(typeattributeset domain (adbd aidl_lazy_test_server apexd app_zygote artd atrace audioserver blkid blkid_untrusted bluetooth bootanim bootstat bpfloader bufferhubd cameraserver charger charger_vendor crash_dump credstore crosvm dhcp dnsmasq drmserver dumpstate e2fs early_virtmgr ephemeral_app evsmanagerd extra_free_kbytes fastbootd fingerprintd flags_health_check fsck fsck_untrusted gatekeeperd gmscore_app gpuservice healthd heapprofd hwservicemanager idmap incident incident_helper incidentd init inputflinger installd isolated_app isolated_compute_app kernel keystore llkd lmkd logd logpersist mdnsd mediadrmserver mediaextractor mediametrics mediaprovider mediaserver mediaswcodec mediatranscoding modprobe mtp netd netutils_wrapper network_stack nfc perfetto performanced platform_app postinstall ppp priv_app prng_seeder profman radio recovery recovery_persist recovery_refresh rkpdapp rs rss_hwm_reset runas runas_app sdcardd secure_element servicemanager sgdisk shared_relro shell simpleperf simpleperf_app_runner slideshow statsd su surfaceflinger system_app system_server tee tombstoned toolbox traced traced_perf traced_probes traceur_app ueventd uncrypt untrusted_app untrusted_app_32 untrusted_app_30 untrusted_app_29 untrusted_app_27 untrusted_app_25 update_engine update_verifier usbd vdc vendor_init vendor_misc_writer vendor_modprobe vendor_shell virtual_camera virtual_touchpad virtualizationmanager vndservicemanager vold vold_prepare_subdirs watchdogd webview_zygote wificond zygote aconfigd aconfigd_mainline adbd_tradeinmode adservices apex_test_prepostinstall apexd_derive_classpath art_boot art_exec auditctl automotive_display_service bert_collector blank_screen boringssl_self_test vendor_boringssl_self_test canhalconfigurator clatd compos_fd_server compos_verify composd cppreopts derive_classpath derive_sdk device_as_webcam dex2oat dexopt_chroot_setup dmesgd fuseblkd fuseblkd_untrusted fwk_bufferhub gki_apex_prepostinstall gsid hal_allocator_default hal_keymint_system hal_widevine_system hidl_lazy_test_server init_dev_config iw kcmdlinectrl linkerconfig linux_vm_setup lpdumpd mediaprovider_app mediatuner memcgv2_activation_depth migrate_legacy_obb_data misctrl mm_events mmd mtectrl odrefresh odsign omapi ot_ctl ot_daemon overlay_remounter permissioncontroller_app prefetch preloads_copy preopt2cachename profcollectd remount rkp_cert_processor rkpd sdk_sandbox_34 sdk_sandbox_audit sdk_sandbox_next simpleperf_boot snapshotctl snapuserd stats storaged system_server_startup system_suspend trace_redactor tradeinmode uprobestats userdata_alias_remove vehicle_binding_util vfio_handler virtual_face virtual_fingerprint virtualizationservice vmlauncher_app vmnic vzwomatrigger_app wait_for_keymaster wifi_mainline_supplicant zygote_next brownout_detection_app edgetpu_app_server rilextensionservice_app turbo_adapter pixelsystemservice_app dcservice_app bluetooth_gci con_monitor_app grilservice_app pixeldisplayservice_app pixelntnservice_app systemui_app vendor_rcs_app vendor_satellite_service gs_watchdogd factory_ota_app hal_audio_parameter_parser flipendo flag_flipper_app repair_mode_app connectivity_thermal_power_manager vendor_rcs_service_app ))
