;;* lmx 111 system/sepolicy/private/crosvm.te

(allow surfaceflinger crosvm_domain (binder (transfer)))
;;* lme

;;* lmx 111 system/sepolicy/private/crosvm.te

(allow crosvm_domain surfaceflinger (fd (use)))
;;* lme

;;* lmx 111 system/sepolicy/private/crosvm.te

(allow crosvm_domain surfaceflinger_service (service_manager (find)))
;;* lme

(dontaudit crosvm_domain self (netlink_generic_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
;;* lmx 153 system/sepolicy/private/crosvm.te

(allow crosvm_domain shell_data_file (file (write)))
;;* lme

(dontaudit crosvm_domain virtualizationmanager_domain (fifo_file (read getattr)))
(dontaudit crosvm_domain early_virtmgr_domain (fifo_file (read getattr)))
;;* lmx 164 system/sepolicy/private/crosvm.te

(allow crosvm_domain self (tcp_socket (read write create bind listen accept setopt)))
;;* lme

;;* lmx 165 system/sepolicy/private/crosvm.te

(allow crosvm_domain port (tcp_socket (name_bind)))
;;* lme

;;* lmx 166 system/sepolicy/private/crosvm.te

(allow crosvm_domain adbd (unix_stream_socket (ioctl)))
;;* lme

;;* lmx 167 system/sepolicy/private/crosvm.te

(allow crosvm_domain node (tcp_socket (node_bind)))
;;* lme

;;* lmx 170 system/sepolicy/private/crosvm.te

(allow crosvm_domain vfio_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 171 system/sepolicy/private/crosvm.te

(allow crosvm_domain vfio_device (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 174 system/sepolicy/private/crosvm.te

(allow crosvm_domain virtualizationservice_data_file (file (read)))
;;* lme

;;* lmx 176 system/sepolicy/private/crosvm.te

(allow crosvm_domain tun_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 176 system/sepolicy/private/crosvm.te

(allowx crosvm_domain tun_device (ioctl chr_file (0x54d0 0x54d2 0x54d8)))
;;* lme

;;* lmx 176 system/sepolicy/private/crosvm.te

(allow crosvm_domain self (udp_socket (ioctl read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
;;* lme

;;* lmx 176 system/sepolicy/private/crosvm.te

(allowx crosvm_domain self (ioctl udp_socket (0x8921)))
;;* lme

;;* lmx 176 system/sepolicy/private/crosvm.te

(allow crosvm_domain vmnic (fd (use)))
;;* lme

;;* lmx 186 system/sepolicy/private/crosvm.te

(allow crosvm_domain kmsg_debug_device (chr_file (write lock append map open)))
;;* lme

;;* lmx 189 system/sepolicy/private/crosvm.te

(allow crosvm_domain nativetest_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 189 system/sepolicy/private/crosvm.te

(allow crosvm_domain nativetest_data_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow crosvm_domain nativetest_data_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 206 system/sepolicy/private/crosvm.te

(neverallow crosvm_domain base_typeattr_398 (file (open)))
;;* lme

;;* lmx 209 system/sepolicy/private/crosvm.te

(neverallow crosvm_domain base_typeattr_399 (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
;;* lme

;;* lmx 234 system/sepolicy/private/crosvm.te

(neverallow crosvm_domain base_typeattr_400 (file (read)))
;;* lme

;;* lmx 248 system/sepolicy/private/crosvm.te

(neverallow base_typeattr_401 crosvm_exec (file (execute execute_no_trans)))
;;* lme

;;* lmx 6 system/sepolicy/private/crosvm_vu_fs.te

(allow crosvm_vu_fs crosvm_vu_fs_exec (file (read getattr map execute entrypoint)))
;;* lme

;;* lmx 7 system/sepolicy/private/crosvm_vu_fs.te

(allow crosvm_domain crosvm_vu_fs_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 7 system/sepolicy/private/crosvm_vu_fs.te

(allow crosvm_domain crosvm_vu_fs (process (transition)))
;;* lme

;;* lmx 7 system/sepolicy/private/crosvm_vu_fs.te

(allow crosvm_vu_fs crosvm_vu_fs_exec (file (read getattr map execute open entrypoint)))
;;* lme

;;* lmx 7 system/sepolicy/private/crosvm_vu_fs.te

(allow crosvm_vu_fs crosvm_domain (process (sigchld)))
;;* lme

(dontaudit crosvm_domain crosvm_vu_fs (process (noatsecure)))
;;* lmx 7 system/sepolicy/private/crosvm_vu_fs.te

(allow crosvm_domain crosvm_vu_fs (process (siginh rlimitinh)))
;;* lme

(typetransition crosvm_domain crosvm_vu_fs_exec process crosvm_vu_fs)
;;* lmx 10 system/sepolicy/private/crosvm_vu_fs.te

(allow crosvm_vu_fs crosvm_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lme

(typetransition crosvm_vu_fs tmpfs file crosvm_vu_fs_tmpfs)
;;* lmx 13 system/sepolicy/private/crosvm_vu_fs.te

(allow crosvm_vu_fs crosvm_vu_fs_tmpfs (file (read write getattr map)))
;;* lme

;;* lmx 17 system/sepolicy/private/crosvm_vu_fs.te

(allow crosvm_vu_fs crosvm_domain_tmpfs (file (read write getattr map)))
;;* lme

;;* lmx 20 system/sepolicy/private/crosvm_vu_fs.te

(allow crosvm_vu_fs virtualizationmanager_domain (fd (use)))
;;* lme

;;* lmx 23 system/sepolicy/private/crosvm_vu_fs.te

(allow crosvm_vu_fs crosvm_domain (fd (use)))
;;* lme

;;* lmx 24 system/sepolicy/private/crosvm_vu_fs.te

(allow crosvm_vu_fs crosvm_domain (memfd_file (read write map)))
;;* lme

;;* lmx 27 system/sepolicy/private/crosvm_vu_fs.te

(allow crosvm_domain crosvm_vu_fs (unix_stream_socket (read write getattr getopt shutdown connectto)))
;;* lme

;;* lmx 28 system/sepolicy/private/crosvm_vu_fs.te

(allow crosvm_vu_fs crosvm_domain (unix_stream_socket (read write getattr getopt shutdown)))
;;* lme

;;* lmx 29 system/sepolicy/private/crosvm_vu_fs.te

(allow crosvm_vu_fs crosvm_domain (fd (use)))
;;* lme

;;* lmx 30 system/sepolicy/private/crosvm_vu_fs.te

(allow crosvm_domain crosvm_vu_fs (fd (use)))
;;* lme

;;* lmx 34 system/sepolicy/private/crosvm_vu_fs.te

(allow crosvm_vu_fs virtualizationservice_data_file (dir (search)))
;;* lme

(dontaudit crosvm_vu_fs self (capability (ipc_lock)))
;;* lmx 43 system/sepolicy/private/crosvm_vu_fs.te

(allow crosvm_vu_fs fuse (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 44 system/sepolicy/private/crosvm_vu_fs.te

(allow crosvm_vu_fs fuse (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 45 system/sepolicy/private/crosvm_vu_fs.te

(allow crosvm_vu_fs mnt_user_file (dir (search)))
;;* lme

;;* lmx 48 system/sepolicy/private/crosvm_vu_fs.te

(allow crosvm_vu_fs virtualizationservice_data_file (dir (write add_name remove_name)))
;;* lme

;;* lmx 49 system/sepolicy/private/crosvm_vu_fs.te

(allow crosvm_vu_fs virtualizationservice_data_file (sock_file (write create unlink)))
;;* lme

;;* lmx 65 system/sepolicy/private/crosvm_vu_fs.te

(neverallow crosvm_vu_fs base_typeattr_402 (file (open)))
;;* lme

;;* lmx 68 system/sepolicy/private/crosvm_vu_fs.te

(neverallow crosvm_vu_fs base_typeattr_403 (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
;;* lme

;;* lmx 86 system/sepolicy/private/crosvm_vu_fs.te

(neverallow crosvm_vu_fs app_data_file_type (file (read)))
;;* lme

;;* lmx 88 system/sepolicy/private/crosvm_vu_fs.te

(neverallow crosvm_vu_fs base_typeattr_270 (process (transition)))
;;* lme

;;* lmx 6 system/sepolicy/private/crosvm_vu_snd.te

(allow crosvm_vu_snd crosvm_vu_snd_exec (file (read getattr map execute entrypoint)))
;;* lme

;;* lmx 7 system/sepolicy/private/crosvm_vu_snd.te

(allow crosvm_domain crosvm_vu_snd_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 7 system/sepolicy/private/crosvm_vu_snd.te

(allow crosvm_domain crosvm_vu_snd (process (transition)))
;;* lme

;;* lmx 7 system/sepolicy/private/crosvm_vu_snd.te

(allow crosvm_vu_snd crosvm_vu_snd_exec (file (read getattr map execute open entrypoint)))
;;* lme

;;* lmx 7 system/sepolicy/private/crosvm_vu_snd.te

(allow crosvm_vu_snd crosvm_domain (process (sigchld)))
;;* lme

(dontaudit crosvm_domain crosvm_vu_snd (process (noatsecure)))
;;* lmx 7 system/sepolicy/private/crosvm_vu_snd.te

(allow crosvm_domain crosvm_vu_snd (process (siginh rlimitinh)))
;;* lme

(typetransition crosvm_domain crosvm_vu_snd_exec process crosvm_vu_snd)
;;* lmx 10 system/sepolicy/private/crosvm_vu_snd.te

(allow crosvm_vu_snd crosvm_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lme

(typetransition crosvm_vu_snd tmpfs file crosvm_vu_snd_tmpfs)
;;* lmx 13 system/sepolicy/private/crosvm_vu_snd.te

(allow crosvm_vu_snd crosvm_vu_snd_tmpfs (file (read write getattr map)))
;;* lme

;;* lmx 17 system/sepolicy/private/crosvm_vu_snd.te

(allow crosvm_vu_snd crosvm_domain_tmpfs (file (read write getattr map)))
;;* lme

;;* lmx 18 system/sepolicy/private/crosvm_vu_snd.te

(allow crosvm_vu_snd crosvm_domain (memfd_file (read write getattr map)))
;;* lme

;;* lmx 23 system/sepolicy/private/crosvm_vu_snd.te

(allow crosvm_vu_snd virtualizationservice_data_file (dir (write add_name remove_name search)))
;;* lme

;;* lmx 24 system/sepolicy/private/crosvm_vu_snd.te

(allow crosvm_vu_snd virtualizationservice_data_file (sock_file (write create unlink)))
;;* lme

;;* lmx 27 system/sepolicy/private/crosvm_vu_snd.te

(allow crosvm_vu_snd virtualizationmanager_domain (fd (use)))
;;* lme

;;* lmx 30 system/sepolicy/private/crosvm_vu_snd.te

(allow crosvm_domain crosvm_vu_snd (unix_stream_socket (read write getattr getopt shutdown connectto)))
;;* lme

;;* lmx 31 system/sepolicy/private/crosvm_vu_snd.te

(allow crosvm_vu_snd crosvm_domain (unix_stream_socket (read write getattr getopt shutdown)))
;;* lme

;;* lmx 32 system/sepolicy/private/crosvm_vu_snd.te

(allow crosvm_vu_snd crosvm_domain (fd (use)))
;;* lme

;;* lmx 33 system/sepolicy/private/crosvm_vu_snd.te

(allow crosvm_domain crosvm_vu_snd (fd (use)))
;;* lme

;;* lmx 36 system/sepolicy/private/crosvm_vu_snd.te

(allow crosvm_vu_snd servicemanager (binder (call transfer)))
;;* lme

;;* lmx 36 system/sepolicy/private/crosvm_vu_snd.te

(allow servicemanager crosvm_vu_snd (binder (call transfer)))
;;* lme

;;* lmx 37 system/sepolicy/private/crosvm_vu_snd.te

(allow crosvm_vu_snd audioserver (binder (call transfer)))
;;* lme

;;* lmx 37 system/sepolicy/private/crosvm_vu_snd.te

(allow audioserver crosvm_vu_snd (binder (transfer)))
;;* lme

;;* lmx 37 system/sepolicy/private/crosvm_vu_snd.te

(allow crosvm_vu_snd audioserver (fd (use)))
;;* lme

;;* lmx 38 system/sepolicy/private/crosvm_vu_snd.te

(allow audioserver crosvm_vu_snd (binder (call transfer)))
;;* lme

;;* lmx 38 system/sepolicy/private/crosvm_vu_snd.te

(allow crosvm_vu_snd audioserver (binder (transfer)))
;;* lme

;;* lmx 38 system/sepolicy/private/crosvm_vu_snd.te

(allow audioserver crosvm_vu_snd (fd (use)))
;;* lme

;;* lmx 39 system/sepolicy/private/crosvm_vu_snd.te

(allow crosvm_vu_snd audioserver_service (service_manager (find)))
;;* lme

;;* lmx 42 system/sepolicy/private/crosvm_vu_snd.te

(neverallow crosvm_vu_snd base_typeattr_270 (process (transition)))
;;* lme

;;* lmx 5 system/sepolicy/private/derive_classpath.te

(allow init derive_classpath_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 5 system/sepolicy/private/derive_classpath.te

(allow init derive_classpath (process (transition)))
;;* lme

;;* lmx 5 system/sepolicy/private/derive_classpath.te

(allow derive_classpath derive_classpath_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init derive_classpath (process (noatsecure)))
;;* lmx 5 system/sepolicy/private/derive_classpath.te

(allow init derive_classpath (process (siginh rlimitinh)))
;;* lme

(typetransition init derive_classpath_exec process derive_classpath)
;;* lmx 8 system/sepolicy/private/derive_classpath.te

(allow derive_classpath apex_mnt_dir (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 9 system/sepolicy/private/derive_classpath.te

(allow derive_classpath vendor_apex_metadata_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 12 system/sepolicy/private/derive_classpath.te

(allow derive_classpath environ_system_data_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
;;* lme

;;* lmx 13 system/sepolicy/private/derive_classpath.te

(allow derive_classpath environ_system_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 16 system/sepolicy/private/derive_classpath.te

(allow derive_classpath unlabeled (dir (search)))
;;* lme

;;* lmx 19 system/sepolicy/private/derive_classpath.te

(allow derive_classpath artd (fd (use)))
;;* lme

;;* lmx 22 system/sepolicy/private/derive_classpath.te

(allow derive_classpath pre_reboot_dexopt_artd_file (file (read write open)))
;;* lme

;;* lmx 5 system/sepolicy/private/derive_sdk.te

(allow init derive_sdk_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 5 system/sepolicy/private/derive_sdk.te

(allow init derive_sdk (process (transition)))
;;* lme

;;* lmx 5 system/sepolicy/private/derive_sdk.te

(allow derive_sdk derive_sdk_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init derive_sdk (process (noatsecure)))
;;* lmx 5 system/sepolicy/private/derive_sdk.te

(allow init derive_sdk (process (siginh rlimitinh)))
;;* lme

(typetransition init derive_sdk_exec process derive_sdk)
;;* lmx 8 system/sepolicy/private/derive_sdk.te

(allow derive_sdk apex_mnt_dir (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 9 system/sepolicy/private/derive_sdk.te

(allow derive_sdk vendor_apex_metadata_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 12 system/sepolicy/private/derive_sdk.te

(allow derive_sdk property_socket (sock_file (write)))
;;* lme

;;* lmx 12 system/sepolicy/private/derive_sdk.te

(allow derive_sdk init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 12 system/sepolicy/private/derive_sdk.te

(allow derive_sdk module_sdkextensions_prop (property_service (set)))
;;* lme

;;* lmx 12 system/sepolicy/private/derive_sdk.te

(allow derive_sdk module_sdkextensions_prop (file (read getattr map open)))
;;* lme

;;* lmx 13 system/sepolicy/private/derive_sdk.te

(neverallow base_typeattr_404 module_sdkextensions_prop (property_service (set)))
;;* lme

;;* lmx 19 system/sepolicy/private/derive_sdk.te

(allow derive_sdk dumpstate (fd (use)))
;;* lme

;;* lmx 20 system/sepolicy/private/derive_sdk.te

(allow derive_sdk dumpstate (unix_stream_socket (read write)))
;;* lme

;;* lmx 21 system/sepolicy/private/derive_sdk.te

(allow derive_sdk shell_data_file (file (read write getattr append)))
;;* lme

(typetransition device_as_webcam tmpfs file appdomain_tmpfs)
;;* lmx 4 system/sepolicy/private/device_as_webcam.te

(allow device_as_webcam device_as_webcam_userfaultfd (anon_inode (ioctl read create)))
;;* lme

(dontaudit su device_as_webcam_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lmx 4 system/sepolicy/private/device_as_webcam.te

(neverallow base_typeattr_405 device_as_webcam_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 4 system/sepolicy/private/device_as_webcam.te

(allow device_as_webcam appdomain_tmpfs (file (read write getattr map execute)))
;;* lme

;;* lmx 4 system/sepolicy/private/device_as_webcam.te

(allow device_as_webcam appdomain (memfd_file (read write getattr map execute)))
;;* lme

;;* lmx 4 system/sepolicy/private/device_as_webcam.te

(neverallow base_typeattr_406 base_typeattr_405 (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 4 system/sepolicy/private/device_as_webcam.te

(neverallow base_typeattr_407 device_as_webcam (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 4 system/sepolicy/private/device_as_webcam.te

(neverallow base_typeattr_408 device_as_webcam (process (ptrace)))
;;* lme

;;* lmx 4 system/sepolicy/private/device_as_webcam.te

(neverallow device_as_webcam base_typeattr_409 (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 6 system/sepolicy/private/device_as_webcam.te

(allow device_as_webcam system_app_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 7 system/sepolicy/private/device_as_webcam.te

(allow device_as_webcam system_app_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 9 system/sepolicy/private/device_as_webcam.te

(allow device_as_webcam app_api_service (service_manager (find)))
(allow device_as_webcam cameraserver_service (service_manager (find)))
;;* lme

;;* lmx 13 system/sepolicy/private/device_as_webcam.te

(allow device_as_webcam usb_uvc_enabled_prop (file (read getattr map open)))
;;* lme

;;* lmx 16 system/sepolicy/private/device_as_webcam.te

(allow device_as_webcam device (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 20 system/sepolicy/private/device_as_webcam.te

(allow device_as_webcam video_device (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 21 system/sepolicy/private/device_as_webcam.te

(allow device_as_webcam video_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 5 system/sepolicy/private/dex2oat.te

(allow dex2oat dex2oat_userfaultfd (anon_inode (ioctl read create)))
;;* lme

(dontaudit su dex2oat_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lmx 5 system/sepolicy/private/dex2oat.te

(neverallow base_typeattr_410 dex2oat_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 7 system/sepolicy/private/dex2oat.te

(allow dex2oat apk_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 7 system/sepolicy/private/dex2oat.te

(allow dex2oat apk_data_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow dex2oat apk_data_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 9 system/sepolicy/private/dex2oat.te

(allow dex2oat vendor_app_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 9 system/sepolicy/private/dex2oat.te

(allow dex2oat vendor_app_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow dex2oat vendor_app_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 11 system/sepolicy/private/dex2oat.te

(allow dex2oat vendor_framework_file (dir (getattr search)))
;;* lme

;;* lmx 12 system/sepolicy/private/dex2oat.te

(allow dex2oat vendor_framework_file (file (read getattr map open)))
;;* lme

;;* lmx 14 system/sepolicy/private/dex2oat.te

(allow dex2oat vendor_overlay_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 14 system/sepolicy/private/dex2oat.te

(allow dex2oat vendor_overlay_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow dex2oat vendor_overlay_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 16 system/sepolicy/private/dex2oat.te

(allow dex2oat vendor_apex_metadata_file (dir (getattr search)))
;;* lme

;;* lmx 18 system/sepolicy/private/dex2oat.te

(allow dex2oat tmpfs (file (read getattr map)))
;;* lme

;;* lmx 20 system/sepolicy/private/dex2oat.te

(allow dex2oat dalvikcache_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 20 system/sepolicy/private/dex2oat.te

(allow dex2oat dalvikcache_data_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow dex2oat dalvikcache_data_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 21 system/sepolicy/private/dex2oat.te

(allow dex2oat dalvikcache_data_file (file (write)))
;;* lme

;;* lmx 24 system/sepolicy/private/dex2oat.te

(allow dex2oat system_file (file (lock)))
;;* lme

;;* lmx 25 system/sepolicy/private/dex2oat.te

(allow dex2oat postinstall_file (file (lock)))
;;* lme

;;* lmx 30 system/sepolicy/private/dex2oat.te

(allow dex2oat asec_apk_file (file (read map)))
;;* lme

;;* lmx 31 system/sepolicy/private/dex2oat.te

(allow dex2oat unlabeled (file (read map)))
;;* lme

;;* lmx 32 system/sepolicy/private/dex2oat.te

(allow dex2oat oemfs (file (read map)))
;;* lme

;;* lmx 33 system/sepolicy/private/dex2oat.te

(allow dex2oat apk_tmp_file (dir (search)))
;;* lme

;;* lmx 34 system/sepolicy/private/dex2oat.te

(allow dex2oat apk_tmp_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 35 system/sepolicy/private/dex2oat.te

(allow dex2oat user_profile_data_file (file (read getattr lock map)))
;;* lme

;;* lmx 39 system/sepolicy/private/dex2oat.te

(allow dex2oat app_data_file (file (read write getattr lock map)))
(allow dex2oat privapp_data_file (file (read write getattr lock map)))
;;* lme

;;* lmx 42 system/sepolicy/private/dex2oat.te

(allow dex2oat apex_module_data_file (dir (search)))
;;* lme

;;* lmx 43 system/sepolicy/private/dex2oat.te

(allow dex2oat system_data_file (dir (search)))
;;* lme

;;* lmx 46 system/sepolicy/private/dex2oat.te

(allow dex2oat odsign_devpts (chr_file (read write)))
;;* lme

;;* lmx 50 system/sepolicy/private/dex2oat.te

(allow dex2oat apex_art_staging_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 51 system/sepolicy/private/dex2oat.te

(allow dex2oat apex_art_staging_data_file (file (read write getattr map unlink)))
;;* lme

;;* lmx 54 system/sepolicy/private/dex2oat.te

(allow dex2oat apex_art_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 55 system/sepolicy/private/dex2oat.te

(allow dex2oat apex_art_data_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 58 system/sepolicy/private/dex2oat.te

(allow dex2oat device_config_runtime_native_prop (file (read getattr map open)))
;;* lme

;;* lmx 59 system/sepolicy/private/dex2oat.te

(allow dex2oat device_config_runtime_native_boot_prop (file (read getattr map open)))
;;* lme

;;* lmx 62 system/sepolicy/private/dex2oat.te

(allow dex2oat apex_info_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 65 system/sepolicy/private/dex2oat.te

(allow dex2oat artd (fd (use)))
(allow dex2oat installd (fd (use)))
(allow dex2oat odrefresh (fd (use)))
(allow dex2oat odsign (fd (use)))
;;* lme

;;* lmx 68 system/sepolicy/private/dex2oat.te

(allow dex2oat proc_filesystems (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 75 system/sepolicy/private/dex2oat.te

(allow dex2oat postinstall_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 76 system/sepolicy/private/dex2oat.te

(allow dex2oat postinstall_file (filesystem (getattr)))
;;* lme

;;* lmx 77 system/sepolicy/private/dex2oat.te

(allow dex2oat postinstall_file (lnk_file (read getattr)))
;;* lme

;;* lmx 78 system/sepolicy/private/dex2oat.te

(allow dex2oat postinstall_file (file (read)))
;;* lme

;;* lmx 80 system/sepolicy/private/dex2oat.te

(allow dex2oat postinstall_file (file (getattr execute open)))
;;* lme

;;* lmx 86 system/sepolicy/private/dex2oat.te

(neverallow dex2oat app_data_file_type (file (open)))
(neverallow dex2oat app_data_file_type (lnk_file (open)))
(neverallow dex2oat app_data_file_type (sock_file (open)))
(neverallow dex2oat app_data_file_type (fifo_file (open)))
;;* lme

;;* lmx 7 system/sepolicy/private/dexopt_chroot_setup.te

(allow dexopt_chroot_setup servicemanager (binder (call transfer)))
;;* lme

;;* lmx 7 system/sepolicy/private/dexopt_chroot_setup.te

(allow servicemanager dexopt_chroot_setup (binder (call transfer)))
;;* lme

;;* lmx 8 system/sepolicy/private/dexopt_chroot_setup.te

(allow dexopt_chroot_setup dexopt_chroot_setup_service (service_manager (add find)))
;;* lme

;;* lmx 8 system/sepolicy/private/dexopt_chroot_setup.te

(neverallow base_typeattr_411 dexopt_chroot_setup_service (service_manager (add)))
;;* lme

;;* lmx 8 system/sepolicy/private/dexopt_chroot_setup.te

(allow dexopt_chroot_setup su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 9 system/sepolicy/private/dexopt_chroot_setup.te

(allow dexopt_chroot_setup dumpstate (fifo_file (write getattr)))
;;* lme

;;* lmx 10 system/sepolicy/private/dexopt_chroot_setup.te

(allow dexopt_chroot_setup dumpstate (fd (use)))
;;* lme

;;* lmx 12 system/sepolicy/private/dexopt_chroot_setup.te

(allow init dexopt_chroot_setup_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 12 system/sepolicy/private/dexopt_chroot_setup.te

(allow init dexopt_chroot_setup (process (transition)))
;;* lme

;;* lmx 12 system/sepolicy/private/dexopt_chroot_setup.te

(allow dexopt_chroot_setup dexopt_chroot_setup_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init dexopt_chroot_setup (process (noatsecure)))
;;* lmx 12 system/sepolicy/private/dexopt_chroot_setup.te

(allow init dexopt_chroot_setup (process (siginh rlimitinh)))
;;* lme

(typetransition init dexopt_chroot_setup_exec process dexopt_chroot_setup)
(typetransition dexopt_chroot_setup tmpfs file dexopt_chroot_setup_tmpfs)
;;* lmx 18 system/sepolicy/private/dexopt_chroot_setup.te

(allow dexopt_chroot_setup dexopt_chroot_setup_tmpfs (file (read write getattr map)))
;;* lme

;;* lmx 22 system/sepolicy/private/dexopt_chroot_setup.te

(allow dexopt_chroot_setup apex_module_data_file (dir (getattr search)))
;;* lme

;;* lmx 23 system/sepolicy/private/dexopt_chroot_setup.te

(allow dexopt_chroot_setup apex_art_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 23 system/sepolicy/private/dexopt_chroot_setup.te

(allow dexopt_chroot_setup apex_art_data_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow dexopt_chroot_setup apex_art_data_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 24 system/sepolicy/private/dexopt_chroot_setup.te

(allow dexopt_chroot_setup dexopt_chroot_setup_userfaultfd (anon_inode (ioctl read create)))
;;* lme

(dontaudit su dexopt_chroot_setup_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lmx 24 system/sepolicy/private/dexopt_chroot_setup.te

(neverallow base_typeattr_411 dexopt_chroot_setup_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 29 system/sepolicy/private/dexopt_chroot_setup.te

(allow dexopt_chroot_setup self (capability (sys_chroot sys_admin)))
(allow dexopt_chroot_setup self (cap_userns (sys_chroot sys_admin)))
;;* lme

;;* lmx 34 system/sepolicy/private/dexopt_chroot_setup.te

(allow dexopt_chroot_setup pre_reboot_dexopt_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 35 system/sepolicy/private/dexopt_chroot_setup.te

(allow dexopt_chroot_setup pre_reboot_dexopt_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 38 system/sepolicy/private/dexopt_chroot_setup.te

(allow dexopt_chroot_setup proc_filesystems (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 41 system/sepolicy/private/dexopt_chroot_setup.te

(allow dexopt_chroot_setup block_device (dir (getattr search)))
;;* lme

;;* lmx 82 system/sepolicy/private/dexopt_chroot_setup.te

(allow dexopt_chroot_setup device (dir (mounton)))
(allow dexopt_chroot_setup rootfs (dir (mounton)))
(allow dexopt_chroot_setup proc (dir (mounton)))
(allow dexopt_chroot_setup binderfs (dir (mounton)))
(allow dexopt_chroot_setup selinuxfs (dir (mounton)))
(allow dexopt_chroot_setup fusectlfs (dir (mounton)))
(allow dexopt_chroot_setup cgroup (dir (mounton)))
(allow dexopt_chroot_setup cgroup_v2 (dir (mounton)))
(allow dexopt_chroot_setup sysfs (dir (mounton)))
(allow dexopt_chroot_setup fs_bpf (dir (mounton)))
(allow dexopt_chroot_setup devpts (dir (mounton)))
(allow dexopt_chroot_setup tmpfs (dir (mounton)))
(allow dexopt_chroot_setup debugfs (dir (mounton)))
(allow dexopt_chroot_setup debugfs_tracing_debug (dir (mounton)))
(allow dexopt_chroot_setup securityfs (dir (mounton)))
(allow dexopt_chroot_setup pstorefs (dir (mounton)))
(allow dexopt_chroot_setup functionfs (dir (mounton)))
(allow dexopt_chroot_setup binfmt_miscfs (dir (mounton)))
(allow dexopt_chroot_setup system_file (dir (mounton)))
(allow dexopt_chroot_setup system_lib_file (dir (mounton)))
(allow dexopt_chroot_setup linkerconfig_file (dir (mounton)))
(allow dexopt_chroot_setup vendor_file (dir (mounton)))
(allow dexopt_chroot_setup vendor_configs_file (dir (mounton)))
(allow dexopt_chroot_setup metadata_file (dir (mounton)))
(allow dexopt_chroot_setup system_data_root_file (dir (mounton)))
(allow dexopt_chroot_setup system_data_file (dir (mounton)))
(allow dexopt_chroot_setup apk_data_file (dir (mounton)))
(allow dexopt_chroot_setup mnt_expand_file (dir (mounton)))
(allow dexopt_chroot_setup apex_mnt_dir (dir (mounton)))
(allow dexopt_chroot_setup pre_reboot_dexopt_file (dir (mounton)))
;;* lme

;;* lmx 84 system/sepolicy/private/dexopt_chroot_setup.te

(allow dexopt_chroot_setup labeledfs (filesystem (mount)))
(allow dexopt_chroot_setup tmpfs (filesystem (mount)))
;;* lme

;;* lmx 104 system/sepolicy/private/dexopt_chroot_setup.te

(allow dexopt_chroot_setup labeledfs (filesystem (unmount)))
(allow dexopt_chroot_setup proc (filesystem (unmount)))
(allow dexopt_chroot_setup binderfs (filesystem (unmount)))
(allow dexopt_chroot_setup selinuxfs (filesystem (unmount)))
(allow dexopt_chroot_setup fusectlfs (filesystem (unmount)))
(allow dexopt_chroot_setup cgroup (filesystem (unmount)))
(allow dexopt_chroot_setup cgroup_v2 (filesystem (unmount)))
(allow dexopt_chroot_setup sysfs (filesystem (unmount)))
(allow dexopt_chroot_setup fs_bpf (filesystem (unmount)))
(allow dexopt_chroot_setup devpts (filesystem (unmount)))
(allow dexopt_chroot_setup tmpfs (filesystem (unmount)))
(allow dexopt_chroot_setup debugfs (filesystem (unmount)))
(allow dexopt_chroot_setup debugfs_tracing_debug (filesystem (unmount)))
(allow dexopt_chroot_setup securityfs (filesystem (unmount)))
(allow dexopt_chroot_setup pstorefs (filesystem (unmount)))
(allow dexopt_chroot_setup functionfs (filesystem (unmount)))
(allow dexopt_chroot_setup binfmt_miscfs (filesystem (unmount)))
;;* lme

;;* lmx 107 system/sepolicy/private/dexopt_chroot_setup.te

(allow dexopt_chroot_setup apex_mnt_dir (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 107 system/sepolicy/private/dexopt_chroot_setup.te

(allow dexopt_chroot_setup apex_mnt_dir (file (ioctl read getattr lock map open watch watch_reads)))
(allow dexopt_chroot_setup apex_mnt_dir (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 108 system/sepolicy/private/dexopt_chroot_setup.te

(allow dexopt_chroot_setup apex_info_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 115 system/sepolicy/private/dexopt_chroot_setup.te

(allow dexopt_chroot_setup linkerconfig_file (dir (write add_name)))
;;* lme

;;* lmx 116 system/sepolicy/private/dexopt_chroot_setup.te

(allow dexopt_chroot_setup linkerconfig_file (file (write create)))
;;* lme

;;* lmx 124 system/sepolicy/private/dexopt_chroot_setup.te

(allow dexopt_chroot_setup tmpfs (filesystem (relabelfrom)))
;;* lme

;;* lmx 129 system/sepolicy/private/dexopt_chroot_setup.te

(allow dexopt_chroot_setup art_exec_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lme

;;* lmx 132 system/sepolicy/private/dexopt_chroot_setup.te

(allow dexopt_chroot_setup apexd_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 132 system/sepolicy/private/dexopt_chroot_setup.te

(allow dexopt_chroot_setup apexd (process (transition)))
;;* lme

;;* lmx 132 system/sepolicy/private/dexopt_chroot_setup.te

(allow apexd apexd_exec (file (read getattr map execute open entrypoint)))
;;* lme

;;* lmx 132 system/sepolicy/private/dexopt_chroot_setup.te

(allow apexd dexopt_chroot_setup (process (sigchld)))
;;* lme

(dontaudit dexopt_chroot_setup apexd (process (noatsecure)))
;;* lmx 132 system/sepolicy/private/dexopt_chroot_setup.te

(allow dexopt_chroot_setup apexd (process (siginh rlimitinh)))
;;* lme

(typetransition dexopt_chroot_setup apexd_exec process apexd)
;;* lmx 133 system/sepolicy/private/dexopt_chroot_setup.te

(allow dexopt_chroot_setup linkerconfig_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 133 system/sepolicy/private/dexopt_chroot_setup.te

(allow dexopt_chroot_setup linkerconfig (process (transition)))
;;* lme

;;* lmx 133 system/sepolicy/private/dexopt_chroot_setup.te

(allow linkerconfig linkerconfig_exec (file (read getattr map execute open entrypoint)))
;;* lme

;;* lmx 133 system/sepolicy/private/dexopt_chroot_setup.te

(allow linkerconfig dexopt_chroot_setup (process (sigchld)))
;;* lme

(dontaudit dexopt_chroot_setup linkerconfig (process (noatsecure)))
;;* lmx 133 system/sepolicy/private/dexopt_chroot_setup.te

(allow dexopt_chroot_setup linkerconfig (process (siginh rlimitinh)))
;;* lme

(typetransition dexopt_chroot_setup linkerconfig_exec process linkerconfig)
;;* lmx 136 system/sepolicy/private/dexopt_chroot_setup.te

(allow dexopt_chroot_setup property_socket (sock_file (write)))
;;* lme

;;* lmx 136 system/sepolicy/private/dexopt_chroot_setup.te

(allow dexopt_chroot_setup init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 136 system/sepolicy/private/dexopt_chroot_setup.te

(allow dexopt_chroot_setup snapshotctl_prop (property_service (set)))
;;* lme

;;* lmx 136 system/sepolicy/private/dexopt_chroot_setup.te

(allow dexopt_chroot_setup snapshotctl_prop (file (read getattr map open)))
;;* lme

;;* lmx 139 system/sepolicy/private/dexopt_chroot_setup.te

(allow dexopt_chroot_setup apk_data_file (dir (getattr search)))
;;* lme

;;* lmx 145 system/sepolicy/private/dexopt_chroot_setup.te

(neverallow dexopt_chroot_setup base_typeattr_325 (file (execute_no_trans)))
;;* lme

;;* lmx 148 system/sepolicy/private/dexopt_chroot_setup.te

(neverallow base_typeattr_247 dexopt_chroot_setup (process (transition)))
;;* lme

;;* lmx 149 system/sepolicy/private/dexopt_chroot_setup.te

(neverallow base_typeattr_248 dexopt_chroot_setup (process (dyntransition)))
;;* lme

;;* lmx 160 system/sepolicy/private/dexopt_chroot_setup.te

(neverallow base_typeattr_412 pre_reboot_dexopt_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 3 system/sepolicy/private/dhcp.te

(allow init dhcp_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 3 system/sepolicy/private/dhcp.te

(allow init dhcp (process (transition)))
;;* lme

;;* lmx 3 system/sepolicy/private/dhcp.te

(allow dhcp dhcp_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init dhcp (process (noatsecure)))
;;* lmx 3 system/sepolicy/private/dhcp.te

(allow init dhcp (process (siginh rlimitinh)))
;;* lme

(typetransition init dhcp_exec process dhcp)
(typetransition dhcp system_data_file dir dhcp_data_file)
(typetransition dhcp system_data_file file dhcp_data_file)
;;* lmx 6 system/sepolicy/private/dhcp.te

(allow dhcp property_socket (sock_file (write)))
;;* lme

;;* lmx 6 system/sepolicy/private/dhcp.te

(allow dhcp init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 6 system/sepolicy/private/dhcp.te

(allow dhcp dhcp_prop (property_service (set)))
;;* lme

;;* lmx 6 system/sepolicy/private/dhcp.te

(allow dhcp dhcp_prop (file (read getattr map open)))
;;* lme

;;* lmx 7 system/sepolicy/private/dhcp.te

(allow dhcp property_socket (sock_file (write)))
;;* lme

;;* lmx 7 system/sepolicy/private/dhcp.te

(allow dhcp init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 7 system/sepolicy/private/dhcp.te

(allow dhcp pan_result_prop (property_service (set)))
;;* lme

;;* lmx 7 system/sepolicy/private/dhcp.te

(allow dhcp pan_result_prop (file (read getattr map open)))
;;* lme

;;* lmx 11 system/sepolicy/private/dhcp.te

(allow dhcp cgroup (dir (write create add_name)))
;;* lme

;;* lmx 12 system/sepolicy/private/dhcp.te

(allow dhcp cgroup_v2 (dir (write create add_name)))
;;* lme

;;* lmx 13 system/sepolicy/private/dhcp.te

(allow dhcp self (capability (setgid setuid net_bind_service net_admin net_raw)))
(allow dhcp self (cap_userns (setgid setuid net_bind_service net_admin net_raw)))
;;* lme

;;* lmx 14 system/sepolicy/private/dhcp.te

(allow dhcp self (packet_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
;;* lme

;;* lmx 15 system/sepolicy/private/dhcp.te

(allow dhcp self (netlink_route_socket (nlmsg_write)))
;;* lme

;;* lmx 16 system/sepolicy/private/dhcp.te

(allowx dhcp self (nlmsg netlink_route_socket ((range 0x10 0x7a))))
;;* lme

;;* lmx 17 system/sepolicy/private/dhcp.te

(allow dhcp shell_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lme

;;* lmx 18 system/sepolicy/private/dhcp.te

(allow dhcp system_file (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lme

;;* lmx 22 system/sepolicy/private/dhcp.te

(allow dhcp toolbox_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lme

;;* lmx 25 system/sepolicy/private/dhcp.te

(allow dhcp proc_net_type (file (write)))
;;* lme

;;* lmx 27 system/sepolicy/private/dhcp.te

(allow dhcp dhcp_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 28 system/sepolicy/private/dhcp.te

(allow dhcp dhcp_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 31 system/sepolicy/private/dhcp.te

(allow dhcp netd (fd (use)))
;;* lme

;;* lmx 32 system/sepolicy/private/dhcp.te

(allow dhcp netd (fifo_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 33 system/sepolicy/private/dhcp.te

(allow dhcp netd (udp_socket (read write)))
(allow dhcp netd (unix_stream_socket (read write)))
(allow dhcp netd (unix_dgram_socket (read write)))
;;* lme

;;* lmx 34 system/sepolicy/private/dhcp.te

(allow dhcp netd (netlink_route_socket (read write)))
(allow dhcp netd (netlink_nflog_socket (read write)))
(allow dhcp netd (netlink_kobject_uevent_socket (read write)))
;;* lme

;;* lmx 1 system/sepolicy/private/display_service_server.te

(allow display_service_server fwk_display_hwservice (hwservice_manager (add find)))
;;* lme

;;* lmx 1 system/sepolicy/private/display_service_server.te

(allow display_service_server hidl_base_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 1 system/sepolicy/private/display_service_server.te

(neverallow base_typeattr_413 fwk_display_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 4 system/sepolicy/private/dmesgd.te

(allow init dmesgd_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 4 system/sepolicy/private/dmesgd.te

(allow init dmesgd (process (transition)))
;;* lme

;;* lmx 4 system/sepolicy/private/dmesgd.te

(allow dmesgd dmesgd_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init dmesgd (process (noatsecure)))
;;* lmx 4 system/sepolicy/private/dmesgd.te

(allow init dmesgd (process (siginh rlimitinh)))
;;* lme

(typetransition init dmesgd_exec process dmesgd)
;;* lmx 6 system/sepolicy/private/dmesgd.te

(allow dmesgd dmesgd_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 7 system/sepolicy/private/dmesgd.te

(allow dmesgd dmesgd_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 9 system/sepolicy/private/dmesgd.te

(allow dmesgd kernel (system (syslog_read)))
;;* lme

;;* lmx 10 system/sepolicy/private/dmesgd.te

(allow dmesgd shell_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lme

;;* lmx 11 system/sepolicy/private/dmesgd.te

(allow dmesgd toolbox_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lme

;;* lmx 12 system/sepolicy/private/dmesgd.te

(allow dmesgd servicemanager (binder (call transfer)))
;;* lme

;;* lmx 12 system/sepolicy/private/dmesgd.te

(allow servicemanager dmesgd (binder (call transfer)))
;;* lme

;;* lmx 13 system/sepolicy/private/dmesgd.te

(allow dmesgd system_server (binder (call transfer)))
;;* lme

;;* lmx 13 system/sepolicy/private/dmesgd.te

(allow system_server dmesgd (binder (transfer)))
;;* lme

;;* lmx 13 system/sepolicy/private/dmesgd.te

(allow dmesgd system_server (fd (use)))
;;* lme

;;* lmx 14 system/sepolicy/private/dmesgd.te

(allow dmesgd dropbox_service (service_manager (find)))
;;* lme

;;* lmx 15 system/sepolicy/private/dmesgd.te

(allow dmesgd proc_version (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 4 system/sepolicy/private/dnsmasq.te

(allowx dnsmasq self (ioctl udp_socket (0x6900 0x6902)))
;;* lme

;;* lmx 4 system/sepolicy/private/dnsmasq.te

(allowx dnsmasq self (ioctl udp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
;;* lme

;;* lmx 4 system/sepolicy/private/dnsmasq.te

(allowx dnsmasq self (ioctl udp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
;;* lme

;;* lmx 7 system/sepolicy/private/dnsmasq.te

(allow dnsmasq self (capability (dac_override dac_read_search)))
(allow dnsmasq self (cap_userns (dac_override dac_read_search)))
;;* lme

;;* lmx 9 system/sepolicy/private/dnsmasq.te

(allow dnsmasq self (capability (setgid setuid net_bind_service net_admin net_raw)))
(allow dnsmasq self (cap_userns (setgid setuid net_bind_service net_admin net_raw)))
;;* lme

;;* lmx 11 system/sepolicy/private/dnsmasq.te

(allow dnsmasq dhcp_data_file (dir (write lock open add_name remove_name search)))
;;* lme

;;* lmx 12 system/sepolicy/private/dnsmasq.te

(allow dnsmasq dhcp_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 15 system/sepolicy/private/dnsmasq.te

(allow dnsmasq netd (fd (use)))
;;* lme

;;* lmx 16 system/sepolicy/private/dnsmasq.te

(allow dnsmasq netd (fifo_file (read write getattr)))
;;* lme

;;* lmx 18 system/sepolicy/private/dnsmasq.te

(allow dnsmasq netd (netlink_kobject_uevent_socket (read write)))
;;* lme

;;* lmx 19 system/sepolicy/private/dnsmasq.te

(allow dnsmasq netd (netlink_nflog_socket (read write)))
;;* lme

;;* lmx 20 system/sepolicy/private/dnsmasq.te

(allow dnsmasq netd (netlink_route_socket (read write)))
;;* lme

;;* lmx 21 system/sepolicy/private/dnsmasq.te

(allow dnsmasq netd (unix_stream_socket (read write getattr)))
;;* lme

;;* lmx 22 system/sepolicy/private/dnsmasq.te

(allow dnsmasq netd (unix_dgram_socket (read write)))
;;* lme

;;* lmx 23 system/sepolicy/private/dnsmasq.te

(allow dnsmasq netd (udp_socket (read write)))
;;* lme

;;* lmx 4 system/sepolicy/private/domain.te

(allow domain init (process (sigchld)))
;;* lme

;;* lmx 22 system/sepolicy/private/domain.te

(allow domain self (process (fork sigchld sigkill sigstop signull signal getsched setsched getsession getpgid getcap setcap getattr setrlimit)))
;;* lme

;;* lmx 23 system/sepolicy/private/domain.te

(allow base_typeattr_414 self (process (setpgid)))
;;* lme

;;* lmx 24 system/sepolicy/private/domain.te

(allow domain self (fd (use)))
;;* lme

;;* lmx 25 system/sepolicy/private/domain.te

(allow domain proc (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 26 system/sepolicy/private/domain.te

(allow domain proc_net_type (dir (search)))
;;* lme

;;* lmx 27 system/sepolicy/private/domain.te

(allow domain self (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 27 system/sepolicy/private/domain.te

(allow domain self (file (ioctl read getattr lock map open watch watch_reads)))
(allow domain self (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 28 system/sepolicy/private/domain.te

(allow domain self (file (ioctl read write getattr lock append map open watch watch_reads)))
(allow domain self (fifo_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 29 system/sepolicy/private/domain.te

(allow domain self (unix_dgram_socket (ioctl read write create getattr setattr lock append map bind connect getopt setopt shutdown sendto)))
;;* lme

;;* lmx 30 system/sepolicy/private/domain.te

(allow domain self (unix_stream_socket (ioctl read write create getattr setattr lock append map bind connect listen accept getopt setopt shutdown connectto)))
;;* lme

;;* lmx 33 system/sepolicy/private/domain.te

(allow domain init (fd (use)))
;;* lme

;;* lmx 35 system/sepolicy/private/domain.te

(allow domain su (fd (use)))
;;* lme

;;* lmx 35 system/sepolicy/private/domain.te

(allow domain su (unix_stream_socket (read write getattr getopt shutdown connectto)))
;;* lme

;;* lmx 35 system/sepolicy/private/domain.te

(allow domain su (unix_dgram_socket (sendto)))
;;* lme

;;* lmx 35 system/sepolicy/private/domain.te

(allow domain su (memfd_file (read write getattr map)))
;;* lme

;;* lmx 35 system/sepolicy/private/domain.te

(allow base_typeattr_247 su (binder (call transfer)))
;;* lme

;;* lmx 35 system/sepolicy/private/domain.te

(allow domain su (fifo_file (write getattr)))
;;* lme

;;* lmx 35 system/sepolicy/private/domain.te

(allow domain su (process (sigchld)))
;;* lme

;;* lmx 35 system/sepolicy/private/domain.te

(allow domain coredump_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 35 system/sepolicy/private/domain.te

(allow domain coredump_file (dir (ioctl read write getattr lock open watch watch_reads add_name search)))
;;* lme

;;* lmx 62 system/sepolicy/private/domain.te

(allow domain device_config_aconfig_flags_prop (file (read getattr map open)))
;;* lme

;;* lmx 65 system/sepolicy/private/domain.te

(allow domain tmpfs (dir (getattr search)))
;;* lme

;;* lmx 66 system/sepolicy/private/domain.te

(allow domain rootfs (dir (search)))
;;* lme

;;* lmx 67 system/sepolicy/private/domain.te

(allow domain rootfs (lnk_file (read getattr)))
;;* lme

;;* lmx 70 system/sepolicy/private/domain.te

(allow domain device (dir (search)))
;;* lme

;;* lmx 71 system/sepolicy/private/domain.te

(allow domain dev_type (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 72 system/sepolicy/private/domain.te

(allow domain devpts (dir (search)))
;;* lme

;;* lmx 73 system/sepolicy/private/domain.te

(allow domain dmabuf_heap_device (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 74 system/sepolicy/private/domain.te

(allow domain socket_device (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 75 system/sepolicy/private/domain.te

(allow domain owntty_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 76 system/sepolicy/private/domain.te

(allow domain null_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 77 system/sepolicy/private/domain.te

(allow domain zero_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 81 system/sepolicy/private/domain.te

(allow domain ashmem_device (chr_file (ioctl read write getattr lock append map)))
;;* lme

;;* lmx 96 system/sepolicy/private/domain.te

(allow domain ashmem_libcutils_device (chr_file (ioctl read write getattr lock append map)))
;;* lme

;;* lmx 98 system/sepolicy/private/domain.te

(allow domain self (memfd_file (read write create getattr map)))
;;* lme

;;* lmx 101 system/sepolicy/private/domain.te

(allow base_typeattr_415 binder_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 102 system/sepolicy/private/domain.te

(allow base_typeattr_415 servicemanager_prop (file (read getattr map open)))
;;* lme

(dontaudit domain hwservicemanager_exec (file (ioctl read getattr lock map open watch watch_reads)))
;;* lmx 110 system/sepolicy/private/domain.te

(allowx domain binder_device (ioctl chr_file (0x6201 0x6203 (range 0x6205 0x6209) (range 0x620b 0x620d) (range 0x6210 0x6211))))
;;* lme

;;* lmx 113 system/sepolicy/private/domain.te

(allow domain binderfs (dir (getattr search)))
;;* lme

;;* lmx 114 system/sepolicy/private/domain.te

(allow domain binderfs_logs_proc (dir (search)))
;;* lme

;;* lmx 115 system/sepolicy/private/domain.te

(allow domain binderfs_features (dir (search)))
;;* lme

;;* lmx 116 system/sepolicy/private/domain.te

(allow domain binderfs_features (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 118 system/sepolicy/private/domain.te

(allow base_typeattr_416 hwbinder_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 119 system/sepolicy/private/domain.te

(allow domain ptmx_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 120 system/sepolicy/private/domain.te

(allow domain random_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 121 system/sepolicy/private/domain.te

(allow domain proc_random (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 122 system/sepolicy/private/domain.te

(allow domain proc_random (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 123 system/sepolicy/private/domain.te

(allow domain properties_device (dir (getattr search)))
;;* lme

;;* lmx 124 system/sepolicy/private/domain.te

(allow domain properties_serial (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 125 system/sepolicy/private/domain.te

(allow domain property_info (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 129 system/sepolicy/private/domain.te

(allow domain log_property_type (file (read getattr map open)))
;;* lme

(dontaudit domain property_type (file (audit_access)))
;;* lmx 131 system/sepolicy/private/domain.te

(allow domain property_contexts_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 133 system/sepolicy/private/domain.te

(allow domain init (key (search)))
;;* lme

;;* lmx 134 system/sepolicy/private/domain.te

(allow domain vold (key (search)))
;;* lme

;;* lmx 137 system/sepolicy/private/domain.te

(allow domain logdw_socket (sock_file (write)))
;;* lme

;;* lmx 137 system/sepolicy/private/domain.te

(allow domain logd (unix_dgram_socket (sendto)))
;;* lme

;;* lmx 137 system/sepolicy/private/domain.te

(allow domain pmsg_device (chr_file (write lock append map open)))
;;* lme

;;* lmx 145 system/sepolicy/private/domain.te

(allow domain system_file (dir (ioctl read getattr lock open watch watch_reads search)))
(allow domain system_lib_file (dir (ioctl read getattr lock open watch watch_reads search)))
(allow domain system_seccomp_policy_file (dir (ioctl read getattr lock open watch watch_reads search)))
(allow domain system_security_cacerts_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 146 system/sepolicy/private/domain.te

(allow domain system_file (lnk_file (read getattr)))
;;* lme

;;* lmx 150 system/sepolicy/private/domain.te

(allow domain system_seccomp_policy_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 152 system/sepolicy/private/domain.te

(allow domain system_security_cacerts_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 153 system/sepolicy/private/domain.te

(allow domain system_group_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 154 system/sepolicy/private/domain.te

(allow domain system_passwd_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 155 system/sepolicy/private/domain.te

(allow domain system_linker_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 156 system/sepolicy/private/domain.te

(allow domain system_linker_config_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 157 system/sepolicy/private/domain.te

(allow domain system_lib_file (file (read getattr map execute open)))
;;* lme

;;* lmx 159 system/sepolicy/private/domain.te

(allow domain system_linker_exec (lnk_file (read getattr open)))
;;* lme

;;* lmx 160 system/sepolicy/private/domain.te

(allow domain system_lib_file (lnk_file (read getattr open)))
;;* lme

;;* lmx 162 system/sepolicy/private/domain.te

(allow domain system_event_log_tags_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 164 system/sepolicy/private/domain.te

(allow appdomain system_file (file (read getattr map execute open)))
(allow coredomain system_file (file (read getattr map execute open)))
;;* lme

;;* lmx 178 system/sepolicy/private/domain.te

(allow domain vendor_hal_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 181 system/sepolicy/private/domain.te

(allow domain same_process_hal_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 185 system/sepolicy/private/domain.te

(allow base_typeattr_241 same_process_hal_file (file (read getattr map execute open)))
;;* lme

;;* lmx 189 system/sepolicy/private/domain.te

(allow domain vndk_sp_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 190 system/sepolicy/private/domain.te

(allow domain vndk_sp_file (file (read getattr map execute open)))
;;* lme

;;* lmx 193 system/sepolicy/private/domain.te

(allow domain vendor_configs_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 194 system/sepolicy/private/domain.te

(allow domain vendor_configs_file (file (read getattr map open)))
;;* lme

;;* lmx 196 system/sepolicy/private/domain.te

(allow domain vendor_file_type (lnk_file (read getattr open)))
;;* lme

;;* lmx 196 system/sepolicy/private/domain.te

(allow domain vendor_file (dir (getattr search)))
;;* lme

;;* lmx 196 system/sepolicy/private/domain.te

(allow base_typeattr_241 vendor_file_type (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 196 system/sepolicy/private/domain.te

(allow base_typeattr_241 vendor_file_type (file (read getattr map execute open)))
;;* lme

;;* lmx 196 system/sepolicy/private/domain.te

(allow base_typeattr_241 vendor_file_type (lnk_file (read getattr)))
;;* lme

;;* lmx 213 system/sepolicy/private/domain.te

(allow domain sysfs (lnk_file (read getattr)))
;;* lme

;;* lmx 217 system/sepolicy/private/domain.te

(allow domain system_zoneinfo_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 218 system/sepolicy/private/domain.te

(allow domain system_zoneinfo_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 221 system/sepolicy/private/domain.te

(allow domain sysfs_devices_system_cpu (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 221 system/sepolicy/private/domain.te

(allow domain sysfs_devices_system_cpu (file (ioctl read getattr lock map open watch watch_reads)))
(allow domain sysfs_devices_system_cpu (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 223 system/sepolicy/private/domain.te

(allow domain sysfs_usb (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 223 system/sepolicy/private/domain.te

(allow domain sysfs_usb (file (ioctl read getattr lock map open watch watch_reads)))
(allow domain sysfs_usb (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 227 system/sepolicy/private/domain.te

(allow domain sysfs_transparent_hugepage (dir (search)))
;;* lme

;;* lmx 228 system/sepolicy/private/domain.te

(allow domain sysfs_transparent_hugepage (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 237 system/sepolicy/private/domain.te

(allow appdomain system_data_file (dir (getattr)))
(allow coredomain system_data_file (dir (getattr)))
;;* lme

;;* lmx 240 system/sepolicy/private/domain.te

(allow domain system_data_root_file (dir (getattr search)))
;;* lme

;;* lmx 244 system/sepolicy/private/domain.te

(allow domain system_data_file (dir (search)))
;;* lme

;;* lmx 248 system/sepolicy/private/domain.te

(allow appdomain system_userdir_file (dir (getattr search)))
(allow coredomain system_userdir_file (dir (getattr search)))
;;* lme

;;* lmx 251 system/sepolicy/private/domain.te

(allow appdomain media_userdir_file (dir (search)))
(allow coredomain media_userdir_file (dir (search)))
;;* lme

;;* lmx 253 system/sepolicy/private/domain.te

(allow domain vendor_userdir_file (dir (getattr search)))
;;* lme

;;* lmx 254 system/sepolicy/private/domain.te

(allow domain vendor_data_file (dir (getattr search)))
;;* lme

;;* lmx 257 system/sepolicy/private/domain.te

(allow domain proc (lnk_file (read getattr)))
;;* lme

;;* lmx 260 system/sepolicy/private/domain.te

(allow domain proc_cpuinfo (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 263 system/sepolicy/private/domain.te

(allow domain dev_cpu_variant (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 266 system/sepolicy/private/domain.te

(allow domain proc_perf (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 269 system/sepolicy/private/domain.te

(allow domain selinuxfs (dir (search)))
;;* lme

;;* lmx 270 system/sepolicy/private/domain.te

(allow domain selinuxfs (file (getattr)))
;;* lme

;;* lmx 271 system/sepolicy/private/domain.te

(allow domain sysfs (dir (search)))
;;* lme

;;* lmx 272 system/sepolicy/private/domain.te

(allow domain selinuxfs (filesystem (getattr)))
;;* lme

;;* lmx 277 system/sepolicy/private/domain.te

(allow domain debugfs (dir (search)))
;;* lme

;;* lmx 278 system/sepolicy/private/domain.te

(allow domain debugfs_tracing (dir (search)))
;;* lme

;;* lmx 279 system/sepolicy/private/domain.te

(allow domain debugfs_tracing_debug (dir (search)))
;;* lme

;;* lmx 280 system/sepolicy/private/domain.te

(allow domain debugfs_trace_marker (file (write lock append map open)))
;;* lme

;;* lmx 289 system/sepolicy/private/domain.te

(allow domain self (lockdown (integrity confidentiality)))
;;* lme

;;* lmx 292 system/sepolicy/private/domain.te

(allow domain fs_type (filesystem (getattr)))
;;* lme

;;* lmx 293 system/sepolicy/private/domain.te

(allow domain fs_type (dir (getattr)))
;;* lme

;;* lmx 301 system/sepolicy/private/domain.te

(allowx domain domain (ioctl tcp_socket ((range 0x5401 0x5404) 0x540b (range 0x540e 0x5411) (range 0x5413 0x5414) (range 0x5450 0x5451))))
(allowx domain domain (ioctl udp_socket ((range 0x5401 0x5404) 0x540b (range 0x540e 0x5411) (range 0x5413 0x5414) (range 0x5450 0x5451))))
(allowx domain domain (ioctl rawip_socket ((range 0x5401 0x5404) 0x540b (range 0x540e 0x5411) (range 0x5413 0x5414) (range 0x5450 0x5451))))
(allowx domain domain (ioctl icmp_socket ((range 0x5401 0x5404) 0x540b (range 0x540e 0x5411) (range 0x5413 0x5414) (range 0x5450 0x5451))))
;;* lme

;;* lmx 301 system/sepolicy/private/domain.te

(allowx domain domain (ioctl tcp_socket ((range 0x8906 0x8907) 0x8910 (range 0x8912 0x8913) 0x8915 0x8917 0x8919 0x891b 0x8921 0x8933 0x8938 0x8942)))
(allowx domain domain (ioctl udp_socket ((range 0x8906 0x8907) 0x8910 (range 0x8912 0x8913) 0x8915 0x8917 0x8919 0x891b 0x8921 0x8933 0x8938 0x8942)))
(allowx domain domain (ioctl rawip_socket ((range 0x8906 0x8907) 0x8910 (range 0x8912 0x8913) 0x8915 0x8917 0x8919 0x891b 0x8921 0x8933 0x8938 0x8942)))
(allowx domain domain (ioctl icmp_socket ((range 0x8906 0x8907) 0x8910 (range 0x8912 0x8913) 0x8915 0x8917 0x8919 0x891b 0x8921 0x8933 0x8938 0x8942)))
;;* lme

;;* lmx 301 system/sepolicy/private/domain.te

(allowx domain domain (ioctl tcp_socket (0x8b01 0x8b05 0x8b07 0x8b09 0x8b0b 0x8b0d 0x8b0f (range 0x8b11 0x8b13) 0x8b21 0x8b23 0x8b25 0x8b27 0x8b29 0x8b2d)))
(allowx domain domain (ioctl udp_socket (0x8b01 0x8b05 0x8b07 0x8b09 0x8b0b 0x8b0d 0x8b0f (range 0x8b11 0x8b13) 0x8b21 0x8b23 0x8b25 0x8b27 0x8b29 0x8b2d)))
(allowx domain domain (ioctl rawip_socket (0x8b01 0x8b05 0x8b07 0x8b09 0x8b0b 0x8b0d 0x8b0f (range 0x8b11 0x8b13) 0x8b21 0x8b23 0x8b25 0x8b27 0x8b29 0x8b2d)))
(allowx domain domain (ioctl icmp_socket (0x8b01 0x8b05 0x8b07 0x8b09 0x8b0b 0x8b0d 0x8b0f (range 0x8b11 0x8b13) 0x8b21 0x8b23 0x8b25 0x8b27 0x8b29 0x8b2d)))
;;* lme

;;* lmx 304 system/sepolicy/private/domain.te

(allowx domain domain (ioctl unix_stream_socket (0x5401 0x5411 (range 0x5413 0x5414) 0x541b (range 0x5450 0x5451))))
(allowx domain domain (ioctl unix_dgram_socket (0x5401 0x5411 (range 0x5413 0x5414) 0x541b (range 0x5450 0x5451))))
(allowx domain pdx_channel_socket_type (ioctl unix_stream_socket (0x5401 0x5411 (range 0x5413 0x5414) 0x541b (range 0x5450 0x5451))))
(allowx domain pdx_channel_socket_type (ioctl unix_dgram_socket (0x5401 0x5411 (range 0x5413 0x5414) 0x541b (range 0x5450 0x5451))))
;;* lme

;;* lmx 310 system/sepolicy/private/domain.te

(allowx domain devpts (ioctl chr_file ((range 0x5401 0x5404) 0x540b (range 0x540e 0x5411) (range 0x5413 0x5414) (range 0x5450 0x5451))))
;;* lme

;;* lmx 315 system/sepolicy/private/domain.te

(allowx domain dev_type (ioctl file ((range 0x5450 0x5451))))
(allowx domain dev_type (ioctl dir ((range 0x5450 0x5451))))
(allowx domain dev_type (ioctl lnk_file ((range 0x5450 0x5451))))
(allowx domain dev_type (ioctl blk_file ((range 0x5450 0x5451))))
(allowx domain dev_type (ioctl sock_file ((range 0x5450 0x5451))))
(allowx domain dev_type (ioctl fifo_file ((range 0x5450 0x5451))))
(allowx domain domain (ioctl file ((range 0x5450 0x5451))))
(allowx domain domain (ioctl dir ((range 0x5450 0x5451))))
(allowx domain domain (ioctl lnk_file ((range 0x5450 0x5451))))
(allowx domain domain (ioctl blk_file ((range 0x5450 0x5451))))
(allowx domain domain (ioctl sock_file ((range 0x5450 0x5451))))
(allowx domain domain (ioctl fifo_file ((range 0x5450 0x5451))))
(allowx domain fs_type (ioctl file ((range 0x5450 0x5451))))
(allowx domain fs_type (ioctl dir ((range 0x5450 0x5451))))
(allowx domain fs_type (ioctl lnk_file ((range 0x5450 0x5451))))
(allowx domain fs_type (ioctl blk_file ((range 0x5450 0x5451))))
(allowx domain fs_type (ioctl sock_file ((range 0x5450 0x5451))))
(allowx domain fs_type (ioctl fifo_file ((range 0x5450 0x5451))))
(allowx domain file_type (ioctl file ((range 0x5450 0x5451))))
(allowx domain file_type (ioctl dir ((range 0x5450 0x5451))))
(allowx domain file_type (ioctl lnk_file ((range 0x5450 0x5451))))
(allowx domain file_type (ioctl blk_file ((range 0x5450 0x5451))))
(allowx domain file_type (ioctl sock_file ((range 0x5450 0x5451))))
(allowx domain file_type (ioctl fifo_file ((range 0x5450 0x5451))))
;;* lme

;;* lmx 319 system/sepolicy/private/domain.te

(allowx domain tun_device (ioctl chr_file ((range 0x5450 0x5451))))
;;* lme

;;* lmx 325 system/sepolicy/private/domain.te

(allowx domain fs_type (ioctl file (0x5401)))
(allowx domain file_type (ioctl file (0x5401)))
;;* lme

;;* lmx 326 system/sepolicy/private/domain.te

(allowx domain domain (ioctl fifo_file (0x5401)))
;;* lme

;;* lmx 330 system/sepolicy/private/domain.te

(allowx domain dev_type (ioctl blk_file (0x1268 0x1272)))
;;* lme

;;* lmx 343 system/sepolicy/private/domain.te

(allowx domain file_type (ioctl file ((range 0xf501 0xf502) 0xf505 (range 0xf50c 0xf50e))))
(allowx domain sdcard_type (ioctl file ((range 0xf501 0xf502) 0xf505 (range 0xf50c 0xf50e))))
;;* lme

;;* lmx 347 system/sepolicy/private/domain.te

(allow base_typeattr_417 hwservice_manager_type (hwservice_manager (add find)))
;;* lme

;;* lmx 350 system/sepolicy/private/domain.te

(allow base_typeattr_417 vndservice_manager_type (service_manager (add find)))
;;* lme

;;* lmx 362 system/sepolicy/private/domain.te

(allow base_typeattr_418 binder_stats_consumer_service (service_manager (find)))
;;* lme

;;* lmx 372 system/sepolicy/private/domain.te

(allow base_typeattr_418 system_server (binder (call)))
;;* lme

;;* lmx 380 system/sepolicy/private/domain.te

(allow domain apex_mnt_dir (dir (getattr search)))
;;* lme

;;* lmx 381 system/sepolicy/private/domain.te

(allow domain apex_mnt_dir (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 384 system/sepolicy/private/domain.te

(allow domain sysfs_pgsize_migration (dir (search)))
;;* lme

;;* lmx 385 system/sepolicy/private/domain.te

(allow domain sysfs_pgsize_migration (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 389 system/sepolicy/private/domain.te

(allow domain bionic_linker_16kb_app_compat_prop (file (read getattr map open)))
;;* lme

;;* lmx 393 system/sepolicy/private/domain.te

(allow domain device_config_media_native_prop (file (read getattr map open)))
;;* lme

;;* lmx 399 system/sepolicy/private/domain.te

(allow base_typeattr_329 crash_dump_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 399 system/sepolicy/private/domain.te

(allow base_typeattr_329 crash_dump (process (transition)))
;;* lme

;;* lmx 399 system/sepolicy/private/domain.te

(allow crash_dump crash_dump_exec (file (read getattr map execute open entrypoint)))
;;* lme

;;* lmx 399 system/sepolicy/private/domain.te

(allow crash_dump base_typeattr_329 (process (sigchld)))
;;* lme

(dontaudit base_typeattr_329 crash_dump (process (noatsecure)))
;;* lmx 399 system/sepolicy/private/domain.te

(allow base_typeattr_329 crash_dump (process (siginh rlimitinh)))
;;* lme

(typetransition base_typeattr_329 crash_dump_exec process crash_dump)
;;* lmx 400 system/sepolicy/private/domain.te

(allow domain crash_dump (process (sigchld)))
;;* lme

;;* lmx 406 system/sepolicy/private/domain.te

(allow domain heapprofd_prop (file (read getattr map open)))
;;* lme

;;* lmx 429 system/sepolicy/private/domain.te

(allow heapprofd base_typeattr_419 (process (signal)))
;;* lme

;;* lmx 429 system/sepolicy/private/domain.te

(allow base_typeattr_419 heapprofd_socket (sock_file (write)))
;;* lme

;;* lmx 429 system/sepolicy/private/domain.te

(allow base_typeattr_419 heapprofd (unix_stream_socket (connectto)))
;;* lme

;;* lmx 429 system/sepolicy/private/domain.te

(allow heapprofd base_typeattr_419 (fd (use)))
;;* lme

;;* lmx 429 system/sepolicy/private/domain.te

(allow base_typeattr_419 heapprofd_tmpfs (file (read write getattr map)))
;;* lme

;;* lmx 429 system/sepolicy/private/domain.te

(allow base_typeattr_419 heapprofd (memfd_file (read write getattr map)))
;;* lme

;;* lmx 429 system/sepolicy/private/domain.te

(allow base_typeattr_419 heapprofd (fd (use)))
;;* lme

;;* lmx 429 system/sepolicy/private/domain.te

(allow heapprofd base_typeattr_419 (file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 429 system/sepolicy/private/domain.te

(allow heapprofd base_typeattr_419 (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 443 system/sepolicy/private/domain.te

(allow traced_perf base_typeattr_420 (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 443 system/sepolicy/private/domain.te

(allow traced_perf base_typeattr_420 (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 443 system/sepolicy/private/domain.te

(allow traced_perf base_typeattr_420 (process (signal)))
;;* lme

;;* lmx 443 system/sepolicy/private/domain.te

(allow base_typeattr_420 traced_perf_socket (sock_file (write)))
;;* lme

;;* lmx 443 system/sepolicy/private/domain.te

(allow base_typeattr_420 traced_perf (unix_stream_socket (connectto)))
;;* lme

;;* lmx 443 system/sepolicy/private/domain.te

(allow traced_perf base_typeattr_420 (fd (use)))
;;* lme

;;* lmx 453 system/sepolicy/private/domain.te

(allow domain sysfs_fs_incfs_features (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 453 system/sepolicy/private/domain.te

(allow domain sysfs_fs_incfs_features (file (ioctl read getattr lock map open watch watch_reads)))
(allow domain sysfs_fs_incfs_features (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 456 system/sepolicy/private/domain.te

(allow domain sysfs_fs_fuse_features (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 456 system/sepolicy/private/domain.te

(allow domain sysfs_fs_fuse_features (file (ioctl read getattr lock map open watch watch_reads)))
(allow domain sysfs_fs_fuse_features (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 459 system/sepolicy/private/domain.te

(allow base_typeattr_421 cgroup (dir (write lock open add_name remove_name search)))
;;* lme

;;* lmx 460 system/sepolicy/private/domain.te

(allow base_typeattr_421 cgroup (file (write lock append map open)))
;;* lme

;;* lmx 462 system/sepolicy/private/domain.te

(allow base_typeattr_421 cgroup_v2 (dir (write lock open add_name remove_name search)))
;;* lme

;;* lmx 463 system/sepolicy/private/domain.te

(allow base_typeattr_421 cgroup_v2 (file (write lock append map open)))
;;* lme

;;* lmx 465 system/sepolicy/private/domain.te

(allow domain cgroup_desc_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 466 system/sepolicy/private/domain.te

(allow domain cgroup_rc_file (dir (search)))
;;* lme

;;* lmx 467 system/sepolicy/private/domain.te

(allow domain cgroup_rc_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 468 system/sepolicy/private/domain.te

(allow domain task_profiles_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 469 system/sepolicy/private/domain.te

(allow domain vendor_cgroup_desc_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 470 system/sepolicy/private/domain.te

(allow domain vendor_task_profiles_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 471 system/sepolicy/private/domain.te

(allow domain libprocessgroup_metadata_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 472 system/sepolicy/private/domain.te

(allow domain libprocessgroup_metadata_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 476 system/sepolicy/private/domain.te

(allow domain use_memfd_prop (file (read getattr map open)))
;;* lme

;;* lmx 479 system/sepolicy/private/domain.te

(allow domain module_sdkextensions_prop (file (read getattr map open)))
;;* lme

;;* lmx 482 system/sepolicy/private/domain.te

(allow domain bq_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 485 system/sepolicy/private/domain.te

(allow domain permissive_mte_prop (file (read getattr map open)))
;;* lme

;;* lmx 490 system/sepolicy/private/domain.te

(allow domain device_config_memory_safety_native_boot_prop (file (read getattr map open)))
;;* lme

;;* lmx 491 system/sepolicy/private/domain.te

(allow domain device_config_memory_safety_native_prop (file (read getattr map open)))
;;* lme

;;* lmx 492 system/sepolicy/private/domain.te

(allow domain device_config_runtime_native_boot_prop (file (read getattr map open)))
;;* lme

;;* lmx 493 system/sepolicy/private/domain.te

(allow domain device_config_runtime_native_prop (file (read getattr map open)))
;;* lme

;;* lmx 503 system/sepolicy/private/domain.te

(allow appdomain core_property_type (file (read getattr map open)))
(allow coredomain core_property_type (file (read getattr map open)))
(allow shell core_property_type (file (read getattr map open)))
;;* lme

;;* lmx 503 system/sepolicy/private/domain.te

(allow appdomain exported3_system_prop (file (read getattr map open)))
(allow coredomain exported3_system_prop (file (read getattr map open)))
(allow shell exported3_system_prop (file (read getattr map open)))
;;* lme

;;* lmx 503 system/sepolicy/private/domain.te

(allow appdomain exported_camera_prop (file (read getattr map open)))
(allow coredomain exported_camera_prop (file (read getattr map open)))
(allow shell exported_camera_prop (file (read getattr map open)))
;;* lme

;;* lmx 503 system/sepolicy/private/domain.te

(allow coredomain userspace_reboot_exported_prop (file (read getattr map open)))
(allow shell userspace_reboot_exported_prop (file (read getattr map open)))
;;* lme

;;* lmx 503 system/sepolicy/private/domain.te

(allow coredomain userspace_reboot_log_prop (file (read getattr map open)))
(allow shell userspace_reboot_log_prop (file (read getattr map open)))
;;* lme

;;* lmx 503 system/sepolicy/private/domain.te

(allow coredomain userspace_reboot_test_prop (file (read getattr map open)))
(allow shell userspace_reboot_test_prop (file (read getattr map open)))
;;* lme

;;* lmx 503 system/sepolicy/private/domain.te

(allow base_typeattr_422 vendor_default_prop (file (read getattr map open)))
;;* lme

;;* lmx 515 system/sepolicy/private/domain.te

(allow domain aaudio_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 516 system/sepolicy/private/domain.te

(allow domain apexd_select_prop (file (read getattr map open)))
;;* lme

;;* lmx 517 system/sepolicy/private/domain.te

(allow domain arm64_memtag_prop (file (read getattr map open)))
;;* lme

;;* lmx 518 system/sepolicy/private/domain.te

(allow domain bluetooth_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 519 system/sepolicy/private/domain.te

(allow domain bootloader_prop (file (read getattr map open)))
;;* lme

;;* lmx 520 system/sepolicy/private/domain.te

(allow domain build_odm_prop (file (read getattr map open)))
;;* lme

;;* lmx 521 system/sepolicy/private/domain.te

(allow domain build_prop (file (read getattr map open)))
;;* lme

;;* lmx 522 system/sepolicy/private/domain.te

(allow domain build_vendor_prop (file (read getattr map open)))
;;* lme

;;* lmx 523 system/sepolicy/private/domain.te

(allow domain debug_prop (file (read getattr map open)))
;;* lme

;;* lmx 524 system/sepolicy/private/domain.te

(allow domain exported_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 525 system/sepolicy/private/domain.te

(allow domain exported_default_prop (file (read getattr map open)))
;;* lme

;;* lmx 526 system/sepolicy/private/domain.te

(allow domain exported_dumpstate_prop (file (read getattr map open)))
;;* lme

;;* lmx 527 system/sepolicy/private/domain.te

(allow domain exported_secure_prop (file (read getattr map open)))
;;* lme

;;* lmx 528 system/sepolicy/private/domain.te

(allow domain exported_system_prop (file (read getattr map open)))
;;* lme

;;* lmx 529 system/sepolicy/private/domain.te

(allow domain fingerprint_prop (file (read getattr map open)))
;;* lme

;;* lmx 530 system/sepolicy/private/domain.te

(allow domain framework_status_prop (file (read getattr map open)))
;;* lme

;;* lmx 531 system/sepolicy/private/domain.te

(allow domain gwp_asan_prop (file (read getattr map open)))
;;* lme

;;* lmx 532 system/sepolicy/private/domain.te

(allow domain hal_instrumentation_prop (file (read getattr map open)))
;;* lme

;;* lmx 533 system/sepolicy/private/domain.te

(allow domain hw_timeout_multiplier_prop (file (read getattr map open)))
;;* lme

;;* lmx 534 system/sepolicy/private/domain.te

(allow domain init_service_status_prop (file (read getattr map open)))
;;* lme

;;* lmx 535 system/sepolicy/private/domain.te

(allow domain libc_debug_prop (file (read getattr map open)))
;;* lme

;;* lmx 536 system/sepolicy/private/domain.te

(allow domain locale_prop (file (read getattr map open)))
;;* lme

;;* lmx 537 system/sepolicy/private/domain.te

(allow domain logd_prop (file (read getattr map open)))
;;* lme

;;* lmx 538 system/sepolicy/private/domain.te

(allow domain mediadrm_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 539 system/sepolicy/private/domain.te

(allow domain property_service_version_prop (file (read getattr map open)))
;;* lme

;;* lmx 540 system/sepolicy/private/domain.te

(allow domain service_sf_present_timestamp_prop (file (read getattr map open)))
;;* lme

;;* lmx 541 system/sepolicy/private/domain.te

(allow domain soc_prop (file (read getattr map open)))
;;* lme

;;* lmx 542 system/sepolicy/private/domain.te

(allow domain socket_hook_prop (file (read getattr map open)))
;;* lme

;;* lmx 543 system/sepolicy/private/domain.te

(allow domain strongbox_prop (file (read getattr map open)))
;;* lme

;;* lmx 544 system/sepolicy/private/domain.te

(allow domain surfaceflinger_prop (file (read getattr map open)))
;;* lme

;;* lmx 545 system/sepolicy/private/domain.te

(allow domain telephony_status_prop (file (read getattr map open)))
;;* lme

;;* lmx 546 system/sepolicy/private/domain.te

(allow domain timezone_prop (file (read getattr map open)))
;;* lme

;;* lmx 547 system/sepolicy/private/domain.te

(allow base_typeattr_423 userdebug_or_eng_prop (file (read getattr map open)))
;;* lme

;;* lmx 548 system/sepolicy/private/domain.te

(allow domain vendor_socket_hook_prop (file (read getattr map open)))
;;* lme

;;* lmx 549 system/sepolicy/private/domain.te

(allow domain vndk_prop (file (read getattr map open)))
;;* lme

;;* lmx 550 system/sepolicy/private/domain.te

(allow domain vold_status_prop (file (read getattr map open)))
;;* lme

;;* lmx 551 system/sepolicy/private/domain.te

(allow domain vts_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 554 system/sepolicy/private/domain.te

(allow domain binder_cache_bluetooth_server_prop (file (read getattr map open)))
;;* lme

;;* lmx 555 system/sepolicy/private/domain.te

(allow domain binder_cache_system_server_prop (file (read getattr map open)))
;;* lme

;;* lmx 556 system/sepolicy/private/domain.te

(allow domain binder_cache_telephony_server_prop (file (read getattr map open)))
;;* lme

;;* lmx 560 system/sepolicy/private/domain.te

(allow domain kernel (key (search)))
;;* lme

;;* lmx 565 system/sepolicy/private/domain.te

(allow domain linkerconfig_file (dir (search)))
;;* lme

;;* lmx 566 system/sepolicy/private/domain.te

(allow domain linkerconfig_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 569 system/sepolicy/private/domain.te

(allow domain boringssl_self_test_marker (dir (search)))
;;* lme

;;* lmx 573 system/sepolicy/private/domain.te

(allow domain log_file_logger_prop (file (read getattr map open)))
;;* lme

;;* lmx 576 system/sepolicy/private/domain.te

(allow domain prng_seeder_socket (sock_file (write)))
;;* lme

;;* lmx 576 system/sepolicy/private/domain.te

(allow domain prng_seeder (unix_stream_socket (connectto)))
;;* lme

;;* lmx 607 system/sepolicy/private/domain.te

(allow base_typeattr_424 shell_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
(allow base_typeattr_424 toolbox_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lme

;;* lmx 612 system/sepolicy/private/domain.te

(allow domain aconfig_storage_metadata_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 612 system/sepolicy/private/domain.te

(allow domain aconfig_storage_metadata_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow domain aconfig_storage_metadata_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 616 system/sepolicy/private/domain.te

(allow appdomain system_aconfig_storage_file (dir (ioctl read getattr lock open watch watch_reads search)))
(allow coredomain system_aconfig_storage_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 616 system/sepolicy/private/domain.te

(allow appdomain system_aconfig_storage_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow appdomain system_aconfig_storage_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow coredomain system_aconfig_storage_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow coredomain system_aconfig_storage_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 620 system/sepolicy/private/domain.te

(allow domain metadata_file (dir (search)))
;;* lme

;;* lmx 625 system/sepolicy/private/domain.te

(allow domain overlay_remounter (fd (use)))
;;* lme

;;* lmx 633 system/sepolicy/private/domain.te

(neverallowx base_typeattr_248 base_typeattr_248 (ioctl file (0x0)))
(neverallowx base_typeattr_248 base_typeattr_248 (ioctl dir (0x0)))
(neverallowx base_typeattr_248 base_typeattr_248 (ioctl lnk_file (0x0)))
(neverallowx base_typeattr_248 base_typeattr_248 (ioctl blk_file (0x0)))
(neverallowx base_typeattr_248 base_typeattr_248 (ioctl sock_file (0x0)))
(neverallowx base_typeattr_248 base_typeattr_248 (ioctl fifo_file (0x0)))
(neverallowx base_typeattr_248 base_typeattr_248 (ioctl socket (0x0)))
(neverallowx base_typeattr_248 base_typeattr_248 (ioctl tcp_socket (0x0)))
(neverallowx base_typeattr_248 base_typeattr_248 (ioctl udp_socket (0x0)))
(neverallowx base_typeattr_248 base_typeattr_248 (ioctl rawip_socket (0x0)))
(neverallowx base_typeattr_248 base_typeattr_248 (ioctl netlink_socket (0x0)))
(neverallowx base_typeattr_248 base_typeattr_248 (ioctl packet_socket (0x0)))
(neverallowx base_typeattr_248 base_typeattr_248 (ioctl key_socket (0x0)))
(neverallowx base_typeattr_248 base_typeattr_248 (ioctl unix_stream_socket (0x0)))
(neverallowx base_typeattr_248 base_typeattr_248 (ioctl unix_dgram_socket (0x0)))
(neverallowx base_typeattr_248 base_typeattr_248 (ioctl netlink_route_socket (0x0)))
(neverallowx base_typeattr_248 base_typeattr_248 (ioctl netlink_tcpdiag_socket (0x0)))
(neverallowx base_typeattr_248 base_typeattr_248 (ioctl netlink_nflog_socket (0x0)))
(neverallowx base_typeattr_248 base_typeattr_248 (ioctl netlink_xfrm_socket (0x0)))
(neverallowx base_typeattr_248 base_typeattr_248 (ioctl netlink_selinux_socket (0x0)))
(neverallowx base_typeattr_248 base_typeattr_248 (ioctl netlink_audit_socket (0x0)))
(neverallowx base_typeattr_248 base_typeattr_248 (ioctl netlink_dnrt_socket (0x0)))
(neverallowx base_typeattr_248 base_typeattr_248 (ioctl netlink_kobject_uevent_socket (0x0)))
(neverallowx base_typeattr_248 base_typeattr_248 (ioctl appletalk_socket (0x0)))
(neverallowx base_typeattr_248 base_typeattr_248 (ioctl tun_socket (0x0)))
(neverallowx base_typeattr_248 base_typeattr_248 (ioctl netlink_iscsi_socket (0x0)))
(neverallowx base_typeattr_248 base_typeattr_248 (ioctl netlink_fib_lookup_socket (0x0)))
(neverallowx base_typeattr_248 base_typeattr_248 (ioctl netlink_connector_socket (0x0)))
(neverallowx base_typeattr_248 base_typeattr_248 (ioctl netlink_netfilter_socket (0x0)))
(neverallowx base_typeattr_248 base_typeattr_248 (ioctl netlink_generic_socket (0x0)))
(neverallowx base_typeattr_248 base_typeattr_248 (ioctl netlink_scsitransport_socket (0x0)))
(neverallowx base_typeattr_248 base_typeattr_248 (ioctl netlink_rdma_socket (0x0)))
(neverallowx base_typeattr_248 base_typeattr_248 (ioctl netlink_crypto_socket (0x0)))
(neverallowx base_typeattr_248 base_typeattr_248 (ioctl sctp_socket (0x0)))
(neverallowx base_typeattr_248 base_typeattr_248 (ioctl icmp_socket (0x0)))
(neverallowx base_typeattr_248 base_typeattr_248 (ioctl ax25_socket (0x0)))
(neverallowx base_typeattr_248 base_typeattr_248 (ioctl ipx_socket (0x0)))
(neverallowx base_typeattr_248 base_typeattr_248 (ioctl netrom_socket (0x0)))
(neverallowx base_typeattr_248 base_typeattr_248 (ioctl atmpvc_socket (0x0)))
(neverallowx base_typeattr_248 base_typeattr_248 (ioctl x25_socket (0x0)))
(neverallowx base_typeattr_248 base_typeattr_248 (ioctl rose_socket (0x0)))
(neverallowx base_typeattr_248 base_typeattr_248 (ioctl decnet_socket (0x0)))
(neverallowx base_typeattr_248 base_typeattr_248 (ioctl atmsvc_socket (0x0)))
(neverallowx base_typeattr_248 base_typeattr_248 (ioctl rds_socket (0x0)))
(neverallowx base_typeattr_248 base_typeattr_248 (ioctl irda_socket (0x0)))
(neverallowx base_typeattr_248 base_typeattr_248 (ioctl pppox_socket (0x0)))
(neverallowx base_typeattr_248 base_typeattr_248 (ioctl llc_socket (0x0)))
(neverallowx base_typeattr_248 base_typeattr_248 (ioctl can_socket (0x0)))
(neverallowx base_typeattr_248 base_typeattr_248 (ioctl tipc_socket (0x0)))
(neverallowx base_typeattr_248 base_typeattr_248 (ioctl bluetooth_socket (0x0)))
(neverallowx base_typeattr_248 base_typeattr_248 (ioctl iucv_socket (0x0)))
(neverallowx base_typeattr_248 base_typeattr_248 (ioctl rxrpc_socket (0x0)))
(neverallowx base_typeattr_248 base_typeattr_248 (ioctl isdn_socket (0x0)))
(neverallowx base_typeattr_248 base_typeattr_248 (ioctl phonet_socket (0x0)))
(neverallowx base_typeattr_248 base_typeattr_248 (ioctl ieee802154_socket (0x0)))
(neverallowx base_typeattr_248 base_typeattr_248 (ioctl caif_socket (0x0)))
(neverallowx base_typeattr_248 base_typeattr_248 (ioctl alg_socket (0x0)))
(neverallowx base_typeattr_248 base_typeattr_248 (ioctl nfc_socket (0x0)))
(neverallowx base_typeattr_248 base_typeattr_248 (ioctl vsock_socket (0x0)))
(neverallowx base_typeattr_248 base_typeattr_248 (ioctl kcm_socket (0x0)))
(neverallowx base_typeattr_248 base_typeattr_248 (ioctl qipcrtr_socket (0x0)))
(neverallowx base_typeattr_248 base_typeattr_248 (ioctl smc_socket (0x0)))
(neverallowx base_typeattr_248 base_typeattr_248 (ioctl xdp_socket (0x0)))
;;* lme

;;* lmx 637 system/sepolicy/private/domain.te

(neverallowx domain domain (ioctl socket (0x8905)))
(neverallowx domain domain (ioctl tcp_socket (0x8905)))
(neverallowx domain domain (ioctl udp_socket (0x8905)))
(neverallowx domain domain (ioctl rawip_socket (0x8905)))
(neverallowx domain domain (ioctl netlink_socket (0x8905)))
(neverallowx domain domain (ioctl packet_socket (0x8905)))
(neverallowx domain domain (ioctl key_socket (0x8905)))
(neverallowx domain domain (ioctl unix_stream_socket (0x8905)))
(neverallowx domain domain (ioctl unix_dgram_socket (0x8905)))
(neverallowx domain domain (ioctl netlink_route_socket (0x8905)))
(neverallowx domain domain (ioctl netlink_tcpdiag_socket (0x8905)))
(neverallowx domain domain (ioctl netlink_nflog_socket (0x8905)))
(neverallowx domain domain (ioctl netlink_xfrm_socket (0x8905)))
(neverallowx domain domain (ioctl netlink_selinux_socket (0x8905)))
(neverallowx domain domain (ioctl netlink_audit_socket (0x8905)))
(neverallowx domain domain (ioctl netlink_dnrt_socket (0x8905)))
(neverallowx domain domain (ioctl netlink_kobject_uevent_socket (0x8905)))
(neverallowx domain domain (ioctl appletalk_socket (0x8905)))
(neverallowx domain domain (ioctl tun_socket (0x8905)))
(neverallowx domain domain (ioctl netlink_iscsi_socket (0x8905)))
(neverallowx domain domain (ioctl netlink_fib_lookup_socket (0x8905)))
(neverallowx domain domain (ioctl netlink_connector_socket (0x8905)))
(neverallowx domain domain (ioctl netlink_netfilter_socket (0x8905)))
(neverallowx domain domain (ioctl netlink_generic_socket (0x8905)))
(neverallowx domain domain (ioctl netlink_scsitransport_socket (0x8905)))
(neverallowx domain domain (ioctl netlink_rdma_socket (0x8905)))
(neverallowx domain domain (ioctl netlink_crypto_socket (0x8905)))
(neverallowx domain domain (ioctl sctp_socket (0x8905)))
(neverallowx domain domain (ioctl icmp_socket (0x8905)))
(neverallowx domain domain (ioctl ax25_socket (0x8905)))
(neverallowx domain domain (ioctl ipx_socket (0x8905)))
(neverallowx domain domain (ioctl netrom_socket (0x8905)))
(neverallowx domain domain (ioctl atmpvc_socket (0x8905)))
(neverallowx domain domain (ioctl x25_socket (0x8905)))
(neverallowx domain domain (ioctl rose_socket (0x8905)))
(neverallowx domain domain (ioctl decnet_socket (0x8905)))
(neverallowx domain domain (ioctl atmsvc_socket (0x8905)))
(neverallowx domain domain (ioctl rds_socket (0x8905)))
(neverallowx domain domain (ioctl irda_socket (0x8905)))
(neverallowx domain domain (ioctl pppox_socket (0x8905)))
(neverallowx domain domain (ioctl llc_socket (0x8905)))
(neverallowx domain domain (ioctl can_socket (0x8905)))
(neverallowx domain domain (ioctl tipc_socket (0x8905)))
(neverallowx domain domain (ioctl bluetooth_socket (0x8905)))
(neverallowx domain domain (ioctl iucv_socket (0x8905)))
(neverallowx domain domain (ioctl rxrpc_socket (0x8905)))
(neverallowx domain domain (ioctl isdn_socket (0x8905)))
(neverallowx domain domain (ioctl phonet_socket (0x8905)))
(neverallowx domain domain (ioctl ieee802154_socket (0x8905)))
(neverallowx domain domain (ioctl caif_socket (0x8905)))
(neverallowx domain domain (ioctl alg_socket (0x8905)))
(neverallowx domain domain (ioctl nfc_socket (0x8905)))
(neverallowx domain domain (ioctl vsock_socket (0x8905)))
(neverallowx domain domain (ioctl kcm_socket (0x8905)))
(neverallowx domain domain (ioctl qipcrtr_socket (0x8905)))
(neverallowx domain domain (ioctl smc_socket (0x8905)))
(neverallowx domain domain (ioctl xdp_socket (0x8905)))
;;* lme

;;* lmx 642 system/sepolicy/private/domain.te

(neverallowx base_typeattr_248 devpts (ioctl chr_file (0x5412)))
;;* lme

;;* lmx 645 system/sepolicy/private/domain.te

(neverallow base_typeattr_425 unlabeled (file (create)))
(neverallow base_typeattr_425 unlabeled (dir (create)))
(neverallow base_typeattr_425 unlabeled (lnk_file (create)))
(neverallow base_typeattr_425 unlabeled (chr_file (create)))
(neverallow base_typeattr_425 unlabeled (blk_file (create)))
(neverallow base_typeattr_425 unlabeled (sock_file (create)))
(neverallow base_typeattr_425 unlabeled (fifo_file (create)))
;;* lme

;;* lmx 656 system/sepolicy/private/domain.te

(neverallow base_typeattr_426 self (capability (mknod)))
(neverallow base_typeattr_426 self (cap_userns (mknod)))
;;* lme

;;* lmx 659 system/sepolicy/private/domain.te

(neverallow base_typeattr_248 self (memprotect (mmap_zero)))
;;* lme

;;* lmx 662 system/sepolicy/private/domain.te

(neverallow base_typeattr_248 self (capability2 (mac_override)))
(neverallow base_typeattr_248 self (cap2_userns (mac_override)))
;;* lme

;;* lmx 668 system/sepolicy/private/domain.te

(neverallow base_typeattr_427 self (capability2 (mac_admin)))
(neverallow base_typeattr_427 self (cap2_userns (mac_admin)))
;;* lme

;;* lmx 672 system/sepolicy/private/domain.te

(neverallow base_typeattr_248 kernel (security (load_policy)))
;;* lme

;;* lmx 678 system/sepolicy/private/domain.te

(neverallow base_typeattr_248 kernel (security (setenforce)))
;;* lme

;;* lmx 679 system/sepolicy/private/domain.te

(neverallow base_typeattr_428 kernel (security (setcheckreqprot)))
;;* lme

;;* lmx 682 system/sepolicy/private/domain.te

(neverallow base_typeattr_248 kernel (security (setbool)))
;;* lme

;;* lmx 687 system/sepolicy/private/domain.te

(neverallow base_typeattr_247 kernel (security (setsecparam)))
;;* lme

;;* lmx 695 system/sepolicy/private/domain.te

(neverallow base_typeattr_429 hw_random_device (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
;;* lme

;;* lmx 701 system/sepolicy/private/domain.te

(neverallow base_typeattr_430 keychord_device (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
;;* lme

;;* lmx 704 system/sepolicy/private/domain.te

(neverallow base_typeattr_248 base_typeattr_431 (file (entrypoint)))
;;* lme

(dontaudit domain postinstall_mnt_dir (dir (audit_access)))
(dontaudit domain statsd_atoms_list_file (dir (audit_access)))
;;* lmx 720 system/sepolicy/private/domain.te

(neverallow base_typeattr_430 port_device (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
;;* lme

;;* lmx 721 system/sepolicy/private/domain.te

(neverallow base_typeattr_248 port_device (chr_file (ioctl read write lock relabelfrom append map link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
;;* lme

;;* lmx 724 system/sepolicy/private/domain.te

(neverallow base_typeattr_247 usermodehelper (file (write append)))
;;* lme

;;* lmx 725 system/sepolicy/private/domain.te

(neverallow base_typeattr_432 sysfs_usermodehelper (file (write append)))
;;* lme

;;* lmx 726 system/sepolicy/private/domain.te

(neverallow base_typeattr_368 proc_security (file (read write append open)))
;;* lme

;;* lmx 730 system/sepolicy/private/domain.te

(neverallow base_typeattr_248 init (binder (impersonate call set_context_mgr transfer)))
;;* lme

;;* lmx 731 system/sepolicy/private/domain.te

(neverallow base_typeattr_248 vendor_init (binder (impersonate call set_context_mgr transfer)))
;;* lme

;;* lmx 740 system/sepolicy/private/domain.te

(neverallow base_typeattr_433 binderfs_logs (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow base_typeattr_433 binderfs_logs_proc (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 741 system/sepolicy/private/domain.te

(neverallow base_typeattr_434 binderfs_logs_state_hashed (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 742 system/sepolicy/private/domain.te

(neverallow base_typeattr_435 binderfs_logs_stats (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 749 system/sepolicy/private/domain.te

(neverallow base_typeattr_435 binderfs_logs_transactions (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 753 system/sepolicy/private/domain.te

(neverallow base_typeattr_435 binderfs_logs_transaction_history (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 757 system/sepolicy/private/domain.te

(neverallow base_typeattr_436 block_device (blk_file (read write open)))
;;* lme

;;* lmx 762 system/sepolicy/private/domain.te

(neverallow base_typeattr_390 base_typeattr_248 (chr_file (rename)))
(neverallow base_typeattr_390 base_typeattr_248 (blk_file (rename)))
;;* lme

;;* lmx 766 system/sepolicy/private/domain.te

(neverallow domain device (chr_file (read write open)))
;;* lme

;;* lmx 769 system/sepolicy/private/domain.te

(neverallow domain cache_file (file (execute)))
(neverallow domain cache_backup_file (file (execute)))
(neverallow domain cache_private_backup_file (file (execute)))
(neverallow domain cache_recovery_file (file (execute)))
;;* lme

;;* lmx 772 system/sepolicy/private/domain.te

(neverallow base_typeattr_428 nativetest_data_file (file (write create setattr relabelfrom append unlink link rename)))
(neverallow base_typeattr_428 nativetest_data_file (lnk_file (write create setattr relabelfrom append unlink link rename)))
(neverallow base_typeattr_428 nativetest_data_file (chr_file (write create setattr relabelfrom append unlink link rename)))
(neverallow base_typeattr_428 nativetest_data_file (blk_file (write create setattr relabelfrom append unlink link rename)))
(neverallow base_typeattr_428 nativetest_data_file (sock_file (write create setattr relabelfrom append unlink link rename)))
(neverallow base_typeattr_428 nativetest_data_file (fifo_file (write create setattr relabelfrom append unlink link rename)))
;;* lme

;;* lmx 773 system/sepolicy/private/domain.te

(neverallow domain nativetest_data_file (dir (write create setattr relabelfrom link rename add_name remove_name reparent rmdir)))
;;* lme

;;* lmx 774 system/sepolicy/private/domain.te

(neverallow base_typeattr_437 nativetest_data_file (file (execute execute_no_trans)))
;;* lme

;;* lmx 776 system/sepolicy/private/domain.te

(neverallow base_typeattr_438 shell_test_data_file (file (write create setattr relabelfrom append unlink link rename)))
(neverallow base_typeattr_438 shell_test_data_file (lnk_file (write create setattr relabelfrom append unlink link rename)))
(neverallow base_typeattr_438 shell_test_data_file (chr_file (write create setattr relabelfrom append unlink link rename)))
(neverallow base_typeattr_438 shell_test_data_file (blk_file (write create setattr relabelfrom append unlink link rename)))
(neverallow base_typeattr_438 shell_test_data_file (sock_file (write create setattr relabelfrom append unlink link rename)))
(neverallow base_typeattr_438 shell_test_data_file (fifo_file (write create setattr relabelfrom append unlink link rename)))
;;* lme

;;* lmx 777 system/sepolicy/private/domain.te

(neverallow base_typeattr_438 shell_test_data_file (dir (write create setattr relabelfrom link rename add_name remove_name reparent rmdir)))
;;* lme

;;* lmx 778 system/sepolicy/private/domain.te

(neverallow base_typeattr_439 shell_test_data_file (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
;;* lme

;;* lmx 779 system/sepolicy/private/domain.te

(neverallow heapprofd shell_test_data_file (file (write create setattr relabelfrom append unlink link rename execute execute_no_trans)))
;;* lme

;;* lmx 780 system/sepolicy/private/domain.te

(neverallow base_typeattr_438 shell_test_data_file (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 783 system/sepolicy/private/domain.te

(neverallow base_typeattr_247 property_data_file (dir (write create setattr relabelfrom link rename add_name remove_name reparent rmdir)))
;;* lme

;;* lmx 784 system/sepolicy/private/domain.te

(neverallow base_typeattr_247 property_data_file (file (write create setattr relabelfrom append unlink link rename execute execute_no_trans)))
;;* lme

;;* lmx 785 system/sepolicy/private/domain.te

(neverallow base_typeattr_247 property_type (file (write create setattr relabelfrom append unlink link rename execute execute_no_trans)))
;;* lme

;;* lmx 786 system/sepolicy/private/domain.te

(neverallow base_typeattr_247 properties_device (file (write create setattr relabelfrom append unlink link rename execute execute_no_trans)))
;;* lme

;;* lmx 787 system/sepolicy/private/domain.te

(neverallow base_typeattr_247 properties_serial (file (write create setattr relabelfrom append unlink link rename execute execute_no_trans)))
;;* lme

;;* lmx 803 system/sepolicy/private/domain.te

(neverallow base_typeattr_440 exec_type (file (write create setattr relabelfrom append unlink link rename)))
(neverallow base_typeattr_440 exec_type (dir (write create setattr relabelfrom append unlink link rename)))
(neverallow base_typeattr_440 exec_type (lnk_file (write create setattr relabelfrom append unlink link rename)))
(neverallow base_typeattr_440 exec_type (chr_file (write create setattr relabelfrom append unlink link rename)))
(neverallow base_typeattr_440 exec_type (blk_file (write create setattr relabelfrom append unlink link rename)))
(neverallow base_typeattr_440 exec_type (sock_file (write create setattr relabelfrom append unlink link rename)))
(neverallow base_typeattr_440 exec_type (fifo_file (write create setattr relabelfrom append unlink link rename)))
(neverallow base_typeattr_440 system_file_type (file (write create setattr relabelfrom append unlink link rename)))
(neverallow base_typeattr_440 system_file_type (dir (write create setattr relabelfrom append unlink link rename)))
(neverallow base_typeattr_440 system_file_type (lnk_file (write create setattr relabelfrom append unlink link rename)))
(neverallow base_typeattr_440 system_file_type (chr_file (write create setattr relabelfrom append unlink link rename)))
(neverallow base_typeattr_440 system_file_type (blk_file (write create setattr relabelfrom append unlink link rename)))
(neverallow base_typeattr_440 system_file_type (sock_file (write create setattr relabelfrom append unlink link rename)))
(neverallow base_typeattr_440 system_file_type (fifo_file (write create setattr relabelfrom append unlink link rename)))
(neverallow base_typeattr_440 vendor_file_type (file (write create setattr relabelfrom append unlink link rename)))
(neverallow base_typeattr_440 vendor_file_type (dir (write create setattr relabelfrom append unlink link rename)))
(neverallow base_typeattr_440 vendor_file_type (lnk_file (write create setattr relabelfrom append unlink link rename)))
(neverallow base_typeattr_440 vendor_file_type (chr_file (write create setattr relabelfrom append unlink link rename)))
(neverallow base_typeattr_440 vendor_file_type (blk_file (write create setattr relabelfrom append unlink link rename)))
(neverallow base_typeattr_440 vendor_file_type (sock_file (write create setattr relabelfrom append unlink link rename)))
(neverallow base_typeattr_440 vendor_file_type (fifo_file (write create setattr relabelfrom append unlink link rename)))
;;* lme

;;* lmx 805 system/sepolicy/private/domain.te

(neverallow base_typeattr_440 exec_type (file (relabelto)))
(neverallow base_typeattr_440 exec_type (dir (relabelto)))
(neverallow base_typeattr_440 exec_type (lnk_file (relabelto)))
(neverallow base_typeattr_440 exec_type (chr_file (relabelto)))
(neverallow base_typeattr_440 exec_type (blk_file (relabelto)))
(neverallow base_typeattr_440 exec_type (sock_file (relabelto)))
(neverallow base_typeattr_440 exec_type (fifo_file (relabelto)))
(neverallow base_typeattr_440 system_file_type (file (relabelto)))
(neverallow base_typeattr_440 system_file_type (dir (relabelto)))
(neverallow base_typeattr_440 system_file_type (lnk_file (relabelto)))
(neverallow base_typeattr_440 system_file_type (chr_file (relabelto)))
(neverallow base_typeattr_440 system_file_type (blk_file (relabelto)))
(neverallow base_typeattr_440 system_file_type (sock_file (relabelto)))
(neverallow base_typeattr_440 system_file_type (fifo_file (relabelto)))
(neverallow base_typeattr_440 vendor_file_type (file (relabelto)))
(neverallow base_typeattr_440 vendor_file_type (dir (relabelto)))
(neverallow base_typeattr_440 vendor_file_type (lnk_file (relabelto)))
(neverallow base_typeattr_440 vendor_file_type (chr_file (relabelto)))
(neverallow base_typeattr_440 vendor_file_type (blk_file (relabelto)))
(neverallow base_typeattr_440 vendor_file_type (sock_file (relabelto)))
(neverallow base_typeattr_440 vendor_file_type (fifo_file (relabelto)))
;;* lme

;;* lmx 811 system/sepolicy/private/domain.te

(neverallow base_typeattr_390 exec_type (file (mounton)))
(neverallow base_typeattr_390 exec_type (dir (mounton)))
(neverallow base_typeattr_390 exec_type (lnk_file (mounton)))
(neverallow base_typeattr_390 exec_type (chr_file (mounton)))
(neverallow base_typeattr_390 exec_type (blk_file (mounton)))
(neverallow base_typeattr_390 exec_type (sock_file (mounton)))
(neverallow base_typeattr_390 exec_type (fifo_file (mounton)))
;;* lme

;;* lmx 814 system/sepolicy/private/domain.te

(neverallow base_typeattr_441 rootfs (file (write create setattr relabelto append unlink link rename)))
;;* lme

;;* lmx 818 system/sepolicy/private/domain.te

(neverallow base_typeattr_248 base_typeattr_442 (filesystem (relabelto)))
;;* lme

;;* lmx 824 system/sepolicy/private/domain.te

(neverallow base_typeattr_390 contextmount_type (file (create setattr relabelfrom relabelto append link rename)))
(neverallow base_typeattr_390 contextmount_type (dir (create setattr relabelfrom relabelto append link rename)))
(neverallow base_typeattr_390 contextmount_type (lnk_file (create setattr relabelfrom relabelto append link rename)))
(neverallow base_typeattr_390 contextmount_type (chr_file (create setattr relabelfrom relabelto append link rename)))
(neverallow base_typeattr_390 contextmount_type (blk_file (create setattr relabelfrom relabelto append link rename)))
(neverallow base_typeattr_390 contextmount_type (sock_file (create setattr relabelfrom relabelto append link rename)))
(neverallow base_typeattr_390 contextmount_type (fifo_file (create setattr relabelfrom relabelto append link rename)))
;;* lme

;;* lmx 825 system/sepolicy/private/domain.te

(neverallow base_typeattr_390 contextmount_type (file (write unlink)))
(neverallow base_typeattr_390 contextmount_type (dir (write unlink)))
(neverallow base_typeattr_390 contextmount_type (lnk_file (write unlink)))
(neverallow base_typeattr_390 contextmount_type (chr_file (write unlink)))
(neverallow base_typeattr_390 contextmount_type (blk_file (write unlink)))
(neverallow base_typeattr_390 contextmount_type (sock_file (write unlink)))
(neverallow base_typeattr_390 contextmount_type (fifo_file (write unlink)))
;;* lme

;;* lmx 832 system/sepolicy/private/domain.te

(neverallow base_typeattr_248 default_android_service (service_manager (add find list)))
;;* lme

;;* lmx 833 system/sepolicy/private/domain.te

(neverallow base_typeattr_248 default_android_vndservice (service_manager (add find list)))
;;* lme

;;* lmx 834 system/sepolicy/private/domain.te

(neverallow base_typeattr_248 default_android_hwservice (hwservice_manager (add find list)))
;;* lme

;;* lmx 843 system/sepolicy/private/domain.te

(neverallow base_typeattr_248 hidl_base_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 847 system/sepolicy/private/domain.te

(neverallow base_typeattr_368 mmc_prop (property_service (set)))
;;* lme

;;* lmx 848 system/sepolicy/private/domain.te

(neverallow base_typeattr_368 vndk_prop (property_service (set)))
;;* lme

;;* lmx 850 system/sepolicy/private/domain.te

(neverallow base_typeattr_247 mmc_prop (property_service (set)))
;;* lme

;;* lmx 850 system/sepolicy/private/domain.te

(neverallow base_typeattr_368 exported_default_prop (property_service (set)))
;;* lme

;;* lmx 850 system/sepolicy/private/domain.te

(neverallow base_typeattr_247 exported_secure_prop (property_service (set)))
;;* lme

;;* lmx 850 system/sepolicy/private/domain.te

(neverallow base_typeattr_368 vendor_default_prop (property_service (set)))
;;* lme

;;* lmx 850 system/sepolicy/private/domain.te

(neverallow base_typeattr_368 storage_config_prop (property_service (set)))
;;* lme

;;* lmx 850 system/sepolicy/private/domain.te

(neverallow base_typeattr_368 hw_timeout_multiplier_prop (property_service (set)))
;;* lme

;;* lmx 859 system/sepolicy/private/domain.te

(neverallow base_typeattr_443 exported_pm_prop (property_service (set)))
;;* lme

;;* lmx 859 system/sepolicy/private/domain.te

(neverallow base_typeattr_444 exported_pm_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 865 system/sepolicy/private/domain.te

(neverallow base_typeattr_434 future_pm_prop (property_service (set)))
;;* lme

;;* lmx 866 system/sepolicy/private/domain.te

(neverallow base_typeattr_434 future_pm_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

(dontaudit domain future_pm_prop (file (read)))
;;* lmx 872 system/sepolicy/private/domain.te

(neverallow base_typeattr_247 aac_drc_prop (property_service (set)))
;;* lme

;;* lmx 873 system/sepolicy/private/domain.te

(neverallow base_typeattr_247 build_prop (property_service (set)))
;;* lme

;;* lmx 874 system/sepolicy/private/domain.te

(neverallow base_typeattr_247 userdebug_or_eng_prop (property_service (set)))
;;* lme

;;* lmx 896 system/sepolicy/private/domain.te

(neverallow base_typeattr_445 serialno_prop (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 904 system/sepolicy/private/domain.te

(neverallow base_typeattr_446 frp_block_device (blk_file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 918 system/sepolicy/private/domain.te

(neverallow base_typeattr_447 metadata_block_device (blk_file (ioctl read write lock append link rename open)))
;;* lme

;;* lmx 929 system/sepolicy/private/domain.te

(neverallow base_typeattr_448 system_block_device (blk_file (write append)))
;;* lme

;;* lmx 932 system/sepolicy/private/domain.te

(neverallow base_typeattr_449 base_typeattr_248 (binder (set_context_mgr)))
;;* lme

;;* lmx 934 system/sepolicy/private/domain.te

(neverallow servicemanager hwbinder_device (chr_file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 935 system/sepolicy/private/domain.te

(neverallow servicemanager vndbinder_device (chr_file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 936 system/sepolicy/private/domain.te

(neverallow hwservicemanager binder_device (chr_file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 937 system/sepolicy/private/domain.te

(neverallow hwservicemanager vndbinder_device (chr_file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 938 system/sepolicy/private/domain.te

(neverallow vndservicemanager binder_device (chr_file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 939 system/sepolicy/private/domain.te

(neverallow vndservicemanager hwbinder_device (chr_file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 941 system/sepolicy/private/domain.te

(neverallow base_typeattr_450 base_typeattr_451 (service_manager (find)))
;;* lme

;;* lmx 980 system/sepolicy/private/domain.te

(neverallow base_typeattr_452 vndbinder_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 989 system/sepolicy/private/domain.te

(neverallow ueventd vndbinder_device (chr_file (ioctl read write append)))
;;* lme

;;* lmx 992 system/sepolicy/private/domain.te

(neverallow base_typeattr_453 vndservice_manager_type (service_manager (add find list)))
;;* lme

;;* lmx 999 system/sepolicy/private/domain.te

(neverallow base_typeattr_453 vndservicemanager (binder (impersonate call set_context_mgr transfer)))
;;* lme

;;* lmx 1016 system/sepolicy/private/domain.te

(neverallow base_typeattr_454 base_typeattr_455 (socket (connect sendto)))
(neverallow base_typeattr_454 base_typeattr_455 (tcp_socket (connect sendto)))
(neverallow base_typeattr_454 base_typeattr_455 (udp_socket (connect sendto)))
(neverallow base_typeattr_454 base_typeattr_455 (rawip_socket (connect sendto)))
(neverallow base_typeattr_454 base_typeattr_455 (netlink_socket (connect sendto)))
(neverallow base_typeattr_454 base_typeattr_455 (packet_socket (connect sendto)))
(neverallow base_typeattr_454 base_typeattr_455 (key_socket (connect sendto)))
(neverallow base_typeattr_454 base_typeattr_455 (unix_stream_socket (connect sendto)))
(neverallow base_typeattr_454 base_typeattr_455 (unix_dgram_socket (connect sendto)))
(neverallow base_typeattr_454 base_typeattr_455 (netlink_route_socket (connect sendto)))
(neverallow base_typeattr_454 base_typeattr_455 (netlink_tcpdiag_socket (connect sendto)))
(neverallow base_typeattr_454 base_typeattr_455 (netlink_nflog_socket (connect sendto)))
(neverallow base_typeattr_454 base_typeattr_455 (netlink_xfrm_socket (connect sendto)))
(neverallow base_typeattr_454 base_typeattr_455 (netlink_selinux_socket (connect sendto)))
(neverallow base_typeattr_454 base_typeattr_455 (netlink_audit_socket (connect sendto)))
(neverallow base_typeattr_454 base_typeattr_455 (netlink_dnrt_socket (connect sendto)))
(neverallow base_typeattr_454 base_typeattr_455 (netlink_kobject_uevent_socket (connect sendto)))
(neverallow base_typeattr_454 base_typeattr_455 (appletalk_socket (connect sendto)))
(neverallow base_typeattr_454 base_typeattr_455 (tun_socket (connect sendto)))
(neverallow base_typeattr_454 base_typeattr_455 (netlink_iscsi_socket (connect sendto)))
(neverallow base_typeattr_454 base_typeattr_455 (netlink_fib_lookup_socket (connect sendto)))
(neverallow base_typeattr_454 base_typeattr_455 (netlink_connector_socket (connect sendto)))
(neverallow base_typeattr_454 base_typeattr_455 (netlink_netfilter_socket (connect sendto)))
(neverallow base_typeattr_454 base_typeattr_455 (netlink_generic_socket (connect sendto)))
(neverallow base_typeattr_454 base_typeattr_455 (netlink_scsitransport_socket (connect sendto)))
(neverallow base_typeattr_454 base_typeattr_455 (netlink_rdma_socket (connect sendto)))
(neverallow base_typeattr_454 base_typeattr_455 (netlink_crypto_socket (connect sendto)))
(neverallow base_typeattr_454 base_typeattr_455 (sctp_socket (connect sendto)))
(neverallow base_typeattr_454 base_typeattr_455 (icmp_socket (connect sendto)))
(neverallow base_typeattr_454 base_typeattr_455 (ax25_socket (connect sendto)))
(neverallow base_typeattr_454 base_typeattr_455 (ipx_socket (connect sendto)))
(neverallow base_typeattr_454 base_typeattr_455 (netrom_socket (connect sendto)))
(neverallow base_typeattr_454 base_typeattr_455 (atmpvc_socket (connect sendto)))
(neverallow base_typeattr_454 base_typeattr_455 (x25_socket (connect sendto)))
(neverallow base_typeattr_454 base_typeattr_455 (rose_socket (connect sendto)))
(neverallow base_typeattr_454 base_typeattr_455 (decnet_socket (connect sendto)))
(neverallow base_typeattr_454 base_typeattr_455 (atmsvc_socket (connect sendto)))
(neverallow base_typeattr_454 base_typeattr_455 (rds_socket (connect sendto)))
(neverallow base_typeattr_454 base_typeattr_455 (irda_socket (connect sendto)))
(neverallow base_typeattr_454 base_typeattr_455 (pppox_socket (connect sendto)))
(neverallow base_typeattr_454 base_typeattr_455 (llc_socket (connect sendto)))
(neverallow base_typeattr_454 base_typeattr_455 (can_socket (connect sendto)))
(neverallow base_typeattr_454 base_typeattr_455 (tipc_socket (connect sendto)))
(neverallow base_typeattr_454 base_typeattr_455 (bluetooth_socket (connect sendto)))
(neverallow base_typeattr_454 base_typeattr_455 (iucv_socket (connect sendto)))
(neverallow base_typeattr_454 base_typeattr_455 (rxrpc_socket (connect sendto)))
(neverallow base_typeattr_454 base_typeattr_455 (isdn_socket (connect sendto)))
(neverallow base_typeattr_454 base_typeattr_455 (phonet_socket (connect sendto)))
(neverallow base_typeattr_454 base_typeattr_455 (ieee802154_socket (connect sendto)))
(neverallow base_typeattr_454 base_typeattr_455 (caif_socket (connect sendto)))
(neverallow base_typeattr_454 base_typeattr_455 (alg_socket (connect sendto)))
(neverallow base_typeattr_454 base_typeattr_455 (nfc_socket (connect sendto)))
(neverallow base_typeattr_454 base_typeattr_455 (vsock_socket (connect sendto)))
(neverallow base_typeattr_454 base_typeattr_455 (kcm_socket (connect sendto)))
(neverallow base_typeattr_454 base_typeattr_455 (qipcrtr_socket (connect sendto)))
(neverallow base_typeattr_454 base_typeattr_455 (smc_socket (connect sendto)))
(neverallow base_typeattr_454 base_typeattr_455 (xdp_socket (connect sendto)))
;;* lme

;;* lmx 1016 system/sepolicy/private/domain.te

(neverallow base_typeattr_454 base_typeattr_455 (unix_stream_socket (connectto)))
;;* lme

;;* lmx 1029 system/sepolicy/private/domain.te

(neverallow base_typeattr_456 core_data_file_type (sock_file (create setattr lock relabelfrom relabelto map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow base_typeattr_456 coredomain_socket (sock_file (create setattr lock relabelfrom relabelto map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow base_typeattr_456 unlabeled (sock_file (create setattr lock relabelfrom relabelto map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 1043 system/sepolicy/private/domain.te

(neverallow base_typeattr_450 base_typeattr_457 (sock_file (create setattr lock relabelfrom relabelto map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 1059 system/sepolicy/private/domain.te

(neverallow base_typeattr_458 base_typeattr_459 (sock_file (create setattr lock relabelfrom relabelto map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 1083 system/sepolicy/private/domain.te

(neverallow base_typeattr_460 base_typeattr_461 (file (create setattr lock relabelfrom relabelto unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow base_typeattr_460 base_typeattr_461 (lnk_file (create setattr lock relabelfrom relabelto unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow base_typeattr_460 base_typeattr_461 (chr_file (create setattr lock relabelfrom relabelto unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow base_typeattr_460 base_typeattr_461 (blk_file (create setattr lock relabelfrom relabelto unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow base_typeattr_460 base_typeattr_461 (sock_file (create setattr lock relabelfrom relabelto unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow base_typeattr_460 base_typeattr_461 (fifo_file (create setattr lock relabelfrom relabelto unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 1083 system/sepolicy/private/domain.te

(neverallow crosvm_domain base_typeattr_462 (file (create setattr lock relabelfrom relabelto unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow crosvm_domain base_typeattr_462 (lnk_file (create setattr lock relabelfrom relabelto unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow crosvm_domain base_typeattr_462 (chr_file (create setattr lock relabelfrom relabelto unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow crosvm_domain base_typeattr_462 (blk_file (create setattr lock relabelfrom relabelto unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow crosvm_domain base_typeattr_462 (sock_file (create setattr lock relabelfrom relabelto unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow crosvm_domain base_typeattr_462 (fifo_file (create setattr lock relabelfrom relabelto unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow crosvm_vu_fs base_typeattr_462 (file (create setattr lock relabelfrom relabelto unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow crosvm_vu_fs base_typeattr_462 (lnk_file (create setattr lock relabelfrom relabelto unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow crosvm_vu_fs base_typeattr_462 (chr_file (create setattr lock relabelfrom relabelto unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow crosvm_vu_fs base_typeattr_462 (blk_file (create setattr lock relabelfrom relabelto unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow crosvm_vu_fs base_typeattr_462 (sock_file (create setattr lock relabelfrom relabelto unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow crosvm_vu_fs base_typeattr_462 (fifo_file (create setattr lock relabelfrom relabelto unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 1109 system/sepolicy/private/domain.te

(neverallow base_typeattr_463 base_typeattr_464 (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 1126 system/sepolicy/private/domain.te

(neverallow base_typeattr_465 core_data_file_type (file (create setattr lock relabelfrom relabelto unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow base_typeattr_465 core_data_file_type (lnk_file (create setattr lock relabelfrom relabelto unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow base_typeattr_465 core_data_file_type (chr_file (create setattr lock relabelfrom relabelto unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow base_typeattr_465 core_data_file_type (blk_file (create setattr lock relabelfrom relabelto unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow base_typeattr_465 core_data_file_type (sock_file (create setattr lock relabelfrom relabelto unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow base_typeattr_465 core_data_file_type (fifo_file (create setattr lock relabelfrom relabelto unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 1126 system/sepolicy/private/domain.te

(neverallow base_typeattr_466 base_typeattr_467 (file (create setattr lock relabelfrom relabelto unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow base_typeattr_466 base_typeattr_467 (lnk_file (create setattr lock relabelfrom relabelto unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow base_typeattr_466 base_typeattr_467 (chr_file (create setattr lock relabelfrom relabelto unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow base_typeattr_466 base_typeattr_467 (blk_file (create setattr lock relabelfrom relabelto unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow base_typeattr_466 base_typeattr_467 (sock_file (create setattr lock relabelfrom relabelto unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow base_typeattr_466 base_typeattr_467 (fifo_file (create setattr lock relabelfrom relabelto unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 1126 system/sepolicy/private/domain.te

(neverallow vendor_init unencrypted_data_file (file (write create setattr relabelfrom relabelto append unlink link rename execute quotaon mounton audit_access execmod watch_mount watch_sb watch_with_perm execute_no_trans entrypoint)))
;;* lme

;;* lmx 1150 system/sepolicy/private/domain.te

(neverallow base_typeattr_465 base_typeattr_468 (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 1150 system/sepolicy/private/domain.te

(neverallow base_typeattr_466 base_typeattr_469 (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 1150 system/sepolicy/private/domain.te

(neverallow vendor_init unencrypted_data_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent rmdir)))
;;* lme

;;* lmx 1182 system/sepolicy/private/domain.te

(neverallow base_typeattr_470 system_data_file (dir (ioctl read write create setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent rmdir)))
;;* lme

;;* lmx 1194 system/sepolicy/private/domain.te

(neverallow base_typeattr_471 vendor_data_file (dir (ioctl read write create setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent rmdir)))
;;* lme

;;* lmx 1207 system/sepolicy/private/domain.te

(neverallow base_typeattr_472 vendor_data_file (file (create setattr lock relabelfrom relabelto unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow base_typeattr_472 vendor_data_file (lnk_file (create setattr lock relabelfrom relabelto unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow base_typeattr_472 vendor_data_file (chr_file (create setattr lock relabelfrom relabelto unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow base_typeattr_472 vendor_data_file (blk_file (create setattr lock relabelfrom relabelto unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow base_typeattr_472 vendor_data_file (sock_file (create setattr lock relabelfrom relabelto unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow base_typeattr_472 vendor_data_file (fifo_file (create setattr lock relabelfrom relabelto unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 1218 system/sepolicy/private/domain.te

(neverallow base_typeattr_473 vendor_shell_exec (file (execute execute_no_trans)))
;;* lme

;;* lmx 1230 system/sepolicy/private/domain.te

(neverallow base_typeattr_474 base_typeattr_475 (file (execute execute_no_trans entrypoint)))
;;* lme

;;* lmx 1255 system/sepolicy/private/domain.te

(neverallow coredomain base_typeattr_476 (file (entrypoint)))
;;* lme

;;* lmx 1255 system/sepolicy/private/domain.te

(neverallow base_typeattr_241 base_typeattr_477 (file (entrypoint)))
;;* lme

;;* lmx 1272 system/sepolicy/private/domain.te

(neverallow base_typeattr_478 base_typeattr_479 (file (execute)))
;;* lme

;;* lmx 1292 system/sepolicy/private/domain.te

(neverallow base_typeattr_480 base_typeattr_481 (file (execute_no_trans)))
;;* lme

;;* lmx 1304 system/sepolicy/private/domain.te

(neverallow base_typeattr_474 base_typeattr_482 (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
;;* lme

;;* lmx 1344 system/sepolicy/private/domain.te

(neverallow base_typeattr_483 zygote (unix_stream_socket (connectto)))
;;* lme

;;* lmx 1345 system/sepolicy/private/domain.te

(neverallow base_typeattr_427 zygote_socket (sock_file (write)))
;;* lme

;;* lmx 1347 system/sepolicy/private/domain.te

(neverallow base_typeattr_484 webview_zygote (unix_stream_socket (connectto)))
;;* lme

;;* lmx 1348 system/sepolicy/private/domain.te

(neverallow base_typeattr_427 webview_zygote (sock_file (write)))
;;* lme

;;* lmx 1349 system/sepolicy/private/domain.te

(neverallow base_typeattr_427 app_zygote (sock_file (write)))
;;* lme

;;* lmx 1350 system/sepolicy/private/domain.te

(neverallow base_typeattr_427 native_app_zygote (sock_file (write)))
;;* lme

;;* lmx 1352 system/sepolicy/private/domain.te

(neverallow domain tombstoned_crash_socket (unix_stream_socket (connectto)))
;;* lme

;;* lmx 1356 system/sepolicy/private/domain.te

(neverallow base_typeattr_485 tombstoned_intercept_socket (sock_file (write)))
;;* lme

;;* lmx 1357 system/sepolicy/private/domain.te

(neverallow base_typeattr_485 tombstoned_intercept_socket (unix_stream_socket (connectto)))
;;* lme

;;* lmx 1360 system/sepolicy/private/domain.te

(neverallow base_typeattr_486 heapdump_data_file (file (read)))
;;* lme

;;* lmx 1378 system/sepolicy/private/domain.te

(neverallow base_typeattr_248 base_typeattr_248 (sem (create destroy getattr setattr read write associate unix_read unix_write)))
(neverallow base_typeattr_248 base_typeattr_248 (msg (send receive)))
(neverallow base_typeattr_248 base_typeattr_248 (msgq (create destroy getattr setattr read write associate unix_read unix_write enqueue)))
(neverallow base_typeattr_248 base_typeattr_248 (shm (create destroy getattr setattr read write associate unix_read unix_write lock)))
;;* lme

;;* lmx 1385 system/sepolicy/private/domain.te

(neverallow base_typeattr_390 dev_type (lnk_file (mounton)))
(neverallow base_typeattr_390 dev_type (sock_file (mounton)))
(neverallow base_typeattr_390 dev_type (fifo_file (mounton)))
(neverallow base_typeattr_390 fs_type (lnk_file (mounton)))
(neverallow base_typeattr_390 fs_type (sock_file (mounton)))
(neverallow base_typeattr_390 fs_type (fifo_file (mounton)))
(neverallow base_typeattr_390 file_type (lnk_file (mounton)))
(neverallow base_typeattr_390 file_type (sock_file (mounton)))
(neverallow base_typeattr_390 file_type (fifo_file (mounton)))
;;* lme

;;* lmx 1390 system/sepolicy/private/domain.te

(neverallow base_typeattr_487 su_exec (file (execute execute_no_trans)))
;;* lme

;;* lmx 1405 system/sepolicy/private/domain.te

(neverallow base_typeattr_390 base_typeattr_488 (file (execmod)))
;;* lme

;;* lmx 1410 system/sepolicy/private/domain.te

(neverallow base_typeattr_248 self (process (execstack execheap)))
;;* lme

;;* lmx 1419 system/sepolicy/private/domain.te

(neverallow base_typeattr_489 file_type (file (execmod)))
;;* lme

;;* lmx 1427 system/sepolicy/private/domain.te

(neverallow base_typeattr_490 domain (process (transition dyntransition)))
;;* lme

;;* lmx 1446 system/sepolicy/private/domain.te

(neverallow base_typeattr_491 system_data_file (file (write create setattr relabelfrom append unlink link rename)))
;;* lme

;;* lmx 1449 system/sepolicy/private/domain.te

(neverallow installd system_data_file (file (write create setattr relabelto append link rename execute quotaon mounton audit_access execmod watch_mount watch_sb watch_with_perm execute_no_trans entrypoint)))
;;* lme

;;* lmx 1462 system/sepolicy/private/domain.te

(neverallow base_typeattr_492 shell (process (transition dyntransition)))
;;* lme

;;* lmx 1486 system/sepolicy/private/domain.te

(neverallow base_typeattr_493 base_typeattr_494 (process (transition dyntransition)))
;;* lme

;;* lmx 1501 system/sepolicy/private/domain.te

(neverallow base_typeattr_495 isolated_app (process (transition dyntransition)))
;;* lme

;;* lmx 1510 system/sepolicy/private/domain.te

(neverallow base_typeattr_496 app_data_file (lnk_file (read)))
(neverallow base_typeattr_496 privapp_data_file (lnk_file (read)))
;;* lme

;;* lmx 1517 system/sepolicy/private/domain.te

(neverallow base_typeattr_248 base_typeattr_497 (service_manager (list)))
;;* lme

;;* lmx 1522 system/sepolicy/private/domain.te

(neverallow base_typeattr_248 base_typeattr_498 (hwservice_manager (list)))
;;* lme

;;* lmx 1541 system/sepolicy/private/domain.te

(neverallow base_typeattr_248 domain (file (execute execute_no_trans entrypoint)))
;;* lme

;;* lmx 1547 system/sepolicy/private/domain.te

(neverallow base_typeattr_434 debugfs (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow base_typeattr_434 debugfs (lnk_file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 1550 system/sepolicy/private/domain.te

(neverallow domain debugfs_type (file (execute execute_no_trans)))
;;* lme

;;* lmx 1553 system/sepolicy/private/domain.te

(neverallow base_typeattr_499 fusectlfs (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 1563 system/sepolicy/private/domain.te

(neverallow base_typeattr_500 profman_exec (file (execute execute_no_trans)))
;;* lme

;;* lmx 1568 system/sepolicy/private/domain.te

(neverallow base_typeattr_248 base_typeattr_501 (system (module_load)))
;;* lme

;;* lmx 1572 system/sepolicy/private/domain.te

(neverallow base_typeattr_248 self (capability (setfcap)))
(neverallow base_typeattr_248 self (cap_userns (setfcap)))
;;* lme

;;* lmx 1575 system/sepolicy/private/domain.te

(neverallow domain crash_dump (process (noatsecure)))
;;* lme

;;* lmx 1579 system/sepolicy/private/domain.te

(neverallow base_typeattr_502 coredomain_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 1584 system/sepolicy/private/domain.te

(neverallow base_typeattr_248 same_process_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 1595 system/sepolicy/private/domain.te

(neverallow base_typeattr_368 proc_type (dir (write create link rename add_name remove_name reparent rmdir)))
(neverallow base_typeattr_368 sysfs_type (dir (write create link rename add_name remove_name reparent rmdir)))
;;* lme

;;* lmx 1598 system/sepolicy/private/domain.te

(neverallow domain cgroup (file (create)))
;;* lme

;;* lmx 1599 system/sepolicy/private/domain.te

(neverallow domain cgroup_v2 (file (create)))
;;* lme

(dontaudit domain proc_type (dir (write)))
(dontaudit domain sysfs_type (dir (write)))
(dontaudit domain cgroup (file (create)))
(dontaudit domain cgroup_v2 (file (create)))
(dontaudit domain proc_type (dir (add_name)))
(dontaudit domain sysfs_type (dir (add_name)))
(dontaudit domain proc_type (file (create)))
(dontaudit domain sysfs_type (file (create)))
;;* lmx 1622 system/sepolicy/private/domain.te

(neverallow base_typeattr_503 mnt_vendor_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 1625 system/sepolicy/private/domain.te

(neverallow base_typeattr_504 vendor_public_lib_file (file (execute execute_no_trans)))
(neverallow base_typeattr_504 vendor_public_framework_file (file (execute execute_no_trans)))
;;* lme

;;* lmx 1637 system/sepolicy/private/domain.te

(neverallow base_typeattr_241 mnt_product_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 1640 system/sepolicy/private/domain.te

(neverallow base_typeattr_505 sysfs_batteryinfo (file (read open)))
;;* lme

;;* lmx 1663 system/sepolicy/private/domain.te

(neverallow base_typeattr_506 hal_codec2_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 1672 system/sepolicy/private/domain.te

(neverallow base_typeattr_507 ashmem_device (chr_file (open)))
;;* lme

;;* lmx 1678 system/sepolicy/private/domain.te

(neverallow base_typeattr_508 domain (memfd_file (ioctl)))
;;* lme

;;* lmx 1684 system/sepolicy/private/domain.te

(neverallowx base_typeattr_508 domain (ioctl memfd_file ((range 0x7701 0x770b))))
;;* lme

;;* lmx 1686 system/sepolicy/private/domain.te

(neverallow platform_app domain (memfd_file (ioctl)))
(neverallow priv_app domain (memfd_file (ioctl)))
(neverallow untrusted_app domain (memfd_file (ioctl)))
;;* lme

;;* lmx 1687 system/sepolicy/private/domain.te

(neverallowx platform_app domain (ioctl memfd_file ((range 0x7701 0x770b))))
(neverallowx priv_app domain (ioctl memfd_file ((range 0x7701 0x770b))))
(neverallowx untrusted_app domain (ioctl memfd_file ((range 0x7701 0x770b))))
;;* lme

;;* lmx 1699 system/sepolicy/private/domain.te

(neverallow base_typeattr_509 debugfs_tracing_printk_formats (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
;;* lme

;;* lmx 1722 system/sepolicy/private/domain.te

(neverallow base_typeattr_510 misc_block_device (blk_file (ioctl read write lock relabelfrom append link rename open)))
;;* lme

;;* lmx 1736 system/sepolicy/private/domain.te

(neverallow base_typeattr_511 self (capability (sys_ptrace)))
(neverallow base_typeattr_511 self (cap_userns (sys_ptrace)))
;;* lme

;;* lmx 1739 system/sepolicy/private/domain.te

(neverallow base_typeattr_512 base_typeattr_248 (keystore2_key (gen_unique_id)))
;;* lme

;;* lmx 1740 system/sepolicy/private/domain.te

(neverallow base_typeattr_427 base_typeattr_248 (keystore2_key (use_dev_id)))
;;* lme

;;* lmx 1741 system/sepolicy/private/domain.te

(neverallow base_typeattr_427 keystore (keystore2 (clear_ns lock reset unlock)))
;;* lme

;;* lmx 1748 system/sepolicy/private/domain.te

(neverallow base_typeattr_513 debugfs_tracing_debug (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 1757 system/sepolicy/private/domain.te

(neverallow base_typeattr_514 dropbox_data_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 1763 system/sepolicy/private/domain.te

(neverallow base_typeattr_514 dropbox_data_file (file (ioctl write create setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
;;* lme

;;* lmx 1776 system/sepolicy/private/domain.te

(neverallow base_typeattr_496 app_data_file (file (create unlink)))
(neverallow base_typeattr_496 app_data_file (dir (create unlink)))
(neverallow base_typeattr_496 app_data_file (lnk_file (create unlink)))
(neverallow base_typeattr_496 app_data_file (chr_file (create unlink)))
(neverallow base_typeattr_496 app_data_file (blk_file (create unlink)))
(neverallow base_typeattr_496 app_data_file (sock_file (create unlink)))
(neverallow base_typeattr_496 app_data_file (fifo_file (create unlink)))
(neverallow base_typeattr_496 privapp_data_file (file (create unlink)))
(neverallow base_typeattr_496 privapp_data_file (dir (create unlink)))
(neverallow base_typeattr_496 privapp_data_file (lnk_file (create unlink)))
(neverallow base_typeattr_496 privapp_data_file (chr_file (create unlink)))
(neverallow base_typeattr_496 privapp_data_file (blk_file (create unlink)))
(neverallow base_typeattr_496 privapp_data_file (sock_file (create unlink)))
(neverallow base_typeattr_496 privapp_data_file (fifo_file (create unlink)))
;;* lme

;;* lmx 1807 system/sepolicy/private/domain.te

(neverallow base_typeattr_515 app_data_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
(neverallow base_typeattr_515 privapp_data_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 1849 system/sepolicy/private/domain.te

(neverallow base_typeattr_516 app_data_file (dir (write create setattr relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access execmod watch_mount watch_sb watch_with_perm add_name remove_name reparent rmdir)))
(neverallow base_typeattr_516 privapp_data_file (dir (write create setattr relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access execmod watch_mount watch_sb watch_with_perm add_name remove_name reparent rmdir)))
;;* lme

;;* lmx 1873 system/sepolicy/private/domain.te

(neverallow base_typeattr_517 app_data_file (file (open)))
(neverallow base_typeattr_517 app_data_file (lnk_file (open)))
(neverallow base_typeattr_517 app_data_file (chr_file (open)))
(neverallow base_typeattr_517 app_data_file (blk_file (open)))
(neverallow base_typeattr_517 app_data_file (sock_file (open)))
(neverallow base_typeattr_517 app_data_file (fifo_file (open)))
(neverallow base_typeattr_517 privapp_data_file (file (open)))
(neverallow base_typeattr_517 privapp_data_file (lnk_file (open)))
(neverallow base_typeattr_517 privapp_data_file (chr_file (open)))
(neverallow base_typeattr_517 privapp_data_file (blk_file (open)))
(neverallow base_typeattr_517 privapp_data_file (sock_file (open)))
(neverallow base_typeattr_517 privapp_data_file (fifo_file (open)))
;;* lme

;;* lmx 1884 system/sepolicy/private/domain.te

(neverallow base_typeattr_496 app_data_file (file (create unlink)))
(neverallow base_typeattr_496 app_data_file (dir (create unlink)))
(neverallow base_typeattr_496 app_data_file (lnk_file (create unlink)))
(neverallow base_typeattr_496 app_data_file (chr_file (create unlink)))
(neverallow base_typeattr_496 app_data_file (blk_file (create unlink)))
(neverallow base_typeattr_496 app_data_file (sock_file (create unlink)))
(neverallow base_typeattr_496 app_data_file (fifo_file (create unlink)))
(neverallow base_typeattr_496 privapp_data_file (file (create unlink)))
(neverallow base_typeattr_496 privapp_data_file (dir (create unlink)))
(neverallow base_typeattr_496 privapp_data_file (lnk_file (create unlink)))
(neverallow base_typeattr_496 privapp_data_file (chr_file (create unlink)))
(neverallow base_typeattr_496 privapp_data_file (blk_file (create unlink)))
(neverallow base_typeattr_496 privapp_data_file (sock_file (create unlink)))
(neverallow base_typeattr_496 privapp_data_file (fifo_file (create unlink)))
;;* lme

;;* lmx 1894 system/sepolicy/private/domain.te

(neverallow base_typeattr_518 app_data_file (file (relabelfrom relabelto)))
(neverallow base_typeattr_518 app_data_file (dir (relabelfrom relabelto)))
(neverallow base_typeattr_518 app_data_file (lnk_file (relabelfrom relabelto)))
(neverallow base_typeattr_518 app_data_file (chr_file (relabelfrom relabelto)))
(neverallow base_typeattr_518 app_data_file (blk_file (relabelfrom relabelto)))
(neverallow base_typeattr_518 app_data_file (sock_file (relabelfrom relabelto)))
(neverallow base_typeattr_518 app_data_file (fifo_file (relabelfrom relabelto)))
(neverallow base_typeattr_518 privapp_data_file (file (relabelfrom relabelto)))
(neverallow base_typeattr_518 privapp_data_file (dir (relabelfrom relabelto)))
(neverallow base_typeattr_518 privapp_data_file (lnk_file (relabelfrom relabelto)))
(neverallow base_typeattr_518 privapp_data_file (chr_file (relabelfrom relabelto)))
(neverallow base_typeattr_518 privapp_data_file (blk_file (relabelfrom relabelto)))
(neverallow base_typeattr_518 privapp_data_file (sock_file (relabelfrom relabelto)))
(neverallow base_typeattr_518 privapp_data_file (fifo_file (relabelfrom relabelto)))
;;* lme

;;* lmx 1919 system/sepolicy/private/domain.te

(neverallow base_typeattr_519 staging_data_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 1934 system/sepolicy/private/domain.te

(neverallow base_typeattr_520 staging_data_file (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
;;* lme

;;* lmx 1936 system/sepolicy/private/domain.te

(neverallow base_typeattr_521 staging_data_file (dir (write create setattr relabelfrom link rename add_name remove_name reparent rmdir)))
;;* lme

;;* lmx 1941 system/sepolicy/private/domain.te

(neverallow base_typeattr_522 staging_data_file (file (write create setattr relabelfrom append unlink link rename execute execute_no_trans)))
;;* lme

;;* lmx 1945 system/sepolicy/private/domain.te

(neverallow apexd staging_data_file (file (write create setattr relabelfrom append execute execute_no_trans)))
;;* lme

;;* lmx 1952 system/sepolicy/private/domain.te

(neverallow base_typeattr_523 base_typeattr_524 (file (execute)))
;;* lme

;;* lmx 1984 system/sepolicy/private/domain.te

(neverallow base_typeattr_525 base_typeattr_526 (file (execute)))
;;* lme

;;* lmx 1991 system/sepolicy/private/domain.te

(neverallow base_typeattr_368 cgroup_rc_file (file (write create setattr relabelfrom append unlink link rename)))
;;* lme

;;* lmx 2002 system/sepolicy/private/domain.te

(neverallow base_typeattr_527 dalvikcache_data_file (file (write create setattr relabelfrom append unlink link rename)))
;;* lme

;;* lmx 2012 system/sepolicy/private/domain.te

(neverallow base_typeattr_527 dalvikcache_data_file (dir (write create setattr relabelfrom link rename add_name remove_name reparent rmdir)))
;;* lme

;;* lmx 2027 system/sepolicy/private/domain.te

(neverallow base_typeattr_528 apex_art_data_file (file (write create setattr relabelfrom append unlink link rename)))
;;* lme

;;* lmx 2040 system/sepolicy/private/domain.te

(neverallow base_typeattr_528 apex_art_data_file (dir (write create setattr relabelfrom link rename add_name remove_name reparent rmdir)))
;;* lme

;;* lmx 2053 system/sepolicy/private/domain.te

(neverallow base_typeattr_529 base_typeattr_300 (file (execute execute_no_trans)))
;;* lme

;;* lmx 2083 system/sepolicy/private/domain.te

(neverallow base_typeattr_530 self (capability (dac_override)))
(neverallow base_typeattr_530 self (cap_userns (dac_override)))
;;* lme

;;* lmx 2093 system/sepolicy/private/domain.te

(neverallow base_typeattr_531 self (capability (dac_read_search)))
(neverallow base_typeattr_531 self (cap_userns (dac_read_search)))
;;* lme

;;* lmx 2113 system/sepolicy/private/domain.te

(neverallow base_typeattr_532 base_typeattr_533 (filesystem (mount remount relabelfrom relabelto)))
;;* lme

;;* lmx 2115 system/sepolicy/private/domain.te

(neverallow base_typeattr_247 base_typeattr_534 (filesystem (mount remount relabelfrom relabelto)))
;;* lme

;;* lmx 2134 system/sepolicy/private/domain.te

(neverallow base_typeattr_535 self (capability (sys_rawio)))
(neverallow base_typeattr_535 self (cap_userns (sys_rawio)))
;;* lme

;;* lmx 2143 system/sepolicy/private/domain.te

(neverallow base_typeattr_536 mirror_data_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 2146 system/sepolicy/private/domain.te

(neverallow base_typeattr_443 net_dns_prop (property_service (set)))
;;* lme

;;* lmx 2147 system/sepolicy/private/domain.te

(neverallow base_typeattr_435 net_dns_prop (file (read)))
;;* lme

;;* lmx 2150 system/sepolicy/private/domain.te

(neverallow base_typeattr_486 pm_prop (property_service (set)))
;;* lme

;;* lmx 2151 system/sepolicy/private/domain.te

(neverallow base_typeattr_241 pm_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 2154 system/sepolicy/private/domain.te

(neverallow base_typeattr_514 firstboot_prop (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 2158 system/sepolicy/private/domain.te

(neverallow base_typeattr_537 dalvik_config_prop (property_service (set)))
;;* lme

;;* lmx 2161 system/sepolicy/private/domain.te

(neverallow base_typeattr_368 debugfs_kprobes (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
;;* lme

;;* lmx 2165 system/sepolicy/private/domain.te

(neverallow base_typeattr_538 vendor_file (file (write create setattr relabelfrom append unlink link rename execute open execute_no_trans)))
;;* lme

;;* lmx 2184 system/sepolicy/private/domain.te

(neverallow base_typeattr_539 base_typeattr_540 (socket (connect sendto)))
(neverallow base_typeattr_539 base_typeattr_540 (tcp_socket (connect sendto)))
(neverallow base_typeattr_539 base_typeattr_540 (udp_socket (connect sendto)))
(neverallow base_typeattr_539 base_typeattr_540 (rawip_socket (connect sendto)))
(neverallow base_typeattr_539 base_typeattr_540 (netlink_socket (connect sendto)))
(neverallow base_typeattr_539 base_typeattr_540 (packet_socket (connect sendto)))
(neverallow base_typeattr_539 base_typeattr_540 (key_socket (connect sendto)))
(neverallow base_typeattr_539 base_typeattr_540 (unix_stream_socket (connect sendto)))
(neverallow base_typeattr_539 base_typeattr_540 (unix_dgram_socket (connect sendto)))
(neverallow base_typeattr_539 base_typeattr_540 (netlink_route_socket (connect sendto)))
(neverallow base_typeattr_539 base_typeattr_540 (netlink_tcpdiag_socket (connect sendto)))
(neverallow base_typeattr_539 base_typeattr_540 (netlink_nflog_socket (connect sendto)))
(neverallow base_typeattr_539 base_typeattr_540 (netlink_xfrm_socket (connect sendto)))
(neverallow base_typeattr_539 base_typeattr_540 (netlink_selinux_socket (connect sendto)))
(neverallow base_typeattr_539 base_typeattr_540 (netlink_audit_socket (connect sendto)))
(neverallow base_typeattr_539 base_typeattr_540 (netlink_dnrt_socket (connect sendto)))
(neverallow base_typeattr_539 base_typeattr_540 (netlink_kobject_uevent_socket (connect sendto)))
(neverallow base_typeattr_539 base_typeattr_540 (appletalk_socket (connect sendto)))
(neverallow base_typeattr_539 base_typeattr_540 (tun_socket (connect sendto)))
(neverallow base_typeattr_539 base_typeattr_540 (netlink_iscsi_socket (connect sendto)))
(neverallow base_typeattr_539 base_typeattr_540 (netlink_fib_lookup_socket (connect sendto)))
(neverallow base_typeattr_539 base_typeattr_540 (netlink_connector_socket (connect sendto)))
(neverallow base_typeattr_539 base_typeattr_540 (netlink_netfilter_socket (connect sendto)))
(neverallow base_typeattr_539 base_typeattr_540 (netlink_generic_socket (connect sendto)))
(neverallow base_typeattr_539 base_typeattr_540 (netlink_scsitransport_socket (connect sendto)))
(neverallow base_typeattr_539 base_typeattr_540 (netlink_rdma_socket (connect sendto)))
(neverallow base_typeattr_539 base_typeattr_540 (netlink_crypto_socket (connect sendto)))
(neverallow base_typeattr_539 base_typeattr_540 (sctp_socket (connect sendto)))
(neverallow base_typeattr_539 base_typeattr_540 (icmp_socket (connect sendto)))
(neverallow base_typeattr_539 base_typeattr_540 (ax25_socket (connect sendto)))
(neverallow base_typeattr_539 base_typeattr_540 (ipx_socket (connect sendto)))
(neverallow base_typeattr_539 base_typeattr_540 (netrom_socket (connect sendto)))
(neverallow base_typeattr_539 base_typeattr_540 (atmpvc_socket (connect sendto)))
(neverallow base_typeattr_539 base_typeattr_540 (x25_socket (connect sendto)))
(neverallow base_typeattr_539 base_typeattr_540 (rose_socket (connect sendto)))
(neverallow base_typeattr_539 base_typeattr_540 (decnet_socket (connect sendto)))
(neverallow base_typeattr_539 base_typeattr_540 (atmsvc_socket (connect sendto)))
(neverallow base_typeattr_539 base_typeattr_540 (rds_socket (connect sendto)))
(neverallow base_typeattr_539 base_typeattr_540 (irda_socket (connect sendto)))
(neverallow base_typeattr_539 base_typeattr_540 (pppox_socket (connect sendto)))
(neverallow base_typeattr_539 base_typeattr_540 (llc_socket (connect sendto)))
(neverallow base_typeattr_539 base_typeattr_540 (can_socket (connect sendto)))
(neverallow base_typeattr_539 base_typeattr_540 (tipc_socket (connect sendto)))
(neverallow base_typeattr_539 base_typeattr_540 (bluetooth_socket (connect sendto)))
(neverallow base_typeattr_539 base_typeattr_540 (iucv_socket (connect sendto)))
(neverallow base_typeattr_539 base_typeattr_540 (rxrpc_socket (connect sendto)))
(neverallow base_typeattr_539 base_typeattr_540 (isdn_socket (connect sendto)))
(neverallow base_typeattr_539 base_typeattr_540 (phonet_socket (connect sendto)))
(neverallow base_typeattr_539 base_typeattr_540 (ieee802154_socket (connect sendto)))
(neverallow base_typeattr_539 base_typeattr_540 (caif_socket (connect sendto)))
(neverallow base_typeattr_539 base_typeattr_540 (alg_socket (connect sendto)))
(neverallow base_typeattr_539 base_typeattr_540 (nfc_socket (connect sendto)))
(neverallow base_typeattr_539 base_typeattr_540 (vsock_socket (connect sendto)))
(neverallow base_typeattr_539 base_typeattr_540 (kcm_socket (connect sendto)))
(neverallow base_typeattr_539 base_typeattr_540 (qipcrtr_socket (connect sendto)))
(neverallow base_typeattr_539 base_typeattr_540 (smc_socket (connect sendto)))
(neverallow base_typeattr_539 base_typeattr_540 (xdp_socket (connect sendto)))
;;* lme

;;* lmx 2184 system/sepolicy/private/domain.te

(neverallow base_typeattr_539 base_typeattr_540 (unix_stream_socket (connectto)))
;;* lme

;;* lmx 2205 system/sepolicy/private/domain.te

(neverallow base_typeattr_541 base_typeattr_542 (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
;;* lme

;;* lmx 2258 system/sepolicy/private/domain.te

(neverallow domain mlsvendorcompat (process (fork)))
;;* lme

;;* lmx 2274 system/sepolicy/private/domain.te

(neverallow base_typeattr_543 base_typeattr_248 (binder (impersonate call set_context_mgr transfer)))
;;* lme

;;* lmx 2275 system/sepolicy/private/domain.te

(neverallow base_typeattr_248 base_typeattr_543 (binder (impersonate call set_context_mgr transfer)))
;;* lme

;;* lmx 2288 system/sepolicy/private/domain.te

(neverallow base_typeattr_544 system_file_type (file (mounton)))
(neverallow base_typeattr_544 system_file_type (dir (mounton)))
(neverallow base_typeattr_544 system_file_type (lnk_file (mounton)))
(neverallow base_typeattr_544 system_file_type (chr_file (mounton)))
(neverallow base_typeattr_544 system_file_type (blk_file (mounton)))
(neverallow base_typeattr_544 system_file_type (sock_file (mounton)))
(neverallow base_typeattr_544 system_file_type (fifo_file (mounton)))
(neverallow base_typeattr_544 vendor_file_type (file (mounton)))
(neverallow base_typeattr_544 vendor_file_type (dir (mounton)))
(neverallow base_typeattr_544 vendor_file_type (lnk_file (mounton)))
(neverallow base_typeattr_544 vendor_file_type (chr_file (mounton)))
(neverallow base_typeattr_544 vendor_file_type (blk_file (mounton)))
(neverallow base_typeattr_544 vendor_file_type (sock_file (mounton)))
(neverallow base_typeattr_544 vendor_file_type (fifo_file (mounton)))
;;* lme

;;* lmx 2297 system/sepolicy/private/domain.te

(neverallow base_typeattr_434 mm_events_config_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 2317 system/sepolicy/private/domain.te

(neverallow base_typeattr_545 proc_kallsyms (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
;;* lme

;;* lmx 2324 system/sepolicy/private/domain.te

(neverallow base_typeattr_546 base_typeattr_547 (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 2341 system/sepolicy/private/domain.te

(neverallow base_typeattr_548 sysfs_devices_cs_etm (file (write create setattr relabelfrom append unlink link rename)))
;;* lme

;;* lmx 2352 system/sepolicy/private/domain.te

(neverallow base_typeattr_549 self (capability2 (perfmon)))
;;* lme

;;* lmx 2364 system/sepolicy/private/domain.te

(neverallow base_typeattr_550 system_app_data_file (file (create unlink open)))
(neverallow base_typeattr_550 system_app_data_file (dir (create unlink open)))
(neverallow base_typeattr_550 system_app_data_file (lnk_file (create unlink open)))
(neverallow base_typeattr_550 system_app_data_file (chr_file (create unlink open)))
(neverallow base_typeattr_550 system_app_data_file (blk_file (create unlink open)))
(neverallow base_typeattr_550 system_app_data_file (sock_file (create unlink open)))
(neverallow base_typeattr_550 system_app_data_file (fifo_file (create unlink open)))
;;* lme

;;* lmx 2372 system/sepolicy/private/domain.te

(neverallow untrusted_app_all system_app_data_file (file (create unlink open)))
(neverallow untrusted_app_all system_app_data_file (dir (create unlink open)))
(neverallow untrusted_app_all system_app_data_file (lnk_file (create unlink open)))
(neverallow untrusted_app_all system_app_data_file (chr_file (create unlink open)))
(neverallow untrusted_app_all system_app_data_file (blk_file (create unlink open)))
(neverallow untrusted_app_all system_app_data_file (sock_file (create unlink open)))
(neverallow untrusted_app_all system_app_data_file (fifo_file (create unlink open)))
(neverallow priv_app_all system_app_data_file (file (create unlink open)))
(neverallow priv_app_all system_app_data_file (dir (create unlink open)))
(neverallow priv_app_all system_app_data_file (lnk_file (create unlink open)))
(neverallow priv_app_all system_app_data_file (chr_file (create unlink open)))
(neverallow priv_app_all system_app_data_file (blk_file (create unlink open)))
(neverallow priv_app_all system_app_data_file (sock_file (create unlink open)))
(neverallow priv_app_all system_app_data_file (fifo_file (create unlink open)))
(neverallow isolated_app_all system_app_data_file (file (create unlink open)))
(neverallow isolated_app_all system_app_data_file (dir (create unlink open)))
(neverallow isolated_app_all system_app_data_file (lnk_file (create unlink open)))
(neverallow isolated_app_all system_app_data_file (chr_file (create unlink open)))
(neverallow isolated_app_all system_app_data_file (blk_file (create unlink open)))
(neverallow isolated_app_all system_app_data_file (sock_file (create unlink open)))
(neverallow isolated_app_all system_app_data_file (fifo_file (create unlink open)))
(neverallow ephemeral_app system_app_data_file (file (create unlink open)))
(neverallow ephemeral_app system_app_data_file (dir (create unlink open)))
(neverallow ephemeral_app system_app_data_file (lnk_file (create unlink open)))
(neverallow ephemeral_app system_app_data_file (chr_file (create unlink open)))
(neverallow ephemeral_app system_app_data_file (blk_file (create unlink open)))
(neverallow ephemeral_app system_app_data_file (sock_file (create unlink open)))
(neverallow ephemeral_app system_app_data_file (fifo_file (create unlink open)))
(neverallow sdk_sandbox_all system_app_data_file (file (create unlink open)))
(neverallow sdk_sandbox_all system_app_data_file (dir (create unlink open)))
(neverallow sdk_sandbox_all system_app_data_file (lnk_file (create unlink open)))
(neverallow sdk_sandbox_all system_app_data_file (chr_file (create unlink open)))
(neverallow sdk_sandbox_all system_app_data_file (blk_file (create unlink open)))
(neverallow sdk_sandbox_all system_app_data_file (sock_file (create unlink open)))
(neverallow sdk_sandbox_all system_app_data_file (fifo_file (create unlink open)))
(neverallow pcc_component system_app_data_file (file (create unlink open)))
(neverallow pcc_component system_app_data_file (dir (create unlink open)))
(neverallow pcc_component system_app_data_file (lnk_file (create unlink open)))
(neverallow pcc_component system_app_data_file (chr_file (create unlink open)))
(neverallow pcc_component system_app_data_file (blk_file (create unlink open)))
(neverallow pcc_component system_app_data_file (sock_file (create unlink open)))
(neverallow pcc_component system_app_data_file (fifo_file (create unlink open)))
;;* lme

;;* lmx 2374 system/sepolicy/private/domain.te

(neverallow base_typeattr_247 mtectrl (process (transition dyntransition)))
;;* lme

;;* lmx 2375 system/sepolicy/private/domain.te

(neverallow base_typeattr_247 kcmdlinectrl (process (transition dyntransition)))
;;* lme

;;* lmx 2378 system/sepolicy/private/domain.te

(neverallow base_typeattr_551 checkin_data_file (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow base_typeattr_551 checkin_data_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 2380 system/sepolicy/private/domain.te

(neverallow base_typeattr_552 proc (file (mounton)))
(neverallow base_typeattr_552 proc (dir (mounton)))
;;* lme

;;* lmx 2381 system/sepolicy/private/domain.te

(neverallow base_typeattr_553 proc_type (file (mounton)))
(neverallow base_typeattr_553 proc_type (dir (mounton)))
;;* lme

;;* lmx 2385 system/sepolicy/private/domain.te

(neverallow base_typeattr_554 sysfs_pgsize_migration (file (write create setattr relabelfrom append unlink link rename)))
;;* lme

;;* lmx 2410 system/sepolicy/private/domain.te

(neverallow base_typeattr_555 base_typeattr_248 (vsock_socket (create bind connect accept)))
;;* lme

;;* lmx 2413 system/sepolicy/private/domain.te

(neverallow domain base_typeattr_248 (system (kexec_image_load kexec_initramfs_load)))
;;* lme

;;* lmx 2416 system/sepolicy/private/domain.te

(neverallow domain base_typeattr_248 (system (x509_certificate_load)))
;;* lme

;;* lmx 2421 system/sepolicy/private/domain.te

(neverallow domain proc (filesystem (associate)))
;;* lme

;;* lmx 2422 system/sepolicy/private/domain.te

(neverallow domain domain (dir (write add_name remove_name)))
;;* lme

;;* lmx 2423 system/sepolicy/private/domain.te

(neverallow domain domain (file (create)))
;;* lme

;;* lmx 2428 system/sepolicy/private/domain.te

(neverallow base_typeattr_427 wrapfd_device (chr_file (ioctl read write map open)))
;;* lme

;;* lmx 2437 system/sepolicy/private/domain.te

(neverallow base_typeattr_556 system_server_wrapfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 3 system/sepolicy/private/drmserver.te

(allow init drmserver_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 3 system/sepolicy/private/drmserver.te

(allow init drmserver (process (transition)))
;;* lme

;;* lmx 3 system/sepolicy/private/drmserver.te

(allow drmserver drmserver_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init drmserver (process (noatsecure)))
;;* lmx 3 system/sepolicy/private/drmserver.te

(allow init drmserver (process (siginh rlimitinh)))
;;* lme

(typetransition init drmserver_exec process drmserver)
(typetransition drmserver apk_data_file sock_file drmserver_socket)
;;* lmx 9 system/sepolicy/private/drmserver.te

(allow drmserver drm_service_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 16 system/sepolicy/private/drmserver.te

(allow drmserver servicemanager (binder (call transfer)))
;;* lme

;;* lmx 16 system/sepolicy/private/drmserver.te

(allow servicemanager drmserver (binder (call transfer)))
;;* lme

;;* lmx 17 system/sepolicy/private/drmserver.te

(allow drmserver system_server (binder (call transfer)))
;;* lme

;;* lmx 17 system/sepolicy/private/drmserver.te

(allow system_server drmserver (binder (transfer)))
;;* lme

;;* lmx 17 system/sepolicy/private/drmserver.te

(allow drmserver system_server (fd (use)))
;;* lme

;;* lmx 18 system/sepolicy/private/drmserver.te

(allow drmserver appdomain (binder (call transfer)))
;;* lme

;;* lmx 18 system/sepolicy/private/drmserver.te

(allow appdomain drmserver (binder (transfer)))
;;* lme

;;* lmx 18 system/sepolicy/private/drmserver.te

(allow drmserver appdomain (fd (use)))
;;* lme

;;* lmx 19 system/sepolicy/private/drmserver.te

(allow drmserver mediametrics (binder (call transfer)))
;;* lme

;;* lmx 19 system/sepolicy/private/drmserver.te

(allow mediametrics drmserver (binder (transfer)))
;;* lme

;;* lmx 19 system/sepolicy/private/drmserver.te

(allow drmserver mediametrics (fd (use)))
;;* lme

;;* lmx 22 system/sepolicy/private/drmserver.te

(allow drmserver system_server (fd (use)))
;;* lme

;;* lmx 25 system/sepolicy/private/drmserver.te

(allow drmserver mediaserver (binder (call transfer)))
;;* lme

;;* lmx 25 system/sepolicy/private/drmserver.te

(allow mediaserver drmserver (binder (transfer)))
;;* lme

;;* lmx 25 system/sepolicy/private/drmserver.te

(allow drmserver mediaserver (fd (use)))
;;* lme

;;* lmx 27 system/sepolicy/private/drmserver.te

(allow drmserver sdcard_type (dir (search)))
(allow drmserver fuse (dir (search)))
;;* lme

;;* lmx 28 system/sepolicy/private/drmserver.te

(allow drmserver drm_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 29 system/sepolicy/private/drmserver.te

(allow drmserver drm_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 30 system/sepolicy/private/drmserver.te

(allow drmserver app_data_file (file (read write getattr map)))
(allow drmserver privapp_data_file (file (read write getattr map)))
;;* lme

;;* lmx 31 system/sepolicy/private/drmserver.te

(allow drmserver sdcard_type (file (read write getattr map)))
(allow drmserver fuse (file (read write getattr map)))
;;* lme

;;* lmx 32 system/sepolicy/private/drmserver.te

(allow drmserver efs_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 32 system/sepolicy/private/drmserver.te

(allow drmserver efs_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow drmserver efs_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 36 system/sepolicy/private/drmserver.te

(allow drmserver apk_data_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
;;* lme

(auditallow drmserver apk_data_file (dir (write add_name)))
;;* lmx 38 system/sepolicy/private/drmserver.te

(allow drmserver drmserver_socket (sock_file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

(auditallow drmserver drmserver_socket (sock_file (create)))
;;* lmx 41 system/sepolicy/private/drmserver.te

(allow drmserver apk_data_file (sock_file (unlink)))
;;* lme

;;* lmx 44 system/sepolicy/private/drmserver.te

(allow drmserver media_rw_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 44 system/sepolicy/private/drmserver.te

(allow drmserver media_rw_data_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow drmserver media_rw_data_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 47 system/sepolicy/private/drmserver.te

(allow drmserver apk_data_file (file (read getattr map)))
;;* lme

;;* lmx 48 system/sepolicy/private/drmserver.te

(allow drmserver asec_apk_file (file (read getattr map)))
;;* lme

;;* lmx 49 system/sepolicy/private/drmserver.te

(allow drmserver ringtone_file (file (read getattr map)))
;;* lme

;;* lmx 52 system/sepolicy/private/drmserver.te

(allow drmserver radio_data_file (file (read getattr map)))
;;* lme

;;* lmx 55 system/sepolicy/private/drmserver.te

(allow drmserver oemfs (dir (search)))
;;* lme

;;* lmx 56 system/sepolicy/private/drmserver.te

(allow drmserver oemfs (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 59 system/sepolicy/private/drmserver.te

(allow drmserver vendor_overlay_file (file (read map)))
;;* lme

;;* lmx 61 system/sepolicy/private/drmserver.te

(allow drmserver drmserver_service (service_manager (add find)))
;;* lme

;;* lmx 61 system/sepolicy/private/drmserver.te

(neverallow base_typeattr_557 drmserver_service (service_manager (add)))
;;* lme

;;* lmx 61 system/sepolicy/private/drmserver.te

(allow drmserver su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 62 system/sepolicy/private/drmserver.te

(allow drmserver permission_service (service_manager (find)))
;;* lme

;;* lmx 63 system/sepolicy/private/drmserver.te

(allow drmserver mediametrics_service (service_manager (find)))
;;* lme

;;* lmx 65 system/sepolicy/private/drmserver.te

(allow drmserver selinuxfs (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 65 system/sepolicy/private/drmserver.te

(allow drmserver selinuxfs (file (ioctl read getattr lock map open watch watch_reads)))
(allow drmserver selinuxfs (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 65 system/sepolicy/private/drmserver.te

(allow drmserver selinuxfs (file (write lock append map open)))
;;* lme

;;* lmx 65 system/sepolicy/private/drmserver.te

(allow drmserver kernel (security (compute_av)))
;;* lme

;;* lmx 65 system/sepolicy/private/drmserver.te

(allow drmserver self (netlink_selinux_socket (read write create getattr setattr lock relabelfrom relabelto append bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
;;* lme

;;* lmx 67 system/sepolicy/private/drmserver.te

(allow drmserver cgroup (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 67 system/sepolicy/private/drmserver.te

(allow drmserver cgroup (file (ioctl read getattr lock map open watch watch_reads)))
(allow drmserver cgroup (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 68 system/sepolicy/private/drmserver.te

(allow drmserver cgroup_v2 (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 68 system/sepolicy/private/drmserver.te

(allow drmserver cgroup_v2 (file (ioctl read getattr lock map open watch watch_reads)))
(allow drmserver cgroup_v2 (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 69 system/sepolicy/private/drmserver.te

(allow drmserver system_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 69 system/sepolicy/private/drmserver.te

(allow drmserver system_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow drmserver system_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 5 system/sepolicy/private/dumpstate.te

(allow init dumpstate_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 5 system/sepolicy/private/dumpstate.te

(allow init dumpstate (process (transition)))
;;* lme

;;* lmx 5 system/sepolicy/private/dumpstate.te

(allow dumpstate dumpstate_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init dumpstate (process (noatsecure)))
;;* lmx 5 system/sepolicy/private/dumpstate.te

(allow init dumpstate (process (siginh rlimitinh)))
;;* lme

(typetransition init dumpstate_exec process dumpstate)
;;* lmx 8 system/sepolicy/private/dumpstate.te

(allow dumpstate vdc_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 8 system/sepolicy/private/dumpstate.te

(allow dumpstate vdc (process (transition)))
;;* lme

;;* lmx 8 system/sepolicy/private/dumpstate.te

(allow vdc vdc_exec (file (read getattr map execute open entrypoint)))
;;* lme

;;* lmx 8 system/sepolicy/private/dumpstate.te

(allow vdc dumpstate (process (sigchld)))
;;* lme

(dontaudit dumpstate vdc (process (noatsecure)))
;;* lmx 8 system/sepolicy/private/dumpstate.te

(allow dumpstate vdc (process (siginh rlimitinh)))
;;* lme

(typetransition dumpstate vdc_exec process vdc)
(typetransition dumpstate tmpfs file dumpstate_tmpfs)
;;* lmx 12 system/sepolicy/private/dumpstate.te

(allow dumpstate dumpstate_tmpfs (file (read write getattr map)))
;;* lme

;;* lmx 15 system/sepolicy/private/dumpstate.te

(allow dumpstate system_file (file (lock)))
;;* lme

;;* lmx 17 system/sepolicy/private/dumpstate.te

(allow dumpstate storaged_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lme

;;* lmx 20 system/sepolicy/private/dumpstate.te

(allow dumpstate accessibility_trace_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 20 system/sepolicy/private/dumpstate.te

(allow dumpstate accessibility_trace_data_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 26 system/sepolicy/private/dumpstate.te

(allow dumpstate wm_trace_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 26 system/sepolicy/private/dumpstate.te

(allow dumpstate wm_trace_data_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 32 system/sepolicy/private/dumpstate.te

(allow dumpstate dropbox_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 32 system/sepolicy/private/dumpstate.te

(allow dumpstate dropbox_data_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 37 system/sepolicy/private/dumpstate.te

(allow dumpstate aconfig_storage_metadata_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 37 system/sepolicy/private/dumpstate.te

(allow dumpstate aconfig_storage_metadata_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow dumpstate aconfig_storage_metadata_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 40 system/sepolicy/private/dumpstate.te

(allow dumpstate incidentd (binder (call transfer)))
;;* lme

;;* lmx 40 system/sepolicy/private/dumpstate.te

(allow incidentd dumpstate (binder (transfer)))
;;* lme

;;* lmx 40 system/sepolicy/private/dumpstate.te

(allow dumpstate incidentd (fd (use)))
;;* lme

;;* lmx 43 system/sepolicy/private/dumpstate.te

(allow dumpstate incident (process (sigkill signal)))
;;* lme

;;* lmx 46 system/sepolicy/private/dumpstate.te

(allow dumpstate storaged (binder (call transfer)))
;;* lme

;;* lmx 46 system/sepolicy/private/dumpstate.te

(allow storaged dumpstate (binder (transfer)))
;;* lme

;;* lmx 46 system/sepolicy/private/dumpstate.te

(allow dumpstate storaged (fd (use)))
;;* lme

;;* lmx 49 system/sepolicy/private/dumpstate.te

(allow dumpstate statsd (binder (call transfer)))
;;* lme

;;* lmx 49 system/sepolicy/private/dumpstate.te

(allow statsd dumpstate (binder (transfer)))
;;* lme

;;* lmx 49 system/sepolicy/private/dumpstate.te

(allow dumpstate statsd (fd (use)))
;;* lme

;;* lmx 52 system/sepolicy/private/dumpstate.te

(allow dumpstate gpuservice (binder (call transfer)))
;;* lme

;;* lmx 52 system/sepolicy/private/dumpstate.te

(allow gpuservice dumpstate (binder (transfer)))
;;* lme

;;* lmx 52 system/sepolicy/private/dumpstate.te

(allow dumpstate gpuservice (fd (use)))
;;* lme

;;* lmx 55 system/sepolicy/private/dumpstate.te

(allow dumpstate idmap (binder (call transfer)))
;;* lme

;;* lmx 55 system/sepolicy/private/dumpstate.te

(allow idmap dumpstate (binder (transfer)))
;;* lme

;;* lmx 55 system/sepolicy/private/dumpstate.te

(allow dumpstate idmap (fd (use)))
;;* lme

;;* lmx 58 system/sepolicy/private/dumpstate.te

(allow dumpstate profcollectd (binder (call transfer)))
;;* lme

;;* lmx 58 system/sepolicy/private/dumpstate.te

(allow profcollectd dumpstate (binder (transfer)))
;;* lme

;;* lmx 58 system/sepolicy/private/dumpstate.te

(allow dumpstate profcollectd (fd (use)))
;;* lme

;;* lmx 63 system/sepolicy/private/dumpstate.te

(allow dumpstate automotive_display_service (binder (call transfer)))
;;* lme

;;* lmx 63 system/sepolicy/private/dumpstate.te

(allow automotive_display_service dumpstate (binder (transfer)))
;;* lme

;;* lmx 63 system/sepolicy/private/dumpstate.te

(allow dumpstate automotive_display_service (fd (use)))
;;* lme

;;* lmx 66 system/sepolicy/private/dumpstate.te

(allow dumpstate virtual_camera (binder (call transfer)))
;;* lme

;;* lmx 66 system/sepolicy/private/dumpstate.te

(allow virtual_camera dumpstate (binder (transfer)))
;;* lme

;;* lmx 66 system/sepolicy/private/dumpstate.te

(allow dumpstate virtual_camera (fd (use)))
;;* lme

;;* lmx 69 system/sepolicy/private/dumpstate.te

(allow dumpstate ot_daemon (binder (call transfer)))
;;* lme

;;* lmx 69 system/sepolicy/private/dumpstate.te

(allow ot_daemon dumpstate (binder (transfer)))
;;* lme

;;* lmx 69 system/sepolicy/private/dumpstate.te

(allow dumpstate ot_daemon (fd (use)))
;;* lme

;;* lmx 72 system/sepolicy/private/dumpstate.te

(allow dumpstate mmd (binder (call transfer)))
;;* lme

;;* lmx 72 system/sepolicy/private/dumpstate.te

(allow mmd dumpstate (binder (transfer)))
;;* lme

;;* lmx 72 system/sepolicy/private/dumpstate.te

(allow dumpstate mmd (fd (use)))
;;* lme

;;* lmx 75 system/sepolicy/private/dumpstate.te

(allow dumpstate usbauthservice (binder (call transfer)))
;;* lme

;;* lmx 75 system/sepolicy/private/dumpstate.te

(allow usbauthservice dumpstate (binder (transfer)))
;;* lme

;;* lmx 75 system/sepolicy/private/dumpstate.te

(allow dumpstate usbauthservice (fd (use)))
;;* lme

;;* lmx 78 system/sepolicy/private/dumpstate.te

(allow dumpstate boottime_prop (file (read getattr map open)))
;;* lme

;;* lmx 80 system/sepolicy/private/dumpstate.te

(allow dumpstate misctrl_prop (file (read getattr map open)))
;;* lme

;;* lmx 89 system/sepolicy/private/dumpstate.te

(allow dumpstate mediatranscoding (process (signal)))
(allow dumpstate netd (process (signal)))
(allow dumpstate statsd (process (signal)))
(allow dumpstate virtual_camera (process (signal)))
(allow dumpstate ot_daemon (process (signal)))
;;* lme

;;* lmx 92 system/sepolicy/private/dumpstate.te

(allow dumpstate keystore (process (signal)))
;;* lme

(dontaudit dumpstate keystore (process (signal)))
;;* lmx 98 system/sepolicy/private/dumpstate.te

(allow dumpstate rkp_cert_processor (binder (call transfer)))
;;* lme

;;* lmx 98 system/sepolicy/private/dumpstate.te

(allow rkp_cert_processor dumpstate (binder (transfer)))
;;* lme

;;* lmx 98 system/sepolicy/private/dumpstate.te

(allow dumpstate rkp_cert_processor (fd (use)))
;;* lme

;;* lmx 105 system/sepolicy/private/dumpstate.te

(allow dumpstate dev_type (blk_file (getattr)))
;;* lme

;;* lmx 106 system/sepolicy/private/dumpstate.te

(allow dumpstate webview_zygote (process (signal)))
;;* lme

;;* lmx 107 system/sepolicy/private/dumpstate.te

(allow dumpstate sysfs_dmabuf_stats (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 108 system/sepolicy/private/dumpstate.te

(allow dumpstate fs_bpf_dmabuf (dir (search)))
;;* lme

;;* lmx 109 system/sepolicy/private/dumpstate.te

(allow dumpstate fs_bpf_dmabuf (file (read getattr open)))
;;* lme

(dontaudit dumpstate update_engine (binder (call)))
;;* lmx 117 system/sepolicy/private/dumpstate.te

(allow dumpstate proc_net_tcp_udp (file (ioctl read getattr lock map open watch watch_reads)))
(allow dumpstate proc_pid_max (file (ioctl read getattr lock map open watch watch_reads)))
(allow dumpstate config_gz (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 121 system/sepolicy/private/dumpstate.te

(allow dumpstate property_socket (sock_file (write)))
;;* lme

;;* lmx 121 system/sepolicy/private/dumpstate.te

(allow dumpstate init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 121 system/sepolicy/private/dumpstate.te

(allow dumpstate dumpstate_prop (property_service (set)))
;;* lme

;;* lmx 121 system/sepolicy/private/dumpstate.te

(allow dumpstate dumpstate_prop (file (read getattr map open)))
;;* lme

;;* lmx 122 system/sepolicy/private/dumpstate.te

(allow dumpstate property_socket (sock_file (write)))
;;* lme

;;* lmx 122 system/sepolicy/private/dumpstate.te

(allow dumpstate init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 122 system/sepolicy/private/dumpstate.te

(allow dumpstate exported_dumpstate_prop (property_service (set)))
;;* lme

;;* lmx 122 system/sepolicy/private/dumpstate.te

(allow dumpstate exported_dumpstate_prop (file (read getattr map open)))
;;* lme

;;* lmx 123 system/sepolicy/private/dumpstate.te

(allow dumpstate property_socket (sock_file (write)))
;;* lme

;;* lmx 123 system/sepolicy/private/dumpstate.te

(allow dumpstate init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 123 system/sepolicy/private/dumpstate.te

(allow dumpstate dumpstate_last_id_prop (property_service (set)))
;;* lme

;;* lmx 123 system/sepolicy/private/dumpstate.te

(allow dumpstate dumpstate_last_id_prop (file (read getattr map open)))
;;* lme

;;* lmx 126 system/sepolicy/private/dumpstate.te

(allow dumpstate property_socket (sock_file (write)))
;;* lme

;;* lmx 126 system/sepolicy/private/dumpstate.te

(allow dumpstate init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 126 system/sepolicy/private/dumpstate.te

(allow dumpstate dumpstate_options_prop (property_service (set)))
;;* lme

;;* lmx 126 system/sepolicy/private/dumpstate.te

(allow dumpstate dumpstate_options_prop (file (read getattr map open)))
;;* lme

;;* lmx 129 system/sepolicy/private/dumpstate.te

(allow dumpstate property_socket (sock_file (write)))
;;* lme

;;* lmx 129 system/sepolicy/private/dumpstate.te

(allow dumpstate init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 129 system/sepolicy/private/dumpstate.te

(allow dumpstate ctl_dumpstate_prop (property_service (set)))
;;* lme

;;* lmx 129 system/sepolicy/private/dumpstate.te

(allow dumpstate ctl_dumpstate_prop (file (read getattr map open)))
;;* lme

;;* lmx 132 system/sepolicy/private/dumpstate.te

(allow dumpstate property_socket (sock_file (write)))
;;* lme

;;* lmx 132 system/sepolicy/private/dumpstate.te

(allow dumpstate init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 132 system/sepolicy/private/dumpstate.te

(allow dumpstate lpdumpd_prop (property_service (set)))
;;* lme

;;* lmx 132 system/sepolicy/private/dumpstate.te

(allow dumpstate lpdumpd_prop (file (read getattr map open)))
;;* lme

;;* lmx 133 system/sepolicy/private/dumpstate.te

(allow dumpstate lpdumpd (binder (call transfer)))
;;* lme

;;* lmx 133 system/sepolicy/private/dumpstate.te

(allow lpdumpd dumpstate (binder (transfer)))
;;* lme

;;* lmx 133 system/sepolicy/private/dumpstate.te

(allow dumpstate lpdumpd (fd (use)))
;;* lme

;;* lmx 136 system/sepolicy/private/dumpstate.te

(allow dumpstate hypervisor_prop (file (read getattr map open)))
;;* lme

;;* lmx 139 system/sepolicy/private/dumpstate.te

(allow dumpstate gsid_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lme

;;* lmx 140 system/sepolicy/private/dumpstate.te

(allow dumpstate property_socket (sock_file (write)))
;;* lme

;;* lmx 140 system/sepolicy/private/dumpstate.te

(allow dumpstate init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 140 system/sepolicy/private/dumpstate.te

(allow dumpstate ctl_gsid_prop (property_service (set)))
;;* lme

;;* lmx 140 system/sepolicy/private/dumpstate.te

(allow dumpstate ctl_gsid_prop (file (read getattr map open)))
;;* lme

;;* lmx 141 system/sepolicy/private/dumpstate.te

(allow dumpstate gsid (binder (call transfer)))
;;* lme

;;* lmx 141 system/sepolicy/private/dumpstate.te

(allow gsid dumpstate (binder (transfer)))
;;* lme

;;* lmx 141 system/sepolicy/private/dumpstate.te

(allow dumpstate gsid (fd (use)))
;;* lme

;;* lmx 143 system/sepolicy/private/dumpstate.te

(allow dumpstate ota_metadata_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 143 system/sepolicy/private/dumpstate.te

(allow dumpstate ota_metadata_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow dumpstate ota_metadata_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 148 system/sepolicy/private/dumpstate.te

(allow dumpstate perfetto_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 148 system/sepolicy/private/dumpstate.te

(allow dumpstate perfetto (process (transition)))
;;* lme

;;* lmx 148 system/sepolicy/private/dumpstate.te

(allow perfetto perfetto_exec (file (read getattr map execute open entrypoint)))
;;* lme

;;* lmx 148 system/sepolicy/private/dumpstate.te

(allow perfetto dumpstate (process (sigchld)))
;;* lme

(dontaudit dumpstate perfetto (process (noatsecure)))
;;* lmx 148 system/sepolicy/private/dumpstate.te

(allow dumpstate perfetto (process (siginh rlimitinh)))
;;* lme

(typetransition dumpstate perfetto_exec process perfetto)
;;* lmx 149 system/sepolicy/private/dumpstate.te

(allow dumpstate perfetto (process (signal)))
;;* lme

;;* lmx 150 system/sepolicy/private/dumpstate.te

(allow dumpstate perfetto_traces_data_file (dir (search)))
;;* lme

;;* lmx 151 system/sepolicy/private/dumpstate.te

(allow dumpstate perfetto_traces_bugreport_data_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
;;* lme

;;* lmx 152 system/sepolicy/private/dumpstate.te

(allow dumpstate perfetto_traces_bugreport_data_file (file (ioctl read getattr lock map unlink open watch watch_reads)))
;;* lme

;;* lmx 158 system/sepolicy/private/dumpstate.te

(allow perfetto dumpstate_tmpfs (file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 159 system/sepolicy/private/dumpstate.te

(allow perfetto dumpstate (memfd_file (read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 160 system/sepolicy/private/dumpstate.te

(allow perfetto dumpstate (fd (use)))
;;* lme

;;* lmx 163 system/sepolicy/private/dumpstate.te

(allow dumpstate system_dlkm_file (dir (getattr)))
;;* lme

;;* lmx 166 system/sepolicy/private/dumpstate.te

(allow dumpstate derive_sdk_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 166 system/sepolicy/private/dumpstate.te

(allow dumpstate derive_sdk (process (transition)))
;;* lme

;;* lmx 166 system/sepolicy/private/dumpstate.te

(allow derive_sdk derive_sdk_exec (file (read getattr map execute open entrypoint)))
;;* lme

;;* lmx 166 system/sepolicy/private/dumpstate.te

(allow derive_sdk dumpstate (process (sigchld)))
;;* lme

(dontaudit dumpstate derive_sdk (process (noatsecure)))
;;* lmx 166 system/sepolicy/private/dumpstate.te

(allow dumpstate derive_sdk (process (siginh rlimitinh)))
;;* lme

(typetransition dumpstate derive_sdk_exec process derive_sdk)
;;* lmx 169 system/sepolicy/private/dumpstate.te

(allow dumpstate aflags_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 169 system/sepolicy/private/dumpstate.te

(allow dumpstate aflags (process (transition)))
;;* lme

;;* lmx 169 system/sepolicy/private/dumpstate.te

(allow aflags aflags_exec (file (read getattr map execute open entrypoint)))
;;* lme

;;* lmx 169 system/sepolicy/private/dumpstate.te

(allow aflags dumpstate (process (sigchld)))
;;* lme

(dontaudit dumpstate aflags (process (noatsecure)))
;;* lmx 169 system/sepolicy/private/dumpstate.te

(allow dumpstate aflags (process (siginh rlimitinh)))
;;* lme

(typetransition dumpstate aflags_exec process aflags)
;;* lmx 172 system/sepolicy/private/dumpstate.te

(allow dumpstate servicemanager (binder (call transfer)))
;;* lme

;;* lmx 172 system/sepolicy/private/dumpstate.te

(allow servicemanager dumpstate (binder (call transfer)))
;;* lme

;;* lmx 173 system/sepolicy/private/dumpstate.te

(allow dumpstate sysfs_wake_lock (file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 173 system/sepolicy/private/dumpstate.te

(allow dumpstate self (capability2 (block_suspend)))
(allow dumpstate self (cap2_userns (block_suspend)))
;;* lme

;;* lmx 173 system/sepolicy/private/dumpstate.te

(allow dumpstate system_suspend_server (binder (call transfer)))
;;* lme

;;* lmx 173 system/sepolicy/private/dumpstate.te

(allow system_suspend_server dumpstate (binder (transfer)))
;;* lme

;;* lmx 173 system/sepolicy/private/dumpstate.te

(allow dumpstate system_suspend_server (fd (use)))
;;* lme

;;* lmx 173 system/sepolicy/private/dumpstate.te

(allow dumpstate system_suspend_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 173 system/sepolicy/private/dumpstate.te

(allow dumpstate hwservicemanager (binder (call transfer)))
;;* lme

;;* lmx 173 system/sepolicy/private/dumpstate.te

(allow hwservicemanager dumpstate (binder (call transfer)))
;;* lme

;;* lmx 173 system/sepolicy/private/dumpstate.te

(allow dumpstate hwservicemanager_prop (file (read getattr map open)))
;;* lme

;;* lmx 173 system/sepolicy/private/dumpstate.te

(allow dumpstate hidl_manager_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 173 system/sepolicy/private/dumpstate.te

(allow dumpstate hal_system_suspend_service (service_manager (find)))
;;* lme

;;* lmx 173 system/sepolicy/private/dumpstate.te

(allow dumpstate servicemanager (binder (call transfer)))
;;* lme

;;* lmx 173 system/sepolicy/private/dumpstate.te

(allow servicemanager dumpstate (binder (call transfer)))
;;* lme

;;* lmx 177 system/sepolicy/private/dumpstate.te

(allow dumpstate self (capability (setgid setuid sys_resource)))
(allow dumpstate self (cap_userns (setgid setuid sys_resource)))
;;* lme

;;* lmx 180 system/sepolicy/private/dumpstate.te

(allow dumpstate domain (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 180 system/sepolicy/private/dumpstate.te

(allow dumpstate domain (file (ioctl read getattr lock map open watch watch_reads)))
(allow dumpstate domain (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 188 system/sepolicy/private/dumpstate.te

(allow dumpstate self (capability (kill net_admin net_raw)))
(allow dumpstate self (cap_userns (kill net_admin net_raw)))
;;* lme

;;* lmx 194 system/sepolicy/private/dumpstate.te

(allow dumpstate system_file (file (execute_no_trans)))
;;* lme

;;* lmx 196 system/sepolicy/private/dumpstate.te

(allow dumpstate toolbox_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lme

;;* lmx 199 system/sepolicy/private/dumpstate.te

(allow dumpstate system_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 202 system/sepolicy/private/dumpstate.te

(allow dumpstate self (capability (chown dac_override dac_read_search fowner fsetid)))
(allow dumpstate self (cap_userns (chown dac_override dac_read_search fowner fsetid)))
;;* lme

;;* lmx 203 system/sepolicy/private/dumpstate.te

(allow dumpstate anr_data_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
;;* lme

;;* lmx 204 system/sepolicy/private/dumpstate.te

(allow dumpstate anr_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 208 system/sepolicy/private/dumpstate.te

(allow dumpstate system_data_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 211 system/sepolicy/private/dumpstate.te

(allow dumpstate app_data_file_type (file (append)))
;;* lme

;;* lmx 214 system/sepolicy/private/dumpstate.te

(allow dumpstate self (capability2 (syslog)))
(allow dumpstate self (cap2_userns (syslog)))
;;* lme

;;* lmx 215 system/sepolicy/private/dumpstate.te

(allow dumpstate kernel (system (syslog_read)))
;;* lme

;;* lmx 218 system/sepolicy/private/dumpstate.te

(allow dumpstate pstorefs (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 219 system/sepolicy/private/dumpstate.te

(allow dumpstate pstorefs (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 222 system/sepolicy/private/dumpstate.te

(allow dumpstate domain (process (getattr)))
;;* lme

;;* lmx 225 system/sepolicy/private/dumpstate.te

(allow dumpstate appdomain (process (signal)))
(allow dumpstate app_zygote (process (signal)))
(allow dumpstate system_server (process (signal)))
(allow dumpstate zygote (process (signal)))
;;* lme

;;* lmx 268 system/sepolicy/private/dumpstate.te

(allow dumpstate hal_audio_server (process (signal)))
(allow dumpstate hal_audiocontrol_server (process (signal)))
(allow dumpstate hal_bluetooth_server (process (signal)))
(allow dumpstate hal_broadcastradio_server (process (signal)))
(allow dumpstate hal_camera_server (process (signal)))
(allow dumpstate hal_codec2_server (process (signal)))
(allow dumpstate hal_drm_server (process (signal)))
(allow dumpstate hal_evs_server (process (signal)))
(allow dumpstate hal_face_server (process (signal)))
(allow dumpstate hal_fingerprint_server (process (signal)))
(allow dumpstate hal_graphics_allocator_server (process (signal)))
(allow dumpstate hal_graphics_composer_server (process (signal)))
(allow dumpstate hal_health_server (process (signal)))
(allow dumpstate hal_input_processor_server (process (signal)))
(allow dumpstate hal_neuralnetworks_server (process (signal)))
(allow dumpstate hal_omx_server (process (signal)))
(allow dumpstate hal_power_server (process (signal)))
(allow dumpstate hal_power_stats_server (process (signal)))
(allow dumpstate hal_sensors_server (process (signal)))
(allow dumpstate hal_thermal_server (process (signal)))
(allow dumpstate hal_vehicle_server (process (signal)))
(allow dumpstate hal_vr_server (process (signal)))
(allow dumpstate system_suspend_server (process (signal)))
(allow dumpstate audioserver (process (signal)))
(allow dumpstate cameraserver (process (signal)))
(allow dumpstate drmserver (process (signal)))
(allow dumpstate evsmanagerd (process (signal)))
(allow dumpstate inputflinger (process (signal)))
(allow dumpstate mediadrmserver (process (signal)))
(allow dumpstate mediaextractor (process (signal)))
(allow dumpstate mediametrics (process (signal)))
(allow dumpstate mediaserver (process (signal)))
(allow dumpstate mediaswcodec (process (signal)))
(allow dumpstate sdcardd (process (signal)))
(allow dumpstate surfaceflinger (process (signal)))
(allow dumpstate vold (process (signal)))
;;* lme

;;* lmx 272 system/sepolicy/private/dumpstate.te

(allow dumpstate su (process (sigkill signal)))
;;* lme

;;* lmx 277 system/sepolicy/private/dumpstate.te

(allow dumpstate tombstoned_intercept_socket (sock_file (write)))
;;* lme

;;* lmx 277 system/sepolicy/private/dumpstate.te

(allow dumpstate tombstoned (unix_stream_socket (connectto)))
;;* lme

;;* lmx 280 system/sepolicy/private/dumpstate.te

(allow dumpstate sysfs_type (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 289 system/sepolicy/private/dumpstate.te

(allow dumpstate sysfs_devices_block (file (ioctl read getattr lock map open watch watch_reads)))
(allow dumpstate sysfs_dm (file (ioctl read getattr lock map open watch watch_reads)))
(allow dumpstate sysfs_loop (file (ioctl read getattr lock map open watch watch_reads)))
(allow dumpstate sysfs_lru_gen_enabled (file (ioctl read getattr lock map open watch watch_reads)))
(allow dumpstate sysfs_usb (file (ioctl read getattr lock map open watch watch_reads)))
(allow dumpstate sysfs_zram (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

(dontaudit dumpstate sysfs (file (ioctl read getattr lock map open watch watch_reads)))
;;* lmx 311 system/sepolicy/private/dumpstate.te

(allow dumpstate block_device (dir (getattr search)))
(allow dumpstate rootfs (dir (getattr search)))
(allow dumpstate selinuxfs (dir (getattr search)))
(allow dumpstate tmpfs (dir (getattr search)))
(allow dumpstate metadata_file (dir (getattr search)))
(allow dumpstate storage_file (dir (getattr search)))
(allow dumpstate cache_file (dir (getattr search)))
;;* lme

;;* lmx 312 system/sepolicy/private/dumpstate.te

(allow dumpstate fuse_device (chr_file (getattr)))
;;* lme

;;* lmx 313 system/sepolicy/private/dumpstate.te

(allow dumpstate dm_device (blk_file (getattr)))
(allow dumpstate cache_block_device (blk_file (getattr)))
;;* lme

;;* lmx 314 system/sepolicy/private/dumpstate.te

(allow dumpstate rootfs (lnk_file (read getattr)))
(allow dumpstate cache_file (lnk_file (read getattr)))
;;* lme

;;* lmx 317 system/sepolicy/private/dumpstate.te

(allow dumpstate cgroup (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 317 system/sepolicy/private/dumpstate.te

(allow dumpstate cgroup (file (ioctl read getattr lock map open watch watch_reads)))
(allow dumpstate cgroup (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 318 system/sepolicy/private/dumpstate.te

(allow dumpstate cgroup_v2 (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 318 system/sepolicy/private/dumpstate.te

(allow dumpstate cgroup_v2 (file (ioctl read getattr lock map open watch watch_reads)))
(allow dumpstate cgroup_v2 (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 321 system/sepolicy/private/dumpstate.te

(allow dumpstate binderservicedomain (binder (call transfer)))
;;* lme

;;* lmx 321 system/sepolicy/private/dumpstate.te

(allow binderservicedomain dumpstate (binder (transfer)))
;;* lme

;;* lmx 321 system/sepolicy/private/dumpstate.te

(allow dumpstate binderservicedomain (fd (use)))
;;* lme

;;* lmx 322 system/sepolicy/private/dumpstate.te

(allow dumpstate appdomain (binder (call transfer)))
(allow dumpstate artd (binder (call transfer)))
(allow dumpstate netd (binder (call transfer)))
(allow dumpstate wificond (binder (call transfer)))
;;* lme

;;* lmx 322 system/sepolicy/private/dumpstate.te

(allow appdomain dumpstate (binder (transfer)))
(allow artd dumpstate (binder (transfer)))
(allow netd dumpstate (binder (transfer)))
(allow wificond dumpstate (binder (transfer)))
;;* lme

;;* lmx 322 system/sepolicy/private/dumpstate.te

(allow dumpstate appdomain (fd (use)))
(allow dumpstate artd (fd (use)))
(allow dumpstate netd (fd (use)))
(allow dumpstate wificond (fd (use)))
;;* lme

;;* lmx 325 system/sepolicy/private/dumpstate.te

(allow dumpstate hal_audio (memfd_file (read write getattr map)))
;;* lme

;;* lmx 325 system/sepolicy/private/dumpstate.te

(allow hal_audio dumpstate (memfd_file (read write getattr map)))
;;* lme

;;* lmx 325 system/sepolicy/private/dumpstate.te

(allow hal_audio_server dumpstate (fifo_file (write)))
;;* lme

;;* lmx 325 system/sepolicy/private/dumpstate.te

(allow hal_audio_server dumpstate (fd (use)))
;;* lme

;;* lmx 326 system/sepolicy/private/dumpstate.te

(allow dumpstate hal_audiocontrol (memfd_file (read write getattr map)))
;;* lme

;;* lmx 326 system/sepolicy/private/dumpstate.te

(allow hal_audiocontrol dumpstate (memfd_file (read write getattr map)))
;;* lme

;;* lmx 326 system/sepolicy/private/dumpstate.te

(allow hal_audiocontrol_server dumpstate (fifo_file (write)))
;;* lme

;;* lmx 326 system/sepolicy/private/dumpstate.te

(allow hal_audiocontrol_server dumpstate (fd (use)))
;;* lme

;;* lmx 327 system/sepolicy/private/dumpstate.te

(allow dumpstate hal_authgraph (memfd_file (read write getattr map)))
;;* lme

;;* lmx 327 system/sepolicy/private/dumpstate.te

(allow hal_authgraph dumpstate (memfd_file (read write getattr map)))
;;* lme

;;* lmx 327 system/sepolicy/private/dumpstate.te

(allow hal_authgraph_server dumpstate (fifo_file (write)))
;;* lme

;;* lmx 327 system/sepolicy/private/dumpstate.te

(allow hal_authgraph_server dumpstate (fd (use)))
;;* lme

;;* lmx 328 system/sepolicy/private/dumpstate.te

(allow dumpstate hal_authsecret (memfd_file (read write getattr map)))
;;* lme

;;* lmx 328 system/sepolicy/private/dumpstate.te

(allow hal_authsecret dumpstate (memfd_file (read write getattr map)))
;;* lme

;;* lmx 328 system/sepolicy/private/dumpstate.te

(allow hal_authsecret_server dumpstate (fifo_file (write)))
;;* lme

;;* lmx 328 system/sepolicy/private/dumpstate.te

(allow hal_authsecret_server dumpstate (fd (use)))
;;* lme

;;* lmx 329 system/sepolicy/private/dumpstate.te

(allow dumpstate hal_bluetooth (memfd_file (read write getattr map)))
;;* lme

;;* lmx 329 system/sepolicy/private/dumpstate.te

(allow hal_bluetooth dumpstate (memfd_file (read write getattr map)))
;;* lme

;;* lmx 329 system/sepolicy/private/dumpstate.te

(allow hal_bluetooth_server dumpstate (fifo_file (write)))
;;* lme

;;* lmx 329 system/sepolicy/private/dumpstate.te

(allow hal_bluetooth_server dumpstate (fd (use)))
;;* lme

;;* lmx 330 system/sepolicy/private/dumpstate.te

(allow dumpstate hal_broadcastradio (memfd_file (read write getattr map)))
;;* lme

;;* lmx 330 system/sepolicy/private/dumpstate.te

(allow hal_broadcastradio dumpstate (memfd_file (read write getattr map)))
;;* lme

;;* lmx 330 system/sepolicy/private/dumpstate.te

(allow hal_broadcastradio_server dumpstate (fifo_file (write)))
;;* lme

;;* lmx 330 system/sepolicy/private/dumpstate.te

(allow hal_broadcastradio_server dumpstate (fd (use)))
;;* lme

;;* lmx 331 system/sepolicy/private/dumpstate.te

(allow dumpstate hal_camera (memfd_file (read write getattr map)))
;;* lme

;;* lmx 331 system/sepolicy/private/dumpstate.te

(allow hal_camera dumpstate (memfd_file (read write getattr map)))
;;* lme

;;* lmx 331 system/sepolicy/private/dumpstate.te

(allow hal_camera_server dumpstate (fifo_file (write)))
;;* lme

;;* lmx 331 system/sepolicy/private/dumpstate.te

(allow hal_camera_server dumpstate (fd (use)))
;;* lme

;;* lmx 332 system/sepolicy/private/dumpstate.te

(allow dumpstate hal_codec2 (memfd_file (read write getattr map)))
;;* lme

;;* lmx 332 system/sepolicy/private/dumpstate.te

(allow hal_codec2 dumpstate (memfd_file (read write getattr map)))
;;* lme

;;* lmx 332 system/sepolicy/private/dumpstate.te

(allow hal_codec2_server dumpstate (fifo_file (write)))
;;* lme

;;* lmx 332 system/sepolicy/private/dumpstate.te

(allow hal_codec2_server dumpstate (fd (use)))
;;* lme

;;* lmx 333 system/sepolicy/private/dumpstate.te

(allow dumpstate hal_contexthub (memfd_file (read write getattr map)))
;;* lme

;;* lmx 333 system/sepolicy/private/dumpstate.te

(allow hal_contexthub dumpstate (memfd_file (read write getattr map)))
;;* lme

;;* lmx 333 system/sepolicy/private/dumpstate.te

(allow hal_contexthub_server dumpstate (fifo_file (write)))
;;* lme

;;* lmx 333 system/sepolicy/private/dumpstate.te

(allow hal_contexthub_server dumpstate (fd (use)))
;;* lme

;;* lmx 334 system/sepolicy/private/dumpstate.te

(allow dumpstate hal_drm (memfd_file (read write getattr map)))
;;* lme

;;* lmx 334 system/sepolicy/private/dumpstate.te

(allow hal_drm dumpstate (memfd_file (read write getattr map)))
;;* lme

;;* lmx 334 system/sepolicy/private/dumpstate.te

(allow hal_drm_server dumpstate (fifo_file (write)))
;;* lme

;;* lmx 334 system/sepolicy/private/dumpstate.te

(allow hal_drm_server dumpstate (fd (use)))
;;* lme

;;* lmx 335 system/sepolicy/private/dumpstate.te

(allow dumpstate hal_dumpstate (memfd_file (read write getattr map)))
;;* lme

;;* lmx 335 system/sepolicy/private/dumpstate.te

(allow hal_dumpstate dumpstate (memfd_file (read write getattr map)))
;;* lme

;;* lmx 335 system/sepolicy/private/dumpstate.te

(allow hal_dumpstate_server dumpstate (fifo_file (write)))
;;* lme

;;* lmx 335 system/sepolicy/private/dumpstate.te

(allow hal_dumpstate_server dumpstate (fd (use)))
;;* lme

;;* lmx 336 system/sepolicy/private/dumpstate.te

(allow dumpstate hal_evs (memfd_file (read write getattr map)))
;;* lme

;;* lmx 336 system/sepolicy/private/dumpstate.te

(allow hal_evs dumpstate (memfd_file (read write getattr map)))
;;* lme

;;* lmx 336 system/sepolicy/private/dumpstate.te

(allow hal_evs_server dumpstate (fifo_file (write)))
;;* lme

;;* lmx 336 system/sepolicy/private/dumpstate.te

(allow hal_evs_server dumpstate (fd (use)))
;;* lme

;;* lmx 337 system/sepolicy/private/dumpstate.te

(allow dumpstate hal_face (memfd_file (read write getattr map)))
;;* lme

;;* lmx 337 system/sepolicy/private/dumpstate.te

(allow hal_face dumpstate (memfd_file (read write getattr map)))
;;* lme

;;* lmx 337 system/sepolicy/private/dumpstate.te

(allow hal_face_server dumpstate (fifo_file (write)))
;;* lme

;;* lmx 337 system/sepolicy/private/dumpstate.te

(allow hal_face_server dumpstate (fd (use)))
;;* lme

;;* lmx 338 system/sepolicy/private/dumpstate.te

(allow dumpstate hal_fingerprint (memfd_file (read write getattr map)))
;;* lme

;;* lmx 338 system/sepolicy/private/dumpstate.te

(allow hal_fingerprint dumpstate (memfd_file (read write getattr map)))
;;* lme

;;* lmx 338 system/sepolicy/private/dumpstate.te

(allow hal_fingerprint_server dumpstate (fifo_file (write)))
;;* lme

;;* lmx 338 system/sepolicy/private/dumpstate.te

(allow hal_fingerprint_server dumpstate (fd (use)))
;;* lme

;;* lmx 339 system/sepolicy/private/dumpstate.te

(allow dumpstate hal_gnss (memfd_file (read write getattr map)))
;;* lme

;;* lmx 339 system/sepolicy/private/dumpstate.te

(allow hal_gnss dumpstate (memfd_file (read write getattr map)))
;;* lme

;;* lmx 339 system/sepolicy/private/dumpstate.te

(allow hal_gnss_server dumpstate (fifo_file (write)))
;;* lme

;;* lmx 339 system/sepolicy/private/dumpstate.te

(allow hal_gnss_server dumpstate (fd (use)))
;;* lme

;;* lmx 340 system/sepolicy/private/dumpstate.te

(allow dumpstate hal_graphics_allocator (memfd_file (read write getattr map)))
;;* lme

;;* lmx 340 system/sepolicy/private/dumpstate.te

(allow hal_graphics_allocator dumpstate (memfd_file (read write getattr map)))
;;* lme

;;* lmx 340 system/sepolicy/private/dumpstate.te

(allow hal_graphics_allocator_server dumpstate (fifo_file (write)))
;;* lme

;;* lmx 340 system/sepolicy/private/dumpstate.te

(allow hal_graphics_allocator_server dumpstate (fd (use)))
;;* lme

;;* lmx 341 system/sepolicy/private/dumpstate.te

(allow dumpstate hal_graphics_composer (memfd_file (read write getattr map)))
;;* lme

;;* lmx 341 system/sepolicy/private/dumpstate.te

(allow hal_graphics_composer dumpstate (memfd_file (read write getattr map)))
;;* lme

;;* lmx 341 system/sepolicy/private/dumpstate.te

(allow hal_graphics_composer_server dumpstate (fifo_file (write)))
;;* lme

;;* lmx 341 system/sepolicy/private/dumpstate.te

(allow hal_graphics_composer_server dumpstate (fd (use)))
;;* lme

;;* lmx 342 system/sepolicy/private/dumpstate.te

(allow dumpstate hal_health (memfd_file (read write getattr map)))
;;* lme

;;* lmx 342 system/sepolicy/private/dumpstate.te

(allow hal_health dumpstate (memfd_file (read write getattr map)))
;;* lme

;;* lmx 342 system/sepolicy/private/dumpstate.te

(allow hal_health_server dumpstate (fifo_file (write)))
;;* lme

;;* lmx 342 system/sepolicy/private/dumpstate.te

(allow hal_health_server dumpstate (fd (use)))
;;* lme

;;* lmx 343 system/sepolicy/private/dumpstate.te

(allow dumpstate hal_identity (memfd_file (read write getattr map)))
;;* lme

;;* lmx 343 system/sepolicy/private/dumpstate.te

(allow hal_identity dumpstate (memfd_file (read write getattr map)))
;;* lme

;;* lmx 343 system/sepolicy/private/dumpstate.te

(allow hal_identity_server dumpstate (fifo_file (write)))
;;* lme

;;* lmx 343 system/sepolicy/private/dumpstate.te

(allow hal_identity_server dumpstate (fd (use)))
;;* lme

;;* lmx 344 system/sepolicy/private/dumpstate.te

(allow dumpstate hal_input_processor (memfd_file (read write getattr map)))
;;* lme

;;* lmx 344 system/sepolicy/private/dumpstate.te

(allow hal_input_processor dumpstate (memfd_file (read write getattr map)))
;;* lme

;;* lmx 344 system/sepolicy/private/dumpstate.te

(allow hal_input_processor_server dumpstate (fifo_file (write)))
;;* lme

;;* lmx 344 system/sepolicy/private/dumpstate.te

(allow hal_input_processor_server dumpstate (fd (use)))
;;* lme

;;* lmx 345 system/sepolicy/private/dumpstate.te

(allow dumpstate hal_keymint (memfd_file (read write getattr map)))
;;* lme

;;* lmx 345 system/sepolicy/private/dumpstate.te

(allow hal_keymint dumpstate (memfd_file (read write getattr map)))
;;* lme

;;* lmx 345 system/sepolicy/private/dumpstate.te

(allow hal_keymint_server dumpstate (fifo_file (write)))
;;* lme

;;* lmx 345 system/sepolicy/private/dumpstate.te

(allow hal_keymint_server dumpstate (fd (use)))
;;* lme

;;* lmx 346 system/sepolicy/private/dumpstate.te

(allow dumpstate hal_light (memfd_file (read write getattr map)))
;;* lme

;;* lmx 346 system/sepolicy/private/dumpstate.te

(allow hal_light dumpstate (memfd_file (read write getattr map)))
;;* lme

;;* lmx 346 system/sepolicy/private/dumpstate.te

(allow hal_light_server dumpstate (fifo_file (write)))
;;* lme

;;* lmx 346 system/sepolicy/private/dumpstate.te

(allow hal_light_server dumpstate (fd (use)))
;;* lme

;;* lmx 347 system/sepolicy/private/dumpstate.te

(allow dumpstate hal_memtrack (memfd_file (read write getattr map)))
;;* lme

;;* lmx 347 system/sepolicy/private/dumpstate.te

(allow hal_memtrack dumpstate (memfd_file (read write getattr map)))
;;* lme

;;* lmx 347 system/sepolicy/private/dumpstate.te

(allow hal_memtrack_server dumpstate (fifo_file (write)))
;;* lme

;;* lmx 347 system/sepolicy/private/dumpstate.te

(allow hal_memtrack_server dumpstate (fd (use)))
;;* lme

;;* lmx 348 system/sepolicy/private/dumpstate.te

(allow dumpstate hal_neuralnetworks (memfd_file (read write getattr map)))
;;* lme

;;* lmx 348 system/sepolicy/private/dumpstate.te

(allow hal_neuralnetworks dumpstate (memfd_file (read write getattr map)))
;;* lme

;;* lmx 348 system/sepolicy/private/dumpstate.te

(allow hal_neuralnetworks_server dumpstate (fifo_file (write)))
;;* lme

;;* lmx 348 system/sepolicy/private/dumpstate.te

(allow hal_neuralnetworks_server dumpstate (fd (use)))
;;* lme

;;* lmx 349 system/sepolicy/private/dumpstate.te

(allow dumpstate hal_nfc (memfd_file (read write getattr map)))
;;* lme

;;* lmx 349 system/sepolicy/private/dumpstate.te

(allow hal_nfc dumpstate (memfd_file (read write getattr map)))
;;* lme

;;* lmx 349 system/sepolicy/private/dumpstate.te

(allow hal_nfc_server dumpstate (fifo_file (write)))
;;* lme

;;* lmx 349 system/sepolicy/private/dumpstate.te

(allow hal_nfc_server dumpstate (fd (use)))
;;* lme

;;* lmx 350 system/sepolicy/private/dumpstate.te

(allow dumpstate hal_oemlock (memfd_file (read write getattr map)))
;;* lme

;;* lmx 350 system/sepolicy/private/dumpstate.te

(allow hal_oemlock dumpstate (memfd_file (read write getattr map)))
;;* lme

;;* lmx 350 system/sepolicy/private/dumpstate.te

(allow hal_oemlock_server dumpstate (fifo_file (write)))
;;* lme

;;* lmx 350 system/sepolicy/private/dumpstate.te

(allow hal_oemlock_server dumpstate (fd (use)))
;;* lme

;;* lmx 351 system/sepolicy/private/dumpstate.te

(allow dumpstate hal_power (memfd_file (read write getattr map)))
;;* lme

;;* lmx 351 system/sepolicy/private/dumpstate.te

(allow hal_power dumpstate (memfd_file (read write getattr map)))
;;* lme

;;* lmx 351 system/sepolicy/private/dumpstate.te

(allow hal_power_server dumpstate (fifo_file (write)))
;;* lme

;;* lmx 351 system/sepolicy/private/dumpstate.te

(allow hal_power_server dumpstate (fd (use)))
;;* lme

;;* lmx 352 system/sepolicy/private/dumpstate.te

(allow dumpstate hal_power_stats (memfd_file (read write getattr map)))
;;* lme

;;* lmx 352 system/sepolicy/private/dumpstate.te

(allow hal_power_stats dumpstate (memfd_file (read write getattr map)))
;;* lme

;;* lmx 352 system/sepolicy/private/dumpstate.te

(allow hal_power_stats_server dumpstate (fifo_file (write)))
;;* lme

;;* lmx 352 system/sepolicy/private/dumpstate.te

(allow hal_power_stats_server dumpstate (fd (use)))
;;* lme

;;* lmx 353 system/sepolicy/private/dumpstate.te

(allow dumpstate hal_rebootescrow (memfd_file (read write getattr map)))
;;* lme

;;* lmx 353 system/sepolicy/private/dumpstate.te

(allow hal_rebootescrow dumpstate (memfd_file (read write getattr map)))
;;* lme

;;* lmx 353 system/sepolicy/private/dumpstate.te

(allow hal_rebootescrow_server dumpstate (fifo_file (write)))
;;* lme

;;* lmx 353 system/sepolicy/private/dumpstate.te

(allow hal_rebootescrow_server dumpstate (fd (use)))
;;* lme

;;* lmx 354 system/sepolicy/private/dumpstate.te

(allow dumpstate hal_secretkeeper (memfd_file (read write getattr map)))
;;* lme

;;* lmx 354 system/sepolicy/private/dumpstate.te

(allow hal_secretkeeper dumpstate (memfd_file (read write getattr map)))
;;* lme

;;* lmx 354 system/sepolicy/private/dumpstate.te

(allow hal_secretkeeper_server dumpstate (fifo_file (write)))
;;* lme

;;* lmx 354 system/sepolicy/private/dumpstate.te

(allow hal_secretkeeper_server dumpstate (fd (use)))
;;* lme

;;* lmx 355 system/sepolicy/private/dumpstate.te

(allow dumpstate hal_sensors (memfd_file (read write getattr map)))
;;* lme

;;* lmx 355 system/sepolicy/private/dumpstate.te

(allow hal_sensors dumpstate (memfd_file (read write getattr map)))
;;* lme

;;* lmx 355 system/sepolicy/private/dumpstate.te

(allow hal_sensors_server dumpstate (fifo_file (write)))
;;* lme

;;* lmx 355 system/sepolicy/private/dumpstate.te

(allow hal_sensors_server dumpstate (fd (use)))
;;* lme

;;* lmx 356 system/sepolicy/private/dumpstate.te

(allow dumpstate hal_thermal (memfd_file (read write getattr map)))
;;* lme

;;* lmx 356 system/sepolicy/private/dumpstate.te

(allow hal_thermal dumpstate (memfd_file (read write getattr map)))
;;* lme

;;* lmx 356 system/sepolicy/private/dumpstate.te

(allow hal_thermal_server dumpstate (fifo_file (write)))
;;* lme

;;* lmx 356 system/sepolicy/private/dumpstate.te

(allow hal_thermal_server dumpstate (fd (use)))
;;* lme

;;* lmx 357 system/sepolicy/private/dumpstate.te

(allow dumpstate hal_vehicle (memfd_file (read write getattr map)))
;;* lme

;;* lmx 357 system/sepolicy/private/dumpstate.te

(allow hal_vehicle dumpstate (memfd_file (read write getattr map)))
;;* lme

;;* lmx 357 system/sepolicy/private/dumpstate.te

(allow hal_vehicle_server dumpstate (fifo_file (write)))
;;* lme

;;* lmx 357 system/sepolicy/private/dumpstate.te

(allow hal_vehicle_server dumpstate (fd (use)))
;;* lme

;;* lmx 358 system/sepolicy/private/dumpstate.te

(allow dumpstate hal_vm_capabilities (memfd_file (read write getattr map)))
;;* lme

;;* lmx 358 system/sepolicy/private/dumpstate.te

(allow hal_vm_capabilities dumpstate (memfd_file (read write getattr map)))
;;* lme

;;* lmx 358 system/sepolicy/private/dumpstate.te

(allow hal_vm_capabilities_server dumpstate (fifo_file (write)))
;;* lme

;;* lmx 358 system/sepolicy/private/dumpstate.te

(allow hal_vm_capabilities_server dumpstate (fd (use)))
;;* lme

;;* lmx 359 system/sepolicy/private/dumpstate.te

(allow dumpstate hal_weaver (memfd_file (read write getattr map)))
;;* lme

;;* lmx 359 system/sepolicy/private/dumpstate.te

(allow hal_weaver dumpstate (memfd_file (read write getattr map)))
;;* lme

;;* lmx 359 system/sepolicy/private/dumpstate.te

(allow hal_weaver_server dumpstate (fifo_file (write)))
;;* lme

;;* lmx 359 system/sepolicy/private/dumpstate.te

(allow hal_weaver_server dumpstate (fd (use)))
;;* lme

;;* lmx 360 system/sepolicy/private/dumpstate.te

(allow dumpstate hal_wifi (memfd_file (read write getattr map)))
;;* lme

;;* lmx 360 system/sepolicy/private/dumpstate.te

(allow hal_wifi dumpstate (memfd_file (read write getattr map)))
;;* lme

;;* lmx 360 system/sepolicy/private/dumpstate.te

(allow hal_wifi_server dumpstate (fifo_file (write)))
;;* lme

;;* lmx 360 system/sepolicy/private/dumpstate.te

(allow hal_wifi_server dumpstate (fd (use)))
;;* lme

;;* lmx 363 system/sepolicy/private/dumpstate.te

(allow dumpstate hal_vibrator (memfd_file (read write getattr map)))
;;* lme

;;* lmx 363 system/sepolicy/private/dumpstate.te

(allow hal_vibrator dumpstate (memfd_file (read write getattr map)))
;;* lme

;;* lmx 366 system/sepolicy/private/dumpstate.te

(allow dumpstate self (capability (sys_ptrace)))
(allow dumpstate self (cap_userns (sys_ptrace)))
;;* lme

;;* lmx 370 system/sepolicy/private/dumpstate.te

(allow dumpstate shell_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 371 system/sepolicy/private/dumpstate.te

(allow dumpstate shell_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 374 system/sepolicy/private/dumpstate.te

(allow dumpstate shell_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lme

;;* lmx 378 system/sepolicy/private/dumpstate.te

(allow dumpstate zygote_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lme

;;* lmx 381 system/sepolicy/private/dumpstate.te

(allow dumpstate bluetooth_data_file (dir (search)))
;;* lme

;;* lmx 382 system/sepolicy/private/dumpstate.te

(allow dumpstate bluetooth_logs_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 383 system/sepolicy/private/dumpstate.te

(allow dumpstate bluetooth_logs_data_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 384 system/sepolicy/private/dumpstate.te

(allow dumpstate bluetooth_logs_data_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 387 system/sepolicy/private/dumpstate.te

(allow dumpstate nfc_logs_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 388 system/sepolicy/private/dumpstate.te

(allow dumpstate nfc_logs_data_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 391 system/sepolicy/private/dumpstate.te

(allow dumpstate apex_module_data_file (dir (search)))
;;* lme

;;* lmx 392 system/sepolicy/private/dumpstate.te

(allow dumpstate apex_system_server_data_file (dir (search)))
;;* lme

;;* lmx 393 system/sepolicy/private/dumpstate.te

(allow dumpstate apex_uwb_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 394 system/sepolicy/private/dumpstate.te

(allow dumpstate apex_uwb_data_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 397 system/sepolicy/private/dumpstate.te

(allow dumpstate apex_wifi_data_file (dir (search)))
;;* lme

;;* lmx 403 system/sepolicy/private/dumpstate.te

(allow dumpstate logcat_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lme

;;* lmx 403 system/sepolicy/private/dumpstate.te

(allow dumpstate logdr_socket (sock_file (write)))
;;* lme

;;* lmx 403 system/sepolicy/private/dumpstate.te

(allow dumpstate logd (unix_stream_socket (connectto)))
;;* lme

;;* lmx 404 system/sepolicy/private/dumpstate.te

(allow dumpstate logd_socket (sock_file (write)))
;;* lme

;;* lmx 404 system/sepolicy/private/dumpstate.te

(allow dumpstate logd (unix_stream_socket (connectto)))
;;* lme

;;* lmx 405 system/sepolicy/private/dumpstate.te

(allow dumpstate runtime_event_log_tags_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 425 system/sepolicy/private/dumpstate.te

(allow dumpstate proc_net_type (file (ioctl read getattr lock map open watch watch_reads)))
(allow dumpstate proc_qtaguid_ctrl (file (ioctl read getattr lock map open watch watch_reads)))
(allow dumpstate proc_qtaguid_stat (file (ioctl read getattr lock map open watch watch_reads)))
(allow dumpstate proc_bootconfig (file (ioctl read getattr lock map open watch watch_reads)))
(allow dumpstate proc_buddyinfo (file (ioctl read getattr lock map open watch watch_reads)))
(allow dumpstate proc_cgroups (file (ioctl read getattr lock map open watch watch_reads)))
(allow dumpstate proc_cmdline (file (ioctl read getattr lock map open watch watch_reads)))
(allow dumpstate proc_meminfo (file (ioctl read getattr lock map open watch watch_reads)))
(allow dumpstate proc_modules (file (ioctl read getattr lock map open watch watch_reads)))
(allow dumpstate proc_pagetypeinfo (file (ioctl read getattr lock map open watch watch_reads)))
(allow dumpstate proc_pipe_conf (file (ioctl read getattr lock map open watch watch_reads)))
(allow dumpstate proc_slabinfo (file (ioctl read getattr lock map open watch watch_reads)))
(allow dumpstate proc_version (file (ioctl read getattr lock map open watch watch_reads)))
(allow dumpstate proc_vmallocinfo (file (ioctl read getattr lock map open watch watch_reads)))
(allow dumpstate proc_vmstat (file (ioctl read getattr lock map open watch watch_reads)))
(allow dumpstate proc_allocinfo (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 428 system/sepolicy/private/dumpstate.te

(allow dumpstate net_data_file (dir (search)))
;;* lme

;;* lmx 429 system/sepolicy/private/dumpstate.te

(allow dumpstate net_data_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 432 system/sepolicy/private/dumpstate.te

(allow dumpstate self (netlink_tcpdiag_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
;;* lme

;;* lmx 434 system/sepolicy/private/dumpstate.te

(allow dumpstate self (netlink_tcpdiag_socket (nlmsg_read)))
;;* lme

;;* lmx 436 system/sepolicy/private/dumpstate.te

(allow dumpstate self (netlink_tcpdiag_socket (nlmsg)))
;;* lme

;;* lmx 437 system/sepolicy/private/dumpstate.te

(allowx dumpstate self (nlmsg netlink_tcpdiag_socket (0x14)))
;;* lme

;;* lmx 438 system/sepolicy/private/dumpstate.te

(allowx dumpstate self (nlmsg netlink_route_socket (0x12 0x1e)))
;;* lme

;;* lmx 441 system/sepolicy/private/dumpstate.te

(allow dumpstate tombstone_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 442 system/sepolicy/private/dumpstate.te

(allow dumpstate tombstone_data_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 445 system/sepolicy/private/dumpstate.te

(allow dumpstate cache_recovery_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 446 system/sepolicy/private/dumpstate.te

(allow dumpstate cache_recovery_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 449 system/sepolicy/private/dumpstate.te

(allow dumpstate recovery_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 450 system/sepolicy/private/dumpstate.te

(allow dumpstate recovery_data_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 453 system/sepolicy/private/dumpstate.te

(allow dumpstate update_engine_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
(allow dumpstate update_engine_log_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 454 system/sepolicy/private/dumpstate.te

(allow dumpstate update_engine_data_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow dumpstate update_engine_log_data_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 456 system/sepolicy/private/dumpstate.te

(allow dumpstate snapuserd_log_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 457 system/sepolicy/private/dumpstate.te

(allow dumpstate snapuserd_log_data_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 460 system/sepolicy/private/dumpstate.te

(allow dumpstate user_profile_root_file (dir (ioctl read getattr lock open watch watch_reads search)))
(allow dumpstate user_profile_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 460 system/sepolicy/private/dumpstate.te

(allow dumpstate user_profile_data_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 466 system/sepolicy/private/dumpstate.te

(allow dumpstate misc_logd_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 467 system/sepolicy/private/dumpstate.te

(allow dumpstate misc_logd_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 470 system/sepolicy/private/dumpstate.te

(allow dumpstate prereboot_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 471 system/sepolicy/private/dumpstate.te

(allow dumpstate prereboot_data_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 473 system/sepolicy/private/dumpstate.te

(allow dumpstate app_fuse_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 474 system/sepolicy/private/dumpstate.te

(allow dumpstate overlayfs_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 486 system/sepolicy/private/dumpstate.te

(allow dumpstate base_typeattr_558 (service_manager (find)))
;;* lme

;;* lmx 490 system/sepolicy/private/dumpstate.te

(neverallow dumpstate vold (binder (call)))
;;* lme

(dontaudit dumpstate hal_service_type (service_manager (find)))
(dontaudit dumpstate apex_service (service_manager (find)))
(dontaudit dumpstate dumpstate_service (service_manager (find)))
(dontaudit dumpstate fwk_vold_service (service_manager (find)))
(dontaudit dumpstate gatekeeper_service (service_manager (find)))
(dontaudit dumpstate virtual_touchpad_service (service_manager (find)))
(dontaudit dumpstate vold_service (service_manager (find)))
(dontaudit dumpstate vold (binder (call)))
(dontaudit dumpstate hwservice_manager_type (hwservice_manager (find)))
;;* lmx 509 system/sepolicy/private/dumpstate.te

(allow dumpstate servicemanager (service_manager (list)))
;;* lme

;;* lmx 510 system/sepolicy/private/dumpstate.te

(allow dumpstate hwservicemanager (hwservice_manager (list)))
;;* lme

;;* lmx 512 system/sepolicy/private/dumpstate.te

(allow dumpstate devpts (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 515 system/sepolicy/private/dumpstate.te

(allow dumpstate property_type (file (read getattr map open)))
;;* lme

;;* lmx 520 system/sepolicy/private/dumpstate.te

(allow dumpstate media_rw_data_file (dir (getattr)))
;;* lme

;;* lmx 521 system/sepolicy/private/dumpstate.te

(allow dumpstate proc_interrupts (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 522 system/sepolicy/private/dumpstate.te

(allow dumpstate proc_zoneinfo (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 525 system/sepolicy/private/dumpstate.te

(allow dumpstate dumpstate_service (service_manager (add find)))
;;* lme

;;* lmx 525 system/sepolicy/private/dumpstate.te

(neverallow base_typeattr_559 dumpstate_service (service_manager (add)))
;;* lme

;;* lmx 525 system/sepolicy/private/dumpstate.te

(allow dumpstate su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 528 system/sepolicy/private/dumpstate.te

(allow dumpstate proc_stat (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 530 system/sepolicy/private/dumpstate.te

(allow dumpstate proc_pressure_cpu (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 531 system/sepolicy/private/dumpstate.te

(allow dumpstate proc_pressure_mem (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 532 system/sepolicy/private/dumpstate.te

(allow dumpstate proc_pressure_io (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 535 system/sepolicy/private/dumpstate.te

(allow dumpstate proc_pid_max (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 538 system/sepolicy/private/dumpstate.te

(allow dumpstate installd (binder (call transfer)))
;;* lme

;;* lmx 538 system/sepolicy/private/dumpstate.te

(allow installd dumpstate (binder (transfer)))
;;* lme

;;* lmx 538 system/sepolicy/private/dumpstate.te

(allow dumpstate installd (fd (use)))
;;* lme

;;* lmx 541 system/sepolicy/private/dumpstate.te

(allow dumpstate self (netlink_xfrm_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
;;* lme

;;* lmx 543 system/sepolicy/private/dumpstate.te

(allow dumpstate self (netlink_xfrm_socket (nlmsg_read)))
;;* lme

;;* lmx 545 system/sepolicy/private/dumpstate.te

(allow dumpstate self (netlink_xfrm_socket (nlmsg)))
;;* lme

;;* lmx 546 system/sepolicy/private/dumpstate.te

(allowx dumpstate self (nlmsg netlink_xfrm_socket (0x15)))
;;* lme

;;* lmx 549 system/sepolicy/private/dumpstate.te

(allow dumpstate self (netlink_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
;;* lme

;;* lmx 551 system/sepolicy/private/dumpstate.te

(allow dumpstate self (netlink_generic_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
;;* lme

;;* lmx 554 system/sepolicy/private/dumpstate.te

(allow dumpstate domain (socket (getattr)))
(allow dumpstate domain (tcp_socket (getattr)))
(allow dumpstate domain (udp_socket (getattr)))
(allow dumpstate domain (rawip_socket (getattr)))
(allow dumpstate domain (netlink_socket (getattr)))
(allow dumpstate domain (packet_socket (getattr)))
(allow dumpstate domain (key_socket (getattr)))
(allow dumpstate domain (unix_stream_socket (getattr)))
(allow dumpstate domain (unix_dgram_socket (getattr)))
(allow dumpstate domain (netlink_route_socket (getattr)))
(allow dumpstate domain (netlink_tcpdiag_socket (getattr)))
(allow dumpstate domain (netlink_nflog_socket (getattr)))
(allow dumpstate domain (netlink_xfrm_socket (getattr)))
(allow dumpstate domain (netlink_selinux_socket (getattr)))
(allow dumpstate domain (netlink_audit_socket (getattr)))
(allow dumpstate domain (netlink_dnrt_socket (getattr)))
(allow dumpstate domain (netlink_kobject_uevent_socket (getattr)))
(allow dumpstate domain (appletalk_socket (getattr)))
(allow dumpstate domain (tun_socket (getattr)))
(allow dumpstate domain (netlink_iscsi_socket (getattr)))
(allow dumpstate domain (netlink_fib_lookup_socket (getattr)))
(allow dumpstate domain (netlink_connector_socket (getattr)))
(allow dumpstate domain (netlink_netfilter_socket (getattr)))
(allow dumpstate domain (netlink_generic_socket (getattr)))
(allow dumpstate domain (netlink_scsitransport_socket (getattr)))
(allow dumpstate domain (netlink_rdma_socket (getattr)))
(allow dumpstate domain (netlink_crypto_socket (getattr)))
(allow dumpstate domain (sctp_socket (getattr)))
(allow dumpstate domain (icmp_socket (getattr)))
(allow dumpstate domain (ax25_socket (getattr)))
(allow dumpstate domain (ipx_socket (getattr)))
(allow dumpstate domain (netrom_socket (getattr)))
(allow dumpstate domain (atmpvc_socket (getattr)))
(allow dumpstate domain (x25_socket (getattr)))
(allow dumpstate domain (rose_socket (getattr)))
(allow dumpstate domain (decnet_socket (getattr)))
(allow dumpstate domain (atmsvc_socket (getattr)))
(allow dumpstate domain (rds_socket (getattr)))
(allow dumpstate domain (irda_socket (getattr)))
(allow dumpstate domain (pppox_socket (getattr)))
(allow dumpstate domain (llc_socket (getattr)))
(allow dumpstate domain (can_socket (getattr)))
(allow dumpstate domain (tipc_socket (getattr)))
(allow dumpstate domain (bluetooth_socket (getattr)))
(allow dumpstate domain (iucv_socket (getattr)))
(allow dumpstate domain (rxrpc_socket (getattr)))
(allow dumpstate domain (isdn_socket (getattr)))
(allow dumpstate domain (phonet_socket (getattr)))
(allow dumpstate domain (ieee802154_socket (getattr)))
(allow dumpstate domain (caif_socket (getattr)))
(allow dumpstate domain (alg_socket (getattr)))
(allow dumpstate domain (nfc_socket (getattr)))
(allow dumpstate domain (vsock_socket (getattr)))
(allow dumpstate domain (kcm_socket (getattr)))
(allow dumpstate domain (qipcrtr_socket (getattr)))
(allow dumpstate domain (smc_socket (getattr)))
(allow dumpstate domain (xdp_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (tcp_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (udp_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (rawip_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (netlink_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (packet_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (key_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (unix_stream_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (unix_dgram_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (netlink_route_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (netlink_tcpdiag_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (netlink_nflog_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (netlink_xfrm_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (netlink_selinux_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (netlink_audit_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (netlink_dnrt_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (netlink_kobject_uevent_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (appletalk_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (tun_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (netlink_iscsi_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (netlink_fib_lookup_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (netlink_connector_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (netlink_netfilter_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (netlink_generic_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (netlink_scsitransport_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (netlink_rdma_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (netlink_crypto_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (sctp_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (icmp_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (ax25_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (ipx_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (netrom_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (atmpvc_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (x25_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (rose_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (decnet_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (atmsvc_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (rds_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (irda_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (pppox_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (llc_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (can_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (tipc_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (bluetooth_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (iucv_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (rxrpc_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (isdn_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (phonet_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (ieee802154_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (caif_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (alg_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (nfc_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (vsock_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (kcm_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (qipcrtr_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (smc_socket (getattr)))
(allow dumpstate pdx_endpoint_socket_type (xdp_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (socket (getattr)))
(allow dumpstate pdx_channel_socket_type (tcp_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (udp_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (rawip_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (netlink_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (packet_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (key_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (unix_stream_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (unix_dgram_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (netlink_route_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (netlink_tcpdiag_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (netlink_nflog_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (netlink_xfrm_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (netlink_selinux_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (netlink_audit_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (netlink_dnrt_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (netlink_kobject_uevent_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (appletalk_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (tun_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (netlink_iscsi_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (netlink_fib_lookup_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (netlink_connector_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (netlink_netfilter_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (netlink_generic_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (netlink_scsitransport_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (netlink_rdma_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (netlink_crypto_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (sctp_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (icmp_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (ax25_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (ipx_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (netrom_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (atmpvc_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (x25_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (rose_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (decnet_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (atmsvc_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (rds_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (irda_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (pppox_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (llc_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (can_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (tipc_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (bluetooth_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (iucv_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (rxrpc_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (isdn_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (phonet_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (ieee802154_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (caif_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (alg_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (nfc_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (vsock_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (kcm_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (qipcrtr_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (smc_socket (getattr)))
(allow dumpstate pdx_channel_socket_type (xdp_socket (getattr)))
;;* lme

;;* lmx 557 system/sepolicy/private/dumpstate.te

(allow dumpstate linkerconfig_file (dir (read open)))
;;* lme

(dontaudit dumpstate apk_data_file (dir (search)))
(dontaudit dumpstate vendor_apex_file (dir (search)))
(dontaudit dumpstate mnt_user_file (dir (search)))
(dontaudit dumpstate mnt_vendor_file (dir (search)))
(dontaudit dumpstate mnt_product_file (dir (search)))
(dontaudit dumpstate mirror_data_file (dir (search)))
(dontaudit dumpstate linkerconfig_file (dir (getattr)))
(dontaudit dumpstate mnt_user_file (dir (getattr)))
(dontaudit dumpstate apex_mnt_dir (dir (getattr)))
(dontaudit dumpstate mirror_data_file (dir (getattr)))
(dontaudit dumpstate vm_data_file (dir (getattr)))
;;* lmx 577 system/sepolicy/private/dumpstate.te

(allow dumpstate virtualizationservice (binder (call transfer)))
;;* lme

;;* lmx 577 system/sepolicy/private/dumpstate.te

(allow virtualizationservice dumpstate (binder (transfer)))
;;* lme

;;* lmx 577 system/sepolicy/private/dumpstate.te

(allow dumpstate virtualizationservice (fd (use)))
;;* lme

;;* lmx 580 system/sepolicy/private/dumpstate.te

(allow dumpstate bufferhubd (binder (call transfer)))
;;* lme

;;* lmx 580 system/sepolicy/private/dumpstate.te

(allow bufferhubd dumpstate (binder (transfer)))
;;* lme

;;* lmx 580 system/sepolicy/private/dumpstate.te

(allow dumpstate bufferhubd (fd (use)))
;;* lme

;;* lmx 583 system/sepolicy/private/dumpstate.te

(allow dumpstate mediaswcodec (binder (call transfer)))
;;* lme

;;* lmx 583 system/sepolicy/private/dumpstate.te

(allow mediaswcodec dumpstate (binder (transfer)))
;;* lme

;;* lmx 583 system/sepolicy/private/dumpstate.te

(allow dumpstate mediaswcodec (fd (use)))
;;* lme

;;* lmx 586 system/sepolicy/private/dumpstate.te

(allow dumpstate snapshotctl_log_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 587 system/sepolicy/private/dumpstate.te

(allow dumpstate snapshotctl_log_data_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 590 system/sepolicy/private/dumpstate.te

(allow dumpstate binderfs_logs (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 591 system/sepolicy/private/dumpstate.te

(allow dumpstate binderfs_logs (file (ioctl read getattr lock map open watch watch_reads)))
(allow dumpstate binderfs_logs_proc (file (ioctl read getattr lock map open watch watch_reads)))
(allow dumpstate binderfs_logs_transactions (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

(dontaudit dumpstate binderfs_logs (file (ioctl read getattr lock map open watch watch_reads)))
(dontaudit dumpstate binderfs_logs_proc (file (ioctl read getattr lock map open watch watch_reads)))
(dontaudit dumpstate binderfs_logs_transactions (file (ioctl read getattr lock map open watch watch_reads)))
;;* lmx 603 system/sepolicy/private/dumpstate.te

(allow dumpstate binderfs_logs_state_hashed (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 604 system/sepolicy/private/dumpstate.te

(allow dumpstate binderfs_logs_stats (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 605 system/sepolicy/private/dumpstate.te

(allow dumpstate binderfs_logs_transaction_history (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 607 system/sepolicy/private/dumpstate.te

(allow dumpstate apex_mnt_dir (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 607 system/sepolicy/private/dumpstate.te

(allow dumpstate apex_info_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 607 system/sepolicy/private/dumpstate.te

(allow dumpstate vendor_apex_metadata_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 607 system/sepolicy/private/dumpstate.te

(allow dumpstate vendor_apex_metadata_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow dumpstate vendor_apex_metadata_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 610 system/sepolicy/private/dumpstate.te

(allow dumpstate shutdown_checkpoints_system_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 611 system/sepolicy/private/dumpstate.te

(allow dumpstate shutdown_checkpoints_system_data_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 614 system/sepolicy/private/dumpstate.te

(allow dumpstate wifi_mainline_supplicant (binder (call transfer)))
;;* lme

;;* lmx 614 system/sepolicy/private/dumpstate.te

(allow wifi_mainline_supplicant dumpstate (binder (transfer)))
;;* lme

;;* lmx 614 system/sepolicy/private/dumpstate.te

(allow dumpstate wifi_mainline_supplicant (fd (use)))
;;* lme

;;* lmx 616 system/sepolicy/private/dumpstate.te

(allow dumpstate aisealhostservice (binder (call transfer)))
;;* lme

;;* lmx 616 system/sepolicy/private/dumpstate.te

(allow aisealhostservice dumpstate (binder (transfer)))
;;* lme

;;* lmx 616 system/sepolicy/private/dumpstate.te

(allow dumpstate aisealhostservice (fd (use)))
;;* lme

;;* lmx 627 system/sepolicy/private/dumpstate.te

(neverallow dumpstate base_typeattr_248 (process (ptrace)))
;;* lme

;;* lmx 636 system/sepolicy/private/dumpstate.te

(neverallow base_typeattr_560 dumpstate_service (service_manager (find)))
;;* lme

;;* lmx 646 system/sepolicy/private/dumpstate.te

(neverallow base_typeattr_561 apex_uwb_data_file (dir (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 654 system/sepolicy/private/dumpstate.te

(neverallow base_typeattr_561 apex_uwb_data_file (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 1 system/sepolicy/private/e2fs.te

(allow e2fs devpts (chr_file (ioctl read write getattr)))
;;* lme

;;* lmx 3 system/sepolicy/private/e2fs.te

(allow e2fs dev_type (blk_file (getattr)))
;;* lme

;;* lmx 4 system/sepolicy/private/e2fs.te

(allow e2fs block_device (dir (search)))
;;* lme

;;* lmx 5 system/sepolicy/private/e2fs.te

(allow e2fs userdata_block_device (blk_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 6 system/sepolicy/private/e2fs.te

(allow e2fs metadata_block_device (blk_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 7 system/sepolicy/private/e2fs.te

(allow e2fs dm_device (blk_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 8 system/sepolicy/private/e2fs.te

(allow e2fs zoned_block_device (blk_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 10 system/sepolicy/private/e2fs.te

(allow e2fs vold (fd (use)))
;;* lme

;;* lmx 11 system/sepolicy/private/e2fs.te

(allow e2fs vold (fifo_file (read write getattr)))
;;* lme

;;* lmx 13 system/sepolicy/private/e2fs.te

(allow e2fs sysfs_dm (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 14 system/sepolicy/private/e2fs.te

(allow e2fs sysfs_dm (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 18 system/sepolicy/private/e2fs.te

(allowx e2fs dm_device (ioctl blk_file (0x125e 0x1277 (range 0x127b 0x127d) (range 0x1282 0x1283))))
(allowx e2fs userdata_block_device (ioctl blk_file (0x125e 0x1277 (range 0x127b 0x127d) (range 0x1282 0x1283))))
(allowx e2fs zoned_block_device (ioctl blk_file (0x125e 0x1277 (range 0x127b 0x127d) (range 0x1282 0x1283))))
(allowx e2fs metadata_block_device (ioctl blk_file (0x125e 0x1277 (range 0x127b 0x127d) (range 0x1282 0x1283))))
;;* lme

;;* lmx 24 system/sepolicy/private/e2fs.te

(allow e2fs proc_filesystems (file (ioctl read getattr lock map open watch watch_reads)))
(allow e2fs proc_mounts (file (ioctl read getattr lock map open watch watch_reads)))
(allow e2fs proc_swaps (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 27 system/sepolicy/private/e2fs.te

(allow e2fs sysfs_fs_ext4_features (dir (search)))
;;* lme

;;* lmx 28 system/sepolicy/private/e2fs.te

(allow e2fs sysfs_fs_ext4_features (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 31 system/sepolicy/private/e2fs.te

(allow e2fs file_contexts_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 4 system/sepolicy/private/early_virtmgr.te

(allow early_virtmgr_vendor crosvm_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 4 system/sepolicy/private/early_virtmgr.te

(allow early_virtmgr_vendor crosvm_vendor (process (transition)))
;;* lme

;;* lmx 4 system/sepolicy/private/early_virtmgr.te

(allow crosvm_vendor crosvm_exec (file (read getattr map execute open entrypoint)))
;;* lme

;;* lmx 4 system/sepolicy/private/early_virtmgr.te

(allow crosvm_vendor early_virtmgr_vendor (process (sigchld)))
;;* lme

(dontaudit early_virtmgr_vendor crosvm_vendor (process (noatsecure)))
;;* lmx 4 system/sepolicy/private/early_virtmgr.te

(allow early_virtmgr_vendor crosvm_vendor (process (siginh rlimitinh)))
;;* lme

(typetransition early_virtmgr_vendor crosvm_exec process crosvm_vendor)
;;* lmx 7 system/sepolicy/private/early_virtmgr.te

(neverallow coredomain early_virtmgr_vendor (process (transition)))
;;* lme

;;* lmx 9 system/sepolicy/private/early_virtmgr.te

(neverallow base_typeattr_241 base_typeattr_562 (process (transition)))
;;* lme

;;* lmx 11 system/sepolicy/private/early_virtmgr.te

(allow early_virtmgr_domain system_bootstrap_lib_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 11 system/sepolicy/private/early_virtmgr.te

(allow early_virtmgr_domain system_bootstrap_lib_file (file (read getattr map execute open)))
;;* lme

;;* lmx 14 system/sepolicy/private/early_virtmgr.te

(allow early_virtmgr_domain vm_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 15 system/sepolicy/private/early_virtmgr.te

(allow early_virtmgr_domain vm_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 16 system/sepolicy/private/early_virtmgr.te

(allow early_virtmgr_domain vm_data_file (sock_file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 19 system/sepolicy/private/early_virtmgr.te

(allow early_virtmgr_domain adbd (fd (use)))
;;* lme

;;* lmx 20 system/sepolicy/private/early_virtmgr.te

(allow early_virtmgr_domain adbd (unix_stream_socket (read write getattr)))
;;* lme

;;* lmx 23 system/sepolicy/private/early_virtmgr.te

(allow early_virtmgr_domain devpts (chr_file (ioctl read write getattr)))
;;* lme

;;* lmx 26 system/sepolicy/private/early_virtmgr.te

(allow early_virtmgr_domain servicemanager (binder (call transfer)))
;;* lme

;;* lmx 26 system/sepolicy/private/early_virtmgr.te

(allow servicemanager early_virtmgr_domain (binder (call transfer)))
;;* lme

;;* lmx 29 system/sepolicy/private/early_virtmgr.te

(allow early_virtmgr_domain crosvm_domain (process (sigkill)))
;;* lme

;;* lmx 32 system/sepolicy/private/early_virtmgr.te

(allow early_virtmgr_domain apex_info_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 33 system/sepolicy/private/early_virtmgr.te

(allow early_virtmgr_domain apex_data_file (dir (search)))
;;* lme

(dontaudit early_virtmgr_domain self (dir (write)))
;;* lmx 39 system/sepolicy/private/early_virtmgr.te

(allow early_virtmgr_domain self (vsock_socket (read write create getattr setattr lock append map bind connect listen accept getopt setopt shutdown)))
;;* lme

;;* lmx 42 system/sepolicy/private/early_virtmgr.te

(allow early_virtmgr_domain hypervisor_prop (file (read getattr map open)))
;;* lme

;;* lmx 43 system/sepolicy/private/early_virtmgr.te

(allow early_virtmgr_domain hypervisor_pvmfw_prop (file (read getattr map open)))
;;* lme

;;* lmx 44 system/sepolicy/private/early_virtmgr.te

(allow early_virtmgr_domain hypervisor_restricted_prop (file (read getattr map open)))
;;* lme

;;* lmx 45 system/sepolicy/private/early_virtmgr.te

(allow early_virtmgr_domain hypervisor_virtualizationmanager_prop (file (read getattr map open)))
;;* lme

;;* lmx 48 system/sepolicy/private/early_virtmgr.te

(allow early_virtmgr_domain proc_dt_avf (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 48 system/sepolicy/private/early_virtmgr.te

(allow early_virtmgr_domain proc_dt_avf (file (ioctl read getattr lock map open watch watch_reads)))
(allow early_virtmgr_domain proc_dt_avf (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 49 system/sepolicy/private/early_virtmgr.te

(allow early_virtmgr_domain sysfs_dt_avf (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 49 system/sepolicy/private/early_virtmgr.te

(allow early_virtmgr_domain sysfs_dt_avf (file (ioctl read getattr lock map open watch watch_reads)))
(allow early_virtmgr_domain sysfs_dt_avf (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 55 system/sepolicy/private/early_virtmgr.te

(allow early_virtmgr_domain crosvm_domain (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 55 system/sepolicy/private/early_virtmgr.te

(allow early_virtmgr_domain crosvm_domain (file (ioctl read getattr lock map open watch watch_reads)))
(allow early_virtmgr_domain crosvm_domain (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 60 system/sepolicy/private/early_virtmgr.te

(allow early_virtmgr_domain self (capability (net_bind_service ipc_lock sys_resource)))
(allow early_virtmgr_domain self (cap_userns (net_bind_service ipc_lock sys_resource)))
;;* lme

;;* lmx 63 system/sepolicy/private/early_virtmgr.te

(allow early_virtmgr_domain kmsg_debug_device (chr_file (write lock append map open)))
;;* lme

;;* lmx 66 system/sepolicy/private/early_virtmgr.te

(allow early_virtmgr_domain vendor_vm_file (file (read getattr)))
;;* lme

;;* lmx 67 system/sepolicy/private/early_virtmgr.te

(allow early_virtmgr_domain vendor_vm_data_file (file (read write getattr)))
;;* lme

;;* lmx 71 system/sepolicy/private/early_virtmgr.te

(allow early_virtmgr_domain tee_service_contexts_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 74 system/sepolicy/private/early_virtmgr.te

(allow early_virtmgr_domain selinuxfs (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 74 system/sepolicy/private/early_virtmgr.te

(allow early_virtmgr_domain selinuxfs (file (ioctl read getattr lock map open watch watch_reads)))
(allow early_virtmgr_domain selinuxfs (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 74 system/sepolicy/private/early_virtmgr.te

(allow early_virtmgr_domain selinuxfs (file (write lock append map open)))
;;* lme

;;* lmx 74 system/sepolicy/private/early_virtmgr.te

(allow early_virtmgr_domain kernel (security (compute_av)))
;;* lme

;;* lmx 74 system/sepolicy/private/early_virtmgr.te

(allow early_virtmgr_domain self (netlink_selinux_socket (read write create getattr setattr lock relabelfrom relabelto append bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
;;* lme

;;* lmx 81 system/sepolicy/private/early_virtmgr.te

(neverallow base_typeattr_563 vm_data_file (dir (write create setattr relabelfrom link rename add_name remove_name reparent rmdir)))
;;* lme