(typeattributeset file_type (adbd_exec aidl_lazy_test_server_exec apexd_exec appdomain_tmpfs app_zygote_tmpfs audioserver_tmpfs bootanim_exec bootstat_exec bufferhubd_exec cameraserver_exec cameraserver_tmpfs charger_exec crash_dump_exec credstore_exec dhcp_exec dnsmasq_exec drmserver_exec drmserver_socket dumpstate_exec e2fs_exec early_virtmgr_exec extra_free_kbytes_exec unlabeled system_file system_asan_options_file system_event_log_tags_file system_lib_file system_bootstrap_lib_file system_group_file system_linker_exec system_linker_config_file system_passwd_file system_seccomp_policy_file system_security_cacerts_file tcpdump_exec system_zoneinfo_file cgroup_desc_file vendor_cgroup_desc_file task_profiles_file vendor_task_profiles_file art_apex_dir linkerconfig_file incremental_control_file bootanim_oem_file vendor_hal_file vendor_file vendor_app_file vendor_configs_file same_process_hal_file vndk_sp_file vendor_framework_file vendor_overlay_file vendor_public_lib_file vendor_public_framework_file vendor_microdroid_file vendor_boot_ota_file vendor_keylayout_file vendor_keychars_file vendor_idc_file vendor_uuid_mapping_config_file vendor_vm_file vendor_vm_data_file metadata_file vold_metadata_file gsi_metadata_file gsi_public_metadata_file password_slot_metadata_file apex_metadata_file ota_metadata_file metadata_bootstat_file userspace_reboot_metadata_file staged_install_file watchdog_metadata_file repair_mode_metadata_file aconfig_storage_metadata_file aconfig_storage_flags_metadata_file dev_cpu_variant runtime_event_log_tags_file logcat_exec cgroup_rc_file coredump_file system_data_root_file system_data_file system_userdir_file packages_list_file game_mode_intervention_list_file vendor_data_file vendor_userdir_file unencrypted_data_file install_data_file drm_data_file adb_data_file anr_data_file tombstone_data_file tombstone_wifi_data_file apex_data_file apk_data_file apk_tmp_file apk_private_data_file apk_private_tmp_file dalvikcache_data_file ota_data_file ota_package_file user_profile_root_file user_profile_data_file profman_dump_data_file prereboot_data_file resourcecache_data_file shell_data_file property_data_file bootchart_data_file dropbox_data_file heapdump_data_file nativetest_data_file shell_test_data_file ringtone_file preloads_data_file preloads_media_file dhcp_data_file server_configurable_flags_data_file staging_data_file vendor_apex_file vendor_apex_metadata_file shutdown_checkpoints_system_data_file mnt_media_rw_file mnt_user_file mnt_pass_through_file mnt_expand_file mnt_sdcard_file storage_file mnt_media_rw_stub_file storage_stub_file mnt_vendor_file mnt_product_file apex_mnt_dir apex_info_file postinstall_mnt_dir postinstall_file postinstall_apex_mnt_dir mirror_data_file adb_keys_file apex_system_server_data_file apex_module_data_file apex_ota_reserved_file apex_rollback_data_file appcompat_data_file audio_data_file audioserver_data_file bluetooth_data_file bluetooth_logs_data_file bootstat_data_file boottrace_data_file camera_data_file credstore_data_file gatekeeper_data_file incident_data_file keychain_data_file keystore_data_file media_data_file media_rw_data_file media_userdir_file misc_user_data_file net_data_file network_watchlist_data_file nfc_data_file nfc_logs_data_file radio_data_file recovery_data_file shared_relro_file snapshotctl_log_data_file stats_config_data_file stats_data_file systemkeys_data_file textclassifier_data_file trace_data_file vpn_data_file wifi_data_file vold_data_file tee_data_file update_engine_data_file update_engine_log_data_file snapuserd_log_data_file method_trace_data_file gsi_data_file radio_core_data_file app_data_file privapp_data_file system_app_data_file cache_file overlayfs_file cache_backup_file cache_private_backup_file cache_recovery_file efs_file