;;* lmx 82 system/sepolicy/private/early_virtmgr.te

(neverallow base_typeattr_564 vm_data_file (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 85 system/sepolicy/private/early_virtmgr.te

(neverallow base_typeattr_565 early_virtmgr_domain (vsock_socket (create bind connect listen accept)))
;;* lme

(typetransition ephemeral_app tmpfs file appdomain_tmpfs)
;;* lmx 17 system/sepolicy/private/ephemeral_app.te

(allow ephemeral_app ephemeral_app_userfaultfd (anon_inode (ioctl read create)))
;;* lme

(dontaudit su ephemeral_app_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lmx 17 system/sepolicy/private/ephemeral_app.te

(neverallow base_typeattr_566 ephemeral_app_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 17 system/sepolicy/private/ephemeral_app.te

(allow ephemeral_app appdomain_tmpfs (file (read write getattr map execute)))
;;* lme

;;* lmx 17 system/sepolicy/private/ephemeral_app.te

(allow ephemeral_app appdomain (memfd_file (read write getattr map execute)))
;;* lme

;;* lmx 17 system/sepolicy/private/ephemeral_app.te

(neverallow base_typeattr_567 base_typeattr_566 (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 17 system/sepolicy/private/ephemeral_app.te

(neverallow base_typeattr_568 ephemeral_app (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 17 system/sepolicy/private/ephemeral_app.te

(neverallow base_typeattr_569 ephemeral_app (process (ptrace)))
;;* lme

;;* lmx 17 system/sepolicy/private/ephemeral_app.te

(neverallow ephemeral_app base_typeattr_570 (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 20 system/sepolicy/private/ephemeral_app.te

(allow ephemeral_app sdcard_type (file (ioctl read write getattr lock append)))
(allow ephemeral_app fuse (file (ioctl read write getattr lock append)))
(allow ephemeral_app media_rw_data_file (file (ioctl read write getattr lock append)))
;;* lme

;;* lmx 24 system/sepolicy/private/ephemeral_app.te

(allow ephemeral_app privapp_data_file (file (ioctl read getattr lock map execute open watch watch_reads)))
;;* lme

;;* lmx 25 system/sepolicy/private/ephemeral_app.te

(allow ephemeral_app app_data_file (file (ioctl read getattr lock map execute open watch watch_reads)))
;;* lme

;;* lmx 28 system/sepolicy/private/ephemeral_app.te

(allow ephemeral_app privapp_data_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 31 system/sepolicy/private/ephemeral_app.te

(allow ephemeral_app rs_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 31 system/sepolicy/private/ephemeral_app.te

(allow ephemeral_app rs (process (transition)))
;;* lme

;;* lmx 31 system/sepolicy/private/ephemeral_app.te

(allow rs rs_exec (file (read getattr map execute open entrypoint)))
;;* lme

;;* lmx 31 system/sepolicy/private/ephemeral_app.te

(allow rs ephemeral_app (process (sigchld)))
;;* lme

(dontaudit ephemeral_app rs (process (noatsecure)))
;;* lmx 31 system/sepolicy/private/ephemeral_app.te

(allow ephemeral_app rs (process (siginh rlimitinh)))
;;* lme

(typetransition ephemeral_app rs_exec process rs)
;;* lmx 35 system/sepolicy/private/ephemeral_app.te

(allow ephemeral_app app_exec_data_file (file (ioctl read getattr lock map unlink execute open watch watch_reads)))
;;* lme

;;* lmx 38 system/sepolicy/private/ephemeral_app.te

(allow ephemeral_app audioserver_service (service_manager (find)))
;;* lme

;;* lmx 39 system/sepolicy/private/ephemeral_app.te

(allow ephemeral_app cameraserver_service (service_manager (find)))
;;* lme

;;* lmx 40 system/sepolicy/private/ephemeral_app.te

(allow ephemeral_app mediaserver_service (service_manager (find)))
;;* lme

;;* lmx 41 system/sepolicy/private/ephemeral_app.te

(allow ephemeral_app mediaextractor_service (service_manager (find)))
;;* lme

;;* lmx 42 system/sepolicy/private/ephemeral_app.te

(allow ephemeral_app mediametrics_service (service_manager (find)))
;;* lme

;;* lmx 43 system/sepolicy/private/ephemeral_app.te

(allow ephemeral_app mediadrmserver_service (service_manager (find)))
;;* lme

;;* lmx 44 system/sepolicy/private/ephemeral_app.te

(allow ephemeral_app drmserver_service (service_manager (find)))
;;* lme

;;* lmx 45 system/sepolicy/private/ephemeral_app.te

(allow ephemeral_app radio_service (service_manager (find)))
;;* lme

;;* lmx 46 system/sepolicy/private/ephemeral_app.te

(allow ephemeral_app ephemeral_app_api_service (service_manager (find)))
;;* lme

;;* lmx 51 system/sepolicy/private/ephemeral_app.te

(allow ephemeral_app system_server (udp_socket (read write getattr connect getopt setopt recvfrom sendto)))
;;* lme

;;* lmx 53 system/sepolicy/private/ephemeral_app.te

(allow ephemeral_app ashmem_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 59 system/sepolicy/private/ephemeral_app.te

(neverallow ephemeral_app app_data_file_type (file (execute_no_trans)))
;;* lme

;;* lmx 62 system/sepolicy/private/ephemeral_app.te

(neverallow ephemeral_app domain (netlink_kobject_uevent_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
;;* lme

;;* lmx 65 system/sepolicy/private/ephemeral_app.te

(neverallow ephemeral_app domain (netlink_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
;;* lme

;;* lmx 69 system/sepolicy/private/ephemeral_app.te

(neverallow ephemeral_app debugfs_type (file (read)))
;;* lme

;;* lmx 72 system/sepolicy/private/ephemeral_app.te

(neverallow ephemeral_app gpu_device (chr_file (execute)))
;;* lme

;;* lmx 75 system/sepolicy/private/ephemeral_app.te

(neverallow ephemeral_app sysfs (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
;;* lme

;;* lmx 79 system/sepolicy/private/ephemeral_app.te

(neverallow ephemeral_app proc (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
;;* lme

;;* lmx 82 system/sepolicy/private/ephemeral_app.te

(neverallow ephemeral_app sdcard_type (file (create open)))
(neverallow ephemeral_app fuse (file (create open)))
(neverallow ephemeral_app media_rw_data_file (file (create open)))
;;* lme

;;* lmx 83 system/sepolicy/private/ephemeral_app.te

(neverallow ephemeral_app sdcard_type (dir (search)))
(neverallow ephemeral_app fuse (dir (search)))
(neverallow ephemeral_app media_rw_data_file (dir (search)))
;;* lme

;;* lmx 87 system/sepolicy/private/ephemeral_app.te

(neverallow ephemeral_app proc_net (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 7 system/sepolicy/private/evsmanagerd.te

(allow init evsmanagerd_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 7 system/sepolicy/private/evsmanagerd.te

(allow init evsmanagerd (process (transition)))
;;* lme

;;* lmx 7 system/sepolicy/private/evsmanagerd.te

(allow evsmanagerd evsmanagerd_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init evsmanagerd (process (noatsecure)))
;;* lmx 7 system/sepolicy/private/evsmanagerd.te

(allow init evsmanagerd (process (siginh rlimitinh)))
;;* lme

(typetransition init evsmanagerd_exec process evsmanagerd)
;;* lmx 13 system/sepolicy/private/evsmanagerd.te

(allow evsmanagerd evsmanagerd_service (service_manager (add find)))
;;* lme

;;* lmx 13 system/sepolicy/private/evsmanagerd.te

(neverallow base_typeattr_571 evsmanagerd_service (service_manager (add)))
;;* lme

;;* lmx 13 system/sepolicy/private/evsmanagerd.te

(allow evsmanagerd su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 16 system/sepolicy/private/evsmanagerd.te

(allow evsmanagerd servicemanager (binder (call transfer)))
;;* lme

;;* lmx 16 system/sepolicy/private/evsmanagerd.te

(allow servicemanager evsmanagerd (binder (call transfer)))
;;* lme

;;* lmx 19 system/sepolicy/private/evsmanagerd.te

(allow evsmanagerd system_server (binder (call transfer)))
;;* lme

;;* lmx 19 system/sepolicy/private/evsmanagerd.te

(allow system_server evsmanagerd (binder (transfer)))
;;* lme

;;* lmx 19 system/sepolicy/private/evsmanagerd.te

(allow evsmanagerd system_server (fd (use)))
;;* lme

;;* lmx 22 system/sepolicy/private/evsmanagerd.te

(allow evsmanagerd hal_evs (memfd_file (read write getattr map)))
;;* lme

;;* lmx 22 system/sepolicy/private/evsmanagerd.te

(allow hal_evs evsmanagerd (memfd_file (read write getattr map)))
;;* lme

;;* lmx 25 system/sepolicy/private/evsmanagerd.te

(allow evsmanagerd shell (fd (use)))
;;* lme

;;* lmx 26 system/sepolicy/private/evsmanagerd.te

(allow evsmanagerd shell (fifo_file (write)))
;;* lme

;;* lmx 29 system/sepolicy/private/evsmanagerd.te

(allow evsmanagerd hal_graphics_allocator (fd (use)))
;;* lme

;;* lmx 32 system/sepolicy/private/evsmanagerd.te

(allow evsmanagerd statsbootstrap_service (service_manager (find)))
;;* lme

;;* lmx 35 system/sepolicy/private/evsmanagerd.te

(allow evsmanagerd appdomain (binder (call transfer)))
;;* lme

;;* lmx 35 system/sepolicy/private/evsmanagerd.te

(allow appdomain evsmanagerd (binder (transfer)))
;;* lme

;;* lmx 35 system/sepolicy/private/evsmanagerd.te

(allow evsmanagerd appdomain (fd (use)))
;;* lme

;;* lmx 38 system/sepolicy/private/evsmanagerd.te

(allow evsmanagerd hal_evs_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 39 system/sepolicy/private/evsmanagerd.te

(allow evsmanagerd hidl_base_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 3 system/sepolicy/private/extra_free_kbytes.te

(allow init extra_free_kbytes_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 3 system/sepolicy/private/extra_free_kbytes.te

(allow init extra_free_kbytes (process (transition)))
;;* lme

;;* lmx 3 system/sepolicy/private/extra_free_kbytes.te

(allow extra_free_kbytes extra_free_kbytes_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init extra_free_kbytes (process (noatsecure)))
;;* lmx 3 system/sepolicy/private/extra_free_kbytes.te

(allow init extra_free_kbytes (process (siginh rlimitinh)))
;;* lme

(typetransition init extra_free_kbytes_exec process extra_free_kbytes)
;;* lmx 6 system/sepolicy/private/extra_free_kbytes.te

(allow extra_free_kbytes property_socket (sock_file (write)))
;;* lme

;;* lmx 6 system/sepolicy/private/extra_free_kbytes.te

(allow extra_free_kbytes init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 6 system/sepolicy/private/extra_free_kbytes.te

(allow extra_free_kbytes init_storage_prop (property_service (set)))
;;* lme

;;* lmx 6 system/sepolicy/private/extra_free_kbytes.te

(allow extra_free_kbytes init_storage_prop (file (read getattr map open)))
;;* lme

;;* lmx 9 system/sepolicy/private/extra_free_kbytes.te

(allow extra_free_kbytes shell_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lme

;;* lmx 10 system/sepolicy/private/extra_free_kbytes.te

(allow extra_free_kbytes system_file (file (getattr map execute execute_no_trans)))
;;* lme

;;* lmx 11 system/sepolicy/private/extra_free_kbytes.te

(allow extra_free_kbytes toolbox_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lme

;;* lmx 14 system/sepolicy/private/extra_free_kbytes.te

(allow extra_free_kbytes proc_extra_free_kbytes (file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 15 system/sepolicy/private/extra_free_kbytes.te

(allow extra_free_kbytes proc_watermark_scale_factor (file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 16 system/sepolicy/private/extra_free_kbytes.te

(allow extra_free_kbytes proc_zoneinfo (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 169 system/sepolicy/private/fastbootd.te

(allow fastbootd self (capability (ipc_lock)))
;;* lme

;;* lmx 170 system/sepolicy/private/fastbootd.te

(allow fastbootd fastbootd_iouring (anon_inode (read write create map)))
;;* lme

;;* lmx 170 system/sepolicy/private/fastbootd.te

(allow fastbootd self (io_uring (sqpoll allowed)))
;;* lme

;;* lmx 170 system/sepolicy/private/fastbootd.te

(neverallow base_typeattr_572 fastbootd_iouring (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

(dontaudit fastbootd self (capability (ipc_lock)))
(dontaudit fastbootd self (cap_userns (ipc_lock)))
;;* lmx 180 system/sepolicy/private/fastbootd.te

(neverallow fastbootd data_file_type (file (execute execute_no_trans)))
;;* lme

;;* lmx 234 system/sepolicy/private/file.te

(allow fs_type self (filesystem (associate)))
;;* lme

;;* lmx 235 system/sepolicy/private/file.te

(allow cgroup tmpfs (filesystem (associate)))
;;* lme

;;* lmx 236 system/sepolicy/private/file.te

(allow cgroup_v2 tmpfs (filesystem (associate)))
;;* lme

;;* lmx 237 system/sepolicy/private/file.te

(allow cgroup_rc_file tmpfs (filesystem (associate)))
;;* lme

;;* lmx 238 system/sepolicy/private/file.te

(allow sysfs_type sysfs (filesystem (associate)))
;;* lme

;;* lmx 239 system/sepolicy/private/file.te

(allow debugfs_type debugfs (filesystem (associate)))
(allow debugfs_type debugfs_tracing (filesystem (associate)))
(allow debugfs_type debugfs_tracing_debug (filesystem (associate)))
;;* lme

;;* lmx 240 system/sepolicy/private/file.te

(allow file_type labeledfs (filesystem (associate)))
;;* lme

;;* lmx 241 system/sepolicy/private/file.te

(allow file_type tmpfs (filesystem (associate)))
;;* lme

;;* lmx 242 system/sepolicy/private/file.te

(allow file_type rootfs (filesystem (associate)))
;;* lme

;;* lmx 243 system/sepolicy/private/file.te

(allow dev_type tmpfs (filesystem (associate)))
;;* lme

;;* lmx 244 system/sepolicy/private/file.te

(allow app_fuse_file app_fusefs (filesystem (associate)))
;;* lme

;;* lmx 245 system/sepolicy/private/file.te

(allow postinstall_file self (filesystem (associate)))
;;* lme

;;* lmx 246 system/sepolicy/private/file.te

(allow proc_net proc (filesystem (associate)))
;;* lme

;;* lmx 255 system/sepolicy/private/file.te

(neverallow fs_type file_type (filesystem (associate)))
;;* lme

;;* lmx 3 system/sepolicy/private/fingerprintd.te

(allow init fingerprintd_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 3 system/sepolicy/private/fingerprintd.te

(allow init fingerprintd (process (transition)))
;;* lme

;;* lmx 3 system/sepolicy/private/fingerprintd.te

(allow fingerprintd fingerprintd_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init fingerprintd (process (noatsecure)))
;;* lmx 3 system/sepolicy/private/fingerprintd.te

(allow init fingerprintd (process (siginh rlimitinh)))
;;* lme

(typetransition init fingerprintd_exec process fingerprintd)
;;* lmx 5 system/sepolicy/private/fingerprintd.te

(allow fingerprintd servicemanager (binder (call transfer)))
;;* lme

;;* lmx 5 system/sepolicy/private/fingerprintd.te

(allow servicemanager fingerprintd (binder (call transfer)))
;;* lme

;;* lmx 8 system/sepolicy/private/fingerprintd.te

(allow fingerprintd system_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 11 system/sepolicy/private/fingerprintd.te

(allow fingerprintd fingerprintd_service (service_manager (add find)))
;;* lme

;;* lmx 11 system/sepolicy/private/fingerprintd.te

(neverallow base_typeattr_573 fingerprintd_service (service_manager (add)))
;;* lme

;;* lmx 11 system/sepolicy/private/fingerprintd.te

(allow fingerprintd su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 14 system/sepolicy/private/fingerprintd.te

(allow fingerprintd fingerprintd_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 17 system/sepolicy/private/fingerprintd.te

(allow fingerprintd fingerprintd_data_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
;;* lme

;;* lmx 20 system/sepolicy/private/fingerprintd.te

(allow fingerprintd apc_service (service_manager (find)))
;;* lme

;;* lmx 20 system/sepolicy/private/fingerprintd.te

(allow fingerprintd keystore_service (service_manager (find)))
;;* lme

;;* lmx 20 system/sepolicy/private/fingerprintd.te

(allow fingerprintd legacykeystore_service (service_manager (find)))
;;* lme

;;* lmx 20 system/sepolicy/private/fingerprintd.te

(allow fingerprintd keystore (binder (call transfer)))
;;* lme

;;* lmx 20 system/sepolicy/private/fingerprintd.te

(allow keystore fingerprintd (binder (transfer)))
;;* lme

;;* lmx 20 system/sepolicy/private/fingerprintd.te

(allow fingerprintd keystore (fd (use)))
;;* lme

;;* lmx 20 system/sepolicy/private/fingerprintd.te

(allow keystore fingerprintd (binder (call transfer)))
;;* lme

;;* lmx 20 system/sepolicy/private/fingerprintd.te

(allow fingerprintd keystore (binder (transfer)))
;;* lme

;;* lmx 20 system/sepolicy/private/fingerprintd.te

(allow keystore fingerprintd (fd (use)))
;;* lme

;;* lmx 21 system/sepolicy/private/fingerprintd.te

(allow fingerprintd keystore (keystore2 (add_auth)))
;;* lme

;;* lmx 24 system/sepolicy/private/fingerprintd.te

(allow fingerprintd system_server (binder (call transfer)))
;;* lme

;;* lmx 24 system/sepolicy/private/fingerprintd.te

(allow system_server fingerprintd (binder (transfer)))
;;* lme

;;* lmx 24 system/sepolicy/private/fingerprintd.te

(allow fingerprintd system_server (fd (use)))
;;* lme

;;* lmx 25 system/sepolicy/private/fingerprintd.te

(allow fingerprintd permission_service (service_manager (find)))
;;* lme

;;* lmx 3 system/sepolicy/private/flags_health_check.te

(allow init flags_health_check_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 3 system/sepolicy/private/flags_health_check.te

(allow init flags_health_check (process (transition)))
;;* lme

;;* lmx 3 system/sepolicy/private/flags_health_check.te

(allow flags_health_check flags_health_check_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init flags_health_check (process (noatsecure)))
;;* lmx 3 system/sepolicy/private/flags_health_check.te

(allow init flags_health_check (process (siginh rlimitinh)))
;;* lme

(typetransition init flags_health_check_exec process flags_health_check)
;;* lmx 5 system/sepolicy/private/flags_health_check.te

(allow flags_health_check property_socket (sock_file (write)))
;;* lme

;;* lmx 5 system/sepolicy/private/flags_health_check.te

(allow flags_health_check init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 5 system/sepolicy/private/flags_health_check.te

(allow flags_health_check device_config_boot_count_prop (property_service (set)))
;;* lme

;;* lmx 5 system/sepolicy/private/flags_health_check.te

(allow flags_health_check device_config_boot_count_prop (file (read getattr map open)))
;;* lme

;;* lmx 6 system/sepolicy/private/flags_health_check.te

(allow flags_health_check property_socket (sock_file (write)))
;;* lme

;;* lmx 6 system/sepolicy/private/flags_health_check.te

(allow flags_health_check init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 6 system/sepolicy/private/flags_health_check.te

(allow flags_health_check device_config_core_experiments_team_internal_prop (property_service (set)))
;;* lme

;;* lmx 6 system/sepolicy/private/flags_health_check.te

(allow flags_health_check device_config_core_experiments_team_internal_prop (file (read getattr map open)))
;;* lme

;;* lmx 7 system/sepolicy/private/flags_health_check.te

(allow flags_health_check property_socket (sock_file (write)))
;;* lme

;;* lmx 7 system/sepolicy/private/flags_health_check.te

(allow flags_health_check init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 7 system/sepolicy/private/flags_health_check.te

(allow flags_health_check device_config_edgetpu_native_prop (property_service (set)))
;;* lme

;;* lmx 7 system/sepolicy/private/flags_health_check.te

(allow flags_health_check device_config_edgetpu_native_prop (file (read getattr map open)))
;;* lme

;;* lmx 8 system/sepolicy/private/flags_health_check.te

(allow flags_health_check property_socket (sock_file (write)))
;;* lme

;;* lmx 8 system/sepolicy/private/flags_health_check.te

(allow flags_health_check init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 8 system/sepolicy/private/flags_health_check.te

(allow flags_health_check device_config_reset_performed_prop (property_service (set)))
;;* lme

;;* lmx 8 system/sepolicy/private/flags_health_check.te

(allow flags_health_check device_config_reset_performed_prop (file (read getattr map open)))
;;* lme

;;* lmx 9 system/sepolicy/private/flags_health_check.te

(allow flags_health_check property_socket (sock_file (write)))
;;* lme

;;* lmx 9 system/sepolicy/private/flags_health_check.te

(allow flags_health_check init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 9 system/sepolicy/private/flags_health_check.te

(allow flags_health_check device_config_runtime_native_boot_prop (property_service (set)))
;;* lme

;;* lmx 9 system/sepolicy/private/flags_health_check.te

(allow flags_health_check device_config_runtime_native_boot_prop (file (read getattr map open)))
;;* lme

;;* lmx 10 system/sepolicy/private/flags_health_check.te

(allow flags_health_check property_socket (sock_file (write)))
;;* lme

;;* lmx 10 system/sepolicy/private/flags_health_check.te

(allow flags_health_check init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 10 system/sepolicy/private/flags_health_check.te

(allow flags_health_check device_config_runtime_native_prop (property_service (set)))
;;* lme

;;* lmx 10 system/sepolicy/private/flags_health_check.te

(allow flags_health_check device_config_runtime_native_prop (file (read getattr map open)))
;;* lme

;;* lmx 11 system/sepolicy/private/flags_health_check.te

(allow flags_health_check property_socket (sock_file (write)))
;;* lme

;;* lmx 11 system/sepolicy/private/flags_health_check.te

(allow flags_health_check init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 11 system/sepolicy/private/flags_health_check.te

(allow flags_health_check device_config_input_native_boot_prop (property_service (set)))
;;* lme

;;* lmx 11 system/sepolicy/private/flags_health_check.te

(allow flags_health_check device_config_input_native_boot_prop (file (read getattr map open)))
;;* lme

;;* lmx 12 system/sepolicy/private/flags_health_check.te

(allow flags_health_check property_socket (sock_file (write)))
;;* lme

;;* lmx 12 system/sepolicy/private/flags_health_check.te

(allow flags_health_check init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 12 system/sepolicy/private/flags_health_check.te

(allow flags_health_check device_config_lmkd_native_prop (property_service (set)))
;;* lme

;;* lmx 12 system/sepolicy/private/flags_health_check.te

(allow flags_health_check device_config_lmkd_native_prop (file (read getattr map open)))
;;* lme

;;* lmx 13 system/sepolicy/private/flags_health_check.te

(allow flags_health_check property_socket (sock_file (write)))
;;* lme

;;* lmx 13 system/sepolicy/private/flags_health_check.te

(allow flags_health_check init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 13 system/sepolicy/private/flags_health_check.te

(allow flags_health_check device_config_netd_native_prop (property_service (set)))
;;* lme

;;* lmx 13 system/sepolicy/private/flags_health_check.te

(allow flags_health_check device_config_netd_native_prop (file (read getattr map open)))
;;* lme

;;* lmx 14 system/sepolicy/private/flags_health_check.te

(allow flags_health_check property_socket (sock_file (write)))
;;* lme

;;* lmx 14 system/sepolicy/private/flags_health_check.te

(allow flags_health_check init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 14 system/sepolicy/private/flags_health_check.te

(allow flags_health_check device_config_nnapi_native_prop (property_service (set)))
;;* lme

;;* lmx 14 system/sepolicy/private/flags_health_check.te

(allow flags_health_check device_config_nnapi_native_prop (file (read getattr map open)))
;;* lme

;;* lmx 15 system/sepolicy/private/flags_health_check.te

(allow flags_health_check property_socket (sock_file (write)))
;;* lme

;;* lmx 15 system/sepolicy/private/flags_health_check.te

(allow flags_health_check init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 15 system/sepolicy/private/flags_health_check.te

(allow flags_health_check device_config_activity_manager_native_boot_prop (property_service (set)))
;;* lme

;;* lmx 15 system/sepolicy/private/flags_health_check.te

(allow flags_health_check device_config_activity_manager_native_boot_prop (file (read getattr map open)))
;;* lme

;;* lmx 16 system/sepolicy/private/flags_health_check.te

(allow flags_health_check property_socket (sock_file (write)))
;;* lme

;;* lmx 16 system/sepolicy/private/flags_health_check.te

(allow flags_health_check init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 16 system/sepolicy/private/flags_health_check.te

(allow flags_health_check device_config_media_native_prop (property_service (set)))
;;* lme

;;* lmx 16 system/sepolicy/private/flags_health_check.te

(allow flags_health_check device_config_media_native_prop (file (read getattr map open)))
;;* lme

;;* lmx 17 system/sepolicy/private/flags_health_check.te

(allow flags_health_check property_socket (sock_file (write)))
;;* lme

;;* lmx 17 system/sepolicy/private/flags_health_check.te

(allow flags_health_check init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 17 system/sepolicy/private/flags_health_check.te

(allow flags_health_check device_config_mglru_native_prop (property_service (set)))
;;* lme

;;* lmx 17 system/sepolicy/private/flags_health_check.te

(allow flags_health_check device_config_mglru_native_prop (file (read getattr map open)))
;;* lme

;;* lmx 18 system/sepolicy/private/flags_health_check.te

(allow flags_health_check property_socket (sock_file (write)))
;;* lme

;;* lmx 18 system/sepolicy/private/flags_health_check.te

(allow flags_health_check init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 18 system/sepolicy/private/flags_health_check.te

(allow flags_health_check device_config_profcollect_native_boot_prop (property_service (set)))
;;* lme

;;* lmx 18 system/sepolicy/private/flags_health_check.te

(allow flags_health_check device_config_profcollect_native_boot_prop (file (read getattr map open)))
;;* lme

;;* lmx 19 system/sepolicy/private/flags_health_check.te

(allow flags_health_check property_socket (sock_file (write)))
;;* lme

;;* lmx 19 system/sepolicy/private/flags_health_check.te

(allow flags_health_check init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 19 system/sepolicy/private/flags_health_check.te

(allow flags_health_check device_config_statsd_native_prop (property_service (set)))
;;* lme

;;* lmx 19 system/sepolicy/private/flags_health_check.te

(allow flags_health_check device_config_statsd_native_prop (file (read getattr map open)))
;;* lme

;;* lmx 20 system/sepolicy/private/flags_health_check.te

(allow flags_health_check property_socket (sock_file (write)))
;;* lme

;;* lmx 20 system/sepolicy/private/flags_health_check.te

(allow flags_health_check init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 20 system/sepolicy/private/flags_health_check.te

(allow flags_health_check device_config_statsd_native_boot_prop (property_service (set)))
;;* lme

;;* lmx 20 system/sepolicy/private/flags_health_check.te

(allow flags_health_check device_config_statsd_native_boot_prop (file (read getattr map open)))
;;* lme

;;* lmx 21 system/sepolicy/private/flags_health_check.te

(allow flags_health_check property_socket (sock_file (write)))
;;* lme

;;* lmx 21 system/sepolicy/private/flags_health_check.te

(allow flags_health_check init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 21 system/sepolicy/private/flags_health_check.te

(allow flags_health_check device_config_storage_native_boot_prop (property_service (set)))
;;* lme

;;* lmx 21 system/sepolicy/private/flags_health_check.te

(allow flags_health_check device_config_storage_native_boot_prop (file (read getattr map open)))
;;* lme

;;* lmx 22 system/sepolicy/private/flags_health_check.te

(allow flags_health_check property_socket (sock_file (write)))
;;* lme

;;* lmx 22 system/sepolicy/private/flags_health_check.te

(allow flags_health_check init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 22 system/sepolicy/private/flags_health_check.te

(allow flags_health_check device_config_swcodec_native_prop (property_service (set)))
;;* lme

;;* lmx 22 system/sepolicy/private/flags_health_check.te

(allow flags_health_check device_config_swcodec_native_prop (file (read getattr map open)))
;;* lme

;;* lmx 23 system/sepolicy/private/flags_health_check.te

(allow flags_health_check property_socket (sock_file (write)))
;;* lme

;;* lmx 23 system/sepolicy/private/flags_health_check.te

(allow flags_health_check init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 23 system/sepolicy/private/flags_health_check.te

(allow flags_health_check device_config_sys_traced_prop (property_service (set)))
;;* lme

;;* lmx 23 system/sepolicy/private/flags_health_check.te

(allow flags_health_check device_config_sys_traced_prop (file (read getattr map open)))
;;* lme

;;* lmx 24 system/sepolicy/private/flags_health_check.te

(allow flags_health_check property_socket (sock_file (write)))
;;* lme

;;* lmx 24 system/sepolicy/private/flags_health_check.te

(allow flags_health_check init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 24 system/sepolicy/private/flags_health_check.te

(allow flags_health_check device_config_window_manager_native_boot_prop (property_service (set)))
;;* lme

;;* lmx 24 system/sepolicy/private/flags_health_check.te

(allow flags_health_check device_config_window_manager_native_boot_prop (file (read getattr map open)))
;;* lme

;;* lmx 25 system/sepolicy/private/flags_health_check.te

(allow flags_health_check property_socket (sock_file (write)))
;;* lme

;;* lmx 25 system/sepolicy/private/flags_health_check.te

(allow flags_health_check init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 25 system/sepolicy/private/flags_health_check.te

(allow flags_health_check device_config_configuration_prop (property_service (set)))
;;* lme

;;* lmx 25 system/sepolicy/private/flags_health_check.te

(allow flags_health_check device_config_configuration_prop (file (read getattr map open)))
;;* lme

;;* lmx 26 system/sepolicy/private/flags_health_check.te

(allow flags_health_check property_socket (sock_file (write)))
;;* lme

;;* lmx 26 system/sepolicy/private/flags_health_check.te

(allow flags_health_check init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 26 system/sepolicy/private/flags_health_check.te

(allow flags_health_check device_config_connectivity_prop (property_service (set)))
;;* lme

;;* lmx 26 system/sepolicy/private/flags_health_check.te

(allow flags_health_check device_config_connectivity_prop (file (read getattr map open)))
;;* lme

;;* lmx 27 system/sepolicy/private/flags_health_check.te

(allow flags_health_check property_socket (sock_file (write)))
;;* lme

;;* lmx 27 system/sepolicy/private/flags_health_check.te

(allow flags_health_check init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 27 system/sepolicy/private/flags_health_check.te

(allow flags_health_check device_config_surface_flinger_native_boot_prop (property_service (set)))
;;* lme

;;* lmx 27 system/sepolicy/private/flags_health_check.te

(allow flags_health_check device_config_surface_flinger_native_boot_prop (file (read getattr map open)))
;;* lme

;;* lmx 28 system/sepolicy/private/flags_health_check.te

(allow flags_health_check property_socket (sock_file (write)))
;;* lme

;;* lmx 28 system/sepolicy/private/flags_health_check.te

(allow flags_health_check init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 28 system/sepolicy/private/flags_health_check.te

(allow flags_health_check device_config_aconfig_flags_prop (property_service (set)))
;;* lme

;;* lmx 28 system/sepolicy/private/flags_health_check.te

(allow flags_health_check device_config_aconfig_flags_prop (file (read getattr map open)))
;;* lme

;;* lmx 29 system/sepolicy/private/flags_health_check.te

(allow flags_health_check property_socket (sock_file (write)))
;;* lme

;;* lmx 29 system/sepolicy/private/flags_health_check.te

(allow flags_health_check init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 29 system/sepolicy/private/flags_health_check.te

(allow flags_health_check device_config_vendor_system_native_prop (property_service (set)))
;;* lme

;;* lmx 29 system/sepolicy/private/flags_health_check.te

(allow flags_health_check device_config_vendor_system_native_prop (file (read getattr map open)))
;;* lme

;;* lmx 30 system/sepolicy/private/flags_health_check.te

(allow flags_health_check property_socket (sock_file (write)))
;;* lme

;;* lmx 30 system/sepolicy/private/flags_health_check.te

(allow flags_health_check init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 30 system/sepolicy/private/flags_health_check.te

(allow flags_health_check device_config_vendor_system_native_boot_prop (property_service (set)))
;;* lme

;;* lmx 30 system/sepolicy/private/flags_health_check.te

(allow flags_health_check device_config_vendor_system_native_boot_prop (file (read getattr map open)))
;;* lme

;;* lmx 31 system/sepolicy/private/flags_health_check.te

(allow flags_health_check property_socket (sock_file (write)))
;;* lme

;;* lmx 31 system/sepolicy/private/flags_health_check.te

(allow flags_health_check init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 31 system/sepolicy/private/flags_health_check.te

(allow flags_health_check device_config_virtualization_framework_native_prop (property_service (set)))
;;* lme

;;* lmx 31 system/sepolicy/private/flags_health_check.te

(allow flags_health_check device_config_virtualization_framework_native_prop (file (read getattr map open)))
;;* lme

;;* lmx 32 system/sepolicy/private/flags_health_check.te

(allow flags_health_check property_socket (sock_file (write)))
;;* lme

;;* lmx 32 system/sepolicy/private/flags_health_check.te

(allow flags_health_check init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 32 system/sepolicy/private/flags_health_check.te

(allow flags_health_check device_config_memory_safety_native_boot_prop (property_service (set)))
;;* lme

;;* lmx 32 system/sepolicy/private/flags_health_check.te

(allow flags_health_check device_config_memory_safety_native_boot_prop (file (read getattr map open)))
;;* lme

;;* lmx 33 system/sepolicy/private/flags_health_check.te

(allow flags_health_check property_socket (sock_file (write)))
;;* lme

;;* lmx 33 system/sepolicy/private/flags_health_check.te

(allow flags_health_check init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 33 system/sepolicy/private/flags_health_check.te

(allow flags_health_check device_config_memory_safety_native_prop (property_service (set)))
;;* lme

;;* lmx 33 system/sepolicy/private/flags_health_check.te

(allow flags_health_check device_config_memory_safety_native_prop (file (read getattr map open)))
;;* lme

;;* lmx 34 system/sepolicy/private/flags_health_check.te

(allow flags_health_check property_socket (sock_file (write)))
;;* lme

;;* lmx 34 system/sepolicy/private/flags_health_check.te

(allow flags_health_check init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 34 system/sepolicy/private/flags_health_check.te

(allow flags_health_check device_config_remote_key_provisioning_native_prop (property_service (set)))
;;* lme

;;* lmx 34 system/sepolicy/private/flags_health_check.te

(allow flags_health_check device_config_remote_key_provisioning_native_prop (file (read getattr map open)))
;;* lme

;;* lmx 35 system/sepolicy/private/flags_health_check.te

(allow flags_health_check property_socket (sock_file (write)))
;;* lme

;;* lmx 35 system/sepolicy/private/flags_health_check.te

(allow flags_health_check init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 35 system/sepolicy/private/flags_health_check.te

(allow flags_health_check device_config_camera_native_prop (property_service (set)))
;;* lme

;;* lmx 35 system/sepolicy/private/flags_health_check.te

(allow flags_health_check device_config_camera_native_prop (file (read getattr map open)))
;;* lme

;;* lmx 36 system/sepolicy/private/flags_health_check.te

(allow flags_health_check property_socket (sock_file (write)))
;;* lme

;;* lmx 36 system/sepolicy/private/flags_health_check.te

(allow flags_health_check init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 36 system/sepolicy/private/flags_health_check.te

(allow flags_health_check device_config_tethering_u_or_later_native_prop (property_service (set)))
;;* lme

;;* lmx 36 system/sepolicy/private/flags_health_check.te

(allow flags_health_check device_config_tethering_u_or_later_native_prop (file (read getattr map open)))
;;* lme

;;* lmx 37 system/sepolicy/private/flags_health_check.te

(allow flags_health_check property_socket (sock_file (write)))
;;* lme

;;* lmx 37 system/sepolicy/private/flags_health_check.te

(allow flags_health_check init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 37 system/sepolicy/private/flags_health_check.te

(allow flags_health_check device_config_mmd_native_prop (property_service (set)))
;;* lme

;;* lmx 37 system/sepolicy/private/flags_health_check.te

(allow flags_health_check device_config_mmd_native_prop (file (read getattr map open)))
;;* lme

;;* lmx 38 system/sepolicy/private/flags_health_check.te

(allow flags_health_check property_socket (sock_file (write)))
;;* lme

;;* lmx 38 system/sepolicy/private/flags_health_check.te

(allow flags_health_check init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 38 system/sepolicy/private/flags_health_check.te

(allow flags_health_check device_config_memory_management_native_boot_prop (property_service (set)))
;;* lme

;;* lmx 38 system/sepolicy/private/flags_health_check.te

(allow flags_health_check device_config_memory_management_native_boot_prop (file (read getattr map open)))
;;* lme

;;* lmx 39 system/sepolicy/private/flags_health_check.te

(allow flags_health_check property_socket (sock_file (write)))
;;* lme

;;* lmx 39 system/sepolicy/private/flags_health_check.te

(allow flags_health_check init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 39 system/sepolicy/private/flags_health_check.te

(allow flags_health_check next_boot_prop (property_service (set)))
;;* lme

;;* lmx 39 system/sepolicy/private/flags_health_check.te

(allow flags_health_check next_boot_prop (file (read getattr map open)))
;;* lme

;;* lmx 41 system/sepolicy/private/flags_health_check.te

(allow flags_health_check server_configurable_flags_data_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
;;* lme

;;* lmx 42 system/sepolicy/private/flags_health_check.te

(allow flags_health_check server_configurable_flags_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 51 system/sepolicy/private/flags_health_check.te

(neverallow base_typeattr_574 server_configurable_flags_data_file (file (write create setattr relabelfrom append unlink link rename)))
;;* lme

;;* lmx 57 system/sepolicy/private/flags_health_check.te

(neverallow base_typeattr_574 device_config_boot_count_prop (property_service (set)))
;;* lme

;;* lmx 62 system/sepolicy/private/flags_health_check.te

(neverallow base_typeattr_574 device_config_reset_performed_prop (property_service (set)))
;;* lme

;;* lmx 3 system/sepolicy/private/fsck.te

(allow init fsck_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 3 system/sepolicy/private/fsck.te

(allow init fsck (process (transition)))
;;* lme

;;* lmx 3 system/sepolicy/private/fsck.te

(allow fsck fsck_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init fsck (process (noatsecure)))
;;* lmx 3 system/sepolicy/private/fsck.te

(allow init fsck (process (siginh rlimitinh)))
;;* lme

(typetransition init fsck_exec process fsck)
;;* lmx 6 system/sepolicy/private/fsck.te

(allow fsck system_bootstrap_lib_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 6 system/sepolicy/private/fsck.te

(allow fsck system_bootstrap_lib_file (file (read getattr map execute open)))
;;* lme

;;* lmx 8 system/sepolicy/private/fsck.te

(allow fsck metadata_block_device (blk_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 12 system/sepolicy/private/fsck.te

(allow fsck tmpfs (chr_file (ioctl read write)))
;;* lme

;;* lmx 15 system/sepolicy/private/fsck.te

(allow fsck devpts (chr_file (ioctl read write getattr)))
;;* lme

;;* lmx 18 system/sepolicy/private/fsck.te

(allow fsck vold (fd (use)))
;;* lme

;;* lmx 19 system/sepolicy/private/fsck.te

(allow fsck vold (fifo_file (read write getattr)))
;;* lme

;;* lmx 22 system/sepolicy/private/fsck.te

(allow fsck userdata_block_device (blk_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 23 system/sepolicy/private/fsck.te

(allow fsck cache_block_device (blk_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 24 system/sepolicy/private/fsck.te

(allow fsck dm_device (blk_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 25 system/sepolicy/private/fsck.te

(allow fsck zoned_block_device (blk_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 26 system/sepolicy/private/fsck.te

(allow fsck system_block_device (blk_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 32 system/sepolicy/private/fsck.te

(allow fsck metadata_file (dir (getattr)))
;;* lme

;;* lmx 33 system/sepolicy/private/fsck.te

(allow fsck block_device (dir (search)))
;;* lme

;;* lmx 34 system/sepolicy/private/fsck.te

(allow fsck mirror_data_file (dir (search)))
;;* lme

;;* lmx 43 system/sepolicy/private/fsck.te

(allowx fsck dev_type (ioctl blk_file (0x125e 0x127c 0x1282 0x1288)))
;;* lme

;;* lmx 54 system/sepolicy/private/fsck.te

(allow fsck dev_type (blk_file (getattr)))
;;* lme

;;* lmx 60 system/sepolicy/private/fsck.te

(allow fsck proc_mounts (file (ioctl read getattr lock map open watch watch_reads)))
(allow fsck proc_swaps (file (ioctl read getattr lock map open watch watch_reads)))
(allow fsck sysfs_dm (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 61 system/sepolicy/private/fsck.te

(allow fsck rootfs (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 62 system/sepolicy/private/fsck.te

(allow fsck sysfs_dm (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 78 system/sepolicy/private/fsck.te

(neverallow fsck base_typeattr_575 (blk_file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 81 system/sepolicy/private/fsck.te

(neverallow base_typeattr_576 fsck (process (transition)))
;;* lme

;;* lmx 82 system/sepolicy/private/fsck.te

(neverallow base_typeattr_248 fsck (process (dyntransition)))
;;* lme

;;* lmx 83 system/sepolicy/private/fsck.te

(neverallow fsck base_typeattr_577 (file (entrypoint)))
;;* lme

;;* lmx 3 system/sepolicy/private/fsck_untrusted.te

(allow fsck system_bootstrap_lib_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 3 system/sepolicy/private/fsck_untrusted.te

(allow fsck system_bootstrap_lib_file (file (read getattr map execute open)))
;;* lme

;;* lmx 6 system/sepolicy/private/fsck_untrusted.te

(allow fsck_untrusted devpts (chr_file (ioctl read write getattr)))
;;* lme

;;* lmx 9 system/sepolicy/private/fsck_untrusted.te

(allow fsck_untrusted vold (fd (use)))
;;* lme

;;* lmx 10 system/sepolicy/private/fsck_untrusted.te

(allow fsck_untrusted vold (fifo_file (read write getattr)))
;;* lme

;;* lmx 13 system/sepolicy/private/fsck_untrusted.te

(allow fsck_untrusted block_device (dir (search)))
;;* lme

;;* lmx 14 system/sepolicy/private/fsck_untrusted.te

(allow fsck_untrusted vold_device (blk_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 16 system/sepolicy/private/fsck_untrusted.te

(allow fsck_untrusted proc_mounts (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 19 system/sepolicy/private/fsck_untrusted.te

(allowx fsck_untrusted vold_device (ioctl blk_file (0x127b)))
;;* lme

;;* lmx 30 system/sepolicy/private/fsck_untrusted.te

(allow fsck_untrusted dev_type (blk_file (getattr)))
;;* lme

;;* lmx 48 system/sepolicy/private/fsck_untrusted.te

(neverallow fsck_untrusted dm_device (blk_file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow fsck_untrusted root_block_device (blk_file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow fsck_untrusted frp_block_device (blk_file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow fsck_untrusted system_block_device (blk_file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow fsck_untrusted recovery_block_device (blk_file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow fsck_untrusted boot_block_device (blk_file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow fsck_untrusted userdata_block_device (blk_file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow fsck_untrusted cache_block_device (blk_file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow fsck_untrusted swap_block_device (blk_file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow fsck_untrusted metadata_block_device (blk_file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 51 system/sepolicy/private/fsck_untrusted.te

(neverallow base_typeattr_331 fsck_untrusted (process (transition)))
;;* lme

;;* lmx 52 system/sepolicy/private/fsck_untrusted.te

(neverallow base_typeattr_248 fsck_untrusted (process (dyntransition)))
;;* lme

;;* lmx 53 system/sepolicy/private/fsck_untrusted.te

(neverallow fsck_untrusted base_typeattr_577 (file (entrypoint)))
;;* lme

;;* lmx 58 system/sepolicy/private/fsck_untrusted.te

(neverallow fsck_untrusted self (capability (setgid setuid)))
(neverallow fsck_untrusted self (cap_userns (setgid setuid)))
;;* lme

(dontaudit fsck_untrusted sysfs (file (ioctl read write getattr lock append map open watch watch_reads)))
(dontaudit fsck_untrusted sysfs_dm (file (ioctl read write getattr lock append map open watch watch_reads)))
(dontaudit fsck_untrusted sysfs_dm (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
(dontaudit fsck_untrusted tmpfs (lnk_file (read)))
;;* lmx 10 system/sepolicy/private/fuseblkd.te

(allow fuseblkd self (capability (sys_admin)))
(allow fuseblkd self (cap_userns (sys_admin)))
;;* lme

;;* lmx 13 system/sepolicy/private/fuseblkd.te

(allow fuseblkd fuse_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 14 system/sepolicy/private/fuseblkd.te

(allow fuseblkd fuseblk (filesystem (mount unmount)))
;;* lme

;;* lmx 15 system/sepolicy/private/fuseblkd.te

(allow fuseblkd fuseblkd_untrusted (fd (use)))
;;* lme

;;* lmx 18 system/sepolicy/private/fuseblkd.te

(allow fuseblkd block_device (dir (search)))
;;* lme

;;* lmx 21 system/sepolicy/private/fuseblkd.te

(allow fuseblkd mnt_media_rw_file (dir (search)))
;;* lme

;;* lmx 22 system/sepolicy/private/fuseblkd.te

(allow fuseblkd mnt_media_rw_stub_file (dir (mounton)))
;;* lme

;;* lmx 29 system/sepolicy/private/fuseblkd.te

(neverallow base_typeattr_578 fuseblkd (process (transition)))
;;* lme

;;* lmx 30 system/sepolicy/private/fuseblkd.te

(neverallow base_typeattr_248 fuseblkd (process (dyntransition)))
;;* lme

;;* lmx 31 system/sepolicy/private/fuseblkd.te

(neverallow fuseblkd base_typeattr_579 (file (entrypoint)))
;;* lme

;;* lmx 8 system/sepolicy/private/fuseblkd_untrusted.te

(allow fuseblkd_untrusted fuseblkd_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 8 system/sepolicy/private/fuseblkd_untrusted.te

(allow fuseblkd_untrusted fuseblkd (process (transition)))
;;* lme

;;* lmx 8 system/sepolicy/private/fuseblkd_untrusted.te

(allow fuseblkd fuseblkd_exec (file (read getattr map execute open entrypoint)))
;;* lme

;;* lmx 8 system/sepolicy/private/fuseblkd_untrusted.te

(allow fuseblkd fuseblkd_untrusted (process (sigchld)))
;;* lme

(dontaudit fuseblkd_untrusted fuseblkd (process (noatsecure)))
;;* lmx 8 system/sepolicy/private/fuseblkd_untrusted.te

(allow fuseblkd_untrusted fuseblkd (process (siginh rlimitinh)))
;;* lme

(typetransition fuseblkd_untrusted fuseblkd_exec process fuseblkd)
;;* lmx 11 system/sepolicy/private/fuseblkd_untrusted.te

(allow fuseblkd_untrusted vold (fd (use)))
;;* lme

;;* lmx 14 system/sepolicy/private/fuseblkd_untrusted.te

(allow fuseblkd_untrusted block_device (dir (search)))
;;* lme

;;* lmx 17 system/sepolicy/private/fuseblkd_untrusted.te

(allow fuseblkd_untrusted super_block_device (blk_file (getattr)))
;;* lme

;;* lmx 20 system/sepolicy/private/fuseblkd_untrusted.te

(allow fuseblkd_untrusted fuse_device (chr_file (read write getattr open)))
;;* lme

;;* lmx 23 system/sepolicy/private/fuseblkd_untrusted.te

(allow fuseblkd_untrusted mnt_media_rw_file (dir (getattr search)))
;;* lme

;;* lmx 24 system/sepolicy/private/fuseblkd_untrusted.te

(allow fuseblkd_untrusted mnt_media_rw_stub_file (dir (getattr)))
;;* lme

;;* lmx 27 system/sepolicy/private/fuseblkd_untrusted.te

(allow fuseblkd_untrusted sysfs_dm (dir (search)))
;;* lme

;;* lmx 28 system/sepolicy/private/fuseblkd_untrusted.te

(allow fuseblkd_untrusted sysfs_dm (file (read getattr open)))
;;* lme

;;* lmx 29 system/sepolicy/private/fuseblkd_untrusted.te

(allow fuseblkd_untrusted dm_device (blk_file (getattr)))
;;* lme

;;* lmx 32 system/sepolicy/private/fuseblkd_untrusted.te

(allow fuseblkd_untrusted tmpfs (lnk_file (read)))
;;* lme

;;* lmx 35 system/sepolicy/private/fuseblkd_untrusted.te

(allow fuseblkd_untrusted loop_device (blk_file (getattr)))
;;* lme

;;* lmx 38 system/sepolicy/private/fuseblkd_untrusted.te

(allow fuseblkd_untrusted proc_filesystems (file (read getattr open)))
;;* lme

(dontaudit fuseblkd_untrusted self (capability (sys_admin)))
;;* lmx 65 system/sepolicy/private/fuseblkd_untrusted.te

(neverallow fuseblkd_untrusted dm_device (blk_file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow fuseblkd_untrusted root_block_device (blk_file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow fuseblkd_untrusted frp_block_device (blk_file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow fuseblkd_untrusted system_block_device (blk_file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow fuseblkd_untrusted recovery_block_device (blk_file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow fuseblkd_untrusted boot_block_device (blk_file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow fuseblkd_untrusted userdata_block_device (blk_file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow fuseblkd_untrusted cache_block_device (blk_file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow fuseblkd_untrusted swap_block_device (blk_file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow fuseblkd_untrusted metadata_block_device (blk_file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 68 system/sepolicy/private/fuseblkd_untrusted.te

(neverallow base_typeattr_331 fuseblkd_untrusted (process (transition)))
;;* lme

;;* lmx 69 system/sepolicy/private/fuseblkd_untrusted.te

(neverallow base_typeattr_248 fuseblkd_untrusted (process (dyntransition)))
;;* lme

;;* lmx 70 system/sepolicy/private/fuseblkd_untrusted.te

(neverallow fuseblkd_untrusted base_typeattr_580 (file (entrypoint)))
;;* lme

;;* lmx 77 system/sepolicy/private/fuseblkd_untrusted.te

(neverallow fuseblkd_untrusted self (capability (setgid setuid sys_admin)))
;;* lme

;;* lmx 78 system/sepolicy/private/fuseblkd_untrusted.te

(neverallow fuseblkd_untrusted self (capability (setgid setuid sys_admin)))
(neverallow fuseblkd_untrusted self (cap_userns (setgid setuid sys_admin)))
;;* lme

;;* lmx 82 system/sepolicy/private/fuseblkd_untrusted.te

(neverallow fuseblkd_untrusted fuseblk (filesystem (mount unmount relabelfrom relabelto)))
;;* lme

;;* lmx 4 system/sepolicy/private/fwk_bufferhub.te

(allow fwk_bufferhub hal_graphics_allocator (memfd_file (read write getattr map)))
;;* lme

;;* lmx 4 system/sepolicy/private/fwk_bufferhub.te

(allow hal_graphics_allocator fwk_bufferhub (memfd_file (read write getattr map)))
;;* lme

;;* lmx 6 system/sepolicy/private/fwk_bufferhub.te

(allow init fwk_bufferhub_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 6 system/sepolicy/private/fwk_bufferhub.te

(allow init fwk_bufferhub (process (transition)))
;;* lme

;;* lmx 6 system/sepolicy/private/fwk_bufferhub.te

(allow fwk_bufferhub fwk_bufferhub_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init fwk_bufferhub (process (noatsecure)))
;;* lmx 6 system/sepolicy/private/fwk_bufferhub.te

(allow init fwk_bufferhub (process (siginh rlimitinh)))
;;* lme

(typetransition init fwk_bufferhub_exec process fwk_bufferhub)
;;* lmx 3 system/sepolicy/private/gatekeeperd.te

(allow init gatekeeperd_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 3 system/sepolicy/private/gatekeeperd.te

(allow init gatekeeperd (process (transition)))
;;* lme

;;* lmx 3 system/sepolicy/private/gatekeeperd.te

(allow gatekeeperd gatekeeperd_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init gatekeeperd (process (noatsecure)))
;;* lmx 3 system/sepolicy/private/gatekeeperd.te

(allow init gatekeeperd (process (siginh rlimitinh)))
;;* lme

(typetransition init gatekeeperd_exec process gatekeeperd)
;;* lmx 6 system/sepolicy/private/gatekeeperd.te

(allow gatekeeperd gsid_prop (file (read getattr map open)))
;;* lme

;;* lmx 10 system/sepolicy/private/gatekeeperd.te

(allow gatekeeperd servicemanager (binder (call transfer)))
;;* lme

;;* lmx 10 system/sepolicy/private/gatekeeperd.te

(allow servicemanager gatekeeperd (binder (call transfer)))
;;* lme

;;* lmx 15 system/sepolicy/private/gatekeeperd.te

(allow gatekeeperd system_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 20 system/sepolicy/private/gatekeeperd.te

(allow gatekeeperd hal_gatekeeper (memfd_file (read write getattr map)))
;;* lme

;;* lmx 20 system/sepolicy/private/gatekeeperd.te

(allow hal_gatekeeper gatekeeperd (memfd_file (read write getattr map)))
;;* lme

;;* lmx 24 system/sepolicy/private/gatekeeperd.te

(allow gatekeeperd gatekeeper_service (service_manager (add find)))
;;* lme

;;* lmx 24 system/sepolicy/private/gatekeeperd.te

(neverallow base_typeattr_581 gatekeeper_service (service_manager (add)))
;;* lme

;;* lmx 24 system/sepolicy/private/gatekeeperd.te

(allow gatekeeperd su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 27 system/sepolicy/private/gatekeeperd.te

(allow gatekeeperd apc_service (service_manager (find)))
;;* lme

;;* lmx 27 system/sepolicy/private/gatekeeperd.te

(allow gatekeeperd keystore_service (service_manager (find)))
;;* lme

;;* lmx 27 system/sepolicy/private/gatekeeperd.te

(allow gatekeeperd legacykeystore_service (service_manager (find)))
;;* lme

;;* lmx 27 system/sepolicy/private/gatekeeperd.te

(allow gatekeeperd keystore (binder (call transfer)))
;;* lme

;;* lmx 27 system/sepolicy/private/gatekeeperd.te

(allow keystore gatekeeperd (binder (transfer)))
;;* lme

;;* lmx 27 system/sepolicy/private/gatekeeperd.te

(allow gatekeeperd keystore (fd (use)))
;;* lme

;;* lmx 27 system/sepolicy/private/gatekeeperd.te

(allow keystore gatekeeperd (binder (call transfer)))
;;* lme

;;* lmx 27 system/sepolicy/private/gatekeeperd.te

(allow gatekeeperd keystore (binder (transfer)))
;;* lme

;;* lmx 27 system/sepolicy/private/gatekeeperd.te

(allow keystore gatekeeperd (fd (use)))
;;* lme

;;* lmx 28 system/sepolicy/private/gatekeeperd.te

(allow gatekeeperd keystore (keystore2 (add_auth)))
;;* lme

;;* lmx 29 system/sepolicy/private/gatekeeperd.te

(allow gatekeeperd authorization_service (service_manager (find)))
;;* lme

;;* lmx 33 system/sepolicy/private/gatekeeperd.te

(allow gatekeeperd system_server (binder (call)))
;;* lme

;;* lmx 34 system/sepolicy/private/gatekeeperd.te

(allow gatekeeperd permission_service (service_manager (find)))
;;* lme

;;* lmx 37 system/sepolicy/private/gatekeeperd.te

(allow gatekeeperd gatekeeper_data_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
;;* lme

;;* lmx 38 system/sepolicy/private/gatekeeperd.te

(allow gatekeeperd gatekeeper_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 41 system/sepolicy/private/gatekeeperd.te

(allow gatekeeperd hardware_properties_service (service_manager (find)))
;;* lme

;;* lmx 43 system/sepolicy/private/gatekeeperd.te

(allow gatekeeperd cgroup (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 43 system/sepolicy/private/gatekeeperd.te

(allow gatekeeperd cgroup (file (ioctl read getattr lock map open watch watch_reads)))
(allow gatekeeperd cgroup (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 44 system/sepolicy/private/gatekeeperd.te

(allow gatekeeperd cgroup_v2 (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 44 system/sepolicy/private/gatekeeperd.te

(allow gatekeeperd cgroup_v2 (file (ioctl read getattr lock map open watch watch_reads)))
(allow gatekeeperd cgroup_v2 (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 9 system/sepolicy/private/gki_apex_prepostinstall.te

(allow gki_apex_prepostinstall shell_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lme

;;* lmx 12 system/sepolicy/private/gki_apex_prepostinstall.te

(allow gki_apex_prepostinstall toolbox_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lme

;;* lmx 15 system/sepolicy/private/gki_apex_prepostinstall.te

(allow gki_apex_prepostinstall gki_apex_prepostinstall_exec (file (execute_no_trans)))
;;* lme

;;* lmx 18 system/sepolicy/private/gki_apex_prepostinstall.te

(allow gki_apex_prepostinstall servicemanager (binder (call transfer)))
;;* lme

;;* lmx 18 system/sepolicy/private/gki_apex_prepostinstall.te

(allow servicemanager gki_apex_prepostinstall (binder (call transfer)))
;;* lme

;;* lmx 19 system/sepolicy/private/gki_apex_prepostinstall.te

(allow gki_apex_prepostinstall update_engine_stable_service (service_manager (find)))
;;* lme

;;* lmx 20 system/sepolicy/private/gki_apex_prepostinstall.te

(allow gki_apex_prepostinstall update_engine (binder (call transfer)))
;;* lme

;;* lmx 20 system/sepolicy/private/gki_apex_prepostinstall.te

(allow update_engine gki_apex_prepostinstall (binder (transfer)))
;;* lme

;;* lmx 20 system/sepolicy/private/gki_apex_prepostinstall.te

(allow gki_apex_prepostinstall update_engine (fd (use)))
;;* lme

;;* lmx 23 system/sepolicy/private/gki_apex_prepostinstall.te

(allow gki_apex_prepostinstall apexd (fd (use)))
;;* lme

(typetransition gmscore_app tmpfs file appdomain_tmpfs)
;;* lmx 6 system/sepolicy/private/gmscore_app.te

(allow gmscore_app gmscore_app_userfaultfd (anon_inode (ioctl read create)))
;;* lme

(dontaudit su gmscore_app_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lmx 6 system/sepolicy/private/gmscore_app.te

(neverallow base_typeattr_582 gmscore_app_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 6 system/sepolicy/private/gmscore_app.te

(allow gmscore_app appdomain_tmpfs (file (read write getattr map execute)))
;;* lme

;;* lmx 6 system/sepolicy/private/gmscore_app.te

(allow gmscore_app appdomain (memfd_file (read write getattr map execute)))
;;* lme

;;* lmx 6 system/sepolicy/private/gmscore_app.te

(neverallow base_typeattr_583 base_typeattr_582 (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 6 system/sepolicy/private/gmscore_app.te

(neverallow base_typeattr_584 gmscore_app (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 6 system/sepolicy/private/gmscore_app.te

(neverallow base_typeattr_585 gmscore_app (process (ptrace)))
;;* lme

;;* lmx 6 system/sepolicy/private/gmscore_app.te

(neverallow gmscore_app base_typeattr_586 (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 8 system/sepolicy/private/gmscore_app.te

(allow gmscore_app sysfs_type (dir (search)))
;;* lme

;;* lmx 10 system/sepolicy/private/gmscore_app.te

(allow gmscore_app sysfs_zram (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 10 system/sepolicy/private/gmscore_app.te

(allow gmscore_app sysfs_zram (file (ioctl read getattr lock map open watch watch_reads)))
(allow gmscore_app sysfs_zram (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 12 system/sepolicy/private/gmscore_app.te

(allow gmscore_app rootfs (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 12 system/sepolicy/private/gmscore_app.te

(allow gmscore_app rootfs (file (ioctl read getattr lock map open watch watch_reads)))
(allow gmscore_app rootfs (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 15 system/sepolicy/private/gmscore_app.te

(allow gmscore_app config_gz (file (read getattr open)))
;;* lme

;;* lmx 18 system/sepolicy/private/gmscore_app.te

(allow gmscore_app update_engine (binder (call transfer)))
;;* lme

;;* lmx 18 system/sepolicy/private/gmscore_app.te

(allow update_engine gmscore_app (binder (transfer)))
;;* lme

;;* lmx 18 system/sepolicy/private/gmscore_app.te

(allow gmscore_app update_engine (fd (use)))
;;* lme

;;* lmx 19 system/sepolicy/private/gmscore_app.te

(allow gmscore_app update_engine_service (service_manager (find)))
;;* lme

;;* lmx 22 system/sepolicy/private/gmscore_app.te

(allow gmscore_app storaged (binder (call transfer)))
;;* lme

;;* lmx 22 system/sepolicy/private/gmscore_app.te

(allow storaged gmscore_app (binder (transfer)))
;;* lme

;;* lmx 22 system/sepolicy/private/gmscore_app.te

(allow gmscore_app storaged (fd (use)))
;;* lme

;;* lmx 23 system/sepolicy/private/gmscore_app.te

(allow gmscore_app storaged_service (service_manager (find)))
;;* lme

;;* lmx 27 system/sepolicy/private/gmscore_app.te

(allow gmscore_app system_update_service (service_manager (find)))
;;* lme

;;* lmx 30 system/sepolicy/private/gmscore_app.te

(allow gmscore_app statsd (binder (call transfer)))
;;* lme

;;* lmx 30 system/sepolicy/private/gmscore_app.te

(allow statsd gmscore_app (binder (transfer)))
;;* lme

;;* lmx 30 system/sepolicy/private/gmscore_app.te

(allow gmscore_app statsd (fd (use)))
;;* lme

;;* lmx 35 system/sepolicy/private/gmscore_app.te

(allow gmscore_app perfetto (fd (use)))
;;* lme

;;* lmx 36 system/sepolicy/private/gmscore_app.te

(allow gmscore_app perfetto_traces_data_file (file (read getattr)))
;;* lme

;;* lmx 39 system/sepolicy/private/gmscore_app.te

(allow gmscore_app keystore (keystore2_key (gen_unique_id)))
;;* lme

;;* lmx 42 system/sepolicy/private/gmscore_app.te

(allow gmscore_app selinuxfs (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

(dontaudit gmscore_app exec_type (file (ioctl read getattr lock map open watch watch_reads)))
(dontaudit gmscore_app device (dir (ioctl read getattr lock open watch watch_reads search)))
(dontaudit gmscore_app fs_bpf (dir (ioctl read getattr lock open watch watch_reads search)))
(dontaudit gmscore_app kernel (security (compute_av compute_create compute_member check_context load_policy compute_relabel compute_user setenforce setbool setsecparam setcheckreqprot read_policy validate_trans)))
(dontaudit gmscore_app net_dns_prop (file (ioctl read getattr lock map open watch watch_reads)))
(dontaudit gmscore_app proc (file (ioctl read getattr lock map open watch watch_reads)))
(dontaudit gmscore_app proc_interrupts (file (ioctl read getattr lock map open watch watch_reads)))
(dontaudit gmscore_app proc_modules (file (ioctl read getattr lock map open watch watch_reads)))
(dontaudit gmscore_app proc_net (file (ioctl read getattr lock map open watch watch_reads)))
(dontaudit gmscore_app proc_stat (file (ioctl read getattr lock map open watch watch_reads)))
(dontaudit gmscore_app proc_version (file (ioctl read getattr lock map open watch watch_reads)))
(dontaudit gmscore_app sysfs (dir (ioctl read getattr lock open watch watch_reads search)))
(dontaudit gmscore_app sysfs (file (ioctl read getattr lock map open watch watch_reads)))
(dontaudit gmscore_app sysfs_android_usb (file (ioctl read getattr lock map open watch watch_reads)))
(dontaudit gmscore_app sysfs_dm (file (ioctl read getattr lock map open watch watch_reads)))
(dontaudit gmscore_app sysfs_loop (file (ioctl read getattr lock map open watch watch_reads)))
(dontaudit gmscore_app sysfs_net (file (ioctl read getattr lock map open watch watch_reads)))
(dontaudit gmscore_app sysfs_net (dir (ioctl read getattr lock open watch watch_reads search)))
(dontaudit gmscore_app wifi_hal_prop (file (ioctl read getattr lock map open watch watch_reads)))
(dontaudit gmscore_app wifi_prop (file (ioctl read getattr lock map open watch watch_reads)))
(dontaudit gmscore_app mirror_data_file (dir (search)))
(dontaudit gmscore_app mnt_vendor_file (dir (search)))
(dontaudit gmscore_app system_adbd_prop (file (ioctl read getattr lock map open watch watch_reads)))
(dontaudit gmscore_app adbd_prop (file (ioctl read getattr lock map open watch watch_reads)))
;;* lmx 73 system/sepolicy/private/gmscore_app.te

(allow gmscore_app self (process (ptrace)))
;;* lme

;;* lmx 84 system/sepolicy/private/gmscore_app.te

(allow gmscore_app privapp_data_file (file (execute)))
;;* lme

;;* lmx 88 system/sepolicy/private/gmscore_app.te

(allow gmscore_app system_linker_exec (file (execute_no_trans)))
;;* lme

;;* lmx 90 system/sepolicy/private/gmscore_app.te

(allow gmscore_app privapp_data_file (lnk_file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 93 system/sepolicy/private/gmscore_app.te

(allow gmscore_app proc_vmstat (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 96 system/sepolicy/private/gmscore_app.te

(allow gmscore_app gpuservice (binder (call transfer)))
;;* lme

;;* lmx 96 system/sepolicy/private/gmscore_app.te

(allow gpuservice gmscore_app (binder (transfer)))
;;* lme

;;* lmx 96 system/sepolicy/private/gmscore_app.te

(allow gmscore_app gpuservice (fd (use)))
;;* lme

;;* lmx 97 system/sepolicy/private/gmscore_app.te

(allow gmscore_app gpu_service (service_manager (find)))
;;* lme

;;* lmx 100 system/sepolicy/private/gmscore_app.te

(allow gmscore_app app_api_service (service_manager (find)))
;;* lme

;;* lmx 101 system/sepolicy/private/gmscore_app.te

(allow gmscore_app system_api_service (service_manager (find)))
;;* lme

;;* lmx 102 system/sepolicy/private/gmscore_app.te

(allow gmscore_app audioserver_service (service_manager (find)))
;;* lme

;;* lmx 103 system/sepolicy/private/gmscore_app.te

(allow gmscore_app cameraserver_service (service_manager (find)))
;;* lme

;;* lmx 104 system/sepolicy/private/gmscore_app.te

(allow gmscore_app drmserver_service (service_manager (find)))
;;* lme

;;* lmx 105 system/sepolicy/private/gmscore_app.te

(allow gmscore_app mediadrmserver_service (service_manager (find)))
;;* lme

;;* lmx 106 system/sepolicy/private/gmscore_app.te

(allow gmscore_app mediaextractor_service (service_manager (find)))
;;* lme

;;* lmx 107 system/sepolicy/private/gmscore_app.te

(allow gmscore_app mediametrics_service (service_manager (find)))
;;* lme

;;* lmx 108 system/sepolicy/private/gmscore_app.te

(allow gmscore_app mediaserver_service (service_manager (find)))
;;* lme

;;* lmx 109 system/sepolicy/private/gmscore_app.te

(allow gmscore_app network_watchlist_service (service_manager (find)))
;;* lme

;;* lmx 110 system/sepolicy/private/gmscore_app.te

(allow gmscore_app nfc_service (service_manager (find)))
;;* lme

;;* lmx 111 system/sepolicy/private/gmscore_app.te

(allow gmscore_app oem_lock_service (service_manager (find)))
;;* lme

;;* lmx 112 system/sepolicy/private/gmscore_app.te

(allow gmscore_app persistent_data_block_service (service_manager (find)))
;;* lme

;;* lmx 113 system/sepolicy/private/gmscore_app.te

(allow gmscore_app radio_service (service_manager (find)))
;;* lme

;;* lmx 114 system/sepolicy/private/gmscore_app.te

(allow gmscore_app recovery_service (service_manager (find)))
;;* lme

;;* lmx 115 system/sepolicy/private/gmscore_app.te

(allow gmscore_app stats_service (service_manager (find)))
;;* lme

;;* lmx 118 system/sepolicy/private/gmscore_app.te

(allow gmscore_app cache_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
(allow gmscore_app cache_recovery_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 119 system/sepolicy/private/gmscore_app.te

(allow gmscore_app cache_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow gmscore_app cache_recovery_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 121 system/sepolicy/private/gmscore_app.te

(allow gmscore_app cache_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 124 system/sepolicy/private/gmscore_app.te

(allow gmscore_app ota_package_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 125 system/sepolicy/private/gmscore_app.te

(allow gmscore_app ota_package_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 128 system/sepolicy/private/gmscore_app.te

(allow gmscore_app checkin_data_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
;;* lme

;;* lmx 129 system/sepolicy/private/gmscore_app.te

(allow gmscore_app checkin_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 133 system/sepolicy/private/gmscore_app.te

(allow gmscore_app shell_data_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 134 system/sepolicy/private/gmscore_app.te

(allow gmscore_app shell_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 137 system/sepolicy/private/gmscore_app.te

(allow gmscore_app aconfigd_socket (sock_file (write)))
;;* lme

;;* lmx 137 system/sepolicy/private/gmscore_app.te

(allow gmscore_app aconfigd (unix_stream_socket (connectto)))
;;* lme

;;* lmx 140 system/sepolicy/private/gmscore_app.te

(allow gmscore_app aconfigd_mainline_socket (sock_file (write)))
;;* lme

;;* lmx 140 system/sepolicy/private/gmscore_app.te

(allow gmscore_app aconfigd_mainline (unix_stream_socket (connectto)))
;;* lme

;;* lmx 143 system/sepolicy/private/gmscore_app.te

(allow gmscore_app anr_data_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 146 system/sepolicy/private/gmscore_app.te

(allow gmscore_app priv_app_all (tcp_socket (read write)))
;;* lme

;;* lmx 150 system/sepolicy/private/gmscore_app.te

(allow gmscore_app virtual_ab_prop (file (read getattr map open)))
;;* lme

;;* lmx 153 system/sepolicy/private/gmscore_app.te

(allow gmscore_app dck_prop (file (read getattr map open)))
;;* lme

;;* lmx 156 system/sepolicy/private/gmscore_app.te

(allow gmscore_app remote_prov_prop (file (read getattr map open)))
;;* lme

;;* lmx 159 system/sepolicy/private/gmscore_app.te

(allow gmscore_app enable_16k_pages_prop (file (read getattr map open)))
;;* lme

;;* lmx 163 system/sepolicy/private/gmscore_app.te

(allow gmscore_app quick_start_prop (file (read getattr map open)))
;;* lme

;;* lmx 164 system/sepolicy/private/gmscore_app.te

(neverallow base_typeattr_587 quick_start_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 167 system/sepolicy/private/gmscore_app.te

(allow gmscore_app bluetooth_finder_prop (file (read getattr map open)))
;;* lme

;;* lmx 170 system/sepolicy/private/gmscore_app.te

(allow system_server usb_disable_when_locked_prop (file (read getattr map open)))
;;* lme

;;* lmx 173 system/sepolicy/private/gmscore_app.te

(allow gmscore_app bluetooth_lea_prop (file (read getattr map open)))
;;* lme

;;* lmx 176 system/sepolicy/private/gmscore_app.te

(neverallow gmscore_app sysfs_net (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
;;* lme

;;* lmx 180 system/sepolicy/private/gmscore_app.te

(neverallowx gmscore_app domain (ioctl tcp_socket (0x6900 0x6902)))
(neverallowx gmscore_app domain (ioctl udp_socket (0x6900 0x6902)))
(neverallowx gmscore_app domain (ioctl rawip_socket (0x6900 0x6902)))
(neverallowx gmscore_app domain (ioctl icmp_socket (0x6900 0x6902)))
;;* lme

;;* lmx 180 system/sepolicy/private/gmscore_app.te

(neverallowx gmscore_app domain (ioctl tcp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx gmscore_app domain (ioctl udp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx gmscore_app domain (ioctl rawip_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx gmscore_app domain (ioctl icmp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
;;* lme

;;* lmx 180 system/sepolicy/private/gmscore_app.te

(neverallowx gmscore_app domain (ioctl tcp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx gmscore_app domain (ioctl udp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx gmscore_app domain (ioctl rawip_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx gmscore_app domain (ioctl icmp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
;;* lme

;;* lmx 181 system/sepolicy/private/gmscore_app.te

(neverallow gmscore_app base_typeattr_248 (netlink_route_socket (ioctl)))
(neverallow gmscore_app base_typeattr_248 (netlink_selinux_socket (ioctl)))
;;* lme

;;* lmx 194 system/sepolicy/private/gmscore_app.te

(neverallow gmscore_app base_typeattr_248 (socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow gmscore_app base_typeattr_248 (netlink_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow gmscore_app base_typeattr_248 (packet_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow gmscore_app base_typeattr_248 (key_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow gmscore_app base_typeattr_248 (netlink_tcpdiag_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write nlmsg)))
(neverallow gmscore_app base_typeattr_248 (netlink_nflog_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow gmscore_app base_typeattr_248 (netlink_xfrm_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write nlmsg)))
(neverallow gmscore_app base_typeattr_248 (netlink_audit_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write nlmsg_relay nlmsg_readpriv nlmsg_tty_audit nlmsg)))
(neverallow gmscore_app base_typeattr_248 (netlink_dnrt_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow gmscore_app base_typeattr_248 (netlink_kobject_uevent_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow gmscore_app base_typeattr_248 (appletalk_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow gmscore_app base_typeattr_248 (tun_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind attach_queue)))
(neverallow gmscore_app base_typeattr_248 (netlink_iscsi_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow gmscore_app base_typeattr_248 (netlink_fib_lookup_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow gmscore_app base_typeattr_248 (netlink_connector_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow gmscore_app base_typeattr_248 (netlink_netfilter_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow gmscore_app base_typeattr_248 (netlink_generic_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow gmscore_app base_typeattr_248 (netlink_scsitransport_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow gmscore_app base_typeattr_248 (netlink_rdma_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow gmscore_app base_typeattr_248 (netlink_crypto_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow gmscore_app base_typeattr_248 (sctp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind name_connect association)))
(neverallow gmscore_app base_typeattr_248 (ax25_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow gmscore_app base_typeattr_248 (ipx_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow gmscore_app base_typeattr_248 (netrom_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow gmscore_app base_typeattr_248 (atmpvc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow gmscore_app base_typeattr_248 (x25_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow gmscore_app base_typeattr_248 (rose_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow gmscore_app base_typeattr_248 (decnet_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow gmscore_app base_typeattr_248 (atmsvc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow gmscore_app base_typeattr_248 (rds_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow gmscore_app base_typeattr_248 (irda_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow gmscore_app base_typeattr_248 (pppox_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow gmscore_app base_typeattr_248 (llc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow gmscore_app base_typeattr_248 (can_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow gmscore_app base_typeattr_248 (tipc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow gmscore_app base_typeattr_248 (bluetooth_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow gmscore_app base_typeattr_248 (iucv_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow gmscore_app base_typeattr_248 (rxrpc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow gmscore_app base_typeattr_248 (isdn_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow gmscore_app base_typeattr_248 (phonet_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow gmscore_app base_typeattr_248 (ieee802154_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow gmscore_app base_typeattr_248 (caif_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow gmscore_app base_typeattr_248 (alg_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow gmscore_app base_typeattr_248 (nfc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow gmscore_app base_typeattr_248 (kcm_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow gmscore_app base_typeattr_248 (qipcrtr_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow gmscore_app base_typeattr_248 (smc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow gmscore_app base_typeattr_248 (xdp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
;;* lme

;;* lmx 197 system/sepolicy/private/gmscore_app.te

(allow gmscore_app wallet_prop (file (read getattr map open)))
;;* lme

;;* lmx 3 system/sepolicy/private/gpu_sphal_domain.te

(allow gpu_sphal_domain gpu_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 4 system/sepolicy/private/gpu_sphal_domain.te

(allow gpu_sphal_domain gpu_device (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 5 system/sepolicy/private/gpu_sphal_domain.te

(allow gpu_sphal_domain sysfs_gpu (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 5 system/sepolicy/private/gpu_sphal_domain.te

(allow gpu_sphal_domain sysfs_gpu (file (ioctl read getattr lock map open watch watch_reads)))
(allow gpu_sphal_domain sysfs_gpu (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 7 system/sepolicy/private/gpuservice.te

(allow init gpuservice_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 7 system/sepolicy/private/gpuservice.te

(allow init gpuservice (process (transition)))
;;* lme

;;* lmx 7 system/sepolicy/private/gpuservice.te

(allow gpuservice gpuservice_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init gpuservice (process (noatsecure)))
;;* lmx 7 system/sepolicy/private/gpuservice.te

(allow init gpuservice (process (siginh rlimitinh)))
;;* lme

(typetransition init gpuservice_exec process gpuservice)
;;* lmx 9 system/sepolicy/private/gpuservice.te

(allow gpuservice adbd (binder (call transfer)))
;;* lme

;;* lmx 9 system/sepolicy/private/gpuservice.te

(allow adbd gpuservice (binder (transfer)))
;;* lme

;;* lmx 9 system/sepolicy/private/gpuservice.te

(allow gpuservice adbd (fd (use)))
;;* lme

;;* lmx 10 system/sepolicy/private/gpuservice.te

(allow gpuservice shell (binder (call transfer)))
;;* lme

;;* lmx 10 system/sepolicy/private/gpuservice.te

(allow shell gpuservice (binder (transfer)))
;;* lme

;;* lmx 10 system/sepolicy/private/gpuservice.te

(allow gpuservice shell (fd (use)))
;;* lme

;;* lmx 11 system/sepolicy/private/gpuservice.te

(allow gpuservice system_server (binder (call transfer)))
;;* lme

;;* lmx 11 system/sepolicy/private/gpuservice.te

(allow system_server gpuservice (binder (transfer)))
;;* lme

;;* lmx 11 system/sepolicy/private/gpuservice.te

(allow gpuservice system_server (fd (use)))
;;* lme

;;* lmx 12 system/sepolicy/private/gpuservice.te

(allow gpuservice servicemanager (binder (call transfer)))
;;* lme

;;* lmx 12 system/sepolicy/private/gpuservice.te

(allow servicemanager gpuservice (binder (call transfer)))
;;* lme

;;* lmx 19 system/sepolicy/private/gpuservice.te

(allow gpuservice same_process_hal_file (file (read getattr map execute open)))
;;* lme

;;* lmx 20 system/sepolicy/private/gpuservice.te

(allow gpuservice hwservicemanager_prop (file (read getattr map open)))
;;* lme

;;* lmx 21 system/sepolicy/private/gpuservice.te

(allow gpuservice hwservicemanager (binder (call transfer)))
;;* lme

;;* lmx 21 system/sepolicy/private/gpuservice.te

(allow hwservicemanager gpuservice (binder (call transfer)))
;;* lme

;;* lmx 24 system/sepolicy/private/gpuservice.te

(allow gpuservice graphics_device (dir (search)))
;;* lme

;;* lmx 25 system/sepolicy/private/gpuservice.te

(allow gpuservice graphics_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 28 system/sepolicy/private/gpuservice.te

(allow gpuservice adbd (fd (use)))
;;* lme

;;* lmx 29 system/sepolicy/private/gpuservice.te

(allow gpuservice adbd (unix_stream_socket (read write getattr)))
;;* lme

;;* lmx 30 system/sepolicy/private/gpuservice.te

(allow gpuservice shell (fifo_file (read write getattr)))
;;* lme

;;* lmx 33 system/sepolicy/private/gpuservice.te

(allow gpuservice traced (fd (use)))
;;* lme

;;* lmx 33 system/sepolicy/private/gpuservice.te

(allow gpuservice traced_tmpfs (file (read write getattr map)))
;;* lme

;;* lmx 33 system/sepolicy/private/gpuservice.te

(allow gpuservice traced (memfd_file (read write getattr map)))
;;* lme

;;* lmx 33 system/sepolicy/private/gpuservice.te

(allow gpuservice traced_producer_socket (sock_file (write)))
;;* lme

;;* lmx 33 system/sepolicy/private/gpuservice.te

(allow gpuservice traced (unix_stream_socket (connectto)))
;;* lme

;;* lmx 33 system/sepolicy/private/gpuservice.te

(allow traced gpuservice (fd (use)))
;;* lme

;;* lmx 36 system/sepolicy/private/gpuservice.te

(allow gpuservice devpts (chr_file (read write getattr)))
;;* lme

;;* lmx 39 system/sepolicy/private/gpuservice.te

(allow gpuservice dumpstate (fd (use)))
;;* lme

;;* lmx 40 system/sepolicy/private/gpuservice.te

(allow gpuservice dumpstate (fifo_file (write)))
;;* lme

;;* lmx 43 system/sepolicy/private/gpuservice.te

(allow gpuservice stats_service (service_manager (find)))
;;* lme

;;* lmx 44 system/sepolicy/private/gpuservice.te

(allow gpuservice statsmanager_service (service_manager (find)))
;;* lme

;;* lmx 46 system/sepolicy/private/gpuservice.te

(allow gpuservice statsd (binder (call transfer)))
;;* lme

;;* lmx 46 system/sepolicy/private/gpuservice.te

(allow statsd gpuservice (binder (transfer)))
;;* lme

;;* lmx 46 system/sepolicy/private/gpuservice.te

(allow gpuservice statsd (fd (use)))
;;* lme

;;* lmx 49 system/sepolicy/private/gpuservice.te

(allow gpuservice debugfs_tracing (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 50 system/sepolicy/private/gpuservice.te

(allow gpuservice self (perf_event (open cpu kernel write)))
;;* lme

;;* lmx 51 system/sepolicy/private/gpuservice.te

(neverallow gpuservice self (perf_event (tracepoint read)))
;;* lme

;;* lmx 55 system/sepolicy/private/gpuservice.te

(allow gpuservice fs_bpf (file (read write)))
;;* lme

;;* lmx 58 system/sepolicy/private/gpuservice.te

(allow gpuservice bpfloader (bpf (map_read map_write prog_run)))
;;* lme

;;* lmx 60 system/sepolicy/private/gpuservice.te

(allow gpuservice gpu_service (service_manager (add find)))
;;* lme

;;* lmx 60 system/sepolicy/private/gpuservice.te

(neverallow base_typeattr_588 gpu_service (service_manager (add)))
;;* lme

;;* lmx 60 system/sepolicy/private/gpuservice.te

(allow gpuservice su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 63 system/sepolicy/private/gpuservice.te

(allow gpuservice property_socket (sock_file (write)))
;;* lme

;;* lmx 63 system/sepolicy/private/gpuservice.te

(allow gpuservice init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 63 system/sepolicy/private/gpuservice.te

(allow gpuservice graphics_config_writable_prop (property_service (set)))
;;* lme

;;* lmx 63 system/sepolicy/private/gpuservice.te

(allow gpuservice graphics_config_writable_prop (file (read getattr map open)))
;;* lme

;;* lmx 65 system/sepolicy/private/gpuservice.te

(neverallow base_typeattr_589 graphics_config_writable_prop (property_service (set)))
;;* lme

;;* lmx 68 system/sepolicy/private/gpuservice.te

(allow gpuservice permission_service (service_manager (find)))
;;* lme

;;* lmx 7 system/sepolicy/private/gsid.te

(allow init gsid_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 7 system/sepolicy/private/gsid.te

(allow init gsid (process (transition)))
;;* lme

;;* lmx 7 system/sepolicy/private/gsid.te

(allow gsid gsid_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init gsid (process (noatsecure)))
;;* lmx 7 system/sepolicy/private/gsid.te

(allow init gsid (process (siginh rlimitinh)))
;;* lme

(typetransition init gsid_exec process gsid)
;;* lmx 9 system/sepolicy/private/gsid.te

(allow gsid servicemanager (binder (call transfer)))
;;* lme

;;* lmx 9 system/sepolicy/private/gsid.te

(allow servicemanager gsid (binder (call transfer)))
;;* lme

;;* lmx 11 system/sepolicy/private/gsid.te

(allow gsid gsi_service (service_manager (add find)))
;;* lme

;;* lmx 11 system/sepolicy/private/gsid.te

(neverallow base_typeattr_590 gsi_service (service_manager (add)))
;;* lme

;;* lmx 11 system/sepolicy/private/gsid.te

(allow gsid su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 14 system/sepolicy/private/gsid.te

(allow gsid vold_service (service_manager (find)))
;;* lme

;;* lmx 15 system/sepolicy/private/gsid.te

(allow gsid vold (binder (call transfer)))
;;* lme

;;* lmx 15 system/sepolicy/private/gsid.te

(allow vold gsid (binder (transfer)))
;;* lme

;;* lmx 15 system/sepolicy/private/gsid.te

(allow gsid vold (fd (use)))
;;* lme

;;* lmx 17 system/sepolicy/private/gsid.te

(allow gsid virtual_ab_prop (file (read getattr map open)))
;;* lme

;;* lmx 18 system/sepolicy/private/gsid.te

(allow gsid property_socket (sock_file (write)))
;;* lme

;;* lmx 18 system/sepolicy/private/gsid.te

(allow gsid init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 18 system/sepolicy/private/gsid.te

(allow gsid gsid_prop (property_service (set)))
;;* lme

;;* lmx 18 system/sepolicy/private/gsid.te

(allow gsid gsid_prop (file (read getattr map open)))
;;* lme

;;* lmx 21 system/sepolicy/private/gsid.te

(allow gsid dm_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 22 system/sepolicy/private/gsid.te

(allow gsid dm_device (blk_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 23 system/sepolicy/private/gsid.te

(allow gsid self (capability (sys_admin)))
(allow gsid self (cap_userns (sys_admin)))
;;* lme

(dontaudit gsid self (capability (dac_override)))
(dontaudit gsid self (cap_userns (dac_override)))
;;* lmx 28 system/sepolicy/private/gsid.te

(allow gsid loop_control_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 29 system/sepolicy/private/gsid.te

(allow gsid loop_device (blk_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 38 system/sepolicy/private/gsid.te

(allowx gsid loop_device (ioctl blk_file (0x1261)))
;;* lme

;;* lmx 38 system/sepolicy/private/gsid.te

(allowx gsid loop_device (ioctl blk_file ((range 0x4c00 0x4c01) (range 0x4c04 0x4c05) (range 0x4c08 0x4c09))))
;;* lme

;;* lmx 43 system/sepolicy/private/gsid.te

(allow gsid sysfs_dm (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 43 system/sepolicy/private/gsid.te

(allow gsid sysfs_dm (file (ioctl read getattr lock map open watch watch_reads)))
(allow gsid sysfs_dm (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 47 system/sepolicy/private/gsid.te

(allow gsid sysfs_fs_f2fs (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 47 system/sepolicy/private/gsid.te

(allow gsid sysfs_fs_f2fs (file (ioctl read getattr lock map open watch watch_reads)))
(allow gsid sysfs_fs_f2fs (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 52 system/sepolicy/private/gsid.te

(allow gsid gsi_metadata_file_type (dir (search)))
(allow gsid metadata_file (dir (search)))
;;* lme

;;* lmx 52 system/sepolicy/private/gsid.te

(allow gsid gsi_public_metadata_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 52 system/sepolicy/private/gsid.te

(allow gsid proc_bootconfig (file (ioctl read getattr lock map open watch watch_reads)))
(allow gsid proc_cmdline (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 53 system/sepolicy/private/gsid.te

(allow gsid sysfs_dt_firmware_android (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 54 system/sepolicy/private/gsid.te

(allow gsid sysfs_dt_firmware_android (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 57 system/sepolicy/private/gsid.te

(allow gsid block_device (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 60 system/sepolicy/private/gsid.te

(allow gsid super_block_device_type (blk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 70 system/sepolicy/private/gsid.te

(allowx gsid super_block_device_type (ioctl blk_file (0x1278 0x127a)))
(allowx gsid userdata_block_device (ioctl blk_file (0x1278 0x127a)))
(allowx gsid sdcard_block_device (ioctl blk_file (0x1278 0x127a)))
;;* lme

;;* lmx 74 system/sepolicy/private/gsid.te

(allow gsid mnt_media_rw_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 75 system/sepolicy/private/gsid.te

(allow gsid mnt_media_rw_stub_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 79 system/sepolicy/private/gsid.te

(allow gsid vfat (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 80 system/sepolicy/private/gsid.te

(allow gsid vfat (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 81 system/sepolicy/private/gsid.te

(allow gsid sdcard_block_device (blk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 84 system/sepolicy/private/gsid.te

(allow gsid self (capability (sys_rawio)))
(allow gsid self (cap_userns (sys_rawio)))
;;* lme

;;* lmx 87 system/sepolicy/private/gsid.te

(allow gsid appdomain (memfd_file (read write getattr map)))
;;* lme

;;* lmx 90 system/sepolicy/private/gsid.te

(allow gsid adbd (fd (use)))
;;* lme

;;* lmx 90 system/sepolicy/private/gsid.te

(allow gsid adbd (unix_stream_socket (ioctl read write getattr setattr lock append map bind connect getopt setopt shutdown)))
;;* lme

;;* lmx 90 system/sepolicy/private/gsid.te

(allow gsid shell (fifo_file (ioctl read getattr lock map open watch watch_reads)))
(allow gsid su (fifo_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 90 system/sepolicy/private/gsid.te

(allow gsid sdcard_type (file (ioctl read getattr lock map open watch watch_reads)))
(allow gsid fuse (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 109 system/sepolicy/private/gsid.te

(neverallow base_typeattr_591 gsid_prop (property_service (set)))
;;* lme

;;* lmx 123 system/sepolicy/private/gsid.te

(allow gsid userdata_block_device (blk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 136 system/sepolicy/private/gsid.te

(allow gsid metadata_file (dir (getattr search)))
;;* lme

;;* lmx 139 system/sepolicy/private/gsid.te

(allow gsid gsi_metadata_file_type (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 143 system/sepolicy/private/gsid.te

(allow gsid ota_metadata_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
;;* lme

;;* lmx 148 system/sepolicy/private/gsid.te

(allow gsid gsi_metadata_file_type (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow gsid ota_metadata_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 151 system/sepolicy/private/gsid.te

(allow gsid file_contexts_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 152 system/sepolicy/private/gsid.te

(allow gsid gsi_metadata_file (file (relabelfrom)))
;;* lme

;;* lmx 153 system/sepolicy/private/gsid.te

(allow gsid gsi_public_metadata_file (file (relabelto)))
;;* lme

;;* lmx 158 system/sepolicy/private/gsid.te

(allow gsid gsi_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
(allow gsid ota_image_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 162 system/sepolicy/private/gsid.te

(allow gsid gsi_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow gsid ota_image_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 169 system/sepolicy/private/gsid.te

(allowx gsid gsi_data_file (ioctl file (0x6601 0x660b)))
(allowx gsid ota_image_data_file (ioctl file (0x6601 0x660b)))
;;* lme

;;* lmx 171 system/sepolicy/private/gsid.te

(allow gsid system_server (binder (call)))
;;* lme

;;* lmx 181 system/sepolicy/private/gsid.te

(neverallow base_typeattr_592 gsi_metadata_file_type (dir (write create setattr relabelfrom link rename add_name remove_name reparent rmdir)))
;;* lme

;;* lmx 188 system/sepolicy/private/gsid.te

(neverallow base_typeattr_592 base_typeattr_593 (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow base_typeattr_592 base_typeattr_593 (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow base_typeattr_592 base_typeattr_593 (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow base_typeattr_592 base_typeattr_593 (blk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow base_typeattr_592 base_typeattr_593 (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow base_typeattr_592 base_typeattr_593 (fifo_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 195 system/sepolicy/private/gsid.te

(neverallow base_typeattr_592 gsi_public_metadata_file (file (write create setattr relabelfrom relabelto append unlink link rename execute quotaon mounton audit_access execmod watch_mount watch_sb watch_with_perm execute_no_trans entrypoint)))
(neverallow base_typeattr_592 gsi_public_metadata_file (lnk_file (write create setattr relabelfrom relabelto append unlink link rename execute quotaon mounton audit_access execmod watch_mount watch_sb watch_with_perm)))
(neverallow base_typeattr_592 gsi_public_metadata_file (chr_file (write create setattr relabelfrom relabelto append unlink link rename execute quotaon mounton audit_access execmod watch_mount watch_sb watch_with_perm execute_no_trans entrypoint)))
(neverallow base_typeattr_592 gsi_public_metadata_file (blk_file (write create setattr relabelfrom relabelto append unlink link rename execute quotaon mounton audit_access execmod watch_mount watch_sb watch_with_perm)))
(neverallow base_typeattr_592 gsi_public_metadata_file (sock_file (write create setattr relabelfrom relabelto append unlink link rename execute quotaon mounton audit_access execmod watch_mount watch_sb watch_with_perm)))
(neverallow base_typeattr_592 gsi_public_metadata_file (fifo_file (write create setattr relabelfrom relabelto append unlink link rename execute quotaon mounton audit_access execmod watch_mount watch_sb watch_with_perm)))
;;* lme

;;* lmx 201 system/sepolicy/private/gsid.te

(neverallow base_typeattr_294 gsi_metadata_file_type (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow base_typeattr_294 gsi_metadata_file_type (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
(neverallow base_typeattr_294 gsi_metadata_file_type (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow base_typeattr_294 gsi_metadata_file_type (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow base_typeattr_294 gsi_metadata_file_type (blk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow base_typeattr_294 gsi_metadata_file_type (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow base_typeattr_294 gsi_metadata_file_type (fifo_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 207 system/sepolicy/private/gsid.te

(neverallow base_typeattr_594 gsi_data_file (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow base_typeattr_594 gsi_data_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
(neverallow base_typeattr_594 gsi_data_file (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow base_typeattr_594 gsi_data_file (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow base_typeattr_594 gsi_data_file (blk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow base_typeattr_594 gsi_data_file (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow base_typeattr_594 gsi_data_file (fifo_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 212 system/sepolicy/private/gsid.te

(neverallow base_typeattr_590 gsi_data_file (file (ioctl read write create setattr lock relabelfrom append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow base_typeattr_590 gsi_data_file (lnk_file (ioctl read write create setattr lock relabelfrom append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow base_typeattr_590 gsi_data_file (chr_file (ioctl read write create setattr lock relabelfrom append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow base_typeattr_590 gsi_data_file (blk_file (ioctl read write create setattr lock relabelfrom append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow base_typeattr_590 gsi_data_file (sock_file (ioctl read write create setattr lock relabelfrom append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow base_typeattr_590 gsi_data_file (fifo_file (ioctl read write create setattr lock relabelfrom append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_allocator.te

(allow hal_allocator_client hal_allocator_server (binder (call transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_allocator.te

(allow hal_allocator_server hal_allocator_client (binder (transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_allocator.te

(allow hal_allocator_client hal_allocator_server (fd (use)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_allocator.te

(allow hal_allocator_client hidl_allocator_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_allocator.te

(allow hal_allocator_server hidl_allocator_hwservice (hwservice_manager (add find)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_allocator.te

(allow hal_allocator_server hidl_base_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_allocator.te

(neverallow base_typeattr_595 hidl_allocator_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_allocator.te

(neverallow base_typeattr_596 hidl_allocator_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_allocator.te

(allow hal_allocator_client hidl_memory_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_allocator.te

(allow hal_allocator_client same_process_hal_file (file (read getattr map execute open)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_allocator_default.te

(allow init hal_allocator_default_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_allocator_default.te

(allow init hal_allocator_default (process (transition)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_allocator_default.te

(allow hal_allocator_default hal_allocator_default_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init hal_allocator_default (process (noatsecure)))
;;* lmx 5 system/sepolicy/private/hal_allocator_default.te

(allow init hal_allocator_default (process (siginh rlimitinh)))
;;* lme

(typetransition init hal_allocator_default_exec process hal_allocator_default)
;;* lmx 8 system/sepolicy/private/hal_allocator_default.te

(allow hal_allocator_default property_socket (sock_file (write)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_allocator_default.te

(allow hal_allocator_default init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_allocator_default.te

(allow hal_allocator_default hidl_memory_prop (property_service (set)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_allocator_default.te

(allow hal_allocator_default hidl_memory_prop (file (read getattr map open)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_atrace.te

(allow hal_atrace_client hal_atrace_server (binder (call transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_atrace.te

(allow hal_atrace_server hal_atrace_client (binder (transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_atrace.te

(allow hal_atrace_client hal_atrace_server (fd (use)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_atrace.te

(allow hal_atrace_client hal_atrace_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_atrace.te

(allow hal_atrace_server hal_atrace_hwservice (hwservice_manager (add find)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_atrace.te

(allow hal_atrace_server hidl_base_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_atrace.te

(neverallow base_typeattr_597 hal_atrace_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_atrace.te

(neverallow base_typeattr_598 hal_atrace_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_audio.te

(allow hal_audio_client hal_audio_server (binder (call transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_audio.te

(allow hal_audio_server hal_audio_client (binder (transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_audio.te

(allow hal_audio_client hal_audio_server (fd (use)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_audio.te

(allow hal_audio_server hal_audio_client (binder (call transfer)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_audio.te

(allow hal_audio_client hal_audio_server (binder (transfer)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_audio.te

(allow hal_audio_server hal_audio_client (fd (use)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_audio.te

(allow hal_audio_client hal_audio_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_audio.te

(allow hal_audio_server hal_audio_hwservice (hwservice_manager (add find)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_audio.te

(allow hal_audio_server hidl_base_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_audio.te

(neverallow base_typeattr_599 hal_audio_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_audio.te

(neverallow base_typeattr_600 hal_audio_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_audio.te

(allow hal_audio_client hal_audio_service (service_manager (find)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_audio.te

(allow hal_audio_server hal_audio_service (service_manager (add find)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_audio.te

(neverallow base_typeattr_599 hal_audio_service (service_manager (add)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_audio.te

(allow hal_audio_server su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_audio.te

(neverallow base_typeattr_601 hal_audio_service (service_manager (find)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_audio.te

(allow hal_audio_server servicemanager (binder (call transfer)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_audio.te

(allow servicemanager hal_audio_server (binder (transfer)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_audio.te

(allow hal_audio_server servicemanager (fd (use)))
;;* lme

;;* lmx 10 system/sepolicy/private/hal_audio.te

(allow hal_audio proc (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 10 system/sepolicy/private/hal_audio.te

(allow hal_audio proc (file (ioctl read getattr lock map open watch watch_reads)))
(allow hal_audio proc (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 11 system/sepolicy/private/hal_audio.te

(allow hal_audio proc_asound (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 11 system/sepolicy/private/hal_audio.te

(allow hal_audio proc_asound (file (ioctl read getattr lock map open watch watch_reads)))
(allow hal_audio proc_asound (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 12 system/sepolicy/private/hal_audio.te

(allow hal_audio_server audio_device (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 13 system/sepolicy/private/hal_audio.te

(allow hal_audio_server audio_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 16 system/sepolicy/private/hal_audio.te

(allow hal_audio shell (fd (use)))
;;* lme

;;* lmx 17 system/sepolicy/private/hal_audio.te

(allow hal_audio shell (fifo_file (write)))
;;* lme

;;* lmx 18 system/sepolicy/private/hal_audio.te

(allow hal_audio dumpstate (fd (use)))
;;* lme

;;* lmx 19 system/sepolicy/private/hal_audio.te

(allow hal_audio dumpstate (fifo_file (write)))
;;* lme

;;* lmx 22 system/sepolicy/private/hal_audio.te

(allow hal_audio_server appdomain (fd (use)))
;;* lme

;;* lmx 24 system/sepolicy/private/hal_audio.te

(allow hal_audio_server system_server_tmpfs (file (read getattr map)))
;;* lme

;;* lmx 25 system/sepolicy/private/hal_audio.te

(allow hal_audio_server system_server (memfd_file (read getattr map)))
;;* lme

;;* lmx 28 system/sepolicy/private/hal_audio.te

(allow hal_audio_server self (capability (sys_nice)))
(allow hal_audio_server self (cap_userns (sys_nice)))
;;* lme

;;* lmx 31 system/sepolicy/private/hal_audio.te

(allow hal_audio vndbinder_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 31 system/sepolicy/private/hal_audio.te

(allow hal_audio vndservicemanager (binder (call transfer)))
;;* lme

;;* lmx 38 system/sepolicy/private/hal_audio.te

(neverallow hal_audio_server fs_type (file (execute_no_trans)))
(neverallow hal_audio_server file_type (file (execute_no_trans)))
;;* lme

;;* lmx 41 system/sepolicy/private/hal_audio.te

(neverallow base_typeattr_602 audio_device (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
;;* lme

;;* lmx 43 system/sepolicy/private/hal_audio.te

(allow hal_audio audio_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 44 system/sepolicy/private/hal_audio.te

(allow hal_audio bluetooth_a2dp_offload_prop (file (read getattr map open)))
;;* lme

;;* lmx 45 system/sepolicy/private/hal_audio.te

(allow hal_audio bluetooth_audio_hal_prop (file (read getattr map open)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_audiocontrol.te

(allow hal_audiocontrol_client hal_audiocontrol_server (binder (call transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_audiocontrol.te

(allow hal_audiocontrol_server hal_audiocontrol_client (binder (transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_audiocontrol.te

(allow hal_audiocontrol_client hal_audiocontrol_server (fd (use)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_audiocontrol.te

(allow hal_audiocontrol_server hal_audiocontrol_client (binder (call transfer)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_audiocontrol.te

(allow hal_audiocontrol_client hal_audiocontrol_server (binder (transfer)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_audiocontrol.te

(allow hal_audiocontrol_server hal_audiocontrol_client (fd (use)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_audiocontrol.te

(allow hal_audiocontrol_client hal_audiocontrol_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_audiocontrol.te

(allow hal_audiocontrol_server hal_audiocontrol_hwservice (hwservice_manager (add find)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_audiocontrol.te

(allow hal_audiocontrol_server hidl_base_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_audiocontrol.te

(neverallow base_typeattr_603 hal_audiocontrol_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_audiocontrol.te

(neverallow base_typeattr_604 hal_audiocontrol_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_audiocontrol.te

(allow hal_audiocontrol_client hal_audiocontrol_service (service_manager (find)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_audiocontrol.te

(allow hal_audiocontrol_server hal_audiocontrol_service (service_manager (add find)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_audiocontrol.te

(neverallow base_typeattr_603 hal_audiocontrol_service (service_manager (add)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_audiocontrol.te

(allow hal_audiocontrol_server su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_audiocontrol.te

(neverallow base_typeattr_605 hal_audiocontrol_service (service_manager (find)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_audiocontrol.te

(allow hal_audiocontrol_server servicemanager (binder (call transfer)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_audiocontrol.te

(allow servicemanager hal_audiocontrol_server (binder (transfer)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_audiocontrol.te

(allow hal_audiocontrol_server servicemanager (fd (use)))
;;* lme

;;* lmx 1 system/sepolicy/private/hal_authgraph.te

(allow hal_authgraph_client hal_authgraph_server (binder (call transfer)))
;;* lme

;;* lmx 1 system/sepolicy/private/hal_authgraph.te

(allow hal_authgraph_server hal_authgraph_client (binder (transfer)))
;;* lme

;;* lmx 1 system/sepolicy/private/hal_authgraph.te

(allow hal_authgraph_client hal_authgraph_server (fd (use)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_authgraph.te

(allow hal_authgraph_client hal_authgraph_service (service_manager (find)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_authgraph.te

(allow hal_authgraph_server hal_authgraph_service (service_manager (add find)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_authgraph.te

(neverallow base_typeattr_606 hal_authgraph_service (service_manager (add)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_authgraph.te

(allow hal_authgraph_server su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_authgraph.te

(neverallow base_typeattr_607 hal_authgraph_service (service_manager (find)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_authgraph.te

(allow hal_authgraph_server servicemanager (binder (call transfer)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_authgraph.te

(allow servicemanager hal_authgraph_server (binder (transfer)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_authgraph.te

(allow hal_authgraph_server servicemanager (fd (use)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_authgraph.te

(allow hal_authgraph_server tee_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_authsecret.te

(allow hal_authsecret_client hal_authsecret_server (binder (call transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_authsecret.te

(allow hal_authsecret_server hal_authsecret_client (binder (transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_authsecret.te

(allow hal_authsecret_client hal_authsecret_server (fd (use)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_authsecret.te

(allow hal_authsecret_client hal_authsecret_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_authsecret.te

(allow hal_authsecret_server hal_authsecret_hwservice (hwservice_manager (add find)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_authsecret.te

(allow hal_authsecret_server hidl_base_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_authsecret.te

(neverallow base_typeattr_608 hal_authsecret_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_authsecret.te

(neverallow base_typeattr_609 hal_authsecret_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_authsecret.te

(allow hal_authsecret_client hal_authsecret_service (service_manager (find)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_authsecret.te

(allow hal_authsecret_server hal_authsecret_service (service_manager (add find)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_authsecret.te

(neverallow base_typeattr_608 hal_authsecret_service (service_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_authsecret.te

(allow hal_authsecret_server su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_authsecret.te

(neverallow base_typeattr_610 hal_authsecret_service (service_manager (find)))
;;* lme

;;* lmx 7 system/sepolicy/private/hal_authsecret.te

(allow hal_authsecret_server servicemanager (binder (call transfer)))
;;* lme

;;* lmx 7 system/sepolicy/private/hal_authsecret.te

(allow servicemanager hal_authsecret_server (binder (transfer)))
;;* lme

;;* lmx 7 system/sepolicy/private/hal_authsecret.te

(allow hal_authsecret_server servicemanager (fd (use)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_bluetooth.te

(allow hal_bluetooth_client hal_bluetooth_server (binder (call transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_bluetooth.te

(allow hal_bluetooth_server hal_bluetooth_client (binder (transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_bluetooth.te

(allow hal_bluetooth_client hal_bluetooth_server (fd (use)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_bluetooth.te

(allow hal_bluetooth_server hal_bluetooth_client (binder (call transfer)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_bluetooth.te

(allow hal_bluetooth_client hal_bluetooth_server (binder (transfer)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_bluetooth.te

(allow hal_bluetooth_server hal_bluetooth_client (fd (use)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_bluetooth.te

(allow hal_bluetooth_server servicemanager (binder (call transfer)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_bluetooth.te

(allow servicemanager hal_bluetooth_server (binder (transfer)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_bluetooth.te

(allow hal_bluetooth_server servicemanager (fd (use)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_bluetooth.te

(allow hal_bluetooth_client hal_bluetooth_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_bluetooth.te

(allow hal_bluetooth_server hal_bluetooth_hwservice (hwservice_manager (add find)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_bluetooth.te

(allow hal_bluetooth_server hidl_base_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_bluetooth.te

(neverallow base_typeattr_611 hal_bluetooth_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_bluetooth.te

(neverallow base_typeattr_612 hal_bluetooth_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 7 system/sepolicy/private/hal_bluetooth.te

(allow hal_bluetooth_client hal_bluetooth_service (service_manager (find)))
;;* lme

;;* lmx 7 system/sepolicy/private/hal_bluetooth.te

(allow hal_bluetooth_server hal_bluetooth_service (service_manager (add find)))
;;* lme

;;* lmx 7 system/sepolicy/private/hal_bluetooth.te

(neverallow base_typeattr_611 hal_bluetooth_service (service_manager (add)))
;;* lme

;;* lmx 7 system/sepolicy/private/hal_bluetooth.te

(allow hal_bluetooth_server su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 7 system/sepolicy/private/hal_bluetooth.te

(neverallow base_typeattr_613 hal_bluetooth_service (service_manager (find)))
;;* lme

;;* lmx 9 system/sepolicy/private/hal_bluetooth.te

(allow hal_bluetooth sysfs_wake_lock (file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 9 system/sepolicy/private/hal_bluetooth.te

(allow hal_bluetooth self (capability2 (block_suspend)))
(allow hal_bluetooth self (cap2_userns (block_suspend)))
;;* lme

;;* lmx 9 system/sepolicy/private/hal_bluetooth.te

(allow hal_bluetooth system_suspend_server (binder (call transfer)))
;;* lme

;;* lmx 9 system/sepolicy/private/hal_bluetooth.te

(allow system_suspend_server hal_bluetooth (binder (transfer)))
;;* lme

;;* lmx 9 system/sepolicy/private/hal_bluetooth.te

(allow hal_bluetooth system_suspend_server (fd (use)))
;;* lme

;;* lmx 9 system/sepolicy/private/hal_bluetooth.te

(allow hal_bluetooth system_suspend_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 9 system/sepolicy/private/hal_bluetooth.te

(allow hal_bluetooth hwservicemanager (binder (call transfer)))
;;* lme

;;* lmx 9 system/sepolicy/private/hal_bluetooth.te

(allow hwservicemanager hal_bluetooth (binder (call transfer)))
;;* lme

;;* lmx 9 system/sepolicy/private/hal_bluetooth.te

(allow hal_bluetooth hwservicemanager_prop (file (read getattr map open)))
;;* lme

;;* lmx 9 system/sepolicy/private/hal_bluetooth.te

(allow hal_bluetooth hidl_manager_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 9 system/sepolicy/private/hal_bluetooth.te

(allow hal_bluetooth hal_system_suspend_service (service_manager (find)))
;;* lme

;;* lmx 9 system/sepolicy/private/hal_bluetooth.te

(allow hal_bluetooth servicemanager (binder (call transfer)))
;;* lme

;;* lmx 9 system/sepolicy/private/hal_bluetooth.te

(allow servicemanager hal_bluetooth (binder (call transfer)))
;;* lme

;;* lmx 12 system/sepolicy/private/hal_bluetooth.te

(allow hal_bluetooth_server self (capability (net_admin)))
(allow hal_bluetooth_server self (cap_userns (net_admin)))
;;* lme

;;* lmx 15 system/sepolicy/private/hal_bluetooth.te

(allow hal_bluetooth bluetooth_efs_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 15 system/sepolicy/private/hal_bluetooth.te

(allow hal_bluetooth bluetooth_efs_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow hal_bluetooth bluetooth_efs_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 17 system/sepolicy/private/hal_bluetooth.te

(allow hal_bluetooth uhid_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
(allow hal_bluetooth hci_attach_dev (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 20 system/sepolicy/private/hal_bluetooth.te

(allow hal_bluetooth sysfs_type (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 20 system/sepolicy/private/hal_bluetooth.te

(allow hal_bluetooth sysfs_type (file (ioctl read getattr lock map open watch watch_reads)))
(allow hal_bluetooth sysfs_type (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 21 system/sepolicy/private/hal_bluetooth.te

(allow hal_bluetooth sysfs_bluetooth_writable (file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 22 system/sepolicy/private/hal_bluetooth.te

(allow hal_bluetooth self (capability2 (wake_alarm)))
(allow hal_bluetooth self (cap2_userns (wake_alarm)))
;;* lme

;;* lmx 25 system/sepolicy/private/hal_bluetooth.te

(allow hal_bluetooth property_socket (sock_file (write)))
;;* lme

;;* lmx 25 system/sepolicy/private/hal_bluetooth.te

(allow hal_bluetooth init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 25 system/sepolicy/private/hal_bluetooth.te

(allow hal_bluetooth bluetooth_a2dp_offload_prop (property_service (set)))
;;* lme

;;* lmx 25 system/sepolicy/private/hal_bluetooth.te

(allow hal_bluetooth bluetooth_a2dp_offload_prop (file (read getattr map open)))
;;* lme

;;* lmx 26 system/sepolicy/private/hal_bluetooth.te

(allow hal_bluetooth property_socket (sock_file (write)))
;;* lme

;;* lmx 26 system/sepolicy/private/hal_bluetooth.te

(allow hal_bluetooth init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 26 system/sepolicy/private/hal_bluetooth.te

(allow hal_bluetooth bluetooth_audio_hal_prop (property_service (set)))
;;* lme

;;* lmx 26 system/sepolicy/private/hal_bluetooth.te

(allow hal_bluetooth bluetooth_audio_hal_prop (file (read getattr map open)))
;;* lme

;;* lmx 27 system/sepolicy/private/hal_bluetooth.te

(allow hal_bluetooth property_socket (sock_file (write)))
;;* lme

;;* lmx 27 system/sepolicy/private/hal_bluetooth.te

(allow hal_bluetooth init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 27 system/sepolicy/private/hal_bluetooth.te

(allow hal_bluetooth bluetooth_finder_prop (property_service (set)))
;;* lme

;;* lmx 27 system/sepolicy/private/hal_bluetooth.te

(allow hal_bluetooth bluetooth_finder_prop (file (read getattr map open)))
;;* lme

;;* lmx 28 system/sepolicy/private/hal_bluetooth.te

(allow hal_bluetooth property_socket (sock_file (write)))
;;* lme

;;* lmx 28 system/sepolicy/private/hal_bluetooth.te

(allow hal_bluetooth init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 28 system/sepolicy/private/hal_bluetooth.te

(allow hal_bluetooth bluetooth_prop (property_service (set)))
;;* lme

;;* lmx 28 system/sepolicy/private/hal_bluetooth.te

(allow hal_bluetooth bluetooth_prop (file (read getattr map open)))
;;* lme

;;* lmx 29 system/sepolicy/private/hal_bluetooth.te

(allow hal_bluetooth property_socket (sock_file (write)))
;;* lme

;;* lmx 29 system/sepolicy/private/hal_bluetooth.te

(allow hal_bluetooth init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 29 system/sepolicy/private/hal_bluetooth.te

(allow hal_bluetooth exported_bluetooth_prop (property_service (set)))
;;* lme

;;* lmx 29 system/sepolicy/private/hal_bluetooth.te

(allow hal_bluetooth exported_bluetooth_prop (file (read getattr map open)))
;;* lme

;;* lmx 32 system/sepolicy/private/hal_bluetooth.te

(allow hal_bluetooth proc_bluetooth_writable (file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 35 system/sepolicy/private/hal_bluetooth.te

(allow hal_bluetooth self (capability (sys_nice)))
(allow hal_bluetooth self (cap_userns (sys_nice)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_bluetooth_lpp.te

(allow hal_bluetooth_lpp_client hal_bluetooth_lpp_server (binder (call transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_bluetooth_lpp.te

(allow hal_bluetooth_lpp_server hal_bluetooth_lpp_client (binder (transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_bluetooth_lpp.te

(allow hal_bluetooth_lpp_client hal_bluetooth_lpp_server (fd (use)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_bluetooth_lpp.te

(allow hal_bluetooth_lpp_server hal_bluetooth_lpp_client (binder (call transfer)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_bluetooth_lpp.te

(allow hal_bluetooth_lpp_client hal_bluetooth_lpp_server (binder (transfer)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_bluetooth_lpp.te

(allow hal_bluetooth_lpp_server hal_bluetooth_lpp_client (fd (use)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_bluetooth_lpp.te

(allow hal_bluetooth_lpp_server servicemanager (binder (call transfer)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_bluetooth_lpp.te

(allow servicemanager hal_bluetooth_lpp_server (binder (call transfer)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_bluetooth_lpp.te

(allow hal_bluetooth_lpp_client hal_bluetooth_lpp_service (service_manager (find)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_bluetooth_lpp.te

(allow hal_bluetooth_lpp_server hal_bluetooth_lpp_service (service_manager (add find)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_bluetooth_lpp.te

(neverallow base_typeattr_614 hal_bluetooth_lpp_service (service_manager (add)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_bluetooth_lpp.te

(allow hal_bluetooth_lpp_server su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_bluetooth_lpp.te

(neverallow base_typeattr_615 hal_bluetooth_lpp_service (service_manager (find)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_bootctl.te

(allow hal_bootctl_client hal_bootctl_server (binder (call transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_bootctl.te

(allow hal_bootctl_server hal_bootctl_client (binder (transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_bootctl.te

(allow hal_bootctl_client hal_bootctl_server (fd (use)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_bootctl.te

(allow hal_bootctl_server hal_bootctl_client (binder (call transfer)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_bootctl.te

(allow hal_bootctl_client hal_bootctl_server (binder (transfer)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_bootctl.te

(allow hal_bootctl_server hal_bootctl_client (fd (use)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_bootctl.te

(allow hal_bootctl_server servicemanager (binder (call transfer)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_bootctl.te

(allow servicemanager hal_bootctl_server (binder (call transfer)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_bootctl.te

(allow hal_bootctl_client hal_bootctl_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_bootctl.te

(allow hal_bootctl_server hal_bootctl_hwservice (hwservice_manager (add find)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_bootctl.te

(allow hal_bootctl_server hidl_base_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_bootctl.te

(neverallow base_typeattr_616 hal_bootctl_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_bootctl.te

(neverallow base_typeattr_617 hal_bootctl_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 7 system/sepolicy/private/hal_bootctl.te

(allow hal_bootctl_server proc_bootconfig (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 10 system/sepolicy/private/hal_bootctl.te

(allow hal_bootctl_client hal_bootctl_service (service_manager (find)))
;;* lme

;;* lmx 10 system/sepolicy/private/hal_bootctl.te

(allow hal_bootctl_server hal_bootctl_service (service_manager (add find)))
;;* lme

;;* lmx 10 system/sepolicy/private/hal_bootctl.te

(neverallow base_typeattr_616 hal_bootctl_service (service_manager (add)))
;;* lme

;;* lmx 10 system/sepolicy/private/hal_bootctl.te

(allow hal_bootctl_server su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 10 system/sepolicy/private/hal_bootctl.te

(neverallow base_typeattr_618 hal_bootctl_service (service_manager (find)))
;;* lme

;;* lmx 1 system/sepolicy/private/hal_broadcastradio.te

(allow hal_broadcastradio_client hal_broadcastradio_server (binder (call transfer)))
;;* lme

;;* lmx 1 system/sepolicy/private/hal_broadcastradio.te

(allow hal_broadcastradio_server hal_broadcastradio_client (binder (transfer)))
;;* lme

;;* lmx 1 system/sepolicy/private/hal_broadcastradio.te

(allow hal_broadcastradio_client hal_broadcastradio_server (fd (use)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_broadcastradio.te

(allow hal_broadcastradio_server hal_broadcastradio_client (binder (call transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_broadcastradio.te

(allow hal_broadcastradio_client hal_broadcastradio_server (binder (transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_broadcastradio.te

(allow hal_broadcastradio_server hal_broadcastradio_client (fd (use)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_broadcastradio.te

(allow hal_broadcastradio_client hal_broadcastradio_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_broadcastradio.te

(allow hal_broadcastradio_server hal_broadcastradio_hwservice (hwservice_manager (add find)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_broadcastradio.te

(allow hal_broadcastradio_server hidl_base_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_broadcastradio.te

(neverallow base_typeattr_619 hal_broadcastradio_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_broadcastradio.te

(neverallow base_typeattr_620 hal_broadcastradio_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_broadcastradio.te

(allow hal_broadcastradio_client hal_broadcastradio_service (service_manager (find)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_broadcastradio.te

(allow hal_broadcastradio_server hal_broadcastradio_service (service_manager (add find)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_broadcastradio.te

(neverallow base_typeattr_619 hal_broadcastradio_service (service_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_broadcastradio.te

(allow hal_broadcastradio_server su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_broadcastradio.te

(neverallow base_typeattr_621 hal_broadcastradio_service (service_manager (find)))
;;* lme

;;* lmx 7 system/sepolicy/private/hal_broadcastradio.te

(allow hal_broadcastradio_server servicemanager (binder (call transfer)))
;;* lme

;;* lmx 7 system/sepolicy/private/hal_broadcastradio.te

(allow servicemanager hal_broadcastradio_server (binder (transfer)))
;;* lme

;;* lmx 7 system/sepolicy/private/hal_broadcastradio.te

(allow hal_broadcastradio_server servicemanager (fd (use)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_camera.te

(allow hal_camera_client hal_camera_server (binder (call transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_camera.te

(allow hal_camera_server hal_camera_client (binder (transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_camera.te

(allow hal_camera_client hal_camera_server (fd (use)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_camera.te

(allow hal_camera_server hal_camera_client (binder (call transfer)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_camera.te

(allow hal_camera_client hal_camera_server (binder (transfer)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_camera.te

(allow hal_camera_server hal_camera_client (fd (use)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_camera.te

(allow hal_camera_server servicemanager (binder (call transfer)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_camera.te

(allow servicemanager hal_camera_server (binder (call transfer)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_camera.te

(allow hal_camera_client hal_camera_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_camera.te

(allow hal_camera_server hal_camera_hwservice (hwservice_manager (add find)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_camera.te

(allow hal_camera_server hidl_base_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_camera.te

(neverallow base_typeattr_622 hal_camera_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_camera.te

(neverallow base_typeattr_623 hal_camera_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 9 system/sepolicy/private/hal_camera.te

(allow hal_camera_client hal_camera_service (service_manager (find)))
;;* lme

;;* lmx 9 system/sepolicy/private/hal_camera.te

(allow hal_camera_server hal_camera_service (service_manager (add find)))
;;* lme

;;* lmx 9 system/sepolicy/private/hal_camera.te

(neverallow base_typeattr_622 hal_camera_service (service_manager (add)))
;;* lme

;;* lmx 9 system/sepolicy/private/hal_camera.te

(allow hal_camera_server su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 9 system/sepolicy/private/hal_camera.te

(neverallow base_typeattr_624 hal_camera_service (service_manager (find)))
;;* lme

;;* lmx 11 system/sepolicy/private/hal_camera.te

(allow hal_camera device (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 12 system/sepolicy/private/hal_camera.te

(allow hal_camera video_device (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 13 system/sepolicy/private/hal_camera.te

(allow hal_camera video_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 14 system/sepolicy/private/hal_camera.te

(allow hal_camera camera_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 15 system/sepolicy/private/hal_camera.te

(allow hal_camera dmabuf_system_heap_device (chr_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 18 system/sepolicy/private/hal_camera.te

(allow hal_camera_client hal_graphics_allocator (fd (use)))
(allow hal_camera_server hal_graphics_allocator (fd (use)))
;;* lme

;;* lmx 21 system/sepolicy/private/hal_camera.te

(allow hal_camera base_typeattr_625 (fd (use)))
;;* lme

;;* lmx 22 system/sepolicy/private/hal_camera.te

(allow hal_camera surfaceflinger (fd (use)))
;;* lme

;;* lmx 23 system/sepolicy/private/hal_camera.te

(allow hal_camera hal_allocator_server (fd (use)))
;;* lme

;;* lmx 26 system/sepolicy/private/hal_camera.te

(allow hal_camera shell (fd (use)))
;;* lme

;;* lmx 27 system/sepolicy/private/hal_camera.te

(allow hal_camera shell (fifo_file (write)))
;;* lme

;;* lmx 35 system/sepolicy/private/hal_camera.te

(neverallow hal_camera_server fs_type (file (execute_no_trans)))
(neverallow hal_camera_server file_type (file (execute_no_trans)))
;;* lme

;;* lmx 38 system/sepolicy/private/hal_camera.te

(neverallow hal_camera_server base_typeattr_329 (tcp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind name_connect)))
(neverallow hal_camera_server base_typeattr_329 (udp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind)))
(neverallow hal_camera_server base_typeattr_329 (rawip_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind)))
;;* lme

;;* lmx 41 system/sepolicy/private/hal_camera.te

(neverallow base_typeattr_626 camera_device (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_can.te

(allow hal_can_controller_client hal_can_controller_server (binder (call transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_can.te

(allow hal_can_controller_server hal_can_controller_client (binder (transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_can.te

(allow hal_can_controller_client hal_can_controller_server (fd (use)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_can.te

(allow hal_can_controller_server hal_can_controller_client (binder (call transfer)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_can.te

(allow hal_can_controller_client hal_can_controller_server (binder (transfer)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_can.te

(allow hal_can_controller_server hal_can_controller_client (fd (use)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_can.te

(allow hal_can_controller_client hal_can_controller_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_can.te

(allow hal_can_controller_server hal_can_controller_hwservice (hwservice_manager (add find)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_can.te

(allow hal_can_controller_server hidl_base_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_can.te

(neverallow base_typeattr_627 hal_can_controller_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_can.te

(neverallow base_typeattr_628 hal_can_controller_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 7 system/sepolicy/private/hal_can.te

(allow hal_can_bus_client hal_can_bus_server (binder (call transfer)))
;;* lme

;;* lmx 7 system/sepolicy/private/hal_can.te

(allow hal_can_bus_server hal_can_bus_client (binder (transfer)))
;;* lme

;;* lmx 7 system/sepolicy/private/hal_can.te

(allow hal_can_bus_client hal_can_bus_server (fd (use)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_can.te

(allow hal_can_bus_server hal_can_bus_client (binder (call transfer)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_can.te

(allow hal_can_bus_client hal_can_bus_server (binder (transfer)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_can.te

(allow hal_can_bus_server hal_can_bus_client (fd (use)))
;;* lme

;;* lmx 9 system/sepolicy/private/hal_can.te

(allow hal_can_bus_client hal_can_bus_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 9 system/sepolicy/private/hal_can.te

(allow hal_can_bus_server hal_can_bus_hwservice (hwservice_manager (add find)))
;;* lme

;;* lmx 9 system/sepolicy/private/hal_can.te

(allow hal_can_bus_server hidl_base_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 9 system/sepolicy/private/hal_can.te

(neverallow base_typeattr_629 hal_can_bus_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 9 system/sepolicy/private/hal_can.te

(neverallow base_typeattr_630 hal_can_bus_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 12 system/sepolicy/private/hal_can.te

(allow hal_can_controller_client hal_can_controller_service (service_manager (find)))
;;* lme

;;* lmx 12 system/sepolicy/private/hal_can.te

(allow hal_can_controller_server hal_can_controller_service (service_manager (add find)))
;;* lme

;;* lmx 12 system/sepolicy/private/hal_can.te

(neverallow base_typeattr_627 hal_can_controller_service (service_manager (add)))
;;* lme

;;* lmx 12 system/sepolicy/private/hal_can.te

(allow hal_can_controller_server su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 12 system/sepolicy/private/hal_can.te

(neverallow base_typeattr_631 hal_can_controller_service (service_manager (find)))
;;* lme

;;* lmx 13 system/sepolicy/private/hal_can.te

(allow hal_can_controller servicemanager (binder (call transfer)))
;;* lme

;;* lmx 13 system/sepolicy/private/hal_can.te

(allow servicemanager hal_can_controller (binder (call transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_cas.te

(allow hal_cas_client hal_cas_server (binder (call transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_cas.te

(allow hal_cas_server hal_cas_client (binder (transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_cas.te

(allow hal_cas_client hal_cas_server (fd (use)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_cas.te

(allow hal_cas_server hal_cas_client (binder (call transfer)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_cas.te

(allow hal_cas_client hal_cas_server (binder (transfer)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_cas.te

(allow hal_cas_server hal_cas_client (fd (use)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_cas.te

(allow hal_cas_client hal_cas_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_cas.te

(allow hal_cas_server hal_cas_hwservice (hwservice_manager (add find)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_cas.te

(allow hal_cas_server hidl_base_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_cas.te

(neverallow base_typeattr_632 hal_cas_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_cas.te

(neverallow base_typeattr_633 hal_cas_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_cas.te

(allow hal_cas_server hidl_memory_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_cas.te

(allow hal_cas_client hal_cas_service (service_manager (find)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_cas.te

(allow hal_cas_server hal_cas_service (service_manager (add find)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_cas.te

(neverallow base_typeattr_632 hal_cas_service (service_manager (add)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_cas.te

(allow hal_cas_server su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_cas.te

(neverallow base_typeattr_634 hal_cas_service (service_manager (find)))
;;* lme

;;* lmx 10 system/sepolicy/private/hal_cas.te

(allow hal_cas_server servicemanager (binder (call transfer)))
;;* lme

;;* lmx 10 system/sepolicy/private/hal_cas.te

(allow servicemanager hal_cas_server (binder (transfer)))
;;* lme

;;* lmx 10 system/sepolicy/private/hal_cas.te

(allow hal_cas_server servicemanager (fd (use)))
;;* lme

;;* lmx 11 system/sepolicy/private/hal_cas.te

(allow hal_cas_client servicemanager (binder (call transfer)))
;;* lme

;;* lmx 11 system/sepolicy/private/hal_cas.te

(allow servicemanager hal_cas_client (binder (transfer)))
;;* lme

;;* lmx 11 system/sepolicy/private/hal_cas.te

(allow hal_cas_client servicemanager (fd (use)))
;;* lme

;;* lmx 14 system/sepolicy/private/hal_cas.te

(allow hal_cas_server serialno_prop (file (read getattr map open)))
;;* lme

;;* lmx 17 system/sepolicy/private/hal_cas.te

(allow hal_cas system_data_file (file (read getattr)))
;;* lme

;;* lmx 20 system/sepolicy/private/hal_cas.te

(allow hal_cas cgroup (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 20 system/sepolicy/private/hal_cas.te

(allow hal_cas cgroup (file (ioctl read getattr lock map open watch watch_reads)))
(allow hal_cas cgroup (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 21 system/sepolicy/private/hal_cas.te

(allow hal_cas cgroup (dir (write search)))
;;* lme

;;* lmx 22 system/sepolicy/private/hal_cas.te

(allow hal_cas cgroup (file (write lock append map open)))
;;* lme

;;* lmx 24 system/sepolicy/private/hal_cas.te

(allow hal_cas cgroup_v2 (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 24 system/sepolicy/private/hal_cas.te

(allow hal_cas cgroup_v2 (file (ioctl read getattr lock map open watch watch_reads)))
(allow hal_cas cgroup_v2 (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 25 system/sepolicy/private/hal_cas.te

(allow hal_cas cgroup_v2 (dir (write search)))
;;* lme

;;* lmx 26 system/sepolicy/private/hal_cas.te

(allow hal_cas cgroup_v2 (file (write lock append map open)))
;;* lme

;;* lmx 28 system/sepolicy/private/hal_cas.te

(allow hal_cas hal_graphics_allocator (fd (use)))
;;* lme

;;* lmx 30 system/sepolicy/private/hal_cas.te

(allow hal_cas tee_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 38 system/sepolicy/private/hal_cas.te

(neverallow hal_cas_server fs_type (file (execute_no_trans)))
(neverallow hal_cas_server file_type (file (execute_no_trans)))
;;* lme

;;* lmx 41 system/sepolicy/private/hal_cas.te

(neverallowx hal_cas_server domain (ioctl tcp_socket (0x6900 0x6902)))
(neverallowx hal_cas_server domain (ioctl udp_socket (0x6900 0x6902)))
(neverallowx hal_cas_server domain (ioctl rawip_socket (0x6900 0x6902)))
;;* lme

;;* lmx 41 system/sepolicy/private/hal_cas.te

(neverallowx hal_cas_server domain (ioctl tcp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx hal_cas_server domain (ioctl udp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx hal_cas_server domain (ioctl rawip_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
;;* lme

;;* lmx 41 system/sepolicy/private/hal_cas.te

(neverallowx hal_cas_server domain (ioctl tcp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx hal_cas_server domain (ioctl udp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx hal_cas_server domain (ioctl rawip_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
;;* lme

;;* lmx 1 system/sepolicy/private/hal_codec2.te

(allow hal_codec2_client media_variant_prop (file (read getattr map open)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_codec2.te

(allow hal_codec2_server media_variant_prop (file (read getattr map open)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_codec2.te

(allow hal_codec2_client codec2_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_codec2.te

(allow hal_codec2_server codec2_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_codec2.te

(allow hal_codec2_client hal_codec2_server (binder (call transfer)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_codec2.te

(allow hal_codec2_server hal_codec2_client (binder (transfer)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_codec2.te

(allow hal_codec2_client hal_codec2_server (fd (use)))
;;* lme

;;* lmx 7 system/sepolicy/private/hal_codec2.te

(allow hal_codec2_server hal_codec2_client (binder (call transfer)))
;;* lme

;;* lmx 7 system/sepolicy/private/hal_codec2.te

(allow hal_codec2_client hal_codec2_server (binder (transfer)))
;;* lme

;;* lmx 7 system/sepolicy/private/hal_codec2.te

(allow hal_codec2_server hal_codec2_client (fd (use)))
;;* lme

;;* lmx 9 system/sepolicy/private/hal_codec2.te

(allow hal_codec2_client hal_codec2_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 9 system/sepolicy/private/hal_codec2.te

(allow hal_codec2_server hal_codec2_hwservice (hwservice_manager (add find)))
;;* lme

;;* lmx 9 system/sepolicy/private/hal_codec2.te

(allow hal_codec2_server hidl_base_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 9 system/sepolicy/private/hal_codec2.te

(neverallow base_typeattr_635 hal_codec2_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 9 system/sepolicy/private/hal_codec2.te

(neverallow base_typeattr_636 hal_codec2_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 10 system/sepolicy/private/hal_codec2.te

(allow hal_codec2_client hal_codec2_service (service_manager (find)))
;;* lme

;;* lmx 10 system/sepolicy/private/hal_codec2.te

(allow hal_codec2_server hal_codec2_service (service_manager (add find)))
;;* lme

;;* lmx 10 system/sepolicy/private/hal_codec2.te

(neverallow base_typeattr_635 hal_codec2_service (service_manager (add)))
;;* lme

;;* lmx 10 system/sepolicy/private/hal_codec2.te

(allow hal_codec2_server su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 10 system/sepolicy/private/hal_codec2.te

(neverallow base_typeattr_637 hal_codec2_service (service_manager (find)))
;;* lme

;;* lmx 16 system/sepolicy/private/hal_codec2.te

(allow hal_codec2_server hal_graphics_composer (fd (use)))
;;* lme

;;* lmx 19 system/sepolicy/private/hal_codec2.te

(allow hal_codec2_server hal_camera (fd (use)))
;;* lme

;;* lmx 22 system/sepolicy/private/hal_codec2.te

(allow hal_codec2_server bufferhubd (fd (use)))
;;* lme

;;* lmx 24 system/sepolicy/private/hal_codec2.te

(allow base_typeattr_638 surfaceflinger_service (service_manager (find)))
;;* lme

;;* lmx 27 system/sepolicy/private/hal_codec2.te

(allow hal_codec2_server su (fifo_file (read)))
;;* lme

;;* lmx 28 system/sepolicy/private/hal_codec2.te

(allow hal_codec2_server hal_codec2_client (fifo_file (read)))
;;* lme

;;* lmx 29 system/sepolicy/private/hal_codec2.te

(allow hal_codec2_server base_typeattr_284 (fifo_file (read)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_configstore.te

(allow hal_configstore_client hal_configstore_server (binder (call transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_configstore.te

(allow hal_configstore_server hal_configstore_client (binder (transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_configstore.te

(allow hal_configstore_client hal_configstore_server (fd (use)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_configstore.te

(allow hal_configstore_client hal_configstore_ISurfaceFlingerConfigs (hwservice_manager (find)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_configstore.te

(allow hal_configstore_server hal_configstore_ISurfaceFlingerConfigs (hwservice_manager (add find)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_configstore.te

(allow hal_configstore_server hidl_base_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_configstore.te

(neverallow base_typeattr_639 hal_configstore_ISurfaceFlingerConfigs (hwservice_manager (add)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_configstore.te

(neverallow base_typeattr_640 hal_configstore_ISurfaceFlingerConfigs (hwservice_manager (find)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_configstore.te

(allow hal_configstore_server su (fifo_file (append)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_configstore.te

(allow hal_configstore_server anr_data_file (file (append)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_configstore.te

(allow hal_configstore_server dumpstate (fd (use)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_configstore.te

(allow hal_configstore_server incidentd (fd (use)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_configstore.te

(allow hal_configstore_server dumpstate (fifo_file (write append)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_configstore.te

(allow hal_configstore_server incidentd (fifo_file (write append)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_configstore.te

(allow hal_configstore_server system_server (fifo_file (write append)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_configstore.te

(allow hal_configstore_server tombstoned (unix_stream_socket (connectto)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_configstore.te

(allow hal_configstore_server tombstoned (fd (use)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_configstore.te

(allow hal_configstore_server tombstoned_crash_socket (sock_file (write)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_configstore.te

(allow hal_configstore_server tombstone_data_file (file (append)))
;;* lme

;;* lmx 15 system/sepolicy/private/hal_configstore.te

(neverallow hal_configstore_server fs_type (file (execute_no_trans)))
(neverallow hal_configstore_server file_type (file (execute_no_trans)))
;;* lme

;;* lmx 29 system/sepolicy/private/hal_configstore.te

(neverallow hal_configstore_server domain (socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow hal_configstore_server domain (tcp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind name_connect)))
(neverallow hal_configstore_server domain (udp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind)))
(neverallow hal_configstore_server domain (rawip_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind)))
(neverallow hal_configstore_server domain (netlink_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow hal_configstore_server domain (packet_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow hal_configstore_server domain (key_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow hal_configstore_server domain (netlink_route_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write nlmsg_readpriv nlmsg_getneigh nlmsg)))
(neverallow hal_configstore_server domain (netlink_tcpdiag_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write nlmsg)))
(neverallow hal_configstore_server domain (netlink_nflog_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow hal_configstore_server domain (netlink_xfrm_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write nlmsg)))
(neverallow hal_configstore_server domain (netlink_selinux_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow hal_configstore_server domain (netlink_audit_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write nlmsg_relay nlmsg_readpriv nlmsg_tty_audit nlmsg)))
(neverallow hal_configstore_server domain (netlink_dnrt_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow hal_configstore_server domain (netlink_kobject_uevent_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow hal_configstore_server domain (appletalk_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow hal_configstore_server domain (tun_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind attach_queue)))
(neverallow hal_configstore_server domain (netlink_iscsi_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow hal_configstore_server domain (netlink_fib_lookup_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow hal_configstore_server domain (netlink_connector_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow hal_configstore_server domain (netlink_netfilter_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow hal_configstore_server domain (netlink_generic_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow hal_configstore_server domain (netlink_scsitransport_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow hal_configstore_server domain (netlink_rdma_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow hal_configstore_server domain (netlink_crypto_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
;;* lme

;;* lmx 37 system/sepolicy/private/hal_configstore.te

(neverallow hal_configstore_server base_typeattr_641 (unix_stream_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind connectto)))
(neverallow hal_configstore_server base_typeattr_641 (unix_dgram_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
;;* lme

;;* lmx 45 system/sepolicy/private/hal_configstore.te

(neverallow hal_configstore_server base_typeattr_642 (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow hal_configstore_server base_typeattr_642 (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow hal_configstore_server base_typeattr_642 (fifo_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 51 system/sepolicy/private/hal_configstore.te

(neverallow hal_configstore_server sdcard_type (dir (ioctl read write create setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
(neverallow hal_configstore_server fuse (dir (ioctl read write create setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
(neverallow hal_configstore_server fuseblk (dir (ioctl read write create setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
(neverallow hal_configstore_server sdcardfs (dir (ioctl read write create setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
(neverallow hal_configstore_server vfat (dir (ioctl read write create setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
(neverallow hal_configstore_server exfat (dir (ioctl read write create setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 55 system/sepolicy/private/hal_configstore.te

(neverallow hal_configstore_server sdcard_type (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow hal_configstore_server fuse (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow hal_configstore_server fuseblk (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow hal_configstore_server sdcardfs (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow hal_configstore_server vfat (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow hal_configstore_server exfat (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
;;* lme

;;* lmx 58 system/sepolicy/private/hal_configstore.te

(neverallow hal_configstore_server base_typeattr_248 (service_manager (add find list)))
;;* lme

;;* lmx 61 system/sepolicy/private/hal_configstore.te

(neverallow hal_configstore_server self (capability (chown dac_override dac_read_search fowner fsetid kill setgid setuid setpcap linux_immutable net_bind_service net_broadcast net_admin net_raw ipc_lock ipc_owner sys_module sys_rawio sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_nice sys_resource sys_time sys_tty_config mknod lease audit_write audit_control setfcap)))
(neverallow hal_configstore_server self (capability2 (mac_override mac_admin syslog wake_alarm block_suspend audit_read perfmon checkpoint_restore bpf)))
(neverallow hal_configstore_server self (cap_userns (chown dac_override dac_read_search fowner fsetid kill setgid setuid setpcap linux_immutable net_bind_service net_broadcast net_admin net_raw ipc_lock ipc_owner sys_module sys_rawio sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_nice sys_resource sys_time sys_tty_config mknod lease audit_write audit_control setfcap)))
(neverallow hal_configstore_server self (cap2_userns (mac_override mac_admin syslog wake_alarm block_suspend audit_read perfmon checkpoint_restore bpf)))
;;* lme

;;* lmx 64 system/sepolicy/private/hal_configstore.te

(neverallow hal_configstore_server base_typeattr_248 (process (ptrace)))
;;* lme

;;* lmx 67 system/sepolicy/private/hal_configstore.te

(neverallow hal_configstore_server base_typeattr_248 (file (relabelfrom relabelto)))
(neverallow hal_configstore_server base_typeattr_248 (dir (relabelfrom relabelto)))
(neverallow hal_configstore_server base_typeattr_248 (lnk_file (relabelfrom relabelto)))
(neverallow hal_configstore_server base_typeattr_248 (chr_file (relabelfrom relabelto)))
(neverallow hal_configstore_server base_typeattr_248 (blk_file (relabelfrom relabelto)))
(neverallow hal_configstore_server base_typeattr_248 (sock_file (relabelfrom relabelto)))
(neverallow hal_configstore_server base_typeattr_248 (fifo_file (relabelfrom relabelto)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_confirmationui.te

(allow hal_confirmationui_client hal_confirmationui_server (binder (call transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_confirmationui.te

(allow hal_confirmationui_server hal_confirmationui_client (binder (transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_confirmationui.te

(allow hal_confirmationui_client hal_confirmationui_server (fd (use)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_confirmationui.te

(allow hal_confirmationui_client hal_confirmationui_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_confirmationui.te

(allow hal_confirmationui_server hal_confirmationui_hwservice (hwservice_manager (add find)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_confirmationui.te

(allow hal_confirmationui_server hidl_base_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_confirmationui.te

(neverallow base_typeattr_643 hal_confirmationui_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_confirmationui.te

(neverallow base_typeattr_644 hal_confirmationui_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_confirmationui.te

(allow hal_confirmationui_client hal_confirmationui_service (service_manager (find)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_confirmationui.te

(allow hal_confirmationui_server hal_confirmationui_service (service_manager (add find)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_confirmationui.te

(neverallow base_typeattr_643 hal_confirmationui_service (service_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_confirmationui.te

(allow hal_confirmationui_server su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_confirmationui.te

(neverallow base_typeattr_645 hal_confirmationui_service (service_manager (find)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_confirmationui.te

(allow hal_confirmationui_server servicemanager (binder (call transfer)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_confirmationui.te

(allow servicemanager hal_confirmationui_server (binder (transfer)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_confirmationui.te

(allow hal_confirmationui_server servicemanager (fd (use)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_contexthub.te

(allow hal_contexthub_client hal_contexthub_server (binder (call transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_contexthub.te

(allow hal_contexthub_server hal_contexthub_client (binder (transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_contexthub.te

(allow hal_contexthub_client hal_contexthub_server (fd (use)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_contexthub.te

(allow hal_contexthub_server hal_contexthub_client (binder (call transfer)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_contexthub.te

(allow hal_contexthub_client hal_contexthub_server (binder (transfer)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_contexthub.te

(allow hal_contexthub_server hal_contexthub_client (fd (use)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_contexthub.te

(allow hal_contexthub_server hal_contexthub_service (service_manager (add find)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_contexthub.te

(neverallow base_typeattr_646 hal_contexthub_service (service_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_contexthub.te

(allow hal_contexthub_server su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_contexthub.te

(allow hal_contexthub_server servicemanager (binder (call transfer)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_contexthub.te

(allow servicemanager hal_contexthub_server (binder (transfer)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_contexthub.te

(allow hal_contexthub_server servicemanager (fd (use)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_contexthub.te

(allow hal_contexthub_client hal_contexthub_service (service_manager (find)))
;;* lme

;;* lmx 10 system/sepolicy/private/hal_contexthub.te

(allow hal_contexthub_client hal_contexthub_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 10 system/sepolicy/private/hal_contexthub.te

(allow hal_contexthub_server hal_contexthub_hwservice (hwservice_manager (add find)))
;;* lme

;;* lmx 10 system/sepolicy/private/hal_contexthub.te

(allow hal_contexthub_server hidl_base_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 10 system/sepolicy/private/hal_contexthub.te

(neverallow base_typeattr_646 hal_contexthub_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 10 system/sepolicy/private/hal_contexthub.te

(neverallow base_typeattr_647 hal_contexthub_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_drm.te

(allow hal_drm_server servicemanager (binder (call transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_drm.te

(allow servicemanager hal_drm_server (binder (call transfer)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_drm.te

(allow hal_drm_client hal_drm_server (binder (call transfer)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_drm.te

(allow hal_drm_server hal_drm_client (binder (transfer)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_drm.te

(allow hal_drm_client hal_drm_server (fd (use)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_drm.te

(allow hal_drm_server hal_drm_client (binder (call transfer)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_drm.te

(allow hal_drm_client hal_drm_server (binder (transfer)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_drm.te

(allow hal_drm_server hal_drm_client (fd (use)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_drm.te

(allow hal_drm_client hal_drm_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_drm.te

(allow hal_drm_server hal_drm_hwservice (hwservice_manager (add find)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_drm.te

(allow hal_drm_server hidl_base_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_drm.te

(neverallow base_typeattr_648 hal_drm_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_drm.te

(neverallow base_typeattr_649 hal_drm_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 7 system/sepolicy/private/hal_drm.te

(allow hal_drm_client hal_drm_service (service_manager (find)))
;;* lme

;;* lmx 7 system/sepolicy/private/hal_drm.te

(allow hal_drm_server hal_drm_service (service_manager (add find)))
;;* lme

;;* lmx 7 system/sepolicy/private/hal_drm.te

(neverallow base_typeattr_648 hal_drm_service (service_manager (add)))
;;* lme

;;* lmx 7 system/sepolicy/private/hal_drm.te

(allow hal_drm_server su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 7 system/sepolicy/private/hal_drm.te

(neverallow base_typeattr_650 hal_drm_service (service_manager (find)))
;;* lme

;;* lmx 9 system/sepolicy/private/hal_drm.te

(allow hal_drm hidl_memory_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 12 system/sepolicy/private/hal_drm.te

(allow hal_drm self (process (execmem)))
;;* lme

;;* lmx 15 system/sepolicy/private/hal_drm.te

(allow hal_drm_server serialno_prop (file (read getattr map open)))
;;* lme

;;* lmx 17 system/sepolicy/private/hal_drm.te

(allow hal_drm_server drm_forcel3_prop (file (read getattr map open)))
;;* lme

;;* lmx 19 system/sepolicy/private/hal_drm.te

(allow hal_drm_server drm_service_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 22 system/sepolicy/private/hal_drm.te

(allow hal_drm system_data_file (file (read getattr)))
;;* lme

;;* lmx 25 system/sepolicy/private/hal_drm.te

(allow hal_drm cgroup (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 25 system/sepolicy/private/hal_drm.te

(allow hal_drm cgroup (file (ioctl read getattr lock map open watch watch_reads)))
(allow hal_drm cgroup (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 26 system/sepolicy/private/hal_drm.te

(allow hal_drm cgroup (dir (write search)))
;;* lme

;;* lmx 27 system/sepolicy/private/hal_drm.te

(allow hal_drm cgroup (file (write lock append map open)))
;;* lme

;;* lmx 29 system/sepolicy/private/hal_drm.te

(allow hal_drm cgroup_v2 (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 29 system/sepolicy/private/hal_drm.te

(allow hal_drm cgroup_v2 (file (ioctl read getattr lock map open watch watch_reads)))
(allow hal_drm cgroup_v2 (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 30 system/sepolicy/private/hal_drm.te

(allow hal_drm cgroup_v2 (dir (write search)))
;;* lme

;;* lmx 31 system/sepolicy/private/hal_drm.te

(allow hal_drm cgroup_v2 (file (write lock append map open)))
;;* lme

;;* lmx 34 system/sepolicy/private/hal_drm.te

(allow hal_drm_server shell (fd (use)))
;;* lme

;;* lmx 35 system/sepolicy/private/hal_drm.te

(allow hal_drm_server shell (fifo_file (write)))
;;* lme

;;* lmx 37 system/sepolicy/private/hal_drm.te

(allow hal_drm hal_graphics_allocator (fd (use)))
;;* lme

;;* lmx 40 system/sepolicy/private/hal_drm.te

(allow hal_drm hal_allocator_server (fd (use)))
;;* lme

;;* lmx 43 system/sepolicy/private/hal_drm.te

(allow hal_drm mediaserver (fd (use)))
;;* lme

;;* lmx 45 system/sepolicy/private/hal_drm.te

(allow base_typeattr_651 sysfs (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 47 system/sepolicy/private/hal_drm.te

(allow base_typeattr_651 tee_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 49 system/sepolicy/private/hal_drm.te

(allow hal_drm_server base_typeattr_625 (fd (use)))
;;* lme

(dontaudit hal_drm system_userdir_file (dir (search)))
(dontaudit hal_drm system_data_file (dir (search)))
;;* lmx 57 system/sepolicy/private/hal_drm.te

(allowx hal_drm self (ioctl tcp_socket ((range 0x5401 0x5404) 0x540b (range 0x540e 0x5411) (range 0x5413 0x5414) (range 0x5450 0x5451))))
(allowx hal_drm self (ioctl udp_socket ((range 0x5401 0x5404) 0x540b (range 0x540e 0x5411) (range 0x5413 0x5414) (range 0x5450 0x5451))))
(allowx hal_drm self (ioctl rawip_socket ((range 0x5401 0x5404) 0x540b (range 0x540e 0x5411) (range 0x5413 0x5414) (range 0x5450 0x5451))))
;;* lme

;;* lmx 57 system/sepolicy/private/hal_drm.te

(allowx hal_drm self (ioctl tcp_socket ((range 0x8906 0x8907) 0x8910 (range 0x8912 0x8913) 0x8915 0x8917 0x8919 0x891b 0x8921 0x8933 0x8938 0x8942)))
(allowx hal_drm self (ioctl udp_socket ((range 0x8906 0x8907) 0x8910 (range 0x8912 0x8913) 0x8915 0x8917 0x8919 0x891b 0x8921 0x8933 0x8938 0x8942)))
(allowx hal_drm self (ioctl rawip_socket ((range 0x8906 0x8907) 0x8910 (range 0x8912 0x8913) 0x8915 0x8917 0x8919 0x891b 0x8921 0x8933 0x8938 0x8942)))
;;* lme

;;* lmx 57 system/sepolicy/private/hal_drm.te

(allowx hal_drm self (ioctl tcp_socket (0x8b01 0x8b05 0x8b07 0x8b09 0x8b0b 0x8b0d 0x8b0f (range 0x8b11 0x8b13) 0x8b21 0x8b23 0x8b25 0x8b27 0x8b29 0x8b2d)))
(allowx hal_drm self (ioctl udp_socket (0x8b01 0x8b05 0x8b07 0x8b09 0x8b0b 0x8b0d 0x8b0f (range 0x8b11 0x8b13) 0x8b21 0x8b23 0x8b25 0x8b27 0x8b29 0x8b2d)))
(allowx hal_drm self (ioctl rawip_socket (0x8b01 0x8b05 0x8b07 0x8b09 0x8b0b 0x8b0d 0x8b0f (range 0x8b11 0x8b13) 0x8b21 0x8b23 0x8b25 0x8b27 0x8b29 0x8b2d)))
;;* lme

;;* lmx 65 system/sepolicy/private/hal_drm.te

(neverallow hal_drm_server fs_type (file (execute_no_trans)))
(neverallow hal_drm_server file_type (file (execute_no_trans)))
;;* lme

;;* lmx 68 system/sepolicy/private/hal_drm.te

(neverallowx hal_drm_server domain (ioctl tcp_socket (0x6900 0x6902)))
(neverallowx hal_drm_server domain (ioctl udp_socket (0x6900 0x6902)))
(neverallowx hal_drm_server domain (ioctl rawip_socket (0x6900 0x6902)))
;;* lme

;;* lmx 68 system/sepolicy/private/hal_drm.te

(neverallowx hal_drm_server domain (ioctl tcp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx hal_drm_server domain (ioctl udp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx hal_drm_server domain (ioctl rawip_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
;;* lme

;;* lmx 68 system/sepolicy/private/hal_drm.te

(neverallowx hal_drm_server domain (ioctl tcp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx hal_drm_server domain (ioctl udp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx hal_drm_server domain (ioctl rawip_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_dumpstate.te

(allow hal_dumpstate_client hal_dumpstate_server (binder (call transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_dumpstate.te

(allow hal_dumpstate_server hal_dumpstate_client (binder (transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_dumpstate.te

(allow hal_dumpstate_client hal_dumpstate_server (fd (use)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_dumpstate.te

(allow hal_dumpstate_server hal_dumpstate_client (binder (call transfer)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_dumpstate.te

(allow hal_dumpstate_client hal_dumpstate_server (binder (transfer)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_dumpstate.te

(allow hal_dumpstate_server hal_dumpstate_client (fd (use)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_dumpstate.te

(allow hal_dumpstate_server property_socket (sock_file (write)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_dumpstate.te

(allow hal_dumpstate_server init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_dumpstate.te

(allow hal_dumpstate_server hal_dumpstate_config_prop (property_service (set)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_dumpstate.te

(allow hal_dumpstate_server hal_dumpstate_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 7 system/sepolicy/private/hal_dumpstate.te

(allow hal_dumpstate_client hal_dumpstate_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 7 system/sepolicy/private/hal_dumpstate.te

(allow hal_dumpstate_server hal_dumpstate_hwservice (hwservice_manager (add find)))
;;* lme

;;* lmx 7 system/sepolicy/private/hal_dumpstate.te

(allow hal_dumpstate_server hidl_base_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 7 system/sepolicy/private/hal_dumpstate.te

(neverallow base_typeattr_652 hal_dumpstate_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 7 system/sepolicy/private/hal_dumpstate.te

(neverallow base_typeattr_653 hal_dumpstate_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_dumpstate.te

(allow hal_dumpstate_client hal_dumpstate_service (service_manager (find)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_dumpstate.te

(allow hal_dumpstate_server hal_dumpstate_service (service_manager (add find)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_dumpstate.te

(neverallow base_typeattr_652 hal_dumpstate_service (service_manager (add)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_dumpstate.te

(allow hal_dumpstate_server su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_dumpstate.te

(neverallow base_typeattr_654 hal_dumpstate_service (service_manager (find)))
;;* lme

;;* lmx 10 system/sepolicy/private/hal_dumpstate.te

(allow hal_dumpstate_server servicemanager (binder (call transfer)))
;;* lme

;;* lmx 10 system/sepolicy/private/hal_dumpstate.te

(allow servicemanager hal_dumpstate_server (binder (transfer)))
;;* lme

;;* lmx 10 system/sepolicy/private/hal_dumpstate.te

(allow hal_dumpstate_server servicemanager (fd (use)))
;;* lme

;;* lmx 12 system/sepolicy/private/hal_dumpstate.te

(allow hal_dumpstate_server servicemanager (binder (call transfer)))
;;* lme

;;* lmx 12 system/sepolicy/private/hal_dumpstate.te

(allow servicemanager hal_dumpstate_server (binder (call transfer)))
;;* lme

;;* lmx 14 system/sepolicy/private/hal_dumpstate.te

(allow hal_dumpstate_server dumpstate_last_id_prop (file (read getattr map open)))
;;* lme

;;* lmx 17 system/sepolicy/private/hal_dumpstate.te

(allow hal_dumpstate shell_data_file (file (write)))
;;* lme

;;* lmx 19 system/sepolicy/private/hal_dumpstate.te

(allow hal_dumpstate proc_interrupts (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 22 system/sepolicy/private/hal_dumpstate.te

(allow hal_dumpstate fscklogs (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 22 system/sepolicy/private/hal_dumpstate.te

(allow hal_dumpstate fscklogs (file (ioctl read getattr lock map open watch watch_reads)))
(allow hal_dumpstate fscklogs (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 1 system/sepolicy/private/hal_evs.te

(allow hal_evs_client hwservicemanager (binder (call transfer)))
;;* lme

;;* lmx 1 system/sepolicy/private/hal_evs.te

(allow hwservicemanager hal_evs_client (binder (call transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_evs.te

(allow hal_evs_server hwservicemanager (binder (call transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_evs.te

(allow hwservicemanager hal_evs_server (binder (call transfer)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_evs.te

(allow hal_evs_client hal_evs_server (binder (call transfer)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_evs.te

(allow hal_evs_server hal_evs_client (binder (transfer)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_evs.te

(allow hal_evs_client hal_evs_server (fd (use)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_evs.te

(allow hal_evs_server hal_evs_client (binder (call transfer)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_evs.te

(allow hal_evs_client hal_evs_server (binder (transfer)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_evs.te

(allow hal_evs_server hal_evs_client (fd (use)))
;;* lme

;;* lmx 9 system/sepolicy/private/hal_evs.te

(allow hal_evs_client hal_evs_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 10 system/sepolicy/private/hal_evs.te

(allow hal_evs_server hal_evs_hwservice (hwservice_manager (add find)))
;;* lme

;;* lmx 11 system/sepolicy/private/hal_evs.te

(allow hal_evs_server hidl_base_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 12 system/sepolicy/private/hal_evs.te

(neverallow base_typeattr_655 hal_evs_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 15 system/sepolicy/private/hal_evs.te

(allow hal_evs_client hal_evs_service (service_manager (find)))
;;* lme

;;* lmx 15 system/sepolicy/private/hal_evs.te

(allow hal_evs_server hal_evs_service (service_manager (add find)))
;;* lme

;;* lmx 15 system/sepolicy/private/hal_evs.te

(neverallow base_typeattr_656 hal_evs_service (service_manager (add)))
;;* lme

;;* lmx 15 system/sepolicy/private/hal_evs.te

(allow hal_evs_server su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 15 system/sepolicy/private/hal_evs.te

(neverallow base_typeattr_657 hal_evs_service (service_manager (find)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_face.te

(allow hal_face_client hal_face_server (binder (call transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_face.te

(allow hal_face_server hal_face_client (binder (transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_face.te

(allow hal_face_client hal_face_server (fd (use)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_face.te

(allow hal_face_server hal_face_client (binder (call transfer)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_face.te

(allow hal_face_client hal_face_server (binder (transfer)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_face.te

(allow hal_face_server hal_face_client (fd (use)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_face.te

(allow hal_face_client hal_face_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_face.te

(allow hal_face_server hal_face_hwservice (hwservice_manager (add find)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_face.te

(allow hal_face_server hidl_base_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_face.te

(neverallow base_typeattr_658 hal_face_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_face.te

(neverallow base_typeattr_659 hal_face_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_face.te

(allow hal_face_client hal_face_service (service_manager (find)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_face.te

(allow hal_face_server hal_face_service (service_manager (add find)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_face.te

(neverallow base_typeattr_658 hal_face_service (service_manager (add)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_face.te

(allow hal_face_server su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_face.te

(neverallow base_typeattr_660 hal_face_service (service_manager (find)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_face.te

(allow hal_face_server servicemanager (binder (call transfer)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_face.te

(allow servicemanager hal_face_server (binder (call transfer)))
;;* lme

;;* lmx 11 system/sepolicy/private/hal_face.te

(allow base_typeattr_661 face_vendor_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 12 system/sepolicy/private/hal_face.te

(allow base_typeattr_661 face_vendor_data_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_fastboot.te

(allow hal_fastboot_client hal_fastboot_server (binder (call transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_fastboot.te

(allow hal_fastboot_server hal_fastboot_client (binder (transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_fastboot.te

(allow hal_fastboot_client hal_fastboot_server (fd (use)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_fastboot.te

(allow hal_fastboot_client hal_fastboot_service (service_manager (find)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_fastboot.te

(allow hal_fastboot_server hal_fastboot_service (service_manager (add find)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_fastboot.te

(neverallow base_typeattr_662 hal_fastboot_service (service_manager (add)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_fastboot.te

(allow hal_fastboot_server su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_fastboot.te

(neverallow base_typeattr_663 hal_fastboot_service (service_manager (find)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_fastboot.te

(allow hal_fastboot_server servicemanager (binder (call transfer)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_fastboot.te

(allow servicemanager hal_fastboot_server (binder (transfer)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_fastboot.te

(allow hal_fastboot_server servicemanager (fd (use)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_fingerprint.te

(allow hal_fingerprint_client hal_fingerprint_server (binder (call transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_fingerprint.te

(allow hal_fingerprint_server hal_fingerprint_client (binder (transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_fingerprint.te

(allow hal_fingerprint_client hal_fingerprint_server (fd (use)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_fingerprint.te

(allow hal_fingerprint_server hal_fingerprint_client (binder (call transfer)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_fingerprint.te

(allow hal_fingerprint_client hal_fingerprint_server (binder (transfer)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_fingerprint.te

(allow hal_fingerprint_server hal_fingerprint_client (fd (use)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_fingerprint.te

(allow hal_fingerprint_client hal_fingerprint_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_fingerprint.te

(allow hal_fingerprint_server hal_fingerprint_hwservice (hwservice_manager (add find)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_fingerprint.te

(allow hal_fingerprint_server hidl_base_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_fingerprint.te

(neverallow base_typeattr_664 hal_fingerprint_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_fingerprint.te

(neverallow base_typeattr_665 hal_fingerprint_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_fingerprint.te

(allow hal_fingerprint_client hal_fingerprint_service (service_manager (find)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_fingerprint.te

(allow hal_fingerprint_server hal_fingerprint_service (service_manager (add find)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_fingerprint.te

(neverallow base_typeattr_664 hal_fingerprint_service (service_manager (add)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_fingerprint.te

(allow hal_fingerprint_server su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_fingerprint.te

(neverallow base_typeattr_666 hal_fingerprint_service (service_manager (find)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_fingerprint.te

(allow hal_fingerprint_server servicemanager (binder (call transfer)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_fingerprint.te

(allow servicemanager hal_fingerprint_server (binder (call transfer)))
;;* lme

;;* lmx 10 system/sepolicy/private/hal_fingerprint.te

(allow base_typeattr_667 fingerprint_vendor_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 11 system/sepolicy/private/hal_fingerprint.te

(allow base_typeattr_667 fingerprint_vendor_data_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
;;* lme

;;* lmx 13 system/sepolicy/private/hal_fingerprint.te

(allow hal_fingerprint cgroup (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 13 system/sepolicy/private/hal_fingerprint.te

(allow hal_fingerprint cgroup (file (ioctl read getattr lock map open watch watch_reads)))
(allow hal_fingerprint cgroup (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 14 system/sepolicy/private/hal_fingerprint.te

(allow hal_fingerprint cgroup_v2 (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 14 system/sepolicy/private/hal_fingerprint.te

(allow hal_fingerprint cgroup_v2 (file (ioctl read getattr lock map open watch watch_reads)))
(allow hal_fingerprint cgroup_v2 (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 15 system/sepolicy/private/hal_fingerprint.te

(allow base_typeattr_667 sysfs (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 15 system/sepolicy/private/hal_fingerprint.te

(allow base_typeattr_667 sysfs (file (ioctl read getattr lock map open watch watch_reads)))
(allow base_typeattr_667 sysfs (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 1 system/sepolicy/private/hal_gatekeeper.te

(allow hal_gatekeeper_client hal_gatekeeper_server (binder (call transfer)))
;;* lme

;;* lmx 1 system/sepolicy/private/hal_gatekeeper.te

(allow hal_gatekeeper_server hal_gatekeeper_client (binder (transfer)))
;;* lme

;;* lmx 1 system/sepolicy/private/hal_gatekeeper.te

(allow hal_gatekeeper_client hal_gatekeeper_server (fd (use)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_gatekeeper.te

(allow hal_gatekeeper_client hal_gatekeeper_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_gatekeeper.te

(allow hal_gatekeeper_server hal_gatekeeper_hwservice (hwservice_manager (add find)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_gatekeeper.te

(allow hal_gatekeeper_server hidl_base_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_gatekeeper.te

(neverallow base_typeattr_668 hal_gatekeeper_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_gatekeeper.te

(neverallow base_typeattr_669 hal_gatekeeper_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_gatekeeper.te

(allow hal_gatekeeper_client hal_gatekeeper_service (service_manager (find)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_gatekeeper.te

(allow hal_gatekeeper_server hal_gatekeeper_service (service_manager (add find)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_gatekeeper.te

(neverallow base_typeattr_668 hal_gatekeeper_service (service_manager (add)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_gatekeeper.te

(allow hal_gatekeeper_server su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_gatekeeper.te

(neverallow base_typeattr_670 hal_gatekeeper_service (service_manager (find)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_gatekeeper.te

(allow hal_gatekeeper_server servicemanager (binder (call transfer)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_gatekeeper.te

(allow servicemanager hal_gatekeeper_server (binder (transfer)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_gatekeeper.te

(allow hal_gatekeeper_server servicemanager (fd (use)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_gatekeeper.te

(allow hal_gatekeeper tee_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_gnss.te

(allow hal_gnss_client hal_gnss_server (binder (call transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_gnss.te

(allow hal_gnss_server hal_gnss_client (binder (transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_gnss.te

(allow hal_gnss_client hal_gnss_server (fd (use)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_gnss.te

(allow hal_gnss_server hal_gnss_client (binder (call transfer)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_gnss.te

(allow hal_gnss_client hal_gnss_server (binder (transfer)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_gnss.te

(allow hal_gnss_server hal_gnss_client (fd (use)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_gnss.te

(allow hal_gnss_client hal_gnss_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_gnss.te

(allow hal_gnss_server hal_gnss_hwservice (hwservice_manager (add find)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_gnss.te

(allow hal_gnss_server hidl_base_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_gnss.te

(neverallow base_typeattr_671 hal_gnss_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_gnss.te

(neverallow base_typeattr_672 hal_gnss_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_gnss.te

(allow hal_gnss_client hal_gnss_service (service_manager (find)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_gnss.te

(allow hal_gnss_server hal_gnss_service (service_manager (add find)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_gnss.te

(neverallow base_typeattr_671 hal_gnss_service (service_manager (add)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_gnss.te

(allow hal_gnss_server su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_gnss.te

(neverallow base_typeattr_673 hal_gnss_service (service_manager (find)))
;;* lme

;;* lmx 7 system/sepolicy/private/hal_gnss.te

(allow hal_gnss_server servicemanager (binder (call transfer)))
;;* lme

;;* lmx 7 system/sepolicy/private/hal_gnss.te

(allow servicemanager hal_gnss_server (binder (call transfer)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_gnss.te

(allow hal_gnss_client servicemanager (binder (call transfer)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_gnss.te

(allow servicemanager hal_gnss_client (binder (call transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_graphics_allocator.te

(allow hal_graphics_allocator_client hal_graphics_allocator_server (binder (call transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_graphics_allocator.te

(allow hal_graphics_allocator_server hal_graphics_allocator_client (binder (transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_graphics_allocator.te

(allow hal_graphics_allocator_client hal_graphics_allocator_server (fd (use)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_graphics_allocator.te

(allow hal_graphics_allocator_client hal_graphics_allocator_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_graphics_allocator.te

(allow hal_graphics_allocator_server hal_graphics_allocator_hwservice (hwservice_manager (add find)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_graphics_allocator.te

(allow hal_graphics_allocator_server hidl_base_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_graphics_allocator.te

(neverallow base_typeattr_674 hal_graphics_allocator_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_graphics_allocator.te

(neverallow base_typeattr_675 hal_graphics_allocator_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_graphics_allocator.te

(allow hal_graphics_allocator_client hal_graphics_mapper_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_graphics_allocator.te

(allow hal_graphics_allocator_client hal_graphics_mapper_service (service_manager (find)))
;;* lme

;;* lmx 7 system/sepolicy/private/hal_graphics_allocator.te

(allow hal_graphics_allocator_client same_process_hal_file (file (read getattr map execute open)))
;;* lme

;;* lmx 10 system/sepolicy/private/hal_graphics_allocator.te

(allow hal_graphics_allocator dmabuf_system_heap_device (chr_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 13 system/sepolicy/private/hal_graphics_allocator.te

(allow hal_graphics_allocator dmabuf_system_secure_heap_device (chr_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 16 system/sepolicy/private/hal_graphics_allocator.te

(allow hal_graphics_allocator self (capability (sys_nice)))
(allow hal_graphics_allocator self (cap_userns (sys_nice)))
;;* lme

;;* lmx 19 system/sepolicy/private/hal_graphics_allocator.te

(allow hal_graphics_allocator_client hal_graphics_allocator_service (service_manager (find)))
;;* lme

;;* lmx 19 system/sepolicy/private/hal_graphics_allocator.te

(allow hal_graphics_allocator_server hal_graphics_allocator_service (service_manager (add find)))
;;* lme

;;* lmx 19 system/sepolicy/private/hal_graphics_allocator.te

(neverallow base_typeattr_674 hal_graphics_allocator_service (service_manager (add)))
;;* lme

;;* lmx 19 system/sepolicy/private/hal_graphics_allocator.te

(allow hal_graphics_allocator_server su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 19 system/sepolicy/private/hal_graphics_allocator.te

(neverallow base_typeattr_676 hal_graphics_allocator_service (service_manager (find)))
;;* lme

;;* lmx 20 system/sepolicy/private/hal_graphics_allocator.te

(allow hal_graphics_allocator_server servicemanager (binder (call transfer)))
;;* lme

;;* lmx 20 system/sepolicy/private/hal_graphics_allocator.te

(allow servicemanager hal_graphics_allocator_server (binder (transfer)))
;;* lme

;;* lmx 20 system/sepolicy/private/hal_graphics_allocator.te

(allow hal_graphics_allocator_server servicemanager (fd (use)))
;;* lme

;;* lmx 21 system/sepolicy/private/hal_graphics_allocator.te

(allow hal_graphics_allocator_client servicemanager (binder (call transfer)))
;;* lme

;;* lmx 21 system/sepolicy/private/hal_graphics_allocator.te

(allow servicemanager hal_graphics_allocator_client (binder (transfer)))
;;* lme

;;* lmx 21 system/sepolicy/private/hal_graphics_allocator.te

(allow hal_graphics_allocator_client servicemanager (fd (use)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_graphics_composer.te

(allow hal_graphics_composer_client hal_graphics_composer_server (binder (call transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_graphics_composer.te

(allow hal_graphics_composer_server hal_graphics_composer_client (binder (transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_graphics_composer.te

(allow hal_graphics_composer_client hal_graphics_composer_server (fd (use)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_graphics_composer.te

(allow hal_graphics_composer_server hal_graphics_composer_client (binder (call transfer)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_graphics_composer.te

(allow hal_graphics_composer_client hal_graphics_composer_server (binder (transfer)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_graphics_composer.te

(allow hal_graphics_composer_server hal_graphics_composer_client (fd (use)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_graphics_composer.te

(allow hal_graphics_composer_client hal_graphics_composer_server_tmpfs (file (read write getattr map)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_graphics_composer.te

(allow hal_graphics_composer_client hal_graphics_composer_server (memfd_file (read write getattr map)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_graphics_composer.te

(allow hal_graphics_composer_server hal_graphics_composer_client_tmpfs (file (read write getattr map)))
;;* lme

;;* lmx 7 system/sepolicy/private/hal_graphics_composer.te

(allow hal_graphics_composer_server hal_graphics_composer_client (memfd_file (read write getattr map)))
;;* lme

;;* lmx 9 system/sepolicy/private/hal_graphics_composer.te

(allow hal_graphics_composer_client hal_graphics_composer_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 9 system/sepolicy/private/hal_graphics_composer.te

(allow hal_graphics_composer_server hal_graphics_composer_hwservice (hwservice_manager (add find)))
;;* lme

;;* lmx 9 system/sepolicy/private/hal_graphics_composer.te

(allow hal_graphics_composer_server hidl_base_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 9 system/sepolicy/private/hal_graphics_composer.te

(neverallow base_typeattr_677 hal_graphics_composer_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 9 system/sepolicy/private/hal_graphics_composer.te

(neverallow base_typeattr_678 hal_graphics_composer_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 12 system/sepolicy/private/hal_graphics_composer.te

(allow hal_graphics_composer_server hal_graphics_mapper_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 15 system/sepolicy/private/hal_graphics_composer.te

(allow hal_graphics_composer dmabuf_system_heap_device (chr_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 16 system/sepolicy/private/hal_graphics_composer.te

(allow hal_graphics_composer hal_graphics_allocator (fd (use)))
;;* lme

;;* lmx 19 system/sepolicy/private/hal_graphics_composer.te

(allow hal_graphics_composer graphics_device (dir (search)))
;;* lme

;;* lmx 20 system/sepolicy/private/hal_graphics_composer.te

(allow hal_graphics_composer graphics_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 23 system/sepolicy/private/hal_graphics_composer.te

(allow hal_graphics_composer system_server (fd (use)))
;;* lme

;;* lmx 24 system/sepolicy/private/hal_graphics_composer.te

(allow hal_graphics_composer bootanim (fd (use)))
;;* lme

;;* lmx 25 system/sepolicy/private/hal_graphics_composer.te

(allow hal_graphics_composer appdomain (fd (use)))
;;* lme

;;* lmx 28 system/sepolicy/private/hal_graphics_composer.te

(allow hal_graphics_composer self (capability (sys_nice)))
(allow hal_graphics_composer self (cap_userns (sys_nice)))
;;* lme

;;* lmx 31 system/sepolicy/private/hal_graphics_composer.te

(allow hal_graphics_composer_server hal_graphics_composer_client (fifo_file (write)))
;;* lme

;;* lmx 34 system/sepolicy/private/hal_graphics_composer.te

(allow hal_graphics_composer_client servicemanager (binder (call transfer)))
;;* lme

;;* lmx 34 system/sepolicy/private/hal_graphics_composer.te

(allow servicemanager hal_graphics_composer_client (binder (transfer)))
;;* lme

;;* lmx 34 system/sepolicy/private/hal_graphics_composer.te

(allow hal_graphics_composer_client servicemanager (fd (use)))
;;* lme

;;* lmx 35 system/sepolicy/private/hal_graphics_composer.te

(allow hal_graphics_composer_server servicemanager (binder (call transfer)))
;;* lme

;;* lmx 35 system/sepolicy/private/hal_graphics_composer.te

(allow servicemanager hal_graphics_composer_server (binder (transfer)))
;;* lme

;;* lmx 35 system/sepolicy/private/hal_graphics_composer.te

(allow hal_graphics_composer_server servicemanager (fd (use)))
;;* lme

;;* lmx 37 system/sepolicy/private/hal_graphics_composer.te

(allow hal_graphics_composer_client hal_graphics_composer_service (service_manager (find)))
;;* lme

;;* lmx 37 system/sepolicy/private/hal_graphics_composer.te

(allow hal_graphics_composer_server hal_graphics_composer_service (service_manager (add find)))
;;* lme

;;* lmx 37 system/sepolicy/private/hal_graphics_composer.te

(neverallow base_typeattr_677 hal_graphics_composer_service (service_manager (add)))
;;* lme

;;* lmx 37 system/sepolicy/private/hal_graphics_composer.te

(allow hal_graphics_composer_server su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 37 system/sepolicy/private/hal_graphics_composer.te

(neverallow base_typeattr_679 hal_graphics_composer_service (service_manager (find)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_health.te

(allow hal_health_client hal_health_server (binder (call transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_health.te

(allow hal_health_server hal_health_client (binder (transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_health.te

(allow hal_health_client hal_health_server (fd (use)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_health.te

(allow hal_health_server hal_health_client (binder (call transfer)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_health.te

(allow hal_health_client hal_health_server (binder (transfer)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_health.te

(allow hal_health_server hal_health_client (fd (use)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_health.te

(allow hal_health_client hal_health_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_health.te

(allow hal_health_server hal_health_hwservice (hwservice_manager (add find)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_health.te

(allow hal_health_server hidl_base_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_health.te

(neverallow base_typeattr_680 hal_health_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_health.te

(neverallow base_typeattr_681 hal_health_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_health.te

(allow hal_health_client hal_health_service (service_manager (find)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_health.te

(allow hal_health_server hal_health_service (service_manager (add find)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_health.te

(neverallow base_typeattr_680 hal_health_service (service_manager (add)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_health.te

(allow hal_health_server su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_health.te

(neverallow base_typeattr_682 hal_health_service (service_manager (find)))
;;* lme

;;* lmx 11 system/sepolicy/private/hal_health.te

(allow hal_health_server self (netlink_kobject_uevent_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
;;* lme

;;* lmx 14 system/sepolicy/private/hal_health.te

(allow hal_health_server sysfs (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 19 system/sepolicy/private/hal_health.te

(allow hal_health_server sysfs_batteryinfo (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 19 system/sepolicy/private/hal_health.te

(allow hal_health_server sysfs_batteryinfo (file (ioctl read getattr lock map open watch watch_reads)))
(allow hal_health_server sysfs_batteryinfo (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 22 system/sepolicy/private/hal_health.te

(allow hal_health_server sysfs_wake_lock (file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 22 system/sepolicy/private/hal_health.te

(allow hal_health_server self (capability2 (block_suspend)))
(allow hal_health_server self (cap2_userns (block_suspend)))
;;* lme

;;* lmx 22 system/sepolicy/private/hal_health.te

(allow hal_health_server system_suspend_server (binder (call transfer)))
;;* lme

;;* lmx 22 system/sepolicy/private/hal_health.te

(allow system_suspend_server hal_health_server (binder (transfer)))
;;* lme

;;* lmx 22 system/sepolicy/private/hal_health.te

(allow hal_health_server system_suspend_server (fd (use)))
;;* lme

;;* lmx 22 system/sepolicy/private/hal_health.te

(allow hal_health_server system_suspend_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 22 system/sepolicy/private/hal_health.te

(allow hal_health_server hwservicemanager (binder (call transfer)))
;;* lme

;;* lmx 22 system/sepolicy/private/hal_health.te

(allow hwservicemanager hal_health_server (binder (call transfer)))
;;* lme

;;* lmx 22 system/sepolicy/private/hal_health.te

(allow hal_health_server hwservicemanager_prop (file (read getattr map open)))
;;* lme

;;* lmx 22 system/sepolicy/private/hal_health.te

(allow hal_health_server hidl_manager_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 22 system/sepolicy/private/hal_health.te

(allow hal_health_server hal_system_suspend_service (service_manager (find)))
;;* lme

;;* lmx 22 system/sepolicy/private/hal_health.te

(allow hal_health_server servicemanager (binder (call transfer)))
;;* lme

;;* lmx 22 system/sepolicy/private/hal_health.te

(allow servicemanager hal_health_server (binder (call transfer)))
;;* lme

;;* lmx 25 system/sepolicy/private/hal_health.te

(allow hal_health_server kmsg_device (chr_file (write getattr lock append map open)))
;;* lme

;;* lmx 28 system/sepolicy/private/hal_health.te

(allow hal_health_server self (capability2 (wake_alarm)))
;;* lme

;;* lmx 31 system/sepolicy/private/hal_health.te

(allow hal_health_server fs_bpf_vendor (dir (search)))
;;* lme

;;* lmx 32 system/sepolicy/private/hal_health.te

(allow hal_health_server fs_bpf_vendor (file (read)))
;;* lme

;;* lmx 33 system/sepolicy/private/hal_health.te

(allow hal_health_server bpfloader (bpf (prog_run)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_health_storage.te

(allow hal_health_storage_client hal_health_storage_server (binder (call transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_health_storage.te

(allow hal_health_storage_server hal_health_storage_client (binder (transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_health_storage.te

(allow hal_health_storage_client hal_health_storage_server (fd (use)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_health_storage.te

(allow hal_health_storage_server hal_health_storage_client (binder (call transfer)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_health_storage.te

(allow hal_health_storage_client hal_health_storage_server (binder (transfer)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_health_storage.te

(allow hal_health_storage_server hal_health_storage_client (fd (use)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_health_storage.te

(allow hal_health_storage_server servicemanager (binder (call transfer)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_health_storage.te

(allow servicemanager hal_health_storage_server (binder (call transfer)))
;;* lme

;;* lmx 7 system/sepolicy/private/hal_health_storage.te

(allow hal_health_storage_client hal_health_storage_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 7 system/sepolicy/private/hal_health_storage.te

(allow hal_health_storage_server hal_health_storage_hwservice (hwservice_manager (add find)))
;;* lme

;;* lmx 7 system/sepolicy/private/hal_health_storage.te

(allow hal_health_storage_server hidl_base_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 7 system/sepolicy/private/hal_health_storage.te

(neverallow base_typeattr_683 hal_health_storage_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 7 system/sepolicy/private/hal_health_storage.te

(neverallow base_typeattr_684 hal_health_storage_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_health_storage.te

(allow hal_health_storage_client hal_health_storage_service (service_manager (find)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_health_storage.te

(allow hal_health_storage_server hal_health_storage_service (service_manager (add find)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_health_storage.te

(neverallow base_typeattr_683 hal_health_storage_service (service_manager (add)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_health_storage.te

(allow hal_health_storage_server su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_health_storage.te

(neverallow base_typeattr_685 hal_health_storage_service (service_manager (find)))
;;* lme

;;* lmx 11 system/sepolicy/private/hal_health_storage.te

(allow hal_health_storage_server gsi_metadata_file_type (dir (search)))
(allow hal_health_storage_server metadata_file (dir (search)))
;;* lme

;;* lmx 11 system/sepolicy/private/hal_health_storage.te

(allow hal_health_storage_server gsi_public_metadata_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 11 system/sepolicy/private/hal_health_storage.te

(allow hal_health_storage_server proc_bootconfig (file (ioctl read getattr lock map open watch watch_reads)))
(allow hal_health_storage_server proc_cmdline (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_identity.te

(allow hal_identity_client hal_identity_server (binder (call transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_identity.te

(allow hal_identity_server hal_identity_client (binder (transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_identity.te

(allow hal_identity_client hal_identity_server (fd (use)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_identity.te

(allow hal_identity_client hal_identity_service (service_manager (find)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_identity.te

(allow hal_identity_server hal_identity_service (service_manager (add find)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_identity.te

(neverallow base_typeattr_686 hal_identity_service (service_manager (add)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_identity.te

(allow hal_identity_server su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_identity.te

(neverallow base_typeattr_687 hal_identity_service (service_manager (find)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_identity.te

(allow hal_identity_server servicemanager (binder (call transfer)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_identity.te

(allow servicemanager hal_identity_server (binder (transfer)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_identity.te

(allow hal_identity_server servicemanager (fd (use)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_input_classifier.te

(allow hal_input_classifier_client hal_input_classifier_server (binder (call transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_input_classifier.te

(allow hal_input_classifier_server hal_input_classifier_client (binder (transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_input_classifier.te

(allow hal_input_classifier_client hal_input_classifier_server (fd (use)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_input_classifier.te

(allow hal_input_classifier_client hal_input_classifier_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_input_classifier.te

(allow hal_input_classifier_server hal_input_classifier_hwservice (hwservice_manager (add find)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_input_classifier.te

(allow hal_input_classifier_server hidl_base_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_input_classifier.te

(neverallow base_typeattr_688 hal_input_classifier_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_input_classifier.te

(neverallow base_typeattr_689 hal_input_classifier_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_input_processor.te

(allow hal_input_processor_client hal_input_processor_server (binder (call transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_input_processor.te

(allow hal_input_processor_server hal_input_processor_client (binder (transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_input_processor.te

(allow hal_input_processor_client hal_input_processor_server (fd (use)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_input_processor.te

(allow hal_input_processor_server servicemanager (binder (call transfer)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_input_processor.te

(allow servicemanager hal_input_processor_server (binder (transfer)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_input_processor.te

(allow hal_input_processor_server servicemanager (fd (use)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_input_processor.te

(allow hal_input_processor_client hal_input_processor_service (service_manager (find)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_input_processor.te

(allow hal_input_processor_server hal_input_processor_service (service_manager (add find)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_input_processor.te

(neverallow base_typeattr_690 hal_input_processor_service (service_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_input_processor.te

(allow hal_input_processor_server su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_input_processor.te

(neverallow base_typeattr_691 hal_input_processor_service (service_manager (find)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_input_processor.te

(allow hal_input_processor_server dumpstate (fifo_file (write)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_ir.te

(allow hal_ir_client hal_ir_server (binder (call transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_ir.te

(allow hal_ir_server hal_ir_client (binder (transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_ir.te

(allow hal_ir_client hal_ir_server (fd (use)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_ir.te

(allow hal_ir_server hal_ir_client (binder (call transfer)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_ir.te

(allow hal_ir_client hal_ir_server (binder (transfer)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_ir.te

(allow hal_ir_server hal_ir_client (fd (use)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_ir.te

(allow hal_ir_client hal_ir_service (service_manager (find)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_ir.te

(allow hal_ir_server hal_ir_service (service_manager (add find)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_ir.te

(neverallow base_typeattr_692 hal_ir_service (service_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_ir.te

(allow hal_ir_server su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_ir.te

(neverallow base_typeattr_693 hal_ir_service (service_manager (find)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_ir.te

(allow hal_ir_server servicemanager (binder (call transfer)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_ir.te

(allow servicemanager hal_ir_server (binder (transfer)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_ir.te

(allow hal_ir_server servicemanager (fd (use)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_ir.te

(allow hal_ir_client hal_ir_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_ir.te

(allow hal_ir_server hal_ir_hwservice (hwservice_manager (add find)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_ir.te

(allow hal_ir_server hidl_base_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_ir.te

(neverallow base_typeattr_692 hal_ir_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_ir.te

(neverallow base_typeattr_694 hal_ir_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_ivn.te

(allow hal_ivn_client hal_ivn_server (binder (call transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_ivn.te

(allow hal_ivn_server hal_ivn_client (binder (transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_ivn.te

(allow hal_ivn_client hal_ivn_server (fd (use)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_ivn.te

(allow hal_ivn_client hal_ivn_service (service_manager (find)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_ivn.te

(allow hal_ivn_server hal_ivn_service (service_manager (add find)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_ivn.te

(neverallow base_typeattr_695 hal_ivn_service (service_manager (add)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_ivn.te

(allow hal_ivn_server su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_ivn.te

(neverallow base_typeattr_696 hal_ivn_service (service_manager (find)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_keymaster.te

(allow hal_keymaster_client hal_keymaster_server (binder (call transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_keymaster.te

(allow hal_keymaster_server hal_keymaster_client (binder (transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_keymaster.te

(allow hal_keymaster_client hal_keymaster_server (fd (use)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_keymaster.te

(allow hal_keymaster_client hal_keymaster_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_keymaster.te

(allow hal_keymaster_server hal_keymaster_hwservice (hwservice_manager (add find)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_keymaster.te

(allow hal_keymaster_server hidl_base_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_keymaster.te

(neverallow base_typeattr_697 hal_keymaster_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_keymaster.te

(neverallow base_typeattr_698 hal_keymaster_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_keymaster.te

(allow hal_keymaster tee_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 1 system/sepolicy/private/hal_keymint.te

(allow hal_keymint_client hal_keymint_server (binder (call transfer)))
;;* lme

;;* lmx 1 system/sepolicy/private/hal_keymint.te

(allow hal_keymint_server hal_keymint_client (binder (transfer)))
;;* lme

;;* lmx 1 system/sepolicy/private/hal_keymint.te

(allow hal_keymint_client hal_keymint_server (fd (use)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_keymint.te

(allow hal_keymint_client hal_keymint_service (service_manager (find)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_keymint.te

(allow hal_keymint_server hal_keymint_service (service_manager (add find)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_keymint.te

(neverallow base_typeattr_699 hal_keymint_service (service_manager (add)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_keymint.te

(allow hal_keymint_server su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_keymint.te

(neverallow base_typeattr_700 hal_keymint_service (service_manager (find)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_keymint.te

(allow hal_keymint_client hal_remotelyprovisionedcomponent_service (service_manager (find)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_keymint.te

(allow hal_keymint_server hal_remotelyprovisionedcomponent_service (service_manager (add find)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_keymint.te

(neverallow base_typeattr_699 hal_remotelyprovisionedcomponent_service (service_manager (add)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_keymint.te

(allow hal_keymint_server su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_keymint.te

(neverallow base_typeattr_700 hal_remotelyprovisionedcomponent_service (service_manager (find)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_keymint.te

(allow hal_keymint_server servicemanager (binder (call transfer)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_keymint.te

(allow servicemanager hal_keymint_server (binder (transfer)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_keymint.te

(allow hal_keymint_server servicemanager (fd (use)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_keymint.te

(allow base_typeattr_701 tee_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_keymint_system.te

(allow init hal_keymint_system_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_keymint_system.te

(allow init hal_keymint_system (process (transition)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_keymint_system.te

(allow hal_keymint_system hal_keymint_system_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init hal_keymint_system (process (noatsecure)))
;;* lmx 5 system/sepolicy/private/hal_keymint_system.te

(allow init hal_keymint_system (process (siginh rlimitinh)))
;;* lme

(typetransition init hal_keymint_system_exec process hal_keymint_system)
;;* lmx 8 system/sepolicy/private/hal_keymint_system.te

(allow hal_keymint_system accessor_trusty_keymint_comm_service (service_manager (find)))
;;* lme

;;* lmx 9 system/sepolicy/private/hal_keymint_system.te

(allow hal_keymint_system trusty_keymint_comm_service (service_manager (find)))
;;* lme

;;* lmx 12 system/sepolicy/private/hal_keymint_system.te

(allow hal_keymint_system accessor_trusty_keymint_provisioning_thal_service (service_manager (find)))
;;* lme

;;* lmx 13 system/sepolicy/private/hal_keymint_system.te

(allow hal_keymint_system trusty_keymint_provisioning_thal_service (service_manager (find)))
;;* lme

;;* lmx 16 system/sepolicy/private/hal_keymint_system.te

(allow hal_keymint_system early_virtmgr_domain (fd (use)))
;;* lme

;;* lmx 17 system/sepolicy/private/hal_keymint_system.te

(allow hal_keymint_system early_virtmgr_domain (vsock_socket (read write getattr getopt)))
;;* lme

;;* lmx 1 system/sepolicy/private/hal_lazy_test.te

(allow hal_lazy_test_client hal_lazy_test_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 1 system/sepolicy/private/hal_lazy_test.te

(allow hal_lazy_test_server hal_lazy_test_hwservice (hwservice_manager (add find)))
;;* lme

;;* lmx 1 system/sepolicy/private/hal_lazy_test.te

(allow hal_lazy_test_server hidl_base_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 1 system/sepolicy/private/hal_lazy_test.te

(neverallow base_typeattr_702 hal_lazy_test_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 1 system/sepolicy/private/hal_lazy_test.te

(neverallow base_typeattr_703 hal_lazy_test_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_light.te

(allow hal_light_client hal_light_server (binder (call transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_light.te

(allow hal_light_server hal_light_client (binder (transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_light.te

(allow hal_light_client hal_light_server (fd (use)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_light.te

(allow hal_light_server hal_light_client (binder (call transfer)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_light.te

(allow hal_light_client hal_light_server (binder (transfer)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_light.te

(allow hal_light_server hal_light_client (fd (use)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_light.te

(allow hal_light_client hal_light_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_light.te

(allow hal_light_server hal_light_hwservice (hwservice_manager (add find)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_light.te

(allow hal_light_server hidl_base_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_light.te

(neverallow base_typeattr_704 hal_light_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_light.te

(neverallow base_typeattr_705 hal_light_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_light.te

(allow hal_light_client hal_light_service (service_manager (find)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_light.te

(allow hal_light_server hal_light_service (service_manager (add find)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_light.te

(neverallow base_typeattr_704 hal_light_service (service_manager (add)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_light.te

(allow hal_light_server su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_light.te

(neverallow base_typeattr_706 hal_light_service (service_manager (find)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_light.te

(allow hal_light_server servicemanager (binder (call transfer)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_light.te

(allow servicemanager hal_light_server (binder (transfer)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_light.te

(allow hal_light_server servicemanager (fd (use)))
;;* lme

;;* lmx 9 system/sepolicy/private/hal_light.te

(allow hal_light_client servicemanager (binder (call transfer)))
;;* lme

;;* lmx 9 system/sepolicy/private/hal_light.te

(allow servicemanager hal_light_client (binder (call transfer)))
;;* lme

;;* lmx 11 system/sepolicy/private/hal_light.te

(allow hal_light_server dumpstate (fifo_file (write)))
;;* lme

;;* lmx 13 system/sepolicy/private/hal_light.te

(allow hal_light sysfs_leds (lnk_file (read)))
;;* lme

;;* lmx 14 system/sepolicy/private/hal_light.te

(allow hal_light sysfs_leds (file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 15 system/sepolicy/private/hal_light.te

(allow hal_light sysfs_leds (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_lowpan.te

(allow hal_lowpan_client hal_lowpan_server (binder (call transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_lowpan.te

(allow hal_lowpan_server hal_lowpan_client (binder (transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_lowpan.te

(allow hal_lowpan_client hal_lowpan_server (fd (use)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_lowpan.te

(allow hal_lowpan_server hal_lowpan_client (binder (call transfer)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_lowpan.te

(allow hal_lowpan_client hal_lowpan_server (binder (transfer)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_lowpan.te

(allow hal_lowpan_server hal_lowpan_client (fd (use)))
;;* lme

;;* lmx 7 system/sepolicy/private/hal_lowpan.te

(allow hal_lowpan_client hal_lowpan_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 7 system/sepolicy/private/hal_lowpan.te

(allow hal_lowpan_server hal_lowpan_hwservice (hwservice_manager (add find)))
;;* lme

;;* lmx 7 system/sepolicy/private/hal_lowpan.te

(allow hal_lowpan_server hidl_base_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 7 system/sepolicy/private/hal_lowpan.te

(neverallow base_typeattr_707 hal_lowpan_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 7 system/sepolicy/private/hal_lowpan.te

(neverallow base_typeattr_708 hal_lowpan_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 10 system/sepolicy/private/hal_lowpan.te

(allow hal_lowpan_server property_socket (sock_file (write)))
;;* lme

;;* lmx 10 system/sepolicy/private/hal_lowpan.te

(allow hal_lowpan_server init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 10 system/sepolicy/private/hal_lowpan.te

(allow hal_lowpan_server lowpan_prop (property_service (set)))
;;* lme

;;* lmx 10 system/sepolicy/private/hal_lowpan.te

(allow hal_lowpan_server lowpan_prop (file (read getattr map open)))
;;* lme

;;* lmx 13 system/sepolicy/private/hal_lowpan.te

(allow hal_lowpan_server lowpan_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 20 system/sepolicy/private/hal_lowpan.te

(neverallow base_typeattr_709 lowpan_device (chr_file (ioctl read write create setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_macsec.te

(allow hal_macsec_client hal_macsec_server (binder (call transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_macsec.te

(allow hal_macsec_server hal_macsec_client (binder (transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_macsec.te

(allow hal_macsec_client hal_macsec_server (fd (use)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_macsec.te

(allow hal_macsec_server hal_macsec_client (binder (call transfer)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_macsec.te

(allow hal_macsec_client hal_macsec_server (binder (transfer)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_macsec.te

(allow hal_macsec_server hal_macsec_client (fd (use)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_macsec.te

(allow hal_macsec_client hal_macsec_service (service_manager (find)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_macsec.te

(allow hal_macsec_server hal_macsec_service (service_manager (add find)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_macsec.te

(neverallow base_typeattr_710 hal_macsec_service (service_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_macsec.te

(allow hal_macsec_server su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_macsec.te

(neverallow base_typeattr_711 hal_macsec_service (service_manager (find)))
;;* lme

;;* lmx 7 system/sepolicy/private/hal_macsec.te

(allow hal_macsec_server servicemanager (binder (call transfer)))
;;* lme

;;* lmx 7 system/sepolicy/private/hal_macsec.te

(allow servicemanager hal_macsec_server (binder (call transfer)))
;;* lme

;;* lmx 1 system/sepolicy/private/hal_mediaquality.te

(allow hal_mediaquality_client hal_mediaquality_server (binder (call transfer)))
;;* lme

;;* lmx 1 system/sepolicy/private/hal_mediaquality.te

(allow hal_mediaquality_server hal_mediaquality_client (binder (transfer)))
;;* lme

;;* lmx 1 system/sepolicy/private/hal_mediaquality.te

(allow hal_mediaquality_client hal_mediaquality_server (fd (use)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_mediaquality.te

(allow hal_mediaquality_server hal_mediaquality_client (binder (call transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_mediaquality.te

(allow hal_mediaquality_client hal_mediaquality_server (binder (transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_mediaquality.te

(allow hal_mediaquality_server hal_mediaquality_client (fd (use)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_mediaquality.te

(allow hal_mediaquality_client hal_mediaquality_service (service_manager (find)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_mediaquality.te

(allow hal_mediaquality_server hal_mediaquality_service (service_manager (add find)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_mediaquality.te

(neverallow base_typeattr_712 hal_mediaquality_service (service_manager (add)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_mediaquality.te

(allow hal_mediaquality_server su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_mediaquality.te

(neverallow base_typeattr_713 hal_mediaquality_service (service_manager (find)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_mediaquality.te

(allow hal_mediaquality_server servicemanager (binder (call transfer)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_mediaquality.te

(allow servicemanager hal_mediaquality_server (binder (transfer)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_mediaquality.te

(allow hal_mediaquality_server servicemanager (fd (use)))
;;* lme

;;* lmx 7 system/sepolicy/private/hal_mediaquality.te

(allow hal_mediaquality_client servicemanager (binder (call transfer)))
;;* lme

;;* lmx 7 system/sepolicy/private/hal_mediaquality.te

(allow servicemanager hal_mediaquality_client (binder (transfer)))
;;* lme

;;* lmx 7 system/sepolicy/private/hal_mediaquality.te

(allow hal_mediaquality_client servicemanager (fd (use)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_memtrack.te

(allow hal_memtrack_client hal_memtrack_server (binder (call transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_memtrack.te

(allow hal_memtrack_server hal_memtrack_client (binder (transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_memtrack.te

(allow hal_memtrack_client hal_memtrack_server (fd (use)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_memtrack.te

(allow hal_memtrack_client hal_memtrack_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_memtrack.te

(allow hal_memtrack_server hal_memtrack_hwservice (hwservice_manager (add find)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_memtrack.te

(allow hal_memtrack_server hidl_base_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_memtrack.te

(neverallow base_typeattr_714 hal_memtrack_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_memtrack.te

(neverallow base_typeattr_715 hal_memtrack_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_memtrack.te

(allow hal_memtrack_client hal_memtrack_service (service_manager (find)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_memtrack.te

(allow hal_memtrack_server hal_memtrack_service (service_manager (add find)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_memtrack.te

(neverallow base_typeattr_714 hal_memtrack_service (service_manager (add)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_memtrack.te

(allow hal_memtrack_server su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_memtrack.te

(neverallow base_typeattr_716 hal_memtrack_service (service_manager (find)))
;;* lme

;;* lmx 7 system/sepolicy/private/hal_memtrack.te

(allow hal_memtrack_server servicemanager (binder (call transfer)))
;;* lme

;;* lmx 7 system/sepolicy/private/hal_memtrack.te

(allow servicemanager hal_memtrack_server (binder (transfer)))
;;* lme

;;* lmx 7 system/sepolicy/private/hal_memtrack.te

(allow hal_memtrack_server servicemanager (fd (use)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_neuralnetworks.te

(allow hal_neuralnetworks_client hal_neuralnetworks_server (binder (call transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_neuralnetworks.te

(allow hal_neuralnetworks_server hal_neuralnetworks_client (binder (transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_neuralnetworks.te

(allow hal_neuralnetworks_client hal_neuralnetworks_server (fd (use)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_neuralnetworks.te

(allow hal_neuralnetworks_server hal_neuralnetworks_client (binder (call transfer)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_neuralnetworks.te

(allow hal_neuralnetworks_client hal_neuralnetworks_server (binder (transfer)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_neuralnetworks.te

(allow hal_neuralnetworks_server hal_neuralnetworks_client (fd (use)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_neuralnetworks.te

(allow hal_neuralnetworks_client hal_neuralnetworks_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_neuralnetworks.te

(allow hal_neuralnetworks_server hal_neuralnetworks_hwservice (hwservice_manager (add find)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_neuralnetworks.te

(allow hal_neuralnetworks_server hidl_base_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_neuralnetworks.te

(neverallow base_typeattr_717 hal_neuralnetworks_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_neuralnetworks.te

(neverallow base_typeattr_718 hal_neuralnetworks_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_neuralnetworks.te

(allow hal_neuralnetworks hidl_memory_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 7 system/sepolicy/private/hal_neuralnetworks.te

(allow hal_neuralnetworks hal_allocator (fd (use)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_neuralnetworks.te

(allow hal_neuralnetworks hal_graphics_mapper_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 9 system/sepolicy/private/hal_neuralnetworks.te

(allow hal_neuralnetworks hal_graphics_allocator (fd (use)))
;;* lme

;;* lmx 12 system/sepolicy/private/hal_neuralnetworks.te

(allow hal_neuralnetworks_server app_data_file (file (read write getattr map)))
;;* lme

;;* lmx 13 system/sepolicy/private/hal_neuralnetworks.te

(allow hal_neuralnetworks_server privapp_data_file (file (read write getattr map)))
;;* lme

;;* lmx 16 system/sepolicy/private/hal_neuralnetworks.te

(allow hal_neuralnetworks_server shell_data_file (file (read write getattr map)))
;;* lme

;;* lmx 19 system/sepolicy/private/hal_neuralnetworks.te

(allow hal_neuralnetworks_server storage_file (file (read getattr map)))
;;* lme

;;* lmx 22 system/sepolicy/private/hal_neuralnetworks.te

(allow hal_neuralnetworks_server apk_data_file (file (read getattr map)))
;;* lme

;;* lmx 25 system/sepolicy/private/hal_neuralnetworks.te

(allow hal_neuralnetworks_server appdomain (memfd_file (read write getattr map)))
;;* lme

;;* lmx 30 system/sepolicy/private/hal_neuralnetworks.te

(allow hal_neuralnetworks_client nnapi_ext_deny_product_prop (file (read getattr map open)))
;;* lme

;;* lmx 33 system/sepolicy/private/hal_neuralnetworks.te

(allow hal_neuralnetworks_client device_config_nnapi_native_prop (file (read getattr map open)))
;;* lme

;;* lmx 37 system/sepolicy/private/hal_neuralnetworks.te

(neverallow base_typeattr_247 nnapi_ext_deny_product_prop (property_service (set)))
;;* lme

;;* lmx 40 system/sepolicy/private/hal_neuralnetworks.te

(allow hal_neuralnetworks_client hal_neuralnetworks_service (service_manager (find)))
;;* lme

;;* lmx 40 system/sepolicy/private/hal_neuralnetworks.te

(allow hal_neuralnetworks_server hal_neuralnetworks_service (service_manager (add find)))
;;* lme

;;* lmx 40 system/sepolicy/private/hal_neuralnetworks.te

(neverallow base_typeattr_717 hal_neuralnetworks_service (service_manager (add)))
;;* lme

;;* lmx 40 system/sepolicy/private/hal_neuralnetworks.te

(allow hal_neuralnetworks_server su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 40 system/sepolicy/private/hal_neuralnetworks.te

(neverallow base_typeattr_719 hal_neuralnetworks_service (service_manager (find)))
;;* lme

;;* lmx 41 system/sepolicy/private/hal_neuralnetworks.te

(allow hal_neuralnetworks_server servicemanager (binder (call transfer)))
;;* lme

;;* lmx 41 system/sepolicy/private/hal_neuralnetworks.te

(allow servicemanager hal_neuralnetworks_server (binder (transfer)))
;;* lme

;;* lmx 41 system/sepolicy/private/hal_neuralnetworks.te

(allow hal_neuralnetworks_server servicemanager (fd (use)))
;;* lme

;;* lmx 43 system/sepolicy/private/hal_neuralnetworks.te

(allow hal_neuralnetworks_server servicemanager (binder (call transfer)))
;;* lme

;;* lmx 43 system/sepolicy/private/hal_neuralnetworks.te

(allow servicemanager hal_neuralnetworks_server (binder (call transfer)))
;;* lme

;;* lmx 45 system/sepolicy/private/hal_neuralnetworks.te

(allow hal_neuralnetworks_server dumpstate (fifo_file (write)))
;;* lme

;;* lmx 17 system/sepolicy/private/hal_neverallows.te

(neverallow base_typeattr_720 self (capability (net_admin net_raw)))
(neverallow base_typeattr_720 self (cap_userns (net_admin net_raw)))
;;* lme

;;* lmx 41 system/sepolicy/private/hal_neverallows.te

(neverallow base_typeattr_721 domain (udp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind)))
(neverallow base_typeattr_721 domain (rawip_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind)))
;;* lme

;;* lmx 59 system/sepolicy/private/hal_neverallows.te

(neverallow base_typeattr_722 base_typeattr_329 (tcp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind name_connect)))
;;* lme

;;* lmx 63 system/sepolicy/private/hal_neverallows.te

(neverallow hal_uwb_vendor_server self (capability (net_raw)))
(neverallow hal_uwb_vendor_server self (cap_userns (net_raw)))
;;* lme

;;* lmx 67 system/sepolicy/private/hal_neverallows.te

(neverallow hal_uwb_vendor_server domain (socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow hal_uwb_vendor_server domain (rawip_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind)))
(neverallow hal_uwb_vendor_server domain (netlink_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow hal_uwb_vendor_server domain (packet_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow hal_uwb_vendor_server domain (key_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow hal_uwb_vendor_server domain (netlink_route_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write nlmsg_readpriv nlmsg_getneigh nlmsg)))
(neverallow hal_uwb_vendor_server domain (netlink_tcpdiag_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write nlmsg)))
(neverallow hal_uwb_vendor_server domain (netlink_nflog_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow hal_uwb_vendor_server domain (netlink_xfrm_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write nlmsg)))
(neverallow hal_uwb_vendor_server domain (netlink_selinux_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow hal_uwb_vendor_server domain (netlink_audit_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write nlmsg_relay nlmsg_readpriv nlmsg_tty_audit nlmsg)))
(neverallow hal_uwb_vendor_server domain (netlink_dnrt_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow hal_uwb_vendor_server domain (netlink_kobject_uevent_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow hal_uwb_vendor_server domain (tun_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind attach_queue)))
(neverallow hal_uwb_vendor_server domain (netlink_iscsi_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow hal_uwb_vendor_server domain (netlink_fib_lookup_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow hal_uwb_vendor_server domain (netlink_connector_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow hal_uwb_vendor_server domain (netlink_netfilter_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow hal_uwb_vendor_server domain (netlink_scsitransport_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow hal_uwb_vendor_server domain (netlink_rdma_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow hal_uwb_vendor_server domain (netlink_crypto_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow hal_uwb_vendor_server domain (qipcrtr_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow hal_uwb_vendor_server domain (xdp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
;;* lme

;;* lmx 100 system/sepolicy/private/hal_neverallows.te

(neverallow base_typeattr_723 base_typeattr_724 (file (execute_no_trans)))
;;* lme

;;* lmx 102 system/sepolicy/private/hal_neverallows.te

(neverallow base_typeattr_247 halserverdomain (process (transition)))
;;* lme

;;* lmx 106 system/sepolicy/private/hal_neverallows.te

(neverallow base_typeattr_248 halserverdomain (process (dyntransition)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_nfc.te

(allow hal_nfc_client hal_nfc_server (binder (call transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_nfc.te

(allow hal_nfc_server hal_nfc_client (binder (transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_nfc.te

(allow hal_nfc_client hal_nfc_server (fd (use)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_nfc.te

(allow hal_nfc_server hal_nfc_client (binder (call transfer)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_nfc.te

(allow hal_nfc_client hal_nfc_server (binder (transfer)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_nfc.te

(allow hal_nfc_server hal_nfc_client (fd (use)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_nfc.te

(allow hal_nfc_server servicemanager (binder (call transfer)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_nfc.te

(allow servicemanager hal_nfc_server (binder (transfer)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_nfc.te

(allow hal_nfc_server servicemanager (fd (use)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_nfc.te

(allow hal_nfc_client hal_nfc_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_nfc.te

(allow hal_nfc_server hal_nfc_hwservice (hwservice_manager (add find)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_nfc.te

(allow hal_nfc_server hidl_base_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_nfc.te

(neverallow base_typeattr_725 hal_nfc_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_nfc.te

(neverallow base_typeattr_726 hal_nfc_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 7 system/sepolicy/private/hal_nfc.te

(allow hal_nfc_client hal_nfc_service (service_manager (find)))
;;* lme

;;* lmx 7 system/sepolicy/private/hal_nfc.te

(allow hal_nfc_server hal_nfc_service (service_manager (add find)))
;;* lme

;;* lmx 7 system/sepolicy/private/hal_nfc.te

(neverallow base_typeattr_725 hal_nfc_service (service_manager (add)))
;;* lme

;;* lmx 7 system/sepolicy/private/hal_nfc.te

(allow hal_nfc_server su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 7 system/sepolicy/private/hal_nfc.te

(neverallow base_typeattr_727 hal_nfc_service (service_manager (find)))
;;* lme

;;* lmx 10 system/sepolicy/private/hal_nfc.te

(allow hal_nfc property_socket (sock_file (write)))
;;* lme

;;* lmx 10 system/sepolicy/private/hal_nfc.te

(allow hal_nfc init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 10 system/sepolicy/private/hal_nfc.te

(allow hal_nfc nfc_prop (property_service (set)))
;;* lme

;;* lmx 10 system/sepolicy/private/hal_nfc.te

(allow hal_nfc nfc_prop (file (read getattr map open)))
;;* lme

;;* lmx 13 system/sepolicy/private/hal_nfc.te

(allow hal_nfc nfc_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 14 system/sepolicy/private/hal_nfc.te

(allow hal_nfc cgroup (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 14 system/sepolicy/private/hal_nfc.te

(allow hal_nfc cgroup (file (ioctl read getattr lock map open watch watch_reads)))
(allow hal_nfc cgroup (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 1 system/sepolicy/private/hal_nlinterceptor.te

(allow hal_nlinterceptor_client hal_nlinterceptor_server (binder (call transfer)))
;;* lme

;;* lmx 1 system/sepolicy/private/hal_nlinterceptor.te

(allow hal_nlinterceptor_server hal_nlinterceptor_client (binder (transfer)))
;;* lme

;;* lmx 1 system/sepolicy/private/hal_nlinterceptor.te

(allow hal_nlinterceptor_client hal_nlinterceptor_server (fd (use)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_nlinterceptor.te

(allow hal_nlinterceptor_client hal_nlinterceptor_service (service_manager (find)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_nlinterceptor.te

(allow hal_nlinterceptor_server hal_nlinterceptor_service (service_manager (add find)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_nlinterceptor.te

(neverallow base_typeattr_728 hal_nlinterceptor_service (service_manager (add)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_nlinterceptor.te

(allow hal_nlinterceptor_server su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_nlinterceptor.te

(neverallow base_typeattr_729 hal_nlinterceptor_service (service_manager (find)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_nlinterceptor.te

(allow hal_nlinterceptor servicemanager (binder (call transfer)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_nlinterceptor.te

(allow servicemanager hal_nlinterceptor (binder (transfer)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_nlinterceptor.te

(allow hal_nlinterceptor servicemanager (fd (use)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_nlinterceptor.te

(allow hal_nlinterceptor self (capability (net_admin)))
(allow hal_nlinterceptor self (cap_userns (net_admin)))
;;* lme

;;* lmx 7 system/sepolicy/private/hal_nlinterceptor.te

(allow hal_nlinterceptor self (netlink_generic_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_nlinterceptor.te

(allow hal_nlinterceptor self (netlink_route_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
;;* lme

;;* lmx 10 system/sepolicy/private/hal_nlinterceptor.te

(allow hal_nlinterceptor self (netlink_route_socket (nlmsg_write nlmsg_readpriv)))
;;* lme

;;* lmx 12 system/sepolicy/private/hal_nlinterceptor.te

(allow hal_nlinterceptor self (netlink_route_socket (nlmsg)))
;;* lme

;;* lmx 1 system/sepolicy/private/hal_npu_scheduling.te

(allow hal_npu_scheduling_client hal_npu_scheduling_server (binder (call transfer)))
;;* lme

;;* lmx 1 system/sepolicy/private/hal_npu_scheduling.te

(allow hal_npu_scheduling_server hal_npu_scheduling_client (binder (transfer)))
;;* lme

;;* lmx 1 system/sepolicy/private/hal_npu_scheduling.te

(allow hal_npu_scheduling_client hal_npu_scheduling_server (fd (use)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_npu_scheduling.te

(allow hal_npu_scheduling_server hal_npu_scheduling_client (binder (call transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_npu_scheduling.te

(allow hal_npu_scheduling_client hal_npu_scheduling_server (binder (transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_npu_scheduling.te

(allow hal_npu_scheduling_server hal_npu_scheduling_client (fd (use)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_npu_scheduling.te

(allow hal_npu_scheduling_server servicemanager (binder (call transfer)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_npu_scheduling.te

(allow servicemanager hal_npu_scheduling_server (binder (call transfer)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_npu_scheduling.te

(allow hal_npu_scheduling_client hal_npu_scheduling_service (service_manager (find)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_npu_scheduling.te

(allow hal_npu_scheduling_server hal_npu_scheduling_service (service_manager (add find)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_npu_scheduling.te

(neverallow base_typeattr_730 hal_npu_scheduling_service (service_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_npu_scheduling.te

(allow hal_npu_scheduling_server su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_npu_scheduling.te

(neverallow base_typeattr_731 hal_npu_scheduling_service (service_manager (find)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_npu_scheduling.te

(allow system_server hal_npu_scheduling (memfd_file (read write getattr map)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_npu_scheduling.te

(allow hal_npu_scheduling system_server (memfd_file (read write getattr map)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_npu_scheduling.te

(allow hal_npu_scheduling_server dumpstate (fifo_file (write)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_oemlock.te

(allow hal_oemlock_client hal_oemlock_server (binder (call transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_oemlock.te

(allow hal_oemlock_server hal_oemlock_client (binder (transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_oemlock.te

(allow hal_oemlock_client hal_oemlock_server (fd (use)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_oemlock.te

(allow hal_oemlock_client hal_oemlock_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_oemlock.te

(allow hal_oemlock_server hal_oemlock_hwservice (hwservice_manager (add find)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_oemlock.te

(allow hal_oemlock_server hidl_base_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_oemlock.te

(neverallow base_typeattr_732 hal_oemlock_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_oemlock.te

(neverallow base_typeattr_733 hal_oemlock_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_oemlock.te

(allow hal_oemlock_client hal_oemlock_service (service_manager (find)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_oemlock.te

(allow hal_oemlock_server hal_oemlock_service (service_manager (add find)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_oemlock.te

(neverallow base_typeattr_732 hal_oemlock_service (service_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_oemlock.te

(allow hal_oemlock_server su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_oemlock.te

(neverallow base_typeattr_734 hal_oemlock_service (service_manager (find)))
;;* lme

;;* lmx 7 system/sepolicy/private/hal_oemlock.te

(allow hal_oemlock_server servicemanager (binder (call transfer)))
;;* lme

;;* lmx 7 system/sepolicy/private/hal_oemlock.te

(allow servicemanager hal_oemlock_server (binder (transfer)))
;;* lme

;;* lmx 7 system/sepolicy/private/hal_oemlock.te

(allow hal_oemlock_server servicemanager (fd (use)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_omx.te

(allow hal_omx_server binderservicedomain (binder (call transfer)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_omx.te

(allow binderservicedomain hal_omx_server (binder (transfer)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_omx.te

(allow hal_omx_server binderservicedomain (fd (use)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_omx.te

(allow hal_omx_server base_typeattr_625 (binder (call transfer)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_omx.te

(allow base_typeattr_625 hal_omx_server (binder (transfer)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_omx.te

(allow hal_omx_server base_typeattr_625 (fd (use)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_omx.te

(allow hal_omx_server hal_graphics_composer (fd (use)))
;;* lme

;;* lmx 10 system/sepolicy/private/hal_omx.te

(allow hal_omx_server hal_camera (fd (use)))
;;* lme

;;* lmx 12 system/sepolicy/private/hal_omx.te

(allow hal_omx_server su (fifo_file (append)))
;;* lme

;;* lmx 12 system/sepolicy/private/hal_omx.te

(allow hal_omx_server anr_data_file (file (append)))
;;* lme

;;* lmx 12 system/sepolicy/private/hal_omx.te

(allow hal_omx_server dumpstate (fd (use)))
;;* lme

;;* lmx 12 system/sepolicy/private/hal_omx.te

(allow hal_omx_server incidentd (fd (use)))
;;* lme

;;* lmx 12 system/sepolicy/private/hal_omx.te

(allow hal_omx_server dumpstate (fifo_file (write append)))
;;* lme

;;* lmx 12 system/sepolicy/private/hal_omx.te

(allow hal_omx_server incidentd (fifo_file (write append)))
;;* lme

;;* lmx 12 system/sepolicy/private/hal_omx.te

(allow hal_omx_server system_server (fifo_file (write append)))
;;* lme

;;* lmx 12 system/sepolicy/private/hal_omx.te

(allow hal_omx_server tombstoned (unix_stream_socket (connectto)))
;;* lme

;;* lmx 12 system/sepolicy/private/hal_omx.te

(allow hal_omx_server tombstoned (fd (use)))
;;* lme

;;* lmx 12 system/sepolicy/private/hal_omx.te

(allow hal_omx_server tombstoned_crash_socket (sock_file (write)))
;;* lme

;;* lmx 12 system/sepolicy/private/hal_omx.te

(allow hal_omx_server tombstone_data_file (file (append)))
;;* lme

;;* lmx 18 system/sepolicy/private/hal_omx.te

(allow hal_omx_server bufferhubd (fd (use)))
;;* lme

;;* lmx 20 system/sepolicy/private/hal_omx.te

(allow hal_omx_client hal_omx_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 20 system/sepolicy/private/hal_omx.te

(allow hal_omx_server hal_omx_hwservice (hwservice_manager (add find)))
;;* lme

;;* lmx 20 system/sepolicy/private/hal_omx.te

(allow hal_omx_server hidl_base_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 20 system/sepolicy/private/hal_omx.te

(neverallow base_typeattr_735 hal_omx_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 20 system/sepolicy/private/hal_omx.te

(neverallow base_typeattr_736 hal_omx_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 22 system/sepolicy/private/hal_omx.te

(allow hal_omx_client hidl_token_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 24 system/sepolicy/private/hal_omx.te

(allow hal_omx_client media_variant_prop (file (read getattr map open)))
;;* lme

;;* lmx 25 system/sepolicy/private/hal_omx.te

(allow hal_omx_server media_variant_prop (file (read getattr map open)))
;;* lme

;;* lmx 27 system/sepolicy/private/hal_omx.te

(allow hal_omx_client hal_omx_server (binder (call transfer)))
;;* lme

;;* lmx 27 system/sepolicy/private/hal_omx.te

(allow hal_omx_server hal_omx_client (binder (transfer)))
;;* lme

;;* lmx 27 system/sepolicy/private/hal_omx.te

(allow hal_omx_client hal_omx_server (fd (use)))
;;* lme

;;* lmx 28 system/sepolicy/private/hal_omx.te

(allow hal_omx_server hal_omx_client (binder (call transfer)))
;;* lme

;;* lmx 28 system/sepolicy/private/hal_omx.te

(allow hal_omx_client hal_omx_server (binder (transfer)))
;;* lme

;;* lmx 28 system/sepolicy/private/hal_omx.te

(allow hal_omx_server hal_omx_client (fd (use)))
;;* lme

;;* lmx 36 system/sepolicy/private/hal_omx.te

(neverallow hal_omx_server fs_type (file (execute_no_trans)))
(neverallow hal_omx_server file_type (file (execute_no_trans)))
;;* lme

;;* lmx 48 system/sepolicy/private/hal_omx.te

(neverallow hal_omx_server domain (udp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind)))
(neverallow hal_omx_server domain (rawip_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind)))
;;* lme

;;* lmx 49 system/sepolicy/private/hal_omx.te

(neverallow hal_omx_server base_typeattr_329 (tcp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind name_connect)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_power.te

(allow hal_power_client hal_power_server (binder (call transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_power.te

(allow hal_power_server hal_power_client (binder (transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_power.te

(allow hal_power_client hal_power_server (fd (use)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_power.te

(allow hal_power_server hal_power_client (binder (call transfer)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_power.te

(allow hal_power_client hal_power_server (binder (transfer)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_power.te

(allow hal_power_server hal_power_client (fd (use)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_power.te

(allow hal_power_client hal_power_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_power.te

(allow hal_power_server hal_power_hwservice (hwservice_manager (add find)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_power.te

(allow hal_power_server hidl_base_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_power.te

(neverallow base_typeattr_737 hal_power_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_power.te

(neverallow base_typeattr_738 hal_power_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_power.te

(allow hal_power_client hal_power_service (service_manager (find)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_power.te

(allow hal_power_server hal_power_service (service_manager (add find)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_power.te

(neverallow base_typeattr_737 hal_power_service (service_manager (add)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_power.te

(allow hal_power_server su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_power.te

(neverallow base_typeattr_739 hal_power_service (service_manager (find)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_power.te

(allow hal_power_server servicemanager (binder (call transfer)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_power.te

(allow servicemanager hal_power_server (binder (transfer)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_power.te

(allow hal_power_server servicemanager (fd (use)))
;;* lme

;;* lmx 9 system/sepolicy/private/hal_power.te

(allow hal_power_client servicemanager (binder (call transfer)))
;;* lme

;;* lmx 9 system/sepolicy/private/hal_power.te

(allow servicemanager hal_power_client (binder (transfer)))
;;* lme

;;* lmx 9 system/sepolicy/private/hal_power.te

(allow hal_power_client servicemanager (fd (use)))
;;* lme

;;* lmx 12 system/sepolicy/private/hal_power.te

(allow hal_power_server property_socket (sock_file (write)))
;;* lme

;;* lmx 12 system/sepolicy/private/hal_power.te

(allow hal_power_server init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 12 system/sepolicy/private/hal_power.te

(allow hal_power_server dalvik_dynamic_config_prop (property_service (set)))
;;* lme

;;* lmx 12 system/sepolicy/private/hal_power.te

(allow hal_power_server dalvik_dynamic_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_power_stats.te

(allow hal_power_stats_client hal_power_stats_server (binder (call transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_power_stats.te

(allow hal_power_stats_server hal_power_stats_client (binder (transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_power_stats.te

(allow hal_power_stats_client hal_power_stats_server (fd (use)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_power_stats.te

(allow hal_power_stats_server hal_power_stats_client (binder (call transfer)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_power_stats.te

(allow hal_power_stats_client hal_power_stats_server (binder (transfer)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_power_stats.te

(allow hal_power_stats_server hal_power_stats_client (fd (use)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_power_stats.te

(allow hal_power_stats_client hal_power_stats_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_power_stats.te

(allow hal_power_stats_server hal_power_stats_hwservice (hwservice_manager (add find)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_power_stats.te

(allow hal_power_stats_server hidl_base_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_power_stats.te

(neverallow base_typeattr_740 hal_power_stats_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_power_stats.te

(neverallow base_typeattr_741 hal_power_stats_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_power_stats.te

(allow hal_power_stats_client hal_power_stats_service (service_manager (find)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_power_stats.te

(allow hal_power_stats_server hal_power_stats_service (service_manager (add find)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_power_stats.te

(neverallow base_typeattr_740 hal_power_stats_service (service_manager (add)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_power_stats.te

(allow hal_power_stats_server su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_power_stats.te

(neverallow base_typeattr_742 hal_power_stats_service (service_manager (find)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_power_stats.te

(allow hal_power_stats_server servicemanager (binder (call transfer)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_power_stats.te

(allow servicemanager hal_power_stats_server (binder (transfer)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_power_stats.te

(allow hal_power_stats_server servicemanager (fd (use)))
;;* lme

;;* lmx 9 system/sepolicy/private/hal_power_stats.te

(allow hal_power_stats_client servicemanager (binder (call transfer)))
;;* lme

;;* lmx 9 system/sepolicy/private/hal_power_stats.te

(allow servicemanager hal_power_stats_client (binder (transfer)))
;;* lme

;;* lmx 9 system/sepolicy/private/hal_power_stats.te

(allow hal_power_stats_client servicemanager (fd (use)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_rebootescrow.te

(allow hal_rebootescrow_client hal_rebootescrow_server (binder (call transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_rebootescrow.te

(allow hal_rebootescrow_server hal_rebootescrow_client (binder (transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_rebootescrow.te

(allow hal_rebootescrow_client hal_rebootescrow_server (fd (use)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_rebootescrow.te

(allow hal_rebootescrow_client hal_rebootescrow_service (service_manager (find)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_rebootescrow.te

(allow hal_rebootescrow_server hal_rebootescrow_service (service_manager (add find)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_rebootescrow.te

(neverallow base_typeattr_743 hal_rebootescrow_service (service_manager (add)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_rebootescrow.te

(allow hal_rebootescrow_server su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_rebootescrow.te

(neverallow base_typeattr_744 hal_rebootescrow_service (service_manager (find)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_rebootescrow.te

(allow hal_rebootescrow_server servicemanager (binder (call transfer)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_rebootescrow.te

(allow servicemanager hal_rebootescrow_server (binder (call transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_remoteaccess.te

(allow hal_remoteaccess_client hal_remoteaccess_server (binder (call transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_remoteaccess.te

(allow hal_remoteaccess_server hal_remoteaccess_client (binder (transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_remoteaccess.te

(allow hal_remoteaccess_client hal_remoteaccess_server (fd (use)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_remoteaccess.te

(allow hal_remoteaccess_server hal_remoteaccess_client (binder (call transfer)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_remoteaccess.te

(allow hal_remoteaccess_client hal_remoteaccess_server (binder (transfer)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_remoteaccess.te

(allow hal_remoteaccess_server hal_remoteaccess_client (fd (use)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_remoteaccess.te

(allow hal_remoteaccess_client hal_remoteaccess_service (service_manager (find)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_remoteaccess.te

(allow hal_remoteaccess_server hal_remoteaccess_service (service_manager (add find)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_remoteaccess.te

(neverallow base_typeattr_745 hal_remoteaccess_service (service_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_remoteaccess.te

(allow hal_remoteaccess_server su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_remoteaccess.te

(neverallow base_typeattr_746 hal_remoteaccess_service (service_manager (find)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_remotelyprovisionedcomponent_avf.te

(allow hal_remotelyprovisionedcomponent_avf_client hal_remotelyprovisionedcomponent_avf_server (binder (call transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_remotelyprovisionedcomponent_avf.te

(allow hal_remotelyprovisionedcomponent_avf_server hal_remotelyprovisionedcomponent_avf_client (binder (transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_remotelyprovisionedcomponent_avf.te

(allow hal_remotelyprovisionedcomponent_avf_client hal_remotelyprovisionedcomponent_avf_server (fd (use)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_remotelyprovisionedcomponent_avf.te

(allow hal_remotelyprovisionedcomponent_avf_client hal_remotelyprovisionedcomponent_avf_service (service_manager (find)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_remotelyprovisionedcomponent_avf.te

(allow hal_remotelyprovisionedcomponent_avf_server hal_remotelyprovisionedcomponent_avf_service (service_manager (add find)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_remotelyprovisionedcomponent_avf.te

(neverallow base_typeattr_747 hal_remotelyprovisionedcomponent_avf_service (service_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_remotelyprovisionedcomponent_avf.te

(allow hal_remotelyprovisionedcomponent_avf_server su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_remotelyprovisionedcomponent_avf.te

(neverallow base_typeattr_748 hal_remotelyprovisionedcomponent_avf_service (service_manager (find)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_remotelyprovisionedcomponent_avf.te

(allow hal_remotelyprovisionedcomponent_avf_server servicemanager (binder (call transfer)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_remotelyprovisionedcomponent_avf.te

(allow servicemanager hal_remotelyprovisionedcomponent_avf_server (binder (call transfer)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_secretkeeper.te

(allow hal_secretkeeper_client hal_secretkeeper_server (binder (call transfer)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_secretkeeper.te

(allow hal_secretkeeper_server hal_secretkeeper_client (binder (transfer)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_secretkeeper.te

(allow hal_secretkeeper_client hal_secretkeeper_server (fd (use)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_secretkeeper.te

(allow hal_secretkeeper_client hal_secretkeeper_service (service_manager (find)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_secretkeeper.te

(allow hal_secretkeeper_server hal_secretkeeper_service (service_manager (add find)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_secretkeeper.te

(neverallow base_typeattr_749 hal_secretkeeper_service (service_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_secretkeeper.te

(allow hal_secretkeeper_server su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_secretkeeper.te

(neverallow base_typeattr_750 hal_secretkeeper_service (service_manager (find)))
;;* lme

;;* lmx 7 system/sepolicy/private/hal_secretkeeper.te

(allow hal_secretkeeper_server servicemanager (binder (call transfer)))
;;* lme

;;* lmx 7 system/sepolicy/private/hal_secretkeeper.te

(allow servicemanager hal_secretkeeper_server (binder (call transfer)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_secretkeeper.te

(allow hal_secretkeeper_client servicemanager (binder (call transfer)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_secretkeeper.te

(allow servicemanager hal_secretkeeper_client (binder (call transfer)))
;;* lme

;;* lmx 12 system/sepolicy/private/hal_secretkeeper.te

(allow hal_secretkeeper_server tee_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_secure_element.te

(allow hal_secure_element_client hal_secure_element_server (binder (call transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_secure_element.te

(allow hal_secure_element_server hal_secure_element_client (binder (transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_secure_element.te

(allow hal_secure_element_client hal_secure_element_server (fd (use)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_secure_element.te

(allow hal_secure_element_server hal_secure_element_client (binder (call transfer)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_secure_element.te

(allow hal_secure_element_client hal_secure_element_server (binder (transfer)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_secure_element.te

(allow hal_secure_element_server hal_secure_element_client (fd (use)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_secure_element.te

(allow hal_secure_element_client hal_secure_element_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_secure_element.te

(allow hal_secure_element_server hal_secure_element_hwservice (hwservice_manager (add find)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_secure_element.te

(allow hal_secure_element_server hidl_base_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_secure_element.te

(neverallow base_typeattr_751 hal_secure_element_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_secure_element.te

(neverallow base_typeattr_752 hal_secure_element_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_secure_element.te

(allow hal_secure_element_client hal_secure_element_service (service_manager (find)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_secure_element.te

(allow hal_secure_element_server hal_secure_element_service (service_manager (add find)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_secure_element.te

(neverallow base_typeattr_751 hal_secure_element_service (service_manager (add)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_secure_element.te

(allow hal_secure_element_server su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_secure_element.te

(neverallow base_typeattr_753 hal_secure_element_service (service_manager (find)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_secure_element.te

(allow hal_secure_element_server servicemanager (binder (call transfer)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_secure_element.te

(allow servicemanager hal_secure_element_server (binder (call transfer)))
;;* lme

;;* lmx 10 system/sepolicy/private/hal_secure_element.te

(allow hal_secure_element_client hal_secure_element_service (service_manager (find)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_sensors.te

(allow hal_sensors_client hal_sensors_server (binder (call transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_sensors.te

(allow hal_sensors_server hal_sensors_client (binder (transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_sensors.te

(allow hal_sensors_client hal_sensors_server (fd (use)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_sensors.te

(allow hal_sensors_client hal_sensors_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_sensors.te

(allow hal_sensors_server hal_sensors_hwservice (hwservice_manager (add find)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_sensors.te

(allow hal_sensors_server hidl_base_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_sensors.te

(neverallow base_typeattr_754 hal_sensors_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_sensors.te

(neverallow base_typeattr_755 hal_sensors_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 7 system/sepolicy/private/hal_sensors.te

(allow hal_sensors base_typeattr_625 (fd (use)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_sensors.te

(allow hal_sensors base_typeattr_625 (memfd_file (read write getattr map)))
;;* lme

;;* lmx 12 system/sepolicy/private/hal_sensors.te

(allow hal_sensors hal_allocator (fd (use)))
;;* lme

;;* lmx 13 system/sepolicy/private/hal_sensors.te

(allow hal_sensors hal_allocator (memfd_file (read write getattr map)))
;;* lme

;;* lmx 16 system/sepolicy/private/hal_sensors.te

(allow hal_sensors self (capability (sys_nice)))
(allow hal_sensors self (cap_userns (sys_nice)))
;;* lme

;;* lmx 18 system/sepolicy/private/hal_sensors.te

(allow hal_sensors_server hal_sensors_service (service_manager (add find)))
;;* lme

;;* lmx 18 system/sepolicy/private/hal_sensors.te

(neverallow base_typeattr_754 hal_sensors_service (service_manager (add)))
;;* lme

;;* lmx 18 system/sepolicy/private/hal_sensors.te

(allow hal_sensors_server su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 19 system/sepolicy/private/hal_sensors.te

(allow hal_sensors_server servicemanager (binder (call transfer)))
;;* lme

;;* lmx 19 system/sepolicy/private/hal_sensors.te

(allow servicemanager hal_sensors_server (binder (transfer)))
;;* lme

;;* lmx 19 system/sepolicy/private/hal_sensors.te

(allow hal_sensors_server servicemanager (fd (use)))
;;* lme

;;* lmx 21 system/sepolicy/private/hal_sensors.te

(allow hal_sensors_client hal_sensors_service (service_manager (find)))
;;* lme

;;* lmx 23 system/sepolicy/private/hal_sensors.te

(allow hal_sensors_server sensors_hal_prop (file (read getattr map open)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_telephony.te

(allow hal_telephony_client hal_telephony_server (binder (call transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_telephony.te

(allow hal_telephony_server hal_telephony_client (binder (transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_telephony.te

(allow hal_telephony_client hal_telephony_server (fd (use)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_telephony.te

(allow hal_telephony_server hal_telephony_client (binder (call transfer)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_telephony.te

(allow hal_telephony_client hal_telephony_server (binder (transfer)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_telephony.te

(allow hal_telephony_server hal_telephony_client (fd (use)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_telephony.te

(allow hal_telephony_client hal_telephony_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_telephony.te

(allow hal_telephony_server hal_telephony_hwservice (hwservice_manager (add find)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_telephony.te

(allow hal_telephony_server hidl_base_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_telephony.te

(neverallow base_typeattr_756 hal_telephony_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_telephony.te

(neverallow base_typeattr_757 hal_telephony_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_telephony.te

(allow hal_telephony_client hal_radio_service (service_manager (find)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_telephony.te

(allow hal_telephony_server hal_radio_service (service_manager (add find)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_telephony.te

(neverallow base_typeattr_756 hal_radio_service (service_manager (add)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_telephony.te

(allow hal_telephony_server su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_telephony.te

(neverallow base_typeattr_758 hal_radio_service (service_manager (find)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_telephony.te

(allowx hal_telephony_server self (ioctl udp_socket (0x6900 0x6902)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_telephony.te

(allowx hal_telephony_server self (ioctl udp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_telephony.te

(allowx hal_telephony_server self (ioctl udp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
;;* lme

;;* lmx 10 system/sepolicy/private/hal_telephony.te

(allow hal_telephony_server self (netlink_route_socket (nlmsg_write)))
;;* lme

;;* lmx 11 system/sepolicy/private/hal_telephony.te

(allowx hal_telephony_server self (nlmsg netlink_route_socket ((range 0x10 0x7a))))
;;* lme

;;* lmx 12 system/sepolicy/private/hal_telephony.te

(allow hal_telephony_server self (capability (setgid setuid setpcap net_admin net_raw)))
(allow hal_telephony_server self (cap_userns (setgid setuid setpcap net_admin net_raw)))
;;* lme

;;* lmx 13 system/sepolicy/private/hal_telephony.te

(allow hal_telephony_server cgroup (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 14 system/sepolicy/private/hal_telephony.te

(allow hal_telephony_server cgroup (file (ioctl read getattr lock map open watch watch_reads)))
(allow hal_telephony_server cgroup (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 15 system/sepolicy/private/hal_telephony.te

(allow hal_telephony_server cgroup_v2 (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 16 system/sepolicy/private/hal_telephony.te

(allow hal_telephony_server cgroup_v2 (file (ioctl read getattr lock map open watch watch_reads)))
(allow hal_telephony_server cgroup_v2 (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 17 system/sepolicy/private/hal_telephony.te

(allow hal_telephony_server radio_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 18 system/sepolicy/private/hal_telephony.te

(allow hal_telephony_server radio_device (blk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 19 system/sepolicy/private/hal_telephony.te

(allow hal_telephony_server efs_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 20 system/sepolicy/private/hal_telephony.te

(allow hal_telephony_server efs_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 21 system/sepolicy/private/hal_telephony.te

(allow hal_telephony_server vendor_shell_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lme

;;* lmx 22 system/sepolicy/private/hal_telephony.te

(allow hal_telephony_server bluetooth_efs_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 23 system/sepolicy/private/hal_telephony.te

(allow hal_telephony_server bluetooth_efs_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 26 system/sepolicy/private/hal_telephony.te

(allow hal_telephony_server telephony_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 27 system/sepolicy/private/hal_telephony.te

(allow hal_telephony_server property_socket (sock_file (write)))
;;* lme

;;* lmx 27 system/sepolicy/private/hal_telephony.te

(allow hal_telephony_server init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 27 system/sepolicy/private/hal_telephony.te

(allow hal_telephony_server radio_control_prop (property_service (set)))
;;* lme

;;* lmx 27 system/sepolicy/private/hal_telephony.te

(allow hal_telephony_server radio_control_prop (file (read getattr map open)))
;;* lme

;;* lmx 28 system/sepolicy/private/hal_telephony.te

(allow hal_telephony_server property_socket (sock_file (write)))
;;* lme

;;* lmx 28 system/sepolicy/private/hal_telephony.te

(allow hal_telephony_server init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 28 system/sepolicy/private/hal_telephony.te

(allow hal_telephony_server radio_prop (property_service (set)))
;;* lme

;;* lmx 28 system/sepolicy/private/hal_telephony.te

(allow hal_telephony_server radio_prop (file (read getattr map open)))
;;* lme

;;* lmx 29 system/sepolicy/private/hal_telephony.te

(allow hal_telephony_server property_socket (sock_file (write)))
;;* lme

;;* lmx 29 system/sepolicy/private/hal_telephony.te

(allow hal_telephony_server init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 29 system/sepolicy/private/hal_telephony.te

(allow hal_telephony_server telephony_status_prop (property_service (set)))
;;* lme

;;* lmx 29 system/sepolicy/private/hal_telephony.te

(allow hal_telephony_server telephony_status_prop (file (read getattr map open)))
;;* lme

;;* lmx 31 system/sepolicy/private/hal_telephony.te

(allow hal_telephony_server tty_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 34 system/sepolicy/private/hal_telephony.te

(allow hal_telephony_server self (netlink_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
;;* lme

;;* lmx 35 system/sepolicy/private/hal_telephony.te

(allow hal_telephony_server self (netlink_generic_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
;;* lme

;;* lmx 36 system/sepolicy/private/hal_telephony.te

(allow hal_telephony_server self (netlink_kobject_uevent_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
;;* lme

;;* lmx 39 system/sepolicy/private/hal_telephony.te

(allow hal_telephony_server sysfs_wake_lock (file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 39 system/sepolicy/private/hal_telephony.te

(allow hal_telephony_server self (capability2 (block_suspend)))
(allow hal_telephony_server self (cap2_userns (block_suspend)))
;;* lme

;;* lmx 39 system/sepolicy/private/hal_telephony.te

(allow hal_telephony_server system_suspend_server (binder (call transfer)))
;;* lme

;;* lmx 39 system/sepolicy/private/hal_telephony.te

(allow system_suspend_server hal_telephony_server (binder (transfer)))
;;* lme

;;* lmx 39 system/sepolicy/private/hal_telephony.te

(allow hal_telephony_server system_suspend_server (fd (use)))
;;* lme

;;* lmx 39 system/sepolicy/private/hal_telephony.te

(allow hal_telephony_server system_suspend_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 39 system/sepolicy/private/hal_telephony.te

(allow hal_telephony_server hwservicemanager (binder (call transfer)))
;;* lme

;;* lmx 39 system/sepolicy/private/hal_telephony.te

(allow hwservicemanager hal_telephony_server (binder (call transfer)))
;;* lme

;;* lmx 39 system/sepolicy/private/hal_telephony.te

(allow hal_telephony_server hwservicemanager_prop (file (read getattr map open)))
;;* lme

;;* lmx 39 system/sepolicy/private/hal_telephony.te

(allow hal_telephony_server hidl_manager_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 39 system/sepolicy/private/hal_telephony.te

(allow hal_telephony_server hal_system_suspend_service (service_manager (find)))
;;* lme

;;* lmx 39 system/sepolicy/private/hal_telephony.te

(allow hal_telephony_server servicemanager (binder (call transfer)))
;;* lme

;;* lmx 39 system/sepolicy/private/hal_telephony.te

(allow servicemanager hal_telephony_server (binder (call transfer)))
;;* lme

;;* lmx 41 system/sepolicy/private/hal_telephony.te

(allow hal_telephony_server proc_net_type (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 41 system/sepolicy/private/hal_telephony.te

(allow hal_telephony_server proc_net_type (file (ioctl read getattr lock map open watch watch_reads)))
(allow hal_telephony_server proc_net_type (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 42 system/sepolicy/private/hal_telephony.te

(allow hal_telephony_server sysfs_type (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 42 system/sepolicy/private/hal_telephony.te

(allow hal_telephony_server sysfs_type (file (ioctl read getattr lock map open watch watch_reads)))
(allow hal_telephony_server sysfs_type (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 45 system/sepolicy/private/hal_telephony.te

(allow hal_telephony_server self (socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
;;* lme

;;* lmx 48 system/sepolicy/private/hal_telephony.te

(allow hal_telephony_server hal_telephony_server (binder (call transfer)))
;;* lme

;;* lmx 48 system/sepolicy/private/hal_telephony.te

(allow hal_telephony_server hal_telephony_server (binder (transfer)))
;;* lme

;;* lmx 48 system/sepolicy/private/hal_telephony.te

(allow hal_telephony_server hal_telephony_server (fd (use)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_tetheroffload.te

(allow hal_tetheroffload_client hal_tetheroffload_server (binder (call transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_tetheroffload.te

(allow hal_tetheroffload_server hal_tetheroffload_client (binder (transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_tetheroffload.te

(allow hal_tetheroffload_client hal_tetheroffload_server (fd (use)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_tetheroffload.te

(allow hal_tetheroffload_server hal_tetheroffload_client (binder (call transfer)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_tetheroffload.te

(allow hal_tetheroffload_client hal_tetheroffload_server (binder (transfer)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_tetheroffload.te

(allow hal_tetheroffload_server hal_tetheroffload_client (fd (use)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_tetheroffload.te

(allow hal_tetheroffload_client hal_tetheroffload_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_tetheroffload.te

(allow hal_tetheroffload_server hal_tetheroffload_hwservice (hwservice_manager (add find)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_tetheroffload.te

(allow hal_tetheroffload_server hidl_base_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_tetheroffload.te

(neverallow base_typeattr_759 hal_tetheroffload_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_tetheroffload.te

(neverallow base_typeattr_760 hal_tetheroffload_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_tetheroffload.te

(allow hal_tetheroffload_client hal_tetheroffload_service (service_manager (find)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_tetheroffload.te

(allow hal_tetheroffload_server hal_tetheroffload_service (service_manager (add find)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_tetheroffload.te

(neverallow base_typeattr_759 hal_tetheroffload_service (service_manager (add)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_tetheroffload.te

(allow hal_tetheroffload_server su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_tetheroffload.te

(neverallow base_typeattr_761 hal_tetheroffload_service (service_manager (find)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_tetheroffload.te

(allow hal_tetheroffload_server servicemanager (binder (call transfer)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_tetheroffload.te

(allow servicemanager hal_tetheroffload_server (binder (call transfer)))
;;* lme

;;* lmx 11 system/sepolicy/private/hal_tetheroffload.te

(allow hal_tetheroffload_server hal_tetheroffload_client (netlink_netfilter_socket (read write getattr setopt)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_thermal.te

(allow hal_thermal_client hal_thermal_server (binder (call transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_thermal.te

(allow hal_thermal_server hal_thermal_client (binder (transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_thermal.te

(allow hal_thermal_client hal_thermal_server (fd (use)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_thermal.te

(allow hal_thermal_server hal_thermal_client (binder (call transfer)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_thermal.te

(allow hal_thermal_client hal_thermal_server (binder (transfer)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_thermal.te

(allow hal_thermal_server hal_thermal_client (fd (use)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_thermal.te

(allow hal_thermal_client hal_thermal_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_thermal.te

(allow hal_thermal_server hal_thermal_hwservice (hwservice_manager (add find)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_thermal.te

(allow hal_thermal_server hidl_base_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_thermal.te

(neverallow base_typeattr_762 hal_thermal_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_thermal.te

(neverallow base_typeattr_763 hal_thermal_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_thermal.te

(allow hal_thermal_client hal_thermal_service (service_manager (find)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_thermal.te

(allow hal_thermal_server hal_thermal_service (service_manager (add find)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_thermal.te

(neverallow base_typeattr_762 hal_thermal_service (service_manager (add)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_thermal.te

(allow hal_thermal_server su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_thermal.te

(neverallow base_typeattr_764 hal_thermal_service (service_manager (find)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_thermal.te

(allow hal_thermal_server hal_thermal_service (service_manager (add find)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_thermal.te

(neverallow base_typeattr_762 hal_thermal_service (service_manager (add)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_thermal.te

(allow hal_thermal_server su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 9 system/sepolicy/private/hal_thermal.te

(allow hal_thermal_server servicemanager (binder (call transfer)))
;;* lme

;;* lmx 9 system/sepolicy/private/hal_thermal.te

(allow servicemanager hal_thermal_server (binder (transfer)))
;;* lme

;;* lmx 9 system/sepolicy/private/hal_thermal.te

(allow hal_thermal_server servicemanager (fd (use)))
;;* lme

;;* lmx 10 system/sepolicy/private/hal_thermal.te

(allow hal_thermal_client servicemanager (binder (call transfer)))
;;* lme

;;* lmx 10 system/sepolicy/private/hal_thermal.te

(allow servicemanager hal_thermal_client (binder (transfer)))
;;* lme

;;* lmx 10 system/sepolicy/private/hal_thermal.te

(allow hal_thermal_client servicemanager (fd (use)))
;;* lme

;;* lmx 1 system/sepolicy/private/hal_threadnetwork.te

(allow hal_threadnetwork_client hal_threadnetwork_server (binder (call transfer)))
;;* lme

;;* lmx 1 system/sepolicy/private/hal_threadnetwork.te

(allow hal_threadnetwork_server hal_threadnetwork_client (binder (transfer)))
;;* lme

;;* lmx 1 system/sepolicy/private/hal_threadnetwork.te

(allow hal_threadnetwork_client hal_threadnetwork_server (fd (use)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_threadnetwork.te

(allow hal_threadnetwork_server hal_threadnetwork_client (binder (call transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_threadnetwork.te

(allow hal_threadnetwork_client hal_threadnetwork_server (binder (transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_threadnetwork.te

(allow hal_threadnetwork_server hal_threadnetwork_client (fd (use)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_threadnetwork.te

(allow hal_threadnetwork_client hal_threadnetwork_service (service_manager (find)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_threadnetwork.te

(allow hal_threadnetwork_server hal_threadnetwork_service (service_manager (add find)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_threadnetwork.te

(neverallow base_typeattr_765 hal_threadnetwork_service (service_manager (add)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_threadnetwork.te

(allow hal_threadnetwork_server su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_threadnetwork.te

(neverallow base_typeattr_766 hal_threadnetwork_service (service_manager (find)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_threadnetwork.te

(allow hal_threadnetwork_server servicemanager (binder (call transfer)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_threadnetwork.te

(allow servicemanager hal_threadnetwork_server (binder (transfer)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_threadnetwork.te

(allow hal_threadnetwork_server servicemanager (fd (use)))
;;* lme

;;* lmx 7 system/sepolicy/private/hal_threadnetwork.te

(allow hal_threadnetwork_client servicemanager (binder (call transfer)))
;;* lme

;;* lmx 7 system/sepolicy/private/hal_threadnetwork.te

(allow servicemanager hal_threadnetwork_client (binder (transfer)))
;;* lme

;;* lmx 7 system/sepolicy/private/hal_threadnetwork.te

(allow hal_threadnetwork_client servicemanager (fd (use)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_tv_cec.te

(allow hal_tv_cec_client hal_tv_cec_server (binder (call transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_tv_cec.te

(allow hal_tv_cec_server hal_tv_cec_client (binder (transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_tv_cec.te

(allow hal_tv_cec_client hal_tv_cec_server (fd (use)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_tv_cec.te

(allow hal_tv_cec_server hal_tv_cec_client (binder (call transfer)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_tv_cec.te

(allow hal_tv_cec_client hal_tv_cec_server (binder (transfer)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_tv_cec.te

(allow hal_tv_cec_server hal_tv_cec_client (fd (use)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_tv_cec.te

(allow hal_tv_cec_client hal_tv_cec_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_tv_cec.te

(allow hal_tv_cec_server hal_tv_cec_hwservice (hwservice_manager (add find)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_tv_cec.te

(allow hal_tv_cec_server hidl_base_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_tv_cec.te

(neverallow base_typeattr_767 hal_tv_cec_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_tv_cec.te

(neverallow base_typeattr_768 hal_tv_cec_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_tv_hdmi_cec.te

(allow hal_tv_hdmi_cec_client hal_tv_hdmi_cec_server (binder (call transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_tv_hdmi_cec.te

(allow hal_tv_hdmi_cec_server hal_tv_hdmi_cec_client (binder (transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_tv_hdmi_cec.te

(allow hal_tv_hdmi_cec_client hal_tv_hdmi_cec_server (fd (use)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_tv_hdmi_cec.te

(allow hal_tv_hdmi_cec_server hal_tv_hdmi_cec_client (binder (call transfer)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_tv_hdmi_cec.te

(allow hal_tv_hdmi_cec_client hal_tv_hdmi_cec_server (binder (transfer)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_tv_hdmi_cec.te

(allow hal_tv_hdmi_cec_server hal_tv_hdmi_cec_client (fd (use)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_tv_hdmi_cec.te

(allow hal_tv_hdmi_cec_client servicemanager (binder (call transfer)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_tv_hdmi_cec.te

(allow servicemanager hal_tv_hdmi_cec_client (binder (call transfer)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_tv_hdmi_cec.te

(allow hal_tv_hdmi_cec_server servicemanager (binder (call transfer)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_tv_hdmi_cec.te

(allow servicemanager hal_tv_hdmi_cec_server (binder (call transfer)))
;;* lme

;;* lmx 7 system/sepolicy/private/hal_tv_hdmi_cec.te

(allow hal_tv_hdmi_cec_client hal_tv_hdmi_cec_service (service_manager (find)))
;;* lme

;;* lmx 7 system/sepolicy/private/hal_tv_hdmi_cec.te

(allow hal_tv_hdmi_cec_server hal_tv_hdmi_cec_service (service_manager (add find)))
;;* lme

;;* lmx 7 system/sepolicy/private/hal_tv_hdmi_cec.te

(neverallow base_typeattr_769 hal_tv_hdmi_cec_service (service_manager (add)))
;;* lme

;;* lmx 7 system/sepolicy/private/hal_tv_hdmi_cec.te

(allow hal_tv_hdmi_cec_server su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 7 system/sepolicy/private/hal_tv_hdmi_cec.te

(neverallow base_typeattr_770 hal_tv_hdmi_cec_service (service_manager (find)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_tv_hdmi_connection.te

(allow hal_tv_hdmi_connection_client hal_tv_hdmi_connection_server (binder (call transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_tv_hdmi_connection.te

(allow hal_tv_hdmi_connection_server hal_tv_hdmi_connection_client (binder (transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_tv_hdmi_connection.te

(allow hal_tv_hdmi_connection_client hal_tv_hdmi_connection_server (fd (use)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_tv_hdmi_connection.te

(allow hal_tv_hdmi_connection_server hal_tv_hdmi_connection_client (binder (call transfer)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_tv_hdmi_connection.te

(allow hal_tv_hdmi_connection_client hal_tv_hdmi_connection_server (binder (transfer)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_tv_hdmi_connection.te

(allow hal_tv_hdmi_connection_server hal_tv_hdmi_connection_client (fd (use)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_tv_hdmi_connection.te

(allow hal_tv_hdmi_connection_client servicemanager (binder (call transfer)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_tv_hdmi_connection.te

(allow servicemanager hal_tv_hdmi_connection_client (binder (call transfer)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_tv_hdmi_connection.te

(allow hal_tv_hdmi_connection_server servicemanager (binder (call transfer)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_tv_hdmi_connection.te

(allow servicemanager hal_tv_hdmi_connection_server (binder (call transfer)))
;;* lme

;;* lmx 7 system/sepolicy/private/hal_tv_hdmi_connection.te

(allow hal_tv_hdmi_connection_client hal_tv_hdmi_connection_service (service_manager (find)))
;;* lme

;;* lmx 7 system/sepolicy/private/hal_tv_hdmi_connection.te

(allow hal_tv_hdmi_connection_server hal_tv_hdmi_connection_service (service_manager (add find)))
;;* lme

;;* lmx 7 system/sepolicy/private/hal_tv_hdmi_connection.te

(neverallow base_typeattr_771 hal_tv_hdmi_connection_service (service_manager (add)))
;;* lme

;;* lmx 7 system/sepolicy/private/hal_tv_hdmi_connection.te

(allow hal_tv_hdmi_connection_server su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 7 system/sepolicy/private/hal_tv_hdmi_connection.te

(neverallow base_typeattr_772 hal_tv_hdmi_connection_service (service_manager (find)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_tv_hdmi_earc.te

(allow hal_tv_hdmi_earc_client hal_tv_hdmi_earc_server (binder (call transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_tv_hdmi_earc.te

(allow hal_tv_hdmi_earc_server hal_tv_hdmi_earc_client (binder (transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_tv_hdmi_earc.te

(allow hal_tv_hdmi_earc_client hal_tv_hdmi_earc_server (fd (use)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_tv_hdmi_earc.te

(allow hal_tv_hdmi_earc_server hal_tv_hdmi_earc_client (binder (call transfer)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_tv_hdmi_earc.te

(allow hal_tv_hdmi_earc_client hal_tv_hdmi_earc_server (binder (transfer)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_tv_hdmi_earc.te

(allow hal_tv_hdmi_earc_server hal_tv_hdmi_earc_client (fd (use)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_tv_hdmi_earc.te

(allow hal_tv_hdmi_earc_client servicemanager (binder (call transfer)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_tv_hdmi_earc.te

(allow servicemanager hal_tv_hdmi_earc_client (binder (call transfer)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_tv_hdmi_earc.te

(allow hal_tv_hdmi_earc_server servicemanager (binder (call transfer)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_tv_hdmi_earc.te

(allow servicemanager hal_tv_hdmi_earc_server (binder (call transfer)))
;;* lme

;;* lmx 7 system/sepolicy/private/hal_tv_hdmi_earc.te

(allow hal_tv_hdmi_earc_client hal_tv_hdmi_earc_service (service_manager (find)))
;;* lme

;;* lmx 7 system/sepolicy/private/hal_tv_hdmi_earc.te

(allow hal_tv_hdmi_earc_server hal_tv_hdmi_earc_service (service_manager (add find)))
;;* lme

;;* lmx 7 system/sepolicy/private/hal_tv_hdmi_earc.te

(neverallow base_typeattr_773 hal_tv_hdmi_earc_service (service_manager (add)))
;;* lme

;;* lmx 7 system/sepolicy/private/hal_tv_hdmi_earc.te

(allow hal_tv_hdmi_earc_server su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 7 system/sepolicy/private/hal_tv_hdmi_earc.te

(neverallow base_typeattr_774 hal_tv_hdmi_earc_service (service_manager (find)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_tv_input.te

(allow hal_tv_input_client hal_tv_input_server (binder (call transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_tv_input.te

(allow hal_tv_input_server hal_tv_input_client (binder (transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_tv_input.te

(allow hal_tv_input_client hal_tv_input_server (fd (use)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_tv_input.te

(allow hal_tv_input_server hal_tv_input_client (binder (call transfer)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_tv_input.te

(allow hal_tv_input_client hal_tv_input_server (binder (transfer)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_tv_input.te

(allow hal_tv_input_server hal_tv_input_client (fd (use)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_tv_input.te

(allow hal_tv_input_client hal_tv_input_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_tv_input.te

(allow hal_tv_input_server hal_tv_input_hwservice (hwservice_manager (add find)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_tv_input.te

(allow hal_tv_input_server hidl_base_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_tv_input.te

(neverallow base_typeattr_775 hal_tv_input_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_tv_input.te

(neverallow base_typeattr_776 hal_tv_input_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_tv_input.te

(allow hal_tv_input_client hal_tv_input_service (service_manager (find)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_tv_input.te

(allow hal_tv_input_server hal_tv_input_service (service_manager (add find)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_tv_input.te

(neverallow base_typeattr_775 hal_tv_input_service (service_manager (add)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_tv_input.te

(allow hal_tv_input_server su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_tv_input.te

(neverallow base_typeattr_777 hal_tv_input_service (service_manager (find)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_tv_input.te

(allow hal_tv_input_server servicemanager (binder (call transfer)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_tv_input.te

(allow servicemanager hal_tv_input_server (binder (transfer)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_tv_input.te

(allow hal_tv_input_server servicemanager (fd (use)))
;;* lme

;;* lmx 9 system/sepolicy/private/hal_tv_input.te

(allow hal_tv_input_client servicemanager (binder (call transfer)))
;;* lme

;;* lmx 9 system/sepolicy/private/hal_tv_input.te

(allow servicemanager hal_tv_input_client (binder (transfer)))
;;* lme

;;* lmx 9 system/sepolicy/private/hal_tv_input.te

(allow hal_tv_input_client servicemanager (fd (use)))
;;* lme

;;* lmx 1 system/sepolicy/private/hal_tv_tuner.te

(allow hal_tv_tuner_client hal_tv_tuner_server (binder (call transfer)))
;;* lme

;;* lmx 1 system/sepolicy/private/hal_tv_tuner.te

(allow hal_tv_tuner_server hal_tv_tuner_client (binder (transfer)))
;;* lme

;;* lmx 1 system/sepolicy/private/hal_tv_tuner.te

(allow hal_tv_tuner_client hal_tv_tuner_server (fd (use)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_tv_tuner.te

(allow hal_tv_tuner_server hal_tv_tuner_client (binder (call transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_tv_tuner.te

(allow hal_tv_tuner_client hal_tv_tuner_server (binder (transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_tv_tuner.te

(allow hal_tv_tuner_server hal_tv_tuner_client (fd (use)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_tv_tuner.te

(allow hal_tv_tuner_client hal_tv_tuner_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_tv_tuner.te

(allow hal_tv_tuner_server hal_tv_tuner_hwservice (hwservice_manager (add find)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_tv_tuner.te

(allow hal_tv_tuner_server hidl_base_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_tv_tuner.te

(neverallow base_typeattr_778 hal_tv_tuner_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_tv_tuner.te

(neverallow base_typeattr_779 hal_tv_tuner_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_tv_tuner.te

(allow hal_tv_tuner_client hal_tv_tuner_service (service_manager (find)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_tv_tuner.te

(allow hal_tv_tuner_server hal_tv_tuner_service (service_manager (add find)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_tv_tuner.te

(neverallow base_typeattr_778 hal_tv_tuner_service (service_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_tv_tuner.te

(allow hal_tv_tuner_server su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_tv_tuner.te

(neverallow base_typeattr_780 hal_tv_tuner_service (service_manager (find)))
;;* lme

;;* lmx 7 system/sepolicy/private/hal_tv_tuner.te

(allow hal_tv_tuner_server servicemanager (binder (call transfer)))
;;* lme

;;* lmx 7 system/sepolicy/private/hal_tv_tuner.te

(allow servicemanager hal_tv_tuner_server (binder (transfer)))
;;* lme

;;* lmx 7 system/sepolicy/private/hal_tv_tuner.te

(allow hal_tv_tuner_server servicemanager (fd (use)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_tv_tuner.te

(allow hal_tv_tuner_client servicemanager (binder (call transfer)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_tv_tuner.te

(allow servicemanager hal_tv_tuner_client (binder (transfer)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_tv_tuner.te

(allow hal_tv_tuner_client servicemanager (fd (use)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_usb.te

(allow hal_usb_client hal_usb_server (binder (call transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_usb.te

(allow hal_usb_server hal_usb_client (binder (transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_usb.te

(allow hal_usb_client hal_usb_server (fd (use)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_usb.te

(allow hal_usb_server hal_usb_client (binder (call transfer)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_usb.te

(allow hal_usb_client hal_usb_server (binder (transfer)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_usb.te

(allow hal_usb_server hal_usb_client (fd (use)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_usb.te

(allow hal_usb_client hal_usb_service (service_manager (find)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_usb.te

(allow hal_usb_server hal_usb_service (service_manager (add find)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_usb.te

(neverallow base_typeattr_781 hal_usb_service (service_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_usb.te

(allow hal_usb_server su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_usb.te

(neverallow base_typeattr_782 hal_usb_service (service_manager (find)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_usb.te

(allow hal_usb_server servicemanager (binder (call transfer)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_usb.te

(allow servicemanager hal_usb_server (binder (transfer)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_usb.te

(allow hal_usb_server servicemanager (fd (use)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_usb.te

(allow hal_usb_client hal_usb_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_usb.te

(allow hal_usb_server hal_usb_hwservice (hwservice_manager (add find)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_usb.te

(allow hal_usb_server hidl_base_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_usb.te

(neverallow base_typeattr_781 hal_usb_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_usb.te

(neverallow base_typeattr_783 hal_usb_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 10 system/sepolicy/private/hal_usb.te

(allow hal_usb self (netlink_kobject_uevent_socket (create)))
;;* lme

;;* lmx 11 system/sepolicy/private/hal_usb.te

(allow hal_usb self (netlink_kobject_uevent_socket (setopt)))
;;* lme

;;* lmx 12 system/sepolicy/private/hal_usb.te

(allow hal_usb self (netlink_kobject_uevent_socket (getopt)))
;;* lme

;;* lmx 13 system/sepolicy/private/hal_usb.te

(allow hal_usb self (netlink_kobject_uevent_socket (bind)))
;;* lme

;;* lmx 14 system/sepolicy/private/hal_usb.te

(allow hal_usb self (netlink_kobject_uevent_socket (read)))
;;* lme

;;* lmx 15 system/sepolicy/private/hal_usb.te

(allow hal_usb sysfs (dir (open)))
;;* lme

;;* lmx 16 system/sepolicy/private/hal_usb.te

(allow hal_usb sysfs (dir (read)))
;;* lme

;;* lmx 17 system/sepolicy/private/hal_usb.te

(allow hal_usb sysfs (file (read)))
;;* lme

;;* lmx 18 system/sepolicy/private/hal_usb.te

(allow hal_usb sysfs (file (open)))
;;* lme

;;* lmx 19 system/sepolicy/private/hal_usb.te

(allow hal_usb sysfs (file (write)))
;;* lme

;;* lmx 20 system/sepolicy/private/hal_usb.te

(allow hal_usb sysfs (file (getattr)))
;;* lme

;;* lmx 24 system/sepolicy/private/hal_usb.te

(allow hal_usb sysfs_typec (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 24 system/sepolicy/private/hal_usb.te

(allow hal_usb sysfs_typec (file (ioctl read getattr lock map open watch watch_reads)))
(allow hal_usb sysfs_typec (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 25 system/sepolicy/private/hal_usb.te

(allow hal_usb sysfs_usb (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 25 system/sepolicy/private/hal_usb.te

(allow hal_usb sysfs_usb (file (ioctl read getattr lock map open watch watch_reads)))
(allow hal_usb sysfs_usb (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 26 system/sepolicy/private/hal_usb.te

(allow hal_usb sysfs_usb_pd (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 26 system/sepolicy/private/hal_usb.te

(allow hal_usb sysfs_usb_pd (file (ioctl read getattr lock map open watch watch_reads)))
(allow hal_usb sysfs_usb_pd (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 28 system/sepolicy/private/hal_usb.te

(allow hal_usb sysfs_typec (file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 29 system/sepolicy/private/hal_usb.te

(allow hal_usb sysfs_usb (file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 30 system/sepolicy/private/hal_usb.te

(allow hal_usb sysfs_usb_pd (file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_usb_gadget.te

(allow hal_usb_gadget_client hal_usb_gadget_server (binder (call transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_usb_gadget.te

(allow hal_usb_gadget_server hal_usb_gadget_client (binder (transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_usb_gadget.te

(allow hal_usb_gadget_client hal_usb_gadget_server (fd (use)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_usb_gadget.te

(allow hal_usb_gadget_server hal_usb_gadget_client (binder (call transfer)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_usb_gadget.te

(allow hal_usb_gadget_client hal_usb_gadget_server (binder (transfer)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_usb_gadget.te

(allow hal_usb_gadget_server hal_usb_gadget_client (fd (use)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_usb_gadget.te

(allow hal_usb_gadget_client hal_usb_gadget_service (service_manager (find)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_usb_gadget.te

(allow hal_usb_gadget_server hal_usb_gadget_service (service_manager (add find)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_usb_gadget.te

(neverallow base_typeattr_784 hal_usb_gadget_service (service_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_usb_gadget.te

(allow hal_usb_gadget_server su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_usb_gadget.te

(neverallow base_typeattr_785 hal_usb_gadget_service (service_manager (find)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_usb_gadget.te

(allow hal_usb_gadget_server servicemanager (binder (call transfer)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_usb_gadget.te

(allow servicemanager hal_usb_gadget_server (binder (transfer)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_usb_gadget.te

(allow hal_usb_gadget_server servicemanager (fd (use)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_usb_gadget.te

(allow hal_usb_gadget_client hal_usb_gadget_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_usb_gadget.te

(allow hal_usb_gadget_server hal_usb_gadget_hwservice (hwservice_manager (add find)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_usb_gadget.te

(allow hal_usb_gadget_server hidl_base_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_usb_gadget.te

(neverallow base_typeattr_784 hal_usb_gadget_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_usb_gadget.te

(neverallow base_typeattr_786 hal_usb_gadget_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 11 system/sepolicy/private/hal_usb_gadget.te

(allow hal_usb_gadget_server configfs (lnk_file (read create unlink)))
;;* lme

;;* lmx 12 system/sepolicy/private/hal_usb_gadget.te

(allow hal_usb_gadget_server configfs (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
;;* lme

;;* lmx 13 system/sepolicy/private/hal_usb_gadget.te

(allow hal_usb_gadget_server configfs (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 14 system/sepolicy/private/hal_usb_gadget.te

(allow hal_usb_gadget_server functionfs (dir (read search)))
;;* lme

;;* lmx 15 system/sepolicy/private/hal_usb_gadget.te

(allow hal_usb_gadget_server functionfs (file (read)))
;;* lme

;;* lmx 16 system/sepolicy/private/hal_usb_gadget.te

(allow hal_usb_gadget_server proc_interrupts (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 17 system/sepolicy/private/hal_usb_gadget.te

(allow hal_usb_gadget_server usbaccessory_device (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 20 system/sepolicy/private/hal_usb_gadget.te

(allow hal_usb_gadget_server usb_uvc_enabled_prop (file (read getattr map open)))
;;* lme

;;* lmx 23 system/sepolicy/private/hal_usb_gadget.te

(allow hal_usb_gadget_server usb_userspace_aoa_enabled_prop (file (read getattr map open)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_uwb.te

(allow hal_uwb_client hal_uwb_server (binder (call transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_uwb.te

(allow hal_uwb_server hal_uwb_client (binder (transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_uwb.te

(allow hal_uwb_client hal_uwb_server (fd (use)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_uwb.te

(allow hal_uwb_server hal_uwb_client (binder (call transfer)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_uwb.te

(allow hal_uwb_client hal_uwb_server (binder (transfer)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_uwb.te

(allow hal_uwb_server hal_uwb_client (fd (use)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_uwb.te

(allow hal_uwb_client hal_uwb_service (service_manager (find)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_uwb.te

(allow hal_uwb_server hal_uwb_service (service_manager (add find)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_uwb.te

(neverallow base_typeattr_787 hal_uwb_service (service_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_uwb.te

(allow hal_uwb_server su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_uwb.te

(neverallow base_typeattr_788 hal_uwb_service (service_manager (find)))
;;* lme

;;* lmx 7 system/sepolicy/private/hal_uwb.te

(allow hal_uwb_server servicemanager (binder (call transfer)))
;;* lme

;;* lmx 7 system/sepolicy/private/hal_uwb.te

(allow servicemanager hal_uwb_server (binder (transfer)))
;;* lme

;;* lmx 7 system/sepolicy/private/hal_uwb.te

(allow hal_uwb_server servicemanager (fd (use)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_uwb.te

(allow hal_uwb_client servicemanager (binder (call transfer)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_uwb.te

(allow servicemanager hal_uwb_client (binder (transfer)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_uwb.te

(allow hal_uwb_client servicemanager (fd (use)))
;;* lme

;;* lmx 9 system/sepolicy/private/hal_uwb.te

(allow hal_uwb cgroup (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 9 system/sepolicy/private/hal_uwb.te

(allow hal_uwb cgroup (file (ioctl read getattr lock map open watch watch_reads)))
(allow hal_uwb cgroup (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_vehicle.te

(allow hal_vehicle_client hal_vehicle_server (binder (call transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_vehicle.te

(allow hal_vehicle_server hal_vehicle_client (binder (transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_vehicle.te

(allow hal_vehicle_client hal_vehicle_server (fd (use)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_vehicle.te

(allow hal_vehicle_server hal_vehicle_client (binder (call transfer)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_vehicle.te

(allow hal_vehicle_client hal_vehicle_server (binder (transfer)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_vehicle.te

(allow hal_vehicle_server hal_vehicle_client (fd (use)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_vehicle.te

(allow hal_vehicle_client hal_vehicle_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_vehicle.te

(allow hal_vehicle_server hal_vehicle_hwservice (hwservice_manager (add find)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_vehicle.te

(allow hal_vehicle_server hidl_base_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_vehicle.te

(neverallow base_typeattr_789 hal_vehicle_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_vehicle.te

(neverallow base_typeattr_790 hal_vehicle_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 7 system/sepolicy/private/hal_vehicle.te

(allow hal_vehicle_client hal_vehicle_service (service_manager (find)))
;;* lme

;;* lmx 7 system/sepolicy/private/hal_vehicle.te

(allow hal_vehicle_server hal_vehicle_service (service_manager (add find)))
;;* lme

;;* lmx 7 system/sepolicy/private/hal_vehicle.te

(neverallow base_typeattr_789 hal_vehicle_service (service_manager (add)))
;;* lme

;;* lmx 7 system/sepolicy/private/hal_vehicle.te

(allow hal_vehicle_server su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 7 system/sepolicy/private/hal_vehicle.te

(neverallow base_typeattr_791 hal_vehicle_service (service_manager (find)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_vibrator.te

(allow hal_vibrator_client hal_vibrator_server (binder (call transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_vibrator.te

(allow hal_vibrator_server hal_vibrator_client (binder (transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_vibrator.te

(allow hal_vibrator_client hal_vibrator_server (fd (use)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_vibrator.te

(allow hal_vibrator_server hal_vibrator_client (binder (call transfer)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_vibrator.te

(allow hal_vibrator_client hal_vibrator_server (binder (transfer)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_vibrator.te

(allow hal_vibrator_server hal_vibrator_client (fd (use)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_vibrator.te

(allow hal_vibrator_client hal_vibrator_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_vibrator.te

(allow hal_vibrator_server hal_vibrator_hwservice (hwservice_manager (add find)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_vibrator.te

(allow hal_vibrator_server hidl_base_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_vibrator.te

(neverallow base_typeattr_792 hal_vibrator_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_vibrator.te

(neverallow base_typeattr_793 hal_vibrator_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_vibrator.te

(allow hal_vibrator_client hal_vibrator_service (service_manager (find)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_vibrator.te

(allow hal_vibrator_server hal_vibrator_service (service_manager (add find)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_vibrator.te

(neverallow base_typeattr_792 hal_vibrator_service (service_manager (add)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_vibrator.te

(allow hal_vibrator_server su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_vibrator.te

(neverallow base_typeattr_794 hal_vibrator_service (service_manager (find)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_vibrator.te

(allow hal_vibrator_server servicemanager (binder (call transfer)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_vibrator.te

(allow servicemanager hal_vibrator_server (binder (transfer)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_vibrator.te

(allow hal_vibrator_server servicemanager (fd (use)))
;;* lme

;;* lmx 10 system/sepolicy/private/hal_vibrator.te

(allow hal_vibrator_server dumpstate (fifo_file (write)))
;;* lme

;;* lmx 13 system/sepolicy/private/hal_vibrator.te

(allow hal_vibrator sysfs_vibrator (file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 14 system/sepolicy/private/hal_vibrator.te

(allow hal_vibrator sysfs_vibrator (dir (search)))
;;* lme

;;* lmx 17 system/sepolicy/private/hal_vibrator.te

(allow hal_vibrator fwk_vibrator_control_service (service_manager (find)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_vm_capabilities.te

(allow hal_vm_capabilities_client hal_vm_capabilities_server (binder (call transfer)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_vm_capabilities.te

(allow hal_vm_capabilities_server hal_vm_capabilities_client (binder (transfer)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_vm_capabilities.te

(allow hal_vm_capabilities_client hal_vm_capabilities_server (fd (use)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_vm_capabilities.te

(allow hal_vm_capabilities_client hal_vm_capabilities_service (service_manager (find)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_vm_capabilities.te

(allow hal_vm_capabilities_server hal_vm_capabilities_service (service_manager (add find)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_vm_capabilities.te

(neverallow base_typeattr_795 hal_vm_capabilities_service (service_manager (add)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_vm_capabilities.te

(allow hal_vm_capabilities_server su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_vm_capabilities.te

(neverallow base_typeattr_796 hal_vm_capabilities_service (service_manager (find)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_vm_capabilities.te

(allow hal_vm_capabilities_client servicemanager (binder (call transfer)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_vm_capabilities.te

(allow servicemanager hal_vm_capabilities_client (binder (call transfer)))
;;* lme

;;* lmx 9 system/sepolicy/private/hal_vm_capabilities.te

(allow hal_vm_capabilities_server servicemanager (binder (call transfer)))
;;* lme

;;* lmx 9 system/sepolicy/private/hal_vm_capabilities.te

(allow servicemanager hal_vm_capabilities_server (binder (call transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_vr.te

(allow hal_vr_client hal_vr_server (binder (call transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_vr.te

(allow hal_vr_server hal_vr_client (binder (transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_vr.te

(allow hal_vr_client hal_vr_server (fd (use)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_vr.te

(allow hal_vr_server hal_vr_client (binder (call transfer)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_vr.te

(allow hal_vr_client hal_vr_server (binder (transfer)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_vr.te

(allow hal_vr_server hal_vr_client (fd (use)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_vr.te

(allow hal_vr_client hal_vr_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_vr.te

(allow hal_vr_server hal_vr_hwservice (hwservice_manager (add find)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_vr.te

(allow hal_vr_server hidl_base_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_vr.te

(neverallow base_typeattr_797 hal_vr_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_vr.te

(neverallow base_typeattr_798 hal_vr_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_weaver.te

(allow hal_weaver_client hal_weaver_server (binder (call transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_weaver.te

(allow hal_weaver_server hal_weaver_client (binder (transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_weaver.te

(allow hal_weaver_client hal_weaver_server (fd (use)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_weaver.te

(allow hal_weaver_client hal_weaver_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_weaver.te

(allow hal_weaver_server hal_weaver_hwservice (hwservice_manager (add find)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_weaver.te

(allow hal_weaver_server hidl_base_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_weaver.te

(neverallow base_typeattr_799 hal_weaver_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 4 system/sepolicy/private/hal_weaver.te

(neverallow base_typeattr_800 hal_weaver_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_weaver.te

(allow hal_weaver_client hal_weaver_service (service_manager (find)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_weaver.te

(allow hal_weaver_server hal_weaver_service (service_manager (add find)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_weaver.te

(neverallow base_typeattr_799 hal_weaver_service (service_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_weaver.te

(allow hal_weaver_server su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_weaver.te

(neverallow base_typeattr_801 hal_weaver_service (service_manager (find)))
;;* lme

;;* lmx 7 system/sepolicy/private/hal_weaver.te

(allow hal_weaver_server servicemanager (binder (call transfer)))
;;* lme

;;* lmx 7 system/sepolicy/private/hal_weaver.te

(allow servicemanager hal_weaver_server (binder (transfer)))
;;* lme

;;* lmx 7 system/sepolicy/private/hal_weaver.te

(allow hal_weaver_server servicemanager (fd (use)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_widevine_system.te

(allow init hal_widevine_system_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_widevine_system.te

(allow init hal_widevine_system (process (transition)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_widevine_system.te

(allow hal_widevine_system hal_widevine_system_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init hal_widevine_system (process (noatsecure)))
;;* lmx 5 system/sepolicy/private/hal_widevine_system.te

(allow init hal_widevine_system (process (siginh rlimitinh)))
;;* lme

(typetransition init hal_widevine_system_exec process hal_widevine_system)
;;* lmx 7 system/sepolicy/private/hal_widevine_system.te

(allow hal_widevine_system drm_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_widevine_system.te

(allow hal_widevine_system trusty_widevine_vm_sys_prop (file (read getattr map open)))
;;* lme

;;* lmx 10 system/sepolicy/private/hal_widevine_system.te

(allow hal_widevine_system mediadrm_system_data_file (dir (ioctl read write create getattr lock open watch watch_reads add_name remove_name search)))
;;* lme

;;* lmx 11 system/sepolicy/private/hal_widevine_system.te

(allow hal_widevine_system mediadrm_system_data_file (file (read write create getattr open)))
;;* lme

;;* lmx 14 system/sepolicy/private/hal_widevine_system.te

(allow hal_widevine_system accessor_trusty_widevine_comm_service (service_manager (find)))
;;* lme

;;* lmx 15 system/sepolicy/private/hal_widevine_system.te

(allow hal_widevine_system trusty_widevine_comm_service (service_manager (find)))
;;* lme

;;* lmx 18 system/sepolicy/private/hal_widevine_system.te

(allow hal_widevine_system early_virtmgr_domain (fd (use)))
;;* lme

;;* lmx 19 system/sepolicy/private/hal_widevine_system.te

(allow hal_widevine_system early_virtmgr_domain (vsock_socket (read write getattr getopt)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_wifi.te

(allow hal_wifi_client hal_wifi_server (binder (call transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_wifi.te

(allow hal_wifi_server hal_wifi_client (binder (transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_wifi.te

(allow hal_wifi_client hal_wifi_server (fd (use)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_wifi.te

(allow hal_wifi_server hal_wifi_client (binder (call transfer)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_wifi.te

(allow hal_wifi_client hal_wifi_server (binder (transfer)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_wifi.te

(allow hal_wifi_server hal_wifi_client (fd (use)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_wifi.te

(allow hal_wifi_client hal_wifi_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_wifi.te

(allow hal_wifi_server hal_wifi_hwservice (hwservice_manager (add find)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_wifi.te

(allow hal_wifi_server hidl_base_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_wifi.te

(neverallow base_typeattr_802 hal_wifi_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_wifi.te

(neverallow base_typeattr_803 hal_wifi_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_wifi.te

(allow hal_wifi_client hal_wifi_service (service_manager (find)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_wifi.te

(allow hal_wifi_server hal_wifi_service (service_manager (add find)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_wifi.te

(neverallow base_typeattr_802 hal_wifi_service (service_manager (add)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_wifi.te

(allow hal_wifi_server su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_wifi.te

(neverallow base_typeattr_804 hal_wifi_service (service_manager (find)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_wifi.te

(allow hal_wifi_server servicemanager (binder (call transfer)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_wifi.te

(allow servicemanager hal_wifi_server (binder (call transfer)))
;;* lme

;;* lmx 10 system/sepolicy/private/hal_wifi.te

(allow hal_wifi proc_net_type (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 10 system/sepolicy/private/hal_wifi.te

(allow hal_wifi proc_net_type (file (ioctl read getattr lock map open watch watch_reads)))
(allow hal_wifi proc_net_type (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 11 system/sepolicy/private/hal_wifi.te

(allow hal_wifi sysfs_type (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 11 system/sepolicy/private/hal_wifi.te

(allow hal_wifi sysfs_type (file (ioctl read getattr lock map open watch watch_reads)))
(allow hal_wifi sysfs_type (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 13 system/sepolicy/private/hal_wifi.te

(allow hal_wifi_server property_socket (sock_file (write)))
;;* lme

;;* lmx 13 system/sepolicy/private/hal_wifi.te

(allow hal_wifi_server init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 13 system/sepolicy/private/hal_wifi.te

(allow hal_wifi_server wifi_hal_prop (property_service (set)))
;;* lme

;;* lmx 13 system/sepolicy/private/hal_wifi.te

(allow hal_wifi_server wifi_hal_prop (file (read getattr map open)))
;;* lme

;;* lmx 14 system/sepolicy/private/hal_wifi.te

(allow hal_wifi property_socket (sock_file (write)))
;;* lme

;;* lmx 14 system/sepolicy/private/hal_wifi.te

(allow hal_wifi init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 14 system/sepolicy/private/hal_wifi.te

(allow hal_wifi wifi_prop (property_service (set)))
;;* lme

;;* lmx 14 system/sepolicy/private/hal_wifi.te

(allow hal_wifi wifi_prop (file (read getattr map open)))
;;* lme

;;* lmx 15 system/sepolicy/private/hal_wifi.te

(allow hal_wifi persist_vendor_debug_wifi_prop (file (read getattr map open)))
;;* lme

;;* lmx 18 system/sepolicy/private/hal_wifi.te

(allow hal_wifi self (udp_socket (ioctl read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
;;* lme

;;* lmx 19 system/sepolicy/private/hal_wifi.te

(allowx hal_wifi self (ioctl udp_socket (0x8914 0x8924 0x8946)))
;;* lme

;;* lmx 21 system/sepolicy/private/hal_wifi.te

(allow hal_wifi self (capability (net_admin net_raw)))
(allow hal_wifi self (cap_userns (net_admin net_raw)))
;;* lme

;;* lmx 23 system/sepolicy/private/hal_wifi.te

(allow hal_wifi self (netlink_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
;;* lme

;;* lmx 25 system/sepolicy/private/hal_wifi.te

(allow hal_wifi self (netlink_generic_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
;;* lme

;;* lmx 27 system/sepolicy/private/hal_wifi.te

(allow hal_wifi sysfs_wlan_fwpath (file (write lock append map open)))
;;* lme

;;* lmx 29 system/sepolicy/private/hal_wifi.te

(allow hal_wifi proc_modules (file (read getattr open)))
;;* lme

;;* lmx 31 system/sepolicy/private/hal_wifi.te

(allow hal_wifi dumpstate (fifo_file (write)))
;;* lme

;;* lmx 34 system/sepolicy/private/hal_wifi.te

(allow hal_wifi_server tombstone_wifi_data_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
;;* lme

;;* lmx 35 system/sepolicy/private/hal_wifi.te

(allow hal_wifi_server tombstone_wifi_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_wifi_hostapd.te

(allow hal_wifi_hostapd_client hal_wifi_hostapd_server (binder (call transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_wifi_hostapd.te

(allow hal_wifi_hostapd_server hal_wifi_hostapd_client (binder (transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_wifi_hostapd.te

(allow hal_wifi_hostapd_client hal_wifi_hostapd_server (fd (use)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_wifi_hostapd.te

(allow hal_wifi_hostapd_server hal_wifi_hostapd_client (binder (call transfer)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_wifi_hostapd.te

(allow hal_wifi_hostapd_client hal_wifi_hostapd_server (binder (transfer)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_wifi_hostapd.te

(allow hal_wifi_hostapd_server hal_wifi_hostapd_client (fd (use)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_wifi_hostapd.te

(allow hal_wifi_hostapd_client hal_wifi_hostapd_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_wifi_hostapd.te

(allow hal_wifi_hostapd_server hal_wifi_hostapd_hwservice (hwservice_manager (add find)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_wifi_hostapd.te

(allow hal_wifi_hostapd_server hidl_base_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_wifi_hostapd.te

(neverallow base_typeattr_805 hal_wifi_hostapd_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_wifi_hostapd.te

(neverallow base_typeattr_806 hal_wifi_hostapd_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_wifi_hostapd.te

(allow hal_wifi_hostapd_client hal_wifi_hostapd_service (service_manager (find)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_wifi_hostapd.te

(allow hal_wifi_hostapd_server hal_wifi_hostapd_service (service_manager (add find)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_wifi_hostapd.te

(neverallow base_typeattr_805 hal_wifi_hostapd_service (service_manager (add)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_wifi_hostapd.te

(allow hal_wifi_hostapd_server su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_wifi_hostapd.te

(neverallow base_typeattr_807 hal_wifi_hostapd_service (service_manager (find)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_wifi_hostapd.te

(allow hal_wifi_hostapd_server servicemanager (binder (call transfer)))
;;* lme

;;* lmx 8 system/sepolicy/private/hal_wifi_hostapd.te

(allow servicemanager hal_wifi_hostapd_server (binder (call transfer)))
;;* lme

;;* lmx 10 system/sepolicy/private/hal_wifi_hostapd.te

(allow hal_wifi_hostapd_server dumpstate (fifo_file (write)))
;;* lme

;;* lmx 12 system/sepolicy/private/hal_wifi_hostapd.te

(allow hal_wifi_hostapd_server self (capability (net_admin net_raw)))
(allow hal_wifi_hostapd_server self (cap_userns (net_admin net_raw)))
;;* lme

;;* lmx 14 system/sepolicy/private/hal_wifi_hostapd.te

(allow hal_wifi_hostapd_server sysfs_net (dir (search)))
;;* lme

;;* lmx 17 system/sepolicy/private/hal_wifi_hostapd.te

(allow hal_wifi_hostapd_server proc_net_type (file (read getattr open)))
;;* lme

;;* lmx 20 system/sepolicy/private/hal_wifi_hostapd.te

(allowx hal_wifi_hostapd_server self (ioctl udp_socket (0x6900 0x6902)))
;;* lme

;;* lmx 20 system/sepolicy/private/hal_wifi_hostapd.te

(allowx hal_wifi_hostapd_server self (ioctl udp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
;;* lme

;;* lmx 20 system/sepolicy/private/hal_wifi_hostapd.te

(allowx hal_wifi_hostapd_server self (ioctl udp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
;;* lme

;;* lmx 21 system/sepolicy/private/hal_wifi_hostapd.te

(allow hal_wifi_hostapd_server self (netlink_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
;;* lme

;;* lmx 22 system/sepolicy/private/hal_wifi_hostapd.te

(allow hal_wifi_hostapd_server self (netlink_generic_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
;;* lme

;;* lmx 23 system/sepolicy/private/hal_wifi_hostapd.te

(allow hal_wifi_hostapd_server self (packet_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
;;* lme

;;* lmx 24 system/sepolicy/private/hal_wifi_hostapd.te

(allow hal_wifi_hostapd_server self (netlink_route_socket (nlmsg_write)))
;;* lme

;;* lmx 25 system/sepolicy/private/hal_wifi_hostapd.te

(allowx hal_wifi_hostapd_server self (nlmsg netlink_route_socket ((range 0x10 0x7a))))
;;* lme

;;* lmx 32 system/sepolicy/private/hal_wifi_hostapd.te

(neverallow hal_wifi_hostapd_server sdcard_type (dir (ioctl read write create setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
(neverallow hal_wifi_hostapd_server fuse (dir (ioctl read write create setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 33 system/sepolicy/private/hal_wifi_hostapd.te

(neverallow hal_wifi_hostapd_server sdcard_type (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow hal_wifi_hostapd_server fuse (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_wifi_supplicant.te

(allow hal_wifi_supplicant_client hal_wifi_supplicant_server (binder (call transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_wifi_supplicant.te

(allow hal_wifi_supplicant_server hal_wifi_supplicant_client (binder (transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/hal_wifi_supplicant.te

(allow hal_wifi_supplicant_client hal_wifi_supplicant_server (fd (use)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_wifi_supplicant.te

(allow hal_wifi_supplicant_server hal_wifi_supplicant_client (binder (call transfer)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_wifi_supplicant.te

(allow hal_wifi_supplicant_client hal_wifi_supplicant_server (binder (transfer)))
;;* lme

;;* lmx 3 system/sepolicy/private/hal_wifi_supplicant.te

(allow hal_wifi_supplicant_server hal_wifi_supplicant_client (fd (use)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_wifi_supplicant.te

(allow hal_wifi_supplicant_client hal_wifi_supplicant_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_wifi_supplicant.te

(allow hal_wifi_supplicant_server hal_wifi_supplicant_hwservice (hwservice_manager (add find)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_wifi_supplicant.te

(allow hal_wifi_supplicant_server hidl_base_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_wifi_supplicant.te

(neverallow base_typeattr_808 hal_wifi_supplicant_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/private/hal_wifi_supplicant.te

(neverallow base_typeattr_809 hal_wifi_supplicant_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_wifi_supplicant.te

(allow hal_wifi_supplicant_client hal_wifi_supplicant_service (service_manager (find)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_wifi_supplicant.te

(allow hal_wifi_supplicant_server hal_wifi_supplicant_service (service_manager (add find)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_wifi_supplicant.te

(neverallow base_typeattr_808 hal_wifi_supplicant_service (service_manager (add)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_wifi_supplicant.te

(allow hal_wifi_supplicant_server su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 6 system/sepolicy/private/hal_wifi_supplicant.te

(neverallow base_typeattr_810 hal_wifi_supplicant_service (service_manager (find)))
;;* lme

;;* lmx 9 system/sepolicy/private/hal_wifi_supplicant.te

(allowx hal_wifi_supplicant self (ioctl udp_socket (0x6900 0x6902)))
;;* lme

;;* lmx 9 system/sepolicy/private/hal_wifi_supplicant.te

(allowx hal_wifi_supplicant self (ioctl udp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
;;* lme

;;* lmx 9 system/sepolicy/private/hal_wifi_supplicant.te

(allowx hal_wifi_supplicant self (ioctl udp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
;;* lme

;;* lmx 11 system/sepolicy/private/hal_wifi_supplicant.te

(allow hal_wifi_supplicant sysfs_type (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 11 system/sepolicy/private/hal_wifi_supplicant.te

(allow hal_wifi_supplicant sysfs_type (file (ioctl read getattr lock map open watch watch_reads)))
(allow hal_wifi_supplicant sysfs_type (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 12 system/sepolicy/private/hal_wifi_supplicant.te

(allow hal_wifi_supplicant proc_net_type (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 12 system/sepolicy/private/hal_wifi_supplicant.te

(allow hal_wifi_supplicant proc_net_type (file (ioctl read getattr lock map open watch watch_reads)))
(allow hal_wifi_supplicant proc_net_type (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 14 system/sepolicy/private/hal_wifi_supplicant.te

(allow hal_wifi_supplicant self (capability (net_admin net_raw)))
(allow hal_wifi_supplicant self (cap_userns (net_admin net_raw)))
;;* lme

;;* lmx 15 system/sepolicy/private/hal_wifi_supplicant.te

(allow hal_wifi_supplicant cgroup (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 16 system/sepolicy/private/hal_wifi_supplicant.te

(allow hal_wifi_supplicant cgroup_v2 (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 17 system/sepolicy/private/hal_wifi_supplicant.te

(allow hal_wifi_supplicant self (netlink_route_socket (nlmsg_write)))
;;* lme

;;* lmx 18 system/sepolicy/private/hal_wifi_supplicant.te

(allowx hal_wifi_supplicant self (nlmsg netlink_route_socket ((range 0x10 0x7a))))
;;* lme

;;* lmx 19 system/sepolicy/private/hal_wifi_supplicant.te

(allow hal_wifi_supplicant self (netlink_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
;;* lme

;;* lmx 20 system/sepolicy/private/hal_wifi_supplicant.te

(allow hal_wifi_supplicant self (netlink_generic_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
;;* lme

;;* lmx 21 system/sepolicy/private/hal_wifi_supplicant.te

(allow hal_wifi_supplicant self (packet_socket (ioctl read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
;;* lme

;;* lmx 22 system/sepolicy/private/hal_wifi_supplicant.te

(allowx hal_wifi_supplicant self (ioctl packet_socket ((range 0x5401 0x5404) 0x540b (range 0x540e 0x5411) (range 0x5413 0x5414) (range 0x5450 0x5451))))
;;* lme

;;* lmx 22 system/sepolicy/private/hal_wifi_supplicant.te

(allowx hal_wifi_supplicant self (ioctl packet_socket (0x6900 0x6902)))
;;* lme

;;* lmx 22 system/sepolicy/private/hal_wifi_supplicant.te

(allowx hal_wifi_supplicant self (ioctl packet_socket ((range 0x8906 0x8907) (range 0x890b 0x890d) (range 0x8910 0x8927) 0x8929 (range 0x8930 0x8939) (range 0x8940 0x8943) (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
;;* lme

;;* lmx 22 system/sepolicy/private/hal_wifi_supplicant.te

(allowx hal_wifi_supplicant self (ioctl packet_socket ((range 0x8b00 0x8b02) (range 0x8b04 0x8b1d) (range 0x8b20 0x8b2d) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
;;* lme

;;* lmx 24 system/sepolicy/private/hal_wifi_supplicant.te

(allow hal_wifi_supplicant apc_service (service_manager (find)))
;;* lme

;;* lmx 24 system/sepolicy/private/hal_wifi_supplicant.te

(allow hal_wifi_supplicant keystore_service (service_manager (find)))
;;* lme

;;* lmx 24 system/sepolicy/private/hal_wifi_supplicant.te

(allow hal_wifi_supplicant legacykeystore_service (service_manager (find)))
;;* lme

;;* lmx 24 system/sepolicy/private/hal_wifi_supplicant.te

(allow hal_wifi_supplicant keystore (binder (call transfer)))
;;* lme

;;* lmx 24 system/sepolicy/private/hal_wifi_supplicant.te

(allow keystore hal_wifi_supplicant (binder (transfer)))
;;* lme

;;* lmx 24 system/sepolicy/private/hal_wifi_supplicant.te

(allow hal_wifi_supplicant keystore (fd (use)))
;;* lme

;;* lmx 24 system/sepolicy/private/hal_wifi_supplicant.te

(allow keystore hal_wifi_supplicant (binder (call transfer)))
;;* lme

;;* lmx 24 system/sepolicy/private/hal_wifi_supplicant.te

(allow hal_wifi_supplicant keystore (binder (transfer)))
;;* lme

;;* lmx 24 system/sepolicy/private/hal_wifi_supplicant.te

(allow keystore hal_wifi_supplicant (fd (use)))
;;* lme

;;* lmx 25 system/sepolicy/private/hal_wifi_supplicant.te

(allow hal_wifi_supplicant_server servicemanager (binder (call transfer)))
;;* lme

;;* lmx 25 system/sepolicy/private/hal_wifi_supplicant.te

(allow servicemanager hal_wifi_supplicant_server (binder (call transfer)))
;;* lme

;;* lmx 31 system/sepolicy/private/hal_wifi_supplicant.te

(allow hal_wifi_supplicant wifi_key (keystore2_key (get_info use)))
;;* lme

;;* lmx 38 system/sepolicy/private/hal_wifi_supplicant.te

(neverallow hal_wifi_supplicant_server sdcard_type (dir (ioctl read write create setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
(neverallow hal_wifi_supplicant_server fuse (dir (ioctl read write create setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 39 system/sepolicy/private/hal_wifi_supplicant.te

(neverallow hal_wifi_supplicant_server sdcard_type (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow hal_wifi_supplicant_server fuse (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
;;* lme

;;* lmx 7 system/sepolicy/private/halclientdomain.te

(allow halclientdomain hwservicemanager (binder (call transfer)))
;;* lme

;;* lmx 7 system/sepolicy/private/halclientdomain.te

(allow hwservicemanager halclientdomain (binder (call transfer)))
;;* lme

;;* lmx 10 system/sepolicy/private/halclientdomain.te

(allow halclientdomain hwservicemanager_prop (file (read getattr map open)))
;;* lme

;;* lmx 13 system/sepolicy/private/halclientdomain.te

(allow halclientdomain hidl_manager_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 6 system/sepolicy/private/halserverdomain.te

(allow halserverdomain hwservicemanager (binder (call transfer)))
;;* lme

;;* lmx 6 system/sepolicy/private/halserverdomain.te

(allow hwservicemanager halserverdomain (binder (call transfer)))
;;* lme

;;* lmx 9 system/sepolicy/private/halserverdomain.te

(allow halserverdomain system_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 12 system/sepolicy/private/halserverdomain.te

(allow halserverdomain hwservicemanager_prop (file (read getattr map open)))
;;* lme

;;* lmx 5 system/sepolicy/private/heapprofd.te

(allow init heapprofd_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 5 system/sepolicy/private/heapprofd.te

(allow init heapprofd (process (transition)))
;;* lme

;;* lmx 5 system/sepolicy/private/heapprofd.te

(allow heapprofd heapprofd_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init heapprofd (process (noatsecure)))
;;* lmx 5 system/sepolicy/private/heapprofd.te

(allow init heapprofd (process (siginh rlimitinh)))
;;* lme

(typetransition init heapprofd_exec process heapprofd)
(typetransition heapprofd tmpfs file heapprofd_tmpfs)
;;* lmx 6 system/sepolicy/private/heapprofd.te

(allow heapprofd heapprofd_tmpfs (file (read write getattr map)))
;;* lme

;;* lmx 12 system/sepolicy/private/heapprofd.te

(allow heapprofd property_socket (sock_file (write)))
;;* lme

;;* lmx 12 system/sepolicy/private/heapprofd.te

(allow heapprofd init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 12 system/sepolicy/private/heapprofd.te

(allow heapprofd heapprofd_prop (property_service (set)))
;;* lme

;;* lmx 12 system/sepolicy/private/heapprofd.te

(allow heapprofd heapprofd_prop (file (read getattr map open)))
;;* lme

;;* lmx 19 system/sepolicy/private/heapprofd.te

(allow heapprofd self (capability (kill)))
;;* lme

(dontaudit heapprofd domain (dir (open search)))
;;* lmx 28 system/sepolicy/private/heapprofd.te

(allow heapprofd traced (fd (use)))
;;* lme

;;* lmx 28 system/sepolicy/private/heapprofd.te

(allow heapprofd traced_tmpfs (file (read write getattr map)))
;;* lme

;;* lmx 28 system/sepolicy/private/heapprofd.te

(allow heapprofd traced (memfd_file (read write getattr map)))
;;* lme

;;* lmx 28 system/sepolicy/private/heapprofd.te

(allow heapprofd traced_producer_socket (sock_file (write)))
;;* lme

;;* lmx 28 system/sepolicy/private/heapprofd.te

(allow heapprofd traced (unix_stream_socket (connectto)))
;;* lme

;;* lmx 28 system/sepolicy/private/heapprofd.te

(allow traced heapprofd (fd (use)))
;;* lme

;;* lmx 32 system/sepolicy/private/heapprofd.te

(allow heapprofd nativetest_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 32 system/sepolicy/private/heapprofd.te

(allow heapprofd nativetest_data_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow heapprofd nativetest_data_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 33 system/sepolicy/private/heapprofd.te

(allow heapprofd system_file_type (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 33 system/sepolicy/private/heapprofd.te

(allow heapprofd system_file_type (file (ioctl read getattr lock map open watch watch_reads)))
(allow heapprofd system_file_type (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 34 system/sepolicy/private/heapprofd.te

(allow heapprofd apk_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 34 system/sepolicy/private/heapprofd.te

(allow heapprofd apk_data_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow heapprofd apk_data_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 35 system/sepolicy/private/heapprofd.te

(allow heapprofd dalvikcache_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 35 system/sepolicy/private/heapprofd.te

(allow heapprofd dalvikcache_data_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow heapprofd dalvikcache_data_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 36 system/sepolicy/private/heapprofd.te

(allow heapprofd vendor_file_type (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 36 system/sepolicy/private/heapprofd.te

(allow heapprofd vendor_file_type (file (ioctl read getattr lock map open watch watch_reads)))
(allow heapprofd vendor_file_type (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 37 system/sepolicy/private/heapprofd.te

(allow heapprofd shell_test_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 37 system/sepolicy/private/heapprofd.te

(allow heapprofd shell_test_data_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow heapprofd shell_test_data_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 39 system/sepolicy/private/heapprofd.te

(allow heapprofd apex_art_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 39 system/sepolicy/private/heapprofd.te

(allow heapprofd apex_art_data_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow heapprofd apex_art_data_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 40 system/sepolicy/private/heapprofd.te

(allow heapprofd apex_module_data_file (dir (getattr search)))
;;* lme

;;* lmx 44 system/sepolicy/private/heapprofd.te

(allow heapprofd self (capability (dac_read_search)))
(allow heapprofd self (cap_userns (dac_read_search)))
;;* lme

;;* lmx 47 system/sepolicy/private/heapprofd.te

(allow heapprofd packages_list_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 51 system/sepolicy/private/heapprofd.te

(neverallow heapprofd hal_configstore_server (file (read)))
(neverallow heapprofd apexd (file (read)))
(neverallow heapprofd app_zygote (file (read)))
(neverallow heapprofd bpfloader (file (read)))
(neverallow heapprofd init (file (read)))
(neverallow heapprofd kernel (file (read)))
(neverallow heapprofd keystore (file (read)))
(neverallow heapprofd llkd (file (read)))
(neverallow heapprofd logd (file (read)))
(neverallow heapprofd logpersist (file (read)))
(neverallow heapprofd recovery (file (read)))
(neverallow heapprofd recovery_persist (file (read)))
(neverallow heapprofd recovery_refresh (file (read)))
(neverallow heapprofd ueventd (file (read)))
(neverallow heapprofd vendor_init (file (read)))
(neverallow heapprofd vold (file (read)))
(neverallow heapprofd webview_zygote (file (read)))
(neverallow heapprofd zygote (file (read)))
;;* lme

;;* lmx 51 system/sepolicy/private/heapprofd.te

(neverallow heapprofd hal_configstore_server (process (signal)))
(neverallow heapprofd apexd (process (signal)))
(neverallow heapprofd app_zygote (process (signal)))
(neverallow heapprofd bpfloader (process (signal)))
(neverallow heapprofd init (process (signal)))
(neverallow heapprofd kernel (process (signal)))
(neverallow heapprofd keystore (process (signal)))
(neverallow heapprofd llkd (process (signal)))
(neverallow heapprofd logd (process (signal)))
(neverallow heapprofd logpersist (process (signal)))
(neverallow heapprofd recovery (process (signal)))
(neverallow heapprofd recovery_persist (process (signal)))
(neverallow heapprofd recovery_refresh (process (signal)))
(neverallow heapprofd ueventd (process (signal)))
(neverallow heapprofd vendor_init (process (signal)))
(neverallow heapprofd vold (process (signal)))
(neverallow heapprofd webview_zygote (process (signal)))
(neverallow heapprofd zygote (process (signal)))
;;* lme

;;* lmx 72 system/sepolicy/private/heapprofd.te

(neverallow heapprofd vendor_file_type (file (write create setattr relabelfrom append unlink link rename)))
;;* lme

;;* lmx 72 system/sepolicy/private/heapprofd.te

(neverallow heapprofd base_typeattr_811 (file (execute execute_no_trans)))
;;* lme

;;* lmx 4 system/sepolicy/private/hidl_lazy_test_server.te

(allow init hidl_lazy_test_server_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 4 system/sepolicy/private/hidl_lazy_test_server.te

(allow init hidl_lazy_test_server (process (transition)))
;;* lme

;;* lmx 4 system/sepolicy/private/hidl_lazy_test_server.te

(allow hidl_lazy_test_server hidl_lazy_test_server_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init hidl_lazy_test_server (process (noatsecure)))
;;* lmx 4 system/sepolicy/private/hidl_lazy_test_server.te

(allow init hidl_lazy_test_server (process (siginh rlimitinh)))
;;* lme

(typetransition init hidl_lazy_test_server_exec process hidl_lazy_test_server)
;;* lmx 10 system/sepolicy/private/hidservice.te

(allow init hidservice_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 10 system/sepolicy/private/hidservice.te

(allow init hidservice (process (transition)))
;;* lme

;;* lmx 10 system/sepolicy/private/hidservice.te

(allow hidservice hidservice_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init hidservice (process (noatsecure)))
;;* lmx 10 system/sepolicy/private/hidservice.te

(allow init hidservice (process (siginh rlimitinh)))
;;* lme

(typetransition init hidservice_exec process hidservice)
;;* lmx 12 system/sepolicy/private/hidservice.te

(allow hidservice servicemanager (binder (call transfer)))
;;* lme

;;* lmx 12 system/sepolicy/private/hidservice.te

(allow servicemanager hidservice (binder (call transfer)))
;;* lme

;;* lmx 13 system/sepolicy/private/hidservice.te

(allow hidservice hid_service (service_manager (add find)))
;;* lme

;;* lmx 13 system/sepolicy/private/hidservice.te

(neverallow base_typeattr_812 hid_service (service_manager (add)))
;;* lme

;;* lmx 13 system/sepolicy/private/hidservice.te

(allow hidservice su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 19 system/sepolicy/private/hidservice.te

(allow hidservice cgroup (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 22 system/sepolicy/private/hidservice.te

(allow hidservice device (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 25 system/sepolicy/private/hidservice.te

(allow hidservice hidraw_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 28 system/sepolicy/private/hidservice.te

(allow hidservice sysfs (file (getattr)))
;;* lme

;;* lmx 31 system/sepolicy/private/hidservice.te

(allow hidservice sysfs_uhid (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 31 system/sepolicy/private/hidservice.te

(allow hidservice sysfs_uhid (file (ioctl read getattr lock map open watch watch_reads)))
(allow hidservice sysfs_uhid (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 10 system/sepolicy/private/hwservice.te

(neverallow domain base_typeattr_813 (hwservice_manager (add find)))
;;* lme

;;* lmx 3 system/sepolicy/private/hwservicemanager.te

(allow init hwservicemanager_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 3 system/sepolicy/private/hwservicemanager.te

(allow init hwservicemanager (process (transition)))
;;* lme

;;* lmx 3 system/sepolicy/private/hwservicemanager.te

(allow hwservicemanager hwservicemanager_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init hwservicemanager (process (noatsecure)))
;;* lmx 3 system/sepolicy/private/hwservicemanager.te

(allow init hwservicemanager (process (siginh rlimitinh)))
;;* lme

(typetransition init hwservicemanager_exec process hwservicemanager)
;;* lmx 5 system/sepolicy/private/hwservicemanager.te

(allow hwservicemanager hidl_manager_hwservice (hwservice_manager (add find)))
;;* lme

;;* lmx 5 system/sepolicy/private/hwservicemanager.te

(allow hwservicemanager hidl_base_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/private/hwservicemanager.te

(neverallow base_typeattr_814 hidl_manager_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 6 system/sepolicy/private/hwservicemanager.te

(allow hwservicemanager hidl_token_hwservice (hwservice_manager (add find)))
;;* lme

;;* lmx 6 system/sepolicy/private/hwservicemanager.te

(allow hwservicemanager hidl_base_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 6 system/sepolicy/private/hwservicemanager.te

(neverallow base_typeattr_814 hidl_token_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 8 system/sepolicy/private/hwservicemanager.te

(allow hwservicemanager property_socket (sock_file (write)))
;;* lme

;;* lmx 8 system/sepolicy/private/hwservicemanager.te

(allow hwservicemanager init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 8 system/sepolicy/private/hwservicemanager.te

(allow hwservicemanager ctl_interface_start_prop (property_service (set)))
;;* lme

;;* lmx 8 system/sepolicy/private/hwservicemanager.te

(allow hwservicemanager ctl_interface_start_prop (file (read getattr map open)))
;;* lme

;;* lmx 9 system/sepolicy/private/hwservicemanager.te

(allow hwservicemanager property_socket (sock_file (write)))
;;* lme

;;* lmx 9 system/sepolicy/private/hwservicemanager.te

(allow hwservicemanager init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 9 system/sepolicy/private/hwservicemanager.te

(allow hwservicemanager hwservicemanager_prop (property_service (set)))
;;* lme

;;* lmx 9 system/sepolicy/private/hwservicemanager.te

(allow hwservicemanager hwservicemanager_prop (file (read getattr map open)))
;;* lme

;;* lmx 12 system/sepolicy/private/hwservicemanager.te

(allow hwservicemanager system_bootstrap_lib_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 12 system/sepolicy/private/hwservicemanager.te

(allow hwservicemanager system_bootstrap_lib_file (file (read getattr map execute open)))
;;* lme

;;* lmx 15 system/sepolicy/private/hwservicemanager.te

(allow hwservicemanager apex_mnt_dir (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 15 system/sepolicy/private/hwservicemanager.te

(allow hwservicemanager apex_info_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 15 system/sepolicy/private/hwservicemanager.te

(allow hwservicemanager vendor_apex_metadata_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 15 system/sepolicy/private/hwservicemanager.te

(allow hwservicemanager vendor_apex_metadata_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow hwservicemanager vendor_apex_metadata_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 23 system/sepolicy/private/hwservicemanager.te

(allow hwservicemanager self (binder (set_context_mgr)))
;;* lme

;;* lmx 26 system/sepolicy/private/hwservicemanager.te

(allow hwservicemanager system_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 29 system/sepolicy/private/hwservicemanager.te

(allow hwservicemanager hwservice_contexts_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 32 system/sepolicy/private/hwservicemanager.te

(allow hwservicemanager selinuxfs (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 32 system/sepolicy/private/hwservicemanager.te

(allow hwservicemanager selinuxfs (file (ioctl read getattr lock map open watch watch_reads)))
(allow hwservicemanager selinuxfs (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 32 system/sepolicy/private/hwservicemanager.te

(allow hwservicemanager selinuxfs (file (write lock append map open)))
;;* lme

;;* lmx 32 system/sepolicy/private/hwservicemanager.te

(allow hwservicemanager kernel (security (compute_av)))
;;* lme

;;* lmx 32 system/sepolicy/private/hwservicemanager.te

(allow hwservicemanager self (netlink_selinux_socket (read write create getattr setattr lock relabelfrom relabelto append bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
;;* lme

;;* lmx 3 system/sepolicy/private/idmap.te

(allow init idmap_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 3 system/sepolicy/private/idmap.te

(allow init idmap (process (transition)))
;;* lme

;;* lmx 3 system/sepolicy/private/idmap.te

(allow idmap idmap_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init idmap (process (noatsecure)))
;;* lmx 3 system/sepolicy/private/idmap.te

(allow init idmap (process (siginh rlimitinh)))
;;* lme

(typetransition init idmap_exec process idmap)
;;* lmx 6 system/sepolicy/private/idmap.te

(allow idmap resourcecache_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 7 system/sepolicy/private/idmap.te

(allow idmap resourcecache_data_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
;;* lme

;;* lmx 10 system/sepolicy/private/idmap.te

(allow idmap apk_data_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 11 system/sepolicy/private/idmap.te

(allow idmap apk_data_file (dir (search)))
;;* lme

;;* lmx 14 system/sepolicy/private/idmap.te

(allow idmap apk_tmp_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow idmap apk_private_tmp_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 15 system/sepolicy/private/idmap.te

(allow idmap apk_tmp_file (dir (search)))
(allow idmap apk_private_tmp_file (dir (search)))
;;* lme

;;* lmx 18 system/sepolicy/private/idmap.te

(allow idmap vendor_app_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 18 system/sepolicy/private/idmap.te

(allow idmap vendor_app_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow idmap vendor_app_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 21 system/sepolicy/private/idmap.te

(allow idmap vendor_overlay_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 21 system/sepolicy/private/idmap.te

(allow idmap vendor_overlay_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow idmap vendor_overlay_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 24 system/sepolicy/private/idmap.te

(allow idmap servicemanager (binder (call transfer)))
;;* lme

;;* lmx 24 system/sepolicy/private/idmap.te

(allow servicemanager idmap (binder (call transfer)))
;;* lme

;;* lmx 26 system/sepolicy/private/idmap.te

(allow idmap idmap_service (service_manager (add find)))
;;* lme

;;* lmx 26 system/sepolicy/private/idmap.te

(neverallow base_typeattr_815 idmap_service (service_manager (add)))
;;* lme

;;* lmx 26 system/sepolicy/private/idmap.te

(allow idmap su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 6 system/sepolicy/private/incident.te

(allow shell incident_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 6 system/sepolicy/private/incident.te

(allow shell incident (process (transition)))
;;* lme

;;* lmx 6 system/sepolicy/private/incident.te

(allow incident incident_exec (file (read getattr map execute open entrypoint)))
;;* lme

;;* lmx 6 system/sepolicy/private/incident.te

(allow incident shell (process (sigchld)))
;;* lme

(dontaudit shell incident (process (noatsecure)))
;;* lmx 6 system/sepolicy/private/incident.te

(allow shell incident (process (siginh rlimitinh)))
;;* lme

(typetransition shell incident_exec process incident)
;;* lmx 7 system/sepolicy/private/incident.te

(allow dumpstate incident_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 7 system/sepolicy/private/incident.te

(allow dumpstate incident (process (transition)))
;;* lme

;;* lmx 7 system/sepolicy/private/incident.te

(allow incident incident_exec (file (read getattr map execute open entrypoint)))
;;* lme

;;* lmx 7 system/sepolicy/private/incident.te

(allow incident dumpstate (process (sigchld)))
;;* lme

(dontaudit dumpstate incident (process (noatsecure)))
;;* lmx 7 system/sepolicy/private/incident.te

(allow dumpstate incident (process (siginh rlimitinh)))
;;* lme

(typetransition dumpstate incident_exec process incident)
;;* lmx 10 system/sepolicy/private/incident.te

(allow incident shell (fd (use)))
;;* lme

;;* lmx 14 system/sepolicy/private/incident.te

(allow incident dumpstate (fd (use)))
;;* lme

;;* lmx 15 system/sepolicy/private/incident.te

(allow incident dumpstate (unix_stream_socket (read write)))
;;* lme

;;* lmx 16 system/sepolicy/private/incident.te

(allow incident shell_data_file (file (write)))
;;* lme

;;* lmx 19 system/sepolicy/private/incident.te

(allow incident devpts (chr_file (read write)))
;;* lme

;;* lmx 23 system/sepolicy/private/incident.te

(allow incident adbd (fd (use)))
;;* lme

;;* lmx 24 system/sepolicy/private/incident.te

(allow incident adbd (unix_stream_socket (read write)))
;;* lme

;;* lmx 27 system/sepolicy/private/incident.te

(allow incident adbd (process (sigchld)))
;;* lme

;;* lmx 31 system/sepolicy/private/incident.te

(allow incident servicemanager (binder (call transfer)))
;;* lme

;;* lmx 31 system/sepolicy/private/incident.te

(allow servicemanager incident (binder (call transfer)))
;;* lme

;;* lmx 32 system/sepolicy/private/incident.te

(allow incident incident_service (service_manager (find)))
;;* lme

;;* lmx 33 system/sepolicy/private/incident.te

(allow incident incidentd (binder (call transfer)))
;;* lme

;;* lmx 33 system/sepolicy/private/incident.te

(allow incidentd incident (binder (transfer)))
;;* lme

;;* lmx 33 system/sepolicy/private/incident.te

(allow incident incidentd (fd (use)))
;;* lme

;;* lmx 34 system/sepolicy/private/incident.te

(allow incident incidentd (fifo_file (write)))
;;* lme

;;* lmx 47 system/sepolicy/private/incident.te

(neverallow base_typeattr_816 incident_exec (file (execute execute_no_trans)))
;;* lme

;;* lmx 6 system/sepolicy/private/incident_helper.te

(allow incidentd incident_helper_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 6 system/sepolicy/private/incident_helper.te

(allow incidentd incident_helper (process (transition)))
;;* lme

;;* lmx 6 system/sepolicy/private/incident_helper.te

(allow incident_helper incident_helper_exec (file (read getattr map execute open entrypoint)))
;;* lme

;;* lmx 6 system/sepolicy/private/incident_helper.te

(allow incident_helper incidentd (process (sigchld)))
;;* lme

(dontaudit incidentd incident_helper (process (noatsecure)))
;;* lmx 6 system/sepolicy/private/incident_helper.te

(allow incidentd incident_helper (process (siginh rlimitinh)))
;;* lme

(typetransition incidentd incident_helper_exec process incident_helper)
;;* lmx 9 system/sepolicy/private/incident_helper.te

(allow incident_helper dumpstate (fd (use)))
(allow incident_helper incident (fd (use)))
(allow incident_helper incidentd (fd (use)))
(allow incident_helper shell (fd (use)))
;;* lme

;;* lmx 10 system/sepolicy/private/incident_helper.te

(allow incident_helper dumpstate (fifo_file (read write getattr)))
(allow incident_helper incident (fifo_file (read write getattr)))
(allow incident_helper incidentd (fifo_file (read write getattr)))
(allow incident_helper shell (fifo_file (read write getattr)))
;;* lme

;;* lmx 11 system/sepolicy/private/incident_helper.te

(allow incident_helper incidentd (unix_stream_socket (read write)))
;;* lme

;;* lmx 23 system/sepolicy/private/incident_helper.te

(neverallow base_typeattr_817 incident_helper_exec (file (execute execute_no_trans)))
;;* lme

;;* lmx 4 system/sepolicy/private/incidentd.te

(allow init incidentd_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 4 system/sepolicy/private/incidentd.te

(allow init incidentd (process (transition)))
;;* lme

;;* lmx 4 system/sepolicy/private/incidentd.te

(allow incidentd incidentd_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init incidentd (process (noatsecure)))
;;* lmx 4 system/sepolicy/private/incidentd.te

(allow init incidentd (process (siginh rlimitinh)))
;;* lme

(typetransition init incidentd_exec process incidentd)
;;* lmx 6 system/sepolicy/private/incidentd.te

(allow incidentd servicemanager (binder (call transfer)))
;;* lme

;;* lmx 6 system/sepolicy/private/incidentd.te

(allow servicemanager incidentd (binder (call transfer)))
;;* lme

;;* lmx 7 system/sepolicy/private/incidentd.te

(allow incidentd sysfs_wake_lock (file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 7 system/sepolicy/private/incidentd.te

(allow incidentd self (capability2 (block_suspend)))
(allow incidentd self (cap2_userns (block_suspend)))
;;* lme

;;* lmx 7 system/sepolicy/private/incidentd.te

(allow incidentd system_suspend_server (binder (call transfer)))
;;* lme

;;* lmx 7 system/sepolicy/private/incidentd.te

(allow system_suspend_server incidentd (binder (transfer)))
;;* lme

;;* lmx 7 system/sepolicy/private/incidentd.te

(allow incidentd system_suspend_server (fd (use)))
;;* lme

;;* lmx 7 system/sepolicy/private/incidentd.te

(allow incidentd system_suspend_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 7 system/sepolicy/private/incidentd.te

(allow incidentd hwservicemanager (binder (call transfer)))
;;* lme

;;* lmx 7 system/sepolicy/private/incidentd.te

(allow hwservicemanager incidentd (binder (call transfer)))
;;* lme

;;* lmx 7 system/sepolicy/private/incidentd.te

(allow incidentd hwservicemanager_prop (file (read getattr map open)))
;;* lme

;;* lmx 7 system/sepolicy/private/incidentd.te

(allow incidentd hidl_manager_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 7 system/sepolicy/private/incidentd.te

(allow incidentd hal_system_suspend_service (service_manager (find)))
;;* lme

;;* lmx 7 system/sepolicy/private/incidentd.te

(allow incidentd servicemanager (binder (call transfer)))
;;* lme

;;* lmx 7 system/sepolicy/private/incidentd.te

(allow servicemanager incidentd (binder (call transfer)))
;;* lme

;;* lmx 10 system/sepolicy/private/incidentd.te

(allow incidentd domain (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 10 system/sepolicy/private/incidentd.te

(allow incidentd domain (file (ioctl read getattr lock map open watch watch_reads)))
(allow incidentd domain (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 13 system/sepolicy/private/incidentd.te

(allow incidentd incident_helper (process (sigkill)))
;;* lme

;;* lmx 19 system/sepolicy/private/incidentd.te

(allow incidentd system_file (file (execute_no_trans)))
;;* lme

;;* lmx 20 system/sepolicy/private/incidentd.te

(allow incidentd toolbox_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lme

;;* lmx 23 system/sepolicy/private/incidentd.te

(allow incidentd proc_version (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 26 system/sepolicy/private/incidentd.te

(allow incidentd statsdw_socket (sock_file (write)))
;;* lme

;;* lmx 26 system/sepolicy/private/incidentd.te

(allow incidentd statsd (unix_dgram_socket (sendto)))
;;* lme

;;* lmx 29 system/sepolicy/private/incidentd.te

(allow incidentd incidentd_userfaultfd (anon_inode (ioctl read create)))
;;* lme

(dontaudit su incidentd_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lmx 29 system/sepolicy/private/incidentd.te

(neverallow base_typeattr_818 incidentd_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 32 system/sepolicy/private/incidentd.te

(allow incidentd proc_pagetypeinfo (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 35 system/sepolicy/private/incidentd.te

(allow incidentd debugfs_wakeup_sources (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 38 system/sepolicy/private/incidentd.te

(allow incidentd proc_meminfo (file (read open)))
;;* lme

;;* lmx 41 system/sepolicy/private/incidentd.te

(allow incidentd sysfs_devices_system_cpu (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 44 system/sepolicy/private/incidentd.te

(allow incidentd domain (process (getattr)))
;;* lme

;;* lmx 47 system/sepolicy/private/incidentd.te

(allow incidentd sysfs_batteryinfo (dir (search)))
;;* lme

;;* lmx 48 system/sepolicy/private/incidentd.te

(allow incidentd sysfs_batteryinfo (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 51 system/sepolicy/private/incidentd.te

(allow incidentd pstorefs (dir (search)))
;;* lme

;;* lmx 52 system/sepolicy/private/incidentd.te

(allow incidentd pstorefs (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 55 system/sepolicy/private/incidentd.te

(allow incidentd stats_service (service_manager (find)))
;;* lme

;;* lmx 56 system/sepolicy/private/incidentd.te

(allow incidentd statsd (binder (call transfer)))
;;* lme

;;* lmx 56 system/sepolicy/private/incidentd.te

(allow statsd incidentd (binder (transfer)))
;;* lme

;;* lmx 56 system/sepolicy/private/incidentd.te

(allow incidentd statsd (fd (use)))
;;* lme

;;* lmx 59 system/sepolicy/private/incidentd.te

(allow incidentd perfetto_traces_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 60 system/sepolicy/private/incidentd.te

(allow incidentd perfetto_traces_data_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 63 system/sepolicy/private/incidentd.te

(allow incidentd nfc_service (service_manager (find)))
;;* lme

;;* lmx 66 system/sepolicy/private/incidentd.te

(allow incidentd incident_data_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
;;* lme

;;* lmx 67 system/sepolicy/private/incidentd.te

(allow incidentd incident_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 70 system/sepolicy/private/incidentd.te

(allow incidentd servicemanager (binder (call transfer)))
;;* lme

;;* lmx 70 system/sepolicy/private/incidentd.te

(allow servicemanager incidentd (binder (call transfer)))
;;* lme

;;* lmx 71 system/sepolicy/private/incidentd.te

(allow incidentd hwservicemanager (binder (call transfer)))
;;* lme

;;* lmx 71 system/sepolicy/private/incidentd.te

(allow hwservicemanager incidentd (binder (call transfer)))
;;* lme

;;* lmx 72 system/sepolicy/private/incidentd.te

(allow incidentd hwservicemanager (hwservice_manager (list)))
;;* lme

;;* lmx 73 system/sepolicy/private/incidentd.te

(allow incidentd hwservicemanager_prop (file (read getattr map open)))
;;* lme

;;* lmx 74 system/sepolicy/private/incidentd.te

(allow incidentd hidl_manager_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 82 system/sepolicy/private/incidentd.te

(allow incidentd proc_cmdline (file (ioctl read getattr lock map open watch watch_reads)))
(allow incidentd proc_pid_max (file (ioctl read getattr lock map open watch watch_reads)))
(allow incidentd proc_pipe_conf (file (ioctl read getattr lock map open watch watch_reads)))
(allow incidentd proc_stat (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 85 system/sepolicy/private/incidentd.te

(allow incidentd appdomain (process (signal)))
(allow incidentd ephemeral_app (process (signal)))
(allow incidentd system_server (process (signal)))
;;* lme

;;* lmx 115 system/sepolicy/private/incidentd.te

(allow incidentd hal_audio_server (process (signal)))
(allow incidentd hal_bluetooth_server (process (signal)))
(allow incidentd hal_camera_server (process (signal)))
(allow incidentd hal_codec2_server (process (signal)))
(allow incidentd hal_face_server (process (signal)))
(allow incidentd hal_graphics_allocator_server (process (signal)))
(allow incidentd hal_graphics_composer_server (process (signal)))
(allow incidentd hal_health_server (process (signal)))
(allow incidentd hal_omx_server (process (signal)))
(allow incidentd hal_sensors_server (process (signal)))
(allow incidentd hal_vr_server (process (signal)))
(allow incidentd audioserver (process (signal)))
(allow incidentd cameraserver (process (signal)))
(allow incidentd drmserver (process (signal)))
(allow incidentd inputflinger (process (signal)))
(allow incidentd mediadrmserver (process (signal)))
(allow incidentd mediaextractor (process (signal)))
(allow incidentd mediametrics (process (signal)))
(allow incidentd mediaserver (process (signal)))
(allow incidentd sdcardd (process (signal)))
(allow incidentd statsd (process (signal)))
(allow incidentd surfaceflinger (process (signal)))
;;* lme

;;* lmx 118 system/sepolicy/private/incidentd.te

(allow incidentd system_server (binder (call transfer)))
;;* lme

;;* lmx 118 system/sepolicy/private/incidentd.te

(allow system_server incidentd (binder (transfer)))
;;* lme

;;* lmx 118 system/sepolicy/private/incidentd.te

(allow incidentd system_server (fd (use)))
;;* lme

;;* lmx 119 system/sepolicy/private/incidentd.te

(allow incidentd appdomain (binder (call transfer)))
;;* lme

;;* lmx 119 system/sepolicy/private/incidentd.te

(allow appdomain incidentd (binder (transfer)))
;;* lme

;;* lmx 119 system/sepolicy/private/incidentd.te

(allow incidentd appdomain (fd (use)))
;;* lme

;;* lmx 122 system/sepolicy/private/incidentd.te

(allow incidentd self (capability (sys_ptrace)))
(allow incidentd self (cap_userns (sys_ptrace)))
;;* lme

;;* lmx 125 system/sepolicy/private/incidentd.te

(neverallow incidentd base_typeattr_248 (process (ptrace)))
;;* lme

;;* lmx 130 system/sepolicy/private/incidentd.te

(allow incidentd self (capability (kill)))
(allow incidentd self (cap_userns (kill)))
;;* lme

;;* lmx 133 system/sepolicy/private/incidentd.te

(allow incidentd tombstoned_intercept_socket (sock_file (write)))
;;* lme

;;* lmx 133 system/sepolicy/private/incidentd.te

(allow incidentd tombstoned (unix_stream_socket (connectto)))
;;* lme

;;* lmx 136 system/sepolicy/private/incidentd.te

(allow incidentd shell_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lme

;;* lmx 140 system/sepolicy/private/incidentd.te

(allow incidentd zygote_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lme

;;* lmx 142 system/sepolicy/private/incidentd.te

(allow incidentd device_config_runtime_native_prop (file (read getattr map open)))
;;* lme

;;* lmx 143 system/sepolicy/private/incidentd.te

(allow incidentd device_config_runtime_native_boot_prop (file (read getattr map open)))
;;* lme

;;* lmx 145 system/sepolicy/private/incidentd.te

(allow incidentd odsign_prop (file (read getattr map open)))
;;* lme

;;* lmx 147 system/sepolicy/private/incidentd.te

(allow incidentd system_file (file (lock)))
;;* lme

(dontaudit incidentd dalvikcache_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
(dontaudit incidentd apex_module_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
(dontaudit incidentd apex_art_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
(dontaudit incidentd tmpfs (file (ioctl read write getattr lock append map execute open watch watch_reads execute_no_trans)))
(dontaudit incidentd domain (memfd_file (ioctl read write getattr lock append map execute open watch watch_reads execute_no_trans)))
;;* lmx 156 system/sepolicy/private/incidentd.te

(allow incidentd apex_info_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 159 system/sepolicy/private/incidentd.te

(allow incidentd logcat_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lme

;;* lmx 159 system/sepolicy/private/incidentd.te

(allow incidentd logdr_socket (sock_file (write)))
;;* lme

;;* lmx 159 system/sepolicy/private/incidentd.te

(allow incidentd logd (unix_stream_socket (connectto)))
;;* lme

;;* lmx 163 system/sepolicy/private/incidentd.te

(allow incidentd misc_logd_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 163 system/sepolicy/private/incidentd.te

(allow incidentd misc_logd_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow incidentd misc_logd_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 172 system/sepolicy/private/incidentd.te

(allow incidentd base_typeattr_819 (service_manager (find)))
;;* lme

;;* lmx 175 system/sepolicy/private/incidentd.te

(allow incidentd incident_service (service_manager (add find)))
;;* lme

;;* lmx 175 system/sepolicy/private/incidentd.te

(neverallow base_typeattr_818 incident_service (service_manager (add)))
;;* lme

;;* lmx 175 system/sepolicy/private/incidentd.te

(allow incidentd su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 178 system/sepolicy/private/incidentd.te

(allow incidentd dumpstate (fd (use)))
(allow incidentd incident (fd (use)))
;;* lme

;;* lmx 179 system/sepolicy/private/incidentd.te

(allow incidentd dumpstate (fifo_file (write)))
(allow incidentd incident (fifo_file (write)))
;;* lme

;;* lmx 182 system/sepolicy/private/incidentd.te

(allow incidentd incident (binder (call transfer)))
;;* lme

;;* lmx 182 system/sepolicy/private/incidentd.te

(allow incident incidentd (binder (transfer)))
;;* lme

;;* lmx 182 system/sepolicy/private/incidentd.te

(allow incidentd incident (fd (use)))
;;* lme

;;* lmx 186 system/sepolicy/private/incidentd.te

(allow incidentd serialno_prop (file (read getattr map open)))
;;* lme

;;* lmx 192 system/sepolicy/private/incidentd.te

(allow incidentd bootloader_boot_reason_prop (file (read getattr map open)))
;;* lme

;;* lmx 192 system/sepolicy/private/incidentd.te

(allow incidentd system_boot_reason_prop (file (read getattr map open)))
;;* lme

;;* lmx 192 system/sepolicy/private/incidentd.te

(allow incidentd last_boot_reason_prop (file (read getattr map open)))
;;* lme

;;* lmx 199 system/sepolicy/private/incidentd.te

(allow incidentd build_attestation_prop (file (read getattr map open)))
;;* lme

;;* lmx 216 system/sepolicy/private/incidentd.te

(neverallow base_typeattr_820 incident_data_file (file (write create getattr setattr lock append map unlink rename execute open execute_no_trans)))
;;* lme

;;* lmx 218 system/sepolicy/private/incidentd.te

(neverallow base_typeattr_821 incident_data_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 220 system/sepolicy/private/incidentd.te

(neverallow base_typeattr_820 incident_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

(typetransition init tmpfs file init_tmpfs)
;;* lmx 3 system/sepolicy/private/init.te

(allow init init_tmpfs (file (read write getattr map)))
;;* lme

;;* lmx 6 system/sepolicy/private/init.te

(allow init rootfs (file (read getattr map execute open)))
;;* lme

;;* lmx 6 system/sepolicy/private/init.te

(allow init slideshow (process (transition)))
;;* lme

;;* lmx 6 system/sepolicy/private/init.te

(allow slideshow rootfs (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init slideshow (process (noatsecure)))
;;* lmx 6 system/sepolicy/private/init.te

(allow init slideshow (process (siginh rlimitinh)))
;;* lme

;;* lmx 7 system/sepolicy/private/init.te

(allow init charger_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 7 system/sepolicy/private/init.te

(allow init charger (process (transition)))
;;* lme

;;* lmx 7 system/sepolicy/private/init.te

(allow charger charger_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init charger (process (noatsecure)))
;;* lmx 7 system/sepolicy/private/init.te

(allow init charger (process (siginh rlimitinh)))
;;* lme

(typetransition init charger_exec process charger)
;;* lmx 8 system/sepolicy/private/init.te

(allow init e2fs_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 8 system/sepolicy/private/init.te

(allow init e2fs (process (transition)))
;;* lme

;;* lmx 8 system/sepolicy/private/init.te

(allow e2fs e2fs_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init e2fs (process (noatsecure)))
;;* lmx 8 system/sepolicy/private/init.te

(allow init e2fs (process (siginh rlimitinh)))
;;* lme

(typetransition init e2fs_exec process e2fs)
;;* lmx 9 system/sepolicy/private/init.te

(allow init bpfloader_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 9 system/sepolicy/private/init.te

(allow init bpfloader (process (transition)))
;;* lme

;;* lmx 9 system/sepolicy/private/init.te

(allow bpfloader bpfloader_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init bpfloader (process (noatsecure)))
;;* lmx 9 system/sepolicy/private/init.te

(allow init bpfloader (process (siginh rlimitinh)))
;;* lme

(typetransition init bpfloader_exec process bpfloader)
;;* lmx 24 system/sepolicy/private/init.te

(allow init shell_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 24 system/sepolicy/private/init.te

(allow init shell (process (transition)))
;;* lme

;;* lmx 24 system/sepolicy/private/init.te

(allow shell shell_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init shell (process (noatsecure)))
;;* lmx 24 system/sepolicy/private/init.te

(allow init shell (process (siginh rlimitinh)))
;;* lme

;;* lmx 25 system/sepolicy/private/init.te

(allow init init_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 25 system/sepolicy/private/init.te

(allow init ueventd (process (transition)))
;;* lme

;;* lmx 25 system/sepolicy/private/init.te

(allow ueventd init_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init ueventd (process (noatsecure)))
;;* lmx 25 system/sepolicy/private/init.te

(allow init ueventd (process (siginh rlimitinh)))
;;* lme

;;* lmx 26 system/sepolicy/private/init.te

(allow init init_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 26 system/sepolicy/private/init.te

(allow init vendor_init (process (transition)))
;;* lme

;;* lmx 26 system/sepolicy/private/init.te

(allow vendor_init init_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init vendor_init (process (noatsecure)))
;;* lmx 26 system/sepolicy/private/init.te

(allow init vendor_init (process (siginh rlimitinh)))
;;* lme

;;* lmx 27 system/sepolicy/private/init.te

(allow init rootfs (file (read getattr map execute open)))
(allow init toolbox_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 27 system/sepolicy/private/init.te

(allow init modprobe (process (transition)))
;;* lme

;;* lmx 27 system/sepolicy/private/init.te

(allow modprobe rootfs (file (read getattr map execute open entrypoint)))
(allow modprobe toolbox_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init modprobe (process (noatsecure)))
;;* lmx 27 system/sepolicy/private/init.te

(allow init modprobe (process (siginh rlimitinh)))
;;* lme

;;* lmx 28 system/sepolicy/private/init.te

(allow init logcat_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 28 system/sepolicy/private/init.te

(allow init logpersist (process (transition)))
;;* lme

;;* lmx 28 system/sepolicy/private/init.te

(allow logpersist logcat_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init logpersist (process (noatsecure)))
;;* lmx 28 system/sepolicy/private/init.te

(allow init logpersist (process (siginh rlimitinh)))
;;* lme

(typetransition init logcat_exec process logpersist)
;;* lmx 28 system/sepolicy/private/init.te

(allow init su (process (transition)))
;;* lme

(dontaudit init su (process (noatsecure)))
;;* lmx 28 system/sepolicy/private/init.te

(allow init su (process (siginh rlimitinh)))
;;* lme

;;* lmx 42 system/sepolicy/private/init.te

(allow init sysfs_dm (file (read)))
;;* lme

;;* lmx 45 system/sepolicy/private/init.te

(allow init sysfs_loop (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 46 system/sepolicy/private/init.te

(allow init sysfs_loop (file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 49 system/sepolicy/private/init.te

(allow init sysfs_type (file (read getattr)))
;;* lme

;;* lmx 51 system/sepolicy/private/init.te

(allow init dev_type (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 52 system/sepolicy/private/init.te

(allow init dev_type (blk_file (getattr)))
;;* lme

;;* lmx 55 system/sepolicy/private/init.te

(allow init proc_drop_caches (file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 58 system/sepolicy/private/init.te

(allow init property_socket (sock_file (write)))
;;* lme

;;* lmx 58 system/sepolicy/private/init.te

(allow init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 58 system/sepolicy/private/init.te

(allow init powerctl_prop (property_service (set)))
;;* lme

;;* lmx 58 system/sepolicy/private/init.te

(allow init powerctl_prop (file (read getattr map open)))
;;* lme

;;* lmx 60 system/sepolicy/private/init.te

(allow init property_socket (sock_file (write)))
;;* lme

;;* lmx 60 system/sepolicy/private/init.te

(allow init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 60 system/sepolicy/private/init.te

(allow init userspace_reboot_exported_prop (property_service (set)))
;;* lme

;;* lmx 60 system/sepolicy/private/init.te

(allow init userspace_reboot_exported_prop (file (read getattr map open)))
;;* lme

;;* lmx 63 system/sepolicy/private/init.te

(allow init property_socket (sock_file (write)))
;;* lme

;;* lmx 63 system/sepolicy/private/init.te

(allow init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 63 system/sepolicy/private/init.te

(allow init media_variant_prop (property_service (set)))
;;* lme

;;* lmx 63 system/sepolicy/private/init.te

(allow init media_variant_prop (file (read getattr map open)))
;;* lme

;;* lmx 69 system/sepolicy/private/init.te

(allow init proc_kallsyms (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 73 system/sepolicy/private/init.te

(allow init snapuserd_socket (sock_file (write)))
;;* lme

;;* lmx 74 system/sepolicy/private/init.te

(allow init snapuserd (unix_stream_socket (connectto)))
;;* lme

;;* lmx 76 system/sepolicy/private/init.te

(allow init ota_metadata_file (dir (lock)))
;;* lme

;;* lmx 80 system/sepolicy/private/init.te

(allow init vd_device (blk_file (relabelto)))
;;* lme

;;* lmx 82 system/sepolicy/private/init.te

(allow init property_socket (sock_file (write)))
;;* lme

;;* lmx 82 system/sepolicy/private/init.te

(allow init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 82 system/sepolicy/private/init.te

(allow init init_perf_lsm_hooks_prop (property_service (set)))
;;* lme

;;* lmx 82 system/sepolicy/private/init.te

(allow init init_perf_lsm_hooks_prop (file (read getattr map open)))
;;* lme

;;* lmx 83 system/sepolicy/private/init.te

(allow init property_socket (sock_file (write)))
;;* lme

;;* lmx 83 system/sepolicy/private/init.te

(allow init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 83 system/sepolicy/private/init.te

(allow init vts_status_prop (property_service (set)))
;;* lme

;;* lmx 83 system/sepolicy/private/init.te

(allow init vts_status_prop (file (read getattr map open)))
;;* lme

;;* lmx 86 system/sepolicy/private/init.te

(allow init property_socket (sock_file (write)))
;;* lme

;;* lmx 86 system/sepolicy/private/init.te

(allow init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 86 system/sepolicy/private/init.te

(allow init bionic_linker_16kb_app_compat_prop (property_service (set)))
;;* lme

;;* lmx 86 system/sepolicy/private/init.te

(allow init bionic_linker_16kb_app_compat_prop (file (read getattr map open)))
;;* lme

;;* lmx 87 system/sepolicy/private/init.te

(allow init property_socket (sock_file (write)))
;;* lme

;;* lmx 87 system/sepolicy/private/init.te

(allow init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 87 system/sepolicy/private/init.te

(allow init pm_16kb_app_compat_prop (property_service (set)))
;;* lme

;;* lmx 87 system/sepolicy/private/init.te

(allow init pm_16kb_app_compat_prop (file (read getattr map open)))
;;* lme

;;* lmx 91 system/sepolicy/private/init.te

(allow init property_socket (sock_file (write)))
;;* lme

;;* lmx 91 system/sepolicy/private/init.te

(allow init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 91 system/sepolicy/private/init.te

(allow init ctl_prefetch_prop (property_service (set)))
;;* lme

;;* lmx 91 system/sepolicy/private/init.te

(allow init ctl_prefetch_prop (file (read getattr map open)))
;;* lme

;;* lmx 94 system/sepolicy/private/init.te

(allow init debugfs_bootreceiver_tracing (file (write lock append map open)))
;;* lme

;;* lmx 97 system/sepolicy/private/init.te

(allow init prng_seeder (unix_stream_socket (create bind listen)))
;;* lme

(dontaudit init debugfs_tracing_debug (dir (write add_name)))
;;* lmx 111 system/sepolicy/private/init.te

(allow init base_typeattr_822 (chr_file (setattr)))
;;* lme

;;* lmx 114 system/sepolicy/private/init.te

(allow init tmpfs (chr_file (ioctl read write create getattr setattr lock append map unlink open watch watch_reads)))
;;* lme

;;* lmx 120 system/sepolicy/private/init.te

(allow init tmpfs (chr_file (relabelfrom)))
;;* lme

;;* lmx 121 system/sepolicy/private/init.te

(allow init kmsg_device (chr_file (write getattr relabelto)))
;;* lme

;;* lmx 123 system/sepolicy/private/init.te

(allow init kmsg_debug_device (chr_file (write relabelto open)))
;;* lme

;;* lmx 127 system/sepolicy/private/init.te

(allow init vm_data_file (dir (write create getattr setattr relabelto mounton add_name search)))
;;* lme

;;* lmx 130 system/sepolicy/private/init.te

(allow init debugfs (dir (mounton)))
;;* lme

;;* lmx 135 system/sepolicy/private/init.te

(allow init properties_device (dir (relabelto)))
;;* lme

;;* lmx 136 system/sepolicy/private/init.te

(allow init properties_serial (file (write relabelto)))
;;* lme

;;* lmx 137 system/sepolicy/private/init.te

(allow init property_type (file (read write create getattr setattr relabelto append map unlink rename open)))
;;* lme

;;* lmx 139 system/sepolicy/private/init.te

(allow init properties_device (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 140 system/sepolicy/private/init.te

(allow init property_info (file (relabelto)))
;;* lme

;;* lmx 142 system/sepolicy/private/init.te

(allow init device (file (relabelfrom)))
;;* lme

;;* lmx 143 system/sepolicy/private/init.te

(allow init runtime_event_log_tags_file (file (write create setattr relabelto open)))
;;* lme

;;* lmx 145 system/sepolicy/private/init.te

(allow init device (dir (relabelto)))
(allow init dm_user_device (dir (relabelto)))
(allow init socket_device (dir (relabelto)))
;;* lme

;;* lmx 147 system/sepolicy/private/init.te

(allow init lmkd_socket (sock_file (write)))
;;* lme

;;* lmx 147 system/sepolicy/private/init.te

(allow init lmkd (unix_stream_socket (connectto)))
;;* lme

;;* lmx 150 system/sepolicy/private/init.te

(allow init console_device (chr_file (relabelto)))
(allow init ptmx_device (chr_file (relabelto)))
(allow init null_device (chr_file (relabelto)))
(allow init random_device (chr_file (relabelto)))
;;* lme

;;* lmx 152 system/sepolicy/private/init.te

(allow init tmpfs (chr_file (relabelfrom)))
(allow init tmpfs (blk_file (relabelfrom)))
;;* lme

;;* lmx 153 system/sepolicy/private/init.te

(allow init tmpfs (blk_file (getattr)))
;;* lme

;;* lmx 154 system/sepolicy/private/init.te

(allow init block_device (dir (relabelto)))
(allow init block_device (lnk_file (relabelto)))
(allow init block_device (blk_file (relabelto)))
;;* lme

;;* lmx 155 system/sepolicy/private/init.te

(allow init dm_device (chr_file (relabelto)))
(allow init dm_device (blk_file (relabelto)))
;;* lme

;;* lmx 156 system/sepolicy/private/init.te

(allow init dm_user_device (chr_file (relabelto)))
;;* lme

;;* lmx 158 system/sepolicy/private/init.te

(allow init tmpfs (chr_file (relabelfrom)))
;;* lme

;;* lmx 159 system/sepolicy/private/init.te

(allow init loop_control_device (chr_file (relabelto)))
;;* lme

;;* lmx 161 system/sepolicy/private/init.te

(allow init kernel (fd (use)))
;;* lme

;;* lmx 163 system/sepolicy/private/init.te

(allow init tmpfs (lnk_file (read getattr relabelfrom)))
;;* lme

;;* lmx 170 system/sepolicy/private/init.te

(allow init system_block_device (lnk_file (relabelto)))
(allow init system_block_device (blk_file (relabelto)))
(allow init recovery_block_device (lnk_file (relabelto)))
(allow init recovery_block_device (blk_file (relabelto)))
(allow init userdata_block_device (lnk_file (relabelto)))
(allow init userdata_block_device (blk_file (relabelto)))
(allow init metadata_block_device (lnk_file (relabelto)))
(allow init metadata_block_device (blk_file (relabelto)))
(allow init misc_block_device (lnk_file (relabelto)))
(allow init misc_block_device (blk_file (relabelto)))
;;* lme

;;* lmx 172 system/sepolicy/private/init.te

(allow init dtbo_block_device (lnk_file (relabelto)))
;;* lme

;;* lmx 173 system/sepolicy/private/init.te

(allow init super_block_device (lnk_file (relabelto)))
;;* lme

;;* lmx 176 system/sepolicy/private/init.te

(allow init mnt_sdcard_file (lnk_file (create)))
;;* lme

;;* lmx 179 system/sepolicy/private/init.te

(allow init self (capability (sys_resource)))
(allow init self (cap_userns (sys_resource)))
;;* lme

;;* lmx 182 system/sepolicy/private/init.te

(allow init tmpfs (file (getattr unlink)))
;;* lme

;;* lmx 185 system/sepolicy/private/init.te

(allow init devpts (chr_file (read write open)))
;;* lme

;;* lmx 188 system/sepolicy/private/init.te

(allow init fscklogs (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 191 system/sepolicy/private/init.te

(allow init tmpfs (chr_file (write)))
;;* lme

;;* lmx 194 system/sepolicy/private/init.te

(allow init console_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 197 system/sepolicy/private/init.te

(allow init tty_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 200 system/sepolicy/private/init.te

(allow init self (capability (sys_admin)))
(allow init self (cap_userns (sys_admin)))
;;* lme

;;* lmx 203 system/sepolicy/private/init.te

(allow init self (capability (sys_chroot)))
(allow init self (cap_userns (sys_chroot)))
;;* lme

;;* lmx 206 system/sepolicy/private/init.te

(allow init rootfs (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 222 system/sepolicy/private/init.te

(allow init rootfs (dir (mounton)))
(allow init cgroup (dir (mounton)))
(allow init system_file (dir (mounton)))
(allow init linkerconfig_file (dir (mounton)))
(allow init vendor_file (dir (mounton)))
(allow init system_data_root_file (dir (mounton)))
(allow init system_data_file (dir (mounton)))
(allow init shell_data_file (dir (mounton)))
(allow init mnt_user_file (dir (mounton)))
(allow init storage_file (dir (mounton)))
(allow init postinstall_mnt_dir (dir (mounton)))
(allow init mirror_data_file (dir (mounton)))
(allow init cache_file (dir (mounton)))
(allow init system_dlkm_file (dir (mounton)))
;;* lme

;;* lmx 225 system/sepolicy/private/init.te

(allow init fs_bpf (dir (mounton)))
;;* lme

;;* lmx 228 system/sepolicy/private/init.te

(allow init device (dir (mounton)))
;;* lme

;;* lmx 231 system/sepolicy/private/init.te

(allow init apex_mnt_dir (dir (mounton)))
;;* lme

;;* lmx 234 system/sepolicy/private/init.te

(allow init art_apex_dir (dir (mounton)))
;;* lme

;;* lmx 237 system/sepolicy/private/init.te

(allow init rootfs (lnk_file (create unlink)))
;;* lme

;;* lmx 240 system/sepolicy/private/init.te

(allow init sysfs (dir (mounton)))
;;* lme

;;* lmx 243 system/sepolicy/private/init.te

(allow init tmpfs (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 244 system/sepolicy/private/init.te

(allow init tmpfs (dir (mounton)))
;;* lme

;;* lmx 245 system/sepolicy/private/init.te

(allow init cgroup (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 246 system/sepolicy/private/init.te

(allow init cgroup (file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 247 system/sepolicy/private/init.te

(allow init cgroup_rc_file (file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 248 system/sepolicy/private/init.te

(allow init cgroup_desc_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 249 system/sepolicy/private/init.te

(allow init vendor_cgroup_desc_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 250 system/sepolicy/private/init.te

(allow init cgroup_v2 (dir (ioctl read write create getattr setattr lock rename mounton open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 251 system/sepolicy/private/init.te

(allow init cgroup_v2 (file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 254 system/sepolicy/private/init.te

(allow init configfs (dir (mounton)))
;;* lme

;;* lmx 255 system/sepolicy/private/init.te

(allow init configfs (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 256 system/sepolicy/private/init.te

(allow init configfs (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow init configfs (lnk_file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 259 system/sepolicy/private/init.te

(allow init metadata_file (dir (mounton)))
;;* lme

;;* lmx 262 system/sepolicy/private/init.te

(allow init tmpfs (dir (relabelfrom)))
;;* lme

;;* lmx 265 system/sepolicy/private/init.te

(allow init self (capability (dac_override dac_read_search)))
(allow init self (cap_userns (dac_override dac_read_search)))
;;* lme

;;* lmx 268 system/sepolicy/private/init.te

(allow init self (capability (sys_time)))
(allow init self (cap_userns (sys_time)))
;;* lme

;;* lmx 270 system/sepolicy/private/init.te

(allow init self (capability (sys_rawio mknod)))
(allow init self (cap_userns (sys_rawio mknod)))
;;* lme

;;* lmx 273 system/sepolicy/private/init.te

(allow init dev_type (blk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 274 system/sepolicy/private/init.te

(allowx init dev_type (ioctl blk_file (0x125d)))
;;* lme

;;* lmx 275 system/sepolicy/private/init.te

(allowx init system_data_root_file (ioctl dir (0x587d)))
;;* lme

;;* lmx 285 system/sepolicy/private/init.te

(allow init base_typeattr_823 (filesystem (mount remount unmount getattr relabelfrom quotamod quotaget watch)))
;;* lme

;;* lmx 288 system/sepolicy/private/init.te

(allow init debugfs_type (filesystem (mount unmount)))
;;* lme

;;* lmx 293 system/sepolicy/private/init.te

(allow init debugfs_tracing_debug (filesystem (mount)))
;;* lme

;;* lmx 295 system/sepolicy/private/init.te

(allow init unlabeled (filesystem (mount remount unmount getattr relabelfrom associate quotamod quotaget watch)))
;;* lme

;;* lmx 296 system/sepolicy/private/init.te

(allow init contextmount_type (filesystem (relabelto)))
;;* lme

;;* lmx 299 system/sepolicy/private/init.te

(allow init contextmount_type (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 300 system/sepolicy/private/init.te

(allow init contextmount_type (file (ioctl read getattr lock map open watch watch_reads)))
(allow init contextmount_type (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow init contextmount_type (sock_file (ioctl read getattr lock map open watch watch_reads)))
(allow init contextmount_type (fifo_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 304 system/sepolicy/private/init.te

(allow init rootfs (file (relabelfrom)))
(allow init rootfs (dir (relabelfrom)))
;;* lme

;;* lmx 311 system/sepolicy/private/init.te

(allow init self (capability (chown fowner fsetid)))
(allow init self (cap_userns (chown fowner fsetid)))
;;* lme

;;* lmx 331 system/sepolicy/private/init.te

(allow init base_typeattr_824 (dir (ioctl read create getattr setattr open search)))
;;* lme

;;* lmx 358 system/sepolicy/private/init.te

(allow init base_typeattr_825 (dir (write relabelfrom add_name remove_name rmdir)))
;;* lme

;;* lmx 386 system/sepolicy/private/init.te

(allow init base_typeattr_826 (file (read write create getattr setattr relabelfrom map unlink open)))
;;* lme

;;* lmx 388 system/sepolicy/private/init.te

(allow init tracefs_type (file (ioctl read write create getattr setattr lock relabelfrom append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 392 system/sepolicy/private/init.te

(allow init apex_info_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 417 system/sepolicy/private/init.te

(allow init base_typeattr_827 (sock_file (read create getattr setattr relabelfrom unlink open)))
(allow init base_typeattr_827 (fifo_file (read create getattr setattr relabelfrom unlink open)))
;;* lme

;;* lmx 443 system/sepolicy/private/init.te

(allow init base_typeattr_828 (lnk_file (create getattr setattr relabelfrom unlink)))
;;* lme

;;* lmx 445 system/sepolicy/private/init.te

(allow init cache_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 462 system/sepolicy/private/init.te

(allow init base_typeattr_829 (file (relabelto)))
(allow init base_typeattr_829 (dir (relabelto)))
(allow init base_typeattr_829 (lnk_file (relabelto)))
(allow init base_typeattr_829 (chr_file (relabelto)))
(allow init base_typeattr_829 (blk_file (relabelto)))
(allow init base_typeattr_829 (sock_file (relabelto)))
(allow init base_typeattr_829 (fifo_file (relabelto)))
;;* lme

;;* lmx 464 system/sepolicy/private/init.te

(allow init sysfs (file (getattr relabelfrom)))
(allow init sysfs (dir (getattr relabelfrom)))
(allow init sysfs (lnk_file (getattr relabelfrom)))
(allow init debugfs_tracing (file (getattr relabelfrom)))
(allow init debugfs_tracing (dir (getattr relabelfrom)))
(allow init debugfs_tracing (lnk_file (getattr relabelfrom)))
(allow init debugfs_tracing_debug (file (getattr relabelfrom)))
(allow init debugfs_tracing_debug (dir (getattr relabelfrom)))
(allow init debugfs_tracing_debug (lnk_file (getattr relabelfrom)))
;;* lme

;;* lmx 465 system/sepolicy/private/init.te

(allow init sysfs_type (file (getattr relabelto)))
(allow init sysfs_type (dir (getattr relabelto)))
(allow init sysfs_type (lnk_file (getattr relabelto)))
(allow init tracefs_type (file (getattr relabelto)))
(allow init tracefs_type (dir (getattr relabelto)))
(allow init tracefs_type (lnk_file (getattr relabelto)))
;;* lme

;;* lmx 466 system/sepolicy/private/init.te

(allow init dev_type (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 467 system/sepolicy/private/init.te

(allow init dev_type (lnk_file (create)))
;;* lme

;;* lmx 470 system/sepolicy/private/init.te

(allow init debugfs_tracing (file (write lock append map open)))
;;* lme

;;* lmx 473 system/sepolicy/private/init.te

(allow init debugfs_tracing_instances (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 474 system/sepolicy/private/init.te

(allow init debugfs_tracing_instances (file (write lock append map open)))
;;* lme

;;* lmx 475 system/sepolicy/private/init.te

(allow init debugfs_wifi_tracing (file (write lock append map open)))
;;* lme

;;* lmx 476 system/sepolicy/private/init.te

(allow init debugfs_wifi_tracing (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 490 system/sepolicy/private/init.te

(allow init base_typeattr_830 (file (read setattr open)))
;;* lme

;;* lmx 498 system/sepolicy/private/init.te

(allow init base_typeattr_831 (dir (read setattr open search)))
;;* lme

;;* lmx 515 system/sepolicy/private/init.te

(allow init binder_device (chr_file (read open)))
(allow init hwbinder_device (chr_file (read open)))
(allow init dm_device (chr_file (read open)))
(allow init pmsg_device (chr_file (read open)))
(allow init console_device (chr_file (read open)))
(allow init input_device (chr_file (read open)))
(allow init ptmx_device (chr_file (read open)))
(allow init kmsg_device (chr_file (read open)))
(allow init null_device (chr_file (read open)))
(allow init random_device (chr_file (read open)))
(allow init owntty_device (chr_file (read open)))
(allow init tty_device (chr_file (read open)))
(allow init zero_device (chr_file (read open)))
(allow init devpts (chr_file (read open)))
;;* lme

;;* lmx 518 system/sepolicy/private/init.te

(allow init unlabeled (dir (ioctl read write create getattr setattr lock relabelfrom rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 519 system/sepolicy/private/init.te

(allow init unlabeled (file (ioctl read write create getattr setattr lock relabelfrom append map unlink rename open watch watch_reads)))
(allow init unlabeled (lnk_file (ioctl read write create getattr setattr lock relabelfrom append map unlink rename open watch watch_reads)))
(allow init unlabeled (sock_file (ioctl read write create getattr setattr lock relabelfrom append map unlink rename open watch watch_reads)))
(allow init unlabeled (fifo_file (ioctl read write create getattr setattr lock relabelfrom append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 523 system/sepolicy/private/init.te

(allow init kernel (system (syslog_mod)))
;;* lme

;;* lmx 524 system/sepolicy/private/init.te

(allow init self (capability2 (syslog)))
(allow init self (cap2_userns (syslog)))
;;* lme

;;* lmx 527 system/sepolicy/private/init.te

(allow init proc_net_type (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 527 system/sepolicy/private/init.te

(allow init proc_net_type (file (ioctl read getattr lock map open watch watch_reads)))
(allow init proc_net_type (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 528 system/sepolicy/private/init.te

(allow init proc_filesystems (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 530 system/sepolicy/private/init.te

(allow init overlayfs_file (dir (write relabelfrom mounton)))
;;* lme

;;* lmx 530 system/sepolicy/private/init.te

(allow init overlayfs_file (file (append rename)))
;;* lme

;;* lmx 530 system/sepolicy/private/init.te

(allow init overlayfs_file (chr_file (unlink)))
;;* lme

;;* lmx 530 system/sepolicy/private/init.te

(allow init system_block_device (blk_file (write)))
;;* lme

;;* lmx 549 system/sepolicy/private/init.te

(allow init proc (file (ioctl read getattr lock map open watch watch_reads)))
(allow init proc_bootconfig (file (ioctl read getattr lock map open watch watch_reads)))
(allow init proc_cmdline (file (ioctl read getattr lock map open watch watch_reads)))
(allow init proc_diskstats (file (ioctl read getattr lock map open watch watch_reads)))
(allow init proc_kmsg (file (ioctl read getattr lock map open watch watch_reads)))
(allow init proc_meminfo (file (ioctl read getattr lock map open watch watch_reads)))
(allow init proc_stat (file (ioctl read getattr lock map open watch watch_reads)))
(allow init proc_uptime (file (ioctl read getattr lock map open watch watch_reads)))
(allow init proc_version (file (ioctl read getattr lock map open watch watch_reads)))
(allow init proc_allocinfo (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 568 system/sepolicy/private/init.te

(allow init proc_net_type (file (write lock append map open)))
(allow init proc_overcommit_memory (file (write lock append map open)))
(allow init proc_min_free_order_shift (file (write lock append map open)))
(allow init proc_watermark_boost_factor (file (write lock append map open)))
(allow init proc_abi (file (write lock append map open)))
(allow init proc_cpu_alignment (file (write lock append map open)))
(allow init proc_dirty (file (write lock append map open)))
(allow init proc_extra_free_kbytes (file (write lock append map open)))
(allow init proc_hostname (file (write lock append map open)))
(allow init proc_hung_task (file (write lock append map open)))
(allow init proc_max_map_count (file (write lock append map open)))
(allow init proc_page_cluster (file (write lock append map open)))
(allow init proc_panic (file (write lock append map open)))
(allow init proc_perf (file (write lock append map open)))
(allow init proc_sched (file (write lock append map open)))
(allow init proc_sysrq (file (write lock append map open)))
;;* lme

;;* lmx 572 system/sepolicy/private/init.te

(allow init proc_security (file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 587 system/sepolicy/private/init.te

(allow init proc_qtaguid_ctrl (file (setattr)))
(allow init proc_qtaguid_stat (file (setattr)))
(allow init proc_bootconfig (file (setattr)))
(allow init proc_cmdline (file (setattr)))
(allow init proc_kmsg (file (setattr)))
(allow init proc_net (file (setattr)))
(allow init proc_pagetypeinfo (file (setattr)))
(allow init proc_slabinfo (file (setattr)))
(allow init proc_sysrq (file (setattr)))
(allow init proc_vmallocinfo (file (setattr)))
(allow init proc_allocinfo (file (setattr)))
;;* lme

;;* lmx 600 system/sepolicy/private/init.te

(allow init sysfs_android_usb (file (write lock append map open)))
(allow init sysfs_dm (file (write lock append map open)))
(allow init sysfs_dm_verity (file (write lock append map open)))
(allow init sysfs_leds (file (write lock append map open)))
(allow init sysfs_power (file (write lock append map open)))
(allow init sysfs_suspend_params (file (write lock append map open)))
(allow init sysfs_lru_gen_enabled (file (write lock append map open)))
(allow init sysfs_fs_f2fs (file (write lock append map open)))
(allow init sysfs_pgsize_migration (file (write lock append map open)))
;;* lme

;;* lmx 605 system/sepolicy/private/init.te

(allow init sysfs_dt_firmware_android (file (ioctl read getattr lock map open watch watch_reads)))
(allow init sysfs_fs_ext4_features (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 609 system/sepolicy/private/init.te

(allow init sysfs_zram (file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 612 system/sepolicy/private/init.te

(allow init loop_control_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 613 system/sepolicy/private/init.te

(allow init loop_device (blk_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 622 system/sepolicy/private/init.te

(allowx init loop_device (ioctl blk_file ((range 0x4c00 0x4c01) (range 0x4c03 0x4c04) (range 0x4c08 0x4c09) 0x4c82)))
;;* lme

;;* lmx 625 system/sepolicy/private/init.te

(allow init sysfs_vibrator (file (write lock append map open)))
;;* lme

;;* lmx 640 system/sepolicy/private/init.te

(allow init sysfs_android_usb (file (setattr)))
(allow init sysfs_ipv4 (file (setattr)))
(allow init sysfs_leds (file (setattr)))
(allow init sysfs_wake_lock (file (setattr)))
(allow init sysfs_power (file (setattr)))
(allow init sysfs_suspend_params (file (setattr)))
(allow init sysfs_devices_system_cpu (file (setattr)))
(allow init sysfs_lowmemorykiller (file (setattr)))
(allow init sysfs_vibrator (file (setattr)))
(allow init sysfs_zram (file (setattr)))
(allow init sysfs_firmware_acpi_tables (file (setattr)))
;;* lme

;;* lmx 643 system/sepolicy/private/init.te

(allow init usermodehelper (file (ioctl read write getattr lock append map open watch watch_reads)))
(allow init sysfs_usermodehelper (file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 645 system/sepolicy/private/init.te

(allow init self (capability (net_admin)))
(allow init self (cap_userns (net_admin)))
;;* lme

;;* lmx 648 system/sepolicy/private/init.te

(allow init self (capability (sys_boot)))
(allow init self (cap_userns (sys_boot)))
;;* lme

;;* lmx 652 system/sepolicy/private/init.te

(allow init misc_logd_file (dir (read write create getattr setattr open add_name search)))
;;* lme

;;* lmx 653 system/sepolicy/private/init.te

(allow init misc_logd_file (file (write create getattr setattr open)))
;;* lme

;;* lmx 656 system/sepolicy/private/init.te

(allow init self (capability (kill)))
(allow init self (cap_userns (kill)))
;;* lme

;;* lmx 657 system/sepolicy/private/init.te

(allow init domain (process (sigkill signal getpgid)))
;;* lme

;;* lmx 661 system/sepolicy/private/init.te

(allow init credstore_data_file (dir (read create getattr setattr open search)))
;;* lme

;;* lmx 662 system/sepolicy/private/init.te

(allow init credstore_data_file (file (getattr)))
;;* lme

;;* lmx 666 system/sepolicy/private/init.te

(allow init keystore_data_file (dir (read create getattr setattr open search)))
;;* lme

;;* lmx 667 system/sepolicy/private/init.te

(allow init keystore_data_file (file (getattr)))
;;* lme

;;* lmx 671 system/sepolicy/private/init.te

(allow init vold_data_file (dir (read create getattr setattr open search)))
;;* lme

;;* lmx 672 system/sepolicy/private/init.te

(allow init vold_data_file (file (getattr)))
;;* lme

;;* lmx 675 system/sepolicy/private/init.te

(allow init shell_data_file (dir (read create getattr setattr open search)))
;;* lme

;;* lmx 676 system/sepolicy/private/init.te

(allow init shell_data_file (file (getattr)))
;;* lme

;;* lmx 679 system/sepolicy/private/init.te

(allow init self (capability (setgid setuid setpcap)))
(allow init self (cap_userns (setgid setuid setpcap)))
;;* lme

;;* lmx 684 system/sepolicy/private/init.te

(allow init domain (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 684 system/sepolicy/private/init.te

(allow init domain (file (ioctl read getattr lock map open watch watch_reads)))
(allow init domain (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 690 system/sepolicy/private/init.te

(allow init self (process (setexec setfscreate setsockcreate)))
;;* lme

;;* lmx 693 system/sepolicy/private/init.te

(allow init file_contexts_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 696 system/sepolicy/private/init.te

(allow init sepolicy_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 699 system/sepolicy/private/init.te

(allow init selinuxfs (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 699 system/sepolicy/private/init.te

(allow init selinuxfs (file (ioctl read getattr lock map open watch watch_reads)))
(allow init selinuxfs (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 699 system/sepolicy/private/init.te

(allow init selinuxfs (file (write lock append map open)))
;;* lme

;;* lmx 699 system/sepolicy/private/init.te

(allow init kernel (security (compute_av)))
;;* lme

;;* lmx 699 system/sepolicy/private/init.te

(allow init self (netlink_selinux_socket (read write create getattr setattr lock relabelfrom relabelto append bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
;;* lme

;;* lmx 702 system/sepolicy/private/init.te

(allow init kernel (security (compute_create)))
;;* lme

;;* lmx 705 system/sepolicy/private/init.te

(allow init domain (unix_stream_socket (create bind setopt)))
;;* lme

;;* lmx 706 system/sepolicy/private/init.te

(allow init domain (unix_dgram_socket (create bind setopt)))
;;* lme

;;* lmx 709 system/sepolicy/private/init.te

(allow init property_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 710 system/sepolicy/private/init.te

(allow init property_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 713 system/sepolicy/private/init.te

(allow init property_type (property_service (set)))
;;* lme

;;* lmx 718 system/sepolicy/private/init.te

(allow init self (netlink_audit_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
;;* lme

;;* lmx 721 system/sepolicy/private/init.te

(allow init self (netlink_audit_socket (nlmsg_relay)))
;;* lme

;;* lmx 723 system/sepolicy/private/init.te

(allow init self (netlink_audit_socket (nlmsg)))
;;* lme

;;* lmx 724 system/sepolicy/private/init.te

(allowx init self (nlmsg netlink_audit_socket (0x453)))
;;* lme

;;* lmx 726 system/sepolicy/private/init.te

(allow init self (capability (audit_write)))
(allow init self (cap_userns (audit_write)))
;;* lme

;;* lmx 729 system/sepolicy/private/init.te

(allow init self (udp_socket (ioctl create)))
;;* lme

;;* lmx 731 system/sepolicy/private/init.te

(allowx init self (ioctl udp_socket (0x8914)))
;;* lme

;;* lmx 732 system/sepolicy/private/init.te

(allow init self (capability (net_raw)))
(allow init self (cap_userns (net_raw)))
;;* lme

;;* lmx 736 system/sepolicy/private/init.te

(allow init kernel (process (getsched setsched)))
;;* lme

;;* lmx 740 system/sepolicy/private/init.te

(allow init swap_block_device (blk_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 743 system/sepolicy/private/init.te

(allow init ram_device (blk_file (setattr)))
(allow init swap_block_device (blk_file (setattr)))
;;* lme

;;* lmx 749 system/sepolicy/private/init.te

(allow init device (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 752 system/sepolicy/private/init.te

(allow init input_device (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 753 system/sepolicy/private/init.te

(allow init input_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 756 system/sepolicy/private/init.te

(allow init dm_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 757 system/sepolicy/private/init.te

(allow init dm_device (blk_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 760 system/sepolicy/private/init.te

(allow init dm_user_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 763 system/sepolicy/private/init.te

(allow init metadata_block_device (blk_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 767 system/sepolicy/private/init.te

(allow init pstorefs (dir (search)))
;;* lme

;;* lmx 768 system/sepolicy/private/init.te

(allow init pstorefs (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 769 system/sepolicy/private/init.te

(allow init kernel (system (syslog_read)))
;;* lme

;;* lmx 772 system/sepolicy/private/init.te

(allow init init (key (write search setattr)))
;;* lme

;;* lmx 775 system/sepolicy/private/init.te

(allow init unencrypted_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 781 system/sepolicy/private/init.te

(allowx init data_file_type (ioctl dir (0x6613 0x6615)))
(allowx init unlabeled (ioctl dir (0x6613 0x6615)))
;;* lme

;;* lmx 784 system/sepolicy/private/init.te

(allow init misc_block_device (blk_file (write lock append map open)))
;;* lme

;;* lmx 786 system/sepolicy/private/init.te

(allow init system_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 786 system/sepolicy/private/init.te

(allow init system_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow init system_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 787 system/sepolicy/private/init.te

(allow init system_dlkm_file_type (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 787 system/sepolicy/private/init.te

(allow init system_dlkm_file_type (file (ioctl read getattr lock map open watch watch_reads)))
(allow init system_dlkm_file_type (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 788 system/sepolicy/private/init.te

(allow init vendor_file_type (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 788 system/sepolicy/private/init.te

(allow init vendor_file_type (file (ioctl read getattr lock map open watch watch_reads)))
(allow init vendor_file_type (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 790 system/sepolicy/private/init.te

(allow init system_data_file (file (read getattr)))
;;* lme

;;* lmx 791 system/sepolicy/private/init.te

(allow init system_data_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 794 system/sepolicy/private/init.te

(allow init vendor_shell_exec (file (execute)))
;;* lme

;;* lmx 797 system/sepolicy/private/init.te

(allow init vold_metadata_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 798 system/sepolicy/private/init.te

(allow init vold_metadata_file (file (getattr)))
;;* lme

;;* lmx 799 system/sepolicy/private/init.te

(allow init metadata_bootstat_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 800 system/sepolicy/private/init.te

(allow init metadata_bootstat_file (file (write lock append map open)))
;;* lme

;;* lmx 801 system/sepolicy/private/init.te

(allow init userspace_reboot_metadata_file (file (write lock append map open)))
;;* lme

;;* lmx 804 system/sepolicy/private/init.te

(allow init proc_pressure_mem (file (ioctl read write getattr setattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 807 system/sepolicy/private/init.te

(allow init system_bootstrap_lib_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 807 system/sepolicy/private/init.te

(allow init system_bootstrap_lib_file (file (read getattr map execute open)))
;;* lme

;;* lmx 810 system/sepolicy/private/init.te

(allow init fuse (dir (getattr search)))
;;* lme

;;* lmx 813 system/sepolicy/private/init.te

(allow init userdata_sysdev (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 816 system/sepolicy/private/init.te

(allow init rootdisk_sysdev (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 819 system/sepolicy/private/init.te

(allow init tradeinmode_metadata_file (file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 827 system/sepolicy/private/init.te

(neverallow domain init (process (dyntransition)))
;;* lme

;;* lmx 828 system/sepolicy/private/init.te

(neverallow base_typeattr_440 init (process (transition)))
;;* lme

;;* lmx 829 system/sepolicy/private/init.te

(neverallow init base_typeattr_832 (file (entrypoint)))
;;* lme

;;* lmx 832 system/sepolicy/private/init.te

(neverallow init shell_data_file (lnk_file (read)))
;;* lme

;;* lmx 833 system/sepolicy/private/init.te

(neverallow init app_data_file_type (lnk_file (read)))
;;* lme

;;* lmx 836 system/sepolicy/private/init.te

(neverallow init fs_type (file (execute_no_trans)))
(neverallow init file_type (file (execute_no_trans)))
;;* lme

;;* lmx 845 system/sepolicy/private/init.te

(neverallow init base_typeattr_248 (process (noatsecure)))
;;* lme

;;* lmx 848 system/sepolicy/private/init.te

(neverallow init service_manager_type (service_manager (add find)))
;;* lme

;;* lmx 850 system/sepolicy/private/init.te

(neverallow init servicemanager (service_manager (list)))
;;* lme

;;* lmx 853 system/sepolicy/private/init.te

(neverallow init shell_data_file (dir (write add_name remove_name)))
;;* lme

;;* lmx 856 system/sepolicy/private/init.te

(neverallow init sysfs (file (write open)))
;;* lme

;;* lmx 859 system/sepolicy/private/init.te

(neverallow base_typeattr_248 init (process (ptrace)))
;;* lme

;;* lmx 864 system/sepolicy/private/init.te

(neverallow base_typeattr_833 system_data_root_file (dir (add_name)))
;;* lme

;;* lmx 865 system/sepolicy/private/init.te

(neverallow base_typeattr_834 system_data_root_file (dir (write remove_name)))
;;* lme

;;* lmx 868 system/sepolicy/private/init.te

(neverallow base_typeattr_247 userspace_reboot_exported_prop (property_service (set)))
;;* lme

;;* lmx 871 system/sepolicy/private/init.te

(neverallow base_typeattr_247 init_perf_lsm_hooks_prop (property_service (set)))
;;* lme

;;* lmx 874 system/sepolicy/private/init.te

(neverallow base_typeattr_247 vts_status_prop (property_service (set)))
;;* lme

;;* lmx 877 system/sepolicy/private/init.te

(neverallow base_typeattr_486 bootloader_prop (property_service (set)))
;;* lme

;;* lmx 880 system/sepolicy/private/init.te

(neverallow base_typeattr_247 hal_instrumentation_prop (property_service (set)))
;;* lme

;;* lmx 883 system/sepolicy/private/init.te

(neverallow base_typeattr_247 property_service_version_prop (property_service (set)))
;;* lme

;;* lmx 886 system/sepolicy/private/init.te

(neverallow base_typeattr_247 keystore_listen_prop (property_service (set)))
;;* lme

;;* lmx 889 system/sepolicy/private/init.te

(neverallow base_typeattr_247 init_mnt_ns_prop (property_service (set)))
;;* lme

;;* lmx 1 system/sepolicy/private/init_dev_config.te

(allow init init_dev_config_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 1 system/sepolicy/private/init_dev_config.te

(allow init init_dev_config (process (transition)))
;;* lme

;;* lmx 1 system/sepolicy/private/init_dev_config.te

(allow init_dev_config init_dev_config_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init init_dev_config (process (noatsecure)))
;;* lmx 1 system/sepolicy/private/init_dev_config.te

(allow init init_dev_config (process (siginh rlimitinh)))
;;* lme

(typetransition init init_dev_config_exec process init_dev_config)
;;* lmx 2 system/sepolicy/private/init_dev_config.te

(allow init_dev_config system_bootstrap_lib_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 2 system/sepolicy/private/init_dev_config.te

(allow init_dev_config system_bootstrap_lib_file (file (read getattr map execute open)))
;;* lme

;;* lmx 4 system/sepolicy/private/init_dev_config.te

(allow init_dev_config property_socket (sock_file (write)))
;;* lme

;;* lmx 4 system/sepolicy/private/init_dev_config.te

(allow init_dev_config init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 4 system/sepolicy/private/init_dev_config.te

(allow init_dev_config apexd_select_prop (property_service (set)))
;;* lme

;;* lmx 4 system/sepolicy/private/init_dev_config.te

(allow init_dev_config apexd_select_prop (file (read getattr map open)))
;;* lme

;;* lmx 5 system/sepolicy/private/init_dev_config.te

(allow init_dev_config property_socket (sock_file (write)))
;;* lme

;;* lmx 5 system/sepolicy/private/init_dev_config.te

(allow init_dev_config init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 5 system/sepolicy/private/init_dev_config.te

(allow init_dev_config media_variant_prop (property_service (set)))
;;* lme

;;* lmx 5 system/sepolicy/private/init_dev_config.te

(allow init_dev_config media_variant_prop (file (read getattr map open)))
;;* lme

;;* lmx 6 system/sepolicy/private/init_dev_config.te

(allow init_dev_config property_socket (sock_file (write)))
;;* lme

;;* lmx 6 system/sepolicy/private/init_dev_config.te

(allow init_dev_config init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 6 system/sepolicy/private/init_dev_config.te

(allow init_dev_config telephony_config_prop (property_service (set)))
;;* lme

;;* lmx 6 system/sepolicy/private/init_dev_config.te

(allow init_dev_config telephony_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 3 system/sepolicy/private/inputflinger.te

(allow init inputflinger_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 3 system/sepolicy/private/inputflinger.te

(allow init inputflinger (process (transition)))
;;* lme

;;* lmx 3 system/sepolicy/private/inputflinger.te

(allow inputflinger inputflinger_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init inputflinger (process (noatsecure)))
;;* lmx 3 system/sepolicy/private/inputflinger.te

(allow init inputflinger (process (siginh rlimitinh)))
;;* lme

(typetransition init inputflinger_exec process inputflinger)
;;* lmx 5 system/sepolicy/private/inputflinger.te

(allow inputflinger servicemanager (binder (call transfer)))
;;* lme

;;* lmx 5 system/sepolicy/private/inputflinger.te

(allow servicemanager inputflinger (binder (call transfer)))
;;* lme

;;* lmx 8 system/sepolicy/private/inputflinger.te

(allow inputflinger system_server (binder (call transfer)))
;;* lme

;;* lmx 8 system/sepolicy/private/inputflinger.te

(allow system_server inputflinger (binder (transfer)))
;;* lme

;;* lmx 8 system/sepolicy/private/inputflinger.te

(allow inputflinger system_server (fd (use)))
;;* lme

;;* lmx 10 system/sepolicy/private/inputflinger.te

(allow inputflinger sysfs_wake_lock (file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 10 system/sepolicy/private/inputflinger.te

(allow inputflinger self (capability2 (block_suspend)))
(allow inputflinger self (cap2_userns (block_suspend)))
;;* lme

;;* lmx 10 system/sepolicy/private/inputflinger.te

(allow inputflinger system_suspend_server (binder (call transfer)))
;;* lme

;;* lmx 10 system/sepolicy/private/inputflinger.te

(allow system_suspend_server inputflinger (binder (transfer)))
;;* lme

;;* lmx 10 system/sepolicy/private/inputflinger.te

(allow inputflinger system_suspend_server (fd (use)))
;;* lme

;;* lmx 10 system/sepolicy/private/inputflinger.te

(allow inputflinger system_suspend_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 10 system/sepolicy/private/inputflinger.te

(allow inputflinger hwservicemanager (binder (call transfer)))
;;* lme

;;* lmx 10 system/sepolicy/private/inputflinger.te

(allow hwservicemanager inputflinger (binder (call transfer)))
;;* lme

;;* lmx 10 system/sepolicy/private/inputflinger.te

(allow inputflinger hwservicemanager_prop (file (read getattr map open)))
;;* lme

;;* lmx 10 system/sepolicy/private/inputflinger.te

(allow inputflinger hidl_manager_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 10 system/sepolicy/private/inputflinger.te

(allow inputflinger hal_system_suspend_service (service_manager (find)))
;;* lme

;;* lmx 10 system/sepolicy/private/inputflinger.te

(allow inputflinger servicemanager (binder (call transfer)))
;;* lme

;;* lmx 10 system/sepolicy/private/inputflinger.te

(allow servicemanager inputflinger (binder (call transfer)))
;;* lme

;;* lmx 12 system/sepolicy/private/inputflinger.te

(allow inputflinger input_device (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 13 system/sepolicy/private/inputflinger.te

(allow inputflinger input_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 15 system/sepolicy/private/inputflinger.te

(allow inputflinger cgroup (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 15 system/sepolicy/private/inputflinger.te

(allow inputflinger cgroup (file (ioctl read getattr lock map open watch watch_reads)))
(allow inputflinger cgroup (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 16 system/sepolicy/private/inputflinger.te

(allow inputflinger cgroup_v2 (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 16 system/sepolicy/private/inputflinger.te

(allow inputflinger cgroup_v2 (file (ioctl read getattr lock map open watch watch_reads)))
(allow inputflinger cgroup_v2 (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 3 system/sepolicy/private/installd.te

(allow init installd_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 3 system/sepolicy/private/installd.te

(allow init installd (process (transition)))
;;* lme

;;* lmx 3 system/sepolicy/private/installd.te

(allow installd installd_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init installd (process (noatsecure)))
;;* lmx 3 system/sepolicy/private/installd.te

(allow init installd (process (siginh rlimitinh)))
;;* lme

(typetransition init installd_exec process installd)
;;* lmx 6 system/sepolicy/private/installd.te

(allow installd migrate_legacy_obb_data_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 6 system/sepolicy/private/installd.te

(allow installd migrate_legacy_obb_data (process (transition)))
;;* lme

;;* lmx 6 system/sepolicy/private/installd.te

(allow migrate_legacy_obb_data migrate_legacy_obb_data_exec (file (read getattr map execute open entrypoint)))
;;* lme

;;* lmx 6 system/sepolicy/private/installd.te

(allow migrate_legacy_obb_data installd (process (sigchld)))
;;* lme

(dontaudit installd migrate_legacy_obb_data (process (noatsecure)))
;;* lmx 6 system/sepolicy/private/installd.te

(allow installd migrate_legacy_obb_data (process (siginh rlimitinh)))
;;* lme

(typetransition installd migrate_legacy_obb_data_exec process migrate_legacy_obb_data)
;;* lmx 7 system/sepolicy/private/installd.te

(allow installd shell_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lme

;;* lmx 9 system/sepolicy/private/installd.te

(allow installd media_userdir_file (dir (read getattr open search)))
;;* lme

;;* lmx 14 system/sepolicy/private/installd.te

(allow installd media_rw_data_file (dir (read write create getattr setattr open add_name remove_name search rmdir)))
;;* lme

;;* lmx 18 system/sepolicy/private/installd.te

(allow installd media_rw_data_file (file (read write create getattr setattr append unlink open)))
;;* lme

;;* lmx 21 system/sepolicy/private/installd.te

(allow installd dex2oat_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 21 system/sepolicy/private/installd.te

(allow installd dex2oat (process (transition)))
;;* lme

;;* lmx 21 system/sepolicy/private/installd.te

(allow dex2oat dex2oat_exec (file (read getattr map execute open entrypoint)))
;;* lme

;;* lmx 21 system/sepolicy/private/installd.te

(allow dex2oat installd (process (sigchld)))
;;* lme

(dontaudit installd dex2oat (process (noatsecure)))
;;* lmx 21 system/sepolicy/private/installd.te

(allow installd dex2oat (process (siginh rlimitinh)))
;;* lme

(typetransition installd dex2oat_exec process dex2oat)
;;* lmx 24 system/sepolicy/private/installd.te

(allow installd profman_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 24 system/sepolicy/private/installd.te

(allow installd profman (process (transition)))
;;* lme

;;* lmx 24 system/sepolicy/private/installd.te

(allow profman profman_exec (file (read getattr map execute open entrypoint)))
;;* lme

;;* lmx 24 system/sepolicy/private/installd.te

(allow profman installd (process (sigchld)))
;;* lme

(dontaudit installd profman (process (noatsecure)))
;;* lmx 24 system/sepolicy/private/installd.te

(allow installd profman (process (siginh rlimitinh)))
;;* lme

(typetransition installd profman_exec process profman)
;;* lmx 27 system/sepolicy/private/installd.te

(allow installd idmap_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 27 system/sepolicy/private/installd.te

(allow installd idmap (process (transition)))
;;* lme

;;* lmx 27 system/sepolicy/private/installd.te

(allow idmap idmap_exec (file (read getattr map execute open entrypoint)))
;;* lme

;;* lmx 27 system/sepolicy/private/installd.te

(allow idmap installd (process (sigchld)))
;;* lme

(dontaudit installd idmap (process (noatsecure)))
;;* lmx 27 system/sepolicy/private/installd.te

(allow installd idmap (process (siginh rlimitinh)))
;;* lme

(typetransition installd idmap_exec process idmap)
;;* lmx 30 system/sepolicy/private/installd.te

(allow installd dumpstate (fd (use)))
;;* lme

;;* lmx 31 system/sepolicy/private/installd.te

(allow installd dumpstate (fifo_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 34 system/sepolicy/private/installd.te

(allow installd app_exec_data_file (file (unlink)))
;;* lme

;;* lmx 38 system/sepolicy/private/installd.te

(allow installd rollback_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 39 system/sepolicy/private/installd.te

(allow installd rollback_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 40 system/sepolicy/private/installd.te

(allow installd rollback_data_file (lnk_file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 43 system/sepolicy/private/installd.te

(allow installd device_config_runtime_native_prop (file (read getattr map open)))
;;* lme

;;* lmx 44 system/sepolicy/private/installd.te

(allow installd device_config_runtime_native_boot_prop (file (read getattr map open)))
;;* lme

;;* lmx 47 system/sepolicy/private/installd.te

(allow installd odsign_prop (file (read getattr map open)))
;;* lme

;;* lmx 50 system/sepolicy/private/installd.te

(allow installd staging_data_file (file (unlink)))
;;* lme

;;* lmx 51 system/sepolicy/private/installd.te

(allow installd staging_data_file (dir (read write getattr rename open add_name remove_name search rmdir)))
;;* lme

;;* lmx 54 system/sepolicy/private/installd.te

(allow installd sdk_sandbox_system_data_file (dir (ioctl read write create getattr setattr lock relabelfrom rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 57 system/sepolicy/private/installd.te

(allow installd untrusted_app_all (fd (use)))
(allow installd priv_app_all (fd (use)))
(allow installd gmscore_app (fd (use)))
;;* lme

;;* lmx 58 system/sepolicy/private/installd.te

(allowx installd app_data_file_type (ioctl file (0x6685)))
;;* lme

;;* lmx 61 system/sepolicy/private/installd.te

(allow installd self (capability (chown dac_override dac_read_search fowner fsetid kill setgid setuid sys_admin)))
(allow installd self (cap_userns (chown dac_override dac_read_search fowner fsetid kill setgid setuid sys_admin)))
;;* lme

;;* lmx 63 system/sepolicy/private/installd.te

(allow installd system_server (fd (use)))
;;* lme

;;* lmx 64 system/sepolicy/private/installd.te

(allow installd media_rw_data_file (file (write getattr append)))
;;* lme

;;* lmx 66 system/sepolicy/private/installd.te

(allow installd app_backup_staging_file (file (read write getattr)))
;;* lme

;;* lmx 68 system/sepolicy/private/installd.te

(allow installd media_rw_data_file (file (rename)))
;;* lme

;;* lmx 71 system/sepolicy/private/installd.te

(allow installd dalvikcache_data_file (dir (relabelto)))
;;* lme

;;* lmx 72 system/sepolicy/private/installd.te

(allow installd dalvikcache_data_file (file (relabelto link)))
;;* lme

;;* lmx 75 system/sepolicy/private/installd.te

(allow installd apk_data_file (dir (ioctl read write create getattr setattr lock relabelfrom rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 76 system/sepolicy/private/installd.te

(allow installd apk_data_file (file (ioctl read write create getattr setattr lock relabelfrom append map unlink link rename open watch watch_reads)))
;;* lme

;;* lmx 77 system/sepolicy/private/installd.te

(allow installd apk_data_file (lnk_file (ioctl read create getattr lock map unlink open watch watch_reads)))
;;* lme

;;* lmx 79 system/sepolicy/private/installd.te

(allow installd asec_apk_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 80 system/sepolicy/private/installd.te

(allow installd apk_tmp_file (file (ioctl read getattr lock map unlink open watch watch_reads)))
;;* lme

;;* lmx 81 system/sepolicy/private/installd.te

(allow installd apk_tmp_file (dir (ioctl read write create getattr setattr lock relabelfrom rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 82 system/sepolicy/private/installd.te

(allow installd oemfs (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 83 system/sepolicy/private/installd.te

(allow installd oemfs (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 84 system/sepolicy/private/installd.te

(allow installd cgroup (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 85 system/sepolicy/private/installd.te

(allow installd cgroup_v2 (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 86 system/sepolicy/private/installd.te

(allow installd mnt_expand_file (dir (getattr search)))
;;* lme

;;* lmx 88 system/sepolicy/private/installd.te

(allow installd selinuxfs (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 88 system/sepolicy/private/installd.te

(allow installd selinuxfs (file (ioctl read getattr lock map open watch watch_reads)))
(allow installd selinuxfs (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 88 system/sepolicy/private/installd.te

(allow installd selinuxfs (file (write lock append map open)))
;;* lme

;;* lmx 88 system/sepolicy/private/installd.te

(allow installd kernel (security (check_context)))
;;* lme

;;* lmx 90 system/sepolicy/private/installd.te

(allow installd rootfs (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 90 system/sepolicy/private/installd.te

(allow installd rootfs (file (ioctl read getattr lock map open watch watch_reads)))
(allow installd rootfs (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 92 system/sepolicy/private/installd.te

(allow installd system_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 92 system/sepolicy/private/installd.te

(allow installd system_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow installd system_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 94 system/sepolicy/private/installd.te

(allow installd vendor_app_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 94 system/sepolicy/private/installd.te

(allow installd vendor_app_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow installd vendor_app_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 96 system/sepolicy/private/installd.te

(allow installd vendor_framework_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 96 system/sepolicy/private/installd.te

(allow installd vendor_framework_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow installd vendor_framework_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 98 system/sepolicy/private/installd.te

(allow installd vendor_overlay_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 98 system/sepolicy/private/installd.te

(allow installd vendor_overlay_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow installd vendor_overlay_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 100 system/sepolicy/private/installd.te

(allow installd vendor_apex_metadata_file (dir (getattr search)))
;;* lme

;;* lmx 102 system/sepolicy/private/installd.te

(allow installd file_contexts_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 104 system/sepolicy/private/installd.te

(allow installd seapp_contexts_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 107 system/sepolicy/private/installd.te

(allow installd asec_image_file (dir (search)))
;;* lme

;;* lmx 108 system/sepolicy/private/installd.te

(allow installd asec_image_file (file (getattr)))
;;* lme

;;* lmx 113 system/sepolicy/private/installd.te

(allow installd system_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 116 system/sepolicy/private/installd.te

(allow installd system_data_file (lnk_file (read create getattr setattr unlink)))
;;* lme

;;* lmx 119 system/sepolicy/private/installd.te

(allow installd mnt_pass_through_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 122 system/sepolicy/private/installd.te

(allow installd media_rw_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 123 system/sepolicy/private/installd.te

(allow installd media_rw_data_file (file (getattr unlink)))
;;* lme

;;* lmx 125 system/sepolicy/private/installd.te

(allow installd system_data_file (dir (relabelfrom)))
;;* lme

;;* lmx 126 system/sepolicy/private/installd.te

(allow installd media_rw_data_file (dir (relabelto)))
;;* lme

;;* lmx 129 system/sepolicy/private/installd.te

(allow installd media_userdir_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 130 system/sepolicy/private/installd.te

(allow installd tmpfs (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 131 system/sepolicy/private/installd.te

(allow installd storage_file (dir (search)))
;;* lme

;;* lmx 132 system/sepolicy/private/installd.te

(allow installd sdcard_type (dir (read write getattr open remove_name search rmdir)))
(allow installd fuse (dir (read write getattr open remove_name search rmdir)))
;;* lme

;;* lmx 133 system/sepolicy/private/installd.te

(allow installd sdcard_type (file (getattr unlink)))
(allow installd fuse (file (getattr unlink)))
;;* lme

;;* lmx 136 system/sepolicy/private/installd.te

(allow installd mirror_data_file (dir (ioctl read write create getattr setattr lock rename mounton open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 139 system/sepolicy/private/installd.te

(allow installd system_userdir_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 140 system/sepolicy/private/installd.te

(allow installd misc_user_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 141 system/sepolicy/private/installd.te

(allow installd misc_user_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 142 system/sepolicy/private/installd.te

(allow installd keychain_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 143 system/sepolicy/private/installd.te

(allow installd keychain_data_file (file (ioctl read getattr lock map unlink open watch watch_reads)))
;;* lme

;;* lmx 146 system/sepolicy/private/installd.te

(allow installd install_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 147 system/sepolicy/private/installd.te

(allow installd install_data_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
;;* lme

;;* lmx 150 system/sepolicy/private/installd.te

(allow installd dalvikcache_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 151 system/sepolicy/private/installd.te

(allow installd dalvikcache_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 152 system/sepolicy/private/installd.te

(allow installd dalvikcache_data_file (lnk_file (getattr)))
;;* lme

;;* lmx 155 system/sepolicy/private/installd.te

(allow installd resourcecache_data_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
;;* lme

;;* lmx 156 system/sepolicy/private/installd.te

(allow installd resourcecache_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 160 system/sepolicy/private/installd.te

(allow installd unlabeled (dir (ioctl read write getattr lock relabelfrom open watch watch_reads add_name remove_name search rmdir)))
;;* lme

;;* lmx 161 system/sepolicy/private/installd.te

(allow installd unlabeled (file (getattr setattr relabelfrom unlink rename)))
(allow installd unlabeled (lnk_file (getattr setattr relabelfrom unlink rename)))
(allow installd unlabeled (sock_file (getattr setattr relabelfrom unlink rename)))
(allow installd unlabeled (fifo_file (getattr setattr relabelfrom unlink rename)))
;;* lme

;;* lmx 163 system/sepolicy/private/installd.te

(allow installd unlabeled (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 168 system/sepolicy/private/installd.te

(allow installd system_data_file (file (getattr relabelfrom unlink)))
(allow installd system_data_file (lnk_file (getattr relabelfrom unlink)))
(allow installd system_data_file (sock_file (getattr relabelfrom unlink)))
(allow installd system_data_file (fifo_file (getattr relabelfrom unlink)))
;;* lme

;;* lmx 174 system/sepolicy/private/installd.te

(allow installd app_data_file_type (dir (ioctl read write create getattr setattr lock relabelfrom relabelto rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 175 system/sepolicy/private/installd.te

(allow installd app_data_file_type (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink rename open watch watch_reads)))
(allow installd app_data_file_type (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink rename open watch watch_reads)))
(allow installd app_data_file_type (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink rename open watch watch_reads)))
(allow installd app_data_file_type (fifo_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 185 system/sepolicy/private/installd.te

(allowx installd app_data_file_type (ioctl file ((range 0x581f 0x5820))))
(allowx installd app_data_file_type (ioctl dir ((range 0x581f 0x5820))))
(allowx installd system_data_file (ioctl file ((range 0x581f 0x5820))))
(allowx installd system_data_file (ioctl dir ((range 0x581f 0x5820))))
(allowx installd install_data_file (ioctl file ((range 0x581f 0x5820))))
(allowx installd install_data_file (ioctl dir ((range 0x581f 0x5820))))
;;* lme

;;* lmx 185 system/sepolicy/private/installd.te

(allowx installd app_data_file_type (ioctl file ((range 0x6601 0x6602))))
(allowx installd app_data_file_type (ioctl dir ((range 0x6601 0x6602))))
(allowx installd system_data_file (ioctl file ((range 0x6601 0x6602))))
(allowx installd system_data_file (ioctl dir ((range 0x6601 0x6602))))
(allowx installd install_data_file (ioctl file ((range 0x6601 0x6602))))
(allowx installd install_data_file (ioctl dir ((range 0x6601 0x6602))))
;;* lme

;;* lmx 188 system/sepolicy/private/installd.te

(allow installd user_profile_root_file (dir (ioctl read write create getattr setattr lock relabelfrom rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 189 system/sepolicy/private/installd.te

(allow installd user_profile_data_file (dir (ioctl read write create getattr setattr lock relabelto rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 190 system/sepolicy/private/installd.te

(allow installd user_profile_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 191 system/sepolicy/private/installd.te

(allow installd user_profile_data_file (file (unlink)))
;;* lme

;;* lmx 194 system/sepolicy/private/installd.te

(allow installd labeledfs (filesystem (unmount)))
;;* lme

;;* lmx 197 system/sepolicy/private/installd.te

(allow installd profman_dump_data_file (dir (write add_name search)))
;;* lme

;;* lmx 198 system/sepolicy/private/installd.te

(allow installd profman_dump_data_file (file (write create setattr open)))
;;* lme

;;* lmx 201 system/sepolicy/private/installd.te

(allow installd devpts (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 204 system/sepolicy/private/installd.te

(allow installd toolbox_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lme

;;* lmx 207 system/sepolicy/private/installd.te

(allow installd servicemanager (binder (call transfer)))
;;* lme

;;* lmx 207 system/sepolicy/private/installd.te

(allow servicemanager installd (binder (call transfer)))
;;* lme

;;* lmx 208 system/sepolicy/private/installd.te

(allow installd installd_service (service_manager (add find)))
;;* lme

;;* lmx 208 system/sepolicy/private/installd.te

(neverallow base_typeattr_835 installd_service (service_manager (add)))
;;* lme

;;* lmx 208 system/sepolicy/private/installd.te

(allow installd su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 209 system/sepolicy/private/installd.te

(allow installd dumpstate (fifo_file (write getattr)))
;;* lme

;;* lmx 212 system/sepolicy/private/installd.te

(allow installd system_server (binder (call transfer)))
;;* lme

;;* lmx 212 system/sepolicy/private/installd.te

(allow system_server installd (binder (transfer)))
;;* lme

;;* lmx 212 system/sepolicy/private/installd.te

(allow installd system_server (fd (use)))
;;* lme

;;* lmx 213 system/sepolicy/private/installd.te

(allow installd permission_service (service_manager (find)))
;;* lme

;;* lmx 216 system/sepolicy/private/installd.te

(allow installd block_device (dir (search)))
;;* lme

;;* lmx 217 system/sepolicy/private/installd.te

(allow installd labeledfs (filesystem (quotamod quotaget)))
;;* lme

;;* lmx 221 system/sepolicy/private/installd.te

(allow installd preloads_data_file (file (ioctl read getattr lock map unlink open watch watch_reads)))
;;* lme

;;* lmx 222 system/sepolicy/private/installd.te

(allow installd preloads_data_file (dir (ioctl read write getattr lock open watch watch_reads remove_name search rmdir)))
;;* lme

;;* lmx 223 system/sepolicy/private/installd.te

(allow installd preloads_media_file (file (ioctl read getattr lock map unlink open watch watch_reads)))
;;* lme

;;* lmx 224 system/sepolicy/private/installd.te

(allow installd preloads_media_file (dir (ioctl read write getattr lock open watch watch_reads remove_name search rmdir)))
;;* lme

;;* lmx 227 system/sepolicy/private/installd.te

(allow installd proc_filesystems (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 230 system/sepolicy/private/installd.te

(allow installd storage_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 234 system/sepolicy/private/installd.te

(allow installd vold (fd (use)))
;;* lme

;;* lmx 250 system/sepolicy/private/installd.te

(allow installd virtualizationservice_data_file (file (unlink)))
;;* lme

;;* lmx 257 system/sepolicy/private/installd.te

(neverallow base_typeattr_836 installd_service (service_manager (find)))
;;* lme

;;* lmx 258 system/sepolicy/private/installd.te

(neverallow base_typeattr_837 installd (binder (call)))
;;* lme

;;* lmx 264 system/sepolicy/private/installd.te

(neverallow installd base_typeattr_838 (binder (call)))
;;* lme

(typetransition isolated_app tmpfs file appdomain_tmpfs)
;;* lmx 10 system/sepolicy/private/isolated_app.te

(allow isolated_app isolated_app_userfaultfd (anon_inode (ioctl read create)))
;;* lme

(dontaudit su isolated_app_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lmx 10 system/sepolicy/private/isolated_app.te

(neverallow base_typeattr_319 isolated_app_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 10 system/sepolicy/private/isolated_app.te

(allow isolated_app appdomain_tmpfs (file (read write getattr map execute)))
;;* lme

;;* lmx 10 system/sepolicy/private/isolated_app.te

(allow isolated_app appdomain (memfd_file (read write getattr map execute)))
;;* lme

;;* lmx 10 system/sepolicy/private/isolated_app.te

(neverallow base_typeattr_839 base_typeattr_319 (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 10 system/sepolicy/private/isolated_app.te

(neverallow base_typeattr_840 isolated_app (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 10 system/sepolicy/private/isolated_app.te

(neverallow base_typeattr_841 isolated_app (process (ptrace)))
;;* lme

;;* lmx 10 system/sepolicy/private/isolated_app.te

(neverallow isolated_app base_typeattr_842 (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 13 system/sepolicy/private/isolated_app.te

(allow isolated_app webviewupdate_service (service_manager (find)))
;;* lme

;;* lmx 17 system/sepolicy/private/isolated_app.te

(allow isolated_app untrusted_app_all (tcp_socket (read write getattr setattr lock append map bind connect getopt setopt shutdown)))
(allow isolated_app untrusted_app_all (udp_socket (read write getattr setattr lock append map bind connect getopt setopt shutdown)))
(allow isolated_app priv_app_all (tcp_socket (read write getattr setattr lock append map bind connect getopt setopt shutdown)))
(allow isolated_app priv_app_all (udp_socket (read write getattr setattr lock append map bind connect getopt setopt shutdown)))
(allow isolated_app ephemeral_app (tcp_socket (read write getattr setattr lock append map bind connect getopt setopt shutdown)))
(allow isolated_app ephemeral_app (udp_socket (read write getattr setattr lock append map bind connect getopt setopt shutdown)))
;;* lme

;;* lmx 23 system/sepolicy/private/isolated_app.te

(allow isolated_app webview_zygote (fd (use)))
;;* lme

;;* lmx 25 system/sepolicy/private/isolated_app.te

(allow isolated_app webview_zygote (process (sigchld)))
;;* lme

;;* lmx 27 system/sepolicy/private/isolated_app.te

(allow isolated_app webview_zygote (unix_dgram_socket (write)))
;;* lme

;;* lmx 29 system/sepolicy/private/isolated_app.te

(allow isolated_app webview_zygote_tmpfs (file (read)))
;;* lme

;;* lmx 30 system/sepolicy/private/isolated_app.te

(allow isolated_app webview_zygote (memfd_file (read)))
;;* lme

;;* lmx 12 system/sepolicy/private/isolated_app_all.te

(allow isolated_app_all app_data_file (file (read write getattr lock append map)))
(allow isolated_app_all privapp_data_file (file (read write getattr lock append map)))
(allow isolated_app_all sdk_sandbox_data_file (file (read write getattr lock append map)))
;;* lme

;;* lmx 14 system/sepolicy/private/isolated_app_all.te

(allow isolated_app_all activity_service (service_manager (find)))
;;* lme

;;* lmx 15 system/sepolicy/private/isolated_app_all.te

(allow isolated_app_all activity_structured_service (service_manager (find)))
;;* lme

;;* lmx 16 system/sepolicy/private/isolated_app_all.te

(allow isolated_app_all display_service (service_manager (find)))
;;* lme

;;* lmx 23 system/sepolicy/private/isolated_app_all.te

(allow isolated_app_all self (process (ptrace)))
;;* lme

;;* lmx 26 system/sepolicy/private/isolated_app_all.te

(allow isolated_app_all app_zygote (fd (use)))
(allow isolated_app_all native_app_zygote (fd (use)))
;;* lme

;;* lmx 28 system/sepolicy/private/isolated_app_all.te

(allow isolated_app_all app_zygote (process (sigchld)))
(allow isolated_app_all native_app_zygote (process (sigchld)))
;;* lme

;;* lmx 30 system/sepolicy/private/isolated_app_all.te

(allow isolated_app_all app_zygote (unix_dgram_socket (write)))
(allow isolated_app_all native_app_zygote (unix_dgram_socket (write)))
;;* lme

(dontaudit isolated_app_all shell_data_file (dir (search)))
;;* lmx 37 system/sepolicy/private/isolated_app_all.te

(allow isolated_app_all apk_tmp_file (file (read getattr map)))
(allow isolated_app_all apk_private_tmp_file (file (read getattr map)))
;;* lme

;;* lmx 44 system/sepolicy/private/isolated_app_all.te

(allow isolated_app_all sdcard_type (file (read write getattr lock append map)))
(allow isolated_app_all fuse (file (read write getattr lock append map)))
(allow isolated_app_all media_rw_data_file (file (read write getattr lock append map)))
;;* lme

;;* lmx 50 system/sepolicy/private/isolated_app_all.te

(allow isolated_app_all domain (memfd_file (ioctl)))
;;* lme

;;* lmx 51 system/sepolicy/private/isolated_app_all.te

(allowx isolated_app_all domain (ioctl memfd_file ((range 0x7701 0x770b))))
;;* lme

;;* lmx 52 system/sepolicy/private/isolated_app_all.te

(allow isolated_app_all ashmem_libcutils_device (chr_file (open)))
;;* lme

;;* lmx 59 system/sepolicy/private/isolated_app_all.te

(neverallow isolated_app_all app_data_file_type (file (open)))
;;* lme

;;* lmx 64 system/sepolicy/private/isolated_app_all.te

(neverallow isolated_app_all anr_data_file (file (ioctl read write create getattr setattr lock relabelfrom relabelto map unlink link rename execute quotaon mounton audit_access execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
;;* lme

;;* lmx 65 system/sepolicy/private/isolated_app_all.te

(neverallow isolated_app_all anr_data_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent rmdir)))
;;* lme

;;* lmx 68 system/sepolicy/private/isolated_app_all.te

(neverallow base_typeattr_843 hwbinder_device (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
;;* lme

;;* lmx 69 system/sepolicy/private/isolated_app_all.te

(neverallow base_typeattr_843 base_typeattr_248 (hwservice_manager (add find list)))
;;* lme

;;* lmx 72 system/sepolicy/private/isolated_app_all.te

(neverallow isolated_app_all vndbinder_device (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
;;* lme

;;* lmx 76 system/sepolicy/private/isolated_app_all.te

(neverallow base_typeattr_843 base_typeattr_248 (service_manager (add list)))
;;* lme

;;* lmx 87 system/sepolicy/private/isolated_app_all.te

(neverallow base_typeattr_843 base_typeattr_844 (service_manager (find)))
;;* lme

;;* lmx 90 system/sepolicy/private/isolated_app_all.te

(neverallow base_typeattr_843 gpu_device (chr_file (ioctl read write getattr lock append map execute open watch watch_reads)))
;;* lme

;;* lmx 93 system/sepolicy/private/isolated_app_all.te

(neverallow isolated_app_all cache_file (dir (write create setattr relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access execmod watch_mount watch_sb watch_with_perm add_name remove_name reparent rmdir)))
;;* lme

;;* lmx 94 system/sepolicy/private/isolated_app_all.te

(neverallow isolated_app_all cache_file (file (ioctl write create setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
;;* lme

;;* lmx 98 system/sepolicy/private/isolated_app_all.te

(neverallow isolated_app_all sdcard_type (dir (ioctl read write create setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
(neverallow isolated_app_all fuse (dir (ioctl read write create setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
(neverallow isolated_app_all mnt_user_file (dir (ioctl read write create setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
(neverallow isolated_app_all storage_file (dir (ioctl read write create setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 99 system/sepolicy/private/isolated_app_all.te

(neverallow isolated_app_all mnt_user_file (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow isolated_app_all mnt_user_file (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow isolated_app_all mnt_user_file (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow isolated_app_all mnt_user_file (blk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow isolated_app_all mnt_user_file (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow isolated_app_all mnt_user_file (fifo_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow isolated_app_all storage_file (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow isolated_app_all storage_file (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow isolated_app_all storage_file (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow isolated_app_all storage_file (blk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow isolated_app_all storage_file (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow isolated_app_all storage_file (fifo_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 100 system/sepolicy/private/isolated_app_all.te

(neverallow isolated_app_all sdcard_type (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow isolated_app_all sdcard_type (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow isolated_app_all sdcard_type (blk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow isolated_app_all sdcard_type (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow isolated_app_all sdcard_type (fifo_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow isolated_app_all fuse (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow isolated_app_all fuse (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow isolated_app_all fuse (blk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow isolated_app_all fuse (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow isolated_app_all fuse (fifo_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 101 system/sepolicy/private/isolated_app_all.te

(neverallow isolated_app_all sdcard_type (file (ioctl create setattr relabelfrom relabelto unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow isolated_app_all fuse (file (ioctl create setattr relabelfrom relabelto unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
;;* lme

;;* lmx 104 system/sepolicy/private/isolated_app_all.te

(neverallow isolated_app_all usbaccessory_device (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow isolated_app_all usbaccessory_device (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow isolated_app_all usb_device (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow isolated_app_all usb_device (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
;;* lme

;;* lmx 107 system/sepolicy/private/isolated_app_all.te

(neverallow isolated_app_all webview_zygote (sock_file (write)))
;;* lme

;;* lmx 121 system/sepolicy/private/isolated_app_all.te

(neverallow base_typeattr_843 base_typeattr_845 (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 142 system/sepolicy/private/isolated_app_all.te

(neverallow isolated_app_all untrusted_app_all (socket (create)))
(neverallow isolated_app_all untrusted_app_all (tcp_socket (create)))
(neverallow isolated_app_all untrusted_app_all (udp_socket (create)))
(neverallow isolated_app_all untrusted_app_all (rawip_socket (create)))
(neverallow isolated_app_all untrusted_app_all (netlink_socket (create)))
(neverallow isolated_app_all untrusted_app_all (packet_socket (create)))
(neverallow isolated_app_all untrusted_app_all (key_socket (create)))
(neverallow isolated_app_all untrusted_app_all (netlink_route_socket (create)))
(neverallow isolated_app_all untrusted_app_all (netlink_tcpdiag_socket (create)))
(neverallow isolated_app_all untrusted_app_all (netlink_nflog_socket (create)))
(neverallow isolated_app_all untrusted_app_all (netlink_xfrm_socket (create)))
(neverallow isolated_app_all untrusted_app_all (netlink_selinux_socket (create)))
(neverallow isolated_app_all untrusted_app_all (netlink_audit_socket (create)))
(neverallow isolated_app_all untrusted_app_all (netlink_dnrt_socket (create)))
(neverallow isolated_app_all untrusted_app_all (netlink_kobject_uevent_socket (create)))
(neverallow isolated_app_all untrusted_app_all (appletalk_socket (create)))
(neverallow isolated_app_all untrusted_app_all (tun_socket (create)))
(neverallow isolated_app_all untrusted_app_all (netlink_iscsi_socket (create)))
(neverallow isolated_app_all untrusted_app_all (netlink_fib_lookup_socket (create)))
(neverallow isolated_app_all untrusted_app_all (netlink_connector_socket (create)))
(neverallow isolated_app_all untrusted_app_all (netlink_netfilter_socket (create)))
(neverallow isolated_app_all untrusted_app_all (netlink_generic_socket (create)))
(neverallow isolated_app_all untrusted_app_all (netlink_scsitransport_socket (create)))
(neverallow isolated_app_all untrusted_app_all (netlink_rdma_socket (create)))
(neverallow isolated_app_all untrusted_app_all (netlink_crypto_socket (create)))
(neverallow isolated_app_all untrusted_app_all (sctp_socket (create)))
(neverallow isolated_app_all untrusted_app_all (icmp_socket (create)))
(neverallow isolated_app_all untrusted_app_all (ax25_socket (create)))
(neverallow isolated_app_all untrusted_app_all (ipx_socket (create)))
(neverallow isolated_app_all untrusted_app_all (netrom_socket (create)))
(neverallow isolated_app_all untrusted_app_all (atmpvc_socket (create)))
(neverallow isolated_app_all untrusted_app_all (x25_socket (create)))
(neverallow isolated_app_all untrusted_app_all (rose_socket (create)))
(neverallow isolated_app_all untrusted_app_all (decnet_socket (create)))
(neverallow isolated_app_all untrusted_app_all (atmsvc_socket (create)))
(neverallow isolated_app_all untrusted_app_all (rds_socket (create)))
(neverallow isolated_app_all untrusted_app_all (irda_socket (create)))
(neverallow isolated_app_all untrusted_app_all (pppox_socket (create)))
(neverallow isolated_app_all untrusted_app_all (llc_socket (create)))
(neverallow isolated_app_all untrusted_app_all (can_socket (create)))
(neverallow isolated_app_all untrusted_app_all (tipc_socket (create)))
(neverallow isolated_app_all untrusted_app_all (bluetooth_socket (create)))
(neverallow isolated_app_all untrusted_app_all (iucv_socket (create)))
(neverallow isolated_app_all untrusted_app_all (rxrpc_socket (create)))
(neverallow isolated_app_all untrusted_app_all (isdn_socket (create)))
(neverallow isolated_app_all untrusted_app_all (phonet_socket (create)))
(neverallow isolated_app_all untrusted_app_all (ieee802154_socket (create)))
(neverallow isolated_app_all untrusted_app_all (caif_socket (create)))
(neverallow isolated_app_all untrusted_app_all (alg_socket (create)))
(neverallow isolated_app_all untrusted_app_all (nfc_socket (create)))
(neverallow isolated_app_all untrusted_app_all (vsock_socket (create)))
(neverallow isolated_app_all untrusted_app_all (kcm_socket (create)))
(neverallow isolated_app_all untrusted_app_all (qipcrtr_socket (create)))
(neverallow isolated_app_all untrusted_app_all (smc_socket (create)))
(neverallow isolated_app_all untrusted_app_all (xdp_socket (create)))
(neverallow isolated_app_all priv_app_all (socket (create)))
(neverallow isolated_app_all priv_app_all (tcp_socket (create)))
(neverallow isolated_app_all priv_app_all (udp_socket (create)))
(neverallow isolated_app_all priv_app_all (rawip_socket (create)))
(neverallow isolated_app_all priv_app_all (netlink_socket (create)))
(neverallow isolated_app_all priv_app_all (packet_socket (create)))
(neverallow isolated_app_all priv_app_all (key_socket (create)))
(neverallow isolated_app_all priv_app_all (netlink_route_socket (create)))
(neverallow isolated_app_all priv_app_all (netlink_tcpdiag_socket (create)))
(neverallow isolated_app_all priv_app_all (netlink_nflog_socket (create)))
(neverallow isolated_app_all priv_app_all (netlink_xfrm_socket (create)))
(neverallow isolated_app_all priv_app_all (netlink_selinux_socket (create)))
(neverallow isolated_app_all priv_app_all (netlink_audit_socket (create)))
(neverallow isolated_app_all priv_app_all (netlink_dnrt_socket (create)))
(neverallow isolated_app_all priv_app_all (netlink_kobject_uevent_socket (create)))
(neverallow isolated_app_all priv_app_all (appletalk_socket (create)))
(neverallow isolated_app_all priv_app_all (tun_socket (create)))
(neverallow isolated_app_all priv_app_all (netlink_iscsi_socket (create)))
(neverallow isolated_app_all priv_app_all (netlink_fib_lookup_socket (create)))
(neverallow isolated_app_all priv_app_all (netlink_connector_socket (create)))
(neverallow isolated_app_all priv_app_all (netlink_netfilter_socket (create)))
(neverallow isolated_app_all priv_app_all (netlink_generic_socket (create)))
(neverallow isolated_app_all priv_app_all (netlink_scsitransport_socket (create)))
(neverallow isolated_app_all priv_app_all (netlink_rdma_socket (create)))
(neverallow isolated_app_all priv_app_all (netlink_crypto_socket (create)))
(neverallow isolated_app_all priv_app_all (sctp_socket (create)))
(neverallow isolated_app_all priv_app_all (icmp_socket (create)))
(neverallow isolated_app_all priv_app_all (ax25_socket (create)))
(neverallow isolated_app_all priv_app_all (ipx_socket (create)))
(neverallow isolated_app_all priv_app_all (netrom_socket (create)))
(neverallow isolated_app_all priv_app_all (atmpvc_socket (create)))
(neverallow isolated_app_all priv_app_all (x25_socket (create)))
(neverallow isolated_app_all priv_app_all (rose_socket (create)))
(neverallow isolated_app_all priv_app_all (decnet_socket (create)))
(neverallow isolated_app_all priv_app_all (atmsvc_socket (create)))
(neverallow isolated_app_all priv_app_all (rds_socket (create)))
(neverallow isolated_app_all priv_app_all (irda_socket (create)))
(neverallow isolated_app_all priv_app_all (pppox_socket (create)))
(neverallow isolated_app_all priv_app_all (llc_socket (create)))
(neverallow isolated_app_all priv_app_all (can_socket (create)))
(neverallow isolated_app_all priv_app_all (tipc_socket (create)))
(neverallow isolated_app_all priv_app_all (bluetooth_socket (create)))
(neverallow isolated_app_all priv_app_all (iucv_socket (create)))
(neverallow isolated_app_all priv_app_all (rxrpc_socket (create)))
(neverallow isolated_app_all priv_app_all (isdn_socket (create)))
(neverallow isolated_app_all priv_app_all (phonet_socket (create)))
(neverallow isolated_app_all priv_app_all (ieee802154_socket (create)))
(neverallow isolated_app_all priv_app_all (caif_socket (create)))
(neverallow isolated_app_all priv_app_all (alg_socket (create)))
(neverallow isolated_app_all priv_app_all (nfc_socket (create)))
(neverallow isolated_app_all priv_app_all (vsock_socket (create)))
(neverallow isolated_app_all priv_app_all (kcm_socket (create)))
(neverallow isolated_app_all priv_app_all (qipcrtr_socket (create)))
(neverallow isolated_app_all priv_app_all (smc_socket (create)))
(neverallow isolated_app_all priv_app_all (xdp_socket (create)))
(neverallow isolated_app_all ephemeral_app (socket (create)))
(neverallow isolated_app_all ephemeral_app (tcp_socket (create)))
(neverallow isolated_app_all ephemeral_app (udp_socket (create)))
(neverallow isolated_app_all ephemeral_app (rawip_socket (create)))
(neverallow isolated_app_all ephemeral_app (netlink_socket (create)))
(neverallow isolated_app_all ephemeral_app (packet_socket (create)))
(neverallow isolated_app_all ephemeral_app (key_socket (create)))
(neverallow isolated_app_all ephemeral_app (netlink_route_socket (create)))
(neverallow isolated_app_all ephemeral_app (netlink_tcpdiag_socket (create)))
(neverallow isolated_app_all ephemeral_app (netlink_nflog_socket (create)))
(neverallow isolated_app_all ephemeral_app (netlink_xfrm_socket (create)))
(neverallow isolated_app_all ephemeral_app (netlink_selinux_socket (create)))
(neverallow isolated_app_all ephemeral_app (netlink_audit_socket (create)))
(neverallow isolated_app_all ephemeral_app (netlink_dnrt_socket (create)))
(neverallow isolated_app_all ephemeral_app (netlink_kobject_uevent_socket (create)))
(neverallow isolated_app_all ephemeral_app (appletalk_socket (create)))
(neverallow isolated_app_all ephemeral_app (tun_socket (create)))
(neverallow isolated_app_all ephemeral_app (netlink_iscsi_socket (create)))
(neverallow isolated_app_all ephemeral_app (netlink_fib_lookup_socket (create)))
(neverallow isolated_app_all ephemeral_app (netlink_connector_socket (create)))
(neverallow isolated_app_all ephemeral_app (netlink_netfilter_socket (create)))
(neverallow isolated_app_all ephemeral_app (netlink_generic_socket (create)))
(neverallow isolated_app_all ephemeral_app (netlink_scsitransport_socket (create)))
(neverallow isolated_app_all ephemeral_app (netlink_rdma_socket (create)))
(neverallow isolated_app_all ephemeral_app (netlink_crypto_socket (create)))
(neverallow isolated_app_all ephemeral_app (sctp_socket (create)))
(neverallow isolated_app_all ephemeral_app (icmp_socket (create)))
(neverallow isolated_app_all ephemeral_app (ax25_socket (create)))
(neverallow isolated_app_all ephemeral_app (ipx_socket (create)))
(neverallow isolated_app_all ephemeral_app (netrom_socket (create)))
(neverallow isolated_app_all ephemeral_app (atmpvc_socket (create)))
(neverallow isolated_app_all ephemeral_app (x25_socket (create)))
(neverallow isolated_app_all ephemeral_app (rose_socket (create)))
(neverallow isolated_app_all ephemeral_app (decnet_socket (create)))
(neverallow isolated_app_all ephemeral_app (atmsvc_socket (create)))
(neverallow isolated_app_all ephemeral_app (rds_socket (create)))
(neverallow isolated_app_all ephemeral_app (irda_socket (create)))
(neverallow isolated_app_all ephemeral_app (pppox_socket (create)))
(neverallow isolated_app_all ephemeral_app (llc_socket (create)))
(neverallow isolated_app_all ephemeral_app (can_socket (create)))
(neverallow isolated_app_all ephemeral_app (tipc_socket (create)))
(neverallow isolated_app_all ephemeral_app (bluetooth_socket (create)))
(neverallow isolated_app_all ephemeral_app (iucv_socket (create)))
(neverallow isolated_app_all ephemeral_app (rxrpc_socket (create)))
(neverallow isolated_app_all ephemeral_app (isdn_socket (create)))
(neverallow isolated_app_all ephemeral_app (phonet_socket (create)))
(neverallow isolated_app_all ephemeral_app (ieee802154_socket (create)))
(neverallow isolated_app_all ephemeral_app (caif_socket (create)))
(neverallow isolated_app_all ephemeral_app (alg_socket (create)))
(neverallow isolated_app_all ephemeral_app (nfc_socket (create)))
(neverallow isolated_app_all ephemeral_app (vsock_socket (create)))
(neverallow isolated_app_all ephemeral_app (kcm_socket (create)))
(neverallow isolated_app_all ephemeral_app (qipcrtr_socket (create)))
(neverallow isolated_app_all ephemeral_app (smc_socket (create)))
(neverallow isolated_app_all ephemeral_app (xdp_socket (create)))
(neverallow isolated_app_all sdk_sandbox_all (socket (create)))
(neverallow isolated_app_all sdk_sandbox_all (tcp_socket (create)))
(neverallow isolated_app_all sdk_sandbox_all (udp_socket (create)))
(neverallow isolated_app_all sdk_sandbox_all (rawip_socket (create)))
(neverallow isolated_app_all sdk_sandbox_all (netlink_socket (create)))
(neverallow isolated_app_all sdk_sandbox_all (packet_socket (create)))
(neverallow isolated_app_all sdk_sandbox_all (key_socket (create)))
(neverallow isolated_app_all sdk_sandbox_all (netlink_route_socket (create)))
(neverallow isolated_app_all sdk_sandbox_all (netlink_tcpdiag_socket (create)))
(neverallow isolated_app_all sdk_sandbox_all (netlink_nflog_socket (create)))
(neverallow isolated_app_all sdk_sandbox_all (netlink_xfrm_socket (create)))
(neverallow isolated_app_all sdk_sandbox_all (netlink_selinux_socket (create)))
(neverallow isolated_app_all sdk_sandbox_all (netlink_audit_socket (create)))
(neverallow isolated_app_all sdk_sandbox_all (netlink_dnrt_socket (create)))
(neverallow isolated_app_all sdk_sandbox_all (netlink_kobject_uevent_socket (create)))
(neverallow isolated_app_all sdk_sandbox_all (appletalk_socket (create)))
(neverallow isolated_app_all sdk_sandbox_all (tun_socket (create)))
(neverallow isolated_app_all sdk_sandbox_all (netlink_iscsi_socket (create)))
(neverallow isolated_app_all sdk_sandbox_all (netlink_fib_lookup_socket (create)))
(neverallow isolated_app_all sdk_sandbox_all (netlink_connector_socket (create)))
(neverallow isolated_app_all sdk_sandbox_all (netlink_netfilter_socket (create)))
(neverallow isolated_app_all sdk_sandbox_all (netlink_generic_socket (create)))
(neverallow isolated_app_all sdk_sandbox_all (netlink_scsitransport_socket (create)))
(neverallow isolated_app_all sdk_sandbox_all (netlink_rdma_socket (create)))
(neverallow isolated_app_all sdk_sandbox_all (netlink_crypto_socket (create)))
(neverallow isolated_app_all sdk_sandbox_all (sctp_socket (create)))
(neverallow isolated_app_all sdk_sandbox_all (icmp_socket (create)))
(neverallow isolated_app_all sdk_sandbox_all (ax25_socket (create)))
(neverallow isolated_app_all sdk_sandbox_all (ipx_socket (create)))
(neverallow isolated_app_all sdk_sandbox_all (netrom_socket (create)))
(neverallow isolated_app_all sdk_sandbox_all (atmpvc_socket (create)))
(neverallow isolated_app_all sdk_sandbox_all (x25_socket (create)))
(neverallow isolated_app_all sdk_sandbox_all (rose_socket (create)))
(neverallow isolated_app_all sdk_sandbox_all (decnet_socket (create)))
(neverallow isolated_app_all sdk_sandbox_all (atmsvc_socket (create)))
(neverallow isolated_app_all sdk_sandbox_all (rds_socket (create)))
(neverallow isolated_app_all sdk_sandbox_all (irda_socket (create)))
(neverallow isolated_app_all sdk_sandbox_all (pppox_socket (create)))
(neverallow isolated_app_all sdk_sandbox_all (llc_socket (create)))
(neverallow isolated_app_all sdk_sandbox_all (can_socket (create)))
(neverallow isolated_app_all sdk_sandbox_all (tipc_socket (create)))
(neverallow isolated_app_all sdk_sandbox_all (bluetooth_socket (create)))
(neverallow isolated_app_all sdk_sandbox_all (iucv_socket (create)))
(neverallow isolated_app_all sdk_sandbox_all (rxrpc_socket (create)))
(neverallow isolated_app_all sdk_sandbox_all (isdn_socket (create)))
(neverallow isolated_app_all sdk_sandbox_all (phonet_socket (create)))
(neverallow isolated_app_all sdk_sandbox_all (ieee802154_socket (create)))
(neverallow isolated_app_all sdk_sandbox_all (caif_socket (create)))
(neverallow isolated_app_all sdk_sandbox_all (alg_socket (create)))
(neverallow isolated_app_all sdk_sandbox_all (nfc_socket (create)))
(neverallow isolated_app_all sdk_sandbox_all (vsock_socket (create)))
(neverallow isolated_app_all sdk_sandbox_all (kcm_socket (create)))
(neverallow isolated_app_all sdk_sandbox_all (qipcrtr_socket (create)))
(neverallow isolated_app_all sdk_sandbox_all (smc_socket (create)))
(neverallow isolated_app_all sdk_sandbox_all (xdp_socket (create)))
(neverallow isolated_app_all self (socket (create)))
(neverallow isolated_app_all self (tcp_socket (create)))
(neverallow isolated_app_all self (udp_socket (create)))
(neverallow isolated_app_all self (rawip_socket (create)))
(neverallow isolated_app_all self (netlink_socket (create)))
(neverallow isolated_app_all self (packet_socket (create)))
(neverallow isolated_app_all self (key_socket (create)))
(neverallow isolated_app_all self (netlink_route_socket (create)))
(neverallow isolated_app_all self (netlink_tcpdiag_socket (create)))
(neverallow isolated_app_all self (netlink_nflog_socket (create)))
(neverallow isolated_app_all self (netlink_xfrm_socket (create)))
(neverallow isolated_app_all self (netlink_selinux_socket (create)))
(neverallow isolated_app_all self (netlink_audit_socket (create)))
(neverallow isolated_app_all self (netlink_dnrt_socket (create)))
(neverallow isolated_app_all self (netlink_kobject_uevent_socket (create)))
(neverallow isolated_app_all self (appletalk_socket (create)))
(neverallow isolated_app_all self (tun_socket (create)))
(neverallow isolated_app_all self (netlink_iscsi_socket (create)))
(neverallow isolated_app_all self (netlink_fib_lookup_socket (create)))
(neverallow isolated_app_all self (netlink_connector_socket (create)))
(neverallow isolated_app_all self (netlink_netfilter_socket (create)))
(neverallow isolated_app_all self (netlink_generic_socket (create)))
(neverallow isolated_app_all self (netlink_scsitransport_socket (create)))
(neverallow isolated_app_all self (netlink_rdma_socket (create)))
(neverallow isolated_app_all self (netlink_crypto_socket (create)))
(neverallow isolated_app_all self (sctp_socket (create)))
(neverallow isolated_app_all self (icmp_socket (create)))
(neverallow isolated_app_all self (ax25_socket (create)))
(neverallow isolated_app_all self (ipx_socket (create)))
(neverallow isolated_app_all self (netrom_socket (create)))
(neverallow isolated_app_all self (atmpvc_socket (create)))
(neverallow isolated_app_all self (x25_socket (create)))
(neverallow isolated_app_all self (rose_socket (create)))
(neverallow isolated_app_all self (decnet_socket (create)))
(neverallow isolated_app_all self (atmsvc_socket (create)))
(neverallow isolated_app_all self (rds_socket (create)))
(neverallow isolated_app_all self (irda_socket (create)))
(neverallow isolated_app_all self (pppox_socket (create)))
(neverallow isolated_app_all self (llc_socket (create)))
(neverallow isolated_app_all self (can_socket (create)))
(neverallow isolated_app_all self (tipc_socket (create)))
(neverallow isolated_app_all self (bluetooth_socket (create)))
(neverallow isolated_app_all self (iucv_socket (create)))
(neverallow isolated_app_all self (rxrpc_socket (create)))
(neverallow isolated_app_all self (isdn_socket (create)))
(neverallow isolated_app_all self (phonet_socket (create)))
(neverallow isolated_app_all self (ieee802154_socket (create)))
(neverallow isolated_app_all self (caif_socket (create)))
(neverallow isolated_app_all self (alg_socket (create)))
(neverallow isolated_app_all self (nfc_socket (create)))
(neverallow isolated_app_all self (vsock_socket (create)))
(neverallow isolated_app_all self (kcm_socket (create)))
(neverallow isolated_app_all self (qipcrtr_socket (create)))
(neverallow isolated_app_all self (smc_socket (create)))
(neverallow isolated_app_all self (xdp_socket (create)))
;;* lme

(typetransition isolated_compute_app tmpfs file appdomain_tmpfs)
;;* lmx 14 system/sepolicy/private/isolated_compute_app.te

(allow isolated_compute_app isolated_compute_app_userfaultfd (anon_inode (ioctl read create)))
;;* lme

(dontaudit su isolated_compute_app_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lmx 14 system/sepolicy/private/isolated_compute_app.te

(neverallow base_typeattr_846 isolated_compute_app_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 14 system/sepolicy/private/isolated_compute_app.te

(allow isolated_compute_app appdomain_tmpfs (file (read write getattr map execute)))
;;* lme

;;* lmx 14 system/sepolicy/private/isolated_compute_app.te

(allow isolated_compute_app appdomain (memfd_file (read write getattr map execute)))
;;* lme

;;* lmx 14 system/sepolicy/private/isolated_compute_app.te

(neverallow base_typeattr_847 base_typeattr_846 (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 14 system/sepolicy/private/isolated_compute_app.te

(neverallow base_typeattr_848 isolated_compute_app (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 14 system/sepolicy/private/isolated_compute_app.te

(neverallow base_typeattr_849 isolated_compute_app (process (ptrace)))
;;* lme

;;* lmx 14 system/sepolicy/private/isolated_compute_app.te

(neverallow isolated_compute_app base_typeattr_850 (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 17 system/sepolicy/private/isolated_compute_app.te

(allow isolated_compute_app isolated_compute_allowed_service (service_manager (find)))
;;* lme

;;* lmx 18 system/sepolicy/private/isolated_compute_app.te

(allow isolated_compute_app isolated_compute_allowed_device (chr_file (ioctl read write map)))
;;* lme

;;* lmx 19 system/sepolicy/private/isolated_compute_app.te

(allow isolated_compute_app isolated_compute_allowed_property_type (file (read getattr map open)))
;;* lme

;;* lmx 22 system/sepolicy/private/isolated_compute_app.te

(allow isolated_compute_app hal_allocator (memfd_file (read write getattr map)))
;;* lme

;;* lmx 22 system/sepolicy/private/isolated_compute_app.te

(allow hal_allocator isolated_compute_app (memfd_file (read write getattr map)))
;;* lme

;;* lmx 23 system/sepolicy/private/isolated_compute_app.te

(allow isolated_compute_app hwservicemanager (binder (call transfer)))
;;* lme

;;* lmx 23 system/sepolicy/private/isolated_compute_app.te

(allow hwservicemanager isolated_compute_app (binder (call transfer)))
;;* lme

;;* lmx 25 system/sepolicy/private/isolated_compute_app.te

(allow isolated_compute_app hal_codec2 (memfd_file (read write getattr map)))
;;* lme

;;* lmx 25 system/sepolicy/private/isolated_compute_app.te

(allow hal_codec2 isolated_compute_app (memfd_file (read write getattr map)))
;;* lme

;;* lmx 27 system/sepolicy/private/isolated_compute_app.te

(allow isolated_compute_app dmabuf_system_heap_device (chr_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 31 system/sepolicy/private/isolated_compute_app.te

(allow isolated_compute_app untrusted_app_all (tcp_socket (read write getattr setattr lock append map bind connect getopt setopt shutdown)))
(allow isolated_compute_app untrusted_app_all (udp_socket (read write getattr setattr lock append map bind connect getopt setopt shutdown)))
(allow isolated_compute_app priv_app_all (tcp_socket (read write getattr setattr lock append map bind connect getopt setopt shutdown)))
(allow isolated_compute_app priv_app_all (udp_socket (read write getattr setattr lock append map bind connect getopt setopt shutdown)))
(allow isolated_compute_app ephemeral_app (tcp_socket (read write getattr setattr lock append map bind connect getopt setopt shutdown)))
(allow isolated_compute_app ephemeral_app (udp_socket (read write getattr setattr lock append map bind connect getopt setopt shutdown)))
;;* lme

;;* lmx 34 system/sepolicy/private/isolated_compute_app.te

(allow isolated_compute_app toolbox_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lme

;;* lmx 4 system/sepolicy/private/iw.te

(allow init iw_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 4 system/sepolicy/private/iw.te

(allow init iw (process (transition)))
;;* lme

;;* lmx 4 system/sepolicy/private/iw.te

(allow iw iw_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init iw (process (noatsecure)))
;;* lmx 4 system/sepolicy/private/iw.te

(allow init iw (process (siginh rlimitinh)))
;;* lme

(typetransition init iw_exec process iw)
;;* lmx 6 system/sepolicy/private/kcmdlinectrl.te

(allow init kcmdlinectrl_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 6 system/sepolicy/private/kcmdlinectrl.te

(allow init kcmdlinectrl (process (transition)))
;;* lme

;;* lmx 6 system/sepolicy/private/kcmdlinectrl.te

(allow kcmdlinectrl kcmdlinectrl_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init kcmdlinectrl (process (noatsecure)))
;;* lmx 6 system/sepolicy/private/kcmdlinectrl.te

(allow init kcmdlinectrl (process (siginh rlimitinh)))
;;* lme

(typetransition init kcmdlinectrl_exec process kcmdlinectrl)
;;* lmx 9 system/sepolicy/private/kcmdlinectrl.te

(allow kcmdlinectrl property_socket (sock_file (write)))
;;* lme

;;* lmx 9 system/sepolicy/private/kcmdlinectrl.te

(allow kcmdlinectrl init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 9 system/sepolicy/private/kcmdlinectrl.te

(allow kcmdlinectrl kcmdline_prop (property_service (set)))
;;* lme

;;* lmx 9 system/sepolicy/private/kcmdlinectrl.te

(allow kcmdlinectrl kcmdline_prop (file (read getattr map open)))
;;* lme

;;* lmx 14 system/sepolicy/private/kcmdlinectrl.te

(allow kcmdlinectrl misc_block_device (blk_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 15 system/sepolicy/private/kcmdlinectrl.te

(allow kcmdlinectrl block_device (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 16 system/sepolicy/private/kcmdlinectrl.te

(allow kcmdlinectrl gsi_metadata_file_type (dir (search)))
(allow kcmdlinectrl metadata_file (dir (search)))
;;* lme

;;* lmx 16 system/sepolicy/private/kcmdlinectrl.te

(allow kcmdlinectrl gsi_public_metadata_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 16 system/sepolicy/private/kcmdlinectrl.te

(allow kcmdlinectrl proc_bootconfig (file (ioctl read getattr lock map open watch watch_reads)))
(allow kcmdlinectrl proc_cmdline (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

(dontaudit kcmdlinectrl sysfs_dt_firmware_android (dir (search)))
(dontaudit kcmdlinectrl vendor_property_type (file (read)))
;;* lmx 4 system/sepolicy/private/kcmdlinemodprobe.te

(allow init kcmdlinemodprobe_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 4 system/sepolicy/private/kcmdlinemodprobe.te

(allow init kcmdlinemodprobe (process (transition)))
;;* lme

;;* lmx 4 system/sepolicy/private/kcmdlinemodprobe.te

(allow kcmdlinemodprobe kcmdlinemodprobe_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init kcmdlinemodprobe (process (noatsecure)))
;;* lmx 4 system/sepolicy/private/kcmdlinemodprobe.te

(allow init kcmdlinemodprobe (process (siginh rlimitinh)))
;;* lme

(typetransition init kcmdlinemodprobe_exec process kcmdlinemodprobe)
;;* lmx 8 system/sepolicy/private/kcmdlinemodprobe.te

(allow kcmdlinemodprobe sysfs_binder_impl (file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 11 system/sepolicy/private/kcmdlinemodprobe.te

(allow kcmdlinemodprobe system_dlkm_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 12 system/sepolicy/private/kcmdlinemodprobe.te

(allow kcmdlinemodprobe system_dlkm_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 13 system/sepolicy/private/kcmdlinemodprobe.te

(allow kcmdlinemodprobe system_dlkm_file (system (module_load)))
;;* lme

;;* lmx 14 system/sepolicy/private/kcmdlinemodprobe.te

(allow kcmdlinemodprobe self (capability (sys_module)))
;;* lme

;;* lmx 17 system/sepolicy/private/kcmdlinemodprobe.te

(allow kcmdlinemodprobe proc_cmdline (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 3 system/sepolicy/private/kernel.te

(allow kernel init_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 3 system/sepolicy/private/kernel.te

(allow kernel init (process (transition)))
;;* lme

;;* lmx 3 system/sepolicy/private/kernel.te

(allow init init_exec (file (read getattr map execute open entrypoint)))
;;* lme

;;* lmx 3 system/sepolicy/private/kernel.te

(allow init kernel (process (sigchld)))
;;* lme

(dontaudit kernel init (process (noatsecure)))
;;* lmx 3 system/sepolicy/private/kernel.te

(allow kernel init (process (siginh rlimitinh)))
;;* lme

(typetransition kernel init_exec process init)
;;* lmx 4 system/sepolicy/private/kernel.te

(allow kernel snapuserd_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 4 system/sepolicy/private/kernel.te

(allow kernel snapuserd (process (transition)))
;;* lme

;;* lmx 4 system/sepolicy/private/kernel.te

(allow snapuserd snapuserd_exec (file (read getattr map execute open entrypoint)))
;;* lme

;;* lmx 4 system/sepolicy/private/kernel.te

(allow snapuserd kernel (process (sigchld)))
;;* lme

(dontaudit kernel snapuserd (process (noatsecure)))
;;* lmx 4 system/sepolicy/private/kernel.te

(allow kernel snapuserd (process (siginh rlimitinh)))
;;* lme

(typetransition kernel snapuserd_exec process snapuserd)
;;* lmx 5 system/sepolicy/private/kernel.te

(allow kernel overlay_remounter_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 5 system/sepolicy/private/kernel.te

(allow kernel overlay_remounter (process (transition)))
;;* lme

;;* lmx 5 system/sepolicy/private/kernel.te

(allow overlay_remounter overlay_remounter_exec (file (read getattr map execute open entrypoint)))
;;* lme

;;* lmx 5 system/sepolicy/private/kernel.te

(allow overlay_remounter kernel (process (sigchld)))
;;* lme

(dontaudit kernel overlay_remounter (process (noatsecure)))
;;* lmx 5 system/sepolicy/private/kernel.te

(allow kernel overlay_remounter (process (siginh rlimitinh)))
;;* lme

(typetransition kernel overlay_remounter_exec process overlay_remounter)
;;* lmx 15 system/sepolicy/private/kernel.te

(allow kernel tmpfs (blk_file (getattr relabelfrom)))
;;* lme

;;* lmx 16 system/sepolicy/private/kernel.te

(allow kernel tmpfs (chr_file (create getattr setattr relabelfrom)))
;;* lme

;;* lmx 17 system/sepolicy/private/kernel.te

(allow kernel tmpfs (lnk_file (getattr relabelfrom)))
;;* lme

;;* lmx 18 system/sepolicy/private/kernel.te

(allow kernel tmpfs (dir (read relabelfrom open)))
;;* lme

;;* lmx 20 system/sepolicy/private/kernel.te

(allow kernel block_device (blk_file (relabelto)))
;;* lme

;;* lmx 21 system/sepolicy/private/kernel.te

(allow kernel block_device (lnk_file (relabelto)))
;;* lme

;;* lmx 22 system/sepolicy/private/kernel.te

(allow kernel dm_device (chr_file (relabelto)))
;;* lme

;;* lmx 23 system/sepolicy/private/kernel.te

(allow kernel dm_device (blk_file (read getattr relabelto open)))
;;* lme

;;* lmx 24 system/sepolicy/private/kernel.te

(allow kernel dm_user_device (dir (read relabelto open search)))
;;* lme

;;* lmx 25 system/sepolicy/private/kernel.te

(allow kernel dm_user_device (chr_file (relabelto)))
;;* lme

;;* lmx 26 system/sepolicy/private/kernel.te

(allow kernel kmsg_device (chr_file (relabelto)))
;;* lme

;;* lmx 27 system/sepolicy/private/kernel.te

(allow kernel null_device (chr_file (relabelto)))
;;* lme

;;* lmx 28 system/sepolicy/private/kernel.te

(allow kernel random_device (chr_file (relabelto)))
;;* lme

;;* lmx 29 system/sepolicy/private/kernel.te

(allow kernel snapuserd_exec (file (relabelto)))
;;* lme

(dontaudit kernel sysfs_dm (dir (ioctl read getattr lock open watch watch_reads search)))
(dontaudit kernel sysfs_ublk (dir (ioctl read getattr lock open watch watch_reads search)))
(dontaudit kernel sysfs_ublk (file (write open)))
(dontaudit kernel ublk_block_device (blk_file (ioctl read getattr lock relabelto map open watch watch_reads)))
(dontaudit kernel ublk_control_device (chr_file (getattr relabelto)))
(dontaudit kernel ublk_control_device (io_uring (cmd)))
(dontaudit kernel tmpfs (blk_file (create setattr)))
;;* lmx 43 system/sepolicy/private/kernel.te

(allow kernel kmsg_device (chr_file (write)))
;;* lme

;;* lmx 44 system/sepolicy/private/kernel.te

(allow kernel gsid (fd (use)))
;;* lme

;;* lmx 46 system/sepolicy/private/kernel.te

(allow kernel self (capability (sys_nice)))
(allow kernel self (cap_userns (sys_nice)))
;;* lme

;;* lmx 49 system/sepolicy/private/kernel.te

(allow kernel rootfs (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 49 system/sepolicy/private/kernel.te

(allow kernel rootfs (file (ioctl read getattr lock map open watch watch_reads)))
(allow kernel rootfs (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 55 system/sepolicy/private/kernel.te

(allow kernel proc_bootconfig (file (ioctl read getattr lock map open watch watch_reads)))
(allow kernel proc_cmdline (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 58 system/sepolicy/private/kernel.te

(allow kernel selinuxfs (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 59 system/sepolicy/private/kernel.te

(allow kernel selinuxfs (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 62 system/sepolicy/private/kernel.te

(allow kernel file_contexts_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 65 system/sepolicy/private/kernel.te

(allow kernel rootfs (file (relabelfrom)))
;;* lme

;;* lmx 66 system/sepolicy/private/kernel.te

(allow kernel init_exec (file (relabelto)))
;;* lme

;;* lmx 68 system/sepolicy/private/kernel.te

(allow kernel init (process (share)))
;;* lme

;;* lmx 71 system/sepolicy/private/kernel.te

(allow kernel unlabeled (dir (search)))
;;* lme

;;* lmx 74 system/sepolicy/private/kernel.te

(allow kernel usbfs (filesystem (mount)))
;;* lme

;;* lmx 75 system/sepolicy/private/kernel.te

(allow kernel usbfs (dir (search)))
;;* lme

(dontaudit kernel self (security (setenforce)))
;;* lmx 83 system/sepolicy/private/kernel.te

(allow kernel self (capability (sys_resource)))
(allow kernel self (cap_userns (sys_resource)))
;;* lme

;;* lmx 90 system/sepolicy/private/kernel.te

(allow kernel self (capability (sys_boot)))
(allow kernel self (cap_userns (sys_boot)))
;;* lme

;;* lmx 91 system/sepolicy/private/kernel.te

(allow kernel proc_sysrq (file (write lock append map open)))
;;* lme

;;* lmx 94 system/sepolicy/private/kernel.te

(allow kernel tmpfs (chr_file (write)))
;;* lme

;;* lmx 97 system/sepolicy/private/kernel.te

(allow kernel selinuxfs (file (write)))
;;* lme

;;* lmx 98 system/sepolicy/private/kernel.te

(allow kernel self (security (setcheckreqprot)))
;;* lme

;;* lmx 101 system/sepolicy/private/kernel.te

(allow kernel sdcard_type (file (read write)))
(allow kernel fuse (file (read write)))
;;* lme

;;* lmx 104 system/sepolicy/private/kernel.te

(allow kernel mediaprovider (fd (use)))
;;* lme

;;* lmx 111 system/sepolicy/private/kernel.te

(allow kernel vold (fd (use)))
;;* lme

;;* lmx 112 system/sepolicy/private/kernel.te

(allow kernel app_data_file (file (read)))
(allow kernel privapp_data_file (file (read)))
;;* lme

;;* lmx 113 system/sepolicy/private/kernel.te

(allow kernel asec_image_file (file (read)))
;;* lme

;;* lmx 117 system/sepolicy/private/kernel.te

(allow kernel update_engine_data_file (file (read write)))
;;* lme

;;* lmx 117 system/sepolicy/private/kernel.te

(allow kernel nativetest_data_file (file (read write)))
;;* lme

;;* lmx 125 system/sepolicy/private/kernel.te

(allow kernel media_rw_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 126 system/sepolicy/private/kernel.te

(allow kernel media_rw_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 129 system/sepolicy/private/kernel.te

(allow kernel vold_data_file (file (read write)))
;;* lme

;;* lmx 133 system/sepolicy/private/kernel.te

(allow kernel per_boot_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 138 system/sepolicy/private/kernel.te

(allow kernel apexd (fd (use)))
;;* lme

;;* lmx 143 system/sepolicy/private/kernel.te

(allow kernel apex_data_file (file (read)))
(allow kernel staging_data_file (file (read)))
(allow kernel vendor_apex_file (file (read)))
;;* lme

;;* lmx 146 system/sepolicy/private/kernel.te

(allow kernel shell_data_file (file (read write)))
;;* lme

;;* lmx 157 system/sepolicy/private/kernel.te

(allow kernel system_file (file (execute)))
;;* lme

;;* lmx 170 system/sepolicy/private/kernel.te

(allow kernel self (system (firmware_load)))
;;* lme

;;* lmx 173 system/sepolicy/private/kernel.te

(allow kernel appdomain_tmpfs (file (read write)))
;;* lme

;;* lmx 174 system/sepolicy/private/kernel.te

(allow kernel appdomain (memfd_file (read write)))
;;* lme

;;* lmx 177 system/sepolicy/private/kernel.te

(allow kernel tmpfs (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
;;* lme

;;* lmx 177 system/sepolicy/private/kernel.te

(allow kernel tmpfs (file (ioctl read write create getattr setattr lock relabelfrom append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 177 system/sepolicy/private/kernel.te

(allow kernel overlay_remounter_exec (file (relabelto unlink)))
;;* lme

;;* lmx 177 system/sepolicy/private/kernel.te

(allow kernel overlay_remounter (process2 (nosuid_transition)))
;;* lme

;;* lmx 177 system/sepolicy/private/kernel.te

(allow kernel overlay_remounter (process (share)))
;;* lme

(dontaudit kernel metadata_file (dir (search)))
(dontaudit kernel ota_metadata_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
(dontaudit kernel sysfs (dir (ioctl read getattr lock open watch watch_reads search)))
(dontaudit kernel sysfs (file (read write open)))
(dontaudit kernel sysfs (chr_file (read write open)))
(dontaudit kernel dm_device (chr_file (ioctl)))
(dontaudit kernel self (capability (setgid sys_admin mknod)))
(dontaudit kernel dm_user_device (dir (write add_name)))
(dontaudit kernel dm_user_device (chr_file (create setattr)))
(dontaudit kernel tmpfs (lnk_file (read)))
(dontaudit kernel tmpfs (blk_file (read open)))
;;* lmx 204 system/sepolicy/private/kernel.te

(neverallow base_typeattr_248 kernel (process (transition dyntransition)))
;;* lme

;;* lmx 214 system/sepolicy/private/kernel.te

(neverallow kernel base_typeattr_248 (file (execute_no_trans entrypoint)))
;;* lme

;;* lmx 219 system/sepolicy/private/kernel.te

(neverallow kernel self (capability (dac_override dac_read_search)))
(neverallow kernel self (cap_userns (dac_override dac_read_search)))
;;* lme

;;* lmx 222 system/sepolicy/private/kernel.te

(neverallow base_typeattr_248 kernel (process (ptrace)))
;;* lme

;;* lmx 3 system/sepolicy/private/keystore.te

(allow init keystore_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 3 system/sepolicy/private/keystore.te

(allow init keystore (process (transition)))
;;* lme

;;* lmx 3 system/sepolicy/private/keystore.te

(allow keystore keystore_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init keystore (process (noatsecure)))
;;* lmx 3 system/sepolicy/private/keystore.te

(allow init keystore (process (siginh rlimitinh)))
;;* lme

(typetransition init keystore_exec process keystore)
;;* lmx 6 system/sepolicy/private/keystore.te

(allow keystore hal_keymaster (memfd_file (read write getattr map)))
;;* lme

;;* lmx 6 system/sepolicy/private/keystore.te

(allow hal_keymaster keystore (memfd_file (read write getattr map)))
;;* lme

;;* lmx 9 system/sepolicy/private/keystore.te

(allow keystore hal_confirmationui (memfd_file (read write getattr map)))
;;* lme

;;* lmx 9 system/sepolicy/private/keystore.te

(allow hal_confirmationui keystore (memfd_file (read write getattr map)))
;;* lme

;;* lmx 12 system/sepolicy/private/keystore.te

(allow keystore hal_keymint (memfd_file (read write getattr map)))
;;* lme

;;* lmx 12 system/sepolicy/private/keystore.te

(allow hal_keymint keystore (memfd_file (read write getattr map)))
;;* lme

;;* lmx 15 system/sepolicy/private/keystore.te

(allow keystore hal_hwcrypto (memfd_file (read write getattr map)))
;;* lme

;;* lmx 15 system/sepolicy/private/keystore.te

(allow hal_hwcrypto keystore (memfd_file (read write getattr map)))
;;* lme

;;* lmx 18 system/sepolicy/private/keystore.te

(allow keystore platform_app_all (binder (call)))
;;* lme

;;* lmx 21 system/sepolicy/private/keystore.te

(allow keystore device_logging_prop (file (read getattr map open)))
;;* lme

;;* lmx 24 system/sepolicy/private/keystore.te

(allow keystore remote_prov_prop (file (read getattr map open)))
;;* lme

;;* lmx 27 system/sepolicy/private/keystore.te

(allow keystore remote_prov_cert_prop (file (read getattr map open)))
;;* lme

;;* lmx 30 system/sepolicy/private/keystore.te

(allow keystore device_config_remote_key_provisioning_native_prop (file (read getattr map open)))
;;* lme

;;* lmx 33 system/sepolicy/private/keystore.te

(allow keystore statsdw_socket (sock_file (write)))
;;* lme

;;* lmx 33 system/sepolicy/private/keystore.te

(allow keystore statsd (unix_dgram_socket (sendto)))
;;* lme

;;* lmx 36 system/sepolicy/private/keystore.te

(allow keystore keystore2_key_contexts_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 39 system/sepolicy/private/keystore.te

(allow keystore keystore_listen_prop (file (read getattr map open)))
;;* lme

;;* lmx 43 system/sepolicy/private/keystore.te

(allow keystore vold (binder (transfer)))
;;* lme

;;* lmx 45 system/sepolicy/private/keystore.te

(allow keystore property_socket (sock_file (write)))
;;* lme

;;* lmx 45 system/sepolicy/private/keystore.te

(allow keystore init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 45 system/sepolicy/private/keystore.te

(allow keystore keystore_diagnostics_prop (property_service (set)))
;;* lme

;;* lmx 45 system/sepolicy/private/keystore.te

(allow keystore keystore_diagnostics_prop (file (read getattr map open)))
;;* lme

;;* lmx 48 system/sepolicy/private/keystore.te

(allow keystore apexd_prop (file (read getattr map open)))
;;* lme

;;* lmx 51 system/sepolicy/private/keystore.te

(allow keystore apex_mnt_dir (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 51 system/sepolicy/private/keystore.te

(allow keystore apex_info_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 51 system/sepolicy/private/keystore.te

(allow keystore vendor_apex_metadata_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 51 system/sepolicy/private/keystore.te

(allow keystore vendor_apex_metadata_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow keystore vendor_apex_metadata_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 54 system/sepolicy/private/keystore.te

(allow keystore servicemanager (binder (call transfer)))
;;* lme

;;* lmx 54 system/sepolicy/private/keystore.te

(allow servicemanager keystore (binder (call transfer)))
;;* lme

;;* lmx 56 system/sepolicy/private/keystore.te

(allow keystore remote_provisioning_service_server (binder (call transfer)))
;;* lme

;;* lmx 56 system/sepolicy/private/keystore.te

(allow remote_provisioning_service_server keystore (binder (transfer)))
;;* lme

;;* lmx 56 system/sepolicy/private/keystore.te

(allow keystore remote_provisioning_service_server (fd (use)))
;;* lme

;;* lmx 57 system/sepolicy/private/keystore.te

(allow keystore rkp_cert_processor (binder (call transfer)))
;;* lme

;;* lmx 57 system/sepolicy/private/keystore.te

(allow rkp_cert_processor keystore (binder (transfer)))
;;* lme

;;* lmx 57 system/sepolicy/private/keystore.te

(allow keystore rkp_cert_processor (fd (use)))
;;* lme

;;* lmx 58 system/sepolicy/private/keystore.te

(allow keystore system_server (binder (call transfer)))
;;* lme

;;* lmx 58 system/sepolicy/private/keystore.te

(allow system_server keystore (binder (transfer)))
;;* lme

;;* lmx 58 system/sepolicy/private/keystore.te

(allow keystore system_server (fd (use)))
;;* lme

;;* lmx 59 system/sepolicy/private/keystore.te

(allow keystore wificond (binder (call transfer)))
;;* lme

;;* lmx 59 system/sepolicy/private/keystore.te

(allow wificond keystore (binder (transfer)))
;;* lme

;;* lmx 59 system/sepolicy/private/keystore.te

(allow keystore wificond (fd (use)))
;;* lme

;;* lmx 61 system/sepolicy/private/keystore.te

(allow keystore keystore_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 62 system/sepolicy/private/keystore.te

(allow keystore keystore_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow keystore keystore_data_file (lnk_file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow keystore keystore_data_file (sock_file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow keystore keystore_data_file (fifo_file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 63 system/sepolicy/private/keystore.te

(allow keystore keystore_exec (file (getattr)))
;;* lme

;;* lmx 65 system/sepolicy/private/keystore.te

(allow keystore keystore_service (service_manager (add find)))
;;* lme

;;* lmx 65 system/sepolicy/private/keystore.te

(neverallow base_typeattr_851 keystore_service (service_manager (add)))
;;* lme

;;* lmx 65 system/sepolicy/private/keystore.te

(allow keystore su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 66 system/sepolicy/private/keystore.te

(allow keystore sec_key_att_app_id_provider_service (service_manager (find)))
;;* lme

;;* lmx 67 system/sepolicy/private/keystore.te

(allow keystore remote_provisioning_service (service_manager (find)))
;;* lme

;;* lmx 68 system/sepolicy/private/keystore.te

(allow keystore rkp_cert_processor_service (service_manager (find)))
;;* lme

;;* lmx 71 system/sepolicy/private/keystore.te

(allow keystore apex_service (service_manager (find)))
;;* lme

;;* lmx 72 system/sepolicy/private/keystore.te

(allow keystore apexd (binder (call)))
;;* lme

;;* lmx 75 system/sepolicy/private/keystore.te

(allow keystore package_native_service (service_manager (find)))
;;* lme

;;* lmx 77 system/sepolicy/private/keystore.te

(allow keystore apc_service (service_manager (add find)))
;;* lme

;;* lmx 77 system/sepolicy/private/keystore.te

(neverallow base_typeattr_851 apc_service (service_manager (add)))
;;* lme

;;* lmx 77 system/sepolicy/private/keystore.te

(allow keystore su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 78 system/sepolicy/private/keystore.te

(allow keystore keystore_compat_hal_service (service_manager (add find)))
;;* lme

;;* lmx 78 system/sepolicy/private/keystore.te

(neverallow base_typeattr_851 keystore_compat_hal_service (service_manager (add)))
;;* lme

;;* lmx 78 system/sepolicy/private/keystore.te

(allow keystore su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 79 system/sepolicy/private/keystore.te

(allow keystore authorization_service (service_manager (add find)))
;;* lme

;;* lmx 79 system/sepolicy/private/keystore.te

(neverallow base_typeattr_851 authorization_service (service_manager (add)))
;;* lme

;;* lmx 79 system/sepolicy/private/keystore.te

(allow keystore su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 80 system/sepolicy/private/keystore.te

(allow keystore keystore_maintenance_service (service_manager (add find)))
;;* lme

;;* lmx 80 system/sepolicy/private/keystore.te

(neverallow base_typeattr_851 keystore_maintenance_service (service_manager (add)))
;;* lme

;;* lmx 80 system/sepolicy/private/keystore.te

(allow keystore su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 81 system/sepolicy/private/keystore.te

(allow keystore keystore_metrics_service (service_manager (add find)))
;;* lme

;;* lmx 81 system/sepolicy/private/keystore.te

(neverallow base_typeattr_851 keystore_metrics_service (service_manager (add)))
;;* lme

;;* lmx 81 system/sepolicy/private/keystore.te

(allow keystore su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 82 system/sepolicy/private/keystore.te

(allow keystore legacykeystore_service (service_manager (add find)))
;;* lme

;;* lmx 82 system/sepolicy/private/keystore.te

(neverallow base_typeattr_851 legacykeystore_service (service_manager (add)))
;;* lme

;;* lmx 82 system/sepolicy/private/keystore.te

(allow keystore su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 85 system/sepolicy/private/keystore.te

(allow keystore selinuxfs (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 85 system/sepolicy/private/keystore.te

(allow keystore selinuxfs (file (ioctl read getattr lock map open watch watch_reads)))
(allow keystore selinuxfs (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 85 system/sepolicy/private/keystore.te

(allow keystore selinuxfs (file (write lock append map open)))
;;* lme

;;* lmx 85 system/sepolicy/private/keystore.te

(allow keystore kernel (security (compute_av)))
;;* lme

;;* lmx 85 system/sepolicy/private/keystore.te

(allow keystore self (netlink_selinux_socket (read write create getattr setattr lock relabelfrom relabelto append bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
;;* lme

;;* lmx 87 system/sepolicy/private/keystore.te

(allow keystore cgroup (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 87 system/sepolicy/private/keystore.te

(allow keystore cgroup (file (ioctl read getattr lock map open watch watch_reads)))
(allow keystore cgroup (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 88 system/sepolicy/private/keystore.te

(allow keystore cgroup_v2 (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 88 system/sepolicy/private/keystore.te

(allow keystore cgroup_v2 (file (ioctl read getattr lock map open watch watch_reads)))
(allow keystore cgroup_v2 (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 92 system/sepolicy/private/keystore.te

(allow keystore vendor_security_patch_level_prop (file (read getattr map open)))
;;* lme

;;* lmx 95 system/sepolicy/private/keystore.te

(allow keystore keystore_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 103 system/sepolicy/private/keystore.te

(neverallow base_typeattr_851 keystore_data_file (dir (write lock relabelfrom append map unlink link rename execute quotaon mounton audit_access execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent rmdir)))
;;* lme

;;* lmx 104 system/sepolicy/private/keystore.te

(neverallow base_typeattr_851 keystore_data_file (file (ioctl read write create setattr lock relabelfrom append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow base_typeattr_851 keystore_data_file (lnk_file (ioctl read write create setattr lock relabelfrom append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow base_typeattr_851 keystore_data_file (sock_file (ioctl read write create setattr lock relabelfrom append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow base_typeattr_851 keystore_data_file (fifo_file (ioctl read write create setattr lock relabelfrom append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 106 system/sepolicy/private/keystore.te

(neverallow base_typeattr_852 keystore_data_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 107 system/sepolicy/private/keystore.te

(neverallow base_typeattr_852 keystore_data_file (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow base_typeattr_852 keystore_data_file (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow base_typeattr_852 keystore_data_file (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow base_typeattr_852 keystore_data_file (fifo_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 109 system/sepolicy/private/keystore.te

(neverallow base_typeattr_248 keystore (process (ptrace)))
;;* lme

;;* lmx 113 system/sepolicy/private/keystore.te

(neverallow base_typeattr_852 keystore_diagnostics_prop (property_service (set)))
;;* lme

;;* lmx 4 system/sepolicy/private/linkerconfig.te

(allow init linkerconfig_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 4 system/sepolicy/private/linkerconfig.te

(allow init linkerconfig (process (transition)))
;;* lme

;;* lmx 4 system/sepolicy/private/linkerconfig.te

(allow linkerconfig linkerconfig_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init linkerconfig (process (noatsecure)))
;;* lmx 4 system/sepolicy/private/linkerconfig.te

(allow init linkerconfig (process (siginh rlimitinh)))
;;* lme

(typetransition init linkerconfig_exec process linkerconfig)
;;* lmx 7 system/sepolicy/private/linkerconfig.te

(allow linkerconfig linkerconfig_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 8 system/sepolicy/private/linkerconfig.te

(allow linkerconfig linkerconfig_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 11 system/sepolicy/private/linkerconfig.te

(allow linkerconfig kmsg_device (chr_file (write lock append map open)))
;;* lme

;;* lmx 14 system/sepolicy/private/linkerconfig.te

(allow linkerconfig devpts (chr_file (ioctl read write getattr)))
;;* lme

;;* lmx 17 system/sepolicy/private/linkerconfig.te

(allow linkerconfig apex_mnt_dir (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 20 system/sepolicy/private/linkerconfig.te

(allow linkerconfig apex_info_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 23 system/sepolicy/private/linkerconfig.te

(allow linkerconfig vendor_apex_metadata_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 23 system/sepolicy/private/linkerconfig.te

(allow linkerconfig vendor_apex_metadata_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow linkerconfig vendor_apex_metadata_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 26 system/sepolicy/private/linkerconfig.te

(allow linkerconfig dexopt_chroot_setup (fd (use)))
;;* lme

;;* lmx 34 system/sepolicy/private/linkerconfig.te

(neverallow base_typeattr_853 linkerconfig_exec (file (execute execute_no_trans)))
;;* lme

;;* lmx 4 system/sepolicy/private/linux_vm_setup.te

(allow init linux_vm_setup_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 4 system/sepolicy/private/linux_vm_setup.te

(allow init linux_vm_setup (process (transition)))
;;* lme

;;* lmx 4 system/sepolicy/private/linux_vm_setup.te

(allow linux_vm_setup linux_vm_setup_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init linux_vm_setup (process (noatsecure)))
;;* lmx 4 system/sepolicy/private/linux_vm_setup.te

(allow init linux_vm_setup (process (siginh rlimitinh)))
;;* lme

(typetransition init linux_vm_setup_exec process linux_vm_setup)
;;* lmx 4 system/sepolicy/private/llkd.te

(allow init llkd_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 4 system/sepolicy/private/llkd.te

(allow init llkd (process (transition)))
;;* lme

;;* lmx 4 system/sepolicy/private/llkd.te

(allow llkd llkd_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init llkd (process (noatsecure)))
;;* lmx 4 system/sepolicy/private/llkd.te

(allow init llkd (process (siginh rlimitinh)))
;;* lme

(typetransition init llkd_exec process llkd)
;;* lmx 6 system/sepolicy/private/llkd.te

(allow llkd llkd_prop (file (read getattr map open)))
;;* lme

;;* lmx 8 system/sepolicy/private/llkd.te

(allow llkd self (capability (kill)))
(allow llkd self (cap_userns (kill)))
;;* lme

;;* lmx 9 system/sepolicy/private/llkd.te

(allow llkd self (capability (sys_ptrace sys_admin)))
(allow llkd self (cap_userns (sys_ptrace sys_admin)))
;;* lme

;;* lmx 9 system/sepolicy/private/llkd.te

(allow llkd self (capability (dac_override dac_read_search)))
(allow llkd self (cap_userns (dac_override dac_read_search)))
;;* lme

;;* lmx 16 system/sepolicy/private/llkd.te

(allow llkd self (capability (ipc_lock)))
(allow llkd self (cap_userns (ipc_lock)))
;;* lme

;;* lmx 19 system/sepolicy/private/llkd.te

(allow llkd domain (process (sigkill)))
;;* lme

;;* lmx 22 system/sepolicy/private/llkd.te

(allow llkd base_typeattr_854 (process (ptrace)))
;;* lme

;;* lmx 36 system/sepolicy/private/llkd.te

(allow llkd domain (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 37 system/sepolicy/private/llkd.te

(allow llkd domain (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 38 system/sepolicy/private/llkd.te

(allow llkd domain (lnk_file (read)))
;;* lme

;;* lmx 40 system/sepolicy/private/llkd.te

(allow llkd proc_hung_task (file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 44 system/sepolicy/private/llkd.te

(allow llkd proc_sysrq (file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 45 system/sepolicy/private/llkd.te

(allow llkd kmsg_device (chr_file (write lock append map open)))
;;* lme

;;* lmx 49 system/sepolicy/private/llkd.te

(neverallow base_typeattr_247 llkd (process (transition dyntransition)))
;;* lme

;;* lmx 50 system/sepolicy/private/llkd.te

(neverallow base_typeattr_270 llkd (process (ptrace)))
;;* lme

;;* lmx 53 system/sepolicy/private/llkd.te

(neverallow base_typeattr_248 llkd (process (noatsecure)))
;;* lme

;;* lmx 4 system/sepolicy/private/lmkd.te

(allow init lmkd_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 4 system/sepolicy/private/lmkd.te

(allow init lmkd (process (transition)))
;;* lme

;;* lmx 4 system/sepolicy/private/lmkd.te

(allow lmkd lmkd_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init lmkd (process (noatsecure)))
;;* lmx 4 system/sepolicy/private/lmkd.te

(allow init lmkd (process (siginh rlimitinh)))
;;* lme

(typetransition init lmkd_exec process lmkd)
;;* lmx 7 system/sepolicy/private/lmkd.te

(allow lmkd property_socket (sock_file (write)))
;;* lme

;;* lmx 7 system/sepolicy/private/lmkd.te

(allow lmkd init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 7 system/sepolicy/private/lmkd.te

(allow lmkd system_lmk_prop (property_service (set)))
;;* lme

;;* lmx 7 system/sepolicy/private/lmkd.te

(allow lmkd system_lmk_prop (file (read getattr map open)))
;;* lme

;;* lmx 10 system/sepolicy/private/lmkd.te

(allow lmkd property_socket (sock_file (write)))
;;* lme

;;* lmx 10 system/sepolicy/private/lmkd.te

(allow lmkd init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 10 system/sepolicy/private/lmkd.te

(allow lmkd lmkd_prop (property_service (set)))
;;* lme

;;* lmx 10 system/sepolicy/private/lmkd.te

(allow lmkd lmkd_prop (file (read getattr map open)))
;;* lme

;;* lmx 13 system/sepolicy/private/lmkd.te

(allow lmkd device_config_lmkd_native_prop (file (read getattr map open)))
;;* lme

;;* lmx 16 system/sepolicy/private/lmkd.te

(allow lmkd debugfs_tracing (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 17 system/sepolicy/private/lmkd.te

(allow lmkd self (perf_event (open cpu kernel write)))
;;* lme

;;* lmx 19 system/sepolicy/private/lmkd.te

(allow lmkd fs_bpf (file (read)))
;;* lme

;;* lmx 20 system/sepolicy/private/lmkd.te

(allow lmkd bpfloader (bpf (map_read map_write prog_run)))
;;* lme

;;* lmx 23 system/sepolicy/private/lmkd.te

(allow lmkd fs_bpf_memevents (file (read write)))
;;* lme

;;* lmx 24 system/sepolicy/private/lmkd.te

(allow lmkd fs_bpf_memevents (dir (search)))
;;* lme

;;* lmx 26 system/sepolicy/private/lmkd.te

(allow lmkd self (capability (dac_override dac_read_search kill sys_resource)))
(allow lmkd self (cap_userns (dac_override dac_read_search kill sys_resource)))
;;* lme

;;* lmx 32 system/sepolicy/private/lmkd.te

(allow lmkd self (capability (ipc_lock)))
(allow lmkd self (cap_userns (ipc_lock)))
;;* lme

;;* lmx 36 system/sepolicy/private/lmkd.te

(allow lmkd domain (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 36 system/sepolicy/private/lmkd.te

(allow lmkd domain (file (ioctl read getattr lock map open watch watch_reads)))
(allow lmkd domain (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 37 system/sepolicy/private/lmkd.te

(allow lmkd domain (file (write)))
;;* lme

;;* lmx 40 system/sepolicy/private/lmkd.te

(allow lmkd sysfs_lowmemorykiller (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 40 system/sepolicy/private/lmkd.te

(allow lmkd sysfs_lowmemorykiller (file (ioctl read getattr lock map open watch watch_reads)))
(allow lmkd sysfs_lowmemorykiller (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 41 system/sepolicy/private/lmkd.te

(allow lmkd sysfs_lowmemorykiller (file (write lock append map open)))
;;* lme

;;* lmx 44 system/sepolicy/private/lmkd.te

(allow lmkd domain (process (sigkill setsched)))
;;* lme

;;* lmx 46 system/sepolicy/private/lmkd.te

(allow lmkd kernel (process (setsched)))
;;* lme

;;* lmx 49 system/sepolicy/private/lmkd.te

(allow lmkd cgroup (dir (remove_name rmdir)))
;;* lme

;;* lmx 50 system/sepolicy/private/lmkd.te

(allow lmkd cgroup_v2 (dir (remove_name rmdir)))
;;* lme

;;* lmx 53 system/sepolicy/private/lmkd.te

(allow lmkd cgroup (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 54 system/sepolicy/private/lmkd.te

(allow lmkd cgroup_v2 (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 57 system/sepolicy/private/lmkd.te

(allow lmkd self (capability (sys_nice)))
(allow lmkd self (cap_userns (sys_nice)))
;;* lme

;;* lmx 59 system/sepolicy/private/lmkd.te

(allow lmkd proc_zoneinfo (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 60 system/sepolicy/private/lmkd.te

(allow lmkd proc_vmstat (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 63 system/sepolicy/private/lmkd.te

(allow lmkd domain (dir (read open search)))
;;* lme

;;* lmx 64 system/sepolicy/private/lmkd.te

(allow lmkd domain (file (read open)))
;;* lme

;;* lmx 68 system/sepolicy/private/lmkd.te

(allow lmkd proc_sysrq (file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 71 system/sepolicy/private/lmkd.te

(allow lmkd proc_lowmemorykiller (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 74 system/sepolicy/private/lmkd.te

(allow lmkd proc_meminfo (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 77 system/sepolicy/private/lmkd.te

(allow lmkd proc_pressure_cpu (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 78 system/sepolicy/private/lmkd.te

(allow lmkd proc_pressure_io (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 81 system/sepolicy/private/lmkd.te

(allow lmkd proc_pressure_mem (file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 84 system/sepolicy/private/lmkd.te

(allow lmkd lmkd_socket (sock_file (write)))
;;* lme

;;* lmx 87 system/sepolicy/private/lmkd.te

(allow lmkd statsdw_socket (sock_file (write)))
;;* lme

;;* lmx 87 system/sepolicy/private/lmkd.te

(allow lmkd statsd (unix_dgram_socket (sendto)))
;;* lme

;;* lmx 92 system/sepolicy/private/lmkd.te

(neverallow base_typeattr_248 lmkd (process (noatsecure)))
;;* lme

;;* lmx 93 system/sepolicy/private/lmkd.te

(neverallow lmkd self (capability (sys_ptrace)))
(neverallow lmkd self (cap_userns (sys_ptrace)))
;;* lme

;;* lmx 94 system/sepolicy/private/lmkd.te

(neverallow base_typeattr_855 lmkd_prop (property_service (set)))
;;* lme

;;* lmx 95 system/sepolicy/private/lmkd.te

(neverallow lmkd self (perf_event (tracepoint read)))
;;* lme

;;* lmx 3 system/sepolicy/private/logd.te

(allow init logd_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 3 system/sepolicy/private/logd.te

(allow init logd (process (transition)))
;;* lme

;;* lmx 3 system/sepolicy/private/logd.te

(allow logd logd_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init logd (process (noatsecure)))
;;* lmx 3 system/sepolicy/private/logd.te

(allow init logd (process (siginh rlimitinh)))
;;* lme

(typetransition init logd_exec process logd)
;;* lmx 6 system/sepolicy/private/logd.te

(allow logd device_logging_prop (file (read getattr map open)))
;;* lme

;;* lmx 17 system/sepolicy/private/logd.te

(neverallow logd base_typeattr_856 (file (write create append)))
;;* lme

;;* lmx 32 system/sepolicy/private/logd.te

(neverallow base_typeattr_857 runtime_event_log_tags_file (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 43 system/sepolicy/private/logd.te

(neverallow base_typeattr_858 runtime_event_log_tags_file (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 46 system/sepolicy/private/logd.te

(allow logd servicemanager (binder (call transfer)))
;;* lme

;;* lmx 46 system/sepolicy/private/logd.te

(allow servicemanager logd (binder (call transfer)))
;;* lme

;;* lmx 48 system/sepolicy/private/logd.te

(allow logd system_server (binder (call transfer)))
;;* lme

;;* lmx 48 system/sepolicy/private/logd.te

(allow system_server logd (binder (transfer)))
;;* lme

;;* lmx 48 system/sepolicy/private/logd.te

(allow logd system_server (fd (use)))
;;* lme

;;* lmx 50 system/sepolicy/private/logd.te

(allow logd logd_service (service_manager (add find)))
;;* lme

;;* lmx 50 system/sepolicy/private/logd.te

(neverallow base_typeattr_859 logd_service (service_manager (add)))
;;* lme

;;* lmx 50 system/sepolicy/private/logd.te

(allow logd su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 51 system/sepolicy/private/logd.te

(allow logd logcat_service (service_manager (find)))
;;* lme

;;* lmx 54 system/sepolicy/private/logd.te

(allow logd cgroup (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 54 system/sepolicy/private/logd.te

(allow logd cgroup (file (ioctl read getattr lock map open watch watch_reads)))
(allow logd cgroup (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 55 system/sepolicy/private/logd.te

(allow logd cgroup_v2 (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 55 system/sepolicy/private/logd.te

(allow logd cgroup_v2 (file (ioctl read getattr lock map open watch watch_reads)))
(allow logd cgroup_v2 (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 56 system/sepolicy/private/logd.te

(allow logd proc_kmsg (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 56 system/sepolicy/private/logd.te

(allow logd proc_kmsg (file (ioctl read getattr lock map open watch watch_reads)))
(allow logd proc_kmsg (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 57 system/sepolicy/private/logd.te

(allow logd proc_meminfo (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 57 system/sepolicy/private/logd.te

(allow logd proc_meminfo (file (ioctl read getattr lock map open watch watch_reads)))
(allow logd proc_meminfo (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 59 system/sepolicy/private/logd.te

(allow logd self (capability (setgid setuid setpcap sys_nice audit_control)))
(allow logd self (cap_userns (setgid setuid setpcap sys_nice audit_control)))
;;* lme

;;* lmx 60 system/sepolicy/private/logd.te

(allow logd self (capability2 (syslog)))
(allow logd self (cap2_userns (syslog)))
;;* lme

;;* lmx 61 system/sepolicy/private/logd.te

(allow logd self (netlink_audit_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
;;* lme

;;* lmx 64 system/sepolicy/private/logd.te

(allow logd self (netlink_audit_socket (nlmsg_write)))
;;* lme

;;* lmx 66 system/sepolicy/private/logd.te

(allow logd self (netlink_audit_socket (nlmsg)))
;;* lme

;;* lmx 67 system/sepolicy/private/logd.te

(allowx logd self (nlmsg netlink_audit_socket (0x3e9)))
;;* lme

;;* lmx 67 system/sepolicy/private/logd.te

(allowx logd self (nlmsg netlink_audit_socket (0x453)))
;;* lme

;;* lmx 69 system/sepolicy/private/logd.te

(allow logd kernel (system (syslog_read)))
;;* lme

;;* lmx 70 system/sepolicy/private/logd.te

(allow logd kmsg_device (chr_file (write getattr lock append map open)))
;;* lme

;;* lmx 71 system/sepolicy/private/logd.te

(allow logd system_data_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow logd system_data_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 72 system/sepolicy/private/logd.te

(allow logd packages_list_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 73 system/sepolicy/private/logd.te

(allow logd pstorefs (dir (search)))
;;* lme

;;* lmx 74 system/sepolicy/private/logd.te

(allow logd pstorefs (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 75 system/sepolicy/private/logd.te

(allow logd misc_logd_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 75 system/sepolicy/private/logd.te

(allow logd misc_logd_file (file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 80 system/sepolicy/private/logd.te

(allow logd runtime_event_log_tags_file (file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 82 system/sepolicy/private/logd.te

(allow logd domain (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 82 system/sepolicy/private/logd.te

(allow logd domain (file (ioctl read getattr lock map open watch watch_reads)))
(allow logd domain (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 84 system/sepolicy/private/logd.te

(allow logd kernel (system (syslog_mod)))
;;* lme

;;* lmx 86 system/sepolicy/private/logd.te

(allow logd logd_socket (sock_file (write)))
;;* lme

;;* lmx 86 system/sepolicy/private/logd.te

(allow logd logd (unix_stream_socket (connectto)))
;;* lme

;;* lmx 87 system/sepolicy/private/logd.te

(allow logd runtime_event_log_tags_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 89 system/sepolicy/private/logd.te

(allow runtime_event_log_tags_file tmpfs (filesystem (associate)))
;;* lme

(dontaudit domain runtime_event_log_tags_file (file (read map open)))
;;* lmx 98 system/sepolicy/private/logd.te

(allow logd property_socket (sock_file (write)))
;;* lme

;;* lmx 98 system/sepolicy/private/logd.te

(allow logd init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 98 system/sepolicy/private/logd.te

(allow logd logd_prop (property_service (set)))
;;* lme

;;* lmx 98 system/sepolicy/private/logd.te

(allow logd logd_prop (file (read getattr map open)))
;;* lme

;;* lmx 101 system/sepolicy/private/logd.te

(allow logd logd_iouring (anon_inode (read write create map)))
;;* lme

;;* lmx 101 system/sepolicy/private/logd.te

(allow logd self (io_uring (sqpoll allowed)))
;;* lme

;;* lmx 101 system/sepolicy/private/logd.te

(neverallow base_typeattr_859 logd_iouring (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

(dontaudit logd self (capability (ipc_lock)))
(dontaudit logd self (cap_userns (ipc_lock)))
;;* lmx 109 system/sepolicy/private/logd.te

(neverallow logd dev_type (blk_file (read write)))
;;* lme

;;* lmx 112 system/sepolicy/private/logd.te

(neverallow logd domain (process (ptrace)))
;;* lme

;;* lmx 115 system/sepolicy/private/logd.te

(neverallow base_typeattr_860 logd (process (ptrace)))
;;* lme

;;* lmx 118 system/sepolicy/private/logd.te

(neverallow logd system_file_type (file (write)))
(neverallow logd system_file_type (dir (write)))
(neverallow logd system_file_type (lnk_file (write)))
(neverallow logd system_file_type (chr_file (write)))
(neverallow logd system_file_type (blk_file (write)))
(neverallow logd system_file_type (sock_file (write)))
(neverallow logd system_file_type (fifo_file (write)))
;;* lme

;;* lmx 126 system/sepolicy/private/logd.te

(neverallow logd base_typeattr_861 (file (write)))
(neverallow logd base_typeattr_861 (dir (write)))
(neverallow logd base_typeattr_861 (lnk_file (write)))
(neverallow logd base_typeattr_861 (chr_file (write)))
(neverallow logd base_typeattr_861 (blk_file (write)))
(neverallow logd base_typeattr_861 (sock_file (write)))
(neverallow logd base_typeattr_861 (fifo_file (write)))
;;* lme

;;* lmx 129 system/sepolicy/private/logd.te

(neverallow base_typeattr_247 logd (process (transition)))
;;* lme

;;* lmx 130 system/sepolicy/private/logd.te

(neverallow base_typeattr_248 logd (process (dyntransition)))
;;* lme

;;* lmx 137 system/sepolicy/private/logd.te

(neverallow base_typeattr_862 runtime_event_log_tags_file (file (write create setattr relabelfrom append unlink link rename)))
;;* lme

;;* lmx 4 system/sepolicy/private/logpersist.te

(allow logpersist cgroup (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 4 system/sepolicy/private/logpersist.te

(allow logpersist cgroup (file (ioctl read getattr lock map open watch watch_reads)))
(allow logpersist cgroup (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 4 system/sepolicy/private/logpersist.te

(allow logpersist cgroup_v2 (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 4 system/sepolicy/private/logpersist.te

(allow logpersist cgroup_v2 (file (ioctl read getattr lock map open watch watch_reads)))
(allow logpersist cgroup_v2 (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 4 system/sepolicy/private/logpersist.te

(allow logpersist misc_logd_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 4 system/sepolicy/private/logpersist.te

(allow logpersist misc_logd_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
;;* lme

;;* lmx 4 system/sepolicy/private/logpersist.te

(allow logpersist self (capability (sys_nice)))
(allow logpersist self (cap_userns (sys_nice)))
;;* lme

;;* lmx 4 system/sepolicy/private/logpersist.te

(allow logpersist pstorefs (dir (search)))
;;* lme

;;* lmx 4 system/sepolicy/private/logpersist.te

(allow logpersist pstorefs (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 4 system/sepolicy/private/logpersist.te

(allow logpersist logd_socket (sock_file (write)))
;;* lme

;;* lmx 4 system/sepolicy/private/logpersist.te

(allow logpersist logd (unix_stream_socket (connectto)))
;;* lme

;;* lmx 4 system/sepolicy/private/logpersist.te

(allow logpersist logdr_socket (sock_file (write)))
;;* lme

;;* lmx 4 system/sepolicy/private/logpersist.te

(allow logpersist logd (unix_stream_socket (connectto)))
;;* lme

;;* lmx 4 system/sepolicy/private/logpersist.te

(allow logpersist logd_prop (file (read getattr map open)))
;;* lme

;;* lmx 4 system/sepolicy/private/logpersist.te

(allow logpersist runtime_event_log_tags_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 24 system/sepolicy/private/logpersist.te

(allow logpersist shell_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lme

;;* lmx 25 system/sepolicy/private/logpersist.te

(allow logpersist logcat_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lme

;;* lmx 30 system/sepolicy/private/logpersist.te

(allowx logpersist misc_logd_file (ioctl file (0x6602)))
;;* lme

;;* lmx 30 system/sepolicy/private/logpersist.te

(allowx logpersist misc_logd_file (ioctl file (0xf512)))
;;* lme

;;* lmx 38 system/sepolicy/private/logpersist.te

(neverallow logpersist dev_type (blk_file (read write)))
;;* lme

;;* lmx 41 system/sepolicy/private/logpersist.te

(neverallow logpersist domain (process (ptrace)))
;;* lme

;;* lmx 44 system/sepolicy/private/logpersist.te

(neverallow logpersist app_data_file_type (file (write)))
(neverallow logpersist app_data_file_type (dir (write)))
(neverallow logpersist app_data_file_type (lnk_file (write)))
(neverallow logpersist app_data_file_type (chr_file (write)))
(neverallow logpersist app_data_file_type (blk_file (write)))
(neverallow logpersist app_data_file_type (sock_file (write)))
(neverallow logpersist app_data_file_type (fifo_file (write)))
(neverallow logpersist system_data_file (file (write)))
(neverallow logpersist system_data_file (dir (write)))
(neverallow logpersist system_data_file (lnk_file (write)))
(neverallow logpersist system_data_file (chr_file (write)))
(neverallow logpersist system_data_file (blk_file (write)))
(neverallow logpersist system_data_file (sock_file (write)))
(neverallow logpersist system_data_file (fifo_file (write)))
;;* lme

;;* lmx 54 system/sepolicy/private/logpersist.te

(neverallow base_typeattr_248 logpersist (process (dyntransition)))
;;* lme

;;* lmx 61 system/sepolicy/private/logpersist.te

(neverallow logpersist base_typeattr_863 (file (write create append)))
;;* lme

;;* lmx 62 system/sepolicy/private/logpersist.te

(neverallow base_typeattr_864 misc_logd_file (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 63 system/sepolicy/private/logpersist.te

(neverallow base_typeattr_865 misc_logd_file (file (write create setattr relabelfrom append unlink link rename)))
;;* lme

;;* lmx 64 system/sepolicy/private/logpersist.te

(neverallow base_typeattr_865 misc_logd_file (dir (write relabelfrom link rename add_name remove_name reparent rmdir)))
;;* lme

;;* lmx 4 system/sepolicy/private/lpdumpd.te

(allow init lpdumpd_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 4 system/sepolicy/private/lpdumpd.te

(allow init lpdumpd (process (transition)))
;;* lme

;;* lmx 4 system/sepolicy/private/lpdumpd.te

(allow lpdumpd lpdumpd_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init lpdumpd (process (noatsecure)))
;;* lmx 4 system/sepolicy/private/lpdumpd.te

(allow init lpdumpd (process (siginh rlimitinh)))
;;* lme

(typetransition init lpdumpd_exec process lpdumpd)
;;* lmx 7 system/sepolicy/private/lpdumpd.te

(allow lpdumpd servicemanager (binder (call transfer)))
;;* lme

;;* lmx 7 system/sepolicy/private/lpdumpd.te

(allow servicemanager lpdumpd (binder (call transfer)))
;;* lme

;;* lmx 8 system/sepolicy/private/lpdumpd.te

(allow lpdumpd lpdump_service (service_manager (add find)))
;;* lme

;;* lmx 8 system/sepolicy/private/lpdumpd.te

(neverallow base_typeattr_866 lpdump_service (service_manager (add)))
;;* lme

;;* lmx 8 system/sepolicy/private/lpdumpd.te

(allow lpdumpd su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 11 system/sepolicy/private/lpdumpd.te

(allow lpdumpd block_device (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 14 system/sepolicy/private/lpdumpd.te

(allow lpdumpd super_block_device_type (blk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 17 system/sepolicy/private/lpdumpd.te

(allow lpdumpd sysfs_dt_firmware_android (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 18 system/sepolicy/private/lpdumpd.te

(allow lpdumpd sysfs_dt_firmware_android (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 19 system/sepolicy/private/lpdumpd.te

(allow lpdumpd gsi_metadata_file_type (dir (search)))
(allow lpdumpd metadata_file (dir (search)))
;;* lme

;;* lmx 19 system/sepolicy/private/lpdumpd.te

(allow lpdumpd gsi_public_metadata_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 19 system/sepolicy/private/lpdumpd.te

(allow lpdumpd proc_bootconfig (file (ioctl read getattr lock map open watch watch_reads)))
(allow lpdumpd proc_cmdline (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 22 system/sepolicy/private/lpdumpd.te

(allow lpdumpd sysfs_dt_firmware_android (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 22 system/sepolicy/private/lpdumpd.te

(allow lpdumpd sysfs_dt_firmware_android (file (ioctl read getattr lock map open watch watch_reads)))
(allow lpdumpd sysfs_dt_firmware_android (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 23 system/sepolicy/private/lpdumpd.te

(allow lpdumpd proc_cmdline (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 26 system/sepolicy/private/lpdumpd.te

(allow lpdumpd virtual_ab_prop (file (read getattr map open)))
;;* lme

;;* lmx 27 system/sepolicy/private/lpdumpd.te

(allow lpdumpd metadata_file (dir (search)))
;;* lme

;;* lmx 28 system/sepolicy/private/lpdumpd.te

(allow lpdumpd ota_metadata_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 29 system/sepolicy/private/lpdumpd.te

(allow lpdumpd ota_metadata_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 39 system/sepolicy/private/lpdumpd.te

(neverallow base_typeattr_867 lpdump_service (service_manager (find)))
;;* lme

;;* lmx 47 system/sepolicy/private/lpdumpd.te

(neverallow base_typeattr_868 lpdumpd (binder (call)))
;;* lme

;;* lmx 7 system/sepolicy/private/mdnsd.te

(allow init mdnsd_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 7 system/sepolicy/private/mdnsd.te

(allow init mdnsd (process (transition)))
;;* lme

;;* lmx 7 system/sepolicy/private/mdnsd.te

(allow mdnsd mdnsd_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init mdnsd (process (noatsecure)))
;;* lmx 7 system/sepolicy/private/mdnsd.te

(allow init mdnsd (process (siginh rlimitinh)))
;;* lme

(typetransition init mdnsd_exec process mdnsd)
;;* lmx 12 system/sepolicy/private/mdnsd.te

(allow mdnsd proc_net_type (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 12 system/sepolicy/private/mdnsd.te

(allow mdnsd proc_net_type (file (ioctl read getattr lock map open watch watch_reads)))
(allow mdnsd proc_net_type (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 4 system/sepolicy/private/mediacodeclist_generator.te

(allow init mediacodeclist_generator_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 4 system/sepolicy/private/mediacodeclist_generator.te

(allow init mediacodeclist_generator (process (transition)))
;;* lme

;;* lmx 4 system/sepolicy/private/mediacodeclist_generator.te

(allow mediacodeclist_generator mediacodeclist_generator_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init mediacodeclist_generator (process (noatsecure)))
;;* lmx 4 system/sepolicy/private/mediacodeclist_generator.te

(allow init mediacodeclist_generator (process (siginh rlimitinh)))
;;* lme

(typetransition init mediacodeclist_generator_exec process mediacodeclist_generator)
;;* lmx 6 system/sepolicy/private/mediacodeclist_generator.te

(allow mediacodeclist_generator servicemanager (binder (call transfer)))
;;* lme

;;* lmx 6 system/sepolicy/private/mediacodeclist_generator.te

(allow servicemanager mediacodeclist_generator (binder (call transfer)))
;;* lme

;;* lmx 7 system/sepolicy/private/mediacodeclist_generator.te

(allow mediacodeclist_generator mediacodeclist_generator_service (service_manager (add find)))
;;* lme

;;* lmx 7 system/sepolicy/private/mediacodeclist_generator.te

(neverallow base_typeattr_869 mediacodeclist_generator_service (service_manager (add)))
;;* lme

;;* lmx 7 system/sepolicy/private/mediacodeclist_generator.te

(allow mediacodeclist_generator su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 10 system/sepolicy/private/mediacodeclist_generator.te

(allow mediacodeclist_generator hal_omx (memfd_file (read write getattr map)))
;;* lme

;;* lmx 10 system/sepolicy/private/mediacodeclist_generator.te

(allow hal_omx mediacodeclist_generator (memfd_file (read write getattr map)))
;;* lme

;;* lmx 11 system/sepolicy/private/mediacodeclist_generator.te

(allow mediacodeclist_generator hal_codec2 (memfd_file (read write getattr map)))
;;* lme

;;* lmx 11 system/sepolicy/private/mediacodeclist_generator.te

(allow hal_codec2 mediacodeclist_generator (memfd_file (read write getattr map)))
;;* lme

;;* lmx 3 system/sepolicy/private/mediadrmserver.te

(allow init mediadrmserver_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 3 system/sepolicy/private/mediadrmserver.te

(allow init mediadrmserver (process (transition)))
;;* lme

;;* lmx 3 system/sepolicy/private/mediadrmserver.te

(allow mediadrmserver mediadrmserver_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init mediadrmserver (process (noatsecure)))
;;* lmx 3 system/sepolicy/private/mediadrmserver.te