wallpaper_file shortcut_manager_icons icon_file asec_apk_file asec_public_file asec_image_file backup_data_file bluetooth_efs_file fingerprintd_data_file fingerprint_vendor_data_file app_fuse_file face_vendor_data_file iris_vendor_data_file adbd_socket bluetooth_socket dnsproxyd_socket dumpstate_socket fwmarkd_socket lmkd_socket logd_socket logdr_socket logdw_socket mdns_socket mdnsd_socket misc_logd_file mtpd_socket ot_daemon_socket property_socket racoon_socket recovery_socket rild_socket rild_debug_socket snapuserd_socket snapuserd_proxy_socket statsdw_socket system_wpa_socket system_ndebug_socket system_unsolzygote_socket tombstoned_crash_socket tombstoned_java_trace_socket tombstoned_intercept_socket traced_consumer_socket traced_perf_socket traced_producer_socket uncrypt_socket wpa_socket zygote_socket heapprofd_socket gps_control pdx_display_dir pdx_performance_dir pdx_bufferhub_dir pdx_display_client_endpoint_socket pdx_display_manager_endpoint_socket pdx_display_screenshot_endpoint_socket pdx_display_vsync_endpoint_socket pdx_performance_client_endpoint_socket pdx_bufferhub_client_endpoint_socket file_contexts_file mac_perms_file property_contexts_file seapp_contexts_file sepolicy_file service_contexts_file keystore2_key_contexts_file vendor_service_contexts_file hwservice_contexts_file vndservice_contexts_file vendor_kernel_modules system_dlkm_file audiohal_data_file tee_service_contexts_file fingerprintd_exec flags_health_check_exec fsck_exec gatekeeperd_exec hal_graphics_composer_server_tmpfs hwservicemanager_exec idmap_exec init_exec init_tmpfs inputflinger_exec installd_exec keystore_exec llkd_exec lmkd_exec logd_exec mediadrmserver_exec mediaextractor_exec mediaextractor_tmpfs mediametrics_exec mediaserver_exec mediaserver_tmpfs mediaswcodec_exec netd_exec netutils_wrapper_exec performanced_exec profman_exec recovery_persist_exec recovery_refresh_exec rs_exec runas_exec sdcardd_exec servicemanager_exec sgdisk_exec shell_exec simpleperf_app_runner_exec statsd_exec su_exec surfaceflinger_tmpfs system_server_tmpfs tombstoned_exec toolbox_exec traced_tmpfs ueventd_tmpfs uncrypt_exec update_engine_exec update_verifier_exec usbd_exec vdc_exec vendor_misc_writer_exec vendor_shell_exec vendor_toolbox_exec virtual_camera_exec virtual_touchpad_exec virtualizationmanager_exec vold_exec vold_prepare_subdirs_exec watchdogd_exec webview_zygote_exec webview_zygote_tmpfs wificond_exec zygote_tmpfs zygote_exec aconfigd_exec aconfigd_mainline_exec apex_test_prepostinstall_exec art_boot_exec art_exec_exec artd_exec artd_tmpfs atrace_exec audioserver_exec auditctl_exec automotive_display_service_exec bert_collector_exec blank_screen_exec blkid_exec boringssl_self_test_exec vendor_boringssl_self_test_exec boringssl_self_test_marker bpfloader_exec bpfloader_platform_exec canhalconfigurator_exec clatd_exec compos_verify_exec composd_exec cppreopts_exec crosvm_exec crosvm_tmpfs derive_classpath_exec derive_sdk_exec dex2oat_exec dexopt_chroot_setup_exec dexopt_chroot_setup_tmpfs dexoptanalyzer_exec dmesgd_exec dumpstate_tmpfs evsmanagerd_exec mediadrm_system_data_file storaged_data_file wm_trace_data_file accessibility_trace_data_file perfetto_traces_data_file perfetto_traces_bugreport_data_file perfetto_traces_profiling_data_file perfetto_configs_data_file system_perfetto_config_file uprobestats_configs_data_file oatdump_exec sdk_sandbox_system_data_file sdk_sandbox_data_file app_exec_data_file rollback_data_file checkin_data_file