(allow init mediadrmserver (process (siginh rlimitinh)))
;;* lme

(typetransition init mediadrmserver_exec process mediadrmserver)
;;* lmx 6 system/sepolicy/private/mediadrmserver.te

(allow mediadrmserver hal_graphics_allocator (memfd_file (read write getattr map)))
;;* lme

;;* lmx 6 system/sepolicy/private/mediadrmserver.te

(allow hal_graphics_allocator mediadrmserver (memfd_file (read write getattr map)))
;;* lme

(auditallow mediadrmserver hal_graphics_allocator_server (binder (call)))
;;* lmx 12 system/sepolicy/private/mediadrmserver.te

(allow mediadrmserver servicemanager (binder (call transfer)))
;;* lme

;;* lmx 12 system/sepolicy/private/mediadrmserver.te

(allow servicemanager mediadrmserver (binder (call transfer)))
;;* lme

;;* lmx 13 system/sepolicy/private/mediadrmserver.te

(allow mediadrmserver binderservicedomain (binder (call transfer)))
;;* lme

;;* lmx 13 system/sepolicy/private/mediadrmserver.te

(allow binderservicedomain mediadrmserver (binder (transfer)))
;;* lme

;;* lmx 13 system/sepolicy/private/mediadrmserver.te

(allow mediadrmserver binderservicedomain (fd (use)))
;;* lme

;;* lmx 14 system/sepolicy/private/mediadrmserver.te

(allow mediadrmserver appdomain (binder (call transfer)))
;;* lme

;;* lmx 14 system/sepolicy/private/mediadrmserver.te

(allow appdomain mediadrmserver (binder (transfer)))
;;* lme

;;* lmx 14 system/sepolicy/private/mediadrmserver.te

(allow mediadrmserver appdomain (fd (use)))
;;* lme

;;* lmx 16 system/sepolicy/private/mediadrmserver.te

(allow mediadrmserver hal_drm (memfd_file (read write getattr map)))
;;* lme

;;* lmx 16 system/sepolicy/private/mediadrmserver.te

(allow hal_drm mediadrmserver (memfd_file (read write getattr map)))
;;* lme

;;* lmx 18 system/sepolicy/private/mediadrmserver.te

(allow mediadrmserver mediadrmserver_service (service_manager (add find)))
;;* lme

;;* lmx 18 system/sepolicy/private/mediadrmserver.te

(neverallow base_typeattr_870 mediadrmserver_service (service_manager (add)))
;;* lme

;;* lmx 18 system/sepolicy/private/mediadrmserver.te

(allow mediadrmserver su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 19 system/sepolicy/private/mediadrmserver.te

(allow mediadrmserver mediaserver_service (service_manager (find)))
;;* lme

;;* lmx 20 system/sepolicy/private/mediadrmserver.te

(allow mediadrmserver mediametrics_service (service_manager (find)))
;;* lme

;;* lmx 21 system/sepolicy/private/mediadrmserver.te

(allow mediadrmserver processinfo_service (service_manager (find)))
;;* lme

;;* lmx 22 system/sepolicy/private/mediadrmserver.te

(allow mediadrmserver surfaceflinger_service (service_manager (find)))
;;* lme

;;* lmx 23 system/sepolicy/private/mediadrmserver.te

(allow mediadrmserver system_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 26 system/sepolicy/private/mediadrmserver.te

(allow mediadrmserver hal_omx_server (binder (call transfer)))
;;* lme

;;* lmx 26 system/sepolicy/private/mediadrmserver.te

(allow hal_omx_server mediadrmserver (binder (transfer)))
;;* lme

;;* lmx 26 system/sepolicy/private/mediadrmserver.te

(allow mediadrmserver hal_omx_server (fd (use)))
;;* lme

;;* lmx 34 system/sepolicy/private/mediadrmserver.te

(neverallow mediadrmserver fs_type (file (execute_no_trans)))
(neverallow mediadrmserver file_type (file (execute_no_trans)))
;;* lme

;;* lmx 37 system/sepolicy/private/mediadrmserver.te

(neverallowx mediadrmserver domain (ioctl tcp_socket (0x6900 0x6902)))
(neverallowx mediadrmserver domain (ioctl udp_socket (0x6900 0x6902)))
(neverallowx mediadrmserver domain (ioctl rawip_socket (0x6900 0x6902)))
;;* lme

;;* lmx 37 system/sepolicy/private/mediadrmserver.te

(neverallowx mediadrmserver domain (ioctl tcp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx mediadrmserver domain (ioctl udp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx mediadrmserver domain (ioctl rawip_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
;;* lme

;;* lmx 37 system/sepolicy/private/mediadrmserver.te

(neverallowx mediadrmserver domain (ioctl tcp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx mediadrmserver domain (ioctl udp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx mediadrmserver domain (ioctl rawip_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
;;* lme

;;* lmx 3 system/sepolicy/private/mediaextractor.te

(allow init mediaextractor_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 3 system/sepolicy/private/mediaextractor.te

(allow init mediaextractor (process (transition)))
;;* lme

;;* lmx 3 system/sepolicy/private/mediaextractor.te

(allow mediaextractor mediaextractor_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init mediaextractor (process (noatsecure)))
;;* lmx 3 system/sepolicy/private/mediaextractor.te

(allow init mediaextractor (process (siginh rlimitinh)))
;;* lme

(typetransition init mediaextractor_exec process mediaextractor)
(typetransition mediaextractor tmpfs file mediaextractor_tmpfs)
;;* lmx 4 system/sepolicy/private/mediaextractor.te

(allow mediaextractor mediaextractor_tmpfs (file (read write getattr map)))
;;* lme

;;* lmx 5 system/sepolicy/private/mediaextractor.te

(allow mediaextractor appdomain_tmpfs (file (read write getattr map)))
;;* lme

;;* lmx 6 system/sepolicy/private/mediaextractor.te

(allow mediaextractor mediaserver_tmpfs (file (read write getattr map)))
;;* lme

;;* lmx 7 system/sepolicy/private/mediaextractor.te

(allow mediaextractor system_server_tmpfs (file (read write getattr map)))
;;* lme

;;* lmx 8 system/sepolicy/private/mediaextractor.te

(allow mediaextractor appdomain (memfd_file (read write getattr map)))
;;* lme

;;* lmx 9 system/sepolicy/private/mediaextractor.te

(allow mediaextractor mediaserver (memfd_file (read write getattr map)))
;;* lme

;;* lmx 10 system/sepolicy/private/mediaextractor.te

(allow mediaextractor mediatranscoding (memfd_file (read write getattr map)))
;;* lme

;;* lmx 11 system/sepolicy/private/mediaextractor.te

(allow mediaextractor system_server (memfd_file (read write getattr map)))
;;* lme

;;* lmx 13 system/sepolicy/private/mediaextractor.te

(allow mediaextractor device_config_media_native_prop (file (read getattr map open)))
;;* lme

;;* lmx 14 system/sepolicy/private/mediaextractor.te

(allow mediaextractor device_config_swcodec_native_prop (file (read getattr map open)))
;;* lme

;;* lmx 18 system/sepolicy/private/mediaextractor.te

(allow mediaextractor servicemanager (binder (call transfer)))
;;* lme

;;* lmx 18 system/sepolicy/private/mediaextractor.te

(allow servicemanager mediaextractor (binder (call transfer)))
;;* lme

;;* lmx 19 system/sepolicy/private/mediaextractor.te

(allow mediaextractor binderservicedomain (binder (call transfer)))
;;* lme

;;* lmx 19 system/sepolicy/private/mediaextractor.te

(allow binderservicedomain mediaextractor (binder (transfer)))
;;* lme

;;* lmx 19 system/sepolicy/private/mediaextractor.te

(allow mediaextractor binderservicedomain (fd (use)))
;;* lme

;;* lmx 20 system/sepolicy/private/mediaextractor.te

(allow mediaextractor appdomain (binder (call transfer)))
;;* lme

;;* lmx 20 system/sepolicy/private/mediaextractor.te

(allow appdomain mediaextractor (binder (transfer)))
;;* lme

;;* lmx 20 system/sepolicy/private/mediaextractor.te

(allow mediaextractor appdomain (fd (use)))
;;* lme

;;* lmx 23 system/sepolicy/private/mediaextractor.te

(allow mediaextractor mediaextractor_service (service_manager (add find)))
;;* lme

;;* lmx 23 system/sepolicy/private/mediaextractor.te

(neverallow base_typeattr_871 mediaextractor_service (service_manager (add)))
;;* lme

;;* lmx 23 system/sepolicy/private/mediaextractor.te

(allow mediaextractor su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 24 system/sepolicy/private/mediaextractor.te

(allow mediaextractor mediametrics_service (service_manager (find)))
;;* lme

;;* lmx 25 system/sepolicy/private/mediaextractor.te

(allow mediaextractor hidl_token_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 27 system/sepolicy/private/mediaextractor.te

(allow mediaextractor system_server (fd (use)))
;;* lme

;;* lmx 29 system/sepolicy/private/mediaextractor.te

(allow mediaextractor hal_cas (memfd_file (read write getattr map)))
;;* lme

;;* lmx 29 system/sepolicy/private/mediaextractor.te

(allow hal_cas mediaextractor (memfd_file (read write getattr map)))
;;* lme

;;* lmx 30 system/sepolicy/private/mediaextractor.te

(allow mediaextractor hal_allocator (memfd_file (read write getattr map)))
;;* lme

;;* lmx 30 system/sepolicy/private/mediaextractor.te

(allow hal_allocator mediaextractor (memfd_file (read write getattr map)))
;;* lme

;;* lmx 32 system/sepolicy/private/mediaextractor.te

(allow mediaextractor cgroup (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 32 system/sepolicy/private/mediaextractor.te

(allow mediaextractor cgroup (file (ioctl read getattr lock map open watch watch_reads)))
(allow mediaextractor cgroup (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 33 system/sepolicy/private/mediaextractor.te

(allow mediaextractor cgroup_v2 (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 33 system/sepolicy/private/mediaextractor.te

(allow mediaextractor cgroup_v2 (file (ioctl read getattr lock map open watch watch_reads)))
(allow mediaextractor cgroup_v2 (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 34 system/sepolicy/private/mediaextractor.te

(allow mediaextractor proc_meminfo (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 36 system/sepolicy/private/mediaextractor.te

(allow mediaextractor su (fifo_file (append)))
;;* lme

;;* lmx 36 system/sepolicy/private/mediaextractor.te

(allow mediaextractor anr_data_file (file (append)))
;;* lme

;;* lmx 36 system/sepolicy/private/mediaextractor.te

(allow mediaextractor dumpstate (fd (use)))
;;* lme

;;* lmx 36 system/sepolicy/private/mediaextractor.te

(allow mediaextractor incidentd (fd (use)))
;;* lme

;;* lmx 36 system/sepolicy/private/mediaextractor.te

(allow mediaextractor dumpstate (fifo_file (write append)))
;;* lme

;;* lmx 36 system/sepolicy/private/mediaextractor.te

(allow mediaextractor incidentd (fifo_file (write append)))
;;* lme

;;* lmx 36 system/sepolicy/private/mediaextractor.te

(allow mediaextractor system_server (fifo_file (write append)))
;;* lme

;;* lmx 36 system/sepolicy/private/mediaextractor.te

(allow mediaextractor tombstoned (unix_stream_socket (connectto)))
;;* lme

;;* lmx 36 system/sepolicy/private/mediaextractor.te

(allow mediaextractor tombstoned (fd (use)))
;;* lme

;;* lmx 36 system/sepolicy/private/mediaextractor.te

(allow mediaextractor tombstoned_crash_socket (sock_file (write)))
;;* lme

;;* lmx 36 system/sepolicy/private/mediaextractor.te

(allow mediaextractor tombstone_data_file (file (append)))
;;* lme

;;* lmx 39 system/sepolicy/private/mediaextractor.te

(allow mediaextractor sdcard_type (file (read getattr)))
(allow mediaextractor fuse (file (read getattr)))
;;* lme

;;* lmx 40 system/sepolicy/private/mediaextractor.te

(allow mediaextractor media_rw_data_file (file (read getattr)))
;;* lme

;;* lmx 41 system/sepolicy/private/mediaextractor.te

(allow mediaextractor app_data_file (file (read getattr)))
(allow mediaextractor privapp_data_file (file (read getattr)))
;;* lme

;;* lmx 44 system/sepolicy/private/mediaextractor.te

(allow mediaextractor apk_data_file (file (read getattr)))
;;* lme

;;* lmx 45 system/sepolicy/private/mediaextractor.te

(allow mediaextractor asec_apk_file (file (read getattr)))
;;* lme

;;* lmx 46 system/sepolicy/private/mediaextractor.te

(allow mediaextractor ringtone_file (file (read getattr)))
;;* lme

;;* lmx 49 system/sepolicy/private/mediaextractor.te

(allow mediaextractor vendor_overlay_file (file (read map)))
;;* lme

;;* lmx 52 system/sepolicy/private/mediaextractor.te

(allow mediaextractor system_file (dir (read open)))
;;* lme

;;* lmx 60 system/sepolicy/private/mediaextractor.te

(neverallow mediaextractor fs_type (file (execute_no_trans)))
(neverallow mediaextractor file_type (file (execute_no_trans)))
;;* lme

;;* lmx 72 system/sepolicy/private/mediaextractor.te

(neverallow mediaextractor domain (udp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind)))
(neverallow mediaextractor domain (rawip_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind)))
;;* lme

;;* lmx 73 system/sepolicy/private/mediaextractor.te

(neverallow mediaextractor base_typeattr_329 (tcp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind name_connect)))
;;* lme

;;* lmx 82 system/sepolicy/private/mediaextractor.te

(neverallow mediaextractor base_typeattr_872 (file (open)))
;;* lme

;;* lmx 3 system/sepolicy/private/mediametrics.te

(allow init mediametrics_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 3 system/sepolicy/private/mediametrics.te

(allow init mediametrics (process (transition)))
;;* lme

;;* lmx 3 system/sepolicy/private/mediametrics.te

(allow mediametrics mediametrics_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init mediametrics (process (noatsecure)))
;;* lmx 3 system/sepolicy/private/mediametrics.te

(allow init mediametrics (process (siginh rlimitinh)))
;;* lme

(typetransition init mediametrics_exec process mediametrics)
;;* lmx 6 system/sepolicy/private/mediametrics.te

(allow mediametrics stats_service (service_manager (find)))
;;* lme

;;* lmx 7 system/sepolicy/private/mediametrics.te

(allow mediametrics statsmanager_service (service_manager (find)))
;;* lme

;;* lmx 8 system/sepolicy/private/mediametrics.te

(allow mediametrics statsd (binder (call transfer)))
;;* lme

;;* lmx 8 system/sepolicy/private/mediametrics.te

(allow statsd mediametrics (binder (transfer)))
;;* lme

;;* lmx 8 system/sepolicy/private/mediametrics.te

(allow mediametrics statsd (fd (use)))
;;* lme

;;* lmx 10 system/sepolicy/private/mediametrics.te

(allow mediametrics servicemanager (binder (call transfer)))
;;* lme

;;* lmx 10 system/sepolicy/private/mediametrics.te

(allow servicemanager mediametrics (binder (call transfer)))
;;* lme

;;* lmx 11 system/sepolicy/private/mediametrics.te

(allow mediametrics binderservicedomain (binder (call transfer)))
;;* lme

;;* lmx 11 system/sepolicy/private/mediametrics.te

(allow binderservicedomain mediametrics (binder (transfer)))
;;* lme

;;* lmx 11 system/sepolicy/private/mediametrics.te

(allow mediametrics binderservicedomain (fd (use)))
;;* lme

;;* lmx 14 system/sepolicy/private/mediametrics.te

(allow mediametrics mediametrics_service (service_manager (add find)))
;;* lme

;;* lmx 14 system/sepolicy/private/mediametrics.te

(neverallow base_typeattr_873 mediametrics_service (service_manager (add)))
;;* lme

;;* lmx 14 system/sepolicy/private/mediametrics.te

(allow mediametrics su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 16 system/sepolicy/private/mediametrics.te

(allow mediametrics system_server (fd (use)))
;;* lme

;;* lmx 18 system/sepolicy/private/mediametrics.te

(allow mediametrics cgroup (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 18 system/sepolicy/private/mediametrics.te

(allow mediametrics cgroup (file (ioctl read getattr lock map open watch watch_reads)))
(allow mediametrics cgroup (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 19 system/sepolicy/private/mediametrics.te

(allow mediametrics cgroup_v2 (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 19 system/sepolicy/private/mediametrics.te

(allow mediametrics cgroup_v2 (file (ioctl read getattr lock map open watch watch_reads)))
(allow mediametrics cgroup_v2 (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 20 system/sepolicy/private/mediametrics.te

(allow mediametrics proc_meminfo (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 23 system/sepolicy/private/mediametrics.te

(allow mediametrics activity_service (service_manager (find)))
;;* lme

;;* lmx 26 system/sepolicy/private/mediametrics.te

(allow mediametrics app_data_file (file (write)))
(allow mediametrics privapp_data_file (file (write)))
;;* lme

;;* lmx 29 system/sepolicy/private/mediametrics.te

(allow mediametrics package_native_service (service_manager (find)))
;;* lme

;;* lmx 32 system/sepolicy/private/mediametrics.te

(allow mediametrics statsdw_socket (sock_file (write)))
;;* lme

;;* lmx 32 system/sepolicy/private/mediametrics.te

(allow mediametrics statsd (unix_dgram_socket (sendto)))
;;* lme

;;* lmx 40 system/sepolicy/private/mediametrics.te

(neverallow mediametrics fs_type (file (execute_no_trans)))
(neverallow mediametrics file_type (file (execute_no_trans)))
;;* lme

;;* lmx 52 system/sepolicy/private/mediametrics.te

(neverallow mediametrics domain (udp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind)))
(neverallow mediametrics domain (rawip_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind)))
;;* lme

;;* lmx 53 system/sepolicy/private/mediametrics.te

(neverallow mediametrics base_typeattr_329 (tcp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind name_connect)))
;;* lme

(typetransition mediaprovider tmpfs file appdomain_tmpfs)
;;* lmx 7 system/sepolicy/private/mediaprovider.te

(allow mediaprovider mediaprovider_userfaultfd (anon_inode (ioctl read create)))
;;* lme

(dontaudit su mediaprovider_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lmx 7 system/sepolicy/private/mediaprovider.te

(neverallow base_typeattr_874 mediaprovider_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 7 system/sepolicy/private/mediaprovider.te

(allow mediaprovider appdomain_tmpfs (file (read write getattr map execute)))
;;* lme

;;* lmx 7 system/sepolicy/private/mediaprovider.te

(allow mediaprovider appdomain (memfd_file (read write getattr map execute)))
;;* lme

;;* lmx 7 system/sepolicy/private/mediaprovider.te

(neverallow base_typeattr_875 base_typeattr_874 (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 7 system/sepolicy/private/mediaprovider.te

(neverallow base_typeattr_876 mediaprovider (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 7 system/sepolicy/private/mediaprovider.te

(neverallow base_typeattr_877 mediaprovider (process (ptrace)))
;;* lme

;;* lmx 7 system/sepolicy/private/mediaprovider.te

(neverallow mediaprovider base_typeattr_878 (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 13 system/sepolicy/private/mediaprovider.te

(allow mediaprovider cache_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 14 system/sepolicy/private/mediaprovider.te

(allow mediaprovider cache_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 16 system/sepolicy/private/mediaprovider.te

(allow mediaprovider cache_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

(dontaudit mediaprovider cache_private_backup_file (dir (getattr)))
(dontaudit mediaprovider cache_recovery_file (dir (getattr)))
;;* lmx 23 system/sepolicy/private/mediaprovider.te

(allow mediaprovider mnt_media_rw_file (dir (search)))
;;* lme

;;* lmx 25 system/sepolicy/private/mediaprovider.te

(allow mediaprovider app_api_service (service_manager (find)))
;;* lme

;;* lmx 26 system/sepolicy/private/mediaprovider.te

(allow mediaprovider audioserver_service (service_manager (find)))
;;* lme

;;* lmx 27 system/sepolicy/private/mediaprovider.te

(allow mediaprovider cameraserver_service (service_manager (find)))
;;* lme

;;* lmx 28 system/sepolicy/private/mediaprovider.te

(allow mediaprovider drmserver_service (service_manager (find)))
;;* lme

;;* lmx 29 system/sepolicy/private/mediaprovider.te

(allow mediaprovider mediaextractor_service (service_manager (find)))
;;* lme

;;* lmx 30 system/sepolicy/private/mediaprovider.te

(allow mediaprovider mediaserver_service (service_manager (find)))
;;* lme

;;* lmx 33 system/sepolicy/private/mediaprovider.te

(allow mediaprovider ringtone_file (file (read write getattr)))
;;* lme

;;* lmx 36 system/sepolicy/private/mediaprovider.te

(allow mediaprovider mtp_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 39 system/sepolicy/private/mediaprovider.te

(allow mediaprovider functionfs (dir (search)))
;;* lme

;;* lmx 40 system/sepolicy/private/mediaprovider.te

(allow mediaprovider functionfs (file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 41 system/sepolicy/private/mediaprovider.te

(allowx mediaprovider functionfs (ioctl file (0x6782)))
;;* lme

;;* lmx 42 system/sepolicy/private/mediaprovider.te

(allowx mediaprovider functionfs (ioctl file (0x67e7)))
;;* lme

;;* lmx 45 system/sepolicy/private/mediaprovider.te

(allow mediaprovider ffs_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 46 system/sepolicy/private/mediaprovider.te

(allow mediaprovider property_socket (sock_file (write)))
;;* lme

;;* lmx 46 system/sepolicy/private/mediaprovider.te

(allow mediaprovider init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 46 system/sepolicy/private/mediaprovider.te

(allow mediaprovider ffs_control_prop (property_service (set)))
;;* lme

;;* lmx 46 system/sepolicy/private/mediaprovider.te

(allow mediaprovider ffs_control_prop (file (read getattr map open)))
;;* lme

;;* lmx 49 system/sepolicy/private/mediaprovider.te

(allow mediaprovider drm_service_config_prop (file (read getattr map open)))
;;* lme

(typetransition mediaprovider_app tmpfs file appdomain_tmpfs)
;;* lmx 6 system/sepolicy/private/mediaprovider_app.te

(allow mediaprovider_app mediaprovider_app_userfaultfd (anon_inode (ioctl read create)))
;;* lme

(dontaudit su mediaprovider_app_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lmx 6 system/sepolicy/private/mediaprovider_app.te

(neverallow base_typeattr_879 mediaprovider_app_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 6 system/sepolicy/private/mediaprovider_app.te

(allow mediaprovider_app appdomain_tmpfs (file (read write getattr map execute)))
;;* lme

;;* lmx 6 system/sepolicy/private/mediaprovider_app.te

(allow mediaprovider_app appdomain (memfd_file (read write getattr map execute)))
;;* lme

;;* lmx 6 system/sepolicy/private/mediaprovider_app.te

(neverallow base_typeattr_880 base_typeattr_879 (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 6 system/sepolicy/private/mediaprovider_app.te

(neverallow base_typeattr_881 mediaprovider_app (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 6 system/sepolicy/private/mediaprovider_app.te

(neverallow base_typeattr_882 mediaprovider_app (process (ptrace)))
;;* lme

;;* lmx 6 system/sepolicy/private/mediaprovider_app.te

(neverallow mediaprovider_app base_typeattr_883 (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 9 system/sepolicy/private/mediaprovider_app.te

(allow mediaprovider_app mnt_pass_through_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 9 system/sepolicy/private/mediaprovider_app.te

(allow mediaprovider_app mnt_pass_through_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow mediaprovider_app mnt_pass_through_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 12 system/sepolicy/private/mediaprovider_app.te

(allow mediaprovider_app fuse_device (chr_file (ioctl read write getattr)))
;;* lme

;;* lmx 15 system/sepolicy/private/mediaprovider_app.te

(allow mediaprovider_app fuseblk (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 16 system/sepolicy/private/mediaprovider_app.te

(allow mediaprovider_app fuseblk (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 19 system/sepolicy/private/mediaprovider_app.te

(allow mediaprovider_app media_userdir_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 20 system/sepolicy/private/mediaprovider_app.te

(allow mediaprovider_app media_rw_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 21 system/sepolicy/private/mediaprovider_app.te

(allow mediaprovider_app media_rw_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 24 system/sepolicy/private/mediaprovider_app.te

(allow mediaprovider_app drmserver_service (service_manager (find)))
;;* lme

;;* lmx 27 system/sepolicy/private/mediaprovider_app.te

(allow mediaprovider_app mediaserver_service (service_manager (find)))
;;* lme

;;* lmx 28 system/sepolicy/private/mediaprovider_app.te

(allow mediaprovider_app mediaserver (memfd_file (read write getattr map)))
;;* lme

;;* lmx 31 system/sepolicy/private/mediaprovider_app.te

(allow mediaprovider_app audioserver_service (service_manager (find)))
;;* lme

;;* lmx 34 system/sepolicy/private/mediaprovider_app.te

(allow mediaprovider_app mediametrics_service (service_manager (find)))
;;* lme

;;* lmx 37 system/sepolicy/private/mediaprovider_app.te

(allow mediaprovider_app app_api_service (service_manager (find)))
;;* lme

;;* lmx 40 system/sepolicy/private/mediaprovider_app.te

(allow mediaprovider_app gpuservice (binder (call transfer)))
;;* lme

;;* lmx 40 system/sepolicy/private/mediaprovider_app.te

(allow gpuservice mediaprovider_app (binder (transfer)))
;;* lme

;;* lmx 40 system/sepolicy/private/mediaprovider_app.te

(allow mediaprovider_app gpuservice (fd (use)))
;;* lme

;;* lmx 43 system/sepolicy/private/mediaprovider_app.te

(allow mediaprovider_app statsmanager_service (service_manager (find)))
;;* lme

;;* lmx 44 system/sepolicy/private/mediaprovider_app.te

(allow mediaprovider_app statsd (binder (call transfer)))
;;* lme

;;* lmx 44 system/sepolicy/private/mediaprovider_app.te

(allow statsd mediaprovider_app (binder (transfer)))
;;* lme

;;* lmx 44 system/sepolicy/private/mediaprovider_app.te

(allow mediaprovider_app statsd (fd (use)))
;;* lme

;;* lmx 47 system/sepolicy/private/mediaprovider_app.te

(allow mediaprovider_app proc_pipe_conf (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 56 system/sepolicy/private/mediaprovider_app.te

(allowx mediaprovider_app media_rw_data_file (ioctl file ((range 0x581f 0x5820))))
(allowx mediaprovider_app media_rw_data_file (ioctl dir ((range 0x581f 0x5820))))
;;* lme

;;* lmx 56 system/sepolicy/private/mediaprovider_app.te

(allowx mediaprovider_app media_rw_data_file (ioctl file ((range 0x6601 0x6602))))
(allowx mediaprovider_app media_rw_data_file (ioctl dir ((range 0x6601 0x6602))))
;;* lme

;;* lmx 59 system/sepolicy/private/mediaprovider_app.te

(allow mediaprovider_app mnt_media_rw_file (dir (search)))
;;* lme

;;* lmx 61 system/sepolicy/private/mediaprovider_app.te

(allow mediaprovider_app proc_filesystems (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 64 system/sepolicy/private/mediaprovider_app.te

(allow mediaprovider_app storage_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 66 system/sepolicy/private/mediaprovider_app.te

(allow mediaprovider_app drm_service_config_prop (file (read getattr map open)))
;;* lme

(dontaudit mediaprovider_app sysfs_vendor_sched (dir (search)))
(dontaudit mediaprovider_app sysfs_vendor_sched (file (write lock append map open)))
;;* lmx 74 system/sepolicy/private/mediaprovider_app.te

(allow mediaprovider_app fs_bpf (file (read)))
;;* lme

;;* lmx 75 system/sepolicy/private/mediaprovider_app.te

(allow mediaprovider_app bpfloader (bpf (map_read map_write prog_run)))
;;* lme

;;* lmx 78 system/sepolicy/private/mediaprovider_app.te

(allow mediaprovider_app bootanim_oem_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 81 system/sepolicy/private/mediaprovider_app.te

(allow mediaprovider_app domain (fd (use)))
;;* lme

;;* lmx 83 system/sepolicy/private/mediaprovider_app.te

(allow mediaprovider_app privapp_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 84 system/sepolicy/private/mediaprovider_app.te

(allow mediaprovider_app privapp_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 3 system/sepolicy/private/mediaserver.te

(allow init mediaserver_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 3 system/sepolicy/private/mediaserver.te

(allow init mediaserver (process (transition)))
;;* lme

;;* lmx 3 system/sepolicy/private/mediaserver.te

(allow mediaserver mediaserver_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init mediaserver (process (noatsecure)))
;;* lmx 3 system/sepolicy/private/mediaserver.te

(allow init mediaserver (process (siginh rlimitinh)))
;;* lme

(typetransition init mediaserver_exec process mediaserver)
(typetransition mediaserver tmpfs file mediaserver_tmpfs)
;;* lmx 4 system/sepolicy/private/mediaserver.te

(allow mediaserver mediaserver_tmpfs (file (read write getattr map)))
;;* lme

;;* lmx 5 system/sepolicy/private/mediaserver.te

(allow mediaserver appdomain_tmpfs (file (read write getattr map)))
;;* lme

;;* lmx 6 system/sepolicy/private/mediaserver.te

(allow mediaserver appdomain (memfd_file (read write getattr map)))
;;* lme

;;* lmx 8 system/sepolicy/private/mediaserver.te

(allow mediaserver audioserver (memfd_file (read write getattr map)))
;;* lme

;;* lmx 10 system/sepolicy/private/mediaserver.te

(allow mediaserver mediaextractor (memfd_file (read write getattr map)))
;;* lme

;;* lmx 13 system/sepolicy/private/mediaserver.te

(allow mediaserver hal_graphics_allocator (memfd_file (read write getattr map)))
;;* lme

;;* lmx 13 system/sepolicy/private/mediaserver.te

(allow hal_graphics_allocator mediaserver (memfd_file (read write getattr map)))
;;* lme

;;* lmx 14 system/sepolicy/private/mediaserver.te

(allow mediaserver hal_configstore (memfd_file (read write getattr map)))
;;* lme

;;* lmx 14 system/sepolicy/private/mediaserver.te

(allow hal_configstore mediaserver (memfd_file (read write getattr map)))
;;* lme

;;* lmx 15 system/sepolicy/private/mediaserver.te

(allow mediaserver hal_drm (memfd_file (read write getattr map)))
;;* lme

;;* lmx 15 system/sepolicy/private/mediaserver.te

(allow hal_drm mediaserver (memfd_file (read write getattr map)))
;;* lme

;;* lmx 16 system/sepolicy/private/mediaserver.te

(allow mediaserver hal_omx (memfd_file (read write getattr map)))
;;* lme

;;* lmx 16 system/sepolicy/private/mediaserver.te

(allow hal_omx mediaserver (memfd_file (read write getattr map)))
;;* lme

;;* lmx 17 system/sepolicy/private/mediaserver.te

(allow mediaserver hal_codec2 (memfd_file (read write getattr map)))
;;* lme

;;* lmx 17 system/sepolicy/private/mediaserver.te

(allow hal_codec2 mediaserver (memfd_file (read write getattr map)))
;;* lme

;;* lmx 19 system/sepolicy/private/mediaserver.te

(allow mediaserver property_socket (sock_file (write)))
;;* lme

;;* lmx 19 system/sepolicy/private/mediaserver.te

(allow mediaserver init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 19 system/sepolicy/private/mediaserver.te

(allow mediaserver audio_prop (property_service (set)))
;;* lme

;;* lmx 19 system/sepolicy/private/mediaserver.te

(allow mediaserver audio_prop (file (read getattr map open)))
;;* lme

;;* lmx 21 system/sepolicy/private/mediaserver.te

(allow mediaserver drm_service_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 22 system/sepolicy/private/mediaserver.te

(allow mediaserver media_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 25 system/sepolicy/private/mediaserver.te

(allow mediaserver device_config_media_native_prop (file (read getattr map open)))
;;* lme

;;* lmx 28 system/sepolicy/private/mediaserver.te

(allow mediaserver property_socket (sock_file (write)))
;;* lme

;;* lmx 28 system/sepolicy/private/mediaserver.te

(allow mediaserver init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 28 system/sepolicy/private/mediaserver.te

(allow mediaserver ctl_mediatranscoding_prop (property_service (set)))
;;* lme

;;* lmx 28 system/sepolicy/private/mediaserver.te

(allow mediaserver ctl_mediatranscoding_prop (file (read getattr map open)))
;;* lme

;;* lmx 31 system/sepolicy/private/mediaserver.te

(allow mediaserver sdk_sandbox_data_file (file (read getattr)))
;;* lme

;;* lmx 34 system/sepolicy/private/mediaserver.te

(allow mediaserver stats_service (service_manager (find)))
;;* lme

;;* lmx 35 system/sepolicy/private/mediaserver.te

(allow mediaserver statsmanager_service (service_manager (find)))
;;* lme

;;* lmx 36 system/sepolicy/private/mediaserver.te

(allow mediaserver statsd (binder (call transfer)))
;;* lme

;;* lmx 36 system/sepolicy/private/mediaserver.te

(allow statsd mediaserver (binder (transfer)))
;;* lme

;;* lmx 36 system/sepolicy/private/mediaserver.te

(allow mediaserver statsd (fd (use)))
;;* lme

;;* lmx 40 system/sepolicy/private/mediaserver.te

(allow mediaserver virtual_camera (binder (call transfer)))
;;* lme

;;* lmx 40 system/sepolicy/private/mediaserver.te

(allow virtual_camera mediaserver (binder (transfer)))
;;* lme

;;* lmx 40 system/sepolicy/private/mediaserver.te

(allow mediaserver virtual_camera (fd (use)))
;;* lme

;;* lmx 43 system/sepolicy/private/mediaserver.te

(allow mediaserver mediacodeclist_generator_service (service_manager (find)))
;;* lme

;;* lmx 44 system/sepolicy/private/mediaserver.te

(allow mediaserver mediacodeclist_generator (binder (call transfer)))
;;* lme

;;* lmx 44 system/sepolicy/private/mediaserver.te

(allow mediacodeclist_generator mediaserver (binder (transfer)))
;;* lme

;;* lmx 44 system/sepolicy/private/mediaserver.te

(allow mediaserver mediacodeclist_generator (fd (use)))
;;* lme

;;* lmx 50 system/sepolicy/private/mediaserver.te

(allow mediaserver sdcard_type (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 50 system/sepolicy/private/mediaserver.te

(allow mediaserver sdcard_type (file (ioctl read getattr lock map open watch watch_reads)))
(allow mediaserver sdcard_type (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 51 system/sepolicy/private/mediaserver.te

(allow mediaserver fuse (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 51 system/sepolicy/private/mediaserver.te

(allow mediaserver fuse (file (ioctl read getattr lock map open watch watch_reads)))
(allow mediaserver fuse (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 52 system/sepolicy/private/mediaserver.te

(allow mediaserver cgroup (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 52 system/sepolicy/private/mediaserver.te

(allow mediaserver cgroup (file (ioctl read getattr lock map open watch watch_reads)))
(allow mediaserver cgroup (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 53 system/sepolicy/private/mediaserver.te

(allow mediaserver cgroup_v2 (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 53 system/sepolicy/private/mediaserver.te

(allow mediaserver cgroup_v2 (file (ioctl read getattr lock map open watch watch_reads)))
(allow mediaserver cgroup_v2 (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 56 system/sepolicy/private/mediaserver.te

(allow mediaserver proc (lnk_file (getattr)))
;;* lme

;;* lmx 59 system/sepolicy/private/mediaserver.te

(allow mediaserver system_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 61 system/sepolicy/private/mediaserver.te

(allow mediaserver self (process (ptrace)))
;;* lme

;;* lmx 66 system/sepolicy/private/mediaserver.te

(allow mediaserver servicemanager (binder (call transfer)))
;;* lme

;;* lmx 66 system/sepolicy/private/mediaserver.te

(allow servicemanager mediaserver (binder (call transfer)))
;;* lme

;;* lmx 67 system/sepolicy/private/mediaserver.te

(allow mediaserver binderservicedomain (binder (call transfer)))
;;* lme

;;* lmx 67 system/sepolicy/private/mediaserver.te

(allow binderservicedomain mediaserver (binder (transfer)))
;;* lme

;;* lmx 67 system/sepolicy/private/mediaserver.te

(allow mediaserver binderservicedomain (fd (use)))
;;* lme

;;* lmx 68 system/sepolicy/private/mediaserver.te

(allow mediaserver appdomain (binder (call transfer)))
;;* lme

;;* lmx 68 system/sepolicy/private/mediaserver.te

(allow appdomain mediaserver (binder (transfer)))
;;* lme

;;* lmx 68 system/sepolicy/private/mediaserver.te

(allow mediaserver appdomain (fd (use)))
;;* lme

;;* lmx 71 system/sepolicy/private/mediaserver.te

(allow mediaserver media_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 72 system/sepolicy/private/mediaserver.te

(allow mediaserver media_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 73 system/sepolicy/private/mediaserver.te

(allow mediaserver app_data_file (file (ioctl read write getattr lock append map)))
(allow mediaserver privapp_data_file (file (ioctl read write getattr lock append map)))
;;* lme

;;* lmx 74 system/sepolicy/private/mediaserver.te

(allow mediaserver sdcard_type (file (write)))
(allow mediaserver fuse (file (write)))
;;* lme

;;* lmx 76 system/sepolicy/private/mediaserver.te

(allow mediaserver video_device (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 77 system/sepolicy/private/mediaserver.te

(allow mediaserver video_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 80 system/sepolicy/private/mediaserver.te

(allow mediaserver apk_data_file (file (read getattr)))
;;* lme

;;* lmx 81 system/sepolicy/private/mediaserver.te

(allow mediaserver asec_apk_file (file (read getattr)))
;;* lme

;;* lmx 82 system/sepolicy/private/mediaserver.te

(allow mediaserver ringtone_file (file (read getattr)))
;;* lme

;;* lmx 85 system/sepolicy/private/mediaserver.te

(allow mediaserver radio_data_file (file (read getattr)))
;;* lme

;;* lmx 88 system/sepolicy/private/mediaserver.te

(allow mediaserver appdomain (fifo_file (read write getattr)))
;;* lme

;;* lmx 90 system/sepolicy/private/mediaserver.te

(allow mediaserver rpmsg_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 93 system/sepolicy/private/mediaserver.te

(allow mediaserver system_server (fifo_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 95 system/sepolicy/private/mediaserver.te

(allow mediaserver media_rw_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 95 system/sepolicy/private/mediaserver.te

(allow mediaserver media_rw_data_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow mediaserver media_rw_data_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 98 system/sepolicy/private/mediaserver.te

(allow mediaserver app_fuse_file (file (read getattr)))
;;* lme

;;* lmx 102 system/sepolicy/private/mediaserver.te

(allow mediaserver drmserver_socket (sock_file (write)))
;;* lme

;;* lmx 102 system/sepolicy/private/mediaserver.te

(allow mediaserver drmserver (unix_stream_socket (connectto)))
;;* lme

;;* lmx 106 system/sepolicy/private/mediaserver.te

(allow mediaserver bluetooth_socket (sock_file (write)))
;;* lme

;;* lmx 106 system/sepolicy/private/mediaserver.te

(allow mediaserver bluetooth (unix_stream_socket (connectto)))
;;* lme

;;* lmx 109 system/sepolicy/private/mediaserver.te

(allow mediaserver statsdw_socket (sock_file (write)))
;;* lme

;;* lmx 109 system/sepolicy/private/mediaserver.te

(allow mediaserver statsd (unix_dgram_socket (sendto)))
;;* lme

;;* lmx 111 system/sepolicy/private/mediaserver.te

(allow mediaserver mediaserver_service (service_manager (add find)))
;;* lme

;;* lmx 111 system/sepolicy/private/mediaserver.te

(neverallow base_typeattr_884 mediaserver_service (service_manager (add)))
;;* lme

;;* lmx 111 system/sepolicy/private/mediaserver.te

(allow mediaserver su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 112 system/sepolicy/private/mediaserver.te

(allow mediaserver activity_service (service_manager (find)))
;;* lme

;;* lmx 113 system/sepolicy/private/mediaserver.te

(allow mediaserver appops_service (service_manager (find)))
;;* lme

;;* lmx 114 system/sepolicy/private/mediaserver.te

(allow mediaserver audio_service (service_manager (find)))
;;* lme

;;* lmx 115 system/sepolicy/private/mediaserver.te

(allow mediaserver audioserver_service (service_manager (find)))
;;* lme

;;* lmx 116 system/sepolicy/private/mediaserver.te

(allow mediaserver cameraserver_service (service_manager (find)))
;;* lme

;;* lmx 117 system/sepolicy/private/mediaserver.te

(allow mediaserver batterystats_service (service_manager (find)))
;;* lme

;;* lmx 118 system/sepolicy/private/mediaserver.te

(allow mediaserver drmserver_service (service_manager (find)))
;;* lme

;;* lmx 119 system/sepolicy/private/mediaserver.te

(allow mediaserver mediaextractor_service (service_manager (find)))
;;* lme

;;* lmx 120 system/sepolicy/private/mediaserver.te

(allow mediaserver mediametrics_service (service_manager (find)))
;;* lme

;;* lmx 121 system/sepolicy/private/mediaserver.te

(allow mediaserver media_session_service (service_manager (find)))
;;* lme

;;* lmx 122 system/sepolicy/private/mediaserver.te

(allow mediaserver package_native_service (service_manager (find)))
;;* lme

;;* lmx 123 system/sepolicy/private/mediaserver.te

(allow mediaserver permission_service (service_manager (find)))
;;* lme

;;* lmx 124 system/sepolicy/private/mediaserver.te

(allow mediaserver permission_checker_service (service_manager (find)))
;;* lme

;;* lmx 125 system/sepolicy/private/mediaserver.te

(allow mediaserver power_service (service_manager (find)))
;;* lme

;;* lmx 126 system/sepolicy/private/mediaserver.te

(allow mediaserver processinfo_service (service_manager (find)))
;;* lme

;;* lmx 127 system/sepolicy/private/mediaserver.te

(allow mediaserver scheduling_policy_service (service_manager (find)))
;;* lme

;;* lmx 128 system/sepolicy/private/mediaserver.te

(allow mediaserver surfaceflinger_service (service_manager (find)))
;;* lme

;;* lmx 129 system/sepolicy/private/mediaserver.te

(allow mediaserver media_quality_service (service_manager (find)))
;;* lme

;;* lmx 132 system/sepolicy/private/mediaserver.te

(allow mediaserver mediadrmserver_service (service_manager (find)))
;;* lme

;;* lmx 135 system/sepolicy/private/mediaserver.te

(allow mediaserver hidl_token_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 138 system/sepolicy/private/mediaserver.te

(allow mediaserver oemfs (dir (search)))
;;* lme

;;* lmx 139 system/sepolicy/private/mediaserver.te

(allow mediaserver oemfs (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 142 system/sepolicy/private/mediaserver.te

(allow mediaserver bootanim_oem_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 145 system/sepolicy/private/mediaserver.te

(allow mediaserver vendor_app_file (file (read getattr map)))
;;* lme

;;* lmx 156 system/sepolicy/private/mediaserver.te

(allow mediaserver drmserver (drmservice (consumeRights setPlaybackStatus openDecryptSession closeDecryptSession initializeDecryptUnit decrypt finalizeDecryptUnit pread)))
;;* lme

;;* lmx 160 system/sepolicy/private/mediaserver.te

(allowx mediaserver self (ioctl tcp_socket ((range 0x5401 0x5404) 0x540b (range 0x540e 0x5411) (range 0x5413 0x5414) (range 0x5450 0x5451))))
(allowx mediaserver self (ioctl udp_socket ((range 0x5401 0x5404) 0x540b (range 0x540e 0x5411) (range 0x5413 0x5414) (range 0x5450 0x5451))))
(allowx mediaserver self (ioctl rawip_socket ((range 0x5401 0x5404) 0x540b (range 0x540e 0x5411) (range 0x5413 0x5414) (range 0x5450 0x5451))))
;;* lme

;;* lmx 160 system/sepolicy/private/mediaserver.te

(allowx mediaserver self (ioctl tcp_socket ((range 0x8906 0x8907) 0x8910 (range 0x8912 0x8913) 0x8915 0x8917 0x8919 0x891b 0x8921 0x8933 0x8938 0x8942)))
(allowx mediaserver self (ioctl udp_socket ((range 0x8906 0x8907) 0x8910 (range 0x8912 0x8913) 0x8915 0x8917 0x8919 0x891b 0x8921 0x8933 0x8938 0x8942)))
(allowx mediaserver self (ioctl rawip_socket ((range 0x8906 0x8907) 0x8910 (range 0x8912 0x8913) 0x8915 0x8917 0x8919 0x891b 0x8921 0x8933 0x8938 0x8942)))
;;* lme

;;* lmx 160 system/sepolicy/private/mediaserver.te

(allowx mediaserver self (ioctl tcp_socket (0x8b01 0x8b05 0x8b07 0x8b09 0x8b0b 0x8b0d 0x8b0f (range 0x8b11 0x8b13) 0x8b21 0x8b23 0x8b25 0x8b27 0x8b29 0x8b2d)))
(allowx mediaserver self (ioctl udp_socket (0x8b01 0x8b05 0x8b07 0x8b09 0x8b0b 0x8b0d 0x8b0f (range 0x8b11 0x8b13) 0x8b21 0x8b23 0x8b25 0x8b27 0x8b29 0x8b2d)))
(allowx mediaserver self (ioctl rawip_socket (0x8b01 0x8b05 0x8b07 0x8b09 0x8b0b 0x8b0d 0x8b0f (range 0x8b11 0x8b13) 0x8b21 0x8b23 0x8b25 0x8b27 0x8b29 0x8b2d)))
;;* lme

;;* lmx 165 system/sepolicy/private/mediaserver.te

(allow mediaserver media_rw_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 166 system/sepolicy/private/mediaserver.te

(allow mediaserver media_rw_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 169 system/sepolicy/private/mediaserver.te

(allow mediaserver preloads_media_file (file (ioctl read getattr)))
;;* lme

;;* lmx 171 system/sepolicy/private/mediaserver.te

(allow mediaserver dmabuf_system_heap_device (chr_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 172 system/sepolicy/private/mediaserver.te

(allow mediaserver dmabuf_system_secure_heap_device (chr_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 173 system/sepolicy/private/mediaserver.te

(allow mediaserver hal_graphics_allocator (fd (use)))
;;* lme

;;* lmx 174 system/sepolicy/private/mediaserver.te

(allow mediaserver hal_graphics_composer (fd (use)))
;;* lme

;;* lmx 175 system/sepolicy/private/mediaserver.te

(allow mediaserver hal_camera (fd (use)))
;;* lme

;;* lmx 177 system/sepolicy/private/mediaserver.te

(allow mediaserver system_server (fd (use)))
;;* lme

;;* lmx 180 system/sepolicy/private/mediaserver.te

(allow mediaserver vold (fd (use)))
;;* lme

;;* lmx 183 system/sepolicy/private/mediaserver.te

(allow mediaserver vendor_overlay_file (file (read getattr map)))
;;* lme

;;* lmx 185 system/sepolicy/private/mediaserver.te

(allow mediaserver hal_allocator (memfd_file (read write getattr map)))
;;* lme

;;* lmx 185 system/sepolicy/private/mediaserver.te

(allow hal_allocator mediaserver (memfd_file (read write getattr map)))
;;* lme

;;* lmx 188 system/sepolicy/private/mediaserver.te

(allow mediaserver media_quality_service (service_manager (find)))
;;* lme

;;* lmx 196 system/sepolicy/private/mediaserver.te

(neverallow mediaserver fs_type (file (execute_no_trans)))
(neverallow mediaserver file_type (file (execute_no_trans)))
;;* lme

;;* lmx 199 system/sepolicy/private/mediaserver.te

(neverallowx mediaserver domain (ioctl tcp_socket (0x6900 0x6902)))
(neverallowx mediaserver domain (ioctl udp_socket (0x6900 0x6902)))
(neverallowx mediaserver domain (ioctl rawip_socket (0x6900 0x6902)))
;;* lme

;;* lmx 199 system/sepolicy/private/mediaserver.te

(neverallowx mediaserver domain (ioctl tcp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx mediaserver domain (ioctl udp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx mediaserver domain (ioctl rawip_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
;;* lme

;;* lmx 199 system/sepolicy/private/mediaserver.te

(neverallowx mediaserver domain (ioctl tcp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx mediaserver domain (ioctl udp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx mediaserver domain (ioctl rawip_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
;;* lme

;;* lmx 3 system/sepolicy/private/mediaswcodec.te

(allow init mediaswcodec_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 3 system/sepolicy/private/mediaswcodec.te

(allow init mediaswcodec (process (transition)))
;;* lme

;;* lmx 3 system/sepolicy/private/mediaswcodec.te

(allow mediaswcodec mediaswcodec_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init mediaswcodec (process (noatsecure)))
;;* lmx 3 system/sepolicy/private/mediaswcodec.te

(allow init mediaswcodec (process (siginh rlimitinh)))
;;* lme

(typetransition init mediaswcodec_exec process mediaswcodec)
;;* lmx 5 system/sepolicy/private/mediaswcodec.te

(allow mediaswcodec device_config_media_native_prop (file (read getattr map open)))
;;* lme

;;* lmx 6 system/sepolicy/private/mediaswcodec.te

(allow mediaswcodec device_config_swcodec_native_prop (file (read getattr map open)))
;;* lme

;;* lmx 12 system/sepolicy/private/mediaswcodec.te

(allow mediaswcodec hal_codec2 (memfd_file (read write getattr map)))
;;* lme

;;* lmx 12 system/sepolicy/private/mediaswcodec.te

(allow hal_codec2 mediaswcodec (memfd_file (read write getattr map)))
;;* lme

;;* lmx 13 system/sepolicy/private/mediaswcodec.te

(allow mediaswcodec hal_omx (memfd_file (read write getattr map)))
;;* lme

;;* lmx 13 system/sepolicy/private/mediaswcodec.te

(allow hal_omx mediaswcodec (memfd_file (read write getattr map)))
;;* lme

;;* lmx 15 system/sepolicy/private/mediaswcodec.te

(allow mediaswcodec hal_allocator (memfd_file (read write getattr map)))
;;* lme

;;* lmx 15 system/sepolicy/private/mediaswcodec.te

(allow hal_allocator mediaswcodec (memfd_file (read write getattr map)))
;;* lme

;;* lmx 16 system/sepolicy/private/mediaswcodec.te

(allow mediaswcodec hal_graphics_allocator (memfd_file (read write getattr map)))
;;* lme

;;* lmx 16 system/sepolicy/private/mediaswcodec.te

(allow hal_graphics_allocator mediaswcodec (memfd_file (read write getattr map)))
;;* lme

;;* lmx 19 system/sepolicy/private/mediaswcodec.te

(allow mediaswcodec aac_drc_prop (file (read getattr map open)))
;;* lme

;;* lmx 21 system/sepolicy/private/mediaswcodec.te

(allow mediaswcodec su (fifo_file (append)))
;;* lme

;;* lmx 21 system/sepolicy/private/mediaswcodec.te

(allow mediaswcodec anr_data_file (file (append)))
;;* lme

;;* lmx 21 system/sepolicy/private/mediaswcodec.te

(allow mediaswcodec dumpstate (fd (use)))
;;* lme

;;* lmx 21 system/sepolicy/private/mediaswcodec.te

(allow mediaswcodec incidentd (fd (use)))
;;* lme

;;* lmx 21 system/sepolicy/private/mediaswcodec.te

(allow mediaswcodec dumpstate (fifo_file (write append)))
;;* lme

;;* lmx 21 system/sepolicy/private/mediaswcodec.te

(allow mediaswcodec incidentd (fifo_file (write append)))
;;* lme

;;* lmx 21 system/sepolicy/private/mediaswcodec.te

(allow mediaswcodec system_server (fifo_file (write append)))
;;* lme

;;* lmx 21 system/sepolicy/private/mediaswcodec.te

(allow mediaswcodec tombstoned (unix_stream_socket (connectto)))
;;* lme

;;* lmx 21 system/sepolicy/private/mediaswcodec.te

(allow mediaswcodec tombstoned (fd (use)))
;;* lme

;;* lmx 21 system/sepolicy/private/mediaswcodec.te

(allow mediaswcodec tombstoned_crash_socket (sock_file (write)))
;;* lme

;;* lmx 21 system/sepolicy/private/mediaswcodec.te

(allow mediaswcodec tombstone_data_file (file (append)))
;;* lme

;;* lmx 23 system/sepolicy/private/mediaswcodec.te

(allow mediaswcodec dmabuf_system_heap_device (chr_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 24 system/sepolicy/private/mediaswcodec.te

(allow mediaswcodec dmabuf_system_secure_heap_device (chr_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 27 system/sepolicy/private/mediaswcodec.te

(allow mediaswcodec appdomain (memfd_file (read write getattr map)))
;;* lme

;;* lmx 35 system/sepolicy/private/mediaswcodec.te

(neverallow mediaswcodec fs_type (file (execute_no_trans)))
(neverallow mediaswcodec file_type (file (execute_no_trans)))
;;* lme

;;* lmx 41 system/sepolicy/private/mediaswcodec.te

(neverallow mediaswcodec domain (udp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind)))
(neverallow mediaswcodec domain (rawip_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind)))
;;* lme

;;* lmx 42 system/sepolicy/private/mediaswcodec.te

(neverallow mediaswcodec base_typeattr_329 (tcp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind name_connect)))
;;* lme

;;* lmx 6 system/sepolicy/private/mediatranscoding.te

(allow init mediatranscoding_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 6 system/sepolicy/private/mediatranscoding.te

(allow init mediatranscoding (process (transition)))
;;* lme

;;* lmx 6 system/sepolicy/private/mediatranscoding.te

(allow mediatranscoding mediatranscoding_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init mediatranscoding (process (noatsecure)))
;;* lmx 6 system/sepolicy/private/mediatranscoding.te

(allow init mediatranscoding (process (siginh rlimitinh)))
;;* lme

(typetransition init mediatranscoding_exec process mediatranscoding)
(typetransition mediatranscoding tmpfs file mediatranscoding_tmpfs)
;;* lmx 7 system/sepolicy/private/mediatranscoding.te

(allow mediatranscoding mediatranscoding_tmpfs (file (read write getattr map)))
;;* lme

;;* lmx 8 system/sepolicy/private/mediatranscoding.te

(allow mediatranscoding appdomain_tmpfs (file (read write getattr map)))
;;* lme

;;* lmx 9 system/sepolicy/private/mediatranscoding.te

(allow mediatranscoding appdomain (memfd_file (read write getattr map)))
;;* lme

;;* lmx 11 system/sepolicy/private/mediatranscoding.te

(allow mediatranscoding servicemanager (binder (call transfer)))
;;* lme

;;* lmx 11 system/sepolicy/private/mediatranscoding.te

(allow servicemanager mediatranscoding (binder (call transfer)))
;;* lme

;;* lmx 12 system/sepolicy/private/mediatranscoding.te

(allow mediatranscoding binderservicedomain (binder (call transfer)))
;;* lme

;;* lmx 12 system/sepolicy/private/mediatranscoding.te

(allow binderservicedomain mediatranscoding (binder (transfer)))
;;* lme

;;* lmx 12 system/sepolicy/private/mediatranscoding.te

(allow mediatranscoding binderservicedomain (fd (use)))
;;* lme

;;* lmx 13 system/sepolicy/private/mediatranscoding.te

(allow mediatranscoding appdomain (binder (call transfer)))
;;* lme

;;* lmx 13 system/sepolicy/private/mediatranscoding.te

(allow appdomain mediatranscoding (binder (transfer)))
;;* lme

;;* lmx 13 system/sepolicy/private/mediatranscoding.te

(allow mediatranscoding appdomain (fd (use)))
;;* lme

;;* lmx 16 system/sepolicy/private/mediatranscoding.te

(allow mediatranscoding mediatranscoding_service (service_manager (add find)))
;;* lme

;;* lmx 16 system/sepolicy/private/mediatranscoding.te

(neverallow base_typeattr_885 mediatranscoding_service (service_manager (add)))
;;* lme

;;* lmx 16 system/sepolicy/private/mediatranscoding.te

(allow mediatranscoding su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 18 system/sepolicy/private/mediatranscoding.te

(allow mediatranscoding hal_graphics_allocator (memfd_file (read write getattr map)))
;;* lme

;;* lmx 18 system/sepolicy/private/mediatranscoding.te

(allow hal_graphics_allocator mediatranscoding (memfd_file (read write getattr map)))
;;* lme

;;* lmx 19 system/sepolicy/private/mediatranscoding.te

(allow mediatranscoding hal_configstore (memfd_file (read write getattr map)))
;;* lme

;;* lmx 19 system/sepolicy/private/mediatranscoding.te

(allow hal_configstore mediatranscoding (memfd_file (read write getattr map)))
;;* lme

;;* lmx 20 system/sepolicy/private/mediatranscoding.te

(allow mediatranscoding hal_omx (memfd_file (read write getattr map)))
;;* lme

;;* lmx 20 system/sepolicy/private/mediatranscoding.te

(allow hal_omx mediatranscoding (memfd_file (read write getattr map)))
;;* lme

;;* lmx 21 system/sepolicy/private/mediatranscoding.te

(allow mediatranscoding hal_codec2 (memfd_file (read write getattr map)))
;;* lme

;;* lmx 21 system/sepolicy/private/mediatranscoding.te

(allow hal_codec2 mediatranscoding (memfd_file (read write getattr map)))
;;* lme

;;* lmx 22 system/sepolicy/private/mediatranscoding.te

(allow mediatranscoding hal_allocator (memfd_file (read write getattr map)))
;;* lme

;;* lmx 22 system/sepolicy/private/mediatranscoding.te

(allow hal_allocator mediatranscoding (memfd_file (read write getattr map)))
;;* lme

;;* lmx 24 system/sepolicy/private/mediatranscoding.te

(allow mediatranscoding mediaserver_service (service_manager (find)))
;;* lme

;;* lmx 25 system/sepolicy/private/mediatranscoding.te

(allow mediatranscoding mediametrics_service (service_manager (find)))
;;* lme

;;* lmx 26 system/sepolicy/private/mediatranscoding.te

(allow mediatranscoding mediaextractor_service (service_manager (find)))
;;* lme

;;* lmx 27 system/sepolicy/private/mediatranscoding.te

(allow mediatranscoding package_native_service (service_manager (find)))
;;* lme

;;* lmx 28 system/sepolicy/private/mediatranscoding.te

(allow mediatranscoding thermal_service (service_manager (find)))
;;* lme

;;* lmx 30 system/sepolicy/private/mediatranscoding.te

(allow mediatranscoding system_server (fd (use)))
;;* lme

;;* lmx 31 system/sepolicy/private/mediatranscoding.te

(allow mediatranscoding activity_service (service_manager (find)))
;;* lme

;;* lmx 34 system/sepolicy/private/mediatranscoding.te

(allow mediatranscoding sdcardfs (file (read write getattr)))
;;* lme

;;* lmx 35 system/sepolicy/private/mediatranscoding.te

(allow mediatranscoding media_rw_data_file (file (read write getattr)))
;;* lme

;;* lmx 36 system/sepolicy/private/mediatranscoding.te

(allow mediatranscoding apk_data_file (file (read getattr)))
;;* lme

;;* lmx 37 system/sepolicy/private/mediatranscoding.te

(allow mediatranscoding app_data_file (file (read write getattr)))
;;* lme

;;* lmx 38 system/sepolicy/private/mediatranscoding.te

(allow mediatranscoding shell_data_file (file (read write getattr)))
;;* lme

;;* lmx 39 system/sepolicy/private/mediatranscoding.te

(allow mediatranscoding mediaextractor (memfd_file (read write getattr map)))
;;* lme

;;* lmx 43 system/sepolicy/private/mediatranscoding.te

(allow mediatranscoding statsdw_socket (sock_file (write)))
;;* lme

;;* lmx 43 system/sepolicy/private/mediatranscoding.te

(allow mediatranscoding statsd (unix_dgram_socket (sendto)))
;;* lme

;;* lmx 46 system/sepolicy/private/mediatranscoding.te

(allow mediatranscoding dmabuf_system_heap_device (chr_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 51 system/sepolicy/private/mediatranscoding.te

(allow mediatranscoding media_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 55 system/sepolicy/private/mediatranscoding.te

(neverallow mediatranscoding fs_type (file (execute_no_trans)))
(neverallow mediatranscoding file_type (file (execute_no_trans)))
;;* lme

;;* lmx 67 system/sepolicy/private/mediatranscoding.te

(neverallow mediatranscoding domain (udp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind)))
(neverallow mediatranscoding domain (rawip_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind)))
;;* lme

;;* lmx 68 system/sepolicy/private/mediatranscoding.te

(neverallow mediatranscoding base_typeattr_329 (tcp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind name_connect)))
;;* lme

;;* lmx 7 system/sepolicy/private/mediatuner.te

(allow init mediatuner_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 7 system/sepolicy/private/mediatuner.te

(allow init mediatuner (process (transition)))
;;* lme

;;* lmx 7 system/sepolicy/private/mediatuner.te

(allow mediatuner mediatuner_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init mediatuner (process (noatsecure)))
;;* lmx 7 system/sepolicy/private/mediatuner.te

(allow init mediatuner (process (siginh rlimitinh)))
;;* lme

(typetransition init mediatuner_exec process mediatuner)
;;* lmx 8 system/sepolicy/private/mediatuner.te

(allow mediatuner hal_tv_tuner (memfd_file (read write getattr map)))
;;* lme

;;* lmx 8 system/sepolicy/private/mediatuner.te

(allow hal_tv_tuner mediatuner (memfd_file (read write getattr map)))
;;* lme

;;* lmx 10 system/sepolicy/private/mediatuner.te

(allow mediatuner servicemanager (binder (call transfer)))
;;* lme

;;* lmx 10 system/sepolicy/private/mediatuner.te

(allow servicemanager mediatuner (binder (call transfer)))
;;* lme

;;* lmx 11 system/sepolicy/private/mediatuner.te

(allow mediatuner appdomain (binder (call transfer)))
;;* lme

;;* lmx 11 system/sepolicy/private/mediatuner.te

(allow appdomain mediatuner (binder (transfer)))
;;* lme

;;* lmx 11 system/sepolicy/private/mediatuner.te

(allow mediatuner appdomain (fd (use)))
;;* lme

;;* lmx 14 system/sepolicy/private/mediatuner.te

(allow mediatuner mediatuner_service (service_manager (add find)))
;;* lme

;;* lmx 14 system/sepolicy/private/mediatuner.te

(neverallow base_typeattr_886 mediatuner_service (service_manager (add)))
;;* lme

;;* lmx 14 system/sepolicy/private/mediatuner.te

(allow mediatuner su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 15 system/sepolicy/private/mediatuner.te

(allow mediatuner system_server (fd (use)))
;;* lme

;;* lmx 16 system/sepolicy/private/mediatuner.te

(allow mediatuner tv_tuner_resource_mgr_service (service_manager (find)))
;;* lme

;;* lmx 17 system/sepolicy/private/mediatuner.te

(allow mediatuner package_native_service (service_manager (find)))
;;* lme

;;* lmx 18 system/sepolicy/private/mediatuner.te

(allow mediatuner system_server (binder (call transfer)))
;;* lme

;;* lmx 18 system/sepolicy/private/mediatuner.te

(allow system_server mediatuner (binder (transfer)))
;;* lme

;;* lmx 18 system/sepolicy/private/mediatuner.te

(allow mediatuner system_server (fd (use)))
;;* lme

;;* lmx 21 system/sepolicy/private/mediatuner.te

(allow mediatuner tuner_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 24 system/sepolicy/private/mediatuner.te

(allow mediatuner tuner_server_ctl_prop (file (read getattr map open)))
;;* lme

;;* lmx 32 system/sepolicy/private/mediatuner.te

(neverallow mediatuner fs_type (file (execute_no_trans)))
(neverallow mediatuner file_type (file (execute_no_trans)))
;;* lme

;;* lmx 35 system/sepolicy/private/mediatuner.te

(neverallowx mediatuner domain (ioctl tcp_socket (0x6900 0x6902)))
(neverallowx mediatuner domain (ioctl udp_socket (0x6900 0x6902)))
(neverallowx mediatuner domain (ioctl rawip_socket (0x6900 0x6902)))
;;* lme

;;* lmx 35 system/sepolicy/private/mediatuner.te

(neverallowx mediatuner domain (ioctl tcp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx mediatuner domain (ioctl udp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx mediatuner domain (ioctl rawip_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
;;* lme

;;* lmx 35 system/sepolicy/private/mediatuner.te

(neverallowx mediatuner domain (ioctl tcp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx mediatuner domain (ioctl udp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx mediatuner domain (ioctl rawip_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
;;* lme

;;* lmx 6 system/sepolicy/private/memcgv2_activation_depth.te

(allow init memcgv2_activation_depth_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 6 system/sepolicy/private/memcgv2_activation_depth.te

(allow init memcgv2_activation_depth (process (transition)))
;;* lme

;;* lmx 6 system/sepolicy/private/memcgv2_activation_depth.te

(allow memcgv2_activation_depth memcgv2_activation_depth_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init memcgv2_activation_depth (process (noatsecure)))
;;* lmx 6 system/sepolicy/private/memcgv2_activation_depth.te

(allow init memcgv2_activation_depth (process (siginh rlimitinh)))
;;* lme

(typetransition init memcgv2_activation_depth_exec process memcgv2_activation_depth)
;;* lmx 9 system/sepolicy/private/memcgv2_activation_depth.te

(allow memcgv2_activation_depth shell_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lme

;;* lmx 10 system/sepolicy/private/memcgv2_activation_depth.te

(allow memcgv2_activation_depth system_file (file (getattr map execute execute_no_trans)))
;;* lme

;;* lmx 11 system/sepolicy/private/memcgv2_activation_depth.te

(allow memcgv2_activation_depth toolbox_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lme

;;* lmx 14 system/sepolicy/private/memcgv2_activation_depth.te

(allow memcgv2_activation_depth cgroup_desc_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 17 system/sepolicy/private/memcgv2_activation_depth.te

(allow memcgv2_activation_depth libprocessgroup_metadata_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
;;* lme

;;* lmx 18 system/sepolicy/private/memcgv2_activation_depth.te

(allow memcgv2_activation_depth libprocessgroup_metadata_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 22 system/sepolicy/private/memcgv2_activation_depth.te

(allow memcgv2_activation_depth cgroup_v2 (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 23 system/sepolicy/private/memcgv2_activation_depth.te

(allow memcgv2_activation_depth cgroup_v2 (file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 26 system/sepolicy/private/memcgv2_activation_depth.te

(allow memcgv2_activation_depth property_socket (sock_file (write)))
;;* lme

;;* lmx 26 system/sepolicy/private/memcgv2_activation_depth.te

(allow memcgv2_activation_depth init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 26 system/sepolicy/private/memcgv2_activation_depth.te

(allow memcgv2_activation_depth powerctl_prop (property_service (set)))
;;* lme

;;* lmx 26 system/sepolicy/private/memcgv2_activation_depth.te

(allow memcgv2_activation_depth powerctl_prop (file (read getattr map open)))
;;* lme

;;* lmx 4 system/sepolicy/private/migrate_legacy_obb_data.te

(allow migrate_legacy_obb_data media_rw_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 5 system/sepolicy/private/migrate_legacy_obb_data.te

(allow migrate_legacy_obb_data media_rw_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 7 system/sepolicy/private/migrate_legacy_obb_data.te

(allow migrate_legacy_obb_data shell_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lme

;;* lmx 9 system/sepolicy/private/migrate_legacy_obb_data.te

(allow migrate_legacy_obb_data toolbox_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lme

;;* lmx 11 system/sepolicy/private/migrate_legacy_obb_data.te

(allow migrate_legacy_obb_data self (capability (chown dac_override dac_read_search fowner fsetid)))
;;* lme

;;* lmx 13 system/sepolicy/private/migrate_legacy_obb_data.te

(allow migrate_legacy_obb_data mnt_user_file (dir (search)))
;;* lme

;;* lmx 14 system/sepolicy/private/migrate_legacy_obb_data.te

(allow migrate_legacy_obb_data mnt_user_file (lnk_file (read)))
;;* lme

;;* lmx 15 system/sepolicy/private/migrate_legacy_obb_data.te

(allow migrate_legacy_obb_data storage_file (dir (search)))
;;* lme

;;* lmx 16 system/sepolicy/private/migrate_legacy_obb_data.te

(allow migrate_legacy_obb_data storage_file (lnk_file (read)))
;;* lme

;;* lmx 18 system/sepolicy/private/migrate_legacy_obb_data.te

(allow migrate_legacy_obb_data sdcard_type (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 19 system/sepolicy/private/migrate_legacy_obb_data.te

(allow migrate_legacy_obb_data sdcard_type (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 24 system/sepolicy/private/migrate_legacy_obb_data.te

(allow migrate_legacy_obb_data installd (fd (use)))
;;* lme

;;* lmx 28 system/sepolicy/private/migrate_legacy_obb_data.te

(allow migrate_legacy_obb_data installd (file (read)))
;;* lme

;;* lmx 5 system/sepolicy/private/misctrl.te

(allow init misctrl_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 5 system/sepolicy/private/misctrl.te

(allow init misctrl (process (transition)))
;;* lme

;;* lmx 5 system/sepolicy/private/misctrl.te

(allow misctrl misctrl_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init misctrl (process (noatsecure)))
;;* lmx 5 system/sepolicy/private/misctrl.te

(allow init misctrl (process (siginh rlimitinh)))
;;* lme

(typetransition init misctrl_exec process misctrl)
;;* lmx 7 system/sepolicy/private/misctrl.te

(allow misctrl misc_block_device (blk_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 8 system/sepolicy/private/misctrl.te

(allow misctrl block_device (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 9 system/sepolicy/private/misctrl.te

(allow misctrl gsi_metadata_file_type (dir (search)))
(allow misctrl metadata_file (dir (search)))
;;* lme

;;* lmx 9 system/sepolicy/private/misctrl.te

(allow misctrl gsi_public_metadata_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 9 system/sepolicy/private/misctrl.te

(allow misctrl proc_bootconfig (file (ioctl read getattr lock map open watch watch_reads)))
(allow misctrl proc_cmdline (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 11 system/sepolicy/private/misctrl.te

(allow misctrl property_socket (sock_file (write)))
;;* lme

;;* lmx 11 system/sepolicy/private/misctrl.te

(allow misctrl init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 11 system/sepolicy/private/misctrl.te

(allow misctrl misctrl_prop (property_service (set)))
;;* lme

;;* lmx 11 system/sepolicy/private/misctrl.te

(allow misctrl misctrl_prop (file (read getattr map open)))
;;* lme

(dontaudit misctrl sysfs_dt_firmware_android (dir (search)))
(dontaudit misctrl vendor_property_type (file (read)))
;;* lmx 16 system/sepolicy/private/mlstrustedsubject.te

(neverallow base_typeattr_887 app_data_file (file (create setattr relabelfrom relabelto unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow base_typeattr_887 privapp_data_file (file (create setattr relabelfrom relabelto unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
;;* lme

;;* lmx 27 system/sepolicy/private/mlstrustedsubject.te

(neverallow base_typeattr_887 app_data_file (dir (ioctl write create setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent rmdir)))
(neverallow base_typeattr_887 privapp_data_file (dir (ioctl write create setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent rmdir)))
;;* lme

;;* lmx 52 system/sepolicy/private/mlstrustedsubject.te

(neverallow base_typeattr_888 app_data_file (dir (read getattr search)))
(neverallow base_typeattr_888 privapp_data_file (dir (read getattr search)))
;;* lme

;;* lmx 4 system/sepolicy/private/mm_events.te

(allow init mm_events_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 4 system/sepolicy/private/mm_events.te

(allow init mm_events (process (transition)))
;;* lme

;;* lmx 4 system/sepolicy/private/mm_events.te

(allow mm_events mm_events_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init mm_events (process (noatsecure)))
;;* lmx 4 system/sepolicy/private/mm_events.te

(allow init mm_events (process (siginh rlimitinh)))
;;* lme

(typetransition init mm_events_exec process mm_events)
;;* lmx 6 system/sepolicy/private/mm_events.te

(allow mm_events shell_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lme

;;* lmx 10 system/sepolicy/private/mm_events.te

(allow mm_events toolbox_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lme

;;* lmx 12 system/sepolicy/private/mm_events.te

(allow mm_events perfetto_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lme

;;* lmx 14 system/sepolicy/private/mm_events.te

(allow mm_events perfetto_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 14 system/sepolicy/private/mm_events.te

(allow mm_events perfetto (process (transition)))
;;* lme

;;* lmx 14 system/sepolicy/private/mm_events.te

(allow perfetto perfetto_exec (file (read getattr map execute open entrypoint)))
;;* lme

;;* lmx 14 system/sepolicy/private/mm_events.te

(allow perfetto mm_events (process (sigchld)))
;;* lme

(dontaudit mm_events perfetto (process (noatsecure)))
;;* lmx 14 system/sepolicy/private/mm_events.te

(allow mm_events perfetto (process (siginh rlimitinh)))
;;* lme

(typetransition mm_events perfetto_exec process perfetto)
;;* lmx 6 system/sepolicy/private/mmd.te

(allow init mmd_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 6 system/sepolicy/private/mmd.te

(allow init mmd (process (transition)))
;;* lme

;;* lmx 6 system/sepolicy/private/mmd.te

(allow mmd mmd_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init mmd (process (noatsecure)))
;;* lmx 6 system/sepolicy/private/mmd.te

(allow init mmd (process (siginh rlimitinh)))
;;* lme

(typetransition init mmd_exec process mmd)
;;* lmx 9 system/sepolicy/private/mmd.te

(allow mmd property_socket (sock_file (write)))
;;* lme

;;* lmx 9 system/sepolicy/private/mmd.te

(allow mmd init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 9 system/sepolicy/private/mmd.te

(allow mmd mmd_shared_status_prop (property_service (set)))
;;* lme

;;* lmx 9 system/sepolicy/private/mmd.te

(allow mmd mmd_shared_status_prop (file (read getattr map open)))
;;* lme

;;* lmx 10 system/sepolicy/private/mmd.te

(allow mmd property_socket (sock_file (write)))
;;* lme

;;* lmx 10 system/sepolicy/private/mmd.te

(allow mmd init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 10 system/sepolicy/private/mmd.te

(allow mmd mmd_status_prop (property_service (set)))
;;* lme

;;* lmx 10 system/sepolicy/private/mmd.te

(allow mmd mmd_status_prop (file (read getattr map open)))
;;* lme

;;* lmx 11 system/sepolicy/private/mmd.te

(allow mmd mmd_prop (file (read getattr map open)))
;;* lme

;;* lmx 12 system/sepolicy/private/mmd.te

(allow mmd mmd_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 13 system/sepolicy/private/mmd.te

(allow mmd device_config_mmd_native_prop (file (read getattr map open)))
;;* lme

;;* lmx 16 system/sepolicy/private/mmd.te

(allow mmd mmd_service (service_manager (add find)))
;;* lme

;;* lmx 16 system/sepolicy/private/mmd.te

(neverallow base_typeattr_889 mmd_service (service_manager (add)))
;;* lme

;;* lmx 16 system/sepolicy/private/mmd.te

(allow mmd su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 17 system/sepolicy/private/mmd.te

(allow mmd servicemanager (binder (call transfer)))
;;* lme

;;* lmx 17 system/sepolicy/private/mmd.te

(allow servicemanager mmd (binder (call transfer)))
;;* lme

;;* lmx 20 system/sepolicy/private/mmd.te

(allow mmd proc_swaps (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 23 system/sepolicy/private/mmd.te

(allow mmd sysfs_zram (dir (search)))
;;* lme

;;* lmx 24 system/sepolicy/private/mmd.te

(allow mmd sysfs_zram (file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 27 system/sepolicy/private/mmd.te

(allow mmd proc_meminfo (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 31 system/sepolicy/private/mmd.te

(allow mmd block_device (dir (search)))
;;* lme

;;* lmx 32 system/sepolicy/private/mmd.te

(allow mmd ram_device (blk_file (ioctl read write getattr lock append map open watch watch_reads)))
(allow mmd swap_block_device (blk_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 35 system/sepolicy/private/mmd.te

(allow mmd statsdw_socket (sock_file (write)))
;;* lme

;;* lmx 35 system/sepolicy/private/mmd.te

(allow mmd statsd (unix_dgram_socket (sendto)))
;;* lme

;;* lmx 37 system/sepolicy/private/mmd.te

(allow mmd stats_service (service_manager (find)))
;;* lme

;;* lmx 38 system/sepolicy/private/mmd.te

(allow mmd statsmanager_service (service_manager (find)))
;;* lme

;;* lmx 39 system/sepolicy/private/mmd.te

(allow mmd statsd (binder (call transfer)))
;;* lme

;;* lmx 39 system/sepolicy/private/mmd.te

(allow statsd mmd (binder (transfer)))
;;* lme

;;* lmx 39 system/sepolicy/private/mmd.te

(allow mmd statsd (fd (use)))
;;* lme

;;* lmx 42 system/sepolicy/private/mmd.te

(allow mmd dumpstate (fd (use)))
;;* lme

;;* lmx 43 system/sepolicy/private/mmd.te

(allow mmd dumpstate (fifo_file (write getattr)))
;;* lme

;;* lmx 51 system/sepolicy/private/mmd.te

(allowx mmd ram_device (ioctl blk_file ((range 0xbb02 0xbb04))))
(allowx mmd swap_block_device (ioctl blk_file ((range 0xbb02 0xbb04))))
;;* lme

;;* lmx 56 system/sepolicy/private/mmd.te

(neverallowx base_typeattr_889 ram_device (ioctl blk_file ((range 0xbb02 0xbb04))))
(neverallowx base_typeattr_889 swap_block_device (ioctl blk_file ((range 0xbb02 0xbb04))))
;;* lme

;;* lmx 57 system/sepolicy/private/mmd.te

(neverallowx domain ram_device (ioctl blk_file (0xbb01)))
(neverallowx domain swap_block_device (ioctl blk_file (0xbb01)))
;;* lme

;;* lmx 60 system/sepolicy/private/mmd.te

(allow mmd self (capability (sys_nice)))
;;* lme

;;* lmx 63 system/sepolicy/private/mmd.te

(allow mmd system_server (fd (use)))
;;* lme

;;* lmx 72 system/sepolicy/private/mmd.te

(allow mmd zygote_tmpfs (file (write)))
;;* lme

;;* lmx 73 system/sepolicy/private/mmd.te

(allow mmd appdomain_tmpfs (file (write)))
;;* lme

;;* lmx 74 system/sepolicy/private/mmd.te

(allow mmd system_server_tmpfs (file (write)))
;;* lme

;;* lmx 75 system/sepolicy/private/mmd.te

(allow mmd gpu_device (chr_file (write)))
;;* lme

;;* lmx 76 system/sepolicy/private/mmd.te

(allow mmd zygote (memfd_file (write)))
;;* lme

;;* lmx 77 system/sepolicy/private/mmd.te

(allow mmd appdomain (memfd_file (write)))
;;* lme

;;* lmx 78 system/sepolicy/private/mmd.te

(allow mmd system_server (memfd_file (write)))
;;* lme

;;* lmx 79 system/sepolicy/private/mmd.te

(allow mmd gpu_device (memfd_file (write)))
;;* lme

;;* lmx 6 system/sepolicy/private/mmd_setup.te

(allow init mmd_setup_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 6 system/sepolicy/private/mmd_setup.te

(allow init mmd_setup (process (transition)))
;;* lme

;;* lmx 6 system/sepolicy/private/mmd_setup.te

(allow mmd_setup mmd_setup_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init mmd_setup (process (noatsecure)))
;;* lmx 6 system/sepolicy/private/mmd_setup.te

(allow init mmd_setup (process (siginh rlimitinh)))
;;* lme

(typetransition init mmd_setup_exec process mmd_setup)
;;* lmx 9 system/sepolicy/private/mmd_setup.te

(allow mmd_setup mmd_prop (file (read getattr map open)))
;;* lme

;;* lmx 10 system/sepolicy/private/mmd_setup.te

(allow mmd_setup mmd_shared_prop (file (read getattr map open)))
;;* lme

;;* lmx 11 system/sepolicy/private/mmd_setup.te

(allow mmd_setup mmd_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 12 system/sepolicy/private/mmd_setup.te

(allow mmd_setup device_config_mmd_native_prop (file (read getattr map open)))
;;* lme

;;* lmx 15 system/sepolicy/private/mmd_setup.te

(allow mmd_setup property_socket (sock_file (write)))
;;* lme

;;* lmx 15 system/sepolicy/private/mmd_setup.te

(allow mmd_setup init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 15 system/sepolicy/private/mmd_setup.te

(allow mmd_setup mmd_shared_status_prop (property_service (set)))
;;* lme

;;* lmx 15 system/sepolicy/private/mmd_setup.te

(allow mmd_setup mmd_shared_status_prop (file (read getattr map open)))
;;* lme

;;* lmx 16 system/sepolicy/private/mmd_setup.te

(allow mmd_setup property_socket (sock_file (write)))
;;* lme

;;* lmx 16 system/sepolicy/private/mmd_setup.te

(allow mmd_setup init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 16 system/sepolicy/private/mmd_setup.te

(allow mmd_setup mmd_status_prop (property_service (set)))
;;* lme

;;* lmx 16 system/sepolicy/private/mmd_setup.te

(allow mmd_setup mmd_status_prop (file (read getattr map open)))
;;* lme

;;* lmx 19 system/sepolicy/private/mmd_setup.te

(allow mmd_setup proc_swaps (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 22 system/sepolicy/private/mmd_setup.te

(allow mmd_setup sysfs_zram (dir (search)))
;;* lme

;;* lmx 23 system/sepolicy/private/mmd_setup.te

(allow mmd_setup sysfs_zram (file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 27 system/sepolicy/private/mmd_setup.te

(allow mmd_setup block_device (dir (search)))
;;* lme

;;* lmx 28 system/sepolicy/private/mmd_setup.te

(allow mmd_setup ram_device (blk_file (ioctl read write getattr lock append map open watch watch_reads)))
(allow mmd_setup swap_block_device (blk_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 31 system/sepolicy/private/mmd_setup.te

(allow mmd_setup statsdw_socket (sock_file (write)))
;;* lme

;;* lmx 31 system/sepolicy/private/mmd_setup.te

(allow mmd_setup statsd (unix_dgram_socket (sendto)))
;;* lme

;;* lmx 34 system/sepolicy/private/mmd_setup.te

(allow mmd_setup per_boot_file (dir (search)))
;;* lme

;;* lmx 35 system/sepolicy/private/mmd_setup.te

(allow mmd_setup zram_data_file (dir (write lock open add_name remove_name search)))
;;* lme

;;* lmx 36 system/sepolicy/private/mmd_setup.te

(allow mmd_setup zram_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 39 system/sepolicy/private/mmd_setup.te

(allow mmd_setup loop_control_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 40 system/sepolicy/private/mmd_setup.te

(allow mmd_setup loop_device (blk_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 41 system/sepolicy/private/mmd_setup.te

(allowx mmd_setup loop_device (ioctl blk_file (0x4c0a)))
;;* lme

;;* lmx 42 system/sepolicy/private/mmd_setup.te

(allow mmd_setup sysfs_loop (dir (search)))
;;* lme

;;* lmx 43 system/sepolicy/private/mmd_setup.te

(allow mmd_setup sysfs_loop (file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 44 system/sepolicy/private/mmd_setup.te

(allow mmd_setup sysfs_dm (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 47 system/sepolicy/private/mmd_setup.te

(allow mmd_setup sysfs_devices_block (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 48 system/sepolicy/private/mmd_setup.te

(allow mmd_setup sysfs_devices_block (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 53 system/sepolicy/private/mmd_setup.te

(allow mmd_setup sysfs_block (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 56 system/sepolicy/private/mmd_setup.te

(allow mmd_setup self (capability (sys_admin)))
;;* lme

;;* lmx 59 system/sepolicy/private/mmd_setup.te

(allow mmd_setup self (capability (chown)))
;;* lme

;;* lmx 60 system/sepolicy/private/mmd_setup.te

(allow mmd_setup sysfs_zram (file (getattr setattr)))
;;* lme

;;* lmx 61 system/sepolicy/private/mmd_setup.te

(allow mmd_setup ram_device (blk_file (getattr setattr)))
(allow mmd_setup swap_block_device (blk_file (getattr setattr)))
;;* lme

;;* lmx 3 system/sepolicy/private/modprobe.te

(allow modprobe proc_modules (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 4 system/sepolicy/private/modprobe.te

(allow modprobe proc_cmdline (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 5 system/sepolicy/private/modprobe.te

(allow modprobe self (capability (sys_module)))
(allow modprobe self (cap_userns (sys_module)))
;;* lme

;;* lmx 6 system/sepolicy/private/modprobe.te

(allow modprobe kernel (key (search)))
;;* lme

;;* lmx 7 system/sepolicy/private/modprobe.te

(allow modprobe system_dlkm_file (dir (getattr search)))
;;* lme

;;* lmx 8 system/sepolicy/private/modprobe.te

(allow modprobe system_dlkm_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 9 system/sepolicy/private/modprobe.te

(allow modprobe system_dlkm_file (system (module_load)))
;;* lme

;;* lmx 5 system/sepolicy/private/mtectrl.te

(allow init mtectrl_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 5 system/sepolicy/private/mtectrl.te

(allow init mtectrl (process (transition)))
;;* lme

;;* lmx 5 system/sepolicy/private/mtectrl.te

(allow mtectrl mtectrl_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init mtectrl (process (noatsecure)))
;;* lmx 5 system/sepolicy/private/mtectrl.te

(allow init mtectrl (process (siginh rlimitinh)))
;;* lme

(typetransition init mtectrl_exec process mtectrl)
;;* lmx 8 system/sepolicy/private/mtectrl.te

(allow mtectrl property_socket (sock_file (write)))
;;* lme

;;* lmx 8 system/sepolicy/private/mtectrl.te

(allow mtectrl init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 8 system/sepolicy/private/mtectrl.te

(allow mtectrl arm64_memtag_prop (property_service (set)))
;;* lme

;;* lmx 8 system/sepolicy/private/mtectrl.te

(allow mtectrl arm64_memtag_prop (file (read getattr map open)))
;;* lme

;;* lmx 13 system/sepolicy/private/mtectrl.te

(allow mtectrl misc_block_device (blk_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 14 system/sepolicy/private/mtectrl.te

(allow mtectrl block_device (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 15 system/sepolicy/private/mtectrl.te

(allow mtectrl gsi_metadata_file_type (dir (search)))
(allow mtectrl metadata_file (dir (search)))
;;* lme

;;* lmx 15 system/sepolicy/private/mtectrl.te

(allow mtectrl gsi_public_metadata_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 15 system/sepolicy/private/mtectrl.te

(allow mtectrl proc_bootconfig (file (ioctl read getattr lock map open watch watch_reads)))
(allow mtectrl proc_cmdline (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

(dontaudit mtectrl sysfs_dt_firmware_android (dir (search)))
(dontaudit mtectrl vendor_property_type (file (read)))
;;* lmx 7 system/sepolicy/private/native_app_zygote.te

(allow native_app_zygote self (capability (setgid setuid)))
(allow native_app_zygote self (cap_userns (setgid setuid)))
;;* lme

;;* lmx 9 system/sepolicy/private/native_app_zygote.te

(allow native_app_zygote self (capability (setpcap)))
(allow native_app_zygote self (cap_userns (setpcap)))
;;* lme

;;* lmx 11 system/sepolicy/private/native_app_zygote.te

(allow native_app_zygote self (process (setcurrent)))
;;* lme

;;* lmx 12 system/sepolicy/private/native_app_zygote.te

(allow native_app_zygote isolated_app (process (dyntransition)))
;;* lme

(dontaudit native_app_zygote mnt_expand_file (dir (getattr)))
;;* lmx 18 system/sepolicy/private/native_app_zygote.te

(allow native_app_zygote seapp_contexts_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 20 system/sepolicy/private/native_app_zygote.te

(allow native_app_zygote selinuxfs (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 20 system/sepolicy/private/native_app_zygote.te

(allow native_app_zygote selinuxfs (file (ioctl read getattr lock map open watch watch_reads)))
(allow native_app_zygote selinuxfs (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 20 system/sepolicy/private/native_app_zygote.te

(allow native_app_zygote selinuxfs (file (write lock append map open)))
;;* lme

;;* lmx 20 system/sepolicy/private/native_app_zygote.te

(allow native_app_zygote kernel (security (check_context)))
;;* lme

;;* lmx 22 system/sepolicy/private/native_app_zygote.te

(allow native_app_zygote selinuxfs (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 22 system/sepolicy/private/native_app_zygote.te

(allow native_app_zygote selinuxfs (file (ioctl read getattr lock map open watch watch_reads)))
(allow native_app_zygote selinuxfs (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 22 system/sepolicy/private/native_app_zygote.te

(allow native_app_zygote selinuxfs (file (write lock append map open)))
;;* lme

;;* lmx 22 system/sepolicy/private/native_app_zygote.te

(allow native_app_zygote kernel (security (compute_av)))
;;* lme

;;* lmx 22 system/sepolicy/private/native_app_zygote.te

(allow native_app_zygote self (netlink_selinux_socket (read write create getattr setattr lock relabelfrom relabelto append bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
;;* lme

;;* lmx 25 system/sepolicy/private/native_app_zygote.te

(allow native_app_zygote zygote_next (fd (use)))
;;* lme

;;* lmx 26 system/sepolicy/private/native_app_zygote.te

(allow native_app_zygote zygote_next (process (sigchld)))
;;* lme

;;* lmx 27 system/sepolicy/private/native_app_zygote.te

(allow native_app_zygote zygote_next (unix_dgram_socket (write getattr)))
;;* lme

;;* lmx 29 system/sepolicy/private/native_app_zygote.te

(allow native_app_zygote zygote_next_exec (file (read getattr execute)))
;;* lme

;;* lmx 32 system/sepolicy/private/native_app_zygote.te

(allow native_app_zygote apk_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 33 system/sepolicy/private/native_app_zygote.te

(allow native_app_zygote apk_data_file (file (ioctl read getattr lock map execute open watch watch_reads)))
;;* lme

;;* lmx 40 system/sepolicy/private/native_app_zygote.te

(allow native_app_zygote pmsg_device (chr_file (getattr)))
;;* lme

;;* lmx 42 system/sepolicy/private/native_app_zygote.te

(allow native_app_zygote debugfs_trace_marker (file (getattr)))
;;* lme

;;* lmx 45 system/sepolicy/private/native_app_zygote.te

(allow native_app_zygote device_config_runtime_native_prop (file (read getattr map open)))
;;* lme

;;* lmx 46 system/sepolicy/private/native_app_zygote.te

(allow native_app_zygote device_config_runtime_native_boot_prop (file (read getattr map open)))
;;* lme

;;* lmx 49 system/sepolicy/private/native_app_zygote.te

(allow native_app_zygote system_unsolzygote_socket (sock_file (write)))
;;* lme

;;* lmx 49 system/sepolicy/private/native_app_zygote.te

(allow native_app_zygote system_server (unix_dgram_socket (sendto)))
;;* lme

;;* lmx 56 system/sepolicy/private/native_app_zygote.te

(neverallow native_app_zygote base_typeattr_319 (process (dyntransition)))
;;* lme

;;* lmx 59 system/sepolicy/private/native_app_zygote.te

(neverallow native_app_zygote base_typeattr_270 (process (transition)))
;;* lme

;;* lmx 63 system/sepolicy/private/native_app_zygote.te

(neverallow native_app_zygote base_typeattr_248 (file (execute_no_trans)))
;;* lme

;;* lmx 67 system/sepolicy/private/native_app_zygote.te

(neverallow base_typeattr_890 native_app_zygote (process (dyntransition)))
;;* lme

;;* lmx 70 system/sepolicy/private/native_app_zygote.te

(neverallow native_app_zygote property_socket (sock_file (write)))
;;* lme

;;* lmx 71 system/sepolicy/private/native_app_zygote.te

(neverallow native_app_zygote property_type (property_service (set)))
;;* lme

;;* lmx 74 system/sepolicy/private/native_app_zygote.te

(neverallow native_app_zygote app_data_file_type (file (ioctl read write getattr lock append map execute open watch watch_reads execute_no_trans)))
;;* lme

;;* lmx 80 system/sepolicy/private/native_app_zygote.te

(neverallow native_app_zygote base_typeattr_321 (service_manager (find)))
;;* lme

;;* lmx 83 system/sepolicy/private/native_app_zygote.te

(neverallow native_app_zygote gpu_device (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
;;* lme

;;* lmx 86 system/sepolicy/private/native_app_zygote.te

(neverallow native_app_zygote cache_file (dir (write create setattr relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access execmod watch_mount watch_sb watch_with_perm add_name remove_name reparent rmdir)))
;;* lme

;;* lmx 87 system/sepolicy/private/native_app_zygote.te

(neverallow native_app_zygote cache_file (file (ioctl write create setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
;;* lme

;;* lmx 103 system/sepolicy/private/native_app_zygote.te

(neverallow native_app_zygote domain (socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow native_app_zygote domain (tcp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind name_connect)))
(neverallow native_app_zygote domain (udp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind)))
(neverallow native_app_zygote domain (rawip_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind)))
(neverallow native_app_zygote domain (netlink_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow native_app_zygote domain (packet_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow native_app_zygote domain (key_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow native_app_zygote domain (netlink_route_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write nlmsg_readpriv nlmsg_getneigh nlmsg)))
(neverallow native_app_zygote domain (netlink_tcpdiag_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write nlmsg)))
(neverallow native_app_zygote domain (netlink_nflog_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow native_app_zygote domain (netlink_xfrm_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write nlmsg)))
(neverallow native_app_zygote domain (netlink_audit_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write nlmsg_relay nlmsg_readpriv nlmsg_tty_audit nlmsg)))
(neverallow native_app_zygote domain (netlink_dnrt_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow native_app_zygote domain (netlink_kobject_uevent_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow native_app_zygote domain (appletalk_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow native_app_zygote domain (tun_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind attach_queue)))
(neverallow native_app_zygote domain (netlink_iscsi_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow native_app_zygote domain (netlink_fib_lookup_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow native_app_zygote domain (netlink_connector_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow native_app_zygote domain (netlink_netfilter_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow native_app_zygote domain (netlink_generic_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow native_app_zygote domain (netlink_scsitransport_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow native_app_zygote domain (netlink_rdma_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow native_app_zygote domain (netlink_crypto_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow native_app_zygote domain (sctp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind name_connect association)))
(neverallow native_app_zygote domain (icmp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind)))
(neverallow native_app_zygote domain (ax25_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow native_app_zygote domain (ipx_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow native_app_zygote domain (netrom_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow native_app_zygote domain (atmpvc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow native_app_zygote domain (x25_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow native_app_zygote domain (rose_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow native_app_zygote domain (decnet_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow native_app_zygote domain (atmsvc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow native_app_zygote domain (rds_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow native_app_zygote domain (irda_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow native_app_zygote domain (pppox_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow native_app_zygote domain (llc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow native_app_zygote domain (can_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow native_app_zygote domain (tipc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow native_app_zygote domain (bluetooth_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow native_app_zygote domain (iucv_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow native_app_zygote domain (rxrpc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow native_app_zygote domain (isdn_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow native_app_zygote domain (phonet_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow native_app_zygote domain (ieee802154_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow native_app_zygote domain (caif_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow native_app_zygote domain (alg_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow native_app_zygote domain (nfc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow native_app_zygote domain (vsock_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow native_app_zygote domain (kcm_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow native_app_zygote domain (qipcrtr_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow native_app_zygote domain (smc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
;;* lme

;;* lmx 115 system/sepolicy/private/native_app_zygote.te

(neverallow native_app_zygote base_typeattr_891 (unix_dgram_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
;;* lme

;;* lmx 118 system/sepolicy/private/native_app_zygote.te

(neverallow native_app_zygote base_typeattr_248 (process (ptrace)))
;;* lme

;;* lmx 2 system/sepolicy/private/net.te

(allow base_typeattr_892 node_type (tcp_socket (node_bind)))
(allow base_typeattr_892 node_type (udp_socket (node_bind)))
(allow base_typeattr_892 node_type (rawip_socket (node_bind)))
(allow base_typeattr_892 node_type (icmp_socket (node_bind)))
;;* lme

;;* lmx 3 system/sepolicy/private/net.te

(allow base_typeattr_892 port_type (udp_socket (name_bind)))
;;* lme

;;* lmx 4 system/sepolicy/private/net.te

(allow base_typeattr_892 port_type (tcp_socket (name_bind)))
;;* lme

;;* lmx 22 system/sepolicy/private/net.te

(allow base_typeattr_893 self (netlink_route_socket (bind nlmsg_readpriv nlmsg_getneigh)))
;;* lme

;;* lmx 29 system/sepolicy/private/net.te

(allow base_typeattr_894 self (tcp_socket (ioctl read write create getattr setattr lock append map bind connect listen accept getopt setopt shutdown)))
;;* lme

;;* lmx 30 system/sepolicy/private/net.te

(allow base_typeattr_894 self (udp_socket (ioctl read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
(allow base_typeattr_894 self (rawip_socket (ioctl read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
(allow base_typeattr_894 self (icmp_socket (ioctl read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
;;* lme

;;* lmx 33 system/sepolicy/private/net.te

(allow base_typeattr_894 port_type (tcp_socket (name_connect)))
;;* lme

;;* lmx 35 system/sepolicy/private/net.te

(allow netdomain self (netlink_route_socket (read write create getattr setattr lock append connect getopt setopt shutdown nlmsg_read nlmsg)))
;;* lme

;;* lmx 36 system/sepolicy/private/net.te

(allowx netdomain self (nlmsg netlink_route_socket (0x16 0x1a 0x22 0x26 0x2a 0x2e 0x32 0x3a 0x3e 0x4a 0x4e 0x52 0x56 0x5a 0x5c 0x5e 0x60 0x66 0x6a 0x72 0x76 0x7a)))
;;* lme

;;* lmx 39 system/sepolicy/private/net.te

(allow netdomain dnsproxyd_socket (sock_file (write)))
;;* lme

;;* lmx 39 system/sepolicy/private/net.te

(allow netdomain netd (unix_stream_socket (connectto)))
;;* lme

;;* lmx 42 system/sepolicy/private/net.te

(allow netdomain fwmarkd_socket (sock_file (write)))
;;* lme

;;* lmx 42 system/sepolicy/private/net.te

(allow netdomain netd (unix_stream_socket (connectto)))
;;* lme

;;* lmx 4 system/sepolicy/private/netd.te

(allow init netd_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 4 system/sepolicy/private/netd.te

(allow init netd (process (transition)))
;;* lme

;;* lmx 4 system/sepolicy/private/netd.te

(allow netd netd_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init netd (process (noatsecure)))
;;* lmx 4 system/sepolicy/private/netd.te

(allow init netd (process (siginh rlimitinh)))
;;* lme

(typetransition init netd_exec process netd)
;;* lmx 7 system/sepolicy/private/netd.te

(allow netd dnsmasq_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 7 system/sepolicy/private/netd.te

(allow netd dnsmasq (process (transition)))
;;* lme

;;* lmx 7 system/sepolicy/private/netd.te

(allow dnsmasq dnsmasq_exec (file (read getattr map execute open entrypoint)))
;;* lme

;;* lmx 7 system/sepolicy/private/netd.te

(allow dnsmasq netd (process (sigchld)))
;;* lme

(dontaudit netd dnsmasq (process (noatsecure)))
;;* lmx 7 system/sepolicy/private/netd.te

(allow netd dnsmasq (process (siginh rlimitinh)))
;;* lme

(typetransition netd dnsmasq_exec process dnsmasq)
;;* lmx 9 system/sepolicy/private/netd.te

(allow netd fs_bpf (dir (search)))
(allow netd fs_bpf_vendor (dir (search)))
(allow netd fs_bpf_netd_readonly (dir (search)))
(allow netd fs_bpf_netd_shared (dir (search)))
;;* lme

;;* lmx 10 system/sepolicy/private/netd.te

(allow netd fs_bpf (file (read getattr)))
(allow netd fs_bpf_vendor (file (read getattr)))
(allow netd fs_bpf_netd_readonly (file (read getattr)))
(allow netd fs_bpf_netd_shared (file (read getattr)))
;;* lme

;;* lmx 11 system/sepolicy/private/netd.te

(allow netd fs_bpf (file (write)))
(allow netd fs_bpf_netd_shared (file (write)))
;;* lme

;;* lmx 15 system/sepolicy/private/netd.te

(allow netd bpfloader (bpf (prog_run)))
;;* lme

;;* lmx 16 system/sepolicy/private/netd.te

(allow netd self (bpf (map_create)))
;;* lme

;;* lmx 17 system/sepolicy/private/netd.te

(allow netd bpfloader (bpf (map_read map_write)))
(allow netd netd (bpf (map_read map_write)))
(allow netd network_stack (bpf (map_read map_write)))
(allow netd system_server (bpf (map_read map_write)))
;;* lme

;;* lmx 22 system/sepolicy/private/netd.te

(allow netd self (key_socket (create)))
;;* lme

;;* lmx 24 system/sepolicy/private/netd.te

(allow netd property_socket (sock_file (write)))
;;* lme

;;* lmx 24 system/sepolicy/private/netd.te

(allow netd init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 24 system/sepolicy/private/netd.te

(allow netd ctl_mdnsd_prop (property_service (set)))
;;* lme

;;* lmx 24 system/sepolicy/private/netd.te

(allow netd ctl_mdnsd_prop (file (read getattr map open)))
;;* lme

;;* lmx 25 system/sepolicy/private/netd.te

(allow netd property_socket (sock_file (write)))
;;* lme

;;* lmx 25 system/sepolicy/private/netd.te

(allow netd init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 25 system/sepolicy/private/netd.te

(allow netd netd_stable_secret_prop (property_service (set)))
;;* lme

;;* lmx 25 system/sepolicy/private/netd.te

(allow netd netd_stable_secret_prop (file (read getattr map open)))
;;* lme

;;* lmx 27 system/sepolicy/private/netd.te

(allow netd adbd_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 28 system/sepolicy/private/netd.te

(allow netd hwservicemanager_prop (file (read getattr map open)))
;;* lme

;;* lmx 29 system/sepolicy/private/netd.te

(allow netd device_config_netd_native_prop (file (read getattr map open)))
;;* lme

;;* lmx 32 system/sepolicy/private/netd.te

(allow netd statsdw_socket (sock_file (write)))
;;* lme

;;* lmx 32 system/sepolicy/private/netd.te

(allow netd statsd (unix_dgram_socket (sendto)))
;;* lme

;;* lmx 35 system/sepolicy/private/netd.te

(allow netd network_stack (binder (call transfer)))
;;* lme

;;* lmx 35 system/sepolicy/private/netd.te

(allow network_stack netd (binder (transfer)))
;;* lme

;;* lmx 35 system/sepolicy/private/netd.te

(allow netd network_stack (fd (use)))
;;* lme

;;* lmx 38 system/sepolicy/private/netd.te

(allow netd dumpstate (fd (use)))
;;* lme

;;* lmx 39 system/sepolicy/private/netd.te

(allow netd dumpstate (fifo_file (write getattr)))
;;* lme

;;* lmx 43 system/sepolicy/private/netd.te

(allow netd mdnsd_socket (sock_file (write)))
;;* lme

;;* lmx 43 system/sepolicy/private/netd.te

(allow netd mdnsd (unix_stream_socket (connectto)))
;;* lme

;;* lmx 45 system/sepolicy/private/netd.te

(allowx netd self (ioctl udp_socket (0x6900 0x6902)))
;;* lme

;;* lmx 45 system/sepolicy/private/netd.te

(allowx netd self (ioctl udp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
;;* lme

;;* lmx 45 system/sepolicy/private/netd.te

(allowx netd self (ioctl udp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
;;* lme

;;* lmx 47 system/sepolicy/private/netd.te

(allow netd cgroup (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 47 system/sepolicy/private/netd.te

(allow netd cgroup (file (ioctl read getattr lock map open watch watch_reads)))
(allow netd cgroup (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 49 system/sepolicy/private/netd.te

(allow netd system_server (fd (use)))
;;* lme

;;* lmx 51 system/sepolicy/private/netd.te

(allow netd self (capability (kill net_bind_service net_admin net_raw)))
(allow netd self (cap_userns (kill net_bind_service net_admin net_raw)))
;;* lme

(dontaudit netd self (capability (fsetid)))
(dontaudit netd self (cap_userns (fsetid)))
;;* lmx 61 system/sepolicy/private/netd.te

(allow netd tun_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 62 system/sepolicy/private/netd.te

(allowx netd tun_device (ioctl chr_file (0x54ca 0x54d2)))
;;* lme

;;* lmx 63 system/sepolicy/private/netd.te

(allow netd self (tun_socket (create)))
;;* lme

;;* lmx 65 system/sepolicy/private/netd.te

(allow netd self (netlink_kobject_uevent_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
;;* lme

;;* lmx 66 system/sepolicy/private/netd.te

(allow netd self (netlink_route_socket (nlmsg_write)))
;;* lme

;;* lmx 67 system/sepolicy/private/netd.te

(allowx netd self (nlmsg netlink_route_socket ((range 0x10 0x7a))))
;;* lme

;;* lmx 68 system/sepolicy/private/netd.te

(allow netd self (netlink_nflog_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
;;* lme

;;* lmx 69 system/sepolicy/private/netd.te

(allow netd self (netlink_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
;;* lme

;;* lmx 70 system/sepolicy/private/netd.te

(allow netd self (netlink_tcpdiag_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
;;* lme

;;* lmx 72 system/sepolicy/private/netd.te

(allow netd self (netlink_tcpdiag_socket (nlmsg_read nlmsg_write)))
;;* lme

;;* lmx 74 system/sepolicy/private/netd.te

(allow netd self (netlink_tcpdiag_socket (nlmsg)))
;;* lme

;;* lmx 75 system/sepolicy/private/netd.te

(allow netd self (netlink_generic_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
;;* lme

;;* lmx 76 system/sepolicy/private/netd.te

(allow netd self (netlink_netfilter_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
;;* lme

;;* lmx 77 system/sepolicy/private/netd.te

(allow netd shell_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lme

;;* lmx 78 system/sepolicy/private/netd.te

(allow netd system_file (file (getattr map execute execute_no_trans)))
;;* lme

;;* lmx 80 system/sepolicy/private/netd.te

(allow netd devpts (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 84 system/sepolicy/private/netd.te

(allow netd system_file (file (lock)))
;;* lme

(dontaudit netd system_file (dir (write)))
;;* lmx 87 system/sepolicy/private/netd.te

(allow netd proc_net_type (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 87 system/sepolicy/private/netd.te

(allow netd proc_net_type (file (ioctl read getattr lock map open watch watch_reads)))
(allow netd proc_net_type (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 89 system/sepolicy/private/netd.te

(allow netd proc_net_type (file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 92 system/sepolicy/private/netd.te

(allow netd sysfs (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 93 system/sepolicy/private/netd.te

(allow netd sysfs_net (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 93 system/sepolicy/private/netd.te

(allow netd sysfs_net (file (ioctl read getattr lock map open watch watch_reads)))
(allow netd sysfs_net (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 96 system/sepolicy/private/netd.te

(allow netd sysfs_net (file (write lock append map open)))
;;* lme

;;* lmx 99 system/sepolicy/private/netd.te

(allow netd sysfs_usb (file (write)))
;;* lme

;;* lmx 101 system/sepolicy/private/netd.te

(allow netd cgroup_v2 (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 101 system/sepolicy/private/netd.te

(allow netd cgroup_v2 (file (ioctl read getattr lock map open watch watch_reads)))
(allow netd cgroup_v2 (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 106 system/sepolicy/private/netd.te

(allow netd self (capability (chown dac_override dac_read_search)))
(allow netd self (cap_userns (chown dac_override dac_read_search)))
;;* lme

;;* lmx 109 system/sepolicy/private/netd.te

(allow netd net_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 110 system/sepolicy/private/netd.te

(allow netd net_data_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
;;* lme

;;* lmx 111 system/sepolicy/private/netd.te

(allow netd self (capability (fowner)))
(allow netd self (cap_userns (fowner)))
;;* lme

;;* lmx 114 system/sepolicy/private/netd.te

(allow netd system_file (file (lock)))
;;* lme

;;* lmx 117 system/sepolicy/private/netd.te

(allow netd dnsmasq (process (sigkill signal)))
;;* lme

;;* lmx 120 system/sepolicy/private/netd.te

(allow netd servicemanager (binder (call transfer)))
;;* lme

;;* lmx 120 system/sepolicy/private/netd.te

(allow servicemanager netd (binder (call transfer)))
;;* lme

;;* lmx 121 system/sepolicy/private/netd.te

(allow netd netd_service (service_manager (add find)))
;;* lme

;;* lmx 121 system/sepolicy/private/netd.te

(neverallow base_typeattr_895 netd_service (service_manager (add)))
;;* lme

;;* lmx 121 system/sepolicy/private/netd.te

(allow netd su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 122 system/sepolicy/private/netd.te

(allow netd dnsresolver_service (service_manager (add find)))
;;* lme

;;* lmx 122 system/sepolicy/private/netd.te

(neverallow base_typeattr_895 dnsresolver_service (service_manager (add)))
;;* lme

;;* lmx 122 system/sepolicy/private/netd.te

(allow netd su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 123 system/sepolicy/private/netd.te

(allow netd mdns_service (service_manager (add find)))
;;* lme

;;* lmx 123 system/sepolicy/private/netd.te

(neverallow base_typeattr_895 mdns_service (service_manager (add)))
;;* lme

;;* lmx 123 system/sepolicy/private/netd.te

(allow netd su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 124 system/sepolicy/private/netd.te

(allow netd dumpstate (fifo_file (write getattr)))
;;* lme

;;* lmx 127 system/sepolicy/private/netd.te

(allow netd system_server (binder (call)))
;;* lme

;;* lmx 128 system/sepolicy/private/netd.te

(allow netd permission_service (service_manager (find)))
;;* lme

;;* lmx 131 system/sepolicy/private/netd.te

(allow netd netd_listener_service (service_manager (find)))
;;* lme

;;* lmx 140 system/sepolicy/private/netd.te

(allow netd netdomain (tcp_socket (read write getattr setattr getopt setopt)))
(allow netd netdomain (udp_socket (read write getattr setattr getopt setopt)))
(allow netd netdomain (rawip_socket (read write getattr setattr getopt setopt)))
(allow netd netdomain (tun_socket (read write getattr setattr getopt setopt)))
(allow netd netdomain (icmp_socket (read write getattr setattr getopt setopt)))
;;* lme

;;* lmx 141 system/sepolicy/private/netd.te

(allow netd netdomain (fd (use)))
;;* lme

;;* lmx 144 system/sepolicy/private/netd.te

(allow netd self (netlink_xfrm_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
;;* lme

;;* lmx 146 system/sepolicy/private/netd.te

(allow netd self (netlink_xfrm_socket (nlmsg_read nlmsg_write)))
;;* lme

;;* lmx 148 system/sepolicy/private/netd.te

(allow netd self (netlink_xfrm_socket (nlmsg)))
;;* lme

;;* lmx 151 system/sepolicy/private/netd.te

(allow netd system_net_netd_hwservice (hwservice_manager (add find)))
;;* lme

;;* lmx 151 system/sepolicy/private/netd.te

(allow netd hidl_base_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 151 system/sepolicy/private/netd.te

(neverallow base_typeattr_895 system_net_netd_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 152 system/sepolicy/private/netd.te

(allow netd hwservicemanager (binder (call transfer)))
;;* lme

;;* lmx 152 system/sepolicy/private/netd.te

(allow hwservicemanager netd (binder (call transfer)))
;;* lme

;;* lmx 155 system/sepolicy/private/netd.te

(allow netd system_net_netd_service (service_manager (add find)))
;;* lme

;;* lmx 155 system/sepolicy/private/netd.te

(neverallow base_typeattr_895 system_net_netd_service (service_manager (add)))
;;* lme

;;* lmx 155 system/sepolicy/private/netd.te

(allow netd su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 163 system/sepolicy/private/netd.te

(neverallow netd dev_type (blk_file (read write)))
;;* lme

;;* lmx 166 system/sepolicy/private/netd.te

(neverallow netd domain (process (ptrace)))
;;* lme

;;* lmx 169 system/sepolicy/private/netd.te

(neverallow netd system_file_type (file (write)))
(neverallow netd system_file_type (dir (write)))
(neverallow netd system_file_type (lnk_file (write)))
(neverallow netd system_file_type (chr_file (write)))
(neverallow netd system_file_type (blk_file (write)))
(neverallow netd system_file_type (sock_file (write)))
(neverallow netd system_file_type (fifo_file (write)))
;;* lme

;;* lmx 172 system/sepolicy/private/netd.te

(neverallow netd app_data_file_type (file (write)))
(neverallow netd app_data_file_type (dir (write)))
(neverallow netd app_data_file_type (lnk_file (write)))
(neverallow netd app_data_file_type (chr_file (write)))
(neverallow netd app_data_file_type (blk_file (write)))
(neverallow netd app_data_file_type (sock_file (write)))
(neverallow netd app_data_file_type (fifo_file (write)))
(neverallow netd system_data_file (file (write)))
(neverallow netd system_data_file (dir (write)))
(neverallow netd system_data_file (lnk_file (write)))
(neverallow netd system_data_file (chr_file (write)))
(neverallow netd system_data_file (blk_file (write)))
(neverallow netd system_data_file (sock_file (write)))
(neverallow netd system_data_file (fifo_file (write)))
;;* lme

;;* lmx 182 system/sepolicy/private/netd.te

(neverallow base_typeattr_896 netd_service (service_manager (find)))
;;* lme

;;* lmx 192 system/sepolicy/private/netd.te

(neverallow base_typeattr_896 dnsresolver_service (service_manager (find)))
;;* lme

;;* lmx 202 system/sepolicy/private/netd.te

(neverallow base_typeattr_896 mdns_service (service_manager (find)))
;;* lme

;;* lmx 205 system/sepolicy/private/netd.te

(neverallow base_typeattr_290 netd (binder (call)))
;;* lme

;;* lmx 206 system/sepolicy/private/netd.te

(neverallow netd base_typeattr_897 (binder (call)))
;;* lme

;;* lmx 211 system/sepolicy/private/netd.te

(neverallow netd proc_net (dir (write create setattr relabelfrom link rename add_name remove_name reparent rmdir)))
;;* lme

(dontaudit netd proc_net (dir (write)))
;;* lmx 214 system/sepolicy/private/netd.te

(neverallow netd sysfs_net (dir (write create setattr relabelfrom link rename add_name remove_name reparent rmdir)))
;;* lme

(dontaudit netd sysfs_net (dir (write)))
;;* lmx 218 system/sepolicy/private/netd.te

(neverallow netd self (capability (sys_admin)))
;;* lme

(dontaudit netd self (capability (sys_admin)))
(dontaudit netd self (capability (sys_module)))
(dontaudit netd appdomain (unix_stream_socket (read write)))
;;* lmx 229 system/sepolicy/private/netd.te

(neverallow base_typeattr_898 netd_stable_secret_prop (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 233 system/sepolicy/private/netd.te

(neverallow base_typeattr_899 netd_stable_secret_prop (property_service (set)))
;;* lme

;;* lmx 4 system/sepolicy/private/netutils_wrapper.te

(allow netutils_wrapper system_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 4 system/sepolicy/private/netutils_wrapper.te

(allow netutils_wrapper system_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow netutils_wrapper system_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 7 system/sepolicy/private/netutils_wrapper.te

(allow netutils_wrapper self (capability (net_raw)))
(allow netutils_wrapper self (cap_userns (net_raw)))
;;* lme

;;* lmx 9 system/sepolicy/private/netutils_wrapper.te

(allow netutils_wrapper system_file (file (execute execute_no_trans)))
;;* lme

;;* lmx 10 system/sepolicy/private/netutils_wrapper.te

(allow netutils_wrapper proc_net_type (file (read getattr open)))
;;* lme

;;* lmx 11 system/sepolicy/private/netutils_wrapper.te

(allow netutils_wrapper self (rawip_socket (ioctl read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
;;* lme

;;* lmx 12 system/sepolicy/private/netutils_wrapper.te

(allow netutils_wrapper self (udp_socket (ioctl read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
;;* lme

;;* lmx 13 system/sepolicy/private/netutils_wrapper.te

(allow netutils_wrapper self (capability (net_admin)))
(allow netutils_wrapper self (cap_userns (net_admin)))
;;* lme

;;* lmx 15 system/sepolicy/private/netutils_wrapper.te

(allow netutils_wrapper self (netlink_route_socket (read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write nlmsg_readpriv nlmsg_getneigh nlmsg)))
;;* lme

;;* lmx 16 system/sepolicy/private/netutils_wrapper.te

(allow netutils_wrapper self (netlink_xfrm_socket (read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write nlmsg)))
;;* lme

;;* lmx 19 system/sepolicy/private/netutils_wrapper.te

(allow netutils_wrapper netd_service (service_manager (find)))
;;* lme

;;* lmx 20 system/sepolicy/private/netutils_wrapper.te

(allow netutils_wrapper dnsresolver_service (service_manager (find)))
;;* lme

;;* lmx 21 system/sepolicy/private/netutils_wrapper.te

(allow netutils_wrapper mdns_service (service_manager (find)))
;;* lme

;;* lmx 22 system/sepolicy/private/netutils_wrapper.te

(allow netutils_wrapper servicemanager (binder (call transfer)))
;;* lme

;;* lmx 22 system/sepolicy/private/netutils_wrapper.te

(allow servicemanager netutils_wrapper (binder (call transfer)))
;;* lme

;;* lmx 23 system/sepolicy/private/netutils_wrapper.te

(allow netutils_wrapper netd (binder (call transfer)))
;;* lme

;;* lmx 23 system/sepolicy/private/netutils_wrapper.te

(allow netd netutils_wrapper (binder (transfer)))
;;* lme

;;* lmx 23 system/sepolicy/private/netutils_wrapper.te

(allow netutils_wrapper netd (fd (use)))
;;* lme

;;* lmx 28 system/sepolicy/private/netutils_wrapper.te

(allow netutils_wrapper fs_bpf (dir (search)))
(allow netutils_wrapper fs_bpf_vendor (dir (search)))
(allow netutils_wrapper fs_bpf_netd_shared (dir (search)))
;;* lme

;;* lmx 29 system/sepolicy/private/netutils_wrapper.te

(allow netutils_wrapper fs_bpf (file (read getattr)))
(allow netutils_wrapper fs_bpf_vendor (file (read getattr)))
(allow netutils_wrapper fs_bpf_netd_shared (file (read getattr)))
;;* lme

;;* lmx 30 system/sepolicy/private/netutils_wrapper.te

(allow netutils_wrapper fs_bpf (file (write)))
;;* lme

;;* lmx 31 system/sepolicy/private/netutils_wrapper.te

(allow netutils_wrapper bpfloader (bpf (prog_run)))
;;* lme

;;* lmx 34 system/sepolicy/private/netutils_wrapper.te

(allow netutils_wrapper net_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 34 system/sepolicy/private/netutils_wrapper.te

(allow netutils_wrapper net_data_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow netutils_wrapper net_data_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 36 system/sepolicy/private/netutils_wrapper.te

(allow base_typeattr_422 netutils_wrapper_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 36 system/sepolicy/private/netutils_wrapper.te

(allow base_typeattr_422 netutils_wrapper (process (transition)))
;;* lme

;;* lmx 36 system/sepolicy/private/netutils_wrapper.te

(allow netutils_wrapper netutils_wrapper_exec (file (read getattr map execute open entrypoint)))
;;* lme

;;* lmx 36 system/sepolicy/private/netutils_wrapper.te

(allow netutils_wrapper base_typeattr_422 (process (sigchld)))
;;* lme

(dontaudit base_typeattr_422 netutils_wrapper (process (noatsecure)))
;;* lmx 36 system/sepolicy/private/netutils_wrapper.te

(allow base_typeattr_422 netutils_wrapper (process (siginh rlimitinh)))
;;* lme

(typetransition base_typeattr_422 netutils_wrapper_exec process netutils_wrapper)
(dontaudit netutils_wrapper self (capability (sys_resource)))
(dontaudit netutils_wrapper self (cap_userns (sys_resource)))
(dontaudit netutils_wrapper sysfs_type (file (read)))
;;* lmx 51 system/sepolicy/private/netutils_wrapper.te

(neverallow netutils_wrapper self (capability (chown dac_override dac_read_search fowner fsetid kill setgid setuid setpcap linux_immutable net_bind_service net_broadcast ipc_lock ipc_owner sys_module sys_rawio sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_nice sys_resource sys_time sys_tty_config mknod lease audit_write audit_control setfcap)))
(neverallow netutils_wrapper self (cap_userns (chown dac_override dac_read_search fowner fsetid kill setgid setuid setpcap linux_immutable net_bind_service net_broadcast ipc_lock ipc_owner sys_module sys_rawio sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_nice sys_resource sys_time sys_tty_config mknod lease audit_write audit_control setfcap)))
;;* lme

;;* lmx 53 system/sepolicy/private/netutils_wrapper.te

(neverallow base_typeattr_390 netutils_wrapper_exec (file (execute_no_trans)))
;;* lme

(typetransition network_stack tmpfs file appdomain_tmpfs)
;;* lmx 6 system/sepolicy/private/network_stack.te

(allow network_stack network_stack_userfaultfd (anon_inode (ioctl read create)))
;;* lme

(dontaudit su network_stack_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lmx 6 system/sepolicy/private/network_stack.te

(neverallow base_typeattr_900 network_stack_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 6 system/sepolicy/private/network_stack.te

(allow network_stack appdomain_tmpfs (file (read write getattr map execute)))
;;* lme

;;* lmx 6 system/sepolicy/private/network_stack.te

(allow network_stack appdomain (memfd_file (read write getattr map execute)))
;;* lme

;;* lmx 6 system/sepolicy/private/network_stack.te

(neverallow base_typeattr_901 base_typeattr_900 (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 6 system/sepolicy/private/network_stack.te

(neverallow base_typeattr_902 network_stack (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 6 system/sepolicy/private/network_stack.te

(neverallow base_typeattr_903 network_stack (process (ptrace)))
;;* lme

;;* lmx 6 system/sepolicy/private/network_stack.te

(neverallow network_stack base_typeattr_904 (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 14 system/sepolicy/private/network_stack.te

(allow network_stack self (capability (net_bind_service net_broadcast net_admin net_raw)))
(allow network_stack self (cap_userns (net_bind_service net_broadcast net_admin net_raw)))
;;* lme

;;* lmx 16 system/sepolicy/private/network_stack.te

(allow network_stack self (capability2 (wake_alarm)))
(allow network_stack self (cap2_userns (wake_alarm)))
;;* lme

;;* lmx 19 system/sepolicy/private/network_stack.te

(allowx network_stack self (ioctl udp_socket (0x6900 0x6902)))
;;* lme

;;* lmx 19 system/sepolicy/private/network_stack.te

(allowx network_stack self (ioctl udp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
;;* lme

;;* lmx 19 system/sepolicy/private/network_stack.te

(allowx network_stack self (ioctl udp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
;;* lme

;;* lmx 22 system/sepolicy/private/network_stack.te

(allow network_stack self (packet_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
;;* lme

;;* lmx 25 system/sepolicy/private/network_stack.te

(allow network_stack self (netlink_route_socket (nlmsg_write)))
;;* lme

;;* lmx 26 system/sepolicy/private/network_stack.te

(allowx network_stack self (nlmsg netlink_route_socket ((range 0x10 0x7a))))
;;* lme

;;* lmx 29 system/sepolicy/private/network_stack.te

(allow network_stack self (netlink_kobject_uevent_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
;;* lme

;;* lmx 32 system/sepolicy/private/network_stack.te

(allow network_stack self (netlink_nflog_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
;;* lme

;;* lmx 33 system/sepolicy/private/network_stack.te

(allow network_stack self (netlink_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
;;* lme

;;* lmx 34 system/sepolicy/private/network_stack.te

(allow network_stack self (netlink_generic_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
;;* lme

;;* lmx 36 system/sepolicy/private/network_stack.te

(allow network_stack app_api_service (service_manager (find)))
;;* lme

;;* lmx 37 system/sepolicy/private/network_stack.te

(allow network_stack dnsresolver_service (service_manager (find)))
;;* lme

;;* lmx 38 system/sepolicy/private/network_stack.te

(allow network_stack mdns_service (service_manager (find)))
;;* lme

;;* lmx 39 system/sepolicy/private/network_stack.te

(allow network_stack netd_service (service_manager (find)))
;;* lme

;;* lmx 40 system/sepolicy/private/network_stack.te

(allow network_stack network_watchlist_service (service_manager (find)))
;;* lme

;;* lmx 41 system/sepolicy/private/network_stack.te

(allow network_stack radio_service (service_manager (find)))
;;* lme

;;* lmx 42 system/sepolicy/private/network_stack.te

(allow network_stack system_config_service (service_manager (find)))
;;* lme

;;* lmx 43 system/sepolicy/private/network_stack.te

(allow network_stack radio_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 44 system/sepolicy/private/network_stack.te

(allow network_stack radio_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 46 system/sepolicy/private/network_stack.te

(allow network_stack netd (binder (call transfer)))
;;* lme

;;* lmx 46 system/sepolicy/private/network_stack.te

(allow netd network_stack (binder (transfer)))
;;* lme

;;* lmx 46 system/sepolicy/private/network_stack.te

(allow network_stack netd (fd (use)))
;;* lme

;;* lmx 50 system/sepolicy/private/network_stack.te

(allow network_stack self (key_socket (create)))
;;* lme

(dontaudit network_stack self (key_socket (getopt)))
;;* lmx 57 system/sepolicy/private/network_stack.te

(allow network_stack proc_net_type (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 57 system/sepolicy/private/network_stack.te

(allow network_stack proc_net_type (file (ioctl read getattr lock map open watch watch_reads)))
(allow network_stack proc_net_type (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 60 system/sepolicy/private/network_stack.te

(allow network_stack proc_net_type (file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 63 system/sepolicy/private/network_stack.te

(allow network_stack sysfs (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 64 system/sepolicy/private/network_stack.te

(allow network_stack sysfs_net (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 64 system/sepolicy/private/network_stack.te

(allow network_stack sysfs_net (file (ioctl read getattr lock map open watch watch_reads)))
(allow network_stack sysfs_net (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 67 system/sepolicy/private/network_stack.te

(allow network_stack sysfs_net (file (write lock append map open)))
;;* lme

;;* lmx 70 system/sepolicy/private/network_stack.te

(allow network_stack device_config_connectivity_prop (file (read getattr map open)))
;;* lme

;;* lmx 73 system/sepolicy/private/network_stack.te

(allow network_stack self (netlink_tcpdiag_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
;;* lme

;;* lmx 75 system/sepolicy/private/network_stack.te

(allow network_stack self (netlink_tcpdiag_socket (nlmsg_read nlmsg_write)))
;;* lme

;;* lmx 77 system/sepolicy/private/network_stack.te

(allow network_stack self (netlink_tcpdiag_socket (nlmsg)))
;;* lme

;;* lmx 79 system/sepolicy/private/network_stack.te

(allow network_stack hal_tetheroffload (memfd_file (read write getattr map)))
;;* lme

;;* lmx 79 system/sepolicy/private/network_stack.te

(allow hal_tetheroffload network_stack (memfd_file (read write getattr map)))
;;* lme

;;* lmx 81 system/sepolicy/private/network_stack.te

(allow network_stack self (netlink_netfilter_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
;;* lme

;;* lmx 82 system/sepolicy/private/network_stack.te

(allow network_stack network_stack_service (service_manager (find)))
;;* lme

;;* lmx 84 system/sepolicy/private/network_stack.te

(allow network_stack fs_bpf_tethering (dir (search)))
(allow network_stack fs_bpf_net_private (dir (search)))
(allow network_stack fs_bpf_net_shared (dir (search)))
(allow network_stack fs_bpf_netd_readonly (dir (search)))
(allow network_stack fs_bpf_netd_shared (dir (search)))
;;* lme

;;* lmx 85 system/sepolicy/private/network_stack.te

(allow network_stack fs_bpf_tethering (file (read write getattr)))
(allow network_stack fs_bpf_net_private (file (read write getattr)))
(allow network_stack fs_bpf_net_shared (file (read write getattr)))
(allow network_stack fs_bpf_netd_readonly (file (read write getattr)))
(allow network_stack fs_bpf_netd_shared (file (read write getattr)))
;;* lme

;;* lmx 86 system/sepolicy/private/network_stack.te

(allow network_stack bpfloader (bpf (prog_run)))
;;* lme

;;* lmx 87 system/sepolicy/private/network_stack.te

(allow network_stack self (bpf (map_create)))
;;* lme

;;* lmx 88 system/sepolicy/private/network_stack.te

(allow network_stack bpfloader (bpf (map_read map_write)))
(allow network_stack netd (bpf (map_read map_write)))
(allow network_stack network_stack (bpf (map_read map_write)))
(allow network_stack system_server (bpf (map_read map_write)))
;;* lme

;;* lmx 91 system/sepolicy/private/network_stack.te

(allow network_stack device_config_tethering_u_or_later_native_prop (file (read getattr map open)))
;;* lme

;;* lmx 94 system/sepolicy/private/network_stack.te

(allow network_stack self (netlink_xfrm_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
;;* lme

;;* lmx 96 system/sepolicy/private/network_stack.te

(allow network_stack self (netlink_xfrm_socket (nlmsg_read nlmsg_write)))
;;* lme

;;* lmx 98 system/sepolicy/private/network_stack.te

(allow network_stack self (netlink_xfrm_socket (nlmsg)))
;;* lme

;;* lmx 101 system/sepolicy/private/network_stack.te

(allow network_stack tun_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 102 system/sepolicy/private/network_stack.te

(allowx network_stack tun_device (ioctl chr_file (0x54ca 0x54cd 0x54d2 0x54e2)))
;;* lme

;;* lmx 110 system/sepolicy/private/network_stack.te

(neverallow base_typeattr_352 fs_bpf_net_private (dir (ioctl read write create setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 111 system/sepolicy/private/network_stack.te

(neverallow base_typeattr_352 fs_bpf_net_private (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
;;* lme

;;* lmx 114 system/sepolicy/private/network_stack.te

(neverallow base_typeattr_353 fs_bpf_net_shared (dir (ioctl read write create setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 115 system/sepolicy/private/network_stack.te

(neverallow base_typeattr_353 fs_bpf_net_shared (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
;;* lme

;;* lmx 119 system/sepolicy/private/network_stack.te

(neverallow base_typeattr_354 fs_bpf_netd_readonly (dir (ioctl read write create setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 120 system/sepolicy/private/network_stack.te

(neverallow base_typeattr_354 fs_bpf_netd_readonly (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
;;* lme

;;* lmx 121 system/sepolicy/private/network_stack.te

(neverallow netd fs_bpf_netd_readonly (file (write)))
;;* lme

;;* lmx 125 system/sepolicy/private/network_stack.te

(neverallow base_typeattr_355 fs_bpf_netd_shared (dir (ioctl read write create setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 126 system/sepolicy/private/network_stack.te

(neverallow base_typeattr_355 fs_bpf_netd_shared (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
;;* lme

;;* lmx 127 system/sepolicy/private/network_stack.te

(neverallow netutils_wrapper fs_bpf_netd_shared (file (write)))
;;* lme

;;* lmx 130 system/sepolicy/private/network_stack.te

(neverallow base_typeattr_352 fs_bpf_tethering (dir (ioctl read write create setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 131 system/sepolicy/private/network_stack.te

(neverallow base_typeattr_352 fs_bpf_tethering (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
;;* lme

(typetransition nfc tmpfs file appdomain_tmpfs)
;;* lmx 3 system/sepolicy/private/nfc.te

(allow nfc nfc_userfaultfd (anon_inode (ioctl read create)))
;;* lme

(dontaudit su nfc_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lmx 3 system/sepolicy/private/nfc.te

(neverallow base_typeattr_905 nfc_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 3 system/sepolicy/private/nfc.te

(allow nfc appdomain_tmpfs (file (read write getattr map execute)))
;;* lme

;;* lmx 3 system/sepolicy/private/nfc.te

(allow nfc appdomain (memfd_file (read write getattr map execute)))
;;* lme

;;* lmx 3 system/sepolicy/private/nfc.te

(neverallow base_typeattr_906 base_typeattr_905 (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 3 system/sepolicy/private/nfc.te

(neverallow base_typeattr_907 nfc (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 3 system/sepolicy/private/nfc.te

(neverallow base_typeattr_908 nfc (process (ptrace)))
;;* lme

;;* lmx 3 system/sepolicy/private/nfc.te

(neverallow nfc base_typeattr_909 (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 7 system/sepolicy/private/nfc.te

(allow nfc nfc_service (service_manager (add find)))
;;* lme

;;* lmx 7 system/sepolicy/private/nfc.te

(neverallow base_typeattr_905 nfc_service (service_manager (add)))
;;* lme

;;* lmx 7 system/sepolicy/private/nfc.te

(allow nfc su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 9 system/sepolicy/private/nfc.te

(allow nfc hal_nfc (memfd_file (read write getattr map)))
;;* lme

;;* lmx 9 system/sepolicy/private/nfc.te

(allow hal_nfc nfc (memfd_file (read write getattr map)))
;;* lme

;;* lmx 12 system/sepolicy/private/nfc.te

(allow nfc nfc_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 13 system/sepolicy/private/nfc.te

(allow nfc nfc_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow nfc nfc_data_file (lnk_file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow nfc nfc_data_file (sock_file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow nfc nfc_data_file (fifo_file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 14 system/sepolicy/private/nfc.te

(allow nfc nfc_logs_data_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
;;* lme

;;* lmx 15 system/sepolicy/private/nfc.te

(allow nfc nfc_logs_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 18 system/sepolicy/private/nfc.te

(allow nfc audioserver_service (service_manager (find)))
;;* lme

;;* lmx 19 system/sepolicy/private/nfc.te

(allow nfc drmserver_service (service_manager (find)))
;;* lme

;;* lmx 20 system/sepolicy/private/nfc.te

(allow nfc mediametrics_service (service_manager (find)))
;;* lme

;;* lmx 21 system/sepolicy/private/nfc.te

(allow nfc mediaextractor_service (service_manager (find)))
;;* lme

;;* lmx 22 system/sepolicy/private/nfc.te

(allow nfc mediaserver_service (service_manager (find)))
;;* lme

;;* lmx 24 system/sepolicy/private/nfc.te

(allow nfc radio_service (service_manager (find)))
;;* lme

;;* lmx 25 system/sepolicy/private/nfc.te

(allow nfc app_api_service (service_manager (find)))
;;* lme

;;* lmx 26 system/sepolicy/private/nfc.te

(allow nfc system_api_service (service_manager (find)))
;;* lme

;;* lmx 27 system/sepolicy/private/nfc.te

(allow nfc vr_manager_service (service_manager (find)))
;;* lme

;;* lmx 28 system/sepolicy/private/nfc.te

(allow nfc secure_element_service (service_manager (find)))
;;* lme

;;* lmx 30 system/sepolicy/private/nfc.te

(allow nfc property_socket (sock_file (write)))
;;* lme

;;* lmx 30 system/sepolicy/private/nfc.te

(allow nfc init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 30 system/sepolicy/private/nfc.te

(allow nfc nfc_prop (property_service (set)))
;;* lme

;;* lmx 30 system/sepolicy/private/nfc.te

(allow nfc nfc_prop (file (read getattr map open)))
;;* lme

;;* lmx 35 system/sepolicy/private/nfc.te

(allow nfc shell_data_file (file (read)))
;;* lme

;;* lmx 38 system/sepolicy/private/nfc.te

(allow nfc device_logging_prop (file (read getattr map open)))
;;* lme

;;* lmx 41 system/sepolicy/private/nfc.te

(allow nfc sysfs_wake_lock (file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 41 system/sepolicy/private/nfc.te

(allow nfc self (capability2 (block_suspend)))
(allow nfc self (cap2_userns (block_suspend)))
;;* lme

;;* lmx 41 system/sepolicy/private/nfc.te

(allow nfc system_suspend_server (binder (call transfer)))
;;* lme

;;* lmx 41 system/sepolicy/private/nfc.te

(allow system_suspend_server nfc (binder (transfer)))
;;* lme

;;* lmx 41 system/sepolicy/private/nfc.te

(allow nfc system_suspend_server (fd (use)))
;;* lme

;;* lmx 41 system/sepolicy/private/nfc.te

(allow nfc system_suspend_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 41 system/sepolicy/private/nfc.te

(allow nfc hwservicemanager (binder (call transfer)))
;;* lme

;;* lmx 41 system/sepolicy/private/nfc.te

(allow hwservicemanager nfc (binder (call transfer)))
;;* lme

;;* lmx 41 system/sepolicy/private/nfc.te

(allow nfc hwservicemanager_prop (file (read getattr map open)))
;;* lme

;;* lmx 41 system/sepolicy/private/nfc.te

(allow nfc hidl_manager_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 41 system/sepolicy/private/nfc.te

(allow nfc hal_system_suspend_service (service_manager (find)))
;;* lme

;;* lmx 41 system/sepolicy/private/nfc.te

(allow nfc servicemanager (binder (call transfer)))
;;* lme

;;* lmx 41 system/sepolicy/private/nfc.te

(allow servicemanager nfc (binder (call transfer)))
;;* lme

;;* lmx 6 system/sepolicy/private/odrefresh.te

(allow odrefresh apex_module_data_file (dir (getattr search)))
;;* lme

;;* lmx 7 system/sepolicy/private/odrefresh.te

(allow odrefresh apex_art_data_file (dir (ioctl read write create getattr setattr lock relabelfrom rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 8 system/sepolicy/private/odrefresh.te

(allow odrefresh apex_art_data_file (file (ioctl read write create getattr setattr lock relabelto append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 11 system/sepolicy/private/odrefresh.te

(allow odrefresh odrefresh_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 12 system/sepolicy/private/odrefresh.te

(allow odrefresh odrefresh_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 14 system/sepolicy/private/odrefresh.te

(allow odrefresh odrefresh_userfaultfd (anon_inode (ioctl read create)))
;;* lme

(dontaudit su odrefresh_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lmx 14 system/sepolicy/private/odrefresh.te

(neverallow base_typeattr_910 odrefresh_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 18 system/sepolicy/private/odrefresh.te

(allow odrefresh apex_art_staging_data_file (dir (ioctl read write create getattr setattr lock relabelto rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 19 system/sepolicy/private/odrefresh.te

(allow odrefresh apex_art_staging_data_file (file (ioctl read write create getattr setattr lock relabelfrom append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 22 system/sepolicy/private/odrefresh.te

(allow odrefresh dex2oat_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 22 system/sepolicy/private/odrefresh.te

(allow odrefresh dex2oat (process (transition)))
;;* lme

;;* lmx 22 system/sepolicy/private/odrefresh.te

(allow dex2oat dex2oat_exec (file (read getattr map execute open entrypoint)))
;;* lme

;;* lmx 22 system/sepolicy/private/odrefresh.te

(allow dex2oat odrefresh (process (sigchld)))
;;* lme

(dontaudit odrefresh dex2oat (process (noatsecure)))
;;* lmx 22 system/sepolicy/private/odrefresh.te

(allow odrefresh dex2oat (process (siginh rlimitinh)))
;;* lme

(typetransition odrefresh dex2oat_exec process dex2oat)
;;* lmx 25 system/sepolicy/private/odrefresh.te

(allow odrefresh dex2oat (process (sigkill)))
;;* lme

;;* lmx 28 system/sepolicy/private/odrefresh.te

(allow odrefresh odsign_devpts (chr_file (read write)))
;;* lme

;;* lmx 29 system/sepolicy/private/odrefresh.te

(allow odrefresh odsign (fd (use)))
;;* lme

;;* lmx 33 system/sepolicy/private/odrefresh.te

(allow odrefresh apex_info_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 36 system/sepolicy/private/odrefresh.te

(allow odrefresh property_socket (sock_file (write)))
;;* lme

;;* lmx 36 system/sepolicy/private/odrefresh.te

(allow odrefresh init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 36 system/sepolicy/private/odrefresh.te

(allow odrefresh bootanim_system_prop (property_service (set)))
;;* lme

;;* lmx 36 system/sepolicy/private/odrefresh.te

(allow odrefresh bootanim_system_prop (file (read getattr map open)))
;;* lme

;;* lmx 39 system/sepolicy/private/odrefresh.te

(allow odrefresh device_config_runtime_native_prop (file (read getattr map open)))
;;* lme

;;* lmx 40 system/sepolicy/private/odrefresh.te

(allow odrefresh device_config_runtime_native_boot_prop (file (read getattr map open)))
;;* lme

(dontaudit odrefresh adbd (fd (use)))
(dontaudit odrefresh shell (fd (use)))
(dontaudit odrefresh devpts (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
(dontaudit odrefresh adbd (unix_stream_socket (read write getattr)))
;;* lmx 49 system/sepolicy/private/odrefresh.te

(allow odrefresh file_contexts_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 50 system/sepolicy/private/odrefresh.te

(allow odrefresh seapp_contexts_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 53 system/sepolicy/private/odrefresh.te

(allow odrefresh selinuxfs (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 53 system/sepolicy/private/odrefresh.te

(allow odrefresh selinuxfs (file (ioctl read getattr lock map open watch watch_reads)))
(allow odrefresh selinuxfs (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 53 system/sepolicy/private/odrefresh.te

(allow odrefresh selinuxfs (file (write lock append map open)))
;;* lme

;;* lmx 53 system/sepolicy/private/odrefresh.te

(allow odrefresh kernel (security (check_context)))
;;* lme

(dontaudit odrefresh property_type (file (ioctl read getattr lock map open watch watch_reads)))
;;* lmx 60 system/sepolicy/private/odrefresh.te

(allow odrefresh artd (fd (use)))
;;* lme

;;* lmx 65 system/sepolicy/private/odrefresh.te

(neverallow base_typeattr_911 apex_art_staging_data_file (file (open)))
;;* lme

;;* lmx 71 system/sepolicy/private/odrefresh.te

(neverallow base_typeattr_912 odrefresh_data_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 72 system/sepolicy/private/odrefresh.te

(neverallow base_typeattr_913 odrefresh_data_file (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
;;* lme

;;* lmx 10 system/sepolicy/private/odsign.te

(allow init odsign_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 10 system/sepolicy/private/odsign.te

(allow init odsign (process (transition)))
;;* lme

;;* lmx 10 system/sepolicy/private/odsign.te

(allow odsign odsign_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init odsign (process (noatsecure)))
;;* lmx 10 system/sepolicy/private/odsign.te

(allow init odsign (process (siginh rlimitinh)))
;;* lme

(typetransition init odsign_exec process odsign)
;;* lmx 13 system/sepolicy/private/odsign.te

(allow odsign odsign_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 14 system/sepolicy/private/odsign.te

(allow odsign odsign_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 17 system/sepolicy/private/odsign.te

(allow odsign odsign_metrics_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
;;* lme

;;* lmx 18 system/sepolicy/private/odsign.te

(allow odsign odsign_metrics_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

(typetransition odsign devpts chr_file odsign_devpts)
;;* lmx 21 system/sepolicy/private/odsign.te

(allow odsign odsign_devpts (chr_file (ioctl read write getattr open)))
;;* lme

;;* lmx 21 system/sepolicy/private/odsign.te

(allowx odsign odsign_devpts (ioctl chr_file ((range 0x5401 0x5404) 0x540b (range 0x540e 0x5411) (range 0x5413 0x5414) (range 0x5450 0x5451))))
;;* lme

;;* lmx 21 system/sepolicy/private/odsign.te

(neverallowx base_typeattr_248 odsign_devpts (ioctl chr_file (0x5412)))
;;* lme

;;* lmx 26 system/sepolicy/private/odsign.te

(allowx odsign apex_art_data_file (ioctl file (0x6601 (range 0x6685 0x6686))))
;;* lme

;;* lmx 29 system/sepolicy/private/odsign.te

(allow odsign servicemanager (binder (call transfer)))
;;* lme

;;* lmx 29 system/sepolicy/private/odsign.te

(allow servicemanager odsign (binder (call transfer)))
;;* lme

;;* lmx 32 system/sepolicy/private/odsign.te

(allow odsign apc_service (service_manager (find)))
;;* lme

;;* lmx 32 system/sepolicy/private/odsign.te

(allow odsign keystore_service (service_manager (find)))
;;* lme

;;* lmx 32 system/sepolicy/private/odsign.te

(allow odsign legacykeystore_service (service_manager (find)))
;;* lme

;;* lmx 32 system/sepolicy/private/odsign.te

(allow odsign keystore (binder (call transfer)))
;;* lme

;;* lmx 32 system/sepolicy/private/odsign.te

(allow keystore odsign (binder (transfer)))
;;* lme

;;* lmx 32 system/sepolicy/private/odsign.te

(allow odsign keystore (fd (use)))
;;* lme

;;* lmx 32 system/sepolicy/private/odsign.te

(allow keystore odsign (binder (call transfer)))
;;* lme

;;* lmx 32 system/sepolicy/private/odsign.te

(allow odsign keystore (binder (transfer)))
;;* lme

;;* lmx 32 system/sepolicy/private/odsign.te

(allow keystore odsign (fd (use)))
;;* lme

;;* lmx 40 system/sepolicy/private/odsign.te

(allow odsign odsign_key (keystore2_key (delete get_info rebind use)))
;;* lme

;;* lmx 43 system/sepolicy/private/odsign.te

(allow odsign hal_keymaster (memfd_file (read write getattr map)))
;;* lme

;;* lmx 43 system/sepolicy/private/odsign.te

(allow hal_keymaster odsign (memfd_file (read write getattr map)))
;;* lme

;;* lmx 46 system/sepolicy/private/odsign.te

(allow odsign apex_module_data_file (dir (getattr search)))
;;* lme

;;* lmx 48 system/sepolicy/private/odsign.te

(allow odsign apex_art_data_file (dir (ioctl read write getattr lock rename open watch watch_reads add_name remove_name search rmdir)))
;;* lme

;;* lmx 49 system/sepolicy/private/odsign.te

(allow odsign apex_art_data_file (file (ioctl read write getattr lock append map unlink open watch watch_reads)))
;;* lme

;;* lmx 52 system/sepolicy/private/odsign.te

(allow odsign odrefresh_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 52 system/sepolicy/private/odsign.te

(allow odsign odrefresh (process (transition)))
;;* lme

;;* lmx 52 system/sepolicy/private/odsign.te

(allow odrefresh odrefresh_exec (file (read getattr map execute open entrypoint)))
;;* lme

;;* lmx 52 system/sepolicy/private/odsign.te

(allow odrefresh odsign (process (sigchld)))
;;* lme

(dontaudit odsign odrefresh (process (noatsecure)))
;;* lmx 52 system/sepolicy/private/odsign.te

(allow odsign odrefresh (process (siginh rlimitinh)))
;;* lme

(typetransition odsign odrefresh_exec process odrefresh)
;;* lmx 55 system/sepolicy/private/odsign.te

(allow odsign compos_verify_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 55 system/sepolicy/private/odsign.te

(allow odsign compos_verify (process (transition)))
;;* lme

;;* lmx 55 system/sepolicy/private/odsign.te

(allow compos_verify compos_verify_exec (file (read getattr map execute open entrypoint)))
;;* lme

;;* lmx 55 system/sepolicy/private/odsign.te

(allow compos_verify odsign (process (sigchld)))
;;* lme

(dontaudit odsign compos_verify (process (noatsecure)))
;;* lmx 55 system/sepolicy/private/odsign.te

(allow odsign compos_verify (process (siginh rlimitinh)))
;;* lme

(typetransition odsign compos_verify_exec process compos_verify)
;;* lmx 58 system/sepolicy/private/odsign.te

(allow odsign property_socket (sock_file (write)))
;;* lme

;;* lmx 58 system/sepolicy/private/odsign.te

(allow odsign init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 58 system/sepolicy/private/odsign.te

(allow odsign odsign_prop (property_service (set)))
;;* lme

;;* lmx 58 system/sepolicy/private/odsign.te

(allow odsign odsign_prop (file (read getattr map open)))
;;* lme

;;* lmx 59 system/sepolicy/private/odsign.te

(neverallow base_typeattr_914 odsign_prop (property_service (set)))
;;* lme

;;* lmx 62 system/sepolicy/private/odsign.te

(allow odsign property_socket (sock_file (write)))
;;* lme

;;* lmx 62 system/sepolicy/private/odsign.te

(allow odsign init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 62 system/sepolicy/private/odsign.te

(allow odsign ctl_odsign_prop (property_service (set)))
;;* lme

;;* lmx 62 system/sepolicy/private/odsign.te

(allow odsign ctl_odsign_prop (file (read getattr map open)))
;;* lme

;;* lmx 65 system/sepolicy/private/odsign.te

(neverallow base_typeattr_914 odsign_data_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent rmdir)))
;;* lme

;;* lmx 66 system/sepolicy/private/odsign.te

(neverallow base_typeattr_914 odsign_data_file (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
;;* lme

;;* lmx 6 system/sepolicy/private/omapi.te

(allow init omapi_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 6 system/sepolicy/private/omapi.te

(allow init omapi (process (transition)))
;;* lme

;;* lmx 6 system/sepolicy/private/omapi.te

(allow omapi omapi_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init omapi (process (noatsecure)))
;;* lmx 6 system/sepolicy/private/omapi.te

(allow init omapi (process (siginh rlimitinh)))
;;* lme

(typetransition init omapi_exec process omapi)
;;* lmx 9 system/sepolicy/private/omapi.te

(allow omapi hal_secure_element (memfd_file (read write getattr map)))
;;* lme

;;* lmx 9 system/sepolicy/private/omapi.te

(allow hal_secure_element omapi (memfd_file (read write getattr map)))
;;* lme

;;* lmx 12 system/sepolicy/private/omapi.te

(allow omapi package_native_service (service_manager (find)))
;;* lme

;;* lmx 15 system/sepolicy/private/omapi.te

(allow omapi servicemanager (binder (call transfer)))
;;* lme

;;* lmx 15 system/sepolicy/private/omapi.te

(allow servicemanager omapi (binder (call transfer)))
;;* lme

;;* lmx 19 system/sepolicy/private/omapi.te

(allow omapi vendor_uuid_mapping_config_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 2 system/sepolicy/private/omapi_server.te

(allow omapi_server secure_element_service (service_manager (add find)))
;;* lme

;;* lmx 2 system/sepolicy/private/omapi_server.te

(neverallow base_typeattr_915 secure_element_service (service_manager (add)))
;;* lme

;;* lmx 2 system/sepolicy/private/omapi_server.te

(allow omapi_server su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 9 system/sepolicy/private/ot_ctl.te

(allow ot_ctl ot_daemon_socket (sock_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 11 system/sepolicy/private/ot_daemon.te

(allow init ot_daemon_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 11 system/sepolicy/private/ot_daemon.te

(allow init ot_daemon (process (transition)))
;;* lme

;;* lmx 11 system/sepolicy/private/ot_daemon.te

(allow ot_daemon ot_daemon_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init ot_daemon (process (noatsecure)))
;;* lmx 11 system/sepolicy/private/ot_daemon.te

(allow init ot_daemon (process (siginh rlimitinh)))
;;* lme

(typetransition init ot_daemon_exec process ot_daemon)
;;* lmx 16 system/sepolicy/private/ot_daemon.te

(allow ot_daemon apex_module_data_file (dir (search)))
;;* lme

;;* lmx 20 system/sepolicy/private/ot_daemon.te

(allow ot_daemon apex_tethering_data_file (dir (ioctl read write create getattr lock open watch watch_reads add_name remove_name search)))
;;* lme

;;* lmx 21 system/sepolicy/private/ot_daemon.te

(allow ot_daemon apex_tethering_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 24 system/sepolicy/private/ot_daemon.te

(allow ot_daemon tun_device (chr_file (read write)))
;;* lme

;;* lmx 27 system/sepolicy/private/ot_daemon.te

(allow ot_daemon system_server (rawip_socket (read write getattr setattr lock append map bind connect getopt setopt shutdown)))
;;* lme

;;* lmx 30 system/sepolicy/private/ot_daemon.te

(allow ot_daemon system_server (udp_socket (ioctl read write getattr setattr lock append map bind connect getopt setopt shutdown)))
;;* lme

;;* lmx 32 system/sepolicy/private/ot_daemon.te

(allow ot_daemon hal_threadnetwork (memfd_file (read write getattr map)))
;;* lme

;;* lmx 32 system/sepolicy/private/ot_daemon.te

(allow hal_threadnetwork ot_daemon (memfd_file (read write getattr map)))
;;* lme

;;* lmx 35 system/sepolicy/private/ot_daemon.te

(allow ot_daemon servicemanager (binder (call transfer)))
;;* lme

;;* lmx 35 system/sepolicy/private/ot_daemon.te

(allow servicemanager ot_daemon (binder (call transfer)))
;;* lme

;;* lmx 36 system/sepolicy/private/ot_daemon.te

(allow ot_daemon ot_daemon_service (service_manager (add find)))
;;* lme

;;* lmx 36 system/sepolicy/private/ot_daemon.te

(neverallow base_typeattr_916 ot_daemon_service (service_manager (add)))
;;* lme

;;* lmx 36 system/sepolicy/private/ot_daemon.te

(allow ot_daemon su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 37 system/sepolicy/private/ot_daemon.te

(allow ot_daemon system_server (binder (call transfer)))
;;* lme

;;* lmx 37 system/sepolicy/private/ot_daemon.te

(allow system_server ot_daemon (binder (transfer)))
;;* lme

;;* lmx 37 system/sepolicy/private/ot_daemon.te

(allow ot_daemon system_server (fd (use)))
;;* lme

;;* lmx 40 system/sepolicy/private/ot_daemon.te

(allow ot_daemon statsdw_socket (sock_file (write)))
;;* lme

;;* lmx 40 system/sepolicy/private/ot_daemon.te

(allow ot_daemon statsd (unix_dgram_socket (sendto)))
;;* lme

;;* lmx 43 system/sepolicy/private/ot_daemon.te

(allow ot_daemon dumpstate (fd (use)))
;;* lme

;;* lmx 44 system/sepolicy/private/ot_daemon.te

(allow ot_daemon dumpstate (fifo_file (write)))
;;* lme

;;* lmx 53 system/sepolicy/private/ot_daemon.te

(neverallow base_typeattr_917 ot_daemon_socket (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 10 system/sepolicy/private/overlay_remounter.te

(allow overlay_remounter init_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 10 system/sepolicy/private/overlay_remounter.te

(allow overlay_remounter init (process (transition)))
;;* lme

;;* lmx 10 system/sepolicy/private/overlay_remounter.te

(allow init init_exec (file (read getattr map execute open entrypoint)))
;;* lme

;;* lmx 10 system/sepolicy/private/overlay_remounter.te

(allow init overlay_remounter (process (sigchld)))
;;* lme

(dontaudit overlay_remounter init (process (noatsecure)))
;;* lmx 10 system/sepolicy/private/overlay_remounter.te

(allow overlay_remounter init (process (siginh rlimitinh)))
;;* lme

(typetransition overlay_remounter init_exec process init)
;;* lmx 10 system/sepolicy/private/overlay_remounter.te

(allow overlay_remounter init (process (share)))
;;* lme

;;* lmx 10 system/sepolicy/private/overlay_remounter.te

(allow overlay_remounter init (process2 (nosuid_transition)))
;;* lme

;;* lmx 10 system/sepolicy/private/overlay_remounter.te

(allow overlay_remounter kernel (fd (use)))
;;* lme

;;* lmx 10 system/sepolicy/private/overlay_remounter.te

(allow overlay_remounter tmpfs (chr_file (read write open)))
;;* lme

;;* lmx 10 system/sepolicy/private/overlay_remounter.te

(allow overlay_remounter labeledfs (filesystem (mount unmount)))
;;* lme

;;* lmx 10 system/sepolicy/private/overlay_remounter.te

(allow overlay_remounter overlayfs_file (chr_file (create unlink link rename)))
;;* lme

;;* lmx 10 system/sepolicy/private/overlay_remounter.te

(allow overlay_remounter overlayfs_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 10 system/sepolicy/private/overlay_remounter.te

(allow overlay_remounter overlayfs_file (file (write create unlink rename open)))
;;* lme

;;* lmx 10 system/sepolicy/private/overlay_remounter.te

(allow overlay_remounter self (capability (chown dac_override dac_read_search fowner sys_admin)))
;;* lme

;;* lmx 10 system/sepolicy/private/overlay_remounter.te

(allow overlay_remounter unlabeled (dir (search rmdir)))
;;* lme

;;* lmx 10 system/sepolicy/private/overlay_remounter.te

(allow overlay_remounter system_bootstrap_lib_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 10 system/sepolicy/private/overlay_remounter.te

(allow overlay_remounter system_bootstrap_lib_file (file (read getattr map execute open)))
;;* lme

;;* lmx 10 system/sepolicy/private/overlay_remounter.te

(allow overlay_remounter system_file_type (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(allow overlay_remounter system_dlkm_file_type (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(allow overlay_remounter vendor_file_type (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(allow overlay_remounter adb_keys_file (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
;;* lme

;;* lmx 10 system/sepolicy/private/overlay_remounter.te

(allow overlay_remounter system_file_type (chr_file (unlink)))
(allow overlay_remounter system_dlkm_file_type (chr_file (unlink)))
(allow overlay_remounter vendor_file_type (chr_file (unlink)))
(allow overlay_remounter adb_keys_file (chr_file (unlink)))
;;* lme

;;* lmx 10 system/sepolicy/private/overlay_remounter.te

(allow overlay_remounter system_file_type (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
(allow overlay_remounter system_file_type (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(allow overlay_remounter system_dlkm_file_type (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
(allow overlay_remounter system_dlkm_file_type (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(allow overlay_remounter vendor_file_type (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
(allow overlay_remounter vendor_file_type (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(allow overlay_remounter adb_keys_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
(allow overlay_remounter adb_keys_file (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

(typetransition pcc_component tmpfs file appdomain_tmpfs)
;;* lmx 11 system/sepolicy/private/pcc_component.te

(allow pcc_component pcc_component_userfaultfd (anon_inode (ioctl read create)))
;;* lme

(dontaudit su pcc_component_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lmx 11 system/sepolicy/private/pcc_component.te

(neverallow base_typeattr_918 pcc_component_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 11 system/sepolicy/private/pcc_component.te

(allow pcc_component appdomain_tmpfs (file (read write getattr map execute)))
;;* lme

;;* lmx 11 system/sepolicy/private/pcc_component.te

(allow pcc_component appdomain (memfd_file (read write getattr map execute)))
;;* lme

;;* lmx 11 system/sepolicy/private/pcc_component.te

(neverallow base_typeattr_919 base_typeattr_918 (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 11 system/sepolicy/private/pcc_component.te

(neverallow base_typeattr_920 pcc_component (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 11 system/sepolicy/private/pcc_component.te

(neverallow base_typeattr_921 pcc_component (process (ptrace)))
;;* lme

;;* lmx 11 system/sepolicy/private/pcc_component.te

(neverallow pcc_component base_typeattr_922 (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 14 system/sepolicy/private/pcc_component.te

(allow pcc_component sdcard_type (file (ioctl read getattr lock map watch watch_reads)))
(allow pcc_component fuse (file (ioctl read getattr lock map watch watch_reads)))
;;* lme

;;* lmx 15 system/sepolicy/private/pcc_component.te

(allow pcc_component media_rw_data_file (file (ioctl read getattr lock map watch watch_reads)))
;;* lme

;;* lmx 16 system/sepolicy/private/pcc_component.te

(allow pcc_component sdcard_type (dir (ioctl read getattr lock open watch watch_reads search)))
(allow pcc_component fuse (dir (ioctl read getattr lock open watch watch_reads search)))
(allow pcc_component media_rw_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 19 system/sepolicy/private/pcc_component.te

(allow pcc_component shell_data_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 20 system/sepolicy/private/pcc_component.te

(allow pcc_component shell_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 23 system/sepolicy/private/pcc_component.te

(allow pcc_component vendor_app_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 24 system/sepolicy/private/pcc_component.te

(allow pcc_component vendor_app_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 26 system/sepolicy/private/pcc_component.te

(allow pcc_component vendor_microdroid_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 27 system/sepolicy/private/pcc_component.te

(allow pcc_component vendor_microdroid_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 31 system/sepolicy/private/pcc_component.te

(allow pcc_component privapp_data_file (file (ioctl read getattr lock map execute open watch watch_reads)))
;;* lme

;;* lmx 32 system/sepolicy/private/pcc_component.te

(allow pcc_component app_data_file (file (ioctl read getattr lock map execute open watch watch_reads)))
;;* lme

;;* lmx 34 system/sepolicy/private/pcc_component.te

(allow pcc_component pcc_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 35 system/sepolicy/private/pcc_component.te

(allow pcc_component pcc_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 36 system/sepolicy/private/pcc_component.te

(allow pcc_component pcc_data_file (lnk_file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 40 system/sepolicy/private/pcc_component.te

(allow pcc_component app_exec_data_file (file (ioctl read getattr lock map unlink execute open watch watch_reads)))
;;* lme

;;* lmx 43 system/sepolicy/private/pcc_component.te

(allow pcc_component audioserver_service (service_manager (find)))
;;* lme

;;* lmx 44 system/sepolicy/private/pcc_component.te

(allow pcc_component cameraserver_service (service_manager (find)))
;;* lme

;;* lmx 45 system/sepolicy/private/pcc_component.te

(allow pcc_component mediaserver_service (service_manager (find)))
;;* lme

;;* lmx 46 system/sepolicy/private/pcc_component.te

(allow pcc_component mediaextractor_service (service_manager (find)))
;;* lme

;;* lmx 47 system/sepolicy/private/pcc_component.te

(allow pcc_component mediametrics_service (service_manager (find)))
;;* lme

;;* lmx 48 system/sepolicy/private/pcc_component.te

(allow pcc_component mediadrmserver_service (service_manager (find)))
;;* lme

;;* lmx 49 system/sepolicy/private/pcc_component.te

(allow pcc_component drmserver_service (service_manager (find)))
;;* lme

;;* lmx 50 system/sepolicy/private/pcc_component.te

(allow pcc_component radio_service (service_manager (find)))
;;* lme

;;* lmx 240 system/sepolicy/private/pcc_component.te

(allow pcc_component batteryproperties_service (service_manager (find)))
(allow pcc_component gpu_service (service_manager (find)))
(allow pcc_component credstore_service (service_manager (find)))
(allow pcc_component mediatranscoding_service (service_manager (find)))
(allow pcc_component nfc_service (service_manager (find)))
(allow pcc_component npu_service (service_manager (find)))
(allow pcc_component profiling_service (service_manager (find)))
(allow pcc_component surfaceflinger_service (service_manager (find)))
(allow pcc_component accessibility_service (service_manager (find)))
(allow pcc_component account_service (service_manager (find)))
(allow pcc_component activity_service (service_manager (find)))
(allow pcc_component activity_task_service (service_manager (find)))
(allow pcc_component alarm_service (service_manager (find)))
(allow pcc_component app_function_service (service_manager (find)))
(allow pcc_component app_prediction_service (service_manager (find)))
(allow pcc_component app_search_service (service_manager (find)))
(allow pcc_component appops_service (service_manager (find)))
(allow pcc_component appwidget_service (service_manager (find)))
(allow pcc_component archive_service (service_manager (find)))
(allow pcc_component assetatlas_service (service_manager (find)))
(allow pcc_component attestation_verification_service (service_manager (find)))
(allow pcc_component audio_service (service_manager (find)))
(allow pcc_component auth_service (service_manager (find)))
(allow pcc_component autofill_service (service_manager (find)))
(allow pcc_component backup_service (service_manager (find)))
(allow pcc_component batterystats_service (service_manager (find)))
(allow pcc_component blob_store_service (service_manager (find)))
(allow pcc_component bluetooth_manager_service (service_manager (find)))
(allow pcc_component clipboard_service (service_manager (find)))
(allow pcc_component cloudsearch_service (service_manager (find)))
(allow pcc_component contexthub_service (service_manager (find)))
(allow pcc_component contextual_search_service (service_manager (find)))
(allow pcc_component crossprofileapps_service (service_manager (find)))
(allow pcc_component IProxyService_service (service_manager (find)))
(allow pcc_component companion_device_service (service_manager (find)))
(allow pcc_component connectivity_native_service (service_manager (find)))
(allow pcc_component connectivity_service (service_manager (find)))
(allow pcc_component connmetrics_service (service_manager (find)))
(allow pcc_component consumer_ir_service (service_manager (find)))
(allow pcc_component content_capture_service (service_manager (find)))
(allow pcc_component content_suggestions_service (service_manager (find)))
(allow pcc_component content_service (service_manager (find)))
(allow pcc_component country_detector_service (service_manager (find)))
(allow pcc_component credential_service (service_manager (find)))
(allow pcc_component device_policy_service (service_manager (find)))
(allow pcc_component device_state_service (service_manager (find)))
(allow pcc_component deviceidle_service (service_manager (find)))
(allow pcc_component device_identifiers_service (service_manager (find)))
(allow pcc_component display_service (service_manager (find)))
(allow pcc_component domain_verification_service (service_manager (find)))
(allow pcc_component color_display_service (service_manager (find)))
(allow pcc_component file_integrity_service (service_manager (find)))
(allow pcc_component font_service (service_manager (find)))
(allow pcc_component devicelock_service (service_manager (find)))
(allow pcc_component dreams_service (service_manager (find)))
(allow pcc_component dropbox_service (service_manager (find)))
(allow pcc_component biometric_service (service_manager (find)))
(allow pcc_component bugreport_service (service_manager (find)))
(allow pcc_component platform_compat_service (service_manager (find)))
(allow pcc_component face_service (service_manager (find)))
(allow pcc_component fingerprint_service (service_manager (find)))
(allow pcc_component fwk_stats_service (service_manager (find)))
(allow pcc_component game_service (service_manager (find)))
(allow pcc_component grammatical_inflection_service (service_manager (find)))
(allow pcc_component graphicsstats_service (service_manager (find)))
(allow pcc_component hardware_properties_service (service_manager (find)))
(allow pcc_component hdmi_control_service (service_manager (find)))
(allow pcc_component healthconnect_service (service_manager (find)))
(allow pcc_component hint_service (service_manager (find)))
(allow pcc_component imms_service (service_manager (find)))
(allow pcc_component input_method_service (service_manager (find)))
(allow pcc_component input_service (service_manager (find)))
(allow pcc_component intrusion_detection_service (service_manager (find)))
(allow pcc_component ipsec_service (service_manager (find)))
(allow pcc_component iris_service (service_manager (find)))
(allow pcc_component jobscheduler_service (service_manager (find)))
(allow pcc_component launcherapps_service (service_manager (find)))
(allow pcc_component legacy_permission_service (service_manager (find)))
(allow pcc_component light_service (service_manager (find)))
(allow pcc_component locale_service (service_manager (find)))
(allow pcc_component location_service (service_manager (find)))
(allow pcc_component media_communication_service (service_manager (find)))
(allow pcc_component media_metrics_service (service_manager (find)))
(allow pcc_component media_projection_service (service_manager (find)))
(allow pcc_component media_quality_service (service_manager (find)))
(allow pcc_component media_router_service (service_manager (find)))
(allow pcc_component media_session_service (service_manager (find)))
(allow pcc_component memtrackproxy_service (service_manager (find)))
(allow pcc_component midi_service (service_manager (find)))
(allow pcc_component mount_service (service_manager (find)))
(allow pcc_component music_recognition_service (service_manager (find)))
(allow pcc_component nearby_service (service_manager (find)))
(allow pcc_component netpolicy_service (service_manager (find)))
(allow pcc_component netstats_service (service_manager (find)))
(allow pcc_component network_management_service (service_manager (find)))
(allow pcc_component notification_service (service_manager (find)))
(allow pcc_component package_service (service_manager (find)))
(allow pcc_component package_native_service (service_manager (find)))
(allow pcc_component people_service (service_manager (find)))
(allow pcc_component permission_service (service_manager (find)))
(allow pcc_component permissionmgr_service (service_manager (find)))
(allow pcc_component permission_checker_service (service_manager (find)))
(allow pcc_component persistent_data_block_service (service_manager (find)))
(allow pcc_component powerstats_service (service_manager (find)))
(allow pcc_component power_service (service_manager (find)))
(allow pcc_component print_service (service_manager (find)))
(allow pcc_component procstats_service (service_manager (find)))
(allow pcc_component reboot_readiness_service (service_manager (find)))
(allow pcc_component registry_service (service_manager (find)))
(allow pcc_component remote_auth_service (service_manager (find)))
(allow pcc_component restrictions_service (service_manager (find)))
(allow pcc_component role_service (service_manager (find)))
(allow pcc_component rollback_service (service_manager (find)))
(allow pcc_component rttmanager_service (service_manager (find)))
(allow pcc_component search_service (service_manager (find)))
(allow pcc_component search_ui_service (service_manager (find)))
(allow pcc_component sec_key_att_app_id_provider_service (service_manager (find)))
(allow pcc_component security_state_service (service_manager (find)))
(allow pcc_component selection_toolbar_service (service_manager (find)))
(allow pcc_component sensitive_content_protection_service (service_manager (find)))
(allow pcc_component sensorservice_service (service_manager (find)))
(allow pcc_component sensor_privacy_service (service_manager (find)))
(allow pcc_component serial_service (service_manager (find)))
(allow pcc_component servicediscovery_service (service_manager (find)))
(allow pcc_component settings_service (service_manager (find)))
(allow pcc_component shortcut_service (service_manager (find)))
(allow pcc_component smartspace_service (service_manager (find)))
(allow pcc_component statusbar_service (service_manager (find)))
(allow pcc_component storagestats_service (service_manager (find)))
(allow pcc_component speech_recognition_service (service_manager (find)))
(allow pcc_component tare_service (service_manager (find)))
(allow pcc_component textclassification_service (service_manager (find)))
(allow pcc_component textservices_service (service_manager (find)))
(allow pcc_component texttospeech_service (service_manager (find)))
(allow pcc_component telecom_service (service_manager (find)))
(allow pcc_component thermal_service (service_manager (find)))
(allow pcc_component timedetector_service (service_manager (find)))
(allow pcc_component timezonedetector_service (service_manager (find)))
(allow pcc_component translation_service (service_manager (find)))
(allow pcc_component trust_service (service_manager (find)))
(allow pcc_component tv_ad_service (service_manager (find)))
(allow pcc_component tv_iapp_service (service_manager (find)))
(allow pcc_component tv_input_service (service_manager (find)))
(allow pcc_component tv_tuner_resource_mgr_service (service_manager (find)))
(allow pcc_component uimode_service (service_manager (find)))
(allow pcc_component uri_grants_service (service_manager (find)))
(allow pcc_component usagestats_service (service_manager (find)))
(allow pcc_component usb_service (service_manager (find)))
(allow pcc_component user_service (service_manager (find)))
(allow pcc_component uwb_service (service_manager (find)))
(allow pcc_component vcn_management_service (service_manager (find)))
(allow pcc_component vibrator_service (service_manager (find)))
(allow pcc_component vibrator_manager_service (service_manager (find)))
(allow pcc_component virtual_device_service (service_manager (find)))
(allow pcc_component virtual_device_native_service (service_manager (find)))
(allow pcc_component voiceinteraction_service (service_manager (find)))
(allow pcc_component vr_manager_service (service_manager (find)))
(allow pcc_component wallpaper_service (service_manager (find)))
(allow pcc_component wallpaper_effects_generation_service (service_manager (find)))
(allow pcc_component webviewupdate_service (service_manager (find)))
(allow pcc_component wifiscanner_service (service_manager (find)))
(allow pcc_component wifi_service (service_manager (find)))
(allow pcc_component wifiaware_service (service_manager (find)))
(allow pcc_component tethering_service (service_manager (find)))
(allow pcc_component ambient_context_service (service_manager (find)))
(allow pcc_component authentication_policy_service (service_manager (find)))
(allow pcc_component content_restriction_service (service_manager (find)))
(allow pcc_component feature_flags_service (service_manager (find)))
(allow pcc_component file_service (service_manager (find)))
(allow pcc_component incidentcompanion_service (service_manager (find)))
(allow pcc_component mediatuner_service (service_manager (find)))
(allow pcc_component on_device_intelligence_service (service_manager (find)))
(allow pcc_component pcc_sandbox_native_service (service_manager (find)))
(allow pcc_component pcc_sandbox_service (service_manager (find)))
(allow pcc_component personal_context_service (service_manager (find)))
(allow pcc_component protolog_configuration_service (service_manager (find)))
(allow pcc_component safety_center_service (service_manager (find)))
(allow pcc_component supervision_service (service_manager (find)))
(allow pcc_component wearable_sensing_service (service_manager (find)))
(allow pcc_component advanced_protection_service (service_manager (find)))
(allow pcc_component ranging_service (service_manager (find)))
;;* lme

;;* lmx 245 system/sepolicy/private/pcc_component.te

(allow pcc_component system_server (udp_socket (read write getattr connect getopt setopt recvfrom sendto)))
;;* lme

;;* lmx 247 system/sepolicy/private/pcc_component.te

(allow pcc_component ashmem_device (chr_file (ioctl read write getattr lock append map watch watch_reads)))
;;* lme

;;* lmx 250 system/sepolicy/private/pcc_component.te

(allow pcc_component appdomain (fifo_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 253 system/sepolicy/private/pcc_component.te

(allow pcc_component pcc_component (fifo_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 256 system/sepolicy/private/pcc_component.te

(allow pcc_component wallpaper_file (file (read getattr map)))
;;* lme

;;* lmx 259 system/sepolicy/private/pcc_component.te

(allow pcc_component ringtone_file (file (read getattr map)))
;;* lme

;;* lmx 262 system/sepolicy/private/pcc_component.te

(allow pcc_component untrusted_app (memfd_file (read getattr)))
;;* lme

;;* lmx 268 system/sepolicy/private/pcc_component.te

(allow pcc_component app_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
(allow pcc_component privapp_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 272 system/sepolicy/private/pcc_component.te

(allow pcc_component app_data_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow pcc_component app_data_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow pcc_component app_data_file (sock_file (ioctl read getattr lock map open watch watch_reads)))
(allow pcc_component app_data_file (fifo_file (ioctl read getattr lock map open watch watch_reads)))
(allow pcc_component privapp_data_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow pcc_component privapp_data_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow pcc_component privapp_data_file (sock_file (ioctl read getattr lock map open watch watch_reads)))
(allow pcc_component privapp_data_file (fifo_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 275 system/sepolicy/private/pcc_component.te

(allow pcc_component system_app_data_file (file (read write getattr map)))
;;* lme

;;* lmx 278 system/sepolicy/private/pcc_component.te

(allow pcc_component apk_tmp_file (file (read getattr)))
(allow pcc_component apk_private_tmp_file (file (read getattr)))
;;* lme

;;* lmx 281 system/sepolicy/private/pcc_component.te

(allow pcc_component preloads_media_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 282 system/sepolicy/private/pcc_component.te

(allow pcc_component preloads_media_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 283 system/sepolicy/private/pcc_component.te

(allow pcc_component preloads_data_file (dir (search)))
;;* lme

;;* lmx 287 system/sepolicy/private/pcc_component.te

(allow pcc_component runas_app (process (sigchld)))
;;* lme

;;* lmx 292 system/sepolicy/private/pcc_component.te

(allow pcc_component runas_app (unix_stream_socket (connectto)))
;;* lme

;;* lmx 294 system/sepolicy/private/pcc_component.te

(allow pcc_component sysfs_hwrandom (dir (search)))
;;* lme

;;* lmx 295 system/sepolicy/private/pcc_component.te

(allow pcc_component sysfs_hwrandom (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 303 system/sepolicy/private/pcc_component.te

(neverallow pcc_component app_data_file_type (file (execute_no_trans)))
;;* lme

;;* lmx 306 system/sepolicy/private/pcc_component.te

(neverallow pcc_component domain (netlink_kobject_uevent_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
;;* lme

;;* lmx 309 system/sepolicy/private/pcc_component.te

(neverallow pcc_component domain (netlink_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
;;* lme

;;* lmx 313 system/sepolicy/private/pcc_component.te

(neverallow pcc_component debugfs_type (file (read)))
;;* lme

;;* lmx 316 system/sepolicy/private/pcc_component.te

(neverallow pcc_component gpu_device (chr_file (execute)))
;;* lme

;;* lmx 319 system/sepolicy/private/pcc_component.te

(neverallow pcc_component sysfs (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
;;* lme

;;* lmx 323 system/sepolicy/private/pcc_component.te

(neverallow pcc_component proc (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
;;* lme

;;* lmx 326 system/sepolicy/private/pcc_component.te

(neverallow pcc_component sdcard_type (file (write create setattr relabelfrom append unlink link rename)))
(neverallow pcc_component fuse (file (write create setattr relabelfrom append unlink link rename)))
;;* lme

;;* lmx 327 system/sepolicy/private/pcc_component.te

(neverallow pcc_component sdcard_type (dir (write create setattr relabelfrom link rename add_name remove_name reparent rmdir)))
(neverallow pcc_component fuse (dir (write create setattr relabelfrom link rename add_name remove_name reparent rmdir)))
;;* lme

;;* lmx 330 system/sepolicy/private/pcc_component.te

(neverallow pcc_component shell_data_file (dir (write create setattr add_name remove_name)))
;;* lme

;;* lmx 331 system/sepolicy/private/pcc_component.te

(neverallow pcc_component shell_data_file (file (write create setattr relabelfrom append unlink link rename)))
;;* lme

;;* lmx 335 system/sepolicy/private/pcc_component.te

(neverallow pcc_component proc_net (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 342 system/sepolicy/private/pcc_component.te

(neverallow pcc_component app_data_file (dir (write create setattr relabelfrom link rename add_name remove_name reparent rmdir)))
(neverallow pcc_component privapp_data_file (dir (write create setattr relabelfrom link rename add_name remove_name reparent rmdir)))
;;* lme

;;* lmx 347 system/sepolicy/private/pcc_component.te

(neverallow pcc_component app_data_file (file (write create setattr relabelfrom append unlink link rename)))
(neverallow pcc_component app_data_file (lnk_file (write create setattr relabelfrom append unlink link rename)))
(neverallow pcc_component app_data_file (sock_file (write create setattr relabelfrom append unlink link rename)))
(neverallow pcc_component app_data_file (fifo_file (write create setattr relabelfrom append unlink link rename)))
(neverallow pcc_component privapp_data_file (file (write create setattr relabelfrom append unlink link rename)))
(neverallow pcc_component privapp_data_file (lnk_file (write create setattr relabelfrom append unlink link rename)))
(neverallow pcc_component privapp_data_file (sock_file (write create setattr relabelfrom append unlink link rename)))
(neverallow pcc_component privapp_data_file (fifo_file (write create setattr relabelfrom append unlink link rename)))
;;* lme

;;* lmx 350 system/sepolicy/private/pcc_component.te

(neverallow pcc_component untrusted_app_all (dir (write create setattr relabelfrom link rename add_name remove_name reparent rmdir)))
;;* lme

;;* lmx 351 system/sepolicy/private/pcc_component.te

(neverallow pcc_component untrusted_app_all (lnk_file (write create setattr relabelfrom append unlink link rename)))
;;* lme

;;* lmx 354 system/sepolicy/private/pcc_component.te

(neverallow pcc_component media_rw_data_file (dir (write create setattr relabelfrom link rename add_name remove_name reparent rmdir)))
;;* lme

;;* lmx 355 system/sepolicy/private/pcc_component.te

(neverallow pcc_component media_rw_data_file (file (write create setattr relabelfrom append unlink link rename)))
;;* lme

;;* lmx 359 system/sepolicy/private/pcc_component.te

(neverallow pcc_component base_typeattr_923 (fifo_file (write create setattr relabelfrom append unlink link rename)))
;;* lme

;;* lmx 362 system/sepolicy/private/pcc_component.te

(neverallow pcc_component pcc_component (tcp_socket (ioctl read write create getattr setattr lock append map bind connect listen accept getopt setopt shutdown)))
;;* lme

;;* lmx 363 system/sepolicy/private/pcc_component.te

(neverallow pcc_component port_type (tcp_socket (name_connect)))
;;* lme

;;* lmx 366 system/sepolicy/private/pcc_component.te

(neverallow pcc_component pcc_component (udp_socket (ioctl read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
(neverallow pcc_component pcc_component (rawip_socket (ioctl read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
(neverallow pcc_component pcc_component (icmp_socket (ioctl read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
;;* lme

;;* lmx 369 system/sepolicy/private/pcc_component.te

(neverallow pcc_component base_typeattr_923 (unix_stream_socket (read write getattr getopt shutdown)))
;;* lme

;;* lmx 372 system/sepolicy/private/pcc_component.te

(neverallow pcc_component wallpaper_file (file (write create setattr relabelfrom append unlink link rename)))
;;* lme

;;* lmx 373 system/sepolicy/private/pcc_component.te

(neverallow pcc_component ringtone_file (file (write create setattr relabelfrom append unlink link rename)))
;;* lme

;;* lmx 376 system/sepolicy/private/pcc_component.te

(neverallow untrusted_app_all pcc_data_file (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow untrusted_app_all pcc_data_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
(neverallow untrusted_app_all pcc_data_file (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow untrusted_app_all pcc_data_file (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow untrusted_app_all pcc_data_file (blk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow untrusted_app_all pcc_data_file (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow untrusted_app_all pcc_data_file (fifo_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 379 system/sepolicy/private/pcc_component.te

(neverallow pcc_component serial_device (chr_file (ioctl write create setattr relabelfrom append unlink link rename)))
(neverallow pcc_component usbaccessory_device (chr_file (ioctl write create setattr relabelfrom append unlink link rename)))
(neverallow pcc_component usb_device (chr_file (ioctl write create setattr relabelfrom append unlink link rename)))
(neverallow pcc_component usb_serial_device (chr_file (ioctl write create setattr relabelfrom append unlink link rename)))
;;* lme

;;* lmx 382 system/sepolicy/private/pcc_component.te

(neverallow pcc_component vendor_app_file (file (write create setattr append unlink rename)))
;;* lme

;;* lmx 383 system/sepolicy/private/pcc_component.te

(neverallow pcc_component vendor_app_file (dir (write create setattr rename add_name remove_name reparent rmdir)))
;;* lme

;;* lmx 384 system/sepolicy/private/pcc_component.te

(neverallow pcc_component vendor_app_file (lnk_file (write create setattr relabelfrom append unlink link rename)))
;;* lme

;;* lmx 385 system/sepolicy/private/pcc_component.te

(neverallow pcc_component vendor_microdroid_file (file (write create setattr append unlink rename)))
;;* lme

;;* lmx 386 system/sepolicy/private/pcc_component.te

(neverallow pcc_component vendor_microdroid_file (dir (write create setattr rename add_name remove_name reparent rmdir)))
;;* lme

;;* lmx 387 system/sepolicy/private/pcc_component.te

(neverallow pcc_component vendor_microdroid_file (lnk_file (write create setattr relabelfrom append unlink link rename)))
;;* lme

;;* lmx 390 system/sepolicy/private/pcc_component.te

(neverallow pcc_component apk_tmp_file (file (write create setattr relabelfrom append unlink link rename)))
(neverallow pcc_component apk_private_tmp_file (file (write create setattr relabelfrom append unlink link rename)))
;;* lme

;;* lmx 393 system/sepolicy/private/pcc_component.te

(neverallow pcc_component preloads_media_file (dir (write create setattr relabelfrom link rename add_name remove_name reparent rmdir)))
;;* lme

;;* lmx 394 system/sepolicy/private/pcc_component.te

(neverallow pcc_component preloads_media_file (file (write create setattr relabelfrom append unlink link rename)))
;;* lme

;;* lmx 395 system/sepolicy/private/pcc_component.te

(neverallow pcc_component preloads_data_file (dir (write create setattr relabelfrom append unlink link rename)))
;;* lme

;;* lmx 397 system/sepolicy/private/pcc_component.te

(neverallow pcc_component sysfs_hwrandom (dir (write create setattr relabelfrom link rename add_name remove_name reparent rmdir)))
;;* lme

;;* lmx 398 system/sepolicy/private/pcc_component.te

(neverallow pcc_component sysfs_hwrandom (file (write create setattr relabelfrom append unlink link rename)))
;;* lme

(typetransition perfetto tmpfs file perfetto_tmpfs)
;;* lmx 9 system/sepolicy/private/perfetto.te

(allow perfetto perfetto_tmpfs (file (read write getattr map)))
;;* lme

;;* lmx 12 system/sepolicy/private/perfetto.te

(allow init perfetto_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 12 system/sepolicy/private/perfetto.te

(allow init perfetto (process (transition)))
;;* lme

;;* lmx 12 system/sepolicy/private/perfetto.te

(allow perfetto perfetto_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init perfetto (process (noatsecure)))
;;* lmx 12 system/sepolicy/private/perfetto.te

(allow init perfetto (process (siginh rlimitinh)))
;;* lme

(typetransition init perfetto_exec process perfetto)
;;* lmx 15 system/sepolicy/private/perfetto.te

(allow perfetto traced_consumer_socket (sock_file (write)))
;;* lme

;;* lmx 15 system/sepolicy/private/perfetto.te

(allow perfetto traced (unix_stream_socket (connectto)))
;;* lme

;;* lmx 19 system/sepolicy/private/perfetto.te

(allow perfetto traced (fd (use)))
;;* lme

;;* lmx 19 system/sepolicy/private/perfetto.te

(allow perfetto traced_tmpfs (file (read write getattr map)))
;;* lme

;;* lmx 19 system/sepolicy/private/perfetto.te

(allow perfetto traced (memfd_file (read write getattr map)))
;;* lme

;;* lmx 19 system/sepolicy/private/perfetto.te

(allow perfetto traced_producer_socket (sock_file (write)))
;;* lme

;;* lmx 19 system/sepolicy/private/perfetto.te

(allow perfetto traced (unix_stream_socket (connectto)))
;;* lme

;;* lmx 19 system/sepolicy/private/perfetto.te

(allow traced perfetto (fd (use)))
;;* lme

;;* lmx 22 system/sepolicy/private/perfetto.te

(allow perfetto perfetto_traces_data_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
;;* lme

;;* lmx 23 system/sepolicy/private/perfetto.te

(allow perfetto perfetto_traces_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 26 system/sepolicy/private/perfetto.te

(allow perfetto perfetto_traces_bugreport_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 27 system/sepolicy/private/perfetto.te

(allow perfetto perfetto_traces_bugreport_data_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
;;* lme

;;* lmx 30 system/sepolicy/private/perfetto.te

(allow perfetto perfetto_traces_profiling_data_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
;;* lme

;;* lmx 31 system/sepolicy/private/perfetto.te

(allow perfetto perfetto_traces_profiling_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 34 system/sepolicy/private/perfetto.te

(allow perfetto tracingproxy_service (service_manager (find)))
;;* lme

;;* lmx 35 system/sepolicy/private/perfetto.te

(allow perfetto servicemanager (binder (call transfer)))
;;* lme

;;* lmx 35 system/sepolicy/private/perfetto.te

(allow servicemanager perfetto (binder (call transfer)))
;;* lme

;;* lmx 36 system/sepolicy/private/perfetto.te

(allow perfetto system_server (binder (call transfer)))
;;* lme

;;* lmx 36 system/sepolicy/private/perfetto.te

(allow system_server perfetto (binder (transfer)))
;;* lme

;;* lmx 36 system/sepolicy/private/perfetto.te

(allow perfetto system_server (fd (use)))
;;* lme

;;* lmx 40 system/sepolicy/private/perfetto.te

(allow perfetto perfetto_configs_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 41 system/sepolicy/private/perfetto.te

(allow perfetto perfetto_configs_data_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 44 system/sepolicy/private/perfetto.te

(allow perfetto system_perfetto_config_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 45 system/sepolicy/private/perfetto.te

(allow perfetto system_perfetto_config_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 50 system/sepolicy/private/perfetto.te

(allow perfetto shell (fd (use)))
(allow perfetto statsd (fd (use)))
(allow perfetto su (fd (use)))
(allow perfetto mm_events (fd (use)))
(allow perfetto pmgd (fd (use)))
;;* lme

;;* lmx 51 system/sepolicy/private/perfetto.te

(allow perfetto shell (fifo_file (ioctl read write getattr)))
(allow perfetto statsd (fifo_file (ioctl read write getattr)))
(allow perfetto su (fifo_file (ioctl read write getattr)))
(allow perfetto system_server (fifo_file (ioctl read write getattr)))
(allow perfetto mm_events (fifo_file (ioctl read write getattr)))
(allow perfetto pmgd (fifo_file (ioctl read write getattr)))
;;* lme

;;* lmx 54 system/sepolicy/private/perfetto.te

(allow perfetto adbd (fd (use)))
;;* lme

;;* lmx 55 system/sepolicy/private/perfetto.te

(allow perfetto adbd (unix_stream_socket (read write)))
;;* lme

;;* lmx 58 system/sepolicy/private/perfetto.te

(allow perfetto adbd (process (sigchld)))
;;* lme

;;* lmx 61 system/sepolicy/private/perfetto.te

(allow perfetto statsdw_socket (sock_file (write)))
;;* lme

;;* lmx 61 system/sepolicy/private/perfetto.te

(allow perfetto statsd (unix_dgram_socket (sendto)))
;;* lme

;;* lmx 64 system/sepolicy/private/perfetto.te

(allow perfetto devpts (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 68 system/sepolicy/private/perfetto.te

(allow perfetto incident_service (service_manager (find)))
;;* lme

;;* lmx 69 system/sepolicy/private/perfetto.te

(allow perfetto incidentd (binder (call transfer)))
;;* lme

;;* lmx 69 system/sepolicy/private/perfetto.te

(allow incidentd perfetto (binder (transfer)))
;;* lme

;;* lmx 69 system/sepolicy/private/perfetto.te

(allow perfetto incidentd (fd (use)))
;;* lme

(dontaudit perfetto adbd (unix_stream_socket (getattr)))
(dontauditx perfetto adbd (ioctl unix_stream_socket ((range 0x5401 0x5404) 0x540b (range 0x540e 0x5411) (range 0x5413 0x5414) (range 0x5450 0x5451))))
(dontauditx perfetto su (ioctl unix_stream_socket ((range 0x5401 0x5404) 0x540b (range 0x540e 0x5411) (range 0x5413 0x5414) (range 0x5450 0x5451))))
(dontauditx perfetto shell (ioctl fifo_file ((range 0x5401 0x5404) 0x540b (range 0x540e 0x5411) (range 0x5413 0x5414) (range 0x5450 0x5451))))
;;* lmx 99 system/sepolicy/private/perfetto.te

(neverallow base_typeattr_924 perfetto_traces_data_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 109 system/sepolicy/private/perfetto.te

(neverallow base_typeattr_925 perfetto_traces_data_file (file (ioctl write create setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
;;* lme

;;* lmx 115 system/sepolicy/private/perfetto.te

(neverallow perfetto self (process (execmem)))
;;* lme

;;* lmx 118 system/sepolicy/private/perfetto.te

(neverallow perfetto dev_type (blk_file (read write)))
;;* lme

;;* lmx 121 system/sepolicy/private/perfetto.te

(neverallow perfetto domain (process (ptrace)))
;;* lme

;;* lmx 3 system/sepolicy/private/performanced.te

(allow init performanced_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 3 system/sepolicy/private/performanced.te

(allow init performanced (process (transition)))
;;* lme

;;* lmx 3 system/sepolicy/private/performanced.te

(allow performanced performanced_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init performanced (process (noatsecure)))
;;* lmx 3 system/sepolicy/private/performanced.te

(allow init performanced (process (siginh rlimitinh)))
;;* lme

(typetransition init performanced_exec process performanced)
;;* lmx 6 system/sepolicy/private/performanced.te

(allow performanced servicemanager (binder (call transfer)))
;;* lme

;;* lmx 6 system/sepolicy/private/performanced.te

(allow servicemanager performanced (binder (call transfer)))
;;* lme

;;* lmx 7 system/sepolicy/private/performanced.te

(allow performanced system_server (binder (call transfer)))
;;* lme

;;* lmx 7 system/sepolicy/private/performanced.te

(allow system_server performanced (binder (transfer)))
;;* lme

;;* lmx 7 system/sepolicy/private/performanced.te

(allow performanced system_server (fd (use)))
;;* lme

;;* lmx 8 system/sepolicy/private/performanced.te

(allow performanced permission_service (service_manager (find)))
;;* lme

;;* lmx 10 system/sepolicy/private/performanced.te

(allow init pdx_performance_client_endpoint_socket_type (unix_stream_socket (create bind)))
;;* lme

;;* lmx 10 system/sepolicy/private/performanced.te

(allow performanced pdx_performance_client_endpoint_socket_type (unix_stream_socket (read write getattr setattr lock append listen accept getopt setopt shutdown)))
;;* lme

;;* lmx 10 system/sepolicy/private/performanced.te

(allow performanced self (process (setsockcreate)))
;;* lme

;;* lmx 10 system/sepolicy/private/performanced.te

(allow performanced pdx_performance_client_channel_socket_type (unix_stream_socket (ioctl read write create getattr setattr lock append map bind connect listen accept getopt setopt shutdown)))
;;* lme

;;* lmx 10 system/sepolicy/private/performanced.te

(neverallow base_typeattr_926 pdx_performance_client_endpoint_socket_type (unix_stream_socket (listen accept)))
;;* lme

;;* lmx 13 system/sepolicy/private/performanced.te

(allow performanced self (capability (setgid setuid sys_nice)))
(allow performanced self (cap_userns (setgid setuid sys_nice)))
;;* lme

;;* lmx 18 system/sepolicy/private/performanced.te

(allow performanced appdomain (dir (ioctl read getattr lock open watch watch_reads search)))
(allow performanced bufferhubd (dir (ioctl read getattr lock open watch watch_reads search)))
(allow performanced kernel (dir (ioctl read getattr lock open watch watch_reads search)))
(allow performanced surfaceflinger (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 18 system/sepolicy/private/performanced.te

(allow performanced appdomain (file (ioctl read getattr lock map open watch watch_reads)))
(allow performanced appdomain (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow performanced bufferhubd (file (ioctl read getattr lock map open watch watch_reads)))
(allow performanced bufferhubd (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow performanced kernel (file (ioctl read getattr lock map open watch watch_reads)))
(allow performanced kernel (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow performanced surfaceflinger (file (ioctl read getattr lock map open watch watch_reads)))
(allow performanced surfaceflinger (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

(dontaudit performanced domain (dir (read)))
;;* lmx 20 system/sepolicy/private/performanced.te

(allow performanced appdomain (process (setsched)))
(allow performanced bufferhubd (process (setsched)))
(allow performanced kernel (process (setsched)))
(allow performanced surfaceflinger (process (setsched)))
;;* lme

(dontaudit performanced domain (dir (open)))
(dontaudit performanced domain (file (read getattr open)))
;;* lmx 30 system/sepolicy/private/performanced.te

(allow performanced cgroup (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 30 system/sepolicy/private/performanced.te

(allow performanced cgroup (file (ioctl read getattr lock map open watch watch_reads)))
(allow performanced cgroup (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 31 system/sepolicy/private/performanced.te

(allow performanced cgroup_v2 (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 31 system/sepolicy/private/performanced.te

(allow performanced cgroup_v2 (file (ioctl read getattr lock map open watch watch_reads)))
(allow performanced cgroup_v2 (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

(typetransition permissioncontroller_app tmpfs file appdomain_tmpfs)
;;* lmx 6 system/sepolicy/private/permissioncontroller_app.te

(allow permissioncontroller_app permissioncontroller_app_userfaultfd (anon_inode (ioctl read create)))
;;* lme

(dontaudit su permissioncontroller_app_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lmx 6 system/sepolicy/private/permissioncontroller_app.te

(neverallow base_typeattr_927 permissioncontroller_app_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 6 system/sepolicy/private/permissioncontroller_app.te

(allow permissioncontroller_app appdomain_tmpfs (file (read write getattr map execute)))
;;* lme

;;* lmx 6 system/sepolicy/private/permissioncontroller_app.te

(allow permissioncontroller_app appdomain (memfd_file (read write getattr map execute)))
;;* lme

;;* lmx 6 system/sepolicy/private/permissioncontroller_app.te

(neverallow base_typeattr_928 base_typeattr_927 (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 6 system/sepolicy/private/permissioncontroller_app.te

(neverallow base_typeattr_929 permissioncontroller_app (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 6 system/sepolicy/private/permissioncontroller_app.te

(neverallow base_typeattr_930 permissioncontroller_app (process (ptrace)))
;;* lme

;;* lmx 6 system/sepolicy/private/permissioncontroller_app.te

(neverallow permissioncontroller_app base_typeattr_931 (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 8 system/sepolicy/private/permissioncontroller_app.te

(allow permissioncontroller_app app_api_service (service_manager (find)))
;;* lme

;;* lmx 9 system/sepolicy/private/permissioncontroller_app.te

(allow permissioncontroller_app system_api_service (service_manager (find)))
;;* lme

;;* lmx 12 system/sepolicy/private/permissioncontroller_app.te

(allow permissioncontroller_app gpuservice (binder (call transfer)))
;;* lme

;;* lmx 12 system/sepolicy/private/permissioncontroller_app.te

(allow gpuservice permissioncontroller_app (binder (transfer)))
;;* lme

;;* lmx 12 system/sepolicy/private/permissioncontroller_app.te

(allow permissioncontroller_app gpuservice (fd (use)))
;;* lme

;;* lmx 14 system/sepolicy/private/permissioncontroller_app.te

(allow permissioncontroller_app radio_service (service_manager (find)))
;;* lme

;;* lmx 18 system/sepolicy/private/permissioncontroller_app.te

(allow permissioncontroller_app incident_service (service_manager (find)))
;;* lme

;;* lmx 19 system/sepolicy/private/permissioncontroller_app.te

(allow permissioncontroller_app incidentd (binder (call transfer)))
;;* lme

;;* lmx 19 system/sepolicy/private/permissioncontroller_app.te

(allow incidentd permissioncontroller_app (binder (transfer)))
;;* lme

;;* lmx 19 system/sepolicy/private/permissioncontroller_app.te

(allow permissioncontroller_app incidentd (fd (use)))
;;* lme

;;* lmx 20 system/sepolicy/private/permissioncontroller_app.te

(allow permissioncontroller_app incidentd (fifo_file (read write)))
;;* lme

;;* lmx 22 system/sepolicy/private/permissioncontroller_app.te

(allow permissioncontroller_app gpu_device (dir (search)))
;;* lme

(typetransition platform_app tmpfs file appdomain_tmpfs)
;;* lmx 7 system/sepolicy/private/platform_app.te

(allow platform_app platform_app_userfaultfd (anon_inode (ioctl read create)))
;;* lme

(dontaudit su platform_app_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lmx 7 system/sepolicy/private/platform_app.te

(neverallow base_typeattr_932 platform_app_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 7 system/sepolicy/private/platform_app.te

(allow platform_app appdomain_tmpfs (file (read write getattr map execute)))
;;* lme

;;* lmx 7 system/sepolicy/private/platform_app.te

(allow platform_app appdomain (memfd_file (read write getattr map execute)))
;;* lme

;;* lmx 7 system/sepolicy/private/platform_app.te

(neverallow base_typeattr_933 base_typeattr_932 (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 7 system/sepolicy/private/platform_app.te

(neverallow base_typeattr_934 platform_app (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 7 system/sepolicy/private/platform_app.te

(neverallow base_typeattr_935 platform_app (process (ptrace)))
;;* lme

;;* lmx 7 system/sepolicy/private/platform_app.te

(neverallow platform_app base_typeattr_936 (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

(typetransition platform_app_36 tmpfs file appdomain_tmpfs)
;;* lmx 7 system/sepolicy/private/platform_app_36.te

(allow platform_app_36 platform_app_36_userfaultfd (anon_inode (ioctl read create)))
;;* lme

(dontaudit su platform_app_36_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lmx 7 system/sepolicy/private/platform_app_36.te

(neverallow base_typeattr_937 platform_app_36_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 7 system/sepolicy/private/platform_app_36.te

(allow platform_app_36 appdomain_tmpfs (file (read write getattr map execute)))
;;* lme

;;* lmx 7 system/sepolicy/private/platform_app_36.te

(allow platform_app_36 appdomain (memfd_file (read write getattr map execute)))
;;* lme

;;* lmx 7 system/sepolicy/private/platform_app_36.te

(neverallow base_typeattr_938 base_typeattr_937 (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 7 system/sepolicy/private/platform_app_36.te

(neverallow base_typeattr_939 platform_app_36 (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 7 system/sepolicy/private/platform_app_36.te

(neverallow base_typeattr_940 platform_app_36 (process (ptrace)))
;;* lme

;;* lmx 7 system/sepolicy/private/platform_app_36.te

(neverallow platform_app_36 base_typeattr_941 (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 16 system/sepolicy/private/platform_app_36.te

(allow platform_app_36 domain (memfd_file (ioctl)))
;;* lme

;;* lmx 17 system/sepolicy/private/platform_app_36.te

(allowx platform_app_36 domain (ioctl memfd_file ((range 0x7701 0x770b))))
;;* lme

;;* lmx 18 system/sepolicy/private/platform_app_36.te

(allow platform_app_36 ashmem_libcutils_device (chr_file (open)))
;;* lme

;;* lmx 6 system/sepolicy/private/platform_app_all.te

(allow platform_app_all shell_data_file (dir (search)))
;;* lme

;;* lmx 7 system/sepolicy/private/platform_app_all.te

(allow platform_app_all shell_data_file (file (read getattr map open)))
;;* lme

;;* lmx 8 system/sepolicy/private/platform_app_all.te

(allow platform_app_all icon_file (file (read getattr open)))
;;* lme

;;* lmx 11 system/sepolicy/private/platform_app_all.te

(allow platform_app_all apk_tmp_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
(allow platform_app_all apk_private_tmp_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
;;* lme

;;* lmx 12 system/sepolicy/private/platform_app_all.te

(allow platform_app_all apk_tmp_file (file (ioctl read write getattr lock append map open watch watch_reads)))
(allow platform_app_all apk_private_tmp_file (file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 13 system/sepolicy/private/platform_app_all.te

(allow platform_app_all apk_private_data_file (dir (search)))
;;* lme

;;* lmx 15 system/sepolicy/private/platform_app_all.te

(allow platform_app_all asec_apk_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 16 system/sepolicy/private/platform_app_all.te

(allow platform_app_all asec_apk_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 19 system/sepolicy/private/platform_app_all.te

(allow platform_app_all media_rw_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 20 system/sepolicy/private/platform_app_all.te

(allow platform_app_all media_rw_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 23 system/sepolicy/private/platform_app_all.te

(allow platform_app_all cache_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 24 system/sepolicy/private/platform_app_all.te

(allow platform_app_all cache_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 28 system/sepolicy/private/platform_app_all.te

(allow platform_app_all mnt_media_rw_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 29 system/sepolicy/private/platform_app_all.te

(allow platform_app_all sdcard_type (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 30 system/sepolicy/private/platform_app_all.te

(allow platform_app_all sdcard_type (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 33 system/sepolicy/private/platform_app_all.te

(allow platform_app_all rootfs (dir (getattr)))
;;* lme

;;* lmx 34 system/sepolicy/private/platform_app_all.te

(allow platform_app_all audio_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 35 system/sepolicy/private/platform_app_all.te

(allow platform_app_all radio_cdma_ecm_prop (file (read getattr map open)))
;;* lme

;;* lmx 36 system/sepolicy/private/platform_app_all.te

(allow platform_app_all property_socket (sock_file (write)))
;;* lme

;;* lmx 36 system/sepolicy/private/platform_app_all.te

(allow platform_app_all init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 36 system/sepolicy/private/platform_app_all.te

(allow platform_app_all persist_wm_debug_prop (property_service (set)))
;;* lme

;;* lmx 36 system/sepolicy/private/platform_app_all.te

(allow platform_app_all persist_wm_debug_prop (file (read getattr map open)))
;;* lme

;;* lmx 39 system/sepolicy/private/platform_app_all.te

(neverallow base_typeattr_942 persist_wm_debug_prop (property_service (set)))
;;* lme

;;* lmx 41 system/sepolicy/private/platform_app_all.te

(allow platform_app_all property_socket (sock_file (write)))
;;* lme

;;* lmx 41 system/sepolicy/private/platform_app_all.te

(allow platform_app_all init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 41 system/sepolicy/private/platform_app_all.te

(allow platform_app_all debug_tracing_desktop_mode_visible_tasks_prop (property_service (set)))
;;* lme

;;* lmx 41 system/sepolicy/private/platform_app_all.te

(allow platform_app_all debug_tracing_desktop_mode_visible_tasks_prop (file (read getattr map open)))
;;* lme

;;* lmx 46 system/sepolicy/private/platform_app_all.te

(allow platform_app_all proc_vmstat (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 50 system/sepolicy/private/platform_app_all.te

(allow platform_app_all proc_net_type (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 50 system/sepolicy/private/platform_app_all.te

(allow platform_app_all proc_net_type (file (ioctl read getattr lock map open watch watch_reads)))
(allow platform_app_all proc_net_type (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

(auditallow platform_app_all proc_net_type (file (read getattr open)))
(auditallow platform_app_all proc_net_type (dir (read getattr open)))
(auditallow platform_app_all proc_net_type (lnk_file (read getattr open)))
;;* lmx 56 system/sepolicy/private/platform_app_all.te

(allow platform_app_all trace_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 56 system/sepolicy/private/platform_app_all.te

(allow platform_app_all trace_data_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
;;* lme

;;* lmx 62 system/sepolicy/private/platform_app_all.te

(allow platform_app_all wm_trace_data_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
;;* lme

;;* lmx 62 system/sepolicy/private/platform_app_all.te

(allow platform_app_all wm_trace_data_file (file (ioctl read write create getattr setattr lock append map unlink open watch watch_reads)))
;;* lme

;;* lmx 70 system/sepolicy/private/platform_app_all.te

(allow platform_app_all perfetto_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lme

;;* lmx 70 system/sepolicy/private/platform_app_all.te

(allow platform_app_all traced_consumer_socket (sock_file (write)))
;;* lme

;;* lmx 70 system/sepolicy/private/platform_app_all.te

(allow platform_app_all traced (unix_stream_socket (connectto)))
;;* lme

;;* lmx 75 system/sepolicy/private/platform_app_all.te

(allow platform_app_all audioserver_service (service_manager (find)))
;;* lme

;;* lmx 76 system/sepolicy/private/platform_app_all.te

(allow platform_app_all cameraserver_service (service_manager (find)))
;;* lme

;;* lmx 77 system/sepolicy/private/platform_app_all.te

(allow platform_app_all drmserver_service (service_manager (find)))
;;* lme

;;* lmx 78 system/sepolicy/private/platform_app_all.te

(allow platform_app_all mediaserver_service (service_manager (find)))
;;* lme

;;* lmx 79 system/sepolicy/private/platform_app_all.te

(allow platform_app_all mediametrics_service (service_manager (find)))
;;* lme

;;* lmx 80 system/sepolicy/private/platform_app_all.te

(allow platform_app_all mediaextractor_service (service_manager (find)))
;;* lme

;;* lmx 81 system/sepolicy/private/platform_app_all.te

(allow platform_app_all mediadrmserver_service (service_manager (find)))
;;* lme

;;* lmx 82 system/sepolicy/private/platform_app_all.te

(allow platform_app_all persistent_data_block_service (service_manager (find)))
;;* lme

;;* lmx 83 system/sepolicy/private/platform_app_all.te

(allow platform_app_all radio_service (service_manager (find)))
;;* lme

;;* lmx 84 system/sepolicy/private/platform_app_all.te

(allow platform_app_all thermal_service (service_manager (find)))
;;* lme

;;* lmx 85 system/sepolicy/private/platform_app_all.te

(allow platform_app_all app_api_service (service_manager (find)))
;;* lme

;;* lmx 86 system/sepolicy/private/platform_app_all.te

(allow platform_app_all system_api_service (service_manager (find)))
;;* lme

;;* lmx 87 system/sepolicy/private/platform_app_all.te

(allow platform_app_all vr_manager_service (service_manager (find)))
;;* lme

;;* lmx 88 system/sepolicy/private/platform_app_all.te

(allow platform_app_all stats_service (service_manager (find)))
;;* lme

;;* lmx 89 system/sepolicy/private/platform_app_all.te

(allow platform_app_all tradeinmode_service (service_manager (find)))
;;* lme

;;* lmx 92 system/sepolicy/private/platform_app_all.te

(allow platform_app_all statsd (binder (call transfer)))
;;* lme

;;* lmx 92 system/sepolicy/private/platform_app_all.te

(allow statsd platform_app_all (binder (transfer)))
;;* lme

;;* lmx 92 system/sepolicy/private/platform_app_all.te

(allow platform_app_all statsd (fd (use)))
;;* lme

;;* lmx 95 system/sepolicy/private/platform_app_all.te

(allow platform_app_all artd_service (service_manager (find)))
;;* lme

;;* lmx 95 system/sepolicy/private/platform_app_all.te

(allow platform_app_all artd (binder (call transfer)))
;;* lme

;;* lmx 95 system/sepolicy/private/platform_app_all.te

(allow artd platform_app_all (binder (transfer)))
;;* lme

;;* lmx 95 system/sepolicy/private/platform_app_all.te

(allow platform_app_all artd (fd (use)))
;;* lme

;;* lmx 101 system/sepolicy/private/platform_app_all.te

(allow platform_app_all preloads_data_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 102 system/sepolicy/private/platform_app_all.te

(allow platform_app_all preloads_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 103 system/sepolicy/private/platform_app_all.te

(allow platform_app_all preloads_media_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 104 system/sepolicy/private/platform_app_all.te

(allow platform_app_all preloads_media_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 106 system/sepolicy/private/platform_app_all.te

(allow platform_app_all runtime_event_log_tags_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 111 system/sepolicy/private/platform_app_all.te

(allow platform_app_all system_server (udp_socket (read write getattr connect getopt setopt recvfrom sendto)))
;;* lme

;;* lmx 114 system/sepolicy/private/platform_app_all.te

(allow platform_app_all property_socket (sock_file (write)))
;;* lme

;;* lmx 114 system/sepolicy/private/platform_app_all.te

(allow platform_app_all init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 114 system/sepolicy/private/platform_app_all.te

(allow platform_app_all test_boot_reason_prop (property_service (set)))
;;* lme

;;* lmx 114 system/sepolicy/private/platform_app_all.te

(allow platform_app_all test_boot_reason_prop (file (read getattr map open)))
;;* lme

;;* lmx 117 system/sepolicy/private/platform_app_all.te

(allow platform_app_all keyguard_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 120 system/sepolicy/private/platform_app_all.te

(allow platform_app_all qemu_hw_prop (file (read getattr map open)))
;;* lme

;;* lmx 123 system/sepolicy/private/platform_app_all.te

(allow platform_app_all last_boot_reason_prop (file (read getattr map open)))
;;* lme

;;* lmx 126 system/sepolicy/private/platform_app_all.te

(allow platform_app bluetooth_lea_prop (file (read getattr map open)))
;;* lme

;;* lmx 129 system/sepolicy/private/platform_app_all.te

(allow platform_app_all app_data_file (lnk_file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

(dontaudit platform_app_all debugfs_tracing (file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lmx 135 system/sepolicy/private/platform_app_all.te

(allow platform_app_all virtualizationmanager_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 135 system/sepolicy/private/platform_app_all.te

(allow platform_app_all platform_app_all_virtualizationmanager (process (transition)))
;;* lme

;;* lmx 135 system/sepolicy/private/platform_app_all.te

(allow platform_app_all_virtualizationmanager virtualizationmanager_exec (file (read getattr map execute open entrypoint)))
;;* lme

;;* lmx 135 system/sepolicy/private/platform_app_all.te

(allow platform_app_all_virtualizationmanager platform_app_all (process (sigchld)))
;;* lme

(dontaudit platform_app_all platform_app_all_virtualizationmanager (process (noatsecure)))
;;* lmx 135 system/sepolicy/private/platform_app_all.te

(allow platform_app_all platform_app_all_virtualizationmanager (process (siginh rlimitinh)))
;;* lme

(typetransition platform_app_all virtualizationmanager_exec process platform_app_all_virtualizationmanager)
;;* lmx 135 system/sepolicy/private/platform_app_all.te

(allow platform_app_all_virtualizationmanager crosvm_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 135 system/sepolicy/private/platform_app_all.te

(allow platform_app_all_virtualizationmanager platform_app_all_virtmgr_crosvm (process (transition)))
;;* lme

;;* lmx 135 system/sepolicy/private/platform_app_all.te

(allow platform_app_all_virtmgr_crosvm crosvm_exec (file (read getattr map execute open entrypoint)))
;;* lme

;;* lmx 135 system/sepolicy/private/platform_app_all.te

(allow platform_app_all_virtmgr_crosvm platform_app_all_virtualizationmanager (process (sigchld)))
;;* lme

(dontaudit platform_app_all_virtualizationmanager platform_app_all_virtmgr_crosvm (process (noatsecure)))
;;* lmx 135 system/sepolicy/private/platform_app_all.te

(allow platform_app_all_virtualizationmanager platform_app_all_virtmgr_crosvm (process (siginh rlimitinh)))
;;* lme

(typetransition platform_app_all_virtualizationmanager crosvm_exec process platform_app_all_virtmgr_crosvm)
;;* lmx 135 system/sepolicy/private/platform_app_all.te

(allow platform_app_all_virtualizationmanager hal_secretkeeper (memfd_file (read write getattr map)))
;;* lme

;;* lmx 135 system/sepolicy/private/platform_app_all.te

(allow hal_secretkeeper platform_app_all_virtualizationmanager (memfd_file (read write getattr map)))
;;* lme

;;* lmx 135 system/sepolicy/private/platform_app_all.te

(allow platform_app_all_virtualizationmanager hal_vm_capabilities (memfd_file (read write getattr map)))
;;* lme

;;* lmx 135 system/sepolicy/private/platform_app_all.te

(allow hal_vm_capabilities platform_app_all_virtualizationmanager (memfd_file (read write getattr map)))
;;* lme

;;* lmx 135 system/sepolicy/private/platform_app_all.te

(allow platform_app_all_virtualizationmanager platform_app_all (unix_stream_socket (ioctl read write getattr getopt)))
(allow platform_app_all_virtmgr_crosvm platform_app_all (unix_stream_socket (ioctl read write getattr getopt)))
;;* lme

;;* lmx 135 system/sepolicy/private/platform_app_all.te

(allow platform_app_all_virtualizationmanager platform_app_all (fd (use)))
(allow platform_app_all_virtmgr_crosvm platform_app_all (fd (use)))
;;* lme

;;* lmx 135 system/sepolicy/private/platform_app_all.te

(allow platform_app_all platform_app_all_virtualizationmanager (fd (use)))
;;* lme

;;* lmx 135 system/sepolicy/private/platform_app_all.te

(allow platform_app_all_virtualizationmanager platform_app_all (fifo_file (ioctl read write getattr)))
(allow platform_app_all_virtmgr_crosvm platform_app_all (fifo_file (ioctl read write getattr)))
;;* lme

;;* lmx 135 system/sepolicy/private/platform_app_all.te

(allow platform_app_all platform_app_all_virtualizationmanager (vsock_socket (read write getattr getopt)))
;;* lme

;;* lmx 135 system/sepolicy/private/platform_app_all.te

(allow platform_app_all hypervisor_prop (file (read getattr map open)))
;;* lme

;;* lmx 135 system/sepolicy/private/platform_app_all.te

(allow platform_app_all virtualizationservice_data_file (file (read getattr)))
;;* lme

;;* lmx 135 system/sepolicy/private/platform_app_all.te

(allow platform_app_all_virtualizationmanager platform_app_all (dir (search)))
;;* lme

;;* lmx 135 system/sepolicy/private/platform_app_all.te

(allow platform_app_all_virtualizationmanager platform_app_all (file (read)))
;;* lme

;;* lmx 135 system/sepolicy/private/platform_app_all.te

(allow platform_app_all_virtualizationmanager platform_app_all (lnk_file (read)))
;;* lme

;;* lmx 135 system/sepolicy/private/platform_app_all.te

(allow platform_app_all platform_app_all_virtmgr_crosvm (process (sigkill)))
;;* lme

;;* lmx 135 system/sepolicy/private/platform_app_all.te

(allow platform_app_all_virtmgr_crosvm hal_graphics_allocator (memfd_file (read write getattr map)))
;;* lme

;;* lmx 135 system/sepolicy/private/platform_app_all.te

(allow hal_graphics_allocator platform_app_all_virtmgr_crosvm (memfd_file (read write getattr map)))
;;* lme

;;* lmx 142 system/sepolicy/private/platform_app_all.te

(allow platform_app_all aiseal_host_service (service_manager (find)))
;;* lme

;;* lmx 142 system/sepolicy/private/platform_app_all.te

(allow platform_app_all aisealhostservice (binder (call transfer)))
;;* lme

;;* lmx 142 system/sepolicy/private/platform_app_all.te

(allow aisealhostservice platform_app_all (binder (transfer)))
;;* lme

;;* lmx 142 system/sepolicy/private/platform_app_all.te

(allow platform_app_all aisealhostservice (fd (use)))
;;* lme

;;* lmx 142 system/sepolicy/private/platform_app_all.te

(allow platform_app_all aisealhostservice (vsock_socket (read write getattr getopt)))
;;* lme

;;* lmx 142 system/sepolicy/private/platform_app_all.te

(allow platform_app_all aiseal_prop (file (read getattr map open)))
;;* lme

;;* lmx 147 system/sepolicy/private/platform_app_all.te

(allow platform_app_all shutdown_checkpoints_system_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 147 system/sepolicy/private/platform_app_all.te

(allow platform_app_all shutdown_checkpoints_system_data_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow platform_app_all shutdown_checkpoints_system_data_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 154 system/sepolicy/private/platform_app_all.te

(neverallow platform_app_all fuse_device (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
;;* lme

;;* lmx 157 system/sepolicy/private/platform_app_all.te

(allow platform_app_all property_socket (sock_file (write)))
;;* lme

;;* lmx 157 system/sepolicy/private/platform_app_all.te

(allow platform_app_all init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 157 system/sepolicy/private/platform_app_all.te

(allow platform_app_all thermal_profile_prop (property_service (set)))
;;* lme

;;* lmx 157 system/sepolicy/private/platform_app_all.te

(allow platform_app_all thermal_profile_prop (file (read getattr map open)))
;;* lme

;;* lmx 11 system/sepolicy/private/pmgd.te

(allow init pmgd_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 11 system/sepolicy/private/pmgd.te

(allow init pmgd (process (transition)))
;;* lme

;;* lmx 11 system/sepolicy/private/pmgd.te

(allow pmgd pmgd_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init pmgd (process (noatsecure)))
;;* lmx 11 system/sepolicy/private/pmgd.te

(allow init pmgd (process (siginh rlimitinh)))
;;* lme

(typetransition init pmgd_exec process pmgd)
;;* lmx 14 system/sepolicy/private/pmgd.te

(allow pmgd cgroup_v2 (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 15 system/sepolicy/private/pmgd.te

(allow pmgd cgroup_v2 (file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 18 system/sepolicy/private/pmgd.te

(allow pmgd cgroup_v2 (dir (rmdir)))
;;* lme

;;* lmx 21 system/sepolicy/private/pmgd.te

(allow pmgd pmgd_data_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
;;* lme

;;* lmx 22 system/sepolicy/private/pmgd.te

(allow pmgd pmgd_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 25 system/sepolicy/private/pmgd.te

(allow pmgd statsdw_socket (sock_file (write)))
;;* lme

;;* lmx 25 system/sepolicy/private/pmgd.te

(allow pmgd statsd (unix_dgram_socket (sendto)))
;;* lme

;;* lmx 29 system/sepolicy/private/pmgd.te

(allow pmgd base_typeattr_943 (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 29 system/sepolicy/private/pmgd.te

(allow pmgd base_typeattr_943 (file (ioctl read getattr lock map open watch watch_reads)))
(allow pmgd base_typeattr_943 (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 41 system/sepolicy/private/pmgd.te

(allow pmgd system_server (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 41 system/sepolicy/private/pmgd.te

(allow pmgd system_server (file (ioctl read getattr lock map open watch watch_reads)))
(allow pmgd system_server (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 42 system/sepolicy/private/pmgd.te

(allow pmgd surfaceflinger (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 42 system/sepolicy/private/pmgd.te

(allow pmgd surfaceflinger (file (ioctl read getattr lock map open watch watch_reads)))
(allow pmgd surfaceflinger (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

(dontaudit pmgd domain (dir (read getattr open search)))
;;* lmx 48 system/sepolicy/private/pmgd.te

(allow pmgd perfetto_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 48 system/sepolicy/private/pmgd.te

(allow pmgd perfetto (process (transition)))
;;* lme

;;* lmx 48 system/sepolicy/private/pmgd.te

(allow perfetto perfetto_exec (file (read getattr map execute open entrypoint)))
;;* lme

;;* lmx 48 system/sepolicy/private/pmgd.te

(allow perfetto pmgd (process (sigchld)))
;;* lme

(dontaudit pmgd perfetto (process (noatsecure)))
;;* lmx 48 system/sepolicy/private/pmgd.te

(allow pmgd perfetto (process (siginh rlimitinh)))
;;* lme

(typetransition pmgd perfetto_exec process perfetto)
;;* lmx 4 system/sepolicy/private/postinstall.te

(allow postinstall rootfs (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 7 system/sepolicy/private/postinstall.te

(allow postinstall package_service (service_manager (find)))
;;* lme

;;* lmx 11 system/sepolicy/private/postinstall.te

(allow postinstall update_engine_common (fd (use)))
;;* lme

;;* lmx 12 system/sepolicy/private/postinstall.te

(allow postinstall update_engine_common (fifo_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 16 system/sepolicy/private/postinstall.te

(allow postinstall postinstall_file (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lme

;;* lmx 17 system/sepolicy/private/postinstall.te

(allow postinstall postinstall_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 18 system/sepolicy/private/postinstall.te

(allow postinstall postinstall_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 21 system/sepolicy/private/postinstall.te

(allow postinstall shell_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lme

;;* lmx 22 system/sepolicy/private/postinstall.te

(allow postinstall system_file (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lme

;;* lmx 23 system/sepolicy/private/postinstall.te

(allow postinstall toolbox_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lme

;;* lmx 31 system/sepolicy/private/postinstall.te

(allow postinstall servicemanager (binder (call transfer)))
;;* lme

;;* lmx 31 system/sepolicy/private/postinstall.te

(allow servicemanager postinstall (binder (call transfer)))
;;* lme

;;* lmx 32 system/sepolicy/private/postinstall.te

(allow postinstall system_server (binder (call transfer)))
;;* lme

;;* lmx 32 system/sepolicy/private/postinstall.te

(allow system_server postinstall (binder (transfer)))
;;* lme

;;* lmx 32 system/sepolicy/private/postinstall.te

(allow postinstall system_server (fd (use)))
;;* lme

;;* lmx 35 system/sepolicy/private/postinstall.te

(allow postinstall sysfs_fs_f2fs (file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 36 system/sepolicy/private/postinstall.te

(allow postinstall sysfs_fs_f2fs (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 45 system/sepolicy/private/postinstall.te

(neverallow base_typeattr_944 postinstall (process (transition dyntransition)))
;;* lme

;;* lmx 3 system/sepolicy/private/prefetch.te

(allow init prefetch_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 3 system/sepolicy/private/prefetch.te

(allow init prefetch (process (transition)))
;;* lme

;;* lmx 3 system/sepolicy/private/prefetch.te

(allow prefetch prefetch_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init prefetch (process (noatsecure)))
;;* lmx 3 system/sepolicy/private/prefetch.te

(allow init prefetch (process (siginh rlimitinh)))
;;* lme

(typetransition init prefetch_exec process prefetch)
;;* lmx 7 system/sepolicy/private/prefetch.te

(allow prefetch debugfs_tracing_instances (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 8 system/sepolicy/private/prefetch.te

(allow prefetch debugfs_tracing_instances (file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 11 system/sepolicy/private/prefetch.te

(allow prefetch metadata_file (dir (search)))
;;* lme

;;* lmx 12 system/sepolicy/private/prefetch.te

(allow prefetch prefetch_metadata_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
;;* lme

;;* lmx 13 system/sepolicy/private/prefetch.te

(allow prefetch prefetch_metadata_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 15 system/sepolicy/private/prefetch.te

(allow prefetch prefetch_boot_prop (file (read getattr map open)))
;;* lme

;;* lmx 16 system/sepolicy/private/prefetch.te

(allow prefetch property_socket (sock_file (write)))
;;* lme

;;* lmx 16 system/sepolicy/private/prefetch.te

(allow prefetch init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 16 system/sepolicy/private/prefetch.te

(allow prefetch prefetch_service_prop (property_service (set)))
;;* lme

;;* lmx 16 system/sepolicy/private/prefetch.te

(allow prefetch prefetch_service_prop (file (read getattr map open)))
;;* lme

;;* lmx 23 system/sepolicy/private/prefetch.te

(neverallow base_typeattr_945 ctl_prefetch_prop (property_service (set)))
;;* lme

;;* lmx 27 system/sepolicy/private/prefetch.te

(allow prefetch rootfs (dir (read getattr open search)))
;;* lme

(dontaudit prefetch file_contexts_file (file (ioctl read getattr lock map open watch watch_reads)))
(dontaudit prefetch hwservice_contexts_file (file (ioctl read getattr lock map open watch watch_reads)))
(dontaudit prefetch keystore2_key_contexts_file (file (ioctl read getattr lock map open watch watch_reads)))
(dontaudit prefetch mac_perms_file (file (ioctl read getattr lock map open watch watch_reads)))
(dontaudit prefetch property_contexts_file (file (ioctl read getattr lock map open watch watch_reads)))
(dontaudit prefetch seapp_contexts_file (file (ioctl read getattr lock map open watch watch_reads)))
(dontaudit prefetch service_contexts_file (file (ioctl read getattr lock map open watch watch_reads)))
(dontaudit prefetch tee_service_contexts_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lmx 4 system/sepolicy/private/preloads_copy.te

(allow init preloads_copy_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 4 system/sepolicy/private/preloads_copy.te

(allow init preloads_copy (process (transition)))
;;* lme

;;* lmx 4 system/sepolicy/private/preloads_copy.te

(allow preloads_copy preloads_copy_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init preloads_copy (process (noatsecure)))
;;* lmx 4 system/sepolicy/private/preloads_copy.te

(allow init preloads_copy (process (siginh rlimitinh)))
;;* lme

(typetransition init preloads_copy_exec process preloads_copy)
;;* lmx 6 system/sepolicy/private/preloads_copy.te

(allow preloads_copy shell_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lme

;;* lmx 7 system/sepolicy/private/preloads_copy.te

(allow preloads_copy toolbox_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lme

;;* lmx 8 system/sepolicy/private/preloads_copy.te

(allow preloads_copy preloads_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 9 system/sepolicy/private/preloads_copy.te

(allow preloads_copy preloads_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 10 system/sepolicy/private/preloads_copy.te

(allow preloads_copy preloads_media_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 11 system/sepolicy/private/preloads_copy.te

(allow preloads_copy preloads_media_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 14 system/sepolicy/private/preloads_copy.te

(allow preloads_copy system_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

(dontaudit preloads_copy postinstall_mnt_dir (dir (search)))
;;* lmx 10 system/sepolicy/private/preopt2cachename.te

(allow preopt2cachename cppreopts (fd (use)))
;;* lme

;;* lmx 11 system/sepolicy/private/preopt2cachename.te

(allow preopt2cachename cppreopts (fifo_file (read write getattr)))
;;* lme

;;* lmx 14 system/sepolicy/private/preopt2cachename.te

(allow preopt2cachename proc_net_type (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

(auditallow preopt2cachename proc_net_type (file (read getattr open)))
(auditallow preopt2cachename proc_net_type (dir (read getattr open)))
(auditallow preopt2cachename proc_net_type (lnk_file (read getattr open)))
(typetransition priv_app tmpfs file appdomain_tmpfs)
;;* lmx 2 system/sepolicy/private/priv_app.te

(allow priv_app priv_app_userfaultfd (anon_inode (ioctl read create)))
;;* lme

(dontaudit su priv_app_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lmx 2 system/sepolicy/private/priv_app.te

(neverallow base_typeattr_946 priv_app_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 2 system/sepolicy/private/priv_app.te

(allow priv_app appdomain_tmpfs (file (read write getattr map execute)))
;;* lme

;;* lmx 2 system/sepolicy/private/priv_app.te

(allow priv_app appdomain (memfd_file (read write getattr map execute)))
;;* lme

;;* lmx 2 system/sepolicy/private/priv_app.te

(neverallow base_typeattr_947 base_typeattr_946 (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 2 system/sepolicy/private/priv_app.te

(neverallow base_typeattr_948 priv_app (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 2 system/sepolicy/private/priv_app.te

(neverallow base_typeattr_949 priv_app (process (ptrace)))
;;* lme

;;* lmx 2 system/sepolicy/private/priv_app.te

(neverallow priv_app base_typeattr_950 (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

(typetransition priv_app devpts chr_file priv_app_devpts)
;;* lmx 11 system/sepolicy/private/priv_app.te

(allow priv_app priv_app_devpts (chr_file (ioctl read write getattr open)))
;;* lme

;;* lmx 11 system/sepolicy/private/priv_app.te

(allowx priv_app priv_app_devpts (ioctl chr_file ((range 0x5401 0x5404) 0x540b (range 0x540e 0x5411) (range 0x5413 0x5414) (range 0x5450 0x5451))))
;;* lme

;;* lmx 11 system/sepolicy/private/priv_app.te

(neverallowx base_typeattr_248 priv_app_devpts (ioctl chr_file (0x5412)))
;;* lme

(typetransition priv_app_36 tmpfs file appdomain_tmpfs)
;;* lmx 6 system/sepolicy/private/priv_app_36.te

(allow priv_app_36 priv_app_36_userfaultfd (anon_inode (ioctl read create)))
;;* lme

(dontaudit su priv_app_36_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lmx 6 system/sepolicy/private/priv_app_36.te

(neverallow base_typeattr_951 priv_app_36_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 6 system/sepolicy/private/priv_app_36.te

(allow priv_app_36 appdomain_tmpfs (file (read write getattr map execute)))
;;* lme

;;* lmx 6 system/sepolicy/private/priv_app_36.te

(allow priv_app_36 appdomain (memfd_file (read write getattr map execute)))
;;* lme

;;* lmx 6 system/sepolicy/private/priv_app_36.te

(neverallow base_typeattr_952 base_typeattr_951 (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 6 system/sepolicy/private/priv_app_36.te

(neverallow base_typeattr_953 priv_app_36 (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 6 system/sepolicy/private/priv_app_36.te

(neverallow base_typeattr_954 priv_app_36 (process (ptrace)))
;;* lme

;;* lmx 6 system/sepolicy/private/priv_app_36.te

(neverallow priv_app_36 base_typeattr_955 (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

(typetransition priv_app_36 devpts chr_file priv_app_36_devpts)
;;* lmx 17 system/sepolicy/private/priv_app_36.te

(allow priv_app_36 priv_app_36_devpts (chr_file (ioctl read write getattr open)))
;;* lme

;;* lmx 17 system/sepolicy/private/priv_app_36.te

(allowx priv_app_36 priv_app_36_devpts (ioctl chr_file ((range 0x5401 0x5404) 0x540b (range 0x540e 0x5411) (range 0x5413 0x5414) (range 0x5450 0x5451))))
;;* lme

;;* lmx 17 system/sepolicy/private/priv_app_36.te

(neverallowx base_typeattr_248 priv_app_36_devpts (ioctl chr_file (0x5412)))
;;* lme

;;* lmx 21 system/sepolicy/private/priv_app_36.te

(allow priv_app_36 domain (memfd_file (ioctl)))
;;* lme

;;* lmx 22 system/sepolicy/private/priv_app_36.te

(allowx priv_app_36 domain (ioctl memfd_file ((range 0x7701 0x770b))))
;;* lme

;;* lmx 23 system/sepolicy/private/priv_app_36.te

(allow priv_app_36 ashmem_libcutils_device (chr_file (open)))
;;* lme

;;* lmx 19 system/sepolicy/private/priv_app_all.te

(allow priv_app_all privapp_data_file (file (execute)))
;;* lme

;;* lmx 23 system/sepolicy/private/priv_app_all.te

(allow priv_app_all system_linker_exec (file (execute_no_trans)))
;;* lme

;;* lmx 25 system/sepolicy/private/priv_app_all.te

(allow priv_app_all privapp_data_file (lnk_file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 28 system/sepolicy/private/priv_app_all.te

(allow priv_app_all app_api_service (service_manager (find)))
;;* lme

;;* lmx 29 system/sepolicy/private/priv_app_all.te

(allow priv_app_all system_api_service (service_manager (find)))
;;* lme

;;* lmx 31 system/sepolicy/private/priv_app_all.te

(allow priv_app_all audioserver_service (service_manager (find)))
;;* lme

;;* lmx 32 system/sepolicy/private/priv_app_all.te

(allow priv_app_all cameraserver_service (service_manager (find)))
;;* lme

;;* lmx 33 system/sepolicy/private/priv_app_all.te

(allow priv_app_all drmserver_service (service_manager (find)))
;;* lme

;;* lmx 34 system/sepolicy/private/priv_app_all.te

(allow priv_app_all mediadrmserver_service (service_manager (find)))
;;* lme

;;* lmx 35 system/sepolicy/private/priv_app_all.te

(allow priv_app_all mediaextractor_service (service_manager (find)))
;;* lme

;;* lmx 36 system/sepolicy/private/priv_app_all.te

(allow priv_app_all mediametrics_service (service_manager (find)))
;;* lme

;;* lmx 37 system/sepolicy/private/priv_app_all.te

(allow priv_app_all mediaserver_service (service_manager (find)))
;;* lme

;;* lmx 38 system/sepolicy/private/priv_app_all.te

(allow priv_app_all music_recognition_service (service_manager (find)))
;;* lme

;;* lmx 39 system/sepolicy/private/priv_app_all.te

(allow priv_app_all network_watchlist_service (service_manager (find)))
;;* lme

;;* lmx 40 system/sepolicy/private/priv_app_all.te

(allow priv_app_all nfc_service (service_manager (find)))
;;* lme

;;* lmx 41 system/sepolicy/private/priv_app_all.te

(allow priv_app_all oem_lock_service (service_manager (find)))
;;* lme

;;* lmx 42 system/sepolicy/private/priv_app_all.te

(allow priv_app_all persistent_data_block_service (service_manager (find)))
;;* lme

;;* lmx 43 system/sepolicy/private/priv_app_all.te

(allow priv_app_all radio_service (service_manager (find)))
;;* lme

;;* lmx 44 system/sepolicy/private/priv_app_all.te

(allow priv_app_all recovery_service (service_manager (find)))
;;* lme

;;* lmx 45 system/sepolicy/private/priv_app_all.te

(allow priv_app_all stats_service (service_manager (find)))
;;* lme

;;* lmx 48 system/sepolicy/private/priv_app_all.te

(allow priv_app_all cache_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
(allow priv_app_all cache_recovery_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 49 system/sepolicy/private/priv_app_all.te

(allow priv_app_all cache_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow priv_app_all cache_recovery_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 51 system/sepolicy/private/priv_app_all.te

(allow priv_app_all cache_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 54 system/sepolicy/private/priv_app_all.te

(allow priv_app_all media_rw_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 55 system/sepolicy/private/priv_app_all.te

(allow priv_app_all media_rw_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 59 system/sepolicy/private/priv_app_all.te

(allow priv_app_all shell_data_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 60 system/sepolicy/private/priv_app_all.te

(allow priv_app_all shell_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 63 system/sepolicy/private/priv_app_all.te

(allow priv_app_all profcollectd_data_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 72 system/sepolicy/private/priv_app_all.te

(allow priv_app_all wm_trace_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 73 system/sepolicy/private/priv_app_all.te

(allow priv_app_all wm_trace_data_file (file (getattr)))
;;* lme

;;* lmx 74 system/sepolicy/private/priv_app_all.te

(allow priv_app_all perfetto_traces_bugreport_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 75 system/sepolicy/private/priv_app_all.te

(allow priv_app_all perfetto_traces_bugreport_data_file (file (getattr)))
;;* lme

;;* lmx 77 system/sepolicy/private/priv_app_all.te

(allow priv_app_all perfetto_traces_data_file (dir (search)))
;;* lme

;;* lmx 83 system/sepolicy/private/priv_app_all.te

(allow priv_app_all perfetto (fd (use)))
;;* lme

;;* lmx 84 system/sepolicy/private/priv_app_all.te

(allow priv_app_all perfetto_traces_data_file (file (read getattr)))
;;* lme

;;* lmx 87 system/sepolicy/private/priv_app_all.te

(allow priv_app_all apk_tmp_file (dir (ioctl read getattr lock open watch watch_reads search)))
(allow priv_app_all apk_private_tmp_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 88 system/sepolicy/private/priv_app_all.te

(allow priv_app_all apk_tmp_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow priv_app_all apk_private_tmp_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 89 system/sepolicy/private/priv_app_all.te

(allowx priv_app_all apk_tmp_file (ioctl file (0x6686)))
(allowx priv_app_all apk_private_tmp_file (ioctl file (0x6686)))
;;* lme

;;* lmx 92 system/sepolicy/private/priv_app_all.te

(allow priv_app_all vold (fd (use)))
;;* lme

;;* lmx 93 system/sepolicy/private/priv_app_all.te

(allow priv_app_all fuse_device (chr_file (read write)))
;;* lme

;;* lmx 98 system/sepolicy/private/priv_app_all.te

(allow priv_app_all proc_vmstat (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 100 system/sepolicy/private/priv_app_all.te

(allow priv_app_all sysfs_type (dir (search)))
;;* lme

;;* lmx 102 system/sepolicy/private/priv_app_all.te

(allow priv_app_all sysfs_zram (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 102 system/sepolicy/private/priv_app_all.te

(allow priv_app_all sysfs_zram (file (ioctl read getattr lock map open watch watch_reads)))
(allow priv_app_all sysfs_zram (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 104 system/sepolicy/private/priv_app_all.te

(allow priv_app_all rootfs (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 104 system/sepolicy/private/priv_app_all.te

(allow priv_app_all rootfs (file (ioctl read getattr lock map open watch watch_reads)))
(allow priv_app_all rootfs (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 107 system/sepolicy/private/priv_app_all.te

(allow priv_app_all statsd (binder (call transfer)))
;;* lme

;;* lmx 107 system/sepolicy/private/priv_app_all.te

(allow statsd priv_app_all (binder (transfer)))
;;* lme

;;* lmx 107 system/sepolicy/private/priv_app_all.te

(allow priv_app_all statsd (fd (use)))
;;* lme

;;* lmx 110 system/sepolicy/private/priv_app_all.te

(allow priv_app_all ringtone_file (file (read write getattr)))
;;* lme

;;* lmx 113 system/sepolicy/private/priv_app_all.te

(allow priv_app_all preloads_data_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 114 system/sepolicy/private/priv_app_all.te

(allow priv_app_all preloads_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 115 system/sepolicy/private/priv_app_all.te

(allow priv_app_all preloads_media_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 116 system/sepolicy/private/priv_app_all.te

(allow priv_app_all preloads_media_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 118 system/sepolicy/private/priv_app_all.te

(allow priv_app_all runtime_event_log_tags_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 122 system/sepolicy/private/priv_app_all.te

(allow priv_app_all incident_service (service_manager (find)))
;;* lme

;;* lmx 123 system/sepolicy/private/priv_app_all.te

(allow priv_app_all incidentd (binder (call transfer)))
;;* lme

;;* lmx 123 system/sepolicy/private/priv_app_all.te

(allow incidentd priv_app_all (binder (transfer)))
;;* lme

;;* lmx 123 system/sepolicy/private/priv_app_all.te

(allow priv_app_all incidentd (fd (use)))
;;* lme

;;* lmx 124 system/sepolicy/private/priv_app_all.te

(allow priv_app_all incidentd (fifo_file (read write)))
;;* lme

;;* lmx 127 system/sepolicy/private/priv_app_all.te

(allow priv_app_all dynamic_system_prop (file (read getattr map open)))
;;* lme

;;* lmx 130 system/sepolicy/private/priv_app_all.te

(allow priv_app_all adbd_tradeinmode_prop (file (read getattr map open)))
;;* lme

(dontaudit priv_app_all exec_type (file (getattr)))
(dontaudit priv_app_all device (dir (read)))
(dontaudit priv_app_all fs_bpf (dir (search)))
(dontaudit priv_app_all metadata_file (dir (read)))
(dontaudit priv_app_all net_dns_prop (file (read)))
(dontaudit priv_app_all proc (file (read)))
(dontaudit priv_app_all proc_interrupts (file (read)))
(dontaudit priv_app_all proc_modules (file (read)))
(dontaudit priv_app_all proc_net (file (read)))
(dontaudit priv_app_all proc_stat (file (read)))
(dontaudit priv_app_all proc_version (file (read)))
(dontaudit priv_app_all sysfs (dir (read)))
(dontaudit priv_app_all sysfs (file (read)))
(dontaudit priv_app_all sysfs_android_usb (file (read)))
(dontaudit priv_app_all sysfs_dm (file (ioctl read getattr lock map open watch watch_reads)))
(dontaudit priv_app_all wifi_config_prop (file (read)))
(dontaudit priv_app_all wifi_hal_prop (file (read)))
(dontaudit priv_app_all wifi_prop (file (read)))
;;* lmx 153 system/sepolicy/private/priv_app_all.te

(allow priv_app_all system_server (udp_socket (read write getattr connect getopt setopt recvfrom sendto)))
;;* lme

;;* lmx 162 system/sepolicy/private/priv_app_all.te

(allowx priv_app_all apk_data_file (ioctl file ((range 0x671f 0x6720) 0x6722 0x6724)))
;;* lme

;;* lmx 165 system/sepolicy/private/priv_app_all.te

(allow priv_app_all incremental_control_file (file (ioctl read getattr)))
;;* lme

;;* lmx 169 system/sepolicy/private/priv_app_all.te

(allowx priv_app_all incremental_control_file (ioctl file (0x6721)))
;;* lme

;;* lmx 172 system/sepolicy/private/priv_app_all.te

(allow priv_app_all incremental_prop (file (read getattr map open)))
;;* lme

;;* lmx 175 system/sepolicy/private/priv_app_all.te

(allow priv_app_all device_config_aconfig_flags_prop (file (read getattr map open)))
;;* lme

;;* lmx 178 system/sepolicy/private/priv_app_all.te

(allow priv_app_all system_boot_reason_prop (file (read getattr map open)))
;;* lme

;;* lmx 181 system/sepolicy/private/priv_app_all.te

(allow priv_app_all apex_data_file (dir (search)))
;;* lme

;;* lmx 182 system/sepolicy/private/priv_app_all.te

(allow priv_app_all staging_data_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 184 system/sepolicy/private/priv_app_all.te

(allow priv_app_all staging_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 186 system/sepolicy/private/priv_app_all.te

(allow priv_app_all block_device (dir (search)))
;;* lme

;;* lmx 187 system/sepolicy/private/priv_app_all.te

(allow priv_app_all apex_dm_device (blk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 191 system/sepolicy/private/priv_app_all.te

(allow priv_app_all vendor_apex_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 192 system/sepolicy/private/priv_app_all.te

(allow priv_app_all vendor_apex_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 195 system/sepolicy/private/priv_app_all.te

(allow priv_app_all system_app_data_file (file (read getattr)))
;;* lme

;;* lmx 198 system/sepolicy/private/priv_app_all.te

(allow priv_app_all rs_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 198 system/sepolicy/private/priv_app_all.te

(allow priv_app_all rs (process (transition)))
;;* lme

;;* lmx 198 system/sepolicy/private/priv_app_all.te

(allow rs rs_exec (file (read getattr map execute open entrypoint)))
;;* lme

;;* lmx 198 system/sepolicy/private/priv_app_all.te

(allow rs priv_app_all (process (sigchld)))
;;* lme

(dontaudit priv_app_all rs (process (noatsecure)))
;;* lmx 198 system/sepolicy/private/priv_app_all.te

(allow priv_app_all rs (process (siginh rlimitinh)))
;;* lme

(typetransition priv_app_all rs_exec process rs)
;;* lmx 203 system/sepolicy/private/priv_app_all.te

(allow priv_app_all app_exec_data_file (file (ioctl read getattr lock map unlink execute open watch watch_reads)))
;;* lme

;;* lmx 208 system/sepolicy/private/priv_app_all.te

(allow priv_app_all pcc_data_file (file (ioctl read getattr lock map)))
;;* lme

;;* lmx 213 system/sepolicy/private/priv_app_all.te

(allow priv_app_all virtualizationmanager_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 213 system/sepolicy/private/priv_app_all.te

(allow priv_app_all priv_app_all_virtualizationmanager (process (transition)))
;;* lme

;;* lmx 213 system/sepolicy/private/priv_app_all.te

(allow priv_app_all_virtualizationmanager virtualizationmanager_exec (file (read getattr map execute open entrypoint)))
;;* lme

;;* lmx 213 system/sepolicy/private/priv_app_all.te

(allow priv_app_all_virtualizationmanager priv_app_all (process (sigchld)))
;;* lme

(dontaudit priv_app_all priv_app_all_virtualizationmanager (process (noatsecure)))
;;* lmx 213 system/sepolicy/private/priv_app_all.te

(allow priv_app_all priv_app_all_virtualizationmanager (process (siginh rlimitinh)))
;;* lme

(typetransition priv_app_all virtualizationmanager_exec process priv_app_all_virtualizationmanager)
;;* lmx 213 system/sepolicy/private/priv_app_all.te

(allow priv_app_all_virtualizationmanager crosvm_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 213 system/sepolicy/private/priv_app_all.te

(allow priv_app_all_virtualizationmanager priv_app_all_virtmgr_crosvm (process (transition)))
;;* lme

;;* lmx 213 system/sepolicy/private/priv_app_all.te

(allow priv_app_all_virtmgr_crosvm crosvm_exec (file (read getattr map execute open entrypoint)))
;;* lme

;;* lmx 213 system/sepolicy/private/priv_app_all.te

(allow priv_app_all_virtmgr_crosvm priv_app_all_virtualizationmanager (process (sigchld)))
;;* lme

(dontaudit priv_app_all_virtualizationmanager priv_app_all_virtmgr_crosvm (process (noatsecure)))
;;* lmx 213 system/sepolicy/private/priv_app_all.te

(allow priv_app_all_virtualizationmanager priv_app_all_virtmgr_crosvm (process (siginh rlimitinh)))
;;* lme

(typetransition priv_app_all_virtualizationmanager crosvm_exec process priv_app_all_virtmgr_crosvm)
;;* lmx 213 system/sepolicy/private/priv_app_all.te

(allow priv_app_all_virtualizationmanager hal_secretkeeper (memfd_file (read write getattr map)))
;;* lme

;;* lmx 213 system/sepolicy/private/priv_app_all.te

(allow hal_secretkeeper priv_app_all_virtualizationmanager (memfd_file (read write getattr map)))
;;* lme

;;* lmx 213 system/sepolicy/private/priv_app_all.te

(allow priv_app_all_virtualizationmanager hal_vm_capabilities (memfd_file (read write getattr map)))
;;* lme

;;* lmx 213 system/sepolicy/private/priv_app_all.te

(allow hal_vm_capabilities priv_app_all_virtualizationmanager (memfd_file (read write getattr map)))
;;* lme

;;* lmx 213 system/sepolicy/private/priv_app_all.te

(allow priv_app_all_virtualizationmanager priv_app_all (unix_stream_socket (ioctl read write getattr getopt)))
(allow priv_app_all_virtmgr_crosvm priv_app_all (unix_stream_socket (ioctl read write getattr getopt)))
;;* lme

;;* lmx 213 system/sepolicy/private/priv_app_all.te

(allow priv_app_all_virtualizationmanager priv_app_all (fd (use)))
(allow priv_app_all_virtmgr_crosvm priv_app_all (fd (use)))
;;* lme

;;* lmx 213 system/sepolicy/private/priv_app_all.te

(allow priv_app_all priv_app_all_virtualizationmanager (fd (use)))
;;* lme

;;* lmx 213 system/sepolicy/private/priv_app_all.te

(allow priv_app_all_virtualizationmanager priv_app_all (fifo_file (ioctl read write getattr)))
(allow priv_app_all_virtmgr_crosvm priv_app_all (fifo_file (ioctl read write getattr)))
;;* lme

;;* lmx 213 system/sepolicy/private/priv_app_all.te

(allow priv_app_all priv_app_all_virtualizationmanager (vsock_socket (read write getattr getopt)))
;;* lme

;;* lmx 213 system/sepolicy/private/priv_app_all.te

(allow priv_app_all hypervisor_prop (file (read getattr map open)))
;;* lme

;;* lmx 213 system/sepolicy/private/priv_app_all.te

(allow priv_app_all virtualizationservice_data_file (file (read getattr)))
;;* lme

;;* lmx 213 system/sepolicy/private/priv_app_all.te

(allow priv_app_all_virtualizationmanager priv_app_all (dir (search)))
;;* lme

;;* lmx 213 system/sepolicy/private/priv_app_all.te

(allow priv_app_all_virtualizationmanager priv_app_all (file (read)))
;;* lme

;;* lmx 213 system/sepolicy/private/priv_app_all.te

(allow priv_app_all_virtualizationmanager priv_app_all (lnk_file (read)))
;;* lme

;;* lmx 213 system/sepolicy/private/priv_app_all.te

(allow priv_app_all priv_app_all_virtmgr_crosvm (process (sigkill)))
;;* lme

;;* lmx 213 system/sepolicy/private/priv_app_all.te

(allow priv_app_all_virtmgr_crosvm hal_graphics_allocator (memfd_file (read write getattr map)))
;;* lme

;;* lmx 213 system/sepolicy/private/priv_app_all.te

(allow hal_graphics_allocator priv_app_all_virtmgr_crosvm (memfd_file (read write getattr map)))
;;* lme

;;* lmx 220 system/sepolicy/private/priv_app_all.te

(allow priv_app_all aiseal_host_service (service_manager (find)))
;;* lme

;;* lmx 220 system/sepolicy/private/priv_app_all.te

(allow priv_app_all aisealhostservice (binder (call transfer)))
;;* lme

;;* lmx 220 system/sepolicy/private/priv_app_all.te

(allow aisealhostservice priv_app_all (binder (transfer)))
;;* lme

;;* lmx 220 system/sepolicy/private/priv_app_all.te

(allow priv_app_all aisealhostservice (fd (use)))
;;* lme

;;* lmx 220 system/sepolicy/private/priv_app_all.te

(allow priv_app_all aisealhostservice (vsock_socket (read write getattr getopt)))
;;* lme

;;* lmx 220 system/sepolicy/private/priv_app_all.te

(allow priv_app_all aiseal_prop (file (read getattr map open)))
;;* lme

;;* lmx 229 system/sepolicy/private/priv_app_all.te

(neverallow priv_app_all domain (netlink_kobject_uevent_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
;;* lme

;;* lmx 232 system/sepolicy/private/priv_app_all.te

(neverallow priv_app_all domain (netlink_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
;;* lme

;;* lmx 235 system/sepolicy/private/priv_app_all.te

(neverallow priv_app_all kmsg_device (chr_file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 239 system/sepolicy/private/priv_app_all.te

(neverallow priv_app_all debugfs_type (file (read)))
;;* lme

;;* lmx 244 system/sepolicy/private/priv_app_all.te

(neverallow priv_app_all service_manager_type (service_manager (add)))
;;* lme

;;* lmx 248 system/sepolicy/private/priv_app_all.te

(neverallow priv_app_all property_socket (sock_file (write)))
;;* lme

;;* lmx 249 system/sepolicy/private/priv_app_all.te

(neverallow priv_app_all init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 250 system/sepolicy/private/priv_app_all.te

(neverallow priv_app_all property_type (property_service (set)))
;;* lme

;;* lmx 260 system/sepolicy/private/priv_app_all.te

(neverallow priv_app_all mlstrustedsubject (process (fork)))
;;* lme

;;* lmx 268 system/sepolicy/private/priv_app_all.te

(neverallow priv_app_all file_type (file (link)))
;;* lme

;;* lmx 271 system/sepolicy/private/priv_app_all.te

(neverallow priv_app_all cgroup (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
;;* lme

;;* lmx 272 system/sepolicy/private/priv_app_all.te

(neverallow priv_app_all cgroup_v2 (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
;;* lme

;;* lmx 278 system/sepolicy/private/priv_app_all.te

(neverallow priv_app_all base_typeattr_956 (file (execute execute_no_trans)))
;;* lme

;;* lmx 281 system/sepolicy/private/priv_app_all.te

(neverallow priv_app_all base_typeattr_956 (lnk_file (read getattr open)))
;;* lme

;;* lmx 284 system/sepolicy/private/priv_app_all.te

(neverallow priv_app_all sysfs_net (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
;;* lme

;;* lmx 288 system/sepolicy/private/priv_app_all.te

(neverallowx priv_app_all domain (ioctl tcp_socket (0x6900 0x6902)))
(neverallowx priv_app_all domain (ioctl udp_socket (0x6900 0x6902)))
(neverallowx priv_app_all domain (ioctl rawip_socket (0x6900 0x6902)))
(neverallowx priv_app_all domain (ioctl icmp_socket (0x6900 0x6902)))
;;* lme

;;* lmx 288 system/sepolicy/private/priv_app_all.te

(neverallowx priv_app_all domain (ioctl tcp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx priv_app_all domain (ioctl udp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx priv_app_all domain (ioctl rawip_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx priv_app_all domain (ioctl icmp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
;;* lme

;;* lmx 288 system/sepolicy/private/priv_app_all.te

(neverallowx priv_app_all domain (ioctl tcp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx priv_app_all domain (ioctl udp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx priv_app_all domain (ioctl rawip_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx priv_app_all domain (ioctl icmp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
;;* lme

;;* lmx 289 system/sepolicy/private/priv_app_all.te

(neverallow priv_app_all base_typeattr_248 (netlink_route_socket (ioctl)))
(neverallow priv_app_all base_typeattr_248 (netlink_selinux_socket (ioctl)))
;;* lme

;;* lmx 302 system/sepolicy/private/priv_app_all.te

(neverallow priv_app_all base_typeattr_248 (socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow priv_app_all base_typeattr_248 (netlink_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow priv_app_all base_typeattr_248 (packet_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow priv_app_all base_typeattr_248 (key_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow priv_app_all base_typeattr_248 (netlink_tcpdiag_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write nlmsg)))
(neverallow priv_app_all base_typeattr_248 (netlink_nflog_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow priv_app_all base_typeattr_248 (netlink_xfrm_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write nlmsg)))
(neverallow priv_app_all base_typeattr_248 (netlink_audit_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write nlmsg_relay nlmsg_readpriv nlmsg_tty_audit nlmsg)))
(neverallow priv_app_all base_typeattr_248 (netlink_dnrt_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow priv_app_all base_typeattr_248 (netlink_kobject_uevent_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow priv_app_all base_typeattr_248 (appletalk_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow priv_app_all base_typeattr_248 (tun_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind attach_queue)))
(neverallow priv_app_all base_typeattr_248 (netlink_iscsi_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow priv_app_all base_typeattr_248 (netlink_fib_lookup_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow priv_app_all base_typeattr_248 (netlink_connector_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow priv_app_all base_typeattr_248 (netlink_netfilter_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow priv_app_all base_typeattr_248 (netlink_generic_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow priv_app_all base_typeattr_248 (netlink_scsitransport_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow priv_app_all base_typeattr_248 (netlink_rdma_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow priv_app_all base_typeattr_248 (netlink_crypto_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow priv_app_all base_typeattr_248 (sctp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind name_connect association)))
(neverallow priv_app_all base_typeattr_248 (ax25_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow priv_app_all base_typeattr_248 (ipx_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow priv_app_all base_typeattr_248 (netrom_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow priv_app_all base_typeattr_248 (atmpvc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow priv_app_all base_typeattr_248 (x25_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow priv_app_all base_typeattr_248 (rose_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow priv_app_all base_typeattr_248 (decnet_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow priv_app_all base_typeattr_248 (atmsvc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow priv_app_all base_typeattr_248 (rds_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow priv_app_all base_typeattr_248 (irda_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow priv_app_all base_typeattr_248 (pppox_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow priv_app_all base_typeattr_248 (llc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow priv_app_all base_typeattr_248 (can_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow priv_app_all base_typeattr_248 (tipc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow priv_app_all base_typeattr_248 (bluetooth_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow priv_app_all base_typeattr_248 (iucv_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow priv_app_all base_typeattr_248 (rxrpc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow priv_app_all base_typeattr_248 (isdn_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow priv_app_all base_typeattr_248 (phonet_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow priv_app_all base_typeattr_248 (ieee802154_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow priv_app_all base_typeattr_248 (caif_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow priv_app_all base_typeattr_248 (alg_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow priv_app_all base_typeattr_248 (nfc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow priv_app_all base_typeattr_248 (kcm_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow priv_app_all base_typeattr_248 (qipcrtr_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow priv_app_all base_typeattr_248 (smc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow priv_app_all base_typeattr_248 (xdp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
;;* lme

;;* lmx 305 system/sepolicy/private/priv_app_all.te

(neverallow priv_app_all domain (netlink_route_socket (bind nlmsg_readpriv)))
;;* lme

;;* lmx 306 system/sepolicy/private/priv_app_all.te

(neverallowx priv_app_all domain (nlmsg netlink_route_socket (0x12)))
;;* lme

;;* lmx 309 system/sepolicy/private/priv_app_all.te

(neverallow priv_app_all pcc_data_file (file (write create setattr append unlink rename open)))
;;* lme

;;* lmx 310 system/sepolicy/private/priv_app_all.te

(neverallow priv_app_all pcc_data_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 12 system/sepolicy/private/prng_seeder.te

(allow init prng_seeder_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 12 system/sepolicy/private/prng_seeder.te

(allow init prng_seeder (process (transition)))
;;* lme

;;* lmx 12 system/sepolicy/private/prng_seeder.te

(allow prng_seeder prng_seeder_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init prng_seeder (process (noatsecure)))
;;* lmx 12 system/sepolicy/private/prng_seeder.te

(allow init prng_seeder (process (siginh rlimitinh)))
;;* lme

(typetransition init prng_seeder_exec process prng_seeder)
;;* lmx 15 system/sepolicy/private/prng_seeder.te

(allow prng_seeder prng_seeder (unix_stream_socket (read write getattr accept)))
;;* lme

;;* lmx 16 system/sepolicy/private/prng_seeder.te

(allow prng_seeder hw_random_device (chr_file (read open)))
;;* lme

;;* lmx 17 system/sepolicy/private/prng_seeder.te

(allow prng_seeder kmsg_debug_device (chr_file (ioctl write getattr lock append map open)))
;;* lme

;;* lmx 5 system/sepolicy/private/profcollectd.te

(allow init profcollectd_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 5 system/sepolicy/private/profcollectd.te

(allow init profcollectd (process (transition)))
;;* lme

;;* lmx 5 system/sepolicy/private/profcollectd.te

(allow profcollectd profcollectd_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init profcollectd (process (noatsecure)))
;;* lmx 5 system/sepolicy/private/profcollectd.te

(allow init profcollectd (process (siginh rlimitinh)))
;;* lme

(typetransition init profcollectd_exec process profcollectd)
;;* lmx 5 system/sepolicy/private/profcollectd.te

(allow profcollectd profcollectd_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 5 system/sepolicy/private/profcollectd.te

(allow profcollectd profcollectd_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 5 system/sepolicy/private/profcollectd.te

(allow profcollectd self (perf_event (open cpu kernel read write)))
;;* lme

;;* lmx 5 system/sepolicy/private/profcollectd.te

(allow profcollectd domain (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 5 system/sepolicy/private/profcollectd.te

(allow profcollectd domain (file (ioctl read getattr lock map open watch watch_reads)))
(allow profcollectd domain (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 5 system/sepolicy/private/profcollectd.te

(allow profcollectd system_file_type (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 5 system/sepolicy/private/profcollectd.te

(allow profcollectd vendor_file_type (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 5 system/sepolicy/private/profcollectd.te

(allow profcollectd vendor_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 5 system/sepolicy/private/profcollectd.te

(allow profcollectd vendor_kernel_modules (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 5 system/sepolicy/private/profcollectd.te

(allow profcollectd system_bootstrap_lib_file (dir (search)))
;;* lme

;;* lmx 5 system/sepolicy/private/profcollectd.te

(allow profcollectd system_bootstrap_lib_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 5 system/sepolicy/private/profcollectd.te

(allow profcollectd debugfs_tracing (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 5 system/sepolicy/private/profcollectd.te

(allow profcollectd debugfs_tracing (file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 5 system/sepolicy/private/profcollectd.te

(allow profcollectd debugfs_tracing_debug (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 5 system/sepolicy/private/profcollectd.te

(allow profcollectd debugfs_tracing_debug (file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 5 system/sepolicy/private/profcollectd.te

(allow profcollectd proc_perf (file (write)))
;;* lme

;;* lmx 5 system/sepolicy/private/profcollectd.te

(allow profcollectd proc_meminfo (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 5 system/sepolicy/private/profcollectd.te

(allow profcollectd sysfs_devices_cs_etm (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 5 system/sepolicy/private/profcollectd.te

(allow profcollectd sysfs_devices_cs_etm (file (ioctl read getattr lock map open watch watch_reads)))
(allow profcollectd sysfs_devices_cs_etm (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 5 system/sepolicy/private/profcollectd.te

(allow profcollectd self (capability (sys_ptrace)))
(allow profcollectd self (cap_userns (sys_ptrace)))
;;* lme

;;* lmx 5 system/sepolicy/private/profcollectd.te

(allow profcollectd device_config_profcollect_native_boot_prop (file (read getattr map open)))
;;* lme

;;* lmx 5 system/sepolicy/private/profcollectd.te

(allow profcollectd property_socket (sock_file (write)))
;;* lme

;;* lmx 5 system/sepolicy/private/profcollectd.te

(allow profcollectd init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 5 system/sepolicy/private/profcollectd.te

(allow profcollectd device_config_profcollect_native_boot_prop (property_service (set)))
;;* lme

;;* lmx 5 system/sepolicy/private/profcollectd.te

(allow profcollectd device_config_profcollect_native_boot_prop (file (read getattr map open)))
;;* lme

;;* lmx 5 system/sepolicy/private/profcollectd.te

(allow profcollectd property_socket (sock_file (write)))
;;* lme

;;* lmx 5 system/sepolicy/private/profcollectd.te

(allow profcollectd init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 5 system/sepolicy/private/profcollectd.te

(allow profcollectd profcollectd_enabled_prop (property_service (set)))
;;* lme

;;* lmx 5 system/sepolicy/private/profcollectd.te

(allow profcollectd profcollectd_enabled_prop (file (read getattr map open)))
;;* lme

;;* lmx 5 system/sepolicy/private/profcollectd.te

(allow profcollectd property_socket (sock_file (write)))
;;* lme

;;* lmx 5 system/sepolicy/private/profcollectd.te

(allow profcollectd init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 5 system/sepolicy/private/profcollectd.te

(allow profcollectd profcollectd_node_id_prop (property_service (set)))
;;* lme

;;* lmx 5 system/sepolicy/private/profcollectd.te

(allow profcollectd profcollectd_node_id_prop (file (read getattr map open)))
;;* lme

;;* lmx 5 system/sepolicy/private/profcollectd.te

(allow profcollectd property_socket (sock_file (write)))
;;* lme

;;* lmx 5 system/sepolicy/private/profcollectd.te

(allow profcollectd init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 5 system/sepolicy/private/profcollectd.te

(allow profcollectd profcollectd_etr_prop (property_service (set)))
;;* lme

;;* lmx 5 system/sepolicy/private/profcollectd.te

(allow profcollectd profcollectd_etr_prop (file (read getattr map open)))
;;* lme

;;* lmx 5 system/sepolicy/private/profcollectd.te

(allow profcollectd servicemanager (binder (call transfer)))
;;* lme

;;* lmx 5 system/sepolicy/private/profcollectd.te

(allow servicemanager profcollectd (binder (call transfer)))
;;* lme

;;* lmx 5 system/sepolicy/private/profcollectd.te

(allow profcollectd system_server (binder (call transfer)))
;;* lme

;;* lmx 5 system/sepolicy/private/profcollectd.te

(allow system_server profcollectd (binder (transfer)))
;;* lme

;;* lmx 5 system/sepolicy/private/profcollectd.te

(allow profcollectd system_server (fd (use)))
;;* lme

;;* lmx 5 system/sepolicy/private/profcollectd.te

(allow profcollectd profcollectd_service (service_manager (add find)))
;;* lme

;;* lmx 5 system/sepolicy/private/profcollectd.te

(neverallow base_typeattr_957 profcollectd_service (service_manager (add)))
;;* lme

;;* lmx 5 system/sepolicy/private/profcollectd.te

(allow profcollectd su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 5 system/sepolicy/private/profcollectd.te

(allow profcollectd sysfs_wake_lock (file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 5 system/sepolicy/private/profcollectd.te

(allow profcollectd self (capability2 (block_suspend)))
(allow profcollectd self (cap2_userns (block_suspend)))
;;* lme

;;* lmx 5 system/sepolicy/private/profcollectd.te

(allow profcollectd system_suspend_server (binder (call transfer)))
;;* lme

;;* lmx 5 system/sepolicy/private/profcollectd.te

(allow system_suspend_server profcollectd (binder (transfer)))
;;* lme

;;* lmx 5 system/sepolicy/private/profcollectd.te

(allow profcollectd system_suspend_server (fd (use)))
;;* lme

;;* lmx 5 system/sepolicy/private/profcollectd.te

(allow profcollectd system_suspend_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 5 system/sepolicy/private/profcollectd.te

(allow profcollectd hwservicemanager (binder (call transfer)))
;;* lme

;;* lmx 5 system/sepolicy/private/profcollectd.te

(allow hwservicemanager profcollectd (binder (call transfer)))
;;* lme

;;* lmx 5 system/sepolicy/private/profcollectd.te

(allow profcollectd hwservicemanager_prop (file (read getattr map open)))
;;* lme

;;* lmx 5 system/sepolicy/private/profcollectd.te

(allow profcollectd hidl_manager_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 5 system/sepolicy/private/profcollectd.te

(allow profcollectd hal_system_suspend_service (service_manager (find)))
;;* lme

;;* lmx 5 system/sepolicy/private/profcollectd.te

(allow profcollectd servicemanager (binder (call transfer)))
;;* lme

;;* lmx 5 system/sepolicy/private/profcollectd.te

(allow servicemanager profcollectd (binder (call transfer)))
;;* lme

;;* lmx 5 system/sepolicy/private/profcollectd.te

(allow profcollectd property_socket (sock_file (write)))
;;* lme

;;* lmx 5 system/sepolicy/private/profcollectd.te

(allow profcollectd init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 5 system/sepolicy/private/profcollectd.te

(allow profcollectd lower_kptr_restrict_prop (property_service (set)))
;;* lme

;;* lmx 5 system/sepolicy/private/profcollectd.te

(allow profcollectd lower_kptr_restrict_prop (file (read getattr map open)))
;;* lme

;;* lmx 5 system/sepolicy/private/profcollectd.te

(allow profcollectd proc_kallsyms (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 5 system/sepolicy/private/profcollectd.te

(allow profcollectd proc_modules (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 5 system/sepolicy/private/profcollectd.te

(allow profcollectd sysfs_kernel_notes (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 5 system/sepolicy/private/profcollectd.te

(allow profcollectd device_config_service (service_manager (find)))
;;* lme

;;* lmx 5 system/sepolicy/private/profcollectd.te

(allow system_server profcollectd (fifo_file (write)))
;;* lme

;;* lmx 11 system/sepolicy/private/profman.te

(allow profman system_file (file (read getattr lock map)))
(allow profman vendor_app_file (file (read getattr lock map)))
(allow profman apk_data_file (file (read getattr lock map)))
(allow profman apk_tmp_file (file (read getattr lock map)))
;;* lme

;;* lmx 14 system/sepolicy/private/profman.te

(allow profman artd (fd (use)))
(allow profman installd (fd (use)))
;;* lme

;;* lmx 19 system/sepolicy/private/profman.te

(allow profman artd_tmpfs (file (read getattr lock map)))
;;* lme

;;* lmx 20 system/sepolicy/private/profman.te

(allow profman artd (memfd_file (read getattr lock map)))
;;* lme

;;* lmx 22 system/sepolicy/private/profman.te

(allow profman user_profile_data_file (file (read write getattr lock map)))
;;* lme

;;* lmx 25 system/sepolicy/private/profman.te

(allow profman asec_apk_file (file (read map)))
;;* lme

;;* lmx 26 system/sepolicy/private/profman.te

(allow profman apk_data_file (file (read getattr map)))
;;* lme

;;* lmx 27 system/sepolicy/private/profman.te

(allow profman apk_data_file (dir (read getattr search)))
;;* lme

;;* lmx 28 system/sepolicy/private/profman.te

(allow profman apk_tmp_file (dir (read getattr search)))
;;* lme

;;* lmx 30 system/sepolicy/private/profman.te

(allow profman oemfs (file (read map)))
;;* lme

;;* lmx 32 system/sepolicy/private/profman.te

(allow profman tmpfs (file (read map)))
;;* lme

;;* lmx 33 system/sepolicy/private/profman.te

(allow profman profman_dump_data_file (file (write map)))
;;* lme

;;* lmx 38 system/sepolicy/private/profman.te

(allow profman app_data_file (file (read write getattr lock map)))
(allow profman privapp_data_file (file (read write getattr lock map)))
;;* lme

;;* lmx 39 system/sepolicy/private/profman.te

(allow profman app_data_file (dir (read getattr search)))
(allow profman privapp_data_file (dir (read getattr search)))
;;* lme

;;* lmx 42 system/sepolicy/private/profman.te

(allow profman device_config_runtime_native_prop (file (read getattr map open)))
;;* lme

;;* lmx 43 system/sepolicy/private/profman.te

(allow profman device_config_runtime_native_boot_prop (file (read getattr map open)))
;;* lme

;;* lmx 49 system/sepolicy/private/profman.te

(neverallow profman app_data_file_type (file (open)))
(neverallow profman app_data_file_type (lnk_file (open)))
(neverallow profman app_data_file_type (sock_file (open)))
(neverallow profman app_data_file_type (fifo_file (open)))
;;* lme

;;* lmx 2 system/sepolicy/private/property.te

(neverallow base_typeattr_241 adb_timeout_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 3 system/sepolicy/private/property.te

(neverallow base_typeattr_241 adbd_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 4 system/sepolicy/private/property.te

(neverallow base_typeattr_241 adbd_tradeinmode_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 5 system/sepolicy/private/property.te

(neverallow base_typeattr_241 aiseal_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 6 system/sepolicy/private/property.te

(neverallow base_typeattr_241 apexd_payload_metadata_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 7 system/sepolicy/private/property.te

(neverallow base_typeattr_241 apexd_private_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 8 system/sepolicy/private/property.te

(neverallow base_typeattr_241 appsearch_vm_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 9 system/sepolicy/private/property.te

(neverallow base_typeattr_241 bluetooth_lea_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 10 system/sepolicy/private/property.te

(neverallow base_typeattr_241 casefolding_status_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 11 system/sepolicy/private/property.te

(neverallow base_typeattr_241 casefolding_override_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 12 system/sepolicy/private/property.te

(neverallow base_typeattr_241 ctl_snapuserd_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 13 system/sepolicy/private/property.te

(neverallow base_typeattr_241 ctl_prefetch_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 14 system/sepolicy/private/property.te

(neverallow base_typeattr_241 ctl_uprobestats_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 15 system/sepolicy/private/property.te

(neverallow base_typeattr_241 crashrecovery_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 16 system/sepolicy/private/property.te

(neverallow base_typeattr_241 debug_tracing_desktop_mode_visible_tasks_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 17 system/sepolicy/private/property.te

(neverallow base_typeattr_241 device_config_core_experiments_team_internal_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 18 system/sepolicy/private/property.te

(neverallow base_typeattr_241 device_config_lmkd_native_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 19 system/sepolicy/private/property.te

(neverallow base_typeattr_241 device_config_memory_management_native_boot_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 20 system/sepolicy/private/property.te

(neverallow base_typeattr_241 device_config_mglru_native_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 21 system/sepolicy/private/property.te

(neverallow base_typeattr_241 device_config_mmd_native_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 22 system/sepolicy/private/property.te

(neverallow base_typeattr_241 device_config_profcollect_native_boot_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 23 system/sepolicy/private/property.te

(neverallow base_typeattr_241 device_config_remote_key_provisioning_native_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 24 system/sepolicy/private/property.te

(neverallow base_typeattr_241 device_config_statsd_native_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 25 system/sepolicy/private/property.te

(neverallow base_typeattr_241 device_config_statsd_native_boot_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 26 system/sepolicy/private/property.te

(neverallow base_typeattr_241 device_config_storage_native_boot_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 27 system/sepolicy/private/property.te

(neverallow base_typeattr_241 device_config_sys_traced_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 28 system/sepolicy/private/property.te

(neverallow base_typeattr_241 device_config_window_manager_native_boot_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 29 system/sepolicy/private/property.te

(neverallow base_typeattr_241 device_config_configuration_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 30 system/sepolicy/private/property.te

(neverallow base_typeattr_241 device_config_connectivity_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 31 system/sepolicy/private/property.te

(neverallow base_typeattr_241 device_config_swcodec_native_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 32 system/sepolicy/private/property.te

(neverallow base_typeattr_241 device_config_tethering_u_or_later_native_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 33 system/sepolicy/private/property.te

(neverallow base_typeattr_241 dmesgd_start_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 34 system/sepolicy/private/property.te

(neverallow base_typeattr_241 fastbootd_protocol_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 35 system/sepolicy/private/property.te

(neverallow base_typeattr_241 gsid_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 36 system/sepolicy/private/property.te

(neverallow base_typeattr_241 hsum_boot_strategy_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 37 system/sepolicy/private/property.te

(neverallow base_typeattr_241 init_mnt_ns_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 38 system/sepolicy/private/property.te

(neverallow base_typeattr_241 init_perf_lsm_hooks_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 39 system/sepolicy/private/property.te

(neverallow base_typeattr_241 init_service_status_private_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 40 system/sepolicy/private/property.te

(neverallow base_typeattr_241 init_storage_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 41 system/sepolicy/private/property.te

(neverallow base_typeattr_241 init_svc_debug_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 42 system/sepolicy/private/property.te

(neverallow base_typeattr_241 kcmdline_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 43 system/sepolicy/private/property.te

(neverallow base_typeattr_241 keystore_diagnostics_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 44 system/sepolicy/private/property.te

(neverallow base_typeattr_241 keystore_listen_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 45 system/sepolicy/private/property.te

(neverallow base_typeattr_241 last_boot_reason_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 46 system/sepolicy/private/property.te

(neverallow base_typeattr_241 localization_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 47 system/sepolicy/private/property.te

(neverallow base_typeattr_241 logd_auditrate_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 48 system/sepolicy/private/property.te

(neverallow base_typeattr_241 lower_kptr_restrict_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 49 system/sepolicy/private/property.te

(neverallow base_typeattr_241 mmd_status_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 50 system/sepolicy/private/property.te

(neverallow base_typeattr_241 net_464xlat_fromvendor_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 51 system/sepolicy/private/property.te

(neverallow base_typeattr_241 net_connectivity_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 52 system/sepolicy/private/property.te

(neverallow base_typeattr_241 netd_stable_secret_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 53 system/sepolicy/private/property.te

(neverallow base_typeattr_241 next_boot_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 54 system/sepolicy/private/property.te

(neverallow base_typeattr_241 odsign_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 55 system/sepolicy/private/property.te

(neverallow base_typeattr_241 misctrl_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 56 system/sepolicy/private/property.te

(neverallow base_typeattr_241 perf_drop_caches_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 57 system/sepolicy/private/property.te

(neverallow base_typeattr_241 pm_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 58 system/sepolicy/private/property.te

(neverallow base_typeattr_241 prefetch_service_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 59 system/sepolicy/private/property.te

(neverallow base_typeattr_241 profcollectd_enabled_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 60 system/sepolicy/private/property.te

(neverallow base_typeattr_241 profcollectd_node_id_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 61 system/sepolicy/private/property.te

(neverallow base_typeattr_241 radio_cdma_ecm_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 62 system/sepolicy/private/property.te

(neverallow base_typeattr_241 remote_prov_cert_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 63 system/sepolicy/private/property.te

(neverallow base_typeattr_241 rollback_test_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 64 system/sepolicy/private/property.te

(neverallow base_typeattr_241 setupwizard_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 65 system/sepolicy/private/property.te

(neverallow base_typeattr_241 snapshotctl_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 66 system/sepolicy/private/property.te

(neverallow base_typeattr_241 snapuserd_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 67 system/sepolicy/private/property.te

(neverallow base_typeattr_241 system_adbd_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 68 system/sepolicy/private/property.te

(neverallow base_typeattr_241 system_audio_config_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 69 system/sepolicy/private/property.te

(neverallow base_typeattr_241 timezone_metadata_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 70 system/sepolicy/private/property.te

(neverallow base_typeattr_241 traced_config_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 71 system/sepolicy/private/property.te

(neverallow base_typeattr_241 traced_perf_enabled_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 72 system/sepolicy/private/property.te

(neverallow base_typeattr_241 traced_relay_relay_port_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 73 system/sepolicy/private/property.te

(neverallow base_typeattr_241 uprobestats_start_with_config_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 74 system/sepolicy/private/property.te

(neverallow base_typeattr_241 tuner_server_ctl_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 75 system/sepolicy/private/property.te

(neverallow base_typeattr_241 userspace_reboot_log_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 76 system/sepolicy/private/property.te

(neverallow base_typeattr_241 userspace_reboot_test_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 77 system/sepolicy/private/property.te

(neverallow base_typeattr_241 verity_status_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 78 system/sepolicy/private/property.te

(neverallow base_typeattr_241 zygote_wrap_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 79 system/sepolicy/private/property.te

(neverallow base_typeattr_241 ctl_mediatranscoding_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 80 system/sepolicy/private/property.te

(neverallow base_typeattr_241 ctl_odsign_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 81 system/sepolicy/private/property.te

(neverallow base_typeattr_241 virtualizationservice_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 82 system/sepolicy/private/property.te

(neverallow base_typeattr_241 ctl_apex_load_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 83 system/sepolicy/private/property.te

(neverallow base_typeattr_241 sensors_config_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 84 system/sepolicy/private/property.te

(neverallow base_typeattr_241 hypervisor_pvmfw_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 85 system/sepolicy/private/property.te

(neverallow base_typeattr_241 hypervisor_virtualizationmanager_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 86 system/sepolicy/private/property.te

(neverallow base_typeattr_241 game_manager_config_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 87 system/sepolicy/private/property.te

(neverallow base_typeattr_241 hidl_memory_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 88 system/sepolicy/private/property.te

(neverallow base_typeattr_241 suspend_debug_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 89 system/sepolicy/private/property.te

(neverallow base_typeattr_241 system_service_enable_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 90 system/sepolicy/private/property.te

(neverallow base_typeattr_241 ctl_artd_pre_reboot_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 91 system/sepolicy/private/property.te

(neverallow base_typeattr_241 trusty_security_vm_sys_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 92 system/sepolicy/private/property.te

(neverallow base_typeattr_241 trusty_widevine_vm_sys_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 93 system/sepolicy/private/property.te

(neverallow base_typeattr_241 hint_manager_config_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 94 system/sepolicy/private/property.te

(neverallow base_typeattr_241 avf_vm_traced_relay_enabled_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 95 system/sepolicy/private/property.te

(neverallow base_typeattr_241 zygote_zygote_next_server_status_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 96 system/sepolicy/private/property.te

(neverallow base_typeattr_241 zygote_zygote_next_boot_config_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 97 system/sepolicy/private/property.te

(neverallow base_typeattr_241 pcc_audit_mode_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 100 system/sepolicy/private/property.te

(neverallow base_typeattr_241 binder_cache_adservices_server_prop (property_service (set)))
;;* lme

;;* lmx 101 system/sepolicy/private/property.te

(neverallow base_typeattr_241 bionic_linker_16kb_app_compat_prop (property_service (set)))
;;* lme

;;* lmx 102 system/sepolicy/private/property.te

(neverallow base_typeattr_241 device_config_virtualization_framework_native_prop (property_service (set)))
;;* lme

;;* lmx 103 system/sepolicy/private/property.te

(neverallow base_typeattr_241 fstype_prop (property_service (set)))
;;* lme

;;* lmx 104 system/sepolicy/private/property.te

(neverallow base_typeattr_241 log_file_logger_prop (property_service (set)))
;;* lme

;;* lmx 105 system/sepolicy/private/property.te

(neverallow base_typeattr_241 mmd_shared_status_prop (property_service (set)))
;;* lme

;;* lmx 106 system/sepolicy/private/property.te

(neverallow base_typeattr_241 page_size_prop (property_service (set)))
;;* lme

;;* lmx 107 system/sepolicy/private/property.te

(neverallow base_typeattr_241 pm_16kb_app_compat_prop (property_service (set)))
;;* lme

;;* lmx 108 system/sepolicy/private/property.te

(neverallow base_typeattr_241 service_sf_present_timestamp_prop (property_service (set)))
;;* lme

;;* lmx 109 system/sepolicy/private/property.te

(neverallow base_typeattr_241 statsd_atoms_list_version_prop (property_service (set)))
;;* lme

;;* lmx 110 system/sepolicy/private/property.te

(neverallow base_typeattr_241 trusty_coverage_prop (property_service (set)))
;;* lme

;;* lmx 111 system/sepolicy/private/property.te

(neverallow base_typeattr_241 pcc_audit_mode_client_prop (property_service (set)))
;;* lme

;;* lmx 112 system/sepolicy/private/property.te

(neverallow base_typeattr_241 dumpstate_last_id_prop (property_service (set)))
;;* lme

;;* lmx 115 system/sepolicy/private/property.te

(neverallow base_typeattr_241 thermal_profile_prop (property_service (set)))
;;* lme

;;* lmx 118 system/sepolicy/private/property.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 118 system/sepolicy/private/property.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 118 system/sepolicy/private/property.te

(allow vendor_init arm64_memtag_bootctl_prop (property_service (set)))
;;* lme

;;* lmx 118 system/sepolicy/private/property.te

(allow vendor_init arm64_memtag_bootctl_prop (file (read getattr map open)))
;;* lme

;;* lmx 118 system/sepolicy/private/property.te

(neverallow base_typeattr_242 arm64_memtag_bootctl_prop (property_service (set)))
;;* lme

;;* lmx 119 system/sepolicy/private/property.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 119 system/sepolicy/private/property.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 119 system/sepolicy/private/property.te

(allow vendor_init avf_virtualizationservice_prop (property_service (set)))
;;* lme

;;* lmx 119 system/sepolicy/private/property.te

(allow vendor_init avf_virtualizationservice_prop (file (read getattr map open)))
;;* lme

;;* lmx 119 system/sepolicy/private/property.te

(neverallow base_typeattr_242 avf_virtualizationservice_prop (property_service (set)))
;;* lme

;;* lmx 120 system/sepolicy/private/property.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 120 system/sepolicy/private/property.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 120 system/sepolicy/private/property.te

(allow vendor_init context_hub_chipset_prop (property_service (set)))
;;* lme

;;* lmx 120 system/sepolicy/private/property.te

(allow vendor_init context_hub_chipset_prop (file (read getattr map open)))
;;* lme

;;* lmx 120 system/sepolicy/private/property.te

(neverallow base_typeattr_242 context_hub_chipset_prop (property_service (set)))
;;* lme

;;* lmx 121 system/sepolicy/private/property.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 121 system/sepolicy/private/property.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 121 system/sepolicy/private/property.te

(allow vendor_init high_barometer_quality_prop (property_service (set)))
;;* lme

;;* lmx 121 system/sepolicy/private/property.te

(allow vendor_init high_barometer_quality_prop (file (read getattr map open)))
;;* lme

;;* lmx 121 system/sepolicy/private/property.te

(neverallow base_typeattr_242 high_barometer_quality_prop (property_service (set)))
;;* lme

;;* lmx 122 system/sepolicy/private/property.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 122 system/sepolicy/private/property.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 122 system/sepolicy/private/property.te

(allow vendor_init mmd_prop (property_service (set)))
;;* lme

;;* lmx 122 system/sepolicy/private/property.te

(allow vendor_init mmd_prop (file (read getattr map open)))
;;* lme

;;* lmx 122 system/sepolicy/private/property.te

(neverallow base_typeattr_242 mmd_prop (property_service (set)))
;;* lme

;;* lmx 123 system/sepolicy/private/property.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 123 system/sepolicy/private/property.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 123 system/sepolicy/private/property.te

(allow vendor_init mmd_shared_prop (property_service (set)))
;;* lme

;;* lmx 123 system/sepolicy/private/property.te

(allow vendor_init mmd_shared_prop (file (read getattr map open)))
;;* lme

;;* lmx 123 system/sepolicy/private/property.te

(neverallow base_typeattr_242 mmd_shared_prop (property_service (set)))
;;* lme

;;* lmx 124 system/sepolicy/private/property.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 124 system/sepolicy/private/property.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 124 system/sepolicy/private/property.te

(allow vendor_init prefetch_boot_prop (property_service (set)))
;;* lme

;;* lmx 124 system/sepolicy/private/property.te

(allow vendor_init prefetch_boot_prop (file (read getattr map open)))
;;* lme

;;* lmx 124 system/sepolicy/private/property.te

(neverallow base_typeattr_242 prefetch_boot_prop (property_service (set)))
;;* lme

;;* lmx 125 system/sepolicy/private/property.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 125 system/sepolicy/private/property.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 125 system/sepolicy/private/property.te

(allow vendor_init sensors_hal_prop (property_service (set)))
;;* lme

;;* lmx 125 system/sepolicy/private/property.te

(allow vendor_init sensors_hal_prop (file (read getattr map open)))
;;* lme

;;* lmx 125 system/sepolicy/private/property.te

(neverallow base_typeattr_242 sensors_hal_prop (property_service (set)))
;;* lme

;;* lmx 126 system/sepolicy/private/property.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 126 system/sepolicy/private/property.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 126 system/sepolicy/private/property.te

(allow vendor_init strongbox_prop (property_service (set)))
;;* lme

;;* lmx 126 system/sepolicy/private/property.te

(allow vendor_init strongbox_prop (file (read getattr map open)))
;;* lme

;;* lmx 126 system/sepolicy/private/property.te

(neverallow base_typeattr_242 strongbox_prop (property_service (set)))
;;* lme

;;* lmx 127 system/sepolicy/private/property.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 127 system/sepolicy/private/property.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 127 system/sepolicy/private/property.te

(allow vendor_init usb_disable_when_locked_prop (property_service (set)))
;;* lme

;;* lmx 127 system/sepolicy/private/property.te

(allow vendor_init usb_disable_when_locked_prop (file (read getattr map open)))
;;* lme

;;* lmx 127 system/sepolicy/private/property.te

(neverallow base_typeattr_242 usb_disable_when_locked_prop (property_service (set)))
;;* lme

;;* lmx 128 system/sepolicy/private/property.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 128 system/sepolicy/private/property.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 128 system/sepolicy/private/property.te

(allow vendor_init userdata_alias_remove_prop (property_service (set)))
;;* lme

;;* lmx 128 system/sepolicy/private/property.te

(allow vendor_init userdata_alias_remove_prop (file (read getattr map open)))
;;* lme

;;* lmx 128 system/sepolicy/private/property.te

(neverallow base_typeattr_242 userdata_alias_remove_prop (property_service (set)))
;;* lme

;;* lmx 134 system/sepolicy/private/property.te

(allow property_type tmpfs (filesystem (associate)))
;;* lme

;;* lmx 172 system/sepolicy/private/property.te

(neverallow domain base_typeattr_958 (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 172 system/sepolicy/private/property.te

(neverallow base_typeattr_241 base_typeattr_959 (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 172 system/sepolicy/private/property.te

(neverallow base_typeattr_241 base_typeattr_960 (property_service (set)))
;;* lme

;;* lmx 172 system/sepolicy/private/property.te

(neverallow base_typeattr_243 base_typeattr_961 (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 172 system/sepolicy/private/property.te

(neverallow base_typeattr_383 base_typeattr_962 (property_service (set)))
;;* lme

;;* lmx 215 system/sepolicy/private/property.te

(neverallow domain property_type (file (ioctl lock)))
;;* lme

;;* lmx 241 system/sepolicy/private/property.te

(neverallow base_typeattr_248 base_typeattr_963 (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 249 system/sepolicy/private/property.te

(neverallow base_typeattr_368 ctl_sigstop_prop (property_service (set)))
;;* lme

(dontaudit domain ctl_bootanim_prop (property_service (set)))
(dontaudit domain ctl_bugreport_prop (property_service (set)))
(dontaudit domain ctl_console_prop (property_service (set)))
(dontaudit domain ctl_dumpstate_prop (property_service (set)))
(dontaudit domain ctl_fuse_prop (property_service (set)))
(dontaudit domain ctl_mdnsd_prop (property_service (set)))
(dontaudit domain ctl_rildaemon_prop (property_service (set)))
(dontaudit domain ctl_default_prop (property_service (set)))
;;* lmx 268 system/sepolicy/private/property.te

(neverallow base_typeattr_964 init_storage_prop (property_service (set)))
;;* lme

;;* lmx 273 system/sepolicy/private/property.te

(neverallow base_typeattr_247 init_svc_debug_prop (property_service (set)))
;;* lme

;;* lmx 280 system/sepolicy/private/property.te

(neverallow base_typeattr_965 init_svc_debug_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 291 system/sepolicy/private/property.te

(neverallow base_typeattr_966 misctrl_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 297 system/sepolicy/private/property.te

(neverallow base_typeattr_967 misctrl_prop (property_service (set)))
;;* lme

;;* lmx 299 system/sepolicy/private/property.te

(neverallow base_typeattr_968 base_typeattr_969 (property_service (set)))
;;* lme

;;* lmx 299 system/sepolicy/private/property.te

(neverallow base_typeattr_970 nfc_prop (property_service (set)))
;;* lme

;;* lmx 299 system/sepolicy/private/property.te

(neverallow base_typeattr_971 radio_control_prop (property_service (set)))
;;* lme

;;* lmx 299 system/sepolicy/private/property.te

(neverallow base_typeattr_972 radio_prop (property_service (set)))
;;* lme

;;* lmx 299 system/sepolicy/private/property.te

(neverallow base_typeattr_973 bluetooth_prop (property_service (set)))
;;* lme

;;* lmx 299 system/sepolicy/private/property.te

(neverallow base_typeattr_974 exported_bluetooth_prop (property_service (set)))
;;* lme

;;* lmx 299 system/sepolicy/private/property.te

(neverallow base_typeattr_975 exported_camera_prop (property_service (set)))
;;* lme

;;* lmx 299 system/sepolicy/private/property.te

(neverallow base_typeattr_976 wifi_prop (property_service (set)))
;;* lme

;;* lmx 299 system/sepolicy/private/property.te

(neverallow base_typeattr_977 wifi_hal_prop (property_service (set)))
;;* lme

;;* lmx 299 system/sepolicy/private/property.te

(neverallow base_typeattr_968 base_typeattr_978 (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 299 system/sepolicy/private/property.te

(neverallow base_typeattr_979 dalvik_dynamic_config_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 299 system/sepolicy/private/property.te

(neverallow base_typeattr_970 nfc_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 299 system/sepolicy/private/property.te

(neverallow base_typeattr_972 radio_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 299 system/sepolicy/private/property.te

(neverallow base_typeattr_980 bluetooth_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 299 system/sepolicy/private/property.te

(neverallow base_typeattr_976 wifi_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 299 system/sepolicy/private/property.te

(neverallow base_typeattr_444 suspend_prop (property_service (set)))
;;* lme

;;* lmx 299 system/sepolicy/private/property.te

(neverallow base_typeattr_247 suspend_debug_prop (property_service (set)))
;;* lme

;;* lmx 299 system/sepolicy/private/property.te

(neverallow base_typeattr_368 high_barometer_quality_prop (property_service (set)))
;;* lme

;;* lmx 299 system/sepolicy/private/property.te

(neverallow base_typeattr_981 suspend_debug_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

(dontaudit system_suspend suspend_debug_prop (file (ioctl read getattr lock map open watch watch_reads)))
;;* lmx 496 system/sepolicy/private/property.te

(neverallow base_typeattr_982 base_typeattr_983 (property_service (set)))
;;* lme

;;* lmx 516 system/sepolicy/private/property.te

(neverallow base_typeattr_444 ffs_config_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow base_typeattr_444 ffs_control_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 524 system/sepolicy/private/property.te

(neverallow base_typeattr_486 userspace_reboot_log_prop (property_service (set)))
;;* lme

;;* lmx 533 system/sepolicy/private/property.te

(neverallow base_typeattr_486 system_adbd_prop (property_service (set)))
;;* lme

;;* lmx 546 system/sepolicy/private/property.te

(neverallow base_typeattr_984 adbd_config_prop (property_service (set)))
;;* lme

;;* lmx 556 system/sepolicy/private/property.te

(neverallow base_typeattr_985 adbd_prop (property_service (set)))
;;* lme

;;* lmx 564 system/sepolicy/private/property.te

(neverallow base_typeattr_247 apexd_payload_metadata_prop (property_service (set)))
;;* lme

;;* lmx 573 system/sepolicy/private/property.te

(neverallow base_typeattr_264 apexd_private_prop (property_service (set)))
;;* lme

;;* lmx 582 system/sepolicy/private/property.te

(neverallow base_typeattr_945 userspace_reboot_test_prop (property_service (set)))
;;* lme

;;* lmx 591 system/sepolicy/private/property.te

(neverallow base_typeattr_443 surfaceflinger_color_prop (property_service (set)))
;;* lme

;;* lmx 598 system/sepolicy/private/property.te

(neverallow base_typeattr_247 libc_debug_prop (property_service (set)))
;;* lme

;;* lmx 613 system/sepolicy/private/property.te

(neverallow base_typeattr_986 arm64_memtag_prop (property_service (set)))
(neverallow base_typeattr_986 gwp_asan_prop (property_service (set)))
;;* lme

;;* lmx 624 system/sepolicy/private/property.te

(neverallow base_typeattr_987 kcmdline_prop (property_service (set)))
;;* lme

;;* lmx 631 system/sepolicy/private/property.te

(neverallow base_typeattr_443 zram_control_prop (property_service (set)))
;;* lme

;;* lmx 638 system/sepolicy/private/property.te

(neverallow base_typeattr_443 dalvik_runtime_prop (property_service (set)))
;;* lme

;;* lmx 647 system/sepolicy/private/property.te

(neverallow base_typeattr_444 usb_config_prop (property_service (set)))
(neverallow base_typeattr_444 usb_control_prop (property_service (set)))
;;* lme

;;* lmx 656 system/sepolicy/private/property.te

(neverallow base_typeattr_486 provisioned_prop (property_service (set)))
(neverallow base_typeattr_486 retaildemo_prop (property_service (set)))
;;* lme

;;* lmx 665 system/sepolicy/private/property.te

(neverallow base_typeattr_444 provisioned_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow base_typeattr_444 retaildemo_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 673 system/sepolicy/private/property.te

(neverallow base_typeattr_247 init_service_status_prop (property_service (set)))
(neverallow base_typeattr_247 init_service_status_private_prop (property_service (set)))
;;* lme

;;* lmx 682 system/sepolicy/private/property.te

(neverallow base_typeattr_988 telephony_status_prop (property_service (set)))
;;* lme

;;* lmx 690 system/sepolicy/private/property.te

(neverallow base_typeattr_989 surfaceflinger_display_prop (property_service (set)))
;;* lme

;;* lmx 697 system/sepolicy/private/property.te

(neverallow base_typeattr_968 packagemanager_config_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 703 system/sepolicy/private/property.te

(neverallow base_typeattr_444 keyguard_config_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 710 system/sepolicy/private/property.te

(neverallow base_typeattr_247 localization_prop (property_service (set)))
;;* lme

;;* lmx 718 system/sepolicy/private/property.te

(neverallow base_typeattr_990 oem_unlock_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 724 system/sepolicy/private/property.te

(neverallow base_typeattr_444 storagemanager_config_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 732 system/sepolicy/private/property.te

(neverallow base_typeattr_991 sendbug_config_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 740 system/sepolicy/private/property.te

(neverallow base_typeattr_991 camera_calibration_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 748 system/sepolicy/private/property.te

(neverallow base_typeattr_992 hal_dumpstate_config_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 759 system/sepolicy/private/property.te

(neverallow base_typeattr_993 lower_kptr_restrict_prop (property_service (set)))
;;* lme

;;* lmx 764 system/sepolicy/private/property.te

(neverallow base_typeattr_247 zygote_wrap_prop (property_service (set)))
;;* lme

;;* lmx 769 system/sepolicy/private/property.te

(neverallow base_typeattr_247 verity_status_prop (property_service (set)))
;;* lme

;;* lmx 775 system/sepolicy/private/property.te

(neverallow base_typeattr_368 setupwizard_mode_prop (property_service (set)))
;;* lme

;;* lmx 780 system/sepolicy/private/property.te

(neverallow base_typeattr_247 setupwizard_prop (property_service (set)))
;;* lme

;;* lmx 789 system/sepolicy/private/property.te

(neverallow base_typeattr_434 build_config_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 795 system/sepolicy/private/property.te

(neverallow base_typeattr_945 sqlite_log_prop (property_service (set)))
;;* lme

;;* lmx 801 system/sepolicy/private/property.te

(neverallow base_typeattr_422 sqlite_log_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 806 system/sepolicy/private/property.te

(neverallow base_typeattr_247 default_prop (property_service (set)))
;;* lme

;;* lmx 810 system/sepolicy/private/property.te

(neverallow domain system_and_vendor_property_type (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow domain system_and_vendor_property_type (property_service (set)))
;;* lme

;;* lmx 820 system/sepolicy/private/property.te

(neverallow base_typeattr_994 remote_prov_prop (property_service (set)))
;;* lme

;;* lmx 825 system/sepolicy/private/property.te

(neverallow base_typeattr_247 remote_prov_cert_prop (property_service (set)))
;;* lme

;;* lmx 832 system/sepolicy/private/property.te

(neverallow base_typeattr_945 rollback_test_prop (property_service (set)))
;;* lme

;;* lmx 838 system/sepolicy/private/property.te

(neverallow base_typeattr_264 ctl_apex_load_prop (property_service (set)))
;;* lme

;;* lmx 846 system/sepolicy/private/property.te

(neverallow base_typeattr_995 ctl_apex_load_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 852 system/sepolicy/private/property.te

(neverallow base_typeattr_264 apex_ready_prop (property_service (set)))
;;* lme

;;* lmx 860 system/sepolicy/private/property.te

(neverallow base_typeattr_996 apex_ready_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 867 system/sepolicy/private/property.te

(neverallow base_typeattr_997 profcollectd_enabled_prop (property_service (set)))
;;* lme

;;* lmx 875 system/sepolicy/private/property.te

(neverallow base_typeattr_998 profcollectd_node_id_prop (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 880 system/sepolicy/private/property.te

(neverallow base_typeattr_247 log_file_logger_prop (property_service (set)))
;;* lme

;;* lmx 886 system/sepolicy/private/property.te

(neverallow base_typeattr_368 usb_uvc_enabled_prop (property_service (set)))
;;* lme

;;* lmx 894 system/sepolicy/private/property.te

(neverallow base_typeattr_999 usb_uvc_enabled_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 900 system/sepolicy/private/property.te

(neverallow base_typeattr_368 pm_archiving_enabled_prop (property_service (set)))
;;* lme

;;* lmx 907 system/sepolicy/private/property.te

(neverallow base_typeattr_1000 bionic_linker_16kb_app_compat_prop (property_service (set)))
;;* lme

;;* lmx 914 system/sepolicy/private/property.te

(neverallow base_typeattr_1000 pm_16kb_app_compat_prop (property_service (set)))
;;* lme

;;* lmx 920 system/sepolicy/private/property.te

(neverallow base_typeattr_1001 statsd_atoms_list_version_prop (property_service (set)))
;;* lme

(typetransition radio tmpfs file appdomain_tmpfs)
;;* lmx 3 system/sepolicy/private/radio.te

(allow radio radio_userfaultfd (anon_inode (ioctl read create)))
;;* lme

(dontaudit su radio_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lmx 3 system/sepolicy/private/radio.te

(neverallow base_typeattr_1002 radio_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 3 system/sepolicy/private/radio.te

(allow radio appdomain_tmpfs (file (read write getattr map execute)))
;;* lme

;;* lmx 3 system/sepolicy/private/radio.te

(allow radio appdomain (memfd_file (read write getattr map execute)))
;;* lme

;;* lmx 3 system/sepolicy/private/radio.te

(neverallow base_typeattr_1003 base_typeattr_1002 (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 3 system/sepolicy/private/radio.te

(neverallow base_typeattr_1004 radio (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 3 system/sepolicy/private/radio.te

(neverallow base_typeattr_1005 radio (process (ptrace)))
;;* lme

;;* lmx 3 system/sepolicy/private/radio.te

(neverallow radio base_typeattr_1006 (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 5 system/sepolicy/private/radio.te

(allow radio runtime_event_log_tags_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 8 system/sepolicy/private/radio.te

(allow radio property_socket (sock_file (write)))
;;* lme

;;* lmx 8 system/sepolicy/private/radio.te

(allow radio init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 8 system/sepolicy/private/radio.te

(allow radio radio_control_prop (property_service (set)))
;;* lme

;;* lmx 8 system/sepolicy/private/radio.te

(allow radio radio_control_prop (file (read getattr map open)))
;;* lme

;;* lmx 9 system/sepolicy/private/radio.te

(allow radio property_socket (sock_file (write)))
;;* lme

;;* lmx 9 system/sepolicy/private/radio.te

(allow radio init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 9 system/sepolicy/private/radio.te

(allow radio radio_prop (property_service (set)))
;;* lme

;;* lmx 9 system/sepolicy/private/radio.te

(allow radio radio_prop (file (read getattr map open)))
;;* lme

;;* lmx 10 system/sepolicy/private/radio.te

(allow radio property_socket (sock_file (write)))
;;* lme

;;* lmx 10 system/sepolicy/private/radio.te

(allow radio init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 10 system/sepolicy/private/radio.te

(allow radio net_radio_prop (property_service (set)))
;;* lme

;;* lmx 10 system/sepolicy/private/radio.te

(allow radio net_radio_prop (file (read getattr map open)))
;;* lme

;;* lmx 11 system/sepolicy/private/radio.te

(allow radio property_socket (sock_file (write)))
;;* lme

;;* lmx 11 system/sepolicy/private/radio.te

(allow radio init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 11 system/sepolicy/private/radio.te

(allow radio telephony_status_prop (property_service (set)))
;;* lme

;;* lmx 11 system/sepolicy/private/radio.te

(allow radio telephony_status_prop (file (read getattr map open)))
;;* lme

;;* lmx 12 system/sepolicy/private/radio.te

(allow radio property_socket (sock_file (write)))
;;* lme

;;* lmx 12 system/sepolicy/private/radio.te

(allow radio init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 12 system/sepolicy/private/radio.te

(allow radio radio_cdma_ecm_prop (property_service (set)))
;;* lme

;;* lmx 12 system/sepolicy/private/radio.te

(allow radio radio_cdma_ecm_prop (file (read getattr map open)))
;;* lme

;;* lmx 15 system/sepolicy/private/radio.te

(allow radio property_socket (sock_file (write)))
;;* lme

;;* lmx 15 system/sepolicy/private/radio.te

(allow radio init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 15 system/sepolicy/private/radio.te

(allow radio ctl_rildaemon_prop (property_service (set)))
;;* lme

;;* lmx 15 system/sepolicy/private/radio.te

(allow radio ctl_rildaemon_prop (file (read getattr map open)))
;;* lme

;;* lmx 18 system/sepolicy/private/radio.te

(allow radio time_prop (file (read getattr map open)))
;;* lme

;;* lmx 21 system/sepolicy/private/radio.te

(allow radio platform_compat_service (service_manager (find)))
;;* lme

;;* lmx 23 system/sepolicy/private/radio.te

(allow radio uce_service (service_manager (find)))
;;* lme

;;* lmx 26 system/sepolicy/private/radio.te

(allow radio emergency_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 27 system/sepolicy/private/radio.te

(allow radio emergency_data_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 30 system/sepolicy/private/radio.te

(allow radio property_socket (sock_file (write)))
;;* lme

;;* lmx 30 system/sepolicy/private/radio.te

(allow radio init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 30 system/sepolicy/private/radio.te

(allow radio binder_cache_telephony_server_prop (property_service (set)))
;;* lme

;;* lmx 30 system/sepolicy/private/radio.te

(allow radio binder_cache_telephony_server_prop (file (read getattr map open)))
;;* lme

;;* lmx 33 system/sepolicy/private/radio.te

(allow radio statsd (binder (call transfer)))
;;* lme

;;* lmx 33 system/sepolicy/private/radio.te

(allow statsd radio (binder (transfer)))
;;* lme

;;* lmx 33 system/sepolicy/private/radio.te

(allow radio statsd (fd (use)))
;;* lme

;;* lmx 43 system/sepolicy/private/radio.te

(allow radio radio_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 44 system/sepolicy/private/radio.te

(allow radio radio_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow radio radio_data_file (lnk_file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow radio radio_data_file (sock_file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow radio radio_data_file (fifo_file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 45 system/sepolicy/private/radio.te

(allow radio radio_core_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 46 system/sepolicy/private/radio.te

(allow radio radio_core_data_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 48 system/sepolicy/private/radio.te

(allow radio net_data_file (dir (search)))
;;* lme

;;* lmx 49 system/sepolicy/private/radio.te

(allow radio net_data_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 51 system/sepolicy/private/radio.te

(allow radio radio_service (service_manager (add find)))
;;* lme

;;* lmx 51 system/sepolicy/private/radio.te

(neverallow base_typeattr_1002 radio_service (service_manager (add)))
;;* lme

;;* lmx 51 system/sepolicy/private/radio.te

(allow radio su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 52 system/sepolicy/private/radio.te

(allow radio audioserver_service (service_manager (find)))
;;* lme

;;* lmx 53 system/sepolicy/private/radio.te

(allow radio cameraserver_service (service_manager (find)))
;;* lme

;;* lmx 54 system/sepolicy/private/radio.te

(allow radio drmserver_service (service_manager (find)))
;;* lme

;;* lmx 55 system/sepolicy/private/radio.te

(allow radio mediaserver_service (service_manager (find)))
;;* lme

;;* lmx 56 system/sepolicy/private/radio.te

(allow radio nfc_service (service_manager (find)))
;;* lme

;;* lmx 57 system/sepolicy/private/radio.te

(allow radio app_api_service (service_manager (find)))
;;* lme

;;* lmx 58 system/sepolicy/private/radio.te

(allow radio system_api_service (service_manager (find)))
;;* lme

;;* lmx 59 system/sepolicy/private/radio.te

(allow radio timedetector_service (service_manager (find)))
;;* lme

;;* lmx 60 system/sepolicy/private/radio.te

(allow radio timezonedetector_service (service_manager (find)))
;;* lme

;;* lmx 63 system/sepolicy/private/radio.te

(allow radio hwservicemanager (binder (call transfer)))
;;* lme

;;* lmx 63 system/sepolicy/private/radio.te

(allow hwservicemanager radio (binder (call transfer)))
;;* lme

;;* lmx 64 system/sepolicy/private/radio.te

(allow radio hal_telephony (memfd_file (read write getattr map)))
;;* lme

;;* lmx 64 system/sepolicy/private/radio.te

(allow hal_telephony radio (memfd_file (read write getattr map)))
;;* lme

;;* lmx 67 system/sepolicy/private/radio.te

(allow radio proc_cmdline (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 74 system/sepolicy/private/radio.te

(neverallow base_typeattr_1007 binder_cache_telephony_server_prop (property_service (set)))
;;* lme

;;* lmx 212 system/sepolicy/private/recovery.te

(neverallow recovery base_typeattr_1008 (file (write create setattr relabelfrom append unlink link rename execute execute_no_trans)))
;;* lme

;;* lmx 218 system/sepolicy/private/recovery.te

(neverallow recovery base_typeattr_1008 (dir (write create setattr relabelfrom link rename add_name remove_name reparent rmdir)))
;;* lme

;;* lmx 3 system/sepolicy/private/recovery_persist.te

(allow init recovery_persist_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 3 system/sepolicy/private/recovery_persist.te

(allow init recovery_persist (process (transition)))
;;* lme

;;* lmx 3 system/sepolicy/private/recovery_persist.te

(allow recovery_persist recovery_persist_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init recovery_persist (process (noatsecure)))
;;* lmx 3 system/sepolicy/private/recovery_persist.te

(allow init recovery_persist (process (siginh rlimitinh)))
;;* lme

(typetransition init recovery_persist_exec process recovery_persist)
;;* lmx 5 system/sepolicy/private/recovery_persist.te

(allow recovery_persist pstorefs (dir (search)))
;;* lme

;;* lmx 6 system/sepolicy/private/recovery_persist.te

(allow recovery_persist pstorefs (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 8 system/sepolicy/private/recovery_persist.te

(allow recovery_persist recovery_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 9 system/sepolicy/private/recovery_persist.te

(allow recovery_persist recovery_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 11 system/sepolicy/private/recovery_persist.te

(allow recovery_persist cache_file (dir (search)))
;;* lme

;;* lmx 12 system/sepolicy/private/recovery_persist.te

(allow recovery_persist cache_file (lnk_file (read)))
;;* lme

;;* lmx 13 system/sepolicy/private/recovery_persist.te

(allow recovery_persist cache_recovery_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
;;* lme

;;* lmx 14 system/sepolicy/private/recovery_persist.te

(allow recovery_persist cache_recovery_file (file (ioctl read getattr lock map unlink open watch watch_reads)))
;;* lme

;;* lmx 22 system/sepolicy/private/recovery_persist.te

(neverallow recovery_persist dev_type (blk_file (read write)))
;;* lme

;;* lmx 25 system/sepolicy/private/recovery_persist.te

(neverallow recovery_persist domain (process (ptrace)))
;;* lme

;;* lmx 28 system/sepolicy/private/recovery_persist.te

(neverallow recovery_persist system_file_type (file (write)))
(neverallow recovery_persist system_file_type (dir (write)))
(neverallow recovery_persist system_file_type (lnk_file (write)))
(neverallow recovery_persist system_file_type (chr_file (write)))
(neverallow recovery_persist system_file_type (blk_file (write)))
(neverallow recovery_persist system_file_type (sock_file (write)))
(neverallow recovery_persist system_file_type (fifo_file (write)))
;;* lme

;;* lmx 31 system/sepolicy/private/recovery_persist.te

(neverallow recovery_persist app_data_file_type (file (write)))
(neverallow recovery_persist app_data_file_type (dir (write)))
(neverallow recovery_persist app_data_file_type (lnk_file (write)))
(neverallow recovery_persist app_data_file_type (chr_file (write)))
(neverallow recovery_persist app_data_file_type (blk_file (write)))
(neverallow recovery_persist app_data_file_type (sock_file (write)))
(neverallow recovery_persist app_data_file_type (fifo_file (write)))
(neverallow recovery_persist system_data_file (file (write)))
(neverallow recovery_persist system_data_file (dir (write)))
(neverallow recovery_persist system_data_file (lnk_file (write)))
(neverallow recovery_persist system_data_file (chr_file (write)))
(neverallow recovery_persist system_data_file (blk_file (write)))
(neverallow recovery_persist system_data_file (sock_file (write)))
(neverallow recovery_persist system_data_file (fifo_file (write)))
;;* lme

;;* lmx 39 system/sepolicy/private/recovery_persist.te

(neverallow recovery_persist base_typeattr_1009 (file (write)))
;;* lme

;;* lmx 3 system/sepolicy/private/recovery_refresh.te

(allow init recovery_refresh_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 3 system/sepolicy/private/recovery_refresh.te

(allow init recovery_refresh (process (transition)))
;;* lme

;;* lmx 3 system/sepolicy/private/recovery_refresh.te

(allow recovery_refresh recovery_refresh_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init recovery_refresh (process (noatsecure)))
;;* lmx 3 system/sepolicy/private/recovery_refresh.te

(allow init recovery_refresh (process (siginh rlimitinh)))
;;* lme

(typetransition init recovery_refresh_exec process recovery_refresh)
;;* lmx 5 system/sepolicy/private/recovery_refresh.te

(allow recovery_refresh pstorefs (dir (search)))
;;* lme

;;* lmx 6 system/sepolicy/private/recovery_refresh.te

(allow recovery_refresh pstorefs (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 15 system/sepolicy/private/recovery_refresh.te

(neverallow recovery_refresh dev_type (blk_file (read write)))
;;* lme

;;* lmx 18 system/sepolicy/private/recovery_refresh.te

(neverallow recovery_refresh domain (process (ptrace)))
;;* lme

;;* lmx 21 system/sepolicy/private/recovery_refresh.te

(neverallow recovery_refresh system_file_type (file (write)))
(neverallow recovery_refresh system_file_type (dir (write)))
(neverallow recovery_refresh system_file_type (lnk_file (write)))
(neverallow recovery_refresh system_file_type (chr_file (write)))
(neverallow recovery_refresh system_file_type (blk_file (write)))
(neverallow recovery_refresh system_file_type (sock_file (write)))
(neverallow recovery_refresh system_file_type (fifo_file (write)))
;;* lme

;;* lmx 24 system/sepolicy/private/recovery_refresh.te

(neverallow recovery_refresh app_data_file_type (file (write)))
(neverallow recovery_refresh app_data_file_type (dir (write)))
(neverallow recovery_refresh app_data_file_type (lnk_file (write)))
(neverallow recovery_refresh app_data_file_type (chr_file (write)))
(neverallow recovery_refresh app_data_file_type (blk_file (write)))
(neverallow recovery_refresh app_data_file_type (sock_file (write)))
(neverallow recovery_refresh app_data_file_type (fifo_file (write)))
(neverallow recovery_refresh system_data_file (file (write)))
(neverallow recovery_refresh system_data_file (dir (write)))
(neverallow recovery_refresh system_data_file (lnk_file (write)))
(neverallow recovery_refresh system_data_file (chr_file (write)))
(neverallow recovery_refresh system_data_file (blk_file (write)))
(neverallow recovery_refresh system_data_file (sock_file (write)))
(neverallow recovery_refresh system_data_file (fifo_file (write)))
;;* lme

;;* lmx 31 system/sepolicy/private/recovery_refresh.te

(neverallow recovery_refresh base_typeattr_1010 (file (write)))
;;* lme

;;* lmx 3 system/sepolicy/private/remote_provisioning_service_server.te

(allow remote_provisioning_service_server remote_provisioning_service (service_manager (add find)))
;;* lme

;;* lmx 3 system/sepolicy/private/remote_provisioning_service_server.te

(neverallow base_typeattr_1011 remote_provisioning_service (service_manager (add)))
;;* lme

;;* lmx 3 system/sepolicy/private/remote_provisioning_service_server.te

(allow remote_provisioning_service_server su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 5 system/sepolicy/private/remote_provisioning_service_server.te

(allow remote_provisioning_service_server servicemanager (binder (call transfer)))
;;* lme

;;* lmx 5 system/sepolicy/private/remote_provisioning_service_server.te

(allow servicemanager remote_provisioning_service_server (binder (call transfer)))
;;* lme

;;* lmx 4 system/sepolicy/private/remount.te

(allow init remount_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 4 system/sepolicy/private/remount.te

(allow init remount (process (transition)))
;;* lme

;;* lmx 4 system/sepolicy/private/remount.te

(allow remount remount_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init remount (process (noatsecure)))
;;* lmx 4 system/sepolicy/private/remount.te

(allow init remount (process (siginh rlimitinh)))
;;* lme

(typetransition init remount_exec process remount)
;;* lmx 4 system/sepolicy/private/remount.te

(allow remount servicemanager (binder (call transfer)))
;;* lme

;;* lmx 4 system/sepolicy/private/remount.te

(allow servicemanager remount (binder (call transfer)))
;;* lme

;;* lmx 4 system/sepolicy/private/remount.te

(allow remount gsi_service (service_manager (find)))
;;* lme

;;* lmx 4 system/sepolicy/private/remount.te

(allow remount gsid (binder (call transfer)))
;;* lme

;;* lmx 4 system/sepolicy/private/remount.te

(allow gsid remount (binder (transfer)))
;;* lme

;;* lmx 4 system/sepolicy/private/remount.te

(allow remount gsid (fd (use)))
;;* lme

;;* lmx 4 system/sepolicy/private/remount.te

(allow remount gsi_metadata_file_type (dir (search)))
(allow remount metadata_file (dir (search)))
;;* lme

;;* lmx 4 system/sepolicy/private/remount.te

(allow remount sysfs_dt_firmware_android (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 4 system/sepolicy/private/remount.te

(allow remount sysfs_dt_firmware_android (file (ioctl read getattr lock map open watch watch_reads)))
(allow remount sysfs_dt_firmware_android (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 4 system/sepolicy/private/remount.te

(allow remount proc_bootconfig (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 4 system/sepolicy/private/remount.te

(allow remount proc_cmdline (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 4 system/sepolicy/private/remount.te

(allow remount block_device (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 4 system/sepolicy/private/remount.te

(allow remount super_block_device_type (blk_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 4 system/sepolicy/private/remount.te

(allowx remount super_block_device_type (ioctl blk_file (0x1278 0x127a)))
;;* lme

;;* lmx 5 system/sepolicy/private/rkp_cert_processor.te

(allow init rkp_cert_processor_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 5 system/sepolicy/private/rkp_cert_processor.te

(allow init rkp_cert_processor (process (transition)))
;;* lme

;;* lmx 5 system/sepolicy/private/rkp_cert_processor.te

(allow rkp_cert_processor rkp_cert_processor_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init rkp_cert_processor (process (noatsecure)))
;;* lmx 5 system/sepolicy/private/rkp_cert_processor.te

(allow init rkp_cert_processor (process (siginh rlimitinh)))
;;* lme

(typetransition init rkp_cert_processor_exec process rkp_cert_processor)
;;* lmx 8 system/sepolicy/private/rkp_cert_processor.te

(allow rkp_cert_processor servicemanager (binder (call transfer)))
;;* lme

;;* lmx 8 system/sepolicy/private/rkp_cert_processor.te

(allow servicemanager rkp_cert_processor (binder (call transfer)))
;;* lme

;;* lmx 9 system/sepolicy/private/rkp_cert_processor.te

(allow rkp_cert_processor system_server (binder (call transfer)))
;;* lme

;;* lmx 9 system/sepolicy/private/rkp_cert_processor.te

(allow system_server rkp_cert_processor (binder (transfer)))
;;* lme

;;* lmx 9 system/sepolicy/private/rkp_cert_processor.te

(allow rkp_cert_processor system_server (fd (use)))
;;* lme

;;* lmx 11 system/sepolicy/private/rkp_cert_processor.te

(allow rkp_cert_processor rkp_cert_processor_service (service_manager (add find)))
;;* lme

;;* lmx 11 system/sepolicy/private/rkp_cert_processor.te

(neverallow base_typeattr_1012 rkp_cert_processor_service (service_manager (add)))
;;* lme

;;* lmx 11 system/sepolicy/private/rkp_cert_processor.te

(allow rkp_cert_processor su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 13 system/sepolicy/private/rkp_cert_processor.te

(allow rkp_cert_processor system_bootstrap_lib_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 13 system/sepolicy/private/rkp_cert_processor.te

(allow rkp_cert_processor system_bootstrap_lib_file (file (read getattr map execute open)))
;;* lme

;;* lmx 15 system/sepolicy/private/rkp_cert_processor.te

(allow rkp_cert_processor package_native_service (service_manager (find)))
;;* lme

;;* lmx 7 system/sepolicy/private/rkpd.te

(allow rkpd servicemanager (binder (call transfer)))
;;* lme

;;* lmx 7 system/sepolicy/private/rkpd.te

(allow servicemanager rkpd (binder (call transfer)))
;;* lme

;;* lmx 10 system/sepolicy/private/rkpd.te

(allow init rkpd_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 10 system/sepolicy/private/rkpd.te

(allow init rkpd (process (transition)))
;;* lme

;;* lmx 10 system/sepolicy/private/rkpd.te

(allow rkpd rkpd_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init rkpd (process (noatsecure)))
;;* lmx 10 system/sepolicy/private/rkpd.te

(allow init rkpd (process (siginh rlimitinh)))
;;* lme

(typetransition init rkpd_exec process rkpd)
;;* lmx 12 system/sepolicy/private/rkpd.te

(allow rkpd rkpd_registrar_service (service_manager (add find)))
;;* lme

;;* lmx 12 system/sepolicy/private/rkpd.te

(neverallow base_typeattr_1013 rkpd_registrar_service (service_manager (add)))
;;* lme

;;* lmx 12 system/sepolicy/private/rkpd.te

(allow rkpd su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 13 system/sepolicy/private/rkpd.te

(allow rkpd rkpd_refresh_service (service_manager (add find)))
;;* lme

;;* lmx 13 system/sepolicy/private/rkpd.te

(neverallow base_typeattr_1013 rkpd_refresh_service (service_manager (add)))
;;* lme

;;* lmx 13 system/sepolicy/private/rkpd.te

(allow rkpd su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 15 system/sepolicy/private/rkpd.te

(allow rkpd device_config_remote_key_provisioning_native_prop (file (read getattr map open)))
;;* lme

(typetransition rkpdapp tmpfs file appdomain_tmpfs)
;;* lmx 7 system/sepolicy/private/rkpd_app.te

(allow rkpdapp rkpdapp_userfaultfd (anon_inode (ioctl read create)))
;;* lme

(dontaudit su rkpdapp_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lmx 7 system/sepolicy/private/rkpd_app.te

(neverallow base_typeattr_1014 rkpdapp_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 7 system/sepolicy/private/rkpd_app.te

(allow rkpdapp appdomain_tmpfs (file (read write getattr map execute)))
;;* lme

;;* lmx 7 system/sepolicy/private/rkpd_app.te

(allow rkpdapp appdomain (memfd_file (read write getattr map execute)))
;;* lme

;;* lmx 7 system/sepolicy/private/rkpd_app.te

(neverallow base_typeattr_1015 base_typeattr_1014 (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 7 system/sepolicy/private/rkpd_app.te

(neverallow base_typeattr_1016 rkpdapp (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 7 system/sepolicy/private/rkpd_app.te

(neverallow base_typeattr_1017 rkpdapp (process (ptrace)))
;;* lme

;;* lmx 7 system/sepolicy/private/rkpd_app.te

(neverallow rkpdapp base_typeattr_1018 (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 11 system/sepolicy/private/rkpd_app.te

(allow rkpdapp hal_keymint (memfd_file (read write getattr map)))
;;* lme

;;* lmx 11 system/sepolicy/private/rkpd_app.te

(allow hal_keymint rkpdapp (memfd_file (read write getattr map)))
;;* lme

;;* lmx 12 system/sepolicy/private/rkpd_app.te

(allow rkpdapp hal_remotelyprovisionedcomponent_avf (memfd_file (read write getattr map)))
;;* lme

;;* lmx 12 system/sepolicy/private/rkpd_app.te

(allow hal_remotelyprovisionedcomponent_avf rkpdapp (memfd_file (read write getattr map)))
;;* lme

;;* lmx 15 system/sepolicy/private/rkpd_app.te

(allow rkpdapp device_config_remote_key_provisioning_native_prop (file (read getattr map open)))
;;* lme

;;* lmx 16 system/sepolicy/private/rkpd_app.te

(allow rkpdapp property_socket (sock_file (write)))
;;* lme

;;* lmx 16 system/sepolicy/private/rkpd_app.te

(allow rkpdapp init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 16 system/sepolicy/private/rkpd_app.te

(allow rkpdapp remote_prov_prop (property_service (set)))
;;* lme

;;* lmx 16 system/sepolicy/private/rkpd_app.te

(allow rkpdapp remote_prov_prop (file (read getattr map open)))
;;* lme

;;* lmx 19 system/sepolicy/private/rkpd_app.te

(allow rkpdapp app_api_service (service_manager (find)))
;;* lme

;;* lmx 23 system/sepolicy/private/rkpd_app.te

(allow rkpdapp mediametrics_service (service_manager (find)))
;;* lme

;;* lmx 26 system/sepolicy/private/rkpd_app.te

(allow rkpdapp statsmanager_service (service_manager (find)))
;;* lme

;;* lmx 27 system/sepolicy/private/rkpd_app.te

(allow rkpdapp statsd (binder (call transfer)))
;;* lme

;;* lmx 27 system/sepolicy/private/rkpd_app.te

(allow statsd rkpdapp (binder (transfer)))
;;* lme

;;* lmx 27 system/sepolicy/private/rkpd_app.te

(allow rkpdapp statsd (fd (use)))
;;* lme

;;* lmx 1 system/sepolicy/private/rootdisk_sysdev.te

(allow rootdisk_sysdev sysfs (filesystem (associate)))
;;* lme

;;* lmx 3 system/sepolicy/private/rs.te

(allow rs app_data_file (dir (ioctl read write getattr lock open watch watch_reads add_name search)))
(allow rs privapp_data_file (dir (ioctl read write getattr lock open watch watch_reads add_name search)))
;;* lme

;;* lmx 4 system/sepolicy/private/rs.te

(allow rs app_exec_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

(typetransition rs app_data_file file app_exec_data_file)
(typetransition rs privapp_data_file file app_exec_data_file)
;;* lmx 9 system/sepolicy/private/rs.te

(allow rs system_data_file (lnk_file (read)))
;;* lme

;;* lmx 12 system/sepolicy/private/rs.te

(allow rs app_data_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow rs privapp_data_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 13 system/sepolicy/private/rs.te

(allow rs app_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
(allow rs privapp_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 16 system/sepolicy/private/rs.te

(allow rs app_data_file (dir (remove_name)))
(allow rs privapp_data_file (dir (remove_name)))
;;* lme

;;* lmx 19 system/sepolicy/private/rs.te

(allow rs vendor_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 20 system/sepolicy/private/rs.te

(allow rs vendor_overlay_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 20 system/sepolicy/private/rs.te

(allow rs vendor_overlay_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow rs vendor_overlay_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 21 system/sepolicy/private/rs.te

(allow rs vendor_app_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 21 system/sepolicy/private/rs.te

(allow rs vendor_app_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow rs vendor_app_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 23 system/sepolicy/private/rs.te

(allow rs vendor_apex_metadata_file (dir (getattr search)))
;;* lme

;;* lmx 26 system/sepolicy/private/rs.te

(allow rs apk_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 26 system/sepolicy/private/rs.te

(allow rs apk_data_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow rs apk_data_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 28 system/sepolicy/private/rs.te

(allow rs gpu_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 29 system/sepolicy/private/rs.te

(allow rs same_process_hal_file (file (ioctl read getattr lock map execute open watch watch_reads)))
;;* lme

;;* lmx 32 system/sepolicy/private/rs.te

(allow rs untrusted_app_all (fd (use)))
(allow rs priv_app_all (fd (use)))
(allow rs ephemeral_app (fd (use)))
;;* lme

(dontaudit rs hal_graphics_allocator (fd (use)))
(dontaudit rs surfaceflinger (fd (use)))
(dontaudit rs zygote (fd (use)))
;;* lmx 40 system/sepolicy/private/rs.te

(neverallow rs rs (capability (chown dac_override dac_read_search fowner fsetid kill setgid setuid setpcap linux_immutable net_bind_service net_broadcast net_admin net_raw ipc_lock ipc_owner sys_module sys_rawio sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_nice sys_resource sys_time sys_tty_config mknod lease audit_write audit_control setfcap)))
(neverallow rs rs (capability2 (mac_override mac_admin syslog wake_alarm block_suspend audit_read perfmon checkpoint_restore bpf)))
(neverallow rs rs (cap_userns (chown dac_override dac_read_search fowner fsetid kill setgid setuid setpcap linux_immutable net_bind_service net_broadcast net_admin net_raw ipc_lock ipc_owner sys_module sys_rawio sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_nice sys_resource sys_time sys_tty_config mknod lease audit_write audit_control setfcap)))
(neverallow rs rs (cap2_userns (mac_override mac_admin syslog wake_alarm block_suspend audit_read perfmon checkpoint_restore bpf)))
;;* lme

;;* lmx 41 system/sepolicy/private/rs.te

(neverallow base_typeattr_292 rs (process (transition dyntransition)))
;;* lme

;;* lmx 42 system/sepolicy/private/rs.te

(neverallow rs base_typeattr_270 (process (transition dyntransition)))
;;* lme

;;* lmx 43 system/sepolicy/private/rs.te

(neverallow rs app_data_file_type (file (write create setattr relabelfrom relabelto append unlink link rename execute quotaon mounton audit_access execmod watch_mount watch_sb watch_with_perm execute_no_trans entrypoint)))
(neverallow rs app_data_file_type (lnk_file (write create setattr relabelfrom relabelto append unlink link rename execute quotaon mounton audit_access execmod watch_mount watch_sb watch_with_perm)))
(neverallow rs app_data_file_type (chr_file (write create setattr relabelfrom relabelto append unlink link rename execute quotaon mounton audit_access execmod watch_mount watch_sb watch_with_perm execute_no_trans entrypoint)))
(neverallow rs app_data_file_type (blk_file (write create setattr relabelfrom relabelto append unlink link rename execute quotaon mounton audit_access execmod watch_mount watch_sb watch_with_perm)))
(neverallow rs app_data_file_type (sock_file (write create setattr relabelfrom relabelto append unlink link rename execute quotaon mounton audit_access execmod watch_mount watch_sb watch_with_perm)))
(neverallow rs app_data_file_type (fifo_file (write create setattr relabelfrom relabelto append unlink link rename execute quotaon mounton audit_access execmod watch_mount watch_sb watch_with_perm)))
;;* lme

;;* lmx 45 system/sepolicy/private/rs.te

(neverallow rs base_typeattr_248 (tcp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind name_connect)))
(neverallow rs base_typeattr_248 (udp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind)))
(neverallow rs base_typeattr_248 (rawip_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind)))
(neverallow rs base_typeattr_248 (icmp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind)))
;;* lme

;;* lmx 4 system/sepolicy/private/rss_hwm_reset.te

(allow init rss_hwm_reset_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 4 system/sepolicy/private/rss_hwm_reset.te

(allow init rss_hwm_reset (process (transition)))
;;* lme

;;* lmx 4 system/sepolicy/private/rss_hwm_reset.te

(allow rss_hwm_reset rss_hwm_reset_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init rss_hwm_reset (process (noatsecure)))
;;* lmx 4 system/sepolicy/private/rss_hwm_reset.te

(allow init rss_hwm_reset (process (siginh rlimitinh)))
;;* lme

(typetransition init rss_hwm_reset_exec process rss_hwm_reset)
;;* lmx 7 system/sepolicy/private/rss_hwm_reset.te

(allow rss_hwm_reset domain (dir (search)))
;;* lme

;;* lmx 11 system/sepolicy/private/rss_hwm_reset.te

(allow rss_hwm_reset self (capability (dac_override)))
(allow rss_hwm_reset self (cap_userns (dac_override)))
;;* lme

;;* lmx 14 system/sepolicy/private/rss_hwm_reset.te

(allow rss_hwm_reset domain (file (write lock append map open)))
;;* lme

;;* lmx 4 system/sepolicy/private/runas.te

(allow shell runas_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 4 system/sepolicy/private/runas.te

(allow shell runas (process (transition)))
;;* lme

;;* lmx 4 system/sepolicy/private/runas.te

(allow runas runas_exec (file (read getattr map execute open entrypoint)))
;;* lme

;;* lmx 4 system/sepolicy/private/runas.te

(allow runas shell (process (sigchld)))
;;* lme

(dontaudit shell runas (process (noatsecure)))
;;* lmx 4 system/sepolicy/private/runas.te

(allow shell runas (process (siginh rlimitinh)))
;;* lme

(typetransition shell runas_exec process runas)
;;* lmx 6 system/sepolicy/private/runas.te

(allow runas adbd (fd (use)))
;;* lme

;;* lmx 7 system/sepolicy/private/runas.te

(allow runas adbd (process (sigchld)))
;;* lme

;;* lmx 8 system/sepolicy/private/runas.te

(allow runas adbd (unix_stream_socket (read write)))
;;* lme

;;* lmx 9 system/sepolicy/private/runas.te

(allow runas shell (fd (use)))
;;* lme

;;* lmx 10 system/sepolicy/private/runas.te

(allow runas shell (fifo_file (read write)))
;;* lme

;;* lmx 11 system/sepolicy/private/runas.te

(allow runas shell (unix_stream_socket (read write)))
;;* lme

;;* lmx 12 system/sepolicy/private/runas.te

(allow runas devpts (chr_file (ioctl read write)))
;;* lme

;;* lmx 13 system/sepolicy/private/runas.te

(allow runas shell_data_file (file (read write)))
;;* lme

;;* lmx 16 system/sepolicy/private/runas.te

(allow runas system_data_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 17 system/sepolicy/private/runas.te

(allow runas system_data_file (lnk_file (getattr)))
;;* lme

;;* lmx 18 system/sepolicy/private/runas.te

(allow runas packages_list_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 21 system/sepolicy/private/runas.te

(allow runas system_data_file (lnk_file (read)))
;;* lme

(dontaudit runas self (capability (dac_override dac_read_search)))
(dontaudit runas self (cap_userns (dac_override dac_read_search)))
;;* lmx 25 system/sepolicy/private/runas.te

(allow runas app_data_file (dir (getattr search)))
;;* lme

;;* lmx 28 system/sepolicy/private/runas.te

(allow runas self (capability (setgid setuid)))
(allow runas self (cap_userns (setgid setuid)))
;;* lme

;;* lmx 31 system/sepolicy/private/runas.te

(allow runas selinuxfs (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 31 system/sepolicy/private/runas.te

(allow runas selinuxfs (file (ioctl read getattr lock map open watch watch_reads)))
(allow runas selinuxfs (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 31 system/sepolicy/private/runas.te

(allow runas selinuxfs (file (write lock append map open)))
;;* lme

;;* lmx 31 system/sepolicy/private/runas.te

(allow runas kernel (security (check_context)))
;;* lme

;;* lmx 32 system/sepolicy/private/runas.te

(allow runas self (process (setcurrent)))
;;* lme

;;* lmx 33 system/sepolicy/private/runas.te

(allow runas base_typeattr_1019 (process (dyntransition)))
;;* lme

;;* lmx 37 system/sepolicy/private/runas.te

(allow runas seapp_contexts_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 41 system/sepolicy/private/runas.te

(allow runas servicemanager (binder (call transfer)))
;;* lme

;;* lmx 41 system/sepolicy/private/runas.te

(allow servicemanager runas (binder (transfer)))
;;* lme

;;* lmx 41 system/sepolicy/private/runas.te

(allow runas servicemanager (fd (use)))
;;* lme

;;* lmx 42 system/sepolicy/private/runas.te

(allow runas activity_structured_service (service_manager (find)))
;;* lme

;;* lmx 49 system/sepolicy/private/runas.te

(neverallow runas self (capability (chown dac_override dac_read_search fowner fsetid kill setpcap linux_immutable net_bind_service net_broadcast net_admin net_raw ipc_lock ipc_owner sys_module sys_rawio sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_nice sys_resource sys_time sys_tty_config mknod lease audit_write audit_control setfcap)))
(neverallow runas self (cap_userns (chown dac_override dac_read_search fowner fsetid kill setpcap linux_immutable net_bind_service net_broadcast net_admin net_raw ipc_lock ipc_owner sys_module sys_rawio sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_nice sys_resource sys_time sys_tty_config mknod lease audit_write audit_control setfcap)))
;;* lme

;;* lmx 50 system/sepolicy/private/runas.te

(neverallow runas self (capability2 (mac_override mac_admin syslog wake_alarm block_suspend audit_read perfmon checkpoint_restore bpf)))
(neverallow runas self (cap2_userns (mac_override mac_admin syslog wake_alarm block_suspend audit_read perfmon checkpoint_restore bpf)))
;;* lme

(typetransition runas_app tmpfs file appdomain_tmpfs)
;;* lmx 3 system/sepolicy/private/runas_app.te

(allow runas_app runas_app_userfaultfd (anon_inode (ioctl read create)))
;;* lme

(dontaudit su runas_app_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lmx 3 system/sepolicy/private/runas_app.te

(neverallow base_typeattr_1020 runas_app_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 3 system/sepolicy/private/runas_app.te

(allow runas_app appdomain_tmpfs (file (read write getattr map execute)))
;;* lme

;;* lmx 3 system/sepolicy/private/runas_app.te

(allow runas_app appdomain (memfd_file (read write getattr map execute)))
;;* lme

;;* lmx 3 system/sepolicy/private/runas_app.te

(neverallow base_typeattr_1021 base_typeattr_1020 (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 3 system/sepolicy/private/runas_app.te

(neverallow base_typeattr_1022 runas_app (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 3 system/sepolicy/private/runas_app.te

(neverallow base_typeattr_1023 runas_app (process (ptrace)))
;;* lme

;;* lmx 3 system/sepolicy/private/runas_app.te

(neverallow runas_app base_typeattr_1024 (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 11 system/sepolicy/private/runas_app.te

(allow runas_app app_data_file (file (execute_no_trans)))
;;* lme

;;* lmx 14 system/sepolicy/private/runas_app.te

(allow runas_app untrusted_app_all (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 14 system/sepolicy/private/runas_app.te

(allow runas_app untrusted_app_all (file (ioctl read getattr lock map open watch watch_reads)))
(allow runas_app untrusted_app_all (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 17 system/sepolicy/private/runas_app.te

(allow runas_app untrusted_app_all (process (sigkill sigstop signal ptrace)))
;;* lme

;;* lmx 18 system/sepolicy/private/runas_app.te

(allow runas_app untrusted_app_all (unix_stream_socket (connectto)))
;;* lme

(dontaudit runas_app domain (dir (search)))
;;* lmx 28 system/sepolicy/private/runas_app.te

(allow runas_app self (perf_event (open read write)))
;;* lme

;;* lmx 29 system/sepolicy/private/runas_app.te

(neverallow runas_app self (perf_event (cpu kernel tracepoint)))
;;* lme

(dontaudit runas_app shell_test_data_file (dir (search)))
;;* lmx 1 system/sepolicy/private/scheduler_service_server.te

(allow scheduler_service_server fwk_scheduler_hwservice (hwservice_manager (add find)))
;;* lme

;;* lmx 1 system/sepolicy/private/scheduler_service_server.te

(allow scheduler_service_server hidl_base_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 1 system/sepolicy/private/scheduler_service_server.te

(neverallow base_typeattr_1025 fwk_scheduler_hwservice (hwservice_manager (add)))
;;* lme

(typetransition sdcardd system_data_file dir media_rw_data_file)
(typetransition sdcardd system_data_file file media_rw_data_file)
;;* lmx 5 system/sepolicy/private/sdcardd.te

(allow sdcardd cgroup (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 6 system/sepolicy/private/sdcardd.te

(allow sdcardd cgroup_v2 (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 7 system/sepolicy/private/sdcardd.te

(allow sdcardd fuse_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 8 system/sepolicy/private/sdcardd.te

(allow sdcardd rootfs (dir (mounton)))
;;* lme

;;* lmx 9 system/sepolicy/private/sdcardd.te

(allow sdcardd sdcardfs (filesystem (remount)))
;;* lme

;;* lmx 10 system/sepolicy/private/sdcardd.te

(allow sdcardd tmpfs (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 11 system/sepolicy/private/sdcardd.te

(allow sdcardd mnt_media_rw_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 12 system/sepolicy/private/sdcardd.te

(allow sdcardd storage_file (dir (search)))
;;* lme

;;* lmx 13 system/sepolicy/private/sdcardd.te

(allow sdcardd storage_stub_file (dir (mounton search)))
;;* lme

;;* lmx 14 system/sepolicy/private/sdcardd.te

(allow sdcardd sdcard_type (filesystem (mount unmount)))
(allow sdcardd fuse (filesystem (mount unmount)))
;;* lme

;;* lmx 15 system/sepolicy/private/sdcardd.te

(allow sdcardd self (capability (dac_override dac_read_search setgid setuid sys_admin sys_resource)))
(allow sdcardd self (cap_userns (dac_override dac_read_search setgid setuid sys_admin sys_resource)))
;;* lme

;;* lmx 17 system/sepolicy/private/sdcardd.te

(allow sdcardd sdcard_type (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
(allow sdcardd fuse (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 18 system/sepolicy/private/sdcardd.te

(allow sdcardd sdcard_type (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow sdcardd fuse (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 20 system/sepolicy/private/sdcardd.te

(allow sdcardd media_userdir_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 21 system/sepolicy/private/sdcardd.te

(allow sdcardd media_rw_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 22 system/sepolicy/private/sdcardd.te

(allow sdcardd media_rw_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 25 system/sepolicy/private/sdcardd.te

(allow sdcardd system_data_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 26 system/sepolicy/private/sdcardd.te

(allow sdcardd packages_list_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 29 system/sepolicy/private/sdcardd.te

(allow sdcardd install_data_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 30 system/sepolicy/private/sdcardd.te

(allow sdcardd install_data_file (dir (search)))
;;* lme

;;* lmx 33 system/sepolicy/private/sdcardd.te

(allow sdcardd vold (fd (use)))
;;* lme

;;* lmx 34 system/sepolicy/private/sdcardd.te

(allow sdcardd vold (fifo_file (read write getattr)))
;;* lme

;;* lmx 37 system/sepolicy/private/sdcardd.te

(allow sdcardd mnt_expand_file (dir (search)))
;;* lme

;;* lmx 40 system/sepolicy/private/sdcardd.te

(allow sdcardd proc_filesystems (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 47 system/sepolicy/private/sdcardd.te

(neverallow init sdcardd_exec (file (execute)))
;;* lme

;;* lmx 48 system/sepolicy/private/sdcardd.te

(neverallow init sdcardd (process (transition dyntransition)))
;;* lme

(typetransition sdk_sandbox_34 tmpfs file appdomain_tmpfs)
;;* lmx 9 system/sepolicy/private/sdk_sandbox_34.te

(allow sdk_sandbox_34 sdk_sandbox_34_userfaultfd (anon_inode (ioctl read create)))
;;* lme

(dontaudit su sdk_sandbox_34_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lmx 9 system/sepolicy/private/sdk_sandbox_34.te

(neverallow base_typeattr_1026 sdk_sandbox_34_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 9 system/sepolicy/private/sdk_sandbox_34.te

(allow sdk_sandbox_34 appdomain_tmpfs (file (read write getattr map execute)))
;;* lme

;;* lmx 9 system/sepolicy/private/sdk_sandbox_34.te

(allow sdk_sandbox_34 appdomain (memfd_file (read write getattr map execute)))
;;* lme

;;* lmx 9 system/sepolicy/private/sdk_sandbox_34.te

(neverallow base_typeattr_1027 base_typeattr_1026 (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 9 system/sepolicy/private/sdk_sandbox_34.te

(neverallow base_typeattr_1028 sdk_sandbox_34 (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 9 system/sepolicy/private/sdk_sandbox_34.te

(neverallow base_typeattr_1029 sdk_sandbox_34 (process (ptrace)))
;;* lme

;;* lmx 9 system/sepolicy/private/sdk_sandbox_34.te

(neverallow sdk_sandbox_34 base_typeattr_1030 (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 13 system/sepolicy/private/sdk_sandbox_all.te

(allow sdk_sandbox_all system_linker_exec (file (execute_no_trans)))
;;* lme

;;* lmx 16 system/sepolicy/private/sdk_sandbox_all.te

(allow sdk_sandbox_all shell_data_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 17 system/sepolicy/private/sdk_sandbox_all.te

(allow sdk_sandbox_all shell_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 22 system/sepolicy/private/sdk_sandbox_all.te

(allow sdk_sandbox_all system_server (udp_socket (read write getattr connect getopt setopt recvfrom sendto)))
;;* lme

;;* lmx 26 system/sepolicy/private/sdk_sandbox_all.te

(allow sdk_sandbox_all sdk_sandbox_system_data_file (dir (getattr search)))
;;* lme

;;* lmx 28 system/sepolicy/private/sdk_sandbox_all.te

(allow sdk_sandbox_all sdk_sandbox_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 29 system/sepolicy/private/sdk_sandbox_all.te

(allow sdk_sandbox_all sdk_sandbox_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 32 system/sepolicy/private/sdk_sandbox_all.te

(allow sdk_sandbox_all app_data_file (file (read getattr)))
(allow sdk_sandbox_all privapp_data_file (file (read getattr)))
;;* lme

;;* lmx 38 system/sepolicy/private/sdk_sandbox_all.te

(neverallow sdk_sandbox_all app_data_file_type (file (execute execute_no_trans)))
;;* lme

;;* lmx 41 system/sepolicy/private/sdk_sandbox_all.te

(neverallow sdk_sandbox_all domain (netlink_kobject_uevent_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
;;* lme

;;* lmx 44 system/sepolicy/private/sdk_sandbox_all.te

(neverallow sdk_sandbox_all domain (netlink_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
;;* lme

;;* lmx 48 system/sepolicy/private/sdk_sandbox_all.te

(neverallow sdk_sandbox_all debugfs_type (file (read)))
;;* lme

;;* lmx 51 system/sepolicy/private/sdk_sandbox_all.te

(neverallow sdk_sandbox_all gpu_device (chr_file (execute)))
;;* lme

;;* lmx 54 system/sepolicy/private/sdk_sandbox_all.te

(neverallow sdk_sandbox_all sysfs (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
;;* lme

;;* lmx 58 system/sepolicy/private/sdk_sandbox_all.te

(neverallow sdk_sandbox_all proc (file (ioctl read write create setattr lock relabelfrom append unlink link rename execute open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
;;* lme

;;* lmx 61 system/sepolicy/private/sdk_sandbox_all.te

(neverallow sdk_sandbox_all sdcard_type (file (create open)))
(neverallow sdk_sandbox_all media_rw_data_file (file (create open)))
;;* lme

;;* lmx 62 system/sepolicy/private/sdk_sandbox_all.te

(neverallow sdk_sandbox_all sdcard_type (dir (search)))
(neverallow sdk_sandbox_all media_rw_data_file (dir (search)))
;;* lme

;;* lmx 66 system/sepolicy/private/sdk_sandbox_all.te

(neverallow sdk_sandbox_all proc_net (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 70 system/sepolicy/private/sdk_sandbox_all.te

(neverallow sdk_sandbox_all base_typeattr_1031 (dir (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 71 system/sepolicy/private/sdk_sandbox_all.te

(neverallow sdk_sandbox_all base_typeattr_1031 (file (ioctl write create setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
;;* lme

;;* lmx 74 system/sepolicy/private/sdk_sandbox_all.te

(neverallow sdk_sandbox_all media_rw_data_file (dir (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 75 system/sepolicy/private/sdk_sandbox_all.te

(neverallow sdk_sandbox_all media_rw_data_file (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 77 system/sepolicy/private/sdk_sandbox_all.te

(neverallow sdk_sandbox_all tmpfs (dir (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 79 system/sepolicy/private/sdk_sandbox_all.te

(neverallow sdk_sandbox_all hal_drm_service (service_manager (find)))
;;* lme

;;* lmx 89 system/sepolicy/private/sdk_sandbox_all.te

(neverallow base_typeattr_1032 sdk_sandbox_system_data_file (dir (relabelfrom)))
;;* lme

;;* lmx 99 system/sepolicy/private/sdk_sandbox_all.te

(neverallow base_typeattr_1033 sdk_sandbox_system_data_file (dir (ioctl read write create getattr setattr lock relabelto rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 109 system/sepolicy/private/sdk_sandbox_all.te

(neverallow base_typeattr_1032 sdk_sandbox_system_data_file (dir (relabelfrom)))
;;* lme

;;* lmx 119 system/sepolicy/private/sdk_sandbox_all.te

(neverallow base_typeattr_1033 sdk_sandbox_system_data_file (dir (ioctl read write create getattr setattr lock relabelto rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 122 system/sepolicy/private/sdk_sandbox_all.te

(neverallow sdk_sandbox_all sdk_sandbox_system_data_file (dir (ioctl read write create setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent rmdir)))
;;* lme

;;* lmx 125 system/sepolicy/private/sdk_sandbox_all.te

(neverallow base_typeattr_247 sdk_sandbox_system_data_file (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
;;* lme

;;* lmx 143 system/sepolicy/private/sdk_sandbox_all.te

(neverallow sdk_sandbox_all base_typeattr_1034 (unix_stream_socket (connectto)))
;;* lme

;;* lmx 148 system/sepolicy/private/sdk_sandbox_all.te

(neverallow base_typeattr_1035 sdk_sandbox_all (unix_stream_socket (connectto)))
;;* lme

(typetransition sdk_sandbox_audit tmpfs file appdomain_tmpfs)
;;* lmx 14 system/sepolicy/private/sdk_sandbox_audit.te

(allow sdk_sandbox_audit sdk_sandbox_audit_userfaultfd (anon_inode (ioctl read create)))
;;* lme

(dontaudit su sdk_sandbox_audit_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lmx 14 system/sepolicy/private/sdk_sandbox_audit.te

(neverallow base_typeattr_1036 sdk_sandbox_audit_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 14 system/sepolicy/private/sdk_sandbox_audit.te

(allow sdk_sandbox_audit appdomain_tmpfs (file (read write getattr map execute)))
;;* lme

;;* lmx 14 system/sepolicy/private/sdk_sandbox_audit.te

(allow sdk_sandbox_audit appdomain (memfd_file (read write getattr map execute)))
;;* lme

;;* lmx 14 system/sepolicy/private/sdk_sandbox_audit.te

(neverallow base_typeattr_1037 base_typeattr_1036 (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 14 system/sepolicy/private/sdk_sandbox_audit.te

(neverallow base_typeattr_1038 sdk_sandbox_audit (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 14 system/sepolicy/private/sdk_sandbox_audit.te

(neverallow base_typeattr_1039 sdk_sandbox_audit (process (ptrace)))
;;* lme

;;* lmx 14 system/sepolicy/private/sdk_sandbox_audit.te

(neverallow sdk_sandbox_audit base_typeattr_1040 (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

(auditallow sdk_sandbox_audit ephemeral_app_api_service (service_manager (find)))
(auditallow sdk_sandbox_audit cameraserver_service (service_manager (find)))
(auditallow sdk_sandbox_audit mediadrmserver_service (service_manager (find)))
(auditallow sdk_sandbox_audit radio_service (service_manager (find)))
(auditallow sdk_sandbox_audit base_typeattr_1041 (file (ioctl read write getattr lock append map open watch watch_reads)))
(auditallow sdk_sandbox_audit base_typeattr_1041 (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
;;* lmx 86 system/sepolicy/private/sdk_sandbox_current.te

(allow sdk_sandbox_current ephemeral_app_api_service (service_manager (find)))
(allow sdk_sandbox_current audioserver_service (service_manager (find)))
(allow sdk_sandbox_current batteryproperties_service (service_manager (find)))
(allow sdk_sandbox_current cameraserver_service (service_manager (find)))
(allow sdk_sandbox_current gpu_service (service_manager (find)))
(allow sdk_sandbox_current mediaserver_service (service_manager (find)))
(allow sdk_sandbox_current mediametrics_service (service_manager (find)))
(allow sdk_sandbox_current mediaextractor_service (service_manager (find)))
(allow sdk_sandbox_current mediadrmserver_service (service_manager (find)))
(allow sdk_sandbox_current radio_service (service_manager (find)))
(allow sdk_sandbox_current surfaceflinger_service (service_manager (find)))
(allow sdk_sandbox_current activity_service (service_manager (find)))
(allow sdk_sandbox_current activity_task_service (service_manager (find)))
(allow sdk_sandbox_current appops_service (service_manager (find)))
(allow sdk_sandbox_current audio_service (service_manager (find)))
(allow sdk_sandbox_current batterystats_service (service_manager (find)))
(allow sdk_sandbox_current IProxyService_service (service_manager (find)))
(allow sdk_sandbox_current connectivity_service (service_manager (find)))
(allow sdk_sandbox_current connmetrics_service (service_manager (find)))
(allow sdk_sandbox_current deviceidle_service (service_manager (find)))
(allow sdk_sandbox_current display_service (service_manager (find)))
(allow sdk_sandbox_current font_service (service_manager (find)))
(allow sdk_sandbox_current dropbox_service (service_manager (find)))
(allow sdk_sandbox_current platform_compat_service (service_manager (find)))
(allow sdk_sandbox_current game_service (service_manager (find)))
(allow sdk_sandbox_current graphicsstats_service (service_manager (find)))
(allow sdk_sandbox_current hardware_properties_service (service_manager (find)))
(allow sdk_sandbox_current hint_service (service_manager (find)))
(allow sdk_sandbox_current imms_service (service_manager (find)))
(allow sdk_sandbox_current input_method_service (service_manager (find)))
(allow sdk_sandbox_current input_service (service_manager (find)))
(allow sdk_sandbox_current ipsec_service (service_manager (find)))
(allow sdk_sandbox_current launcherapps_service (service_manager (find)))
(allow sdk_sandbox_current legacy_permission_service (service_manager (find)))
(allow sdk_sandbox_current light_service (service_manager (find)))
(allow sdk_sandbox_current locale_service (service_manager (find)))
(allow sdk_sandbox_current media_communication_service (service_manager (find)))
(allow sdk_sandbox_current media_projection_service (service_manager (find)))
(allow sdk_sandbox_current media_router_service (service_manager (find)))
(allow sdk_sandbox_current media_session_service (service_manager (find)))
(allow sdk_sandbox_current memtrackproxy_service (service_manager (find)))
(allow sdk_sandbox_current midi_service (service_manager (find)))
(allow sdk_sandbox_current netpolicy_service (service_manager (find)))
(allow sdk_sandbox_current netstats_service (service_manager (find)))
(allow sdk_sandbox_current network_management_service (service_manager (find)))
(allow sdk_sandbox_current notification_service (service_manager (find)))
(allow sdk_sandbox_current package_service (service_manager (find)))
(allow sdk_sandbox_current permission_service (service_manager (find)))
(allow sdk_sandbox_current permissionmgr_service (service_manager (find)))
(allow sdk_sandbox_current permission_checker_service (service_manager (find)))
(allow sdk_sandbox_current power_service (service_manager (find)))
(allow sdk_sandbox_current procstats_service (service_manager (find)))
(allow sdk_sandbox_current registry_service (service_manager (find)))
(allow sdk_sandbox_current restrictions_service (service_manager (find)))
(allow sdk_sandbox_current rttmanager_service (service_manager (find)))
(allow sdk_sandbox_current search_service (service_manager (find)))
(allow sdk_sandbox_current selection_toolbar_service (service_manager (find)))
(allow sdk_sandbox_current sensorservice_service (service_manager (find)))
(allow sdk_sandbox_current sensor_privacy_service (service_manager (find)))
(allow sdk_sandbox_current servicediscovery_service (service_manager (find)))
(allow sdk_sandbox_current settings_service (service_manager (find)))
(allow sdk_sandbox_current statusbar_service (service_manager (find)))
(allow sdk_sandbox_current storagestats_service (service_manager (find)))
(allow sdk_sandbox_current speech_recognition_service (service_manager (find)))
(allow sdk_sandbox_current textclassification_service (service_manager (find)))
(allow sdk_sandbox_current textservices_service (service_manager (find)))
(allow sdk_sandbox_current texttospeech_service (service_manager (find)))
(allow sdk_sandbox_current telecom_service (service_manager (find)))
(allow sdk_sandbox_current thermal_service (service_manager (find)))
(allow sdk_sandbox_current translation_service (service_manager (find)))
(allow sdk_sandbox_current tv_iapp_service (service_manager (find)))
(allow sdk_sandbox_current tv_input_service (service_manager (find)))
(allow sdk_sandbox_current uimode_service (service_manager (find)))
(allow sdk_sandbox_current vcn_management_service (service_manager (find)))
(allow sdk_sandbox_current webviewupdate_service (service_manager (find)))
(allow sdk_sandbox_current tethering_service (service_manager (find)))
;;* lme

(typetransition sdk_sandbox_next tmpfs file appdomain_tmpfs)
;;* lmx 11 system/sepolicy/private/sdk_sandbox_next.te

(allow sdk_sandbox_next sdk_sandbox_next_userfaultfd (anon_inode (ioctl read create)))
;;* lme

(dontaudit su sdk_sandbox_next_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lmx 11 system/sepolicy/private/sdk_sandbox_next.te

(neverallow base_typeattr_1042 sdk_sandbox_next_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 11 system/sepolicy/private/sdk_sandbox_next.te

(allow sdk_sandbox_next appdomain_tmpfs (file (read write getattr map execute)))
;;* lme

;;* lmx 11 system/sepolicy/private/sdk_sandbox_next.te

(allow sdk_sandbox_next appdomain (memfd_file (read write getattr map execute)))
;;* lme

;;* lmx 11 system/sepolicy/private/sdk_sandbox_next.te

(neverallow base_typeattr_1043 base_typeattr_1042 (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 11 system/sepolicy/private/sdk_sandbox_next.te

(neverallow base_typeattr_1044 sdk_sandbox_next (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 11 system/sepolicy/private/sdk_sandbox_next.te

(neverallow base_typeattr_1045 sdk_sandbox_next (process (ptrace)))
;;* lme

;;* lmx 11 system/sepolicy/private/sdk_sandbox_next.te

(neverallow sdk_sandbox_next base_typeattr_1046 (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 88 system/sepolicy/private/sdk_sandbox_next.te

(allow sdk_sandbox_next audioserver_service (service_manager (find)))
(allow sdk_sandbox_next batteryproperties_service (service_manager (find)))
(allow sdk_sandbox_next gpu_service (service_manager (find)))
(allow sdk_sandbox_next mediaserver_service (service_manager (find)))
(allow sdk_sandbox_next mediametrics_service (service_manager (find)))
(allow sdk_sandbox_next mediaextractor_service (service_manager (find)))
(allow sdk_sandbox_next surfaceflinger_service (service_manager (find)))
(allow sdk_sandbox_next activity_service (service_manager (find)))
(allow sdk_sandbox_next activity_task_service (service_manager (find)))
(allow sdk_sandbox_next appops_service (service_manager (find)))
(allow sdk_sandbox_next audio_service (service_manager (find)))
(allow sdk_sandbox_next batterystats_service (service_manager (find)))
(allow sdk_sandbox_next IProxyService_service (service_manager (find)))
(allow sdk_sandbox_next connectivity_service (service_manager (find)))
(allow sdk_sandbox_next connmetrics_service (service_manager (find)))
(allow sdk_sandbox_next deviceidle_service (service_manager (find)))
(allow sdk_sandbox_next display_service (service_manager (find)))
(allow sdk_sandbox_next font_service (service_manager (find)))
(allow sdk_sandbox_next dropbox_service (service_manager (find)))
(allow sdk_sandbox_next platform_compat_service (service_manager (find)))
(allow sdk_sandbox_next game_service (service_manager (find)))
(allow sdk_sandbox_next graphicsstats_service (service_manager (find)))
(allow sdk_sandbox_next hardware_properties_service (service_manager (find)))
(allow sdk_sandbox_next hint_service (service_manager (find)))
(allow sdk_sandbox_next imms_service (service_manager (find)))
(allow sdk_sandbox_next input_method_service (service_manager (find)))
(allow sdk_sandbox_next input_service (service_manager (find)))
(allow sdk_sandbox_next ipsec_service (service_manager (find)))
(allow sdk_sandbox_next launcherapps_service (service_manager (find)))
(allow sdk_sandbox_next legacy_permission_service (service_manager (find)))
(allow sdk_sandbox_next light_service (service_manager (find)))
(allow sdk_sandbox_next locale_service (service_manager (find)))
(allow sdk_sandbox_next media_communication_service (service_manager (find)))
(allow sdk_sandbox_next media_projection_service (service_manager (find)))
(allow sdk_sandbox_next media_router_service (service_manager (find)))
(allow sdk_sandbox_next media_session_service (service_manager (find)))
(allow sdk_sandbox_next memtrackproxy_service (service_manager (find)))
(allow sdk_sandbox_next midi_service (service_manager (find)))
(allow sdk_sandbox_next netpolicy_service (service_manager (find)))
(allow sdk_sandbox_next netstats_service (service_manager (find)))
(allow sdk_sandbox_next network_management_service (service_manager (find)))
(allow sdk_sandbox_next notification_service (service_manager (find)))
(allow sdk_sandbox_next package_service (service_manager (find)))
(allow sdk_sandbox_next permission_service (service_manager (find)))
(allow sdk_sandbox_next permissionmgr_service (service_manager (find)))
(allow sdk_sandbox_next permission_checker_service (service_manager (find)))
(allow sdk_sandbox_next power_service (service_manager (find)))
(allow sdk_sandbox_next procstats_service (service_manager (find)))
(allow sdk_sandbox_next registry_service (service_manager (find)))
(allow sdk_sandbox_next restrictions_service (service_manager (find)))
(allow sdk_sandbox_next rttmanager_service (service_manager (find)))
(allow sdk_sandbox_next search_service (service_manager (find)))
(allow sdk_sandbox_next selection_toolbar_service (service_manager (find)))
(allow sdk_sandbox_next sensorservice_service (service_manager (find)))
(allow sdk_sandbox_next sensor_privacy_service (service_manager (find)))
(allow sdk_sandbox_next servicediscovery_service (service_manager (find)))
(allow sdk_sandbox_next settings_service (service_manager (find)))
(allow sdk_sandbox_next statusbar_service (service_manager (find)))
(allow sdk_sandbox_next storagestats_service (service_manager (find)))
(allow sdk_sandbox_next speech_recognition_service (service_manager (find)))
(allow sdk_sandbox_next textclassification_service (service_manager (find)))
(allow sdk_sandbox_next textservices_service (service_manager (find)))
(allow sdk_sandbox_next texttospeech_service (service_manager (find)))
(allow sdk_sandbox_next telecom_service (service_manager (find)))
(allow sdk_sandbox_next thermal_service (service_manager (find)))
(allow sdk_sandbox_next translation_service (service_manager (find)))
(allow sdk_sandbox_next tv_iapp_service (service_manager (find)))
(allow sdk_sandbox_next tv_input_service (service_manager (find)))
(allow sdk_sandbox_next uimode_service (service_manager (find)))
(allow sdk_sandbox_next vcn_management_service (service_manager (find)))
(allow sdk_sandbox_next webviewupdate_service (service_manager (find)))
(allow sdk_sandbox_next tethering_service (service_manager (find)))
;;* lme

(typetransition secure_element tmpfs file appdomain_tmpfs)
;;* lmx 4 system/sepolicy/private/secure_element.te

(allow secure_element secure_element_userfaultfd (anon_inode (ioctl read create)))
;;* lme

(dontaudit su secure_element_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lmx 4 system/sepolicy/private/secure_element.te

(neverallow base_typeattr_1047 secure_element_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 4 system/sepolicy/private/secure_element.te

(allow secure_element appdomain_tmpfs (file (read write getattr map execute)))
;;* lme

;;* lmx 4 system/sepolicy/private/secure_element.te

(allow secure_element appdomain (memfd_file (read write getattr map execute)))
;;* lme

;;* lmx 4 system/sepolicy/private/secure_element.te

(neverallow base_typeattr_1048 base_typeattr_1047 (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 4 system/sepolicy/private/secure_element.te

(neverallow base_typeattr_1049 secure_element (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 4 system/sepolicy/private/secure_element.te

(neverallow base_typeattr_1050 secure_element (process (ptrace)))
;;* lme

;;* lmx 4 system/sepolicy/private/secure_element.te

(neverallow secure_element base_typeattr_1051 (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 8 system/sepolicy/private/secure_element.te

(allow secure_element app_api_service (service_manager (find)))
;;* lme

;;* lmx 9 system/sepolicy/private/secure_element.te

(allow secure_element hal_secure_element (memfd_file (read write getattr map)))
;;* lme

;;* lmx 9 system/sepolicy/private/secure_element.te

(allow hal_secure_element secure_element (memfd_file (read write getattr map)))
;;* lme

;;* lmx 14 system/sepolicy/private/secure_element.te

(allow secure_element shell_data_file (file (read)))
;;* lme

;;* lmx 16 system/sepolicy/private/secure_element.te

(allow secure_element vendor_uuid_mapping_config_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 1 system/sepolicy/private/sensor_service_server.te

(allow sensor_service_server fwk_sensor_hwservice (hwservice_manager (add find)))
;;* lme

;;* lmx 1 system/sepolicy/private/sensor_service_server.te

(allow sensor_service_server hidl_base_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 1 system/sepolicy/private/sensor_service_server.te

(neverallow base_typeattr_1052 fwk_sensor_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 6 system/sepolicy/private/serialservice.te

(allow init serialservice_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 6 system/sepolicy/private/serialservice.te

(allow init serialservice (process (transition)))
;;* lme

;;* lmx 6 system/sepolicy/private/serialservice.te

(allow serialservice serialservice_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init serialservice (process (noatsecure)))
;;* lmx 6 system/sepolicy/private/serialservice.te

(allow init serialservice (process (siginh rlimitinh)))
;;* lme

(typetransition init serialservice_exec process serialservice)
;;* lmx 9 system/sepolicy/private/serialservice.te

(allow serialservice servicemanager (binder (call transfer)))
;;* lme

;;* lmx 9 system/sepolicy/private/serialservice.te

(allow servicemanager serialservice (binder (call transfer)))
;;* lme

;;* lmx 12 system/sepolicy/private/serialservice.te

(allow serialservice native_serial_service (service_manager (add find)))
;;* lme

;;* lmx 12 system/sepolicy/private/serialservice.te

(neverallow base_typeattr_1053 native_serial_service (service_manager (add)))
;;* lme

;;* lmx 12 system/sepolicy/private/serialservice.te

(allow serialservice su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 15 system/sepolicy/private/serialservice.te

(allow serialservice device (dir (ioctl read getattr lock open watch watch_reads search)))
(allow serialservice devpts (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 18 system/sepolicy/private/serialservice.te

(allow serialservice proc_tty_drivers (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 21 system/sepolicy/private/serialservice.te

(allow serialservice serial_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
(allow serialservice usb_serial_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

(typetransition serialservice devpts chr_file serialservice_devpts)
;;* lmx 24 system/sepolicy/private/serialservice.te

(allow serialservice serialservice_devpts (chr_file (ioctl read write getattr open)))
;;* lme

;;* lmx 24 system/sepolicy/private/serialservice.te

(allowx serialservice serialservice_devpts (ioctl chr_file ((range 0x5401 0x5404) 0x540b (range 0x540e 0x5411) (range 0x5413 0x5414) (range 0x5450 0x5451))))
;;* lme

;;* lmx 24 system/sepolicy/private/serialservice.te

(neverallowx base_typeattr_248 serialservice_devpts (ioctl chr_file (0x5412)))
;;* lme

;;* lmx 27 system/sepolicy/private/serialservice.te

(neverallow base_typeattr_1053 serialservice_devpts (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
;;* lme

;;* lmx 30 system/sepolicy/private/serialservice.te

(allow serialservice sysfs_usb (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 30 system/sepolicy/private/serialservice.te

(allow serialservice sysfs_usb (file (ioctl read getattr lock map open watch watch_reads)))
(allow serialservice sysfs_usb (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 33 system/sepolicy/private/serialservice.te

(allow serialservice sysfs (file (getattr)))
;;* lme

;;* lmx 110 system/sepolicy/private/service.te

(neverallow domain base_typeattr_1054 (service_manager (add find)))
;;* lme

;;* lmx 3 system/sepolicy/private/servicemanager.te

(allow init servicemanager_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 3 system/sepolicy/private/servicemanager.te

(allow init servicemanager (process (transition)))
;;* lme

;;* lmx 3 system/sepolicy/private/servicemanager.te

(allow servicemanager servicemanager_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init servicemanager (process (noatsecure)))
;;* lmx 3 system/sepolicy/private/servicemanager.te

(allow init servicemanager (process (siginh rlimitinh)))
;;* lme

(typetransition init servicemanager_exec process servicemanager)
;;* lmx 5 system/sepolicy/private/servicemanager.te

(allow servicemanager runtime_event_log_tags_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 7 system/sepolicy/private/servicemanager.te

(allow servicemanager property_socket (sock_file (write)))
;;* lme

;;* lmx 7 system/sepolicy/private/servicemanager.te

(allow servicemanager init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 7 system/sepolicy/private/servicemanager.te

(allow servicemanager ctl_interface_start_prop (property_service (set)))
;;* lme

;;* lmx 7 system/sepolicy/private/servicemanager.te

(allow servicemanager ctl_interface_start_prop (file (read getattr map open)))
;;* lme

;;* lmx 8 system/sepolicy/private/servicemanager.te

(allow servicemanager property_socket (sock_file (write)))
;;* lme

;;* lmx 8 system/sepolicy/private/servicemanager.te

(allow servicemanager init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 8 system/sepolicy/private/servicemanager.te

(allow servicemanager servicemanager_prop (property_service (set)))
;;* lme

;;* lmx 8 system/sepolicy/private/servicemanager.te

(allow servicemanager servicemanager_prop (file (read getattr map open)))
;;* lme

;;* lmx 11 system/sepolicy/private/servicemanager.te

(allow servicemanager system_bootstrap_lib_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 11 system/sepolicy/private/servicemanager.te

(allow servicemanager system_bootstrap_lib_file (file (read getattr map execute open)))
;;* lme

;;* lmx 14 system/sepolicy/private/servicemanager.te

(allow servicemanager apex_mnt_dir (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 14 system/sepolicy/private/servicemanager.te

(allow servicemanager apex_info_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 14 system/sepolicy/private/servicemanager.te

(allow servicemanager vendor_apex_metadata_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 14 system/sepolicy/private/servicemanager.te

(allow servicemanager vendor_apex_metadata_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow servicemanager vendor_apex_metadata_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 22 system/sepolicy/private/servicemanager.te

(allow servicemanager self (binder (set_context_mgr)))
;;* lme

;;* lmx 29 system/sepolicy/private/servicemanager.te

(allow servicemanager base_typeattr_1055 (binder (transfer)))
;;* lme

;;* lmx 32 system/sepolicy/private/servicemanager.te

(allow servicemanager self (capability (sys_nice)))
(allow servicemanager self (cap_userns (sys_nice)))
;;* lme

;;* lmx 34 system/sepolicy/private/servicemanager.te

(allow servicemanager service_contexts_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 36 system/sepolicy/private/servicemanager.te

(allow servicemanager vendor_service_contexts_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 41 system/sepolicy/private/servicemanager.te

(allow servicemanager service_manager_service (service_manager (add find)))
;;* lme

;;* lmx 41 system/sepolicy/private/servicemanager.te

(neverallow base_typeattr_1056 service_manager_service (service_manager (add)))
;;* lme

;;* lmx 41 system/sepolicy/private/servicemanager.te

(allow servicemanager su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 42 system/sepolicy/private/servicemanager.te

(allow servicemanager dumpstate (fd (use)))
;;* lme

;;* lmx 43 system/sepolicy/private/servicemanager.te

(allow servicemanager dumpstate (fifo_file (write)))
;;* lme

;;* lmx 46 system/sepolicy/private/servicemanager.te

(allow servicemanager selinuxfs (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 46 system/sepolicy/private/servicemanager.te

(allow servicemanager selinuxfs (file (ioctl read getattr lock map open watch watch_reads)))
(allow servicemanager selinuxfs (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 46 system/sepolicy/private/servicemanager.te

(allow servicemanager selinuxfs (file (write lock append map open)))
;;* lme

;;* lmx 46 system/sepolicy/private/servicemanager.te

(allow servicemanager kernel (security (compute_av)))
;;* lme

;;* lmx 46 system/sepolicy/private/servicemanager.te

(allow servicemanager self (netlink_selinux_socket (read write create getattr setattr lock relabelfrom relabelto append bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
;;* lme

;;* lmx 48 system/sepolicy/private/servicemanager.te

(allow servicemanager kmsg_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 50 system/sepolicy/private/servicemanager.te

(allow servicemanager traced (fd (use)))
;;* lme

;;* lmx 50 system/sepolicy/private/servicemanager.te

(allow servicemanager traced_tmpfs (file (read write getattr map)))
;;* lme

;;* lmx 50 system/sepolicy/private/servicemanager.te

(allow servicemanager traced (memfd_file (read write getattr map)))
;;* lme

;;* lmx 50 system/sepolicy/private/servicemanager.te

(allow servicemanager traced_producer_socket (sock_file (write)))
;;* lme

;;* lmx 50 system/sepolicy/private/servicemanager.te

(allow servicemanager traced (unix_stream_socket (connectto)))
;;* lme

;;* lmx 50 system/sepolicy/private/servicemanager.te

(allow traced servicemanager (fd (use)))
;;* lme

;;* lmx 4 system/sepolicy/private/sgdisk.te

(allow sgdisk block_device (dir (search)))
;;* lme

;;* lmx 5 system/sepolicy/private/sgdisk.te

(allow sgdisk vold_device (blk_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 8 system/sepolicy/private/sgdisk.te

(allowx sgdisk vold_device (ioctl blk_file (0x301)))
;;* lme

;;* lmx 15 system/sepolicy/private/sgdisk.te

(allowx sgdisk vold_device (ioctl blk_file (0x1260)))
;;* lme

;;* lmx 17 system/sepolicy/private/sgdisk.te

(allowx sgdisk vold_device (ioctl blk_file (0x125f)))
;;* lme

;;* lmx 19 system/sepolicy/private/sgdisk.te

(allowx sgdisk vold_device (ioctl blk_file (0x127b)))
;;* lme

;;* lmx 22 system/sepolicy/private/sgdisk.te

(allow sgdisk devpts (chr_file (ioctl read write getattr)))
;;* lme

;;* lmx 25 system/sepolicy/private/sgdisk.te

(allow sgdisk vold (fd (use)))
;;* lme

;;* lmx 26 system/sepolicy/private/sgdisk.te

(allow sgdisk vold (fifo_file (read write getattr)))
;;* lme

;;* lmx 29 system/sepolicy/private/sgdisk.te

(allow sgdisk self (capability (sys_admin)))
(allow sgdisk self (cap_userns (sys_admin)))
;;* lme

;;* lmx 36 system/sepolicy/private/sgdisk.te

(neverallow base_typeattr_331 sgdisk (process (transition)))
;;* lme

;;* lmx 37 system/sepolicy/private/sgdisk.te

(neverallow base_typeattr_248 sgdisk (process (dyntransition)))
;;* lme

;;* lmx 38 system/sepolicy/private/sgdisk.te

(neverallow sgdisk base_typeattr_1057 (file (entrypoint)))
;;* lme

(typetransition shared_relro tmpfs file appdomain_tmpfs)
;;* lmx 5 system/sepolicy/private/shared_relro.te

(allow shared_relro shared_relro_userfaultfd (anon_inode (ioctl read create)))
;;* lme

(dontaudit su shared_relro_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lmx 5 system/sepolicy/private/shared_relro.te

(neverallow base_typeattr_1058 shared_relro_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 5 system/sepolicy/private/shared_relro.te

(allow shared_relro appdomain_tmpfs (file (read write getattr map execute)))
;;* lme

;;* lmx 5 system/sepolicy/private/shared_relro.te

(allow shared_relro appdomain (memfd_file (read write getattr map execute)))
;;* lme

;;* lmx 5 system/sepolicy/private/shared_relro.te

(neverallow base_typeattr_1059 base_typeattr_1058 (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 5 system/sepolicy/private/shared_relro.te

(neverallow base_typeattr_1060 shared_relro (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 5 system/sepolicy/private/shared_relro.te

(neverallow base_typeattr_1061 shared_relro (process (ptrace)))
;;* lme

;;* lmx 5 system/sepolicy/private/shared_relro.te

(neverallow shared_relro base_typeattr_1062 (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 7 system/sepolicy/private/shared_relro.te

(allow shared_relro shared_relro_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
;;* lme

;;* lmx 8 system/sepolicy/private/shared_relro.te

(allow shared_relro shared_relro_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 10 system/sepolicy/private/shared_relro.te

(allow shared_relro activity_service (service_manager (find)))
;;* lme

;;* lmx 11 system/sepolicy/private/shared_relro.te

(allow shared_relro webviewupdate_service (service_manager (find)))
;;* lme

;;* lmx 12 system/sepolicy/private/shared_relro.te

(allow shared_relro package_service (service_manager (find)))
;;* lme

(dontaudit shared_relro network_management_service (service_manager (find)))
;;* lmx 4 system/sepolicy/private/shell.te

(allow shell uhid_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 7 system/sepolicy/private/shell.te

(allow shell debugfs_tracing_debug (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 8 system/sepolicy/private/shell.te

(allow shell debugfs_tracing (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 9 system/sepolicy/private/shell.te

(allow shell debugfs_tracing (file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 10 system/sepolicy/private/shell.te

(allow shell debugfs_trace_marker (file (getattr)))
;;* lme

;;* lmx 11 system/sepolicy/private/shell.te

(allow shell atrace_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lme

;;* lmx 13 system/sepolicy/private/shell.te

(allow shell debugfs_tracing_debug (file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 18 system/sepolicy/private/shell.te

(allow shell config_gz (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 21 system/sepolicy/private/shell.te

(allow shell tombstone_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 22 system/sepolicy/private/shell.te

(allow shell tombstone_data_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

(typetransition shell tmpfs file appdomain_tmpfs)
;;* lmx 26 system/sepolicy/private/shell.te

(allow shell shell_userfaultfd (anon_inode (ioctl read create)))
;;* lme

(dontaudit su shell_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lmx 26 system/sepolicy/private/shell.te

(neverallow base_typeattr_437 shell_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 26 system/sepolicy/private/shell.te

(allow shell appdomain_tmpfs (file (read write getattr map execute)))
;;* lme

;;* lmx 26 system/sepolicy/private/shell.te

(allow shell appdomain (memfd_file (read write getattr map execute)))
;;* lme

;;* lmx 26 system/sepolicy/private/shell.te

(neverallow base_typeattr_1063 base_typeattr_437 (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 26 system/sepolicy/private/shell.te

(neverallow base_typeattr_1022 shell (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 26 system/sepolicy/private/shell.te

(neverallow base_typeattr_1064 shell (process (ptrace)))
;;* lme

;;* lmx 26 system/sepolicy/private/shell.te

(neverallow shell base_typeattr_1065 (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 29 system/sepolicy/private/shell.te

(allow shell storaged (binder (call transfer)))
;;* lme

;;* lmx 29 system/sepolicy/private/shell.te

(allow storaged shell (binder (transfer)))
;;* lme

;;* lmx 29 system/sepolicy/private/shell.te

(allow shell storaged (fd (use)))
;;* lme

;;* lmx 32 system/sepolicy/private/shell.te

(allow shell selinuxfs (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 32 system/sepolicy/private/shell.te

(allow shell selinuxfs (file (ioctl read getattr lock map open watch watch_reads)))
(allow shell selinuxfs (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 32 system/sepolicy/private/shell.te

(allow shell selinuxfs (file (write lock append map open)))
;;* lme

;;* lmx 32 system/sepolicy/private/shell.te

(allow shell kernel (security (compute_av)))
;;* lme

;;* lmx 32 system/sepolicy/private/shell.te

(allow shell self (netlink_selinux_socket (read write create getattr setattr lock relabelfrom relabelto append bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
;;* lme

;;* lmx 33 system/sepolicy/private/shell.te

(allow shell selinuxfs (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 33 system/sepolicy/private/shell.te

(allow shell selinuxfs (file (ioctl read getattr lock map open watch watch_reads)))
(allow shell selinuxfs (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 33 system/sepolicy/private/shell.te

(allow shell selinuxfs (file (write lock append map open)))
;;* lme

;;* lmx 33 system/sepolicy/private/shell.te

(allow shell kernel (security (check_context)))
;;* lme

;;* lmx 37 system/sepolicy/private/shell.te

(allow shell traced_consumer_socket (sock_file (write)))
;;* lme

;;* lmx 37 system/sepolicy/private/shell.te

(allow shell traced (unix_stream_socket (connectto)))
;;* lme

;;* lmx 41 system/sepolicy/private/shell.te

(allow shell traced (fd (use)))
;;* lme

;;* lmx 41 system/sepolicy/private/shell.te

(allow shell traced_tmpfs (file (read write getattr map)))
;;* lme

;;* lmx 41 system/sepolicy/private/shell.te

(allow shell traced (memfd_file (read write getattr map)))
;;* lme

;;* lmx 41 system/sepolicy/private/shell.te

(allow shell traced_producer_socket (sock_file (write)))
;;* lme

;;* lmx 41 system/sepolicy/private/shell.te

(allow shell traced (unix_stream_socket (connectto)))
;;* lme

;;* lmx 41 system/sepolicy/private/shell.te

(allow traced shell (fd (use)))
;;* lme

;;* lmx 43 system/sepolicy/private/shell.te

(allow shell vendor_shell_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 43 system/sepolicy/private/shell.te

(allow shell vendor_shell (process (transition)))
;;* lme

;;* lmx 43 system/sepolicy/private/shell.te

(allow vendor_shell vendor_shell_exec (file (read getattr map execute open entrypoint)))
;;* lme

;;* lmx 43 system/sepolicy/private/shell.te

(allow vendor_shell shell (process (sigchld)))
;;* lme

(dontaudit shell vendor_shell (process (noatsecure)))
;;* lmx 43 system/sepolicy/private/shell.te

(allow shell vendor_shell (process (siginh rlimitinh)))
;;* lme

(typetransition shell vendor_shell_exec process vendor_shell)
;;* lmx 46 system/sepolicy/private/shell.te

(allow shell tradeinmode_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 46 system/sepolicy/private/shell.te

(allow shell tradeinmode (process (transition)))
;;* lme

;;* lmx 46 system/sepolicy/private/shell.te

(allow tradeinmode tradeinmode_exec (file (read getattr map execute open entrypoint)))
;;* lme

;;* lmx 46 system/sepolicy/private/shell.te

(allow tradeinmode shell (process (sigchld)))
;;* lme

(dontaudit shell tradeinmode (process (noatsecure)))
;;* lmx 46 system/sepolicy/private/shell.te

(allow shell tradeinmode (process (siginh rlimitinh)))
;;* lme

(typetransition shell tradeinmode_exec process tradeinmode)
;;* lmx 51 system/sepolicy/private/shell.te

(allow shell perfetto_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 51 system/sepolicy/private/shell.te

(allow shell perfetto (process (transition)))
;;* lme

;;* lmx 51 system/sepolicy/private/shell.te

(allow perfetto perfetto_exec (file (read getattr map execute open entrypoint)))
;;* lme

;;* lmx 51 system/sepolicy/private/shell.te

(allow perfetto shell (process (sigchld)))
;;* lme

(dontaudit shell perfetto (process (noatsecure)))
;;* lmx 51 system/sepolicy/private/shell.te

(allow shell perfetto (process (siginh rlimitinh)))
;;* lme

(typetransition shell perfetto_exec process perfetto)
;;* lmx 53 system/sepolicy/private/shell.te

(allow shell perfetto (process (signal)))
;;* lme

;;* lmx 56 system/sepolicy/private/shell.te

(allow shell statsd (binder (call transfer)))
;;* lme

;;* lmx 56 system/sepolicy/private/shell.te

(allow statsd shell (binder (transfer)))
;;* lme

;;* lmx 56 system/sepolicy/private/shell.te

(allow shell statsd (fd (use)))
;;* lme

;;* lmx 59 system/sepolicy/private/shell.te

(allow shell accessibility_trace_data_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
;;* lme

;;* lmx 59 system/sepolicy/private/shell.te

(allow shell accessibility_trace_data_file (file (ioctl read getattr lock map unlink open watch watch_reads)))
;;* lme

;;* lmx 65 system/sepolicy/private/shell.te

(allow shell perfetto_traces_data_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
;;* lme

;;* lmx 66 system/sepolicy/private/shell.te

(allow shell perfetto_traces_data_file (file (ioctl read getattr lock map unlink open watch watch_reads)))
;;* lme

;;* lmx 68 system/sepolicy/private/shell.te

(allow shell perfetto_traces_bugreport_data_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
;;* lme

;;* lmx 69 system/sepolicy/private/shell.te

(allow shell perfetto_traces_bugreport_data_file (file (ioctl read getattr lock map unlink open watch watch_reads)))
;;* lme

;;* lmx 71 system/sepolicy/private/shell.te

(allow shell perfetto_traces_profiling_data_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
;;* lme

;;* lmx 72 system/sepolicy/private/shell.te

(allow shell perfetto_traces_profiling_data_file (file (ioctl read getattr lock map unlink open watch watch_reads)))
;;* lme

;;* lmx 75 system/sepolicy/private/shell.te

(allow shell perfetto_configs_data_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
;;* lme

;;* lmx 76 system/sepolicy/private/shell.te

(allow shell perfetto_configs_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 79 system/sepolicy/private/shell.te

(allow shell gpuservice (binder (call transfer)))
;;* lme

;;* lmx 79 system/sepolicy/private/shell.te

(allow gpuservice shell (binder (transfer)))
;;* lme

;;* lmx 79 system/sepolicy/private/shell.te

(allow shell gpuservice (fd (use)))
;;* lme

;;* lmx 82 system/sepolicy/private/shell.te

(allow shell hal_atrace (memfd_file (read write getattr map)))
;;* lme

;;* lmx 82 system/sepolicy/private/shell.te

(allow hal_atrace shell (memfd_file (read write getattr map)))
;;* lme

;;* lmx 85 system/sepolicy/private/shell.te

(allow shell proc_net_tcp_udp (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 89 system/sepolicy/private/shell.te

(allow shell system_linker_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lme

;;* lmx 93 system/sepolicy/private/shell.te

(allow shell rs_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lme

;;* lmx 97 system/sepolicy/private/shell.te

(allow shell dex2oat_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lme

;;* lmx 98 system/sepolicy/private/shell.te

(allow shell dex2oat_exec (lnk_file (read)))
;;* lme

;;* lmx 101 system/sepolicy/private/shell.te

(allow shell property_socket (sock_file (write)))
;;* lme

;;* lmx 101 system/sepolicy/private/shell.te

(allow shell init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 101 system/sepolicy/private/shell.te

(allow shell lpdumpd_prop (property_service (set)))
;;* lme

;;* lmx 101 system/sepolicy/private/shell.te

(allow shell lpdumpd_prop (file (read getattr map open)))
;;* lme

;;* lmx 102 system/sepolicy/private/shell.te

(allow shell lpdumpd (binder (call transfer)))
;;* lme

;;* lmx 102 system/sepolicy/private/shell.te

(allow lpdumpd shell (binder (transfer)))
;;* lme

;;* lmx 102 system/sepolicy/private/shell.te

(allow shell lpdumpd (fd (use)))
;;* lme

;;* lmx 106 system/sepolicy/private/shell.te

(allow shell property_socket (sock_file (write)))
;;* lme

;;* lmx 106 system/sepolicy/private/shell.te

(allow shell init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 106 system/sepolicy/private/shell.te

(allow shell userspace_reboot_test_prop (property_service (set)))
;;* lme

;;* lmx 106 system/sepolicy/private/shell.te

(allow shell userspace_reboot_test_prop (file (read getattr map open)))
;;* lme

;;* lmx 109 system/sepolicy/private/shell.te

(allow shell property_socket (sock_file (write)))
;;* lme

;;* lmx 109 system/sepolicy/private/shell.te

(allow shell init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 109 system/sepolicy/private/shell.te

(allow shell power_debug_prop (property_service (set)))
;;* lme

;;* lmx 109 system/sepolicy/private/shell.te

(allow shell power_debug_prop (file (read getattr map open)))
;;* lme

;;* lmx 112 system/sepolicy/private/shell.te

(allow shell property_socket (sock_file (write)))
;;* lme

;;* lmx 112 system/sepolicy/private/shell.te

(allow shell init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 112 system/sepolicy/private/shell.te

(allow shell rollback_test_prop (property_service (set)))
;;* lme

;;* lmx 112 system/sepolicy/private/shell.te

(allow shell rollback_test_prop (file (read getattr map open)))
;;* lme

;;* lmx 115 system/sepolicy/private/shell.te

(allow shell property_socket (sock_file (write)))
;;* lme

;;* lmx 115 system/sepolicy/private/shell.te

(allow shell init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 115 system/sepolicy/private/shell.te

(allow shell remote_prov_prop (property_service (set)))
;;* lme

;;* lmx 115 system/sepolicy/private/shell.te

(allow shell remote_prov_prop (file (read getattr map open)))
;;* lme

;;* lmx 118 system/sepolicy/private/shell.te

(allow shell property_socket (sock_file (write)))
;;* lme

;;* lmx 118 system/sepolicy/private/shell.te

(allow shell init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 118 system/sepolicy/private/shell.te

(allow shell bionic_linker_16kb_app_compat_prop (property_service (set)))
;;* lme

;;* lmx 118 system/sepolicy/private/shell.te

(allow shell bionic_linker_16kb_app_compat_prop (file (read getattr map open)))
;;* lme

;;* lmx 121 system/sepolicy/private/shell.te

(allow shell property_socket (sock_file (write)))
;;* lme

;;* lmx 121 system/sepolicy/private/shell.te

(allow shell init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 121 system/sepolicy/private/shell.te

(allow shell pm_16kb_app_compat_prop (property_service (set)))
;;* lme

;;* lmx 121 system/sepolicy/private/shell.te

(allow shell pm_16kb_app_compat_prop (file (read getattr map open)))
;;* lme

;;* lmx 124 system/sepolicy/private/shell.te

(allow shell property_socket (sock_file (write)))
;;* lme

;;* lmx 124 system/sepolicy/private/shell.te

(allow shell init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 124 system/sepolicy/private/shell.te

(allow shell hsum_boot_strategy_prop (property_service (set)))
;;* lme

;;* lmx 124 system/sepolicy/private/shell.te

(allow shell hsum_boot_strategy_prop (file (read getattr map open)))
;;* lme

;;* lmx 127 system/sepolicy/private/shell.te

(allow shell property_socket (sock_file (write)))
;;* lme

;;* lmx 127 system/sepolicy/private/shell.te

(allow shell init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 127 system/sepolicy/private/shell.te

(allow shell casefolding_override_prop (property_service (set)))
;;* lme

;;* lmx 127 system/sepolicy/private/shell.te

(allow shell casefolding_override_prop (file (read getattr map open)))
;;* lme

;;* lmx 133 system/sepolicy/private/shell.te

(allowx shell shell_data_file (ioctl dir ((range 0x6615 0x6616))))
;;* lme

;;* lmx 136 system/sepolicy/private/shell.te

(allow shell simpleperf_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lme

;;* lmx 138 system/sepolicy/private/shell.te

(allow shell profcollectd_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lme

;;* lmx 138 system/sepolicy/private/shell.te

(allow shell profcollectd_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 138 system/sepolicy/private/shell.te

(allow shell profcollectd_data_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow shell profcollectd_data_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 138 system/sepolicy/private/shell.te

(allow shell profcollectd (binder (call)))
;;* lme

;;* lmx 150 system/sepolicy/private/shell.te

(allow shell remount_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lme

;;* lmx 154 system/sepolicy/private/shell.te

(allow shell self (perf_event (open read write)))
;;* lme

;;* lmx 157 system/sepolicy/private/shell.te

(allow shell sysfs_devices_cs_etm (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 157 system/sepolicy/private/shell.te

(allow shell sysfs_devices_cs_etm (file (ioctl read getattr lock map open watch watch_reads)))
(allow shell sysfs_devices_cs_etm (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 160 system/sepolicy/private/shell.te

(allow shell vendor_microdroid_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 160 system/sepolicy/private/shell.te

(allow shell vendor_microdroid_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow shell vendor_microdroid_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 163 system/sepolicy/private/shell.te

(allow shell apex_info_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 164 system/sepolicy/private/shell.te

(allow shell vendor_apex_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 165 system/sepolicy/private/shell.te

(allow shell vendor_apex_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 166 system/sepolicy/private/shell.te

(allow shell vendor_apex_metadata_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 169 system/sepolicy/private/shell.te

(allow shell apex_data_file (dir (search)))
;;* lme

;;* lmx 170 system/sepolicy/private/shell.te

(allow shell staging_data_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 172 system/sepolicy/private/shell.te

(allow shell apex_dm_device (blk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 175 system/sepolicy/private/shell.te

(allow shell property_socket (sock_file (write)))
;;* lme

;;* lmx 175 system/sepolicy/private/shell.te

(allow shell init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 175 system/sepolicy/private/shell.te

(allow shell shell_prop (property_service (set)))
;;* lme

;;* lmx 175 system/sepolicy/private/shell.te

(allow shell shell_prop (file (read getattr map open)))
;;* lme

;;* lmx 176 system/sepolicy/private/shell.te

(allow shell property_socket (sock_file (write)))
;;* lme

;;* lmx 176 system/sepolicy/private/shell.te

(allow shell init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 176 system/sepolicy/private/shell.te

(allow shell ctl_bugreport_prop (property_service (set)))
;;* lme

;;* lmx 176 system/sepolicy/private/shell.te

(allow shell ctl_bugreport_prop (file (read getattr map open)))
;;* lme

;;* lmx 177 system/sepolicy/private/shell.te

(allow shell property_socket (sock_file (write)))
;;* lme

;;* lmx 177 system/sepolicy/private/shell.te

(allow shell init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 177 system/sepolicy/private/shell.te

(allow shell ctl_dumpstate_prop (property_service (set)))
;;* lme

;;* lmx 177 system/sepolicy/private/shell.te

(allow shell ctl_dumpstate_prop (file (read getattr map open)))
;;* lme

;;* lmx 178 system/sepolicy/private/shell.te

(allow shell property_socket (sock_file (write)))
;;* lme

;;* lmx 178 system/sepolicy/private/shell.te

(allow shell init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 178 system/sepolicy/private/shell.te

(allow shell dumpstate_prop (property_service (set)))
;;* lme

;;* lmx 178 system/sepolicy/private/shell.te

(allow shell dumpstate_prop (file (read getattr map open)))
;;* lme

;;* lmx 179 system/sepolicy/private/shell.te

(allow shell property_socket (sock_file (write)))
;;* lme

;;* lmx 179 system/sepolicy/private/shell.te

(allow shell init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 179 system/sepolicy/private/shell.te

(allow shell dumpstate_last_id_prop (property_service (set)))
;;* lme

;;* lmx 179 system/sepolicy/private/shell.te

(allow shell dumpstate_last_id_prop (file (read getattr map open)))
;;* lme

;;* lmx 180 system/sepolicy/private/shell.te

(allow shell property_socket (sock_file (write)))
;;* lme

;;* lmx 180 system/sepolicy/private/shell.te

(allow shell init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 180 system/sepolicy/private/shell.te

(allow shell exported_dumpstate_prop (property_service (set)))
;;* lme

;;* lmx 180 system/sepolicy/private/shell.te

(allow shell exported_dumpstate_prop (file (read getattr map open)))
;;* lme

;;* lmx 181 system/sepolicy/private/shell.te

(allow shell property_socket (sock_file (write)))
;;* lme

;;* lmx 181 system/sepolicy/private/shell.te

(allow shell init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 181 system/sepolicy/private/shell.te

(allow shell debug_prop (property_service (set)))
;;* lme

;;* lmx 181 system/sepolicy/private/shell.te

(allow shell debug_prop (file (read getattr map open)))
;;* lme

;;* lmx 182 system/sepolicy/private/shell.te

(allow shell property_socket (sock_file (write)))
;;* lme

;;* lmx 182 system/sepolicy/private/shell.te

(allow shell init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 182 system/sepolicy/private/shell.te

(allow shell perf_drop_caches_prop (property_service (set)))
;;* lme

;;* lmx 182 system/sepolicy/private/shell.te

(allow shell perf_drop_caches_prop (file (read getattr map open)))
;;* lme

;;* lmx 183 system/sepolicy/private/shell.te

(allow shell property_socket (sock_file (write)))
;;* lme

;;* lmx 183 system/sepolicy/private/shell.te

(allow shell init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 183 system/sepolicy/private/shell.te

(allow shell powerctl_prop (property_service (set)))
;;* lme

;;* lmx 183 system/sepolicy/private/shell.te

(allow shell powerctl_prop (file (read getattr map open)))
;;* lme

;;* lmx 184 system/sepolicy/private/shell.te

(allow shell property_socket (sock_file (write)))
;;* lme

;;* lmx 184 system/sepolicy/private/shell.te

(allow shell init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 184 system/sepolicy/private/shell.te

(allow shell log_tag_prop (property_service (set)))
;;* lme

;;* lmx 184 system/sepolicy/private/shell.te

(allow shell log_tag_prop (file (read getattr map open)))
;;* lme

;;* lmx 185 system/sepolicy/private/shell.te

(allow shell property_socket (sock_file (write)))
;;* lme

;;* lmx 185 system/sepolicy/private/shell.te

(allow shell init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 185 system/sepolicy/private/shell.te

(allow shell wifi_log_prop (property_service (set)))
;;* lme

;;* lmx 185 system/sepolicy/private/shell.te

(allow shell wifi_log_prop (file (read getattr map open)))
;;* lme

;;* lmx 188 system/sepolicy/private/shell.te

(allow shell property_socket (sock_file (write)))
;;* lme

;;* lmx 188 system/sepolicy/private/shell.te

(allow shell init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 188 system/sepolicy/private/shell.te

(allow shell traced_enabled_prop (property_service (set)))
;;* lme

;;* lmx 188 system/sepolicy/private/shell.te

(allow shell traced_enabled_prop (file (read getattr map open)))
;;* lme

;;* lmx 190 system/sepolicy/private/shell.te

(allow shell property_socket (sock_file (write)))
;;* lme

;;* lmx 190 system/sepolicy/private/shell.te

(allow shell init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 190 system/sepolicy/private/shell.te

(allow shell logd_auditrate_prop (property_service (set)))
;;* lme

;;* lmx 190 system/sepolicy/private/shell.te

(allow shell logd_auditrate_prop (file (read getattr map open)))
;;* lme

;;* lmx 192 system/sepolicy/private/shell.te

(allow shell property_socket (sock_file (write)))
;;* lme

;;* lmx 192 system/sepolicy/private/shell.te

(allow shell init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 192 system/sepolicy/private/shell.te

(allow shell log_prop (property_service (set)))
;;* lme

;;* lmx 192 system/sepolicy/private/shell.te

(allow shell log_prop (file (read getattr map open)))
;;* lme

;;* lmx 194 system/sepolicy/private/shell.te

(allow shell property_socket (sock_file (write)))
;;* lme

;;* lmx 194 system/sepolicy/private/shell.te

(allow shell init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 194 system/sepolicy/private/shell.te

(allow shell logpersistd_logging_prop (property_service (set)))
;;* lme

;;* lmx 194 system/sepolicy/private/shell.te

(allow shell logpersistd_logging_prop (file (read getattr map open)))
;;* lme

;;* lmx 197 system/sepolicy/private/shell.te

(allow shell property_socket (sock_file (write)))
;;* lme

;;* lmx 197 system/sepolicy/private/shell.te

(allow shell init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 197 system/sepolicy/private/shell.te

(allow shell heapprofd_enabled_prop (property_service (set)))
;;* lme

;;* lmx 197 system/sepolicy/private/shell.te

(allow shell heapprofd_enabled_prop (file (read getattr map open)))
;;* lme

;;* lmx 200 system/sepolicy/private/shell.te

(allow shell property_socket (sock_file (write)))
;;* lme

;;* lmx 200 system/sepolicy/private/shell.te

(allow shell init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 200 system/sepolicy/private/shell.te

(allow shell traced_perf_enabled_prop (property_service (set)))
;;* lme

;;* lmx 200 system/sepolicy/private/shell.te

(allow shell traced_perf_enabled_prop (file (read getattr map open)))
;;* lme

;;* lmx 202 system/sepolicy/private/shell.te

(allow shell property_socket (sock_file (write)))
;;* lme

;;* lmx 202 system/sepolicy/private/shell.te

(allow shell init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 202 system/sepolicy/private/shell.te

(allow shell ctl_gsid_prop (property_service (set)))
;;* lme

;;* lmx 202 system/sepolicy/private/shell.te

(allow shell ctl_gsid_prop (file (read getattr map open)))
;;* lme

;;* lmx 203 system/sepolicy/private/shell.te

(allow shell property_socket (sock_file (write)))
;;* lme

;;* lmx 203 system/sepolicy/private/shell.te

(allow shell init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 203 system/sepolicy/private/shell.te

(allow shell ctl_snapuserd_prop (property_service (set)))
;;* lme

;;* lmx 203 system/sepolicy/private/shell.te

(allow shell ctl_snapuserd_prop (file (read getattr map open)))
;;* lme

;;* lmx 205 system/sepolicy/private/shell.te

(allow shell property_socket (sock_file (write)))
;;* lme

;;* lmx 205 system/sepolicy/private/shell.te

(allow shell init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 205 system/sepolicy/private/shell.te

(allow shell ctl_prefetch_prop (property_service (set)))
;;* lme

;;* lmx 205 system/sepolicy/private/shell.te

(allow shell ctl_prefetch_prop (file (read getattr map open)))
;;* lme

;;* lmx 207 system/sepolicy/private/shell.te

(allow shell property_socket (sock_file (write)))
;;* lme

;;* lmx 207 system/sepolicy/private/shell.te

(allow shell init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 207 system/sepolicy/private/shell.te

(allow shell dynamic_system_prop (property_service (set)))
;;* lme

;;* lmx 207 system/sepolicy/private/shell.te

(allow shell dynamic_system_prop (file (read getattr map open)))
;;* lme

;;* lmx 209 system/sepolicy/private/shell.te

(allow shell property_socket (sock_file (write)))
;;* lme

;;* lmx 209 system/sepolicy/private/shell.te

(allow shell init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 209 system/sepolicy/private/shell.te

(allow shell mock_ota_prop (property_service (set)))
;;* lme

;;* lmx 209 system/sepolicy/private/shell.te

(allow shell mock_ota_prop (file (read getattr map open)))
;;* lme

;;* lmx 212 system/sepolicy/private/shell.te

(allow shell serialno_prop (file (read getattr map open)))
;;* lme

;;* lmx 215 system/sepolicy/private/shell.te

(allow shell vendor_security_patch_level_prop (file (read getattr map open)))
;;* lme

;;* lmx 218 system/sepolicy/private/shell.te

(allow shell device_logging_prop (file (read getattr map open)))
;;* lme

;;* lmx 221 system/sepolicy/private/shell.te

(allow shell bootloader_boot_reason_prop (file (read getattr map open)))
;;* lme

;;* lmx 222 system/sepolicy/private/shell.te

(allow shell last_boot_reason_prop (file (read getattr map open)))
;;* lme

;;* lmx 223 system/sepolicy/private/shell.te

(allow shell system_boot_reason_prop (file (read getattr map open)))
;;* lme

;;* lmx 226 system/sepolicy/private/shell.te

(allow shell hal_keymint (binder (call transfer)))
;;* lme

;;* lmx 226 system/sepolicy/private/shell.te

(allow hal_keymint shell (binder (transfer)))
;;* lme

;;* lmx 226 system/sepolicy/private/shell.te

(allow shell hal_keymint (fd (use)))
;;* lme

;;* lmx 231 system/sepolicy/private/shell.te

(allow shell virtualizationservice (binder (call transfer)))
;;* lme

;;* lmx 231 system/sepolicy/private/shell.te

(allow virtualizationservice shell (binder (transfer)))
;;* lme

;;* lmx 231 system/sepolicy/private/shell.te

(allow shell virtualizationservice (fd (use)))
;;* lme

;;* lmx 234 system/sepolicy/private/shell.te

(allow shell avf_virtualizationservice_prop (file (read getattr map open)))
;;* lme

;;* lmx 237 system/sepolicy/private/shell.te

(allow shell init_perf_lsm_hooks_prop (file (read getattr map open)))
;;* lme

;;* lmx 240 system/sepolicy/private/shell.te

(allow shell build_bootimage_prop (file (read getattr map open)))
;;* lme

;;* lmx 243 system/sepolicy/private/shell.te

(allow shell odsign_prop (file (read getattr map open)))
;;* lme

;;* lmx 245 system/sepolicy/private/shell.te

(allow shell property_socket (sock_file (write)))
;;* lme

;;* lmx 245 system/sepolicy/private/shell.te

(allow shell init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 245 system/sepolicy/private/shell.te

(allow shell persist_debug_prop (property_service (set)))
;;* lme

;;* lmx 245 system/sepolicy/private/shell.te

(allow shell persist_debug_prop (file (read getattr map open)))
;;* lme

;;* lmx 248 system/sepolicy/private/shell.te

(allow shell keystore2_key_contexts_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 251 system/sepolicy/private/shell.te

(allow shell shell_key (keystore2_key (delete get_info rebind update use)))
;;* lme

;;* lmx 256 system/sepolicy/private/shell.te

(allow shell appdomain_tmpfs (file (open)))
;;* lme

;;* lmx 256 system/sepolicy/private/shell.te

(allow shell appdomain (memfd_file (open)))
;;* lme

;;* lmx 262 system/sepolicy/private/shell.te

(allow shell property_socket (sock_file (write)))
;;* lme

;;* lmx 262 system/sepolicy/private/shell.te

(allow shell init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 262 system/sepolicy/private/shell.te

(allow shell sqlite_log_prop (property_service (set)))
;;* lme

;;* lmx 262 system/sepolicy/private/shell.te

(allow shell sqlite_log_prop (file (read getattr map open)))
;;* lme

;;* lmx 265 system/sepolicy/private/shell.te

(allow shell property_socket (sock_file (write)))
;;* lme

;;* lmx 265 system/sepolicy/private/shell.te

(allow shell init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 265 system/sepolicy/private/shell.te

(allow shell arm64_memtag_prop (property_service (set)))
;;* lme

;;* lmx 265 system/sepolicy/private/shell.te

(allow shell arm64_memtag_prop (file (read getattr map open)))
;;* lme

;;* lmx 266 system/sepolicy/private/shell.te

(allow shell property_socket (sock_file (write)))
;;* lme

;;* lmx 266 system/sepolicy/private/shell.te

(allow shell init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 266 system/sepolicy/private/shell.te

(allow shell permissive_mte_prop (property_service (set)))
;;* lme

;;* lmx 266 system/sepolicy/private/shell.te

(allow shell permissive_mte_prop (file (read getattr map open)))
;;* lme

;;* lmx 269 system/sepolicy/private/shell.te

(allow shell property_socket (sock_file (write)))
;;* lme

;;* lmx 269 system/sepolicy/private/shell.te

(allow shell init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 269 system/sepolicy/private/shell.te

(allow shell kcmdline_prop (property_service (set)))
;;* lme

;;* lmx 269 system/sepolicy/private/shell.te

(allow shell kcmdline_prop (file (read getattr map open)))
;;* lme

;;* lmx 272 system/sepolicy/private/shell.te

(allow shell verity_status_prop (file (read getattr map open)))
;;* lme

;;* lmx 275 system/sepolicy/private/shell.te

(allow shell virtual_ab_prop (file (read getattr map open)))
;;* lme

;;* lmx 278 system/sepolicy/private/shell.te

(allow shell gsi_metadata_file_type (dir (search)))
(allow shell metadata_file (dir (search)))
;;* lme

;;* lmx 278 system/sepolicy/private/shell.te

(allow shell gsi_public_metadata_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 278 system/sepolicy/private/shell.te

(allow shell proc_bootconfig (file (ioctl read getattr lock map open watch watch_reads)))
(allow shell proc_cmdline (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 281 system/sepolicy/private/shell.te

(allow shell apex_info_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 285 system/sepolicy/private/shell.te

(allow shell virtualizationmanager_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 285 system/sepolicy/private/shell.te

(allow shell shell_virtualizationmanager (process (transition)))
;;* lme

;;* lmx 285 system/sepolicy/private/shell.te

(allow shell_virtualizationmanager virtualizationmanager_exec (file (read getattr map execute open entrypoint)))
;;* lme

;;* lmx 285 system/sepolicy/private/shell.te

(allow shell_virtualizationmanager shell (process (sigchld)))
;;* lme

(dontaudit shell shell_virtualizationmanager (process (noatsecure)))
;;* lmx 285 system/sepolicy/private/shell.te

(allow shell shell_virtualizationmanager (process (siginh rlimitinh)))
;;* lme

(typetransition shell virtualizationmanager_exec process shell_virtualizationmanager)
;;* lmx 285 system/sepolicy/private/shell.te

(allow shell_virtualizationmanager crosvm_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 285 system/sepolicy/private/shell.te

(allow shell_virtualizationmanager shell_virtmgr_crosvm (process (transition)))
;;* lme

;;* lmx 285 system/sepolicy/private/shell.te

(allow shell_virtmgr_crosvm crosvm_exec (file (read getattr map execute open entrypoint)))
;;* lme

;;* lmx 285 system/sepolicy/private/shell.te

(allow shell_virtmgr_crosvm shell_virtualizationmanager (process (sigchld)))
;;* lme

(dontaudit shell_virtualizationmanager shell_virtmgr_crosvm (process (noatsecure)))
;;* lmx 285 system/sepolicy/private/shell.te

(allow shell_virtualizationmanager shell_virtmgr_crosvm (process (siginh rlimitinh)))
;;* lme

(typetransition shell_virtualizationmanager crosvm_exec process shell_virtmgr_crosvm)
;;* lmx 285 system/sepolicy/private/shell.te

(allow shell_virtualizationmanager hal_secretkeeper (memfd_file (read write getattr map)))
;;* lme

;;* lmx 285 system/sepolicy/private/shell.te

(allow hal_secretkeeper shell_virtualizationmanager (memfd_file (read write getattr map)))
;;* lme

;;* lmx 285 system/sepolicy/private/shell.te

(allow shell_virtualizationmanager hal_vm_capabilities (memfd_file (read write getattr map)))
;;* lme

;;* lmx 285 system/sepolicy/private/shell.te

(allow hal_vm_capabilities shell_virtualizationmanager (memfd_file (read write getattr map)))
;;* lme

;;* lmx 285 system/sepolicy/private/shell.te

(allow shell_virtualizationmanager shell (unix_stream_socket (ioctl read write getattr getopt)))
(allow shell_virtmgr_crosvm shell (unix_stream_socket (ioctl read write getattr getopt)))
;;* lme

;;* lmx 285 system/sepolicy/private/shell.te

(allow shell_virtualizationmanager shell (fd (use)))
(allow shell_virtmgr_crosvm shell (fd (use)))
;;* lme

;;* lmx 285 system/sepolicy/private/shell.te

(allow shell shell_virtualizationmanager (fd (use)))
;;* lme

;;* lmx 285 system/sepolicy/private/shell.te

(allow shell_virtualizationmanager shell (fifo_file (ioctl read write getattr)))
(allow shell_virtmgr_crosvm shell (fifo_file (ioctl read write getattr)))
;;* lme

;;* lmx 285 system/sepolicy/private/shell.te

(allow shell shell_virtualizationmanager (vsock_socket (read write getattr getopt)))
;;* lme

;;* lmx 285 system/sepolicy/private/shell.te

(allow shell hypervisor_prop (file (read getattr map open)))
;;* lme

;;* lmx 285 system/sepolicy/private/shell.te

(allow shell virtualizationservice_data_file (file (read getattr)))
;;* lme

;;* lmx 285 system/sepolicy/private/shell.te

(allow shell_virtualizationmanager shell (dir (search)))
;;* lme

;;* lmx 285 system/sepolicy/private/shell.te

(allow shell_virtualizationmanager shell (file (read)))
;;* lme

;;* lmx 285 system/sepolicy/private/shell.te

(allow shell_virtualizationmanager shell (lnk_file (read)))
;;* lme

;;* lmx 285 system/sepolicy/private/shell.te

(allow shell shell_virtmgr_crosvm (process (sigkill)))
;;* lme

;;* lmx 285 system/sepolicy/private/shell.te

(allow shell_virtmgr_crosvm hal_graphics_allocator (memfd_file (read write getattr map)))
;;* lme

;;* lmx 285 system/sepolicy/private/shell.te

(allow hal_graphics_allocator shell_virtmgr_crosvm (memfd_file (read write getattr map)))
;;* lme

;;* lmx 288 system/sepolicy/private/shell.te

(allow shell property_socket (sock_file (write)))
;;* lme

;;* lmx 288 system/sepolicy/private/shell.te

(allow shell init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 288 system/sepolicy/private/shell.te

(allow shell persist_wm_debug_prop (property_service (set)))
;;* lme

;;* lmx 288 system/sepolicy/private/shell.te

(allow shell persist_wm_debug_prop (file (read getattr map open)))
;;* lme

;;* lmx 291 system/sepolicy/private/shell.te

(allow shell property_socket (sock_file (write)))
;;* lme

;;* lmx 291 system/sepolicy/private/shell.te

(allow shell init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 291 system/sepolicy/private/shell.te

(allow shell gwp_asan_prop (property_service (set)))
;;* lme

;;* lmx 291 system/sepolicy/private/shell.te

(allow shell gwp_asan_prop (file (read getattr map open)))
;;* lme

;;* lmx 294 system/sepolicy/private/shell.te

(allow shell property_socket (sock_file (write)))
;;* lme

;;* lmx 294 system/sepolicy/private/shell.te

(allow shell init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 294 system/sepolicy/private/shell.te

(allow shell pcc_audit_mode_prop (property_service (set)))
;;* lme

;;* lmx 294 system/sepolicy/private/shell.te

(allow shell pcc_audit_mode_prop (file (read getattr map open)))
;;* lme

;;* lmx 295 system/sepolicy/private/shell.te

(allow shell property_socket (sock_file (write)))
;;* lme

;;* lmx 295 system/sepolicy/private/shell.te

(allow shell init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 295 system/sepolicy/private/shell.te

(allow shell pcc_audit_mode_client_prop (property_service (set)))
;;* lme

;;* lmx 295 system/sepolicy/private/shell.te

(allow shell pcc_audit_mode_client_prop (file (read getattr map open)))
;;* lme

;;* lmx 298 system/sepolicy/private/shell.te

(allow shell build_attestation_prop (file (read getattr map open)))
;;* lme

;;* lmx 302 system/sepolicy/private/shell.te

(allow shell oatdump_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lme

;;* lmx 305 system/sepolicy/private/shell.te

(allow shell aflags_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 305 system/sepolicy/private/shell.te

(allow shell aflags (process (transition)))
;;* lme

;;* lmx 305 system/sepolicy/private/shell.te

(allow aflags aflags_exec (file (read getattr map execute open entrypoint)))
;;* lme

;;* lmx 305 system/sepolicy/private/shell.te

(allow aflags shell (process (sigchld)))
;;* lme

(dontaudit shell aflags (process (noatsecure)))
;;* lmx 305 system/sepolicy/private/shell.te

(allow shell aflags (process (siginh rlimitinh)))
;;* lme

(typetransition shell aflags_exec process aflags)
;;* lmx 308 system/sepolicy/private/shell.te

(allow shell device_config_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lme

;;* lmx 314 system/sepolicy/private/shell.te

(allow shell logcat_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lme

;;* lmx 314 system/sepolicy/private/shell.te

(allow shell logdr_socket (sock_file (write)))
;;* lme

;;* lmx 314 system/sepolicy/private/shell.te

(allow shell logd (unix_stream_socket (connectto)))
;;* lme

;;* lmx 315 system/sepolicy/private/shell.te

(allow shell logd_socket (sock_file (write)))
;;* lme

;;* lmx 315 system/sepolicy/private/shell.te

(allow shell logd (unix_stream_socket (connectto)))
;;* lme

;;* lmx 316 system/sepolicy/private/shell.te

(allow shell logd_prop (file (read getattr map open)))
;;* lme

;;* lmx 318 system/sepolicy/private/shell.te

(allow shell pstorefs (dir (search)))
;;* lme

;;* lmx 319 system/sepolicy/private/shell.te

(allow shell pstorefs (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 322 system/sepolicy/private/shell.te

(allow shell rootfs (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 325 system/sepolicy/private/shell.te

(allow shell anr_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 326 system/sepolicy/private/shell.te

(allow shell anr_data_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 329 system/sepolicy/private/shell.te

(allow shell shell_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 330 system/sepolicy/private/shell.te

(allow shell shell_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 331 system/sepolicy/private/shell.te

(allow shell shell_data_file (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lme

;;* lmx 332 system/sepolicy/private/shell.te

(allow shell shell_data_file (lnk_file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 335 system/sepolicy/private/shell.te

(allow shell shell_test_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 336 system/sepolicy/private/shell.te

(allow shell shell_test_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 337 system/sepolicy/private/shell.te

(allow shell shell_test_data_file (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lme

;;* lmx 338 system/sepolicy/private/shell.te

(allow shell shell_test_data_file (lnk_file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 339 system/sepolicy/private/shell.te

(allow shell shell_test_data_file (sock_file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 342 system/sepolicy/private/shell.te

(allow shell trace_data_file (file (ioctl read getattr lock map unlink open watch watch_reads)))
;;* lme

;;* lmx 343 system/sepolicy/private/shell.te

(allow shell trace_data_file (dir (ioctl read write getattr lock open watch watch_reads remove_name search)))
;;* lme

;;* lmx 346 system/sepolicy/private/shell.te

(allow shell profman_dump_data_file (dir (ioctl read write getattr lock open watch watch_reads remove_name search)))
;;* lme

;;* lmx 347 system/sepolicy/private/shell.te

(allow shell profman_dump_data_file (file (ioctl read getattr lock map unlink open watch watch_reads)))
;;* lme

;;* lmx 350 system/sepolicy/private/shell.te

(allow shell nativetest_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 350 system/sepolicy/private/shell.te

(allow shell nativetest_data_file (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lme

;;* lmx 356 system/sepolicy/private/shell.te

(allow shell dumpstate_socket (sock_file (write)))
;;* lme

;;* lmx 356 system/sepolicy/private/shell.te

(allow shell dumpstate (unix_stream_socket (connectto)))
;;* lme

;;* lmx 358 system/sepolicy/private/shell.te

(allow shell devpts (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 359 system/sepolicy/private/shell.te

(allow shell tty_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 360 system/sepolicy/private/shell.te

(allow shell console_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 362 system/sepolicy/private/shell.te

(allow shell input_device (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 363 system/sepolicy/private/shell.te

(allow shell input_device (chr_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 365 system/sepolicy/private/shell.te

(allow shell system_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 365 system/sepolicy/private/shell.te

(allow shell system_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow shell system_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 366 system/sepolicy/private/shell.te

(allow shell system_file (file (getattr map execute execute_no_trans)))
;;* lme

;;* lmx 367 system/sepolicy/private/shell.te

(allow shell toolbox_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lme

;;* lmx 368 system/sepolicy/private/shell.te

(allow shell shell_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lme

;;* lmx 369 system/sepolicy/private/shell.te

(allow shell zygote_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lme

;;* lmx 371 system/sepolicy/private/shell.te

(allow shell boottrace_data_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
;;* lme

;;* lmx 371 system/sepolicy/private/shell.te

(allow shell boottrace_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 378 system/sepolicy/private/shell.te

(allow shell servicemanager (service_manager (list)))
;;* lme

;;* lmx 403 system/sepolicy/private/shell.te

(allow shell base_typeattr_1066 (service_manager (find)))
;;* lme

;;* lmx 404 system/sepolicy/private/shell.te

(allow shell dumpstate (binder (call)))
;;* lme

;;* lmx 408 system/sepolicy/private/shell.te

(allow shell hwservicemanager (binder (call transfer)))
;;* lme

;;* lmx 408 system/sepolicy/private/shell.te

(allow hwservicemanager shell (binder (call transfer)))
;;* lme

;;* lmx 409 system/sepolicy/private/shell.te

(allow shell hwservicemanager (hwservice_manager (list)))
;;* lme

;;* lmx 412 system/sepolicy/private/shell.te

(allow shell proc_net_type (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 412 system/sepolicy/private/shell.te

(allow shell proc_net_type (file (ioctl read getattr lock map open watch watch_reads)))
(allow shell proc_net_type (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 415 system/sepolicy/private/shell.te

(allowx shell self (nlmsg netlink_route_socket (0x12)))
;;* lme

;;* lmx 436 system/sepolicy/private/shell.te

(allow shell proc_asound (file (ioctl read getattr lock map open watch watch_reads)))
(allow shell proc_cgroups (file (ioctl read getattr lock map open watch watch_reads)))
(allow shell proc_diskstats (file (ioctl read getattr lock map open watch watch_reads)))
(allow shell proc_filesystems (file (ioctl read getattr lock map open watch watch_reads)))
(allow shell proc_interrupts (file (ioctl read getattr lock map open watch watch_reads)))
(allow shell proc_loadavg (file (ioctl read getattr lock map open watch watch_reads)))
(allow shell proc_meminfo (file (ioctl read getattr lock map open watch watch_reads)))
(allow shell proc_modules (file (ioctl read getattr lock map open watch watch_reads)))
(allow shell proc_pid_max (file (ioctl read getattr lock map open watch watch_reads)))
(allow shell proc_pressure_io (file (ioctl read getattr lock map open watch watch_reads)))
(allow shell proc_slabinfo (file (ioctl read getattr lock map open watch watch_reads)))
(allow shell proc_stat (file (ioctl read getattr lock map open watch watch_reads)))
(allow shell proc_timer (file (ioctl read getattr lock map open watch watch_reads)))
(allow shell proc_uptime (file (ioctl read getattr lock map open watch watch_reads)))
(allow shell proc_version (file (ioctl read getattr lock map open watch watch_reads)))
(allow shell proc_vmstat (file (ioctl read getattr lock map open watch watch_reads)))
(allow shell proc_zoneinfo (file (ioctl read getattr lock map open watch watch_reads)))
(allow shell proc_consoles (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 439 system/sepolicy/private/shell.te

(allow shell sysfs_block (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 442 system/sepolicy/private/shell.te

(allow shell sysfs_net (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 444 system/sepolicy/private/shell.te

(allow shell cgroup (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 444 system/sepolicy/private/shell.te

(allow shell cgroup (file (ioctl read getattr lock map open watch watch_reads)))
(allow shell cgroup (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 445 system/sepolicy/private/shell.te

(allow shell cgroup_desc_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 446 system/sepolicy/private/shell.te

(allow shell vendor_cgroup_desc_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 447 system/sepolicy/private/shell.te

(allow shell cgroup_v2 (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 447 system/sepolicy/private/shell.te

(allow shell cgroup_v2 (file (ioctl read getattr lock map open watch watch_reads)))
(allow shell cgroup_v2 (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 448 system/sepolicy/private/shell.te

(allow shell domain (dir (read getattr open search)))
;;* lme

;;* lmx 449 system/sepolicy/private/shell.te

(allow shell domain (file (read getattr open)))
(allow shell domain (lnk_file (read getattr open)))
;;* lme

;;* lmx 453 system/sepolicy/private/shell.te

(allow shell labeledfs (filesystem (getattr)))
(allow shell proc (filesystem (getattr)))
;;* lme

;;* lmx 456 system/sepolicy/private/shell.te

(allow shell device (dir (getattr)))
;;* lme

;;* lmx 459 system/sepolicy/private/shell.te

(allow shell domain (process (getattr)))
;;* lme

;;* lmx 462 system/sepolicy/private/shell.te

(allow shell selinuxfs (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 463 system/sepolicy/private/shell.te

(allow shell selinuxfs (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 468 system/sepolicy/private/shell.te

(allow shell bootchart_data_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
;;* lme

;;* lmx 469 system/sepolicy/private/shell.te

(allow shell bootchart_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 472 system/sepolicy/private/shell.te

(allow shell self (process (ptrace)))
;;* lme

;;* lmx 475 system/sepolicy/private/shell.te

(allow shell sysfs (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 476 system/sepolicy/private/shell.te

(allow shell sysfs_batteryinfo (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 477 system/sepolicy/private/shell.te

(allow shell sysfs_batteryinfo (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 480 system/sepolicy/private/shell.te

(allow shell sysfs_lru_gen_enabled (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 483 system/sepolicy/private/shell.te

(allow shell sysfs_mem_sleep (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 486 system/sepolicy/private/shell.te

(allow shell vmlauncher_app_devpts (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 486 system/sepolicy/private/shell.te

(allowx shell vmlauncher_app_devpts (ioctl chr_file ((range 0x5401 0x5404) 0x540b (range 0x540e 0x5411) (range 0x5413 0x5414) (range 0x5450 0x5451))))
;;* lme

;;* lmx 492 system/sepolicy/private/shell.te

(allow shell sysfs_dt_avf (dir (search)))
(allow shell proc_dt_avf (dir (search)))
;;* lme

;;* lmx 498 system/sepolicy/private/shell.te

(allow shell dev_type (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 499 system/sepolicy/private/shell.te

(allow shell dev_type (chr_file (getattr)))
;;* lme

;;* lmx 502 system/sepolicy/private/shell.te

(allow shell proc (lnk_file (getattr)))
;;* lme

;;* lmx 508 system/sepolicy/private/shell.te

(allow shell dev_type (blk_file (getattr)))
;;* lme

;;* lmx 511 system/sepolicy/private/shell.te

(allow shell file_contexts_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 512 system/sepolicy/private/shell.te

(allow shell property_contexts_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 513 system/sepolicy/private/shell.te

(allow shell seapp_contexts_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 514 system/sepolicy/private/shell.te

(allow shell service_contexts_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 515 system/sepolicy/private/shell.te

(allow shell sepolicy_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 518 system/sepolicy/private/shell.te

(allow shell vendor_shell_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lme

;;* lmx 520 system/sepolicy/private/shell.te

(allow shell linux_vm_setup_exec (file (ioctl read getattr lock map open watch watch_reads entrypoint)))
;;* lme

;;* lmx 524 system/sepolicy/private/shell.te

(allow shell tee_service_contexts_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 525 system/sepolicy/private/shell.te

(allow shell test_pkvm_tee_service (tee_service (use)))
;;* lme

;;* lmx 547 system/sepolicy/private/shell.te

(neverallow shell virtualization_service (service_manager (find)))
(neverallow shell hal_frp_service (service_manager (find)))
(neverallow shell hal_keymint_service (service_manager (find)))
(neverallow shell hal_secretkeeper_service (service_manager (find)))
(neverallow shell hal_secureclock_service (service_manager (find)))
(neverallow shell hal_sharedsecret_service (service_manager (find)))
(neverallow shell virtualization_maintenance_service (service_manager (find)))
;;* lme

;;* lmx 555 system/sepolicy/private/shell.te

(neverallow shell file_type (file (link)))
;;* lme

;;* lmx 558 system/sepolicy/private/shell.te

(neverallowx shell domain (ioctl tcp_socket (0x6900 0x6902)))
(neverallowx shell domain (ioctl udp_socket (0x6900 0x6902)))
(neverallowx shell domain (ioctl rawip_socket (0x6900 0x6902)))
;;* lme

;;* lmx 558 system/sepolicy/private/shell.te

(neverallowx shell domain (ioctl tcp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx shell domain (ioctl udp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
(neverallowx shell domain (ioctl rawip_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
;;* lme

;;* lmx 558 system/sepolicy/private/shell.te

(neverallowx shell domain (ioctl tcp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx shell domain (ioctl udp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
(neverallowx shell domain (ioctl rawip_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
;;* lme

;;* lmx 566 system/sepolicy/private/shell.te

(neverallow shell hw_random_device (chr_file (ioctl read write create setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow shell port_device (chr_file (ioctl read write create setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow shell fuse_device (chr_file (ioctl read write create setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
;;* lme

;;* lmx 569 system/sepolicy/private/shell.te

(neverallow shell base_typeattr_288 (blk_file (ioctl read write create setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 578 system/sepolicy/private/shell.te

(neverallow shell input_device (chr_file (write create setattr relabelfrom append unlink link rename)))
;;* lme

;;* lmx 580 system/sepolicy/private/shell.te

(neverallow shell self (perf_event (cpu tracepoint)))
;;* lme

;;* lmx 583 system/sepolicy/private/shell.te

(neverallow base_typeattr_945 perf_drop_caches_prop (property_service (set)))
;;* lme

;;* lmx 584 system/sepolicy/private/shell.te

(neverallow base_typeattr_1067 perf_drop_caches_prop (file (read)))
;;* lme

;;* lmx 595 system/sepolicy/private/shell.te

(neverallow base_typeattr_1068 shell_data_file (lnk_file (read)))
;;* lme

;;* lmx 615 system/sepolicy/private/shell.te

(neverallow base_typeattr_1069 shell_data_file (file (open)))
;;* lme

;;* lmx 633 system/sepolicy/private/shell.te

(neverallow base_typeattr_1070 shell_data_file (dir (write create setattr relabelfrom link rename add_name remove_name reparent rmdir)))
;;* lme

;;* lmx 650 system/sepolicy/private/shell.te

(neverallow base_typeattr_1071 shell_data_file (dir (open)))
;;* lme

;;* lmx 669 system/sepolicy/private/shell.te

(neverallow base_typeattr_1072 shell_data_file (dir (search)))
;;* lme

;;* lmx 675 system/sepolicy/private/shell.te

(neverallow base_typeattr_437 shell_data_file (file (execute execute_no_trans)))
;;* lme

;;* lmx 678 system/sepolicy/private/shell.te

(allow shell property_socket (sock_file (write)))
;;* lme

;;* lmx 678 system/sepolicy/private/shell.te

(allow shell init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 678 system/sepolicy/private/shell.te

(allow shell adb_timeout_prop (property_service (set)))
;;* lme

;;* lmx 678 system/sepolicy/private/shell.te

(allow shell adb_timeout_prop (file (read getattr map open)))
;;* lme

;;* lmx 18 system/sepolicy/private/simpleperf.te

(allow untrusted_app_all simpleperf_exec (file (read getattr map execute open)))
(allow priv_app_all simpleperf_exec (file (read getattr map execute open)))
(allow platform_app_all simpleperf_exec (file (read getattr map execute open)))
(allow ephemeral_app simpleperf_exec (file (read getattr map execute open)))
(allow isolated_app simpleperf_exec (file (read getattr map execute open)))
(allow pcc_component simpleperf_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 18 system/sepolicy/private/simpleperf.te

(allow untrusted_app_all simpleperf (process (transition)))
(allow priv_app_all simpleperf (process (transition)))
(allow platform_app_all simpleperf (process (transition)))
(allow ephemeral_app simpleperf (process (transition)))
(allow isolated_app simpleperf (process (transition)))
(allow pcc_component simpleperf (process (transition)))
;;* lme

;;* lmx 18 system/sepolicy/private/simpleperf.te

(allow simpleperf simpleperf_exec (file (read getattr map execute open entrypoint)))
;;* lme

;;* lmx 18 system/sepolicy/private/simpleperf.te

(allow simpleperf untrusted_app_all (process (sigchld)))
(allow simpleperf priv_app_all (process (sigchld)))
(allow simpleperf platform_app_all (process (sigchld)))
(allow simpleperf ephemeral_app (process (sigchld)))
(allow simpleperf isolated_app (process (sigchld)))
(allow simpleperf pcc_component (process (sigchld)))
;;* lme

(dontaudit untrusted_app_all simpleperf (process (noatsecure)))
(dontaudit priv_app_all simpleperf (process (noatsecure)))
(dontaudit platform_app_all simpleperf (process (noatsecure)))
(dontaudit ephemeral_app simpleperf (process (noatsecure)))
(dontaudit isolated_app simpleperf (process (noatsecure)))
(dontaudit pcc_component simpleperf (process (noatsecure)))
;;* lmx 18 system/sepolicy/private/simpleperf.te

(allow untrusted_app_all simpleperf (process (siginh rlimitinh)))
(allow priv_app_all simpleperf (process (siginh rlimitinh)))
(allow platform_app_all simpleperf (process (siginh rlimitinh)))
(allow ephemeral_app simpleperf (process (siginh rlimitinh)))
(allow isolated_app simpleperf (process (siginh rlimitinh)))
(allow pcc_component simpleperf (process (siginh rlimitinh)))
;;* lme

(typetransition untrusted_app_all simpleperf_exec process simpleperf)
(typetransition priv_app_all simpleperf_exec process simpleperf)
(typetransition platform_app_all simpleperf_exec process simpleperf)
(typetransition ephemeral_app simpleperf_exec process simpleperf)
(typetransition isolated_app simpleperf_exec process simpleperf)
(typetransition pcc_component simpleperf_exec process simpleperf)
(typetransition simpleperf tmpfs file appdomain_tmpfs)
;;* lmx 24 system/sepolicy/private/simpleperf.te

(allow simpleperf simpleperf_userfaultfd (anon_inode (ioctl read create)))
;;* lme

(dontaudit su simpleperf_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lmx 24 system/sepolicy/private/simpleperf.te

(neverallow base_typeattr_1073 simpleperf_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 24 system/sepolicy/private/simpleperf.te

(allow simpleperf appdomain_tmpfs (file (read write getattr map execute)))
;;* lme

;;* lmx 24 system/sepolicy/private/simpleperf.te

(allow simpleperf appdomain (memfd_file (read write getattr map execute)))
;;* lme

;;* lmx 24 system/sepolicy/private/simpleperf.te

(neverallow base_typeattr_1074 base_typeattr_1073 (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 24 system/sepolicy/private/simpleperf.te

(neverallow base_typeattr_1022 simpleperf (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 24 system/sepolicy/private/simpleperf.te

(neverallow base_typeattr_1023 simpleperf (process (ptrace)))
;;* lme

;;* lmx 24 system/sepolicy/private/simpleperf.te

(neverallow simpleperf base_typeattr_1075 (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 28 system/sepolicy/private/simpleperf.te

(allow simpleperf untrusted_app_all (process (ptrace)))
(allow simpleperf priv_app_all (process (ptrace)))
(allow simpleperf platform_app_all (process (ptrace)))
(allow simpleperf ephemeral_app (process (ptrace)))
(allow simpleperf isolated_app (process (ptrace)))
(allow simpleperf pcc_component (process (ptrace)))
;;* lme

;;* lmx 31 system/sepolicy/private/simpleperf.te

(allow simpleperf self (perf_event (open kernel read write)))
;;* lme

;;* lmx 35 system/sepolicy/private/simpleperf.te

(allow simpleperf untrusted_app_all (dir (ioctl read getattr lock open watch watch_reads search)))
(allow simpleperf priv_app_all (dir (ioctl read getattr lock open watch watch_reads search)))
(allow simpleperf platform_app_all (dir (ioctl read getattr lock open watch watch_reads search)))
(allow simpleperf ephemeral_app (dir (ioctl read getattr lock open watch watch_reads search)))
(allow simpleperf isolated_app (dir (ioctl read getattr lock open watch watch_reads search)))
(allow simpleperf pcc_component (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 35 system/sepolicy/private/simpleperf.te

(allow simpleperf untrusted_app_all (file (ioctl read getattr lock map open watch watch_reads)))
(allow simpleperf untrusted_app_all (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow simpleperf priv_app_all (file (ioctl read getattr lock map open watch watch_reads)))
(allow simpleperf priv_app_all (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow simpleperf platform_app_all (file (ioctl read getattr lock map open watch watch_reads)))
(allow simpleperf platform_app_all (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow simpleperf ephemeral_app (file (ioctl read getattr lock map open watch watch_reads)))
(allow simpleperf ephemeral_app (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow simpleperf isolated_app (file (ioctl read getattr lock map open watch watch_reads)))
(allow simpleperf isolated_app (lnk_file (ioctl read getattr lock map open watch watch_reads)))
(allow simpleperf pcc_component (file (ioctl read getattr lock map open watch watch_reads)))
(allow simpleperf pcc_component (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 40 system/sepolicy/private/simpleperf.te

(allow untrusted_app_all simpleperf (process (signal)))
(allow priv_app_all simpleperf (process (signal)))
(allow platform_app_all simpleperf (process (signal)))
(allow ephemeral_app simpleperf (process (signal)))
(allow isolated_app simpleperf (process (signal)))
(allow pcc_component simpleperf (process (signal)))
;;* lme

(dontaudit simpleperf domain (dir (search)))
;;* lmx 49 system/sepolicy/private/simpleperf.te

(allow simpleperf privapp_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 49 system/sepolicy/private/simpleperf.te

(allow simpleperf privapp_data_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow simpleperf privapp_data_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 50 system/sepolicy/private/simpleperf.te

(allow simpleperf app_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 50 system/sepolicy/private/simpleperf.te

(allow simpleperf app_data_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow simpleperf app_data_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 51 system/sepolicy/private/simpleperf.te

(allow simpleperf apk_tmp_file (file (read getattr)))
(allow simpleperf apk_private_tmp_file (file (read getattr)))
;;* lme

;;* lmx 52 system/sepolicy/private/simpleperf.te

(allow simpleperf system_linker_exec (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 53 system/sepolicy/private/simpleperf.te

(allow simpleperf app_exec_data_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 54 system/sepolicy/private/simpleperf.te

(allow simpleperf asec_public_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 55 system/sepolicy/private/simpleperf.te

(allow simpleperf vendor_app_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 55 system/sepolicy/private/simpleperf.te

(allow simpleperf vendor_app_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow simpleperf vendor_app_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 58 system/sepolicy/private/simpleperf.te

(allow simpleperf shell_data_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 59 system/sepolicy/private/simpleperf.te

(allow simpleperf shell_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 62 system/sepolicy/private/simpleperf.te

(allow simpleperf sysfs (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 63 system/sepolicy/private/simpleperf.te

(allow simpleperf sysfs_devices_cs_etm (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 63 system/sepolicy/private/simpleperf.te

(allow simpleperf sysfs_devices_cs_etm (file (ioctl read getattr lock map open watch watch_reads)))
(allow simpleperf sysfs_devices_cs_etm (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 68 system/sepolicy/private/simpleperf.te

(neverallow simpleperf self (perf_event (cpu tracepoint)))
;;* lme

;;* lmx 71 system/sepolicy/private/simpleperf.te

(neverallow base_typeattr_860 simpleperf (process (ptrace)))
;;* lme

;;* lmx 3 system/sepolicy/private/simpleperf_app_runner.te

(allow shell simpleperf_app_runner_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 3 system/sepolicy/private/simpleperf_app_runner.te

(allow shell simpleperf_app_runner (process (transition)))
;;* lme

;;* lmx 3 system/sepolicy/private/simpleperf_app_runner.te

(allow simpleperf_app_runner simpleperf_app_runner_exec (file (read getattr map execute open entrypoint)))
;;* lme

;;* lmx 3 system/sepolicy/private/simpleperf_app_runner.te

(allow simpleperf_app_runner shell (process (sigchld)))
;;* lme

(dontaudit shell simpleperf_app_runner (process (noatsecure)))
;;* lmx 3 system/sepolicy/private/simpleperf_app_runner.te

(allow shell simpleperf_app_runner (process (siginh rlimitinh)))
;;* lme

(typetransition shell simpleperf_app_runner_exec process simpleperf_app_runner)
;;* lmx 6 system/sepolicy/private/simpleperf_app_runner.te

(allow simpleperf_app_runner adbd (fd (use)))
;;* lme

;;* lmx 7 system/sepolicy/private/simpleperf_app_runner.te

(allow simpleperf_app_runner adbd (unix_stream_socket (read write)))
;;* lme

;;* lmx 8 system/sepolicy/private/simpleperf_app_runner.te

(allow simpleperf_app_runner shell (fd (use)))
;;* lme

;;* lmx 9 system/sepolicy/private/simpleperf_app_runner.te

(allow simpleperf_app_runner devpts (chr_file (ioctl read write)))
;;* lme

;;* lmx 12 system/sepolicy/private/simpleperf_app_runner.te

(allow simpleperf_app_runner system_data_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 13 system/sepolicy/private/simpleperf_app_runner.te

(allow simpleperf_app_runner system_data_file (lnk_file (getattr)))
;;* lme

;;* lmx 14 system/sepolicy/private/simpleperf_app_runner.te

(allow simpleperf_app_runner packages_list_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 17 system/sepolicy/private/simpleperf_app_runner.te

(allow simpleperf_app_runner system_data_file (lnk_file (read)))
;;* lme

;;* lmx 20 system/sepolicy/private/simpleperf_app_runner.te

(allow simpleperf_app_runner self (capability (setgid setuid)))
(allow simpleperf_app_runner self (cap_userns (setgid setuid)))
;;* lme

;;* lmx 23 system/sepolicy/private/simpleperf_app_runner.te

(allow simpleperf_app_runner selinuxfs (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 23 system/sepolicy/private/simpleperf_app_runner.te

(allow simpleperf_app_runner selinuxfs (file (ioctl read getattr lock map open watch watch_reads)))
(allow simpleperf_app_runner selinuxfs (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 23 system/sepolicy/private/simpleperf_app_runner.te

(allow simpleperf_app_runner selinuxfs (file (write lock append map open)))
;;* lme

;;* lmx 23 system/sepolicy/private/simpleperf_app_runner.te

(allow simpleperf_app_runner kernel (security (check_context)))
;;* lme

;;* lmx 24 system/sepolicy/private/simpleperf_app_runner.te

(allow simpleperf_app_runner self (process (setcurrent)))
;;* lme

;;* lmx 25 system/sepolicy/private/simpleperf_app_runner.te

(allow simpleperf_app_runner untrusted_app_all (process (dyntransition)))
(allow simpleperf_app_runner priv_app_all (process (dyntransition)))
(allow simpleperf_app_runner ephemeral_app (process (dyntransition)))
(allow simpleperf_app_runner isolated_app (process (dyntransition)))
(allow simpleperf_app_runner platform_app (process (dyntransition)))
;;* lme

;;* lmx 29 system/sepolicy/private/simpleperf_app_runner.te

(allow simpleperf_app_runner seapp_contexts_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 33 system/sepolicy/private/simpleperf_app_runner.te

(allow simpleperf_app_runner shell (fifo_file (read write getattr)))
;;* lme

;;* lmx 37 system/sepolicy/private/simpleperf_app_runner.te

(allow simpleperf_app_runner shell_data_file (dir (getattr search)))
;;* lme

;;* lmx 38 system/sepolicy/private/simpleperf_app_runner.te

(allow simpleperf_app_runner shell_data_file (file (write getattr)))
;;* lme

;;* lmx 45 system/sepolicy/private/simpleperf_app_runner.te

(neverallow simpleperf_app_runner self (capability (chown dac_override dac_read_search fowner fsetid kill setpcap linux_immutable net_bind_service net_broadcast net_admin net_raw ipc_lock ipc_owner sys_module sys_rawio sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_nice sys_resource sys_time sys_tty_config mknod lease audit_write audit_control setfcap)))
(neverallow simpleperf_app_runner self (cap_userns (chown dac_override dac_read_search fowner fsetid kill setpcap linux_immutable net_bind_service net_broadcast net_admin net_raw ipc_lock ipc_owner sys_module sys_rawio sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_nice sys_resource sys_time sys_tty_config mknod lease audit_write audit_control setfcap)))
;;* lme

;;* lmx 46 system/sepolicy/private/simpleperf_app_runner.te

(neverallow simpleperf_app_runner self (capability2 (mac_override mac_admin syslog wake_alarm block_suspend audit_read perfmon checkpoint_restore bpf)))
(neverallow simpleperf_app_runner self (cap2_userns (mac_override mac_admin syslog wake_alarm block_suspend audit_read perfmon checkpoint_restore bpf)))
;;* lme

;;* lmx 9 system/sepolicy/private/simpleperf_boot.te

(allow init simpleperf_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 9 system/sepolicy/private/simpleperf_boot.te

(allow init simpleperf_boot (process (transition)))
;;* lme

;;* lmx 9 system/sepolicy/private/simpleperf_boot.te

(allow simpleperf_boot simpleperf_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init simpleperf_boot (process (noatsecure)))
;;* lmx 9 system/sepolicy/private/simpleperf_boot.te

(allow init simpleperf_boot (process (siginh rlimitinh)))
;;* lme

(typetransition init simpleperf_exec process simpleperf_boot)
;;* lmx 9 system/sepolicy/private/simpleperf_boot.te

(allow simpleperf_boot simpleperf_boot_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 9 system/sepolicy/private/simpleperf_boot.te

(allow simpleperf_boot simpleperf_boot_data_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
;;* lme

;;* lmx 9 system/sepolicy/private/simpleperf_boot.te

(allow simpleperf_boot self (perf_event (open cpu kernel read write)))
;;* lme

;;* lmx 9 system/sepolicy/private/simpleperf_boot.te

(allow simpleperf_boot self (capability2 (perfmon)))
(allow simpleperf_boot self (cap2_userns (perfmon)))
;;* lme

;;* lmx 9 system/sepolicy/private/simpleperf_boot.te

(allow simpleperf_boot domain (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 9 system/sepolicy/private/simpleperf_boot.te

(allow simpleperf_boot domain (file (ioctl read getattr lock map open watch watch_reads)))
(allow simpleperf_boot domain (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 9 system/sepolicy/private/simpleperf_boot.te

(allow simpleperf_boot system_file_type (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 9 system/sepolicy/private/simpleperf_boot.te

(allow simpleperf_boot vendor_file_type (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 9 system/sepolicy/private/simpleperf_boot.te

(allow simpleperf_boot vendor_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 9 system/sepolicy/private/simpleperf_boot.te

(allow simpleperf_boot vendor_kernel_modules (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 9 system/sepolicy/private/simpleperf_boot.te

(allow simpleperf_boot system_bootstrap_lib_file (dir (search)))
;;* lme

;;* lmx 9 system/sepolicy/private/simpleperf_boot.te

(allow simpleperf_boot system_bootstrap_lib_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 9 system/sepolicy/private/simpleperf_boot.te

(allow simpleperf_boot debugfs_tracing (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 9 system/sepolicy/private/simpleperf_boot.te

(allow simpleperf_boot debugfs_tracing (file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 9 system/sepolicy/private/simpleperf_boot.te

(allow simpleperf_boot debugfs_tracing_debug (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 9 system/sepolicy/private/simpleperf_boot.te

(allow simpleperf_boot debugfs_tracing_debug (file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 9 system/sepolicy/private/simpleperf_boot.te

(allow simpleperf_boot proc_perf (file (write)))
;;* lme

;;* lmx 9 system/sepolicy/private/simpleperf_boot.te

(allow simpleperf_boot self (capability (sys_ptrace)))
(allow simpleperf_boot self (cap_userns (sys_ptrace)))
;;* lme

;;* lmx 9 system/sepolicy/private/simpleperf_boot.te

(allow simpleperf_boot system_server (process (ptrace)))
(allow simpleperf_boot zygote (process (ptrace)))
;;* lme

;;* lmx 9 system/sepolicy/private/simpleperf_boot.te

(allow simpleperf_boot property_socket (sock_file (write)))
;;* lme

;;* lmx 9 system/sepolicy/private/simpleperf_boot.te

(allow simpleperf_boot init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 9 system/sepolicy/private/simpleperf_boot.te

(allow simpleperf_boot lower_kptr_restrict_prop (property_service (set)))
;;* lme

;;* lmx 9 system/sepolicy/private/simpleperf_boot.te

(allow simpleperf_boot lower_kptr_restrict_prop (file (read getattr map open)))
;;* lme

;;* lmx 9 system/sepolicy/private/simpleperf_boot.te

(allow simpleperf_boot proc_kallsyms (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 9 system/sepolicy/private/simpleperf_boot.te

(allow simpleperf_boot proc_modules (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 9 system/sepolicy/private/simpleperf_boot.te

(allow simpleperf_boot sysfs_kernel_notes (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

(dontaudit simpleperf_boot shell_data_file (dir (search)))
;;* lmx 3 system/sepolicy/private/slideshow.te

(allow slideshow kmsg_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 4 system/sepolicy/private/slideshow.te

(allow slideshow sysfs_wake_lock (file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 4 system/sepolicy/private/slideshow.te

(allow slideshow self (capability2 (block_suspend)))
(allow slideshow self (cap2_userns (block_suspend)))
;;* lme

;;* lmx 4 system/sepolicy/private/slideshow.te

(allow slideshow system_suspend_server (binder (call transfer)))
;;* lme

;;* lmx 4 system/sepolicy/private/slideshow.te

(allow system_suspend_server slideshow (binder (transfer)))
;;* lme

;;* lmx 4 system/sepolicy/private/slideshow.te

(allow slideshow system_suspend_server (fd (use)))
;;* lme

;;* lmx 4 system/sepolicy/private/slideshow.te

(allow slideshow system_suspend_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 4 system/sepolicy/private/slideshow.te

(allow slideshow hwservicemanager (binder (call transfer)))
;;* lme

;;* lmx 4 system/sepolicy/private/slideshow.te

(allow hwservicemanager slideshow (binder (call transfer)))
;;* lme

;;* lmx 4 system/sepolicy/private/slideshow.te

(allow slideshow hwservicemanager_prop (file (read getattr map open)))
;;* lme

;;* lmx 4 system/sepolicy/private/slideshow.te

(allow slideshow hidl_manager_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 4 system/sepolicy/private/slideshow.te

(allow slideshow hal_system_suspend_service (service_manager (find)))
;;* lme

;;* lmx 4 system/sepolicy/private/slideshow.te

(allow slideshow servicemanager (binder (call transfer)))
;;* lme

;;* lmx 4 system/sepolicy/private/slideshow.te

(allow servicemanager slideshow (binder (call transfer)))
;;* lme

;;* lmx 5 system/sepolicy/private/slideshow.te

(allow slideshow device (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 6 system/sepolicy/private/slideshow.te

(allow slideshow self (capability (sys_tty_config)))
(allow slideshow self (cap_userns (sys_tty_config)))
;;* lme

;;* lmx 7 system/sepolicy/private/slideshow.te

(allow slideshow graphics_device (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 8 system/sepolicy/private/slideshow.te

(allow slideshow graphics_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 9 system/sepolicy/private/slideshow.te

(allow slideshow input_device (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 10 system/sepolicy/private/slideshow.te

(allow slideshow input_device (chr_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 11 system/sepolicy/private/slideshow.te

(allow slideshow tty_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 5 system/sepolicy/private/snapshotctl.te

(allow init snapshotctl_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 5 system/sepolicy/private/snapshotctl.te

(allow init snapshotctl (process (transition)))
;;* lme

;;* lmx 5 system/sepolicy/private/snapshotctl.te

(allow snapshotctl snapshotctl_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init snapshotctl (process (noatsecure)))
;;* lmx 5 system/sepolicy/private/snapshotctl.te

(allow init snapshotctl (process (siginh rlimitinh)))
;;* lme

(typetransition init snapshotctl_exec process snapshotctl)
;;* lmx 8 system/sepolicy/private/snapshotctl.te

(allow snapshotctl property_socket (sock_file (write)))
;;* lme

;;* lmx 8 system/sepolicy/private/snapshotctl.te

(allow snapshotctl init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 8 system/sepolicy/private/snapshotctl.te

(allow snapshotctl ctl_gsid_prop (property_service (set)))
;;* lme

;;* lmx 8 system/sepolicy/private/snapshotctl.te

(allow snapshotctl ctl_gsid_prop (file (read getattr map open)))
;;* lme

;;* lmx 11 system/sepolicy/private/snapshotctl.te

(allow snapshotctl servicemanager (binder (call transfer)))
;;* lme

;;* lmx 11 system/sepolicy/private/snapshotctl.te

(allow servicemanager snapshotctl (binder (call transfer)))
;;* lme

;;* lmx 12 system/sepolicy/private/snapshotctl.te

(allow snapshotctl gsi_service (service_manager (find)))
;;* lme

;;* lmx 13 system/sepolicy/private/snapshotctl.te

(allow snapshotctl gsid (binder (call transfer)))
;;* lme

;;* lmx 13 system/sepolicy/private/snapshotctl.te

(allow gsid snapshotctl (binder (transfer)))
;;* lme

;;* lmx 13 system/sepolicy/private/snapshotctl.te

(allow snapshotctl gsid (fd (use)))
;;* lme

;;* lmx 16 system/sepolicy/private/snapshotctl.te

(allow snapshotctl metadata_file (dir (search)))
;;* lme

;;* lmx 17 system/sepolicy/private/snapshotctl.te

(allow snapshotctl ota_metadata_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
;;* lme

;;* lmx 18 system/sepolicy/private/snapshotctl.te

(allow snapshotctl ota_metadata_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 21 system/sepolicy/private/snapshotctl.te

(allow snapshotctl sysfs_dt_firmware_android (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 21 system/sepolicy/private/snapshotctl.te

(allow snapshotctl sysfs_dt_firmware_android (file (ioctl read getattr lock map open watch watch_reads)))
(allow snapshotctl sysfs_dt_firmware_android (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 22 system/sepolicy/private/snapshotctl.te

(allow snapshotctl proc_cmdline (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 25 system/sepolicy/private/snapshotctl.te

(allow snapshotctl block_device (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 26 system/sepolicy/private/snapshotctl.te

(allow snapshotctl super_block_device (blk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 29 system/sepolicy/private/snapshotctl.te

(allow snapshotctl dm_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 32 system/sepolicy/private/snapshotctl.te

(allow snapshotctl self (capability (sys_admin)))
(allow snapshotctl self (cap_userns (sys_admin)))
;;* lme

;;* lmx 35 system/sepolicy/private/snapshotctl.te

(allow snapshotctl hwservicemanager (binder (call transfer)))
;;* lme

;;* lmx 35 system/sepolicy/private/snapshotctl.te

(allow hwservicemanager snapshotctl (binder (call transfer)))
;;* lme

;;* lmx 36 system/sepolicy/private/snapshotctl.te

(allow snapshotctl hal_bootctl (memfd_file (read write getattr map)))
;;* lme

;;* lmx 36 system/sepolicy/private/snapshotctl.te

(allow hal_bootctl snapshotctl (memfd_file (read write getattr map)))
;;* lme

;;* lmx 39 system/sepolicy/private/snapshotctl.te

(allow snapshotctl statsdw_socket (sock_file (write)))
;;* lme

;;* lmx 39 system/sepolicy/private/snapshotctl.te

(allow snapshotctl statsd (unix_dgram_socket (sendto)))
;;* lme

;;* lmx 42 system/sepolicy/private/snapshotctl.te

(allow snapshotctl snapshotctl_log_data_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
;;* lme

;;* lmx 42 system/sepolicy/private/snapshotctl.te

(allow snapshotctl snapshotctl_log_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 48 system/sepolicy/private/snapshotctl.te

(allow snapshotctl proc_bootconfig (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 51 system/sepolicy/private/snapshotctl.te

(allow snapshotctl property_socket (sock_file (write)))
;;* lme

;;* lmx 51 system/sepolicy/private/snapshotctl.te

(allow snapshotctl init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 51 system/sepolicy/private/snapshotctl.te

(allow snapshotctl ctl_snapuserd_prop (property_service (set)))
;;* lme

;;* lmx 51 system/sepolicy/private/snapshotctl.te

(allow snapshotctl ctl_snapuserd_prop (file (read getattr map open)))
;;* lme

;;* lmx 54 system/sepolicy/private/snapshotctl.te

(allow snapshotctl snapuserd_prop (file (read getattr map open)))
;;* lme

;;* lmx 57 system/sepolicy/private/snapshotctl.te

(allow snapshotctl snapuserd_socket (sock_file (write)))
;;* lme

;;* lmx 58 system/sepolicy/private/snapshotctl.te

(allow snapshotctl snapuserd (unix_stream_socket (connectto)))
;;* lme

;;* lmx 61 system/sepolicy/private/snapshotctl.te

(allow snapshotctl dm_device (blk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 64 system/sepolicy/private/snapshotctl.te

(allow snapshotctl dm_user_device (dir (search)))
;;* lme

;;* lmx 7 system/sepolicy/private/snapuserd.te

(allow init snapuserd_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 7 system/sepolicy/private/snapuserd.te

(allow init snapuserd (process (transition)))
;;* lme

;;* lmx 7 system/sepolicy/private/snapuserd.te

(allow snapuserd snapuserd_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init snapuserd (process (noatsecure)))
;;* lmx 7 system/sepolicy/private/snapuserd.te

(allow init snapuserd (process (siginh rlimitinh)))
;;* lme

(typetransition init snapuserd_exec process snapuserd)
;;* lmx 9 system/sepolicy/private/snapuserd.te

(allow snapuserd kmsg_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 12 system/sepolicy/private/snapuserd.te

(allow snapuserd block_device (dir (search)))
;;* lme

;;* lmx 15 system/sepolicy/private/snapuserd.te

(allow snapuserd sysfs (dir (read open)))
;;* lme

;;* lmx 20 system/sepolicy/private/snapuserd.te

(allow snapuserd sysfs_dm (dir (read open search)))
;;* lme

;;* lmx 21 system/sepolicy/private/snapuserd.te

(allow snapuserd sysfs_dm (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 24 system/sepolicy/private/snapuserd.te

(allow snapuserd block_device (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 25 system/sepolicy/private/snapuserd.te

(allow snapuserd dm_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 26 system/sepolicy/private/snapuserd.te

(allow snapuserd dm_device (blk_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 29 system/sepolicy/private/snapuserd.te

(allow snapuserd dm_user_device (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 30 system/sepolicy/private/snapuserd.te

(allow snapuserd dm_user_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 33 system/sepolicy/private/snapuserd.te

(allow snapuserd snapuserd_socket (unix_stream_socket (read write getattr listen accept)))
;;* lme

;;* lmx 34 system/sepolicy/private/snapuserd.te

(allow snapuserd snapuserd_proxy_socket (sock_file (write)))
;;* lme

;;* lmx 37 system/sepolicy/private/snapuserd.te

(allow snapuserd self (capability (setgid)))
(allow snapuserd self (cap_userns (setgid)))
;;* lme

;;* lmx 42 system/sepolicy/private/snapuserd.te

(allow snapuserd kernel (fd (use)))
;;* lme

;;* lmx 45 system/sepolicy/private/snapuserd.te

(allow snapuserd property_socket (sock_file (write)))
;;* lme

;;* lmx 45 system/sepolicy/private/snapuserd.te

(allow snapuserd init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 45 system/sepolicy/private/snapuserd.te

(allow snapuserd snapuserd_prop (property_service (set)))
;;* lme

;;* lmx 45 system/sepolicy/private/snapuserd.te

(allow snapuserd snapuserd_prop (file (read getattr map open)))
;;* lme

;;* lmx 46 system/sepolicy/private/snapuserd.te

(allow snapuserd virtual_ab_prop (file (read getattr map open)))
;;* lme

;;* lmx 49 system/sepolicy/private/snapuserd.te

(allow snapuserd tmpfs (dir (read watch)))
;;* lme

;;* lmx 56 system/sepolicy/private/snapuserd.te

(neverallow base_typeattr_1076 snapuserd_prop (property_service (set)))
;;* lme

;;* lmx 59 system/sepolicy/private/snapuserd.te

(allow snapuserd metadata_file (dir (search)))
;;* lme

;;* lmx 60 system/sepolicy/private/snapuserd.te

(allow snapuserd ota_metadata_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
;;* lme

;;* lmx 61 system/sepolicy/private/snapuserd.te

(allow snapuserd ota_metadata_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 64 system/sepolicy/private/snapuserd.te

(allow snapuserd snapuserd_log_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 65 system/sepolicy/private/snapuserd.te

(allow snapuserd snapuserd_log_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 68 system/sepolicy/private/snapuserd.te

(allow snapuserd proc_stat (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 72 system/sepolicy/private/snapuserd.te

(allow snapuserd self (capability (ipc_lock)))
;;* lme

;;* lmx 73 system/sepolicy/private/snapuserd.te

(allow snapuserd snapuserd_iouring (anon_inode (read write create map)))
;;* lme

;;* lmx 73 system/sepolicy/private/snapuserd.te

(allow snapuserd self (io_uring (sqpoll allowed)))
;;* lme

;;* lmx 73 system/sepolicy/private/snapuserd.te

(neverallow base_typeattr_1077 snapuserd_iouring (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

(dontaudit snapuserd self (capability (ipc_lock)))
(dontaudit snapuserd self (cap_userns (ipc_lock)))
;;* lmx 75 system/sepolicy/private/snapuserd.te

(allow snapuserd ublk_control_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 77 system/sepolicy/private/snapuserd.te

(allow snapuserd ublk_control_device (io_uring (cmd)))
;;* lme

;;* lmx 79 system/sepolicy/private/snapuserd.te

(allow snapuserd device (dir (read watch)))
;;* lme

;;* lmx 82 system/sepolicy/private/snapuserd.te

(allow snapuserd kernel (unix_stream_socket (read write)))
;;* lme

;;* lmx 86 system/sepolicy/private/snapuserd.te

(allow snapuserd self (capability (sys_admin)))
;;* lme

(dontaudit snapuserd tmpfs (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
(dontaudit snapuserd tmpfs (io_uring (cmd)))
;;* lmx 100 system/sepolicy/private/snapuserd.te

(neverallow base_typeattr_1078 ctl_snapuserd_prop (property_service (set)))
;;* lme

;;* lmx 6 system/sepolicy/private/stats.te

(allow shell stats_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 6 system/sepolicy/private/stats.te

(allow shell stats (process (transition)))
;;* lme

;;* lmx 6 system/sepolicy/private/stats.te

(allow stats stats_exec (file (read getattr map execute open entrypoint)))
;;* lme

;;* lmx 6 system/sepolicy/private/stats.te

(allow stats shell (process (sigchld)))
;;* lme

(dontaudit shell stats (process (noatsecure)))
;;* lmx 6 system/sepolicy/private/stats.te

(allow shell stats (process (siginh rlimitinh)))
;;* lme

(typetransition shell stats_exec process stats)
;;* lmx 9 system/sepolicy/private/stats.te

(allow stats shell (fd (use)))
;;* lme

;;* lmx 13 system/sepolicy/private/stats.te

(allow stats adbd (fd (use)))
;;* lme

;;* lmx 14 system/sepolicy/private/stats.te

(allow stats adbd (unix_stream_socket (read write)))
;;* lme

;;* lmx 17 system/sepolicy/private/stats.te

(allow stats adbd (process (sigchld)))
;;* lme

;;* lmx 21 system/sepolicy/private/stats.te

(allow stats servicemanager (binder (call transfer)))
;;* lme

;;* lmx 21 system/sepolicy/private/stats.te

(allow servicemanager stats (binder (call transfer)))
;;* lme

;;* lmx 22 system/sepolicy/private/stats.te

(allow stats stats_service (service_manager (find)))
;;* lme

;;* lmx 23 system/sepolicy/private/stats.te

(allow stats statsd (binder (call transfer)))
;;* lme

;;* lmx 23 system/sepolicy/private/stats.te

(allow statsd stats (binder (transfer)))
;;* lme

;;* lmx 23 system/sepolicy/private/stats.te

(allow stats statsd (fd (use)))
;;* lme

;;* lmx 24 system/sepolicy/private/stats.te

(allow stats statsd (fifo_file (write)))
;;* lme

;;* lmx 27 system/sepolicy/private/stats.te

(allow statsd stats_service (service_manager (add find)))
;;* lme

;;* lmx 27 system/sepolicy/private/stats.te

(neverallow base_typeattr_1079 stats_service (service_manager (add)))
;;* lme

;;* lmx 27 system/sepolicy/private/stats.te

(allow statsd su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 30 system/sepolicy/private/stats.te

(allow statsd stats (fd (use)))
;;* lme

;;* lmx 31 system/sepolicy/private/stats.te

(allow statsd stats (fifo_file (write)))
;;* lme

;;* lmx 34 system/sepolicy/private/stats.te

(allow statsd stats (binder (call transfer)))
;;* lme

;;* lmx 34 system/sepolicy/private/stats.te

(allow stats statsd (binder (transfer)))
;;* lme

;;* lmx 34 system/sepolicy/private/stats.te

(allow statsd stats (fd (use)))
;;* lme

;;* lmx 1 system/sepolicy/private/stats_service_server.te

(allow stats_service_server fwk_stats_hwservice (hwservice_manager (add find)))
;;* lme

;;* lmx 1 system/sepolicy/private/stats_service_server.te

(allow stats_service_server hidl_base_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 1 system/sepolicy/private/stats_service_server.te

(neverallow base_typeattr_1080 fwk_stats_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 2 system/sepolicy/private/stats_service_server.te

(allow stats_service_server fwk_stats_service (service_manager (add find)))
;;* lme

;;* lmx 2 system/sepolicy/private/stats_service_server.te

(neverallow base_typeattr_1080 fwk_stats_service (service_manager (add)))
;;* lme

;;* lmx 2 system/sepolicy/private/stats_service_server.te

(allow stats_service_server su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 4 system/sepolicy/private/stats_service_server.te

(allow stats_service_server servicemanager (binder (call transfer)))
;;* lme

;;* lmx 4 system/sepolicy/private/stats_service_server.te

(allow servicemanager stats_service_server (binder (call transfer)))
;;* lme

;;* lmx 3 system/sepolicy/private/statsd.te

(allow init statsd_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 3 system/sepolicy/private/statsd.te

(allow init statsd (process (transition)))
;;* lme

;;* lmx 3 system/sepolicy/private/statsd.te

(allow statsd statsd_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init statsd (process (noatsecure)))
;;* lmx 3 system/sepolicy/private/statsd.te

(allow init statsd (process (siginh rlimitinh)))
;;* lme

(typetransition init statsd_exec process statsd)
;;* lmx 8 system/sepolicy/private/statsd.te

(allow statsd perfetto_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lme

;;* lmx 9 system/sepolicy/private/statsd.te

(allow statsd perfetto_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 9 system/sepolicy/private/statsd.te

(allow statsd perfetto (process (transition)))
;;* lme

;;* lmx 9 system/sepolicy/private/statsd.te

(allow perfetto perfetto_exec (file (read getattr map execute open entrypoint)))
;;* lme

;;* lmx 9 system/sepolicy/private/statsd.te

(allow perfetto statsd (process (sigchld)))
;;* lme

(dontaudit statsd perfetto (process (noatsecure)))
;;* lmx 9 system/sepolicy/private/statsd.te

(allow statsd perfetto (process (siginh rlimitinh)))
;;* lme

(typetransition statsd perfetto_exec process perfetto)
;;* lmx 14 system/sepolicy/private/statsd.te

(allow statsd statscompanion_service (service_manager (find)))
;;* lme

;;* lmx 17 system/sepolicy/private/statsd.te

(allow statsd incidentd (fifo_file (write)))
;;* lme

;;* lmx 20 system/sepolicy/private/statsd.te

(allow statsd system_server (fifo_file (read write getattr)))
;;* lme

;;* lmx 26 system/sepolicy/private/statsd.te

(allow statsd appdomain (fifo_file (read write getattr)))
;;* lme

;;* lmx 29 system/sepolicy/private/statsd.te

(allow statsd surfaceflinger (binder (call transfer)))
;;* lme

;;* lmx 29 system/sepolicy/private/statsd.te

(allow surfaceflinger statsd (binder (transfer)))
;;* lme

;;* lmx 29 system/sepolicy/private/statsd.te

(allow statsd surfaceflinger (fd (use)))
;;* lme

;;* lmx 32 system/sepolicy/private/statsd.te

(allow statsd device_config_statsd_native_prop (file (read getattr map open)))
;;* lme

;;* lmx 33 system/sepolicy/private/statsd.te

(allow statsd device_config_statsd_native_boot_prop (file (read getattr map open)))
;;* lme

;;* lmx 36 system/sepolicy/private/statsd.te

(allow statsd misctrl_prop (file (read getattr map open)))
;;* lme

;;* lmx 39 system/sepolicy/private/statsd.te

(allow statsd uprobestats_configs_data_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
;;* lme

;;* lmx 40 system/sepolicy/private/statsd.te

(allow statsd uprobestats_configs_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 43 system/sepolicy/private/statsd.te

(allow statsd property_socket (sock_file (write)))
;;* lme

;;* lmx 43 system/sepolicy/private/statsd.te

(allow statsd init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 43 system/sepolicy/private/statsd.te

(allow statsd uprobestats_start_with_config_prop (property_service (set)))
;;* lme

;;* lmx 43 system/sepolicy/private/statsd.te

(allow statsd uprobestats_start_with_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 46 system/sepolicy/private/statsd.te

(allow statsd uprobestats_service (service_manager (find)))
;;* lme

;;* lmx 47 system/sepolicy/private/statsd.te

(allow statsd uprobestats (binder (call transfer)))
;;* lme

;;* lmx 47 system/sepolicy/private/statsd.te

(allow uprobestats statsd (binder (transfer)))
;;* lme

;;* lmx 47 system/sepolicy/private/statsd.te

(allow statsd uprobestats (fd (use)))
;;* lme

;;* lmx 50 system/sepolicy/private/statsd.te

(allow statsd statsd_iouring (anon_inode (read write create map)))
;;* lme

;;* lmx 50 system/sepolicy/private/statsd.te

(allow statsd self (io_uring (sqpoll allowed)))
;;* lme

;;* lmx 50 system/sepolicy/private/statsd.te

(neverallow base_typeattr_1079 statsd_iouring (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

(dontaudit statsd self (capability (ipc_lock)))
(dontaudit statsd self (cap_userns (ipc_lock)))
;;* lmx 53 system/sepolicy/private/statsd.te

(allow statsd property_socket (sock_file (write)))
;;* lme

;;* lmx 53 system/sepolicy/private/statsd.te

(allow statsd init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 53 system/sepolicy/private/statsd.te

(allow statsd ctl_uprobestats_prop (property_service (set)))
;;* lme

;;* lmx 53 system/sepolicy/private/statsd.te

(allow statsd ctl_uprobestats_prop (file (read getattr map open)))
;;* lme

;;* lmx 54 system/sepolicy/private/statsd.te

(allow statsd servicemanager (binder (call transfer)))
;;* lme

;;* lmx 54 system/sepolicy/private/statsd.te

(allow servicemanager statsd (binder (call transfer)))
;;* lme

;;* lmx 57 system/sepolicy/private/statsd.te

(allow statsd domain (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 57 system/sepolicy/private/statsd.te

(allow statsd domain (file (ioctl read getattr lock map open watch watch_reads)))
(allow statsd domain (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 63 system/sepolicy/private/statsd.te

(allow statsd devpts (chr_file (ioctl read write getattr)))
;;* lme

;;* lmx 64 system/sepolicy/private/statsd.te

(allow statsd shell_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lme

;;* lmx 65 system/sepolicy/private/statsd.te

(allow statsd system_file (file (execute_no_trans)))
;;* lme

;;* lmx 66 system/sepolicy/private/statsd.te

(allow statsd toolbox_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lme

;;* lmx 68 system/sepolicy/private/statsd.te

(allow statsd su (fifo_file (read)))
;;* lme

;;* lmx 78 system/sepolicy/private/statsd.te

(allow statsd stats_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 79 system/sepolicy/private/statsd.te

(allow statsd stats_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 80 system/sepolicy/private/statsd.te

(allow statsd stats_config_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 81 system/sepolicy/private/statsd.te

(allow statsd stats_config_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 83 system/sepolicy/private/statsd.te

(allow statsd statsd_atoms_list_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 84 system/sepolicy/private/statsd.te

(allow statsd statsd_atoms_list_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 94 system/sepolicy/private/statsd.te

(allow base_typeattr_1081 statsd_atoms_list_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 102 system/sepolicy/private/statsd.te

(allow base_typeattr_1081 statsd_atoms_list_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 104 system/sepolicy/private/statsd.te

(allow statsd property_socket (sock_file (write)))
;;* lme

;;* lmx 104 system/sepolicy/private/statsd.te

(allow statsd init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 104 system/sepolicy/private/statsd.te

(allow statsd statsd_atoms_list_version_prop (property_service (set)))
;;* lme

;;* lmx 104 system/sepolicy/private/statsd.te

(allow statsd statsd_atoms_list_version_prop (file (read getattr map open)))
;;* lme

;;* lmx 105 system/sepolicy/private/statsd.te

(allow domain statsd_atoms_list_version_prop (file (read getattr map open)))
;;* lme

;;* lmx 108 system/sepolicy/private/statsd.te

(allow statsd appdomain (binder (call transfer)))
;;* lme

;;* lmx 108 system/sepolicy/private/statsd.te

(allow appdomain statsd (binder (transfer)))
;;* lme

;;* lmx 108 system/sepolicy/private/statsd.te

(allow statsd appdomain (fd (use)))
;;* lme

;;* lmx 109 system/sepolicy/private/statsd.te

(allow statsd incidentd (binder (call transfer)))
;;* lme

;;* lmx 109 system/sepolicy/private/statsd.te

(allow incidentd statsd (binder (transfer)))
;;* lme

;;* lmx 109 system/sepolicy/private/statsd.te

(allow statsd incidentd (fd (use)))
;;* lme

;;* lmx 110 system/sepolicy/private/statsd.te

(allow statsd system_server (binder (call transfer)))
;;* lme

;;* lmx 110 system/sepolicy/private/statsd.te

(allow system_server statsd (binder (transfer)))
;;* lme

;;* lmx 110 system/sepolicy/private/statsd.te

(allow statsd system_server (fd (use)))
;;* lme

;;* lmx 111 system/sepolicy/private/statsd.te

(allow statsd traced_probes (binder (call transfer)))
;;* lme

;;* lmx 111 system/sepolicy/private/statsd.te

(allow traced_probes statsd (binder (transfer)))
;;* lme

;;* lmx 111 system/sepolicy/private/statsd.te

(allow statsd traced_probes (fd (use)))
;;* lme

;;* lmx 114 system/sepolicy/private/statsd.te

(allow statsd gpu_service (service_manager (find)))
;;* lme

;;* lmx 115 system/sepolicy/private/statsd.te

(allow statsd gpuservice (binder (call transfer)))
;;* lme

;;* lmx 115 system/sepolicy/private/statsd.te

(allow gpuservice statsd (binder (transfer)))
;;* lme

;;* lmx 115 system/sepolicy/private/statsd.te

(allow statsd gpuservice (fd (use)))
;;* lme

;;* lmx 118 system/sepolicy/private/statsd.te

(allow statsd keystore_service (service_manager (find)))
;;* lme

;;* lmx 119 system/sepolicy/private/statsd.te

(allow statsd keystore (binder (call transfer)))
;;* lme

;;* lmx 119 system/sepolicy/private/statsd.te

(allow keystore statsd (binder (transfer)))
;;* lme

;;* lmx 119 system/sepolicy/private/statsd.te

(allow statsd keystore (fd (use)))
;;* lme

;;* lmx 122 system/sepolicy/private/statsd.te

(allow statsd mediametrics_service (service_manager (find)))
;;* lme

;;* lmx 123 system/sepolicy/private/statsd.te

(allow statsd mediametrics (binder (call transfer)))
;;* lme

;;* lmx 123 system/sepolicy/private/statsd.te

(allow mediametrics statsd (binder (transfer)))
;;* lme

;;* lmx 123 system/sepolicy/private/statsd.te

(allow statsd mediametrics (fd (use)))
;;* lme

;;* lmx 126 system/sepolicy/private/statsd.te

(allow statsd mediaserver_service (service_manager (find)))
;;* lme

;;* lmx 127 system/sepolicy/private/statsd.te

(allow statsd mediaserver (binder (call transfer)))
;;* lme

;;* lmx 127 system/sepolicy/private/statsd.te

(allow mediaserver statsd (binder (transfer)))
;;* lme

;;* lmx 127 system/sepolicy/private/statsd.te

(allow statsd mediaserver (fd (use)))
;;* lme

;;* lmx 130 system/sepolicy/private/statsd.te

(allow statsd mmd_service (service_manager (find)))
;;* lme

;;* lmx 131 system/sepolicy/private/statsd.te

(allow statsd mmd (binder (call transfer)))
;;* lme

;;* lmx 131 system/sepolicy/private/statsd.te

(allow mmd statsd (binder (transfer)))
;;* lme

;;* lmx 131 system/sepolicy/private/statsd.te

(allow statsd mmd (fd (use)))
;;* lme

;;* lmx 134 system/sepolicy/private/statsd.te

(allow statsd logcat_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lme

;;* lmx 134 system/sepolicy/private/statsd.te

(allow statsd logdr_socket (sock_file (write)))
;;* lme

;;* lmx 134 system/sepolicy/private/statsd.te

(allow statsd logd (unix_stream_socket (connectto)))
;;* lme

;;* lmx 135 system/sepolicy/private/statsd.te

(allow statsd logd_socket (sock_file (write)))
;;* lme

;;* lmx 135 system/sepolicy/private/statsd.te

(allow statsd logd (unix_stream_socket (connectto)))
;;* lme

;;* lmx 142 system/sepolicy/private/statsd.te

(allow statsd app_api_service (service_manager (find)))
(allow statsd system_api_service (service_manager (find)))
(allow statsd incident_service (service_manager (find)))
;;* lme

;;* lmx 145 system/sepolicy/private/statsd.te

(allow statsd hal_health_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 148 system/sepolicy/private/statsd.te

(allow statsd dumpstate (fd (use)))
;;* lme

;;* lmx 149 system/sepolicy/private/statsd.te

(allow statsd dumpstate (fifo_file (write getattr)))
;;* lme

;;* lmx 152 system/sepolicy/private/statsd.te

(allow statsd proc_uid_cputime_showstat (file (read getattr open)))
;;* lme

;;* lmx 153 system/sepolicy/private/statsd.te

(allow statsd hal_health (memfd_file (read write getattr map)))
;;* lme

;;* lmx 153 system/sepolicy/private/statsd.te

(allow hal_health statsd (memfd_file (read write getattr map)))
;;* lme

;;* lmx 154 system/sepolicy/private/statsd.te

(allow statsd hal_power (memfd_file (read write getattr map)))
;;* lme

;;* lmx 154 system/sepolicy/private/statsd.te

(allow hal_power statsd (memfd_file (read write getattr map)))
;;* lme

;;* lmx 155 system/sepolicy/private/statsd.te

(allow statsd hal_power_stats (memfd_file (read write getattr map)))
;;* lme

;;* lmx 155 system/sepolicy/private/statsd.te

(allow hal_power_stats statsd (memfd_file (read write getattr map)))
;;* lme

;;* lmx 156 system/sepolicy/private/statsd.te

(allow statsd hal_thermal (memfd_file (read write getattr map)))
;;* lme

;;* lmx 156 system/sepolicy/private/statsd.te

(allow hal_thermal statsd (memfd_file (read write getattr map)))
;;* lme

;;* lmx 159 system/sepolicy/private/statsd.te

(allow statsd adbd (fd (use)))
;;* lme

;;* lmx 160 system/sepolicy/private/statsd.te

(allow statsd adbd (unix_stream_socket (read write getattr)))
;;* lme

;;* lmx 161 system/sepolicy/private/statsd.te

(allow statsd shell (fifo_file (read write getattr)))
;;* lme

;;* lmx 163 system/sepolicy/private/statsd.te

(allow statsd statsdw_socket (sock_file (write)))
;;* lme

;;* lmx 163 system/sepolicy/private/statsd.te

(allow statsd statsd (unix_dgram_socket (sendto)))
;;* lme

;;* lmx 166 system/sepolicy/private/statsd.te

(allow statsd traced (unix_stream_socket (connectto)))
;;* lme

;;* lmx 167 system/sepolicy/private/statsd.te

(allow statsd traced_producer_socket (sock_file (write)))
;;* lme

;;* lmx 176 system/sepolicy/private/statsd.te

(neverallow base_typeattr_1082 stats_data_file (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
;;* lme

;;* lmx 177 system/sepolicy/private/statsd.te

(neverallow base_typeattr_1083 stats_config_data_file (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
;;* lme

;;* lmx 181 system/sepolicy/private/statsd.te

(neverallow base_typeattr_1082 stats_data_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 182 system/sepolicy/private/statsd.te

(neverallow base_typeattr_1083 stats_config_data_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 189 system/sepolicy/private/statsd.te

(neverallow base_typeattr_1001 statsd_atoms_list_file (file (write create setattr relabelfrom append unlink link rename execute execute_no_trans)))
;;* lme

;;* lmx 195 system/sepolicy/private/statsd.te

(neverallow base_typeattr_1001 statsd_atoms_list_file (dir (write create setattr relabelfrom append unlink link rename)))
;;* lme

;;* lmx 5 system/sepolicy/private/storaged.te

(allow init storaged_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 5 system/sepolicy/private/storaged.te

(allow init storaged (process (transition)))
;;* lme

;;* lmx 5 system/sepolicy/private/storaged.te

(allow storaged storaged_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init storaged (process (noatsecure)))
;;* lmx 5 system/sepolicy/private/storaged.te

(allow init storaged (process (siginh rlimitinh)))
;;* lme

(typetransition init storaged_exec process storaged)
;;* lmx 8 system/sepolicy/private/storaged.te

(allow storaged domain (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 8 system/sepolicy/private/storaged.te

(allow storaged domain (file (ioctl read getattr lock map open watch watch_reads)))
(allow storaged domain (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 11 system/sepolicy/private/storaged.te

(allow storaged proc_uid_io_stats (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 14 system/sepolicy/private/storaged.te

(allow storaged system_data_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 15 system/sepolicy/private/storaged.te

(allow storaged packages_list_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 18 system/sepolicy/private/storaged.te

(allow storaged storaged_data_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
;;* lme

;;* lmx 19 system/sepolicy/private/storaged.te

(allow storaged storaged_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 30 system/sepolicy/private/storaged.te

(allow storaged shell (fd (use)))
;;* lme

;;* lmx 31 system/sepolicy/private/storaged.te

(allow storaged shell (fifo_file (write)))
;;* lme

;;* lmx 34 system/sepolicy/private/storaged.te

(allow storaged priv_app_all (fd (use)))
;;* lme

(auditallow storaged priv_app_all (fd (use)))
;;* lmx 40 system/sepolicy/private/storaged.te

(allow storaged gmscore_app (fd (use)))
;;* lme

;;* lmx 41 system/sepolicy/private/storaged.te

(allow storaged app_data_file (file (write)))
(allow storaged privapp_data_file (file (write)))
;;* lme

;;* lmx 42 system/sepolicy/private/storaged.te

(allow storaged permission_service (service_manager (find)))
;;* lme

;;* lmx 45 system/sepolicy/private/storaged.te

(allow storaged storaged_service (service_manager (add find)))
;;* lme

;;* lmx 45 system/sepolicy/private/storaged.te

(neverallow base_typeattr_1084 storaged_service (service_manager (add)))
;;* lme

;;* lmx 45 system/sepolicy/private/storaged.te

(allow storaged su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 47 system/sepolicy/private/storaged.te

(allow storaged servicemanager (binder (call transfer)))
;;* lme

;;* lmx 47 system/sepolicy/private/storaged.te

(allow servicemanager storaged (binder (call transfer)))
;;* lme

;;* lmx 48 system/sepolicy/private/storaged.te

(allow storaged system_server (binder (call transfer)))
;;* lme

;;* lmx 48 system/sepolicy/private/storaged.te

(allow system_server storaged (binder (transfer)))
;;* lme

;;* lmx 48 system/sepolicy/private/storaged.te

(allow storaged system_server (fd (use)))
;;* lme

;;* lmx 50 system/sepolicy/private/storaged.te

(allow storaged hal_health (memfd_file (read write getattr map)))
;;* lme

;;* lmx 50 system/sepolicy/private/storaged.te

(allow hal_health storaged (memfd_file (read write getattr map)))
;;* lme

;;* lmx 53 system/sepolicy/private/storaged.te

(allow storaged dumpstate (fd (use)))
;;* lme

;;* lmx 56 system/sepolicy/private/storaged.te

(allow storaged package_native_service (service_manager (find)))
;;* lme

(dontaudit storaged self (capability (dac_override dac_read_search)))
(dontaudit storaged self (cap_userns (dac_override dac_read_search)))
;;* lmx 63 system/sepolicy/private/storaged.te

(allow storaged dumpstate (fifo_file (write)))
;;* lme

;;* lmx 68 system/sepolicy/private/storaged.te

(neverallow storaged domain (process (ptrace)))
;;* lme

;;* lmx 69 system/sepolicy/private/storaged.te

(neverallow storaged self (capability (chown dac_override dac_read_search fowner fsetid kill setgid setuid setpcap linux_immutable net_bind_service net_broadcast net_admin net_raw ipc_lock ipc_owner sys_module sys_rawio sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_nice sys_resource sys_time sys_tty_config mknod lease audit_write audit_control setfcap)))
(neverallow storaged self (capability2 (mac_override mac_admin syslog wake_alarm block_suspend audit_read perfmon checkpoint_restore bpf)))
(neverallow storaged self (cap_userns (chown dac_override dac_read_search fowner fsetid kill setgid setuid setpcap linux_immutable net_bind_service net_broadcast net_admin net_raw ipc_lock ipc_owner sys_module sys_rawio sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_nice sys_resource sys_time sys_tty_config mknod lease audit_write audit_control setfcap)))
(neverallow storaged self (cap2_userns (mac_override mac_admin syslog wake_alarm block_suspend audit_read perfmon checkpoint_restore bpf)))
;;* lme

;;* lmx 1 system/sepolicy/private/su.te

(allow shell su_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 1 system/sepolicy/private/su.te

(allow shell su (process (transition)))
;;* lme

;;* lmx 1 system/sepolicy/private/su.te

(allow su su_exec (file (read getattr map execute open entrypoint)))
;;* lme

;;* lmx 1 system/sepolicy/private/su.te

(allow su shell (process (sigchld)))
;;* lme

(dontaudit shell su (process (noatsecure)))
;;* lmx 1 system/sepolicy/private/su.te

(allow shell su (process (siginh rlimitinh)))
;;* lme

(typetransition shell su_exec process su)
;;* lmx 1 system/sepolicy/private/su.te

(allow dumpstate su_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 1 system/sepolicy/private/su.te

(allow dumpstate su (process (transition)))
;;* lme

;;* lmx 1 system/sepolicy/private/su.te

(allow su su_exec (file (read getattr map execute open entrypoint)))
;;* lme

;;* lmx 1 system/sepolicy/private/su.te

(allow su dumpstate (process (sigchld)))
;;* lme

(dontaudit dumpstate su (process (noatsecure)))
;;* lmx 1 system/sepolicy/private/su.te

(allow dumpstate su (process (siginh rlimitinh)))
;;* lme

(typetransition dumpstate su_exec process su)
;;* lmx 1 system/sepolicy/private/su.te

(allow su dumpstate_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 1 system/sepolicy/private/su.te

(allow su dumpstate (process (transition)))
;;* lme

;;* lmx 1 system/sepolicy/private/su.te

(allow dumpstate dumpstate_exec (file (read getattr map execute open entrypoint)))
;;* lme

;;* lmx 1 system/sepolicy/private/su.te

(allow dumpstate su (process (sigchld)))
;;* lme

(dontaudit su dumpstate (process (noatsecure)))
;;* lmx 1 system/sepolicy/private/su.te

(allow su dumpstate (process (siginh rlimitinh)))
;;* lme

(typetransition su dumpstate_exec process dumpstate)
;;* lmx 1 system/sepolicy/private/su.te

(allow su incident_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 1 system/sepolicy/private/su.te

(allow su incident (process (transition)))
;;* lme

;;* lmx 1 system/sepolicy/private/su.te

(allow incident incident_exec (file (read getattr map execute open entrypoint)))
;;* lme

;;* lmx 1 system/sepolicy/private/su.te

(allow incident su (process (sigchld)))
;;* lme

(dontaudit su incident (process (noatsecure)))
;;* lmx 1 system/sepolicy/private/su.te

(allow su incident (process (siginh rlimitinh)))
;;* lme

(typetransition su incident_exec process incident)
;;* lmx 1 system/sepolicy/private/su.te

(allow su odrefresh_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 1 system/sepolicy/private/su.te

(allow su odrefresh (process (transition)))
;;* lme

;;* lmx 1 system/sepolicy/private/su.te

(allow odrefresh odrefresh_exec (file (read getattr map execute open entrypoint)))
;;* lme

;;* lmx 1 system/sepolicy/private/su.te

(allow odrefresh su (process (sigchld)))
;;* lme

(dontaudit su odrefresh (process (noatsecure)))
;;* lmx 1 system/sepolicy/private/su.te

(allow su odrefresh (process (siginh rlimitinh)))
;;* lme

(typetransition su odrefresh_exec process odrefresh)
;;* lmx 1 system/sepolicy/private/su.te

(allow su perfetto_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 1 system/sepolicy/private/su.te

(allow su perfetto (process (transition)))
;;* lme

;;* lmx 1 system/sepolicy/private/su.te

(allow perfetto perfetto_exec (file (read getattr map execute open entrypoint)))
;;* lme

;;* lmx 1 system/sepolicy/private/su.te

(allow perfetto su (process (sigchld)))
;;* lme

(dontaudit su perfetto (process (noatsecure)))
;;* lmx 1 system/sepolicy/private/su.te

(allow su perfetto (process (siginh rlimitinh)))
;;* lme

(typetransition su perfetto_exec process perfetto)
;;* lmx 1 system/sepolicy/private/su.te

(allow su virtualizationmanager_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 1 system/sepolicy/private/su.te

(allow su su_virtualizationmanager (process (transition)))
;;* lme

;;* lmx 1 system/sepolicy/private/su.te

(allow su_virtualizationmanager virtualizationmanager_exec (file (read getattr map execute open entrypoint)))
;;* lme

;;* lmx 1 system/sepolicy/private/su.te

(allow su_virtualizationmanager su (process (sigchld)))
;;* lme

(dontaudit su su_virtualizationmanager (process (noatsecure)))
;;* lmx 1 system/sepolicy/private/su.te

(allow su su_virtualizationmanager (process (siginh rlimitinh)))
;;* lme

(typetransition su virtualizationmanager_exec process su_virtualizationmanager)
;;* lmx 1 system/sepolicy/private/su.te

(allow su_virtualizationmanager crosvm_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 1 system/sepolicy/private/su.te

(allow su_virtualizationmanager su_virtmgr_crosvm (process (transition)))
;;* lme

;;* lmx 1 system/sepolicy/private/su.te

(allow su_virtmgr_crosvm crosvm_exec (file (read getattr map execute open entrypoint)))
;;* lme

;;* lmx 1 system/sepolicy/private/su.te

(allow su_virtmgr_crosvm su_virtualizationmanager (process (sigchld)))
;;* lme

(dontaudit su_virtualizationmanager su_virtmgr_crosvm (process (noatsecure)))
;;* lmx 1 system/sepolicy/private/su.te

(allow su_virtualizationmanager su_virtmgr_crosvm (process (siginh rlimitinh)))
;;* lme

(typetransition su_virtualizationmanager crosvm_exec process su_virtmgr_crosvm)
;;* lmx 1 system/sepolicy/private/su.te

(allow su_virtualizationmanager hal_secretkeeper (memfd_file (read write getattr map)))
;;* lme

;;* lmx 1 system/sepolicy/private/su.te

(allow hal_secretkeeper su_virtualizationmanager (memfd_file (read write getattr map)))
;;* lme

;;* lmx 1 system/sepolicy/private/su.te

(allow su_virtualizationmanager hal_vm_capabilities (memfd_file (read write getattr map)))
;;* lme

;;* lmx 1 system/sepolicy/private/su.te

(allow hal_vm_capabilities su_virtualizationmanager (memfd_file (read write getattr map)))
;;* lme

;;* lmx 1 system/sepolicy/private/su.te

(allow su_virtualizationmanager su (unix_stream_socket (ioctl read write getattr getopt)))
(allow su_virtmgr_crosvm su (unix_stream_socket (ioctl read write getattr getopt)))
;;* lme

;;* lmx 1 system/sepolicy/private/su.te

(allow su_virtualizationmanager su (fd (use)))
(allow su_virtmgr_crosvm su (fd (use)))
;;* lme

;;* lmx 1 system/sepolicy/private/su.te

(allow su su_virtualizationmanager (fd (use)))
;;* lme

;;* lmx 1 system/sepolicy/private/su.te

(allow su_virtualizationmanager su (fifo_file (ioctl read write getattr)))
(allow su_virtmgr_crosvm su (fifo_file (ioctl read write getattr)))
;;* lme

;;* lmx 1 system/sepolicy/private/su.te

(allow su su_virtualizationmanager (vsock_socket (read write getattr getopt)))
;;* lme

;;* lmx 1 system/sepolicy/private/su.te

(allow su hypervisor_prop (file (read getattr map open)))
;;* lme

;;* lmx 1 system/sepolicy/private/su.te

(allow su virtualizationservice_data_file (file (read getattr)))
;;* lme

;;* lmx 1 system/sepolicy/private/su.te

(allow su_virtualizationmanager su (dir (search)))
;;* lme

;;* lmx 1 system/sepolicy/private/su.te

(allow su_virtualizationmanager su (file (read)))
;;* lme

;;* lmx 1 system/sepolicy/private/su.te

(allow su_virtualizationmanager su (lnk_file (read)))
;;* lme

;;* lmx 1 system/sepolicy/private/su.te

(allow su su_virtmgr_crosvm (process (sigkill)))
;;* lme

;;* lmx 1 system/sepolicy/private/su.te

(allow su_virtmgr_crosvm hal_graphics_allocator (memfd_file (read write getattr map)))
;;* lme