ota_image_data_file gsi_persistent_data_file emergency_data_file profcollectd_data_file apex_art_data_file apex_art_staging_data_file apex_compos_data_file apex_virt_data_file apex_tethering_data_file apex_uwb_data_file apex_appsearch_data_file apex_permission_data_file apex_scheduling_data_file apex_wifi_data_file appsearch_data_file font_data_file dmesgd_data_file odrefresh_data_file odsign_data_file odsign_metrics_file virtualizationservice_data_file vm_data_file environ_system_data_file bootanim_data_file surfaceflinger_data_file fd_server_exec compos_exec compos_key_helper_exec prng_seeder_socket system_font_fallback_file aconfigd_socket aconfigd_mainline_socket system_aconfig_storage_file gatekeeper_vendor_data_file vendor_aconfig_storage_file connectivityblob_data_file mainline_supplicant_data_file pre_reboot_dexopt_file pre_reboot_dexopt_artd_file apk_metadata_file pbtombstone_exec storage_area_app_dir storage_area_dir storage_area_content_file storage_area_key_file tradeinmode_metadata_file prefetch_metadata_file libprocessgroup_metadata_file exp_partition_data_file statsd_atoms_list_file ashmem_compat_memfd ashmem_compat_memfd_context_file zygote_next_socket fuseblkd_exec fuseblkd_untrusted_exec fwk_bufferhub_exec gki_apex_prepostinstall_exec gpuservice_exec gsid_exec hal_allocator_default_exec hal_keymint_system_exec hal_widevine_system_exec heapprofd_exec heapprofd_tmpfs hidl_lazy_test_server_exec incident_exec incident_helper_exec incidentd_exec init_dev_config_exec iw_exec kcmdlinectrl_exec linkerconfig_exec linux_vm_setup_exec lpdumpd_exec mdnsd_exec mediatranscoding_exec mediatranscoding_tmpfs mediatuner_exec memcgv2_activation_depth_exec migrate_legacy_obb_data_exec misctrl_exec mm_events_exec mmd_exec mtectrl_exec odrefresh_exec odsign_exec omapi_exec ot_ctl_exec ot_daemon_exec overlay_remounter_exec perfetto_exec perfetto_tmpfs postinstall_exec prefetch_exec preloads_copy_exec preopt2cachename_exec prng_seeder_exec profcollectd_exec remount_exec rkp_cert_processor_exec rkpd_exec rss_hwm_reset_exec serialservice_exec simpleperf_exec simpleperf_boot_data_file snapshotctl_exec snapuserd_exec stats_exec storaged_exec surfaceflinger_exec system_server_startup_tmpfs system_suspend_exec trace_redactor_exec traced_exec traced_perf_exec traced_probes_exec traced_probes_tmpfs tradeinmode_exec uprobestats_exec userdata_alias_remove_exec vehicle_binding_util_exec vfio_handler_exec virtual_face_exec virtual_fingerprint_exec virtualizationservice_exec vmnic_exec wait_for_keymaster_exec wifi_mainline_supplicant_exec zygote_next_exec bluetooth_gci_exec gs_watchdogd_exec hal_audio_parameter_parser_exec edgetpu_app_server_exec repair_mode_metadata_config_file ))
(typeattributeset exec_type (adbd_exec aidl_lazy_test_server_exec apexd_exec bootanim_exec bootstat_exec bufferhubd_exec cameraserver_exec charger_exec crash_dump_exec credstore_exec dhcp_exec dnsmasq_exec drmserver_exec dumpstate_exec e2fs_exec early_virtmgr_exec extra_free_kbytes_exec tcpdump_exec logcat_exec fingerprintd_exec flags_health_check_exec fsck_exec gatekeeperd_exec hwservicemanager_exec idmap_exec init_exec inputflinger_exec installd_exec keystore_exec llkd_exec lmkd_exec logd_exec mediadrmserver_exec mediaextractor_exec mediametrics_exec mediaserver_exec mediaswcodec_exec netd_exec netutils_wrapper_exec performanced_exec profman_exec recovery_persist_exec recovery_refresh_exec rs_exec runas_exec sdcardd_exec servicemanager_exec sgdisk_exec shell_exec