;;* lmx 1 system/sepolicy/private/su.te

(allow hal_graphics_allocator su_virtmgr_crosvm (memfd_file (read write getattr map)))
;;* lme

(typetransition su tmpfs file appdomain_tmpfs)
;;* lmx 1 system/sepolicy/private/su.te

(allow su su_userfaultfd (anon_inode (ioctl read create)))
;;* lme

(dontaudit su su_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lmx 1 system/sepolicy/private/su.te

(neverallow base_typeattr_329 su_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 1 system/sepolicy/private/su.te

(allow su appdomain_tmpfs (file (read write getattr map execute)))
;;* lme

;;* lmx 1 system/sepolicy/private/su.te

(allow su appdomain (memfd_file (read write getattr map execute)))
;;* lme

;;* lmx 1 system/sepolicy/private/su.te

(neverallow base_typeattr_1085 base_typeattr_329 (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 1 system/sepolicy/private/su.te

(neverallow base_typeattr_1086 su (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 1 system/sepolicy/private/su.te

(neverallow base_typeattr_1087 su (process (ptrace)))
;;* lme

;;* lmx 1 system/sepolicy/private/su.te

(neverallow su base_typeattr_1088 (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

(dontaudit su keystore2_key_type (keystore2 (add_auth change_password change_user clear_ns clear_uid delete_all_keys early_boot_ended get_attestation_key get_auth_token get_last_auth_time get_state list lock pull_metrics report_off_body reset unlock)))
(dontaudit su keystore2_key_type (keystore2_key (convert_storage_key_to_ephemeral delete gen_unique_id get_info grant manage_blob rebind req_forced_op update use use_dev_id)))
;;* lmx 1 system/sepolicy/private/su.te

(allow su vndbinder_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 1 system/sepolicy/private/su.te

(allow su vndservicemanager (binder (call transfer)))
;;* lme

(dontaudit su self (capability (chown dac_override dac_read_search fowner fsetid kill setgid setuid setpcap linux_immutable net_bind_service net_broadcast net_admin net_raw ipc_lock ipc_owner sys_module sys_rawio sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_nice sys_resource sys_time sys_tty_config mknod lease audit_write audit_control setfcap)))
(dontaudit su self (capability2 (mac_override mac_admin syslog wake_alarm block_suspend audit_read perfmon checkpoint_restore bpf)))
(dontaudit su self (cap_userns (chown dac_override dac_read_search fowner fsetid kill setgid setuid setpcap linux_immutable net_bind_service net_broadcast net_admin net_raw ipc_lock ipc_owner sys_module sys_rawio sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_nice sys_resource sys_time sys_tty_config mknod lease audit_write audit_control setfcap)))
(dontaudit su self (cap2_userns (mac_override mac_admin syslog wake_alarm block_suspend audit_read perfmon checkpoint_restore bpf)))
(dontaudit su self (capability2 (mac_override mac_admin syslog wake_alarm block_suspend audit_read perfmon checkpoint_restore bpf)))
(dontaudit su kernel (security (compute_av compute_create compute_member check_context load_policy compute_relabel compute_user setenforce setbool setsecparam setcheckreqprot read_policy validate_trans)))
(dontaudit su file_type (system (ipc_info syslog_read syslog_mod syslog_console module_request module_load firmware_load kexec_image_load kexec_initramfs_load policy_load x509_certificate_load)))
(dontaudit su kernel (system (ipc_info syslog_read syslog_mod syslog_console module_request module_load firmware_load kexec_image_load kexec_initramfs_load policy_load x509_certificate_load)))
(dontaudit su self (memprotect (mmap_zero)))
(dontaudit su domain (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(dontaudit su domain (process (fork transition sigchld sigkill sigstop signull signal ptrace getsched setsched getsession getpgid setpgid getcap setcap share getattr setexec setfscreate noatsecure siginh setrlimit rlimitinh dyntransition setcurrent execmem execstack execheap setkeycreate setsockcreate getrlimit)))
(dontaudit su domain (process2 (nnp_transition nosuid_transition)))
(dontaudit su domain (fd (use)))
(dontaudit su domain (filesystem (mount remount unmount getattr relabelfrom relabelto associate quotamod quotaget watch)))
(dontaudit su domain (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
(dontaudit su domain (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(dontaudit su domain (memfd_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(dontaudit su domain (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(dontaudit su domain (fifo_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(dontaudit su domain (socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(dontaudit su domain (tcp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind name_connect)))
(dontaudit su domain (udp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind)))
(dontaudit su domain (rawip_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind)))
(dontaudit su domain (netlink_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(dontaudit su domain (packet_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(dontaudit su domain (key_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(dontaudit su domain (unix_stream_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind connectto)))
(dontaudit su domain (unix_dgram_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(dontaudit su domain (netlink_route_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write nlmsg_readpriv nlmsg_getneigh nlmsg)))
(dontaudit su domain (netlink_tcpdiag_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write nlmsg)))
(dontaudit su domain (netlink_nflog_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(dontaudit su domain (netlink_xfrm_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write nlmsg)))
(dontaudit su domain (netlink_selinux_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(dontaudit su domain (netlink_audit_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write nlmsg_relay nlmsg_readpriv nlmsg_tty_audit nlmsg)))
(dontaudit su domain (netlink_dnrt_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(dontaudit su domain (netlink_kobject_uevent_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(dontaudit su domain (appletalk_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(dontaudit su domain (tun_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind attach_queue)))
(dontaudit su domain (netlink_iscsi_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(dontaudit su domain (netlink_fib_lookup_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(dontaudit su domain (netlink_connector_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(dontaudit su domain (netlink_netfilter_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(dontaudit su domain (netlink_generic_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(dontaudit su domain (netlink_scsitransport_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(dontaudit su domain (netlink_rdma_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(dontaudit su domain (netlink_crypto_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(dontaudit su domain (sctp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind name_connect association)))
(dontaudit su domain (icmp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind)))
(dontaudit su domain (ax25_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(dontaudit su domain (ipx_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(dontaudit su domain (netrom_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(dontaudit su domain (atmpvc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(dontaudit su domain (x25_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(dontaudit su domain (rose_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(dontaudit su domain (decnet_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(dontaudit su domain (atmsvc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(dontaudit su domain (rds_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(dontaudit su domain (irda_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(dontaudit su domain (pppox_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(dontaudit su domain (llc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(dontaudit su domain (can_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(dontaudit su domain (tipc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(dontaudit su domain (bluetooth_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(dontaudit su domain (iucv_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(dontaudit su domain (rxrpc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(dontaudit su domain (isdn_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(dontaudit su domain (phonet_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(dontaudit su domain (ieee802154_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(dontaudit su domain (caif_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(dontaudit su domain (alg_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(dontaudit su domain (nfc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(dontaudit su domain (vsock_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(dontaudit su domain (kcm_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(dontaudit su domain (qipcrtr_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(dontaudit su domain (smc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(dontaudit su domain (xdp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(dontaudit su domain (sem (create destroy getattr setattr read write associate unix_read unix_write)))
(dontaudit su domain (msgq (create destroy getattr setattr read write associate unix_read unix_write enqueue)))
(dontaudit su domain (shm (create destroy getattr setattr read write associate unix_read unix_write lock)))
(dontaudit su domain (ipc (create destroy getattr setattr read write associate unix_read unix_write)))
(dontaudit su domain (key (view read write search link setattr create)))
(dontaudit su fs_type (filesystem (mount remount unmount getattr relabelfrom relabelto associate quotamod quotaget watch)))
(dontaudit su fusefs_type (filesystem (mount remount unmount getattr relabelfrom relabelto associate quotamod quotaget watch)))
(dontaudit su dev_type (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(dontaudit su dev_type (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
(dontaudit su dev_type (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(dontaudit su dev_type (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(dontaudit su dev_type (blk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(dontaudit su dev_type (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(dontaudit su dev_type (fifo_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(dontaudit su fs_type (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(dontaudit su fs_type (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
(dontaudit su fs_type (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(dontaudit su fs_type (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(dontaudit su fs_type (blk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(dontaudit su fs_type (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(dontaudit su fs_type (fifo_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(dontaudit su file_type (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(dontaudit su file_type (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
(dontaudit su file_type (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(dontaudit su file_type (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(dontaudit su file_type (blk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(dontaudit su file_type (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(dontaudit su file_type (fifo_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(dontaudit su node_type (node (recvfrom sendto)))
(dontaudit su node_type (tcp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind name_connect)))
(dontaudit su node_type (udp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind)))
(dontaudit su node_type (rawip_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind)))
(dontaudit su netif_type (netif (ingress egress)))
(dontaudit su port_type (socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(dontaudit su port_type (tcp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind name_connect)))
(dontaudit su port_type (udp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind)))
(dontaudit su port_type (rawip_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind)))
(dontaudit su port_type (netlink_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(dontaudit su port_type (packet_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(dontaudit su port_type (key_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(dontaudit su port_type (unix_stream_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind connectto)))
(dontaudit su port_type (unix_dgram_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(dontaudit su port_type (netlink_route_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write nlmsg_readpriv nlmsg_getneigh nlmsg)))
(dontaudit su port_type (netlink_tcpdiag_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write nlmsg)))
(dontaudit su port_type (netlink_nflog_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(dontaudit su port_type (netlink_xfrm_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write nlmsg)))
(dontaudit su port_type (netlink_selinux_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(dontaudit su port_type (netlink_audit_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write nlmsg_relay nlmsg_readpriv nlmsg_tty_audit nlmsg)))
(dontaudit su port_type (netlink_dnrt_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(dontaudit su port_type (netlink_kobject_uevent_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(dontaudit su port_type (appletalk_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(dontaudit su port_type (tun_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind attach_queue)))
(dontaudit su port_type (netlink_iscsi_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(dontaudit su port_type (netlink_fib_lookup_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(dontaudit su port_type (netlink_connector_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(dontaudit su port_type (netlink_netfilter_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(dontaudit su port_type (netlink_generic_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(dontaudit su port_type (netlink_scsitransport_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(dontaudit su port_type (netlink_rdma_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(dontaudit su port_type (netlink_crypto_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(dontaudit su port_type (sctp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind name_connect association)))
(dontaudit su port_type (icmp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind)))
(dontaudit su port_type (ax25_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(dontaudit su port_type (ipx_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(dontaudit su port_type (netrom_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(dontaudit su port_type (atmpvc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(dontaudit su port_type (x25_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(dontaudit su port_type (rose_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(dontaudit su port_type (decnet_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(dontaudit su port_type (atmsvc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(dontaudit su port_type (rds_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(dontaudit su port_type (irda_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(dontaudit su port_type (pppox_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(dontaudit su port_type (llc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(dontaudit su port_type (can_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(dontaudit su port_type (tipc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(dontaudit su port_type (bluetooth_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(dontaudit su port_type (iucv_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(dontaudit su port_type (rxrpc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(dontaudit su port_type (isdn_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(dontaudit su port_type (phonet_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(dontaudit su port_type (ieee802154_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(dontaudit su port_type (caif_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(dontaudit su port_type (alg_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(dontaudit su port_type (nfc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(dontaudit su port_type (vsock_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(dontaudit su port_type (kcm_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(dontaudit su port_type (qipcrtr_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(dontaudit su port_type (smc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(dontaudit su port_type (xdp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(dontaudit su port_type (tcp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind name_connect)))
(dontaudit su port_type (dccp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind name_connect)))
(dontaudit su domain (peer (recv)))
(dontaudit su domain (binder (impersonate call set_context_mgr transfer)))
(dontaudit su property_type (property_service (set)))
(dontaudit su property_type (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(dontaudit su service_manager_type (service_manager (add find list)))
(dontaudit su hwservice_manager_type (hwservice_manager (add find list)))
(dontaudit su vndservice_manager_type (service_manager (add find list)))
(dontaudit su servicemanager (service_manager (list)))
(dontaudit su hwservicemanager (hwservice_manager (list)))
(dontaudit su vndservicemanager (service_manager (list)))
(dontaudit su keystore (keystore2 (add_auth change_password change_user clear_ns clear_uid delete_all_keys early_boot_ended get_attestation_key get_auth_token get_last_auth_time get_state list lock pull_metrics report_off_body reset unlock)))
(dontaudit su domain (drmservice (consumeRights setPlaybackStatus openDecryptSession closeDecryptSession initializeDecryptUnit decrypt finalizeDecryptUnit pread)))
(dontaudit su unlabeled (filesystem (mount remount unmount getattr relabelfrom relabelto associate quotamod quotaget watch)))
(dontaudit su postinstall_file (filesystem (mount remount unmount getattr relabelfrom relabelto associate quotamod quotaget watch)))
(dontaudit su domain (bpf (map_create map_read map_write prog_load prog_run)))
(dontaudit su unlabeled (vsock_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(dontaudit su self (perf_event (open cpu kernel tracepoint read write)))
(dontaudit su system_server_wrapfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lmx 6 system/sepolicy/private/surfaceflinger.te

(allow init surfaceflinger_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 6 system/sepolicy/private/surfaceflinger.te

(allow init surfaceflinger (process (transition)))
;;* lme

;;* lmx 6 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger surfaceflinger_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init surfaceflinger (process (noatsecure)))
;;* lmx 6 system/sepolicy/private/surfaceflinger.te

(allow init surfaceflinger (process (siginh rlimitinh)))
;;* lme

(typetransition init surfaceflinger_exec process surfaceflinger)
(typetransition surfaceflinger tmpfs file surfaceflinger_tmpfs)
;;* lmx 7 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger surfaceflinger_tmpfs (file (read write getattr map)))
;;* lme

;;* lmx 12 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger runtime_event_log_tags_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 15 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger hal_graphics_allocator (memfd_file (read write getattr map)))
;;* lme

;;* lmx 15 system/sepolicy/private/surfaceflinger.te

(allow hal_graphics_allocator surfaceflinger (memfd_file (read write getattr map)))
;;* lme

;;* lmx 16 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger hal_graphics_composer (memfd_file (read write getattr map)))
;;* lme

;;* lmx 16 system/sepolicy/private/surfaceflinger.te

(allow hal_graphics_composer surfaceflinger (memfd_file (read write getattr map)))
;;* lme

;;* lmx 18 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger hal_codec2 (memfd_file (read write getattr map)))
;;* lme

;;* lmx 18 system/sepolicy/private/surfaceflinger.te

(allow hal_codec2 surfaceflinger (memfd_file (read write getattr map)))
;;* lme

;;* lmx 19 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger hal_omx (memfd_file (read write getattr map)))
;;* lme

;;* lmx 19 system/sepolicy/private/surfaceflinger.te

(allow hal_omx surfaceflinger (memfd_file (read write getattr map)))
;;* lme

;;* lmx 20 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger hal_configstore (memfd_file (read write getattr map)))
;;* lme

;;* lmx 20 system/sepolicy/private/surfaceflinger.te

(allow hal_configstore surfaceflinger (memfd_file (read write getattr map)))
;;* lme

;;* lmx 21 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger hal_power (memfd_file (read write getattr map)))
;;* lme

;;* lmx 21 system/sepolicy/private/surfaceflinger.te

(allow hal_power surfaceflinger (memfd_file (read write getattr map)))
;;* lme

;;* lmx 22 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger hidl_token_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 25 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger servicemanager (binder (call transfer)))
;;* lme

;;* lmx 25 system/sepolicy/private/surfaceflinger.te

(allow servicemanager surfaceflinger (binder (call transfer)))
;;* lme

;;* lmx 26 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger binderservicedomain (binder (call transfer)))
;;* lme

;;* lmx 26 system/sepolicy/private/surfaceflinger.te

(allow binderservicedomain surfaceflinger (binder (transfer)))
;;* lme

;;* lmx 26 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger binderservicedomain (fd (use)))
;;* lme

;;* lmx 27 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger appdomain (binder (call transfer)))
;;* lme

;;* lmx 27 system/sepolicy/private/surfaceflinger.te

(allow appdomain surfaceflinger (binder (transfer)))
;;* lme

;;* lmx 27 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger appdomain (fd (use)))
;;* lme

;;* lmx 28 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger bootanim (binder (call transfer)))
;;* lme

;;* lmx 28 system/sepolicy/private/surfaceflinger.te

(allow bootanim surfaceflinger (binder (transfer)))
;;* lme

;;* lmx 28 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger bootanim (fd (use)))
;;* lme

;;* lmx 29 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger system_server (binder (call transfer)))
;;* lme

;;* lmx 29 system/sepolicy/private/surfaceflinger.te

(allow system_server surfaceflinger (binder (transfer)))
;;* lme

;;* lmx 29 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger system_server (fd (use)))
;;* lme

;;* lmx 33 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger adbd (binder (call transfer)))
;;* lme

;;* lmx 33 system/sepolicy/private/surfaceflinger.te

(allow adbd surfaceflinger (binder (transfer)))
;;* lme

;;* lmx 33 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger adbd (fd (use)))
;;* lme

;;* lmx 36 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger binderservicedomain (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 36 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger binderservicedomain (file (ioctl read getattr lock map open watch watch_reads)))
(allow surfaceflinger binderservicedomain (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 37 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger appdomain (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 37 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger appdomain (file (ioctl read getattr lock map open watch watch_reads)))
(allow surfaceflinger appdomain (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 43 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger graphics_device (dir (search)))
;;* lme

;;* lmx 44 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger graphics_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 47 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger video_device (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 48 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger video_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 51 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger dmabuf_system_secure_heap_device (chr_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 54 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger self (netlink_kobject_uevent_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
;;* lme

;;* lmx 57 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger property_socket (sock_file (write)))
;;* lme

;;* lmx 57 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 57 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger system_prop (property_service (set)))
;;* lme

;;* lmx 57 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger system_prop (file (read getattr map open)))
;;* lme

;;* lmx 58 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger property_socket (sock_file (write)))
;;* lme

;;* lmx 58 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 58 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger bootanim_system_prop (property_service (set)))
;;* lme

;;* lmx 58 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger bootanim_system_prop (file (read getattr map open)))
;;* lme

;;* lmx 59 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger property_socket (sock_file (write)))
;;* lme

;;* lmx 59 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 59 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger exported_system_prop (property_service (set)))
;;* lme

;;* lmx 59 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger exported_system_prop (file (read getattr map open)))
;;* lme

;;* lmx 60 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger property_socket (sock_file (write)))
;;* lme

;;* lmx 60 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 60 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger exported3_system_prop (property_service (set)))
;;* lme

;;* lmx 60 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger exported3_system_prop (file (read getattr map open)))
;;* lme

;;* lmx 61 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger property_socket (sock_file (write)))
;;* lme

;;* lmx 61 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 61 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger ctl_bootanim_prop (property_service (set)))
;;* lme

;;* lmx 61 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger ctl_bootanim_prop (file (read getattr map open)))
;;* lme

;;* lmx 62 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger property_socket (sock_file (write)))
;;* lme

;;* lmx 62 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 62 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger locale_prop (property_service (set)))
;;* lme

;;* lmx 62 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger locale_prop (file (read getattr map open)))
;;* lme

;;* lmx 63 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger property_socket (sock_file (write)))
;;* lme

;;* lmx 63 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 63 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger service_sf_present_timestamp_prop (property_service (set)))
;;* lme

;;* lmx 63 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger service_sf_present_timestamp_prop (file (read getattr map open)))
;;* lme

;;* lmx 64 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger property_socket (sock_file (write)))
;;* lme

;;* lmx 64 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 64 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger surfaceflinger_display_prop (property_service (set)))
;;* lme

;;* lmx 64 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger surfaceflinger_display_prop (file (read getattr map open)))
;;* lme

;;* lmx 65 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger property_socket (sock_file (write)))
;;* lme

;;* lmx 65 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 65 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger timezone_prop (property_service (set)))
;;* lme

;;* lmx 65 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger timezone_prop (file (read getattr map open)))
;;* lme

;;* lmx 68 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger qemu_sf_lcd_density_prop (file (read getattr map open)))
;;* lme

;;* lmx 69 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger device_config_surface_flinger_native_boot_prop (file (read getattr map open)))
;;* lme

;;* lmx 72 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger appdomain (fd (use)))
;;* lme

;;* lmx 73 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger app_data_file (file (read write)))
(allow surfaceflinger privapp_data_file (file (read write)))
;;* lme

;;* lmx 75 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger appdomain (memfd_file (read write getattr map)))
;;* lme

;;* lmx 78 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger wm_trace_data_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
;;* lme

;;* lmx 78 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger wm_trace_data_file (file (write create getattr setattr lock append map open)))
;;* lme

;;* lmx 84 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger traced (fd (use)))
;;* lme

;;* lmx 84 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger traced_tmpfs (file (read write getattr map)))
;;* lme

;;* lmx 84 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger traced (memfd_file (read write getattr map)))
;;* lme

;;* lmx 84 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger traced_producer_socket (sock_file (write)))
;;* lme

;;* lmx 84 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger traced (unix_stream_socket (connectto)))
;;* lme

;;* lmx 84 system/sepolicy/private/surfaceflinger.te

(allow traced surfaceflinger (fd (use)))
;;* lme

;;* lmx 87 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger adbd (unix_stream_socket (read write getattr)))
;;* lme

;;* lmx 94 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger base_typeattr_275 (unix_stream_socket (read write)))
;;* lme

;;* lmx 95 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger bootanim (unix_stream_socket (read write)))
;;* lme

;;* lmx 96 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger automotive_display_service (unix_stream_socket (read write)))
;;* lme

;;* lmx 99 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger dumpstate (binder (call transfer)))
;;* lme

;;* lmx 99 system/sepolicy/private/surfaceflinger.te

(allow dumpstate surfaceflinger (binder (transfer)))
;;* lme

;;* lmx 99 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger dumpstate (fd (use)))
;;* lme

;;* lmx 100 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger shell (binder (call transfer)))
;;* lme

;;* lmx 100 system/sepolicy/private/surfaceflinger.te

(allow shell surfaceflinger (binder (transfer)))
;;* lme

;;* lmx 100 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger shell (fd (use)))
;;* lme

;;* lmx 101 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger dumpstate (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 101 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger dumpstate (file (ioctl read getattr lock map open watch watch_reads)))
(allow surfaceflinger dumpstate (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 108 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger surfaceflinger_service (service_manager (add find)))
;;* lme

;;* lmx 110 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger mediaserver_service (service_manager (find)))
;;* lme

;;* lmx 111 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger permission_service (service_manager (find)))
;;* lme

;;* lmx 112 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger power_service (service_manager (find)))
;;* lme

;;* lmx 113 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger vr_manager_service (service_manager (find)))
;;* lme

;;* lmx 114 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger window_service (service_manager (find)))
;;* lme

;;* lmx 115 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger inputflinger_service (service_manager (find)))
;;* lme

;;* lmx 116 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger gpu_service (service_manager (find)))
;;* lme

;;* lmx 119 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger self (capability (sys_nice)))
(allow surfaceflinger self (cap_userns (sys_nice)))
;;* lme

;;* lmx 120 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger proc_meminfo (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 121 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger cgroup (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 121 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger cgroup (file (ioctl read getattr lock map open watch watch_reads)))
(allow surfaceflinger cgroup (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 122 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger cgroup_v2 (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 122 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger cgroup_v2 (file (ioctl read getattr lock map open watch watch_reads)))
(allow surfaceflinger cgroup_v2 (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 123 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger system_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 123 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger system_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow surfaceflinger system_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 124 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger tmpfs (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 125 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger system_server (fd (use)))
;;* lme

;;* lmx 126 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger system_server (unix_stream_socket (read write)))
;;* lme

;;* lmx 127 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger dmabuf_system_heap_device (chr_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 130 system/sepolicy/private/surfaceflinger.te

(allow init pdx_display_client_endpoint_socket_type (unix_stream_socket (create bind)))
;;* lme

;;* lmx 130 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger pdx_display_client_endpoint_socket_type (unix_stream_socket (read write getattr setattr lock append listen accept getopt setopt shutdown)))
;;* lme

;;* lmx 130 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger self (process (setsockcreate)))
;;* lme

;;* lmx 130 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger pdx_display_client_channel_socket_type (unix_stream_socket (ioctl read write create getattr setattr lock append map bind connect listen accept getopt setopt shutdown)))
;;* lme

;;* lmx 130 system/sepolicy/private/surfaceflinger.te

(neverallow base_typeattr_1089 pdx_display_client_endpoint_socket_type (unix_stream_socket (listen accept)))
;;* lme

;;* lmx 131 system/sepolicy/private/surfaceflinger.te

(allow init pdx_display_manager_endpoint_socket_type (unix_stream_socket (create bind)))
;;* lme

;;* lmx 131 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger pdx_display_manager_endpoint_socket_type (unix_stream_socket (read write getattr setattr lock append listen accept getopt setopt shutdown)))
;;* lme

;;* lmx 131 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger self (process (setsockcreate)))
;;* lme

;;* lmx 131 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger pdx_display_manager_channel_socket_type (unix_stream_socket (ioctl read write create getattr setattr lock append map bind connect listen accept getopt setopt shutdown)))
;;* lme

;;* lmx 131 system/sepolicy/private/surfaceflinger.te

(neverallow base_typeattr_1089 pdx_display_manager_endpoint_socket_type (unix_stream_socket (listen accept)))
;;* lme

;;* lmx 132 system/sepolicy/private/surfaceflinger.te

(allow init pdx_display_screenshot_endpoint_socket_type (unix_stream_socket (create bind)))
;;* lme

;;* lmx 132 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger pdx_display_screenshot_endpoint_socket_type (unix_stream_socket (read write getattr setattr lock append listen accept getopt setopt shutdown)))
;;* lme

;;* lmx 132 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger self (process (setsockcreate)))
;;* lme

;;* lmx 132 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger pdx_display_screenshot_channel_socket_type (unix_stream_socket (ioctl read write create getattr setattr lock append map bind connect listen accept getopt setopt shutdown)))
;;* lme

;;* lmx 132 system/sepolicy/private/surfaceflinger.te

(neverallow base_typeattr_1089 pdx_display_screenshot_endpoint_socket_type (unix_stream_socket (listen accept)))
;;* lme

;;* lmx 133 system/sepolicy/private/surfaceflinger.te

(allow init pdx_display_vsync_endpoint_socket_type (unix_stream_socket (create bind)))
;;* lme

;;* lmx 133 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger pdx_display_vsync_endpoint_socket_type (unix_stream_socket (read write getattr setattr lock append listen accept getopt setopt shutdown)))
;;* lme

;;* lmx 133 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger self (process (setsockcreate)))
;;* lme

;;* lmx 133 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger pdx_display_vsync_channel_socket_type (unix_stream_socket (ioctl read write create getattr setattr lock append map bind connect listen accept getopt setopt shutdown)))
;;* lme

;;* lmx 133 system/sepolicy/private/surfaceflinger.te

(neverallow base_typeattr_1089 pdx_display_vsync_endpoint_socket_type (unix_stream_socket (listen accept)))
;;* lme

;;* lmx 135 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger pdx_bufferhub_client_endpoint_dir_type (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 135 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger pdx_bufferhub_client_endpoint_socket_type (sock_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 135 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger pdx_bufferhub_client_endpoint_socket_type (unix_stream_socket (read write shutdown connectto)))
;;* lme

;;* lmx 135 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger pdx_bufferhub_client_channel_socket_type (unix_stream_socket (read write getattr setattr lock append getopt setopt shutdown)))
;;* lme

;;* lmx 135 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger pdx_bufferhub_client_server_type (fd (use)))
;;* lme

;;* lmx 135 system/sepolicy/private/surfaceflinger.te

(allow pdx_bufferhub_client_server_type surfaceflinger (fd (use)))
;;* lme

;;* lmx 136 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger pdx_performance_client_endpoint_dir_type (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 136 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger pdx_performance_client_endpoint_socket_type (sock_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 136 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger pdx_performance_client_endpoint_socket_type (unix_stream_socket (read write shutdown connectto)))
;;* lme

;;* lmx 136 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger pdx_performance_client_channel_socket_type (unix_stream_socket (read write getattr setattr lock append getopt setopt shutdown)))
;;* lme

;;* lmx 136 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger pdx_performance_client_server_type (fd (use)))
;;* lme

;;* lmx 136 system/sepolicy/private/surfaceflinger.te

(allow pdx_performance_client_server_type surfaceflinger (fd (use)))
;;* lme

;;* lmx 139 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger stats_service (service_manager (find)))
;;* lme

;;* lmx 140 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger statsmanager_service (service_manager (find)))
;;* lme

;;* lmx 142 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger statsd (binder (call transfer)))
;;* lme

;;* lmx 142 system/sepolicy/private/surfaceflinger.te

(allow statsd surfaceflinger (binder (transfer)))
;;* lme

;;* lmx 142 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger statsd (fd (use)))
;;* lme

;;* lmx 144 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger statsbootstrap_service (service_manager (find)))
;;* lme

;;* lmx 147 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger hal_evs (fd (use)))
;;* lme

;;* lmx 150 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger hal_camera (fd (use)))
;;* lme

;;* lmx 153 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger surfaceflinger_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 154 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger surfaceflinger_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

(dontaudit surfaceflinger vendor_default_prop (file (read)))
;;* lmx 160 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger gpuservice (binder (call transfer)))
;;* lme

;;* lmx 160 system/sepolicy/private/surfaceflinger.te

(allow gpuservice surfaceflinger (binder (transfer)))
;;* lme

;;* lmx 160 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger gpuservice (fd (use)))
;;* lme

;;* lmx 164 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger crosvm_domain (binder (call transfer)))
;;* lme

;;* lmx 164 system/sepolicy/private/surfaceflinger.te

(allow crosvm_domain surfaceflinger (binder (transfer)))
;;* lme

;;* lmx 164 system/sepolicy/private/surfaceflinger.te

(allow surfaceflinger crosvm_domain (fd (use)))
;;* lme

;;* lmx 175 system/sepolicy/private/surfaceflinger.te

(neverallow surfaceflinger sdcard_type (file (ioctl read write getattr lock append map open watch watch_reads)))
(neverallow surfaceflinger fuse (file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

(dontaudit surfaceflinger unlabeled (dir (search)))
(typetransition system_app tmpfs file appdomain_tmpfs)
;;* lmx 9 system/sepolicy/private/system_app.te

(allow system_app system_app_userfaultfd (anon_inode (ioctl read create)))
;;* lme

(dontaudit su system_app_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lmx 9 system/sepolicy/private/system_app.te

(neverallow base_typeattr_1090 system_app_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 9 system/sepolicy/private/system_app.te

(allow system_app appdomain_tmpfs (file (read write getattr map execute)))
;;* lme

;;* lmx 9 system/sepolicy/private/system_app.te

(allow system_app appdomain (memfd_file (read write getattr map execute)))
;;* lme

;;* lmx 9 system/sepolicy/private/system_app.te

(neverallow base_typeattr_1091 base_typeattr_1090 (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 9 system/sepolicy/private/system_app.te

(neverallow base_typeattr_1092 system_app (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 9 system/sepolicy/private/system_app.te

(neverallow base_typeattr_1093 system_app (process (ptrace)))
;;* lme

;;* lmx 9 system/sepolicy/private/system_app.te

(neverallow system_app base_typeattr_1094 (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 14 system/sepolicy/private/system_app.te

(allow system_app rootfs (dir (getattr)))
;;* lme

;;* lmx 17 system/sepolicy/private/system_app.te

(allow system_app system_app_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 18 system/sepolicy/private/system_app.te

(allow system_app system_app_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow system_app system_app_data_file (lnk_file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 21 system/sepolicy/private/system_app.te

(allow system_app misc_user_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 22 system/sepolicy/private/system_app.te

(allow system_app misc_user_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 27 system/sepolicy/private/system_app.te

(allow system_app apex_data_file (dir (search)))
;;* lme

;;* lmx 28 system/sepolicy/private/system_app.te

(allow system_app staging_data_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 31 system/sepolicy/private/system_app.te

(allow system_app block_device (dir (search)))
;;* lme

;;* lmx 32 system/sepolicy/private/system_app.te

(allow system_app apex_dm_device (blk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 35 system/sepolicy/private/system_app.te

(allow system_app wallpaper_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 38 system/sepolicy/private/system_app.te

(allow system_app icon_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 47 system/sepolicy/private/system_app.te

(allowx system_app apk_data_file (ioctl file ((range 0x671f 0x6720) 0x6722 0x6724)))
;;* lme

;;* lmx 50 system/sepolicy/private/system_app.te

(allow system_app property_socket (sock_file (write)))
;;* lme

;;* lmx 50 system/sepolicy/private/system_app.te

(allow system_app init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 50 system/sepolicy/private/system_app.te

(allow system_app adaptive_haptics_prop (property_service (set)))
;;* lme

;;* lmx 50 system/sepolicy/private/system_app.te

(allow system_app adaptive_haptics_prop (file (read getattr map open)))
;;* lme

;;* lmx 51 system/sepolicy/private/system_app.te

(allow system_app property_socket (sock_file (write)))
;;* lme

;;* lmx 51 system/sepolicy/private/system_app.te

(allow system_app init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 51 system/sepolicy/private/system_app.te

(allow system_app arm64_memtag_prop (property_service (set)))
;;* lme

;;* lmx 51 system/sepolicy/private/system_app.te

(allow system_app arm64_memtag_prop (file (read getattr map open)))
;;* lme

;;* lmx 52 system/sepolicy/private/system_app.te

(allow system_app property_socket (sock_file (write)))
;;* lme

;;* lmx 52 system/sepolicy/private/system_app.te

(allow system_app init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 52 system/sepolicy/private/system_app.te

(allow system_app bluetooth_a2dp_offload_prop (property_service (set)))
;;* lme

;;* lmx 52 system/sepolicy/private/system_app.te

(allow system_app bluetooth_a2dp_offload_prop (file (read getattr map open)))
;;* lme

;;* lmx 53 system/sepolicy/private/system_app.te

(allow system_app property_socket (sock_file (write)))
;;* lme

;;* lmx 53 system/sepolicy/private/system_app.te

(allow system_app init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 53 system/sepolicy/private/system_app.te

(allow system_app bluetooth_audio_hal_prop (property_service (set)))
;;* lme

;;* lmx 53 system/sepolicy/private/system_app.te

(allow system_app bluetooth_audio_hal_prop (file (read getattr map open)))
;;* lme

;;* lmx 54 system/sepolicy/private/system_app.te

(allow system_app property_socket (sock_file (write)))
;;* lme

;;* lmx 54 system/sepolicy/private/system_app.te

(allow system_app init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 54 system/sepolicy/private/system_app.te

(allow system_app bluetooth_prop (property_service (set)))
;;* lme

;;* lmx 54 system/sepolicy/private/system_app.te

(allow system_app bluetooth_prop (file (read getattr map open)))
;;* lme

;;* lmx 55 system/sepolicy/private/system_app.te

(allow system_app property_socket (sock_file (write)))
;;* lme

;;* lmx 55 system/sepolicy/private/system_app.te

(allow system_app init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 55 system/sepolicy/private/system_app.te

(allow system_app debug_prop (property_service (set)))
;;* lme

;;* lmx 55 system/sepolicy/private/system_app.te

(allow system_app debug_prop (file (read getattr map open)))
;;* lme

;;* lmx 56 system/sepolicy/private/system_app.te

(allow system_app property_socket (sock_file (write)))
;;* lme

;;* lmx 56 system/sepolicy/private/system_app.te

(allow system_app init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 56 system/sepolicy/private/system_app.te

(allow system_app system_prop (property_service (set)))
;;* lme

;;* lmx 56 system/sepolicy/private/system_app.te

(allow system_app system_prop (file (read getattr map open)))
;;* lme

;;* lmx 57 system/sepolicy/private/system_app.te

(allow system_app property_socket (sock_file (write)))
;;* lme

;;* lmx 57 system/sepolicy/private/system_app.te

(allow system_app init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 57 system/sepolicy/private/system_app.te

(allow system_app exported_bluetooth_prop (property_service (set)))
;;* lme

;;* lmx 57 system/sepolicy/private/system_app.te

(allow system_app exported_bluetooth_prop (file (read getattr map open)))
;;* lme

;;* lmx 58 system/sepolicy/private/system_app.te

(allow system_app property_socket (sock_file (write)))
;;* lme

;;* lmx 58 system/sepolicy/private/system_app.te

(allow system_app init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 58 system/sepolicy/private/system_app.te

(allow system_app exported_system_prop (property_service (set)))
;;* lme

;;* lmx 58 system/sepolicy/private/system_app.te

(allow system_app exported_system_prop (file (read getattr map open)))
;;* lme

;;* lmx 59 system/sepolicy/private/system_app.te

(allow system_app property_socket (sock_file (write)))
;;* lme

;;* lmx 59 system/sepolicy/private/system_app.te

(allow system_app init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 59 system/sepolicy/private/system_app.te

(allow system_app exported3_system_prop (property_service (set)))
;;* lme

;;* lmx 59 system/sepolicy/private/system_app.te

(allow system_app exported3_system_prop (file (read getattr map open)))
;;* lme

;;* lmx 60 system/sepolicy/private/system_app.te

(allow system_app property_socket (sock_file (write)))
;;* lme

;;* lmx 60 system/sepolicy/private/system_app.te

(allow system_app init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 60 system/sepolicy/private/system_app.te

(allow system_app gesture_prop (property_service (set)))
;;* lme

;;* lmx 60 system/sepolicy/private/system_app.te

(allow system_app gesture_prop (file (read getattr map open)))
;;* lme

;;* lmx 61 system/sepolicy/private/system_app.te

(allow system_app property_socket (sock_file (write)))
;;* lme

;;* lmx 61 system/sepolicy/private/system_app.te

(allow system_app init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 61 system/sepolicy/private/system_app.te

(allow system_app locale_prop (property_service (set)))
;;* lme

;;* lmx 61 system/sepolicy/private/system_app.te

(allow system_app locale_prop (file (read getattr map open)))
;;* lme

;;* lmx 62 system/sepolicy/private/system_app.te

(allow system_app property_socket (sock_file (write)))
;;* lme

;;* lmx 62 system/sepolicy/private/system_app.te

(allow system_app init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 62 system/sepolicy/private/system_app.te

(allow system_app logd_prop (property_service (set)))
;;* lme

;;* lmx 62 system/sepolicy/private/system_app.te

(allow system_app logd_prop (file (read getattr map open)))
;;* lme

;;* lmx 63 system/sepolicy/private/system_app.te

(allow system_app property_socket (sock_file (write)))
;;* lme

;;* lmx 63 system/sepolicy/private/system_app.te

(allow system_app init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 63 system/sepolicy/private/system_app.te

(allow system_app net_radio_prop (property_service (set)))
;;* lme

;;* lmx 63 system/sepolicy/private/system_app.te

(allow system_app net_radio_prop (file (read getattr map open)))
;;* lme

;;* lmx 64 system/sepolicy/private/system_app.te

(allow system_app property_socket (sock_file (write)))
;;* lme

;;* lmx 64 system/sepolicy/private/system_app.te

(allow system_app init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 64 system/sepolicy/private/system_app.te

(allow system_app timezone_prop (property_service (set)))
;;* lme

;;* lmx 64 system/sepolicy/private/system_app.te

(allow system_app timezone_prop (file (read getattr map open)))
;;* lme

;;* lmx 65 system/sepolicy/private/system_app.te

(allow system_app property_socket (sock_file (write)))
;;* lme

;;* lmx 65 system/sepolicy/private/system_app.te

(allow system_app init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 65 system/sepolicy/private/system_app.te

(allow system_app usb_control_prop (property_service (set)))
;;* lme

;;* lmx 65 system/sepolicy/private/system_app.te

(allow system_app usb_control_prop (file (read getattr map open)))
;;* lme

;;* lmx 66 system/sepolicy/private/system_app.te

(allow system_app property_socket (sock_file (write)))
;;* lme

;;* lmx 66 system/sepolicy/private/system_app.te

(allow system_app init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 66 system/sepolicy/private/system_app.te

(allow system_app usb_prop (property_service (set)))
;;* lme

;;* lmx 66 system/sepolicy/private/system_app.te

(allow system_app usb_prop (file (read getattr map open)))
;;* lme

;;* lmx 67 system/sepolicy/private/system_app.te

(allow system_app property_socket (sock_file (write)))
;;* lme

;;* lmx 67 system/sepolicy/private/system_app.te

(allow system_app init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 67 system/sepolicy/private/system_app.te

(allow system_app log_tag_prop (property_service (set)))
;;* lme

;;* lmx 67 system/sepolicy/private/system_app.te

(allow system_app log_tag_prop (file (read getattr map open)))
;;* lme

;;* lmx 68 system/sepolicy/private/system_app.te

(allow system_app property_socket (sock_file (write)))
;;* lme

;;* lmx 68 system/sepolicy/private/system_app.te

(allow system_app init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 68 system/sepolicy/private/system_app.te

(allow system_app drm_forcel3_prop (property_service (set)))
;;* lme

;;* lmx 68 system/sepolicy/private/system_app.te

(allow system_app drm_forcel3_prop (file (read getattr map open)))
;;* lme

;;* lmx 69 system/sepolicy/private/system_app.te

(allow system_app property_socket (sock_file (write)))
;;* lme

;;* lmx 69 system/sepolicy/private/system_app.te

(allow system_app init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 69 system/sepolicy/private/system_app.te

(allow system_app logpersistd_logging_prop (property_service (set)))
;;* lme

;;* lmx 69 system/sepolicy/private/system_app.te

(allow system_app logpersistd_logging_prop (file (read getattr map open)))
;;* lme

(auditallow system_app net_radio_prop (property_service (set)))
(auditallow system_app usb_control_prop (property_service (set)))
(auditallow system_app usb_prop (property_service (set)))
;;* lmx 74 system/sepolicy/private/system_app.te

(allow system_app property_socket (sock_file (write)))
;;* lme

;;* lmx 74 system/sepolicy/private/system_app.te

(allow system_app init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 74 system/sepolicy/private/system_app.te

(allow system_app dynamic_system_prop (property_service (set)))
;;* lme

;;* lmx 74 system/sepolicy/private/system_app.te

(allow system_app dynamic_system_prop (file (read getattr map open)))
;;* lme

;;* lmx 77 system/sepolicy/private/system_app.te

(allow system_app property_socket (sock_file (write)))
;;* lme

;;* lmx 77 system/sepolicy/private/system_app.te

(allow system_app init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 77 system/sepolicy/private/system_app.te

(allow system_app bluetooth_lea_prop (property_service (set)))
;;* lme

;;* lmx 77 system/sepolicy/private/system_app.te

(allow system_app bluetooth_lea_prop (file (read getattr map open)))
;;* lme

;;* lmx 80 system/sepolicy/private/system_app.te

(allow system_app property_socket (sock_file (write)))
;;* lme

;;* lmx 80 system/sepolicy/private/system_app.te

(allow system_app init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 80 system/sepolicy/private/system_app.te

(allow system_app ctl_default_prop (property_service (set)))
;;* lme

;;* lmx 80 system/sepolicy/private/system_app.te

(allow system_app ctl_default_prop (file (read getattr map open)))
;;* lme

;;* lmx 81 system/sepolicy/private/system_app.te

(allow system_app property_socket (sock_file (write)))
;;* lme

;;* lmx 81 system/sepolicy/private/system_app.te

(allow system_app init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 81 system/sepolicy/private/system_app.te

(allow system_app ctl_bugreport_prop (property_service (set)))
;;* lme

;;* lmx 81 system/sepolicy/private/system_app.te

(allow system_app ctl_bugreport_prop (file (read getattr map open)))
;;* lme

;;* lmx 84 system/sepolicy/private/system_app.te

(allow system_app gsid_prop (file (read getattr map open)))
;;* lme

;;* lmx 87 system/sepolicy/private/system_app.te

(allow system_app enable_16k_pages_prop (file (read getattr map open)))
;;* lme

;;* lmx 90 system/sepolicy/private/system_app.te

(allow system_app hypervisor_prop (file (read getattr map open)))
;;* lme

;;* lmx 92 system/sepolicy/private/system_app.te

(allow system_app dumpstate_last_id_prop (file (read getattr map open)))
;;* lme

;;* lmx 95 system/sepolicy/private/system_app.te

(allow system_app anr_data_file (dir (ioctl read write getattr lock open watch watch_reads add_name search)))
;;* lme

;;* lmx 96 system/sepolicy/private/system_app.te

(allow system_app anr_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 99 system/sepolicy/private/system_app.te

(allow system_app asec_apk_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 102 system/sepolicy/private/system_app.te

(allow system_app statsd (binder (call transfer)))
;;* lme

;;* lmx 102 system/sepolicy/private/system_app.te

(allow statsd system_app (binder (transfer)))
;;* lme

;;* lmx 102 system/sepolicy/private/system_app.te

(allow system_app statsd (fd (use)))
;;* lme

;;* lmx 105 system/sepolicy/private/system_app.te

(allow system_app incidentd (binder (call transfer)))
;;* lme

;;* lmx 105 system/sepolicy/private/system_app.te

(allow incidentd system_app (binder (transfer)))
;;* lme

;;* lmx 105 system/sepolicy/private/system_app.te

(allow system_app incidentd (fd (use)))
;;* lme

;;* lmx 109 system/sepolicy/private/system_app.te

(allow system_app servicemanager (binder (call transfer)))
;;* lme

;;* lmx 109 system/sepolicy/private/system_app.te

(allow servicemanager system_app (binder (call transfer)))
;;* lme

;;* lmx 110 system/sepolicy/private/system_app.te

(allow system_app update_engine_stable_service (service_manager (find)))
;;* lme

;;* lmx 111 system/sepolicy/private/system_app.te

(allow system_app update_engine (binder (call transfer)))
;;* lme

;;* lmx 111 system/sepolicy/private/system_app.te

(allow update_engine system_app (binder (transfer)))
;;* lme

;;* lmx 111 system/sepolicy/private/system_app.te

(allow system_app update_engine (fd (use)))
;;* lme

;;* lmx 114 system/sepolicy/private/system_app.te

(allow system_app hal_dumpstate (memfd_file (read write getattr map)))
;;* lme

;;* lmx 114 system/sepolicy/private/system_app.te

(allow hal_dumpstate system_app (memfd_file (read write getattr map)))
;;* lme

;;* lmx 116 system/sepolicy/private/system_app.te

(allow system_app servicemanager (service_manager (list)))
;;* lme

;;* lmx 134 system/sepolicy/private/system_app.te

(allow system_app base_typeattr_1095 (service_manager (find)))
;;* lme

(dontaudit system_app dnsresolver_service (service_manager (find)))
(dontaudit system_app dumpstate_service (service_manager (find)))
(dontaudit system_app installd_service (service_manager (find)))
(dontaudit system_app mdns_service (service_manager (find)))
(dontaudit system_app netd_service (service_manager (find)))
(dontaudit system_app virtual_touchpad_service (service_manager (find)))
(dontaudit system_app vold_service (service_manager (find)))
(dontaudit system_app debugfs_tracing (file (ioctl read write getattr lock append map open watch watch_reads)))
(dontaudit system_app proc_pagetypeinfo (file (ioctl read getattr lock map open watch watch_reads)))
(dontaudit system_app sysfs_zram (dir (search)))
;;* lmx 160 system/sepolicy/private/system_app.te

(allow system_app keystore (keystore2_key (delete get_info grant rebind update use)))
;;* lme

;;* lmx 169 system/sepolicy/private/system_app.te

(allow system_app wifi_key (keystore2_key (delete get_info rebind update use)))
;;* lme

;;* lmx 174 system/sepolicy/private/system_app.te

(allow system_app proc_version (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 177 system/sepolicy/private/system_app.te

(allow system_app cgroup (file (write lock append map open)))
;;* lme

;;* lmx 178 system/sepolicy/private/system_app.te

(allow system_app cgroup_v2 (file (write lock append map open)))
;;* lme

;;* lmx 179 system/sepolicy/private/system_app.te

(allow system_app cgroup_v2 (dir (write lock open add_name remove_name search)))
;;* lme

;;* lmx 181 system/sepolicy/private/system_app.te

(allow system_app logd_socket (sock_file (write)))
;;* lme

;;* lmx 181 system/sepolicy/private/system_app.te

(allow system_app logd (unix_stream_socket (connectto)))
;;* lme

;;* lmx 182 system/sepolicy/private/system_app.te

(allow system_app runtime_event_log_tags_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 183 system/sepolicy/private/system_app.te

(allow system_app device_logging_prop (file (read getattr map open)))
;;* lme

;;* lmx 188 system/sepolicy/private/system_app.te

(allow system_app system_server (udp_socket (read write getattr connect getopt setopt recvfrom sendto)))
;;* lme

;;* lmx 191 system/sepolicy/private/system_app.te

(allow system_app game_manager_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 194 system/sepolicy/private/system_app.te

(allow system_app oem_unlock_prop (file (read getattr map open)))
;;* lme

;;* lmx 197 system/sepolicy/private/system_app.te

(allow system_app usb_uvc_enabled_prop (file (read getattr map open)))
;;* lme

;;* lmx 200 system/sepolicy/private/system_app.te

(allow system_app connectivityblob_data_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
;;* lme

;;* lmx 201 system/sepolicy/private/system_app.te

(allow system_app connectivityblob_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 208 system/sepolicy/private/system_app.te

(neverallow system_app fuse_device (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
;;* lme

;;* lmx 214 system/sepolicy/private/system_app.te

(neverallow system_app shell_data_file (dir (read write create setattr relabelfrom link rename open add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 215 system/sepolicy/private/system_app.te

(neverallow system_app shell_data_file (file (ioctl read lock open)))
;;* lme

;;* lmx 218 system/sepolicy/private/system_app.te

(neverallow base_typeattr_1096 adaptive_haptics_prop (property_service (set)))
;;* lme

;;* lmx 220 system/sepolicy/private/system_app.te

(neverallow base_typeattr_1096 drm_forcel3_prop (property_service (set)))
;;* lme

;;* lmx 222 system/sepolicy/private/system_app.te

(allow system_app vendor_boot_ota_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 223 system/sepolicy/private/system_app.te

(allow system_app vendor_boot_ota_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 226 system/sepolicy/private/system_app.te

(allow system_app system_dlkm_file (dir (search)))
;;* lme

;;* lmx 227 system/sepolicy/private/system_app.te

(allow system_app system_dlkm_file (file (read getattr open)))
;;* lme

(typetransition system_server tmpfs file system_server_tmpfs)
;;* lmx 15 system/sepolicy/private/system_server.te

(allow system_server system_server_tmpfs (file (read write getattr map)))
;;* lme

;;* lmx 17 system/sepolicy/private/system_server.te

(allow system_server system_server_userfaultfd (anon_inode (ioctl read create)))
;;* lme

(dontaudit su system_server_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lmx 17 system/sepolicy/private/system_server.te

(neverallow base_typeattr_427 system_server_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 25 system/sepolicy/private/system_server.te

(allow system_server tmpfs (file (read write map)))
;;* lme

;;* lmx 26 system/sepolicy/private/system_server.te

(allow system_server zygote_tmpfs (file (read write map)))
;;* lme

;;* lmx 27 system/sepolicy/private/system_server.te

(allow system_server appdomain_tmpfs (file (read write getattr map)))
;;* lme

;;* lmx 28 system/sepolicy/private/system_server.te

(allow system_server zygote (memfd_file (read write map)))
;;* lme

;;* lmx 29 system/sepolicy/private/system_server.te

(allow system_server appdomain (memfd_file (read write getattr map)))
;;* lme

;;* lmx 32 system/sepolicy/private/system_server.te

(allow system_server proc_filesystems (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 35 system/sepolicy/private/system_server.te

(allow system_server incremental_control_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 43 system/sepolicy/private/system_server.te

(allowx system_server incremental_control_file (ioctl file (0x671e 0x6721 0x6723 (range 0x6725 0x6727))))
;;* lme

;;* lmx 60 system/sepolicy/private/system_server.te

(allowx system_server apk_data_file (ioctl file ((range 0x6601 0x6602))))
;;* lme

;;* lmx 60 system/sepolicy/private/system_server.te

(allowx system_server apk_data_file (ioctl file ((range 0x671f 0x6720) 0x6722 0x6724)))
;;* lme

;;* lmx 60 system/sepolicy/private/system_server.te

(allowx system_server apk_data_file (ioctl file (0xf50c (range 0xf511 0xf513) (range 0xf517 0xf518))))
;;* lme

;;* lmx 65 system/sepolicy/private/system_server.te

(allowx system_server apk_tmp_file (ioctl file (0x6601)))
;;* lme

;;* lmx 65 system/sepolicy/private/system_server.te

(allowx system_server apk_tmp_file (ioctl file (0xf512)))
;;* lme

;;* lmx 68 system/sepolicy/private/system_server.te

(allow system_server sysfs_fs_incfs_metrics (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 71 system/sepolicy/private/system_server.te

(allow system_server sysfs_fs_f2fs (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 72 system/sepolicy/private/system_server.te

(allow system_server sysfs_fs_f2fs (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 75 system/sepolicy/private/system_server.te

(allow system_server sdk_sandbox_system_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 78 system/sepolicy/private/system_server.te

(allow system_server dalvikcache_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
(allow system_server apex_art_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 79 system/sepolicy/private/system_server.te

(allow system_server dalvikcache_data_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow system_server apex_art_data_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

(dontaudit system_server apex_art_data_file (file (execute)))
;;* lmx 91 system/sepolicy/private/system_server.te

(allowx system_server dalvikcache_data_file (ioctl file (0x6601)))
;;* lme

;;* lmx 91 system/sepolicy/private/system_server.te

(allowx system_server dalvikcache_data_file (ioctl file (0xf512)))
;;* lme

;;* lmx 98 system/sepolicy/private/system_server.te

(allow system_server resourcecache_data_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 99 system/sepolicy/private/system_server.te

(allow system_server resourcecache_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 102 system/sepolicy/private/system_server.te

(allow system_server zygote (fd (use)))
;;* lme

;;* lmx 103 system/sepolicy/private/system_server.te

(allow system_server zygote (process (sigchld)))
;;* lme

;;* lmx 114 system/sepolicy/private/system_server.te

(allow system_server virtualizationmanager_domain (process (sigkill signull setsched getpgid)))
(allow system_server crosvm_domain (process (sigkill signull setsched getpgid)))
(allow system_server app_zygote (process (sigkill signull setsched getpgid)))
(allow system_server crash_dump (process (sigkill signull setsched getpgid)))
(allow system_server webview_zygote (process (sigkill signull setsched getpgid)))
(allow system_server zygote (process (sigkill signull setsched getpgid)))
(allow system_server native_app_zygote (process (sigkill signull setsched getpgid)))
;;* lme

;;* lmx 117 system/sepolicy/private/system_server.te

(allow system_server zygote_exec (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 120 system/sepolicy/private/system_server.te

(allow system_server zygote (unix_stream_socket (getattr getopt)))
;;* lme

;;* lmx 126 system/sepolicy/private/system_server.te

(allowx system_server self (ioctl udp_socket (0x6900 0x6902)))
;;* lme

;;* lmx 126 system/sepolicy/private/system_server.te

(allowx system_server self (ioctl udp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
;;* lme

;;* lmx 126 system/sepolicy/private/system_server.te

(allowx system_server self (ioctl udp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
;;* lme

;;* lmx 133 system/sepolicy/private/system_server.te

(allow system_server appdomain (tcp_socket (ioctl)))
;;* lme

;;* lmx 149 system/sepolicy/private/system_server.te

(allow system_server self (capability (kill net_bind_service net_broadcast net_admin net_raw ipc_lock sys_ptrace sys_boot sys_nice sys_time sys_tty_config)))
(allow system_server self (cap_userns (kill net_bind_service net_broadcast net_admin net_raw ipc_lock sys_ptrace sys_boot sys_nice sys_time sys_tty_config)))
;;* lme

;;* lmx 154 system/sepolicy/private/system_server.te

(allow system_server self (capability2 (mac_admin)))
(allow system_server self (cap2_userns (mac_admin)))
;;* lme

;;* lmx 157 system/sepolicy/private/system_server.te

(allow system_server self (capability2 (wake_alarm)))
(allow system_server self (cap2_userns (wake_alarm)))
;;* lme

;;* lmx 160 system/sepolicy/private/system_server.te

(allow system_server self (netlink_netfilter_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
;;* lme

;;* lmx 163 system/sepolicy/private/system_server.te

(allow system_server self (netlink_tcpdiag_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
;;* lme

;;* lmx 165 system/sepolicy/private/system_server.te

(allow system_server self (netlink_tcpdiag_socket (nlmsg_read nlmsg_write)))
;;* lme

;;* lmx 167 system/sepolicy/private/system_server.te

(allow system_server self (netlink_tcpdiag_socket (nlmsg)))
;;* lme

;;* lmx 170 system/sepolicy/private/system_server.te

(allow system_server self (netlink_kobject_uevent_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
;;* lme

;;* lmx 172 system/sepolicy/private/system_server.te

(allow system_server self (netlink_nflog_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
;;* lme

;;* lmx 175 system/sepolicy/private/system_server.te

(allow system_server self (netlink_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
;;* lme

;;* lmx 176 system/sepolicy/private/system_server.te

(allow system_server self (netlink_generic_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
;;* lme

;;* lmx 179 system/sepolicy/private/system_server.te

(allow system_server config_gz (file (read open)))
;;* lme

;;* lmx 185 system/sepolicy/private/system_server.te

(allow system_server self (socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
;;* lme

;;* lmx 188 system/sepolicy/private/system_server.te

(allow system_server self (netlink_route_socket (nlmsg_write)))
;;* lme

;;* lmx 189 system/sepolicy/private/system_server.te

(allowx system_server self (nlmsg netlink_route_socket ((range 0x10 0x7a))))
;;* lme

;;* lmx 192 system/sepolicy/private/system_server.te

(allow system_server self (netlink_xfrm_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
;;* lme

;;* lmx 194 system/sepolicy/private/system_server.te

(allow system_server self (netlink_xfrm_socket (nlmsg_read nlmsg_write)))
;;* lme

;;* lmx 196 system/sepolicy/private/system_server.te

(allow system_server self (netlink_xfrm_socket (nlmsg)))
;;* lme

;;* lmx 199 system/sepolicy/private/system_server.te

(allow system_server appdomain (process (sigkill signal getpgid)))
;;* lme

;;* lmx 201 system/sepolicy/private/system_server.te

(allow system_server appdomain (process (signull)))
;;* lme

;;* lmx 204 system/sepolicy/private/system_server.te

(allow system_server appdomain (process (getsched setsched)))
;;* lme

;;* lmx 205 system/sepolicy/private/system_server.te

(allow system_server audioserver (process (getsched setsched)))
;;* lme

;;* lmx 206 system/sepolicy/private/system_server.te

(allow system_server hal_audio (process (getsched setsched)))
;;* lme

;;* lmx 207 system/sepolicy/private/system_server.te

(allow system_server hal_bluetooth (process (getsched setsched)))
;;* lme

;;* lmx 208 system/sepolicy/private/system_server.te

(allow system_server hal_codec2_server (process (getsched setsched)))
;;* lme

;;* lmx 209 system/sepolicy/private/system_server.te

(allow system_server hal_omx_server (process (getsched setsched)))
;;* lme

;;* lmx 210 system/sepolicy/private/system_server.te

(allow system_server mediaswcodec (process (getsched setsched)))
;;* lme

;;* lmx 211 system/sepolicy/private/system_server.te

(allow system_server cameraserver (process (getsched setsched)))
;;* lme

;;* lmx 212 system/sepolicy/private/system_server.te

(allow system_server hal_camera (process (getsched setsched)))
;;* lme

;;* lmx 213 system/sepolicy/private/system_server.te

(allow system_server mediaserver (process (getsched setsched)))
;;* lme

;;* lmx 214 system/sepolicy/private/system_server.te

(allow system_server bootanim (process (getsched setsched)))
;;* lme

;;* lmx 216 system/sepolicy/private/system_server.te

(allow system_server virtualizationmanager_domain (process (getsched setsched)))
(allow system_server crosvm_domain (process (getsched setsched)))
(allow system_server crosvm_vu_fs (process (getsched setsched)))
;;* lme

;;* lmx 220 system/sepolicy/private/system_server.te

(allow system_server kernel (process (getsched setsched)))
;;* lme

;;* lmx 223 system/sepolicy/private/system_server.te

(allow system_server domain (file (write lock append map open)))
;;* lme

;;* lmx 229 system/sepolicy/private/system_server.te

(allow system_server domain (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 229 system/sepolicy/private/system_server.te

(allow system_server domain (file (ioctl read getattr lock map open watch watch_reads)))
(allow system_server domain (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 232 system/sepolicy/private/system_server.te

(allow system_server proc_uid_cputime_removeuid (file (write getattr lock append map open)))
;;* lme

;;* lmx 235 system/sepolicy/private/system_server.te

(allow system_server proc_uid_procstat_set (file (write getattr lock append map open)))
;;* lme

;;* lmx 238 system/sepolicy/private/system_server.te

(allow system_server proc_sysrq (file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 241 system/sepolicy/private/system_server.te

(allow system_server proc_tty_drivers (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 244 system/sepolicy/private/system_server.te

(allow system_server stats_config_data_file (dir (read write open remove_name search)))
;;* lme

;;* lmx 245 system/sepolicy/private/system_server.te

(allow system_server stats_config_data_file (file (unlink)))
;;* lme

;;* lmx 248 system/sepolicy/private/system_server.te

(allow system_server odsign_data_file (dir (search)))
;;* lme

;;* lmx 249 system/sepolicy/private/system_server.te

(allow system_server odsign_metrics_file (dir (ioctl read write getattr lock open watch watch_reads remove_name search)))
;;* lme

;;* lmx 250 system/sepolicy/private/system_server.te

(allow system_server odsign_metrics_file (file (ioctl read getattr lock map unlink open watch watch_reads)))
;;* lme

;;* lmx 258 system/sepolicy/private/system_server.te

(allow system_server sysfs_dma_heap (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 261 system/sepolicy/private/system_server.te

(allow system_server sysfs_cma (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 264 system/sepolicy/private/system_server.te

(allow system_server sysfs_dmabuf_stats (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 265 system/sepolicy/private/system_server.te

(allow system_server sysfs_dmabuf_stats (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 268 system/sepolicy/private/system_server.te

(allow system_server fs_bpf_dmabuf (dir (search)))
;;* lme

;;* lmx 269 system/sepolicy/private/system_server.te

(allow system_server fs_bpf_dmabuf (file (read getattr open)))
;;* lme

;;* lmx 273 system/sepolicy/private/system_server.te

(allow system_server dmabuf_heap_device (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 278 system/sepolicy/private/system_server.te

(allow system_server wrapfd_device (chr_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 278 system/sepolicy/private/system_server.te

(allowx system_server wrapfd_device (ioctl chr_file (0xbc00)))
;;* lme

;;* lmx 285 system/sepolicy/private/system_server.te

(allow system_server system_server_wrapfd (anon_inode (ioctl read write create getattr map)))
;;* lme

;;* lmx 286 system/sepolicy/private/system_server.te

(allowx system_server system_server_wrapfd (ioctl anon_inode ((range 0x6200 0x6203))))
;;* lme

;;* lmx 286 system/sepolicy/private/system_server.te

(allowx system_server system_server_wrapfd (ioctl anon_inode ((range 0xbc01 0xbc08))))
;;* lme

;;* lmx 289 system/sepolicy/private/system_server.te

(allow system_server proc_vmstat (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 292 system/sepolicy/private/system_server.te

(allow system_server self (packet_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
;;* lme

;;* lmx 295 system/sepolicy/private/system_server.te

(allow system_server self (tun_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
;;* lme

;;* lmx 298 system/sepolicy/private/system_server.te

(allow system_server lmkd_socket (sock_file (write)))
;;* lme

;;* lmx 298 system/sepolicy/private/system_server.te

(allow system_server lmkd (unix_stream_socket (connectto)))
;;* lme

;;* lmx 299 system/sepolicy/private/system_server.te

(allow system_server zygote_socket (sock_file (write)))
;;* lme

;;* lmx 299 system/sepolicy/private/system_server.te

(allow system_server zygote (unix_stream_socket (connectto)))
;;* lme

;;* lmx 300 system/sepolicy/private/system_server.te

(allow system_server zygote_next_socket (sock_file (write)))
;;* lme

;;* lmx 300 system/sepolicy/private/system_server.te

(allow system_server zygote_next (unix_stream_socket (connectto)))
;;* lme

;;* lmx 301 system/sepolicy/private/system_server.te

(allow system_server uncrypt_socket (sock_file (write)))
;;* lme

;;* lmx 301 system/sepolicy/private/system_server.te

(allow system_server uncrypt (unix_stream_socket (connectto)))
;;* lme

;;* lmx 304 system/sepolicy/private/system_server.te

(allow system_server statsdw_socket (sock_file (write)))
;;* lme

;;* lmx 304 system/sepolicy/private/system_server.te

(allow system_server statsd (unix_dgram_socket (sendto)))
;;* lme

;;* lmx 307 system/sepolicy/private/system_server.te

(allow system_server surfaceflinger (unix_stream_socket (read write setopt)))
;;* lme

;;* lmx 309 system/sepolicy/private/system_server.te

(allow system_server gpuservice (unix_stream_socket (read write setopt)))
;;* lme

;;* lmx 312 system/sepolicy/private/system_server.te

(allow system_server webview_zygote (unix_stream_socket (read write setopt connectto)))
;;* lme

;;* lmx 315 system/sepolicy/private/system_server.te

(allow system_server app_zygote (unix_stream_socket (read write setopt connectto)))
;;* lme

;;* lmx 318 system/sepolicy/private/system_server.te

(allow system_server native_app_zygote (unix_stream_socket (read write setopt connectto)))
;;* lme

;;* lmx 321 system/sepolicy/private/system_server.te

(allow system_server priv_app_all_virtualizationmanager (fd (use)))
;;* lme

;;* lmx 322 system/sepolicy/private/system_server.te

(allow system_server priv_app_all_virtualizationmanager (vsock_socket (read write getopt)))
;;* lme

;;* lmx 325 system/sepolicy/private/system_server.te

(allow system_server servicemanager (binder (call transfer)))
;;* lme

;;* lmx 325 system/sepolicy/private/system_server.te

(allow servicemanager system_server (binder (call transfer)))
;;* lme

;;* lmx 326 system/sepolicy/private/system_server.te

(allow system_server appdomain (binder (call transfer)))
;;* lme

;;* lmx 326 system/sepolicy/private/system_server.te

(allow appdomain system_server (binder (transfer)))
;;* lme

;;* lmx 326 system/sepolicy/private/system_server.te

(allow system_server appdomain (fd (use)))
;;* lme

;;* lmx 327 system/sepolicy/private/system_server.te

(allow system_server artd (binder (call transfer)))
;;* lme

;;* lmx 327 system/sepolicy/private/system_server.te

(allow artd system_server (binder (transfer)))
;;* lme

;;* lmx 327 system/sepolicy/private/system_server.te

(allow system_server artd (fd (use)))
;;* lme

;;* lmx 328 system/sepolicy/private/system_server.te

(allow system_server binderservicedomain (binder (call transfer)))
;;* lme

;;* lmx 328 system/sepolicy/private/system_server.te

(allow binderservicedomain system_server (binder (transfer)))
;;* lme

;;* lmx 328 system/sepolicy/private/system_server.te

(allow system_server binderservicedomain (fd (use)))
;;* lme

;;* lmx 329 system/sepolicy/private/system_server.te

(allow system_server composd (binder (call transfer)))
;;* lme

;;* lmx 329 system/sepolicy/private/system_server.te

(allow composd system_server (binder (transfer)))
;;* lme

;;* lmx 329 system/sepolicy/private/system_server.te

(allow system_server composd (fd (use)))
;;* lme

;;* lmx 330 system/sepolicy/private/system_server.te

(allow system_server dexopt_chroot_setup (binder (call transfer)))
;;* lme

;;* lmx 330 system/sepolicy/private/system_server.te

(allow dexopt_chroot_setup system_server (binder (transfer)))
;;* lme

;;* lmx 330 system/sepolicy/private/system_server.te

(allow system_server dexopt_chroot_setup (fd (use)))
;;* lme

;;* lmx 331 system/sepolicy/private/system_server.te

(allow system_server dumpstate (binder (call transfer)))
;;* lme

;;* lmx 331 system/sepolicy/private/system_server.te

(allow dumpstate system_server (binder (transfer)))
;;* lme

;;* lmx 331 system/sepolicy/private/system_server.te

(allow system_server dumpstate (fd (use)))
;;* lme

;;* lmx 332 system/sepolicy/private/system_server.te

(allow system_server fingerprintd (binder (call transfer)))
;;* lme

;;* lmx 332 system/sepolicy/private/system_server.te

(allow fingerprintd system_server (binder (transfer)))
;;* lme

;;* lmx 332 system/sepolicy/private/system_server.te

(allow system_server fingerprintd (fd (use)))
;;* lme

;;* lmx 333 system/sepolicy/private/system_server.te

(allow system_server gatekeeperd (binder (call transfer)))
;;* lme

;;* lmx 333 system/sepolicy/private/system_server.te

(allow gatekeeperd system_server (binder (transfer)))
;;* lme

;;* lmx 333 system/sepolicy/private/system_server.te

(allow system_server gatekeeperd (fd (use)))
;;* lme

;;* lmx 334 system/sepolicy/private/system_server.te

(allow system_server gpuservice (binder (call transfer)))
;;* lme

;;* lmx 334 system/sepolicy/private/system_server.te

(allow gpuservice system_server (binder (transfer)))
;;* lme

;;* lmx 334 system/sepolicy/private/system_server.te

(allow system_server gpuservice (fd (use)))
;;* lme

;;* lmx 335 system/sepolicy/private/system_server.te

(allow system_server idmap (binder (call transfer)))
;;* lme

;;* lmx 335 system/sepolicy/private/system_server.te

(allow idmap system_server (binder (transfer)))
;;* lme

;;* lmx 335 system/sepolicy/private/system_server.te

(allow system_server idmap (fd (use)))
;;* lme

;;* lmx 336 system/sepolicy/private/system_server.te

(allow system_server installd (binder (call transfer)))
;;* lme

;;* lmx 336 system/sepolicy/private/system_server.te

(allow installd system_server (binder (transfer)))
;;* lme

;;* lmx 336 system/sepolicy/private/system_server.te

(allow system_server installd (fd (use)))
;;* lme

;;* lmx 337 system/sepolicy/private/system_server.te

(allow system_server incidentd (binder (call transfer)))
;;* lme

;;* lmx 337 system/sepolicy/private/system_server.te

(allow incidentd system_server (binder (transfer)))
;;* lme

;;* lmx 337 system/sepolicy/private/system_server.te

(allow system_server incidentd (fd (use)))
;;* lme

;;* lmx 338 system/sepolicy/private/system_server.te

(allow system_server mmd (binder (call transfer)))
;;* lme

;;* lmx 338 system/sepolicy/private/system_server.te

(allow mmd system_server (binder (transfer)))
;;* lme

;;* lmx 338 system/sepolicy/private/system_server.te

(allow system_server mmd (fd (use)))
;;* lme

;;* lmx 339 system/sepolicy/private/system_server.te

(allow system_server netd (binder (call transfer)))
;;* lme

;;* lmx 339 system/sepolicy/private/system_server.te

(allow netd system_server (binder (transfer)))
;;* lme

;;* lmx 339 system/sepolicy/private/system_server.te

(allow system_server netd (fd (use)))
;;* lme

;;* lmx 340 system/sepolicy/private/system_server.te

(allow system_server ot_daemon (binder (call transfer)))
;;* lme

;;* lmx 340 system/sepolicy/private/system_server.te

(allow ot_daemon system_server (binder (transfer)))
;;* lme

;;* lmx 340 system/sepolicy/private/system_server.te

(allow system_server ot_daemon (fd (use)))
;;* lme

;;* lmx 341 system/sepolicy/private/system_server.te

(allow system_server profcollectd (binder (call transfer)))
;;* lme

;;* lmx 341 system/sepolicy/private/system_server.te

(allow profcollectd system_server (binder (transfer)))
;;* lme

;;* lmx 341 system/sepolicy/private/system_server.te

(allow system_server profcollectd (fd (use)))
;;* lme

;;* lmx 342 system/sepolicy/private/system_server.te

(allow system_server statsd (binder (call transfer)))
;;* lme

;;* lmx 342 system/sepolicy/private/system_server.te

(allow statsd system_server (binder (transfer)))
;;* lme

;;* lmx 342 system/sepolicy/private/system_server.te

(allow system_server statsd (fd (use)))
;;* lme

;;* lmx 343 system/sepolicy/private/system_server.te

(allow system_server storaged (binder (call transfer)))
;;* lme

;;* lmx 343 system/sepolicy/private/system_server.te

(allow storaged system_server (binder (transfer)))
;;* lme

;;* lmx 343 system/sepolicy/private/system_server.te

(allow system_server storaged (fd (use)))
;;* lme

;;* lmx 344 system/sepolicy/private/system_server.te

(allow system_server update_engine (binder (call transfer)))
;;* lme

;;* lmx 344 system/sepolicy/private/system_server.te

(allow update_engine system_server (binder (transfer)))
;;* lme

;;* lmx 344 system/sepolicy/private/system_server.te

(allow system_server update_engine (fd (use)))
;;* lme

;;* lmx 345 system/sepolicy/private/system_server.te

(allow system_server virtual_camera (binder (call transfer)))
;;* lme

;;* lmx 345 system/sepolicy/private/system_server.te

(allow virtual_camera system_server (binder (transfer)))
;;* lme

;;* lmx 345 system/sepolicy/private/system_server.te

(allow system_server virtual_camera (fd (use)))
;;* lme

;;* lmx 346 system/sepolicy/private/system_server.te

(allow system_server vold (binder (call transfer)))
;;* lme

;;* lmx 346 system/sepolicy/private/system_server.te

(allow vold system_server (binder (transfer)))
;;* lme

;;* lmx 346 system/sepolicy/private/system_server.te

(allow system_server vold (fd (use)))
;;* lme

;;* lmx 347 system/sepolicy/private/system_server.te

(allow system_server logd (binder (call transfer)))
;;* lme

;;* lmx 347 system/sepolicy/private/system_server.te

(allow logd system_server (binder (transfer)))
;;* lme

;;* lmx 347 system/sepolicy/private/system_server.te

(allow system_server logd (fd (use)))
;;* lme

;;* lmx 348 system/sepolicy/private/system_server.te

(allow system_server wificond (binder (call transfer)))
;;* lme

;;* lmx 348 system/sepolicy/private/system_server.te

(allow wificond system_server (binder (transfer)))
;;* lme

;;* lmx 348 system/sepolicy/private/system_server.te

(allow system_server wificond (fd (use)))
;;* lme

;;* lmx 349 system/sepolicy/private/system_server.te

(allow system_server uprobestats (binder (call transfer)))
;;* lme

;;* lmx 349 system/sepolicy/private/system_server.te

(allow uprobestats system_server (binder (transfer)))
;;* lme

;;* lmx 349 system/sepolicy/private/system_server.te

(allow system_server uprobestats (fd (use)))
;;* lme

;;* lmx 350 system/sepolicy/private/system_server.te

(allow system_server wifi_mainline_supplicant (binder (call transfer)))
;;* lme

;;* lmx 350 system/sepolicy/private/system_server.te

(allow wifi_mainline_supplicant system_server (binder (transfer)))
;;* lme

;;* lmx 350 system/sepolicy/private/system_server.te

(allow system_server wifi_mainline_supplicant (fd (use)))
;;* lme

;;* lmx 354 system/sepolicy/private/system_server.te

(allow system_server hal_allocator (memfd_file (read write getattr map)))
;;* lme

;;* lmx 354 system/sepolicy/private/system_server.te

(allow hal_allocator system_server (memfd_file (read write getattr map)))
;;* lme

;;* lmx 355 system/sepolicy/private/system_server.te

(allow system_server hal_audio (memfd_file (read write getattr map)))
;;* lme

;;* lmx 355 system/sepolicy/private/system_server.te

(allow hal_audio system_server (memfd_file (read write getattr map)))
;;* lme

;;* lmx 356 system/sepolicy/private/system_server.te

(allow system_server hal_authgraph (memfd_file (read write getattr map)))
;;* lme

;;* lmx 356 system/sepolicy/private/system_server.te

(allow hal_authgraph system_server (memfd_file (read write getattr map)))
;;* lme

;;* lmx 357 system/sepolicy/private/system_server.te

(allow system_server hal_authsecret (memfd_file (read write getattr map)))
;;* lme

;;* lmx 357 system/sepolicy/private/system_server.te

(allow hal_authsecret system_server (memfd_file (read write getattr map)))
;;* lme

;;* lmx 358 system/sepolicy/private/system_server.te

(allow system_server hal_bluetooth (memfd_file (read write getattr map)))
;;* lme

;;* lmx 358 system/sepolicy/private/system_server.te

(allow hal_bluetooth system_server (memfd_file (read write getattr map)))
;;* lme

;;* lmx 359 system/sepolicy/private/system_server.te

(allow system_server hal_broadcastradio (memfd_file (read write getattr map)))
;;* lme

;;* lmx 359 system/sepolicy/private/system_server.te

(allow hal_broadcastradio system_server (memfd_file (read write getattr map)))
;;* lme

;;* lmx 360 system/sepolicy/private/system_server.te

(allow system_server hal_codec2 (memfd_file (read write getattr map)))
;;* lme

;;* lmx 360 system/sepolicy/private/system_server.te

(allow hal_codec2 system_server (memfd_file (read write getattr map)))
;;* lme

;;* lmx 361 system/sepolicy/private/system_server.te

(allow system_server hal_configstore (memfd_file (read write getattr map)))
;;* lme

;;* lmx 361 system/sepolicy/private/system_server.te

(allow hal_configstore system_server (memfd_file (read write getattr map)))
;;* lme

;;* lmx 362 system/sepolicy/private/system_server.te

(allow system_server hal_contexthub (memfd_file (read write getattr map)))
;;* lme

;;* lmx 362 system/sepolicy/private/system_server.te

(allow hal_contexthub system_server (memfd_file (read write getattr map)))
;;* lme

;;* lmx 363 system/sepolicy/private/system_server.te

(allow system_server hal_face (memfd_file (read write getattr map)))
;;* lme

;;* lmx 363 system/sepolicy/private/system_server.te

(allow hal_face system_server (memfd_file (read write getattr map)))
;;* lme

;;* lmx 364 system/sepolicy/private/system_server.te

(allow system_server hal_fingerprint (memfd_file (read write getattr map)))
;;* lme

;;* lmx 364 system/sepolicy/private/system_server.te

(allow hal_fingerprint system_server (memfd_file (read write getattr map)))
;;* lme

;;* lmx 365 system/sepolicy/private/system_server.te

(allow system_server hal_gnss (memfd_file (read write getattr map)))
;;* lme

;;* lmx 365 system/sepolicy/private/system_server.te

(allow hal_gnss system_server (memfd_file (read write getattr map)))
;;* lme

;;* lmx 366 system/sepolicy/private/system_server.te

(allow system_server hal_graphics_allocator (memfd_file (read write getattr map)))
;;* lme

;;* lmx 366 system/sepolicy/private/system_server.te

(allow hal_graphics_allocator system_server (memfd_file (read write getattr map)))
;;* lme

;;* lmx 367 system/sepolicy/private/system_server.te

(allow system_server hal_health (memfd_file (read write getattr map)))
;;* lme

;;* lmx 367 system/sepolicy/private/system_server.te

(allow hal_health system_server (memfd_file (read write getattr map)))
;;* lme

;;* lmx 368 system/sepolicy/private/system_server.te

(allow system_server hal_input_classifier (memfd_file (read write getattr map)))
;;* lme

;;* lmx 368 system/sepolicy/private/system_server.te

(allow hal_input_classifier system_server (memfd_file (read write getattr map)))
;;* lme

;;* lmx 369 system/sepolicy/private/system_server.te

(allow system_server hal_input_processor (memfd_file (read write getattr map)))
;;* lme

;;* lmx 369 system/sepolicy/private/system_server.te

(allow hal_input_processor system_server (memfd_file (read write getattr map)))
;;* lme

;;* lmx 370 system/sepolicy/private/system_server.te

(allow system_server hal_ir (memfd_file (read write getattr map)))
;;* lme

;;* lmx 370 system/sepolicy/private/system_server.te

(allow hal_ir system_server (memfd_file (read write getattr map)))
;;* lme

;;* lmx 371 system/sepolicy/private/system_server.te

(allow system_server hal_keymint (memfd_file (read write getattr map)))
;;* lme

;;* lmx 371 system/sepolicy/private/system_server.te

(allow hal_keymint system_server (memfd_file (read write getattr map)))
;;* lme

;;* lmx 372 system/sepolicy/private/system_server.te

(allow system_server hal_light (memfd_file (read write getattr map)))
;;* lme

;;* lmx 372 system/sepolicy/private/system_server.te

(allow hal_light system_server (memfd_file (read write getattr map)))
;;* lme

;;* lmx 373 system/sepolicy/private/system_server.te

(allow system_server hal_mediaquality (memfd_file (read write getattr map)))
;;* lme

;;* lmx 373 system/sepolicy/private/system_server.te

(allow hal_mediaquality system_server (memfd_file (read write getattr map)))
;;* lme

;;* lmx 374 system/sepolicy/private/system_server.te

(allow system_server hal_memtrack (memfd_file (read write getattr map)))
;;* lme

;;* lmx 374 system/sepolicy/private/system_server.te

(allow hal_memtrack system_server (memfd_file (read write getattr map)))
;;* lme

;;* lmx 375 system/sepolicy/private/system_server.te

(allow system_server hal_neuralnetworks (memfd_file (read write getattr map)))
;;* lme

;;* lmx 375 system/sepolicy/private/system_server.te

(allow hal_neuralnetworks system_server (memfd_file (read write getattr map)))
;;* lme

;;* lmx 376 system/sepolicy/private/system_server.te

(allow system_server hal_oemlock (memfd_file (read write getattr map)))
;;* lme

;;* lmx 376 system/sepolicy/private/system_server.te

(allow hal_oemlock system_server (memfd_file (read write getattr map)))
;;* lme

;;* lmx 377 system/sepolicy/private/system_server.te

(allow system_server hal_omx (memfd_file (read write getattr map)))
;;* lme

;;* lmx 377 system/sepolicy/private/system_server.te

(allow hal_omx system_server (memfd_file (read write getattr map)))
;;* lme

;;* lmx 378 system/sepolicy/private/system_server.te

(allow system_server hal_power (memfd_file (read write getattr map)))
;;* lme

;;* lmx 378 system/sepolicy/private/system_server.te

(allow hal_power system_server (memfd_file (read write getattr map)))
;;* lme

;;* lmx 379 system/sepolicy/private/system_server.te

(allow system_server hal_power_stats (memfd_file (read write getattr map)))
;;* lme

;;* lmx 379 system/sepolicy/private/system_server.te

(allow hal_power_stats system_server (memfd_file (read write getattr map)))
;;* lme

;;* lmx 380 system/sepolicy/private/system_server.te

(allow system_server hal_rebootescrow (memfd_file (read write getattr map)))
;;* lme

;;* lmx 380 system/sepolicy/private/system_server.te

(allow hal_rebootescrow system_server (memfd_file (read write getattr map)))
;;* lme

;;* lmx 381 system/sepolicy/private/system_server.te

(allow system_server hal_remotelyprovisionedcomponent_avf (memfd_file (read write getattr map)))
;;* lme

;;* lmx 381 system/sepolicy/private/system_server.te

(allow hal_remotelyprovisionedcomponent_avf system_server (memfd_file (read write getattr map)))
;;* lme

;;* lmx 382 system/sepolicy/private/system_server.te

(allow system_server hal_sensors (memfd_file (read write getattr map)))
;;* lme

;;* lmx 382 system/sepolicy/private/system_server.te

(allow hal_sensors system_server (memfd_file (read write getattr map)))
;;* lme

;;* lmx 383 system/sepolicy/private/system_server.te

(allow system_server hal_secretkeeper (memfd_file (read write getattr map)))
;;* lme

;;* lmx 383 system/sepolicy/private/system_server.te

(allow hal_secretkeeper system_server (memfd_file (read write getattr map)))
;;* lme

;;* lmx 384 system/sepolicy/private/system_server.te

(allow system_server hal_tetheroffload (memfd_file (read write getattr map)))
;;* lme

;;* lmx 384 system/sepolicy/private/system_server.te

(allow hal_tetheroffload system_server (memfd_file (read write getattr map)))
;;* lme

;;* lmx 385 system/sepolicy/private/system_server.te

(allow system_server hal_thermal (memfd_file (read write getattr map)))
;;* lme

;;* lmx 385 system/sepolicy/private/system_server.te

(allow hal_thermal system_server (memfd_file (read write getattr map)))
;;* lme

;;* lmx 386 system/sepolicy/private/system_server.te

(allow system_server hal_threadnetwork (memfd_file (read write getattr map)))
;;* lme

;;* lmx 386 system/sepolicy/private/system_server.te

(allow hal_threadnetwork system_server (memfd_file (read write getattr map)))
;;* lme

;;* lmx 387 system/sepolicy/private/system_server.te

(allow system_server hal_tv_cec (memfd_file (read write getattr map)))
;;* lme

;;* lmx 387 system/sepolicy/private/system_server.te

(allow hal_tv_cec system_server (memfd_file (read write getattr map)))
;;* lme

;;* lmx 388 system/sepolicy/private/system_server.te

(allow system_server hal_tv_hdmi_cec (memfd_file (read write getattr map)))
;;* lme

;;* lmx 388 system/sepolicy/private/system_server.te

(allow hal_tv_hdmi_cec system_server (memfd_file (read write getattr map)))
;;* lme

;;* lmx 389 system/sepolicy/private/system_server.te

(allow system_server hal_tv_hdmi_connection (memfd_file (read write getattr map)))
;;* lme

;;* lmx 389 system/sepolicy/private/system_server.te

(allow hal_tv_hdmi_connection system_server (memfd_file (read write getattr map)))
;;* lme

;;* lmx 390 system/sepolicy/private/system_server.te

(allow system_server hal_tv_hdmi_earc (memfd_file (read write getattr map)))
;;* lme

;;* lmx 390 system/sepolicy/private/system_server.te

(allow hal_tv_hdmi_earc system_server (memfd_file (read write getattr map)))
;;* lme

;;* lmx 391 system/sepolicy/private/system_server.te

(allow system_server hal_tv_input (memfd_file (read write getattr map)))
;;* lme

;;* lmx 391 system/sepolicy/private/system_server.te

(allow hal_tv_input system_server (memfd_file (read write getattr map)))
;;* lme

;;* lmx 392 system/sepolicy/private/system_server.te

(allow system_server hal_usb (memfd_file (read write getattr map)))
;;* lme

;;* lmx 392 system/sepolicy/private/system_server.te

(allow hal_usb system_server (memfd_file (read write getattr map)))
;;* lme

;;* lmx 393 system/sepolicy/private/system_server.te

(allow system_server hal_usb_gadget (memfd_file (read write getattr map)))
;;* lme

;;* lmx 393 system/sepolicy/private/system_server.te

(allow hal_usb_gadget system_server (memfd_file (read write getattr map)))
;;* lme

;;* lmx 394 system/sepolicy/private/system_server.te

(allow system_server hal_uwb (memfd_file (read write getattr map)))
;;* lme

;;* lmx 394 system/sepolicy/private/system_server.te

(allow hal_uwb system_server (memfd_file (read write getattr map)))
;;* lme

;;* lmx 395 system/sepolicy/private/system_server.te

(allow system_server hal_vibrator (memfd_file (read write getattr map)))
;;* lme

;;* lmx 395 system/sepolicy/private/system_server.te

(allow hal_vibrator system_server (memfd_file (read write getattr map)))
;;* lme

;;* lmx 396 system/sepolicy/private/system_server.te

(allow system_server hal_vr (memfd_file (read write getattr map)))
;;* lme

;;* lmx 396 system/sepolicy/private/system_server.te

(allow hal_vr system_server (memfd_file (read write getattr map)))
;;* lme

;;* lmx 397 system/sepolicy/private/system_server.te

(allow system_server hal_weaver (memfd_file (read write getattr map)))
;;* lme

;;* lmx 397 system/sepolicy/private/system_server.te

(allow hal_weaver system_server (memfd_file (read write getattr map)))
;;* lme

;;* lmx 398 system/sepolicy/private/system_server.te

(allow system_server hal_wifi (memfd_file (read write getattr map)))
;;* lme

;;* lmx 398 system/sepolicy/private/system_server.te

(allow hal_wifi system_server (memfd_file (read write getattr map)))
;;* lme

;;* lmx 399 system/sepolicy/private/system_server.te

(allow system_server hal_wifi_hostapd (memfd_file (read write getattr map)))
;;* lme

;;* lmx 399 system/sepolicy/private/system_server.te

(allow hal_wifi_hostapd system_server (memfd_file (read write getattr map)))
;;* lme

;;* lmx 400 system/sepolicy/private/system_server.te

(allow system_server hal_wifi_supplicant (memfd_file (read write getattr map)))
;;* lme

;;* lmx 400 system/sepolicy/private/system_server.te

(allow hal_wifi_supplicant system_server (memfd_file (read write getattr map)))
;;* lme

;;* lmx 404 system/sepolicy/private/system_server.te

(allow system_server hal_bootctl (memfd_file (read write getattr map)))
;;* lme

;;* lmx 404 system/sepolicy/private/system_server.te

(allow hal_bootctl system_server (memfd_file (read write getattr map)))
;;* lme

;;* lmx 407 system/sepolicy/private/system_server.te

(allow system_server hal_graphics_composer (fd (use)))
;;* lme

;;* lmx 410 system/sepolicy/private/system_server.te

(allow system_server hal_renderscript_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 411 system/sepolicy/private/system_server.te

(allow system_server same_process_hal_file (file (read getattr map execute open)))
;;* lme

;;* lmx 414 system/sepolicy/private/system_server.te

(allow system_server tombstoned_intercept_socket (sock_file (write)))
;;* lme

;;* lmx 414 system/sepolicy/private/system_server.te

(allow system_server tombstoned (unix_stream_socket (connectto)))
;;* lme

;;* lmx 417 system/sepolicy/private/system_server.te

(allow system_server hwservicemanager (hwservice_manager (list)))
;;* lme

;;* lmx 418 system/sepolicy/private/system_server.te

(allow system_server servicemanager (service_manager (list)))
;;* lme

;;* lmx 476 system/sepolicy/private/system_server.te

(allow system_server hal_audio_server (process (signal)))
(allow system_server hal_bluetooth_server (process (signal)))
(allow system_server hal_camera_server (process (signal)))
(allow system_server hal_codec2_server (process (signal)))
(allow system_server hal_drm_server (process (signal)))
(allow system_server hal_face_server (process (signal)))
(allow system_server hal_fingerprint_server (process (signal)))
(allow system_server hal_gnss_server (process (signal)))
(allow system_server hal_graphics_allocator_server (process (signal)))
(allow system_server hal_graphics_composer_server (process (signal)))
(allow system_server hal_health_server (process (signal)))
(allow system_server hal_input_processor_server (process (signal)))
(allow system_server hal_light_server (process (signal)))
(allow system_server hal_neuralnetworks_server (process (signal)))
(allow system_server hal_omx_server (process (signal)))
(allow system_server hal_power_server (process (signal)))
(allow system_server hal_power_stats_server (process (signal)))
(allow system_server hal_sensors_server (process (signal)))
(allow system_server hal_vibrator_server (process (signal)))
(allow system_server hal_vr_server (process (signal)))
(allow system_server hal_wifi_server (process (signal)))
(allow system_server hal_wifi_hostapd_server (process (signal)))
(allow system_server hal_wifi_supplicant_server (process (signal)))
(allow system_server system_suspend_server (process (signal)))
(allow system_server artd (process (signal)))
(allow system_server audioserver (process (signal)))
(allow system_server cameraserver (process (signal)))
(allow system_server drmserver (process (signal)))
(allow system_server gpuservice (process (signal)))
(allow system_server idmap (process (signal)))
(allow system_server inputflinger (process (signal)))
(allow system_server keystore (process (signal)))
(allow system_server mediadrmserver (process (signal)))
(allow system_server mediaextractor (process (signal)))
(allow system_server mediametrics (process (signal)))
(allow system_server mediaserver (process (signal)))
(allow system_server mediaswcodec (process (signal)))
(allow system_server mediatranscoding (process (signal)))
(allow system_server netd (process (signal)))
(allow system_server sdcardd (process (signal)))
(allow system_server servicemanager (process (signal)))
(allow system_server statsd (process (signal)))
(allow system_server surfaceflinger (process (signal)))
(allow system_server vold (process (signal)))
(allow system_server composd (process (signal)))
(allow system_server mediatuner (process (signal)))
(allow system_server mmd (process (signal)))
(allow system_server virtualizationservice (process (signal)))
;;* lme

;;* lmx 479 system/sepolicy/private/system_server.te

(allow system_server audioserver (tcp_socket (ioctl read write getattr setattr lock append map bind connect getopt setopt shutdown)))
;;* lme

;;* lmx 480 system/sepolicy/private/system_server.te

(allow system_server audioserver (udp_socket (ioctl read write getattr setattr lock append map bind connect getopt setopt shutdown)))
;;* lme

;;* lmx 481 system/sepolicy/private/system_server.te

(allow system_server mediaserver (tcp_socket (ioctl read write getattr setattr lock append map bind connect getopt setopt shutdown)))
;;* lme

;;* lmx 482 system/sepolicy/private/system_server.te

(allow system_server mediaserver (udp_socket (ioctl read write getattr setattr lock append map bind connect getopt setopt shutdown)))
;;* lme

;;* lmx 484 system/sepolicy/private/system_server.te

(allow system_server audioserver (memfd_file (read write getattr map)))
;;* lme

;;* lmx 487 system/sepolicy/private/system_server.te

(allow system_server mediadrmserver (tcp_socket (ioctl read write getattr setattr lock append map bind connect getopt setopt shutdown)))
;;* lme

;;* lmx 488 system/sepolicy/private/system_server.te

(allow system_server mediadrmserver (udp_socket (ioctl read write getattr setattr lock append map bind connect getopt setopt shutdown)))
;;* lme

;;* lmx 492 system/sepolicy/private/system_server.te

(allow system_server traced (fd (use)))
;;* lme

;;* lmx 492 system/sepolicy/private/system_server.te

(allow system_server traced_tmpfs (file (read write getattr map)))
;;* lme

;;* lmx 492 system/sepolicy/private/system_server.te

(allow system_server traced (memfd_file (read write getattr map)))
;;* lme

;;* lmx 492 system/sepolicy/private/system_server.te

(allow system_server traced_producer_socket (sock_file (write)))
;;* lme

;;* lmx 492 system/sepolicy/private/system_server.te

(allow system_server traced (unix_stream_socket (connectto)))
;;* lme

;;* lmx 492 system/sepolicy/private/system_server.te

(allow traced system_server (fd (use)))
;;* lme

;;* lmx 495 system/sepolicy/private/system_server.te

(allow system_server file_contexts_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 497 system/sepolicy/private/system_server.te

(allow system_server mac_perms_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 499 system/sepolicy/private/system_server.te

(allow system_server selinuxfs (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 499 system/sepolicy/private/system_server.te

(allow system_server selinuxfs (file (ioctl read getattr lock map open watch watch_reads)))
(allow system_server selinuxfs (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 499 system/sepolicy/private/system_server.te

(allow system_server selinuxfs (file (write lock append map open)))
;;* lme

;;* lmx 499 system/sepolicy/private/system_server.te

(allow system_server kernel (security (compute_av)))
;;* lme

;;* lmx 499 system/sepolicy/private/system_server.te

(allow system_server self (netlink_selinux_socket (read write create getattr setattr lock relabelfrom relabelto append bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
;;* lme

;;* lmx 501 system/sepolicy/private/system_server.te

(allow system_server sysfs_type (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 503 system/sepolicy/private/system_server.te

(allow system_server sysfs_android_usb (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 503 system/sepolicy/private/system_server.te

(allow system_server sysfs_android_usb (file (ioctl read getattr lock map open watch watch_reads)))
(allow system_server sysfs_android_usb (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 504 system/sepolicy/private/system_server.te

(allow system_server sysfs_android_usb (file (write lock append map open)))
;;* lme

;;* lmx 507 system/sepolicy/private/system_server.te

(allow system_server sysfs_thunderbolt (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 507 system/sepolicy/private/system_server.te

(allow system_server sysfs_thunderbolt (file (ioctl read getattr lock map open watch watch_reads)))
(allow system_server sysfs_thunderbolt (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 508 system/sepolicy/private/system_server.te

(allow system_server sysfs_thunderbolt (file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 511 system/sepolicy/private/system_server.te

(allow system_server sysfs_typec (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 511 system/sepolicy/private/system_server.te

(allow system_server sysfs_typec (file (ioctl read getattr lock map open watch watch_reads)))
(allow system_server sysfs_typec (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 512 system/sepolicy/private/system_server.te

(allow system_server sysfs_typec (file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 515 system/sepolicy/private/system_server.te

(allow system_server sysfs_usb_pd (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 515 system/sepolicy/private/system_server.te

(allow system_server sysfs_usb_pd (file (ioctl read getattr lock map open watch watch_reads)))
(allow system_server sysfs_usb_pd (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 516 system/sepolicy/private/system_server.te

(allow system_server sysfs_usb_pd (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 520 system/sepolicy/private/system_server.te

(allow system_server sysfs_usb (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 520 system/sepolicy/private/system_server.te

(allow system_server sysfs_usb (file (ioctl read getattr lock map open watch watch_reads)))
(allow system_server sysfs_usb (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 521 system/sepolicy/private/system_server.te

(allow system_server sysfs_usb (file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 523 system/sepolicy/private/system_server.te

(allow system_server sysfs_extcon (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 523 system/sepolicy/private/system_server.te

(allow system_server sysfs_extcon (file (ioctl read getattr lock map open watch watch_reads)))
(allow system_server sysfs_extcon (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 525 system/sepolicy/private/system_server.te

(allow system_server sysfs_ipv4 (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 525 system/sepolicy/private/system_server.te

(allow system_server sysfs_ipv4 (file (ioctl read getattr lock map open watch watch_reads)))
(allow system_server sysfs_ipv4 (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 526 system/sepolicy/private/system_server.te

(allow system_server sysfs_ipv4 (file (write lock append map open)))
;;* lme

;;* lmx 528 system/sepolicy/private/system_server.te

(allow system_server sysfs_rtc (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 528 system/sepolicy/private/system_server.te

(allow system_server sysfs_rtc (file (ioctl read getattr lock map open watch watch_reads)))
(allow system_server sysfs_rtc (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 529 system/sepolicy/private/system_server.te

(allow system_server sysfs_switch (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 529 system/sepolicy/private/system_server.te

(allow system_server sysfs_switch (file (ioctl read getattr lock map open watch watch_reads)))
(allow system_server sysfs_switch (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 531 system/sepolicy/private/system_server.te

(allow system_server sysfs_nfc_power_writable (file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 532 system/sepolicy/private/system_server.te

(allow system_server sysfs_power (dir (search)))
;;* lme

;;* lmx 533 system/sepolicy/private/system_server.te

(allow system_server sysfs_power (file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 534 system/sepolicy/private/system_server.te

(allow system_server sysfs_thermal (dir (search)))
;;* lme

;;* lmx 535 system/sepolicy/private/system_server.te

(allow system_server sysfs_thermal (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 536 system/sepolicy/private/system_server.te

(allow system_server sysfs_uhid (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 537 system/sepolicy/private/system_server.te

(allow system_server sysfs_uhid (file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 540 system/sepolicy/private/system_server.te

(allow system_server sysfs_vibrator (file (write append)))
;;* lme

;;* lmx 543 system/sepolicy/private/system_server.te

(allow system_server device (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 544 system/sepolicy/private/system_server.te

(allow system_server mdns_socket (sock_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 546 system/sepolicy/private/system_server.te

(allow system_server input_device (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 547 system/sepolicy/private/system_server.te

(allow system_server input_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 548 system/sepolicy/private/system_server.te

(allow system_server tty_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 549 system/sepolicy/private/system_server.te

(allow system_server usbaccessory_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 550 system/sepolicy/private/system_server.te

(allow system_server video_device (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 551 system/sepolicy/private/system_server.te

(allow system_server video_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 552 system/sepolicy/private/system_server.te

(allow system_server adbd_socket (sock_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 553 system/sepolicy/private/system_server.te

(allow system_server rtc_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 554 system/sepolicy/private/system_server.te

(allow system_server audio_device (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 555 system/sepolicy/private/system_server.te

(allow system_server uhid_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 556 system/sepolicy/private/system_server.te

(allow system_server hidraw_device (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 557 system/sepolicy/private/system_server.te

(allow system_server hidraw_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 560 system/sepolicy/private/system_server.te

(allow system_server audio_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 563 system/sepolicy/private/system_server.te

(allow system_server tun_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 564 system/sepolicy/private/system_server.te

(allowx system_server tun_device (ioctl chr_file (0x54ca 0x54cd 0x54d2 0x54e2)))
;;* lme

;;* lmx 567 system/sepolicy/private/system_server.te

(allow system_server ota_package_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
;;* lme

;;* lmx 568 system/sepolicy/private/system_server.te

(allow system_server ota_package_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 571 system/sepolicy/private/system_server.te

(allow system_server system_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 572 system/sepolicy/private/system_server.te

(allow system_server system_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow system_server system_data_file (lnk_file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow system_server system_data_file (sock_file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow system_server system_data_file (fifo_file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 573 system/sepolicy/private/system_server.te

(allow system_server packages_list_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 574 system/sepolicy/private/system_server.te

(allow system_server user_list_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 575 system/sepolicy/private/system_server.te

(allow system_server game_mode_intervention_list_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 576 system/sepolicy/private/system_server.te

(allow system_server keychain_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 577 system/sepolicy/private/system_server.te

(allow system_server keychain_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 578 system/sepolicy/private/system_server.te

(allow system_server keychain_data_file (lnk_file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 582 system/sepolicy/private/system_server.te

(allow system_server system_userdir_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 585 system/sepolicy/private/system_server.te

(allow system_server apk_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 586 system/sepolicy/private/system_server.te

(allow system_server apk_data_file (file (ioctl read write create getattr setattr lock append map unlink link rename open watch watch_reads)))
(allow system_server apk_data_file (lnk_file (ioctl read write create getattr setattr lock append map unlink link rename open watch watch_reads)))
;;* lme

;;* lmx 587 system/sepolicy/private/system_server.te

(allow system_server apk_tmp_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 588 system/sepolicy/private/system_server.te

(allow system_server apk_tmp_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 591 system/sepolicy/private/system_server.te

(allow system_server apk_metadata_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 592 system/sepolicy/private/system_server.te

(allow system_server apk_metadata_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 595 system/sepolicy/private/system_server.te

(allow system_server vendor_keylayout_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 595 system/sepolicy/private/system_server.te

(allow system_server vendor_keylayout_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow system_server vendor_keylayout_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 596 system/sepolicy/private/system_server.te

(allow system_server vendor_keychars_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 596 system/sepolicy/private/system_server.te

(allow system_server vendor_keychars_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow system_server vendor_keychars_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 597 system/sepolicy/private/system_server.te

(allow system_server vendor_idc_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 597 system/sepolicy/private/system_server.te

(allow system_server vendor_idc_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow system_server vendor_idc_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 598 system/sepolicy/private/system_server.te

(allow system_server input_device_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 601 system/sepolicy/private/system_server.te

(allow system_server vendor_app_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 601 system/sepolicy/private/system_server.te

(allow system_server vendor_app_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow system_server vendor_app_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 602 system/sepolicy/private/system_server.te

(allow system_server vendor_framework_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 602 system/sepolicy/private/system_server.te

(allow system_server vendor_framework_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow system_server vendor_framework_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 603 system/sepolicy/private/system_server.te

(allow system_server vendor_overlay_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 603 system/sepolicy/private/system_server.te

(allow system_server vendor_overlay_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow system_server vendor_overlay_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 606 system/sepolicy/private/system_server.te

(allow system_server vendor_dma_heap_config_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 609 system/sepolicy/private/system_server.te

(allow system_server apk_private_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 610 system/sepolicy/private/system_server.te

(allow system_server apk_private_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 611 system/sepolicy/private/system_server.te

(allow system_server apk_private_tmp_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 612 system/sepolicy/private/system_server.te

(allow system_server apk_private_tmp_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 615 system/sepolicy/private/system_server.te

(allow system_server asec_apk_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 616 system/sepolicy/private/system_server.te

(allow system_server asec_apk_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 617 system/sepolicy/private/system_server.te

(allow system_server asec_public_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 625 system/sepolicy/private/system_server.te

(allow system_server anr_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 626 system/sepolicy/private/system_server.te

(allow system_server anr_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 634 system/sepolicy/private/system_server.te

(allow system_server tombstoned_java_trace_socket (sock_file (write)))
;;* lme

;;* lmx 634 system/sepolicy/private/system_server.te

(allow system_server tombstoned (unix_stream_socket (connectto)))
;;* lme

;;* lmx 635 system/sepolicy/private/system_server.te

(allow system_server tombstoned (fd (use)))
;;* lme

;;* lmx 636 system/sepolicy/private/system_server.te

(allow system_server dumpstate (fifo_file (append)))
;;* lme

;;* lmx 637 system/sepolicy/private/system_server.te

(allow system_server incidentd (fifo_file (append)))
;;* lme

;;* lmx 639 system/sepolicy/private/system_server.te

(allow system_server su (fifo_file (append)))
;;* lme

;;* lmx 645 system/sepolicy/private/system_server.te

(allow system_server incidentd (fifo_file (read)))
;;* lme

;;* lmx 649 system/sepolicy/private/system_server.te

(allow system_server incident_data_file (file (read)))
;;* lme

;;* lmx 652 system/sepolicy/private/system_server.te

(allow system_server prereboot_data_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
;;* lme

;;* lmx 653 system/sepolicy/private/system_server.te

(allow system_server prereboot_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 657 system/sepolicy/private/system_server.te

(allow system_server perfetto_traces_data_file (file (read getattr)))
;;* lme

;;* lmx 658 system/sepolicy/private/system_server.te

(allow system_server perfetto (fd (use)))
;;* lme

;;* lmx 661 system/sepolicy/private/system_server.te

(allow system_server perfetto_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 661 system/sepolicy/private/system_server.te

(allow system_server perfetto (process (transition)))
;;* lme

;;* lmx 661 system/sepolicy/private/system_server.te

(allow perfetto perfetto_exec (file (read getattr map execute open entrypoint)))
;;* lme

;;* lmx 661 system/sepolicy/private/system_server.te

(allow perfetto system_server (process (sigchld)))
;;* lme

(dontaudit system_server perfetto (process (noatsecure)))
;;* lmx 661 system/sepolicy/private/system_server.te

(allow system_server perfetto (process (siginh rlimitinh)))
;;* lme

(typetransition system_server perfetto_exec process perfetto)
;;* lmx 662 system/sepolicy/private/system_server.te

(allow system_server perfetto (fifo_file (read write)))
;;* lme

;;* lmx 665 system/sepolicy/private/system_server.te

(allow system_server perfetto_traces_profiling_data_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
;;* lme

;;* lmx 666 system/sepolicy/private/system_server.te

(allow system_server perfetto_traces_profiling_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 667 system/sepolicy/private/system_server.te

(allow system_server perfetto_traces_data_file (dir (search)))
;;* lme

;;* lmx 671 system/sepolicy/private/system_server.te

(allow system_server trace_redactor_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 671 system/sepolicy/private/system_server.te

(allow system_server trace_redactor (process (transition)))
;;* lme

;;* lmx 671 system/sepolicy/private/system_server.te

(allow trace_redactor trace_redactor_exec (file (read getattr map execute open entrypoint)))
;;* lme

;;* lmx 671 system/sepolicy/private/system_server.te

(allow trace_redactor system_server (process (sigchld)))
;;* lme

(dontaudit system_server trace_redactor (process (noatsecure)))
;;* lmx 671 system/sepolicy/private/system_server.te

(allow system_server trace_redactor (process (siginh rlimitinh)))
;;* lme

(typetransition system_server trace_redactor_exec process trace_redactor)
;;* lmx 672 system/sepolicy/private/system_server.te

(allow system_server trace_redactor (process (signal)))
;;* lme

;;* lmx 675 system/sepolicy/private/system_server.te

(allow system_server perfetto (process (signal)))
;;* lme

;;* lmx 678 system/sepolicy/private/system_server.te

(allow system_server backup_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 679 system/sepolicy/private/system_server.te

(allow system_server backup_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 682 system/sepolicy/private/system_server.te

(allow system_server appsearch_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 683 system/sepolicy/private/system_server.te

(allow system_server appsearch_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 686 system/sepolicy/private/system_server.te

(allow system_server pcc_auditlogs_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 687 system/sepolicy/private/system_server.te

(allow system_server pcc_auditlogs_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 690 system/sepolicy/private/system_server.te

(allow system_server dropbox_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 691 system/sepolicy/private/system_server.te

(allow system_server dropbox_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 694 system/sepolicy/private/system_server.te

(allow system_server heapdump_data_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
;;* lme

;;* lmx 695 system/sepolicy/private/system_server.te

(allow system_server heapdump_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 698 system/sepolicy/private/system_server.te

(allow system_server adb_keys_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 699 system/sepolicy/private/system_server.te

(allow system_server adb_keys_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 702 system/sepolicy/private/system_server.te

(allow system_server appcompat_data_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
;;* lme

;;* lmx 703 system/sepolicy/private/system_server.te

(allow system_server appcompat_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 707 system/sepolicy/private/system_server.te

(allow system_server connectivityblob_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 708 system/sepolicy/private/system_server.te

(allow system_server connectivityblob_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 711 system/sepolicy/private/system_server.te

(allow system_server emergency_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 712 system/sepolicy/private/system_server.te

(allow system_server emergency_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 715 system/sepolicy/private/system_server.te

(allow system_server network_watchlist_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 716 system/sepolicy/private/system_server.te

(allow system_server network_watchlist_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 720 system/sepolicy/private/system_server.te

(allow system_server radio_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 721 system/sepolicy/private/system_server.te

(allow system_server radio_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 724 system/sepolicy/private/system_server.te

(allow system_server systemkeys_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 725 system/sepolicy/private/system_server.te

(allow system_server systemkeys_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 728 system/sepolicy/private/system_server.te

(allow system_server textclassifier_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 729 system/sepolicy/private/system_server.te

(allow system_server textclassifier_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 732 system/sepolicy/private/system_server.te

(allow system_server tombstone_data_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
;;* lme

;;* lmx 733 system/sepolicy/private/system_server.te

(allow system_server tombstone_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 736 system/sepolicy/private/system_server.te

(allow system_server vpn_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 737 system/sepolicy/private/system_server.te

(allow system_server vpn_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 740 system/sepolicy/private/system_server.te

(allow system_server wifi_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 741 system/sepolicy/private/system_server.te

(allow system_server wifi_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 744 system/sepolicy/private/system_server.te

(allow system_server staging_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 745 system/sepolicy/private/system_server.te

(allow system_server staging_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 748 system/sepolicy/private/system_server.te

(allow system_server staging_data_file (file (ioctl read write create getattr setattr lock append map unlink link rename open watch watch_reads)))
(allow system_server staging_data_file (lnk_file (ioctl read write create getattr setattr lock append map unlink link rename open watch watch_reads)))
;;* lme

;;* lmx 751 system/sepolicy/private/system_server.te

(allow system_server app_data_file_type (dir (read getattr search)))
;;* lme

;;* lmx 755 system/sepolicy/private/system_server.te

(allow system_server unlabeled (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 757 system/sepolicy/private/system_server.te

(allow system_server unlabeled (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 760 system/sepolicy/private/system_server.te

(allow system_server system_app_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 761 system/sepolicy/private/system_server.te

(allow system_server system_app_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 764 system/sepolicy/private/system_server.te

(allow system_server app_data_file_type (file (read write getattr append map)))
;;* lme

;;* lmx 766 system/sepolicy/private/system_server.te

(allow system_server rollback_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 767 system/sepolicy/private/system_server.te

(allow system_server rollback_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 770 system/sepolicy/private/system_server.te

(allow system_server media_rw_data_file (dir (read getattr open search)))
;;* lme

;;* lmx 772 system/sepolicy/private/system_server.te

(allow system_server installd (fd (use)))
;;* lme

;;* lmx 776 system/sepolicy/private/system_server.te

(allow system_server app_backup_staging_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 777 system/sepolicy/private/system_server.te

(allow system_server app_backup_staging_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 781 system/sepolicy/private/system_server.te

(allow system_server wifi_mainline_supplicant_exec (file (getattr)))
;;* lme

;;* lmx 785 system/sepolicy/private/system_server.te

(allow system_server media_rw_data_file (file (read write getattr append)))
;;* lme

;;* lmx 789 system/sepolicy/private/system_server.te

(allow system_server system_server (process (setfscreate)))
;;* lme

;;* lmx 792 system/sepolicy/private/system_server.te

(allow system_server apk_tmp_file (file (relabelfrom relabelto)))
(allow system_server apk_tmp_file (dir (relabelfrom relabelto)))
(allow system_server apk_private_tmp_file (file (relabelfrom relabelto)))
(allow system_server apk_private_tmp_file (dir (relabelfrom relabelto)))
;;* lme

;;* lmx 793 system/sepolicy/private/system_server.te

(allow system_server apk_data_file (file (relabelfrom relabelto)))
(allow system_server apk_data_file (dir (relabelfrom relabelto)))
(allow system_server apk_private_data_file (file (relabelfrom relabelto)))
(allow system_server apk_private_data_file (dir (relabelfrom relabelto)))
;;* lme

;;* lmx 798 system/sepolicy/private/system_server.te

(allow system_server staging_data_file (file (relabelfrom relabelto)))
(allow system_server staging_data_file (dir (relabelfrom relabelto)))
;;* lme

;;* lmx 801 system/sepolicy/private/system_server.te

(allow system_server system_data_file (file (relabelfrom)))
;;* lme

;;* lmx 802 system/sepolicy/private/system_server.te

(allow system_server wallpaper_file (file (relabelto)))
;;* lme

;;* lmx 803 system/sepolicy/private/system_server.te

(allow system_server wallpaper_file (file (ioctl read write getattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 806 system/sepolicy/private/system_server.te

(allow system_server system_data_file (file (link)))
(allow system_server wallpaper_file (file (link)))
;;* lme

;;* lmx 809 system/sepolicy/private/system_server.te

(allow system_server user_list_data_file (file (relabelto)))
;;* lme

;;* lmx 812 system/sepolicy/private/system_server.te

(allow system_server system_data_file (dir (relabelfrom)))
;;* lme

;;* lmx 813 system/sepolicy/private/system_server.te

(allow system_server shortcut_manager_icons (dir (ioctl read write create getattr setattr lock relabelto rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 814 system/sepolicy/private/system_server.te

(allow system_server shortcut_manager_icons (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 817 system/sepolicy/private/system_server.te

(allow system_server ringtone_file (dir (ioctl read write create getattr setattr lock relabelto rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 818 system/sepolicy/private/system_server.te

(allow system_server ringtone_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 821 system/sepolicy/private/system_server.te

(allow system_server icon_file (file (relabelto)))
;;* lme

;;* lmx 822 system/sepolicy/private/system_server.te

(allow system_server icon_file (file (ioctl read write getattr lock append map unlink open watch watch_reads)))
;;* lme

;;* lmx 825 system/sepolicy/private/system_server.te

(allow system_server system_data_file (dir (relabelfrom)))
;;* lme

;;* lmx 830 system/sepolicy/private/system_server.te

(allow system_server server_configurable_flags_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 831 system/sepolicy/private/system_server.te

(allow system_server server_configurable_flags_data_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 834 system/sepolicy/private/system_server.te

(allow system_server property_socket (sock_file (write)))
;;* lme

;;* lmx 834 system/sepolicy/private/system_server.te

(allow system_server init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 834 system/sepolicy/private/system_server.te

(allow system_server system_prop (property_service (set)))
;;* lme

;;* lmx 834 system/sepolicy/private/system_server.te

(allow system_server system_prop (file (read getattr map open)))
;;* lme

;;* lmx 835 system/sepolicy/private/system_server.te

(allow system_server property_socket (sock_file (write)))
;;* lme

;;* lmx 835 system/sepolicy/private/system_server.te

(allow system_server init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 835 system/sepolicy/private/system_server.te

(allow system_server bootanim_system_prop (property_service (set)))
;;* lme

;;* lmx 835 system/sepolicy/private/system_server.te

(allow system_server bootanim_system_prop (file (read getattr map open)))
;;* lme

;;* lmx 836 system/sepolicy/private/system_server.te

(allow system_server property_socket (sock_file (write)))
;;* lme

;;* lmx 836 system/sepolicy/private/system_server.te

(allow system_server init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 836 system/sepolicy/private/system_server.te

(allow system_server bluetooth_prop (property_service (set)))
;;* lme

;;* lmx 836 system/sepolicy/private/system_server.te

(allow system_server bluetooth_prop (file (read getattr map open)))
;;* lme

;;* lmx 837 system/sepolicy/private/system_server.te

(allow system_server property_socket (sock_file (write)))
;;* lme

;;* lmx 837 system/sepolicy/private/system_server.te

(allow system_server init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 837 system/sepolicy/private/system_server.te

(allow system_server exported_system_prop (property_service (set)))
;;* lme

;;* lmx 837 system/sepolicy/private/system_server.te

(allow system_server exported_system_prop (file (read getattr map open)))
;;* lme

;;* lmx 838 system/sepolicy/private/system_server.te

(allow system_server property_socket (sock_file (write)))
;;* lme

;;* lmx 838 system/sepolicy/private/system_server.te

(allow system_server init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 838 system/sepolicy/private/system_server.te

(allow system_server exported3_system_prop (property_service (set)))
;;* lme

;;* lmx 838 system/sepolicy/private/system_server.te

(allow system_server exported3_system_prop (file (read getattr map open)))
;;* lme

;;* lmx 839 system/sepolicy/private/system_server.te

(allow system_server property_socket (sock_file (write)))
;;* lme

;;* lmx 839 system/sepolicy/private/system_server.te

(allow system_server init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 839 system/sepolicy/private/system_server.te

(allow system_server safemode_prop (property_service (set)))
;;* lme

;;* lmx 839 system/sepolicy/private/system_server.te

(allow system_server safemode_prop (file (read getattr map open)))
;;* lme

;;* lmx 840 system/sepolicy/private/system_server.te

(allow system_server property_socket (sock_file (write)))
;;* lme

;;* lmx 840 system/sepolicy/private/system_server.te

(allow system_server init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 840 system/sepolicy/private/system_server.te

(allow system_server theme_prop (property_service (set)))
;;* lme

;;* lmx 840 system/sepolicy/private/system_server.te

(allow system_server theme_prop (file (read getattr map open)))
;;* lme

;;* lmx 841 system/sepolicy/private/system_server.te

(allow system_server property_socket (sock_file (write)))
;;* lme

;;* lmx 841 system/sepolicy/private/system_server.te

(allow system_server init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 841 system/sepolicy/private/system_server.te

(allow system_server dhcp_prop (property_service (set)))
;;* lme

;;* lmx 841 system/sepolicy/private/system_server.te

(allow system_server dhcp_prop (file (read getattr map open)))
;;* lme

;;* lmx 842 system/sepolicy/private/system_server.te

(allow system_server property_socket (sock_file (write)))
;;* lme

;;* lmx 842 system/sepolicy/private/system_server.te

(allow system_server init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 842 system/sepolicy/private/system_server.te

(allow system_server net_connectivity_prop (property_service (set)))
;;* lme

;;* lmx 842 system/sepolicy/private/system_server.te

(allow system_server net_connectivity_prop (file (read getattr map open)))
;;* lme

;;* lmx 843 system/sepolicy/private/system_server.te

(allow system_server property_socket (sock_file (write)))
;;* lme

;;* lmx 843 system/sepolicy/private/system_server.te

(allow system_server init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 843 system/sepolicy/private/system_server.te

(allow system_server net_radio_prop (property_service (set)))
;;* lme

;;* lmx 843 system/sepolicy/private/system_server.te

(allow system_server net_radio_prop (file (read getattr map open)))
;;* lme

;;* lmx 844 system/sepolicy/private/system_server.te

(allow system_server property_socket (sock_file (write)))
;;* lme

;;* lmx 844 system/sepolicy/private/system_server.te

(allow system_server init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 844 system/sepolicy/private/system_server.te

(allow system_server net_dns_prop (property_service (set)))
;;* lme

;;* lmx 844 system/sepolicy/private/system_server.te

(allow system_server net_dns_prop (file (read getattr map open)))
;;* lme

;;* lmx 845 system/sepolicy/private/system_server.te

(allow system_server property_socket (sock_file (write)))
;;* lme

;;* lmx 845 system/sepolicy/private/system_server.te

(allow system_server init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 845 system/sepolicy/private/system_server.te

(allow system_server usb_control_prop (property_service (set)))
;;* lme

;;* lmx 845 system/sepolicy/private/system_server.te

(allow system_server usb_control_prop (file (read getattr map open)))
;;* lme

;;* lmx 846 system/sepolicy/private/system_server.te

(allow system_server property_socket (sock_file (write)))
;;* lme

;;* lmx 846 system/sepolicy/private/system_server.te

(allow system_server init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 846 system/sepolicy/private/system_server.te

(allow system_server usb_prop (property_service (set)))
;;* lme

;;* lmx 846 system/sepolicy/private/system_server.te

(allow system_server usb_prop (file (read getattr map open)))
;;* lme

;;* lmx 847 system/sepolicy/private/system_server.te

(allow system_server property_socket (sock_file (write)))
;;* lme

;;* lmx 847 system/sepolicy/private/system_server.te

(allow system_server init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 847 system/sepolicy/private/system_server.te

(allow system_server debug_prop (property_service (set)))
;;* lme

;;* lmx 847 system/sepolicy/private/system_server.te

(allow system_server debug_prop (file (read getattr map open)))
;;* lme

;;* lmx 848 system/sepolicy/private/system_server.te

(allow system_server property_socket (sock_file (write)))
;;* lme

;;* lmx 848 system/sepolicy/private/system_server.te

(allow system_server init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 848 system/sepolicy/private/system_server.te

(allow system_server powerctl_prop (property_service (set)))
;;* lme

;;* lmx 848 system/sepolicy/private/system_server.te

(allow system_server powerctl_prop (file (read getattr map open)))
;;* lme

;;* lmx 849 system/sepolicy/private/system_server.te

(allow system_server property_socket (sock_file (write)))
;;* lme

;;* lmx 849 system/sepolicy/private/system_server.te

(allow system_server init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 849 system/sepolicy/private/system_server.te

(allow system_server fingerprint_prop (property_service (set)))
;;* lme

;;* lmx 849 system/sepolicy/private/system_server.te

(allow system_server fingerprint_prop (file (read getattr map open)))
;;* lme

;;* lmx 850 system/sepolicy/private/system_server.te

(allow system_server property_socket (sock_file (write)))
;;* lme

;;* lmx 850 system/sepolicy/private/system_server.te

(allow system_server init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 850 system/sepolicy/private/system_server.te

(allow system_server device_logging_prop (property_service (set)))
;;* lme

;;* lmx 850 system/sepolicy/private/system_server.te

(allow system_server device_logging_prop (file (read getattr map open)))
;;* lme

;;* lmx 851 system/sepolicy/private/system_server.te

(allow system_server property_socket (sock_file (write)))
;;* lme

;;* lmx 851 system/sepolicy/private/system_server.te

(allow system_server init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 851 system/sepolicy/private/system_server.te

(allow system_server dumpstate_options_prop (property_service (set)))
;;* lme

;;* lmx 851 system/sepolicy/private/system_server.te

(allow system_server dumpstate_options_prop (file (read getattr map open)))
;;* lme

;;* lmx 852 system/sepolicy/private/system_server.te

(allow system_server property_socket (sock_file (write)))
;;* lme

;;* lmx 852 system/sepolicy/private/system_server.te

(allow system_server init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 852 system/sepolicy/private/system_server.te

(allow system_server overlay_prop (property_service (set)))
;;* lme

;;* lmx 852 system/sepolicy/private/system_server.te

(allow system_server overlay_prop (file (read getattr map open)))
;;* lme

;;* lmx 853 system/sepolicy/private/system_server.te

(allow system_server property_socket (sock_file (write)))
;;* lme

;;* lmx 853 system/sepolicy/private/system_server.te

(allow system_server init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 853 system/sepolicy/private/system_server.te

(allow system_server exported_overlay_prop (property_service (set)))
;;* lme

;;* lmx 853 system/sepolicy/private/system_server.te

(allow system_server exported_overlay_prop (file (read getattr map open)))
;;* lme

;;* lmx 854 system/sepolicy/private/system_server.te

(allow system_server property_socket (sock_file (write)))
;;* lme

;;* lmx 854 system/sepolicy/private/system_server.te

(allow system_server init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 854 system/sepolicy/private/system_server.te

(allow system_server pm_prop (property_service (set)))
;;* lme

;;* lmx 854 system/sepolicy/private/system_server.te

(allow system_server pm_prop (file (read getattr map open)))
;;* lme

;;* lmx 855 system/sepolicy/private/system_server.te

(allow system_server property_socket (sock_file (write)))
;;* lme

;;* lmx 855 system/sepolicy/private/system_server.te

(allow system_server init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 855 system/sepolicy/private/system_server.te

(allow system_server exported_pm_prop (property_service (set)))
;;* lme

;;* lmx 855 system/sepolicy/private/system_server.te

(allow system_server exported_pm_prop (file (read getattr map open)))
;;* lme

;;* lmx 856 system/sepolicy/private/system_server.te

(allow system_server property_socket (sock_file (write)))
;;* lme

;;* lmx 856 system/sepolicy/private/system_server.te

(allow system_server init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 856 system/sepolicy/private/system_server.te

(allow system_server socket_hook_prop (property_service (set)))
;;* lme

;;* lmx 856 system/sepolicy/private/system_server.te

(allow system_server socket_hook_prop (file (read getattr map open)))
;;* lme

;;* lmx 857 system/sepolicy/private/system_server.te

(allow system_server property_socket (sock_file (write)))
;;* lme

;;* lmx 857 system/sepolicy/private/system_server.te

(allow system_server init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 857 system/sepolicy/private/system_server.te

(allow system_server audio_prop (property_service (set)))
;;* lme

;;* lmx 857 system/sepolicy/private/system_server.te

(allow system_server audio_prop (file (read getattr map open)))
;;* lme

;;* lmx 858 system/sepolicy/private/system_server.te

(allow system_server property_socket (sock_file (write)))
;;* lme

;;* lmx 858 system/sepolicy/private/system_server.te

(allow system_server init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 858 system/sepolicy/private/system_server.te

(allow system_server boot_status_prop (property_service (set)))
;;* lme

;;* lmx 858 system/sepolicy/private/system_server.te

(allow system_server boot_status_prop (file (read getattr map open)))
;;* lme

;;* lmx 859 system/sepolicy/private/system_server.te

(allow system_server property_socket (sock_file (write)))
;;* lme

;;* lmx 859 system/sepolicy/private/system_server.te

(allow system_server init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 859 system/sepolicy/private/system_server.te

(allow system_server surfaceflinger_color_prop (property_service (set)))
;;* lme

;;* lmx 859 system/sepolicy/private/system_server.te

(allow system_server surfaceflinger_color_prop (file (read getattr map open)))
;;* lme

;;* lmx 860 system/sepolicy/private/system_server.te

(allow system_server property_socket (sock_file (write)))
;;* lme

;;* lmx 860 system/sepolicy/private/system_server.te

(allow system_server init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 860 system/sepolicy/private/system_server.te

(allow system_server provisioned_prop (property_service (set)))
;;* lme

;;* lmx 860 system/sepolicy/private/system_server.te

(allow system_server provisioned_prop (file (read getattr map open)))
;;* lme

;;* lmx 861 system/sepolicy/private/system_server.te

(allow system_server property_socket (sock_file (write)))
;;* lme

;;* lmx 861 system/sepolicy/private/system_server.te

(allow system_server init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 861 system/sepolicy/private/system_server.te

(allow system_server retaildemo_prop (property_service (set)))
;;* lme

;;* lmx 861 system/sepolicy/private/system_server.te

(allow system_server retaildemo_prop (file (read getattr map open)))
;;* lme

;;* lmx 862 system/sepolicy/private/system_server.te

(allow system_server property_socket (sock_file (write)))
;;* lme

;;* lmx 862 system/sepolicy/private/system_server.te

(allow system_server init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 862 system/sepolicy/private/system_server.te

(allow system_server dmesgd_start_prop (property_service (set)))
;;* lme

;;* lmx 862 system/sepolicy/private/system_server.te

(allow system_server dmesgd_start_prop (file (read getattr map open)))
;;* lme

;;* lmx 863 system/sepolicy/private/system_server.te

(allow system_server property_socket (sock_file (write)))
;;* lme

;;* lmx 863 system/sepolicy/private/system_server.te

(allow system_server init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 863 system/sepolicy/private/system_server.te

(allow system_server locale_prop (property_service (set)))
;;* lme

;;* lmx 863 system/sepolicy/private/system_server.te

(allow system_server locale_prop (file (read getattr map open)))
;;* lme

;;* lmx 864 system/sepolicy/private/system_server.te

(allow system_server property_socket (sock_file (write)))
;;* lme

;;* lmx 864 system/sepolicy/private/system_server.te

(allow system_server init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 864 system/sepolicy/private/system_server.te

(allow system_server timezone_metadata_prop (property_service (set)))
;;* lme

;;* lmx 864 system/sepolicy/private/system_server.te

(allow system_server timezone_metadata_prop (file (read getattr map open)))
;;* lme

;;* lmx 865 system/sepolicy/private/system_server.te

(allow system_server property_socket (sock_file (write)))
;;* lme

;;* lmx 865 system/sepolicy/private/system_server.te

(allow system_server init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 865 system/sepolicy/private/system_server.te

(allow system_server timezone_prop (property_service (set)))
;;* lme

;;* lmx 865 system/sepolicy/private/system_server.te

(allow system_server timezone_prop (file (read getattr map open)))
;;* lme

;;* lmx 866 system/sepolicy/private/system_server.te

(allow system_server property_socket (sock_file (write)))
;;* lme

;;* lmx 866 system/sepolicy/private/system_server.te

(allow system_server init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 866 system/sepolicy/private/system_server.te

(allow system_server crashrecovery_prop (property_service (set)))
;;* lme

;;* lmx 866 system/sepolicy/private/system_server.te

(allow system_server crashrecovery_prop (file (read getattr map open)))
;;* lme

;;* lmx 867 system/sepolicy/private/system_server.te

(allow system_server property_socket (sock_file (write)))
;;* lme

;;* lmx 867 system/sepolicy/private/system_server.te

(allow system_server init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 867 system/sepolicy/private/system_server.te

(allow system_server wifi_log_prop (property_service (set)))
;;* lme

;;* lmx 867 system/sepolicy/private/system_server.te

(allow system_server wifi_log_prop (file (read getattr map open)))
;;* lme

;;* lmx 868 system/sepolicy/private/system_server.te

(allow system_server property_socket (sock_file (write)))
;;* lme

;;* lmx 868 system/sepolicy/private/system_server.te

(allow system_server init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 868 system/sepolicy/private/system_server.te

(allow system_server system_user_mode_emulation_prop (property_service (set)))
;;* lme

;;* lmx 868 system/sepolicy/private/system_server.te

(allow system_server system_user_mode_emulation_prop (file (read getattr map open)))
;;* lme

;;* lmx 871 system/sepolicy/private/system_server.te

(allow system_server property_socket (sock_file (write)))
;;* lme

;;* lmx 871 system/sepolicy/private/system_server.te

(allow system_server init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 871 system/sepolicy/private/system_server.te

(allow system_server ctl_default_prop (property_service (set)))
;;* lme

;;* lmx 871 system/sepolicy/private/system_server.te

(allow system_server ctl_default_prop (file (read getattr map open)))
;;* lme

;;* lmx 872 system/sepolicy/private/system_server.te

(allow system_server property_socket (sock_file (write)))
;;* lme

;;* lmx 872 system/sepolicy/private/system_server.te

(allow system_server init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 872 system/sepolicy/private/system_server.te

(allow system_server ctl_bugreport_prop (property_service (set)))
;;* lme

;;* lmx 872 system/sepolicy/private/system_server.te

(allow system_server ctl_bugreport_prop (file (read getattr map open)))
;;* lme

;;* lmx 873 system/sepolicy/private/system_server.te

(allow system_server property_socket (sock_file (write)))
;;* lme

;;* lmx 873 system/sepolicy/private/system_server.te

(allow system_server init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 873 system/sepolicy/private/system_server.te

(allow system_server ctl_gsid_prop (property_service (set)))
;;* lme

;;* lmx 873 system/sepolicy/private/system_server.te

(allow system_server ctl_gsid_prop (file (read getattr map open)))
;;* lme

;;* lmx 874 system/sepolicy/private/system_server.te

(allow system_server property_socket (sock_file (write)))
;;* lme

;;* lmx 874 system/sepolicy/private/system_server.te

(allow system_server init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 874 system/sepolicy/private/system_server.te

(allow system_server ctl_artd_pre_reboot_prop (property_service (set)))
;;* lme

;;* lmx 874 system/sepolicy/private/system_server.te

(allow system_server ctl_artd_pre_reboot_prop (file (read getattr map open)))
;;* lme

;;* lmx 877 system/sepolicy/private/system_server.te

(allow system_server property_socket (sock_file (write)))
;;* lme

;;* lmx 877 system/sepolicy/private/system_server.te

(allow system_server init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 877 system/sepolicy/private/system_server.te

(allow system_server cppreopt_prop (property_service (set)))
;;* lme

;;* lmx 877 system/sepolicy/private/system_server.te

(allow system_server cppreopt_prop (file (read getattr map open)))
;;* lme

;;* lmx 880 system/sepolicy/private/system_server.te

(allow system_server property_socket (sock_file (write)))
;;* lme

;;* lmx 880 system/sepolicy/private/system_server.te

(allow system_server init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 880 system/sepolicy/private/system_server.te

(allow system_server device_config_core_experiments_team_internal_prop (property_service (set)))
;;* lme

;;* lmx 880 system/sepolicy/private/system_server.te

(allow system_server device_config_core_experiments_team_internal_prop (file (read getattr map open)))
;;* lme

;;* lmx 881 system/sepolicy/private/system_server.te

(allow system_server property_socket (sock_file (write)))
;;* lme

;;* lmx 881 system/sepolicy/private/system_server.te

(allow system_server init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 881 system/sepolicy/private/system_server.te

(allow system_server device_config_edgetpu_native_prop (property_service (set)))
;;* lme

;;* lmx 881 system/sepolicy/private/system_server.te

(allow system_server device_config_edgetpu_native_prop (file (read getattr map open)))
;;* lme

;;* lmx 882 system/sepolicy/private/system_server.te

(allow system_server property_socket (sock_file (write)))
;;* lme

;;* lmx 882 system/sepolicy/private/system_server.te

(allow system_server init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 882 system/sepolicy/private/system_server.te

(allow system_server device_config_input_native_boot_prop (property_service (set)))
;;* lme

;;* lmx 882 system/sepolicy/private/system_server.te

(allow system_server device_config_input_native_boot_prop (file (read getattr map open)))
;;* lme

;;* lmx 883 system/sepolicy/private/system_server.te

(allow system_server property_socket (sock_file (write)))
;;* lme

;;* lmx 883 system/sepolicy/private/system_server.te

(allow system_server init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 883 system/sepolicy/private/system_server.te

(allow system_server device_config_netd_native_prop (property_service (set)))
;;* lme

;;* lmx 883 system/sepolicy/private/system_server.te

(allow system_server device_config_netd_native_prop (file (read getattr map open)))
;;* lme

;;* lmx 884 system/sepolicy/private/system_server.te

(allow system_server property_socket (sock_file (write)))
;;* lme

;;* lmx 884 system/sepolicy/private/system_server.te

(allow system_server init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 884 system/sepolicy/private/system_server.te

(allow system_server device_config_nnapi_native_prop (property_service (set)))
;;* lme

;;* lmx 884 system/sepolicy/private/system_server.te

(allow system_server device_config_nnapi_native_prop (file (read getattr map open)))
;;* lme

;;* lmx 885 system/sepolicy/private/system_server.te

(allow system_server property_socket (sock_file (write)))
;;* lme

;;* lmx 885 system/sepolicy/private/system_server.te

(allow system_server init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 885 system/sepolicy/private/system_server.te

(allow system_server device_config_activity_manager_native_boot_prop (property_service (set)))
;;* lme

;;* lmx 885 system/sepolicy/private/system_server.te

(allow system_server device_config_activity_manager_native_boot_prop (file (read getattr map open)))
;;* lme

;;* lmx 886 system/sepolicy/private/system_server.te

(allow system_server property_socket (sock_file (write)))
;;* lme

;;* lmx 886 system/sepolicy/private/system_server.te

(allow system_server init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 886 system/sepolicy/private/system_server.te

(allow system_server device_config_runtime_native_boot_prop (property_service (set)))
;;* lme

;;* lmx 886 system/sepolicy/private/system_server.te

(allow system_server device_config_runtime_native_boot_prop (file (read getattr map open)))
;;* lme

;;* lmx 887 system/sepolicy/private/system_server.te

(allow system_server property_socket (sock_file (write)))
;;* lme

;;* lmx 887 system/sepolicy/private/system_server.te

(allow system_server init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 887 system/sepolicy/private/system_server.te

(allow system_server device_config_runtime_native_prop (property_service (set)))
;;* lme

;;* lmx 887 system/sepolicy/private/system_server.te

(allow system_server device_config_runtime_native_prop (file (read getattr map open)))
;;* lme

;;* lmx 888 system/sepolicy/private/system_server.te

(allow system_server property_socket (sock_file (write)))
;;* lme

;;* lmx 888 system/sepolicy/private/system_server.te

(allow system_server init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 888 system/sepolicy/private/system_server.te

(allow system_server device_config_lmkd_native_prop (property_service (set)))
;;* lme

;;* lmx 888 system/sepolicy/private/system_server.te

(allow system_server device_config_lmkd_native_prop (file (read getattr map open)))
;;* lme

;;* lmx 889 system/sepolicy/private/system_server.te

(allow system_server property_socket (sock_file (write)))
;;* lme

;;* lmx 889 system/sepolicy/private/system_server.te

(allow system_server init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 889 system/sepolicy/private/system_server.te

(allow system_server device_config_media_native_prop (property_service (set)))
;;* lme

;;* lmx 889 system/sepolicy/private/system_server.te

(allow system_server device_config_media_native_prop (file (read getattr map open)))
;;* lme

;;* lmx 890 system/sepolicy/private/system_server.te

(allow system_server property_socket (sock_file (write)))
;;* lme

;;* lmx 890 system/sepolicy/private/system_server.te

(allow system_server init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 890 system/sepolicy/private/system_server.te

(allow system_server device_config_camera_native_prop (property_service (set)))
;;* lme

;;* lmx 890 system/sepolicy/private/system_server.te

(allow system_server device_config_camera_native_prop (file (read getattr map open)))
;;* lme

;;* lmx 891 system/sepolicy/private/system_server.te

(allow system_server property_socket (sock_file (write)))
;;* lme

;;* lmx 891 system/sepolicy/private/system_server.te

(allow system_server init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 891 system/sepolicy/private/system_server.te

(allow system_server device_config_mglru_native_prop (property_service (set)))
;;* lme

;;* lmx 891 system/sepolicy/private/system_server.te

(allow system_server device_config_mglru_native_prop (file (read getattr map open)))
;;* lme

;;* lmx 892 system/sepolicy/private/system_server.te

(allow system_server property_socket (sock_file (write)))
;;* lme

;;* lmx 892 system/sepolicy/private/system_server.te

(allow system_server init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 892 system/sepolicy/private/system_server.te

(allow system_server device_config_profcollect_native_boot_prop (property_service (set)))
;;* lme

;;* lmx 892 system/sepolicy/private/system_server.te

(allow system_server device_config_profcollect_native_boot_prop (file (read getattr map open)))
;;* lme

;;* lmx 893 system/sepolicy/private/system_server.te

(allow system_server property_socket (sock_file (write)))
;;* lme

;;* lmx 893 system/sepolicy/private/system_server.te

(allow system_server init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 893 system/sepolicy/private/system_server.te

(allow system_server device_config_statsd_native_prop (property_service (set)))
;;* lme

;;* lmx 893 system/sepolicy/private/system_server.te

(allow system_server device_config_statsd_native_prop (file (read getattr map open)))
;;* lme

;;* lmx 894 system/sepolicy/private/system_server.te

(allow system_server property_socket (sock_file (write)))
;;* lme

;;* lmx 894 system/sepolicy/private/system_server.te

(allow system_server init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 894 system/sepolicy/private/system_server.te

(allow system_server device_config_statsd_native_boot_prop (property_service (set)))
;;* lme

;;* lmx 894 system/sepolicy/private/system_server.te

(allow system_server device_config_statsd_native_boot_prop (file (read getattr map open)))
;;* lme

;;* lmx 895 system/sepolicy/private/system_server.te

(allow system_server property_socket (sock_file (write)))
;;* lme

;;* lmx 895 system/sepolicy/private/system_server.te

(allow system_server init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 895 system/sepolicy/private/system_server.te

(allow system_server device_config_storage_native_boot_prop (property_service (set)))
;;* lme

;;* lmx 895 system/sepolicy/private/system_server.te

(allow system_server device_config_storage_native_boot_prop (file (read getattr map open)))
;;* lme

;;* lmx 896 system/sepolicy/private/system_server.te

(allow system_server property_socket (sock_file (write)))
;;* lme

;;* lmx 896 system/sepolicy/private/system_server.te

(allow system_server init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 896 system/sepolicy/private/system_server.te

(allow system_server device_config_swcodec_native_prop (property_service (set)))
;;* lme

;;* lmx 896 system/sepolicy/private/system_server.te

(allow system_server device_config_swcodec_native_prop (file (read getattr map open)))
;;* lme

;;* lmx 897 system/sepolicy/private/system_server.te

(allow system_server property_socket (sock_file (write)))
;;* lme

;;* lmx 897 system/sepolicy/private/system_server.te

(allow system_server init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 897 system/sepolicy/private/system_server.te

(allow system_server device_config_sys_traced_prop (property_service (set)))
;;* lme

;;* lmx 897 system/sepolicy/private/system_server.te

(allow system_server device_config_sys_traced_prop (file (read getattr map open)))
;;* lme

;;* lmx 898 system/sepolicy/private/system_server.te

(allow system_server property_socket (sock_file (write)))
;;* lme

;;* lmx 898 system/sepolicy/private/system_server.te

(allow system_server init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 898 system/sepolicy/private/system_server.te

(allow system_server device_config_window_manager_native_boot_prop (property_service (set)))
;;* lme

;;* lmx 898 system/sepolicy/private/system_server.te

(allow system_server device_config_window_manager_native_boot_prop (file (read getattr map open)))
;;* lme

;;* lmx 899 system/sepolicy/private/system_server.te

(allow system_server property_socket (sock_file (write)))
;;* lme

;;* lmx 899 system/sepolicy/private/system_server.te

(allow system_server init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 899 system/sepolicy/private/system_server.te

(allow system_server device_config_configuration_prop (property_service (set)))
;;* lme

;;* lmx 899 system/sepolicy/private/system_server.te

(allow system_server device_config_configuration_prop (file (read getattr map open)))
;;* lme

;;* lmx 900 system/sepolicy/private/system_server.te

(allow system_server property_socket (sock_file (write)))
;;* lme

;;* lmx 900 system/sepolicy/private/system_server.te

(allow system_server init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 900 system/sepolicy/private/system_server.te

(allow system_server device_config_connectivity_prop (property_service (set)))
;;* lme

;;* lmx 900 system/sepolicy/private/system_server.te

(allow system_server device_config_connectivity_prop (file (read getattr map open)))
;;* lme

;;* lmx 901 system/sepolicy/private/system_server.te

(allow system_server property_socket (sock_file (write)))
;;* lme

;;* lmx 901 system/sepolicy/private/system_server.te

(allow system_server init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 901 system/sepolicy/private/system_server.te

(allow system_server device_config_surface_flinger_native_boot_prop (property_service (set)))
;;* lme

;;* lmx 901 system/sepolicy/private/system_server.te

(allow system_server device_config_surface_flinger_native_boot_prop (file (read getattr map open)))
;;* lme

;;* lmx 902 system/sepolicy/private/system_server.te

(allow system_server property_socket (sock_file (write)))
;;* lme

;;* lmx 902 system/sepolicy/private/system_server.te

(allow system_server init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 902 system/sepolicy/private/system_server.te

(allow system_server device_config_aconfig_flags_prop (property_service (set)))
;;* lme

;;* lmx 902 system/sepolicy/private/system_server.te

(allow system_server device_config_aconfig_flags_prop (file (read getattr map open)))
;;* lme

;;* lmx 903 system/sepolicy/private/system_server.te

(allow system_server property_socket (sock_file (write)))
;;* lme

;;* lmx 903 system/sepolicy/private/system_server.te

(allow system_server init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 903 system/sepolicy/private/system_server.te

(allow system_server device_config_vendor_system_native_prop (property_service (set)))
;;* lme

;;* lmx 903 system/sepolicy/private/system_server.te

(allow system_server device_config_vendor_system_native_prop (file (read getattr map open)))
;;* lme

;;* lmx 904 system/sepolicy/private/system_server.te

(allow system_server property_socket (sock_file (write)))
;;* lme

;;* lmx 904 system/sepolicy/private/system_server.te

(allow system_server init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 904 system/sepolicy/private/system_server.te

(allow system_server device_config_vendor_system_native_boot_prop (property_service (set)))
;;* lme

;;* lmx 904 system/sepolicy/private/system_server.te

(allow system_server device_config_vendor_system_native_boot_prop (file (read getattr map open)))
;;* lme

;;* lmx 905 system/sepolicy/private/system_server.te

(allow system_server property_socket (sock_file (write)))
;;* lme

;;* lmx 905 system/sepolicy/private/system_server.te

(allow system_server init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 905 system/sepolicy/private/system_server.te

(allow system_server device_config_virtualization_framework_native_prop (property_service (set)))
;;* lme

;;* lmx 905 system/sepolicy/private/system_server.te

(allow system_server device_config_virtualization_framework_native_prop (file (read getattr map open)))
;;* lme

;;* lmx 906 system/sepolicy/private/system_server.te

(allow system_server property_socket (sock_file (write)))
;;* lme

;;* lmx 906 system/sepolicy/private/system_server.te

(allow system_server init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 906 system/sepolicy/private/system_server.te

(allow system_server device_config_memory_safety_native_boot_prop (property_service (set)))
;;* lme

;;* lmx 906 system/sepolicy/private/system_server.te

(allow system_server device_config_memory_safety_native_boot_prop (file (read getattr map open)))
;;* lme

;;* lmx 907 system/sepolicy/private/system_server.te

(allow system_server property_socket (sock_file (write)))
;;* lme

;;* lmx 907 system/sepolicy/private/system_server.te

(allow system_server init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 907 system/sepolicy/private/system_server.te

(allow system_server device_config_memory_safety_native_prop (property_service (set)))
;;* lme

;;* lmx 907 system/sepolicy/private/system_server.te

(allow system_server device_config_memory_safety_native_prop (file (read getattr map open)))
;;* lme

;;* lmx 908 system/sepolicy/private/system_server.te

(allow system_server property_socket (sock_file (write)))
;;* lme

;;* lmx 908 system/sepolicy/private/system_server.te

(allow system_server init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 908 system/sepolicy/private/system_server.te

(allow system_server device_config_remote_key_provisioning_native_prop (property_service (set)))
;;* lme

;;* lmx 908 system/sepolicy/private/system_server.te

(allow system_server device_config_remote_key_provisioning_native_prop (file (read getattr map open)))
;;* lme

;;* lmx 909 system/sepolicy/private/system_server.te

(allow system_server property_socket (sock_file (write)))
;;* lme

;;* lmx 909 system/sepolicy/private/system_server.te

(allow system_server init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 909 system/sepolicy/private/system_server.te

(allow system_server device_config_tethering_u_or_later_native_prop (property_service (set)))
;;* lme

;;* lmx 909 system/sepolicy/private/system_server.te

(allow system_server device_config_tethering_u_or_later_native_prop (file (read getattr map open)))
;;* lme

;;* lmx 910 system/sepolicy/private/system_server.te

(allow system_server property_socket (sock_file (write)))
;;* lme

;;* lmx 910 system/sepolicy/private/system_server.te

(allow system_server init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 910 system/sepolicy/private/system_server.te

(allow system_server device_config_mmd_native_prop (property_service (set)))
;;* lme

;;* lmx 910 system/sepolicy/private/system_server.te

(allow system_server device_config_mmd_native_prop (file (read getattr map open)))
;;* lme

;;* lmx 911 system/sepolicy/private/system_server.te

(allow system_server property_socket (sock_file (write)))
;;* lme

;;* lmx 911 system/sepolicy/private/system_server.te

(allow system_server init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 911 system/sepolicy/private/system_server.te

(allow system_server device_config_memory_management_native_boot_prop (property_service (set)))
;;* lme

;;* lmx 911 system/sepolicy/private/system_server.te

(allow system_server device_config_memory_management_native_boot_prop (file (read getattr map open)))
;;* lme

;;* lmx 912 system/sepolicy/private/system_server.te

(allow system_server property_socket (sock_file (write)))
;;* lme

;;* lmx 912 system/sepolicy/private/system_server.te

(allow system_server init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 912 system/sepolicy/private/system_server.te

(allow system_server smart_idle_maint_enabled_prop (property_service (set)))
;;* lme

;;* lmx 912 system/sepolicy/private/system_server.te

(allow system_server smart_idle_maint_enabled_prop (file (read getattr map open)))
;;* lme

;;* lmx 913 system/sepolicy/private/system_server.te

(allow system_server property_socket (sock_file (write)))
;;* lme

;;* lmx 913 system/sepolicy/private/system_server.te

(allow system_server init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 913 system/sepolicy/private/system_server.te

(allow system_server arm64_memtag_prop (property_service (set)))
;;* lme

;;* lmx 913 system/sepolicy/private/system_server.te

(allow system_server arm64_memtag_prop (file (read getattr map open)))
;;* lme

;;* lmx 916 system/sepolicy/private/system_server.te

(allow system_server property_socket (sock_file (write)))
;;* lme

;;* lmx 916 system/sepolicy/private/system_server.te

(allow system_server init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 916 system/sepolicy/private/system_server.te

(allow system_server next_boot_prop (property_service (set)))
;;* lme

;;* lmx 916 system/sepolicy/private/system_server.te

(allow system_server next_boot_prop (file (read getattr map open)))
;;* lme

;;* lmx 919 system/sepolicy/private/system_server.te

(allow system_server pm_16kb_app_compat_prop (file (read getattr map open)))
;;* lme

;;* lmx 922 system/sepolicy/private/system_server.te

(allow system_server device_config_runtime_native_boot_prop (file (read getattr map open)))
;;* lme

;;* lmx 923 system/sepolicy/private/system_server.te

(allow system_server device_config_runtime_native_prop (file (read getattr map open)))
;;* lme

;;* lmx 926 system/sepolicy/private/system_server.te

(allow system_server bootloader_boot_reason_prop (file (read getattr map open)))
;;* lme

;;* lmx 928 system/sepolicy/private/system_server.te

(allow system_server system_boot_reason_prop (file (read getattr map open)))
;;* lme

;;* lmx 931 system/sepolicy/private/system_server.te

(allow system_server boottime_prop (file (read getattr map open)))
;;* lme

;;* lmx 934 system/sepolicy/private/system_server.te

(allow system_server serialno_prop (file (read getattr map open)))
;;* lme

;;* lmx 937 system/sepolicy/private/system_server.te

(allow system_server usb_uvc_enabled_prop (file (read getattr map open)))
;;* lme

;;* lmx 940 system/sepolicy/private/system_server.te

(allow system_server property_socket (sock_file (write)))
;;* lme

;;* lmx 940 system/sepolicy/private/system_server.te

(allow system_server init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 940 system/sepolicy/private/system_server.te

(allow system_server firstboot_prop (property_service (set)))
;;* lme

;;* lmx 940 system/sepolicy/private/system_server.te

(allow system_server firstboot_prop (file (read getattr map open)))
;;* lme

;;* lmx 944 system/sepolicy/private/system_server.te

(allow system_server audio_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 947 system/sepolicy/private/system_server.te

(allow system_server media_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 951 system/sepolicy/private/system_server.te

(allow system_server device_config_reset_performed_prop (file (read getattr map open)))
;;* lme

;;* lmx 954 system/sepolicy/private/system_server.te

(allow system_server property_socket (sock_file (write)))
;;* lme

;;* lmx 954 system/sepolicy/private/system_server.te

(allow system_server init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 954 system/sepolicy/private/system_server.te

(allow system_server test_harness_prop (property_service (set)))
;;* lme

;;* lmx 954 system/sepolicy/private/system_server.te

(allow system_server test_harness_prop (file (read getattr map open)))
;;* lme

;;* lmx 957 system/sepolicy/private/system_server.te

(allow system_server gsid_prop (file (read getattr map open)))
;;* lme

;;* lmx 960 system/sepolicy/private/system_server.te

(allow system_server mock_ota_prop (file (read getattr map open)))
;;* lme

;;* lmx 963 system/sepolicy/private/system_server.te

(allow system_server wifi_prop (file (read getattr map open)))
;;* lme

;;* lmx 966 system/sepolicy/private/system_server.te

(allow system_server incremental_prop (file (read getattr map open)))
;;* lme

;;* lmx 969 system/sepolicy/private/system_server.te

(allow system_server zram_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 972 system/sepolicy/private/system_server.te

(allow system_server property_socket (sock_file (write)))
;;* lme

;;* lmx 972 system/sepolicy/private/system_server.te

(allow system_server init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 972 system/sepolicy/private/system_server.te

(allow system_server zram_control_prop (property_service (set)))
;;* lme

;;* lmx 972 system/sepolicy/private/system_server.te

(allow system_server zram_control_prop (file (read getattr map open)))
;;* lme

;;* lmx 975 system/sepolicy/private/system_server.te

(allow system_server property_socket (sock_file (write)))
;;* lme

;;* lmx 975 system/sepolicy/private/system_server.te

(allow system_server init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 975 system/sepolicy/private/system_server.te

(allow system_server dalvik_runtime_prop (property_service (set)))
;;* lme

;;* lmx 975 system/sepolicy/private/system_server.te

(allow system_server dalvik_runtime_prop (file (read getattr map open)))
;;* lme

;;* lmx 978 system/sepolicy/private/system_server.te

(allow system_server packagemanager_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 981 system/sepolicy/private/system_server.te

(allow system_server net_464xlat_fromvendor_prop (file (read getattr map open)))
;;* lme

;;* lmx 984 system/sepolicy/private/system_server.te

(allow system_server hypervisor_prop (file (read getattr map open)))
;;* lme

;;* lmx 987 system/sepolicy/private/system_server.te

(allow system_server persist_wm_debug_prop (file (read getattr map open)))
;;* lme

;;* lmx 988 system/sepolicy/private/system_server.te

(allow system_server property_socket (sock_file (write)))
;;* lme

;;* lmx 988 system/sepolicy/private/system_server.te

(allow system_server init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 988 system/sepolicy/private/system_server.te

(allow system_server persist_wm_debug_prop (property_service (set)))
;;* lme

;;* lmx 988 system/sepolicy/private/system_server.te

(allow system_server persist_wm_debug_prop (file (read getattr map open)))
;;* lme

;;* lmx 991 system/sepolicy/private/system_server.te

(allow system_server property_socket (sock_file (write)))
;;* lme

;;* lmx 991 system/sepolicy/private/system_server.te

(allow system_server init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 991 system/sepolicy/private/system_server.te

(allow system_server pcc_audit_mode_prop (property_service (set)))
;;* lme

;;* lmx 991 system/sepolicy/private/system_server.te

(allow system_server pcc_audit_mode_prop (file (read getattr map open)))
;;* lme

;;* lmx 992 system/sepolicy/private/system_server.te

(allow system_server property_socket (sock_file (write)))
;;* lme

;;* lmx 992 system/sepolicy/private/system_server.te

(allow system_server init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 992 system/sepolicy/private/system_server.te

(allow system_server pcc_audit_mode_client_prop (property_service (set)))
;;* lme

;;* lmx 992 system/sepolicy/private/system_server.te

(allow system_server pcc_audit_mode_client_prop (file (read getattr map open)))
;;* lme

;;* lmx 995 system/sepolicy/private/system_server.te

(allow system_server tuner_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 997 system/sepolicy/private/system_server.te

(allow system_server property_socket (sock_file (write)))
;;* lme

;;* lmx 997 system/sepolicy/private/system_server.te

(allow system_server init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 997 system/sepolicy/private/system_server.te

(allow system_server tuner_server_ctl_prop (property_service (set)))
;;* lme

;;* lmx 997 system/sepolicy/private/system_server.te

(allow system_server tuner_server_ctl_prop (file (read getattr map open)))
;;* lme

;;* lmx 1000 system/sepolicy/private/system_server.te

(allow system_server traced_oome_heap_session_count_prop (file (read getattr map open)))
;;* lme

;;* lmx 1004 system/sepolicy/private/system_server.te

(allow system_server sensors_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 1007 system/sepolicy/private/system_server.te

(allow system_server system_service_enable_prop (file (read getattr map open)))
;;* lme

;;* lmx 1010 system/sepolicy/private/system_server.te

(allow system_server mmd_shared_prop (file (read getattr map open)))
;;* lme

;;* lmx 1013 system/sepolicy/private/system_server.te

(allow system_server usb_disable_when_locked_prop (file (read getattr map open)))
;;* lme

;;* lmx 1016 system/sepolicy/private/system_server.te

(allow system_server build_bootimage_prop (file (read getattr map open)))
;;* lme

;;* lmx 1018 system/sepolicy/private/system_server.te

(allow system_server hsum_boot_strategy_prop (file (read getattr map open)))
;;* lme

;;* lmx 1021 system/sepolicy/private/system_server.te

(allow system_server system_ndebug_socket (sock_file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 1024 system/sepolicy/private/system_server.te

(allow system_server system_unsolzygote_socket (sock_file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 1027 system/sepolicy/private/system_server.te

(allow system_server cache_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 1028 system/sepolicy/private/system_server.te

(allow system_server cache_file (dir (ioctl read write create getattr setattr lock relabelfrom rename open watch watch_reads add_name remove_name reparent search rmdir)))
(allow system_server cache_recovery_file (dir (ioctl read write create getattr setattr lock relabelfrom rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 1029 system/sepolicy/private/system_server.te

(allow system_server cache_file (file (ioctl read write create getattr setattr lock relabelfrom append map unlink rename open watch watch_reads)))
(allow system_server cache_recovery_file (file (ioctl read write create getattr setattr lock relabelfrom append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 1030 system/sepolicy/private/system_server.te

(allow system_server cache_file (fifo_file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow system_server cache_recovery_file (fifo_file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 1032 system/sepolicy/private/system_server.te

(allow system_server system_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 1033 system/sepolicy/private/system_server.te

(allow system_server system_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 1036 system/sepolicy/private/system_server.te

(allow system_server system_file (file (lock)))
;;* lme

;;* lmx 1040 system/sepolicy/private/system_server.te

(allow system_server gps_control (file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 1043 system/sepolicy/private/system_server.te

(allow system_server appdomain (tcp_socket (read write getattr getopt setopt shutdown)))
(allow system_server appdomain (udp_socket (read write getattr getopt setopt shutdown)))
;;* lme

;;* lmx 1044 system/sepolicy/private/system_server.te

(allow system_server appdomain (fifo_file (read write getattr)))
(allow system_server appdomain (unix_stream_socket (read write getattr)))
;;* lme

;;* lmx 1047 system/sepolicy/private/system_server.te

(allow system_server cache_backup_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
;;* lme

;;* lmx 1048 system/sepolicy/private/system_server.te

(allow system_server cache_backup_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 1050 system/sepolicy/private/system_server.te

(allow system_server cache_private_backup_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 1051 system/sepolicy/private/system_server.te

(allow system_server cache_private_backup_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 1054 system/sepolicy/private/system_server.te

(allow system_server usb_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 1055 system/sepolicy/private/system_server.te

(allow system_server usb_device (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 1058 system/sepolicy/private/system_server.te

(allow system_server fscklogs (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 1058 system/sepolicy/private/system_server.te

(allow system_server fscklogs (file (ioctl read getattr lock map open watch watch_reads)))
(allow system_server fscklogs (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 1059 system/sepolicy/private/system_server.te

(allow system_server fscklogs (dir (write add_name remove_name)))
;;* lme

;;* lmx 1060 system/sepolicy/private/system_server.te

(allow system_server fscklogs (file (rename)))
;;* lme

;;* lmx 1064 system/sepolicy/private/system_server.te

(allow system_server zygote (unix_dgram_socket (write)))
;;* lme

;;* lmx 1067 system/sepolicy/private/system_server.te

(allow system_server logcat_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lme

;;* lmx 1067 system/sepolicy/private/system_server.te

(allow system_server logdr_socket (sock_file (write)))
;;* lme

;;* lmx 1067 system/sepolicy/private/system_server.te

(allow system_server logd (unix_stream_socket (connectto)))
;;* lme

;;* lmx 1068 system/sepolicy/private/system_server.te

(allow system_server runtime_event_log_tags_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 1073 system/sepolicy/private/system_server.te

(allow system_server sysfs_lowmemorykiller (file (write getattr lock append map open)))
;;* lme

;;* lmx 1078 system/sepolicy/private/system_server.te

(allow system_server pstorefs (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 1079 system/sepolicy/private/system_server.te

(allow system_server pstorefs (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 1082 system/sepolicy/private/system_server.te

(allow system_server sysfs_zram (dir (search)))
;;* lme

;;* lmx 1083 system/sepolicy/private/system_server.te

(allow system_server sysfs_zram (file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 1086 system/sepolicy/private/system_server.te

(allow system_server kernel (security (read_policy)))
;;* lme

;;* lmx 1088 system/sepolicy/private/system_server.te

(allow system_server system_server_service (service_manager (add find)))
;;* lme

;;* lmx 1088 system/sepolicy/private/system_server.te

(neverallow base_typeattr_427 system_server_service (service_manager (add)))
;;* lme

;;* lmx 1088 system/sepolicy/private/system_server.te

(allow system_server su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 1089 system/sepolicy/private/system_server.te

(allow system_server artd_service (service_manager (find)))
;;* lme

;;* lmx 1090 system/sepolicy/private/system_server.te

(allow system_server artd_pre_reboot_service (service_manager (find)))
;;* lme

;;* lmx 1091 system/sepolicy/private/system_server.te

(allow system_server audioserver_service (service_manager (find)))
;;* lme

;;* lmx 1092 system/sepolicy/private/system_server.te

(allow system_server authorization_service (service_manager (find)))
;;* lme

;;* lmx 1093 system/sepolicy/private/system_server.te

(allow system_server batteryproperties_service (service_manager (find)))
;;* lme

;;* lmx 1094 system/sepolicy/private/system_server.te

(allow system_server cameraserver_service (service_manager (find)))
;;* lme

;;* lmx 1095 system/sepolicy/private/system_server.te

(allow system_server compos_service (service_manager (find)))
;;* lme

;;* lmx 1096 system/sepolicy/private/system_server.te

(allow system_server dataloader_manager_service (service_manager (find)))
;;* lme

;;* lmx 1097 system/sepolicy/private/system_server.te

(allow system_server dexopt_chroot_setup_service (service_manager (find)))
;;* lme

;;* lmx 1098 system/sepolicy/private/system_server.te

(allow system_server dnsresolver_service (service_manager (find)))
;;* lme

;;* lmx 1099 system/sepolicy/private/system_server.te

(allow system_server drmserver_service (service_manager (find)))
;;* lme

;;* lmx 1100 system/sepolicy/private/system_server.te

(allow system_server dumpstate_service (service_manager (find)))
;;* lme

;;* lmx 1101 system/sepolicy/private/system_server.te

(allow system_server fingerprintd_service (service_manager (find)))
;;* lme

;;* lmx 1102 system/sepolicy/private/system_server.te

(allow system_server gatekeeper_service (service_manager (find)))
;;* lme

;;* lmx 1103 system/sepolicy/private/system_server.te

(allow system_server gpu_service (service_manager (find)))
;;* lme

;;* lmx 1104 system/sepolicy/private/system_server.te

(allow system_server gsi_service (service_manager (find)))
;;* lme

;;* lmx 1105 system/sepolicy/private/system_server.te

(allow system_server idmap_service (service_manager (find)))
;;* lme

;;* lmx 1106 system/sepolicy/private/system_server.te

(allow system_server incident_service (service_manager (find)))
;;* lme

;;* lmx 1107 system/sepolicy/private/system_server.te

(allow system_server incremental_service (service_manager (find)))
;;* lme

;;* lmx 1108 system/sepolicy/private/system_server.te

(allow system_server installd_service (service_manager (find)))
;;* lme

;;* lmx 1109 system/sepolicy/private/system_server.te

(allow system_server keystore_maintenance_service (service_manager (find)))
;;* lme

;;* lmx 1110 system/sepolicy/private/system_server.te

(allow system_server keystore_metrics_service (service_manager (find)))
;;* lme

;;* lmx 1111 system/sepolicy/private/system_server.te

(allow system_server keystore_service (service_manager (find)))
;;* lme

;;* lmx 1112 system/sepolicy/private/system_server.te

(allow system_server mdns_service (service_manager (find)))
;;* lme

;;* lmx 1113 system/sepolicy/private/system_server.te

(allow system_server mediaserver_service (service_manager (find)))
;;* lme

;;* lmx 1114 system/sepolicy/private/system_server.te

(allow system_server mediametrics_service (service_manager (find)))
;;* lme

;;* lmx 1115 system/sepolicy/private/system_server.te

(allow system_server mediaextractor_service (service_manager (find)))
;;* lme

;;* lmx 1116 system/sepolicy/private/system_server.te

(allow system_server mediadrmserver_service (service_manager (find)))
;;* lme

;;* lmx 1117 system/sepolicy/private/system_server.te

(allow system_server mediatuner_service (service_manager (find)))
;;* lme

;;* lmx 1118 system/sepolicy/private/system_server.te

(allow system_server mmd_service (service_manager (find)))
;;* lme

;;* lmx 1119 system/sepolicy/private/system_server.te

(allow system_server netd_service (service_manager (find)))
;;* lme

;;* lmx 1120 system/sepolicy/private/system_server.te

(allow system_server nfc_service (service_manager (find)))
;;* lme

;;* lmx 1121 system/sepolicy/private/system_server.te

(allow system_server ot_daemon_service (service_manager (find)))
;;* lme

;;* lmx 1122 system/sepolicy/private/system_server.te

(allow system_server radio_service (service_manager (find)))
;;* lme

;;* lmx 1123 system/sepolicy/private/system_server.te

(allow system_server stats_service (service_manager (find)))
;;* lme

;;* lmx 1124 system/sepolicy/private/system_server.te

(allow system_server storaged_service (service_manager (find)))
;;* lme

;;* lmx 1125 system/sepolicy/private/system_server.te

(allow system_server surfaceflinger_service (service_manager (find)))
;;* lme

;;* lmx 1126 system/sepolicy/private/system_server.te

(allow system_server update_engine_service (service_manager (find)))
;;* lme

;;* lmx 1127 system/sepolicy/private/system_server.te

(allow system_server virtual_camera_service (service_manager (find)))
;;* lme

;;* lmx 1128 system/sepolicy/private/system_server.te

(allow system_server virtualization_maintenance_service (service_manager (find)))
;;* lme

;;* lmx 1131 system/sepolicy/private/system_server.te

(allow system_server vold_service (service_manager (find)))
;;* lme

;;* lmx 1132 system/sepolicy/private/system_server.te

(allow system_server wifinl80211_service (service_manager (find)))
;;* lme

;;* lmx 1133 system/sepolicy/private/system_server.te

(allow system_server logd_service (service_manager (find)))
;;* lme

;;* lmx 1134 system/sepolicy/private/system_server.te

(allow system_server profcollectd_service (service_manager (find)))
;;* lme

;;* lmx 1137 system/sepolicy/private/system_server.te

(allow system_server wifi_mainline_supplicant_service (service_manager (find)))
;;* lme

;;* lmx 1138 system/sepolicy/private/system_server.te

(allow system_server uprobestats_service (service_manager (find)))
;;* lme

;;* lmx 1140 system/sepolicy/private/system_server.te

(allow system_server batteryproperties_service (service_manager (add find)))
;;* lme

;;* lmx 1140 system/sepolicy/private/system_server.te

(neverallow base_typeattr_427 batteryproperties_service (service_manager (add)))
;;* lme

;;* lmx 1140 system/sepolicy/private/system_server.te

(allow system_server su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 1154 system/sepolicy/private/system_server.te

(allow system_server keystore (keystore2 (add_auth change_password change_user clear_ns clear_uid delete_all_keys get_last_auth_time lock pull_metrics reset unlock)))
;;* lme

;;* lmx 1164 system/sepolicy/private/system_server.te

(allow system_server keystore (keystore2_key (delete get_info grant rebind update use use_dev_id)))
;;* lme

;;* lmx 1173 system/sepolicy/private/system_server.te

(allow system_server wifi_key (keystore2_key (delete get_info rebind update use)))
;;* lme

;;* lmx 1182 system/sepolicy/private/system_server.te

(allow system_server resume_on_reboot_key (keystore2_key (delete get_info rebind update use)))
;;* lme

;;* lmx 1191 system/sepolicy/private/system_server.te

(allow system_server locksettings_key (keystore2_key (delete get_info rebind update use)))
;;* lme

;;* lmx 1201 system/sepolicy/private/system_server.te

(allow system_server keychain_key (keystore2_key (delete get_info grant rebind update use)))
;;* lme

;;* lmx 1206 system/sepolicy/private/system_server.te

(allow system_server block_device (dir (search)))
;;* lme

;;* lmx 1207 system/sepolicy/private/system_server.te

(allow system_server frp_block_device (blk_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 1208 system/sepolicy/private/system_server.te

(allowx system_server frp_block_device (ioctl blk_file (0x1277 0x127d)))
;;* lme

;;* lmx 1211 system/sepolicy/private/system_server.te

(allow system_server cgroup (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 1212 system/sepolicy/private/system_server.te

(allow system_server cgroup (file (setattr)))
;;* lme

;;* lmx 1213 system/sepolicy/private/system_server.te

(allow system_server cgroup_v2 (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 1214 system/sepolicy/private/system_server.te

(allow system_server cgroup_v2 (file (ioctl read getattr setattr lock map open watch watch_reads)))
;;* lme

;;* lmx 1217 system/sepolicy/private/system_server.te

(allow system_server oemfs (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 1217 system/sepolicy/private/system_server.te

(allow system_server oemfs (file (ioctl read getattr lock map open watch watch_reads)))
(allow system_server oemfs (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 1220 system/sepolicy/private/system_server.te

(allow system_server mnt_user_file (dir (getattr search)))
(allow system_server storage_file (dir (getattr search)))
;;* lme

;;* lmx 1221 system/sepolicy/private/system_server.te

(allow system_server mnt_user_file (lnk_file (read getattr)))
(allow system_server storage_file (lnk_file (read getattr)))
;;* lme

;;* lmx 1225 system/sepolicy/private/system_server.te

(allow system_server sdcard_type (dir (getattr search)))
(allow system_server fuse (dir (getattr search)))
;;* lme

;;* lmx 1228 system/sepolicy/private/system_server.te

(allow system_server mnt_expand_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 1232 system/sepolicy/private/system_server.te

(allow system_server fingerprintd_data_file (dir (ioctl read write getattr lock relabelto open watch watch_reads remove_name search rmdir)))
;;* lme

;;* lmx 1233 system/sepolicy/private/system_server.te

(allow system_server fingerprintd_data_file (file (getattr unlink)))
;;* lme

;;* lmx 1235 system/sepolicy/private/system_server.te

(allow system_server method_trace_data_file (dir (write lock open add_name remove_name search)))
;;* lme

;;* lmx 1235 system/sepolicy/private/system_server.te

(allow system_server method_trace_data_file (file (write create lock append map open)))
;;* lme

;;* lmx 1235 system/sepolicy/private/system_server.te

(allow system_server kernel (system (syslog_read)))
;;* lme

;;* lmx 1235 system/sepolicy/private/system_server.te

(allow system_server wm_trace_data_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
;;* lme

;;* lmx 1235 system/sepolicy/private/system_server.te

(allow system_server wm_trace_data_file (file (write create getattr setattr lock append map unlink open)))
;;* lme

;;* lmx 1235 system/sepolicy/private/system_server.te

(allow system_server accessibility_trace_data_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
;;* lme

;;* lmx 1235 system/sepolicy/private/system_server.te

(allow system_server accessibility_trace_data_file (file (write create getattr setattr lock append map unlink open)))
;;* lme

;;* lmx 1253 system/sepolicy/private/system_server.te

(allow system_server trace_data_file (file (read write getattr)))
;;* lme

;;* lmx 1256 system/sepolicy/private/system_server.te

(allow system_server vold (fd (use)))
;;* lme

;;* lmx 1257 system/sepolicy/private/system_server.te

(allow system_server fuse_device (chr_file (ioctl read write getattr)))
;;* lme

;;* lmx 1258 system/sepolicy/private/system_server.te

(allow system_server app_fuse_file (file (read write getattr)))
;;* lme

;;* lmx 1261 system/sepolicy/private/system_server.te

(allow system_server configfs (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 1262 system/sepolicy/private/system_server.te

(allow system_server configfs (file (write create getattr unlink open)))
;;* lme

;;* lmx 1266 system/sepolicy/private/system_server.te

(allow system_server adbd_common (unix_stream_socket (connectto)))
;;* lme

;;* lmx 1267 system/sepolicy/private/system_server.te

(allow system_server adbd_common (fd (use)))
;;* lme

;;* lmx 1268 system/sepolicy/private/system_server.te

(allow system_server adbd_common (unix_stream_socket (ioctl read write getattr getopt shutdown)))
;;* lme

;;* lmx 1271 system/sepolicy/private/system_server.te

(allow system_server adbd_prop (file (read getattr map open)))
;;* lme

;;* lmx 1274 system/sepolicy/private/system_server.te

(allow system_server property_socket (sock_file (write)))
;;* lme

;;* lmx 1274 system/sepolicy/private/system_server.te

(allow system_server init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 1274 system/sepolicy/private/system_server.te

(allow system_server system_adbd_prop (property_service (set)))
;;* lme

;;* lmx 1274 system/sepolicy/private/system_server.te

(allow system_server system_adbd_prop (file (read getattr map open)))
;;* lme

;;* lmx 1277 system/sepolicy/private/system_server.te

(allow system_server property_socket (sock_file (write)))
;;* lme

;;* lmx 1277 system/sepolicy/private/system_server.te

(allow system_server init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 1277 system/sepolicy/private/system_server.te

(allow system_server adbd_tradeinmode_prop (property_service (set)))
;;* lme

;;* lmx 1277 system/sepolicy/private/system_server.te

(allow system_server adbd_tradeinmode_prop (file (read getattr map open)))
;;* lme

;;* lmx 1280 system/sepolicy/private/system_server.te

(allow system_server toolbox_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lme

;;* lmx 1283 system/sepolicy/private/system_server.te

(allow system_server pbtombstone_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lme

;;* lmx 1286 system/sepolicy/private/system_server.te

(allowx system_server system_data_file (ioctl file (0x6685)))
(allowx system_server apk_data_file (ioctl file (0x6685)))
(allowx system_server apk_tmp_file (ioctl file (0x6685)))
(allowx system_server apex_system_server_data_file (ioctl file (0x6685)))
(allowx system_server apex_wifi_data_file (ioctl file (0x6685)))
;;* lme

;;* lmx 1289 system/sepolicy/private/system_server.te

(allowx system_server apk_data_file (ioctl file (0x6686)))
(allowx system_server apk_tmp_file (ioctl file (0x6686)))
;;* lme

;;* lmx 1290 system/sepolicy/private/system_server.te

(allowx system_server apk_tmp_file (ioctl file (0x6602)))
;;* lme

;;* lmx 1295 system/sepolicy/private/system_server.te

(allow system_server postinstall (binder (call transfer)))
;;* lme

;;* lmx 1295 system/sepolicy/private/system_server.te

(allow postinstall system_server (binder (transfer)))
;;* lme

;;* lmx 1295 system/sepolicy/private/system_server.te

(allow system_server postinstall (fd (use)))
;;* lme

;;* lmx 1297 system/sepolicy/private/system_server.te

(allow system_server postinstall (fifo_file (write)))
;;* lme

;;* lmx 1298 system/sepolicy/private/system_server.te

(allow system_server update_engine (fd (use)))
;;* lme

;;* lmx 1299 system/sepolicy/private/system_server.te

(allow system_server update_engine (fifo_file (write)))
;;* lme

;;* lmx 1302 system/sepolicy/private/system_server.te

(allow system_server preloads_data_file (file (ioctl read getattr lock map unlink open watch watch_reads)))
;;* lme

;;* lmx 1303 system/sepolicy/private/system_server.te

(allow system_server preloads_data_file (dir (ioctl read write getattr lock open watch watch_reads remove_name search rmdir)))
;;* lme

;;* lmx 1304 system/sepolicy/private/system_server.te

(allow system_server preloads_media_file (file (ioctl read getattr lock map unlink open watch watch_reads)))
;;* lme

;;* lmx 1305 system/sepolicy/private/system_server.te

(allow system_server preloads_media_file (dir (ioctl read write getattr lock open watch watch_reads remove_name search rmdir)))
;;* lme

;;* lmx 1307 system/sepolicy/private/system_server.te

(allow system_server cgroup (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 1307 system/sepolicy/private/system_server.te

(allow system_server cgroup (file (ioctl read getattr lock map open watch watch_reads)))
(allow system_server cgroup (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 1308 system/sepolicy/private/system_server.te

(allow system_server cgroup_v2 (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 1308 system/sepolicy/private/system_server.te

(allow system_server cgroup_v2 (file (ioctl read getattr lock map open watch watch_reads)))
(allow system_server cgroup_v2 (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 1311 system/sepolicy/private/system_server.te

(allow system_server dmabuf_system_heap_device (chr_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 1313 system/sepolicy/private/system_server.te

(allow system_server dmabuf_system_secure_heap_device (chr_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 1315 system/sepolicy/private/system_server.te

(allow system_server proc_asound (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 1315 system/sepolicy/private/system_server.te

(allow system_server proc_asound (file (ioctl read getattr lock map open watch watch_reads)))
(allow system_server proc_asound (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 1316 system/sepolicy/private/system_server.te

(allow system_server proc_net_type (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 1316 system/sepolicy/private/system_server.te

(allow system_server proc_net_type (file (ioctl read getattr lock map open watch watch_reads)))
(allow system_server proc_net_type (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 1317 system/sepolicy/private/system_server.te

(allow system_server proc_qtaguid_stat (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 1317 system/sepolicy/private/system_server.te

(allow system_server proc_qtaguid_stat (file (ioctl read getattr lock map open watch watch_reads)))
(allow system_server proc_qtaguid_stat (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 1334 system/sepolicy/private/system_server.te

(allow system_server proc_cmdline (file (ioctl read getattr lock map open watch watch_reads)))
(allow system_server proc_loadavg (file (ioctl read getattr lock map open watch watch_reads)))
(allow system_server proc_locks (file (ioctl read getattr lock map open watch watch_reads)))
(allow system_server proc_meminfo (file (ioctl read getattr lock map open watch watch_reads)))
(allow system_server proc_pagetypeinfo (file (ioctl read getattr lock map open watch watch_reads)))
(allow system_server proc_pipe_conf (file (ioctl read getattr lock map open watch watch_reads)))
(allow system_server proc_slabinfo (file (ioctl read getattr lock map open watch watch_reads)))
(allow system_server proc_stat (file (ioctl read getattr lock map open watch watch_reads)))
(allow system_server proc_uid_cputime_showstat (file (ioctl read getattr lock map open watch watch_reads)))
(allow system_server proc_uid_io_stats (file (ioctl read getattr lock map open watch watch_reads)))
(allow system_server proc_uid_time_in_state (file (ioctl read getattr lock map open watch watch_reads)))
(allow system_server proc_uid_concurrent_active_time (file (ioctl read getattr lock map open watch watch_reads)))
(allow system_server proc_uid_concurrent_policy_time (file (ioctl read getattr lock map open watch watch_reads)))
(allow system_server proc_version (file (ioctl read getattr lock map open watch watch_reads)))
(allow system_server proc_vmallocinfo (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 1336 system/sepolicy/private/system_server.te

(allow system_server proc_uid_time_in_state (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 1337 system/sepolicy/private/system_server.te

(allow system_server proc_uid_cpupower (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 1339 system/sepolicy/private/system_server.te

(allow system_server rootfs (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 1339 system/sepolicy/private/system_server.te

(allow system_server rootfs (file (ioctl read getattr lock map open watch watch_reads)))
(allow system_server rootfs (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 1342 system/sepolicy/private/system_server.te

(allow system_server debugfs_tracing_instances (dir (search)))
;;* lme

;;* lmx 1343 system/sepolicy/private/system_server.te

(allow system_server debugfs_wifi_tracing (dir (search)))
;;* lme

;;* lmx 1344 system/sepolicy/private/system_server.te

(allow system_server debugfs_wifi_tracing (file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 1347 system/sepolicy/private/system_server.te

(allow system_server debugfs_bootreceiver_tracing (dir (search)))
;;* lme

;;* lmx 1348 system/sepolicy/private/system_server.te

(allow system_server debugfs_bootreceiver_tracing (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 1351 system/sepolicy/private/system_server.te

(allow system_server debugfs_tracing (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 1370 system/sepolicy/private/system_server.te

(allow system_server fs_bpf (dir (search)))
(allow system_server fs_bpf_net_shared (dir (search)))
(allow system_server fs_bpf_netd_readonly (dir (search)))
(allow system_server fs_bpf_netd_shared (dir (search)))
(allow system_server fs_bpf_cputimeinstate (dir (search)))
;;* lme

;;* lmx 1377 system/sepolicy/private/system_server.te

(allow system_server fs_bpf (file (read write getattr)))
(allow system_server fs_bpf_net_shared (file (read write getattr)))
(allow system_server fs_bpf_netd_readonly (file (read write getattr)))
(allow system_server fs_bpf_netd_shared (file (read write getattr)))
(allow system_server fs_bpf_cputimeinstate (file (read write getattr)))
;;* lme

;;* lmx 1378 system/sepolicy/private/system_server.te

(allow system_server bpfloader (bpf (prog_run)))
;;* lme

;;* lmx 1379 system/sepolicy/private/system_server.te

(allow system_server self (bpf (map_create)))
;;* lme

;;* lmx 1380 system/sepolicy/private/system_server.te

(allow system_server bpfloader (bpf (map_read map_write)))
(allow system_server netd (bpf (map_read map_write)))
(allow system_server network_stack (bpf (map_read map_write)))
(allow system_server system_server (bpf (map_read map_write)))
;;* lme

;;* lmx 1382 system/sepolicy/private/system_server.te

(allow system_server self (key_socket (create)))
;;* lme

(dontaudit system_server self (key_socket (getopt)))
;;* lmx 1388 system/sepolicy/private/system_server.te

(allow system_server fs_bpf_memevents (dir (search)))
;;* lme

;;* lmx 1389 system/sepolicy/private/system_server.te

(allow system_server fs_bpf_memevents (file (read write)))
;;* lme

;;* lmx 1392 system/sepolicy/private/system_server.te

(allow system_server clatd_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 1392 system/sepolicy/private/system_server.te

(allow system_server clatd (process (transition)))
;;* lme

;;* lmx 1392 system/sepolicy/private/system_server.te

(allow clatd clatd_exec (file (read getattr map execute open entrypoint)))
;;* lme

;;* lmx 1392 system/sepolicy/private/system_server.te

(allow clatd system_server (process (sigchld)))
;;* lme

(dontaudit system_server clatd (process (noatsecure)))
;;* lmx 1392 system/sepolicy/private/system_server.te

(allow system_server clatd (process (siginh rlimitinh)))
;;* lme

(typetransition system_server clatd_exec process clatd)
;;* lmx 1393 system/sepolicy/private/system_server.te

(allow system_server clatd (process (sigkill signal)))
;;* lme

;;* lmx 1399 system/sepolicy/private/system_server.te

(allow system_server user_profile_root_file (dir (getattr search)))
(allow system_server user_profile_data_file (dir (getattr search)))
;;* lme

;;* lmx 1400 system/sepolicy/private/system_server.te

(allow system_server user_profile_data_file (file (read getattr open)))
;;* lme

;;* lmx 1405 system/sepolicy/private/system_server.te

(allow system_server profman_dump_data_file (file (write create getattr setattr lock append map open)))
;;* lme

;;* lmx 1406 system/sepolicy/private/system_server.te

(allow system_server profman_dump_data_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
;;* lme

;;* lmx 1409 system/sepolicy/private/system_server.te

(allow system_server user_profile_data_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
;;* lme

;;* lmx 1409 system/sepolicy/private/system_server.te

(allow system_server user_profile_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 1414 system/sepolicy/private/system_server.te

(allow system_server system_jvmti_agent_prop (file (read getattr map open)))
;;* lme

;;* lmx 1417 system/sepolicy/private/system_server.te

(allow system_server functionfs (dir (search)))
;;* lme

;;* lmx 1418 system/sepolicy/private/system_server.te

(allow system_server functionfs (file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 1419 system/sepolicy/private/system_server.te

(allow system_server usbaccessory_device (file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 1422 system/sepolicy/private/system_server.te

(allow system_server aoad_service (service_manager (find)))
;;* lme

;;* lmx 1425 system/sepolicy/private/system_server.te

(allow system_server aoad (binder (call transfer)))
;;* lme

;;* lmx 1425 system/sepolicy/private/system_server.te

(allow aoad system_server (binder (transfer)))
;;* lme

;;* lmx 1425 system/sepolicy/private/system_server.te

(allow system_server aoad (fd (use)))
;;* lme

;;* lmx 1428 system/sepolicy/private/system_server.te

(allow system_server aoad (unix_stream_socket (read write getattr setattr lock append getopt shutdown)))
;;* lme

;;* lmx 1431 system/sepolicy/private/system_server.te

(allow system_server sysfs_type (dir (search)))
;;* lme

;;* lmx 1432 system/sepolicy/private/system_server.te

(allow system_server sysfs_udc (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 1432 system/sepolicy/private/system_server.te

(allow system_server sysfs_udc (file (ioctl read getattr lock map open watch watch_reads)))
(allow system_server sysfs_udc (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 1435 system/sepolicy/private/system_server.te

(allow system_server time_prop (file (read getattr map open)))
;;* lme

;;* lmx 1439 system/sepolicy/private/system_server.te

(allow system_server system_lmk_prop (file (read getattr map open)))
;;* lme

;;* lmx 1441 system/sepolicy/private/system_server.te

(allow system_server wifi_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 1444 system/sepolicy/private/system_server.te

(allowx system_server binder_device (ioctl chr_file ((range 0x620e 0x620f))))
;;* lme

;;* lmx 1447 system/sepolicy/private/system_server.te

(allow system_server kmsg_debug_device (chr_file (getattr append open)))
;;* lme

;;* lmx 1451 system/sepolicy/private/system_server.te

(allow system_server framework_watchdog_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 1455 system/sepolicy/private/system_server.te

(allow system_server font_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 1456 system/sepolicy/private/system_server.te

(allow system_server font_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 1458 system/sepolicy/private/system_server.te

(allowx system_server font_data_file (ioctl file ((range 0x6685 0x6686))))
;;* lme

;;* lmx 1461 system/sepolicy/private/system_server.te

(allow system_server qemu_hw_prop (file (read getattr map open)))
;;* lme

;;* lmx 1464 system/sepolicy/private/system_server.te

(allow system_server profcollectd_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 1464 system/sepolicy/private/system_server.te

(allow system_server profcollectd_data_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow system_server profcollectd_data_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 1467 system/sepolicy/private/system_server.te

(allow system_server power_debug_prop (file (read getattr map open)))
;;* lme

;;* lmx 1468 system/sepolicy/private/system_server.te

(allow system_server property_socket (sock_file (write)))
;;* lme

;;* lmx 1468 system/sepolicy/private/system_server.te

(allow system_server init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 1468 system/sepolicy/private/system_server.te

(allow system_server power_debug_prop (property_service (set)))
;;* lme

;;* lmx 1468 system/sepolicy/private/system_server.te

(allow system_server power_debug_prop (file (read getattr map open)))
;;* lme

;;* lmx 1477 system/sepolicy/private/system_server.te

(neverallow system_server sdcard_type (dir (read write open)))
(neverallow system_server fuse (dir (read write open)))
;;* lme

;;* lmx 1478 system/sepolicy/private/system_server.te

(neverallow system_server sdcard_type (file (ioctl read write getattr lock append map open watch watch_reads)))
(neverallow system_server fuse (file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 1488 system/sepolicy/private/system_server.te

(neverallow system_server base_typeattr_1097 (file (create unlink link open)))
;;* lme

;;* lmx 1500 system/sepolicy/private/system_server.te

(neverallow system_server base_typeattr_1098 (file (execute_no_trans)))
;;* lme

;;* lmx 1505 system/sepolicy/private/system_server.te

(neverallow system_server base_typeattr_1099 (process (transition)))
;;* lme

;;* lmx 1506 system/sepolicy/private/system_server.te

(neverallow system_server base_typeattr_248 (process (dyntransition)))
;;* lme

;;* lmx 1509 system/sepolicy/private/system_server.te

(neverallow system_server perfetto_traces_data_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent rmdir)))
;;* lme

;;* lmx 1512 system/sepolicy/private/system_server.te

(neverallow base_typeattr_1100 system_ndebug_socket (sock_file (write open)))
;;* lme

;;* lmx 1524 system/sepolicy/private/system_server.te

(neverallow base_typeattr_1101 system_unsolzygote_socket (sock_file (write open)))
;;* lme

;;* lmx 1556 system/sepolicy/private/system_server.te

(neverallow base_typeattr_1102 device_config_activity_manager_native_boot_prop (property_service (set)))
(neverallow base_typeattr_1102 device_config_input_native_boot_prop (property_service (set)))
(neverallow base_typeattr_1102 device_config_netd_native_prop (property_service (set)))
(neverallow base_typeattr_1102 device_config_aconfig_flags_prop (property_service (set)))
(neverallow base_typeattr_1102 device_config_edgetpu_native_prop (property_service (set)))
(neverallow base_typeattr_1102 device_config_media_native_prop (property_service (set)))
(neverallow base_typeattr_1102 device_config_nnapi_native_prop (property_service (set)))
(neverallow base_typeattr_1102 device_config_runtime_native_boot_prop (property_service (set)))
(neverallow base_typeattr_1102 device_config_runtime_native_prop (property_service (set)))
(neverallow base_typeattr_1102 device_config_surface_flinger_native_boot_prop (property_service (set)))
(neverallow base_typeattr_1102 device_config_core_experiments_team_internal_prop (property_service (set)))
(neverallow base_typeattr_1102 device_config_lmkd_native_prop (property_service (set)))
(neverallow base_typeattr_1102 device_config_memory_management_native_boot_prop (property_service (set)))
(neverallow base_typeattr_1102 device_config_mglru_native_prop (property_service (set)))
(neverallow base_typeattr_1102 device_config_mmd_native_prop (property_service (set)))
(neverallow base_typeattr_1102 device_config_remote_key_provisioning_native_prop (property_service (set)))
(neverallow base_typeattr_1102 device_config_storage_native_boot_prop (property_service (set)))
(neverallow base_typeattr_1102 device_config_sys_traced_prop (property_service (set)))
(neverallow base_typeattr_1102 device_config_window_manager_native_boot_prop (property_service (set)))
(neverallow base_typeattr_1102 device_config_connectivity_prop (property_service (set)))
(neverallow base_typeattr_1102 device_config_swcodec_native_prop (property_service (set)))
(neverallow base_typeattr_1102 device_config_tethering_u_or_later_native_prop (property_service (set)))
(neverallow base_typeattr_1102 next_boot_prop (property_service (set)))
;;* lme

;;* lmx 1563 system/sepolicy/private/system_server.te

(neverallow base_typeattr_486 tuner_server_ctl_prop (property_service (set)))
;;* lme

;;* lmx 1569 system/sepolicy/private/system_server.te

(neverallow system_server dex2oat_exec (file (execute execute_no_trans)))
;;* lme

;;* lmx 1574 system/sepolicy/private/system_server.te

(neverallow system_server data_file_type (file (execute execute_no_trans)))
;;* lme

;;* lmx 1581 system/sepolicy/private/system_server.te

(neverallow system_server base_typeattr_1103 (blk_file (write create setattr relabelfrom append unlink link rename)))
;;* lme

;;* lmx 1582 system/sepolicy/private/system_server.te

(neverallow system_server base_typeattr_1104 (blk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 1590 system/sepolicy/private/system_server.te

(neverallow system_server self (process (execmem)))
;;* lme

;;* lmx 1593 system/sepolicy/private/system_server.te

(neverallow system_server ashmem_device (chr_file (execute)))
(neverallow system_server ashmem_libcutils_device (chr_file (execute)))
;;* lme

;;* lmx 1596 system/sepolicy/private/system_server.te

(neverallow system_server system_server_tmpfs (file (execute)))
;;* lme

;;* lmx 1597 system/sepolicy/private/system_server.te

(neverallow system_server system_server (memfd_file (execute)))
;;* lme

;;* lmx 1600 system/sepolicy/private/system_server.te

(allow system_server system_server_startup (fd (use)))
;;* lme

;;* lmx 1601 system/sepolicy/private/system_server.te

(allow system_server system_server_startup_tmpfs (file (read write map)))
;;* lme

;;* lmx 1602 system/sepolicy/private/system_server.te

(allow system_server system_server_startup (memfd_file (read write map)))
;;* lme

;;* lmx 1603 system/sepolicy/private/system_server.te

(allow system_server system_server_startup (unix_dgram_socket (write)))
;;* lme

;;* lmx 1606 system/sepolicy/private/system_server.te

(allow system_server apex_service (service_manager (find)))
;;* lme

;;* lmx 1607 system/sepolicy/private/system_server.te

(allow system_server apexd (binder (call)))
;;* lme

;;* lmx 1610 system/sepolicy/private/system_server.te

(allow system_server apex_mnt_dir (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 1613 system/sepolicy/private/system_server.te

(allow system_server apex_info_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 1616 system/sepolicy/private/system_server.te

(allow system_server apex_dm_device (blk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 1619 system/sepolicy/private/system_server.te

(allow system_server sysfs_dm (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 1622 system/sepolicy/private/system_server.te

(allow system_server tradeinmode (binder (call transfer)))
;;* lme

;;* lmx 1622 system/sepolicy/private/system_server.te

(allow tradeinmode system_server (binder (transfer)))
;;* lme

;;* lmx 1622 system/sepolicy/private/system_server.te

(allow system_server tradeinmode (fd (use)))
;;* lme

;;* lmx 1625 system/sepolicy/private/system_server.te

(allow system_server system_suspend_control_internal_service (service_manager (find)))
;;* lme

;;* lmx 1626 system/sepolicy/private/system_server.te

(allow system_server system_suspend_control_service (service_manager (find)))
;;* lme

;;* lmx 1627 system/sepolicy/private/system_server.te

(allow system_server system_suspend (binder (call transfer)))
;;* lme

;;* lmx 1627 system/sepolicy/private/system_server.te

(allow system_suspend system_server (binder (transfer)))
;;* lme

;;* lmx 1627 system/sepolicy/private/system_server.te

(allow system_server system_suspend (fd (use)))
;;* lme

;;* lmx 1628 system/sepolicy/private/system_server.te

(allow system_suspend system_server (binder (call transfer)))
;;* lme

;;* lmx 1628 system/sepolicy/private/system_server.te

(allow system_server system_suspend (binder (transfer)))
;;* lme

;;* lmx 1628 system/sepolicy/private/system_server.te

(allow system_suspend system_server (fd (use)))
;;* lme

;;* lmx 1631 system/sepolicy/private/system_server.te

(allow system_server sysfs_wake_lock (file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 1631 system/sepolicy/private/system_server.te

(allow system_server self (capability2 (block_suspend)))
(allow system_server self (cap2_userns (block_suspend)))
;;* lme

;;* lmx 1631 system/sepolicy/private/system_server.te

(allow system_server system_suspend_server (binder (call transfer)))
;;* lme

;;* lmx 1631 system/sepolicy/private/system_server.te

(allow system_suspend_server system_server (binder (transfer)))
;;* lme

;;* lmx 1631 system/sepolicy/private/system_server.te

(allow system_server system_suspend_server (fd (use)))
;;* lme

;;* lmx 1631 system/sepolicy/private/system_server.te

(allow system_server system_suspend_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 1631 system/sepolicy/private/system_server.te

(allow system_server hwservicemanager (binder (call transfer)))
;;* lme

;;* lmx 1631 system/sepolicy/private/system_server.te

(allow hwservicemanager system_server (binder (call transfer)))
;;* lme

;;* lmx 1631 system/sepolicy/private/system_server.te

(allow system_server hwservicemanager_prop (file (read getattr map open)))
;;* lme

;;* lmx 1631 system/sepolicy/private/system_server.te

(allow system_server hidl_manager_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 1631 system/sepolicy/private/system_server.te

(allow system_server hal_system_suspend_service (service_manager (find)))
;;* lme

;;* lmx 1631 system/sepolicy/private/system_server.te

(allow system_server servicemanager (binder (call transfer)))
;;* lme

;;* lmx 1631 system/sepolicy/private/system_server.te

(allow servicemanager system_server (binder (call transfer)))
;;* lme

;;* lmx 1637 system/sepolicy/private/system_server.te

(allow system_server apex_data_file (dir (getattr search)))
;;* lme

;;* lmx 1638 system/sepolicy/private/system_server.te

(allow system_server apex_data_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 1643 system/sepolicy/private/system_server.te

(allow system_server vendor_apex_file (dir (getattr search)))
;;* lme

;;* lmx 1644 system/sepolicy/private/system_server.te

(allow system_server vendor_apex_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 1647 system/sepolicy/private/system_server.te

(allow system_server apex_module_data_file (dir (getattr search)))
;;* lme

;;* lmx 1649 system/sepolicy/private/system_server.te

(allow system_server apex_system_server_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 1650 system/sepolicy/private/system_server.te

(allow system_server apex_system_server_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 1651 system/sepolicy/private/system_server.te

(allow system_server apex_tethering_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 1652 system/sepolicy/private/system_server.te

(allow system_server apex_tethering_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 1653 system/sepolicy/private/system_server.te

(allow system_server apex_uwb_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 1654 system/sepolicy/private/system_server.te

(allow system_server apex_uwb_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 1655 system/sepolicy/private/system_server.te

(allow system_server apex_wifi_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 1656 system/sepolicy/private/system_server.te

(allow system_server apex_wifi_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 1662 system/sepolicy/private/system_server.te

(allow system_server apex_appsearch_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
(allow system_server apex_permission_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
(allow system_server apex_scheduling_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 1667 system/sepolicy/private/system_server.te

(allow system_server apex_appsearch_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow system_server apex_permission_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow system_server apex_scheduling_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 1670 system/sepolicy/private/system_server.te

(allow system_server property_socket (sock_file (write)))
;;* lme

;;* lmx 1670 system/sepolicy/private/system_server.te

(allow system_server init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 1670 system/sepolicy/private/system_server.te

(allow system_server appsearch_vm_prop (property_service (set)))
;;* lme

;;* lmx 1670 system/sepolicy/private/system_server.te

(allow system_server appsearch_vm_prop (file (read getattr map open)))
;;* lme

;;* lmx 1674 system/sepolicy/private/system_server.te

(allow system_server metadata_file (dir (search)))
;;* lme

;;* lmx 1675 system/sepolicy/private/system_server.te

(allow system_server password_slot_metadata_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
;;* lme

;;* lmx 1676 system/sepolicy/private/system_server.te

(allow system_server password_slot_metadata_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 1679 system/sepolicy/private/system_server.te

(allow system_server tradeinmode_metadata_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
;;* lme

;;* lmx 1680 system/sepolicy/private/system_server.te

(allow system_server tradeinmode_metadata_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 1682 system/sepolicy/private/system_server.te

(allow system_server userspace_reboot_metadata_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 1683 system/sepolicy/private/system_server.te

(allow system_server userspace_reboot_metadata_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 1686 system/sepolicy/private/system_server.te

(allow system_server staged_install_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
;;* lme

;;* lmx 1687 system/sepolicy/private/system_server.te

(allow system_server staged_install_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 1689 system/sepolicy/private/system_server.te

(allow system_server watchdog_metadata_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
;;* lme

;;* lmx 1690 system/sepolicy/private/system_server.te

(allow system_server watchdog_metadata_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 1693 system/sepolicy/private/system_server.te

(allow system_server aconfigd_socket (sock_file (write)))
;;* lme

;;* lmx 1693 system/sepolicy/private/system_server.te

(allow system_server aconfigd (unix_stream_socket (connectto)))
;;* lme

;;* lmx 1696 system/sepolicy/private/system_server.te

(allow system_server aconfigd_mainline_socket (sock_file (write)))
;;* lme

;;* lmx 1696 system/sepolicy/private/system_server.te

(allow system_server aconfigd_mainline (unix_stream_socket (connectto)))
;;* lme

;;* lmx 1698 system/sepolicy/private/system_server.te

(allow system_server repair_mode_metadata_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
;;* lme

;;* lmx 1699 system/sepolicy/private/system_server.te

(allow system_server repair_mode_metadata_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 1701 system/sepolicy/private/system_server.te

(allow system_server gsi_persistent_data_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
;;* lme

;;* lmx 1702 system/sepolicy/private/system_server.te

(allow system_server gsi_persistent_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 1705 system/sepolicy/private/system_server.te

(allow system_server odrefresh_data_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
;;* lme

;;* lmx 1706 system/sepolicy/private/system_server.te

(allow system_server odrefresh_data_file (file (ioctl read getattr lock map unlink open watch watch_reads)))
;;* lme

;;* lmx 1709 system/sepolicy/private/system_server.te

(allow system_server surfaceflinger_exec (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 1712 system/sepolicy/private/system_server.te

(allow system_server property_socket (sock_file (write)))
;;* lme

;;* lmx 1712 system/sepolicy/private/system_server.te

(allow system_server init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 1712 system/sepolicy/private/system_server.te

(allow system_server userspace_reboot_log_prop (property_service (set)))
;;* lme

;;* lmx 1712 system/sepolicy/private/system_server.te

(allow system_server userspace_reboot_log_prop (file (read getattr map open)))
;;* lme

;;* lmx 1723 system/sepolicy/private/system_server.te

(neverallow base_typeattr_435 system_jvmti_agent_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 1726 system/sepolicy/private/system_server.te

(allow system_server proc_pressure_mem (file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 1728 system/sepolicy/private/system_server.te

(allow system_server proc_pressure_cpu (file (ioctl read getattr lock map open watch watch_reads)))
(allow system_server proc_pressure_io (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 1730 system/sepolicy/private/system_server.te

(allow system_server proc_diskstats (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 1733 system/sepolicy/private/system_server.te

(allow system_server securityfs (dir (search)))
;;* lme

;;* lmx 1734 system/sepolicy/private/system_server.te

(allow system_server uid_allowlist_policy (file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 1738 system/sepolicy/private/system_server.te

(neverallow system_server system_server (capability (sys_resource)))
(neverallow system_server system_server (cap_userns (sys_resource)))
;;* lme

;;* lmx 1741 system/sepolicy/private/system_server.te

(neverallow base_typeattr_486 password_slot_metadata_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 1746 system/sepolicy/private/system_server.te

(neverallow base_typeattr_486 password_slot_metadata_file (file (ioctl read write create setattr lock relabelfrom append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow base_typeattr_486 password_slot_metadata_file (lnk_file (ioctl read write create setattr lock relabelfrom append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow base_typeattr_486 password_slot_metadata_file (sock_file (ioctl read write create setattr lock relabelfrom append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow base_typeattr_486 password_slot_metadata_file (fifo_file (ioctl read write create setattr lock relabelfrom append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 1747 system/sepolicy/private/system_server.te

(neverallow base_typeattr_486 password_slot_metadata_file (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow base_typeattr_486 password_slot_metadata_file (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow base_typeattr_486 password_slot_metadata_file (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow base_typeattr_486 password_slot_metadata_file (fifo_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 1750 system/sepolicy/private/system_server.te

(allow system_server property_socket (sock_file (write)))
;;* lme

;;* lmx 1750 system/sepolicy/private/system_server.te

(allow system_server init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 1750 system/sepolicy/private/system_server.te

(allow system_server binder_cache_system_server_prop (property_service (set)))
;;* lme

;;* lmx 1750 system/sepolicy/private/system_server.te

(allow system_server binder_cache_system_server_prop (file (read getattr map open)))
;;* lme

;;* lmx 1752 system/sepolicy/private/system_server.te

(neverallow base_typeattr_486 binder_cache_system_server_prop (property_service (set)))
;;* lme

;;* lmx 1756 system/sepolicy/private/system_server.te

(allow system_server self (perf_event (open cpu kernel write)))
;;* lme

;;* lmx 1757 system/sepolicy/private/system_server.te

(neverallow system_server self (perf_event (tracepoint read)))
;;* lme

;;* lmx 1760 system/sepolicy/private/system_server.te

(allow system_server shutdown_checkpoints_system_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 1761 system/sepolicy/private/system_server.te

(allow system_server shutdown_checkpoints_system_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 1764 system/sepolicy/private/system_server.te

(neverallow base_typeattr_486 socket_hook_prop (property_service (set)))
;;* lme

;;* lmx 1766 system/sepolicy/private/system_server.te

(neverallow base_typeattr_486 boot_status_prop (property_service (set)))
;;* lme

;;* lmx 1774 system/sepolicy/private/system_server.te

(neverallow base_typeattr_435 wifi_config_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 1783 system/sepolicy/private/system_server.te

(neverallow base_typeattr_1105 sysfs_uhid (file (write create setattr relabelfrom append unlink link rename)))
;;* lme

;;* lmx 1789 system/sepolicy/private/system_server.te

(neverallowx base_typeattr_427 binder_device (ioctl chr_file ((range 0x620e 0x620f))))
;;* lme

;;* lmx 1792 system/sepolicy/private/system_server.te

(neverallow base_typeattr_486 font_data_file (file (write create setattr relabelfrom append unlink link rename)))
;;* lme

;;* lmx 1793 system/sepolicy/private/system_server.te

(neverallow base_typeattr_486 font_data_file (dir (write create setattr relabelfrom link rename add_name remove_name reparent rmdir)))
;;* lme

;;* lmx 1796 system/sepolicy/private/system_server.te

(allow system_server system_font_fallback_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 1799 system/sepolicy/private/system_server.te

(allow system_server property_socket (sock_file (write)))
;;* lme

;;* lmx 1799 system/sepolicy/private/system_server.te

(allow system_server init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 1799 system/sepolicy/private/system_server.te

(allow system_server dalvik_dynamic_config_prop (property_service (set)))
;;* lme

;;* lmx 1799 system/sepolicy/private/system_server.te

(allow system_server dalvik_dynamic_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 1802 system/sepolicy/private/system_server.te

(allow system_server binderfs_logs (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 1803 system/sepolicy/private/system_server.te

(allow system_server binderfs_logs_stats (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 1806 system/sepolicy/private/system_server.te

(allow system_server binderfs_logs_transactions (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 1809 system/sepolicy/private/system_server.te

(allow system_server binderfs_logs_transaction_history (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 1812 system/sepolicy/private/system_server.te

(allow system_server property_socket (sock_file (write)))
;;* lme

;;* lmx 1812 system/sepolicy/private/system_server.te

(allow system_server init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 1812 system/sepolicy/private/system_server.te

(allow system_server game_manager_config_prop (property_service (set)))
;;* lme

;;* lmx 1812 system/sepolicy/private/system_server.te

(allow system_server game_manager_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 1815 system/sepolicy/private/system_server.te

(allow system_server property_socket (sock_file (write)))
;;* lme

;;* lmx 1815 system/sepolicy/private/system_server.te

(allow system_server init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 1815 system/sepolicy/private/system_server.te

(allow system_server hint_manager_config_prop (property_service (set)))
;;* lme

;;* lmx 1815 system/sepolicy/private/system_server.te

(allow system_server hint_manager_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 1822 system/sepolicy/private/system_server.te

(neverallow base_typeattr_1106 hint_manager_config_prop (property_service (set)))
;;* lme

;;* lmx 1825 system/sepolicy/private/system_server.te

(allow system_server threadnetwork_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 1834 system/sepolicy/private/system_server.te

(neverallow base_typeattr_435 threadnetwork_config_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 1838 system/sepolicy/private/system_server.te

(allow system_server pre_reboot_dexopt_file (dir (getattr search)))
;;* lme

;;* lmx 1843 system/sepolicy/private/system_server.te

(allow system_server system_server_tmpfs (file (open)))
;;* lme

;;* lmx 1844 system/sepolicy/private/system_server.te

(allow system_server system_server (memfd_file (open)))
;;* lme

;;* lmx 1848 system/sepolicy/private/system_server.te

(allow system_server postinstall (fifo_file (read)))
;;* lme

;;* lmx 1858 system/sepolicy/private/system_server.te

(allow system_server artd (process (sigkill)))
(allow system_server profman (process (sigkill)))
(allow system_server derive_classpath (process (sigkill)))
(allow system_server dex2oat (process (sigkill)))
(allow system_server odrefresh (process (sigkill)))
;;* lme

;;* lmx 1860 system/sepolicy/private/system_server.te

(allow system_server hid_service (service_manager (find)))
;;* lme

;;* lmx 1861 system/sepolicy/private/system_server.te

(allow system_server hidservice (binder (call transfer)))
;;* lme

;;* lmx 1861 system/sepolicy/private/system_server.te

(allow hidservice system_server (binder (transfer)))
;;* lme

;;* lmx 1861 system/sepolicy/private/system_server.te

(allow system_server hidservice (fd (use)))
;;* lme

;;* lmx 1864 system/sepolicy/private/system_server.te

(allow system_server native_serial_service (service_manager (find)))
;;* lme

;;* lmx 1865 system/sepolicy/private/system_server.te

(allow system_server serialservice (binder (call transfer)))
;;* lme

;;* lmx 1865 system/sepolicy/private/system_server.te

(allow serialservice system_server (binder (transfer)))
;;* lme

;;* lmx 1865 system/sepolicy/private/system_server.te

(allow system_server serialservice (fd (use)))
;;* lme

;;* lmx 1867 system/sepolicy/private/system_server.te

(allow system_server usb_auth_service (service_manager (find)))
;;* lme

;;* lmx 1868 system/sepolicy/private/system_server.te

(allow system_server usbauthservice (binder (call transfer)))
;;* lme

;;* lmx 1868 system/sepolicy/private/system_server.te

(allow usbauthservice system_server (binder (transfer)))
;;* lme

;;* lmx 1868 system/sepolicy/private/system_server.te

(allow system_server usbauthservice (fd (use)))
;;* lme

;;* lmx 1871 system/sepolicy/private/system_server.te

(allow system_server aiseal_host_service (service_manager (find)))
;;* lme

;;* lmx 1871 system/sepolicy/private/system_server.te

(allow system_server aisealhostservice (binder (call transfer)))
;;* lme

;;* lmx 1871 system/sepolicy/private/system_server.te

(allow aisealhostservice system_server (binder (transfer)))
;;* lme

;;* lmx 1871 system/sepolicy/private/system_server.te

(allow system_server aisealhostservice (fd (use)))
;;* lme

;;* lmx 1871 system/sepolicy/private/system_server.te

(allow system_server aisealhostservice (vsock_socket (read write getattr getopt)))
;;* lme

;;* lmx 1871 system/sepolicy/private/system_server.te

(allow system_server aiseal_prop (file (read getattr map open)))
;;* lme

;;* lmx 1871 system/sepolicy/private/system_server.te

(allow system_server aiseal_internal_service (service_manager (find)))
;;* lme

;;* lmx 1879 system/sepolicy/private/system_server.te

(allow system_server hal_npu_scheduling (memfd_file (read write getattr map)))
;;* lme

;;* lmx 1879 system/sepolicy/private/system_server.te

(allow hal_npu_scheduling system_server (memfd_file (read write getattr map)))
;;* lme

;;* lmx 1882 system/sepolicy/private/system_server.te

(allow system_server serial_device (chr_file (read write)))
(allow system_server usb_serial_device (chr_file (read write)))
;;* lme

;;* lmx 1885 system/sepolicy/private/system_server.te

(neverallow base_typeattr_486 crashrecovery_prop (property_service (set)))
;;* lme

;;* lmx 1886 system/sepolicy/private/system_server.te

(neverallow base_typeattr_514 crashrecovery_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 1889 system/sepolicy/private/system_server.te

(neverallow base_typeattr_486 tradeinmode_metadata_file (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 1897 system/sepolicy/private/system_server.te

(neverallow base_typeattr_1106 power_debug_prop (property_service (set)))
;;* lme

;;* lmx 1903 system/sepolicy/private/system_server.te

(neverallow system_server self (capability (sys_module)))
(neverallow system_server self (cap_userns (sys_module)))
;;* lme

;;* lmx 1911 system/sepolicy/private/system_server.te

(neverallow base_typeattr_486 appsearch_data_file (file (read write open)))
;;* lme

;;* lmx 1913 system/sepolicy/private/system_server.te

(neverallow system_server base_typeattr_248 (process (ptrace)))
;;* lme

;;* lmx 1916 system/sepolicy/private/system_server.te

(allow system_server usb_userspace_aoa_enabled_prop (file (read getattr map open)))
;;* lme

;;* lmx 1919 system/sepolicy/private/system_server.te

(allow system_server remote_prov_prop (file (read getattr map open)))
;;* lme

;;* lmx 1922 system/sepolicy/private/system_server.te

(allow system_server zygote_zygote_next_server_status_prop (file (read getattr map open)))
;;* lme

;;* lmx 1924 system/sepolicy/private/system_server.te

(allow system_server property_socket (sock_file (write)))
;;* lme

;;* lmx 1924 system/sepolicy/private/system_server.te

(allow system_server init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 1924 system/sepolicy/private/system_server.te

(allow system_server zygote_zygote_next_boot_config_prop (property_service (set)))
;;* lme

;;* lmx 1924 system/sepolicy/private/system_server.te

(allow system_server zygote_zygote_next_boot_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 1927 system/sepolicy/private/system_server.te

(allow system_server proc_swaps (file (read getattr open)))
;;* lme

;;* lmx 1930 system/sepolicy/private/system_server.te

(allow system_server property_socket (sock_file (write)))
;;* lme

;;* lmx 1930 system/sepolicy/private/system_server.te

(allow system_server init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 1930 system/sepolicy/private/system_server.te

(allow system_server thermal_profile_prop (property_service (set)))
;;* lme

;;* lmx 1930 system/sepolicy/private/system_server.te

(allow system_server thermal_profile_prop (file (read getattr map open)))
;;* lme

;;* lmx 1934 system/sepolicy/private/system_server.te

(neverallowx system_server wrapfd_device (ioctl chr_file ((range 0x0 0xbbff) (range 0xbd00 0xffff))))
;;* lme

;;* lmx 1934 system/sepolicy/private/system_server.te

(neverallowx system_server wrapfd_device (ioctl chr_file ((range 0xbc01 0xbcff))))
;;* lme

;;* lmx 1935 system/sepolicy/private/system_server.te

(neverallowx system_server system_server_wrapfd (ioctl anon_inode ((range 0x0 0x61ff) (range 0x6300 0xbbff) (range 0xbd00 0xffff))))
;;* lme

;;* lmx 1935 system/sepolicy/private/system_server.te

(neverallowx system_server system_server_wrapfd (ioctl anon_inode ((range 0x6204 0x62ff))))
;;* lme

;;* lmx 1935 system/sepolicy/private/system_server.te

(neverallowx system_server system_server_wrapfd (ioctl anon_inode (0xbc00 (range 0xbc09 0xbcff))))
;;* lme

(typetransition system_server_startup tmpfs file system_server_startup_tmpfs)
;;* lmx 4 system/sepolicy/private/system_server_startup.te

(allow system_server_startup system_server_startup_tmpfs (file (read write getattr map)))
;;* lme

;;* lmx 7 system/sepolicy/private/system_server_startup.te

(allow system_server_startup self (process (execmem)))
;;* lme

;;* lmx 8 system/sepolicy/private/system_server_startup.te

(allow system_server_startup system_server_startup_tmpfs (file (read write map execute open)))
;;* lme

;;* lmx 9 system/sepolicy/private/system_server_startup.te

(allow system_server_startup system_server_startup (memfd_file (execute)))
;;* lme

;;* lmx 12 system/sepolicy/private/system_server_startup.te

(allow system_server_startup apex_art_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 13 system/sepolicy/private/system_server_startup.te

(allow system_server_startup apex_art_data_file (file (ioctl read getattr lock map execute open watch watch_reads)))
;;* lme

;;* lmx 17 system/sepolicy/private/system_server_startup.te

(allow system_server_startup self (process (setcurrent)))
;;* lme

;;* lmx 18 system/sepolicy/private/system_server_startup.te

(allow system_server_startup system_server (process (dyntransition)))
;;* lme

;;* lmx 21 system/sepolicy/private/system_server_startup.te

(allow system_server zygote (fd (use)))
;;* lme

;;* lmx 22 system/sepolicy/private/system_server_startup.te

(allow system_server_startup zygote (process (sigchld)))
;;* lme

;;* lmx 25 system/sepolicy/private/system_server_startup.te

(allow system_server_startup device_config_runtime_native_boot_prop (file (read getattr map open)))
;;* lme

;;* lmx 26 system/sepolicy/private/system_server_startup.te

(allow system_server_startup device_config_runtime_native_prop (file (read getattr map open)))
;;* lme

;;* lmx 6 system/sepolicy/private/system_suspend.te

(allow init system_suspend_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 6 system/sepolicy/private/system_suspend.te

(allow init system_suspend (process (transition)))
;;* lme

;;* lmx 6 system/sepolicy/private/system_suspend.te

(allow system_suspend system_suspend_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init system_suspend (process (noatsecure)))
;;* lmx 6 system/sepolicy/private/system_suspend.te

(allow init system_suspend (process (siginh rlimitinh)))
;;* lme

(typetransition init system_suspend_exec process system_suspend)
;;* lmx 9 system/sepolicy/private/system_suspend.te

(allow system_suspend servicemanager (binder (call transfer)))
;;* lme

;;* lmx 9 system/sepolicy/private/system_suspend.te

(allow servicemanager system_suspend (binder (call transfer)))
;;* lme

;;* lmx 10 system/sepolicy/private/system_suspend.te

(allow system_suspend system_suspend_control_service (service_manager (add find)))
;;* lme

;;* lmx 10 system/sepolicy/private/system_suspend.te

(neverallow base_typeattr_1107 system_suspend_control_service (service_manager (add)))
;;* lme

;;* lmx 10 system/sepolicy/private/system_suspend.te

(allow system_suspend su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 12 system/sepolicy/private/system_suspend.te

(allow system_suspend hal_system_suspend_service (service_manager (add find)))
;;* lme

;;* lmx 12 system/sepolicy/private/system_suspend.te

(neverallow base_typeattr_1107 hal_system_suspend_service (service_manager (add)))
;;* lme

;;* lmx 12 system/sepolicy/private/system_suspend.te

(allow system_suspend su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 15 system/sepolicy/private/system_suspend.te

(allow system_suspend sysfs_power (file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 18 system/sepolicy/private/system_suspend.te

(allow system_suspend sysfs_suspend_stats (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 18 system/sepolicy/private/system_suspend.te

(allow system_suspend sysfs_suspend_stats (file (ioctl read getattr lock map open watch watch_reads)))
(allow system_suspend sysfs_suspend_stats (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 19 system/sepolicy/private/system_suspend.te

(allow system_suspend sysfs_wakeup (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 19 system/sepolicy/private/system_suspend.te

(allow system_suspend sysfs_wakeup (file (ioctl read getattr lock map open watch watch_reads)))
(allow system_suspend sysfs_wakeup (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 20 system/sepolicy/private/system_suspend.te

(allow system_suspend sysfs_wakeup_reasons (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 20 system/sepolicy/private/system_suspend.te

(allow system_suspend sysfs_wakeup_reasons (file (ioctl read getattr lock map open watch watch_reads)))
(allow system_suspend sysfs_wakeup_reasons (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 22 system/sepolicy/private/system_suspend.te

(allow system_suspend sysfs_type (dir (search)))
;;* lme

;;* lmx 25 system/sepolicy/private/system_suspend.te

(allow system_suspend suspend_prop (file (read getattr map open)))
;;* lme

;;* lmx 28 system/sepolicy/private/system_suspend.te

(allow system_suspend suspend_debug_prop (file (read getattr map open)))
;;* lme

;;* lmx 33 system/sepolicy/private/system_suspend.te

(allow system_suspend bluetooth (binder (call)))
;;* lme

;;* lmx 36 system/sepolicy/private/system_suspend.te

(allow system_suspend dumpstate (fd (use)))
;;* lme

;;* lmx 37 system/sepolicy/private/system_suspend.te

(allow system_suspend dumpstate (fifo_file (write)))
;;* lme

;;* lmx 42 system/sepolicy/private/system_suspend.te

(allow init sysfs_wake_lock (file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 43 system/sepolicy/private/system_suspend.te

(allow init self (capability2 (block_suspend)))
(allow init self (cap2_userns (block_suspend)))
;;* lme

;;* lmx 44 system/sepolicy/private/system_suspend.te

(allow system_suspend sysfs_wake_lock (file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 45 system/sepolicy/private/system_suspend.te

(allow system_suspend self (capability2 (block_suspend)))
(allow system_suspend self (cap2_userns (block_suspend)))
;;* lme

;;* lmx 48 system/sepolicy/private/system_suspend.te

(allow init sysfs_sync_on_suspend (file (write lock append map open)))
;;* lme

;;* lmx 51 system/sepolicy/private/system_suspend.te

(allow system_suspend fs_bpf_kernelwakelockduration (dir (search)))
;;* lme

;;* lmx 52 system/sepolicy/private/system_suspend.te

(allow system_suspend fs_bpf_kernelwakelockduration (file (read getattr)))
;;* lme

;;* lmx 53 system/sepolicy/private/system_suspend.te

(allow system_suspend bpfloader (bpf (map_read map_write prog_run)))
;;* lme

;;* lmx 54 system/sepolicy/private/system_suspend.te

(allow system_suspend self (bpf (map_create)))
;;* lme

;;* lmx 57 system/sepolicy/private/system_suspend.te

(allow system_suspend sysfs_suspend_params (file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 67 system/sepolicy/private/system_suspend.te

(neverallow base_typeattr_1108 system_suspend_control_service (service_manager (find)))
;;* lme

;;* lmx 2 system/sepolicy/private/system_suspend_internal_server.te

(allow system_suspend_internal_server system_suspend_control_internal_service (service_manager (add find)))
;;* lme

;;* lmx 2 system/sepolicy/private/system_suspend_internal_server.te

(neverallow base_typeattr_1109 system_suspend_control_internal_service (service_manager (add)))
;;* lme

;;* lmx 2 system/sepolicy/private/system_suspend_internal_server.te

(allow system_suspend_internal_server su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 12 system/sepolicy/private/system_suspend_internal_server.te

(neverallow base_typeattr_1110 system_suspend_control_internal_service (service_manager (find)))
;;* lme

;;* lmx 2 system/sepolicy/private/system_suspend_server.te

(allow system_suspend_server hwservicemanager (binder (call transfer)))
;;* lme

;;* lmx 2 system/sepolicy/private/system_suspend_server.te

(allow hwservicemanager system_suspend_server (binder (call transfer)))
;;* lme

;;* lmx 3 system/sepolicy/private/system_suspend_server.te

(allow system_suspend_server hwservicemanager_prop (file (read getattr map open)))
;;* lme

;;* lmx 6 system/sepolicy/private/system_suspend_server.te

(allow system_suspend_server system_suspend_hwservice (hwservice_manager (add find)))
;;* lme

;;* lmx 6 system/sepolicy/private/system_suspend_server.te

(allow system_suspend_server hidl_base_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 6 system/sepolicy/private/system_suspend_server.te

(neverallow base_typeattr_1111 system_suspend_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 1 system/sepolicy/private/tee.te

(allow tee fingerprint_vendor_data_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
;;* lme

;;* lmx 2 system/sepolicy/private/tee.te

(allow tee fingerprint_vendor_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 3 system/sepolicy/private/tombstoned.te

(allow init tombstoned_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 3 system/sepolicy/private/tombstoned.te

(allow init tombstoned (process (transition)))
;;* lme

;;* lmx 3 system/sepolicy/private/tombstoned.te

(allow tombstoned tombstoned_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init tombstoned (process (noatsecure)))
;;* lmx 3 system/sepolicy/private/tombstoned.te

(allow init tombstoned (process (siginh rlimitinh)))
;;* lme

(typetransition init tombstoned_exec process tombstoned)
;;* lmx 5 system/sepolicy/private/tombstoned.te

(allow tombstoned tombstone_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 8 system/sepolicy/private/tombstoned.te

(allow tombstoned domain (fd (use)))
;;* lme

;;* lmx 9 system/sepolicy/private/tombstoned.te

(allow tombstoned domain (fifo_file (write)))
;;* lme

;;* lmx 11 system/sepolicy/private/tombstoned.te

(allow tombstoned domain (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 12 system/sepolicy/private/tombstoned.te

(allow tombstoned domain (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 13 system/sepolicy/private/tombstoned.te

(allow tombstoned tombstone_data_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
;;* lme

;;* lmx 14 system/sepolicy/private/tombstoned.te

(allow tombstoned tombstone_data_file (file (ioctl read write create getattr setattr lock append map unlink link rename open watch watch_reads)))
;;* lme

;;* lmx 18 system/sepolicy/private/tombstoned.te

(allow tombstoned anr_data_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
;;* lme

;;* lmx 19 system/sepolicy/private/tombstoned.te

(allow tombstoned anr_data_file (file (create getattr append unlink link open)))
;;* lme

;;* lmx 31 system/sepolicy/private/tombstoned.te

(neverallow base_typeattr_1112 tombstone_config_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 3 system/sepolicy/private/toolbox.te

(allow init toolbox_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 3 system/sepolicy/private/toolbox.te

(allow init toolbox (process (transition)))
;;* lme

;;* lmx 3 system/sepolicy/private/toolbox.te

(allow toolbox toolbox_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init toolbox (process (noatsecure)))
;;* lmx 3 system/sepolicy/private/toolbox.te

(allow init toolbox (process (siginh rlimitinh)))
;;* lme

(typetransition init toolbox_exec process toolbox)
;;* lmx 6 system/sepolicy/private/toolbox.te

(allow toolbox virtualizationservice_data_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search rmdir)))
;;* lme

;;* lmx 7 system/sepolicy/private/toolbox.te

(allow toolbox virtualizationservice_data_file (file (getattr unlink)))
;;* lme

(dontaudit toolbox virtualizationservice_data_file (dir (setattr)))
;;* lmx 16 system/sepolicy/private/toolbox.te

(allow toolbox tmpfs (chr_file (ioctl read write)))
;;* lme

;;* lmx 19 system/sepolicy/private/toolbox.te

(allow toolbox devpts (chr_file (ioctl read write getattr)))
;;* lme

;;* lmx 25 system/sepolicy/private/toolbox.te

(allow toolbox block_device (dir (search)))
;;* lme

;;* lmx 26 system/sepolicy/private/toolbox.te

(allow toolbox swap_block_device (blk_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 29 system/sepolicy/private/toolbox.te

(allow toolbox system_data_root_file (dir (write remove_name)))
;;* lme

;;* lmx 30 system/sepolicy/private/toolbox.te

(allow toolbox system_data_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search rmdir)))
;;* lme

;;* lmx 31 system/sepolicy/private/toolbox.te

(allow toolbox system_data_file (file (getattr unlink)))
;;* lme

;;* lmx 35 system/sepolicy/private/toolbox.te

(allow toolbox zram_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 36 system/sepolicy/private/toolbox.te

(allow toolbox zram_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 39 system/sepolicy/private/toolbox.te

(allow toolbox per_boot_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 40 system/sepolicy/private/toolbox.te

(allow toolbox per_boot_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 43 system/sepolicy/private/toolbox.te

(allow toolbox media_userdir_file (dir (ioctl read getattr setattr lock open watch watch_reads search)))
;;* lme

;;* lmx 44 system/sepolicy/private/toolbox.te

(allowx toolbox media_userdir_file (ioctl dir ((range 0x6601 0x6602))))
;;* lme

;;* lmx 51 system/sepolicy/private/toolbox.te

(neverallow base_typeattr_247 toolbox (process (transition)))
;;* lme

;;* lmx 52 system/sepolicy/private/toolbox.te

(neverallow base_typeattr_248 toolbox (process (dyntransition)))
;;* lme

;;* lmx 53 system/sepolicy/private/toolbox.te

(neverallow toolbox base_typeattr_1113 (file (entrypoint)))
;;* lme

;;* lmx 6 system/sepolicy/private/trace_redactor.te

(allow trace_redactor system_server (fd (use)))
;;* lme

;;* lmx 7 system/sepolicy/private/trace_redactor.te

(allow trace_redactor system_server (fifo_file (ioctl read write getattr)))
;;* lme

;;* lmx 10 system/sepolicy/private/trace_redactor.te

(allow trace_redactor perfetto_traces_profiling_data_file (dir (search)))
;;* lme

;;* lmx 11 system/sepolicy/private/trace_redactor.te

(allow trace_redactor perfetto_traces_data_file (dir (search)))
;;* lme

;;* lmx 12 system/sepolicy/private/trace_redactor.te

(allow trace_redactor perfetto_traces_data_file (file (ioctl read getattr)))
;;* lme

;;* lmx 13 system/sepolicy/private/trace_redactor.te

(allow trace_redactor perfetto_traces_profiling_data_file (file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 5 system/sepolicy/private/traced.te

(allow init traced_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 5 system/sepolicy/private/traced.te

(allow init traced (process (transition)))
;;* lme

;;* lmx 5 system/sepolicy/private/traced.te

(allow traced traced_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init traced (process (noatsecure)))
;;* lmx 5 system/sepolicy/private/traced.te

(allow init traced (process (siginh rlimitinh)))
;;* lme

(typetransition init traced_exec process traced)
(typetransition traced tmpfs file traced_tmpfs)
;;* lmx 6 system/sepolicy/private/traced.te

(allow traced traced_tmpfs (file (read write getattr map)))
;;* lme

;;* lmx 15 system/sepolicy/private/traced.te

(allow traced self (capability (sys_nice)))
(allow traced self (cap_userns (sys_nice)))
;;* lme

;;* lmx 20 system/sepolicy/private/traced.te

(allow traced perfetto (fd (use)))
;;* lme

;;* lmx 21 system/sepolicy/private/traced.te

(allow traced shell (fd (use)))
;;* lme

;;* lmx 22 system/sepolicy/private/traced.te

(allow traced shell (fifo_file (read write)))
;;* lme

;;* lmx 23 system/sepolicy/private/traced.te

(allow traced system_server (fifo_file (read write)))
;;* lme

;;* lmx 24 system/sepolicy/private/traced.te

(allow traced adbd (fd (use)))
;;* lme

;;* lmx 27 system/sepolicy/private/traced.te

(allow traced perfetto_traces_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 28 system/sepolicy/private/traced.te

(allow traced perfetto_traces_data_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
;;* lme

;;* lmx 31 system/sepolicy/private/traced.te

(allow traced perfetto_traces_bugreport_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 32 system/sepolicy/private/traced.te

(allow traced perfetto_traces_bugreport_data_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
;;* lme

;;* lmx 35 system/sepolicy/private/traced.te

(allow traced perfetto_traces_profiling_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 36 system/sepolicy/private/traced.te

(allow traced perfetto_traces_profiling_data_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
;;* lme

;;* lmx 40 system/sepolicy/private/traced.te

(allow traced traceur_app (fd (use)))
;;* lme

;;* lmx 41 system/sepolicy/private/traced.te

(allow traced platform_app_all (fd (use)))
;;* lme

;;* lmx 42 system/sepolicy/private/traced.te

(allow traced trace_data_file (file (read write)))
;;* lme

;;* lmx 45 system/sepolicy/private/traced.te

(allow traced tracingproxy_service (service_manager (find)))
;;* lme

;;* lmx 46 system/sepolicy/private/traced.te

(allow traced servicemanager (binder (call transfer)))
;;* lme

;;* lmx 46 system/sepolicy/private/traced.te

(allow servicemanager traced (binder (call transfer)))
;;* lme

;;* lmx 47 system/sepolicy/private/traced.te

(allow traced system_server (binder (call transfer)))
;;* lme

;;* lmx 47 system/sepolicy/private/traced.te

(allow system_server traced (binder (transfer)))
;;* lme

;;* lmx 47 system/sepolicy/private/traced.te

(allow traced system_server (fd (use)))
;;* lme

;;* lmx 64 system/sepolicy/private/traced.te

(allow traced appdomain_tmpfs (file (read write getattr map)))
(allow traced surfaceflinger_tmpfs (file (read write getattr map)))
(allow traced system_server_tmpfs (file (read write getattr map)))
(allow traced heapprofd_tmpfs (file (read write getattr map)))
(allow traced traced_probes_tmpfs (file (read write getattr map)))
;;* lme

;;* lmx 71 system/sepolicy/private/traced.te

(allow traced appdomain (memfd_file (read write getattr map)))
(allow traced heapprofd (memfd_file (read write getattr map)))
(allow traced surfaceflinger (memfd_file (read write getattr map)))
(allow traced system_server (memfd_file (read write getattr map)))
(allow traced traced_probes (memfd_file (read write getattr map)))
;;* lme

;;* lmx 74 system/sepolicy/private/traced.te

(allow traced cgroup_v2 (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 77 system/sepolicy/private/traced.te

(allow traced traced_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 79 system/sepolicy/private/traced.te

(allow traced traced_relay_relay_port_prop (file (read getattr map open)))
;;* lme

;;* lmx 85 system/sepolicy/private/traced.te

(allow traced property_socket (sock_file (write)))
;;* lme

;;* lmx 85 system/sepolicy/private/traced.te

(allow traced init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 85 system/sepolicy/private/traced.te

(allow traced debug_prop (property_service (set)))
;;* lme

;;* lmx 85 system/sepolicy/private/traced.te

(allow traced debug_prop (file (read getattr map open)))
;;* lme

;;* lmx 88 system/sepolicy/private/traced.te

(allow traced property_socket (sock_file (write)))
;;* lme

;;* lmx 88 system/sepolicy/private/traced.te

(allow traced init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 88 system/sepolicy/private/traced.te

(allow traced system_trace_prop (property_service (set)))
;;* lme

;;* lmx 88 system/sepolicy/private/traced.te

(allow traced system_trace_prop (file (read getattr map open)))
;;* lme

;;* lmx 90 system/sepolicy/private/traced.te

(allow traced property_socket (sock_file (write)))
;;* lme

;;* lmx 90 system/sepolicy/private/traced.te

(allow traced init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 90 system/sepolicy/private/traced.te

(allow traced traced_lazy_prop (property_service (set)))
;;* lme

;;* lmx 90 system/sepolicy/private/traced.te

(allow traced traced_lazy_prop (file (read getattr map open)))
;;* lme

;;* lmx 95 system/sepolicy/private/traced.te

(allow traced property_socket (sock_file (write)))
;;* lme

;;* lmx 95 system/sepolicy/private/traced.te

(allow traced init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 95 system/sepolicy/private/traced.te

(allow traced traced_oome_heap_session_count_prop (property_service (set)))
;;* lme

;;* lmx 95 system/sepolicy/private/traced.te

(allow traced traced_oome_heap_session_count_prop (file (read getattr map open)))
;;* lme

;;* lmx 98 system/sepolicy/private/traced.te

(allow traced statsdw_socket (sock_file (write)))
;;* lme

;;* lmx 98 system/sepolicy/private/traced.te

(allow traced statsd (unix_dgram_socket (sendto)))
;;* lme

;;* lmx 106 system/sepolicy/private/traced.te

(allow traced self (vsock_socket (read write create bind listen accept getopt setopt shutdown)))
;;* lme

;;* lmx 115 system/sepolicy/private/traced.te

(neverallow traced self (process (execmem)))
;;* lme

;;* lmx 118 system/sepolicy/private/traced.te

(neverallow traced dev_type (blk_file (read write)))
;;* lme

;;* lmx 121 system/sepolicy/private/traced.te

(neverallow traced domain (process (ptrace)))
;;* lme

;;* lmx 124 system/sepolicy/private/traced.te

(neverallow base_typeattr_247 traced (process (transition)))
;;* lme

;;* lmx 125 system/sepolicy/private/traced.te

(neverallow base_typeattr_248 traced (process (dyntransition)))
;;* lme

;;* lmx 137 system/sepolicy/private/traced.te

(neverallow base_typeattr_1114 tracingproxy_service (service_manager (find)))
;;* lme

;;* lmx 8 system/sepolicy/private/traced_perf.te

(allow init traced_perf_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 8 system/sepolicy/private/traced_perf.te

(allow init traced_perf (process (transition)))
;;* lme

;;* lmx 8 system/sepolicy/private/traced_perf.te

(allow traced_perf traced_perf_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init traced_perf (process (noatsecure)))
;;* lmx 8 system/sepolicy/private/traced_perf.te

(allow init traced_perf (process (siginh rlimitinh)))
;;* lme

(typetransition init traced_perf_exec process traced_perf)
;;* lmx 9 system/sepolicy/private/traced_perf.te

(allow traced_perf traced (fd (use)))
;;* lme

;;* lmx 9 system/sepolicy/private/traced_perf.te

(allow traced_perf traced_tmpfs (file (read write getattr map)))
;;* lme

;;* lmx 9 system/sepolicy/private/traced_perf.te

(allow traced_perf traced (memfd_file (read write getattr map)))
;;* lme

;;* lmx 9 system/sepolicy/private/traced_perf.te

(allow traced_perf traced_producer_socket (sock_file (write)))
;;* lme

;;* lmx 9 system/sepolicy/private/traced_perf.te

(allow traced_perf traced (unix_stream_socket (connectto)))
;;* lme

;;* lmx 9 system/sepolicy/private/traced_perf.te

(allow traced traced_perf (fd (use)))
;;* lme

;;* lmx 15 system/sepolicy/private/traced_perf.te

(allow traced_perf self (perf_event (open cpu kernel tracepoint read write)))
;;* lme

;;* lmx 23 system/sepolicy/private/traced_perf.te

(allow traced_perf self (capability (dac_read_search kill)))
;;* lme

;;* lmx 26 system/sepolicy/private/traced_perf.te

(allow traced_perf packages_list_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 29 system/sepolicy/private/traced_perf.te

(allow traced_perf nativetest_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 29 system/sepolicy/private/traced_perf.te

(allow traced_perf nativetest_data_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow traced_perf nativetest_data_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 30 system/sepolicy/private/traced_perf.te

(allow traced_perf system_file_type (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 30 system/sepolicy/private/traced_perf.te

(allow traced_perf system_file_type (file (ioctl read getattr lock map open watch watch_reads)))
(allow traced_perf system_file_type (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 31 system/sepolicy/private/traced_perf.te

(allow traced_perf apk_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 31 system/sepolicy/private/traced_perf.te

(allow traced_perf apk_data_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow traced_perf apk_data_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 32 system/sepolicy/private/traced_perf.te

(allow traced_perf dalvikcache_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 32 system/sepolicy/private/traced_perf.te

(allow traced_perf dalvikcache_data_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow traced_perf dalvikcache_data_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 33 system/sepolicy/private/traced_perf.te

(allow traced_perf vendor_file_type (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 33 system/sepolicy/private/traced_perf.te

(allow traced_perf vendor_file_type (file (ioctl read getattr lock map open watch watch_reads)))
(allow traced_perf vendor_file_type (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 35 system/sepolicy/private/traced_perf.te

(allow traced_perf apex_art_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 35 system/sepolicy/private/traced_perf.te

(allow traced_perf apex_art_data_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow traced_perf apex_art_data_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 36 system/sepolicy/private/traced_perf.te

(allow traced_perf apex_module_data_file (dir (getattr search)))
;;* lme

;;* lmx 43 system/sepolicy/private/traced_perf.te

(allow traced_perf property_socket (sock_file (write)))
;;* lme

;;* lmx 43 system/sepolicy/private/traced_perf.te

(allow traced_perf init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 43 system/sepolicy/private/traced_perf.te

(allow traced_perf lower_kptr_restrict_prop (property_service (set)))
;;* lme

;;* lmx 43 system/sepolicy/private/traced_perf.te

(allow traced_perf lower_kptr_restrict_prop (file (read getattr map open)))
;;* lme

;;* lmx 44 system/sepolicy/private/traced_perf.te

(allow traced_perf proc_kallsyms (file (read lock open)))
;;* lme

;;* lmx 47 system/sepolicy/private/traced_perf.te

(allow traced_perf debugfs_tracing (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 48 system/sepolicy/private/traced_perf.te

(allow traced_perf debugfs_tracing (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 49 system/sepolicy/private/traced_perf.te

(allow traced_perf debugfs_tracing_debug (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 49 system/sepolicy/private/traced_perf.te

(allow traced_perf debugfs_tracing_debug (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

(dontaudit traced_perf domain (dir (getattr open search)))
(dontaudit traced_perf domain (process (signal)))
;;* lmx 64 system/sepolicy/private/traced_perf.te

(neverallow traced_perf app_data_file_type (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
;;* lme

;;* lmx 68 system/sepolicy/private/traced_perf.te

(neverallow traced_perf hal_configstore_server (file (read)))
(neverallow traced_perf apexd (file (read)))
(neverallow traced_perf app_zygote (file (read)))
(neverallow traced_perf bpfloader (file (read)))
(neverallow traced_perf init (file (read)))
(neverallow traced_perf kernel (file (read)))
(neverallow traced_perf keystore (file (read)))
(neverallow traced_perf llkd (file (read)))
(neverallow traced_perf logd (file (read)))
(neverallow traced_perf ueventd (file (read)))
(neverallow traced_perf vendor_init (file (read)))
(neverallow traced_perf vold (file (read)))
(neverallow traced_perf webview_zygote (file (read)))
(neverallow traced_perf zygote (file (read)))
;;* lme

;;* lmx 68 system/sepolicy/private/traced_perf.te

(neverallow traced_perf hal_configstore_server (process (signal)))
(neverallow traced_perf apexd (process (signal)))
(neverallow traced_perf app_zygote (process (signal)))
(neverallow traced_perf bpfloader (process (signal)))
(neverallow traced_perf init (process (signal)))
(neverallow traced_perf kernel (process (signal)))
(neverallow traced_perf keystore (process (signal)))
(neverallow traced_perf llkd (process (signal)))
(neverallow traced_perf logd (process (signal)))
(neverallow traced_perf ueventd (process (signal)))
(neverallow traced_perf vendor_init (process (signal)))
(neverallow traced_perf vold (process (signal)))
(neverallow traced_perf webview_zygote (process (signal)))
(neverallow traced_perf zygote (process (signal)))
;;* lme

;;* lmx 8 system/sepolicy/private/traced_probes.te

(allow init traced_probes_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 8 system/sepolicy/private/traced_probes.te

(allow init traced_probes (process (transition)))
;;* lme

;;* lmx 8 system/sepolicy/private/traced_probes.te

(allow traced_probes traced_probes_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init traced_probes (process (noatsecure)))
;;* lmx 8 system/sepolicy/private/traced_probes.te

(allow init traced_probes (process (siginh rlimitinh)))
;;* lme

(typetransition init traced_probes_exec process traced_probes)
(typetransition traced_probes tmpfs file traced_probes_tmpfs)
;;* lmx 9 system/sepolicy/private/traced_probes.te

(allow traced_probes traced_probes_tmpfs (file (read write getattr map)))
;;* lme

;;* lmx 13 system/sepolicy/private/traced_probes.te

(allow traced_probes traced (fd (use)))
;;* lme

;;* lmx 13 system/sepolicy/private/traced_probes.te

(allow traced_probes traced_tmpfs (file (read write getattr map)))
;;* lme

;;* lmx 13 system/sepolicy/private/traced_probes.te

(allow traced_probes traced (memfd_file (read write getattr map)))
;;* lme

;;* lmx 13 system/sepolicy/private/traced_probes.te

(allow traced_probes traced_producer_socket (sock_file (write)))
;;* lme

;;* lmx 13 system/sepolicy/private/traced_probes.te

(allow traced_probes traced (unix_stream_socket (connectto)))
;;* lme

;;* lmx 13 system/sepolicy/private/traced_probes.te

(allow traced traced_probes (fd (use)))
;;* lme

;;* lmx 16 system/sepolicy/private/traced_probes.te

(allow traced_probes debugfs_tracing (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 17 system/sepolicy/private/traced_probes.te

(allow traced_probes debugfs_tracing (file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 18 system/sepolicy/private/traced_probes.te

(allow traced_probes debugfs_trace_marker (file (getattr)))
;;* lme

;;* lmx 19 system/sepolicy/private/traced_probes.te

(allow traced_probes debugfs_tracing_printk_formats (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 22 system/sepolicy/private/traced_probes.te

(allow traced_probes debugfs_tracing_instances (dir (search)))
;;* lme

;;* lmx 23 system/sepolicy/private/traced_probes.te

(allow traced_probes debugfs_mm_events_tracing (dir (search)))
;;* lme

;;* lmx 24 system/sepolicy/private/traced_probes.te

(allow traced_probes debugfs_mm_events_tracing (file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 28 system/sepolicy/private/traced_probes.te

(allow traced_probes debugfs_tracing_debug (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 28 system/sepolicy/private/traced_probes.te

(allow traced_probes debugfs_tracing_debug (file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 35 system/sepolicy/private/traced_probes.te

(allow traced_probes self (capability (sys_nice)))
(allow traced_probes self (cap_userns (sys_nice)))
;;* lme

;;* lmx 38 system/sepolicy/private/traced_probes.te

(allow traced_probes domain (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 38 system/sepolicy/private/traced_probes.te