simpleperf_app_runner_exec statsd_exec su_exec tombstoned_exec toolbox_exec uncrypt_exec update_engine_exec update_verifier_exec usbd_exec vdc_exec vendor_misc_writer_exec vendor_shell_exec vendor_toolbox_exec virtual_camera_exec virtual_touchpad_exec virtualizationmanager_exec vold_exec vold_prepare_subdirs_exec watchdogd_exec webview_zygote_exec wificond_exec zygote_exec aconfigd_exec aconfigd_mainline_exec apex_test_prepostinstall_exec art_boot_exec art_exec_exec artd_exec atrace_exec audioserver_exec auditctl_exec automotive_display_service_exec bert_collector_exec blank_screen_exec blkid_exec boringssl_self_test_exec vendor_boringssl_self_test_exec bpfloader_exec bpfloader_platform_exec canhalconfigurator_exec clatd_exec compos_verify_exec composd_exec cppreopts_exec crosvm_exec derive_classpath_exec derive_sdk_exec dex2oat_exec dexopt_chroot_setup_exec dexoptanalyzer_exec dmesgd_exec evsmanagerd_exec oatdump_exec fd_server_exec compos_exec compos_key_helper_exec pbtombstone_exec fuseblkd_exec fuseblkd_untrusted_exec fwk_bufferhub_exec gki_apex_prepostinstall_exec gpuservice_exec gsid_exec hal_allocator_default_exec hal_keymint_system_exec hal_widevine_system_exec heapprofd_exec hidl_lazy_test_server_exec incident_exec incident_helper_exec incidentd_exec init_dev_config_exec iw_exec kcmdlinectrl_exec linkerconfig_exec linux_vm_setup_exec lpdumpd_exec mdnsd_exec mediatranscoding_exec mediatuner_exec memcgv2_activation_depth_exec migrate_legacy_obb_data_exec misctrl_exec mm_events_exec mmd_exec mtectrl_exec odrefresh_exec odsign_exec omapi_exec ot_ctl_exec ot_daemon_exec overlay_remounter_exec perfetto_exec postinstall_exec prefetch_exec preloads_copy_exec preopt2cachename_exec prng_seeder_exec profcollectd_exec remount_exec rkp_cert_processor_exec rkpd_exec rss_hwm_reset_exec serialservice_exec simpleperf_exec snapshotctl_exec snapuserd_exec stats_exec storaged_exec surfaceflinger_exec system_suspend_exec trace_redactor_exec traced_exec traced_perf_exec traced_probes_exec tradeinmode_exec uprobestats_exec userdata_alias_remove_exec vehicle_binding_util_exec vfio_handler_exec virtual_face_exec virtual_fingerprint_exec virtualizationservice_exec vmnic_exec wait_for_keymaster_exec wifi_mainline_supplicant_exec zygote_next_exec bluetooth_gci_exec gs_watchdogd_exec hal_audio_parameter_parser_exec edgetpu_app_server_exec ))
(typeattributeset system_file_type (adbd_exec aidl_lazy_test_server_exec apexd_exec bootanim_exec bootstat_exec bufferhubd_exec cameraserver_exec charger_exec crash_dump_exec credstore_exec dhcp_exec dnsmasq_exec drmserver_exec dumpstate_exec e2fs_exec early_virtmgr_exec extra_free_kbytes_exec system_file system_asan_options_file system_event_log_tags_file system_lib_file system_bootstrap_lib_file system_group_file system_linker_exec system_linker_config_file system_passwd_file system_seccomp_policy_file system_security_cacerts_file tcpdump_exec system_zoneinfo_file cgroup_desc_file task_profiles_file art_apex_dir bootanim_oem_file logcat_exec file_contexts_file mac_perms_file property_contexts_file seapp_contexts_file sepolicy_file service_contexts_file keystore2_key_contexts_file hwservice_contexts_file tee_service_contexts_file fingerprintd_exec flags_health_check_exec fsck_exec gatekeeperd_exec hwservicemanager_exec idmap_exec init_exec inputflinger_exec installd_exec keystore_exec llkd_exec lmkd_exec logd_exec mediadrmserver_exec mediaextractor_exec mediametrics_exec mediaserver_exec mediaswcodec_exec netd_exec