(allow traced_probes domain (file (ioctl read getattr lock map open watch watch_reads)))
(allow traced_probes domain (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 45 system/sepolicy/private/traced_probes.te

(allow traced_probes property_socket (sock_file (write)))
;;* lme

;;* lmx 45 system/sepolicy/private/traced_probes.te

(allow traced_probes init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 45 system/sepolicy/private/traced_probes.te

(allow traced_probes lower_kptr_restrict_prop (property_service (set)))
;;* lme

;;* lmx 45 system/sepolicy/private/traced_probes.te

(allow traced_probes lower_kptr_restrict_prop (file (read getattr map open)))
;;* lme

;;* lmx 46 system/sepolicy/private/traced_probes.te

(allow traced_probes proc_kallsyms (file (read lock open)))
;;* lme

;;* lmx 49 system/sepolicy/private/traced_probes.te

(allow traced_probes packages_list_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 52 system/sepolicy/private/traced_probes.te

(allow traced_probes game_mode_intervention_list_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 55 system/sepolicy/private/traced_probes.te

(allow traced_probes kmsg_device (chr_file (write)))
;;* lme

;;* lmx 58 system/sepolicy/private/traced_probes.te

(allow traced_probes system_file (dir (read open)))
;;* lme

;;* lmx 61 system/sepolicy/private/traced_probes.te

(allow traced_probes self (capability (dac_read_search)))
(allow traced_probes self (cap_userns (dac_read_search)))
;;* lme

;;* lmx 63 system/sepolicy/private/traced_probes.te

(allow traced_probes apk_data_file (dir (read getattr open search)))
;;* lme

;;* lmx 64 system/sepolicy/private/traced_probes.te

(allow traced_probes apex_module_data_file (dir (read getattr open search)))
(allow traced_probes apex_art_data_file (dir (read getattr open search)))
;;* lme

;;* lmx 65 system/sepolicy/private/traced_probes.te

(allow traced_probes dalvikcache_data_file (dir (read getattr open search)))
;;* lme

;;* lmx 66 system/sepolicy/private/traced_probes.te

(allow traced_probes system_data_file (dir (read open)))
;;* lme

;;* lmx 70 system/sepolicy/private/traced_probes.te

(allow traced_probes system_app_data_file (dir (read getattr open search)))
;;* lme

;;* lmx 71 system/sepolicy/private/traced_probes.te

(allow traced_probes backup_data_file (dir (read getattr open search)))
;;* lme

;;* lmx 72 system/sepolicy/private/traced_probes.te

(allow traced_probes bootstat_data_file (dir (read getattr open search)))
;;* lme

;;* lmx 73 system/sepolicy/private/traced_probes.te

(allow traced_probes update_engine_data_file (dir (read getattr open search)))
;;* lme

;;* lmx 74 system/sepolicy/private/traced_probes.te

(allow traced_probes update_engine_log_data_file (dir (read getattr open search)))
;;* lme

;;* lmx 75 system/sepolicy/private/traced_probes.te

(allow traced_probes user_profile_root_file (dir (read getattr open search)))
(allow traced_probes user_profile_data_file (dir (read getattr open search)))
;;* lme

;;* lmx 78 system/sepolicy/private/traced_probes.te

(allow traced_probes user_list_data_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 82 system/sepolicy/private/traced_probes.te

(allow traced_probes atrace_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 82 system/sepolicy/private/traced_probes.te

(allow traced_probes atrace (process (transition)))
;;* lme

;;* lmx 82 system/sepolicy/private/traced_probes.te

(allow atrace atrace_exec (file (read getattr map execute open entrypoint)))
;;* lme

;;* lmx 82 system/sepolicy/private/traced_probes.te

(allow atrace traced_probes (process (sigchld)))
;;* lme

(dontaudit traced_probes atrace (process (noatsecure)))
;;* lmx 82 system/sepolicy/private/traced_probes.te

(allow traced_probes atrace (process (siginh rlimitinh)))
;;* lme

(typetransition traced_probes atrace_exec process atrace)
;;* lmx 85 system/sepolicy/private/traced_probes.te

(allow traced_probes atrace (process (sigkill)))
;;* lme

;;* lmx 98 system/sepolicy/private/traced_probes.te

(allow traced_probes proc_buddyinfo (file (ioctl read getattr lock map open watch watch_reads)))
(allow traced_probes proc_meminfo (file (ioctl read getattr lock map open watch watch_reads)))
(allow traced_probes proc_pressure_cpu (file (ioctl read getattr lock map open watch watch_reads)))
(allow traced_probes proc_pressure_io (file (ioctl read getattr lock map open watch watch_reads)))
(allow traced_probes proc_pressure_mem (file (ioctl read getattr lock map open watch watch_reads)))
(allow traced_probes proc_stat (file (ioctl read getattr lock map open watch watch_reads)))
(allow traced_probes proc_vmstat (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 101 system/sepolicy/private/traced_probes.te

(allow traced_probes sysfs_devfreq_dir (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 102 system/sepolicy/private/traced_probes.te

(allow traced_probes sysfs_devfreq_cur (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 105 system/sepolicy/private/traced_probes.te

(allow traced_probes proc_diskstats (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 108 system/sepolicy/private/traced_probes.te

(allow traced_probes hal_health (memfd_file (read write getattr map)))
;;* lme

;;* lmx 108 system/sepolicy/private/traced_probes.te

(allow hal_health traced_probes (memfd_file (read write getattr map)))
;;* lme

;;* lmx 109 system/sepolicy/private/traced_probes.te

(allow traced_probes hal_power_stats (memfd_file (read write getattr map)))
;;* lme

;;* lmx 109 system/sepolicy/private/traced_probes.te

(allow hal_power_stats traced_probes (memfd_file (read write getattr map)))
;;* lme

;;* lmx 112 system/sepolicy/private/traced_probes.te

(allow traced_probes hal_atrace (memfd_file (read write getattr map)))
;;* lme

;;* lmx 112 system/sepolicy/private/traced_probes.te

(allow hal_atrace traced_probes (memfd_file (read write getattr map)))
;;* lme

;;* lmx 115 system/sepolicy/private/traced_probes.te

(allow traced_probes logcat_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lme

;;* lmx 115 system/sepolicy/private/traced_probes.te

(allow traced_probes logdr_socket (sock_file (write)))
;;* lme

;;* lmx 115 system/sepolicy/private/traced_probes.te

(allow traced_probes logd (unix_stream_socket (connectto)))
;;* lme

;;* lmx 118 system/sepolicy/private/traced_probes.te

(allow traced_probes statsdw_socket (sock_file (write)))
;;* lme

;;* lmx 118 system/sepolicy/private/traced_probes.te

(allow traced_probes statsd (unix_dgram_socket (sendto)))
;;* lme

;;* lmx 119 system/sepolicy/private/traced_probes.te

(allow traced_probes statsd (binder (call transfer)))
;;* lme

;;* lmx 119 system/sepolicy/private/traced_probes.te

(allow statsd traced_probes (binder (transfer)))
;;* lme

;;* lmx 119 system/sepolicy/private/traced_probes.te

(allow traced_probes statsd (fd (use)))
;;* lme

;;* lmx 120 system/sepolicy/private/traced_probes.te

(allow traced_probes stats_service (service_manager (find)))
;;* lme

;;* lmx 123 system/sepolicy/private/traced_probes.te

(allow traced_probes system_suspend_control_internal_service (service_manager (find)))
;;* lme

;;* lmx 124 system/sepolicy/private/traced_probes.te

(allow traced_probes system_suspend (binder (call)))
;;* lme

;;* lmx 128 system/sepolicy/private/traced_probes.te

(allow traced_probes fs_bpf_cputimeinstate (dir (search)))
;;* lme

;;* lmx 129 system/sepolicy/private/traced_probes.te

(allow traced_probes fs_bpf_cputimeinstate (file (read write getattr)))
;;* lme

;;* lmx 130 system/sepolicy/private/traced_probes.te

(allow traced_probes bpfloader (bpf (prog_run)))
;;* lme

;;* lmx 131 system/sepolicy/private/traced_probes.te

(allow traced_probes bpfloader (bpf (map_read map_write)))
;;* lme

;;* lmx 135 system/sepolicy/private/traced_probes.te

(allow traced_probes self (perf_event (open cpu kernel write)))
;;* lme

;;* lmx 136 system/sepolicy/private/traced_probes.te

(neverallow traced_probes self (perf_event (tracepoint read)))
;;* lme

;;* lmx 140 system/sepolicy/private/traced_probes.te

(allow traced_probes debug_tracing_desktop_mode_visible_tasks_prop (file (read getattr map open)))
;;* lme

;;* lmx 145 system/sepolicy/private/traced_probes.te

(allow traced_probes property_socket (sock_file (write)))
;;* lme

;;* lmx 145 system/sepolicy/private/traced_probes.te

(allow traced_probes init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 145 system/sepolicy/private/traced_probes.te

(allow traced_probes avf_vm_traced_relay_enabled_prop (property_service (set)))
;;* lme

;;* lmx 145 system/sepolicy/private/traced_probes.te

(allow traced_probes avf_vm_traced_relay_enabled_prop (file (read getattr map open)))
;;* lme

;;* lmx 148 system/sepolicy/private/traced_probes.te

(allow traced_probes aflags_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 148 system/sepolicy/private/traced_probes.te

(allow traced_probes aflags (process (transition)))
;;* lme

;;* lmx 148 system/sepolicy/private/traced_probes.te

(allow aflags aflags_exec (file (read getattr map execute open entrypoint)))
;;* lme

;;* lmx 148 system/sepolicy/private/traced_probes.te

(allow aflags traced_probes (process (sigchld)))
;;* lme

(dontaudit traced_probes aflags (process (noatsecure)))
;;* lmx 148 system/sepolicy/private/traced_probes.te

(allow traced_probes aflags (process (siginh rlimitinh)))
;;* lme

(typetransition traced_probes aflags_exec process aflags)
;;* lmx 151 system/sepolicy/private/traced_probes.te

(allow traced_probes aflags (process (sigkill)))
;;* lme

;;* lmx 160 system/sepolicy/private/traced_probes.te

(neverallow traced_probes self (process (execmem)))
;;* lme

;;* lmx 163 system/sepolicy/private/traced_probes.te

(neverallow traced_probes dev_type (blk_file (read write)))
;;* lme

;;* lmx 166 system/sepolicy/private/traced_probes.te

(neverallow traced_probes domain (process (ptrace)))
;;* lme

;;* lmx 169 system/sepolicy/private/traced_probes.te

(neverallow base_typeattr_247 traced_probes (process (transition)))
;;* lme

;;* lmx 170 system/sepolicy/private/traced_probes.te

(neverallow base_typeattr_248 traced_probes (process (dyntransition)))
;;* lme

(typetransition traceur_app tmpfs file appdomain_tmpfs)
;;* lmx 3 system/sepolicy/private/traceur_app.te

(allow traceur_app traceur_app_userfaultfd (anon_inode (ioctl read create)))
;;* lme

(dontaudit su traceur_app_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lmx 3 system/sepolicy/private/traceur_app.te

(neverallow base_typeattr_1115 traceur_app_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 3 system/sepolicy/private/traceur_app.te

(allow traceur_app appdomain_tmpfs (file (read write getattr map execute)))
;;* lme

;;* lmx 3 system/sepolicy/private/traceur_app.te

(allow traceur_app appdomain (memfd_file (read write getattr map execute)))
;;* lme

;;* lmx 3 system/sepolicy/private/traceur_app.te

(neverallow base_typeattr_1116 base_typeattr_1115 (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 3 system/sepolicy/private/traceur_app.te

(neverallow base_typeattr_1117 traceur_app (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 3 system/sepolicy/private/traceur_app.te

(neverallow base_typeattr_1118 traceur_app (process (ptrace)))
;;* lme

;;* lmx 3 system/sepolicy/private/traceur_app.te

(neverallow traceur_app base_typeattr_1119 (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 4 system/sepolicy/private/traceur_app.te

(allow traceur_app debugfs_tracing (file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 5 system/sepolicy/private/traceur_app.te

(allow traceur_app debugfs_tracing_debug (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 7 system/sepolicy/private/traceur_app.te

(allow traceur_app debugfs_tracing_debug (file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 11 system/sepolicy/private/traceur_app.te

(allow traceur_app trace_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 12 system/sepolicy/private/traceur_app.te

(allow traceur_app trace_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 13 system/sepolicy/private/traceur_app.te

(allow traceur_app wm_trace_data_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
;;* lme

;;* lmx 14 system/sepolicy/private/traceur_app.te

(allow traceur_app wm_trace_data_file (file (ioctl read getattr lock map unlink open watch watch_reads)))
;;* lme

;;* lmx 15 system/sepolicy/private/traceur_app.te

(allow traceur_app atrace_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lme

;;* lmx 19 system/sepolicy/private/traceur_app.te

(allow traceur_app perfetto_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lme

;;* lmx 22 system/sepolicy/private/traceur_app.te

(allow traceur_app traced_consumer_socket (sock_file (write)))
;;* lme

;;* lmx 22 system/sepolicy/private/traceur_app.te

(allow traceur_app traced (unix_stream_socket (connectto)))
;;* lme

(dontaudit traceur_app debugfs_tracing_debug (file (audit_access)))
;;* lmx 26 system/sepolicy/private/traceur_app.te

(allow traceur_app property_socket (sock_file (write)))
;;* lme

;;* lmx 26 system/sepolicy/private/traceur_app.te

(allow traceur_app init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 26 system/sepolicy/private/traceur_app.te

(allow traceur_app debug_prop (property_service (set)))
;;* lme

;;* lmx 26 system/sepolicy/private/traceur_app.te

(allow traceur_app debug_prop (file (read getattr map open)))
;;* lme

;;* lmx 28 system/sepolicy/private/traceur_app.te

(allow traceur_app servicemanager (service_manager (list)))
;;* lme

;;* lmx 29 system/sepolicy/private/traceur_app.te

(allow traceur_app hwservicemanager (hwservice_manager (list)))
;;* lme

;;* lmx 44 system/sepolicy/private/traceur_app.te

(allow traceur_app base_typeattr_1120 (service_manager (find)))
;;* lme

;;* lmx 47 system/sepolicy/private/traceur_app.te

(allow traceur_app hal_atrace (memfd_file (read write getattr map)))
;;* lme

;;* lmx 47 system/sepolicy/private/traceur_app.te

(allow hal_atrace traceur_app (memfd_file (read write getattr map)))
;;* lme

(dontaudit traceur_app service_manager_type (service_manager (find)))
(dontaudit traceur_app hwservice_manager_type (hwservice_manager (find)))
(dontaudit traceur_app domain (binder (call)))
;;* lmx 6 system/sepolicy/private/tradeinmode.te

(allow tradeinmode adbd_tradeinmode (fd (use)))
;;* lme

;;* lmx 7 system/sepolicy/private/tradeinmode.te

(allow tradeinmode adbd_tradeinmode (unix_stream_socket (ioctl read write)))
;;* lme

;;* lmx 10 system/sepolicy/private/tradeinmode.te

(allow tradeinmode property_socket (sock_file (write)))
;;* lme

;;* lmx 10 system/sepolicy/private/tradeinmode.te

(allow tradeinmode init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 10 system/sepolicy/private/tradeinmode.te

(allow tradeinmode adbd_tradeinmode_prop (property_service (set)))
;;* lme

;;* lmx 10 system/sepolicy/private/tradeinmode.te

(allow tradeinmode adbd_tradeinmode_prop (file (read getattr map open)))
;;* lme

;;* lmx 13 system/sepolicy/private/tradeinmode.te

(allow tradeinmode adbd (fd (use)))
(allow tradeinmode shell (fd (use)))
;;* lme

;;* lmx 14 system/sepolicy/private/tradeinmode.te

(allow tradeinmode adbd (unix_stream_socket (ioctl read write)))
;;* lme

;;* lmx 16 system/sepolicy/private/tradeinmode.te

(allow tradeinmode devpts (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 19 system/sepolicy/private/tradeinmode.te

(allow tradeinmode system_file (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lme

;;* lmx 20 system/sepolicy/private/tradeinmode.te

(allow tradeinmode zygote_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lme

;;* lmx 21 system/sepolicy/private/tradeinmode.te

(allow tradeinmode apex_info_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 23 system/sepolicy/private/tradeinmode.te

(allow tradeinmode activity_service (service_manager (find)))
;;* lme

;;* lmx 25 system/sepolicy/private/tradeinmode.te

(allow tradeinmode odsign_prop (file (read getattr map open)))
;;* lme

;;* lmx 26 system/sepolicy/private/tradeinmode.te

(allow tradeinmode build_attestation_prop (file (read getattr map open)))
;;* lme

;;* lmx 27 system/sepolicy/private/tradeinmode.te

(allow tradeinmode adbd_tradeinmode_prop (file (read getattr map open)))
;;* lme

;;* lmx 28 system/sepolicy/private/tradeinmode.te

(allow tradeinmode property_socket (sock_file (write)))
;;* lme

;;* lmx 28 system/sepolicy/private/tradeinmode.te

(allow tradeinmode init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 28 system/sepolicy/private/tradeinmode.te

(allow tradeinmode powerctl_prop (property_service (set)))
;;* lme

;;* lmx 28 system/sepolicy/private/tradeinmode.te

(allow tradeinmode powerctl_prop (file (read getattr map open)))
;;* lme

;;* lmx 31 system/sepolicy/private/tradeinmode.te

(allow tradeinmode system_server (binder (call transfer)))
;;* lme

;;* lmx 31 system/sepolicy/private/tradeinmode.te

(allow system_server tradeinmode (binder (transfer)))
;;* lme

;;* lmx 31 system/sepolicy/private/tradeinmode.te

(allow tradeinmode system_server (fd (use)))
;;* lme

;;* lmx 32 system/sepolicy/private/tradeinmode.te

(allow tradeinmode servicemanager (binder (call transfer)))
;;* lme

;;* lmx 32 system/sepolicy/private/tradeinmode.te

(allow servicemanager tradeinmode (binder (transfer)))
;;* lme

;;* lmx 32 system/sepolicy/private/tradeinmode.te

(allow tradeinmode servicemanager (fd (use)))
;;* lme

;;* lmx 35 system/sepolicy/private/tradeinmode.te

(allow tradeinmode platform_app_all (binder (call transfer)))
;;* lme

;;* lmx 35 system/sepolicy/private/tradeinmode.te

(allow platform_app_all tradeinmode (binder (transfer)))
;;* lme

;;* lmx 35 system/sepolicy/private/tradeinmode.te

(allow tradeinmode platform_app_all (fd (use)))
;;* lme

(typetransition ueventd tmpfs file ueventd_tmpfs)
;;* lmx 3 system/sepolicy/private/ueventd.te

(allow ueventd ueventd_tmpfs (file (read write getattr map)))
;;* lme

;;* lmx 7 system/sepolicy/private/ueventd.te

(allow ueventd property_socket (sock_file (write)))
;;* lme

;;* lmx 7 system/sepolicy/private/ueventd.te

(allow ueventd init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 7 system/sepolicy/private/ueventd.te

(allow ueventd cold_boot_done_prop (property_service (set)))
;;* lme

;;* lmx 7 system/sepolicy/private/ueventd.te

(allow ueventd cold_boot_done_prop (file (read getattr map open)))
;;* lme

;;* lmx 10 system/sepolicy/private/ueventd.te

(allow ueventd kmsg_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 12 system/sepolicy/private/ueventd.te

(allow ueventd self (capability (chown dac_override dac_read_search fowner fsetid setgid setuid net_admin sys_rawio mknod)))
(allow ueventd self (cap_userns (chown dac_override dac_read_search fowner fsetid setgid setuid net_admin sys_rawio mknod)))
;;* lme

;;* lmx 13 system/sepolicy/private/ueventd.te

(allow ueventd device (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 15 system/sepolicy/private/ueventd.te

(allow ueventd rootfs (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 15 system/sepolicy/private/ueventd.te

(allow ueventd rootfs (file (ioctl read getattr lock map open watch watch_reads)))
(allow ueventd rootfs (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 18 system/sepolicy/private/ueventd.te

(allow ueventd sysfs_type (file (write lock append map open)))
;;* lme

;;* lmx 19 system/sepolicy/private/ueventd.te

(allow ueventd sysfs_type (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 19 system/sepolicy/private/ueventd.te

(allow ueventd sysfs_type (file (ioctl read getattr lock map open watch watch_reads)))
(allow ueventd sysfs_type (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 20 system/sepolicy/private/ueventd.te

(allow ueventd sysfs_type (file (setattr relabelfrom relabelto)))
(allow ueventd sysfs_type (lnk_file (setattr relabelfrom relabelto)))
;;* lme

;;* lmx 21 system/sepolicy/private/ueventd.te

(allow ueventd sysfs_type (dir (setattr relabelfrom relabelto)))
;;* lme

;;* lmx 22 system/sepolicy/private/ueventd.te

(allow ueventd tmpfs (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 23 system/sepolicy/private/ueventd.te

(allow ueventd dev_type (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 24 system/sepolicy/private/ueventd.te

(allow ueventd dev_type (lnk_file (create unlink)))
;;* lme

;;* lmx 25 system/sepolicy/private/ueventd.te

(allow ueventd dev_type (chr_file (create getattr setattr unlink)))
;;* lme

;;* lmx 26 system/sepolicy/private/ueventd.te

(allow ueventd dev_type (blk_file (create getattr setattr relabelfrom relabelto unlink)))
;;* lme

;;* lmx 27 system/sepolicy/private/ueventd.te

(allow ueventd self (netlink_kobject_uevent_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
;;* lme

;;* lmx 28 system/sepolicy/private/ueventd.te

(allow ueventd efs_file (dir (search)))
;;* lme

;;* lmx 29 system/sepolicy/private/ueventd.te

(allow ueventd efs_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 32 system/sepolicy/private/ueventd.te

(allow ueventd selinuxfs (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 32 system/sepolicy/private/ueventd.te

(allow ueventd selinuxfs (file (ioctl read getattr lock map open watch watch_reads)))
(allow ueventd selinuxfs (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 35 system/sepolicy/private/ueventd.te

(allow ueventd base_typeattr_1121 (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 35 system/sepolicy/private/ueventd.te

(allow ueventd base_typeattr_1121 (file (ioctl read getattr lock map open watch watch_reads)))
(allow ueventd base_typeattr_1121 (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 38 system/sepolicy/private/ueventd.te

(allow ueventd apex_mnt_dir (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 41 system/sepolicy/private/ueventd.te

(allow ueventd file_contexts_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 44 system/sepolicy/private/ueventd.te

(allow ueventd self (process (setfscreate)))
;;* lme

;;* lmx 47 system/sepolicy/private/ueventd.te

(allow ueventd proc_cmdline (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 48 system/sepolicy/private/ueventd.te

(allow ueventd proc_bootconfig (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

(dontaudit ueventd postinstall_mnt_dir (dir (getattr)))
;;* lmx 61 system/sepolicy/private/ueventd.te

(allow ueventd self (capability (sys_module)))
(allow ueventd self (cap_userns (sys_module)))
;;* lme

;;* lmx 62 system/sepolicy/private/ueventd.te

(allow ueventd vendor_file (system (module_load)))
;;* lme

;;* lmx 63 system/sepolicy/private/ueventd.te

(allow ueventd kernel (key (search)))
;;* lme

;;* lmx 66 system/sepolicy/private/ueventd.te

(allow ueventd system_bootstrap_lib_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 66 system/sepolicy/private/ueventd.te

(allow ueventd system_bootstrap_lib_file (file (read getattr map execute open)))
;;* lme

;;* lmx 69 system/sepolicy/private/ueventd.te

(allow ueventd vendor_shell_exec (file (execute)))
;;* lme

;;* lmx 72 system/sepolicy/private/ueventd.te

(allow ueventd dm_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 73 system/sepolicy/private/ueventd.te

(allow ueventd self (capability (sys_admin)))
;;* lme

;;* lmx 76 system/sepolicy/private/ueventd.te

(allow ueventd apexd_prop (file (read getattr map open)))
;;* lme

;;* lmx 79 system/sepolicy/private/ueventd.te

(allow ueventd block_device (lnk_file (relabelfrom)))
;;* lme

;;* lmx 82 system/sepolicy/private/ueventd.te

(allow ueventd gsi_metadata_file_type (dir (search)))
(allow ueventd metadata_file (dir (search)))
;;* lme

;;* lmx 82 system/sepolicy/private/ueventd.te

(allow ueventd gsi_public_metadata_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 82 system/sepolicy/private/ueventd.te

(allow ueventd proc_bootconfig (file (ioctl read getattr lock map open watch watch_reads)))
(allow ueventd proc_cmdline (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 89 system/sepolicy/private/ueventd.te

(neverallow ueventd dev_type (blk_file (ioctl read write lock append map link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 92 system/sepolicy/private/ueventd.te

(neverallow ueventd port_device (chr_file (ioctl read write lock relabelfrom append map link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
;;* lme

;;* lmx 95 system/sepolicy/private/ueventd.te

(neverallow base_typeattr_248 ueventd (process (ptrace)))
;;* lme

;;* lmx 98 system/sepolicy/private/ueventd.te

(neverallow ueventd fs_type (file (execute_no_trans)))
(neverallow ueventd file_type (file (execute_no_trans)))
;;* lme

;;* lmx 3 system/sepolicy/private/uncrypt.te

(allow init uncrypt_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 3 system/sepolicy/private/uncrypt.te

(allow init uncrypt (process (transition)))
;;* lme

;;* lmx 3 system/sepolicy/private/uncrypt.te

(allow uncrypt uncrypt_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init uncrypt (process (noatsecure)))
;;* lmx 3 system/sepolicy/private/uncrypt.te

(allow init uncrypt (process (siginh rlimitinh)))
;;* lme

(typetransition init uncrypt_exec process uncrypt)
;;* lmx 6 system/sepolicy/private/uncrypt.te

(allow uncrypt property_socket (sock_file (write)))
;;* lme

;;* lmx 6 system/sepolicy/private/uncrypt.te

(allow uncrypt init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 6 system/sepolicy/private/uncrypt.te

(allow uncrypt powerctl_prop (property_service (set)))
;;* lme

;;* lmx 6 system/sepolicy/private/uncrypt.te

(allow uncrypt powerctl_prop (file (read getattr map open)))
;;* lme

;;* lmx 8 system/sepolicy/private/uncrypt.te

(allow uncrypt self (capability (dac_override dac_read_search)))
(allow uncrypt self (cap_userns (dac_override dac_read_search)))
;;* lme

;;* lmx 10 system/sepolicy/private/uncrypt.te

(allow uncrypt shell_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 10 system/sepolicy/private/uncrypt.te

(allow uncrypt shell_data_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow uncrypt shell_data_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 17 system/sepolicy/private/uncrypt.te

(allow uncrypt cache_file (dir (search)))
;;* lme

;;* lmx 18 system/sepolicy/private/uncrypt.te

(allow uncrypt cache_recovery_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
;;* lme

;;* lmx 19 system/sepolicy/private/uncrypt.te

(allow uncrypt cache_recovery_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 22 system/sepolicy/private/uncrypt.te

(allow uncrypt ota_package_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 23 system/sepolicy/private/uncrypt.te

(allow uncrypt ota_package_file (file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 26 system/sepolicy/private/uncrypt.te

(allow uncrypt uncrypt_socket (sock_file (write)))
;;* lme

;;* lmx 26 system/sepolicy/private/uncrypt.te

(allow uncrypt uncrypt (unix_stream_socket (connectto)))
;;* lme

;;* lmx 29 system/sepolicy/private/uncrypt.te

(allow uncrypt self (capability (sys_rawio)))
(allow uncrypt self (cap_userns (sys_rawio)))
;;* lme

;;* lmx 30 system/sepolicy/private/uncrypt.te

(allow uncrypt misc_block_device (blk_file (write lock append map open)))
;;* lme

;;* lmx 31 system/sepolicy/private/uncrypt.te

(allow uncrypt block_device (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 34 system/sepolicy/private/uncrypt.te

(allow uncrypt userdata_block_device (blk_file (write lock append map open)))
;;* lme

;;* lmx 36 system/sepolicy/private/uncrypt.te

(allow uncrypt rootfs (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 36 system/sepolicy/private/uncrypt.te

(allow uncrypt rootfs (file (ioctl read getattr lock map open watch watch_reads)))
(allow uncrypt rootfs (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 43 system/sepolicy/private/uncrypt.te

(allow uncrypt proc_bootconfig (file (ioctl read getattr lock map open watch watch_reads)))
(allow uncrypt proc_cmdline (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 46 system/sepolicy/private/uncrypt.te

(allow uncrypt sysfs_dt_firmware_android (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 46 system/sepolicy/private/uncrypt.te

(allow uncrypt sysfs_dt_firmware_android (file (ioctl read getattr lock map open watch watch_reads)))
(allow uncrypt sysfs_dt_firmware_android (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 49 system/sepolicy/private/uncrypt.te

(allow uncrypt gsi_metadata_file_type (dir (search)))
(allow uncrypt metadata_file (dir (search)))
;;* lme

;;* lmx 49 system/sepolicy/private/uncrypt.te

(allow uncrypt gsi_public_metadata_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 49 system/sepolicy/private/uncrypt.te

(allow uncrypt proc_bootconfig (file (ioctl read getattr lock map open watch watch_reads)))
(allow uncrypt proc_cmdline (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

(typetransition untrusted_app tmpfs file appdomain_tmpfs)
;;* lmx 13 system/sepolicy/private/untrusted_app.te

(allow untrusted_app untrusted_app_userfaultfd (anon_inode (ioctl read create)))
;;* lme

(dontaudit su untrusted_app_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lmx 13 system/sepolicy/private/untrusted_app.te

(neverallow base_typeattr_1122 untrusted_app_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 13 system/sepolicy/private/untrusted_app.te

(allow untrusted_app appdomain_tmpfs (file (read write getattr map execute)))
;;* lme

;;* lmx 13 system/sepolicy/private/untrusted_app.te

(allow untrusted_app appdomain (memfd_file (read write getattr map execute)))
;;* lme

;;* lmx 13 system/sepolicy/private/untrusted_app.te

(neverallow base_typeattr_1123 base_typeattr_1122 (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 13 system/sepolicy/private/untrusted_app.te

(neverallow base_typeattr_1124 untrusted_app (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 13 system/sepolicy/private/untrusted_app.te

(neverallow base_typeattr_1125 untrusted_app (process (ptrace)))
;;* lme

;;* lmx 13 system/sepolicy/private/untrusted_app.te

(neverallow untrusted_app base_typeattr_1126 (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 20 system/sepolicy/private/untrusted_app.te

(allow untrusted_app sdk_sandbox_data_file (fd (use)))
;;* lme

;;* lmx 21 system/sepolicy/private/untrusted_app.te

(allow untrusted_app sdk_sandbox_data_file (file (write)))
;;* lme

;;* lmx 23 system/sepolicy/private/untrusted_app.te

(neverallow untrusted_app sdk_sandbox_data_file (file (create open)))
;;* lme

(typetransition untrusted_app_25 tmpfs file appdomain_tmpfs)
;;* lmx 13 system/sepolicy/private/untrusted_app_25.te

(allow untrusted_app_25 untrusted_app_25_userfaultfd (anon_inode (ioctl read create)))
;;* lme

(dontaudit su untrusted_app_25_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lmx 13 system/sepolicy/private/untrusted_app_25.te

(neverallow base_typeattr_1127 untrusted_app_25_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 13 system/sepolicy/private/untrusted_app_25.te

(allow untrusted_app_25 appdomain_tmpfs (file (read write getattr map execute)))
;;* lme

;;* lmx 13 system/sepolicy/private/untrusted_app_25.te

(allow untrusted_app_25 appdomain (memfd_file (read write getattr map execute)))
;;* lme

;;* lmx 13 system/sepolicy/private/untrusted_app_25.te

(neverallow base_typeattr_1128 base_typeattr_1127 (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 13 system/sepolicy/private/untrusted_app_25.te

(neverallow base_typeattr_1129 untrusted_app_25 (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 13 system/sepolicy/private/untrusted_app_25.te

(neverallow base_typeattr_1130 untrusted_app_25 (process (ptrace)))
;;* lme

;;* lmx 13 system/sepolicy/private/untrusted_app_25.te

(neverallow untrusted_app_25 base_typeattr_1131 (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 20 system/sepolicy/private/untrusted_app_25.te

(allow untrusted_app_25 proc_misc (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 27 system/sepolicy/private/untrusted_app_25.te

(allow untrusted_app_25 proc_tty_drivers (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 31 system/sepolicy/private/untrusted_app_25.te

(allow untrusted_app_25 apk_data_file (file (execmod)))
(allow untrusted_app_25 app_data_file (file (execmod)))
(allow untrusted_app_25 asec_public_file (file (execmod)))
;;* lme

;;* lmx 36 system/sepolicy/private/untrusted_app_25.te

(allow untrusted_app_25 app_data_file (file (execute_no_trans)))
;;* lme

(auditallow untrusted_app_25 app_data_file (file (execute execute_no_trans)))
;;* lmx 41 system/sepolicy/private/untrusted_app_25.te

(allow untrusted_app_25 dex2oat_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lme

(auditallow untrusted_app_25 dex2oat_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lmx 46 system/sepolicy/private/untrusted_app_25.te

(allow untrusted_app_25 ashmem_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

(auditallow untrusted_app_25 ashmem_device (chr_file (open)))
;;* lmx 50 system/sepolicy/private/untrusted_app_25.te

(allow untrusted_app_25 mnt_sdcard_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 53 system/sepolicy/private/untrusted_app_25.te

(allow untrusted_app_25 self (netlink_route_socket (nlmsg_getneigh)))
;;* lme

(auditallow untrusted_app_25 self (netlink_route_socket (nlmsg_getneigh)))
;;* lmx 55 system/sepolicy/private/untrusted_app_25.te

(allowx untrusted_app_25 self (nlmsg netlink_route_socket (0x1e 0x42)))
;;* lme

(auditallowx untrusted_app_25 self (nlmsg netlink_route_socket (0x1e 0x42)))
;;* lmx 59 system/sepolicy/private/untrusted_app_25.te

(allow untrusted_app_25 mdnsd_socket (sock_file (write)))
;;* lme

;;* lmx 59 system/sepolicy/private/untrusted_app_25.te

(allow untrusted_app_25 mdnsd (unix_stream_socket (connectto)))
;;* lme

(auditallow untrusted_app_25 mdnsd_socket (sock_file (write)))
(auditallow untrusted_app_25 mdnsd (unix_stream_socket (connectto)))
;;* lmx 67 system/sepolicy/private/untrusted_app_25.te

(allow untrusted_app_25 apk_data_file (dir (watch watch_reads)))
;;* lme

;;* lmx 68 system/sepolicy/private/untrusted_app_25.te

(allow untrusted_app_25 apk_data_file (file (watch watch_reads)))
;;* lme

(auditallow untrusted_app_25 apk_data_file (dir (watch watch_reads)))
(auditallow untrusted_app_25 apk_data_file (file (watch watch_reads)))
;;* lmx 74 system/sepolicy/private/untrusted_app_25.te

(allow untrusted_app_25 domain (memfd_file (ioctl)))
;;* lme

;;* lmx 75 system/sepolicy/private/untrusted_app_25.te

(allowx untrusted_app_25 domain (ioctl memfd_file ((range 0x7701 0x770b))))
;;* lme

;;* lmx 76 system/sepolicy/private/untrusted_app_25.te

(allow untrusted_app_25 ashmem_libcutils_device (chr_file (open)))
;;* lme

(typetransition untrusted_app_27 tmpfs file appdomain_tmpfs)
;;* lmx 13 system/sepolicy/private/untrusted_app_27.te

(allow untrusted_app_27 untrusted_app_27_userfaultfd (anon_inode (ioctl read create)))
;;* lme

(dontaudit su untrusted_app_27_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lmx 13 system/sepolicy/private/untrusted_app_27.te

(neverallow base_typeattr_1132 untrusted_app_27_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 13 system/sepolicy/private/untrusted_app_27.te

(allow untrusted_app_27 appdomain_tmpfs (file (read write getattr map execute)))
;;* lme

;;* lmx 13 system/sepolicy/private/untrusted_app_27.te

(allow untrusted_app_27 appdomain (memfd_file (read write getattr map execute)))
;;* lme

;;* lmx 13 system/sepolicy/private/untrusted_app_27.te

(neverallow base_typeattr_1133 base_typeattr_1132 (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 13 system/sepolicy/private/untrusted_app_27.te

(neverallow base_typeattr_1134 untrusted_app_27 (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 13 system/sepolicy/private/untrusted_app_27.te

(neverallow base_typeattr_1135 untrusted_app_27 (process (ptrace)))
;;* lme

;;* lmx 13 system/sepolicy/private/untrusted_app_27.te

(neverallow untrusted_app_27 base_typeattr_1136 (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 20 system/sepolicy/private/untrusted_app_27.te

(allow untrusted_app_27 apk_data_file (file (execmod)))
(allow untrusted_app_27 app_data_file (file (execmod)))
(allow untrusted_app_27 asec_public_file (file (execmod)))
;;* lme

;;* lmx 24 system/sepolicy/private/untrusted_app_27.te

(allow untrusted_app_27 app_data_file (file (execute_no_trans)))
;;* lme

(auditallow untrusted_app_27 app_data_file (file (execute execute_no_trans)))
;;* lmx 29 system/sepolicy/private/untrusted_app_27.te

(allow untrusted_app_27 dex2oat_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lme

(auditallow untrusted_app_27 dex2oat_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lmx 34 system/sepolicy/private/untrusted_app_27.te

(allow untrusted_app_27 ashmem_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

(auditallow untrusted_app_27 ashmem_device (chr_file (open)))
;;* lmx 38 system/sepolicy/private/untrusted_app_27.te

(allow untrusted_app_27 mnt_sdcard_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 41 system/sepolicy/private/untrusted_app_27.te

(allow untrusted_app_27 self (netlink_route_socket (nlmsg_getneigh)))
;;* lme

(auditallow untrusted_app_27 self (netlink_route_socket (nlmsg_getneigh)))
;;* lmx 43 system/sepolicy/private/untrusted_app_27.te

(allowx untrusted_app_27 self (nlmsg netlink_route_socket (0x1e 0x42)))
;;* lme

(auditallowx untrusted_app_27 self (nlmsg netlink_route_socket (0x1e 0x42)))
;;* lmx 47 system/sepolicy/private/untrusted_app_27.te

(allow untrusted_app_27 mdnsd_socket (sock_file (write)))
;;* lme

;;* lmx 47 system/sepolicy/private/untrusted_app_27.te

(allow untrusted_app_27 mdnsd (unix_stream_socket (connectto)))
;;* lme

(auditallow untrusted_app_27 mdnsd_socket (sock_file (write)))
(auditallow untrusted_app_27 mdnsd (unix_stream_socket (connectto)))
;;* lmx 55 system/sepolicy/private/untrusted_app_27.te

(allow untrusted_app_27 apk_data_file (dir (watch watch_reads)))
;;* lme

;;* lmx 56 system/sepolicy/private/untrusted_app_27.te

(allow untrusted_app_27 apk_data_file (file (watch watch_reads)))
;;* lme

(auditallow untrusted_app_27 apk_data_file (dir (watch watch_reads)))
(auditallow untrusted_app_27 apk_data_file (file (watch watch_reads)))
;;* lmx 62 system/sepolicy/private/untrusted_app_27.te

(allow untrusted_app_27 domain (memfd_file (ioctl)))
;;* lme

;;* lmx 63 system/sepolicy/private/untrusted_app_27.te

(allowx untrusted_app_27 domain (ioctl memfd_file ((range 0x7701 0x770b))))
;;* lme

;;* lmx 64 system/sepolicy/private/untrusted_app_27.te

(allow untrusted_app_27 ashmem_libcutils_device (chr_file (open)))
;;* lme

(typetransition untrusted_app_29 tmpfs file appdomain_tmpfs)
;;* lmx 13 system/sepolicy/private/untrusted_app_29.te

(allow untrusted_app_29 untrusted_app_29_userfaultfd (anon_inode (ioctl read create)))
;;* lme

(dontaudit su untrusted_app_29_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lmx 13 system/sepolicy/private/untrusted_app_29.te

(neverallow base_typeattr_1137 untrusted_app_29_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 13 system/sepolicy/private/untrusted_app_29.te

(allow untrusted_app_29 appdomain_tmpfs (file (read write getattr map execute)))
;;* lme

;;* lmx 13 system/sepolicy/private/untrusted_app_29.te

(allow untrusted_app_29 appdomain (memfd_file (read write getattr map execute)))
;;* lme

;;* lmx 13 system/sepolicy/private/untrusted_app_29.te

(neverallow base_typeattr_1138 base_typeattr_1137 (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 13 system/sepolicy/private/untrusted_app_29.te

(neverallow base_typeattr_1139 untrusted_app_29 (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 13 system/sepolicy/private/untrusted_app_29.te

(neverallow base_typeattr_1140 untrusted_app_29 (process (ptrace)))
;;* lme

;;* lmx 13 system/sepolicy/private/untrusted_app_29.te

(neverallow untrusted_app_29 base_typeattr_1141 (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 19 system/sepolicy/private/untrusted_app_29.te

(allow untrusted_app_29 self (netlink_route_socket (nlmsg_getneigh)))
;;* lme

(auditallow untrusted_app_29 self (netlink_route_socket (nlmsg_getneigh)))
;;* lmx 21 system/sepolicy/private/untrusted_app_29.te

(allowx untrusted_app_29 self (nlmsg netlink_route_socket (0x1e 0x42)))
;;* lme

(auditallowx untrusted_app_29 self (nlmsg netlink_route_socket (0x1e 0x42)))
;;* lmx 25 system/sepolicy/private/untrusted_app_29.te

(allow untrusted_app_29 mdnsd_socket (sock_file (write)))
;;* lme

;;* lmx 25 system/sepolicy/private/untrusted_app_29.te

(allow untrusted_app_29 mdnsd (unix_stream_socket (connectto)))
;;* lme

(auditallow untrusted_app_29 mdnsd_socket (sock_file (write)))
(auditallow untrusted_app_29 mdnsd (unix_stream_socket (connectto)))
;;* lmx 33 system/sepolicy/private/untrusted_app_29.te

(allow untrusted_app_29 apk_data_file (dir (watch watch_reads)))
;;* lme

;;* lmx 34 system/sepolicy/private/untrusted_app_29.te

(allow untrusted_app_29 apk_data_file (file (watch watch_reads)))
;;* lme

(auditallow untrusted_app_29 apk_data_file (dir (watch watch_reads)))
(auditallow untrusted_app_29 apk_data_file (file (watch watch_reads)))
;;* lmx 40 system/sepolicy/private/untrusted_app_29.te

(allow untrusted_app_29 domain (memfd_file (ioctl)))
;;* lme

;;* lmx 41 system/sepolicy/private/untrusted_app_29.te

(allowx untrusted_app_29 domain (ioctl memfd_file ((range 0x7701 0x770b))))
;;* lme

;;* lmx 42 system/sepolicy/private/untrusted_app_29.te

(allow untrusted_app_29 ashmem_libcutils_device (chr_file (open)))
;;* lme

(typetransition untrusted_app_30 tmpfs file appdomain_tmpfs)
;;* lmx 15 system/sepolicy/private/untrusted_app_30.te

(allow untrusted_app_30 untrusted_app_30_userfaultfd (anon_inode (ioctl read create)))
;;* lme

(dontaudit su untrusted_app_30_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lmx 15 system/sepolicy/private/untrusted_app_30.te

(neverallow base_typeattr_1142 untrusted_app_30_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 15 system/sepolicy/private/untrusted_app_30.te

(allow untrusted_app_30 appdomain_tmpfs (file (read write getattr map execute)))
;;* lme

;;* lmx 15 system/sepolicy/private/untrusted_app_30.te

(allow untrusted_app_30 appdomain (memfd_file (read write getattr map execute)))
;;* lme

;;* lmx 15 system/sepolicy/private/untrusted_app_30.te

(neverallow base_typeattr_1143 base_typeattr_1142 (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 15 system/sepolicy/private/untrusted_app_30.te

(neverallow base_typeattr_1144 untrusted_app_30 (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 15 system/sepolicy/private/untrusted_app_30.te

(neverallow base_typeattr_1145 untrusted_app_30 (process (ptrace)))
;;* lme

;;* lmx 15 system/sepolicy/private/untrusted_app_30.te

(neverallow untrusted_app_30 base_typeattr_1146 (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 21 system/sepolicy/private/untrusted_app_30.te

(allow untrusted_app_30 self (netlink_route_socket (nlmsg_getneigh)))
;;* lme

(auditallow untrusted_app_30 self (netlink_route_socket (nlmsg_getneigh)))
;;* lmx 23 system/sepolicy/private/untrusted_app_30.te

(allowx untrusted_app_30 self (nlmsg netlink_route_socket (0x1e 0x42)))
;;* lme

(auditallowx untrusted_app_30 self (nlmsg netlink_route_socket (0x1e 0x42)))
;;* lmx 27 system/sepolicy/private/untrusted_app_30.te

(allow untrusted_app_30 mdnsd_socket (sock_file (write)))
;;* lme

;;* lmx 27 system/sepolicy/private/untrusted_app_30.te

(allow untrusted_app_30 mdnsd (unix_stream_socket (connectto)))
;;* lme

(auditallow untrusted_app_30 mdnsd_socket (sock_file (write)))
(auditallow untrusted_app_30 mdnsd (unix_stream_socket (connectto)))
;;* lmx 35 system/sepolicy/private/untrusted_app_30.te

(allow untrusted_app_30 apk_data_file (dir (watch watch_reads)))
;;* lme

;;* lmx 36 system/sepolicy/private/untrusted_app_30.te

(allow untrusted_app_30 apk_data_file (file (watch watch_reads)))
;;* lme

(auditallow untrusted_app_30 apk_data_file (dir (watch watch_reads)))
(auditallow untrusted_app_30 apk_data_file (file (watch watch_reads)))
;;* lmx 42 system/sepolicy/private/untrusted_app_30.te

(allow untrusted_app_30 domain (memfd_file (ioctl)))
;;* lme

;;* lmx 43 system/sepolicy/private/untrusted_app_30.te

(allowx untrusted_app_30 domain (ioctl memfd_file ((range 0x7701 0x770b))))
;;* lme

;;* lmx 44 system/sepolicy/private/untrusted_app_30.te

(allow untrusted_app_30 ashmem_libcutils_device (chr_file (open)))
;;* lme

(typetransition untrusted_app_32 tmpfs file appdomain_tmpfs)
;;* lmx 13 system/sepolicy/private/untrusted_app_32.te

(allow untrusted_app_32 untrusted_app_32_userfaultfd (anon_inode (ioctl read create)))
;;* lme

(dontaudit su untrusted_app_32_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lmx 13 system/sepolicy/private/untrusted_app_32.te

(neverallow base_typeattr_1147 untrusted_app_32_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 13 system/sepolicy/private/untrusted_app_32.te

(allow untrusted_app_32 appdomain_tmpfs (file (read write getattr map execute)))
;;* lme

;;* lmx 13 system/sepolicy/private/untrusted_app_32.te

(allow untrusted_app_32 appdomain (memfd_file (read write getattr map execute)))
;;* lme

;;* lmx 13 system/sepolicy/private/untrusted_app_32.te

(neverallow base_typeattr_1148 base_typeattr_1147 (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 13 system/sepolicy/private/untrusted_app_32.te

(neverallow base_typeattr_1149 untrusted_app_32 (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 13 system/sepolicy/private/untrusted_app_32.te

(neverallow base_typeattr_1150 untrusted_app_32 (process (ptrace)))
;;* lme

;;* lmx 13 system/sepolicy/private/untrusted_app_32.te

(neverallow untrusted_app_32 base_typeattr_1151 (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 20 system/sepolicy/private/untrusted_app_32.te

(allow untrusted_app_32 sdk_sandbox_data_file (fd (use)))
;;* lme

;;* lmx 21 system/sepolicy/private/untrusted_app_32.te

(allow untrusted_app_32 sdk_sandbox_data_file (file (write)))
;;* lme

;;* lmx 23 system/sepolicy/private/untrusted_app_32.te

(neverallow untrusted_app_32 sdk_sandbox_data_file (file (create open)))
;;* lme

;;* lmx 26 system/sepolicy/private/untrusted_app_32.te

(allow untrusted_app_32 mdnsd_socket (sock_file (write)))
;;* lme

;;* lmx 26 system/sepolicy/private/untrusted_app_32.te

(allow untrusted_app_32 mdnsd (unix_stream_socket (connectto)))
;;* lme

(auditallow untrusted_app_32 mdnsd_socket (sock_file (write)))
(auditallow untrusted_app_32 mdnsd (unix_stream_socket (connectto)))
;;* lmx 34 system/sepolicy/private/untrusted_app_32.te

(allow untrusted_app_32 apk_data_file (dir (watch watch_reads)))
;;* lme

;;* lmx 35 system/sepolicy/private/untrusted_app_32.te

(allow untrusted_app_32 apk_data_file (file (watch watch_reads)))
;;* lme

(auditallow untrusted_app_32 apk_data_file (dir (watch watch_reads)))
(auditallow untrusted_app_32 apk_data_file (file (watch watch_reads)))
;;* lmx 41 system/sepolicy/private/untrusted_app_32.te

(allow untrusted_app_32 domain (memfd_file (ioctl)))
;;* lme

;;* lmx 42 system/sepolicy/private/untrusted_app_32.te

(allowx untrusted_app_32 domain (ioctl memfd_file ((range 0x7701 0x770b))))
;;* lme

;;* lmx 43 system/sepolicy/private/untrusted_app_32.te

(allow untrusted_app_32 ashmem_libcutils_device (chr_file (open)))
;;* lme

(typetransition untrusted_app_34 tmpfs file appdomain_tmpfs)
;;* lmx 13 system/sepolicy/private/untrusted_app_34.te

(allow untrusted_app_34 untrusted_app_34_userfaultfd (anon_inode (ioctl read create)))
;;* lme

(dontaudit su untrusted_app_34_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lmx 13 system/sepolicy/private/untrusted_app_34.te

(neverallow base_typeattr_1152 untrusted_app_34_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 13 system/sepolicy/private/untrusted_app_34.te

(allow untrusted_app_34 appdomain_tmpfs (file (read write getattr map execute)))
;;* lme

;;* lmx 13 system/sepolicy/private/untrusted_app_34.te

(allow untrusted_app_34 appdomain (memfd_file (read write getattr map execute)))
;;* lme

;;* lmx 13 system/sepolicy/private/untrusted_app_34.te

(neverallow base_typeattr_1153 base_typeattr_1152 (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 13 system/sepolicy/private/untrusted_app_34.te

(neverallow base_typeattr_1154 untrusted_app_34 (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 13 system/sepolicy/private/untrusted_app_34.te

(neverallow base_typeattr_1155 untrusted_app_34 (process (ptrace)))
;;* lme

;;* lmx 13 system/sepolicy/private/untrusted_app_34.te

(neverallow untrusted_app_34 base_typeattr_1156 (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 18 system/sepolicy/private/untrusted_app_34.te

(allow untrusted_app_34 domain (memfd_file (ioctl)))
;;* lme

;;* lmx 19 system/sepolicy/private/untrusted_app_34.te

(allowx untrusted_app_34 domain (ioctl memfd_file ((range 0x7701 0x770b))))
;;* lme

;;* lmx 20 system/sepolicy/private/untrusted_app_34.te

(allow untrusted_app_34 ashmem_libcutils_device (chr_file (open)))
;;* lme

;;* lmx 26 system/sepolicy/private/untrusted_app_all.te

(allow untrusted_app_all privapp_data_file (file (ioctl read getattr lock map execute open watch watch_reads)))
;;* lme

;;* lmx 27 system/sepolicy/private/untrusted_app_all.te

(allow untrusted_app_all app_data_file (file (ioctl read getattr lock map execute open watch watch_reads)))
;;* lme

(auditallow untrusted_app_all app_data_file (file (execute)))
;;* lmx 32 system/sepolicy/private/untrusted_app_all.te

(allow untrusted_app_all system_linker_exec (file (execute_no_trans)))
;;* lme

;;* lmx 35 system/sepolicy/private/untrusted_app_all.te

(allow untrusted_app_all privapp_data_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 38 system/sepolicy/private/untrusted_app_all.te

(allow untrusted_app_all app_data_file (lnk_file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow untrusted_app_all app_data_file (sock_file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow untrusted_app_all app_data_file (fifo_file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 43 system/sepolicy/private/untrusted_app_all.te

(allow untrusted_app_all app_exec_data_file (file (ioctl read getattr lock map unlink execute open watch watch_reads)))
;;* lme

;;* lmx 46 system/sepolicy/private/untrusted_app_all.te

(allow untrusted_app_all asec_apk_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 47 system/sepolicy/private/untrusted_app_all.te

(allow untrusted_app_all asec_apk_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 49 system/sepolicy/private/untrusted_app_all.te

(allow untrusted_app_all asec_public_file (file (execute)))
;;* lme

;;* lmx 58 system/sepolicy/private/untrusted_app_all.te

(allow untrusted_app_all shell_data_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 59 system/sepolicy/private/untrusted_app_all.te

(allow untrusted_app_all shell_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 62 system/sepolicy/private/untrusted_app_all.te

(neverallow untrusted_app_all debugfs_tracing (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 65 system/sepolicy/private/untrusted_app_all.te

(allow untrusted_app_all apk_tmp_file (file (read getattr)))
(allow untrusted_app_all apk_private_tmp_file (file (read getattr)))
;;* lme

;;* lmx 70 system/sepolicy/private/untrusted_app_all.te

(allow untrusted_app_all system_app_data_file (file (read write getattr)))
;;* lme

;;* lmx 78 system/sepolicy/private/untrusted_app_all.te

(allow untrusted_app_all media_rw_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 79 system/sepolicy/private/untrusted_app_all.te

(allow untrusted_app_all media_rw_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 82 system/sepolicy/private/untrusted_app_all.te

(allow untrusted_app_all servicemanager (service_manager (list)))
;;* lme

;;* lmx 84 system/sepolicy/private/untrusted_app_all.te

(allow untrusted_app_all audioserver_service (service_manager (find)))
;;* lme

;;* lmx 85 system/sepolicy/private/untrusted_app_all.te

(allow untrusted_app_all cameraserver_service (service_manager (find)))
;;* lme

;;* lmx 86 system/sepolicy/private/untrusted_app_all.te

(allow untrusted_app_all drmserver_service (service_manager (find)))
;;* lme

;;* lmx 87 system/sepolicy/private/untrusted_app_all.te

(allow untrusted_app_all mediaserver_service (service_manager (find)))
;;* lme

;;* lmx 88 system/sepolicy/private/untrusted_app_all.te

(allow untrusted_app_all mediaextractor_service (service_manager (find)))
;;* lme

;;* lmx 89 system/sepolicy/private/untrusted_app_all.te

(allow untrusted_app_all mediametrics_service (service_manager (find)))
;;* lme

;;* lmx 90 system/sepolicy/private/untrusted_app_all.te

(allow untrusted_app_all mediadrmserver_service (service_manager (find)))
;;* lme

;;* lmx 91 system/sepolicy/private/untrusted_app_all.te

(allow untrusted_app_all nfc_service (service_manager (find)))
;;* lme

;;* lmx 92 system/sepolicy/private/untrusted_app_all.te

(allow untrusted_app_all npu_service (service_manager (find)))
;;* lme

;;* lmx 93 system/sepolicy/private/untrusted_app_all.te

(allow untrusted_app_all radio_service (service_manager (find)))
;;* lme

;;* lmx 94 system/sepolicy/private/untrusted_app_all.te

(allow untrusted_app_all app_api_service (service_manager (find)))
;;* lme

;;* lmx 95 system/sepolicy/private/untrusted_app_all.te

(allow untrusted_app_all vr_manager_service (service_manager (find)))
;;* lme

;;* lmx 98 system/sepolicy/private/untrusted_app_all.te

(allow untrusted_app_all self (process (ptrace)))
;;* lme

;;* lmx 104 system/sepolicy/private/untrusted_app_all.te

(allow untrusted_app_all runas_app (unix_stream_socket (connectto)))
;;* lme

;;* lmx 108 system/sepolicy/private/untrusted_app_all.te

(allow untrusted_app_all runas_app (process (sigchld)))
;;* lme

;;* lmx 111 system/sepolicy/private/untrusted_app_all.te

(allow untrusted_app_all sysfs_hwrandom (dir (search)))
;;* lme

;;* lmx 112 system/sepolicy/private/untrusted_app_all.te

(allow untrusted_app_all sysfs_hwrandom (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 115 system/sepolicy/private/untrusted_app_all.te

(allow untrusted_app_all preloads_media_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 116 system/sepolicy/private/untrusted_app_all.te

(allow untrusted_app_all preloads_media_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 117 system/sepolicy/private/untrusted_app_all.te

(allow untrusted_app_all preloads_data_file (dir (search)))
;;* lme

;;* lmx 123 system/sepolicy/private/untrusted_app_all.te

(allow untrusted_app_all vendor_app_file (dir (read getattr open search)))
;;* lme

;;* lmx 124 system/sepolicy/private/untrusted_app_all.te

(allow untrusted_app_all vendor_app_file (file (ioctl read getattr lock map execute open watch watch_reads)))
;;* lme

;;* lmx 125 system/sepolicy/private/untrusted_app_all.te

(allow untrusted_app_all vendor_app_file (lnk_file (read getattr open)))
;;* lme

;;* lmx 130 system/sepolicy/private/untrusted_app_all.te

(allow untrusted_app_all system_server (udp_socket (read write getattr connect getopt setopt recvfrom sendto)))
;;* lme

;;* lmx 133 system/sepolicy/private/untrusted_app_all.te

(allow untrusted_app_all rs_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 133 system/sepolicy/private/untrusted_app_all.te

(allow untrusted_app_all rs (process (transition)))
;;* lme

;;* lmx 133 system/sepolicy/private/untrusted_app_all.te

(allow rs rs_exec (file (read getattr map execute open entrypoint)))
;;* lme

;;* lmx 133 system/sepolicy/private/untrusted_app_all.te

(allow rs untrusted_app_all (process (sigchld)))
;;* lme

(dontaudit untrusted_app_all rs (process (noatsecure)))
;;* lmx 133 system/sepolicy/private/untrusted_app_all.te

(allow untrusted_app_all rs (process (siginh rlimitinh)))
;;* lme

(typetransition untrusted_app_all rs_exec process rs)
(dontaudit untrusted_app_all debugfs_tracing (file (ioctl read write getattr lock append map open watch watch_reads)))
(dontaudit untrusted_app_all net_dns_prop (file (read)))
(dontaudit untrusted_app_all proc_stat (file (read)))
(dontaudit untrusted_app_all proc_uptime (file (read)))
(dontaudit untrusted_app_all proc_vmstat (file (read)))
(dontaudit untrusted_app_all proc_zoneinfo (file (read)))
(dontaudit untrusted_app_all userdebug_or_eng_prop (file (read)))
(typetransition untrusted_app_all devpts chr_file untrusted_app_all_devpts)
;;* lmx 155 system/sepolicy/private/untrusted_app_all.te

(allow untrusted_app_all untrusted_app_all_devpts (chr_file (ioctl read write getattr open)))
;;* lme

;;* lmx 155 system/sepolicy/private/untrusted_app_all.te

(allowx untrusted_app_all untrusted_app_all_devpts (ioctl chr_file ((range 0x5401 0x5404) 0x540b (range 0x540e 0x5411) (range 0x5413 0x5414) (range 0x5450 0x5451))))
;;* lme

;;* lmx 155 system/sepolicy/private/untrusted_app_all.te

(neverallowx base_typeattr_248 untrusted_app_all_devpts (ioctl chr_file (0x5412)))
;;* lme

;;* lmx 159 system/sepolicy/private/untrusted_app_all.te

(allow untrusted_app_all debugfs_kcov (file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 159 system/sepolicy/private/untrusted_app_all.te

(allowx untrusted_app_all debugfs_kcov (ioctl file (0x6301 (range 0x6364 0x6365))))
;;* lme

;;* lmx 171 system/sepolicy/private/untrusted_app_all.te

(allow untrusted_app_all virtualizationmanager_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 171 system/sepolicy/private/untrusted_app_all.te

(allow untrusted_app_all untrusted_app_all_virtualizationmanager (process (transition)))
;;* lme

;;* lmx 171 system/sepolicy/private/untrusted_app_all.te

(allow untrusted_app_all_virtualizationmanager virtualizationmanager_exec (file (read getattr map execute open entrypoint)))
;;* lme

;;* lmx 171 system/sepolicy/private/untrusted_app_all.te

(allow untrusted_app_all_virtualizationmanager untrusted_app_all (process (sigchld)))
;;* lme

(dontaudit untrusted_app_all untrusted_app_all_virtualizationmanager (process (noatsecure)))
;;* lmx 171 system/sepolicy/private/untrusted_app_all.te

(allow untrusted_app_all untrusted_app_all_virtualizationmanager (process (siginh rlimitinh)))
;;* lme

(typetransition untrusted_app_all virtualizationmanager_exec process untrusted_app_all_virtualizationmanager)
;;* lmx 171 system/sepolicy/private/untrusted_app_all.te

(allow untrusted_app_all_virtualizationmanager crosvm_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 171 system/sepolicy/private/untrusted_app_all.te

(allow untrusted_app_all_virtualizationmanager untrusted_app_all_virtmgr_crosvm (process (transition)))
;;* lme

;;* lmx 171 system/sepolicy/private/untrusted_app_all.te

(allow untrusted_app_all_virtmgr_crosvm crosvm_exec (file (read getattr map execute open entrypoint)))
;;* lme

;;* lmx 171 system/sepolicy/private/untrusted_app_all.te

(allow untrusted_app_all_virtmgr_crosvm untrusted_app_all_virtualizationmanager (process (sigchld)))
;;* lme

(dontaudit untrusted_app_all_virtualizationmanager untrusted_app_all_virtmgr_crosvm (process (noatsecure)))
;;* lmx 171 system/sepolicy/private/untrusted_app_all.te

(allow untrusted_app_all_virtualizationmanager untrusted_app_all_virtmgr_crosvm (process (siginh rlimitinh)))
;;* lme

(typetransition untrusted_app_all_virtualizationmanager crosvm_exec process untrusted_app_all_virtmgr_crosvm)
;;* lmx 171 system/sepolicy/private/untrusted_app_all.te

(allow untrusted_app_all_virtualizationmanager hal_secretkeeper (memfd_file (read write getattr map)))
;;* lme

;;* lmx 171 system/sepolicy/private/untrusted_app_all.te

(allow hal_secretkeeper untrusted_app_all_virtualizationmanager (memfd_file (read write getattr map)))
;;* lme

;;* lmx 171 system/sepolicy/private/untrusted_app_all.te

(allow untrusted_app_all_virtualizationmanager hal_vm_capabilities (memfd_file (read write getattr map)))
;;* lme

;;* lmx 171 system/sepolicy/private/untrusted_app_all.te

(allow hal_vm_capabilities untrusted_app_all_virtualizationmanager (memfd_file (read write getattr map)))
;;* lme

;;* lmx 171 system/sepolicy/private/untrusted_app_all.te

(allow untrusted_app_all_virtualizationmanager untrusted_app_all (unix_stream_socket (ioctl read write getattr getopt)))
(allow untrusted_app_all_virtmgr_crosvm untrusted_app_all (unix_stream_socket (ioctl read write getattr getopt)))
;;* lme

;;* lmx 171 system/sepolicy/private/untrusted_app_all.te

(allow untrusted_app_all_virtualizationmanager untrusted_app_all (fd (use)))
(allow untrusted_app_all_virtmgr_crosvm untrusted_app_all (fd (use)))
;;* lme

;;* lmx 171 system/sepolicy/private/untrusted_app_all.te

(allow untrusted_app_all untrusted_app_all_virtualizationmanager (fd (use)))
;;* lme

;;* lmx 171 system/sepolicy/private/untrusted_app_all.te

(allow untrusted_app_all_virtualizationmanager untrusted_app_all (fifo_file (ioctl read write getattr)))
(allow untrusted_app_all_virtmgr_crosvm untrusted_app_all (fifo_file (ioctl read write getattr)))
;;* lme

;;* lmx 171 system/sepolicy/private/untrusted_app_all.te

(allow untrusted_app_all untrusted_app_all_virtualizationmanager (vsock_socket (read write getattr getopt)))
;;* lme

;;* lmx 171 system/sepolicy/private/untrusted_app_all.te

(allow untrusted_app_all hypervisor_prop (file (read getattr map open)))
;;* lme

;;* lmx 171 system/sepolicy/private/untrusted_app_all.te

(allow untrusted_app_all virtualizationservice_data_file (file (read getattr)))
;;* lme

;;* lmx 171 system/sepolicy/private/untrusted_app_all.te

(allow untrusted_app_all_virtualizationmanager untrusted_app_all (dir (search)))
;;* lme

;;* lmx 171 system/sepolicy/private/untrusted_app_all.te

(allow untrusted_app_all_virtualizationmanager untrusted_app_all (file (read)))
;;* lme

;;* lmx 171 system/sepolicy/private/untrusted_app_all.te

(allow untrusted_app_all_virtualizationmanager untrusted_app_all (lnk_file (read)))
;;* lme

;;* lmx 171 system/sepolicy/private/untrusted_app_all.te

(allow untrusted_app_all untrusted_app_all_virtmgr_crosvm (process (sigkill)))
;;* lme

;;* lmx 171 system/sepolicy/private/untrusted_app_all.te

(allow untrusted_app_all_virtmgr_crosvm hal_graphics_allocator (memfd_file (read write getattr map)))
;;* lme

;;* lmx 171 system/sepolicy/private/untrusted_app_all.te

(allow hal_graphics_allocator untrusted_app_all_virtmgr_crosvm (memfd_file (read write getattr map)))
;;* lme

;;* lmx 3 system/sepolicy/private/update_engine.te

(allow init update_engine_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 3 system/sepolicy/private/update_engine.te

(allow init update_engine (process (transition)))
;;* lme

;;* lmx 3 system/sepolicy/private/update_engine.te

(allow update_engine update_engine_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init update_engine (process (noatsecure)))
;;* lmx 3 system/sepolicy/private/update_engine.te

(allow init update_engine (process (siginh rlimitinh)))
;;* lme

(typetransition init update_engine_exec process update_engine)
;;* lmx 6 system/sepolicy/private/update_engine.te

(allow update_engine gsi_service (service_manager (find)))
;;* lme

;;* lmx 7 system/sepolicy/private/update_engine.te

(allow update_engine gsid (binder (call transfer)))
;;* lme

;;* lmx 7 system/sepolicy/private/update_engine.te

(allow gsid update_engine (binder (transfer)))
;;* lme

;;* lmx 7 system/sepolicy/private/update_engine.te

(allow update_engine gsid (fd (use)))
;;* lme

;;* lmx 10 system/sepolicy/private/update_engine.te

(allow update_engine property_socket (sock_file (write)))
;;* lme

;;* lmx 10 system/sepolicy/private/update_engine.te

(allow update_engine init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 10 system/sepolicy/private/update_engine.te

(allow update_engine ctl_gsid_prop (property_service (set)))
;;* lme

;;* lmx 10 system/sepolicy/private/update_engine.te

(allow update_engine ctl_gsid_prop (file (read getattr map open)))
;;* lme

;;* lmx 13 system/sepolicy/private/update_engine.te

(allow update_engine property_socket (sock_file (write)))
;;* lme

;;* lmx 13 system/sepolicy/private/update_engine.te

(allow update_engine init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 13 system/sepolicy/private/update_engine.te

(allow update_engine ctl_snapuserd_prop (property_service (set)))
;;* lme

;;* lmx 13 system/sepolicy/private/update_engine.te

(allow update_engine ctl_snapuserd_prop (file (read getattr map open)))
;;* lme

;;* lmx 16 system/sepolicy/private/update_engine.te

(allow update_engine property_socket (sock_file (write)))
;;* lme

;;* lmx 16 system/sepolicy/private/update_engine.te

(allow update_engine init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 16 system/sepolicy/private/update_engine.te

(allow update_engine ota_prop (property_service (set)))
;;* lme

;;* lmx 16 system/sepolicy/private/update_engine.te

(allow update_engine ota_prop (file (read getattr map open)))
;;* lme

;;* lmx 17 system/sepolicy/private/update_engine.te

(allow update_engine ota_build_prop (file (read getattr map open)))
;;* lme

;;* lmx 20 system/sepolicy/private/update_engine.te

(allow update_engine gsid_prop (file (read getattr map open)))
;;* lme

;;* lmx 23 system/sepolicy/private/update_engine.te

(allow update_engine gki_apex_prepostinstall (binder (call transfer)))
;;* lme

;;* lmx 23 system/sepolicy/private/update_engine.te

(allow gki_apex_prepostinstall update_engine (binder (transfer)))
;;* lme

;;* lmx 23 system/sepolicy/private/update_engine.te

(allow update_engine gki_apex_prepostinstall (fd (use)))
;;* lme

;;* lmx 27 system/sepolicy/private/update_engine.te

(allow update_engine system_app (binder (call transfer)))
;;* lme

;;* lmx 27 system/sepolicy/private/update_engine.te

(allow system_app update_engine (binder (transfer)))
;;* lme

;;* lmx 27 system/sepolicy/private/update_engine.te

(allow update_engine system_app (fd (use)))
;;* lme

;;* lmx 30 system/sepolicy/private/update_engine.te

(allow update_engine snapuserd (unix_stream_socket (connectto)))
;;* lme

;;* lmx 31 system/sepolicy/private/update_engine.te

(allow update_engine snapuserd_socket (sock_file (write)))
;;* lme

;;* lmx 32 system/sepolicy/private/update_engine.te

(allow update_engine snapuserd_prop (file (read getattr map open)))
;;* lme

;;* lmx 36 system/sepolicy/private/update_engine.te

(allow update_engine apex_service (service_manager (find)))
;;* lme

;;* lmx 37 system/sepolicy/private/update_engine.te

(allow update_engine apexd (binder (call transfer)))
;;* lme

;;* lmx 37 system/sepolicy/private/update_engine.te

(allow apexd update_engine (binder (transfer)))
;;* lme

;;* lmx 37 system/sepolicy/private/update_engine.te

(allow update_engine apexd (fd (use)))
;;* lme

;;* lmx 40 system/sepolicy/private/update_engine.te

(allow update_engine servicemanager (binder (call transfer)))
;;* lme

;;* lmx 40 system/sepolicy/private/update_engine.te

(allow servicemanager update_engine (binder (call transfer)))
;;* lme

;;* lmx 41 system/sepolicy/private/update_engine.te

(allow update_engine hal_bootctl (memfd_file (read write getattr map)))
;;* lme

;;* lmx 41 system/sepolicy/private/update_engine.te

(allow hal_bootctl update_engine (memfd_file (read write getattr map)))
;;* lme

;;* lmx 46 system/sepolicy/private/update_engine.te

(allow update_engine self (process (setsched)))
;;* lme

;;* lmx 47 system/sepolicy/private/update_engine.te

(allow update_engine self (capability (fowner sys_admin)))
(allow update_engine self (cap_userns (fowner sys_admin)))
;;* lme

(dontaudit update_engine self (capability (fsetid)))
(dontaudit update_engine self (cap_userns (fsetid)))
;;* lmx 54 system/sepolicy/private/update_engine.te

(allow update_engine kmsg_device (chr_file (write getattr lock append map open)))
;;* lme

;;* lmx 55 system/sepolicy/private/update_engine.te

(allow update_engine update_engine_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lme

;;* lmx 56 system/sepolicy/private/update_engine.te

(allow update_engine sysfs_wake_lock (file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 56 system/sepolicy/private/update_engine.te

(allow update_engine self (capability2 (block_suspend)))
(allow update_engine self (cap2_userns (block_suspend)))
;;* lme

;;* lmx 56 system/sepolicy/private/update_engine.te

(allow update_engine system_suspend_server (binder (call transfer)))
;;* lme

;;* lmx 56 system/sepolicy/private/update_engine.te

(allow system_suspend_server update_engine (binder (transfer)))
;;* lme

;;* lmx 56 system/sepolicy/private/update_engine.te

(allow update_engine system_suspend_server (fd (use)))
;;* lme

;;* lmx 56 system/sepolicy/private/update_engine.te

(allow update_engine system_suspend_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 56 system/sepolicy/private/update_engine.te

(allow update_engine hwservicemanager (binder (call transfer)))
;;* lme

;;* lmx 56 system/sepolicy/private/update_engine.te

(allow hwservicemanager update_engine (binder (call transfer)))
;;* lme

;;* lmx 56 system/sepolicy/private/update_engine.te

(allow update_engine hwservicemanager_prop (file (read getattr map open)))
;;* lme

;;* lmx 56 system/sepolicy/private/update_engine.te

(allow update_engine hidl_manager_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 56 system/sepolicy/private/update_engine.te

(allow update_engine hal_system_suspend_service (service_manager (find)))
;;* lme

;;* lmx 56 system/sepolicy/private/update_engine.te

(allow update_engine servicemanager (binder (call transfer)))
;;* lme

;;* lmx 56 system/sepolicy/private/update_engine.te

(allow servicemanager update_engine (binder (call transfer)))
;;* lme

(dontaudit update_engine kernel (process (setsched)))
(dontaudit update_engine self (capability (sys_rawio)))
(dontaudit update_engine self (cap_userns (sys_rawio)))
;;* lmx 63 system/sepolicy/private/update_engine.te

(allow update_engine update_engine_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 64 system/sepolicy/private/update_engine.te

(allow update_engine update_engine_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 67 system/sepolicy/private/update_engine.te

(allow update_engine update_engine_log_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 68 system/sepolicy/private/update_engine.te

(allow update_engine update_engine_log_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 71 system/sepolicy/private/update_engine.te

(allow update_engine servicemanager (binder (call transfer)))
;;* lme

;;* lmx 71 system/sepolicy/private/update_engine.te

(allow servicemanager update_engine (binder (call transfer)))
;;* lme

;;* lmx 72 system/sepolicy/private/update_engine.te

(allow update_engine update_engine_service (service_manager (add find)))
;;* lme

;;* lmx 72 system/sepolicy/private/update_engine.te

(neverallow base_typeattr_1157 update_engine_service (service_manager (add)))
;;* lme

;;* lmx 72 system/sepolicy/private/update_engine.te

(allow update_engine su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 73 system/sepolicy/private/update_engine.te

(allow update_engine update_engine_stable_service (service_manager (add find)))
;;* lme

;;* lmx 73 system/sepolicy/private/update_engine.te

(neverallow base_typeattr_1157 update_engine_stable_service (service_manager (add)))
;;* lme

;;* lmx 73 system/sepolicy/private/update_engine.te

(allow update_engine su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 76 system/sepolicy/private/update_engine.te

(allow update_engine priv_app_all (binder (call transfer)))
;;* lme

;;* lmx 76 system/sepolicy/private/update_engine.te

(allow priv_app_all update_engine (binder (transfer)))
;;* lme

;;* lmx 76 system/sepolicy/private/update_engine.te

(allow update_engine priv_app_all (fd (use)))
;;* lme

(auditallow update_engine priv_app_all (binder (call transfer)))
(auditallow priv_app_all update_engine (binder (transfer)))
(auditallow update_engine priv_app_all (fd (use)))
;;* lmx 84 system/sepolicy/private/update_engine.te

(allow update_engine gmscore_app (binder (call transfer)))
;;* lme

;;* lmx 84 system/sepolicy/private/update_engine.te

(allow gmscore_app update_engine (binder (transfer)))
;;* lme

;;* lmx 84 system/sepolicy/private/update_engine.te

(allow update_engine gmscore_app (fd (use)))
;;* lme

;;* lmx 87 system/sepolicy/private/update_engine.te

(allow update_engine system_server (binder (call transfer)))
;;* lme

;;* lmx 87 system/sepolicy/private/update_engine.te

(allow system_server update_engine (binder (transfer)))
;;* lme

;;* lmx 87 system/sepolicy/private/update_engine.te

(allow update_engine system_server (fd (use)))
;;* lme

;;* lmx 90 system/sepolicy/private/update_engine.te

(allow update_engine ota_package_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 91 system/sepolicy/private/update_engine.te

(allow update_engine ota_package_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 94 system/sepolicy/private/update_engine.te

(allow update_engine hal_bootctl (memfd_file (read write getattr map)))
;;* lme

;;* lmx 94 system/sepolicy/private/update_engine.te

(allow hal_bootctl update_engine (memfd_file (read write getattr map)))
;;* lme

;;* lmx 97 system/sepolicy/private/update_engine.te

(allow update_engine proc_misc (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 100 system/sepolicy/private/update_engine.te

(allow update_engine system_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 106 system/sepolicy/private/update_engine.te

(allow update_engine gsi_metadata_file_type (dir (search)))
(allow update_engine metadata_file (dir (search)))
;;* lme

;;* lmx 106 system/sepolicy/private/update_engine.te

(allow update_engine gsi_public_metadata_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 106 system/sepolicy/private/update_engine.te

(allow update_engine proc_bootconfig (file (ioctl read getattr lock map open watch watch_reads)))
(allow update_engine proc_cmdline (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 110 system/sepolicy/private/update_engine.te

(allow update_engine snapshotctl_log_data_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
;;* lme

;;* lmx 110 system/sepolicy/private/update_engine.te

(allow update_engine snapshotctl_log_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 117 system/sepolicy/private/update_engine.te

(allow update_engine proc_filesystems (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 119 system/sepolicy/private/update_engine.te

(allow update_engine vendor_boot_ota_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 120 system/sepolicy/private/update_engine.te

(allow update_engine vendor_boot_ota_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 9 system/sepolicy/private/update_engine_common.te

(allow update_engine_common postinstall_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 9 system/sepolicy/private/update_engine_common.te

(allow update_engine_common postinstall (process (transition)))
;;* lme

;;* lmx 9 system/sepolicy/private/update_engine_common.te

(allow postinstall postinstall_exec (file (read getattr map execute open entrypoint)))
;;* lme

;;* lmx 9 system/sepolicy/private/update_engine_common.te

(allow postinstall update_engine_common (process (sigchld)))
;;* lme

(dontaudit update_engine_common postinstall (process (noatsecure)))
;;* lmx 9 system/sepolicy/private/update_engine_common.te

(allow update_engine_common postinstall (process (siginh rlimitinh)))
;;* lme

(typetransition update_engine_common postinstall_exec process postinstall)
;;* lmx 14 system/sepolicy/private/update_engine_common.te

(allow update_engine_common postinstall_file (file (read getattr map execute open)))
;;* lme

;;* lmx 14 system/sepolicy/private/update_engine_common.te

(allow update_engine_common postinstall (process (transition)))
;;* lme

;;* lmx 14 system/sepolicy/private/update_engine_common.te

(allow postinstall postinstall_file (file (read getattr map execute open entrypoint)))
;;* lme

;;* lmx 14 system/sepolicy/private/update_engine_common.te

(allow postinstall update_engine_common (process (sigchld)))
;;* lme

(dontaudit update_engine_common postinstall (process (noatsecure)))
;;* lmx 14 system/sepolicy/private/update_engine_common.te

(allow update_engine_common postinstall (process (siginh rlimitinh)))
;;* lme

(typetransition update_engine_common postinstall_file process postinstall)
;;* lmx 17 system/sepolicy/private/update_engine_common.te

(allow update_engine_common block_device (dir (search)))
;;* lme

;;* lmx 20 system/sepolicy/private/update_engine_common.te

(allow update_engine_common boot_block_device (blk_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 21 system/sepolicy/private/update_engine_common.te

(allow update_engine_common system_block_device (blk_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 33 system/sepolicy/private/update_engine_common.te

(allowx update_engine_common dev_type (ioctl blk_file ((range 0x125d 0x125e) 0x1277 (range 0x127c 0x127d) 0x127f)))
;;* lme

;;* lmx 38 system/sepolicy/private/update_engine_common.te

(allow update_engine_common misc_block_device (blk_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 41 system/sepolicy/private/update_engine_common.te

(allow update_engine_common rootfs (dir (getattr)))
;;* lme

;;* lmx 42 system/sepolicy/private/update_engine_common.te

(allow update_engine_common rootfs (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 46 system/sepolicy/private/update_engine_common.te

(allow update_engine_common postinstall_mnt_dir (dir (getattr mounton search)))
;;* lme

;;* lmx 47 system/sepolicy/private/update_engine_common.te

(allow update_engine_common postinstall_file (filesystem (mount unmount relabelfrom relabelto)))
;;* lme

;;* lmx 48 system/sepolicy/private/update_engine_common.te

(allow update_engine_common labeledfs (filesystem (mount unmount relabelfrom)))
;;* lme

;;* lmx 51 system/sepolicy/private/update_engine_common.te

(allow update_engine_common postinstall_file (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lme

;;* lmx 52 system/sepolicy/private/update_engine_common.te

(allow update_engine_common postinstall_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 53 system/sepolicy/private/update_engine_common.te

(allow update_engine_common postinstall_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 56 system/sepolicy/private/update_engine_common.te

(allow update_engine_common cache_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 56 system/sepolicy/private/update_engine_common.te

(allow update_engine_common cache_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow update_engine_common cache_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 60 system/sepolicy/private/update_engine_common.te

(allow update_engine_common shell_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lme

;;* lmx 63 system/sepolicy/private/update_engine_common.te

(allow update_engine_common postinstall (process (sigkill sigstop signal)))
;;* lme

;;* lmx 66 system/sepolicy/private/update_engine_common.te

(allow update_engine_common proc_cmdline (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 69 system/sepolicy/private/update_engine_common.te

(allow update_engine_common sysfs_dt_firmware_android (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 69 system/sepolicy/private/update_engine_common.te

(allow update_engine_common sysfs_dt_firmware_android (file (ioctl read getattr lock map open watch watch_reads)))
(allow update_engine_common sysfs_dt_firmware_android (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 72 system/sepolicy/private/update_engine_common.te

(allow update_engine_common sysfs_dm (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 72 system/sepolicy/private/update_engine_common.te

(allow update_engine_common sysfs_dm (file (ioctl read getattr lock map open watch watch_reads)))
(allow update_engine_common sysfs_dm (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 75 system/sepolicy/private/update_engine_common.te

(allow update_engine_common sysfs (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 76 system/sepolicy/private/update_engine_common.te

(allow update_engine_common sysfs_fs_f2fs (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 79 system/sepolicy/private/update_engine_common.te

(allow update_engine_common dm_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 82 system/sepolicy/private/update_engine_common.te

(allow update_engine_common dm_device (blk_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 86 system/sepolicy/private/update_engine_common.te

(allow update_engine_common dm_user_device (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 87 system/sepolicy/private/update_engine_common.te

(allow update_engine_common dm_user_device (chr_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 91 system/sepolicy/private/update_engine_common.te

(allow update_engine_common device (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 94 system/sepolicy/private/update_engine_common.te

(allow update_engine_common super_block_device_type (blk_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 97 system/sepolicy/private/update_engine_common.te

(allowx update_engine_common super_block_device_type (ioctl blk_file (0x1278 0x127a)))
;;* lme

;;* lmx 100 system/sepolicy/private/update_engine_common.te

(allow update_engine_common block_device (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 103 system/sepolicy/private/update_engine_common.te

(allow update_engine_common statsdw_socket (sock_file (write)))
;;* lme

;;* lmx 103 system/sepolicy/private/update_engine_common.te

(allow update_engine_common statsd (unix_dgram_socket (sendto)))
;;* lme

;;* lmx 106 system/sepolicy/private/update_engine_common.te

(allow update_engine_common virtual_ab_prop (file (read getattr map open)))
;;* lme

;;* lmx 109 system/sepolicy/private/update_engine_common.te

(allow update_engine_common ab_update_gki_prop (file (read getattr map open)))
;;* lme

;;* lmx 110 system/sepolicy/private/update_engine_common.te

(allow update_engine_common build_bootimage_prop (file (read getattr map open)))
;;* lme

;;* lmx 113 system/sepolicy/private/update_engine_common.te

(allow update_engine_common metadata_file (dir (search)))
;;* lme

;;* lmx 114 system/sepolicy/private/update_engine_common.te

(allow update_engine_common ota_metadata_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search rmdir)))
;;* lme

;;* lmx 115 system/sepolicy/private/update_engine_common.te

(allow update_engine_common ota_metadata_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 3 system/sepolicy/private/update_verifier.te

(allow init update_verifier_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 3 system/sepolicy/private/update_verifier.te

(allow init update_verifier (process (transition)))
;;* lme

;;* lmx 3 system/sepolicy/private/update_verifier.te

(allow update_verifier update_verifier_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init update_verifier (process (noatsecure)))
;;* lmx 3 system/sepolicy/private/update_verifier.te

(allow init update_verifier (process (siginh rlimitinh)))
;;* lme

(typetransition init update_verifier_exec process update_verifier)
;;* lmx 6 system/sepolicy/private/update_verifier.te

(allow update_verifier property_socket (sock_file (write)))
;;* lme

;;* lmx 6 system/sepolicy/private/update_verifier.te

(allow update_verifier init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 6 system/sepolicy/private/update_verifier.te

(allow update_verifier powerctl_prop (property_service (set)))
;;* lme

;;* lmx 6 system/sepolicy/private/update_verifier.te

(allow update_verifier powerctl_prop (file (read getattr map open)))
;;* lme

;;* lmx 9 system/sepolicy/private/update_verifier.te

(allow update_verifier property_socket (sock_file (write)))
;;* lme

;;* lmx 9 system/sepolicy/private/update_verifier.te

(allow update_verifier init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 9 system/sepolicy/private/update_verifier.te

(allow update_verifier ota_prop (property_service (set)))
;;* lme

;;* lmx 9 system/sepolicy/private/update_verifier.te

(allow update_verifier ota_prop (file (read getattr map open)))
;;* lme

;;* lmx 12 system/sepolicy/private/update_verifier.te

(allow update_verifier snapuserd_socket (sock_file (write)))
;;* lme

;;* lmx 13 system/sepolicy/private/update_verifier.te

(allow update_verifier snapuserd (unix_stream_socket (connectto)))
;;* lme

;;* lmx 16 system/sepolicy/private/update_verifier.te

(allow update_verifier virtual_ab_prop (file (read getattr map open)))
;;* lme

;;* lmx 19 system/sepolicy/private/update_verifier.te

(allow update_verifier block_device (dir (search)))
;;* lme

;;* lmx 22 system/sepolicy/private/update_verifier.te

(allow update_verifier ota_package_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 23 system/sepolicy/private/update_verifier.te

(allow update_verifier ota_package_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 26 system/sepolicy/private/update_verifier.te

(allow update_verifier sysfs (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 31 system/sepolicy/private/update_verifier.te

(allow update_verifier sysfs_dm (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 32 system/sepolicy/private/update_verifier.te

(allow update_verifier sysfs_dm (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 35 system/sepolicy/private/update_verifier.te

(allow update_verifier dm_device (blk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 38 system/sepolicy/private/update_verifier.te

(allow update_verifier kmsg_device (chr_file (write getattr lock append map open)))
;;* lme

;;* lmx 41 system/sepolicy/private/update_verifier.te

(allow update_verifier hal_bootctl (memfd_file (read write getattr map)))
;;* lme

;;* lmx 41 system/sepolicy/private/update_verifier.te

(allow hal_bootctl update_verifier (memfd_file (read write getattr map)))
;;* lme

;;* lmx 44 system/sepolicy/private/update_verifier.te

(allow update_verifier vold_service (service_manager (find)))
;;* lme

;;* lmx 45 system/sepolicy/private/update_verifier.te

(allow update_verifier servicemanager (binder (call transfer)))
;;* lme

;;* lmx 45 system/sepolicy/private/update_verifier.te

(allow servicemanager update_verifier (binder (transfer)))
;;* lme

;;* lmx 45 system/sepolicy/private/update_verifier.te

(allow update_verifier servicemanager (fd (use)))
;;* lme

;;* lmx 46 system/sepolicy/private/update_verifier.te

(allow update_verifier vold (binder (call transfer)))
;;* lme

;;* lmx 46 system/sepolicy/private/update_verifier.te

(allow vold update_verifier (binder (transfer)))
;;* lme

;;* lmx 46 system/sepolicy/private/update_verifier.te

(allow update_verifier vold (fd (use)))
;;* lme

;;* lmx 8 system/sepolicy/private/uprobestats.te

(allow init uprobestats_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 8 system/sepolicy/private/uprobestats.te

(allow init uprobestats (process (transition)))
;;* lme

;;* lmx 8 system/sepolicy/private/uprobestats.te

(allow uprobestats uprobestats_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init uprobestats (process (noatsecure)))
;;* lmx 8 system/sepolicy/private/uprobestats.te

(allow init uprobestats (process (siginh rlimitinh)))
;;* lme

(typetransition init uprobestats_exec process uprobestats)
;;* lmx 10 system/sepolicy/private/uprobestats.te

(allow uprobestats fs_bpf_uprobestats (file (read write)))
;;* lme

;;* lmx 11 system/sepolicy/private/uprobestats.te

(allow uprobestats fs_bpf_uprobestats (dir (search)))
;;* lme

;;* lmx 12 system/sepolicy/private/uprobestats.te

(allow uprobestats bpfloader (bpf (map_read map_write prog_run)))
;;* lme

;;* lmx 14 system/sepolicy/private/uprobestats.te

(allow uprobestats self (capability2 (perfmon)))
;;* lme

;;* lmx 16 system/sepolicy/private/uprobestats.te

(allow uprobestats self (capability (sys_admin)))
(allow uprobestats self (cap_userns (sys_admin)))
;;* lme

;;* lmx 17 system/sepolicy/private/uprobestats.te

(allow uprobestats self (perf_event (open cpu write)))
;;* lme

;;* lmx 18 system/sepolicy/private/uprobestats.te

(allow uprobestats sysfs_uprobe (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 19 system/sepolicy/private/uprobestats.te

(allow uprobestats sysfs_uprobe (dir (search)))
;;* lme

;;* lmx 21 system/sepolicy/private/uprobestats.te

(allow uprobestats apex_module_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
(allow uprobestats apex_art_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 22 system/sepolicy/private/uprobestats.te

(allow uprobestats apex_module_data_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow uprobestats apex_art_data_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 25 system/sepolicy/private/uprobestats.te

(allow uprobestats apk_data_file (dir (search)))
(allow uprobestats dalvikcache_data_file (dir (search)))
;;* lme

;;* lmx 26 system/sepolicy/private/uprobestats.te

(allow uprobestats dalvikcache_data_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 28 system/sepolicy/private/uprobestats.te

(allow uprobestats packages_list_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 31 system/sepolicy/private/uprobestats.te

(allow uprobestats system_file (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lme

;;* lmx 34 system/sepolicy/private/uprobestats.te

(allow uprobestats statsdw_socket (sock_file (write)))
;;* lme

;;* lmx 34 system/sepolicy/private/uprobestats.te

(allow uprobestats statsd (unix_dgram_socket (sendto)))
;;* lme

;;* lmx 37 system/sepolicy/private/uprobestats.te

(allow uprobestats servicemanager (binder (call transfer)))
;;* lme

;;* lmx 37 system/sepolicy/private/uprobestats.te

(allow servicemanager uprobestats (binder (call transfer)))
;;* lme

;;* lmx 38 system/sepolicy/private/uprobestats.te

(allow uprobestats activity_service (service_manager (find)))
;;* lme

;;* lmx 39 system/sepolicy/private/uprobestats.te

(allow uprobestats dynamic_instrumentation_service (service_manager (find)))
;;* lme

;;* lmx 40 system/sepolicy/private/uprobestats.te

(allow uprobestats uprobestats_bridge_service (service_manager (find)))
;;* lme

;;* lmx 41 system/sepolicy/private/uprobestats.te

(allow uprobestats system_server (binder (call transfer)))
;;* lme

;;* lmx 41 system/sepolicy/private/uprobestats.te

(allow system_server uprobestats (binder (transfer)))
;;* lme

;;* lmx 41 system/sepolicy/private/uprobestats.te

(allow uprobestats system_server (fd (use)))
;;* lme

;;* lmx 44 system/sepolicy/private/uprobestats.te

(allow uprobestats package_native_service (service_manager (find)))
;;* lme

;;* lmx 47 system/sepolicy/private/uprobestats.te

(allow uprobestats base_typeattr_292 (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 47 system/sepolicy/private/uprobestats.te

(allow uprobestats base_typeattr_292 (file (ioctl read getattr lock map open watch watch_reads)))
(allow uprobestats base_typeattr_292 (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 50 system/sepolicy/private/uprobestats.te

(allow uprobestats uprobestats_configs_data_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
;;* lme

;;* lmx 51 system/sepolicy/private/uprobestats.te

(allow uprobestats uprobestats_configs_data_file (file (ioctl read getattr lock map unlink open watch watch_reads)))
;;* lme

;;* lmx 54 system/sepolicy/private/uprobestats.te

(allow uprobestats uprobestats_service (service_manager (add find)))
;;* lme

;;* lmx 54 system/sepolicy/private/uprobestats.te

(neverallow base_typeattr_1158 uprobestats_service (service_manager (add)))
;;* lme

;;* lmx 54 system/sepolicy/private/uprobestats.te

(allow uprobestats su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 10 system/sepolicy/private/usbauthservice.te

(allow init usbauthservice_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 10 system/sepolicy/private/usbauthservice.te

(allow init usbauthservice (process (transition)))
;;* lme

;;* lmx 10 system/sepolicy/private/usbauthservice.te

(allow usbauthservice usbauthservice_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init usbauthservice (process (noatsecure)))
;;* lmx 10 system/sepolicy/private/usbauthservice.te

(allow init usbauthservice (process (siginh rlimitinh)))
;;* lme

(typetransition init usbauthservice_exec process usbauthservice)
;;* lmx 12 system/sepolicy/private/usbauthservice.te

(allow usbauthservice servicemanager (binder (call transfer)))
;;* lme

;;* lmx 12 system/sepolicy/private/usbauthservice.te

(allow servicemanager usbauthservice (binder (call transfer)))
;;* lme

;;* lmx 14 system/sepolicy/private/usbauthservice.te

(allow usbauthservice usb_auth_service (service_manager (add find)))
;;* lme

;;* lmx 14 system/sepolicy/private/usbauthservice.te

(neverallow base_typeattr_1159 usb_auth_service (service_manager (add)))
;;* lme

;;* lmx 14 system/sepolicy/private/usbauthservice.te

(allow usbauthservice su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 18 system/sepolicy/private/usbauthservice.te

(allow usbauthservice sysfs_usb (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 18 system/sepolicy/private/usbauthservice.te

(allow usbauthservice sysfs_usb (file (ioctl read getattr lock map open watch watch_reads)))
(allow usbauthservice sysfs_usb (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 19 system/sepolicy/private/usbauthservice.te

(allow usbauthservice sysfs_usb (file (write lock append map open)))
;;* lme

;;* lmx 21 system/sepolicy/private/usbauthservice.te

(allow usbauthservice sysfs_usbcore (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 21 system/sepolicy/private/usbauthservice.te

(allow usbauthservice sysfs_usbcore (file (ioctl read getattr lock map open watch watch_reads)))
(allow usbauthservice sysfs_usbcore (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 22 system/sepolicy/private/usbauthservice.te

(allow usbauthservice sysfs_usbcore (file (write lock append map open)))
;;* lme

;;* lmx 25 system/sepolicy/private/usbauthservice.te

(allow usbauthservice device (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 28 system/sepolicy/private/usbauthservice.te

(allow usbauthservice usb_device (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 29 system/sepolicy/private/usbauthservice.te

(allow usbauthservice usb_device (chr_file (read write getattr open)))
;;* lme

;;* lmx 32 system/sepolicy/private/usbauthservice.te

(allow usbauthservice proc_mounts (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 35 system/sepolicy/private/usbauthservice.te

(allow usbauthservice sysfs_dm (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 35 system/sepolicy/private/usbauthservice.te

(allow usbauthservice sysfs_dm (file (ioctl read getattr lock map open watch watch_reads)))
(allow usbauthservice sysfs_dm (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 36 system/sepolicy/private/usbauthservice.te

(allow usbauthservice sysfs_block (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 36 system/sepolicy/private/usbauthservice.te

(allow usbauthservice sysfs_block (file (ioctl read getattr lock map open watch watch_reads)))
(allow usbauthservice sysfs_block (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 3 system/sepolicy/private/usbd.te

(allow init usbd_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 3 system/sepolicy/private/usbd.te

(allow init usbd (process (transition)))
;;* lme

;;* lmx 3 system/sepolicy/private/usbd.te

(allow usbd usbd_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init usbd (process (noatsecure)))
;;* lmx 3 system/sepolicy/private/usbd.te

(allow init usbd (process (siginh rlimitinh)))
;;* lme

(typetransition init usbd_exec process usbd)
;;* lmx 6 system/sepolicy/private/usbd.te

(allow usbd hal_usb_gadget (memfd_file (read write getattr map)))
;;* lme

;;* lmx 6 system/sepolicy/private/usbd.te

(allow hal_usb_gadget usbd (memfd_file (read write getattr map)))
;;* lme

;;* lmx 9 system/sepolicy/private/usbd.te

(allow usbd system_prop (file (read getattr map open)))
;;* lme

;;* lmx 12 system/sepolicy/private/usbd.te

(allow usbd usb_userspace_aoa_enabled_prop (file (read getattr map open)))
;;* lme

;;* lmx 15 system/sepolicy/private/usbd.te

(allow usbd property_socket (sock_file (write)))
;;* lme

;;* lmx 15 system/sepolicy/private/usbd.te

(allow usbd init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 15 system/sepolicy/private/usbd.te

(allow usbd ctl_default_prop (property_service (set)))
;;* lme

;;* lmx 15 system/sepolicy/private/usbd.te

(allow usbd ctl_default_prop (file (read getattr map open)))
;;* lme

;;* lmx 18 system/sepolicy/private/usbd.te

(allow usbd property_socket (sock_file (write)))
;;* lme

;;* lmx 18 system/sepolicy/private/usbd.te

(allow usbd init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 18 system/sepolicy/private/usbd.te

(allow usbd ctl_adbd_prop (property_service (set)))
;;* lme

;;* lmx 18 system/sepolicy/private/usbd.te

(allow usbd ctl_adbd_prop (file (read getattr map open)))
;;* lme

;;* lmx 20 system/sepolicy/private/usbd.te

(allow usbd servicemanager (binder (call transfer)))
;;* lme

;;* lmx 20 system/sepolicy/private/usbd.te

(allow servicemanager usbd (binder (transfer)))
;;* lme

;;* lmx 20 system/sepolicy/private/usbd.te

(allow usbd servicemanager (fd (use)))
;;* lme

;;* lmx 24 system/sepolicy/private/userdata_alias_remove.te

(allow init userdata_alias_remove_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 24 system/sepolicy/private/userdata_alias_remove.te

(allow init userdata_alias_remove (process (transition)))
;;* lme

;;* lmx 24 system/sepolicy/private/userdata_alias_remove.te

(allow userdata_alias_remove userdata_alias_remove_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init userdata_alias_remove (process (noatsecure)))
;;* lmx 24 system/sepolicy/private/userdata_alias_remove.te

(allow init userdata_alias_remove (process (siginh rlimitinh)))
;;* lme

(typetransition init userdata_alias_remove_exec process userdata_alias_remove)
;;* lmx 26 system/sepolicy/private/userdata_alias_remove.te

(allow userdata_alias_remove exp_partition_data_file (file (getattr unlink)))
;;* lme

;;* lmx 27 system/sepolicy/private/userdata_alias_remove.te

(allow userdata_alias_remove system_data_root_file (dir (write remove_name)))
;;* lme

;;* lmx 28 system/sepolicy/private/userdata_alias_remove.te

(allow userdata_alias_remove proc_bootconfig (file (read getattr open)))
;;* lme

;;* lmx 29 system/sepolicy/private/userdata_alias_remove.te

(allow userdata_alias_remove proc_cmdline (file (read getattr open)))
;;* lme

;;* lmx 30 system/sepolicy/private/userdata_alias_remove.te

(allow userdata_alias_remove block_device (dir (search)))
;;* lme

;;* lmx 31 system/sepolicy/private/userdata_alias_remove.te

(allow userdata_alias_remove gsi_metadata_file (dir (search)))
;;* lme

;;* lmx 34 system/sepolicy/private/userdata_alias_remove.te

(allow userdata_alias_remove userdata_alias_remove_prop (file (read getattr map open)))
;;* lme

;;* lmx 1 system/sepolicy/private/userdata_sysdev.te

(allow userdata_sysdev sysfs (filesystem (associate)))
;;* lme

;;* lmx 3 system/sepolicy/private/vdc.te

(allow init vdc_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 3 system/sepolicy/private/vdc.te

(allow init vdc (process (transition)))
;;* lme

;;* lmx 3 system/sepolicy/private/vdc.te

(allow vdc vdc_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init vdc (process (noatsecure)))
;;* lmx 3 system/sepolicy/private/vdc.te

(allow init vdc (process (siginh rlimitinh)))
;;* lme

(typetransition init vdc_exec process vdc)
;;* lmx 6 system/sepolicy/private/vdc.te

(allow vdc vehicle_binding_util (fd (use)))
;;* lme

;;* lmx 9 system/sepolicy/private/vdc.te

(allow vdc devpts (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 12 system/sepolicy/private/vdc.te

(allow vdc kmsg_device (chr_file (write getattr lock append map open)))
;;* lme

;;* lmx 15 system/sepolicy/private/vdc.te

(allow vdc servicemanager (binder (call transfer)))
;;* lme

;;* lmx 15 system/sepolicy/private/vdc.te

(allow servicemanager vdc (binder (call transfer)))
;;* lme

;;* lmx 16 system/sepolicy/private/vdc.te

(allow vdc vold (binder (call transfer)))
;;* lme

;;* lmx 16 system/sepolicy/private/vdc.te

(allow vold vdc (binder (transfer)))
;;* lme

;;* lmx 16 system/sepolicy/private/vdc.te

(allow vdc vold (fd (use)))
;;* lme

;;* lmx 17 system/sepolicy/private/vdc.te

(allow vdc vold_service (service_manager (find)))
;;* lme

;;* lmx 6 system/sepolicy/private/vehicle_binding_util.te

(allow init vehicle_binding_util_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 6 system/sepolicy/private/vehicle_binding_util.te

(allow init vehicle_binding_util (process (transition)))
;;* lme

;;* lmx 6 system/sepolicy/private/vehicle_binding_util.te

(allow vehicle_binding_util vehicle_binding_util_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init vehicle_binding_util (process (noatsecure)))
;;* lmx 6 system/sepolicy/private/vehicle_binding_util.te

(allow init vehicle_binding_util (process (siginh rlimitinh)))
;;* lme

(typetransition init vehicle_binding_util_exec process vehicle_binding_util)
;;* lmx 9 system/sepolicy/private/vehicle_binding_util.te

(allow vehicle_binding_util kmsg_device (chr_file (write getattr lock append map open)))
;;* lme

;;* lmx 12 system/sepolicy/private/vehicle_binding_util.te

(allow vehicle_binding_util hwservicemanager (binder (call transfer)))
;;* lme

;;* lmx 12 system/sepolicy/private/vehicle_binding_util.te

(allow hwservicemanager vehicle_binding_util (binder (call transfer)))
;;* lme

;;* lmx 14 system/sepolicy/private/vehicle_binding_util.te

(allow vehicle_binding_util servicemanager (binder (call transfer)))
;;* lme

;;* lmx 14 system/sepolicy/private/vehicle_binding_util.te

(allow servicemanager vehicle_binding_util (binder (call transfer)))
;;* lme

;;* lmx 15 system/sepolicy/private/vehicle_binding_util.te

(allow vehicle_binding_util hal_vehicle (memfd_file (read write getattr map)))
;;* lme

;;* lmx 15 system/sepolicy/private/vehicle_binding_util.te

(allow hal_vehicle vehicle_binding_util (memfd_file (read write getattr map)))
;;* lme

;;* lmx 18 system/sepolicy/private/vehicle_binding_util.te

(allow vehicle_binding_util vdc_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 18 system/sepolicy/private/vehicle_binding_util.te

(allow vehicle_binding_util vdc (process (transition)))
;;* lme

;;* lmx 18 system/sepolicy/private/vehicle_binding_util.te

(allow vdc vdc_exec (file (read getattr map execute open entrypoint)))
;;* lme

;;* lmx 18 system/sepolicy/private/vehicle_binding_util.te

(allow vdc vehicle_binding_util (process (sigchld)))
;;* lme

(dontaudit vehicle_binding_util vdc (process (noatsecure)))
;;* lmx 18 system/sepolicy/private/vehicle_binding_util.te

(allow vehicle_binding_util vdc (process (siginh rlimitinh)))
;;* lme

(typetransition vehicle_binding_util vdc_exec process vdc)
;;* lmx 21 system/sepolicy/private/vehicle_binding_util.te

(allow vehicle_binding_util devpts (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

(dontaudit vendor_init sysfs (dir (write)))
;;* lmx 7 system/sepolicy/private/vendor_init.te

(allow vendor_init system_data_root_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
;;* lme

;;* lmx 10 system/sepolicy/private/vendor_init.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 10 system/sepolicy/private/vendor_init.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 10 system/sepolicy/private/vendor_init.te

(allow vendor_init adbd_config_prop (property_service (set)))
;;* lme

;;* lmx 10 system/sepolicy/private/vendor_init.te

(allow vendor_init adbd_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 13 system/sepolicy/private/vendor_init.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 13 system/sepolicy/private/vendor_init.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 13 system/sepolicy/private/vendor_init.te

(allow vendor_init remote_prov_prop (property_service (set)))
;;* lme

;;* lmx 13 system/sepolicy/private/vendor_init.te

(allow vendor_init remote_prov_prop (file (read getattr map open)))
;;* lme

;;* lmx 16 system/sepolicy/private/vendor_init.te

(allow vendor_init device_config_virtualization_framework_native_prop (file (read getattr map open)))
;;* lme

;;* lmx 19 system/sepolicy/private/vendor_init.te

(allow vendor_init apex_ready_prop (file (read getattr map open)))
;;* lme

;;* lmx 23 system/sepolicy/private/vendor_init.te

(allow vendor_init fstype_prop (file (read getattr map open)))
;;* lme

;;* lmx 33 system/sepolicy/private/vendor_init.te

(allow vendor_init base_typeattr_1160 (chr_file (setattr)))
;;* lme

;;* lmx 36 system/sepolicy/private/vendor_init.te

(allow vendor_init init (unix_stream_socket (read write)))
;;* lme

;;* lmx 39 system/sepolicy/private/vendor_init.te

(allow vendor_init kmsg_device (chr_file (write getattr open)))
;;* lme

;;* lmx 42 system/sepolicy/private/vendor_init.te

(allow vendor_init device (dir (mounton)))
;;* lme

;;* lmx 45 system/sepolicy/private/vendor_init.te

(allow vendor_init rootfs (lnk_file (create unlink)))
;;* lme

;;* lmx 48 system/sepolicy/private/vendor_init.te

(allow vendor_init cgroup (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 49 system/sepolicy/private/vendor_init.te

(allow vendor_init cgroup (file (write lock append map open)))
;;* lme

;;* lmx 50 system/sepolicy/private/vendor_init.te

(allow vendor_init cgroup_v2 (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 51 system/sepolicy/private/vendor_init.te

(allow vendor_init cgroup_v2 (file (write lock append map open)))
;;* lme

;;* lmx 54 system/sepolicy/private/vendor_init.te

(allow vendor_init configfs (dir (mounton)))
;;* lme

;;* lmx 55 system/sepolicy/private/vendor_init.te

(allow vendor_init configfs (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 56 system/sepolicy/private/vendor_init.te

(allow vendor_init configfs (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow vendor_init configfs (lnk_file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 59 system/sepolicy/private/vendor_init.te

(allow vendor_init self (capability (dac_override dac_read_search)))
(allow vendor_init self (cap_userns (dac_override dac_read_search)))
;;* lme

;;* lmx 66 system/sepolicy/private/vendor_init.te

(allow vendor_init self (capability (chown fowner fsetid)))
(allow vendor_init self (cap_userns (chown fowner fsetid)))
;;* lme

;;* lmx 69 system/sepolicy/private/vendor_init.te

(allow vendor_init unencrypted_data_file (dir (search)))
;;* lme

;;* lmx 70 system/sepolicy/private/vendor_init.te

(allow vendor_init unencrypted_data_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 76 system/sepolicy/private/vendor_init.te

(allowx vendor_init data_file_type (ioctl dir (0x6613 0x6615)))
;;* lme

;;* lmx 78 system/sepolicy/private/vendor_init.te

(allow vendor_init system_data_file (dir (getattr)))
;;* lme

;;* lmx 99 system/sepolicy/private/vendor_init.te

(allow vendor_init base_typeattr_1161 (dir (ioctl read write create getattr setattr relabelfrom open add_name remove_name search rmdir)))
;;* lme

;;* lmx 101 system/sepolicy/private/vendor_init.te

(allow vendor_init unlabeled (file (getattr relabelfrom)))
(allow vendor_init unlabeled (dir (getattr relabelfrom)))
(allow vendor_init unlabeled (lnk_file (getattr relabelfrom)))
(allow vendor_init unlabeled (sock_file (getattr relabelfrom)))
(allow vendor_init unlabeled (fifo_file (getattr relabelfrom)))
;;* lme

;;* lmx 126 system/sepolicy/private/vendor_init.te

(allow vendor_init base_typeattr_1162 (file (read write create getattr setattr relabelfrom map unlink open)))
;;* lme

;;* lmx 145 system/sepolicy/private/vendor_init.te

(allow vendor_init base_typeattr_1163 (sock_file (read create getattr setattr relabelfrom unlink open)))
(allow vendor_init base_typeattr_1163 (fifo_file (read create getattr setattr relabelfrom unlink open)))
;;* lme

;;* lmx 165 system/sepolicy/private/vendor_init.te

(allow vendor_init base_typeattr_1164 (lnk_file (create getattr setattr relabelfrom unlink)))
;;* lme

;;* lmx 184 system/sepolicy/private/vendor_init.te

(allow vendor_init base_typeattr_1165 (file (relabelto)))
(allow vendor_init base_typeattr_1165 (dir (relabelto)))
(allow vendor_init base_typeattr_1165 (lnk_file (relabelto)))
(allow vendor_init base_typeattr_1165 (chr_file (relabelto)))
(allow vendor_init base_typeattr_1165 (blk_file (relabelto)))
(allow vendor_init base_typeattr_1165 (sock_file (relabelto)))
(allow vendor_init base_typeattr_1165 (fifo_file (relabelto)))
;;* lme

;;* lmx 186 system/sepolicy/private/vendor_init.te

(allow vendor_init dev_type (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 187 system/sepolicy/private/vendor_init.te

(allow vendor_init dev_type (lnk_file (create)))
;;* lme

;;* lmx 190 system/sepolicy/private/vendor_init.te

(allow vendor_init debugfs_tracing (file (write lock append map open)))
;;* lme

;;* lmx 206 system/sepolicy/private/vendor_init.te

(allow vendor_init base_typeattr_1166 (file (read setattr map open)))
;;* lme

;;* lmx 208 system/sepolicy/private/vendor_init.te

(allow vendor_init tracefs_type (file (read setattr map open)))
;;* lme

;;* lmx 220 system/sepolicy/private/vendor_init.te

(allow vendor_init base_typeattr_1167 (dir (read setattr open search)))
;;* lme

;;* lmx 222 system/sepolicy/private/vendor_init.te

(allow vendor_init dev_type (blk_file (getattr)))
;;* lme

;;* lmx 225 system/sepolicy/private/vendor_init.te

(allow vendor_init proc_net_type (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 225 system/sepolicy/private/vendor_init.te

(allow vendor_init proc_net_type (file (ioctl read getattr lock map open watch watch_reads)))
(allow vendor_init proc_net_type (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 226 system/sepolicy/private/vendor_init.te

(allow vendor_init proc_net_type (file (write lock append map open)))
;;* lme

;;* lmx 227 system/sepolicy/private/vendor_init.te

(allow vendor_init self (capability (net_admin)))
(allow vendor_init self (cap_userns (net_admin)))
;;* lme

;;* lmx 230 system/sepolicy/private/vendor_init.te

(allow vendor_init proc_page_cluster (file (write lock append map open)))
;;* lme

;;* lmx 233 system/sepolicy/private/vendor_init.te

(allow vendor_init proc_firmware_config (file (write lock append map open)))
;;* lme

;;* lmx 236 system/sepolicy/private/vendor_init.te

(allow vendor_init sysfs_type (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 237 system/sepolicy/private/vendor_init.te

(allow vendor_init sysfs_type (lnk_file (read)))
;;* lme

;;* lmx 238 system/sepolicy/private/vendor_init.te

(allow vendor_init base_typeattr_1168 (file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 241 system/sepolicy/private/vendor_init.te

(allow vendor_init self (process (setfscreate)))
;;* lme

;;* lmx 243 system/sepolicy/private/vendor_init.te

(allow vendor_init vendor_file_type (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 243 system/sepolicy/private/vendor_init.te

(allow vendor_init vendor_file_type (file (ioctl read getattr lock map open watch watch_reads)))
(allow vendor_init vendor_file_type (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 246 system/sepolicy/private/vendor_init.te

(allow vendor_init serialno_prop (file (read getattr map open)))
;;* lme

;;* lmx 249 system/sepolicy/private/vendor_init.te

(allow vendor_init self (capability (sys_admin)))
(allow vendor_init self (cap_userns (sys_admin)))
;;* lme

;;* lmx 252 system/sepolicy/private/vendor_init.te

(allow vendor_init misc_block_device (blk_file (write lock append map open)))
;;* lme

;;* lmx 255 system/sepolicy/private/vendor_init.te

(allow vendor_init system_bootstrap_lib_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 255 system/sepolicy/private/vendor_init.te

(allow vendor_init system_bootstrap_lib_file (file (read getattr map execute open)))
;;* lme

;;* lmx 258 system/sepolicy/private/vendor_init.te

(allow vendor_init userdata_sysdev (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 275 system/sepolicy/private/vendor_init.te

(allow vendor_init file_contexts_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 278 system/sepolicy/private/vendor_init.te

(allow vendor_init self (capability (sys_nice)))
;;* lme

;;* lmx 280 system/sepolicy/private/vendor_init.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 280 system/sepolicy/private/vendor_init.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 280 system/sepolicy/private/vendor_init.te

(allow vendor_init bluetooth_a2dp_offload_prop (property_service (set)))
;;* lme

;;* lmx 280 system/sepolicy/private/vendor_init.te

(allow vendor_init bluetooth_a2dp_offload_prop (file (read getattr map open)))
;;* lme

;;* lmx 281 system/sepolicy/private/vendor_init.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 281 system/sepolicy/private/vendor_init.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 281 system/sepolicy/private/vendor_init.te

(allow vendor_init bluetooth_audio_hal_prop (property_service (set)))
;;* lme

;;* lmx 281 system/sepolicy/private/vendor_init.te

(allow vendor_init bluetooth_audio_hal_prop (file (read getattr map open)))
;;* lme

;;* lmx 282 system/sepolicy/private/vendor_init.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 282 system/sepolicy/private/vendor_init.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 282 system/sepolicy/private/vendor_init.te

(allow vendor_init bluetooth_config_prop (property_service (set)))
;;* lme

;;* lmx 282 system/sepolicy/private/vendor_init.te

(allow vendor_init bluetooth_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 283 system/sepolicy/private/vendor_init.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 283 system/sepolicy/private/vendor_init.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 283 system/sepolicy/private/vendor_init.te

(allow vendor_init camera2_extensions_prop (property_service (set)))
;;* lme

;;* lmx 283 system/sepolicy/private/vendor_init.te

(allow vendor_init camera2_extensions_prop (file (read getattr map open)))
;;* lme

;;* lmx 284 system/sepolicy/private/vendor_init.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 284 system/sepolicy/private/vendor_init.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 284 system/sepolicy/private/vendor_init.te

(allow vendor_init camerax_extensions_prop (property_service (set)))
;;* lme

;;* lmx 284 system/sepolicy/private/vendor_init.te

(allow vendor_init camerax_extensions_prop (file (read getattr map open)))
;;* lme

;;* lmx 285 system/sepolicy/private/vendor_init.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 285 system/sepolicy/private/vendor_init.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 285 system/sepolicy/private/vendor_init.te

(allow vendor_init cpu_variant_prop (property_service (set)))
;;* lme

;;* lmx 285 system/sepolicy/private/vendor_init.te

(allow vendor_init cpu_variant_prop (file (read getattr map open)))
;;* lme

;;* lmx 286 system/sepolicy/private/vendor_init.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 286 system/sepolicy/private/vendor_init.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 286 system/sepolicy/private/vendor_init.te

(allow vendor_init dalvik_config_prop (property_service (set)))
;;* lme

;;* lmx 286 system/sepolicy/private/vendor_init.te

(allow vendor_init dalvik_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 287 system/sepolicy/private/vendor_init.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 287 system/sepolicy/private/vendor_init.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 287 system/sepolicy/private/vendor_init.te

(allow vendor_init dalvik_dynamic_config_prop (property_service (set)))
;;* lme

;;* lmx 287 system/sepolicy/private/vendor_init.te

(allow vendor_init dalvik_dynamic_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 288 system/sepolicy/private/vendor_init.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 288 system/sepolicy/private/vendor_init.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 288 system/sepolicy/private/vendor_init.te

(allow vendor_init dalvik_runtime_prop (property_service (set)))
;;* lme

;;* lmx 288 system/sepolicy/private/vendor_init.te

(allow vendor_init dalvik_runtime_prop (file (read getattr map open)))
;;* lme

;;* lmx 289 system/sepolicy/private/vendor_init.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 289 system/sepolicy/private/vendor_init.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 289 system/sepolicy/private/vendor_init.te

(allow vendor_init debug_prop (property_service (set)))
;;* lme

;;* lmx 289 system/sepolicy/private/vendor_init.te

(allow vendor_init debug_prop (file (read getattr map open)))
;;* lme

;;* lmx 290 system/sepolicy/private/vendor_init.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 290 system/sepolicy/private/vendor_init.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 290 system/sepolicy/private/vendor_init.te

(allow vendor_init exported_bluetooth_prop (property_service (set)))
;;* lme

;;* lmx 290 system/sepolicy/private/vendor_init.te

(allow vendor_init exported_bluetooth_prop (file (read getattr map open)))
;;* lme

;;* lmx 291 system/sepolicy/private/vendor_init.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 291 system/sepolicy/private/vendor_init.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 291 system/sepolicy/private/vendor_init.te

(allow vendor_init exported_camera_prop (property_service (set)))
;;* lme

;;* lmx 291 system/sepolicy/private/vendor_init.te

(allow vendor_init exported_camera_prop (file (read getattr map open)))
;;* lme

;;* lmx 292 system/sepolicy/private/vendor_init.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 292 system/sepolicy/private/vendor_init.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 292 system/sepolicy/private/vendor_init.te

(allow vendor_init exported_config_prop (property_service (set)))
;;* lme

;;* lmx 292 system/sepolicy/private/vendor_init.te

(allow vendor_init exported_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 293 system/sepolicy/private/vendor_init.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 293 system/sepolicy/private/vendor_init.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 293 system/sepolicy/private/vendor_init.te

(allow vendor_init exported_default_prop (property_service (set)))
;;* lme

;;* lmx 293 system/sepolicy/private/vendor_init.te

(allow vendor_init exported_default_prop (file (read getattr map open)))
;;* lme

;;* lmx 294 system/sepolicy/private/vendor_init.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 294 system/sepolicy/private/vendor_init.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 294 system/sepolicy/private/vendor_init.te

(allow vendor_init exported_overlay_prop (property_service (set)))
;;* lme

;;* lmx 294 system/sepolicy/private/vendor_init.te

(allow vendor_init exported_overlay_prop (file (read getattr map open)))
;;* lme

;;* lmx 295 system/sepolicy/private/vendor_init.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 295 system/sepolicy/private/vendor_init.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 295 system/sepolicy/private/vendor_init.te

(allow vendor_init exported_pm_prop (property_service (set)))
;;* lme

;;* lmx 295 system/sepolicy/private/vendor_init.te

(allow vendor_init exported_pm_prop (file (read getattr map open)))
;;* lme

;;* lmx 296 system/sepolicy/private/vendor_init.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 296 system/sepolicy/private/vendor_init.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 296 system/sepolicy/private/vendor_init.te

(allow vendor_init ffs_control_prop (property_service (set)))
;;* lme

;;* lmx 296 system/sepolicy/private/vendor_init.te

(allow vendor_init ffs_control_prop (file (read getattr map open)))
;;* lme

;;* lmx 297 system/sepolicy/private/vendor_init.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 297 system/sepolicy/private/vendor_init.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 297 system/sepolicy/private/vendor_init.te

(allow vendor_init hw_timeout_multiplier_prop (property_service (set)))
;;* lme

;;* lmx 297 system/sepolicy/private/vendor_init.te

(allow vendor_init hw_timeout_multiplier_prop (file (read getattr map open)))
;;* lme

;;* lmx 298 system/sepolicy/private/vendor_init.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 298 system/sepolicy/private/vendor_init.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 298 system/sepolicy/private/vendor_init.te

(allow vendor_init incremental_prop (property_service (set)))
;;* lme

;;* lmx 298 system/sepolicy/private/vendor_init.te

(allow vendor_init incremental_prop (file (read getattr map open)))
;;* lme

;;* lmx 299 system/sepolicy/private/vendor_init.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 299 system/sepolicy/private/vendor_init.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 299 system/sepolicy/private/vendor_init.te

(allow vendor_init lmkd_prop (property_service (set)))
;;* lme

;;* lmx 299 system/sepolicy/private/vendor_init.te

(allow vendor_init lmkd_prop (file (read getattr map open)))
;;* lme

;;* lmx 300 system/sepolicy/private/vendor_init.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 300 system/sepolicy/private/vendor_init.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 300 system/sepolicy/private/vendor_init.te

(allow vendor_init logd_prop (property_service (set)))
;;* lme

;;* lmx 300 system/sepolicy/private/vendor_init.te

(allow vendor_init logd_prop (file (read getattr map open)))
;;* lme

;;* lmx 301 system/sepolicy/private/vendor_init.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 301 system/sepolicy/private/vendor_init.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 301 system/sepolicy/private/vendor_init.te

(allow vendor_init log_tag_prop (property_service (set)))
;;* lme

;;* lmx 301 system/sepolicy/private/vendor_init.te

(allow vendor_init log_tag_prop (file (read getattr map open)))
;;* lme

;;* lmx 302 system/sepolicy/private/vendor_init.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 302 system/sepolicy/private/vendor_init.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 302 system/sepolicy/private/vendor_init.te

(allow vendor_init log_prop (property_service (set)))
;;* lme

;;* lmx 302 system/sepolicy/private/vendor_init.te

(allow vendor_init log_prop (file (read getattr map open)))
;;* lme

;;* lmx 303 system/sepolicy/private/vendor_init.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 303 system/sepolicy/private/vendor_init.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 303 system/sepolicy/private/vendor_init.te

(allow vendor_init media_variant_prop (property_service (set)))
;;* lme

;;* lmx 303 system/sepolicy/private/vendor_init.te

(allow vendor_init media_variant_prop (file (read getattr map open)))
;;* lme

;;* lmx 304 system/sepolicy/private/vendor_init.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 304 system/sepolicy/private/vendor_init.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 304 system/sepolicy/private/vendor_init.te

(allow vendor_init graphics_config_writable_prop (property_service (set)))
;;* lme

;;* lmx 304 system/sepolicy/private/vendor_init.te

(allow vendor_init graphics_config_writable_prop (file (read getattr map open)))
;;* lme

;;* lmx 305 system/sepolicy/private/vendor_init.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 305 system/sepolicy/private/vendor_init.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 305 system/sepolicy/private/vendor_init.te

(allow vendor_init prefetch_boot_prop (property_service (set)))
;;* lme

;;* lmx 305 system/sepolicy/private/vendor_init.te

(allow vendor_init prefetch_boot_prop (file (read getattr map open)))
;;* lme

;;* lmx 306 system/sepolicy/private/vendor_init.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 306 system/sepolicy/private/vendor_init.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 306 system/sepolicy/private/vendor_init.te

(allow vendor_init qemu_hw_prop (property_service (set)))
;;* lme

;;* lmx 306 system/sepolicy/private/vendor_init.te

(allow vendor_init qemu_hw_prop (file (read getattr map open)))
;;* lme

;;* lmx 307 system/sepolicy/private/vendor_init.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 307 system/sepolicy/private/vendor_init.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 307 system/sepolicy/private/vendor_init.te

(allow vendor_init radio_control_prop (property_service (set)))
;;* lme

;;* lmx 307 system/sepolicy/private/vendor_init.te

(allow vendor_init radio_control_prop (file (read getattr map open)))
;;* lme

;;* lmx 308 system/sepolicy/private/vendor_init.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 308 system/sepolicy/private/vendor_init.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 308 system/sepolicy/private/vendor_init.te

(allow vendor_init rebootescrow_hal_prop (property_service (set)))
;;* lme

;;* lmx 308 system/sepolicy/private/vendor_init.te

(allow vendor_init rebootescrow_hal_prop (file (read getattr map open)))
;;* lme

;;* lmx 309 system/sepolicy/private/vendor_init.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 309 system/sepolicy/private/vendor_init.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 309 system/sepolicy/private/vendor_init.te

(allow vendor_init serialno_prop (property_service (set)))
;;* lme

;;* lmx 309 system/sepolicy/private/vendor_init.te

(allow vendor_init serialno_prop (file (read getattr map open)))
;;* lme

;;* lmx 310 system/sepolicy/private/vendor_init.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 310 system/sepolicy/private/vendor_init.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 310 system/sepolicy/private/vendor_init.te

(allow vendor_init soc_prop (property_service (set)))
;;* lme

;;* lmx 310 system/sepolicy/private/vendor_init.te

(allow vendor_init soc_prop (file (read getattr map open)))
;;* lme

;;* lmx 311 system/sepolicy/private/vendor_init.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 311 system/sepolicy/private/vendor_init.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 311 system/sepolicy/private/vendor_init.te

(allow vendor_init surfaceflinger_color_prop (property_service (set)))
;;* lme

;;* lmx 311 system/sepolicy/private/vendor_init.te

(allow vendor_init surfaceflinger_color_prop (file (read getattr map open)))
;;* lme

;;* lmx 312 system/sepolicy/private/vendor_init.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 312 system/sepolicy/private/vendor_init.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 312 system/sepolicy/private/vendor_init.te

(allow vendor_init usb_control_prop (property_service (set)))
;;* lme

;;* lmx 312 system/sepolicy/private/vendor_init.te

(allow vendor_init usb_control_prop (file (read getattr map open)))
;;* lme

;;* lmx 313 system/sepolicy/private/vendor_init.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 313 system/sepolicy/private/vendor_init.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 313 system/sepolicy/private/vendor_init.te

(allow vendor_init userspace_reboot_config_prop (property_service (set)))
;;* lme

;;* lmx 313 system/sepolicy/private/vendor_init.te

(allow vendor_init userspace_reboot_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 314 system/sepolicy/private/vendor_init.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 314 system/sepolicy/private/vendor_init.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 314 system/sepolicy/private/vendor_init.te

(allow vendor_init vehicle_hal_prop (property_service (set)))
;;* lme

;;* lmx 314 system/sepolicy/private/vendor_init.te

(allow vendor_init vehicle_hal_prop (file (read getattr map open)))
;;* lme

;;* lmx 315 system/sepolicy/private/vendor_init.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 315 system/sepolicy/private/vendor_init.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 315 system/sepolicy/private/vendor_init.te

(allow vendor_init vendor_default_prop (property_service (set)))
;;* lme

;;* lmx 315 system/sepolicy/private/vendor_init.te

(allow vendor_init vendor_default_prop (file (read getattr map open)))
;;* lme

;;* lmx 316 system/sepolicy/private/vendor_init.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 316 system/sepolicy/private/vendor_init.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 316 system/sepolicy/private/vendor_init.te

(allow vendor_init keystore_config_prop (property_service (set)))
;;* lme

;;* lmx 316 system/sepolicy/private/vendor_init.te

(allow vendor_init keystore_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 317 system/sepolicy/private/vendor_init.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 317 system/sepolicy/private/vendor_init.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 317 system/sepolicy/private/vendor_init.te

(allow vendor_init vendor_security_patch_level_prop (property_service (set)))
;;* lme

;;* lmx 317 system/sepolicy/private/vendor_init.te

(allow vendor_init vendor_security_patch_level_prop (file (read getattr map open)))
;;* lme

;;* lmx 318 system/sepolicy/private/vendor_init.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 318 system/sepolicy/private/vendor_init.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 318 system/sepolicy/private/vendor_init.te

(allow vendor_init vndk_prop (property_service (set)))
;;* lme

;;* lmx 318 system/sepolicy/private/vendor_init.te

(allow vendor_init vndk_prop (file (read getattr map open)))
;;* lme

;;* lmx 319 system/sepolicy/private/vendor_init.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 319 system/sepolicy/private/vendor_init.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 319 system/sepolicy/private/vendor_init.te

(allow vendor_init virtual_ab_prop (property_service (set)))
;;* lme

;;* lmx 319 system/sepolicy/private/vendor_init.te

(allow vendor_init virtual_ab_prop (file (read getattr map open)))
;;* lme

;;* lmx 320 system/sepolicy/private/vendor_init.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 320 system/sepolicy/private/vendor_init.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 320 system/sepolicy/private/vendor_init.te

(allow vendor_init vold_post_fs_data_prop (property_service (set)))
;;* lme

;;* lmx 320 system/sepolicy/private/vendor_init.te

(allow vendor_init vold_post_fs_data_prop (file (read getattr map open)))
;;* lme

;;* lmx 321 system/sepolicy/private/vendor_init.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 321 system/sepolicy/private/vendor_init.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 321 system/sepolicy/private/vendor_init.te

(allow vendor_init wifi_hal_prop (property_service (set)))
;;* lme

;;* lmx 321 system/sepolicy/private/vendor_init.te

(allow vendor_init wifi_hal_prop (file (read getattr map open)))
;;* lme

;;* lmx 322 system/sepolicy/private/vendor_init.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 322 system/sepolicy/private/vendor_init.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 322 system/sepolicy/private/vendor_init.te

(allow vendor_init wifi_log_prop (property_service (set)))
;;* lme

;;* lmx 322 system/sepolicy/private/vendor_init.te

(allow vendor_init wifi_log_prop (file (read getattr map open)))
;;* lme

;;* lmx 323 system/sepolicy/private/vendor_init.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 323 system/sepolicy/private/vendor_init.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 323 system/sepolicy/private/vendor_init.te

(allow vendor_init zram_control_prop (property_service (set)))
;;* lme

;;* lmx 323 system/sepolicy/private/vendor_init.te

(allow vendor_init zram_control_prop (file (read getattr map open)))
;;* lme

;;* lmx 325 system/sepolicy/private/vendor_init.te

(allow vendor_init boot_status_prop (file (read getattr map open)))
;;* lme

;;* lmx 326 system/sepolicy/private/vendor_init.te

(allow vendor_init exported3_system_prop (file (read getattr map open)))
;;* lme

;;* lmx 327 system/sepolicy/private/vendor_init.te

(allow vendor_init mmd_shared_status_prop (file (read getattr map open)))
;;* lme

;;* lmx 328 system/sepolicy/private/vendor_init.te

(allow vendor_init ota_prop (file (read getattr map open)))
;;* lme

;;* lmx 329 system/sepolicy/private/vendor_init.te

(allow vendor_init power_debug_prop (file (read getattr map open)))
;;* lme

;;* lmx 330 system/sepolicy/private/vendor_init.te

(allow vendor_init provisioned_prop (file (read getattr map open)))
;;* lme

;;* lmx 331 system/sepolicy/private/vendor_init.te

(allow vendor_init retaildemo_prop (file (read getattr map open)))
;;* lme

;;* lmx 332 system/sepolicy/private/vendor_init.te

(allow vendor_init surfaceflinger_display_prop (file (read getattr map open)))
;;* lme

;;* lmx 333 system/sepolicy/private/vendor_init.te

(allow vendor_init test_harness_prop (file (read getattr map open)))
;;* lme

;;* lmx 334 system/sepolicy/private/vendor_init.te

(allow vendor_init trusty_coverage_prop (file (read getattr map open)))
;;* lme

;;* lmx 335 system/sepolicy/private/vendor_init.te

(allow vendor_init theme_prop (file (read getattr map open)))
;;* lme

;;* lmx 336 system/sepolicy/private/vendor_init.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 336 system/sepolicy/private/vendor_init.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 336 system/sepolicy/private/vendor_init.te

(allow vendor_init dck_prop (property_service (set)))
;;* lme

;;* lmx 336 system/sepolicy/private/vendor_init.te

(allow vendor_init dck_prop (file (read getattr map open)))
;;* lme

;;* lmx 337 system/sepolicy/private/vendor_init.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 337 system/sepolicy/private/vendor_init.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 337 system/sepolicy/private/vendor_init.te

(allow vendor_init wallet_prop (property_service (set)))
;;* lme

;;* lmx 337 system/sepolicy/private/vendor_init.te

(allow vendor_init wallet_prop (file (read getattr map open)))
;;* lme

;;* lmx 340 system/sepolicy/private/vendor_init.te

(allow vendor_init device_config_vendor_system_native_prop (file (read getattr map open)))
;;* lme

;;* lmx 341 system/sepolicy/private/vendor_init.te

(allow vendor_init device_config_vendor_system_native_boot_prop (file (read getattr map open)))
;;* lme

;;* lmx 343 system/sepolicy/private/vendor_init.te

(allow vendor_init profcollectd_etr_prop (file (read getattr map open)))
;;* lme

;;* lmx 352 system/sepolicy/private/vendor_init.te

(neverallow vendor_init base_typeattr_1169 (socket (connect sendto)))
(neverallow vendor_init base_typeattr_1169 (tcp_socket (connect sendto)))
(neverallow vendor_init base_typeattr_1169 (udp_socket (connect sendto)))
(neverallow vendor_init base_typeattr_1169 (rawip_socket (connect sendto)))
(neverallow vendor_init base_typeattr_1169 (netlink_socket (connect sendto)))
(neverallow vendor_init base_typeattr_1169 (packet_socket (connect sendto)))
(neverallow vendor_init base_typeattr_1169 (key_socket (connect sendto)))
(neverallow vendor_init base_typeattr_1169 (unix_stream_socket (connect sendto)))
(neverallow vendor_init base_typeattr_1169 (unix_dgram_socket (connect sendto)))
(neverallow vendor_init base_typeattr_1169 (netlink_route_socket (connect sendto)))
(neverallow vendor_init base_typeattr_1169 (netlink_tcpdiag_socket (connect sendto)))
(neverallow vendor_init base_typeattr_1169 (netlink_nflog_socket (connect sendto)))
(neverallow vendor_init base_typeattr_1169 (netlink_xfrm_socket (connect sendto)))
(neverallow vendor_init base_typeattr_1169 (netlink_selinux_socket (connect sendto)))
(neverallow vendor_init base_typeattr_1169 (netlink_audit_socket (connect sendto)))
(neverallow vendor_init base_typeattr_1169 (netlink_dnrt_socket (connect sendto)))
(neverallow vendor_init base_typeattr_1169 (netlink_kobject_uevent_socket (connect sendto)))
(neverallow vendor_init base_typeattr_1169 (appletalk_socket (connect sendto)))
(neverallow vendor_init base_typeattr_1169 (tun_socket (connect sendto)))
(neverallow vendor_init base_typeattr_1169 (netlink_iscsi_socket (connect sendto)))
(neverallow vendor_init base_typeattr_1169 (netlink_fib_lookup_socket (connect sendto)))
(neverallow vendor_init base_typeattr_1169 (netlink_connector_socket (connect sendto)))
(neverallow vendor_init base_typeattr_1169 (netlink_netfilter_socket (connect sendto)))
(neverallow vendor_init base_typeattr_1169 (netlink_generic_socket (connect sendto)))
(neverallow vendor_init base_typeattr_1169 (netlink_scsitransport_socket (connect sendto)))
(neverallow vendor_init base_typeattr_1169 (netlink_rdma_socket (connect sendto)))
(neverallow vendor_init base_typeattr_1169 (netlink_crypto_socket (connect sendto)))
(neverallow vendor_init base_typeattr_1169 (sctp_socket (connect sendto)))
(neverallow vendor_init base_typeattr_1169 (icmp_socket (connect sendto)))
(neverallow vendor_init base_typeattr_1169 (ax25_socket (connect sendto)))
(neverallow vendor_init base_typeattr_1169 (ipx_socket (connect sendto)))
(neverallow vendor_init base_typeattr_1169 (netrom_socket (connect sendto)))
(neverallow vendor_init base_typeattr_1169 (atmpvc_socket (connect sendto)))
(neverallow vendor_init base_typeattr_1169 (x25_socket (connect sendto)))
(neverallow vendor_init base_typeattr_1169 (rose_socket (connect sendto)))
(neverallow vendor_init base_typeattr_1169 (decnet_socket (connect sendto)))
(neverallow vendor_init base_typeattr_1169 (atmsvc_socket (connect sendto)))
(neverallow vendor_init base_typeattr_1169 (rds_socket (connect sendto)))
(neverallow vendor_init base_typeattr_1169 (irda_socket (connect sendto)))
(neverallow vendor_init base_typeattr_1169 (pppox_socket (connect sendto)))
(neverallow vendor_init base_typeattr_1169 (llc_socket (connect sendto)))
(neverallow vendor_init base_typeattr_1169 (can_socket (connect sendto)))
(neverallow vendor_init base_typeattr_1169 (tipc_socket (connect sendto)))
(neverallow vendor_init base_typeattr_1169 (bluetooth_socket (connect sendto)))
(neverallow vendor_init base_typeattr_1169 (iucv_socket (connect sendto)))
(neverallow vendor_init base_typeattr_1169 (rxrpc_socket (connect sendto)))
(neverallow vendor_init base_typeattr_1169 (isdn_socket (connect sendto)))
(neverallow vendor_init base_typeattr_1169 (phonet_socket (connect sendto)))
(neverallow vendor_init base_typeattr_1169 (ieee802154_socket (connect sendto)))
(neverallow vendor_init base_typeattr_1169 (caif_socket (connect sendto)))
(neverallow vendor_init base_typeattr_1169 (alg_socket (connect sendto)))
(neverallow vendor_init base_typeattr_1169 (nfc_socket (connect sendto)))
(neverallow vendor_init base_typeattr_1169 (vsock_socket (connect sendto)))
(neverallow vendor_init base_typeattr_1169 (kcm_socket (connect sendto)))
(neverallow vendor_init base_typeattr_1169 (qipcrtr_socket (connect sendto)))
(neverallow vendor_init base_typeattr_1169 (smc_socket (connect sendto)))
(neverallow vendor_init base_typeattr_1169 (xdp_socket (connect sendto)))
;;* lme

;;* lmx 352 system/sepolicy/private/vendor_init.te

(neverallow vendor_init base_typeattr_1169 (unix_stream_socket (connectto)))
;;* lme

;;* lmx 357 system/sepolicy/private/vendor_init.te

(neverallow domain vendor_init (process (dyntransition)))
;;* lme

;;* lmx 358 system/sepolicy/private/vendor_init.te

(neverallow base_typeattr_247 vendor_init (process (transition)))
;;* lme

;;* lmx 359 system/sepolicy/private/vendor_init.te

(neverallow vendor_init base_typeattr_832 (file (entrypoint)))
;;* lme

;;* lmx 362 system/sepolicy/private/vendor_init.te

(neverallow vendor_init app_data_file_type (lnk_file (read)))
;;* lme

;;* lmx 363 system/sepolicy/private/vendor_init.te

(neverallow vendor_init shell_data_file (lnk_file (read)))
;;* lme

;;* lmx 365 system/sepolicy/private/vendor_init.te

(neverallow vendor_init shell_data_file (dir (write add_name remove_name)))
;;* lme

;;* lmx 368 system/sepolicy/private/vendor_init.te

(neverallow vendor_init fs_type (file (execute_no_trans)))
(neverallow vendor_init file_type (file (execute_no_trans)))
;;* lme

;;* lmx 371 system/sepolicy/private/vendor_init.te

(neverallow vendor_init service_manager_type (service_manager (add find)))
;;* lme

;;* lmx 372 system/sepolicy/private/vendor_init.te

(neverallow vendor_init servicemanager (service_manager (list)))
;;* lme

;;* lmx 375 system/sepolicy/private/vendor_init.te

(neverallow base_typeattr_248 vendor_init (process (ptrace)))
;;* lme

;;* lmx 378 system/sepolicy/private/vendor_init.te

(allow vendor_init property_socket (sock_file (write)))
;;* lme

;;* lmx 378 system/sepolicy/private/vendor_init.te

(allow vendor_init init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 378 system/sepolicy/private/vendor_init.te

(allow vendor_init usb_userspace_aoa_enabled_prop (property_service (set)))
;;* lme

;;* lmx 378 system/sepolicy/private/vendor_init.te

(allow vendor_init usb_userspace_aoa_enabled_prop (file (read getattr map open)))
;;* lme

;;* lmx 381 system/sepolicy/private/vendor_init.te

(allow vendor_init thermal_profile_prop (file (read getattr map open)))
;;* lme

;;* lmx 2 system/sepolicy/private/vendor_misc_writer.te

(allow vendor_misc_writer misc_block_device (blk_file (write lock append map open)))
;;* lme

;;* lmx 3 system/sepolicy/private/vendor_misc_writer.te

(allow vendor_misc_writer block_device (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

(dontaudit vendor_misc_writer proc_cmdline (file (ioctl read getattr lock map open watch watch_reads)))
(dontaudit vendor_misc_writer sysfs_dt_firmware_android (dir (search)))
(dontaudit vendor_misc_writer proc_bootconfig (file (ioctl read getattr lock map open watch watch_reads)))
;;* lmx 12 system/sepolicy/private/vendor_misc_writer.te

(allow vendor_misc_writer gsi_metadata_file_type (dir (search)))
(allow vendor_misc_writer metadata_file (dir (search)))
;;* lme

;;* lmx 12 system/sepolicy/private/vendor_misc_writer.te

(allow vendor_misc_writer gsi_public_metadata_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 12 system/sepolicy/private/vendor_misc_writer.te

(allow vendor_misc_writer proc_bootconfig (file (ioctl read getattr lock map open watch watch_reads)))
(allow vendor_misc_writer proc_cmdline (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 1 system/sepolicy/private/vendor_shell.te

(allow vendor_shell vendor_shell_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lme

;;* lmx 2 system/sepolicy/private/vendor_shell.te

(allow vendor_shell vendor_toolbox_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lme

;;* lmx 5 system/sepolicy/private/vendor_shell.te

(allow vendor_shell shell (fd (use)))
;;* lme

;;* lmx 8 system/sepolicy/private/vendor_shell.te

(allow vendor_shell adbd (fd (use)))
;;* lme

;;* lmx 9 system/sepolicy/private/vendor_shell.te

(allow vendor_shell adbd (process (sigchld)))
;;* lme

;;* lmx 10 system/sepolicy/private/vendor_shell.te

(allow vendor_shell adbd (unix_stream_socket (ioctl read write getattr)))
;;* lme

;;* lmx 12 system/sepolicy/private/vendor_shell.te

(allow vendor_shell devpts (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 13 system/sepolicy/private/vendor_shell.te

(allow vendor_shell tty_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 14 system/sepolicy/private/vendor_shell.te

(allow vendor_shell console_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 15 system/sepolicy/private/vendor_shell.te

(allow vendor_shell input_device (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 16 system/sepolicy/private/vendor_shell.te

(allow vendor_shell input_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 18 system/sepolicy/private/vendor_shell.te

(allow vendor_shell property_socket (sock_file (write)))
;;* lme

;;* lmx 18 system/sepolicy/private/vendor_shell.te

(allow vendor_shell init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 18 system/sepolicy/private/vendor_shell.te

(allow vendor_shell persist_vendor_debug_wifi_prop (property_service (set)))
;;* lme

;;* lmx 18 system/sepolicy/private/vendor_shell.te

(allow vendor_shell persist_vendor_debug_wifi_prop (file (read getattr map open)))
;;* lme

;;* lmx 3 system/sepolicy/private/vendor_toolbox.te

(neverallow base_typeattr_1170 vendor_toolbox_exec (file (execute execute_no_trans entrypoint)))
;;* lme

;;* lmx 1 system/sepolicy/private/vfio_handler.te

(allow init vfio_handler_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 1 system/sepolicy/private/vfio_handler.te

(allow init vfio_handler (process (transition)))
;;* lme

;;* lmx 1 system/sepolicy/private/vfio_handler.te

(allow vfio_handler vfio_handler_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init vfio_handler (process (noatsecure)))
;;* lmx 1 system/sepolicy/private/vfio_handler.te

(allow init vfio_handler (process (siginh rlimitinh)))
;;* lme

(typetransition init vfio_handler_exec process vfio_handler)
;;* lmx 1 system/sepolicy/private/vfio_handler.te

(allow vfio_handler vfio_handler_service (service_manager (add find)))
;;* lme

;;* lmx 1 system/sepolicy/private/vfio_handler.te

(neverallow base_typeattr_1171 vfio_handler_service (service_manager (add)))
;;* lme

;;* lmx 1 system/sepolicy/private/vfio_handler.te

(allow vfio_handler su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 1 system/sepolicy/private/vfio_handler.te

(allow vfio_handler servicemanager (binder (call transfer)))
;;* lme

;;* lmx 1 system/sepolicy/private/vfio_handler.te

(allow servicemanager vfio_handler (binder (call transfer)))
;;* lme

;;* lmx 1 system/sepolicy/private/vfio_handler.te

(allow vfio_handler vfio_device (chr_file (getattr)))
;;* lme

;;* lmx 1 system/sepolicy/private/vfio_handler.te

(allow vfio_handler vfio_device (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 1 system/sepolicy/private/vfio_handler.te

(allow vfio_handler sysfs (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 1 system/sepolicy/private/vfio_handler.te

(allow vfio_handler sysfs (file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 1 system/sepolicy/private/vfio_handler.te

(allow vfio_handler virtualizationservice (fd (use)))
;;* lme

;;* lmx 1 system/sepolicy/private/vfio_handler.te

(allow vfio_handler virtualizationservice_data_file (file (write)))
;;* lme

;;* lmx 1 system/sepolicy/private/vfio_handler.te

(neverallow vfio_handler virtualizationservice_data_file (file (create open)))
;;* lme

;;* lmx 1 system/sepolicy/private/vfio_handler.te

(allow vfio_handler block_device (dir (search)))
;;* lme

;;* lmx 1 system/sepolicy/private/vfio_handler.te

(allow vfio_handler dtbo_block_device (blk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 3 system/sepolicy/private/virtual_camera.te

(allow init virtual_camera_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 3 system/sepolicy/private/virtual_camera.te

(allow init virtual_camera (process (transition)))
;;* lme

;;* lmx 3 system/sepolicy/private/virtual_camera.te

(allow virtual_camera virtual_camera_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init virtual_camera (process (noatsecure)))
;;* lmx 3 system/sepolicy/private/virtual_camera.te

(allow init virtual_camera (process (siginh rlimitinh)))
;;* lme

(typetransition init virtual_camera_exec process virtual_camera)
;;* lmx 6 system/sepolicy/private/virtual_camera.te

(allow virtual_camera self (capability (sys_nice)))
(allow virtual_camera self (cap_userns (sys_nice)))
;;* lme

;;* lmx 11 system/sepolicy/private/virtual_camera.te

(allow virtual_camera servicemanager (binder (call transfer)))
;;* lme

;;* lmx 11 system/sepolicy/private/virtual_camera.te

(allow servicemanager virtual_camera (binder (call transfer)))
;;* lme

;;* lmx 12 system/sepolicy/private/virtual_camera.te

(allow virtual_camera cameraserver (binder (call transfer)))
;;* lme

;;* lmx 12 system/sepolicy/private/virtual_camera.te

(allow cameraserver virtual_camera (binder (transfer)))
;;* lme

;;* lmx 12 system/sepolicy/private/virtual_camera.te

(allow virtual_camera cameraserver (fd (use)))
;;* lme

;;* lmx 13 system/sepolicy/private/virtual_camera.te

(allow virtual_camera system_server (binder (call transfer)))
;;* lme

;;* lmx 13 system/sepolicy/private/virtual_camera.te

(allow system_server virtual_camera (binder (transfer)))
;;* lme

;;* lmx 13 system/sepolicy/private/virtual_camera.te

(allow virtual_camera system_server (fd (use)))
;;* lme

;;* lmx 18 system/sepolicy/private/virtual_camera.te

(allow virtual_camera mediaserver (binder (call transfer)))
;;* lme

;;* lmx 18 system/sepolicy/private/virtual_camera.te

(allow mediaserver virtual_camera (binder (transfer)))
;;* lme

;;* lmx 18 system/sepolicy/private/virtual_camera.te

(allow virtual_camera mediaserver (fd (use)))
;;* lme

;;* lmx 22 system/sepolicy/private/virtual_camera.te

(allow virtual_camera hal_codec2 (memfd_file (read write getattr map)))
;;* lme

;;* lmx 22 system/sepolicy/private/virtual_camera.te

(allow hal_codec2 virtual_camera (memfd_file (read write getattr map)))
;;* lme

;;* lmx 23 system/sepolicy/private/virtual_camera.te

(allow virtual_camera hal_omx (memfd_file (read write getattr map)))
;;* lme

;;* lmx 23 system/sepolicy/private/virtual_camera.te

(allow hal_omx virtual_camera (memfd_file (read write getattr map)))
;;* lme

;;* lmx 26 system/sepolicy/private/virtual_camera.te

(allow virtual_camera appdomain (binder (call transfer)))
;;* lme

;;* lmx 26 system/sepolicy/private/virtual_camera.te

(allow appdomain virtual_camera (binder (transfer)))
;;* lme

;;* lmx 26 system/sepolicy/private/virtual_camera.te

(allow virtual_camera appdomain (fd (use)))
;;* lme

;;* lmx 29 system/sepolicy/private/virtual_camera.te

(allow virtual_camera base_typeattr_625 (fd (use)))
;;* lme

;;* lmx 31 system/sepolicy/private/virtual_camera.te

(allow virtual_camera surfaceflinger (binder (call transfer)))
;;* lme

;;* lmx 31 system/sepolicy/private/virtual_camera.te

(allow surfaceflinger virtual_camera (binder (transfer)))
;;* lme

;;* lmx 31 system/sepolicy/private/virtual_camera.te

(allow virtual_camera surfaceflinger (fd (use)))
;;* lme

;;* lmx 34 system/sepolicy/private/virtual_camera.te

(allow virtual_camera virtual_camera_service (service_manager (add find)))
;;* lme

;;* lmx 34 system/sepolicy/private/virtual_camera.te

(neverallow base_typeattr_1172 virtual_camera_service (service_manager (add)))
;;* lme

;;* lmx 34 system/sepolicy/private/virtual_camera.te

(allow virtual_camera su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 37 system/sepolicy/private/virtual_camera.te

(allow virtual_camera hal_graphics_allocator (memfd_file (read write getattr map)))
;;* lme

;;* lmx 37 system/sepolicy/private/virtual_camera.te

(allow hal_graphics_allocator virtual_camera (memfd_file (read write getattr map)))
;;* lme

;;* lmx 43 system/sepolicy/private/virtual_camera.te

(allow cameraserver dmabuf_system_heap_device (chr_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 46 system/sepolicy/private/virtual_camera.te

(allow virtual_camera hal_graphics_composer (fd (use)))
;;* lme

;;* lmx 49 system/sepolicy/private/virtual_camera.te

(allow virtual_camera dumpstate (fd (use)))
;;* lme

;;* lmx 50 system/sepolicy/private/virtual_camera.te

(allow virtual_camera dumpstate (fifo_file (write)))
;;* lme

;;* lmx 53 system/sepolicy/private/virtual_camera.te

(allow virtual_camera permission_service (service_manager (find)))
;;* lme

;;* lmx 56 system/sepolicy/private/virtual_camera.te

(allow virtual_camera adbd (fd (use)))
;;* lme

;;* lmx 57 system/sepolicy/private/virtual_camera.te

(allow virtual_camera adbd (unix_stream_socket (read write getattr)))
;;* lme

;;* lmx 58 system/sepolicy/private/virtual_camera.te

(allow virtual_camera shell (fifo_file (read write getattr)))
;;* lme

;;* lmx 61 system/sepolicy/private/virtual_camera.te

(allow virtual_camera dmabuf_system_heap_device (chr_file (read open)))
;;* lme

(dontaudit virtual_camera system_data_file (dir (search)))
(dontaudit virtual_camera system_userdir_file (dir (search)))
;;* lmx 6 system/sepolicy/private/virtual_face.te

(allow init virtual_face_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 6 system/sepolicy/private/virtual_face.te

(allow init virtual_face (process (transition)))
;;* lme

;;* lmx 6 system/sepolicy/private/virtual_face.te

(allow virtual_face virtual_face_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init virtual_face (process (noatsecure)))
;;* lmx 6 system/sepolicy/private/virtual_face.te

(allow init virtual_face (process (siginh rlimitinh)))
;;* lme

(typetransition init virtual_face_exec process virtual_face)
;;* lmx 7 system/sepolicy/private/virtual_face.te

(allow virtual_face property_socket (sock_file (write)))
;;* lme

;;* lmx 7 system/sepolicy/private/virtual_face.te

(allow virtual_face init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 7 system/sepolicy/private/virtual_face.te

(allow virtual_face virtual_face_prop (property_service (set)))
;;* lme

;;* lmx 7 system/sepolicy/private/virtual_face.te

(allow virtual_face virtual_face_prop (file (read getattr map open)))
;;* lme

;;* lmx 6 system/sepolicy/private/virtual_fingerprint.te

(allow init virtual_fingerprint_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 6 system/sepolicy/private/virtual_fingerprint.te

(allow init virtual_fingerprint (process (transition)))
;;* lme

;;* lmx 6 system/sepolicy/private/virtual_fingerprint.te

(allow virtual_fingerprint virtual_fingerprint_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init virtual_fingerprint (process (noatsecure)))
;;* lmx 6 system/sepolicy/private/virtual_fingerprint.te

(allow init virtual_fingerprint (process (siginh rlimitinh)))
;;* lme

(typetransition init virtual_fingerprint_exec process virtual_fingerprint)
;;* lmx 7 system/sepolicy/private/virtual_fingerprint.te

(allow virtual_fingerprint property_socket (sock_file (write)))
;;* lme

;;* lmx 7 system/sepolicy/private/virtual_fingerprint.te

(allow virtual_fingerprint init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 7 system/sepolicy/private/virtual_fingerprint.te

(allow virtual_fingerprint virtual_fingerprint_prop (property_service (set)))
;;* lme

;;* lmx 7 system/sepolicy/private/virtual_fingerprint.te

(allow virtual_fingerprint virtual_fingerprint_prop (file (read getattr map open)))
;;* lme

;;* lmx 3 system/sepolicy/private/virtual_touchpad.te

(allow init virtual_touchpad_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 3 system/sepolicy/private/virtual_touchpad.te

(allow init virtual_touchpad (process (transition)))
;;* lme

;;* lmx 3 system/sepolicy/private/virtual_touchpad.te

(allow virtual_touchpad virtual_touchpad_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init virtual_touchpad (process (noatsecure)))
;;* lmx 3 system/sepolicy/private/virtual_touchpad.te

(allow init virtual_touchpad (process (siginh rlimitinh)))
;;* lme

(typetransition init virtual_touchpad_exec process virtual_touchpad)
;;* lmx 5 system/sepolicy/private/virtual_touchpad.te

(allow virtual_touchpad servicemanager (binder (call transfer)))
;;* lme

;;* lmx 5 system/sepolicy/private/virtual_touchpad.te

(allow servicemanager virtual_touchpad (binder (call transfer)))
;;* lme

;;* lmx 7 system/sepolicy/private/virtual_touchpad.te

(allow virtual_touchpad virtual_touchpad_service (service_manager (add find)))
;;* lme

;;* lmx 7 system/sepolicy/private/virtual_touchpad.te

(neverallow base_typeattr_1173 virtual_touchpad_service (service_manager (add)))
;;* lme

;;* lmx 7 system/sepolicy/private/virtual_touchpad.te

(allow virtual_touchpad su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 10 system/sepolicy/private/virtual_touchpad.te

(allow virtual_touchpad system_server (binder (call transfer)))
;;* lme

;;* lmx 10 system/sepolicy/private/virtual_touchpad.te

(allow system_server virtual_touchpad (binder (transfer)))
;;* lme

;;* lmx 10 system/sepolicy/private/virtual_touchpad.te

(allow virtual_touchpad system_server (fd (use)))
;;* lme

;;* lmx 13 system/sepolicy/private/virtual_touchpad.te

(allow virtual_touchpad uhid_device (chr_file (ioctl write lock append map open)))
;;* lme

;;* lmx 17 system/sepolicy/private/virtual_touchpad.te

(allow virtual_touchpad permission_service (service_manager (find)))
;;* lme

;;* lmx 4 system/sepolicy/private/virtualizationmanager.te

(allow virtualizationmanager_vendor crosvm_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 4 system/sepolicy/private/virtualizationmanager.te

(allow virtualizationmanager_vendor crosvm_vendor (process (transition)))
;;* lme

;;* lmx 4 system/sepolicy/private/virtualizationmanager.te

(allow crosvm_vendor crosvm_exec (file (read getattr map execute open entrypoint)))
;;* lme

;;* lmx 4 system/sepolicy/private/virtualizationmanager.te

(allow crosvm_vendor virtualizationmanager_vendor (process (sigchld)))
;;* lme

(dontaudit virtualizationmanager_vendor crosvm_vendor (process (noatsecure)))
;;* lmx 4 system/sepolicy/private/virtualizationmanager.te

(allow virtualizationmanager_vendor crosvm_vendor (process (siginh rlimitinh)))
;;* lme

(typetransition virtualizationmanager_vendor crosvm_exec process crosvm_vendor)
;;* lmx 7 system/sepolicy/private/virtualizationmanager.te

(neverallow coredomain virtualizationmanager_vendor (process (transition)))
;;* lme

;;* lmx 9 system/sepolicy/private/virtualizationmanager.te

(neverallow base_typeattr_241 base_typeattr_1174 (process (transition)))
;;* lme

;;* lmx 12 system/sepolicy/private/virtualizationmanager.te

(allow virtualizationmanager_domain adbd (fd (use)))
;;* lme

;;* lmx 13 system/sepolicy/private/virtualizationmanager.te

(allow virtualizationmanager_domain adbd (unix_stream_socket (read write getattr)))
;;* lme

;;* lmx 16 system/sepolicy/private/virtualizationmanager.te

(allow virtualizationmanager_domain devpts (chr_file (ioctl read write getattr)))
;;* lme

;;* lmx 19 system/sepolicy/private/virtualizationmanager.te

(allow virtualizationmanager_domain servicemanager (binder (call transfer)))
;;* lme

;;* lmx 19 system/sepolicy/private/virtualizationmanager.te

(allow servicemanager virtualizationmanager_domain (binder (call transfer)))
;;* lme

;;* lmx 22 system/sepolicy/private/virtualizationmanager.te

(allow virtualizationmanager_domain virtualization_service (service_manager (find)))
;;* lme

;;* lmx 23 system/sepolicy/private/virtualizationmanager.te

(allow virtualizationmanager_domain virtualizationservice (binder (call transfer)))
;;* lme

;;* lmx 23 system/sepolicy/private/virtualizationmanager.te

(allow virtualizationservice virtualizationmanager_domain (binder (transfer)))
;;* lme

;;* lmx 23 system/sepolicy/private/virtualizationmanager.te

(allow virtualizationmanager_domain virtualizationservice (fd (use)))
;;* lme

;;* lmx 25 system/sepolicy/private/virtualizationmanager.te

(allow virtualizationmanager_domain dropbox_service (service_manager (find)))
;;* lme

;;* lmx 27 system/sepolicy/private/virtualizationmanager.te

(allow virtualizationmanager_domain proc_version (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 34 system/sepolicy/private/virtualizationmanager.te

(allow virtualizationmanager_domain fwk_stats_service (service_manager (find)))
;;* lme

;;* lmx 35 system/sepolicy/private/virtualizationmanager.te

(allow virtualizationmanager_domain stats_service_server (binder (call transfer)))
;;* lme

;;* lmx 35 system/sepolicy/private/virtualizationmanager.te

(allow stats_service_server virtualizationmanager_domain (binder (transfer)))
;;* lme

;;* lmx 35 system/sepolicy/private/virtualizationmanager.te

(allow virtualizationmanager_domain stats_service_server (fd (use)))
;;* lme

;;* lmx 39 system/sepolicy/private/virtualizationmanager.te

(allow virtualizationmanager_domain system_server (binder (call transfer)))
;;* lme

;;* lmx 39 system/sepolicy/private/virtualizationmanager.te

(allow system_server virtualizationmanager_domain (binder (transfer)))
;;* lme

;;* lmx 39 system/sepolicy/private/virtualizationmanager.te

(allow virtualizationmanager_domain system_server (fd (use)))
;;* lme

;;* lmx 40 system/sepolicy/private/virtualizationmanager.te

(allow virtualizationmanager_domain package_native_service (service_manager (find)))
(allow virtualizationmanager_domain permission_service (service_manager (find)))
;;* lme

;;* lmx 44 system/sepolicy/private/virtualizationmanager.te

(allow virtualizationmanager_domain crosvm_vu_fs_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 44 system/sepolicy/private/virtualizationmanager.te

(allow virtualizationmanager_domain crosvm_vu_fs (process (transition)))
;;* lme

;;* lmx 44 system/sepolicy/private/virtualizationmanager.te

(allow crosvm_vu_fs crosvm_vu_fs_exec (file (read getattr map execute open entrypoint)))
;;* lme

;;* lmx 44 system/sepolicy/private/virtualizationmanager.te

(allow crosvm_vu_fs virtualizationmanager_domain (process (sigchld)))
;;* lme

(dontaudit virtualizationmanager_domain crosvm_vu_fs (process (noatsecure)))
;;* lmx 44 system/sepolicy/private/virtualizationmanager.te

(allow virtualizationmanager_domain crosvm_vu_fs (process (siginh rlimitinh)))
;;* lme

(typetransition virtualizationmanager_domain crosvm_vu_fs_exec process crosvm_vu_fs)
;;* lmx 45 system/sepolicy/private/virtualizationmanager.te

(allow virtualizationmanager_domain crosvm_vu_snd_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 45 system/sepolicy/private/virtualizationmanager.te

(allow virtualizationmanager_domain crosvm_vu_snd (process (transition)))
;;* lme

;;* lmx 45 system/sepolicy/private/virtualizationmanager.te

(allow crosvm_vu_snd crosvm_vu_snd_exec (file (read getattr map execute open entrypoint)))
;;* lme

;;* lmx 45 system/sepolicy/private/virtualizationmanager.te

(allow crosvm_vu_snd virtualizationmanager_domain (process (sigchld)))
;;* lme

(dontaudit virtualizationmanager_domain crosvm_vu_snd (process (noatsecure)))
;;* lmx 45 system/sepolicy/private/virtualizationmanager.te

(allow virtualizationmanager_domain crosvm_vu_snd (process (siginh rlimitinh)))
;;* lme

(typetransition virtualizationmanager_domain crosvm_vu_snd_exec process crosvm_vu_snd)
;;* lmx 48 system/sepolicy/private/virtualizationmanager.te

(allow virtualizationmanager_domain crosvm_domain (process (sigkill)))
;;* lme

;;* lmx 49 system/sepolicy/private/virtualizationmanager.te

(allow virtualizationmanager_domain crosvm_vu_fs (process (sigkill)))
;;* lme

;;* lmx 52 system/sepolicy/private/virtualizationmanager.te

(allow virtualizationmanager_domain virtualizationservice_data_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
;;* lme

;;* lmx 53 system/sepolicy/private/virtualizationmanager.te

(allow virtualizationmanager_domain virtualizationservice_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow virtualizationmanager_domain virtualizationservice_data_file (sock_file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 57 system/sepolicy/private/virtualizationmanager.te

(allow virtualizationmanager_domain apk_data_file (file (read getattr)))
;;* lme

;;* lmx 66 system/sepolicy/private/virtualizationmanager.te

(allow virtualizationmanager_domain app_data_file (file (read write getattr)))
(allow virtualizationmanager_domain privapp_data_file (file (read write getattr)))
(allow virtualizationmanager_domain apex_compos_data_file (file (read write getattr)))
(allow virtualizationmanager_domain apex_virt_data_file (file (read write getattr)))
(allow virtualizationmanager_domain aiseal_data_file (file (read write getattr)))
;;* lme

;;* lmx 70 system/sepolicy/private/virtualizationmanager.te

(allow virtualizationmanager_domain appsearch_vm_prop (file (read getattr map open)))
;;* lme

;;* lmx 73 system/sepolicy/private/virtualizationmanager.te

(allow virtualizationmanager_domain shell_data_file (file (read write getattr)))
;;* lme

;;* lmx 76 system/sepolicy/private/virtualizationmanager.te

(allow virtualizationmanager_domain apex_info_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 77 system/sepolicy/private/virtualizationmanager.te

(allow virtualizationmanager_domain apex_data_file (dir (search)))
;;* lme

;;* lmx 78 system/sepolicy/private/virtualizationmanager.te

(allow virtualizationmanager_domain staging_data_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 79 system/sepolicy/private/virtualizationmanager.te

(allow virtualizationmanager_domain staging_data_file (dir (search)))
;;* lme

;;* lmx 81 system/sepolicy/private/virtualizationmanager.te

(allow virtualizationmanager_domain apex_dm_device (blk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 82 system/sepolicy/private/virtualizationmanager.te

(allow virtualizationmanager_domain block_device (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 85 system/sepolicy/private/virtualizationmanager.te

(allow virtualizationmanager_domain derive_classpath_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lme

;;* lmx 86 system/sepolicy/private/virtualizationmanager.te

(allow virtualizationmanager_domain apex_mnt_dir (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

(dontaudit virtualizationmanager_domain self (dir (write)))
;;* lmx 91 system/sepolicy/private/virtualizationmanager.te

(allow virtualizationmanager_domain proc_pressure_mem (file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 94 system/sepolicy/private/virtualizationmanager.te

(allow virtualizationmanager_domain self (vsock_socket (read write create getattr setattr lock append map bind connect listen accept getopt setopt shutdown)))
;;* lme

;;* lmx 95 system/sepolicy/private/virtualizationmanager.te

(neverallow base_typeattr_1175 virtualizationmanager_domain (vsock_socket (create bind connect listen accept)))
;;* lme

;;* lmx 98 system/sepolicy/private/virtualizationmanager.te

(allow virtualizationmanager_domain hypervisor_prop (file (read getattr map open)))
;;* lme

;;* lmx 99 system/sepolicy/private/virtualizationmanager.te

(allow virtualizationmanager_domain hypervisor_restricted_prop (file (read getattr map open)))
;;* lme

;;* lmx 102 system/sepolicy/private/virtualizationmanager.te

(allow virtualizationmanager_domain hypervisor_pvmfw_prop (file (read getattr map open)))
;;* lme

(dontaudit virtualizationmanager_domain hypervisor_pvmfw_prop (file (read)))
;;* lmx 110 system/sepolicy/private/virtualizationmanager.te

(neverallow base_typeattr_1176 hypervisor_pvmfw_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 113 system/sepolicy/private/virtualizationmanager.te

(allow virtualizationmanager_domain hypervisor_virtualizationmanager_prop (file (read getattr map open)))
;;* lme

(dontaudit virtualizationmanager_domain hypervisor_virtualizationmanager_prop (file (read)))
;;* lmx 121 system/sepolicy/private/virtualizationmanager.te

(neverallow base_typeattr_1176 hypervisor_virtualizationmanager_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 124 system/sepolicy/private/virtualizationmanager.te

(allow virtualizationmanager_domain tombstoned_crash_socket (sock_file (write)))
;;* lme

;;* lmx 124 system/sepolicy/private/virtualizationmanager.te

(allow virtualizationmanager_domain tombstoned (unix_stream_socket (connectto)))
;;* lme

;;* lmx 127 system/sepolicy/private/virtualizationmanager.te

(allow virtualizationmanager_domain tombstone_data_file (file (getattr append)))
;;* lme

;;* lmx 128 system/sepolicy/private/virtualizationmanager.te

(allow virtualizationmanager_domain tombstoned (fd (use)))
;;* lme

;;* lmx 131 system/sepolicy/private/virtualizationmanager.te

(allow virtualizationmanager_domain proc_dt_avf (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 131 system/sepolicy/private/virtualizationmanager.te

(allow virtualizationmanager_domain proc_dt_avf (file (ioctl read getattr lock map open watch watch_reads)))
(allow virtualizationmanager_domain proc_dt_avf (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 132 system/sepolicy/private/virtualizationmanager.te

(allow virtualizationmanager_domain sysfs_dt_avf (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 132 system/sepolicy/private/virtualizationmanager.te

(allow virtualizationmanager_domain sysfs_dt_avf (file (ioctl read getattr lock map open watch watch_reads)))
(allow virtualizationmanager_domain sysfs_dt_avf (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 136 system/sepolicy/private/virtualizationmanager.te

(allow virtualizationmanager_domain shell_data_file (dir (search)))
;;* lme

;;* lmx 136 system/sepolicy/private/virtualizationmanager.te

(allow virtualizationmanager_domain shell_data_file (file (open)))
;;* lme

;;* lmx 142 system/sepolicy/private/virtualizationmanager.te

(allow virtualizationmanager_domain vendor_microdroid_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 142 system/sepolicy/private/virtualizationmanager.te

(allow virtualizationmanager_domain vendor_microdroid_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow virtualizationmanager_domain vendor_microdroid_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 143 system/sepolicy/private/virtualizationmanager.te

(allow virtualizationmanager_domain vendor_vm_file (file (read getattr)))
;;* lme

;;* lmx 144 system/sepolicy/private/virtualizationmanager.te

(allow virtualizationmanager_domain vendor_vm_data_file (file (read write getattr)))
;;* lme

;;* lmx 147 system/sepolicy/private/virtualizationmanager.te

(allow virtualizationmanager_domain nativetest_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 147 system/sepolicy/private/virtualizationmanager.te

(allow virtualizationmanager_domain nativetest_data_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow virtualizationmanager_domain nativetest_data_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 153 system/sepolicy/private/virtualizationmanager.te

(allow virtualizationmanager_domain property_socket (sock_file (write)))
;;* lme

;;* lmx 153 system/sepolicy/private/virtualizationmanager.te

(allow virtualizationmanager_domain init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 153 system/sepolicy/private/virtualizationmanager.te

(allow virtualizationmanager_domain avf_vm_traced_relay_enabled_prop (property_service (set)))
;;* lme

;;* lmx 153 system/sepolicy/private/virtualizationmanager.te

(allow virtualizationmanager_domain avf_vm_traced_relay_enabled_prop (file (read getattr map open)))
;;* lme

;;* lmx 156 system/sepolicy/private/virtualizationmanager.te

(allow virtualizationmanager_domain virtualizationservice (fifo_file (write)))
;;* lme

;;* lmx 163 system/sepolicy/private/virtualizationmanager.te

(neverallow base_typeattr_390 vendor_microdroid_file (dir (write create setattr relabelfrom link rename add_name remove_name reparent rmdir)))
;;* lme

;;* lmx 168 system/sepolicy/private/virtualizationmanager.te

(neverallow base_typeattr_390 vendor_microdroid_file (file (write create setattr relabelfrom append unlink link rename)))
;;* lme

;;* lmx 171 system/sepolicy/private/virtualizationmanager.te

(allow virtualizationmanager_domain crosvm_domain (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 171 system/sepolicy/private/virtualizationmanager.te

(allow virtualizationmanager_domain crosvm_domain (file (ioctl read getattr lock map open watch watch_reads)))
(allow virtualizationmanager_domain crosvm_domain (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

(dontaudit virtualizationmanager_domain apex_module_data_file (dir (search)))
;;* lmx 177 system/sepolicy/private/virtualizationmanager.te

(allow virtualizationmanager_domain vfio_handler (binder (call transfer)))
;;* lme

;;* lmx 177 system/sepolicy/private/virtualizationmanager.te

(allow vfio_handler virtualizationmanager_domain (binder (transfer)))
;;* lme

;;* lmx 177 system/sepolicy/private/virtualizationmanager.te

(allow virtualizationmanager_domain vfio_handler (fd (use)))
;;* lme

;;* lmx 182 system/sepolicy/private/virtualizationmanager.te

(allow virtualizationmanager_domain tun_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 182 system/sepolicy/private/virtualizationmanager.te

(allow virtualizationmanager_domain vmnic (fd (use)))
;;* lme

;;* lmx 190 system/sepolicy/private/virtualizationmanager.te

(allow virtualizationmanager_domain tee_service_contexts_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 193 system/sepolicy/private/virtualizationmanager.te

(allow virtualizationmanager_domain selinuxfs (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 193 system/sepolicy/private/virtualizationmanager.te

(allow virtualizationmanager_domain selinuxfs (file (ioctl read getattr lock map open watch watch_reads)))
(allow virtualizationmanager_domain selinuxfs (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 193 system/sepolicy/private/virtualizationmanager.te

(allow virtualizationmanager_domain selinuxfs (file (write lock append map open)))
;;* lme

;;* lmx 193 system/sepolicy/private/virtualizationmanager.te

(allow virtualizationmanager_domain kernel (security (compute_av)))
;;* lme

;;* lmx 193 system/sepolicy/private/virtualizationmanager.te

(allow virtualizationmanager_domain self (netlink_selinux_socket (read write create getattr setattr lock relabelfrom relabelto append bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
;;* lme

;;* lmx 199 system/sepolicy/private/virtualizationmanager.te

(allow virtualizationmanager_domain crosvm_domain (fd (use)))
;;* lme

;;* lmx 202 system/sepolicy/private/virtualizationmanager.te

(neverallow virtualizationmanager_domain self (capability (chown dac_override dac_read_search fowner fsetid kill setgid setuid setpcap linux_immutable net_bind_service net_broadcast net_admin net_raw ipc_lock ipc_owner sys_module sys_rawio sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_nice sys_resource sys_time sys_tty_config mknod lease audit_write audit_control setfcap)))
(neverallow virtualizationmanager_domain self (cap_userns (chown dac_override dac_read_search fowner fsetid kill setgid setuid setpcap linux_immutable net_bind_service net_broadcast net_admin net_raw ipc_lock ipc_owner sys_module sys_rawio sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_nice sys_resource sys_time sys_tty_config mknod lease audit_write audit_control setfcap)))
;;* lme

;;* lmx 10 system/sepolicy/private/virtualizationservice.te

(allow init virtualizationservice_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 10 system/sepolicy/private/virtualizationservice.te

(allow init virtualizationservice (process (transition)))
;;* lme

;;* lmx 10 system/sepolicy/private/virtualizationservice.te

(allow virtualizationservice virtualizationservice_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init virtualizationservice (process (noatsecure)))
;;* lmx 10 system/sepolicy/private/virtualizationservice.te

(allow init virtualizationservice (process (siginh rlimitinh)))
;;* lme

(typetransition init virtualizationservice_exec process virtualizationservice)
;;* lmx 13 system/sepolicy/private/virtualizationservice.te

(allow virtualizationservice servicemanager (binder (call transfer)))
;;* lme

;;* lmx 13 system/sepolicy/private/virtualizationservice.te

(allow servicemanager virtualizationservice (binder (call transfer)))
;;* lme

;;* lmx 16 system/sepolicy/private/virtualizationservice.te

(allow virtualizationservice virtualization_service (service_manager (add find)))
;;* lme

;;* lmx 16 system/sepolicy/private/virtualizationservice.te

(neverallow base_typeattr_1177 virtualization_service (service_manager (add)))
;;* lme

;;* lmx 16 system/sepolicy/private/virtualizationservice.te

(allow virtualizationservice su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 17 system/sepolicy/private/virtualizationservice.te

(allow virtualizationservice virtualization_maintenance_service (service_manager (add find)))
;;* lme

;;* lmx 17 system/sepolicy/private/virtualizationservice.te

(neverallow base_typeattr_1177 virtualization_maintenance_service (service_manager (add)))
;;* lme

;;* lmx 17 system/sepolicy/private/virtualizationservice.te

(allow virtualizationservice su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 21 system/sepolicy/private/virtualizationservice.te

(allow virtualizationservice vfio_handler_service (service_manager (find)))
;;* lme

;;* lmx 21 system/sepolicy/private/virtualizationservice.te

(allow virtualizationservice vfio_handler (binder (call transfer)))
;;* lme

;;* lmx 21 system/sepolicy/private/virtualizationservice.te

(allow vfio_handler virtualizationservice (binder (transfer)))
;;* lme

;;* lmx 21 system/sepolicy/private/virtualizationservice.te

(allow virtualizationservice vfio_handler (fd (use)))
;;* lme

;;* lmx 27 system/sepolicy/private/virtualizationservice.te

(allow virtualizationservice vmnic_service (service_manager (find)))
;;* lme

;;* lmx 27 system/sepolicy/private/virtualizationservice.te

(allow virtualizationservice vmnic (binder (call transfer)))
;;* lme

;;* lmx 27 system/sepolicy/private/virtualizationservice.te

(allow vmnic virtualizationservice (binder (transfer)))
;;* lme

;;* lmx 27 system/sepolicy/private/virtualizationservice.te

(allow virtualizationservice vmnic (fd (use)))
;;* lme

;;* lmx 27 system/sepolicy/private/virtualizationservice.te

(allow virtualizationservice vm_tethering_service (service_manager (find)))
;;* lme

;;* lmx 40 system/sepolicy/private/virtualizationservice.te

(allow virtualizationservice avf_virtualizationservice_prop (file (read getattr map open)))
;;* lme

;;* lmx 43 system/sepolicy/private/virtualizationservice.te

(allow virtualizationservice system_server (binder (call transfer)))
;;* lme

;;* lmx 43 system/sepolicy/private/virtualizationservice.te

(allow system_server virtualizationservice (binder (transfer)))
;;* lme

;;* lmx 43 system/sepolicy/private/virtualizationservice.te

(allow virtualizationservice system_server (fd (use)))
;;* lme

;;* lmx 44 system/sepolicy/private/virtualizationservice.te

(allow virtualizationservice permission_service (service_manager (find)))
;;* lme

;;* lmx 47 system/sepolicy/private/virtualizationservice.te

(allow virtualizationservice remote_provisioning_service_server (binder (call transfer)))
;;* lme

;;* lmx 47 system/sepolicy/private/virtualizationservice.te

(allow remote_provisioning_service_server virtualizationservice (binder (transfer)))
;;* lme

;;* lmx 47 system/sepolicy/private/virtualizationservice.te

(allow virtualizationservice remote_provisioning_service_server (fd (use)))
;;* lme

;;* lmx 48 system/sepolicy/private/virtualizationservice.te

(allow virtualizationservice remote_provisioning_service (service_manager (find)))
;;* lme

;;* lmx 52 system/sepolicy/private/virtualizationservice.te

(allow virtualizationservice virtualizationmanager_domain (binder (call transfer)))
;;* lme

;;* lmx 52 system/sepolicy/private/virtualizationservice.te

(allow virtualizationmanager_domain virtualizationservice (binder (transfer)))
;;* lme

;;* lmx 52 system/sepolicy/private/virtualizationservice.te

(allow virtualizationservice virtualizationmanager_domain (fd (use)))
;;* lme

;;* lmx 55 system/sepolicy/private/virtualizationservice.te

(allow virtualizationservice hal_secretkeeper (memfd_file (read write getattr map)))
;;* lme

;;* lmx 55 system/sepolicy/private/virtualizationservice.te

(allow hal_secretkeeper virtualizationservice (memfd_file (read write getattr map)))
;;* lme

;;* lmx 59 system/sepolicy/private/virtualizationservice.te

(allow virtualizationservice self (capability (sys_resource)))
;;* lme

;;* lmx 60 system/sepolicy/private/virtualizationservice.te

(allow virtualizationservice virtualizationmanager_domain (process (setrlimit)))
;;* lme

;;* lmx 62 system/sepolicy/private/virtualizationservice.te

(allow virtualizationservice vmlauncher_app (binder (transfer)))
;;* lme

;;* lmx 69 system/sepolicy/private/virtualizationservice.te

(allow virtualizationservice self (capability (chown)))
;;* lme

;;* lmx 73 system/sepolicy/private/virtualizationservice.te

(allow virtualizationservice virtualizationservice_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 74 system/sepolicy/private/virtualizationservice.te

(allow virtualizationservice virtualizationservice_data_file (sock_file (unlink)))
;;* lme

;;* lmx 75 system/sepolicy/private/virtualizationservice.te

(allow virtualizationservice virtualizationservice_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 79 system/sepolicy/private/virtualizationservice.te

(allow virtualizationservice adbd (fd (use)))
;;* lme

;;* lmx 80 system/sepolicy/private/virtualizationservice.te

(allow virtualizationservice adbd (unix_stream_socket (read write)))
;;* lme

;;* lmx 83 system/sepolicy/private/virtualizationservice.te

(allow virtualizationservice virtualizationmanager_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 83 system/sepolicy/private/virtualizationservice.te

(allow virtualizationservice virtualizationservice_virtualizationmanager (process (transition)))
;;* lme

;;* lmx 83 system/sepolicy/private/virtualizationservice.te

(allow virtualizationservice_virtualizationmanager virtualizationmanager_exec (file (read getattr map execute open entrypoint)))
;;* lme

;;* lmx 83 system/sepolicy/private/virtualizationservice.te

(allow virtualizationservice_virtualizationmanager virtualizationservice (process (sigchld)))
;;* lme

(dontaudit virtualizationservice virtualizationservice_virtualizationmanager (process (noatsecure)))
;;* lmx 83 system/sepolicy/private/virtualizationservice.te

(allow virtualizationservice virtualizationservice_virtualizationmanager (process (siginh rlimitinh)))
;;* lme

(typetransition virtualizationservice virtualizationmanager_exec process virtualizationservice_virtualizationmanager)
;;* lmx 83 system/sepolicy/private/virtualizationservice.te

(allow virtualizationservice_virtualizationmanager crosvm_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 83 system/sepolicy/private/virtualizationservice.te

(allow virtualizationservice_virtualizationmanager virtualizationservice_virtmgr_crosvm (process (transition)))
;;* lme

;;* lmx 83 system/sepolicy/private/virtualizationservice.te

(allow virtualizationservice_virtmgr_crosvm crosvm_exec (file (read getattr map execute open entrypoint)))
;;* lme

;;* lmx 83 system/sepolicy/private/virtualizationservice.te

(allow virtualizationservice_virtmgr_crosvm virtualizationservice_virtualizationmanager (process (sigchld)))
;;* lme

(dontaudit virtualizationservice_virtualizationmanager virtualizationservice_virtmgr_crosvm (process (noatsecure)))
;;* lmx 83 system/sepolicy/private/virtualizationservice.te

(allow virtualizationservice_virtualizationmanager virtualizationservice_virtmgr_crosvm (process (siginh rlimitinh)))
;;* lme

(typetransition virtualizationservice_virtualizationmanager crosvm_exec process virtualizationservice_virtmgr_crosvm)
;;* lmx 83 system/sepolicy/private/virtualizationservice.te

(allow virtualizationservice_virtualizationmanager hal_secretkeeper (memfd_file (read write getattr map)))
;;* lme

;;* lmx 83 system/sepolicy/private/virtualizationservice.te

(allow hal_secretkeeper virtualizationservice_virtualizationmanager (memfd_file (read write getattr map)))
;;* lme

;;* lmx 83 system/sepolicy/private/virtualizationservice.te

(allow virtualizationservice_virtualizationmanager hal_vm_capabilities (memfd_file (read write getattr map)))
;;* lme

;;* lmx 83 system/sepolicy/private/virtualizationservice.te

(allow hal_vm_capabilities virtualizationservice_virtualizationmanager (memfd_file (read write getattr map)))
;;* lme

;;* lmx 83 system/sepolicy/private/virtualizationservice.te

(allow virtualizationservice_virtualizationmanager virtualizationservice (unix_stream_socket (ioctl read write getattr getopt)))
(allow virtualizationservice_virtmgr_crosvm virtualizationservice (unix_stream_socket (ioctl read write getattr getopt)))
;;* lme

;;* lmx 83 system/sepolicy/private/virtualizationservice.te

(allow virtualizationservice_virtualizationmanager virtualizationservice (fd (use)))
(allow virtualizationservice_virtmgr_crosvm virtualizationservice (fd (use)))
;;* lme

;;* lmx 83 system/sepolicy/private/virtualizationservice.te

(allow virtualizationservice virtualizationservice_virtualizationmanager (fd (use)))
;;* lme

;;* lmx 83 system/sepolicy/private/virtualizationservice.te

(allow virtualizationservice_virtualizationmanager virtualizationservice (fifo_file (ioctl read write getattr)))
(allow virtualizationservice_virtmgr_crosvm virtualizationservice (fifo_file (ioctl read write getattr)))
;;* lme

;;* lmx 83 system/sepolicy/private/virtualizationservice.te

(allow virtualizationservice virtualizationservice_virtualizationmanager (vsock_socket (read write getattr getopt)))
;;* lme

;;* lmx 83 system/sepolicy/private/virtualizationservice.te

(allow virtualizationservice hypervisor_prop (file (read getattr map open)))
;;* lme

;;* lmx 83 system/sepolicy/private/virtualizationservice.te

(allow virtualizationservice virtualizationservice_data_file (file (read getattr)))
;;* lme

;;* lmx 83 system/sepolicy/private/virtualizationservice.te

(allow virtualizationservice_virtualizationmanager virtualizationservice (dir (search)))
;;* lme

;;* lmx 83 system/sepolicy/private/virtualizationservice.te

(allow virtualizationservice_virtualizationmanager virtualizationservice (file (read)))
;;* lme

;;* lmx 83 system/sepolicy/private/virtualizationservice.te

(allow virtualizationservice_virtualizationmanager virtualizationservice (lnk_file (read)))
;;* lme

;;* lmx 83 system/sepolicy/private/virtualizationservice.te

(allow virtualizationservice virtualizationservice_virtmgr_crosvm (process (sigkill)))
;;* lme

;;* lmx 83 system/sepolicy/private/virtualizationservice.te

(allow virtualizationservice_virtmgr_crosvm hal_graphics_allocator (memfd_file (read write getattr map)))
;;* lme

;;* lmx 83 system/sepolicy/private/virtualizationservice.te

(allow hal_graphics_allocator virtualizationservice_virtmgr_crosvm (memfd_file (read write getattr map)))
;;* lme

;;* lmx 88 system/sepolicy/private/virtualizationservice.te

(allow virtualizationservice apex_module_data_file (dir (getattr search)))
;;* lme

;;* lmx 89 system/sepolicy/private/virtualizationservice.te

(allow virtualizationservice apex_virt_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 90 system/sepolicy/private/virtualizationservice.te

(allow virtualizationservice apex_virt_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 94 system/sepolicy/private/virtualizationservice.te

(allow virtualizationservice self (vsock_socket (read write create getattr setattr lock append map bind listen accept getopt setopt shutdown)))
;;* lme

;;* lmx 95 system/sepolicy/private/virtualizationservice.te

(neverallow base_typeattr_1178 virtualizationservice (vsock_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
;;* lme

;;* lmx 99 system/sepolicy/private/virtualizationservice.te

(allow virtualizationservice self (vsock_socket (connect)))
;;* lme

;;* lmx 102 system/sepolicy/private/virtualizationservice.te

(allow virtualizationservice dumpstate (fd (use)))
;;* lme

;;* lmx 103 system/sepolicy/private/virtualizationservice.te

(allow virtualizationservice dumpstate (fifo_file (write)))
;;* lme

;;* lmx 106 system/sepolicy/private/virtualizationservice.te

(allow virtualizationservice property_socket (sock_file (write)))
;;* lme

;;* lmx 106 system/sepolicy/private/virtualizationservice.te

(allow virtualizationservice init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 106 system/sepolicy/private/virtualizationservice.te

(allow virtualizationservice virtualizationservice_prop (property_service (set)))
;;* lme

;;* lmx 106 system/sepolicy/private/virtualizationservice.te

(allow virtualizationservice virtualizationservice_prop (file (read getattr map open)))
;;* lme

;;* lmx 109 system/sepolicy/private/virtualizationservice.te

(allow virtualizationservice statsdw_socket (sock_file (write)))
;;* lme

;;* lmx 109 system/sepolicy/private/virtualizationservice.te

(allow virtualizationservice statsd (unix_dgram_socket (sendto)))
;;* lme

;;* lmx 112 system/sepolicy/private/virtualizationservice.te

(allow virtualizationservice tombstoned_crash_socket (sock_file (write)))
;;* lme

;;* lmx 112 system/sepolicy/private/virtualizationservice.te

(allow virtualizationservice tombstoned (unix_stream_socket (connectto)))
;;* lme

;;* lmx 115 system/sepolicy/private/virtualizationservice.te

(allow virtualizationservice tombstone_data_file (file (getattr append)))
;;* lme

;;* lmx 116 system/sepolicy/private/virtualizationservice.te

(allow virtualizationservice tombstoned (fd (use)))
;;* lme

;;* lmx 119 system/sepolicy/private/virtualizationservice.te

(allow virtualizationservice vfio_device (chr_file (getattr)))
;;* lme

;;* lmx 120 system/sepolicy/private/virtualizationservice.te

(allow virtualizationservice vfio_device (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 123 system/sepolicy/private/virtualizationservice.te

(allow virtualizationservice virtualizationmanager_domain (fd (use)))
;;* lme

;;* lmx 126 system/sepolicy/private/virtualizationservice.te

(allow virtualizationservice vendor_configs_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 126 system/sepolicy/private/virtualizationservice.te

(allow virtualizationservice vendor_configs_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow virtualizationservice vendor_configs_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 132 system/sepolicy/private/virtualizationservice.te

(neverallow base_typeattr_1179 virtualizationservice_prop (property_service (set)))
;;* lme

;;* lmx 139 system/sepolicy/private/virtualizationservice.te

(neverallow base_typeattr_1180 virtualizationservice_data_file (file (create open)))
;;* lme

;;* lmx 147 system/sepolicy/private/virtualizationservice.te

(neverallow virtualizationservice base_typeattr_1181 (process (setrlimit)))
;;* lme

;;* lmx 149 system/sepolicy/private/virtualizationservice.te

(allow virtualizationservice tun_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 149 system/sepolicy/private/virtualizationservice.te

(allow virtualizationservice vmnic (fd (use)))
;;* lme

;;* lmx 155 system/sepolicy/private/virtualizationservice.te

(neverallow base_typeattr_1182 vfio_handler (binder (call)))
;;* lme

;;* lmx 162 system/sepolicy/private/virtualizationservice.te

(neverallow base_typeattr_1183 virtualization_maintenance_service (service_manager (find)))
;;* lme

(typetransition vmlauncher_app tmpfs file appdomain_tmpfs)
;;* lmx 5 system/sepolicy/private/vmlauncher_app.te

(allow vmlauncher_app vmlauncher_app_userfaultfd (anon_inode (ioctl read create)))
;;* lme

(dontaudit su vmlauncher_app_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lmx 5 system/sepolicy/private/vmlauncher_app.te

(neverallow base_typeattr_1184 vmlauncher_app_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 5 system/sepolicy/private/vmlauncher_app.te

(allow vmlauncher_app appdomain_tmpfs (file (read write getattr map execute)))
;;* lme

;;* lmx 5 system/sepolicy/private/vmlauncher_app.te

(allow vmlauncher_app appdomain (memfd_file (read write getattr map execute)))
;;* lme

;;* lmx 5 system/sepolicy/private/vmlauncher_app.te

(neverallow base_typeattr_1185 base_typeattr_1184 (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 5 system/sepolicy/private/vmlauncher_app.te

(neverallow base_typeattr_1186 vmlauncher_app (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 5 system/sepolicy/private/vmlauncher_app.te

(neverallow base_typeattr_1187 vmlauncher_app (process (ptrace)))
;;* lme

;;* lmx 5 system/sepolicy/private/vmlauncher_app.te

(neverallow vmlauncher_app base_typeattr_1188 (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 8 system/sepolicy/private/vmlauncher_app.te

(allow vmlauncher_app shell_data_file (file (write)))
;;* lme

;;* lmx 10 system/sepolicy/private/vmlauncher_app.te

(allow vmlauncher_app fsck_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lme

;;* lmx 11 system/sepolicy/private/vmlauncher_app.te

(allow vmlauncher_app crosvm_domain (fd (use)))
;;* lme

;;* lmx 12 system/sepolicy/private/vmlauncher_app.te

(allow vmlauncher_app crosvm_domain_tmpfs (file (read write map)))
;;* lme

;;* lmx 13 system/sepolicy/private/vmlauncher_app.te

(allow vmlauncher_app crosvm_domain (memfd_file (read write map)))
;;* lme

;;* lmx 14 system/sepolicy/private/vmlauncher_app.te

(allow vmlauncher_app crosvm_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lme

;;* lmx 16 system/sepolicy/private/vmlauncher_app.te

(allow vmlauncher_app privapp_data_file (sock_file (write create getattr unlink)))
;;* lme

;;* lmx 18 system/sepolicy/private/vmlauncher_app.te

(allow vmlauncher_app virtualization_service (service_manager (find)))
;;* lme

;;* lmx 18 system/sepolicy/private/vmlauncher_app.te

(allow vmlauncher_app virtualizationservice (binder (call)))
;;* lme

;;* lmx 18 system/sepolicy/private/vmlauncher_app.te

(allow vmlauncher_app crosvm_domain (binder (call transfer)))
;;* lme

;;* lmx 25 system/sepolicy/private/vmlauncher_app.te

(allow vmlauncher_app self (vsock_socket (read write create getattr setattr lock append map bind connect listen accept getopt setopt shutdown)))
;;* lme

(typetransition vmlauncher_app devpts chr_file vmlauncher_app_devpts)
;;* lmx 29 system/sepolicy/private/vmlauncher_app.te

(allow vmlauncher_app vmlauncher_app_devpts (chr_file (ioctl read write getattr open)))
;;* lme

;;* lmx 29 system/sepolicy/private/vmlauncher_app.te

(allowx vmlauncher_app vmlauncher_app_devpts (ioctl chr_file ((range 0x5401 0x5404) 0x540b (range 0x540e 0x5411) (range 0x5413 0x5414) (range 0x5450 0x5451))))
;;* lme

;;* lmx 29 system/sepolicy/private/vmlauncher_app.te

(neverallowx base_typeattr_248 vmlauncher_app_devpts (ioctl chr_file (0x5412)))
;;* lme

;;* lmx 29 system/sepolicy/private/vmlauncher_app.te

(allow vmlauncher_app vmlauncher_app_devpts (chr_file (setattr)))
;;* lme

;;* lmx 1 system/sepolicy/private/vmnic.te

(allow init vmnic_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 1 system/sepolicy/private/vmnic.te

(allow init vmnic (process (transition)))
;;* lme

;;* lmx 1 system/sepolicy/private/vmnic.te

(allow vmnic vmnic_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init vmnic (process (noatsecure)))
;;* lmx 1 system/sepolicy/private/vmnic.te

(allow init vmnic (process (siginh rlimitinh)))
;;* lme

(typetransition init vmnic_exec process vmnic)
;;* lmx 1 system/sepolicy/private/vmnic.te

(allow vmnic vmnic_service (service_manager (add find)))
;;* lme

;;* lmx 1 system/sepolicy/private/vmnic.te

(neverallow base_typeattr_1189 vmnic_service (service_manager (add)))
;;* lme

;;* lmx 1 system/sepolicy/private/vmnic.te

(allow vmnic su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 1 system/sepolicy/private/vmnic.te

(allow vmnic servicemanager (binder (call transfer)))
;;* lme

;;* lmx 1 system/sepolicy/private/vmnic.te

(allow servicemanager vmnic (binder (call transfer)))
;;* lme

;;* lmx 1 system/sepolicy/private/vmnic.te

(allow vmnic self (capability (net_admin)))
(allow vmnic self (cap_userns (net_admin)))
;;* lme

;;* lmx 1 system/sepolicy/private/vmnic.te

(allow vmnic self (tun_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
;;* lme

;;* lmx 1 system/sepolicy/private/vmnic.te

(allow vmnic tun_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 1 system/sepolicy/private/vmnic.te

(allowx vmnic tun_device (ioctl chr_file (0x54ca 0x54d2)))
;;* lme

;;* lmx 1 system/sepolicy/private/vmnic.te

(allow vmnic self (udp_socket (ioctl read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
;;* lme

;;* lmx 1 system/sepolicy/private/vmnic.te

(allowx vmnic self (ioctl udp_socket (0x8914)))
;;* lme

;;* lmx 1 system/sepolicy/private/vmnic.te

(neverallow base_typeattr_1190 vmnic (binder (call)))
;;* lme

;;* lmx 3 system/sepolicy/private/vold.te

(allow init vold_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 3 system/sepolicy/private/vold.te

(allow init vold (process (transition)))
;;* lme

;;* lmx 3 system/sepolicy/private/vold.te

(allow vold vold_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init vold (process (noatsecure)))
;;* lmx 3 system/sepolicy/private/vold.te

(allow init vold (process (siginh rlimitinh)))
;;* lme

(typetransition init vold_exec process vold)
;;* lmx 6 system/sepolicy/private/vold.te

(allow vold sgdisk_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 6 system/sepolicy/private/vold.te

(allow vold sgdisk (process (transition)))
;;* lme

;;* lmx 6 system/sepolicy/private/vold.te

(allow sgdisk sgdisk_exec (file (read getattr map execute open entrypoint)))
;;* lme

;;* lmx 6 system/sepolicy/private/vold.te

(allow sgdisk vold (process (sigchld)))
;;* lme

(dontaudit vold sgdisk (process (noatsecure)))
;;* lmx 6 system/sepolicy/private/vold.te

(allow vold sgdisk (process (siginh rlimitinh)))
;;* lme

(typetransition vold sgdisk_exec process sgdisk)
;;* lmx 7 system/sepolicy/private/vold.te

(allow vold sdcardd_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 7 system/sepolicy/private/vold.te

(allow vold sdcardd (process (transition)))
;;* lme

;;* lmx 7 system/sepolicy/private/vold.te

(allow sdcardd sdcardd_exec (file (read getattr map execute open entrypoint)))
;;* lme

;;* lmx 7 system/sepolicy/private/vold.te

(allow sdcardd vold (process (sigchld)))
;;* lme

(dontaudit vold sdcardd (process (noatsecure)))
;;* lmx 7 system/sepolicy/private/vold.te

(allow vold sdcardd (process (siginh rlimitinh)))
;;* lme

(typetransition vold sdcardd_exec process sdcardd)
;;* lmx 8 system/sepolicy/private/vold.te

(allow vold fuseblkd_untrusted_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 8 system/sepolicy/private/vold.te

(allow vold fuseblkd_untrusted (process (transition)))
;;* lme

;;* lmx 8 system/sepolicy/private/vold.te

(allow fuseblkd_untrusted fuseblkd_untrusted_exec (file (read getattr map execute open entrypoint)))
;;* lme

;;* lmx 8 system/sepolicy/private/vold.te

(allow fuseblkd_untrusted vold (process (sigchld)))
;;* lme

(dontaudit vold fuseblkd_untrusted (process (noatsecure)))
;;* lmx 8 system/sepolicy/private/vold.te

(allow vold fuseblkd_untrusted (process (siginh rlimitinh)))
;;* lme

(typetransition vold fuseblkd_untrusted_exec process fuseblkd_untrusted)
;;* lmx 11 system/sepolicy/private/vold.te

(allow vold e2fs_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 11 system/sepolicy/private/vold.te

(allow vold e2fs (process (transition)))
;;* lme

;;* lmx 11 system/sepolicy/private/vold.te

(allow e2fs e2fs_exec (file (read getattr map execute open entrypoint)))
;;* lme

;;* lmx 11 system/sepolicy/private/vold.te

(allow e2fs vold (process (sigchld)))
;;* lme

(dontaudit vold e2fs (process (noatsecure)))
;;* lmx 11 system/sepolicy/private/vold.te

(allow vold e2fs (process (siginh rlimitinh)))
;;* lme

(typetransition vold e2fs_exec process e2fs)
;;* lmx 16 system/sepolicy/private/vold.te

(allow vold blkid_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 16 system/sepolicy/private/vold.te

(allow vold blkid (process (transition)))
;;* lme

;;* lmx 16 system/sepolicy/private/vold.te

(allow blkid blkid_exec (file (read getattr map execute open entrypoint)))
;;* lme

;;* lmx 16 system/sepolicy/private/vold.te

(allow blkid vold (process (sigchld)))
;;* lme

(dontaudit vold blkid (process (noatsecure)))
;;* lmx 16 system/sepolicy/private/vold.te

(allow vold blkid (process (siginh rlimitinh)))
;;* lme

;;* lmx 17 system/sepolicy/private/vold.te

(allow vold blkid_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 17 system/sepolicy/private/vold.te

(allow vold blkid_untrusted (process (transition)))
;;* lme

;;* lmx 17 system/sepolicy/private/vold.te

(allow blkid_untrusted blkid_exec (file (read getattr map execute open entrypoint)))
;;* lme

;;* lmx 17 system/sepolicy/private/vold.te

(allow blkid_untrusted vold (process (sigchld)))
;;* lme

(dontaudit vold blkid_untrusted (process (noatsecure)))
;;* lmx 17 system/sepolicy/private/vold.te

(allow vold blkid_untrusted (process (siginh rlimitinh)))
;;* lme

;;* lmx 18 system/sepolicy/private/vold.te

(allow vold fsck_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 18 system/sepolicy/private/vold.te

(allow vold fsck (process (transition)))
;;* lme

;;* lmx 18 system/sepolicy/private/vold.te

(allow fsck fsck_exec (file (read getattr map execute open entrypoint)))
;;* lme

;;* lmx 18 system/sepolicy/private/vold.te

(allow fsck vold (process (sigchld)))
;;* lme

(dontaudit vold fsck (process (noatsecure)))
;;* lmx 18 system/sepolicy/private/vold.te

(allow vold fsck (process (siginh rlimitinh)))
;;* lme

;;* lmx 19 system/sepolicy/private/vold.te

(allow vold fsck_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 19 system/sepolicy/private/vold.te

(allow vold fsck_untrusted (process (transition)))
;;* lme

;;* lmx 19 system/sepolicy/private/vold.te

(allow fsck_untrusted fsck_exec (file (read getattr map execute open entrypoint)))
;;* lme

;;* lmx 19 system/sepolicy/private/vold.te

(allow fsck_untrusted vold (process (sigchld)))
;;* lme

(dontaudit vold fsck_untrusted (process (noatsecure)))
;;* lmx 19 system/sepolicy/private/vold.te

(allow vold fsck_untrusted (process (siginh rlimitinh)))
;;* lme

(typetransition vold storage_file dir storage_stub_file)
(typetransition vold mnt_media_rw_file dir mnt_media_rw_stub_file)
;;* lmx 27 system/sepolicy/private/vold.te

(allow vold vold_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 28 system/sepolicy/private/vold.te

(allow vold storage_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 29 system/sepolicy/private/vold.te

(allow vold incremental_prop (file (read getattr map open)))
;;* lme

;;* lmx 30 system/sepolicy/private/vold.te

(allow vold gsid_prop (file (read getattr map open)))
;;* lme

;;* lmx 31 system/sepolicy/private/vold.te

(allow vold casefolding_status_prop (file (read getattr map open)))
;;* lme

;;* lmx 33 system/sepolicy/private/vold.te

(allow vold property_socket (sock_file (write)))
;;* lme

;;* lmx 33 system/sepolicy/private/vold.te

(allow vold init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 33 system/sepolicy/private/vold.te

(allow vold vold_prop (property_service (set)))
;;* lme

;;* lmx 33 system/sepolicy/private/vold.te

(allow vold vold_prop (file (read getattr map open)))
;;* lme

;;* lmx 34 system/sepolicy/private/vold.te

(allow vold property_socket (sock_file (write)))
;;* lme

;;* lmx 34 system/sepolicy/private/vold.te

(allow vold init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 34 system/sepolicy/private/vold.te

(allow vold vold_status_prop (property_service (set)))
;;* lme

;;* lmx 34 system/sepolicy/private/vold.te

(allow vold vold_status_prop (file (read getattr map open)))
;;* lme

;;* lmx 35 system/sepolicy/private/vold.te

(allow vold property_socket (sock_file (write)))
;;* lme

;;* lmx 35 system/sepolicy/private/vold.te

(allow vold init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 35 system/sepolicy/private/vold.te

(allow vold powerctl_prop (property_service (set)))
;;* lme

;;* lmx 35 system/sepolicy/private/vold.te

(allow vold powerctl_prop (file (read getattr map open)))
;;* lme

;;* lmx 36 system/sepolicy/private/vold.te

(allow vold property_socket (sock_file (write)))
;;* lme

;;* lmx 36 system/sepolicy/private/vold.te

(allow vold init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 36 system/sepolicy/private/vold.te

(allow vold ctl_fuse_prop (property_service (set)))
;;* lme

;;* lmx 36 system/sepolicy/private/vold.te

(allow vold ctl_fuse_prop (file (read getattr map open)))
;;* lme

;;* lmx 37 system/sepolicy/private/vold.te

(allow vold property_socket (sock_file (write)))
;;* lme

;;* lmx 37 system/sepolicy/private/vold.te

(allow vold init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 37 system/sepolicy/private/vold.te

(allow vold restorecon_prop (property_service (set)))
;;* lme

;;* lmx 37 system/sepolicy/private/vold.te

(allow vold restorecon_prop (file (read getattr map open)))
;;* lme

;;* lmx 38 system/sepolicy/private/vold.te

(allow vold property_socket (sock_file (write)))
;;* lme

;;* lmx 38 system/sepolicy/private/vold.te

(allow vold init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 38 system/sepolicy/private/vold.te

(allow vold ota_prop (property_service (set)))
;;* lme

;;* lmx 38 system/sepolicy/private/vold.te

(allow vold ota_prop (file (read getattr map open)))
;;* lme

;;* lmx 39 system/sepolicy/private/vold.te

(allow vold property_socket (sock_file (write)))
;;* lme

;;* lmx 39 system/sepolicy/private/vold.te

(allow vold init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 39 system/sepolicy/private/vold.te

(allow vold boottime_prop (property_service (set)))
;;* lme

;;* lmx 39 system/sepolicy/private/vold.te

(allow vold boottime_prop (file (read getattr map open)))
;;* lme

;;* lmx 40 system/sepolicy/private/vold.te

(allow vold property_socket (sock_file (write)))
;;* lme

;;* lmx 40 system/sepolicy/private/vold.te

(allow vold init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 40 system/sepolicy/private/vold.te

(allow vold boottime_public_prop (property_service (set)))
;;* lme

;;* lmx 40 system/sepolicy/private/vold.te

(allow vold boottime_public_prop (file (read getattr map open)))
;;* lme

;;* lmx 53 system/sepolicy/private/vold.te

(allow vold vold_key (keystore2_key (convert_storage_key_to_ephemeral delete get_info manage_blob rebind req_forced_op update use)))
;;* lme

;;* lmx 56 system/sepolicy/private/vold.te

(allow vold keystore (binder (call)))
;;* lme

;;* lmx 59 system/sepolicy/private/vold.te

(allow vold keystore_service (service_manager (find)))
;;* lme

;;* lmx 60 system/sepolicy/private/vold.te

(allow vold keystore_maintenance_service (service_manager (find)))
;;* lme

;;* lmx 62 system/sepolicy/private/vold.te

(allow vold casefolding_remover_service (service_manager (find)))
;;* lme

;;* lmx 63 system/sepolicy/private/vold.te

(allow vold casefolding_remover (binder (call)))
;;* lme

;;* lmx 66 system/sepolicy/private/vold.te

(allow vold keystore (keystore2 (early_boot_ended)))
;;* lme

;;* lmx 67 system/sepolicy/private/vold.te

(allow vold keystore (keystore2 (delete_all_keys)))
;;* lme

;;* lmx 97 system/sepolicy/private/vold.te

(allow vold system_userdir_file (dir (write add_name remove_name)))
(allow vold vendor_userdir_file (dir (write add_name remove_name)))
(allow vold media_userdir_file (dir (write add_name remove_name)))
;;* lme

;;* lmx 100 system/sepolicy/private/vold.te

(allow vold cache_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 101 system/sepolicy/private/vold.te

(allow vold cache_file (file (read getattr)))
;;* lme

;;* lmx 102 system/sepolicy/private/vold.te

(allow vold cache_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 104 system/sepolicy/private/vold.te

(allow vold base_typeattr_1191 (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 104 system/sepolicy/private/vold.te

(allow vold base_typeattr_1191 (file (ioctl read getattr lock map open watch watch_reads)))
(allow vold base_typeattr_1191 (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 115 system/sepolicy/private/vold.te

(allow vold sysfs (file (write lock append map open)))
(allow vold sysfs_devices_block (file (write lock append map open)))
(allow vold sysfs_dm (file (write lock append map open)))
(allow vold sysfs_loop (file (write lock append map open)))
(allow vold sysfs_usb (file (write lock append map open)))
(allow vold sysfs_fs_f2fs (file (write lock append map open)))
(allow vold sysfs_zram_uevent (file (write lock append map open)))
(allow vold sysfs_ublk (file (write lock append map open)))
;;* lme

;;* lmx 117 system/sepolicy/private/vold.te

(allow vold rootfs (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 117 system/sepolicy/private/vold.te

(allow vold rootfs (file (ioctl read getattr lock map open watch watch_reads)))
(allow vold rootfs (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 118 system/sepolicy/private/vold.te

(allow vold metadata_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 118 system/sepolicy/private/vold.te

(allow vold metadata_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow vold metadata_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 127 system/sepolicy/private/vold.te

(allow vold proc (file (ioctl read getattr lock map open watch watch_reads)))
(allow vold proc_drop_caches (file (ioctl read getattr lock map open watch watch_reads)))
(allow vold proc_bootconfig (file (ioctl read getattr lock map open watch watch_reads)))
(allow vold proc_cmdline (file (ioctl read getattr lock map open watch watch_reads)))
(allow vold proc_filesystems (file (ioctl read getattr lock map open watch watch_reads)))
(allow vold proc_meminfo (file (ioctl read getattr lock map open watch watch_reads)))
(allow vold proc_mounts (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 130 system/sepolicy/private/vold.te

(allow vold file_contexts_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 133 system/sepolicy/private/vold.te

(allow vold self (process (setexec)))
;;* lme

;;* lmx 136 system/sepolicy/private/vold.te

(allow vold e2fs_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lme

;;* lmx 140 system/sepolicy/private/vold.te

(allowx vold fs_type (ioctl dir (0x5879)))
(allowx vold file_type (ioctl dir (0x5879)))
;;* lme

;;* lmx 151 system/sepolicy/private/vold.te

(allowx vold data_file_type (ioctl dir (0x6613 (range 0x6615 0x6618) 0x661a)))
;;* lme

;;* lmx 164 system/sepolicy/private/vold.te

(allowx vold vold_metadata_file (ioctl file (0x660b)))
(allowx vold unencrypted_data_file (ioctl file (0x660b)))
(allowx vold vold_data_file (ioctl file (0x660b)))
;;* lme

;;* lmx 164 system/sepolicy/private/vold.te

(allowx vold vold_metadata_file (ioctl file (0xf514)))
(allowx vold unencrypted_data_file (ioctl file (0xf514)))
(allowx vold vold_data_file (ioctl file (0xf514)))
;;* lme

;;* lmx 167 system/sepolicy/private/vold.te

(allow vold self (process (setfscreate)))
;;* lme

;;* lmx 168 system/sepolicy/private/vold.te

(allow vold system_file (file (getattr map execute execute_no_trans)))
;;* lme

;;* lmx 170 system/sepolicy/private/vold.te

(allow vold block_device (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 171 system/sepolicy/private/vold.te

(allow vold device (dir (write)))
;;* lme

;;* lmx 172 system/sepolicy/private/vold.te

(allow vold devpts (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 173 system/sepolicy/private/vold.te

(allow vold rootfs (dir (mounton)))
;;* lme

;;* lmx 174 system/sepolicy/private/vold.te

(allow vold sdcard_type (dir (mounton)))
(allow vold fuse (dir (mounton)))
;;* lme

;;* lmx 175 system/sepolicy/private/vold.te

(allow vold sdcard_type (filesystem (mount remount unmount)))
(allow vold fuse (filesystem (mount remount unmount)))
;;* lme

;;* lmx 176 system/sepolicy/private/vold.te

(allow vold labeledfs (filesystem (relabelfrom)))
;;* lme

;;* lmx 179 system/sepolicy/private/vold.te

(allow vold sdcard_type (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
(allow vold fuse (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
(allow vold mnt_media_rw_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
(allow vold storage_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 180 system/sepolicy/private/vold.te

(allow vold sdcard_type (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow vold fuse (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow vold mnt_media_rw_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow vold storage_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 183 system/sepolicy/private/vold.te

(allow vold media_rw_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 184 system/sepolicy/private/vold.te

(allow vold media_rw_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 186 system/sepolicy/private/vold.te

(allow vold media_rw_data_file (dir (mounton)))
;;* lme

;;* lmx 195 system/sepolicy/private/vold.te

(allowx vold media_rw_data_file (ioctl file ((range 0x581f 0x5820))))
(allowx vold media_rw_data_file (ioctl dir ((range 0x581f 0x5820))))
;;* lme

;;* lmx 195 system/sepolicy/private/vold.te

(allowx vold media_rw_data_file (ioctl file ((range 0x6601 0x6602))))
(allowx vold media_rw_data_file (ioctl dir ((range 0x6601 0x6602))))
;;* lme

;;* lmx 198 system/sepolicy/private/vold.te

(allow vold mnt_media_rw_stub_file (dir (create getattr setattr mounton rmdir)))
(allow vold storage_stub_file (dir (create getattr setattr mounton rmdir)))
;;* lme

;;* lmx 201 system/sepolicy/private/vold.te

(allow vold mnt_user_file (dir (ioctl read write create getattr setattr lock rename mounton open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 202 system/sepolicy/private/vold.te

(allow vold mnt_user_file (lnk_file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 203 system/sepolicy/private/vold.te

(allow vold mnt_user_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 206 system/sepolicy/private/vold.te

(allow vold mnt_pass_through_file (dir (ioctl read write create getattr setattr lock rename mounton open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 207 system/sepolicy/private/vold.te

(allow vold mnt_pass_through_file (lnk_file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 210 system/sepolicy/private/vold.te

(allow vold mnt_expand_file (dir (ioctl read write create getattr setattr lock rename mounton open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 211 system/sepolicy/private/vold.te

(allow vold apk_data_file (dir (create getattr setattr)))
;;* lme

;;* lmx 212 system/sepolicy/private/vold.te

(allow vold shell_data_file (dir (create getattr setattr)))
;;* lme

;;* lmx 213 system/sepolicy/private/vold.te

(allow vold system_userdir_file (dir (create getattr setattr)))
;;* lme

;;* lmx 214 system/sepolicy/private/vold.te

(allow vold media_userdir_file (dir (ioctl read create getattr setattr open)))
;;* lme

;;* lmx 216 system/sepolicy/private/vold.te

(allowx vold media_userdir_file (ioctl dir ((range 0x6601 0x6602))))
;;* lme

;;* lmx 219 system/sepolicy/private/vold.te

(allow vold apk_data_file (dir (ioctl read write getattr lock mounton open watch watch_reads add_name remove_name search)))
;;* lme

;;* lmx 221 system/sepolicy/private/vold.te

(allow vold apk_data_file (file (ioctl read write getattr lock append map unlink open watch watch_reads)))
;;* lme

;;* lmx 223 system/sepolicy/private/vold.te

(allow vold apk_tmp_file (dir (ioctl read getattr lock mounton open watch watch_reads search)))
;;* lme

;;* lmx 225 system/sepolicy/private/vold.te

(allow vold incremental_control_file (file (ioctl read getattr lock relabelto map open watch watch_reads)))
;;* lme

;;* lmx 227 system/sepolicy/private/vold.te

(allow vold tmpfs (filesystem (mount unmount)))
;;* lme

;;* lmx 228 system/sepolicy/private/vold.te

(allow vold tmpfs (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 229 system/sepolicy/private/vold.te

(allow vold tmpfs (dir (mounton)))
;;* lme

;;* lmx 230 system/sepolicy/private/vold.te

(allow vold self (capability (chown dac_override dac_read_search fowner fsetid net_admin sys_admin mknod)))
(allow vold self (cap_userns (chown dac_override dac_read_search fowner fsetid net_admin sys_admin mknod)))
;;* lme

;;* lmx 231 system/sepolicy/private/vold.te

(allow vold self (netlink_kobject_uevent_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
;;* lme

;;* lmx 232 system/sepolicy/private/vold.te

(allow vold loop_control_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 233 system/sepolicy/private/vold.te

(allow vold loop_device (blk_file (ioctl read write create getattr setattr lock append map unlink open watch watch_reads)))
;;* lme

;;* lmx 240 system/sepolicy/private/vold.te

(allowx vold loop_device (ioctl blk_file ((range 0x4c00 0x4c01) (range 0x4c04 0x4c05) 0x4c82)))
;;* lme

;;* lmx 241 system/sepolicy/private/vold.te

(allow vold vold_device (blk_file (ioctl read write create getattr setattr lock append map unlink open watch watch_reads)))
;;* lme

;;* lmx 242 system/sepolicy/private/vold.te

(allowx vold vold_device (ioctl blk_file (0x1260 0x1277)))
;;* lme

;;* lmx 243 system/sepolicy/private/vold.te

(allow vold dm_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 244 system/sepolicy/private/vold.te

(allow vold dm_device (blk_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 245 system/sepolicy/private/vold.te

(allowx vold dm_device (ioctl blk_file ((range 0x125d 0x125e) 0x1277 0x127d (range 0x1282 0x1283))))
;;* lme

;;* lmx 247 system/sepolicy/private/vold.te

(allow vold domain (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 248 system/sepolicy/private/vold.te

(allow vold domain (file (ioctl read getattr lock map open watch watch_reads)))
(allow vold domain (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 249 system/sepolicy/private/vold.te

(allow vold domain (process (sigkill signal)))
;;* lme

;;* lmx 250 system/sepolicy/private/vold.te

(allow vold self (capability (kill sys_ptrace)))
(allow vold self (cap_userns (kill sys_ptrace)))
;;* lme

;;* lmx 252 system/sepolicy/private/vold.te

(allow vold kmsg_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 255 system/sepolicy/private/vold.te

(allow vold fsck_exec (file (ioctl read getattr lock map execute open watch watch_reads)))
;;* lme

;;* lmx 258 system/sepolicy/private/vold.te

(allow vold fscklogs (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
;;* lme

;;* lmx 259 system/sepolicy/private/vold.te

(allow vold fscklogs (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 262 system/sepolicy/private/vold.te

(allow vold labeledfs (filesystem (mount remount unmount)))
;;* lme

;;* lmx 271 system/sepolicy/private/vold.te

(allow vold system_data_root_file (dir (ioctl read write create getattr setattr lock rename mounton open watch watch_reads add_name remove_name reparent search rmdir)))
(allow vold system_data_file (dir (ioctl read write create getattr setattr lock rename mounton open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 272 system/sepolicy/private/vold.te

(allow vold system_data_file (lnk_file (getattr)))
;;* lme

;;* lmx 275 system/sepolicy/private/vold.te

(allow vold vendor_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 278 system/sepolicy/private/vold.te

(allow vold system_data_file (file (read)))
;;* lme

;;* lmx 281 system/sepolicy/private/vold.te

(allow vold kernel (process (setsched)))
;;* lme

;;* lmx 284 system/sepolicy/private/vold.te

(allow vold asec_image_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 285 system/sepolicy/private/vold.te

(allow vold asec_image_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
;;* lme

;;* lmx 286 system/sepolicy/private/vold.te

(allow vold asec_apk_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto rename mounton open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 287 system/sepolicy/private/vold.te

(allow vold asec_public_file (dir (setattr relabelto)))
;;* lme

;;* lmx 288 system/sepolicy/private/vold.te

(allow vold asec_apk_file (file (ioctl read getattr setattr lock relabelfrom relabelto map open watch watch_reads)))
;;* lme

;;* lmx 289 system/sepolicy/private/vold.te

(allow vold asec_public_file (file (setattr relabelto)))
;;* lme

;;* lmx 291 system/sepolicy/private/vold.te

(allow vold unlabeled (dir (ioctl read getattr setattr lock relabelfrom open watch watch_reads search)))
;;* lme

;;* lmx 292 system/sepolicy/private/vold.te

(allow vold unlabeled (file (ioctl read getattr setattr lock relabelfrom map open watch watch_reads)))
;;* lme

;;* lmx 295 system/sepolicy/private/vold.te

(allow vold fusectlfs (file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 296 system/sepolicy/private/vold.te

(allow vold fusectlfs (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
;;* lme

;;* lmx 299 system/sepolicy/private/vold.te

(allow vold sysfs_wake_lock (file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 299 system/sepolicy/private/vold.te

(allow vold self (capability2 (block_suspend)))
(allow vold self (cap2_userns (block_suspend)))
;;* lme

;;* lmx 299 system/sepolicy/private/vold.te

(allow vold system_suspend_server (binder (call transfer)))
;;* lme

;;* lmx 299 system/sepolicy/private/vold.te

(allow system_suspend_server vold (binder (transfer)))
;;* lme

;;* lmx 299 system/sepolicy/private/vold.te

(allow vold system_suspend_server (fd (use)))
;;* lme

;;* lmx 299 system/sepolicy/private/vold.te

(allow vold system_suspend_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 299 system/sepolicy/private/vold.te

(allow vold hwservicemanager (binder (call transfer)))
;;* lme

;;* lmx 299 system/sepolicy/private/vold.te

(allow hwservicemanager vold (binder (call transfer)))
;;* lme

;;* lmx 299 system/sepolicy/private/vold.te

(allow vold hwservicemanager_prop (file (read getattr map open)))
;;* lme

;;* lmx 299 system/sepolicy/private/vold.te

(allow vold hidl_manager_hwservice (hwservice_manager (find)))
;;* lme

;;* lmx 299 system/sepolicy/private/vold.te

(allow vold hal_system_suspend_service (service_manager (find)))
;;* lme

;;* lmx 299 system/sepolicy/private/vold.te

(allow vold servicemanager (binder (call transfer)))
;;* lme

;;* lmx 299 system/sepolicy/private/vold.te

(allow servicemanager vold (binder (call transfer)))
;;* lme

;;* lmx 302 system/sepolicy/private/vold.te

(allow vold servicemanager (binder (call transfer)))
;;* lme

;;* lmx 302 system/sepolicy/private/vold.te

(allow servicemanager vold (binder (call transfer)))
;;* lme

;;* lmx 303 system/sepolicy/private/vold.te

(allow vold vold_service (service_manager (add find)))
;;* lme

;;* lmx 303 system/sepolicy/private/vold.te

(neverallow base_typeattr_331 vold_service (service_manager (add)))
;;* lme

;;* lmx 303 system/sepolicy/private/vold.te

(allow vold su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 304 system/sepolicy/private/vold.te

(allow vold fwk_vold_service (service_manager (add find)))
;;* lme

;;* lmx 304 system/sepolicy/private/vold.te

(neverallow base_typeattr_331 fwk_vold_service (service_manager (add)))
;;* lme

;;* lmx 304 system/sepolicy/private/vold.te

(allow vold su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 307 system/sepolicy/private/vold.te

(allow vold system_server (binder (call transfer)))
;;* lme

;;* lmx 307 system/sepolicy/private/vold.te

(allow system_server vold (binder (transfer)))
;;* lme

;;* lmx 307 system/sepolicy/private/vold.te

(allow vold system_server (fd (use)))
;;* lme

;;* lmx 308 system/sepolicy/private/vold.te

(allow vold permission_service (service_manager (find)))
;;* lme

;;* lmx 311 system/sepolicy/private/vold.te

(allow vold hal_health_storage (memfd_file (read write getattr map)))
;;* lme

;;* lmx 311 system/sepolicy/private/vold.te

(allow hal_health_storage vold (memfd_file (read write getattr map)))
;;* lme

;;* lmx 314 system/sepolicy/private/vold.te

(allow vold hal_bootctl (memfd_file (read write getattr map)))
;;* lme

;;* lmx 314 system/sepolicy/private/vold.te

(allow hal_bootctl vold (memfd_file (read write getattr map)))
;;* lme

;;* lmx 317 system/sepolicy/private/vold.te

(allow vold userdata_block_device (blk_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 322 system/sepolicy/private/vold.te

(allowx vold userdata_block_device (ioctl blk_file (0x127d (range 0x128a 0x128b))))
;;* lme

;;* lmx 325 system/sepolicy/private/vold.te

(allow vold zoned_block_device (blk_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 328 system/sepolicy/private/vold.te

(allow vold metadata_block_device (blk_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 329 system/sepolicy/private/vold.te

(allowx vold metadata_block_device (ioctl blk_file (0x127d)))
;;* lme

;;* lmx 332 system/sepolicy/private/vold.te

(allow vold unencrypted_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 333 system/sepolicy/private/vold.te

(allow vold unencrypted_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 336 system/sepolicy/private/vold.te

(allow vold proc_drop_caches (file (write lock append map open)))
;;* lme

;;* lmx 339 system/sepolicy/private/vold.te

(allow vold vold_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 340 system/sepolicy/private/vold.te

(allow vold vold_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 343 system/sepolicy/private/vold.te

(allow vold vold_metadata_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 344 system/sepolicy/private/vold.te

(allow vold vold_metadata_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 347 system/sepolicy/private/vold.te

(allow vold init (key (write search setattr)))
;;* lme

;;* lmx 348 system/sepolicy/private/vold.te

(allow vold vold (key (write search setattr)))
;;* lme

;;* lmx 351 system/sepolicy/private/vold.te

(allow vold self (capability (sys_nice)))
(allow vold self (cap_userns (sys_nice)))
;;* lme

;;* lmx 354 system/sepolicy/private/vold.te

(allow vold self (capability (sys_chroot)))
(allow vold self (cap_userns (sys_chroot)))
;;* lme

;;* lmx 355 system/sepolicy/private/vold.te

(allow vold storage_file (dir (mounton)))
;;* lme

;;* lmx 358 system/sepolicy/private/vold.te

(allow vold fuse_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 359 system/sepolicy/private/vold.te

(allow vold fuse (filesystem (relabelfrom)))
;;* lme

;;* lmx 360 system/sepolicy/private/vold.te

(allow vold app_fusefs (filesystem (relabelfrom relabelto)))
;;* lme

;;* lmx 361 system/sepolicy/private/vold.te

(allow vold app_fusefs (filesystem (mount unmount)))
;;* lme

;;* lmx 362 system/sepolicy/private/vold.te

(allow vold app_fuse_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
;;* lme

;;* lmx 363 system/sepolicy/private/vold.te

(allow vold app_fuse_file (file (read write getattr append open)))
;;* lme

;;* lmx 366 system/sepolicy/private/vold.te

(allow vold toolbox_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lme

;;* lmx 369 system/sepolicy/private/vold.te

(allow vold user_profile_root_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
(allow vold user_profile_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 372 system/sepolicy/private/vold.te

(allow vold misc_block_device (blk_file (write lock append map open)))
;;* lme

;;* lmx 375 system/sepolicy/private/vold.te

(allow vold mnt_vendor_file (dir (search)))
;;* lme

(dontaudit vold self (capability (sys_resource)))
(dontaudit vold self (cap_userns (sys_resource)))
(dontaudit vold self (capability (sys_rawio)))
;;* lmx 382 system/sepolicy/private/vold.te

(allow vold gsi_metadata_file_type (dir (search)))
(allow vold metadata_file (dir (search)))
;;* lme

;;* lmx 382 system/sepolicy/private/vold.te

(allow vold gsi_public_metadata_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 382 system/sepolicy/private/vold.te

(allow vold proc_bootconfig (file (ioctl read getattr lock map open watch watch_reads)))
(allow vold proc_cmdline (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 385 system/sepolicy/private/vold.te

(allow vold vendor_apex_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 399 system/sepolicy/private/vold.te

(neverallow base_typeattr_1192 vold_service (service_manager (find)))
;;* lme

;;* lmx 417 system/sepolicy/private/vold.te

(neverallow base_typeattr_1193 system_userdir_file (dir (write add_name remove_name)))
(neverallow base_typeattr_1193 vendor_userdir_file (dir (write add_name remove_name)))
(neverallow base_typeattr_1193 media_userdir_file (dir (write add_name remove_name)))
;;* lme

;;* lmx 426 system/sepolicy/private/vold.te

(neverallowx base_typeattr_499 data_file_type (ioctl dir (0x6613)))
;;* lme

;;* lmx 432 system/sepolicy/private/vold.te

(neverallowx base_typeattr_331 data_file_type (ioctl dir ((range 0x6617 0x6618) 0x661a)))
;;* lme

;;* lmx 438 system/sepolicy/private/vold.te

(neverallow base_typeattr_1194 vold_data_file (dir (write lock append map unlink link rename execute quotaon mounton audit_access execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent rmdir)))
;;* lme

;;* lmx 445 system/sepolicy/private/vold.te

(neverallow base_typeattr_1195 vold_data_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 452 system/sepolicy/private/vold.te

(neverallow base_typeattr_1196 vold_metadata_file (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 459 system/sepolicy/private/vold.te

(neverallow base_typeattr_1197 vold_data_file (file (ioctl read write create setattr lock relabelfrom append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow base_typeattr_1197 vold_data_file (lnk_file (ioctl read write create setattr lock relabelfrom append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow base_typeattr_1197 vold_data_file (sock_file (ioctl read write create setattr lock relabelfrom append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow base_typeattr_1197 vold_data_file (fifo_file (ioctl read write create setattr lock relabelfrom append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 467 system/sepolicy/private/vold.te

(neverallow base_typeattr_1198 vold_metadata_file (file (ioctl read write create setattr lock relabelfrom append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow base_typeattr_1198 vold_metadata_file (lnk_file (ioctl read write create setattr lock relabelfrom append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow base_typeattr_1198 vold_metadata_file (sock_file (ioctl read write create setattr lock relabelfrom append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow base_typeattr_1198 vold_metadata_file (fifo_file (ioctl read write create setattr lock relabelfrom append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 476 system/sepolicy/private/vold.te

(neverallow base_typeattr_1199 vold_metadata_file (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow base_typeattr_1199 vold_metadata_file (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow base_typeattr_1199 vold_metadata_file (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow base_typeattr_1199 vold_metadata_file (fifo_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow base_typeattr_1199 vold_data_file (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow base_typeattr_1199 vold_data_file (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow base_typeattr_1199 vold_data_file (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(neverallow base_typeattr_1199 vold_data_file (fifo_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 478 system/sepolicy/private/vold.te

(neverallow base_typeattr_576 restorecon_prop (property_service (set)))
;;* lme

;;* lmx 493 system/sepolicy/private/vold.te

(neverallow vold base_typeattr_1200 (binder (call)))
;;* lme

;;* lmx 495 system/sepolicy/private/vold.te

(neverallow vold fsck_exec (file (execute_no_trans)))
;;* lme

;;* lmx 496 system/sepolicy/private/vold.te

(neverallow base_typeattr_247 vold (process (transition dyntransition)))
;;* lme

;;* lmx 497 system/sepolicy/private/vold.te

(neverallow vold base_typeattr_248 (process (ptrace)))
;;* lme

;;* lmx 498 system/sepolicy/private/vold.te

(neverallow vold base_typeattr_248 (rawip_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind)))
;;* lme

;;* lmx 1 system/sepolicy/private/vold_prepare_subdirs.te

(allow vold vold_prepare_subdirs_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 1 system/sepolicy/private/vold_prepare_subdirs.te

(allow vold vold_prepare_subdirs (process (transition)))
;;* lme

;;* lmx 1 system/sepolicy/private/vold_prepare_subdirs.te

(allow vold_prepare_subdirs vold_prepare_subdirs_exec (file (read getattr map execute open entrypoint)))
;;* lme

;;* lmx 1 system/sepolicy/private/vold_prepare_subdirs.te

(allow vold_prepare_subdirs vold (process (sigchld)))
;;* lme

(dontaudit vold vold_prepare_subdirs (process (noatsecure)))
;;* lmx 1 system/sepolicy/private/vold_prepare_subdirs.te

(allow vold vold_prepare_subdirs (process (siginh rlimitinh)))
;;* lme

(typetransition vold vold_prepare_subdirs_exec process vold_prepare_subdirs)
;;* lmx 6 system/sepolicy/private/vold_prepare_subdirs.te

(allow vold_prepare_subdirs system_file (file (execute_no_trans)))
;;* lme

;;* lmx 7 system/sepolicy/private/vold_prepare_subdirs.te

(allow vold_prepare_subdirs shell_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lme

;;* lmx 8 system/sepolicy/private/vold_prepare_subdirs.te

(allow vold_prepare_subdirs toolbox_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lme

;;* lmx 9 system/sepolicy/private/vold_prepare_subdirs.te

(allow vold_prepare_subdirs devpts (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 10 system/sepolicy/private/vold_prepare_subdirs.te

(allow vold_prepare_subdirs vold (fd (use)))
;;* lme

;;* lmx 11 system/sepolicy/private/vold_prepare_subdirs.te

(allow vold_prepare_subdirs vold (fifo_file (read write)))
;;* lme

;;* lmx 12 system/sepolicy/private/vold_prepare_subdirs.te

(allow vold_prepare_subdirs file_contexts_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 13 system/sepolicy/private/vold_prepare_subdirs.te

(allow vold_prepare_subdirs seapp_contexts_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 14 system/sepolicy/private/vold_prepare_subdirs.te

(allow vold_prepare_subdirs self (capability (chown dac_override dac_read_search fowner)))
(allow vold_prepare_subdirs self (cap_userns (chown dac_override dac_read_search fowner)))
;;* lme

;;* lmx 15 system/sepolicy/private/vold_prepare_subdirs.te

(allow vold_prepare_subdirs self (process (setfscreate)))
;;* lme

;;* lmx 21 system/sepolicy/private/vold_prepare_subdirs.te

(allow vold_prepare_subdirs system_data_file (dir (read write relabelfrom open add_name remove_name rmdir)))
(allow vold_prepare_subdirs vendor_data_file (dir (read write relabelfrom open add_name remove_name rmdir)))
(allow vold_prepare_subdirs sdk_sandbox_system_data_file (dir (read write relabelfrom open add_name remove_name rmdir)))
(allow vold_prepare_subdirs checkin_data_file (dir (read write relabelfrom open add_name remove_name rmdir)))
;;* lme

;;* lmx 24 system/sepolicy/private/vold_prepare_subdirs.te

(allow vold_prepare_subdirs media_rw_data_file (dir (relabelfrom relabelto)))
;;* lme

;;* lmx 46 system/sepolicy/private/vold_prepare_subdirs.te

(allow vold_prepare_subdirs apex_data_file_type (dir (ioctl read write create getattr setattr lock relabelto rename open watch watch_reads add_name remove_name reparent search rmdir)))
(allow vold_prepare_subdirs system_data_file (dir (ioctl read write create getattr setattr lock relabelto rename open watch watch_reads add_name remove_name reparent search rmdir)))
(allow vold_prepare_subdirs apex_module_data_file (dir (ioctl read write create getattr setattr lock relabelto rename open watch watch_reads add_name remove_name reparent search rmdir)))
(allow vold_prepare_subdirs apex_rollback_data_file (dir (ioctl read write create getattr setattr lock relabelto rename open watch watch_reads add_name remove_name reparent search rmdir)))
(allow vold_prepare_subdirs vold_data_file (dir (ioctl read write create getattr setattr lock relabelto rename open watch watch_reads add_name remove_name reparent search rmdir)))
(allow vold_prepare_subdirs backup_data_file (dir (ioctl read write create getattr setattr lock relabelto rename open watch watch_reads add_name remove_name reparent search rmdir)))
(allow vold_prepare_subdirs fingerprint_vendor_data_file (dir (ioctl read write create getattr setattr lock relabelto rename open watch watch_reads add_name remove_name reparent search rmdir)))
(allow vold_prepare_subdirs face_vendor_data_file (dir (ioctl read write create getattr setattr lock relabelto rename open watch watch_reads add_name remove_name reparent search rmdir)))
(allow vold_prepare_subdirs iris_vendor_data_file (dir (ioctl read write create getattr setattr lock relabelto rename open watch watch_reads add_name remove_name reparent search rmdir)))
(allow vold_prepare_subdirs wifi_vendor_user_data_file (dir (ioctl read write create getattr setattr lock relabelto rename open watch watch_reads add_name remove_name reparent search rmdir)))
(allow vold_prepare_subdirs wpa_user_data_file (dir (ioctl read write create getattr setattr lock relabelto rename open watch watch_reads add_name remove_name reparent search rmdir)))
(allow vold_prepare_subdirs storaged_data_file (dir (ioctl read write create getattr setattr lock relabelto rename open watch watch_reads add_name remove_name reparent search rmdir)))
(allow vold_prepare_subdirs sdk_sandbox_system_data_file (dir (ioctl read write create getattr setattr lock relabelto rename open watch watch_reads add_name remove_name reparent search rmdir)))
(allow vold_prepare_subdirs sdk_sandbox_data_file (dir (ioctl read write create getattr setattr lock relabelto rename open watch watch_reads add_name remove_name reparent search rmdir)))
(allow vold_prepare_subdirs rollback_data_file (dir (ioctl read write create getattr setattr lock relabelto rename open watch watch_reads add_name remove_name reparent search rmdir)))
(allow vold_prepare_subdirs checkin_data_file (dir (ioctl read write create getattr setattr lock relabelto rename open watch watch_reads add_name remove_name reparent search rmdir)))
(allow vold_prepare_subdirs apex_wifi_data_file (dir (ioctl read write create getattr setattr lock relabelto rename open watch watch_reads add_name remove_name reparent search rmdir)))
(allow vold_prepare_subdirs appsearch_data_file (dir (ioctl read write create getattr setattr lock relabelto rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 66 system/sepolicy/private/vold_prepare_subdirs.te

(allow vold_prepare_subdirs apex_data_file_type (file (getattr unlink)))
(allow vold_prepare_subdirs system_data_file (file (getattr unlink)))
(allow vold_prepare_subdirs apex_module_data_file (file (getattr unlink)))
(allow vold_prepare_subdirs apex_rollback_data_file (file (getattr unlink)))
(allow vold_prepare_subdirs vold_data_file (file (getattr unlink)))
(allow vold_prepare_subdirs backup_data_file (file (getattr unlink)))
(allow vold_prepare_subdirs fingerprint_vendor_data_file (file (getattr unlink)))
(allow vold_prepare_subdirs face_vendor_data_file (file (getattr unlink)))
(allow vold_prepare_subdirs iris_vendor_data_file (file (getattr unlink)))
(allow vold_prepare_subdirs wifi_vendor_user_data_file (file (getattr unlink)))
(allow vold_prepare_subdirs wpa_user_data_file (file (getattr unlink)))
(allow vold_prepare_subdirs storaged_data_file (file (getattr unlink)))
(allow vold_prepare_subdirs sdk_sandbox_data_file (file (getattr unlink)))
(allow vold_prepare_subdirs rollback_data_file (file (getattr unlink)))
(allow vold_prepare_subdirs checkin_data_file (file (getattr unlink)))
(allow vold_prepare_subdirs apex_art_staging_data_file (file (getattr unlink)))
(allow vold_prepare_subdirs apex_wifi_data_file (file (getattr unlink)))
(allow vold_prepare_subdirs appsearch_data_file (file (getattr unlink)))
;;* lme

;;* lmx 67 system/sepolicy/private/vold_prepare_subdirs.te

(allow vold_prepare_subdirs rollback_data_file (lnk_file (getattr unlink)))
;;* lme

;;* lmx 68 system/sepolicy/private/vold_prepare_subdirs.te

(allow vold_prepare_subdirs apex_mnt_dir (dir (read open)))
;;* lme

;;* lmx 69 system/sepolicy/private/vold_prepare_subdirs.te

(allow vold_prepare_subdirs mnt_expand_file (dir (search)))
;;* lme

;;* lmx 70 system/sepolicy/private/vold_prepare_subdirs.te

(allow vold_prepare_subdirs user_profile_data_file (dir (getattr relabelfrom search)))
;;* lme

;;* lmx 71 system/sepolicy/private/vold_prepare_subdirs.te

(allow vold_prepare_subdirs user_profile_root_file (dir (getattr relabelfrom relabelto search)))
;;* lme

;;* lmx 110 system/sepolicy/private/vold_prepare_subdirs.te

(allow vold_prepare_subdirs apex_system_server_data_file (dir (relabelfrom)))
(allow vold_prepare_subdirs apex_tethering_data_file (dir (relabelfrom)))
(allow vold_prepare_subdirs apex_appsearch_data_file (dir (relabelfrom)))
(allow vold_prepare_subdirs apex_permission_data_file (dir (relabelfrom)))
(allow vold_prepare_subdirs apex_scheduling_data_file (dir (relabelfrom)))
;;* lme

;;* lmx 113 system/sepolicy/private/vold_prepare_subdirs.te

(allow vold_prepare_subdirs unlabeled (dir (search)))
;;* lme

(dontaudit vold_prepare_subdirs proc (file (ioctl read getattr lock map open watch watch_reads)))
(dontaudit vold_prepare_subdirs unlabeled (file (ioctl read getattr lock map open watch watch_reads)))
(typetransition vzwomatrigger_app tmpfs file appdomain_tmpfs)
;;* lmx 6 system/sepolicy/private/vzwomatrigger_app.te

(allow vzwomatrigger_app vzwomatrigger_app_userfaultfd (anon_inode (ioctl read create)))
;;* lme

(dontaudit su vzwomatrigger_app_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lmx 6 system/sepolicy/private/vzwomatrigger_app.te

(neverallow base_typeattr_1201 vzwomatrigger_app_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 6 system/sepolicy/private/vzwomatrigger_app.te

(allow vzwomatrigger_app appdomain_tmpfs (file (read write getattr map execute)))
;;* lme

;;* lmx 6 system/sepolicy/private/vzwomatrigger_app.te

(allow vzwomatrigger_app appdomain (memfd_file (read write getattr map execute)))
;;* lme

;;* lmx 6 system/sepolicy/private/vzwomatrigger_app.te

(neverallow base_typeattr_1202 base_typeattr_1201 (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 6 system/sepolicy/private/vzwomatrigger_app.te

(neverallow base_typeattr_1203 vzwomatrigger_app (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 6 system/sepolicy/private/vzwomatrigger_app.te

(neverallow base_typeattr_1204 vzwomatrigger_app (process (ptrace)))
;;* lme

;;* lmx 6 system/sepolicy/private/vzwomatrigger_app.te

(neverallow vzwomatrigger_app base_typeattr_1205 (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 3 system/sepolicy/private/watchdogd.te

(allow init watchdogd_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 3 system/sepolicy/private/watchdogd.te

(allow init watchdogd (process (transition)))
;;* lme

;;* lmx 3 system/sepolicy/private/watchdogd.te

(allow watchdogd watchdogd_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init watchdogd (process (noatsecure)))
;;* lmx 3 system/sepolicy/private/watchdogd.te

(allow init watchdogd (process (siginh rlimitinh)))
;;* lme

(typetransition init watchdogd_exec process watchdogd)
;;* lmx 5 system/sepolicy/private/watchdogd.te

(allow watchdogd watchdog_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 6 system/sepolicy/private/watchdogd.te

(allow watchdogd kmsg_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

(typetransition webview_zygote tmpfs file webview_zygote_tmpfs)
;;* lmx 11 system/sepolicy/private/webview_zygote.te

(allow webview_zygote webview_zygote_tmpfs (file (read write getattr map)))
;;* lme

;;* lmx 13 system/sepolicy/private/webview_zygote.te

(allow webview_zygote webview_zygote_userfaultfd (anon_inode (ioctl read create)))
;;* lme

(dontaudit su webview_zygote_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lmx 13 system/sepolicy/private/webview_zygote.te

(neverallow base_typeattr_1206 webview_zygote_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 17 system/sepolicy/private/webview_zygote.te

(allow webview_zygote apk_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 18 system/sepolicy/private/webview_zygote.te

(allow webview_zygote apk_data_file (file (ioctl read getattr lock map execute open watch watch_reads)))
;;* lme

;;* lmx 21 system/sepolicy/private/webview_zygote.te

(allow webview_zygote shared_relro_file (dir (search)))
;;* lme

;;* lmx 22 system/sepolicy/private/webview_zygote.te

(allow webview_zygote shared_relro_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 25 system/sepolicy/private/webview_zygote.te

(allow webview_zygote self (capability (setgid setuid)))
(allow webview_zygote self (cap_userns (setgid setuid)))
;;* lme

;;* lmx 27 system/sepolicy/private/webview_zygote.te

(allow webview_zygote self (capability (setpcap)))
(allow webview_zygote self (cap_userns (setpcap)))
;;* lme

;;* lmx 29 system/sepolicy/private/webview_zygote.te

(allow webview_zygote self (process (setcurrent)))
;;* lme

;;* lmx 30 system/sepolicy/private/webview_zygote.te

(allow webview_zygote isolated_app (process (dyntransition)))
;;* lme

;;* lmx 33 system/sepolicy/private/webview_zygote.te

(allow webview_zygote dalvikcache_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
(allow webview_zygote apex_art_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 34 system/sepolicy/private/webview_zygote.te

(allow webview_zygote dalvikcache_data_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 35 system/sepolicy/private/webview_zygote.te

(allow webview_zygote dalvikcache_data_file (file (ioctl read getattr lock map execute open watch watch_reads)))
(allow webview_zygote apex_art_data_file (file (ioctl read getattr lock map execute open watch watch_reads)))
;;* lme

;;* lmx 36 system/sepolicy/private/webview_zygote.te

(allow webview_zygote apex_module_data_file (dir (search)))
;;* lme

;;* lmx 39 system/sepolicy/private/webview_zygote.te

(allow webview_zygote vendor_apex_metadata_file (dir (search)))
;;* lme

;;* lmx 42 system/sepolicy/private/webview_zygote.te

(allow webview_zygote self (process (execmem)))
;;* lme

;;* lmx 47 system/sepolicy/private/webview_zygote.te

(allow webview_zygote debugfs_trace_marker (file (getattr)))
;;* lme

;;* lmx 50 system/sepolicy/private/webview_zygote.te

(allow webview_zygote system_server (process (getpgid)))
;;* lme

;;* lmx 53 system/sepolicy/private/webview_zygote.te

(allow webview_zygote isolated_app (process (setpgid)))
;;* lme

(dontaudit webview_zygote mnt_expand_file (dir (getattr)))
(dontaudit webview_zygote dex2oat_exec (file (execute)))
;;* lmx 64 system/sepolicy/private/webview_zygote.te