netutils_wrapper_exec performanced_exec profman_exec recovery_persist_exec recovery_refresh_exec rs_exec runas_exec sdcardd_exec servicemanager_exec sgdisk_exec shell_exec simpleperf_app_runner_exec statsd_exec su_exec tombstoned_exec toolbox_exec uncrypt_exec update_engine_exec update_verifier_exec usbd_exec vdc_exec virtual_camera_exec virtual_touchpad_exec virtualizationmanager_exec vold_exec vold_prepare_subdirs_exec watchdogd_exec wificond_exec zygote_exec aconfigd_exec aconfigd_mainline_exec apex_test_prepostinstall_exec art_boot_exec art_exec_exec artd_exec atrace_exec audioserver_exec auditctl_exec automotive_display_service_exec bert_collector_exec blank_screen_exec blkid_exec boringssl_self_test_exec bpfloader_exec bpfloader_platform_exec canhalconfigurator_exec clatd_exec compos_verify_exec composd_exec cppreopts_exec crosvm_exec derive_classpath_exec derive_sdk_exec dex2oat_exec dexopt_chroot_setup_exec dexoptanalyzer_exec dmesgd_exec evsmanagerd_exec system_perfetto_config_file oatdump_exec fd_server_exec compos_exec compos_key_helper_exec system_font_fallback_file system_aconfig_storage_file pbtombstone_exec ashmem_compat_memfd_context_file fuseblkd_exec fuseblkd_untrusted_exec fwk_bufferhub_exec gki_apex_prepostinstall_exec gpuservice_exec gsid_exec hal_allocator_default_exec hal_keymint_system_exec hal_widevine_system_exec heapprofd_exec hidl_lazy_test_server_exec incident_exec incident_helper_exec incidentd_exec iw_exec kcmdlinectrl_exec linkerconfig_exec linux_vm_setup_exec lpdumpd_exec mdnsd_exec mediatranscoding_exec mediatuner_exec memcgv2_activation_depth_exec migrate_legacy_obb_data_exec misctrl_exec mm_events_exec mmd_exec mtectrl_exec odrefresh_exec odsign_exec omapi_exec ot_ctl_exec ot_daemon_exec overlay_remounter_exec perfetto_exec postinstall_exec prefetch_exec preloads_copy_exec preopt2cachename_exec prng_seeder_exec profcollectd_exec remount_exec rkp_cert_processor_exec rkpd_exec rss_hwm_reset_exec serialservice_exec simpleperf_exec snapshotctl_exec snapuserd_exec stats_exec storaged_exec surfaceflinger_exec system_suspend_exec trace_redactor_exec traced_exec traced_perf_exec traced_probes_exec tradeinmode_exec uprobestats_exec userdata_alias_remove_exec vehicle_binding_util_exec vfio_handler_exec virtual_face_exec virtual_fingerprint_exec virtualizationservice_exec vmnic_exec wait_for_keymaster_exec wifi_mainline_supplicant_exec zygote_next_exec bluetooth_gci_exec gs_watchdogd_exec hal_audio_parameter_parser_exec edgetpu_app_server_exec ))
(typeattributeset property_type (apexd_prop bootloader_boot_reason_prop device_config_activity_manager_native_boot_prop device_config_boot_count_prop device_config_input_native_boot_prop device_config_netd_native_prop device_config_reset_performed_prop firstboot_prop boottime_prop charger_prop cold_boot_done_prop ctl_adbd_prop ctl_apexd_prop ctl_bootanim_prop ctl_bugreport_prop ctl_console_prop ctl_dumpstate_prop ctl_fuse_prop ctl_gsid_prop ctl_interface_restart_prop ctl_interface_stop_prop ctl_mdnsd_prop ctl_restart_prop ctl_rildaemon_prop ctl_sigstop_prop dynamic_system_prop heapprofd_enabled_prop llkd_prop lpdumpd_prop mmc_prop mock_ota_prop net_dns_prop overlay_prop persistent_properties_ready_prop safemode_prop system_lmk_prop system_trace_prop test_boot_reason_prop time_prop traced_enabled_prop traced_lazy_prop aac_drc_prop adaptive_haptics_prop apex_ready_prop arm64_memtag_prop binder_cache_bluetooth_server_prop binder_cache_system_server_prop