(allow webview_zygote seapp_contexts_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 66 system/sepolicy/private/webview_zygote.te

(allow webview_zygote selinuxfs (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 66 system/sepolicy/private/webview_zygote.te

(allow webview_zygote selinuxfs (file (ioctl read getattr lock map open watch watch_reads)))
(allow webview_zygote selinuxfs (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 66 system/sepolicy/private/webview_zygote.te

(allow webview_zygote selinuxfs (file (write lock append map open)))
;;* lme

;;* lmx 66 system/sepolicy/private/webview_zygote.te

(allow webview_zygote kernel (security (check_context)))
;;* lme

;;* lmx 68 system/sepolicy/private/webview_zygote.te

(allow webview_zygote selinuxfs (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 68 system/sepolicy/private/webview_zygote.te

(allow webview_zygote selinuxfs (file (ioctl read getattr lock map open watch watch_reads)))
(allow webview_zygote selinuxfs (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 68 system/sepolicy/private/webview_zygote.te

(allow webview_zygote selinuxfs (file (write lock append map open)))
;;* lme

;;* lmx 68 system/sepolicy/private/webview_zygote.te

(allow webview_zygote kernel (security (compute_av)))
;;* lme

;;* lmx 68 system/sepolicy/private/webview_zygote.te

(allow webview_zygote self (netlink_selinux_socket (read write create getattr setattr lock relabelfrom relabelto append bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
;;* lme

;;* lmx 71 system/sepolicy/private/webview_zygote.te

(allow webview_zygote system_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 74 system/sepolicy/private/webview_zygote.te

(allow webview_zygote zygote_tmpfs (file (read getattr)))
;;* lme

;;* lmx 75 system/sepolicy/private/webview_zygote.te

(allow webview_zygote zygote (memfd_file (read getattr)))
;;* lme

;;* lmx 77 system/sepolicy/private/webview_zygote.te

(allow webview_zygote zygote (fd (use)))
;;* lme

;;* lmx 78 system/sepolicy/private/webview_zygote.te

(allow webview_zygote zygote (process (sigchld)))
;;* lme

;;* lmx 81 system/sepolicy/private/webview_zygote.te

(allow webview_zygote vendor_overlay_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 81 system/sepolicy/private/webview_zygote.te

(allow webview_zygote vendor_overlay_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow webview_zygote vendor_overlay_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 83 system/sepolicy/private/webview_zygote.te

(allow webview_zygote same_process_hal_file (file (read getattr map execute open)))
;;* lme

;;* lmx 85 system/sepolicy/private/webview_zygote.te

(allow webview_zygote system_data_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 88 system/sepolicy/private/webview_zygote.te

(allow webview_zygote system_unsolzygote_socket (sock_file (write)))
;;* lme

;;* lmx 88 system/sepolicy/private/webview_zygote.te

(allow webview_zygote system_server (unix_dgram_socket (sendto)))
;;* lme

;;* lmx 91 system/sepolicy/private/webview_zygote.te

(allow webview_zygote device_config_runtime_native_prop (file (read getattr map open)))
;;* lme

;;* lmx 92 system/sepolicy/private/webview_zygote.te

(allow webview_zygote device_config_runtime_native_boot_prop (file (read getattr map open)))
;;* lme

;;* lmx 95 system/sepolicy/private/webview_zygote.te

(allow zygote odsign_prop (file (read getattr map open)))
;;* lme

;;* lmx 98 system/sepolicy/private/webview_zygote.te

(allow webview_zygote resourcecache_data_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 99 system/sepolicy/private/webview_zygote.te

(allow webview_zygote resourcecache_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 102 system/sepolicy/private/webview_zygote.te

(allow webview_zygote zygote_exec (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 105 system/sepolicy/private/webview_zygote.te

(allow webview_zygote su (fifo_file (append)))
;;* lme

;;* lmx 105 system/sepolicy/private/webview_zygote.te

(allow webview_zygote anr_data_file (file (append)))
;;* lme

;;* lmx 105 system/sepolicy/private/webview_zygote.te

(allow webview_zygote dumpstate (fd (use)))
;;* lme

;;* lmx 105 system/sepolicy/private/webview_zygote.te

(allow webview_zygote incidentd (fd (use)))
;;* lme

;;* lmx 105 system/sepolicy/private/webview_zygote.te

(allow webview_zygote dumpstate (fifo_file (write append)))
;;* lme

;;* lmx 105 system/sepolicy/private/webview_zygote.te

(allow webview_zygote incidentd (fifo_file (write append)))
;;* lme

;;* lmx 105 system/sepolicy/private/webview_zygote.te

(allow webview_zygote system_server (fifo_file (write append)))
;;* lme

;;* lmx 105 system/sepolicy/private/webview_zygote.te

(allow webview_zygote tombstoned (unix_stream_socket (connectto)))
;;* lme

;;* lmx 105 system/sepolicy/private/webview_zygote.te

(allow webview_zygote tombstoned (fd (use)))
;;* lme

;;* lmx 105 system/sepolicy/private/webview_zygote.te

(allow webview_zygote tombstoned_crash_socket (sock_file (write)))
;;* lme

;;* lmx 105 system/sepolicy/private/webview_zygote.te

(allow webview_zygote tombstone_data_file (file (append)))
;;* lme

;;* lmx 112 system/sepolicy/private/webview_zygote.te

(neverallow webview_zygote base_typeattr_319 (process (dyntransition)))
;;* lme

;;* lmx 115 system/sepolicy/private/webview_zygote.te

(neverallow webview_zygote base_typeattr_270 (process (transition)))
;;* lme

;;* lmx 119 system/sepolicy/private/webview_zygote.te

(neverallow webview_zygote base_typeattr_248 (file (execute_no_trans)))
;;* lme

;;* lmx 123 system/sepolicy/private/webview_zygote.te

(neverallow base_typeattr_320 webview_zygote (process (dyntransition)))
;;* lme

;;* lmx 126 system/sepolicy/private/webview_zygote.te

(neverallow webview_zygote property_socket (sock_file (write)))
;;* lme

;;* lmx 127 system/sepolicy/private/webview_zygote.te

(neverallow webview_zygote property_type (property_service (set)))
;;* lme

;;* lmx 130 system/sepolicy/private/webview_zygote.te

(neverallow webview_zygote app_data_file_type (file (ioctl read write getattr lock append map execute open watch watch_reads execute_no_trans)))
;;* lme

;;* lmx 136 system/sepolicy/private/webview_zygote.te

(neverallow webview_zygote base_typeattr_321 (service_manager (find)))
;;* lme

;;* lmx 139 system/sepolicy/private/webview_zygote.te

(neverallow webview_zygote gpu_device (chr_file (ioctl read write getattr lock append map execute open watch watch_reads execute_no_trans)))
;;* lme

;;* lmx 142 system/sepolicy/private/webview_zygote.te

(neverallow webview_zygote cache_file (dir (write create setattr relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access execmod watch_mount watch_sb watch_with_perm add_name remove_name reparent rmdir)))
;;* lme

;;* lmx 143 system/sepolicy/private/webview_zygote.te

(neverallow webview_zygote cache_file (file (ioctl write create setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
;;* lme

;;* lmx 160 system/sepolicy/private/webview_zygote.te

(neverallow webview_zygote domain (socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow webview_zygote domain (tcp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind name_connect)))
(neverallow webview_zygote domain (udp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind)))
(neverallow webview_zygote domain (rawip_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind)))
(neverallow webview_zygote domain (netlink_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow webview_zygote domain (packet_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow webview_zygote domain (key_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow webview_zygote domain (netlink_route_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write nlmsg_readpriv nlmsg_getneigh nlmsg)))
(neverallow webview_zygote domain (netlink_tcpdiag_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write nlmsg)))
(neverallow webview_zygote domain (netlink_nflog_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow webview_zygote domain (netlink_xfrm_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write nlmsg)))
(neverallow webview_zygote domain (netlink_audit_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write nlmsg_relay nlmsg_readpriv nlmsg_tty_audit nlmsg)))
(neverallow webview_zygote domain (netlink_dnrt_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow webview_zygote domain (netlink_kobject_uevent_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow webview_zygote domain (appletalk_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow webview_zygote domain (tun_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind attach_queue)))
(neverallow webview_zygote domain (netlink_iscsi_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow webview_zygote domain (netlink_fib_lookup_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow webview_zygote domain (netlink_connector_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow webview_zygote domain (netlink_netfilter_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow webview_zygote domain (netlink_generic_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow webview_zygote domain (netlink_scsitransport_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow webview_zygote domain (netlink_rdma_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow webview_zygote domain (netlink_crypto_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow webview_zygote domain (sctp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind name_connect association)))
(neverallow webview_zygote domain (icmp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind)))
(neverallow webview_zygote domain (ax25_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow webview_zygote domain (ipx_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow webview_zygote domain (netrom_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow webview_zygote domain (atmpvc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow webview_zygote domain (x25_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow webview_zygote domain (rose_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow webview_zygote domain (decnet_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow webview_zygote domain (atmsvc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow webview_zygote domain (rds_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow webview_zygote domain (irda_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow webview_zygote domain (pppox_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow webview_zygote domain (llc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow webview_zygote domain (can_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow webview_zygote domain (tipc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow webview_zygote domain (bluetooth_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow webview_zygote domain (iucv_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow webview_zygote domain (rxrpc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow webview_zygote domain (isdn_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow webview_zygote domain (phonet_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow webview_zygote domain (ieee802154_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow webview_zygote domain (caif_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow webview_zygote domain (alg_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow webview_zygote domain (nfc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow webview_zygote domain (vsock_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow webview_zygote domain (kcm_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow webview_zygote domain (qipcrtr_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow webview_zygote domain (smc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(neverallow webview_zygote domain (xdp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
;;* lme

;;* lmx 169 system/sepolicy/private/webview_zygote.te

(neverallow webview_zygote bluetooth_a2dp_offload_prop (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(neverallow webview_zygote bluetooth_audio_hal_prop (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(neverallow webview_zygote bluetooth_prop (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(neverallow webview_zygote exported_bluetooth_prop (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 4 system/sepolicy/private/wifi_mainline_supplicant.te

(allow wifi_mainline_supplicant servicemanager (binder (call transfer)))
;;* lme

;;* lmx 4 system/sepolicy/private/wifi_mainline_supplicant.te

(allow servicemanager wifi_mainline_supplicant (binder (call transfer)))
;;* lme

;;* lmx 5 system/sepolicy/private/wifi_mainline_supplicant.te

(allow wifi_mainline_supplicant system_server (binder (call transfer)))
;;* lme

;;* lmx 5 system/sepolicy/private/wifi_mainline_supplicant.te

(allow system_server wifi_mainline_supplicant (binder (transfer)))
;;* lme

;;* lmx 5 system/sepolicy/private/wifi_mainline_supplicant.te

(allow wifi_mainline_supplicant system_server (fd (use)))
;;* lme

;;* lmx 6 system/sepolicy/private/wifi_mainline_supplicant.te

(allow init wifi_mainline_supplicant_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 6 system/sepolicy/private/wifi_mainline_supplicant.te

(allow init wifi_mainline_supplicant (process (transition)))
;;* lme

;;* lmx 6 system/sepolicy/private/wifi_mainline_supplicant.te

(allow wifi_mainline_supplicant wifi_mainline_supplicant_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init wifi_mainline_supplicant (process (noatsecure)))
;;* lmx 6 system/sepolicy/private/wifi_mainline_supplicant.te

(allow init wifi_mainline_supplicant (process (siginh rlimitinh)))
;;* lme

(typetransition init wifi_mainline_supplicant_exec process wifi_mainline_supplicant)
;;* lmx 7 system/sepolicy/private/wifi_mainline_supplicant.te

(allow wifi_mainline_supplicant wifi_mainline_supplicant_service (service_manager (add find)))
;;* lme

;;* lmx 7 system/sepolicy/private/wifi_mainline_supplicant.te

(neverallow base_typeattr_1207 wifi_mainline_supplicant_service (service_manager (add)))
;;* lme

;;* lmx 7 system/sepolicy/private/wifi_mainline_supplicant.te

(allow wifi_mainline_supplicant su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 9 system/sepolicy/private/wifi_mainline_supplicant.te

(allow wifi_mainline_supplicant self (capability (net_admin net_raw)))
(allow wifi_mainline_supplicant self (cap_userns (net_admin net_raw)))
;;* lme

;;* lmx 10 system/sepolicy/private/wifi_mainline_supplicant.te

(allow wifi_mainline_supplicant proc_net (file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 11 system/sepolicy/private/wifi_mainline_supplicant.te

(allow wifi_mainline_supplicant sysfs_net (dir (search)))
;;* lme

;;* lmx 14 system/sepolicy/private/wifi_mainline_supplicant.te

(allow wifi_mainline_supplicant wifi_data_file (dir (getattr search)))
;;* lme

;;* lmx 17 system/sepolicy/private/wifi_mainline_supplicant.te

(allow wifi_mainline_supplicant mainline_supplicant_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 18 system/sepolicy/private/wifi_mainline_supplicant.te

(allow wifi_mainline_supplicant mainline_supplicant_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 19 system/sepolicy/private/wifi_mainline_supplicant.te

(allow wifi_mainline_supplicant mainline_supplicant_data_file (sock_file (write create setattr unlink)))
;;* lme

;;* lmx 22 system/sepolicy/private/wifi_mainline_supplicant.te

(allow wifi_mainline_supplicant self (udp_socket (ioctl read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
;;* lme

;;* lmx 23 system/sepolicy/private/wifi_mainline_supplicant.te

(allowx wifi_mainline_supplicant self (ioctl udp_socket (0x6900 0x6902)))
;;* lme

;;* lmx 23 system/sepolicy/private/wifi_mainline_supplicant.te

(allowx wifi_mainline_supplicant self (ioctl udp_socket ((range 0x890b 0x890d) 0x8911 0x8914 0x8916 0x8918 0x891a (range 0x891c 0x8920) (range 0x8922 0x8927) 0x8929 (range 0x8930 0x8932) (range 0x8934 0x8937) 0x8939 (range 0x8940 0x8941) 0x8943 (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
;;* lme

;;* lmx 23 system/sepolicy/private/wifi_mainline_supplicant.te

(allowx wifi_mainline_supplicant self (ioctl udp_socket (0x8b00 0x8b02 0x8b04 0x8b06 0x8b08 0x8b0a 0x8b0c 0x8b0e 0x8b10 (range 0x8b14 0x8b1d) 0x8b20 0x8b22 0x8b24 0x8b26 0x8b28 (range 0x8b2a 0x8b2c) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
;;* lme

;;* lmx 26 system/sepolicy/private/wifi_mainline_supplicant.te

(allow wifi_mainline_supplicant self (packet_socket (ioctl read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
;;* lme

;;* lmx 27 system/sepolicy/private/wifi_mainline_supplicant.te

(allowx wifi_mainline_supplicant self (ioctl packet_socket ((range 0x5401 0x5404) 0x540b (range 0x540e 0x5411) (range 0x5413 0x5414) (range 0x5450 0x5451))))
;;* lme

;;* lmx 27 system/sepolicy/private/wifi_mainline_supplicant.te

(allowx wifi_mainline_supplicant self (ioctl packet_socket (0x6900 0x6902)))
;;* lme

;;* lmx 27 system/sepolicy/private/wifi_mainline_supplicant.te

(allowx wifi_mainline_supplicant self (ioctl packet_socket ((range 0x8906 0x8907) (range 0x890b 0x890d) (range 0x8910 0x8927) 0x8929 (range 0x8930 0x8939) (range 0x8940 0x8943) (range 0x8946 0x894b) (range 0x8953 0x8955) (range 0x8960 0x8962) (range 0x8970 0x8971) (range 0x8980 0x8983) (range 0x8990 0x8995) (range 0x89a0 0x89a3) 0x89b0 (range 0x89e0 0x89ff))))
;;* lme

;;* lmx 27 system/sepolicy/private/wifi_mainline_supplicant.te

(allowx wifi_mainline_supplicant self (ioctl packet_socket ((range 0x8b00 0x8b02) (range 0x8b04 0x8b1d) (range 0x8b20 0x8b2d) (range 0x8b30 0x8b36) (range 0x8be0 0x8bff))))
;;* lme

;;* lmx 30 system/sepolicy/private/wifi_mainline_supplicant.te

(allow wifi_mainline_supplicant self (netlink_route_socket (read write create bind nlmsg_write nlmsg_readpriv)))
;;* lme

;;* lmx 31 system/sepolicy/private/wifi_mainline_supplicant.te

(allowx wifi_mainline_supplicant self (nlmsg netlink_route_socket ((range 0x10 0x7a))))
;;* lme

;;* lmx 32 system/sepolicy/private/wifi_mainline_supplicant.te

(allow wifi_mainline_supplicant self (netlink_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
;;* lme

;;* lmx 33 system/sepolicy/private/wifi_mainline_supplicant.te

(allow wifi_mainline_supplicant self (netlink_generic_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
;;* lme

;;* lmx 36 system/sepolicy/private/wifi_mainline_supplicant.te

(allow wifi_mainline_supplicant dumpstate (fd (use)))
;;* lme

;;* lmx 37 system/sepolicy/private/wifi_mainline_supplicant.te

(allow wifi_mainline_supplicant dumpstate (fifo_file (write)))
;;* lme

;;* lmx 40 system/sepolicy/private/wifi_mainline_supplicant.te

(allow wifi_mainline_supplicant apex_module_data_file (dir (search)))
;;* lme

;;* lmx 41 system/sepolicy/private/wifi_mainline_supplicant.te

(allow wifi_mainline_supplicant apex_wifi_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 42 system/sepolicy/private/wifi_mainline_supplicant.te

(allow wifi_mainline_supplicant apex_wifi_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 45 system/sepolicy/private/wifi_mainline_supplicant.te

(allow wifi_mainline_supplicant apc_service (service_manager (find)))
;;* lme

;;* lmx 45 system/sepolicy/private/wifi_mainline_supplicant.te

(allow wifi_mainline_supplicant keystore_service (service_manager (find)))
;;* lme

;;* lmx 45 system/sepolicy/private/wifi_mainline_supplicant.te

(allow wifi_mainline_supplicant legacykeystore_service (service_manager (find)))
;;* lme

;;* lmx 45 system/sepolicy/private/wifi_mainline_supplicant.te

(allow wifi_mainline_supplicant keystore (binder (call transfer)))
;;* lme

;;* lmx 45 system/sepolicy/private/wifi_mainline_supplicant.te

(allow keystore wifi_mainline_supplicant (binder (transfer)))
;;* lme

;;* lmx 45 system/sepolicy/private/wifi_mainline_supplicant.te

(allow wifi_mainline_supplicant keystore (fd (use)))
;;* lme

;;* lmx 45 system/sepolicy/private/wifi_mainline_supplicant.te

(allow keystore wifi_mainline_supplicant (binder (call transfer)))
;;* lme

;;* lmx 45 system/sepolicy/private/wifi_mainline_supplicant.te

(allow wifi_mainline_supplicant keystore (binder (transfer)))
;;* lme

;;* lmx 45 system/sepolicy/private/wifi_mainline_supplicant.te

(allow keystore wifi_mainline_supplicant (fd (use)))
;;* lme

;;* lmx 49 system/sepolicy/private/wifi_mainline_supplicant.te

(allow wifi_mainline_supplicant wifi_key (keystore2_key (get_info use)))
;;* lme

;;* lmx 3 system/sepolicy/private/wificond.te

(allow wificond property_socket (sock_file (write)))
;;* lme

;;* lmx 3 system/sepolicy/private/wificond.te

(allow wificond init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 3 system/sepolicy/private/wificond.te

(allow wificond wifi_hal_prop (property_service (set)))
;;* lme

;;* lmx 3 system/sepolicy/private/wificond.te

(allow wificond wifi_hal_prop (file (read getattr map open)))
;;* lme

;;* lmx 4 system/sepolicy/private/wificond.te

(allow wificond property_socket (sock_file (write)))
;;* lme

;;* lmx 4 system/sepolicy/private/wificond.te

(allow wificond init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 4 system/sepolicy/private/wificond.te

(allow wificond wifi_prop (property_service (set)))
;;* lme

;;* lmx 4 system/sepolicy/private/wificond.te

(allow wificond wifi_prop (file (read getattr map open)))
;;* lme

;;* lmx 5 system/sepolicy/private/wificond.te

(allow wificond property_socket (sock_file (write)))
;;* lme

;;* lmx 5 system/sepolicy/private/wificond.te

(allow wificond init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 5 system/sepolicy/private/wificond.te

(allow wificond ctl_default_prop (property_service (set)))
;;* lme

;;* lmx 5 system/sepolicy/private/wificond.te

(allow wificond ctl_default_prop (file (read getattr map open)))
;;* lme

;;* lmx 7 system/sepolicy/private/wificond.te

(allow wificond hwservicemanager_prop (file (read getattr map open)))
;;* lme

;;* lmx 9 system/sepolicy/private/wificond.te

(allow wificond legacykeystore_service (service_manager (find)))
;;* lme

;;* lmx 11 system/sepolicy/private/wificond.te

(allow init wificond_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 11 system/sepolicy/private/wificond.te

(allow init wificond (process (transition)))
;;* lme

;;* lmx 11 system/sepolicy/private/wificond.te

(allow wificond wificond_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init wificond (process (noatsecure)))
;;* lmx 11 system/sepolicy/private/wificond.te

(allow init wificond (process (siginh rlimitinh)))
;;* lme

(typetransition init wificond_exec process wificond)
;;* lmx 13 system/sepolicy/private/wificond.te

(allow wificond servicemanager (binder (call transfer)))
;;* lme

;;* lmx 13 system/sepolicy/private/wificond.te

(allow servicemanager wificond (binder (call transfer)))
;;* lme

;;* lmx 14 system/sepolicy/private/wificond.te

(allow wificond system_server (binder (call transfer)))
;;* lme

;;* lmx 14 system/sepolicy/private/wificond.te

(allow system_server wificond (binder (transfer)))
;;* lme

;;* lmx 14 system/sepolicy/private/wificond.te

(allow wificond system_server (fd (use)))
;;* lme

;;* lmx 15 system/sepolicy/private/wificond.te

(allow wificond keystore (binder (call transfer)))
;;* lme

;;* lmx 15 system/sepolicy/private/wificond.te

(allow keystore wificond (binder (transfer)))
;;* lme

;;* lmx 15 system/sepolicy/private/wificond.te

(allow wificond keystore (fd (use)))
;;* lme

;;* lmx 17 system/sepolicy/private/wificond.te

(allow wificond wifinl80211_service (service_manager (add find)))
;;* lme

;;* lmx 17 system/sepolicy/private/wificond.te

(neverallow base_typeattr_1208 wifinl80211_service (service_manager (add)))
;;* lme

;;* lmx 17 system/sepolicy/private/wificond.te

(allow wificond su (tcp_socket (read write accept getopt)))
;;* lme

;;* lmx 18 system/sepolicy/private/wificond.te

(allow wificond hal_nlinterceptor (memfd_file (read write getattr map)))
;;* lme

;;* lmx 18 system/sepolicy/private/wificond.te

(allow hal_nlinterceptor wificond (memfd_file (read write getattr map)))
;;* lme

;;* lmx 21 system/sepolicy/private/wificond.te

(allow wificond self (udp_socket (ioctl read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
;;* lme

;;* lmx 23 system/sepolicy/private/wificond.te

(allowx wificond self (ioctl udp_socket (0x8914 0x8924)))
;;* lme

;;* lmx 24 system/sepolicy/private/wificond.te

(allow wificond self (capability (net_admin net_raw)))
(allow wificond self (cap_userns (net_admin net_raw)))
;;* lme

;;* lmx 26 system/sepolicy/private/wificond.te

(allow wificond self (netlink_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
;;* lme

;;* lmx 28 system/sepolicy/private/wificond.te

(allow wificond self (netlink_generic_socket (read write create getattr setattr lock append map bind connect getopt setopt shutdown)))
;;* lme

;;* lmx 30 system/sepolicy/private/wificond.te

(allow wificond proc_net_type (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 30 system/sepolicy/private/wificond.te

(allow wificond proc_net_type (file (ioctl read getattr lock map open watch watch_reads)))
(allow wificond proc_net_type (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 33 system/sepolicy/private/wificond.te

(allow wificond permission_service (service_manager (find)))
;;* lme

;;* lmx 36 system/sepolicy/private/wificond.te

(allow wificond dumpstate (fd (use)))
;;* lme

;;* lmx 37 system/sepolicy/private/wificond.te

(allow wificond dumpstate (fifo_file (write)))
;;* lme

;;* lmx 40 system/sepolicy/private/wificond.te

(allow wificond hwservicemanager (binder (call transfer)))
;;* lme

;;* lmx 40 system/sepolicy/private/wificond.te

(allow hwservicemanager wificond (binder (call transfer)))
;;* lme

;;* lmx 42 system/sepolicy/private/wificond.te

(allow wificond system_wifi_keystore_hwservice (hwservice_manager (add find)))
;;* lme

;;* lmx 42 system/sepolicy/private/wificond.te

(allow wificond hidl_base_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 42 system/sepolicy/private/wificond.te

(neverallow base_typeattr_1208 system_wifi_keystore_hwservice (hwservice_manager (add)))
;;* lme

;;* lmx 45 system/sepolicy/private/wificond.te

(allow wificond keystore_service (service_manager (find)))
;;* lme

;;* lmx 49 system/sepolicy/private/wificond.te

(allow wificond wifi_key (keystore2_key (get_info use)))
;;* lme

;;* lmx 3 system/sepolicy/private/wrapfd_hal_domain.te

(allow wrapfd_hal_domain system_server_wrapfd (anon_inode (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme

;;* lmx 7 system/sepolicy/private/wrapfd_hal_domain.te

(allowx wrapfd_hal_domain system_server_wrapfd (ioctl anon_inode ((range 0x6200 0x6203))))
;;* lme

;;* lmx 7 system/sepolicy/private/wrapfd_hal_domain.te

(allowx wrapfd_hal_domain system_server_wrapfd (ioctl anon_inode ((range 0xbc02 0xbc03) (range 0xbc07 0xbc08))))
;;* lme

;;* lmx 12 system/sepolicy/private/wrapfd_hal_domain.te

(neverallowx wrapfd_hal_domain system_server_wrapfd (ioctl anon_inode ((range 0x0 0x61ff) (range 0x6300 0xbbff) (range 0xbd00 0xffff))))
;;* lme

;;* lmx 12 system/sepolicy/private/wrapfd_hal_domain.te

(neverallowx wrapfd_hal_domain system_server_wrapfd (ioctl anon_inode ((range 0x6204 0x62ff))))
;;* lme

;;* lmx 12 system/sepolicy/private/wrapfd_hal_domain.te

(neverallowx wrapfd_hal_domain system_server_wrapfd (ioctl anon_inode ((range 0xbc00 0xbc01) (range 0xbc04 0xbc06) (range 0xbc09 0xbcff))))
;;* lme

;;* lmx 5 system/sepolicy/private/zygote.te

(allow init zygote_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 5 system/sepolicy/private/zygote.te

(allow init zygote (process (transition)))
;;* lme

;;* lmx 5 system/sepolicy/private/zygote.te

(allow zygote zygote_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init zygote (process (noatsecure)))
;;* lmx 5 system/sepolicy/private/zygote.te

(allow init zygote (process (siginh rlimitinh)))
;;* lme

(typetransition init zygote_exec process zygote)
(typetransition zygote tmpfs file zygote_tmpfs)
;;* lmx 6 system/sepolicy/private/zygote.te

(allow zygote zygote_tmpfs (file (read write getattr map)))
;;* lme

;;* lmx 8 system/sepolicy/private/zygote.te

(allow zygote runtime_event_log_tags_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 11 system/sepolicy/private/zygote.te

(allow zygote self (capability (chown dac_override dac_read_search fowner setgid setuid)))
(allow zygote self (cap_userns (chown dac_override dac_read_search fowner setgid setuid)))
;;* lme

;;* lmx 14 system/sepolicy/private/zygote.te

(allow zygote self (capability (setpcap)))
(allow zygote self (cap_userns (setpcap)))
;;* lme

;;* lmx 17 system/sepolicy/private/zygote.te

(allow zygote self (process (setcurrent)))
;;* lme

;;* lmx 18 system/sepolicy/private/zygote.te

(allow zygote system_server_startup (process (dyntransition)))
;;* lme

;;* lmx 19 system/sepolicy/private/zygote.te

(allow zygote appdomain (process (dyntransition)))
;;* lme

;;* lmx 20 system/sepolicy/private/zygote.te

(allow zygote webview_zygote (process (dyntransition)))
;;* lme

;;* lmx 21 system/sepolicy/private/zygote.te

(allow zygote app_zygote (process (dyntransition)))
;;* lme

;;* lmx 24 system/sepolicy/private/zygote.te

(allow zygote appdomain (dir (getattr search)))
;;* lme

;;* lmx 25 system/sepolicy/private/zygote.te

(allow zygote appdomain (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 27 system/sepolicy/private/zygote.te

(allow zygote zygote_userfaultfd (anon_inode (ioctl read create)))
;;* lme

(dontaudit su zygote_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lmx 27 system/sepolicy/private/zygote.te

(neverallow base_typeattr_320 zygote_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme

;;* lmx 30 system/sepolicy/private/zygote.te

(allow zygote system_server (process (getpgid setpgid)))
;;* lme

;;* lmx 31 system/sepolicy/private/zygote.te

(allow zygote appdomain (process (getpgid setpgid)))
;;* lme

;;* lmx 32 system/sepolicy/private/zygote.te

(allow zygote webview_zygote (process (getpgid setpgid)))
;;* lme

;;* lmx 33 system/sepolicy/private/zygote.te

(allow zygote app_zygote (process (getpgid setpgid)))
;;* lme

;;* lmx 36 system/sepolicy/private/zygote.te

(allow zygote system_data_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 37 system/sepolicy/private/zygote.te

(allow zygote system_data_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 40 system/sepolicy/private/zygote.te

(allow zygote mnt_expand_file (dir (getattr)))
;;* lme

;;* lmx 43 system/sepolicy/private/zygote.te

(allow zygote dalvikcache_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 44 system/sepolicy/private/zygote.te

(allow zygote dalvikcache_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 47 system/sepolicy/private/zygote.te

(allow zygote dalvikcache_data_file (lnk_file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 50 system/sepolicy/private/zygote.te

(allow zygote resourcecache_data_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
;;* lme

;;* lmx 51 system/sepolicy/private/zygote.te

(allow zygote resourcecache_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 56 system/sepolicy/private/zygote.te

(allow zygote dalvikcache_data_file (file (execute)))
;;* lme

;;* lmx 59 system/sepolicy/private/zygote.te

(allow zygote apex_module_data_file (dir (search)))
;;* lme

;;* lmx 62 system/sepolicy/private/zygote.te

(allow zygote apex_art_data_file (dir (getattr search)))
;;* lme

;;* lmx 63 system/sepolicy/private/zygote.te

(allow zygote apex_art_data_file (file (ioctl read getattr lock map execute open watch watch_reads)))
;;* lme

;;* lmx 81 system/sepolicy/private/zygote.te

(allow zygote properties_device (dir (mounton search)))
(allow zygote system_data_file (dir (mounton search)))
(allow zygote system_userdir_file (dir (mounton search)))
(allow zygote user_profile_root_file (dir (mounton search)))
(allow zygote user_profile_data_file (dir (mounton search)))
(allow zygote media_rw_data_file (dir (mounton search)))
;;* lme

;;* lmx 84 system/sepolicy/private/zygote.te

(allow zygote system_file (dir (mounton)))
;;* lme

;;* lmx 88 system/sepolicy/private/zygote.te

(allow zygote mirror_data_file (dir (search)))
;;* lme

;;* lmx 93 system/sepolicy/private/zygote.te

(allow zygote mnt_expand_file (dir (read open search)))
;;* lme

;;* lmx 97 system/sepolicy/private/zygote.te

(allow zygote app_data_file_type (dir (getattr)))
;;* lme

;;* lmx 100 system/sepolicy/private/zygote.te

(allow zygote tmpfs (dir (ioctl read write create getattr setattr lock rename mounton open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 104 system/sepolicy/private/zygote.te

(allow zygote tmpfs (lnk_file (create)))
;;* lme

;;* lmx 109 system/sepolicy/private/zygote.te

(allow zygote tmpfs (dir (relabelfrom)))
(allow zygote tmpfs (lnk_file (relabelfrom)))
;;* lme

;;* lmx 110 system/sepolicy/private/zygote.te

(allow zygote system_userdir_file (dir (relabelto)))
;;* lme

;;* lmx 111 system/sepolicy/private/zygote.te

(allow zygote system_data_file (dir (relabelto)))
(allow zygote system_data_file (lnk_file (relabelto)))
;;* lme

;;* lmx 112 system/sepolicy/private/zygote.te

(allow zygote sdk_sandbox_system_data_file (dir (getattr relabelto search)))
;;* lme

;;* lmx 115 system/sepolicy/private/zygote.te

(allow zygote proc_filesystems (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 118 system/sepolicy/private/zygote.te

(allow zygote self (process (execmem)))
;;* lme

;;* lmx 119 system/sepolicy/private/zygote.te

(allow zygote zygote_tmpfs (file (execute)))
;;* lme

;;* lmx 120 system/sepolicy/private/zygote.te

(allow zygote ashmem_libcutils_device (chr_file (execute)))
;;* lme

;;* lmx 121 system/sepolicy/private/zygote.te

(allow zygote zygote (memfd_file (execute)))
;;* lme

;;* lmx 126 system/sepolicy/private/zygote.te

(allow zygote idmap_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lme

;;* lmx 127 system/sepolicy/private/zygote.te

(allow zygote dex2oat_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lme

;;* lmx 130 system/sepolicy/private/zygote.te

(allow zygote vendor_overlay_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 130 system/sepolicy/private/zygote.te

(allow zygote vendor_overlay_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow zygote vendor_overlay_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 133 system/sepolicy/private/zygote.te

(allow zygote cgroup (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 134 system/sepolicy/private/zygote.te

(allow zygote cgroup (file (ioctl read getattr setattr lock map open watch watch_reads)))
(allow zygote cgroup (lnk_file (ioctl read getattr setattr lock map open watch watch_reads)))
;;* lme

;;* lmx 135 system/sepolicy/private/zygote.te

(allow zygote cgroup_v2 (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 136 system/sepolicy/private/zygote.te

(allow zygote cgroup_v2 (file (ioctl read getattr setattr lock map open watch watch_reads)))
(allow zygote cgroup_v2 (lnk_file (ioctl read getattr setattr lock map open watch watch_reads)))
;;* lme

;;* lmx 137 system/sepolicy/private/zygote.te

(allow zygote self (capability (sys_admin)))
(allow zygote self (cap_userns (sys_admin)))
;;* lme

;;* lmx 142 system/sepolicy/private/zygote.te

(allow zygote pmsg_device (chr_file (getattr)))
;;* lme

;;* lmx 143 system/sepolicy/private/zygote.te

(allow zygote debugfs_trace_marker (file (getattr)))
;;* lme

;;* lmx 146 system/sepolicy/private/zygote.te

(allow zygote seapp_contexts_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 148 system/sepolicy/private/zygote.te

(allow zygote selinuxfs (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 148 system/sepolicy/private/zygote.te

(allow zygote selinuxfs (file (ioctl read getattr lock map open watch watch_reads)))
(allow zygote selinuxfs (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 148 system/sepolicy/private/zygote.te

(allow zygote selinuxfs (file (write lock append map open)))
;;* lme

;;* lmx 148 system/sepolicy/private/zygote.te

(allow zygote kernel (security (check_context)))
;;* lme

;;* lmx 150 system/sepolicy/private/zygote.te

(allow zygote selinuxfs (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 150 system/sepolicy/private/zygote.te

(allow zygote selinuxfs (file (ioctl read getattr lock map open watch watch_reads)))
(allow zygote selinuxfs (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 150 system/sepolicy/private/zygote.te

(allow zygote selinuxfs (file (write lock append map open)))
;;* lme

;;* lmx 150 system/sepolicy/private/zygote.te

(allow zygote kernel (security (compute_av)))
;;* lme

;;* lmx 150 system/sepolicy/private/zygote.te

(allow zygote self (netlink_selinux_socket (read write create getattr setattr lock relabelfrom relabelto append bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
;;* lme

;;* lmx 154 system/sepolicy/private/zygote.te

(allow zygote proc_cpuinfo (file (mounton)))
;;* lme

;;* lmx 157 system/sepolicy/private/zygote.te

(allow zygote rootfs (dir (mounton)))
;;* lme

;;* lmx 158 system/sepolicy/private/zygote.te

(allow zygote tmpfs (filesystem (mount unmount)))
;;* lme

;;* lmx 159 system/sepolicy/private/zygote.te

(allow zygote fuse (filesystem (unmount)))
;;* lme

;;* lmx 160 system/sepolicy/private/zygote.te

(allow zygote sdcardfs (filesystem (unmount)))
;;* lme

;;* lmx 161 system/sepolicy/private/zygote.te

(allow zygote labeledfs (filesystem (unmount)))
;;* lme

;;* lmx 164 system/sepolicy/private/zygote.te

(allow zygote mnt_user_file (dir (ioctl read write create getattr setattr lock rename mounton open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 165 system/sepolicy/private/zygote.te

(allow zygote mnt_user_file (lnk_file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 166 system/sepolicy/private/zygote.te

(allow zygote mnt_user_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 169 system/sepolicy/private/zygote.te

(allow zygote mnt_pass_through_file (dir (ioctl read write create getattr setattr lock rename mounton open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 172 system/sepolicy/private/zygote.te

(allow zygote storage_file (dir (mounton search)))
;;* lme

;;* lmx 175 system/sepolicy/private/zygote.te

(allow zygote sdcard_type (dir (ioctl read write create getattr setattr lock rename mounton open watch watch_reads add_name remove_name reparent search rmdir)))
(allow zygote fuse (dir (ioctl read write create getattr setattr lock rename mounton open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 176 system/sepolicy/private/zygote.te

(allow zygote sdcard_type (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(allow zygote fuse (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 179 system/sepolicy/private/zygote.te

(allow zygote zygote_exec (file (ioctl read getattr lock map execute open watch watch_reads execute_no_trans)))
;;* lme

;;* lmx 182 system/sepolicy/private/zygote.te

(allow zygote statsdw_socket (sock_file (write)))
;;* lme

;;* lmx 182 system/sepolicy/private/zygote.te

(allow zygote statsd (unix_dgram_socket (sendto)))
;;* lme

;;* lmx 185 system/sepolicy/private/zygote.te

(allow zygote rootfs (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 185 system/sepolicy/private/zygote.te

(allow zygote rootfs (file (ioctl read getattr lock map open watch watch_reads)))
(allow zygote rootfs (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 188 system/sepolicy/private/zygote.te

(allow zygote system_file (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 188 system/sepolicy/private/zygote.te

(allow zygote system_file (file (ioctl read getattr lock map open watch watch_reads)))
(allow zygote system_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 191 system/sepolicy/private/zygote.te

(allow zygote oemfs (dir (search)))
;;* lme

;;* lmx 193 system/sepolicy/private/zygote.te

(allow zygote method_trace_data_file (dir (write lock open add_name remove_name search)))
;;* lme

;;* lmx 193 system/sepolicy/private/zygote.te

(allow zygote method_trace_data_file (file (write create lock append map open)))
;;* lme

;;* lmx 199 system/sepolicy/private/zygote.te

(allow zygote tmpfs (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 201 system/sepolicy/private/zygote.te

(allow zygote same_process_hal_file (file (read getattr map execute open)))
;;* lme

;;* lmx 204 system/sepolicy/private/zygote.te

(allow zygote build_attestation_prop (file (read getattr map open)))
;;* lme

;;* lmx 207 system/sepolicy/private/zygote.te

(allow zygote storage_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 210 system/sepolicy/private/zygote.te

(allow zygote overlay_prop (file (read getattr map open)))
;;* lme

;;* lmx 211 system/sepolicy/private/zygote.te

(allow zygote exported_overlay_prop (file (read getattr map open)))
;;* lme

;;* lmx 214 system/sepolicy/private/zygote.te

(allow zygote device_config_runtime_native_prop (file (read getattr map open)))
;;* lme

;;* lmx 215 system/sepolicy/private/zygote.te

(allow zygote device_config_runtime_native_boot_prop (file (read getattr map open)))
;;* lme

;;* lmx 219 system/sepolicy/private/zygote.te

(allow zygote device_config_window_manager_native_boot_prop (file (read getattr map open)))
;;* lme

(dontaudit zygote self (capability (fsetid sys_resource)))
(dontaudit zygote self (cap_userns (fsetid sys_resource)))
(dontaudit zygote media_rw_data_file (dir (read setattr open)))
;;* lmx 234 system/sepolicy/private/zygote.te

(allow zygote system_server (fd (use)))
;;* lme

;;* lmx 237 system/sepolicy/private/zygote.te

(allow zygote system_unsolzygote_socket (sock_file (write)))
;;* lme

;;* lmx 237 system/sepolicy/private/zygote.te

(allow zygote system_server (unix_dgram_socket (sendto)))
;;* lme

;;* lmx 240 system/sepolicy/private/zygote.te

(allow zygote media_variant_prop (file (read getattr map open)))
;;* lme

;;* lmx 243 system/sepolicy/private/zygote.te

(allow zygote odsign_prop (file (read getattr map open)))
;;* lme

;;* lmx 246 system/sepolicy/private/zygote.te

(allow zygote packagemanager_config_prop (file (read getattr map open)))
;;* lme

;;* lmx 249 system/sepolicy/private/zygote.te

(allow zygote qemu_sf_lcd_density_prop (file (read getattr map open)))
;;* lme

;;* lmx 253 system/sepolicy/private/zygote.te

(allow zygote persist_wm_debug_prop (file (read getattr map open)))
;;* lme

;;* lmx 256 system/sepolicy/private/zygote.te

(allow zygote apex_info_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 260 system/sepolicy/private/zygote.te

(allow zygote vendor_apex_file (dir (getattr search)))
;;* lme

;;* lmx 261 system/sepolicy/private/zygote.te

(allow zygote vendor_apex_file (file (getattr)))
;;* lme

;;* lmx 262 system/sepolicy/private/zygote.te

(allow zygote vendor_apex_metadata_file (dir (search)))
;;* lme

;;* lmx 265 system/sepolicy/private/zygote.te

(allow zygote sysfs_fs_f2fs (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 265 system/sepolicy/private/zygote.te

(allow zygote sysfs_fs_f2fs (file (ioctl read getattr lock map open watch watch_reads)))
(allow zygote sysfs_fs_f2fs (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 268 system/sepolicy/private/zygote.te

(allow zygote system_font_fallback_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 271 system/sepolicy/private/zygote.te

(allow zygote zygote (process (setsched)))
;;* lme

;;* lmx 274 system/sepolicy/private/zygote.te

(allow zygote self (capability (sys_nice)))
(allow zygote self (cap_userns (sys_nice)))
;;* lme

;;* lmx 292 system/sepolicy/private/zygote.te

(neverallow zygote base_typeattr_1209 (process (dyntransition)))
;;* lme

;;* lmx 301 system/sepolicy/private/zygote.te

(neverallow zygote base_typeattr_1210 (file (execute execute_no_trans)))
;;* lme

;;* lmx 309 system/sepolicy/private/zygote.te

(neverallow zygote bluetooth_a2dp_offload_prop (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(neverallow zygote bluetooth_audio_hal_prop (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(neverallow zygote bluetooth_prop (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
(neverallow zygote exported_bluetooth_prop (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme

;;* lmx 312 system/sepolicy/private/zygote.te

(neverallow zygote app_data_file_type (dir (ioctl read write create setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 7 system/sepolicy/private/zygote_next.te

(allow init zygote_next_exec (file (read getattr map execute open)))
;;* lme

;;* lmx 7 system/sepolicy/private/zygote_next.te

(allow init zygote_next (process (transition)))
;;* lme

;;* lmx 7 system/sepolicy/private/zygote_next.te

(allow zygote_next zygote_next_exec (file (read getattr map execute open entrypoint)))
;;* lme

(dontaudit init zygote_next (process (noatsecure)))
;;* lmx 7 system/sepolicy/private/zygote_next.te

(allow init zygote_next (process (siginh rlimitinh)))
;;* lme

(typetransition init zygote_next_exec process zygote_next)
;;* lmx 8 system/sepolicy/private/zygote_next.te

(allow zygote_next property_socket (sock_file (write)))
;;* lme

;;* lmx 8 system/sepolicy/private/zygote_next.te

(allow zygote_next init (unix_stream_socket (connectto)))
;;* lme

;;* lmx 8 system/sepolicy/private/zygote_next.te

(allow zygote_next zygote_zygote_next_server_status_prop (property_service (set)))
;;* lme

;;* lmx 8 system/sepolicy/private/zygote_next.te

(allow zygote_next zygote_zygote_next_server_status_prop (file (read getattr map open)))
;;* lme

;;* lmx 11 system/sepolicy/private/zygote_next.te

(allow zygote_next self (capability (chown dac_override dac_read_search fowner setgid setuid)))
(allow zygote_next self (cap_userns (chown dac_override dac_read_search fowner setgid setuid)))
;;* lme

;;* lmx 15 system/sepolicy/private/zygote_next.te

(allow zygote_next self (capability (setpcap sys_admin)))
(allow zygote_next self (cap_userns (setpcap sys_admin)))
;;* lme

;;* lmx 18 system/sepolicy/private/zygote_next.te

(allow zygote_next self (process (setcurrent)))
;;* lme

;;* lmx 19 system/sepolicy/private/zygote_next.te

(allow zygote_next isolated_app (process (dyntransition)))
;;* lme

;;* lmx 20 system/sepolicy/private/zygote_next.te

(allow zygote_next native_app_zygote (process (dyntransition)))
;;* lme

;;* lmx 23 system/sepolicy/private/zygote_next.te

(allow zygote_next cgroup (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 24 system/sepolicy/private/zygote_next.te

(allow zygote_next cgroup (file (ioctl read getattr setattr lock map open watch watch_reads)))
(allow zygote_next cgroup (lnk_file (ioctl read getattr setattr lock map open watch watch_reads)))
;;* lme

;;* lmx 25 system/sepolicy/private/zygote_next.te

(allow zygote_next cgroup_v2 (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir)))
;;* lme

;;* lmx 26 system/sepolicy/private/zygote_next.te

(allow zygote_next cgroup_v2 (file (ioctl read getattr setattr lock map open watch watch_reads)))
(allow zygote_next cgroup_v2 (lnk_file (ioctl read getattr setattr lock map open watch watch_reads)))
;;* lme

;;* lmx 27 system/sepolicy/private/zygote_next.te

(allow zygote_next self (capability (sys_admin)))
(allow zygote_next self (cap_userns (sys_admin)))
;;* lme

;;* lmx 34 system/sepolicy/private/zygote_next.te

(allow zygote_next pmsg_device (chr_file (getattr)))
;;* lme

;;* lmx 36 system/sepolicy/private/zygote_next.te

(allow zygote_next debugfs_trace_marker (file (getattr)))
;;* lme

;;* lmx 39 system/sepolicy/private/zygote_next.te

(allow zygote_next seapp_contexts_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 41 system/sepolicy/private/zygote_next.te

(allow zygote_next selinuxfs (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 41 system/sepolicy/private/zygote_next.te

(allow zygote_next selinuxfs (file (ioctl read getattr lock map open watch watch_reads)))
(allow zygote_next selinuxfs (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 41 system/sepolicy/private/zygote_next.te

(allow zygote_next selinuxfs (file (write lock append map open)))
;;* lme

;;* lmx 41 system/sepolicy/private/zygote_next.te

(allow zygote_next kernel (security (check_context)))
;;* lme

;;* lmx 43 system/sepolicy/private/zygote_next.te

(allow zygote_next selinuxfs (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme

;;* lmx 43 system/sepolicy/private/zygote_next.te

(allow zygote_next selinuxfs (file (ioctl read getattr lock map open watch watch_reads)))
(allow zygote_next selinuxfs (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme

;;* lmx 43 system/sepolicy/private/zygote_next.te

(allow zygote_next selinuxfs (file (write lock append map open)))
;;* lme

;;* lmx 43 system/sepolicy/private/zygote_next.te

(allow zygote_next kernel (security (compute_av)))
;;* lme

;;* lmx 43 system/sepolicy/private/zygote_next.te

(allow zygote_next self (netlink_selinux_socket (read write create getattr setattr lock relabelfrom relabelto append bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
;;* lme

(dontaudit zygote_next self (capability (fsetid sys_resource)))
(dontaudit zygote_next self (cap_userns (fsetid sys_resource)))
;;* lmx 52 system/sepolicy/private/zygote_next.te

(allow zygote_next self (capability (sys_nice)))
(allow zygote_next self (cap_userns (sys_nice)))
;;* lme

;;* lmx 60 system/sepolicy/private/zygote_next.te

(neverallow base_typeattr_890 native_app_zygote (process (transition dyntransition)))
;;* lme

;;* lmx 63 system/sepolicy/private/zygote_next.te

(allow zygote_next system_unsolzygote_socket (sock_file (write)))
;;* lme

;;* lmx 63 system/sepolicy/private/zygote_next.te

(allow zygote_next system_server (unix_dgram_socket (sendto)))
;;* lme

;;* lmx 66 system/sepolicy/private/zygote_next.te

(allow zygote_next statsdw_socket (sock_file (write)))
;;* lme

;;* lmx 66 system/sepolicy/private/zygote_next.te

(allow zygote_next statsd (unix_dgram_socket (sendto)))
;;* lme

(typetransition zygote zygote anon_inode "[userfaultfd]" zygote_userfaultfd)
(typetransition webview_zygote webview_zygote anon_inode "[userfaultfd]" webview_zygote_userfaultfd)
(typetransition vzwomatrigger_app vzwomatrigger_app anon_inode "[wrapfd]" vzwomatrigger_app_wrapfd)
(typetransition vzwomatrigger_app vzwomatrigger_app anon_inode "[io_uring]" vzwomatrigger_app_block_io_uring)
(typetransition vzwomatrigger_app vzwomatrigger_app anon_inode "[userfaultfd]" vzwomatrigger_app_userfaultfd)
(typetransition vmlauncher_app vmlauncher_app anon_inode "[wrapfd]" vmlauncher_app_wrapfd)
(typetransition vmlauncher_app vmlauncher_app anon_inode "[io_uring]" vmlauncher_app_block_io_uring)
(typetransition vmlauncher_app vmlauncher_app anon_inode "[userfaultfd]" vmlauncher_app_userfaultfd)
(typetransition untrusted_app_34 untrusted_app_34 anon_inode "[wrapfd]" untrusted_app_34_wrapfd)
(typetransition untrusted_app_34 untrusted_app_34 anon_inode "[io_uring]" untrusted_app_34_block_io_uring)
(typetransition untrusted_app_34 untrusted_app_34 anon_inode "[userfaultfd]" untrusted_app_34_userfaultfd)
(typetransition untrusted_app_32 untrusted_app_32 anon_inode "[wrapfd]" untrusted_app_32_wrapfd)
(typetransition untrusted_app_32 untrusted_app_32 anon_inode "[io_uring]" untrusted_app_32_block_io_uring)
(typetransition untrusted_app_32 untrusted_app_32 anon_inode "[userfaultfd]" untrusted_app_32_userfaultfd)
(typetransition untrusted_app_30 untrusted_app_30 anon_inode "[wrapfd]" untrusted_app_30_wrapfd)
(typetransition untrusted_app_30 untrusted_app_30 anon_inode "[io_uring]" untrusted_app_30_block_io_uring)
(typetransition untrusted_app_30 untrusted_app_30 anon_inode "[userfaultfd]" untrusted_app_30_userfaultfd)
(typetransition untrusted_app_29 untrusted_app_29 anon_inode "[wrapfd]" untrusted_app_29_wrapfd)
(typetransition untrusted_app_29 untrusted_app_29 anon_inode "[io_uring]" untrusted_app_29_block_io_uring)
(typetransition untrusted_app_29 untrusted_app_29 anon_inode "[userfaultfd]" untrusted_app_29_userfaultfd)
(typetransition untrusted_app_27 untrusted_app_27 anon_inode "[wrapfd]" untrusted_app_27_wrapfd)
(typetransition untrusted_app_27 untrusted_app_27 anon_inode "[io_uring]" untrusted_app_27_block_io_uring)
(typetransition untrusted_app_27 untrusted_app_27 anon_inode "[userfaultfd]" untrusted_app_27_userfaultfd)
(typetransition untrusted_app_25 untrusted_app_25 anon_inode "[wrapfd]" untrusted_app_25_wrapfd)
(typetransition untrusted_app_25 untrusted_app_25 anon_inode "[io_uring]" untrusted_app_25_block_io_uring)
(typetransition untrusted_app_25 untrusted_app_25 anon_inode "[userfaultfd]" untrusted_app_25_userfaultfd)
(typetransition untrusted_app untrusted_app anon_inode "[wrapfd]" untrusted_app_wrapfd)
(typetransition untrusted_app untrusted_app anon_inode "[io_uring]" untrusted_app_block_io_uring)
(typetransition untrusted_app untrusted_app anon_inode "[userfaultfd]" untrusted_app_userfaultfd)
(typetransition traceur_app traceur_app anon_inode "[wrapfd]" traceur_app_wrapfd)
(typetransition traceur_app traceur_app anon_inode "[io_uring]" traceur_app_block_io_uring)
(typetransition traceur_app traceur_app anon_inode "[userfaultfd]" traceur_app_userfaultfd)
(typetransition system_server system_data_file dir "app_backup_staging" app_backup_staging_file)
(typetransition system_server system_server anon_inode "[wrapfd]" system_server_wrapfd)
(typetransition system_server system_data_file sock_file "unsolzygotesocket" system_unsolzygote_socket)
(typetransition system_server system_data_file sock_file "ndebugsocket" system_ndebug_socket)
(typetransition system_server system_server anon_inode "[userfaultfd]" system_server_userfaultfd)
(typetransition system_app system_app anon_inode "[wrapfd]" system_app_wrapfd)
(typetransition system_app system_app anon_inode "[io_uring]" system_app_block_io_uring)
(typetransition system_app system_app anon_inode "[userfaultfd]" system_app_userfaultfd)
(typetransition su su anon_inode "[wrapfd]" su_wrapfd)
(typetransition su su anon_inode "[io_uring]" su_block_io_uring)
(typetransition su su anon_inode "[userfaultfd]" su_userfaultfd)
(typetransition statsd statsd anon_inode "[io_uring]" statsd_iouring)
(typetransition snapuserd snapuserd anon_inode "[io_uring]" snapuserd_iouring)
(typetransition simpleperf simpleperf anon_inode "[wrapfd]" simpleperf_wrapfd)
(typetransition simpleperf simpleperf anon_inode "[io_uring]" simpleperf_block_io_uring)
(typetransition simpleperf simpleperf anon_inode "[userfaultfd]" simpleperf_userfaultfd)
(typetransition shell shell anon_inode "[wrapfd]" shell_wrapfd)
(typetransition shell shell anon_inode "[io_uring]" shell_block_io_uring)
(typetransition shell shell anon_inode "[userfaultfd]" shell_userfaultfd)
(typetransition shared_relro shared_relro anon_inode "[wrapfd]" shared_relro_wrapfd)
(typetransition shared_relro shared_relro anon_inode "[io_uring]" shared_relro_block_io_uring)
(typetransition shared_relro shared_relro anon_inode "[userfaultfd]" shared_relro_userfaultfd)
(typetransition secure_element secure_element anon_inode "[wrapfd]" secure_element_wrapfd)
(typetransition secure_element secure_element anon_inode "[io_uring]" secure_element_block_io_uring)
(typetransition secure_element secure_element anon_inode "[userfaultfd]" secure_element_userfaultfd)
(typetransition sdk_sandbox_next sdk_sandbox_next anon_inode "[wrapfd]" sdk_sandbox_next_wrapfd)
(typetransition sdk_sandbox_next sdk_sandbox_next anon_inode "[io_uring]" sdk_sandbox_next_block_io_uring)
(typetransition sdk_sandbox_next sdk_sandbox_next anon_inode "[userfaultfd]" sdk_sandbox_next_userfaultfd)
(typetransition sdk_sandbox_audit sdk_sandbox_audit anon_inode "[wrapfd]" sdk_sandbox_audit_wrapfd)
(typetransition sdk_sandbox_audit sdk_sandbox_audit anon_inode "[io_uring]" sdk_sandbox_audit_block_io_uring)
(typetransition sdk_sandbox_audit sdk_sandbox_audit anon_inode "[userfaultfd]" sdk_sandbox_audit_userfaultfd)
(typetransition sdk_sandbox_34 sdk_sandbox_34 anon_inode "[wrapfd]" sdk_sandbox_34_wrapfd)
(typetransition sdk_sandbox_34 sdk_sandbox_34 anon_inode "[io_uring]" sdk_sandbox_34_block_io_uring)
(typetransition sdk_sandbox_34 sdk_sandbox_34 anon_inode "[userfaultfd]" sdk_sandbox_34_userfaultfd)
(typetransition runas_app runas_app anon_inode "[wrapfd]" runas_app_wrapfd)
(typetransition runas_app runas_app anon_inode "[io_uring]" runas_app_block_io_uring)
(typetransition runas_app runas_app anon_inode "[userfaultfd]" runas_app_userfaultfd)
(typetransition rkpdapp rkpdapp anon_inode "[wrapfd]" rkpdapp_wrapfd)
(typetransition rkpdapp rkpdapp anon_inode "[io_uring]" rkpdapp_block_io_uring)
(typetransition rkpdapp rkpdapp anon_inode "[userfaultfd]" rkpdapp_userfaultfd)
(typetransition radio radio anon_inode "[wrapfd]" radio_wrapfd)
(typetransition radio radio anon_inode "[io_uring]" radio_block_io_uring)
(typetransition radio radio anon_inode "[userfaultfd]" radio_userfaultfd)
(typetransition priv_app_36 priv_app_36 anon_inode "[wrapfd]" priv_app_36_wrapfd)
(typetransition priv_app_36 priv_app_36 anon_inode "[io_uring]" priv_app_36_block_io_uring)
(typetransition priv_app_36 priv_app_36 anon_inode "[userfaultfd]" priv_app_36_userfaultfd)
(typetransition priv_app priv_app anon_inode "[wrapfd]" priv_app_wrapfd)
(typetransition priv_app priv_app anon_inode "[io_uring]" priv_app_block_io_uring)
(typetransition priv_app priv_app anon_inode "[userfaultfd]" priv_app_userfaultfd)
(typetransition platform_app_36 platform_app_36 anon_inode "[wrapfd]" platform_app_36_wrapfd)
(typetransition platform_app_36 platform_app_36 anon_inode "[io_uring]" platform_app_36_block_io_uring)
(typetransition platform_app_36 platform_app_36 anon_inode "[userfaultfd]" platform_app_36_userfaultfd)
(typetransition platform_app platform_app anon_inode "[wrapfd]" platform_app_wrapfd)
(typetransition platform_app platform_app anon_inode "[io_uring]" platform_app_block_io_uring)
(typetransition platform_app platform_app anon_inode "[userfaultfd]" platform_app_userfaultfd)
(typetransition permissioncontroller_app permissioncontroller_app anon_inode "[wrapfd]" permissioncontroller_app_wrapfd)
(typetransition permissioncontroller_app permissioncontroller_app anon_inode "[io_uring]" permissioncontroller_app_block_io_uring)
(typetransition permissioncontroller_app permissioncontroller_app anon_inode "[userfaultfd]" permissioncontroller_app_userfaultfd)
(typetransition pcc_component pcc_component anon_inode "[wrapfd]" pcc_component_wrapfd)
(typetransition pcc_component pcc_component anon_inode "[io_uring]" pcc_component_block_io_uring)
(typetransition pcc_component pcc_component anon_inode "[userfaultfd]" pcc_component_userfaultfd)
(typetransition odrefresh odrefresh anon_inode "[userfaultfd]" odrefresh_userfaultfd)
(typetransition nfc nfc anon_inode "[wrapfd]" nfc_wrapfd)
(typetransition nfc nfc anon_inode "[io_uring]" nfc_block_io_uring)
(typetransition nfc nfc anon_inode "[userfaultfd]" nfc_userfaultfd)
(typetransition network_stack network_stack anon_inode "[wrapfd]" network_stack_wrapfd)
(typetransition network_stack network_stack anon_inode "[io_uring]" network_stack_block_io_uring)
(typetransition network_stack network_stack anon_inode "[userfaultfd]" network_stack_userfaultfd)
(typetransition mediaprovider_app mediaprovider_app anon_inode "[wrapfd]" mediaprovider_app_wrapfd)
(typetransition mediaprovider_app mediaprovider_app anon_inode "[io_uring]" mediaprovider_app_block_io_uring)
(typetransition mediaprovider_app mediaprovider_app anon_inode "[userfaultfd]" mediaprovider_app_userfaultfd)
(typetransition mediaprovider mediaprovider anon_inode "[wrapfd]" mediaprovider_wrapfd)
(typetransition mediaprovider mediaprovider anon_inode "[io_uring]" mediaprovider_block_io_uring)
(typetransition mediaprovider mediaprovider anon_inode "[userfaultfd]" mediaprovider_userfaultfd)
(typetransition logd logd anon_inode "[io_uring]" logd_iouring)
(typetransition isolated_compute_app isolated_compute_app anon_inode "[wrapfd]" isolated_compute_app_wrapfd)
(typetransition isolated_compute_app isolated_compute_app anon_inode "[io_uring]" isolated_compute_app_block_io_uring)
(typetransition isolated_compute_app isolated_compute_app anon_inode "[userfaultfd]" isolated_compute_app_userfaultfd)
(typetransition isolated_app isolated_app anon_inode "[wrapfd]" isolated_app_wrapfd)
(typetransition isolated_app isolated_app anon_inode "[io_uring]" isolated_app_block_io_uring)
(typetransition isolated_app isolated_app anon_inode "[userfaultfd]" isolated_app_userfaultfd)
(typetransition incidentd incidentd anon_inode "[userfaultfd]" incidentd_userfaultfd)
(typetransition gmscore_app gmscore_app anon_inode "[wrapfd]" gmscore_app_wrapfd)
(typetransition gmscore_app gmscore_app anon_inode "[io_uring]" gmscore_app_block_io_uring)
(typetransition gmscore_app gmscore_app anon_inode "[userfaultfd]" gmscore_app_userfaultfd)
(typetransition fastbootd fastbootd anon_inode "[io_uring]" fastbootd_iouring)
(typetransition ephemeral_app ephemeral_app anon_inode "[wrapfd]" ephemeral_app_wrapfd)
(typetransition ephemeral_app ephemeral_app anon_inode "[io_uring]" ephemeral_app_block_io_uring)
(typetransition ephemeral_app ephemeral_app anon_inode "[userfaultfd]" ephemeral_app_userfaultfd)
(typetransition dexopt_chroot_setup dexopt_chroot_setup anon_inode "[userfaultfd]" dexopt_chroot_setup_userfaultfd)
(typetransition dex2oat dex2oat anon_inode "[userfaultfd]" dex2oat_userfaultfd)
(typetransition device_as_webcam device_as_webcam anon_inode "[wrapfd]" device_as_webcam_wrapfd)
(typetransition device_as_webcam device_as_webcam anon_inode "[io_uring]" device_as_webcam_block_io_uring)
(typetransition device_as_webcam device_as_webcam anon_inode "[userfaultfd]" device_as_webcam_userfaultfd)
(typetransition bluetooth bluetooth anon_inode "[wrapfd]" bluetooth_wrapfd)
(typetransition bluetooth bluetooth anon_inode "[io_uring]" bluetooth_block_io_uring)
(typetransition bluetooth bluetooth anon_inode "[userfaultfd]" bluetooth_userfaultfd)
(typetransition artd artd anon_inode "[userfaultfd]" artd_userfaultfd)
(typetransition app_zygote app_zygote anon_inode "[userfaultfd]" app_zygote_userfaultfd)
(typetransition adservices adservices anon_inode "[wrapfd]" adservices_wrapfd)
(typetransition adservices adservices anon_inode "[io_uring]" adservices_block_io_uring)
(typetransition adservices adservices anon_inode "[userfaultfd]" adservices_userfaultfd)
(typeattribute base_typeattr_1210)
(typeattributeset base_typeattr_1210 (and (data_file_type ) (not (dalvikcache_data_file apex_art_data_file ))))
(typeattribute base_typeattr_1209)
(typeattributeset base_typeattr_1209 (not (appdomain app_zygote webview_zygote system_server_startup ) ))
(typeattribute base_typeattr_1208)
(typeattributeset base_typeattr_1208 (and (domain ) (not (wificond ))))
(typeattribute base_typeattr_1207)
(typeattributeset base_typeattr_1207 (and (domain ) (not (wifi_mainline_supplicant ))))
(typeattribute base_typeattr_1206)
(typeattributeset base_typeattr_1206 (and (domain ) (not (webview_zygote ))))
(typeattribute base_typeattr_1205)
(typeattributeset base_typeattr_1205 (not (system_server_wrapfd vzwomatrigger_app_userfaultfd ) ))
(typeattribute base_typeattr_1204)
(typeattributeset base_typeattr_1204 (and (domain ) (not (crash_dump llkd runas_app simpleperf vzwomatrigger_app ))))
(typeattribute base_typeattr_1203)
(typeattributeset base_typeattr_1203 (and (appdomain ) (not (runas_app shell simpleperf vzwomatrigger_app ))))
(typeattribute base_typeattr_1202)
(typeattributeset base_typeattr_1202 (and (vzwomatrigger_app ) (not (runas_app shell simpleperf ))))
(typeattribute base_typeattr_1201)
(typeattributeset base_typeattr_1201 (and (domain ) (not (vzwomatrigger_app ))))
(typeattribute base_typeattr_1200)
(typeattributeset base_typeattr_1200 (and (domain ) (not (hal_bootctl_server hal_health_storage_server hal_keymaster_server system_suspend_server hwservicemanager keystore servicemanager su system_server tee casefolding_remover ))))
(typeattribute base_typeattr_1199)
(typeattributeset base_typeattr_1199 (and (domain ) (not (apexd init kernel vold vold_prepare_subdirs ))))
(typeattribute base_typeattr_1198)
(typeattributeset base_typeattr_1198 (and (domain ) (not (apexd init vold vold_prepare_subdirs ))))
(typeattribute base_typeattr_1197)
(typeattributeset base_typeattr_1197 (and (domain ) (not (kernel vold vold_prepare_subdirs ))))
(typeattribute base_typeattr_1196)
(typeattributeset base_typeattr_1196 (and (domain ) (not (apexd init vold ))))
(typeattribute base_typeattr_1195)
(typeattributeset base_typeattr_1195 (and (domain ) (not (init vold vold_prepare_subdirs ))))
(typeattribute base_typeattr_1194)
(typeattributeset base_typeattr_1194 (and (domain ) (not (vold vold_prepare_subdirs ))))
(typeattribute base_typeattr_1193)
(typeattributeset base_typeattr_1193 (and (domain ) (not (vold casefolding_remover ))))
(typeattribute base_typeattr_1192)
(typeattributeset base_typeattr_1192 (and (domain ) (not (apexd system_server update_verifier vdc vold gsid ))))
(typeattribute base_typeattr_1191)
(typeattributeset base_typeattr_1191 (and (sysfs_type ) (not (sysfs_batteryinfo ))))
(typeattribute base_typeattr_1190)
(typeattributeset base_typeattr_1190 (and (domain ) (not (servicemanager virtualizationservice ))))
(typeattribute base_typeattr_1189)
(typeattributeset base_typeattr_1189 (and (domain ) (not (vmnic ))))
(typeattribute base_typeattr_1188)
(typeattributeset base_typeattr_1188 (not (system_server_wrapfd vmlauncher_app_userfaultfd ) ))
(typeattribute base_typeattr_1187)
(typeattributeset base_typeattr_1187 (and (domain ) (not (crash_dump llkd runas_app simpleperf vmlauncher_app ))))
(typeattribute base_typeattr_1186)
(typeattributeset base_typeattr_1186 (and (appdomain ) (not (runas_app shell simpleperf vmlauncher_app ))))
(typeattribute base_typeattr_1185)
(typeattributeset base_typeattr_1185 (and (vmlauncher_app ) (not (runas_app shell simpleperf ))))
(typeattribute base_typeattr_1184)
(typeattributeset base_typeattr_1184 (and (domain ) (not (vmlauncher_app ))))
(typeattribute base_typeattr_1183)
(typeattributeset base_typeattr_1183 (and (domain ) (not (atrace dumpstate system_server traceur_app virtualizationservice ))))
(typeattribute base_typeattr_1182)
(typeattributeset base_typeattr_1182 (and (domain ) (not (virtualizationmanager_domain servicemanager virtualizationservice ))))
(typeattribute base_typeattr_1181)
(typeattributeset base_typeattr_1181 (and (domain ) (not (virtualizationmanager_domain crosvm_domain virtualizationservice ))))
(typeattribute base_typeattr_1180)
(typeattributeset base_typeattr_1180 (and (domain ) (not (virtualizationmanager_domain init virtualizationservice ))))
(typeattribute base_typeattr_1179)
(typeattributeset base_typeattr_1179 (and (domain ) (not (init virtualizationservice ))))
(typeattribute base_typeattr_1178)
(typeattributeset base_typeattr_1178 (and (domain ) (not (dumpstate virtualizationservice ))))
(typeattribute base_typeattr_1177)
(typeattributeset base_typeattr_1177 (and (domain ) (not (virtualizationservice ))))
(typeattribute base_typeattr_1176)
(typeattributeset base_typeattr_1176 (and (domain ) (not (virtualizationmanager_domain early_virtmgr_domain dumpstate init ))))
(typeattribute base_typeattr_1175)
(typeattributeset base_typeattr_1175 (and (domain ) (not (virtualizationmanager_domain ))))
(typeattribute base_typeattr_1174)
(typeattributeset base_typeattr_1174 (and (virtualizationmanager_domain ) (not (virtualizationmanager_vendor ))))
(typeattribute base_typeattr_1173)
(typeattributeset base_typeattr_1173 (and (domain ) (not (virtual_touchpad ))))
(typeattribute base_typeattr_1172)
(typeattributeset base_typeattr_1172 (and (domain ) (not (virtual_camera ))))
(typeattribute base_typeattr_1171)
(typeattributeset base_typeattr_1171 (and (domain ) (not (vfio_handler ))))
(typeattribute base_typeattr_1170)
(typeattributeset base_typeattr_1170 (and (coredomain ) (not (init modprobe overlay_remounter ))))
(typeattribute base_typeattr_1169)
(typeattributeset base_typeattr_1169 (and (domain ) (not (init logd prng_seeder su vendor_init ))))
(typeattribute base_typeattr_1168)
(typeattributeset base_typeattr_1168 (and (sysfs_type ) (not (sysfs_usermodehelper ))))
(typeattribute base_typeattr_1167)
(typeattributeset base_typeattr_1167 (and (fs_type ) (not (bpffs_type contextmount_type fusefs_type sdcard_type rootfs proc_uid_time_in_state proc_uid_concurrent_active_time proc_uid_concurrent_policy_time ))))
(typeattribute base_typeattr_1166)
(typeattributeset base_typeattr_1166 (and (fs_type ) (not (bpffs_type contextmount_type fusefs_type debugfs_type sdcard_type keychord_device rootfs proc_kallsyms proc_uid_time_in_state proc_uid_concurrent_active_time proc_uid_concurrent_policy_time ))))
(typeattribute base_typeattr_1165)
(typeattributeset base_typeattr_1165 (and (file_type ) (not (bpffs_type exec_type core_data_file_type system_file_type system_dlkm_file_type vendor_file_type gsi_metadata_file_type vold_metadata_file password_slot_metadata_file apex_metadata_file ota_metadata_file userspace_reboot_metadata_file aconfig_storage_metadata_file aconfig_storage_flags_metadata_file mnt_product_file ))))
(typeattribute base_typeattr_1164)
(typeattributeset base_typeattr_1164 (and (file_type ) (not (bpffs_type exec_type core_data_file_type system_file_type system_dlkm_file_type vendor_file_type gsi_metadata_file_type unlabeled vold_metadata_file password_slot_metadata_file apex_metadata_file ota_metadata_file userspace_reboot_metadata_file aconfig_storage_metadata_file aconfig_storage_flags_metadata_file apex_mnt_dir ))))
(typeattribute base_typeattr_1163)
(typeattributeset base_typeattr_1163 (and (file_type ) (not (bpffs_type exec_type core_data_file_type system_file_type system_dlkm_file_type vendor_file_type gsi_metadata_file_type unlabeled vold_metadata_file password_slot_metadata_file apex_metadata_file ota_metadata_file userspace_reboot_metadata_file aconfig_storage_metadata_file aconfig_storage_flags_metadata_file ))))
(typeattribute base_typeattr_1162)
(typeattributeset base_typeattr_1162 (and (file_type ) (not (bpffs_type exec_type core_data_file_type system_file_type system_dlkm_file_type vendor_file_type debugfs_type gsi_metadata_file_type proc_kallsyms unlabeled vold_metadata_file password_slot_metadata_file apex_metadata_file ota_metadata_file userspace_reboot_metadata_file aconfig_storage_metadata_file aconfig_storage_flags_metadata_file runtime_event_log_tags_file apex_info_file tradeinmode_metadata_file statsd_atoms_list_file ))))
(typeattribute base_typeattr_1161)
(typeattributeset base_typeattr_1161 (and (file_type ) (not (bpffs_type exec_type core_data_file_type system_file_type system_dlkm_file_type vendor_file_type gsi_metadata_file_type unlabeled vold_metadata_file password_slot_metadata_file apex_metadata_file ota_metadata_file userspace_reboot_metadata_file aconfig_storage_metadata_file aconfig_storage_flags_metadata_file mnt_product_file statsd_atoms_list_file ))))
(typeattribute base_typeattr_1160)
(typeattributeset base_typeattr_1160 (and (dev_type ) (not (vm_manager_device_type keychord_device hw_random_device port_device lowpan_device ))))
(typeattribute base_typeattr_1159)
(typeattributeset base_typeattr_1159 (and (domain ) (not (usbauthservice ))))
(typeattribute base_typeattr_1158)
(typeattributeset base_typeattr_1158 (and (domain ) (not (uprobestats ))))
(typeattribute base_typeattr_1157)
(typeattributeset base_typeattr_1157 (and (domain ) (not (update_engine ))))
(typeattribute base_typeattr_1156)
(typeattributeset base_typeattr_1156 (not (system_server_wrapfd untrusted_app_34_userfaultfd ) ))
(typeattribute base_typeattr_1155)
(typeattributeset base_typeattr_1155 (and (domain ) (not (crash_dump llkd runas_app simpleperf untrusted_app_34 ))))
(typeattribute base_typeattr_1154)
(typeattributeset base_typeattr_1154 (and (appdomain ) (not (runas_app shell simpleperf untrusted_app_34 ))))
(typeattribute base_typeattr_1153)
(typeattributeset base_typeattr_1153 (and (untrusted_app_34 ) (not (runas_app shell simpleperf ))))
(typeattribute base_typeattr_1152)
(typeattributeset base_typeattr_1152 (and (domain ) (not (untrusted_app_34 ))))
(typeattribute base_typeattr_1151)
(typeattributeset base_typeattr_1151 (not (system_server_wrapfd untrusted_app_32_userfaultfd ) ))
(typeattribute base_typeattr_1150)
(typeattributeset base_typeattr_1150 (and (domain ) (not (crash_dump llkd runas_app simpleperf untrusted_app_32 ))))
(typeattribute base_typeattr_1149)
(typeattributeset base_typeattr_1149 (and (appdomain ) (not (runas_app shell simpleperf untrusted_app_32 ))))
(typeattribute base_typeattr_1148)
(typeattributeset base_typeattr_1148 (and (untrusted_app_32 ) (not (runas_app shell simpleperf ))))
(typeattribute base_typeattr_1147)
(typeattributeset base_typeattr_1147 (and (domain ) (not (untrusted_app_32 ))))
(typeattribute base_typeattr_1146)
(typeattributeset base_typeattr_1146 (not (system_server_wrapfd untrusted_app_30_userfaultfd ) ))
(typeattribute base_typeattr_1145)
(typeattributeset base_typeattr_1145 (and (domain ) (not (crash_dump llkd runas_app simpleperf untrusted_app_30 ))))
(typeattribute base_typeattr_1144)
(typeattributeset base_typeattr_1144 (and (appdomain ) (not (runas_app shell simpleperf untrusted_app_30 ))))
(typeattribute base_typeattr_1143)
(typeattributeset base_typeattr_1143 (and (untrusted_app_30 ) (not (runas_app shell simpleperf ))))
(typeattribute base_typeattr_1142)
(typeattributeset base_typeattr_1142 (and (domain ) (not (untrusted_app_30 ))))
(typeattribute base_typeattr_1141)
(typeattributeset base_typeattr_1141 (not (system_server_wrapfd untrusted_app_29_userfaultfd ) ))
(typeattribute base_typeattr_1140)
(typeattributeset base_typeattr_1140 (and (domain ) (not (crash_dump llkd runas_app simpleperf untrusted_app_29 ))))
(typeattribute base_typeattr_1139)
(typeattributeset base_typeattr_1139 (and (appdomain ) (not (runas_app shell simpleperf untrusted_app_29 ))))
(typeattribute base_typeattr_1138)
(typeattributeset base_typeattr_1138 (and (untrusted_app_29 ) (not (runas_app shell simpleperf ))))
(typeattribute base_typeattr_1137)
(typeattributeset base_typeattr_1137 (and (domain ) (not (untrusted_app_29 ))))
(typeattribute base_typeattr_1136)
(typeattributeset base_typeattr_1136 (not (system_server_wrapfd untrusted_app_27_userfaultfd ) ))
(typeattribute base_typeattr_1135)
(typeattributeset base_typeattr_1135 (and (domain ) (not (crash_dump llkd runas_app simpleperf untrusted_app_27 ))))
(typeattribute base_typeattr_1134)
(typeattributeset base_typeattr_1134 (and (appdomain ) (not (runas_app shell simpleperf untrusted_app_27 ))))
(typeattribute base_typeattr_1133)
(typeattributeset base_typeattr_1133 (and (untrusted_app_27 ) (not (runas_app shell simpleperf ))))
(typeattribute base_typeattr_1132)
(typeattributeset base_typeattr_1132 (and (domain ) (not (untrusted_app_27 ))))
(typeattribute base_typeattr_1131)
(typeattributeset base_typeattr_1131 (not (system_server_wrapfd untrusted_app_25_userfaultfd ) ))
(typeattribute base_typeattr_1130)
(typeattributeset base_typeattr_1130 (and (domain ) (not (crash_dump llkd runas_app simpleperf untrusted_app_25 ))))
(typeattribute base_typeattr_1129)
(typeattributeset base_typeattr_1129 (and (appdomain ) (not (runas_app shell simpleperf untrusted_app_25 ))))
(typeattribute base_typeattr_1128)
(typeattributeset base_typeattr_1128 (and (untrusted_app_25 ) (not (runas_app shell simpleperf ))))
(typeattribute base_typeattr_1127)
(typeattributeset base_typeattr_1127 (and (domain ) (not (untrusted_app_25 ))))
(typeattribute base_typeattr_1126)
(typeattributeset base_typeattr_1126 (not (system_server_wrapfd untrusted_app_userfaultfd ) ))
(typeattribute base_typeattr_1125)
(typeattributeset base_typeattr_1125 (and (domain ) (not (crash_dump llkd runas_app simpleperf untrusted_app ))))
(typeattribute base_typeattr_1124)
(typeattributeset base_typeattr_1124 (and (appdomain ) (not (runas_app shell simpleperf untrusted_app ))))
(typeattribute base_typeattr_1123)
(typeattributeset base_typeattr_1123 (and (untrusted_app ) (not (runas_app shell simpleperf ))))
(typeattribute base_typeattr_1122)
(typeattributeset base_typeattr_1122 (and (domain ) (not (untrusted_app ))))
(typeattribute base_typeattr_1121)
(typeattributeset base_typeattr_1121 (and (vendor_file_type ) (not (vendor_app_file vendor_overlay_file ))))
(typeattribute base_typeattr_1120)
(typeattributeset base_typeattr_1120 (and (service_manager_type ) (not (apex_service default_android_service dnsresolver_service gatekeeper_service incident_service installd_service lpdump_service mdns_service netd_service virtual_touchpad_service vold_service ))))
(typeattribute base_typeattr_1119)
(typeattributeset base_typeattr_1119 (not (system_server_wrapfd traceur_app_userfaultfd ) ))
(typeattribute base_typeattr_1118)
(typeattributeset base_typeattr_1118 (and (domain ) (not (crash_dump llkd runas_app simpleperf traceur_app ))))
(typeattribute base_typeattr_1117)
(typeattributeset base_typeattr_1117 (and (appdomain ) (not (runas_app shell simpleperf traceur_app ))))
(typeattribute base_typeattr_1116)
(typeattributeset base_typeattr_1116 (and (traceur_app ) (not (runas_app shell simpleperf ))))
(typeattribute base_typeattr_1115)
(typeattributeset base_typeattr_1115 (and (domain ) (not (traceur_app ))))
(typeattribute base_typeattr_1114)
(typeattributeset base_typeattr_1114 (and (domain ) (not (platform_app_all dumpstate perfetto shell system_server traced traceur_app ))))
(typeattribute base_typeattr_1113)
(typeattributeset base_typeattr_1113 (and (fs_type file_type ) (not (toolbox_exec ))))
(typeattribute base_typeattr_1112)
(typeattributeset base_typeattr_1112 (and (domain ) (not (dumpstate init tombstoned vendor_init ))))
(typeattribute base_typeattr_1111)
(typeattributeset base_typeattr_1111 (and (domain ) (not (system_suspend_server ))))
(typeattribute base_typeattr_1110)
(typeattributeset base_typeattr_1110 (and (domain ) (not (system_suspend_internal_server atrace dumpstate system_server traced_probes traceur_app ))))
(typeattribute base_typeattr_1109)
(typeattributeset base_typeattr_1109 (and (domain ) (not (system_suspend_internal_server ))))
(typeattribute base_typeattr_1108)
(typeattributeset base_typeattr_1108 (and (domain ) (not (atrace bluetooth dumpstate system_server traceur_app system_suspend ))))
(typeattribute base_typeattr_1107)
(typeattributeset base_typeattr_1107 (and (domain ) (not (system_suspend ))))
(typeattribute base_typeattr_1106)
(typeattributeset base_typeattr_1106 (and (domain ) (not (init shell system_server vendor_init ))))
(typeattribute base_typeattr_1105)
(typeattributeset base_typeattr_1105 (and (domain ) (not (init system_server ueventd vendor_init ))))
(typeattribute base_typeattr_1104)
(typeattributeset base_typeattr_1104 (and (dev_type ) (not (vd_device frp_block_device apex_dm_device ))))
(typeattribute base_typeattr_1103)
(typeattributeset base_typeattr_1103 (and (dev_type ) (not (frp_block_device ))))
(typeattribute base_typeattr_1102)
(typeattributeset base_typeattr_1102 (and (domain ) (not (flags_health_check init system_server ))))
(typeattribute base_typeattr_1101)
(typeattributeset base_typeattr_1101 (and (domain ) (not (app_zygote init system_server webview_zygote zygote native_app_zygote zygote_next ))))
(typeattribute base_typeattr_1100)
(typeattributeset base_typeattr_1100 (and (domain ) (not (crash_dump init system_server ))))
(typeattribute base_typeattr_1099)
(typeattributeset base_typeattr_1099 (and (domain ) (not (crash_dump perfetto clatd trace_redactor ))))
(typeattribute base_typeattr_1098)
(typeattributeset base_typeattr_1098 (and (file_type ) (not (logcat_exec toolbox_exec pbtombstone_exec ))))
(typeattribute base_typeattr_1097)
(typeattributeset base_typeattr_1097 (and (app_data_file_type ) (not (radio_data_file system_app_data_file ))))
(typeattribute base_typeattr_1096)
(typeattributeset base_typeattr_1096 (and (domain ) (not (init system_app ))))
(typeattribute base_typeattr_1095)
(typeattributeset base_typeattr_1095 (and (service_manager_type ) (not (apex_service default_android_service dnsresolver_service dumpstate_service installd_service lpdump_service mdns_service netd_service system_suspend_control_internal_service system_suspend_control_service virtual_touchpad_service vold_service tracingproxy_service virtualization_maintenance_service ))))
(typeattribute base_typeattr_1094)
(typeattributeset base_typeattr_1094 (not (system_server_wrapfd system_app_userfaultfd ) ))
(typeattribute base_typeattr_1093)
(typeattributeset base_typeattr_1093 (and (domain ) (not (crash_dump llkd runas_app simpleperf system_app ))))
(typeattribute base_typeattr_1092)
(typeattributeset base_typeattr_1092 (and (appdomain ) (not (runas_app shell simpleperf system_app ))))
(typeattribute base_typeattr_1091)
(typeattributeset base_typeattr_1091 (and (system_app ) (not (runas_app shell simpleperf ))))
(typeattribute base_typeattr_1090)
(typeattributeset base_typeattr_1090 (and (domain ) (not (system_app ))))
(typeattribute base_typeattr_1089)
(typeattributeset base_typeattr_1089 (and (domain ) (not (surfaceflinger ))))
(typeattribute base_typeattr_1088)
(typeattributeset base_typeattr_1088 (not (system_server_wrapfd su_userfaultfd ) ))
(typeattribute base_typeattr_1087)
(typeattributeset base_typeattr_1087 (and (domain ) (not (crash_dump llkd runas_app simpleperf su ))))
(typeattribute base_typeattr_1086)
(typeattributeset base_typeattr_1086 (and (appdomain ) (not (runas_app shell simpleperf su ))))
(typeattribute base_typeattr_1085)
(typeattributeset base_typeattr_1085 (and (su ) (not (runas_app shell simpleperf ))))
(typeattribute base_typeattr_1084)
(typeattributeset base_typeattr_1084 (and (domain ) (not (storaged ))))
(typeattribute base_typeattr_1083)
(typeattributeset base_typeattr_1083 (and (domain ) (not (init statsd system_server vold ))))
(typeattribute base_typeattr_1082)
(typeattributeset base_typeattr_1082 (and (domain ) (not (init statsd vold ))))
(typeattribute base_typeattr_1081)
(typeattributeset base_typeattr_1081 (and (coredomain ) (not (mediaextractor perfetto traced traced_probes ))))
(typeattribute base_typeattr_1080)
(typeattributeset base_typeattr_1080 (and (domain ) (not (stats_service_server ))))
(typeattribute base_typeattr_1079)
(typeattributeset base_typeattr_1079 (and (domain ) (not (statsd ))))
(typeattribute base_typeattr_1078)
(typeattributeset base_typeattr_1078 (and (domain ) (not (fastbootd init recovery shell update_engine snapshotctl ))))
(typeattribute base_typeattr_1077)
(typeattributeset base_typeattr_1077 (and (domain ) (not (snapuserd ))))
(typeattribute base_typeattr_1076)
(typeattributeset base_typeattr_1076 (and (domain ) (not (init snapuserd ))))
(typeattribute base_typeattr_1075)
(typeattributeset base_typeattr_1075 (not (system_server_wrapfd simpleperf_userfaultfd ) ))
(typeattribute base_typeattr_1074)
(typeattributeset base_typeattr_1074 (and (simpleperf ) (not (runas_app shell simpleperf ))))
(typeattribute base_typeattr_1073)
(typeattributeset base_typeattr_1073 (and (domain ) (not (simpleperf ))))
(typeattribute base_typeattr_1072)
(typeattributeset base_typeattr_1072 (and (domain ) (not (appdomain virtualizationmanager_domain crosvm_domain adbd artd dumpstate init installd simpleperf_app_runner system_server uncrypt ))))
(typeattribute base_typeattr_1071)
(typeattributeset base_typeattr_1071 (and (domain ) (not (appdomain adbd artd dumpstate init installd simpleperf_app_runner system_server uncrypt ))))
(typeattribute base_typeattr_1070)
(typeattributeset base_typeattr_1070 (and (domain ) (not (adbd artd dumpstate init installd shell vold ))))
(typeattribute base_typeattr_1069)
(typeattributeset base_typeattr_1069 (and (domain ) (not (appdomain virtualizationmanager_domain crosvm_domain adbd artd dumpstate installd uncrypt virtualizationservice ))))
(typeattribute base_typeattr_1068)
(typeattributeset base_typeattr_1068 (and (domain ) (not (installd shell uncrypt ))))
(typeattribute base_typeattr_1067)
(typeattributeset base_typeattr_1067 (and (domain ) (not (dumpstate init shell ))))
(typeattribute base_typeattr_1066)
(typeattributeset base_typeattr_1066 (and (service_manager_type ) (not (apex_service default_android_service dnsresolver_service gatekeeper_service incident_service installd_service mdns_service netd_service system_suspend_control_internal_service system_suspend_control_service virtualization_service virtual_touchpad_service vold_service hal_frp_service hal_keymint_service hal_secretkeeper_service hal_secureclock_service hal_sharedsecret_service virtualization_maintenance_service ))))
(typeattribute base_typeattr_1065)
(typeattributeset base_typeattr_1065 (not (system_server_wrapfd shell_userfaultfd ) ))
(typeattribute base_typeattr_1064)
(typeattributeset base_typeattr_1064 (and (domain ) (not (crash_dump llkd runas_app shell simpleperf ))))
(typeattribute base_typeattr_1063)
(typeattributeset base_typeattr_1063 (and (shell ) (not (runas_app shell simpleperf ))))
(typeattribute base_typeattr_1062)
(typeattributeset base_typeattr_1062 (not (system_server_wrapfd shared_relro_userfaultfd ) ))
(typeattribute base_typeattr_1061)
(typeattributeset base_typeattr_1061 (and (domain ) (not (crash_dump llkd runas_app shared_relro simpleperf ))))
(typeattribute base_typeattr_1060)
(typeattributeset base_typeattr_1060 (and (appdomain ) (not (runas_app shared_relro shell simpleperf ))))
(typeattribute base_typeattr_1059)
(typeattributeset base_typeattr_1059 (and (shared_relro ) (not (runas_app shell simpleperf ))))
(typeattribute base_typeattr_1058)
(typeattributeset base_typeattr_1058 (and (domain ) (not (shared_relro ))))
(typeattribute base_typeattr_1057)
(typeattributeset base_typeattr_1057 (and (fs_type file_type ) (not (sgdisk_exec ))))
(typeattribute base_typeattr_1056)
(typeattributeset base_typeattr_1056 (and (domain ) (not (servicemanager ))))
(typeattribute base_typeattr_1055)
(typeattributeset base_typeattr_1055 (and (domain ) (not (hwservicemanager init vendor_init vndservicemanager ))))
(typeattribute base_typeattr_1054)
(typeattributeset base_typeattr_1054 (not (service_manager_type vndservice_manager_type ) ))
(typeattribute base_typeattr_1053)
(typeattributeset base_typeattr_1053 (and (domain ) (not (serialservice ))))
(typeattribute base_typeattr_1052)
(typeattributeset base_typeattr_1052 (and (domain ) (not (sensor_service_server ))))
(typeattribute base_typeattr_1051)
(typeattributeset base_typeattr_1051 (not (system_server_wrapfd secure_element_userfaultfd ) ))
(typeattribute base_typeattr_1050)
(typeattributeset base_typeattr_1050 (and (domain ) (not (crash_dump llkd runas_app secure_element simpleperf ))))
(typeattribute base_typeattr_1049)
(typeattributeset base_typeattr_1049 (and (appdomain ) (not (runas_app secure_element shell simpleperf ))))
(typeattribute base_typeattr_1048)
(typeattributeset base_typeattr_1048 (and (secure_element ) (not (runas_app shell simpleperf ))))
(typeattribute base_typeattr_1047)
(typeattributeset base_typeattr_1047 (and (domain ) (not (secure_element ))))
(typeattribute base_typeattr_1046)
(typeattributeset base_typeattr_1046 (not (system_server_wrapfd sdk_sandbox_next_userfaultfd ) ))
(typeattribute base_typeattr_1045)
(typeattributeset base_typeattr_1045 (and (domain ) (not (crash_dump llkd runas_app simpleperf sdk_sandbox_next ))))
(typeattribute base_typeattr_1044)
(typeattributeset base_typeattr_1044 (and (appdomain ) (not (runas_app shell simpleperf sdk_sandbox_next ))))
(typeattribute base_typeattr_1043)
(typeattributeset base_typeattr_1043 (and (sdk_sandbox_next ) (not (runas_app shell simpleperf ))))
(typeattribute base_typeattr_1042)
(typeattributeset base_typeattr_1042 (and (domain ) (not (sdk_sandbox_next ))))
(typeattribute base_typeattr_1041)
(typeattributeset base_typeattr_1041 (and (property_type ) (not (system_property_type ))))
(typeattribute base_typeattr_1040)
(typeattributeset base_typeattr_1040 (not (system_server_wrapfd sdk_sandbox_audit_userfaultfd ) ))
(typeattribute base_typeattr_1039)
(typeattributeset base_typeattr_1039 (and (domain ) (not (crash_dump llkd runas_app simpleperf sdk_sandbox_audit ))))
(typeattribute base_typeattr_1038)
(typeattributeset base_typeattr_1038 (and (appdomain ) (not (runas_app shell simpleperf sdk_sandbox_audit ))))
(typeattribute base_typeattr_1037)
(typeattributeset base_typeattr_1037 (and (sdk_sandbox_audit ) (not (runas_app shell simpleperf ))))
(typeattribute base_typeattr_1036)
(typeattributeset base_typeattr_1036 (and (domain ) (not (sdk_sandbox_audit ))))
(typeattribute base_typeattr_1035)
(typeattributeset base_typeattr_1035 (and (domain ) (not (adbd sdk_sandbox_all ))))
(typeattribute base_typeattr_1034)
(typeattributeset base_typeattr_1034 (and (domain ) (not (adbd heapprofd logd netd prng_seeder su tombstoned traced traced_perf sdk_sandbox_all ))))
(typeattribute base_typeattr_1033)
(typeattributeset base_typeattr_1033 (and (domain ) (not (init installd system_server vold_prepare_subdirs zygote sdk_sandbox_all ))))
(typeattribute base_typeattr_1032)
(typeattributeset base_typeattr_1032 (and (domain ) (not (init installd system_server vold_prepare_subdirs ))))
(typeattribute base_typeattr_1031)
(typeattributeset base_typeattr_1031 (and (app_data_file_type ) (not (shell_data_file radio_data_file sdk_sandbox_data_file ))))
(typeattribute base_typeattr_1030)
(typeattributeset base_typeattr_1030 (not (system_server_wrapfd sdk_sandbox_34_userfaultfd ) ))
(typeattribute base_typeattr_1029)
(typeattributeset base_typeattr_1029 (and (domain ) (not (crash_dump llkd runas_app simpleperf sdk_sandbox_34 ))))
(typeattribute base_typeattr_1028)
(typeattributeset base_typeattr_1028 (and (appdomain ) (not (runas_app shell simpleperf sdk_sandbox_34 ))))
(typeattribute base_typeattr_1027)
(typeattributeset base_typeattr_1027 (and (sdk_sandbox_34 ) (not (runas_app shell simpleperf ))))
(typeattribute base_typeattr_1026)
(typeattributeset base_typeattr_1026 (and (domain ) (not (sdk_sandbox_34 ))))
(typeattribute base_typeattr_1025)
(typeattributeset base_typeattr_1025 (and (domain ) (not (scheduler_service_server ))))
(typeattribute base_typeattr_1024)
(typeattributeset base_typeattr_1024 (not (system_server_wrapfd runas_app_userfaultfd ) ))
(typeattribute base_typeattr_1023)
(typeattributeset base_typeattr_1023 (and (domain ) (not (crash_dump llkd runas_app simpleperf ))))
(typeattribute base_typeattr_1022)
(typeattributeset base_typeattr_1022 (and (appdomain ) (not (runas_app shell simpleperf ))))
(typeattribute base_typeattr_1021)
(typeattributeset base_typeattr_1021 (and (runas_app ) (not (runas_app shell simpleperf ))))
(typeattribute base_typeattr_1020)
(typeattributeset base_typeattr_1020 (and (domain ) (not (runas_app ))))
(typeattribute base_typeattr_1019)
(typeattributeset base_typeattr_1019 (and (appdomain ) (not (system_app ))))
(typeattribute base_typeattr_1018)
(typeattributeset base_typeattr_1018 (not (system_server_wrapfd rkpdapp_userfaultfd ) ))
(typeattribute base_typeattr_1017)
(typeattributeset base_typeattr_1017 (and (domain ) (not (crash_dump llkd rkpdapp runas_app simpleperf ))))
(typeattribute base_typeattr_1016)
(typeattributeset base_typeattr_1016 (and (appdomain ) (not (rkpdapp runas_app shell simpleperf ))))
(typeattribute base_typeattr_1015)
(typeattributeset base_typeattr_1015 (and (rkpdapp ) (not (runas_app shell simpleperf ))))
(typeattribute base_typeattr_1014)
(typeattributeset base_typeattr_1014 (and (domain ) (not (rkpdapp ))))
(typeattribute base_typeattr_1013)
(typeattributeset base_typeattr_1013 (and (domain ) (not (rkpd ))))
(typeattribute base_typeattr_1012)
(typeattributeset base_typeattr_1012 (and (domain ) (not (rkp_cert_processor ))))
(typeattribute base_typeattr_1011)
(typeattributeset base_typeattr_1011 (and (domain ) (not (remote_provisioning_service_server ))))
(typeattribute base_typeattr_1010)
(typeattributeset base_typeattr_1010 (and (file_type ) (not (coredump_file ))))
(typeattribute base_typeattr_1009)
(typeattributeset base_typeattr_1009 (and (file_type ) (not (coredump_file recovery_data_file ))))
(typeattribute base_typeattr_1008)
(typeattributeset base_typeattr_1008 (and (data_file_type ) (not (cache_file cache_recovery_file ))))
(typeattribute base_typeattr_1007)
(typeattributeset base_typeattr_1007 (and (domain ) (not (init radio ))))
(typeattribute base_typeattr_1006)
(typeattributeset base_typeattr_1006 (not (system_server_wrapfd radio_userfaultfd ) ))
(typeattribute base_typeattr_1005)
(typeattributeset base_typeattr_1005 (and (domain ) (not (crash_dump llkd radio runas_app simpleperf ))))
(typeattribute base_typeattr_1004)
(typeattributeset base_typeattr_1004 (and (appdomain ) (not (radio runas_app shell simpleperf ))))
(typeattribute base_typeattr_1003)
(typeattributeset base_typeattr_1003 (and (radio ) (not (runas_app shell simpleperf ))))
(typeattribute base_typeattr_1002)
(typeattributeset base_typeattr_1002 (and (domain ) (not (radio ))))
(typeattribute base_typeattr_1001)
(typeattributeset base_typeattr_1001 (and (domain ) (not (init statsd ))))
(typeattribute base_typeattr_1000)
(typeattributeset base_typeattr_1000 (and (domain ) (not (init shell su ))))
(typeattribute base_typeattr_999)
(typeattributeset base_typeattr_999 (and (appdomain ) (not (platform_app system_app device_as_webcam ))))
(typeattribute base_typeattr_998)
(typeattributeset base_typeattr_998 (and (domain ) (not (dumpstate init profcollectd ))))
(typeattribute base_typeattr_997)
(typeattributeset base_typeattr_997 (and (domain ) (not (init profcollectd ))))
(typeattribute base_typeattr_996)
(typeattributeset base_typeattr_996 (and (domain ) (not (coredomain apexd dumpstate vendor_init ))))
(typeattribute base_typeattr_995)
(typeattributeset base_typeattr_995 (and (domain ) (not (coredomain apexd dumpstate init ))))
(typeattribute base_typeattr_994)
(typeattributeset base_typeattr_994 (and (domain ) (not (init keystore rkpdapp shell system_server vendor_init ))))
(typeattribute base_typeattr_993)
(typeattributeset base_typeattr_993 (and (domain ) (not (init traced_perf traced_probes profcollectd simpleperf_boot ))))
(typeattribute base_typeattr_992)
(typeattributeset base_typeattr_992 (and (domain ) (not (hal_dumpstate_server dumpstate init ))))
(typeattribute base_typeattr_991)
(typeattributeset base_typeattr_991 (and (domain ) (not (appdomain dumpstate init vendor_init ))))
(typeattribute base_typeattr_990)
(typeattributeset base_typeattr_990 (and (domain ) (not (dumpstate init system_app vendor_init ))))
(typeattribute base_typeattr_989)
(typeattributeset base_typeattr_989 (and (domain ) (not (init surfaceflinger ))))
(typeattribute base_typeattr_988)
(typeattributeset base_typeattr_988 (and (domain ) (not (appdomain hal_telephony_server init radio ))))
(typeattribute base_typeattr_987)
(typeattributeset base_typeattr_987 (and (domain ) (not (init shell aconfigd aconfigd_mainline kcmdlinectrl ))))
(typeattribute base_typeattr_986)
(typeattributeset base_typeattr_986 (and (domain ) (not (init shell system_app system_server mtectrl ))))
(typeattribute base_typeattr_985)
(typeattributeset base_typeattr_985 (and (domain ) (not (adbd init adbd_tradeinmode ))))
(typeattribute base_typeattr_984)
(typeattributeset base_typeattr_984 (and (domain ) (not (adbd init system_app system_server vendor_init adbd_tradeinmode ))))
(typeattribute base_typeattr_983)
(typeattributeset base_typeattr_983 (and (property_type ) (not (extended_core_property_type system_property_type ))))
(typeattribute base_typeattr_982)
(typeattributeset base_typeattr_982 (and (coredomain ) (not (system_writes_vendor_properties_violators init ))))
(typeattribute base_typeattr_981)
(typeattributeset base_typeattr_981 (and (domain ) (not (dumpstate init system_suspend ))))
(typeattribute base_typeattr_980)
(typeattributeset base_typeattr_980 (not (domain coredomain hal_bluetooth_server bluetooth )))
(typeattribute base_typeattr_979)
(typeattributeset base_typeattr_979 (and (domain ) (not (appdomain coredomain hal_power_server vendor_init ))))
(typeattribute base_typeattr_978)
(typeattributeset base_typeattr_978 (and (core_property_type extended_core_property_type dalvik_config_prop_type exported3_system_prop systemsound_config_prop ) (not (dalvik_dynamic_config_prop debug_prop logd_prop nfc_prop powerctl_prop radio_prop ))))
(typeattribute base_typeattr_977)
(typeattributeset base_typeattr_977 (and (domain ) (not (hal_wifi_server dumpstate init vendor_init wificond ))))
(typeattribute base_typeattr_976)
(typeattributeset base_typeattr_976 (and (domain ) (not (coredomain hal_wifi_server wificond ))))
(typeattribute base_typeattr_975)
(typeattributeset base_typeattr_975 (and (domain ) (not (coredomain hal_camera_server cameraserver vendor_init ))))
(typeattribute base_typeattr_974)
(typeattributeset base_typeattr_974 (and (domain ) (not (coredomain hal_bluetooth_server bluetooth vendor_init ))))
(typeattribute base_typeattr_973)
(typeattributeset base_typeattr_973 (and (domain ) (not (coredomain hal_bluetooth_server bluetooth ))))
(typeattribute base_typeattr_972)
(typeattributeset base_typeattr_972 (and (domain ) (not (appdomain coredomain hal_telephony_server ))))
(typeattribute base_typeattr_971)
(typeattributeset base_typeattr_971 (and (domain ) (not (appdomain coredomain hal_telephony_server vendor_init ))))
(typeattribute base_typeattr_970)
(typeattributeset base_typeattr_970 (and (domain ) (not (appdomain coredomain hal_nfc_server ))))
(typeattribute base_typeattr_969)
(typeattributeset base_typeattr_969 (and (core_property_type extended_core_property_type exported3_system_prop exported_dumpstate_prop exported_config_prop exported_default_prop exported_system_prop usb_control_prop ) (not (nfc_prop powerctl_prop radio_prop ))))
(typeattribute base_typeattr_968)
(typeattributeset base_typeattr_968 (and (domain ) (not (appdomain coredomain vendor_init ))))
(typeattribute base_typeattr_967)
(typeattributeset base_typeattr_967 (and (domain ) (not (init su misctrl ))))
(typeattribute base_typeattr_966)
(typeattributeset base_typeattr_966 (and (domain ) (not (crash_dump dumpstate init statsd su misctrl ))))
(typeattribute base_typeattr_965)
(typeattributeset base_typeattr_965 (and (domain ) (not (dumpstate init su ))))
(typeattribute base_typeattr_964)
(typeattributeset base_typeattr_964 (and (domain ) (not (extra_free_kbytes init ))))
(typeattribute base_typeattr_963)
(typeattributeset base_typeattr_963 (and (core_property_type ) (not (fingerprint_prop restorecon_prop usb_prop config_prop cppreopt_prop dalvik_prop debuggerd_prop dhcp_prop dumpstate_prop net_radio_prop pan_result_prop persist_debug_prop shell_prop vold_prop audio_prop debug_prop logd_prop nfc_prop ota_prop powerctl_prop radio_prop system_prop ))))
(typeattribute base_typeattr_962)
(typeattributeset base_typeattr_962 (and (vendor_property_type ) (not (vendor_public_property_type ))))
(typeattribute base_typeattr_961)
(typeattributeset base_typeattr_961 (and (vendor_property_type vendor_internal_property_type ) (not (vendor_restricted_property_type vendor_public_property_type ))))
(typeattribute base_typeattr_960)
(typeattributeset base_typeattr_960 (and (system_property_type ) (not (system_public_property_type ))))
(typeattribute base_typeattr_959)
(typeattributeset base_typeattr_959 (and (system_property_type system_internal_property_type ) (not (system_restricted_property_type system_public_property_type ))))
(typeattribute base_typeattr_958)
(typeattributeset base_typeattr_958 (and (property_type ) (not (system_property_type vendor_property_type ))))
(typeattribute base_typeattr_957)
(typeattributeset base_typeattr_957 (and (domain ) (not (profcollectd ))))
(typeattribute base_typeattr_956)
(typeattributeset base_typeattr_956 (and (app_data_file_type ) (not (privapp_data_file ))))
(typeattribute base_typeattr_955)
(typeattributeset base_typeattr_955 (not (system_server_wrapfd priv_app_36_userfaultfd ) ))
(typeattribute base_typeattr_954)
(typeattributeset base_typeattr_954 (and (domain ) (not (crash_dump llkd priv_app_36 runas_app simpleperf ))))
(typeattribute base_typeattr_953)
(typeattributeset base_typeattr_953 (and (appdomain ) (not (priv_app_36 runas_app shell simpleperf ))))
(typeattribute base_typeattr_952)
(typeattributeset base_typeattr_952 (and (priv_app_36 ) (not (runas_app shell simpleperf ))))
(typeattribute base_typeattr_951)
(typeattributeset base_typeattr_951 (and (domain ) (not (priv_app_36 ))))
(typeattribute base_typeattr_950)
(typeattributeset base_typeattr_950 (not (system_server_wrapfd priv_app_userfaultfd ) ))
(typeattribute base_typeattr_949)
(typeattributeset base_typeattr_949 (and (domain ) (not (crash_dump llkd priv_app runas_app simpleperf ))))
(typeattribute base_typeattr_948)
(typeattributeset base_typeattr_948 (and (appdomain ) (not (priv_app runas_app shell simpleperf ))))
(typeattribute base_typeattr_947)
(typeattributeset base_typeattr_947 (and (priv_app ) (not (runas_app shell simpleperf ))))
(typeattribute base_typeattr_946)
(typeattributeset base_typeattr_946 (and (domain ) (not (priv_app ))))
(typeattribute base_typeattr_945)
(typeattributeset base_typeattr_945 (and (domain ) (not (init shell ))))
(typeattribute base_typeattr_944)
(typeattributeset base_typeattr_944 (and (domain ) (not (recovery update_engine ))))
(typeattribute base_typeattr_943)
(typeattributeset base_typeattr_943 (and (appdomain ) (not (untrusted_app_all priv_app_all isolated_app_all ephemeral_app network_stack shell system_app sdk_sandbox_all pcc_component ))))
(typeattribute base_typeattr_942)
(typeattributeset base_typeattr_942 (and (domain ) (not (domain dumpstate init system_server ))))
(typeattribute base_typeattr_941)
(typeattributeset base_typeattr_941 (not (system_server_wrapfd platform_app_36_userfaultfd ) ))
(typeattribute base_typeattr_940)
(typeattributeset base_typeattr_940 (and (domain ) (not (crash_dump llkd platform_app_36 runas_app simpleperf ))))
(typeattribute base_typeattr_939)
(typeattributeset base_typeattr_939 (and (appdomain ) (not (platform_app_36 runas_app shell simpleperf ))))
(typeattribute base_typeattr_938)
(typeattributeset base_typeattr_938 (and (platform_app_36 ) (not (runas_app shell simpleperf ))))
(typeattribute base_typeattr_937)
(typeattributeset base_typeattr_937 (and (domain ) (not (platform_app_36 ))))
(typeattribute base_typeattr_936)
(typeattributeset base_typeattr_936 (not (system_server_wrapfd platform_app_userfaultfd ) ))
(typeattribute base_typeattr_935)
(typeattributeset base_typeattr_935 (and (domain ) (not (crash_dump llkd platform_app runas_app simpleperf ))))
(typeattribute base_typeattr_934)
(typeattributeset base_typeattr_934 (and (appdomain ) (not (platform_app runas_app shell simpleperf ))))
(typeattribute base_typeattr_933)
(typeattributeset base_typeattr_933 (and (platform_app ) (not (runas_app shell simpleperf ))))
(typeattribute base_typeattr_932)
(typeattributeset base_typeattr_932 (and (domain ) (not (platform_app ))))
(typeattribute base_typeattr_931)
(typeattributeset base_typeattr_931 (not (system_server_wrapfd permissioncontroller_app_userfaultfd ) ))
(typeattribute base_typeattr_930)
(typeattributeset base_typeattr_930 (and (domain ) (not (crash_dump llkd runas_app simpleperf permissioncontroller_app ))))
(typeattribute base_typeattr_929)
(typeattributeset base_typeattr_929 (and (appdomain ) (not (runas_app shell simpleperf permissioncontroller_app ))))
(typeattribute base_typeattr_928)
(typeattributeset base_typeattr_928 (and (permissioncontroller_app ) (not (runas_app shell simpleperf ))))
(typeattribute base_typeattr_927)
(typeattributeset base_typeattr_927 (and (domain ) (not (permissioncontroller_app ))))
(typeattribute base_typeattr_926)
(typeattributeset base_typeattr_926 (and (domain ) (not (performanced ))))
(typeattribute base_typeattr_925)
(typeattributeset base_typeattr_925 (and (domain ) (not (adbd incidentd init perfetto shell traced trace_redactor ))))
(typeattribute base_typeattr_924)
(typeattributeset base_typeattr_924 (and (domain ) (not (priv_app_all adbd dumpstate incidentd init perfetto shell system_server traced trace_redactor ))))
(typeattribute base_typeattr_923)
(typeattributeset base_typeattr_923 (and (appdomain ) (not (su pcc_component ))))
(typeattribute base_typeattr_922)
(typeattributeset base_typeattr_922 (not (system_server_wrapfd pcc_component_userfaultfd ) ))
(typeattribute base_typeattr_921)
(typeattributeset base_typeattr_921 (and (domain ) (not (crash_dump llkd runas_app simpleperf pcc_component ))))
(typeattribute base_typeattr_920)
(typeattributeset base_typeattr_920 (and (appdomain ) (not (runas_app shell simpleperf pcc_component ))))
(typeattribute base_typeattr_919)
(typeattributeset base_typeattr_919 (and (pcc_component ) (not (runas_app shell simpleperf ))))
(typeattribute base_typeattr_918)
(typeattributeset base_typeattr_918 (and (domain ) (not (pcc_component ))))
(typeattribute base_typeattr_917)
(typeattributeset base_typeattr_917 (and (domain ) (not (init vendor_init ot_ctl ot_daemon ))))
(typeattribute base_typeattr_916)
(typeattributeset base_typeattr_916 (and (domain ) (not (ot_daemon ))))
(typeattribute base_typeattr_915)
(typeattributeset base_typeattr_915 (and (domain ) (not (omapi_server ))))
(typeattribute base_typeattr_914)
(typeattributeset base_typeattr_914 (and (domain ) (not (init odsign ))))
(typeattribute base_typeattr_913)
(typeattributeset base_typeattr_913 (and (domain ) (not (init system_server odrefresh ))))
(typeattribute base_typeattr_912)
(typeattributeset base_typeattr_912 (and (domain ) (not (artd init system_server odrefresh ))))
(typeattribute base_typeattr_911)
(typeattributeset base_typeattr_911 (and (domain ) (not (init compos_fd_server odrefresh ))))
(typeattribute base_typeattr_910)
(typeattributeset base_typeattr_910 (and (domain ) (not (odrefresh ))))
(typeattribute base_typeattr_909)
(typeattributeset base_typeattr_909 (not (system_server_wrapfd nfc_userfaultfd ) ))
(typeattribute base_typeattr_908)
(typeattributeset base_typeattr_908 (and (domain ) (not (crash_dump llkd nfc runas_app simpleperf ))))
(typeattribute base_typeattr_907)
(typeattributeset base_typeattr_907 (and (appdomain ) (not (nfc runas_app shell simpleperf ))))
(typeattribute base_typeattr_906)
(typeattributeset base_typeattr_906 (and (nfc ) (not (runas_app shell simpleperf ))))
(typeattribute base_typeattr_905)
(typeattributeset base_typeattr_905 (and (domain ) (not (nfc ))))
(typeattribute base_typeattr_904)
(typeattributeset base_typeattr_904 (not (system_server_wrapfd network_stack_userfaultfd ) ))
(typeattribute base_typeattr_903)
(typeattributeset base_typeattr_903 (and (domain ) (not (crash_dump llkd network_stack runas_app simpleperf ))))
(typeattribute base_typeattr_902)
(typeattributeset base_typeattr_902 (and (appdomain ) (not (network_stack runas_app shell simpleperf ))))
(typeattribute base_typeattr_901)
(typeattributeset base_typeattr_901 (and (network_stack ) (not (runas_app shell simpleperf ))))
(typeattribute base_typeattr_900)
(typeattributeset base_typeattr_900 (and (domain ) (not (network_stack ))))
(typeattribute base_typeattr_899)
(typeattributeset base_typeattr_899 (and (domain ) (not (init netd ))))
(typeattribute base_typeattr_898)
(typeattributeset base_typeattr_898 (and (domain ) (not (dumpstate init netd ))))
(typeattribute base_typeattr_897)
(typeattributeset base_typeattr_897 (and (appdomain ) (not (network_stack su ))))
(typeattribute base_typeattr_896)
(typeattributeset base_typeattr_896 (and (domain ) (not (dumpstate netd netutils_wrapper network_stack system_server ))))
(typeattribute base_typeattr_895)
(typeattributeset base_typeattr_895 (and (domain ) (not (netd ))))
(typeattribute base_typeattr_894)
(typeattributeset base_typeattr_894 (and (netdomain ) (not (pcc_component ))))
(typeattribute base_typeattr_893)
(typeattributeset base_typeattr_893 (and (netdomain ) (not (untrusted_app_all priv_app_all ephemeral_app mediaprovider sdk_sandbox_all pcc_component ))))
(typeattribute base_typeattr_892)
(typeattributeset base_typeattr_892 (and (netdomain ) (not (ephemeral_app sdk_sandbox_all pcc_component ))))
(typeattribute base_typeattr_891)
(typeattributeset base_typeattr_891 (and (domain ) (not (logd su system_server native_app_zygote zygote_next ))))
(typeattribute base_typeattr_890)
(typeattributeset base_typeattr_890 (and (domain ) (not (zygote_next ))))
(typeattribute base_typeattr_889)
(typeattributeset base_typeattr_889 (and (domain ) (not (mmd ))))
(typeattribute base_typeattr_888)
(typeattributeset base_typeattr_888 (and (mlstrustedsubject ) (not (adbd artd installd runas system_server zygote mediaprovider_app ))))
(typeattribute base_typeattr_887)
(typeattributeset base_typeattr_887 (and (mlstrustedsubject ) (not (artd installd mediaprovider_app ))))
(typeattribute base_typeattr_886)
(typeattributeset base_typeattr_886 (and (domain ) (not (mediatuner ))))
(typeattribute base_typeattr_885)
(typeattributeset base_typeattr_885 (and (domain ) (not (mediatranscoding ))))
(typeattribute base_typeattr_884)
(typeattributeset base_typeattr_884 (and (domain ) (not (mediaserver ))))
(typeattribute base_typeattr_883)
(typeattributeset base_typeattr_883 (not (system_server_wrapfd mediaprovider_app_userfaultfd ) ))
(typeattribute base_typeattr_882)
(typeattributeset base_typeattr_882 (and (domain ) (not (crash_dump llkd runas_app simpleperf mediaprovider_app ))))
(typeattribute base_typeattr_881)
(typeattributeset base_typeattr_881 (and (appdomain ) (not (runas_app shell simpleperf mediaprovider_app ))))
(typeattribute base_typeattr_880)
(typeattributeset base_typeattr_880 (and (mediaprovider_app ) (not (runas_app shell simpleperf ))))
(typeattribute base_typeattr_879)
(typeattributeset base_typeattr_879 (and (domain ) (not (mediaprovider_app ))))
(typeattribute base_typeattr_878)
(typeattributeset base_typeattr_878 (not (system_server_wrapfd mediaprovider_userfaultfd ) ))
(typeattribute base_typeattr_877)
(typeattributeset base_typeattr_877 (and (domain ) (not (crash_dump llkd mediaprovider runas_app simpleperf ))))
(typeattribute base_typeattr_876)
(typeattributeset base_typeattr_876 (and (appdomain ) (not (mediaprovider runas_app shell simpleperf ))))
(typeattribute base_typeattr_875)
(typeattributeset base_typeattr_875 (and (mediaprovider ) (not (runas_app shell simpleperf ))))
(typeattribute base_typeattr_874)
(typeattributeset base_typeattr_874 (and (domain ) (not (mediaprovider ))))
(typeattribute base_typeattr_873)
(typeattributeset base_typeattr_873 (and (domain ) (not (mediametrics ))))
(typeattribute base_typeattr_872)
(typeattributeset base_typeattr_872 (and (data_file_type ) (not (apk_data_file ))))
(typeattribute base_typeattr_871)
(typeattributeset base_typeattr_871 (and (domain ) (not (mediaextractor ))))
(typeattribute base_typeattr_870)
(typeattributeset base_typeattr_870 (and (domain ) (not (mediadrmserver ))))
(typeattribute base_typeattr_869)
(typeattributeset base_typeattr_869 (and (domain ) (not (mediacodeclist_generator ))))
(typeattribute base_typeattr_868)
(typeattributeset base_typeattr_868 (and (domain ) (not (dumpstate servicemanager shell lpdumpd ))))
(typeattribute base_typeattr_867)
(typeattributeset base_typeattr_867 (and (domain ) (not (dumpstate shell lpdumpd ))))
(typeattribute base_typeattr_866)
(typeattributeset base_typeattr_866 (and (domain ) (not (lpdumpd ))))
(typeattribute base_typeattr_865)
(typeattributeset base_typeattr_865 (and (domain ) (not (init logd logpersist ))))
(typeattribute base_typeattr_864)
(typeattributeset base_typeattr_864 (and (domain ) (not (dumpstate incidentd init logd logpersist ))))
(typeattribute base_typeattr_863)
(typeattributeset base_typeattr_863 (and (file_type ) (not (coredump_file misc_logd_file ))))
(typeattribute base_typeattr_862)
(typeattributeset base_typeattr_862 (and (domain ) (not (init logd ))))
(typeattribute base_typeattr_861)
(typeattributeset base_typeattr_861 (and (app_data_file_type system_data_file packages_list_file ) (not (shell_data_file ))))
(typeattribute base_typeattr_860)
(typeattributeset base_typeattr_860 (and (domain ) (not (crash_dump llkd ))))
(typeattribute base_typeattr_859)
(typeattributeset base_typeattr_859 (and (domain ) (not (logd ))))
(typeattribute base_typeattr_858)
(typeattributeset base_typeattr_858 (and (appdomain ) (not (priv_app_all platform_app_all bluetooth radio shell su system_app ))))
(typeattribute base_typeattr_857)
(typeattributeset base_typeattr_857 (and (domain ) (not (appdomain bootstat dumpstate init logd logpersist servicemanager surfaceflinger system_server zygote ))))
(typeattribute base_typeattr_856)
(typeattributeset base_typeattr_856 (and (file_type ) (not (runtime_event_log_tags_file coredump_file shell_data_file misc_logd_file ))))
(typeattribute base_typeattr_855)
(typeattributeset base_typeattr_855 (and (domain ) (not (init lmkd vendor_init ))))
(typeattribute base_typeattr_854)
(typeattributeset base_typeattr_854 (and (domain ) (not (apexd init kernel keystore llkd ueventd vendor_init ))))
(typeattribute base_typeattr_853)
(typeattributeset base_typeattr_853 (and (domain ) (not (init dexopt_chroot_setup linkerconfig overlay_remounter ))))
(typeattribute base_typeattr_852)
(typeattributeset base_typeattr_852 (and (domain ) (not (init keystore ))))
(typeattribute base_typeattr_851)
(typeattributeset base_typeattr_851 (and (domain ) (not (keystore ))))
(typeattribute base_typeattr_850)
(typeattributeset base_typeattr_850 (not (system_server_wrapfd isolated_compute_app_userfaultfd ) ))
(typeattribute base_typeattr_849)
(typeattributeset base_typeattr_849 (and (domain ) (not (crash_dump isolated_compute_app llkd runas_app simpleperf ))))
(typeattribute base_typeattr_848)
(typeattributeset base_typeattr_848 (and (appdomain ) (not (isolated_compute_app runas_app shell simpleperf ))))
(typeattribute base_typeattr_847)
(typeattributeset base_typeattr_847 (and (isolated_compute_app ) (not (runas_app shell simpleperf ))))
(typeattribute base_typeattr_846)
(typeattributeset base_typeattr_846 (and (domain ) (not (isolated_compute_app ))))
(typeattribute base_typeattr_845)
(typeattributeset base_typeattr_845 (and (sysfs_type ) (not (sysfs_transparent_hugepage sysfs_usb sysfs_fs_fuse_features sysfs_fs_incfs_features sysfs_devices_system_cpu sysfs_pgsize_migration ))))
(typeattribute base_typeattr_844)
(typeattributeset base_typeattr_844 (and (service_manager_type ) (not (activity_service display_service webviewupdate_service activity_structured_service ))))
(typeattribute base_typeattr_843)
(typeattributeset base_typeattr_843 (and (isolated_app_all ) (not (isolated_compute_app ))))
(typeattribute base_typeattr_842)
(typeattributeset base_typeattr_842 (not (system_server_wrapfd isolated_app_userfaultfd ) ))
(typeattribute base_typeattr_841)
(typeattributeset base_typeattr_841 (and (domain ) (not (crash_dump isolated_app llkd runas_app simpleperf ))))
(typeattribute base_typeattr_840)
(typeattributeset base_typeattr_840 (and (appdomain ) (not (isolated_app runas_app shell simpleperf ))))
(typeattribute base_typeattr_839)
(typeattributeset base_typeattr_839 (and (isolated_app ) (not (runas_app shell simpleperf ))))
(typeattribute base_typeattr_838)
(typeattributeset base_typeattr_838 (and (domain ) (not (servicemanager su system_server ))))
(typeattribute base_typeattr_837)
(typeattributeset base_typeattr_837 (and (domain ) (not (dumpstate servicemanager system_server ))))
(typeattribute base_typeattr_836)
(typeattributeset base_typeattr_836 (and (domain ) (not (dumpstate installd system_server ))))
(typeattribute base_typeattr_835)
(typeattributeset base_typeattr_835 (and (domain ) (not (installd ))))
(typeattribute base_typeattr_834)
(typeattributeset base_typeattr_834 (and (domain ) (not (init toolbox vendor_init vold casefolding_remover userdata_alias_remove ))))
(typeattribute base_typeattr_833)
(typeattributeset base_typeattr_833 (and (domain ) (not (init toolbox vendor_init vold casefolding_remover ))))
(typeattribute base_typeattr_832)
(typeattributeset base_typeattr_832 (and (fs_type file_type ) (not (init_exec ))))
(typeattribute base_typeattr_831)
(typeattributeset base_typeattr_831 (and (fs_type ) (not (bpffs_type contextmount_type fusefs_type sdcard_type rootfs ))))
(typeattribute base_typeattr_830)
(typeattributeset base_typeattr_830 (and (fs_type ) (not (bpffs_type contextmount_type fusefs_type proc_type sysfs_type debugfs_type sdcard_type keychord_device rootfs ))))
(typeattribute base_typeattr_829)
(typeattributeset base_typeattr_829 (and (file_type ) (not (bpffs_type exec_type system_file_type system_dlkm_file_type vendor_file_type app_data_file privapp_data_file vm_data_file ))))
(typeattribute base_typeattr_828)
(typeattributeset base_typeattr_828 (and (file_type ) (not (bpffs_type exec_type system_file_type system_dlkm_file_type vendor_file_type shell_data_file nativetest_data_file apex_mnt_dir credstore_data_file keystore_data_file vold_data_file gsi_data_file app_data_file privapp_data_file system_app_data_file misc_logd_file vm_data_file ))))
(typeattribute base_typeattr_827)
(typeattributeset base_typeattr_827 (and (file_type ) (not (bpffs_type exec_type system_file_type system_dlkm_file_type vendor_file_type shell_data_file nativetest_data_file credstore_data_file keystore_data_file vold_data_file gsi_data_file app_data_file privapp_data_file system_app_data_file misc_logd_file vm_data_file ))))
(typeattribute base_typeattr_826)
(typeattributeset base_typeattr_826 (and (file_type ) (not (bpffs_type exec_type system_file_type system_dlkm_file_type vendor_file_type debugfs_type runtime_event_log_tags_file shell_data_file nativetest_data_file apex_info_file credstore_data_file keystore_data_file vold_data_file gsi_data_file app_data_file privapp_data_file system_app_data_file misc_logd_file vm_data_file ))))
(typeattribute base_typeattr_825)
(typeattributeset base_typeattr_825 (and (file_type ) (not (bpffs_type exec_type system_file_type system_dlkm_file_type vendor_file_type system_userdir_file vendor_userdir_file shell_data_file nativetest_data_file credstore_data_file keystore_data_file media_userdir_file vold_data_file app_data_file privapp_data_file system_app_data_file misc_logd_file vm_data_file ))))
(typeattribute base_typeattr_824)
(typeattributeset base_typeattr_824 (and (file_type ) (not (bpffs_type exec_type system_file_type system_dlkm_file_type vendor_file_type nativetest_data_file app_data_file privapp_data_file system_app_data_file misc_logd_file vm_data_file ))))
(typeattribute base_typeattr_823)
(typeattributeset base_typeattr_823 (and (fs_type ) (not (debugfs_type ))))
(typeattribute base_typeattr_822)
(typeattributeset base_typeattr_822 (and (dev_type ) (not (vm_manager_device_type keychord_device hw_random_device port_device ))))
(typeattribute base_typeattr_821)
(typeattributeset base_typeattr_821 (and (domain ) (not (incidentd init system_server vold ))))
(typeattribute base_typeattr_820)
(typeattributeset base_typeattr_820 (and (domain ) (not (incidentd init vold ))))
(typeattribute base_typeattr_819)
(typeattributeset base_typeattr_819 (and (system_server_service app_api_service system_api_service ) (not (tracingproxy_service ))))
(typeattribute base_typeattr_818)
(typeattributeset base_typeattr_818 (and (domain ) (not (incidentd ))))
(typeattribute base_typeattr_817)
(typeattributeset base_typeattr_817 (and (domain ) (not (incident_helper incidentd shell overlay_remounter ))))
(typeattribute base_typeattr_816)
(typeattributeset base_typeattr_816 (and (domain ) (not (dumpstate incident shell su overlay_remounter ))))
(typeattribute base_typeattr_815)
(typeattributeset base_typeattr_815 (and (domain ) (not (idmap ))))
(typeattribute base_typeattr_814)
(typeattributeset base_typeattr_814 (and (domain ) (not (hwservicemanager ))))
(typeattribute base_typeattr_813)
(typeattributeset base_typeattr_813 (not (hwservice_manager_type ) ))
(typeattribute base_typeattr_812)
(typeattributeset base_typeattr_812 (and (domain ) (not (hidservice ))))
(typeattribute base_typeattr_811)
(typeattributeset base_typeattr_811 (and (vendor_file_type ) (not (vndk_sp_file ))))
(typeattribute base_typeattr_810)
(typeattributeset base_typeattr_810 (and (domain ) (not (hal_wifi_supplicant_client hal_wifi_supplicant_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_809)
(typeattributeset base_typeattr_809 (and (domain ) (not (hal_wifi_supplicant_client hal_wifi_supplicant_server ))))
(typeattribute base_typeattr_808)
(typeattributeset base_typeattr_808 (and (domain ) (not (hal_wifi_supplicant_server ))))
(typeattribute base_typeattr_807)
(typeattributeset base_typeattr_807 (and (domain ) (not (hal_wifi_hostapd_client hal_wifi_hostapd_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_806)
(typeattributeset base_typeattr_806 (and (domain ) (not (hal_wifi_hostapd_client hal_wifi_hostapd_server ))))
(typeattribute base_typeattr_805)
(typeattributeset base_typeattr_805 (and (domain ) (not (hal_wifi_hostapd_server ))))
(typeattribute base_typeattr_804)
(typeattributeset base_typeattr_804 (and (domain ) (not (hal_wifi_client hal_wifi_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_803)
(typeattributeset base_typeattr_803 (and (domain ) (not (hal_wifi_client hal_wifi_server ))))
(typeattribute base_typeattr_802)
(typeattributeset base_typeattr_802 (and (domain ) (not (hal_wifi_server ))))
(typeattribute base_typeattr_801)
(typeattributeset base_typeattr_801 (and (domain ) (not (hal_weaver_client hal_weaver_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_800)
(typeattributeset base_typeattr_800 (and (domain ) (not (hal_weaver_client hal_weaver_server ))))
(typeattribute base_typeattr_799)
(typeattributeset base_typeattr_799 (and (domain ) (not (hal_weaver_server ))))
(typeattribute base_typeattr_798)
(typeattributeset base_typeattr_798 (and (domain ) (not (hal_vr_client hal_vr_server ))))
(typeattribute base_typeattr_797)
(typeattributeset base_typeattr_797 (and (domain ) (not (hal_vr_server ))))
(typeattribute base_typeattr_796)
(typeattributeset base_typeattr_796 (and (domain ) (not (hal_vm_capabilities_client hal_vm_capabilities_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_795)
(typeattributeset base_typeattr_795 (and (domain ) (not (hal_vm_capabilities_server ))))
(typeattribute base_typeattr_794)
(typeattributeset base_typeattr_794 (and (domain ) (not (hal_vibrator_client hal_vibrator_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_793)
(typeattributeset base_typeattr_793 (and (domain ) (not (hal_vibrator_client hal_vibrator_server ))))
(typeattribute base_typeattr_792)
(typeattributeset base_typeattr_792 (and (domain ) (not (hal_vibrator_server ))))
(typeattribute base_typeattr_791)
(typeattributeset base_typeattr_791 (and (domain ) (not (hal_vehicle_client hal_vehicle_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_790)
(typeattributeset base_typeattr_790 (and (domain ) (not (hal_vehicle_client hal_vehicle_server ))))
(typeattribute base_typeattr_789)
(typeattributeset base_typeattr_789 (and (domain ) (not (hal_vehicle_server ))))
(typeattribute base_typeattr_788)
(typeattributeset base_typeattr_788 (and (domain ) (not (hal_uwb_client hal_uwb_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_787)
(typeattributeset base_typeattr_787 (and (domain ) (not (hal_uwb_server ))))
(typeattribute base_typeattr_786)
(typeattributeset base_typeattr_786 (and (domain ) (not (hal_usb_gadget_client hal_usb_gadget_server ))))
(typeattribute base_typeattr_785)
(typeattributeset base_typeattr_785 (and (domain ) (not (hal_usb_gadget_client hal_usb_gadget_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_784)
(typeattributeset base_typeattr_784 (and (domain ) (not (hal_usb_gadget_server ))))
(typeattribute base_typeattr_783)
(typeattributeset base_typeattr_783 (and (domain ) (not (hal_usb_client hal_usb_server ))))
(typeattribute base_typeattr_782)
(typeattributeset base_typeattr_782 (and (domain ) (not (hal_usb_client hal_usb_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_781)
(typeattributeset base_typeattr_781 (and (domain ) (not (hal_usb_server ))))
(typeattribute base_typeattr_780)
(typeattributeset base_typeattr_780 (and (domain ) (not (hal_tv_tuner_client hal_tv_tuner_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_779)
(typeattributeset base_typeattr_779 (and (domain ) (not (hal_tv_tuner_client hal_tv_tuner_server ))))
(typeattribute base_typeattr_778)
(typeattributeset base_typeattr_778 (and (domain ) (not (hal_tv_tuner_server ))))
(typeattribute base_typeattr_777)
(typeattributeset base_typeattr_777 (and (domain ) (not (hal_tv_input_client hal_tv_input_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_776)
(typeattributeset base_typeattr_776 (and (domain ) (not (hal_tv_input_client hal_tv_input_server ))))
(typeattribute base_typeattr_775)
(typeattributeset base_typeattr_775 (and (domain ) (not (hal_tv_input_server ))))
(typeattribute base_typeattr_774)
(typeattributeset base_typeattr_774 (and (domain ) (not (hal_tv_hdmi_earc_client hal_tv_hdmi_earc_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_773)
(typeattributeset base_typeattr_773 (and (domain ) (not (hal_tv_hdmi_earc_server ))))
(typeattribute base_typeattr_772)
(typeattributeset base_typeattr_772 (and (domain ) (not (hal_tv_hdmi_connection_client hal_tv_hdmi_connection_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_771)
(typeattributeset base_typeattr_771 (and (domain ) (not (hal_tv_hdmi_connection_server ))))
(typeattribute base_typeattr_770)
(typeattributeset base_typeattr_770 (and (domain ) (not (hal_tv_hdmi_cec_client hal_tv_hdmi_cec_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_769)
(typeattributeset base_typeattr_769 (and (domain ) (not (hal_tv_hdmi_cec_server ))))
(typeattribute base_typeattr_768)
(typeattributeset base_typeattr_768 (and (domain ) (not (hal_tv_cec_client hal_tv_cec_server ))))
(typeattribute base_typeattr_767)
(typeattributeset base_typeattr_767 (and (domain ) (not (hal_tv_cec_server ))))
(typeattribute base_typeattr_766)
(typeattributeset base_typeattr_766 (and (domain ) (not (hal_threadnetwork_client hal_threadnetwork_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_765)
(typeattributeset base_typeattr_765 (and (domain ) (not (hal_threadnetwork_server ))))
(typeattribute base_typeattr_764)
(typeattributeset base_typeattr_764 (and (domain ) (not (hal_thermal_client hal_thermal_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_763)
(typeattributeset base_typeattr_763 (and (domain ) (not (hal_thermal_client hal_thermal_server ))))
(typeattribute base_typeattr_762)
(typeattributeset base_typeattr_762 (and (domain ) (not (hal_thermal_server ))))
(typeattribute base_typeattr_761)
(typeattributeset base_typeattr_761 (and (domain ) (not (hal_tetheroffload_client hal_tetheroffload_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_760)
(typeattributeset base_typeattr_760 (and (domain ) (not (hal_tetheroffload_client hal_tetheroffload_server ))))
(typeattribute base_typeattr_759)
(typeattributeset base_typeattr_759 (and (domain ) (not (hal_tetheroffload_server ))))
(typeattribute base_typeattr_758)
(typeattributeset base_typeattr_758 (and (domain ) (not (hal_telephony_client hal_telephony_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_757)
(typeattributeset base_typeattr_757 (and (domain ) (not (hal_telephony_client hal_telephony_server ))))
(typeattribute base_typeattr_756)
(typeattributeset base_typeattr_756 (and (domain ) (not (hal_telephony_server ))))
(typeattribute base_typeattr_755)
(typeattributeset base_typeattr_755 (and (domain ) (not (hal_sensors_client hal_sensors_server ))))
(typeattribute base_typeattr_754)
(typeattributeset base_typeattr_754 (and (domain ) (not (hal_sensors_server ))))
(typeattribute base_typeattr_753)
(typeattributeset base_typeattr_753 (and (domain ) (not (hal_secure_element_client hal_secure_element_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_752)
(typeattributeset base_typeattr_752 (and (domain ) (not (hal_secure_element_client hal_secure_element_server ))))
(typeattribute base_typeattr_751)
(typeattributeset base_typeattr_751 (and (domain ) (not (hal_secure_element_server ))))
(typeattribute base_typeattr_750)
(typeattributeset base_typeattr_750 (and (domain ) (not (hal_secretkeeper_client hal_secretkeeper_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_749)
(typeattributeset base_typeattr_749 (and (domain ) (not (hal_secretkeeper_server ))))
(typeattribute base_typeattr_748)
(typeattributeset base_typeattr_748 (and (domain ) (not (hal_remotelyprovisionedcomponent_avf_client hal_remotelyprovisionedcomponent_avf_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_747)
(typeattributeset base_typeattr_747 (and (domain ) (not (hal_remotelyprovisionedcomponent_avf_server ))))
(typeattribute base_typeattr_746)
(typeattributeset base_typeattr_746 (and (domain ) (not (hal_remoteaccess_client hal_remoteaccess_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_745)
(typeattributeset base_typeattr_745 (and (domain ) (not (hal_remoteaccess_server ))))
(typeattribute base_typeattr_744)
(typeattributeset base_typeattr_744 (and (domain ) (not (hal_rebootescrow_client hal_rebootescrow_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_743)
(typeattributeset base_typeattr_743 (and (domain ) (not (hal_rebootescrow_server ))))
(typeattribute base_typeattr_742)
(typeattributeset base_typeattr_742 (and (domain ) (not (hal_power_stats_client hal_power_stats_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_741)
(typeattributeset base_typeattr_741 (and (domain ) (not (hal_power_stats_client hal_power_stats_server ))))
(typeattribute base_typeattr_740)
(typeattributeset base_typeattr_740 (and (domain ) (not (hal_power_stats_server ))))
(typeattribute base_typeattr_739)
(typeattributeset base_typeattr_739 (and (domain ) (not (hal_power_client hal_power_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_738)
(typeattributeset base_typeattr_738 (and (domain ) (not (hal_power_client hal_power_server ))))
(typeattribute base_typeattr_737)
(typeattributeset base_typeattr_737 (and (domain ) (not (hal_power_server ))))
(typeattribute base_typeattr_736)
(typeattributeset base_typeattr_736 (and (domain ) (not (hal_omx_client hal_omx_server ))))
(typeattribute base_typeattr_735)
(typeattributeset base_typeattr_735 (and (domain ) (not (hal_omx_server ))))
(typeattribute base_typeattr_734)
(typeattributeset base_typeattr_734 (and (domain ) (not (hal_oemlock_client hal_oemlock_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_733)
(typeattributeset base_typeattr_733 (and (domain ) (not (hal_oemlock_client hal_oemlock_server ))))
(typeattribute base_typeattr_732)
(typeattributeset base_typeattr_732 (and (domain ) (not (hal_oemlock_server ))))
(typeattribute base_typeattr_731)
(typeattributeset base_typeattr_731 (and (domain ) (not (hal_npu_scheduling_client hal_npu_scheduling_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_730)
(typeattributeset base_typeattr_730 (and (domain ) (not (hal_npu_scheduling_server ))))
(typeattribute base_typeattr_729)
(typeattributeset base_typeattr_729 (and (domain ) (not (hal_nlinterceptor_client hal_nlinterceptor_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_728)
(typeattributeset base_typeattr_728 (and (domain ) (not (hal_nlinterceptor_server ))))
(typeattribute base_typeattr_727)
(typeattributeset base_typeattr_727 (and (domain ) (not (hal_nfc_client hal_nfc_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_726)
(typeattributeset base_typeattr_726 (and (domain ) (not (hal_nfc_client hal_nfc_server ))))
(typeattribute base_typeattr_725)
(typeattributeset base_typeattr_725 (and (domain ) (not (hal_nfc_server ))))
(typeattribute base_typeattr_724)
(typeattributeset base_typeattr_724 (and (fs_type file_type ) (not (shell_exec toolbox_exec ))))
(typeattribute base_typeattr_723)
(typeattributeset base_typeattr_723 (and (halserverdomain ) (not (hal_dumpstate_server hal_telephony_server ))))
(typeattribute base_typeattr_722)
(typeattributeset base_typeattr_722 (and (halserverdomain ) (not (hal_automotive_socket_exemption hal_bluetooth_server hal_bluetooth_lpp_server hal_can_controller_server hal_nlinterceptor_server hal_telephony_server hal_tetheroffload_server hal_tv_tuner_server hal_wifi_server hal_wifi_hostapd_server hal_wifi_supplicant_server ))))
(typeattribute base_typeattr_721)
(typeattributeset base_typeattr_721 (and (halserverdomain ) (not (hal_automotive_socket_exemption hal_bluetooth_server hal_bluetooth_lpp_server hal_can_controller_server hal_nlinterceptor_server hal_telephony_server hal_tetheroffload_server hal_tv_tuner_server hal_uwb_server hal_uwb_vendor_server hal_wifi_server hal_wifi_hostapd_server hal_wifi_supplicant_server ))))
(typeattribute base_typeattr_720)
(typeattributeset base_typeattr_720 (and (halserverdomain ) (not (hal_bluetooth_server hal_bluetooth_lpp_server hal_can_controller_server hal_nlinterceptor_server hal_telephony_server hal_tv_tuner_server hal_uwb_server hal_uwb_vendor_server hal_wifi_server hal_wifi_hostapd_server hal_wifi_supplicant_server ))))
(typeattribute base_typeattr_719)
(typeattributeset base_typeattr_719 (and (domain ) (not (hal_neuralnetworks_client hal_neuralnetworks_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_718)
(typeattributeset base_typeattr_718 (and (domain ) (not (hal_neuralnetworks_client hal_neuralnetworks_server ))))
(typeattribute base_typeattr_717)
(typeattributeset base_typeattr_717 (and (domain ) (not (hal_neuralnetworks_server ))))
(typeattribute base_typeattr_716)
(typeattributeset base_typeattr_716 (and (domain ) (not (hal_memtrack_client hal_memtrack_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_715)
(typeattributeset base_typeattr_715 (and (domain ) (not (hal_memtrack_client hal_memtrack_server ))))
(typeattribute base_typeattr_714)
(typeattributeset base_typeattr_714 (and (domain ) (not (hal_memtrack_server ))))
(typeattribute base_typeattr_713)
(typeattributeset base_typeattr_713 (and (domain ) (not (hal_mediaquality_client hal_mediaquality_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_712)
(typeattributeset base_typeattr_712 (and (domain ) (not (hal_mediaquality_server ))))
(typeattribute base_typeattr_711)
(typeattributeset base_typeattr_711 (and (domain ) (not (hal_macsec_client hal_macsec_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_710)
(typeattributeset base_typeattr_710 (and (domain ) (not (hal_macsec_server ))))
(typeattribute base_typeattr_709)
(typeattributeset base_typeattr_709 (and (domain ) (not (hal_lowpan_server init ueventd ))))
(typeattribute base_typeattr_708)
(typeattributeset base_typeattr_708 (and (domain ) (not (hal_lowpan_client hal_lowpan_server ))))
(typeattribute base_typeattr_707)
(typeattributeset base_typeattr_707 (and (domain ) (not (hal_lowpan_server ))))
(typeattribute base_typeattr_706)
(typeattributeset base_typeattr_706 (and (domain ) (not (hal_light_client hal_light_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_705)
(typeattributeset base_typeattr_705 (and (domain ) (not (hal_light_client hal_light_server ))))
(typeattribute base_typeattr_704)
(typeattributeset base_typeattr_704 (and (domain ) (not (hal_light_server ))))
(typeattribute base_typeattr_703)
(typeattributeset base_typeattr_703 (and (domain ) (not (hal_lazy_test_client hal_lazy_test_server ))))
(typeattribute base_typeattr_702)
(typeattributeset base_typeattr_702 (and (domain ) (not (hal_lazy_test_server ))))
(typeattribute base_typeattr_701)
(typeattributeset base_typeattr_701 (and (hal_keymint_server ) (not (coredomain ))))
(typeattribute base_typeattr_700)
(typeattributeset base_typeattr_700 (and (domain ) (not (hal_keymint_client hal_keymint_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_699)
(typeattributeset base_typeattr_699 (and (domain ) (not (hal_keymint_server ))))
(typeattribute base_typeattr_698)
(typeattributeset base_typeattr_698 (and (domain ) (not (hal_keymaster_client hal_keymaster_server ))))
(typeattribute base_typeattr_697)
(typeattributeset base_typeattr_697 (and (domain ) (not (hal_keymaster_server ))))
(typeattribute base_typeattr_696)
(typeattributeset base_typeattr_696 (and (domain ) (not (hal_ivn_client hal_ivn_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_695)
(typeattributeset base_typeattr_695 (and (domain ) (not (hal_ivn_server ))))
(typeattribute base_typeattr_694)
(typeattributeset base_typeattr_694 (and (domain ) (not (hal_ir_client hal_ir_server ))))
(typeattribute base_typeattr_693)
(typeattributeset base_typeattr_693 (and (domain ) (not (hal_ir_client hal_ir_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_692)
(typeattributeset base_typeattr_692 (and (domain ) (not (hal_ir_server ))))
(typeattribute base_typeattr_691)
(typeattributeset base_typeattr_691 (and (domain ) (not (hal_input_processor_client hal_input_processor_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_690)
(typeattributeset base_typeattr_690 (and (domain ) (not (hal_input_processor_server ))))
(typeattribute base_typeattr_689)
(typeattributeset base_typeattr_689 (and (domain ) (not (hal_input_classifier_client hal_input_classifier_server ))))
(typeattribute base_typeattr_688)
(typeattributeset base_typeattr_688 (and (domain ) (not (hal_input_classifier_server ))))
(typeattribute base_typeattr_687)
(typeattributeset base_typeattr_687 (and (domain ) (not (hal_identity_client hal_identity_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_686)
(typeattributeset base_typeattr_686 (and (domain ) (not (hal_identity_server ))))
(typeattribute base_typeattr_685)
(typeattributeset base_typeattr_685 (and (domain ) (not (hal_health_storage_client hal_health_storage_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_684)
(typeattributeset base_typeattr_684 (and (domain ) (not (hal_health_storage_client hal_health_storage_server ))))
(typeattribute base_typeattr_683)
(typeattributeset base_typeattr_683 (and (domain ) (not (hal_health_storage_server ))))
(typeattribute base_typeattr_682)
(typeattributeset base_typeattr_682 (and (domain ) (not (hal_health_client hal_health_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_681)
(typeattributeset base_typeattr_681 (and (domain ) (not (hal_health_client hal_health_server ))))
(typeattribute base_typeattr_680)
(typeattributeset base_typeattr_680 (and (domain ) (not (hal_health_server ))))
(typeattribute base_typeattr_679)
(typeattributeset base_typeattr_679 (and (domain ) (not (hal_graphics_composer_client hal_graphics_composer_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_678)
(typeattributeset base_typeattr_678 (and (domain ) (not (hal_graphics_composer_client hal_graphics_composer_server ))))
(typeattribute base_typeattr_677)
(typeattributeset base_typeattr_677 (and (domain ) (not (hal_graphics_composer_server ))))
(typeattribute base_typeattr_676)
(typeattributeset base_typeattr_676 (and (domain ) (not (hal_graphics_allocator_client hal_graphics_allocator_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_675)
(typeattributeset base_typeattr_675 (and (domain ) (not (hal_graphics_allocator_client hal_graphics_allocator_server ))))
(typeattribute base_typeattr_674)
(typeattributeset base_typeattr_674 (and (domain ) (not (hal_graphics_allocator_server ))))
(typeattribute base_typeattr_673)
(typeattributeset base_typeattr_673 (and (domain ) (not (hal_gnss_client hal_gnss_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_672)
(typeattributeset base_typeattr_672 (and (domain ) (not (hal_gnss_client hal_gnss_server ))))
(typeattribute base_typeattr_671)
(typeattributeset base_typeattr_671 (and (domain ) (not (hal_gnss_server ))))
(typeattribute base_typeattr_670)
(typeattributeset base_typeattr_670 (and (domain ) (not (hal_gatekeeper_client hal_gatekeeper_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_669)
(typeattributeset base_typeattr_669 (and (domain ) (not (hal_gatekeeper_client hal_gatekeeper_server ))))
(typeattribute base_typeattr_668)
(typeattributeset base_typeattr_668 (and (domain ) (not (hal_gatekeeper_server ))))
(typeattribute base_typeattr_667)
(typeattributeset base_typeattr_667 (and (hal_fingerprint ) (not (coredomain ))))
(typeattribute base_typeattr_666)
(typeattributeset base_typeattr_666 (and (domain ) (not (hal_fingerprint_client hal_fingerprint_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_665)
(typeattributeset base_typeattr_665 (and (domain ) (not (hal_fingerprint_client hal_fingerprint_server ))))
(typeattribute base_typeattr_664)
(typeattributeset base_typeattr_664 (and (domain ) (not (hal_fingerprint_server ))))
(typeattribute base_typeattr_663)
(typeattributeset base_typeattr_663 (and (domain ) (not (hal_fastboot_client hal_fastboot_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_662)
(typeattributeset base_typeattr_662 (and (domain ) (not (hal_fastboot_server ))))
(typeattribute base_typeattr_661)
(typeattributeset base_typeattr_661 (and (hal_face ) (not (coredomain ))))
(typeattribute base_typeattr_660)
(typeattributeset base_typeattr_660 (and (domain ) (not (hal_face_client hal_face_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_659)
(typeattributeset base_typeattr_659 (and (domain ) (not (hal_face_client hal_face_server ))))
(typeattribute base_typeattr_658)
(typeattributeset base_typeattr_658 (and (domain ) (not (hal_face_server ))))
(typeattribute base_typeattr_657)
(typeattributeset base_typeattr_657 (and (domain ) (not (hal_evs_client hal_evs_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_656)
(typeattributeset base_typeattr_656 (and (domain ) (not (hal_evs_server ))))
(typeattribute base_typeattr_655)
(typeattributeset base_typeattr_655 (and (domain ) (not (hal_evs_server evsmanagerd ))))
(typeattribute base_typeattr_654)
(typeattributeset base_typeattr_654 (and (domain ) (not (hal_dumpstate_client hal_dumpstate_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_653)
(typeattributeset base_typeattr_653 (and (domain ) (not (hal_dumpstate_client hal_dumpstate_server ))))
(typeattribute base_typeattr_652)
(typeattributeset base_typeattr_652 (and (domain ) (not (hal_dumpstate_server ))))
(typeattribute base_typeattr_651)
(typeattributeset base_typeattr_651 (and (hal_drm ) (not (hal_widevine_system ))))
(typeattribute base_typeattr_650)
(typeattributeset base_typeattr_650 (and (domain ) (not (hal_drm_client hal_drm_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_649)
(typeattributeset base_typeattr_649 (and (domain ) (not (hal_drm_client hal_drm_server ))))
(typeattribute base_typeattr_648)
(typeattributeset base_typeattr_648 (and (domain ) (not (hal_drm_server ))))
(typeattribute base_typeattr_647)
(typeattributeset base_typeattr_647 (and (domain ) (not (hal_contexthub_client hal_contexthub_server ))))
(typeattribute base_typeattr_646)
(typeattributeset base_typeattr_646 (and (domain ) (not (hal_contexthub_server ))))
(typeattribute base_typeattr_645)
(typeattributeset base_typeattr_645 (and (domain ) (not (hal_confirmationui_client hal_confirmationui_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_644)
(typeattributeset base_typeattr_644 (and (domain ) (not (hal_confirmationui_client hal_confirmationui_server ))))
(typeattribute base_typeattr_643)
(typeattributeset base_typeattr_643 (and (domain ) (not (hal_confirmationui_server ))))
(typeattribute base_typeattr_642)
(typeattributeset base_typeattr_642 (and (data_file_type ) (not (anr_data_file tombstone_data_file ))))
(typeattribute base_typeattr_641)
(typeattributeset base_typeattr_641 (and (domain ) (not (hal_configstore_server logd prng_seeder su tombstoned ))))
(typeattribute base_typeattr_640)
(typeattributeset base_typeattr_640 (and (domain ) (not (hal_configstore_client hal_configstore_server ))))
(typeattribute base_typeattr_639)
(typeattributeset base_typeattr_639 (and (domain ) (not (hal_configstore_server ))))
(typeattribute base_typeattr_638)
(typeattributeset base_typeattr_638 (and (hal_codec2_client ) (not (isolated_app_all ))))
(typeattribute base_typeattr_637)
(typeattributeset base_typeattr_637 (and (domain ) (not (hal_codec2_client hal_codec2_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_636)
(typeattributeset base_typeattr_636 (and (domain ) (not (hal_codec2_client hal_codec2_server ))))
(typeattribute base_typeattr_635)
(typeattributeset base_typeattr_635 (and (domain ) (not (hal_codec2_server ))))
(typeattribute base_typeattr_634)
(typeattributeset base_typeattr_634 (and (domain ) (not (hal_cas_client hal_cas_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_633)
(typeattributeset base_typeattr_633 (and (domain ) (not (hal_cas_client hal_cas_server ))))
(typeattribute base_typeattr_632)
(typeattributeset base_typeattr_632 (and (domain ) (not (hal_cas_server ))))
(typeattribute base_typeattr_631)
(typeattributeset base_typeattr_631 (and (domain ) (not (hal_can_controller_client hal_can_controller_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_630)
(typeattributeset base_typeattr_630 (and (domain ) (not (hal_can_bus_client hal_can_bus_server ))))
(typeattribute base_typeattr_629)
(typeattributeset base_typeattr_629 (and (domain ) (not (hal_can_bus_server ))))
(typeattribute base_typeattr_628)
(typeattributeset base_typeattr_628 (and (domain ) (not (hal_can_controller_client hal_can_controller_server ))))
(typeattribute base_typeattr_627)
(typeattributeset base_typeattr_627 (and (domain ) (not (hal_can_controller_server ))))
(typeattribute base_typeattr_626)
(typeattributeset base_typeattr_626 (and (halserverdomain ) (not (hal_camera_server ))))
(typeattribute base_typeattr_625)
(typeattributeset base_typeattr_625 (and (appdomain ) (not (isolated_app ))))
(typeattribute base_typeattr_624)
(typeattributeset base_typeattr_624 (and (domain ) (not (hal_camera_client hal_camera_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_623)
(typeattributeset base_typeattr_623 (and (domain ) (not (hal_camera_client hal_camera_server ))))
(typeattribute base_typeattr_622)
(typeattributeset base_typeattr_622 (and (domain ) (not (hal_camera_server ))))
(typeattribute base_typeattr_621)
(typeattributeset base_typeattr_621 (and (domain ) (not (hal_broadcastradio_client hal_broadcastradio_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_620)
(typeattributeset base_typeattr_620 (and (domain ) (not (hal_broadcastradio_client hal_broadcastradio_server ))))
(typeattribute base_typeattr_619)
(typeattributeset base_typeattr_619 (and (domain ) (not (hal_broadcastradio_server ))))
(typeattribute base_typeattr_618)
(typeattributeset base_typeattr_618 (and (domain ) (not (hal_bootctl_client hal_bootctl_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_617)
(typeattributeset base_typeattr_617 (and (domain ) (not (hal_bootctl_client hal_bootctl_server ))))
(typeattribute base_typeattr_616)
(typeattributeset base_typeattr_616 (and (domain ) (not (hal_bootctl_server ))))
(typeattribute base_typeattr_615)
(typeattributeset base_typeattr_615 (and (domain ) (not (hal_bluetooth_lpp_client hal_bluetooth_lpp_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_614)
(typeattributeset base_typeattr_614 (and (domain ) (not (hal_bluetooth_lpp_server ))))
(typeattribute base_typeattr_613)
(typeattributeset base_typeattr_613 (and (domain ) (not (hal_bluetooth_client hal_bluetooth_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_612)
(typeattributeset base_typeattr_612 (and (domain ) (not (hal_bluetooth_client hal_bluetooth_server ))))
(typeattribute base_typeattr_611)
(typeattributeset base_typeattr_611 (and (domain ) (not (hal_bluetooth_server ))))
(typeattribute base_typeattr_610)
(typeattributeset base_typeattr_610 (and (domain ) (not (hal_authsecret_client hal_authsecret_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_609)
(typeattributeset base_typeattr_609 (and (domain ) (not (hal_authsecret_client hal_authsecret_server ))))
(typeattribute base_typeattr_608)
(typeattributeset base_typeattr_608 (and (domain ) (not (hal_authsecret_server ))))
(typeattribute base_typeattr_607)
(typeattributeset base_typeattr_607 (and (domain ) (not (hal_authgraph_client hal_authgraph_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_606)
(typeattributeset base_typeattr_606 (and (domain ) (not (hal_authgraph_server ))))
(typeattribute base_typeattr_605)
(typeattributeset base_typeattr_605 (and (domain ) (not (hal_audiocontrol_client hal_audiocontrol_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_604)
(typeattributeset base_typeattr_604 (and (domain ) (not (hal_audiocontrol_client hal_audiocontrol_server ))))
(typeattribute base_typeattr_603)
(typeattributeset base_typeattr_603 (and (domain ) (not (hal_audiocontrol_server ))))
(typeattribute base_typeattr_602)
(typeattributeset base_typeattr_602 (and (halserverdomain ) (not (hal_audio_server hal_omx_server ))))
(typeattribute base_typeattr_601)
(typeattributeset base_typeattr_601 (and (domain ) (not (hal_audio_client hal_audio_server atrace shell system_app traceur_app ))))
(typeattribute base_typeattr_600)
(typeattributeset base_typeattr_600 (and (domain ) (not (hal_audio_client hal_audio_server ))))
(typeattribute base_typeattr_599)
(typeattributeset base_typeattr_599 (and (domain ) (not (hal_audio_server ))))
(typeattribute base_typeattr_598)
(typeattributeset base_typeattr_598 (and (domain ) (not (hal_atrace_client hal_atrace_server ))))
(typeattribute base_typeattr_597)
(typeattributeset base_typeattr_597 (and (domain ) (not (hal_atrace_server ))))
(typeattribute base_typeattr_596)
(typeattributeset base_typeattr_596 (and (domain ) (not (hal_allocator_client hal_allocator_server ))))
(typeattribute base_typeattr_595)
(typeattributeset base_typeattr_595 (and (domain ) (not (hal_allocator_server ))))
(typeattribute base_typeattr_594)
(typeattributeset base_typeattr_594 (and (domain ) (not (init gsid ))))
(typeattribute base_typeattr_593)
(typeattributeset base_typeattr_593 (and (gsi_metadata_file_type ) (not (gsi_public_metadata_file ))))
(typeattribute base_typeattr_592)
(typeattributeset base_typeattr_592 (and (domain ) (not (fastbootd init gsid ))))
(typeattribute base_typeattr_591)
(typeattributeset base_typeattr_591 (and (domain ) (not (update_engine_common apexd fastbootd init recovery gsid ))))
(typeattribute base_typeattr_590)
(typeattributeset base_typeattr_590 (and (domain ) (not (gsid ))))
(typeattribute base_typeattr_589)
(typeattributeset base_typeattr_589 (and (domain ) (not (gpuservice init vendor_init ))))
(typeattribute base_typeattr_588)
(typeattributeset base_typeattr_588 (and (domain ) (not (gpuservice ))))
(typeattribute base_typeattr_587)
(typeattributeset base_typeattr_587 (and (domain ) (not (dumpstate gmscore_app init vendor_init ))))
(typeattribute base_typeattr_586)
(typeattributeset base_typeattr_586 (not (system_server_wrapfd gmscore_app_userfaultfd ) ))
(typeattribute base_typeattr_585)
(typeattributeset base_typeattr_585 (and (domain ) (not (crash_dump gmscore_app llkd runas_app simpleperf ))))
(typeattribute base_typeattr_584)
(typeattributeset base_typeattr_584 (and (appdomain ) (not (gmscore_app runas_app shell simpleperf ))))
(typeattribute base_typeattr_583)
(typeattributeset base_typeattr_583 (and (gmscore_app ) (not (runas_app shell simpleperf ))))
(typeattribute base_typeattr_582)
(typeattributeset base_typeattr_582 (and (domain ) (not (gmscore_app ))))
(typeattribute base_typeattr_581)
(typeattributeset base_typeattr_581 (and (domain ) (not (gatekeeperd ))))
(typeattribute base_typeattr_580)
(typeattributeset base_typeattr_580 (and (fs_type file_type ) (not (fuseblkd_untrusted_exec ))))
(typeattribute base_typeattr_579)
(typeattributeset base_typeattr_579 (and (fs_type file_type ) (not (fuseblkd_exec ))))
(typeattribute base_typeattr_578)
(typeattributeset base_typeattr_578 (and (domain ) (not (fuseblkd_untrusted ))))
(typeattribute base_typeattr_577)
(typeattributeset base_typeattr_577 (and (fs_type file_type ) (not (fsck_exec ))))
(typeattribute base_typeattr_576)
(typeattributeset base_typeattr_576 (and (domain ) (not (init vold ))))
(typeattribute base_typeattr_575)
(typeattributeset base_typeattr_575 (and (vold_device root_block_device frp_block_device system_block_device recovery_block_device boot_block_device swap_block_device ) (not (system_block_device ))))
(typeattribute base_typeattr_574)
(typeattributeset base_typeattr_574 (and (domain ) (not (flags_health_check init ))))
(typeattribute base_typeattr_573)
(typeattributeset base_typeattr_573 (and (domain ) (not (fingerprintd ))))
(typeattribute base_typeattr_572)
(typeattributeset base_typeattr_572 (and (domain ) (not (fastbootd ))))
(typeattribute base_typeattr_571)
(typeattributeset base_typeattr_571 (and (domain ) (not (evsmanagerd ))))
(typeattribute base_typeattr_570)
(typeattributeset base_typeattr_570 (not (system_server_wrapfd ephemeral_app_userfaultfd ) ))
(typeattribute base_typeattr_569)
(typeattributeset base_typeattr_569 (and (domain ) (not (crash_dump ephemeral_app llkd runas_app simpleperf ))))
(typeattribute base_typeattr_568)
(typeattributeset base_typeattr_568 (and (appdomain ) (not (ephemeral_app runas_app shell simpleperf ))))
(typeattribute base_typeattr_567)
(typeattributeset base_typeattr_567 (and (ephemeral_app ) (not (runas_app shell simpleperf ))))
(typeattribute base_typeattr_566)
(typeattributeset base_typeattr_566 (and (domain ) (not (ephemeral_app ))))
(typeattribute base_typeattr_565)
(typeattributeset base_typeattr_565 (and (domain ) (not (early_virtmgr_domain ))))
(typeattribute base_typeattr_564)
(typeattributeset base_typeattr_564 (and (domain ) (not (early_virtmgr_domain crosvm_domain ))))
(typeattribute base_typeattr_563)
(typeattributeset base_typeattr_563 (and (domain ) (not (early_virtmgr_domain crosvm_domain init ))))
(typeattribute base_typeattr_562)
(typeattributeset base_typeattr_562 (and (early_virtmgr_domain ) (not (early_virtmgr_vendor ))))
(typeattribute base_typeattr_561)
(typeattributeset base_typeattr_561 (and (domain ) (not (apexd dumpstate init system_server vold_prepare_subdirs ))))
(typeattribute base_typeattr_560)
(typeattributeset base_typeattr_560 (and (domain ) (not (dumpstate shell system_server traceur_app ))))
(typeattribute base_typeattr_559)
(typeattributeset base_typeattr_559 (and (domain ) (not (dumpstate ))))
(typeattribute base_typeattr_558)
(typeattributeset base_typeattr_558 (and (service_manager_type ) (not (hal_service_type apex_service default_android_service dumpstate_service fwk_vold_service gatekeeper_service virtual_touchpad_service vold_service ))))
(typeattribute base_typeattr_557)
(typeattributeset base_typeattr_557 (and (domain ) (not (drmserver ))))
(typeattribute base_typeattr_556)
(typeattributeset base_typeattr_556 (and (domain ) (not (appdomain wrapfd_hal_domain system_server ))))
(typeattribute base_typeattr_555)
(typeattributeset base_typeattr_555 (and (domain ) (not (unconstrained_vsock_violators virtualizationmanager_domain early_virtmgr_domain recovery traced adbd_common aisealhostservice compos_fd_server virtualizationservice vmlauncher_app ))))
(typeattribute base_typeattr_554)
(typeattributeset base_typeattr_554 (and (domain ) (not (init ueventd vendor_init ))))
(typeattribute base_typeattr_553)
(typeattributeset base_typeattr_553 (and (domain ) (not (init zygote dexopt_chroot_setup ))))
(typeattribute base_typeattr_552)
(typeattributeset base_typeattr_552 (and (domain ) (not (init dexopt_chroot_setup ))))
(typeattribute base_typeattr_551)
(typeattributeset base_typeattr_551 (and (domain ) (not (gmscore_app init vold_prepare_subdirs ))))
(typeattribute base_typeattr_550)
(typeattributeset base_typeattr_550 (and (domain ) (not (appdomain artd installd system_server traced_probes ))))
(typeattribute base_typeattr_549)
(typeattributeset base_typeattr_549 (and (domain ) (not (bpfloader init kernel vendor_modprobe simpleperf_boot uprobestats ))))
(typeattribute base_typeattr_548)
(typeattributeset base_typeattr_548 (and (domain ) (not (ueventd vendor_init ))))
(typeattribute base_typeattr_547)
(typeattributeset base_typeattr_547 (and (debugfs_type ) (not (tracefs_type debugfs_kcov ))))
(typeattribute base_typeattr_546)
(typeattributeset base_typeattr_546 (and (domain ) (not (hal_dumpstate incidentd init vendor_init vendor_modprobe ))))
(typeattribute base_typeattr_545)
(typeattributeset base_typeattr_545 (and (domain ) (not (bpfloader init traced_perf traced_probes profcollectd simpleperf_boot ))))
(typeattribute base_typeattr_544)
(typeattributeset base_typeattr_544 (and (domain ) (not (init zygote dexopt_chroot_setup overlay_remounter ))))
(typeattribute base_typeattr_543)
(typeattributeset base_typeattr_543 (not (domain )))
(typeattribute base_typeattr_542)
(typeattributeset base_typeattr_542 (and (vendor_file_type ) (not (vendor_cgroup_desc_file vendor_task_profiles_file vendor_dma_heap_config_file vendor_app_file vendor_configs_file same_process_hal_file vndk_sp_file vendor_framework_file vendor_overlay_file vendor_public_lib_file vendor_public_framework_file vendor_microdroid_file vendor_boot_ota_file vendor_keylayout_file vendor_keychars_file vendor_idc_file vendor_uuid_mapping_config_file vendor_apex_file vendor_apex_metadata_file vendor_service_contexts_file vendor_aconfig_storage_file ))))
(typeattribute base_typeattr_541)
(typeattributeset base_typeattr_541 (and (coredomain ) (not (system_executes_vendor_violators virtualizationmanager_domain early_virtmgr_domain crosvm_domain crash_dump heapprofd init kernel prefetch shell traced_perf ueventd vold crosvm_vu_fs overlay_remounter profcollectd simpleperf_boot ))))
(typeattribute base_typeattr_540)
(typeattributeset base_typeattr_540 (and (coredomain ) (not (heapprofd init logd mdnsd netd prng_seeder su tombstoned traced traced_perf ))))
(typeattribute base_typeattr_539)
(typeattributeset base_typeattr_539 (and (domain ) (not (appdomain coredomain socket_between_core_and_vendor_violators ))))
(typeattribute base_typeattr_538)
(typeattributeset base_typeattr_538 (and (coredomain ) (not (appdomain bootanim crash_dump heapprofd init kernel prefetch traced_perf ueventd overlay_remounter profcollectd simpleperf_boot ))))
(typeattribute base_typeattr_537)
(typeattributeset base_typeattr_537 (and (domain ) (not (init vendor_init art_boot ))))
(typeattribute base_typeattr_536)
(typeattributeset base_typeattr_536 (and (domain ) (not (fsck init installd zygote ))))
(typeattribute base_typeattr_535)
(typeattributeset base_typeattr_535 (and (domain ) (not (domain hal_bootctl_server fastbootd init kernel recovery tee ueventd uncrypt gsid ))))
(typeattribute base_typeattr_534)
(typeattributeset base_typeattr_534 (and (debugfs_type ) (not (debugfs_tracing_debug ))))
(typeattribute base_typeattr_533)
(typeattributeset base_typeattr_533 (and (fs_type ) (not (fusefs_type sdcard_type ))))
(typeattribute base_typeattr_532)
(typeattributeset base_typeattr_532 (and (domain ) (not (apexd init kernel recovery update_engine vold zygote dexopt_chroot_setup overlay_remounter ))))
(typeattribute base_typeattr_531)
(typeattributeset base_typeattr_531 (not (apexd artd dnsmasq dumpstate heapprofd init installd llkd lmkd netd recovery rss_hwm_reset sdcardd tee traced_perf traced_probes ueventd uncrypt vendor_init vold vold_prepare_subdirs zygote casefolding_remover migrate_legacy_obb_data overlay_remounter zygote_next ) ))
(typeattribute base_typeattr_530)
(typeattributeset base_typeattr_530 (not (apexd artd dnsmasq dumpstate init installd llkd lmkd netd recovery rss_hwm_reset sdcardd tee ueventd uncrypt vendor_init vold vold_prepare_subdirs zygote casefolding_remover migrate_legacy_obb_data overlay_remounter zygote_next ) ))
(typeattribute base_typeattr_529)
(typeattributeset base_typeattr_529 (and (domain ) (not (appdomain overlay_remounter ))))
(typeattribute base_typeattr_528)
(typeattributeset base_typeattr_528 (and (domain ) (not (apexd init vold_prepare_subdirs compos_fd_server composd odrefresh odsign ))))
(typeattribute base_typeattr_527)
(typeattributeset base_typeattr_527 (and (domain ) (not (artd init installd zygote cppreopts dex2oat ))))
(typeattribute base_typeattr_526)
(typeattributeset base_typeattr_526 (and (file_type ) (not (exec_type system_file_type vendor_file_type system_lib_file system_bootstrap_lib_file system_linker_exec postinstall_file ))))
(typeattribute base_typeattr_525)
(typeattributeset base_typeattr_525 (and (domain ) (not (appdomain app_zygote mediaextractor mediaswcodec shell su webview_zygote zygote native_app_zygote overlay_remounter system_server_startup ))))
(typeattribute base_typeattr_524)
(typeattributeset base_typeattr_524 (and (fs_type ) (not (rootfs ))))
(typeattribute base_typeattr_523)
(typeattributeset base_typeattr_523 (and (domain ) (not (appdomain bootanim recovery ))))
(typeattribute base_typeattr_522)
(typeattributeset base_typeattr_522 (and (domain ) (not (apexd init installd system_server update_provider ))))
(typeattribute base_typeattr_521)
(typeattributeset base_typeattr_521 (and (domain ) (not (init installd system_server update_provider ))))
(typeattribute base_typeattr_520)
(typeattributeset base_typeattr_520 (and (domain ) (not (priv_app_all virtualizationmanager_domain crosvm_domain adbd apexd init installd kernel shell system_app system_server update_provider ))))
(typeattribute base_typeattr_519)
(typeattributeset base_typeattr_519 (and (domain ) (not (priv_app_all virtualizationmanager_domain apexd init installd system_server update_provider ))))
(typeattribute base_typeattr_518)
(typeattributeset base_typeattr_518 (and (domain ) (not (artd installd ))))
(typeattribute base_typeattr_517)
(typeattributeset base_typeattr_517 (and (domain ) (not (appdomain app_zygote artd installd rs ))))
(typeattribute base_typeattr_516)
(typeattributeset base_typeattr_516 (and (domain ) (not (appdomain artd installd rs ))))
(typeattribute base_typeattr_515)
(typeattributeset base_typeattr_515 (and (domain ) (not (appdomain adbd app_zygote artd installd profman rs runas system_server zygote native_app_zygote zygote_next ))))
(typeattribute base_typeattr_514)
(typeattributeset base_typeattr_514 (and (domain ) (not (dumpstate init system_server ))))
(typeattribute base_typeattr_513)
(typeattributeset base_typeattr_513 (and (domain ) (not (domain init vendor_init ))))
(typeattribute base_typeattr_512)
(typeattributeset base_typeattr_512 (and (domain ) (not (priv_app_all gmscore_app ))))
(typeattribute base_typeattr_511)
(typeattributeset base_typeattr_511 (and (domain ) (not (dumpstate incidentd llkd system_server vold profcollectd simpleperf_boot storaged ))))
(typeattribute base_typeattr_510)
(typeattributeset base_typeattr_510 (and (domain ) (not (domain hal_bootctl_server hal_fastboot_server fastbootd init recovery ueventd uncrypt update_engine vendor_init vendor_misc_writer vold kcmdlinectrl misctrl mtectrl ))))
(typeattribute base_typeattr_509)
(typeattributeset base_typeattr_509 (and (domain ) (not (init traced_probes vendor_init ))))
(typeattribute base_typeattr_508)
(typeattributeset base_typeattr_508 (and (domain ) (not (appdomain isolated_app_all ))))
(typeattribute base_typeattr_507)
(typeattributeset base_typeattr_507 (and (domain ) (not (ephemeral_app untrusted_app_27 untrusted_app_25 ))))
(typeattribute base_typeattr_506)
(typeattributeset base_typeattr_506 (and (domain ) (not (hal_codec2_server hal_omx_server ))))
(typeattribute base_typeattr_505)
(typeattributeset base_typeattr_505 (and (coredomain ) (not (apexd charger incidentd init recovery shell ueventd ))))
(typeattribute base_typeattr_504)
(typeattributeset base_typeattr_504 (and (coredomain ) (not (appdomain overlay_remounter ))))
(typeattribute base_typeattr_503)
(typeattributeset base_typeattr_503 (and (coredomain ) (not (system_writes_mnt_vendor_violators init ueventd vold ))))
(typeattribute base_typeattr_502)
(typeattributeset base_typeattr_502 (not (coredomain ) ))
(typeattribute base_typeattr_501)
(typeattributeset base_typeattr_501 (not (system_file_type system_dlkm_file_type vendor_file_type rootfs ) ))
(typeattribute base_typeattr_500)
(typeattributeset base_typeattr_500 (and (domain ) (not (artd installd profman overlay_remounter ))))
(typeattribute base_typeattr_499)
(typeattributeset base_typeattr_499 (and (domain ) (not (init vendor_init vold ))))
(typeattribute base_typeattr_498)
(typeattributeset base_typeattr_498 (not (hwservicemanager ) ))
(typeattribute base_typeattr_497)
(typeattributeset base_typeattr_497 (not (servicemanager vndservicemanager ) ))
(typeattribute base_typeattr_496)
(typeattributeset base_typeattr_496 (and (domain ) (not (appdomain artd installd ))))
(typeattribute base_typeattr_495)
(typeattributeset base_typeattr_495 (and (domain ) (not (app_zygote runas simpleperf_app_runner webview_zygote zygote native_app_zygote zygote_next ))))
(typeattribute base_typeattr_494)
(typeattributeset base_typeattr_494 (and (appdomain ) (not (isolated_app shell simpleperf su tradeinmode ))))
(typeattribute base_typeattr_493)
(typeattributeset base_typeattr_493 (and (domain ) (not (app_zygote runas simpleperf_app_runner webview_zygote zygote native_app_zygote ))))
(typeattribute base_typeattr_492)
(typeattributeset base_typeattr_492 (and (domain ) (not (adbd init runas zygote ))))
(typeattribute base_typeattr_491)
(typeattributeset base_typeattr_491 (and (domain ) (not (init installd system_app system_server toolbox vold_prepare_subdirs ))))
(typeattribute base_typeattr_490)
(typeattributeset base_typeattr_490 (not (domain ) ))
(typeattribute base_typeattr_489)
(typeattributeset base_typeattr_489 (and (domain ) (not (untrusted_app_27 untrusted_app_25 overlay_remounter ))))
(typeattribute base_typeattr_488)
(typeattributeset base_typeattr_488 (and (file_type ) (not (apk_data_file app_data_file asec_public_file ))))
(typeattribute base_typeattr_487)
(typeattributeset base_typeattr_487 (and (domain ) (not (dumpstate shell su overlay_remounter ))))
(typeattribute base_typeattr_486)
(typeattributeset base_typeattr_486 (and (domain ) (not (init system_server ))))
(typeattribute base_typeattr_485)
(typeattributeset base_typeattr_485 (and (domain ) (not (dumpstate incidentd system_server ))))
(typeattribute base_typeattr_484)
(typeattributeset base_typeattr_484 (and (domain ) (not (app_zygote system_server webview_zygote ))))
(typeattribute base_typeattr_483)
(typeattributeset base_typeattr_483 (and (domain ) (not (system_server zygote ))))
(typeattribute base_typeattr_482)
(typeattributeset base_typeattr_482 (and (system_file_type ) (not (crash_dump_exec early_virtmgr_exec system_event_log_tags_file system_lib_file system_bootstrap_lib_file system_group_file system_linker_exec system_linker_config_file system_passwd_file system_seccomp_policy_file system_security_cacerts_file tcpdump_exec system_zoneinfo_file cgroup_desc_file task_profiles_file file_contexts_file property_contexts_file netutils_wrapper_exec shell_exec toolbox_exec virtualizationmanager_exec ))))
(typeattribute base_typeattr_481)
(typeattributeset base_typeattr_481 (and (vendor_file_type ) (not (same_process_hal_file ))))
(typeattribute base_typeattr_480)
(typeattributeset base_typeattr_480 (and (coredomain ) (not (system_executes_vendor_violators shell overlay_remounter ))))
(typeattribute base_typeattr_479)
(typeattributeset base_typeattr_479 (and (vendor_file_type ) (not (vendor_app_file same_process_hal_file vndk_sp_file vendor_public_lib_file vendor_public_framework_file ))))
(typeattribute base_typeattr_478)
(typeattributeset base_typeattr_478 (and (coredomain ) (not (system_executes_vendor_violators init shell ueventd overlay_remounter ))))
(typeattribute base_typeattr_477)
(typeattributeset base_typeattr_477 (and (file_type ) (not (vendor_file_type init_exec ))))
(typeattribute base_typeattr_476)
(typeattributeset base_typeattr_476 (and (file_type ) (not (system_file_type postinstall_file ))))
(typeattribute base_typeattr_475)
(typeattributeset base_typeattr_475 (and (system_file_type ) (not (crash_dump_exec early_virtmgr_exec system_lib_file system_bootstrap_lib_file system_linker_exec tcpdump_exec netutils_wrapper_exec shell_exec toolbox_exec virtualizationmanager_exec ))))
(typeattribute base_typeattr_474)
(typeattributeset base_typeattr_474 (and (domain ) (not (appdomain coredomain vendor_executes_system_violators vendor_init ))))
(typeattribute base_typeattr_473)
(typeattributeset base_typeattr_473 (and (coredomain ) (not (init shell ueventd overlay_remounter ))))
(typeattribute base_typeattr_472)
(typeattributeset base_typeattr_472 (and (coredomain ) (not (data_between_core_and_vendor_violators init ))))
(typeattribute base_typeattr_471)
(typeattributeset base_typeattr_471 (and (coredomain ) (not (data_between_core_and_vendor_violators init vold vold_prepare_subdirs ))))
(typeattribute base_typeattr_470)
(typeattributeset base_typeattr_470 (and (domain ) (not (appdomain coredomain data_between_core_and_vendor_violators ))))
(typeattribute base_typeattr_469)
(typeattributeset base_typeattr_469 (and (core_data_file_type ) (not (system_data_root_file system_data_file vendor_data_file vendor_userdir_file unencrypted_data_file ))))
(typeattribute base_typeattr_468)
(typeattributeset base_typeattr_468 (and (core_data_file_type ) (not (system_data_root_file system_data_file vendor_data_file vendor_userdir_file ))))
(typeattribute base_typeattr_467)
(typeattributeset base_typeattr_467 (and (core_data_file_type ) (not (unencrypted_data_file ))))
(typeattribute base_typeattr_466)
(typeattributeset base_typeattr_466 (and (vendor_init ) (not (data_between_core_and_vendor_violators ))))
(typeattribute base_typeattr_465)
(typeattributeset base_typeattr_465 (and (domain ) (not (appdomain coredomain data_between_core_and_vendor_violators vendor_init ))))
(typeattribute base_typeattr_464)
(typeattributeset base_typeattr_464 (and (data_file_type ) (not (core_data_file_type app_data_file_type vendor_data_file ))))
(typeattribute base_typeattr_463)
(typeattributeset base_typeattr_463 (and (coredomain ) (not (appdomain data_between_core_and_vendor_violators init vold_prepare_subdirs ))))
(typeattribute base_typeattr_462)
(typeattributeset base_typeattr_462 (and (data_file_type ) (not (core_data_file_type app_data_file_type vendor_vm_data_file ))))
(typeattribute base_typeattr_461)
(typeattributeset base_typeattr_461 (and (data_file_type ) (not (core_data_file_type app_data_file_type ))))
(typeattribute base_typeattr_460)
(typeattributeset base_typeattr_460 (and (coredomain ) (not (appdomain data_between_core_and_vendor_violators crosvm_domain init vold_prepare_subdirs crosvm_vu_fs ))))
(typeattribute base_typeattr_459)
(typeattributeset base_typeattr_459 (and (dev_type file_type ) (not (core_data_file_type app_data_file_type coredomain_socket unlabeled ))))
(typeattribute base_typeattr_458)
(typeattributeset base_typeattr_458 (and (coredomain ) (not (socket_between_core_and_vendor_violators init ueventd ))))
(typeattribute base_typeattr_457)
(typeattributeset base_typeattr_457 (and (core_data_file_type coredomain_socket unlabeled ) (not (pdx_endpoint_socket_type pdx_channel_socket_type app_data_file privapp_data_file ))))
(typeattribute base_typeattr_456)
(typeattributeset base_typeattr_456 (and (domain ) (not (appdomain coredomain socket_between_core_and_vendor_violators data_between_core_and_vendor_violators vendor_init ))))
(typeattribute base_typeattr_455)
(typeattributeset base_typeattr_455 (and (domain ) (not (coredomain socket_between_core_and_vendor_violators ))))
(typeattribute base_typeattr_454)
(typeattributeset base_typeattr_454 (and (coredomain ) (not (adbd init ))))
(typeattribute base_typeattr_453)
(typeattributeset base_typeattr_453 (and (coredomain ) (not (shell su ))))
(typeattribute base_typeattr_452)
(typeattributeset base_typeattr_452 (and (coredomain ) (not (shell su system_server ueventd ))))
(typeattribute base_typeattr_451)
(typeattributeset base_typeattr_451 (and (service_manager_type ) (not (app_api_service ephemeral_app_api_service hal_service_type apc_service audioserver_service cameraserver_service drmserver_service credstore_service keystore_maintenance_service keystore_service legacykeystore_service mediaserver_service mediametrics_service mediaextractor_service mediadrmserver_service nfc_service radio_service secure_element_service virtual_touchpad_service vr_manager_service hal_face_service binder_stats_consumer_service ))))
(typeattribute base_typeattr_450)
(typeattributeset base_typeattr_450 (and (appdomain ) (not (coredomain ))))
(typeattribute base_typeattr_449)
(typeattributeset base_typeattr_449 (and (domain ) (not (hwservicemanager servicemanager vndservicemanager ))))
(typeattribute base_typeattr_448)
(typeattributeset base_typeattr_448 (and (domain ) (not (fastbootd fsck init recovery update_engine remount ))))
(typeattribute base_typeattr_447)
(typeattributeset base_typeattr_447 (and (domain ) (not (hal_fastboot_server e2fs fastbootd fsck init recovery vold ))))
(typeattribute base_typeattr_446)
(typeattributeset base_typeattr_446 (and (domain ) (not (init recovery system_server ueventd ))))
(typeattribute base_typeattr_445)
(typeattributeset base_typeattr_445 (and (domain ) (not (hal_camera_server hal_cas_server hal_drm_server hal_keymint_server adbd dumpstate fastbootd incidentd init mediadrmserver mediaserver recovery shell system_server vendor_init adbd_tradeinmode ))))
(typeattribute base_typeattr_444)
(typeattributeset base_typeattr_444 (and (domain ) (not (coredomain vendor_init ))))
(typeattribute base_typeattr_443)
(typeattributeset base_typeattr_443 (and (domain ) (not (init system_server vendor_init ))))
(typeattribute base_typeattr_442)
(typeattributeset base_typeattr_442 (and (fs_type ) (not (contextmount_type sdcard_posix_contextmount_type ))))
(typeattribute base_typeattr_441)
(typeattributeset base_typeattr_441 (and (domain ) (not (recovery ))))
(typeattribute base_typeattr_440)
(typeattributeset base_typeattr_440 (and (domain ) (not (kernel overlay_remounter ))))
(typeattribute base_typeattr_439)
(typeattributeset base_typeattr_439 (and (domain ) (not (adbd crash_dump heapprofd init shell ))))
(typeattribute base_typeattr_438)
(typeattributeset base_typeattr_438 (and (domain ) (not (adbd init shell ))))
(typeattribute base_typeattr_437)
(typeattributeset base_typeattr_437 (and (domain ) (not (shell ))))
(typeattribute base_typeattr_436)
(typeattributeset base_typeattr_436 (and (domain ) (not (init kernel recovery ))))
(typeattribute base_typeattr_435)
(typeattributeset base_typeattr_435 (and (domain ) (not (dumpstate init system_server vendor_init ))))
(typeattribute base_typeattr_434)
(typeattributeset base_typeattr_434 (and (domain ) (not (dumpstate init vendor_init ))))
(typeattribute base_typeattr_433)
(typeattributeset base_typeattr_433 (and (domain ) (not (domain dumpstate init vendor_init ))))
(typeattribute base_typeattr_432)
(typeattributeset base_typeattr_432 (and (domain ) (not (init ueventd ))))
(typeattribute base_typeattr_431)
(typeattributeset base_typeattr_431 (and (file_type ) (not (exec_type postinstall_file ))))
(typeattribute base_typeattr_430)
(typeattributeset base_typeattr_430 (and (domain ) (not (shell ueventd ))))
(typeattribute base_typeattr_429)
(typeattributeset base_typeattr_429 (and (domain ) (not (prng_seeder shell ueventd ))))
(typeattribute base_typeattr_428)
(typeattributeset base_typeattr_428 (and (domain ) (not (kernel ))))
(typeattribute base_typeattr_427)
(typeattributeset base_typeattr_427 (and (domain ) (not (system_server ))))
(typeattribute base_typeattr_426)
(typeattributeset base_typeattr_426 (and (domain ) (not (apexd init kernel recovery ueventd vold ))))
(typeattribute base_typeattr_425)
(typeattributeset base_typeattr_425 (and (domain ) (not (init recovery ))))
(typeattribute base_typeattr_424)
(typeattributeset base_typeattr_424 (and (domain ) (not (hal_audio_server hal_camera_server hal_cas_server hal_codec2_server hal_configstore_server hal_drm_server hal_omx_server app_zygote artd audioserver cameraserver init kernel mediadrmserver mediaextractor mediametrics mediaserver mediatranscoding system_server ueventd vendor_init webview_zygote dexopt_chroot_setup mediatuner native_app_zygote ))))
(typeattribute base_typeattr_423)
(typeattributeset base_typeattr_423 (and (domain ) (not (untrusted_app_all isolated_app_all app_zygote ephemeral_app pcc_component ))))
(typeattribute base_typeattr_422)
(typeattributeset base_typeattr_422 (and (domain ) (not (appdomain coredomain ))))
(typeattribute base_typeattr_421)
(typeattributeset base_typeattr_421 (and (domain ) (not (appdomain rs ))))
(typeattribute base_typeattr_420)
(typeattributeset base_typeattr_420 (and (domain ) (not (hal_configstore_server crosvm_domain apexd app_zygote bpfloader crash_dump init kernel keystore llkd logd ueventd vendor_init vold webview_zygote zygote native_app_zygote ))))
(typeattribute base_typeattr_419)
(typeattributeset base_typeattr_419 (and (domain ) (not (hal_configstore_server crosvm_domain apexd app_zygote bpfloader crash_dump init kernel keystore llkd logd logpersist recovery recovery_persist recovery_refresh ueventd vendor_init vold webview_zygote zygote native_app_zygote ))))
(typeattribute base_typeattr_418)
(typeattributeset base_typeattr_418 (and (domain ) (not (isolated_app_all hal_configstore_server app_zygote init vendor_init webview_zygote native_app_zygote ))))
(typeattribute base_typeattr_417)
(typeattributeset base_typeattr_417 (and (domain ) (not (domain ))))
(typeattribute base_typeattr_416)
(typeattributeset base_typeattr_416 (and (domain ) (not (isolated_app servicemanager vndservicemanager ))))
(typeattribute base_typeattr_415)
(typeattributeset base_typeattr_415 (and (domain ) (not (hwservicemanager vndservicemanager ))))
(typeattribute base_typeattr_414)
(typeattributeset base_typeattr_414 (and (domain ) (not (artd_subprocess_type ))))
(typeattribute base_typeattr_413)
(typeattributeset base_typeattr_413 (and (domain ) (not (display_service_server ))))
(typeattribute base_typeattr_412)
(typeattributeset base_typeattr_412 (and (domain ) (not (artd init system_server vendor_init art_exec dexopt_chroot_setup ))))
(typeattribute base_typeattr_411)
(typeattributeset base_typeattr_411 (and (domain ) (not (dexopt_chroot_setup ))))
(typeattribute base_typeattr_410)
(typeattributeset base_typeattr_410 (and (domain ) (not (dex2oat ))))
(typeattribute base_typeattr_409)
(typeattributeset base_typeattr_409 (not (system_server_wrapfd device_as_webcam_userfaultfd ) ))
(typeattribute base_typeattr_408)
(typeattributeset base_typeattr_408 (and (domain ) (not (crash_dump llkd runas_app simpleperf device_as_webcam ))))
(typeattribute base_typeattr_407)
(typeattributeset base_typeattr_407 (and (appdomain ) (not (runas_app shell simpleperf device_as_webcam ))))
(typeattribute base_typeattr_406)
(typeattributeset base_typeattr_406 (and (device_as_webcam ) (not (runas_app shell simpleperf ))))
(typeattribute base_typeattr_405)
(typeattributeset base_typeattr_405 (and (domain ) (not (device_as_webcam ))))
(typeattribute base_typeattr_404)
(typeattributeset base_typeattr_404 (and (domain ) (not (init derive_sdk ))))
(typeattribute base_typeattr_403)
(typeattributeset base_typeattr_403 (and (vendor_file_type ) (not (vendor_cgroup_desc_file vendor_task_profiles_file vendor_configs_file vndk_sp_file ))))
(typeattribute base_typeattr_402)
(typeattributeset base_typeattr_402 (and (apk_data_file staging_data_file app_data_file privapp_data_file virtualizationservice_data_file vm_data_file ) (not (shell_data_file ))))
(typeattribute base_typeattr_401)
(typeattributeset base_typeattr_401 (and (domain ) (not (virtualizationmanager_domain early_virtmgr_domain crosvm_domain crosvm_vu_fs crosvm_vu_snd overlay_remounter vmlauncher_app ))))
(typeattribute base_typeattr_400)
(typeattributeset base_typeattr_400 (and (app_data_file_type ) (not (shell_data_file app_data_file privapp_data_file ))))
(typeattribute base_typeattr_399)
(typeattributeset base_typeattr_399 (and (vendor_file_type ) (not (vendor_cgroup_desc_file vendor_task_profiles_file vendor_configs_file same_process_hal_file vndk_sp_file vendor_microdroid_file vendor_vm_file vendor_vm_data_file ))))
(typeattribute base_typeattr_398)
(typeattributeset base_typeattr_398 (and (apk_data_file staging_data_file app_data_file privapp_data_file virtualizationservice_data_file vm_data_file aiseal_data_file ) (not (shell_data_file ))))
(typeattribute base_typeattr_397)
(typeattributeset base_typeattr_397 (and (appdomain coredomain ) (not (crosvm_domain ueventd ))))
(typeattribute base_typeattr_396)
(typeattributeset base_typeattr_396 (and (appdomain coredomain ) (not (crosvm_domain shell ueventd ))))
(typeattribute base_typeattr_395)
(typeattributeset base_typeattr_395 (and (domain ) (not (crosvm_domain ))))
(typeattribute base_typeattr_394)
(typeattributeset base_typeattr_394 (and (domain ) (not (crosvm_domain ueventd ))))
(typeattribute base_typeattr_393)
(typeattributeset base_typeattr_393 (and (domain ) (not (crosvm_domain shell ueventd ))))
(typeattribute base_typeattr_392)
(typeattributeset base_typeattr_392 (and (domain ) (not (credstore ))))
(typeattribute base_typeattr_391)
(typeattributeset base_typeattr_391 (and (apexd bpfloader init kernel keystore llkd logd ueventd vendor_init vold ) (not (apexd llkd logd vold ))))
(typeattribute base_typeattr_390)
(typeattributeset base_typeattr_390 (and (domain ) (not (overlay_remounter ))))
(typeattribute base_typeattr_389)
(typeattributeset base_typeattr_389 (and (domain ) (not (apexd bpfloader crash_dump init kernel keystore llkd logd ueventd vendor_init vold ))))
(typeattribute base_typeattr_388)
(typeattributeset base_typeattr_388 (and (dmabuf_heap_device_type ) (not (dmabuf_system_heap_device dmabuf_system_secure_heap_device ))))
(typeattribute base_typeattr_387)
(typeattributeset base_typeattr_387 (and (coredomain ) (not (init ueventd ))))
(typeattribute base_typeattr_386)
(typeattributeset base_typeattr_386 (and (coredomain ) (not (adbd init mediaprovider system_server adbd_tradeinmode aoad ))))
(typeattribute base_typeattr_385)
(typeattributeset base_typeattr_385 (and (coredomain ) (not (init system_server ))))
(typeattribute base_typeattr_384)
(typeattributeset base_typeattr_384 (and (coredomain ) (not (bootstat charger dumpstate incidentd init logd logpersist recovery_persist recovery_refresh shell system_server ))))
(typeattribute base_typeattr_383)
(typeattributeset base_typeattr_383 (and (coredomain ) (not (init ))))
(typeattribute base_typeattr_382)
(typeattributeset base_typeattr_382 (and (coredomain ) (not (atrace bpfloader dumpstate gpuservice init lmkd prefetch shell system_server traced_perf traced_probes traceur_app profcollectd simpleperf_boot ))))
(typeattribute base_typeattr_381)
(typeattributeset base_typeattr_381 (and (coredomain ) (not (apexd fsck init ueventd ))))
(typeattribute base_typeattr_380)
(typeattributeset base_typeattr_380 (and (coredomain ) (not (apexd init ueventd vold vfio_handler ))))
(typeattribute base_typeattr_379)
(typeattributeset base_typeattr_379 (and (coredomain ) (not (init vold ))))
(typeattribute base_typeattr_378)
(typeattributeset base_typeattr_378 (and (coredomain ) (not (appdomain app_zygote artd heapprofd idmap init installd prefetch rs system_server traced_perf webview_zygote zygote dex2oat overlay_remounter profcollectd simpleperf_boot ))))
(typeattribute base_typeattr_377)
(typeattributeset base_typeattr_377 (and (coredomain ) (not (appdomain app_zygote artd heapprofd idmap init installd prefetch rs system_server traced_perf webview_zygote zygote dex2oat overlay_remounter ))))
(typeattribute base_typeattr_376)
(typeattributeset base_typeattr_376 (and (coredomain ) (not (appdomain artd heapprofd idmap init installd mediaserver prefetch profman rs system_server traced_perf dex2oat overlay_remounter profcollectd simpleperf_boot ))))
(typeattribute base_typeattr_375)
(typeattributeset base_typeattr_375 (and (coredomain ) (not (appdomain artd heapprofd idmap init installd prefetch rs system_server traced_perf dex2oat overlay_remounter ))))
(typeattribute base_typeattr_374)
(typeattributeset base_typeattr_374 (and (coredomain ) (not (apexd init ueventd vold ))))
(typeattribute base_typeattr_373)
(typeattributeset base_typeattr_373 (and (domain ) (not (artd servicemanager system_server composd ))))
(typeattribute base_typeattr_372)
(typeattributeset base_typeattr_372 (and (domain ) (not (odsign ))))
(typeattribute base_typeattr_371)
(typeattributeset base_typeattr_371 (and (domain ) (not (composd ))))
(typeattribute base_typeattr_370)
(typeattributeset base_typeattr_370 (and (domain ) (not (charger charger_vendor dumpstate init vendor_init ))))
(typeattribute base_typeattr_369)
(typeattributeset base_typeattr_369 (and (domain ) (not (charger charger_vendor init vendor_init ))))
(typeattribute base_typeattr_368)
(typeattributeset base_typeattr_368 (and (domain ) (not (init vendor_init ))))
(typeattribute base_typeattr_367)
(typeattributeset base_typeattr_367 (and (domain ) (not (charger dumpstate init ))))
(typeattribute base_typeattr_366)
(typeattributeset base_typeattr_366 (and (domain ) (not (casefolding_remover ))))
(typeattribute base_typeattr_365)
(typeattributeset base_typeattr_365 (and (domain ) (not (cameraserver ))))
(typeattribute base_typeattr_364)
(typeattributeset base_typeattr_364 (and (domain ) (not (camera_service_server ))))
(typeattribute base_typeattr_363)
(typeattributeset base_typeattr_363 (and (domain ) (not (bufferhubd ))))
(typeattribute base_typeattr_362)
(typeattributeset base_typeattr_362 (and (domain ) (not (llkd ))))
(typeattribute base_typeattr_361)
(typeattributeset base_typeattr_361 (and (coredomain ) (not (bpfloader netd netutils_wrapper ))))
(typeattribute base_typeattr_360)
(typeattributeset base_typeattr_360 (and (domain ) (not (bpfloader overlay_remounter ))))
(typeattribute base_typeattr_359)
(typeattributeset base_typeattr_359 (and (domain ) (not (bpfloader init overlay_remounter ))))
(typeattribute base_typeattr_358)
(typeattributeset base_typeattr_358 (and (bpffs_type ) (not (fs_bpf_vendor ))))
(typeattribute base_typeattr_357)
(typeattributeset base_typeattr_357 (and (domain ) (not (bpfloader gpuservice lmkd netd netutils_wrapper network_stack system_server traced_probes uprobestats ))))
(typeattribute base_typeattr_356)
(typeattributeset base_typeattr_356 (and (domain ) (not (bpfloader uprobestats ))))
(typeattribute base_typeattr_355)
(typeattributeset base_typeattr_355 (and (domain ) (not (bpfloader netd netutils_wrapper network_stack system_server ))))
(typeattribute base_typeattr_354)
(typeattributeset base_typeattr_354 (and (domain ) (not (bpfloader netd network_stack system_server ))))
(typeattribute base_typeattr_353)
(typeattributeset base_typeattr_353 (and (domain ) (not (bpfloader network_stack system_server ))))
(typeattribute base_typeattr_352)
(typeattributeset base_typeattr_352 (and (domain ) (not (bpfloader network_stack ))))
(typeattribute base_typeattr_351)
(typeattributeset base_typeattr_351 (and (domain ) (not (bpfloader system_suspend ))))
(typeattribute base_typeattr_350)
(typeattributeset base_typeattr_350 (and (domain ) (not (bpfloader system_server traced_probes ))))
(typeattribute base_typeattr_349)
(typeattributeset base_typeattr_349 (and (domain ) (not (bpfloader gpuservice lmkd netd netutils_wrapper system_server mediaprovider_app ))))
(typeattribute base_typeattr_348)
(typeattributeset base_typeattr_348 (and (domain ) (not (bpfloader dumpstate system_server ))))
(typeattribute base_typeattr_347)
(typeattributeset base_typeattr_347 (and (bpffs_type ) (not (fs_bpf_dmabuf ))))
(typeattribute base_typeattr_346)
(typeattributeset base_typeattr_346 (and (domain ) (not (bpfloader ))))
(typeattribute base_typeattr_345)
(typeattributeset base_typeattr_345 (and (bpffs_type ) (not (fs_bpf ))))
(typeattribute base_typeattr_344)
(typeattributeset base_typeattr_344 (and (domain ) (not (bpfdomain ))))
(typeattribute base_typeattr_343)
(typeattributeset base_typeattr_343 (and (bpfdomain ) (not (bpfloader dumpstate netd netutils_wrapper network_stack system_server ))))
(typeattribute base_typeattr_342)
(typeattributeset base_typeattr_342 (and (domain ) (not (init vendor_init boringssl_self_test vendor_boringssl_self_test ))))
(typeattribute base_typeattr_341)
(typeattributeset base_typeattr_341 (and (domain ) (not (bootstat init system_server ))))
(typeattribute base_typeattr_340)
(typeattributeset base_typeattr_340 (and (domain ) (not (platform_app_all bootanim bootstat dumpstate incidentd init recovery shell system_server ))))
(typeattribute base_typeattr_339)
(typeattributeset base_typeattr_339 (and (domain ) (not (bootstat init ))))
(typeattribute base_typeattr_338)
(typeattributeset base_typeattr_338 (and (domain ) (not (bluetooth init ))))
(typeattribute base_typeattr_337)
(typeattributeset base_typeattr_337 (not (system_server_wrapfd bluetooth_userfaultfd ) ))
(typeattribute base_typeattr_336)
(typeattributeset base_typeattr_336 (and (domain ) (not (bluetooth crash_dump llkd runas_app simpleperf ))))
(typeattribute base_typeattr_335)
(typeattributeset base_typeattr_335 (and (appdomain ) (not (bluetooth runas_app shell simpleperf ))))
(typeattribute base_typeattr_334)
(typeattributeset base_typeattr_334 (and (bluetooth ) (not (runas_app shell simpleperf ))))
(typeattribute base_typeattr_333)
(typeattributeset base_typeattr_333 (and (domain ) (not (bluetooth ))))
(typeattribute base_typeattr_332)
(typeattributeset base_typeattr_332 (and (fs_type file_type ) (not (shell_exec blkid_exec ))))
(typeattribute base_typeattr_331)
(typeattributeset base_typeattr_331 (and (domain ) (not (vold ))))
(typeattribute base_typeattr_330)
(typeattributeset base_typeattr_330 (and (domain ) (not (automotive_display_service ))))
(typeattribute base_typeattr_329)
(typeattributeset base_typeattr_329 (and (domain ) (not (su ))))
(typeattribute base_typeattr_328)
(typeattributeset base_typeattr_328 (and (domain ) (not (audioserver ))))
(typeattribute base_typeattr_327)
(typeattributeset base_typeattr_327 (and (service_manager_type ) (not (apex_service default_android_service dnsresolver_service dumpstate_service incident_service installd_service lpdump_service mdns_service netd_service vold_service stats_service tracingproxy_service ))))
(typeattribute base_typeattr_326)
(typeattributeset base_typeattr_326 (not (crash_dump artd_subprocess_type ) ))
(typeattribute base_typeattr_325)
(typeattributeset base_typeattr_325 (not (art_exec_exec ) ))
(typeattribute base_typeattr_324)
(typeattributeset base_typeattr_324 (and (domain ) (not (artd ))))
(typeattribute base_typeattr_323)
(typeattributeset base_typeattr_323 (and (domain ) (not (app_zygote prng_seeder su ))))
(typeattribute base_typeattr_322)
(typeattributeset base_typeattr_322 (and (domain ) (not (app_zygote logd su system_server ))))
(typeattribute base_typeattr_321)
(typeattributeset base_typeattr_321 (and (service_manager_type ) (not (activity_service webviewupdate_service ))))
(typeattribute base_typeattr_320)
(typeattributeset base_typeattr_320 (and (domain ) (not (zygote ))))
(typeattribute base_typeattr_319)
(typeattributeset base_typeattr_319 (and (domain ) (not (isolated_app ))))
(typeattribute base_typeattr_318)
(typeattributeset base_typeattr_318 (and (domain ) (not (app_zygote ))))
(typeattribute base_typeattr_317)
(typeattributeset base_typeattr_317 (and (untrusted_app_all isolated_app_all ephemeral_app isolated_app isolated_compute_app mediaprovider untrusted_app untrusted_app_30 untrusted_app_29 untrusted_app_27 untrusted_app_25 mediaprovider_app ) (not (untrusted_app_32 untrusted_app_30 untrusted_app_29 untrusted_app_27 untrusted_app_25 ))))
(typeattribute base_typeattr_316)
(typeattributeset base_typeattr_316 (and (untrusted_app_all isolated_app_all ephemeral_app isolated_app isolated_compute_app mediaprovider untrusted_app untrusted_app_30 untrusted_app_29 untrusted_app_27 untrusted_app_25 mediaprovider_app ) (not (mediaprovider mediaprovider_app ))))
(typeattribute base_typeattr_315)
(typeattributeset base_typeattr_315 (and (untrusted_app_all isolated_app_all ephemeral_app isolated_app isolated_compute_app mediaprovider untrusted_app untrusted_app_30 untrusted_app_29 untrusted_app_27 untrusted_app_25 mediaprovider_app ) (not (untrusted_app_25 ))))
(typeattribute base_typeattr_314)
(typeattributeset base_typeattr_314 (and (fs_type file_type ) (not (sdcard_type fuse coredump_file user_profile_data_file media_rw_data_file method_trace_data_file app_data_file privapp_data_file app_exec_data_file ))))
(typeattribute base_typeattr_313)
(typeattributeset base_typeattr_313 (and (untrusted_app_all isolated_app_all ephemeral_app isolated_app isolated_compute_app mediaprovider untrusted_app untrusted_app_30 untrusted_app_29 untrusted_app_27 untrusted_app_25 mediaprovider_app ) (not (untrusted_app_30 untrusted_app_29 untrusted_app_27 untrusted_app_25 ))))
(typeattribute base_typeattr_312)
(typeattributeset base_typeattr_312 (and (untrusted_app_all isolated_app_all ephemeral_app isolated_app isolated_compute_app mediaprovider untrusted_app untrusted_app_30 untrusted_app_29 untrusted_app_27 untrusted_app_25 mediaprovider_app ) (not (mediaprovider_app ))))
(typeattribute base_typeattr_311)
(typeattributeset base_typeattr_311 (and (untrusted_app_all isolated_app_all ephemeral_app isolated_app isolated_compute_app mediaprovider untrusted_app untrusted_app_30 untrusted_app_29 untrusted_app_27 untrusted_app_25 mediaprovider_app ) (not (untrusted_app_27 untrusted_app_25 ))))
(typeattribute base_typeattr_310)
(typeattributeset base_typeattr_310 (and (untrusted_app_all isolated_app_all ephemeral_app isolated_app isolated_compute_app mediaprovider untrusted_app untrusted_app_30 untrusted_app_29 untrusted_app_27 untrusted_app_25 mediaprovider_app ) (not (runas_app untrusted_app_27 untrusted_app_25 ))))
(typeattribute base_typeattr_309)
(typeattributeset base_typeattr_309 (and (untrusted_app_all isolated_app_all ephemeral_app isolated_app isolated_compute_app mediaprovider untrusted_app untrusted_app_30 untrusted_app_29 untrusted_app_27 untrusted_app_25 mediaprovider_app ) (not (mediaprovider ))))
(typeattribute base_typeattr_308)
(typeattributeset base_typeattr_308 (and (untrusted_app_all isolated_app_all ephemeral_app isolated_app isolated_compute_app mediaprovider untrusted_app untrusted_app_30 untrusted_app_29 untrusted_app_27 untrusted_app_25 mediaprovider_app ) (not (domain ))))
(typeattribute base_typeattr_307)
(typeattributeset base_typeattr_307 (and (debugfs_type ) (not (debugfs_kcov ))))
(typeattribute base_typeattr_306)
(typeattributeset base_typeattr_306 (and (appdomain ) (not (platform_app_all shell system_app traceur_app ))))
(typeattribute base_typeattr_305)
(typeattributeset base_typeattr_305 (and (appdomain ) (not (mediaprovider_app ))))
(typeattribute base_typeattr_304)
(typeattributeset base_typeattr_304 (and (domain ) (not (appdomain virtualizationmanager_domain crash_dump rs ))))
(typeattribute base_typeattr_303)
(typeattributeset base_typeattr_303 (and (appdomain ) (not (shell su ))))
(typeattribute base_typeattr_302)
(typeattributeset base_typeattr_302 (and (appdomain ) (not (untrusted_app_32 untrusted_app_30 untrusted_app_29 untrusted_app_27 untrusted_app_25 ))))
(typeattribute base_typeattr_301)
(typeattributeset base_typeattr_301 (and (appdomain ) (not (device_as_webcam ))))
(typeattribute base_typeattr_300)
(typeattributeset base_typeattr_300 (and (data_file_type ) (not (system_data_file apk_data_file dalvikcache_data_file apex_art_data_file ))))
(typeattribute base_typeattr_299)
(typeattributeset base_typeattr_299 (and (appdomain ) (not (bluetooth system_app ))))
(typeattribute base_typeattr_298)
(typeattributeset base_typeattr_298 (and (appdomain ) (not (bluetooth nfc ))))
(typeattribute base_typeattr_297)
(typeattributeset base_typeattr_297 (and (domain ) (not (credstore init ))))
(typeattribute base_typeattr_296)
(typeattributeset base_typeattr_296 (and (appdomain ) (not (platform_app_all ))))
(typeattribute base_typeattr_295)
(typeattributeset base_typeattr_295 (and (domain ) (not (appdomain crosvm_domain perfetto crosvm_vu_fs ))))
(typeattribute base_typeattr_294)
(typeattributeset base_typeattr_294 (and (appdomain ) (not (shell ))))
(typeattribute base_typeattr_293)
(typeattributeset base_typeattr_293 (and (domain ) (not (appdomain crash_dump llkd ))))
(typeattribute base_typeattr_292)
(typeattributeset base_typeattr_292 (and (domain ) (not (appdomain ))))
(typeattribute base_typeattr_291)
(typeattributeset base_typeattr_291 (and (appdomain ) (not (radio ))))
(typeattribute base_typeattr_290)
(typeattributeset base_typeattr_290 (and (appdomain ) (not (network_stack ))))
(typeattribute base_typeattr_289)
(typeattributeset base_typeattr_289 (and (appdomain ) (not (nfc ))))
(typeattribute base_typeattr_288)
(typeattributeset base_typeattr_288 (and (dev_type ) (not (apex_dm_device ))))
(typeattribute base_typeattr_287)
(typeattributeset base_typeattr_287 (and (appdomain ) (not (bluetooth network_stack nfc ))))
(typeattribute base_typeattr_286)
(typeattributeset base_typeattr_286 (and (appdomain ) (not (platform_app priv_app untrusted_app ))))
(typeattribute base_typeattr_285)
(typeattributeset base_typeattr_285 (and (appdomain ) (not (bluetooth ))))
(typeattribute base_typeattr_284)
(typeattributeset base_typeattr_284 (and (appdomain ) (not (isolated_app_all ))))
(typeattribute base_typeattr_283)
(typeattributeset base_typeattr_283 (and (appdomain ) (not (isolated_app_all sdk_sandbox_all pcc_component ))))
(typeattribute base_typeattr_282)
(typeattributeset base_typeattr_282 (and (appdomain ) (not (mlstrustedsubject isolated_app_all sdk_sandbox_all ))))
(typeattribute base_typeattr_281)
(typeattributeset base_typeattr_281 (and (appdomain ) (not (mlstrustedsubject isolated_app_all sdk_sandbox_all pcc_component ))))
(typeattribute base_typeattr_280)
(typeattributeset base_typeattr_280 (and (appdomain ) (not (pcc_component ))))
(typeattribute base_typeattr_279)
(typeattributeset base_typeattr_279 (and (appdomain ) (not (isolated_app_all sdk_sandbox_all ))))
(typeattribute base_typeattr_278)
(typeattributeset base_typeattr_278 (and (appdomain ) (not (isolated_app_all ephemeral_app sdk_sandbox_all ))))
(typeattribute base_typeattr_277)
(typeattributeset base_typeattr_277 (and (appdomain ) (not (ephemeral_app sdk_sandbox_all pcc_component ))))
(typeattribute base_typeattr_276)
(typeattributeset base_typeattr_276 (and (appdomain ) (not (sdk_sandbox_all ))))
(typeattribute base_typeattr_275)
(typeattributeset base_typeattr_275 (and (appdomain ) (not (isolated_app_all ephemeral_app sdk_sandbox_all pcc_component ))))
(typeattribute base_typeattr_274)
(typeattributeset base_typeattr_274 (and (appdomain ) (not (untrusted_app_all priv_app_all platform_app_all isolated_app_all ephemeral_app network_stack shell su system_app sdk_sandbox_all pcc_component ))))
(typeattribute base_typeattr_273)
(typeattributeset base_typeattr_273 (and (appdomain ) (not (untrusted_app_all priv_app_all platform_app_all isolated_app_all ephemeral_app network_stack shell system_app sdk_sandbox_all pcc_component ))))
(typeattribute base_typeattr_272)
(typeattributeset base_typeattr_272 (and (domain ) (not (priv_app_all virtualizationmanager_domain crosvm_domain adbd apexd init shell system_app system_server ))))
(typeattribute base_typeattr_271)
(typeattributeset base_typeattr_271 (and (domain ) (not (apexd ueventd ))))
(typeattribute base_typeattr_270)
(typeattributeset base_typeattr_270 (and (domain ) (not (crash_dump ))))
(typeattribute base_typeattr_269)
(typeattributeset base_typeattr_269 (and (domain ) (not (apexd init keystore servicemanager system_server update_engine update_provider ))))
(typeattribute base_typeattr_268)
(typeattributeset base_typeattr_268 (and (domain ) (not (apexd init keystore system_server update_engine update_provider ))))
(typeattribute base_typeattr_267)
(typeattributeset base_typeattr_267 (and (domain ) (not (apexd init dexopt_chroot_setup ))))
(typeattribute base_typeattr_266)
(typeattributeset base_typeattr_266 (and (domain ) (not (apexd init vold_prepare_subdirs ))))
(typeattribute base_typeattr_265)
(typeattributeset base_typeattr_265 (and (domain ) (not (apexd init kernel ))))
(typeattribute base_typeattr_264)
(typeattributeset base_typeattr_264 (and (domain ) (not (apexd init ))))
(typeattribute base_typeattr_263)
(typeattributeset base_typeattr_263 (and (domain ) (not (apexd ))))
(typeattribute base_typeattr_262)
(typeattributeset base_typeattr_262 (and (domain ) (not (aoad ))))
(typeattribute base_typeattr_261)
(typeattributeset base_typeattr_261 (and (domain ) (not (atrace dumpstate shell system_app system_server traceur_app aisealhostservice ))))
(typeattribute base_typeattr_260)
(typeattributeset base_typeattr_260 (and (domain ) (not (aisealhostservice ))))
(typeattribute base_typeattr_259)
(typeattributeset base_typeattr_259 (and (domain ) (not (aidl_lazy_test_server ))))
(typeattribute base_typeattr_258)
(typeattributeset base_typeattr_258 (and (domain ) (not (init adservices ))))
(typeattribute base_typeattr_257)
(typeattributeset base_typeattr_257 (not (system_server_wrapfd adservices_userfaultfd ) ))
(typeattribute base_typeattr_256)
(typeattributeset base_typeattr_256 (and (domain ) (not (crash_dump llkd runas_app simpleperf adservices ))))
(typeattribute base_typeattr_255)
(typeattributeset base_typeattr_255 (and (appdomain ) (not (runas_app shell simpleperf adservices ))))
(typeattribute base_typeattr_254)
(typeattributeset base_typeattr_254 (and (adservices ) (not (runas_app shell simpleperf ))))
(typeattribute base_typeattr_253)
(typeattributeset base_typeattr_253 (and (domain ) (not (adservices ))))
(typeattribute base_typeattr_252)
(typeattributeset base_typeattr_252 (and (adbd_common ) (not (adbd ))))
(typeattribute base_typeattr_251)
(typeattributeset base_typeattr_251 (and (domain ) (not (su adbd_tradeinmode ))))
(typeattribute base_typeattr_250)
(typeattributeset base_typeattr_250 (and (domain ) (not (crash_dump shell adbd_tradeinmode ))))
(typeattribute base_typeattr_249)
(typeattributeset base_typeattr_249 (and (domain ) (not (init aconfigd aconfigd_mainline ))))
(typeattribute base_typeattr_248)
(typeattributeset base_typeattr_248 (all))
(typeattribute base_typeattr_247)
(typeattributeset base_typeattr_247 (and (domain ) (not (init ))))
(typeattribute base_typeattr_246)
(typeattributeset base_typeattr_246 (and (hal_lazy_test_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_245)
(typeattributeset base_typeattr_245 (and (hal_lazy_test_server ) (not (hal_lazy_test ))))
(typeattribute base_typeattr_244)
(typeattributeset base_typeattr_244 (and (hal_lazy_test_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_243)
(typeattributeset base_typeattr_243 (and (coredomain ) (not (dumpstate init ))))
(typeattribute base_typeattr_242)
(typeattributeset base_typeattr_242 (and (domain ) (not (init init_dev_config vendor_init ))))
(typeattribute base_typeattr_241)
(typeattributeset base_typeattr_241 (and (domain ) (not (coredomain ))))
(typeattribute base_typeattr_240)
(typeattributeset base_typeattr_240 (and (hal_npu_scheduling_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_239)
(typeattributeset base_typeattr_239 (and (hal_npu_scheduling_server ) (not (hal_npu_scheduling ))))
(typeattribute base_typeattr_238)
(typeattributeset base_typeattr_238 (and (hal_npu_scheduling_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_237)
(typeattributeset base_typeattr_237 (and (hal_vm_capabilities_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_236)
(typeattributeset base_typeattr_236 (and (hal_vm_capabilities_server ) (not (hal_vm_capabilities ))))
(typeattribute base_typeattr_235)
(typeattributeset base_typeattr_235 (and (hal_vm_capabilities_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_234)
(typeattributeset base_typeattr_234 (and (hal_wifi_supplicant_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_233)
(typeattributeset base_typeattr_233 (and (hal_wifi_supplicant_server ) (not (hal_wifi_supplicant ))))
(typeattribute base_typeattr_232)
(typeattributeset base_typeattr_232 (and (hal_wifi_supplicant_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_231)
(typeattributeset base_typeattr_231 (and (hal_wifi_hostapd_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_230)
(typeattributeset base_typeattr_230 (and (hal_wifi_hostapd_server ) (not (hal_wifi_hostapd ))))
(typeattribute base_typeattr_229)
(typeattributeset base_typeattr_229 (and (hal_wifi_hostapd_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_228)
(typeattributeset base_typeattr_228 (and (hal_wifi_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_227)
(typeattributeset base_typeattr_227 (and (hal_wifi_server ) (not (hal_wifi ))))
(typeattribute base_typeattr_226)
(typeattributeset base_typeattr_226 (and (hal_wifi_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_225)
(typeattributeset base_typeattr_225 (and (hal_weaver_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_224)
(typeattributeset base_typeattr_224 (and (hal_weaver_server ) (not (hal_weaver ))))
(typeattribute base_typeattr_223)
(typeattributeset base_typeattr_223 (and (hal_weaver_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_222)
(typeattributeset base_typeattr_222 (and (hal_vr_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_221)
(typeattributeset base_typeattr_221 (and (hal_vr_server ) (not (hal_vr ))))
(typeattribute base_typeattr_220)
(typeattributeset base_typeattr_220 (and (hal_vr_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_219)
(typeattributeset base_typeattr_219 (and (hal_vibrator_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_218)
(typeattributeset base_typeattr_218 (and (hal_vibrator_server ) (not (hal_vibrator ))))
(typeattribute base_typeattr_217)
(typeattributeset base_typeattr_217 (and (hal_vibrator_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_216)
(typeattributeset base_typeattr_216 (and (hal_vehicle_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_215)
(typeattributeset base_typeattr_215 (and (hal_vehicle_server ) (not (hal_vehicle ))))
(typeattribute base_typeattr_214)
(typeattributeset base_typeattr_214 (and (hal_vehicle_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_213)
(typeattributeset base_typeattr_213 (and (hal_uwb_vendor_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_212)
(typeattributeset base_typeattr_212 (and (hal_uwb_vendor_server ) (not (hal_uwb_vendor ))))
(typeattribute base_typeattr_211)
(typeattributeset base_typeattr_211 (and (hal_uwb_vendor_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_210)
(typeattributeset base_typeattr_210 (and (hal_uwb_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_209)
(typeattributeset base_typeattr_209 (and (hal_uwb_server ) (not (hal_uwb ))))
(typeattribute base_typeattr_208)
(typeattributeset base_typeattr_208 (and (hal_uwb_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_207)
(typeattributeset base_typeattr_207 (and (hal_usb_gadget_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_206)
(typeattributeset base_typeattr_206 (and (hal_usb_gadget_server ) (not (hal_usb_gadget ))))
(typeattribute base_typeattr_205)
(typeattributeset base_typeattr_205 (and (hal_usb_gadget_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_204)
(typeattributeset base_typeattr_204 (and (hal_usb_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_203)
(typeattributeset base_typeattr_203 (and (hal_usb_server ) (not (hal_usb ))))
(typeattribute base_typeattr_202)
(typeattributeset base_typeattr_202 (and (hal_usb_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_201)
(typeattributeset base_typeattr_201 (and (hal_tv_tuner_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_200)
(typeattributeset base_typeattr_200 (and (hal_tv_tuner_server ) (not (hal_tv_tuner ))))
(typeattribute base_typeattr_199)
(typeattributeset base_typeattr_199 (and (hal_tv_tuner_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_198)
(typeattributeset base_typeattr_198 (and (hal_tv_input_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_197)
(typeattributeset base_typeattr_197 (and (hal_tv_input_server ) (not (hal_tv_input ))))
(typeattribute base_typeattr_196)
(typeattributeset base_typeattr_196 (and (hal_tv_input_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_195)
(typeattributeset base_typeattr_195 (and (hal_tv_hdmi_earc_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_194)
(typeattributeset base_typeattr_194 (and (hal_tv_hdmi_earc_server ) (not (hal_tv_hdmi_earc ))))
(typeattribute base_typeattr_193)
(typeattributeset base_typeattr_193 (and (hal_tv_hdmi_earc_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_192)
(typeattributeset base_typeattr_192 (and (hal_tv_hdmi_connection_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_191)
(typeattributeset base_typeattr_191 (and (hal_tv_hdmi_connection_server ) (not (hal_tv_hdmi_connection ))))
(typeattribute base_typeattr_190)
(typeattributeset base_typeattr_190 (and (hal_tv_hdmi_connection_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_189)
(typeattributeset base_typeattr_189 (and (hal_tv_hdmi_cec_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_188)
(typeattributeset base_typeattr_188 (and (hal_tv_hdmi_cec_server ) (not (hal_tv_hdmi_cec ))))
(typeattribute base_typeattr_187)
(typeattributeset base_typeattr_187 (and (hal_tv_hdmi_cec_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_186)
(typeattributeset base_typeattr_186 (and (hal_tv_cec_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_185)
(typeattributeset base_typeattr_185 (and (hal_tv_cec_server ) (not (hal_tv_cec ))))
(typeattribute base_typeattr_184)
(typeattributeset base_typeattr_184 (and (hal_tv_cec_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_183)
(typeattributeset base_typeattr_183 (and (hal_threadnetwork_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_182)
(typeattributeset base_typeattr_182 (and (hal_threadnetwork_server ) (not (hal_threadnetwork ))))
(typeattribute base_typeattr_181)
(typeattributeset base_typeattr_181 (and (hal_threadnetwork_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_180)
(typeattributeset base_typeattr_180 (and (hal_thermal_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_179)
(typeattributeset base_typeattr_179 (and (hal_thermal_server ) (not (hal_thermal ))))
(typeattribute base_typeattr_178)
(typeattributeset base_typeattr_178 (and (hal_thermal_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_177)
(typeattributeset base_typeattr_177 (and (hal_tetheroffload_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_176)
(typeattributeset base_typeattr_176 (and (hal_tetheroffload_server ) (not (hal_tetheroffload ))))
(typeattribute base_typeattr_175)
(typeattributeset base_typeattr_175 (and (hal_tetheroffload_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_174)
(typeattributeset base_typeattr_174 (and (hal_telephony_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_173)
(typeattributeset base_typeattr_173 (and (hal_telephony_server ) (not (hal_telephony ))))
(typeattribute base_typeattr_172)
(typeattributeset base_typeattr_172 (and (hal_telephony_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_171)
(typeattributeset base_typeattr_171 (and (hal_sensors_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_170)
(typeattributeset base_typeattr_170 (and (hal_sensors_server ) (not (hal_sensors ))))
(typeattribute base_typeattr_169)
(typeattributeset base_typeattr_169 (and (hal_sensors_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_168)
(typeattributeset base_typeattr_168 (and (hal_secure_element_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_167)
(typeattributeset base_typeattr_167 (and (hal_secure_element_server ) (not (hal_secure_element ))))
(typeattribute base_typeattr_166)
(typeattributeset base_typeattr_166 (and (hal_secure_element_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_165)
(typeattributeset base_typeattr_165 (and (hal_remotelyprovisionedcomponent_avf_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_164)
(typeattributeset base_typeattr_164 (and (hal_remotelyprovisionedcomponent_avf_server ) (not (hal_remotelyprovisionedcomponent_avf ))))
(typeattribute base_typeattr_163)
(typeattributeset base_typeattr_163 (and (hal_remotelyprovisionedcomponent_avf_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_162)
(typeattributeset base_typeattr_162 (and (hal_secretkeeper_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_161)
(typeattributeset base_typeattr_161 (and (hal_secretkeeper_server ) (not (hal_secretkeeper ))))
(typeattribute base_typeattr_160)
(typeattributeset base_typeattr_160 (and (hal_secretkeeper_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_159)
(typeattributeset base_typeattr_159 (and (hal_remoteaccess_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_158)
(typeattributeset base_typeattr_158 (and (hal_remoteaccess_server ) (not (hal_remoteaccess ))))
(typeattribute base_typeattr_157)
(typeattributeset base_typeattr_157 (and (hal_remoteaccess_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_156)
(typeattributeset base_typeattr_156 (and (hal_rebootescrow_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_155)
(typeattributeset base_typeattr_155 (and (hal_rebootescrow_server ) (not (hal_rebootescrow ))))
(typeattribute base_typeattr_154)
(typeattributeset base_typeattr_154 (and (hal_rebootescrow_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_153)
(typeattributeset base_typeattr_153 (and (hal_power_stats_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_152)
(typeattributeset base_typeattr_152 (and (hal_power_stats_server ) (not (hal_power_stats ))))
(typeattribute base_typeattr_151)
(typeattributeset base_typeattr_151 (and (hal_power_stats_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_150)
(typeattributeset base_typeattr_150 (and (hal_power_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_149)
(typeattributeset base_typeattr_149 (and (hal_power_server ) (not (hal_power ))))
(typeattribute base_typeattr_148)
(typeattributeset base_typeattr_148 (and (hal_power_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_147)
(typeattributeset base_typeattr_147 (and (hal_omx_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_146)
(typeattributeset base_typeattr_146 (and (hal_omx_server ) (not (hal_omx ))))
(typeattribute base_typeattr_145)
(typeattributeset base_typeattr_145 (and (hal_omx_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_144)
(typeattributeset base_typeattr_144 (and (hal_oemlock_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_143)
(typeattributeset base_typeattr_143 (and (hal_oemlock_server ) (not (hal_oemlock ))))
(typeattribute base_typeattr_142)
(typeattributeset base_typeattr_142 (and (hal_oemlock_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_141)
(typeattributeset base_typeattr_141 (and (hal_nlinterceptor_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_140)
(typeattributeset base_typeattr_140 (and (hal_nlinterceptor_server ) (not (hal_nlinterceptor ))))
(typeattribute base_typeattr_139)
(typeattributeset base_typeattr_139 (and (hal_nlinterceptor_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_138)
(typeattributeset base_typeattr_138 (and (hal_nfc_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_137)
(typeattributeset base_typeattr_137 (and (hal_nfc_server ) (not (hal_nfc ))))
(typeattribute base_typeattr_136)
(typeattributeset base_typeattr_136 (and (hal_nfc_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_135)
(typeattributeset base_typeattr_135 (and (hal_neuralnetworks_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_134)
(typeattributeset base_typeattr_134 (and (hal_neuralnetworks_server ) (not (hal_neuralnetworks ))))
(typeattribute base_typeattr_133)
(typeattributeset base_typeattr_133 (and (hal_neuralnetworks_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_132)
(typeattributeset base_typeattr_132 (and (hal_motioncontext_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_131)
(typeattributeset base_typeattr_131 (and (hal_motioncontext_server ) (not (hal_motioncontext ))))
(typeattribute base_typeattr_130)
(typeattributeset base_typeattr_130 (and (hal_motioncontext_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_129)
(typeattributeset base_typeattr_129 (and (hal_memtrack_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_128)
(typeattributeset base_typeattr_128 (and (hal_memtrack_server ) (not (hal_memtrack ))))
(typeattribute base_typeattr_127)
(typeattributeset base_typeattr_127 (and (hal_memtrack_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_126)
(typeattributeset base_typeattr_126 (and (hal_mediaquality_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_125)
(typeattributeset base_typeattr_125 (and (hal_mediaquality_server ) (not (hal_mediaquality ))))
(typeattribute base_typeattr_124)
(typeattributeset base_typeattr_124 (and (hal_mediaquality_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_123)
(typeattributeset base_typeattr_123 (and (hal_macsec_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_122)
(typeattributeset base_typeattr_122 (and (hal_macsec_server ) (not (hal_macsec ))))
(typeattribute base_typeattr_121)
(typeattributeset base_typeattr_121 (and (hal_macsec_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_120)
(typeattributeset base_typeattr_120 (and (hal_lowpan_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_119)
(typeattributeset base_typeattr_119 (and (hal_lowpan_server ) (not (hal_lowpan ))))
(typeattribute base_typeattr_118)
(typeattributeset base_typeattr_118 (and (hal_lowpan_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_117)
(typeattributeset base_typeattr_117 (and (hal_light_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_116)
(typeattributeset base_typeattr_116 (and (hal_light_server ) (not (hal_light ))))
(typeattribute base_typeattr_115)
(typeattributeset base_typeattr_115 (and (hal_light_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_114)
(typeattributeset base_typeattr_114 (and (hal_keymint_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_113)
(typeattributeset base_typeattr_113 (and (hal_keymint_server ) (not (hal_keymint ))))
(typeattribute base_typeattr_112)
(typeattributeset base_typeattr_112 (and (hal_keymint_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_111)
(typeattributeset base_typeattr_111 (and (hal_keymaster_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_110)
(typeattributeset base_typeattr_110 (and (hal_keymaster_server ) (not (hal_keymaster ))))
(typeattribute base_typeattr_109)
(typeattributeset base_typeattr_109 (and (hal_keymaster_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_108)
(typeattributeset base_typeattr_108 (and (hal_ivn_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_107)
(typeattributeset base_typeattr_107 (and (hal_ivn_server ) (not (hal_ivn ))))
(typeattribute base_typeattr_106)
(typeattributeset base_typeattr_106 (and (hal_ivn_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_105)
(typeattributeset base_typeattr_105 (and (hal_ir_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_104)
(typeattributeset base_typeattr_104 (and (hal_ir_server ) (not (hal_ir ))))
(typeattribute base_typeattr_103)
(typeattributeset base_typeattr_103 (and (hal_ir_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_102)
(typeattributeset base_typeattr_102 (and (hal_input_processor_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_101)
(typeattributeset base_typeattr_101 (and (hal_input_processor_server ) (not (hal_input_processor ))))
(typeattribute base_typeattr_100)
(typeattributeset base_typeattr_100 (and (hal_input_processor_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_99)
(typeattributeset base_typeattr_99 (and (hal_input_classifier_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_98)
(typeattributeset base_typeattr_98 (and (hal_input_classifier_server ) (not (hal_input_classifier ))))
(typeattribute base_typeattr_97)
(typeattributeset base_typeattr_97 (and (hal_input_classifier_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_96)
(typeattributeset base_typeattr_96 (and (hal_identity_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_95)
(typeattributeset base_typeattr_95 (and (hal_identity_server ) (not (hal_identity ))))
(typeattribute base_typeattr_94)
(typeattributeset base_typeattr_94 (and (hal_identity_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_93)
(typeattributeset base_typeattr_93 (and (hal_hwcrypto_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_92)
(typeattributeset base_typeattr_92 (and (hal_hwcrypto_server ) (not (hal_hwcrypto ))))
(typeattribute base_typeattr_91)
(typeattributeset base_typeattr_91 (and (hal_hwcrypto_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_90)
(typeattributeset base_typeattr_90 (and (hal_health_storage_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_89)
(typeattributeset base_typeattr_89 (and (hal_health_storage_server ) (not (hal_health_storage ))))
(typeattribute base_typeattr_88)
(typeattributeset base_typeattr_88 (and (hal_health_storage_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_87)
(typeattributeset base_typeattr_87 (and (hal_health_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_86)
(typeattributeset base_typeattr_86 (and (hal_health_server ) (not (hal_health ))))
(typeattribute base_typeattr_85)
(typeattributeset base_typeattr_85 (and (hal_health_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_84)
(typeattributeset base_typeattr_84 (and (hal_graphics_composer_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_83)
(typeattributeset base_typeattr_83 (and (hal_graphics_composer_server ) (not (hal_graphics_composer ))))
(typeattribute base_typeattr_82)
(typeattributeset base_typeattr_82 (and (hal_graphics_composer_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_81)
(typeattributeset base_typeattr_81 (and (hal_graphics_allocator_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_80)
(typeattributeset base_typeattr_80 (and (hal_graphics_allocator_server ) (not (hal_graphics_allocator ))))
(typeattribute base_typeattr_79)
(typeattributeset base_typeattr_79 (and (hal_graphics_allocator_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_78)
(typeattributeset base_typeattr_78 (and (hal_gnss_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_77)
(typeattributeset base_typeattr_77 (and (hal_gnss_server ) (not (hal_gnss ))))
(typeattribute base_typeattr_76)
(typeattributeset base_typeattr_76 (and (hal_gnss_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_75)
(typeattributeset base_typeattr_75 (and (hal_gatekeeper_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_74)
(typeattributeset base_typeattr_74 (and (hal_gatekeeper_server ) (not (hal_gatekeeper ))))
(typeattribute base_typeattr_73)
(typeattributeset base_typeattr_73 (and (hal_gatekeeper_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_72)
(typeattributeset base_typeattr_72 (and (hal_fingerprint_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_71)
(typeattributeset base_typeattr_71 (and (hal_fingerprint_server ) (not (hal_fingerprint ))))
(typeattribute base_typeattr_70)
(typeattributeset base_typeattr_70 (and (hal_fingerprint_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_69)
(typeattributeset base_typeattr_69 (and (hal_fastboot_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_68)
(typeattributeset base_typeattr_68 (and (hal_fastboot_server ) (not (hal_fastboot ))))
(typeattribute base_typeattr_67)
(typeattributeset base_typeattr_67 (and (hal_fastboot_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_66)
(typeattributeset base_typeattr_66 (and (hal_face_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_65)
(typeattributeset base_typeattr_65 (and (hal_face_server ) (not (hal_face ))))
(typeattribute base_typeattr_64)
(typeattributeset base_typeattr_64 (and (hal_face_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_63)
(typeattributeset base_typeattr_63 (and (hal_evs_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_62)
(typeattributeset base_typeattr_62 (and (hal_evs_server ) (not (hal_evs ))))
(typeattribute base_typeattr_61)
(typeattributeset base_typeattr_61 (and (hal_evs_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_60)
(typeattributeset base_typeattr_60 (and (hal_dumpstate_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_59)
(typeattributeset base_typeattr_59 (and (hal_dumpstate_server ) (not (hal_dumpstate ))))
(typeattribute base_typeattr_58)
(typeattributeset base_typeattr_58 (and (hal_dumpstate_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_57)
(typeattributeset base_typeattr_57 (and (hal_drm_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_56)
(typeattributeset base_typeattr_56 (and (hal_drm_server ) (not (hal_drm ))))
(typeattribute base_typeattr_55)
(typeattributeset base_typeattr_55 (and (hal_drm_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_54)
(typeattributeset base_typeattr_54 (and (hal_contexthub_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_53)
(typeattributeset base_typeattr_53 (and (hal_contexthub_server ) (not (hal_contexthub ))))
(typeattribute base_typeattr_52)
(typeattributeset base_typeattr_52 (and (hal_contexthub_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_51)
(typeattributeset base_typeattr_51 (and (hal_confirmationui_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_50)
(typeattributeset base_typeattr_50 (and (hal_confirmationui_server ) (not (hal_confirmationui ))))
(typeattribute base_typeattr_49)
(typeattributeset base_typeattr_49 (and (hal_confirmationui_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_48)
(typeattributeset base_typeattr_48 (and (hal_configstore_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_47)
(typeattributeset base_typeattr_47 (and (hal_configstore_server ) (not (hal_configstore ))))
(typeattribute base_typeattr_46)
(typeattributeset base_typeattr_46 (and (hal_configstore_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_45)
(typeattributeset base_typeattr_45 (and (hal_codec2_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_44)
(typeattributeset base_typeattr_44 (and (hal_codec2_server ) (not (hal_codec2 ))))
(typeattribute base_typeattr_43)
(typeattributeset base_typeattr_43 (and (hal_codec2_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_42)
(typeattributeset base_typeattr_42 (and (hal_cas_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_41)
(typeattributeset base_typeattr_41 (and (hal_cas_server ) (not (hal_cas ))))
(typeattribute base_typeattr_40)
(typeattributeset base_typeattr_40 (and (hal_cas_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_39)
(typeattributeset base_typeattr_39 (and (hal_can_controller_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_38)
(typeattributeset base_typeattr_38 (and (hal_can_controller_server ) (not (hal_can_controller ))))
(typeattribute base_typeattr_37)
(typeattributeset base_typeattr_37 (and (hal_can_controller_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_36)
(typeattributeset base_typeattr_36 (and (hal_can_bus_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_35)
(typeattributeset base_typeattr_35 (and (hal_can_bus_server ) (not (hal_can_bus ))))
(typeattribute base_typeattr_34)
(typeattributeset base_typeattr_34 (and (hal_can_bus_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_33)
(typeattributeset base_typeattr_33 (and (hal_camera_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_32)
(typeattributeset base_typeattr_32 (and (hal_camera_server ) (not (hal_camera ))))
(typeattribute base_typeattr_31)
(typeattributeset base_typeattr_31 (and (hal_camera_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_30)
(typeattributeset base_typeattr_30 (and (hal_broadcastradio_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_29)
(typeattributeset base_typeattr_29 (and (hal_broadcastradio_server ) (not (hal_broadcastradio ))))
(typeattribute base_typeattr_28)
(typeattributeset base_typeattr_28 (and (hal_broadcastradio_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_27)
(typeattributeset base_typeattr_27 (and (hal_bootctl_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_26)
(typeattributeset base_typeattr_26 (and (hal_bootctl_server ) (not (hal_bootctl ))))
(typeattribute base_typeattr_25)
(typeattributeset base_typeattr_25 (and (hal_bootctl_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_24)
(typeattributeset base_typeattr_24 (and (hal_bluetooth_lpp_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_23)
(typeattributeset base_typeattr_23 (and (hal_bluetooth_lpp_server ) (not (hal_bluetooth_lpp ))))
(typeattribute base_typeattr_22)
(typeattributeset base_typeattr_22 (and (hal_bluetooth_lpp_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_21)
(typeattributeset base_typeattr_21 (and (hal_bluetooth_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_20)
(typeattributeset base_typeattr_20 (and (hal_bluetooth_server ) (not (hal_bluetooth ))))
(typeattribute base_typeattr_19)
(typeattributeset base_typeattr_19 (and (hal_bluetooth_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_18)
(typeattributeset base_typeattr_18 (and (hal_authsecret_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_17)
(typeattributeset base_typeattr_17 (and (hal_authsecret_server ) (not (hal_authsecret ))))
(typeattribute base_typeattr_16)
(typeattributeset base_typeattr_16 (and (hal_authsecret_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_15)
(typeattributeset base_typeattr_15 (and (hal_authgraph_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_14)
(typeattributeset base_typeattr_14 (and (hal_authgraph_server ) (not (hal_authgraph ))))
(typeattribute base_typeattr_13)
(typeattributeset base_typeattr_13 (and (hal_authgraph_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_12)
(typeattributeset base_typeattr_12 (and (hal_audiocontrol_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_11)
(typeattributeset base_typeattr_11 (and (hal_audiocontrol_server ) (not (hal_audiocontrol ))))
(typeattribute base_typeattr_10)
(typeattributeset base_typeattr_10 (and (hal_audiocontrol_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_9)
(typeattributeset base_typeattr_9 (and (hal_audio_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_8)
(typeattributeset base_typeattr_8 (and (hal_audio_server ) (not (hal_audio ))))
(typeattribute base_typeattr_7)
(typeattributeset base_typeattr_7 (and (hal_audio_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_6)
(typeattributeset base_typeattr_6 (and (hal_atrace_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_5)
(typeattributeset base_typeattr_5 (and (hal_atrace_server ) (not (hal_atrace ))))
(typeattribute base_typeattr_4)
(typeattributeset base_typeattr_4 (and (hal_atrace_server ) (not (halserverdomain ))))
(typeattribute base_typeattr_3)
(typeattributeset base_typeattr_3 (and (hal_allocator_client ) (not (halclientdomain ))))
(typeattribute base_typeattr_2)
(typeattributeset base_typeattr_2 (and (hal_allocator_server ) (not (hal_allocator ))))
(typeattribute base_typeattr_1)
(typeattributeset base_typeattr_1 (and (hal_allocator_server ) (not (halserverdomain ))))
; THIS IS A WORKAROUND for the current limitations of the module policy language
; This should be used sparingly until we figure out a saner way to achieve the
; stuff below, for example, by improving typeattribute statement of module
; language.
;
; NOTE: This file has no effect on recovery policy.

; Apps, except isolated apps, are clients of Allocator HAL
; Unfortunately, we can't currently express this in module policy language:
;     typeattribute { appdomain -isolated_app_all } hal_allocator_client;
;     typeattribute hal_allocator_client halclientdomain;
(typeattributeset hal_allocator_client ((and (appdomain) ((not (isolated_app_all))))))
(typeattributeset halclientdomain (hal_allocator_client))

; Apps, except isolated apps, are clients of OMX-related services
; Unfortunately, we can't currently express this in module policy language:
(typeattributeset hal_omx_client ((and (appdomain) ((not (isolated_app))))))

; Apps, except isolated apps, are clients of Codec2-related services
; Unfortunately, we can't currently express this in module policy language:
(typeattributeset hal_codec2_client ((and (appdomain) ((not (isolated_app))))))

; Apps, except isolated apps and SDK sandboxes, are clients of Drm-related services
; Unfortunately, we can't currently express this in module policy language:
(typeattributeset hal_drm_client ((and (appdomain) ((not (or (isolated_app_all) (sdk_sandbox_all)))))))

; Apps, except isolated apps, are clients of Configstore HAL
; Unfortunately, we can't currently express this in module policy language:
;     typeattribute { appdomain -isolated_app_all } hal_configstore_client;
(typeattributeset hal_configstore_client ((and (appdomain) ((not (isolated_app_all))))))

; Apps, except isolated apps, are clients of Graphics Allocator HAL
; Unfortunately, we can't currently express this in module policy language:
;     typeattribute { appdomain -isolated_app } hal_graphics_allocator_client;
(typeattributeset hal_graphics_allocator_client ((and (appdomain) ((not (isolated_app))))))

; Apps, except isolated apps, are clients of Cas HAL
; Unfortunately, we can't currently express this in module policy language:
;     typeattribute { appdomain -isolated_app_all } hal_cas_client;
(typeattributeset hal_cas_client ((and (appdomain) ((not (isolated_app_all))))))

; Domains hosting Camera HAL implementations are clients of Allocator HAL
; Unfortunately, we can't currently express this in module policy language:
;     typeattribute hal_camera hal_allocator_client;
(typeattributeset hal_allocator_client (hal_camera))

; Apps, except isolated apps, are clients of Neuralnetworks HAL
; Unfortunately, we can't currently express this in module policy language:
;     typeattribute { appdomain -isolated_app_all } hal_neuralnetworks_client;
(typeattributeset hal_neuralnetworks_client ((and (appdomain) ((not (isolated_app))))))

; TODO(b/112056006): move these to mapping files when/if we implement 'versioned' attributes.
; Rename untrusted_app_visible_* to untrusted_app_visible_*_violators.
; Unfortunately, we can't currently express this in module policy language:
;     typeattribute untrusted_app_visible_hwservice untrusted_app_visible_hwservice_violators;
;     typeattribute untrusted_app_visible_halserver untrusted_app_visible_halserver_violators;
(typeattribute untrusted_app_visible_hwservice)
(typeattributeset untrusted_app_visible_hwservice_violators (untrusted_app_visible_hwservice))
(typeattribute untrusted_app_visible_halserver)
(typeattributeset untrusted_app_visible_halserver_violators (untrusted_app_visible_halserver))

; Properties having both system_property_type and vendor_property_type are illegal
; Unfortunately, we can't currently express this in module policy language:
;     typeattribute { system_property_type && vendor_property_type } system_and_vendor_property_type;
(typeattribute system_and_vendor_property_type)
(typeattributeset system_and_vendor_property_type ((and (system_property_type) (vendor_property_type))))

; Apps, except isolated apps, are clients of OpenGL / Vulkan SPHAL
; Unfortunately, we can't currently express this in module policy language:
;     typeattribute { appdomain -isolated_app } gpu_sphal_domain;
(typeattributeset gpu_sphal_domain ((and (appdomain) ((not (isolated_app))))))

; Graphics and NN HALs are clients of OpenGL / Vulkan SPHAL
; Unfortunately, we can't currently express this in module policy language:
;     typeattribute hal_grpahics_allocator gpu_sphal_domain;
;     ...
(typeattributeset gpu_sphal_domain (hal_graphics_allocator))
(typeattributeset gpu_sphal_domain (hal_graphics_composer))
(typeattributeset gpu_sphal_domain (hal_neuralnetworks))