binder_cache_telephony_server_prop boot_status_prop bootanim_system_prop bootloader_prop boottime_public_prop bq_config_prop build_bootimage_prop build_prop composd_vm_art_prop device_config_aconfig_flags_prop device_config_camera_native_prop device_config_edgetpu_native_prop device_config_media_native_prop device_config_nnapi_native_prop device_config_runtime_native_boot_prop device_config_runtime_native_prop device_config_surface_flinger_native_boot_prop device_config_vendor_system_native_prop device_config_vendor_system_native_boot_prop drm_forcel3_prop enable_16k_pages_prop fingerprint_prop gwp_asan_prop hal_instrumentation_prop userdebug_or_eng_prop init_service_status_prop libc_debug_prop module_sdkextensions_prop nnapi_ext_deny_product_prop persist_wm_debug_prop power_debug_prop profcollectd_etr_prop property_service_version_prop provisioned_prop restorecon_prop retaildemo_prop servicemanager_prop smart_idle_maint_enabled_prop socket_hook_prop sqlite_log_prop surfaceflinger_display_prop system_boot_reason_prop system_jvmti_agent_prop traced_oome_heap_session_count_prop ab_update_gki_prop usb_prop userspace_reboot_exported_prop vold_status_prop vts_status_prop config_prop cppreopt_prop dalvik_prop debuggerd_prop device_logging_prop dhcp_prop dumpstate_prop exported3_system_prop exported_dumpstate_prop exported_secure_prop heapprofd_prop net_radio_prop pan_result_prop persist_debug_prop shell_prop test_harness_prop theme_prop use_memfd_prop vold_prop apexd_config_prop aaudio_config_prop apk_verity_prop audio_config_prop bootanim_config_prop bluetooth_config_prop build_attestation_prop build_config_prop build_odm_prop build_vendor_prop camera_calibration_prop camera_config_prop camera2_extensions_prop camerax_extensions_prop charger_config_prop codec2_config_prop composd_vm_vendor_prop cpu_variant_prop debugfs_restriction_prop drm_config_prop drm_service_config_prop exported_camera_prop exported_config_prop exported_default_prop ffs_config_prop framework_watchdog_config_prop graphics_config_prop hdmi_config_prop hw_timeout_multiplier_prop hypervisor_prop hypervisor_restricted_prop incremental_prop input_device_config_prop keyguard_config_prop keystore_config_prop lmkd_config_prop media_config_prop mediadrm_config_prop mm_events_config_prop oem_unlock_prop ota_build_prop packagemanager_config_prop quick_start_prop recovery_config_prop recovery_usb_config_prop sendbug_config_prop soc_prop storage_config_prop storagemanager_config_prop surfaceflinger_prop suspend_prop systemsound_config_prop telephony_config_prop threadnetwork_config_prop tombstone_config_prop usb_config_prop userspace_reboot_config_prop vehicle_hal_prop vendor_security_patch_level_prop vendor_socket_hook_prop virtual_ab_prop vndk_prop vts_config_prop vold_config_prop wifi_config_prop zram_config_prop zygote_config_prop dck_prop tuner_config_prop usb_uvc_enabled_prop setupwizard_mode_prop pm_archiving_enabled_prop trusty_security_vm_sys_vendor_prop adbd_config_prop audio_prop bluetooth_a2dp_offload_prop bluetooth_audio_hal_prop bluetooth_finder_prop bluetooth_prop bpf_progs_loaded_prop charger_status_prop ctl_default_prop ctl_interface_start_prop ctl_start_prop ctl_stop_prop dalvik_config_prop dalvik_dynamic_config_prop dalvik_runtime_prop debug_prop device_config_memory_safety_native_boot_prop device_config_memory_safety_native_prop dumpstate_options_prop exported_system_prop exported_bluetooth_prop exported_overlay_prop exported_pm_prop future_pm_prop ffs_control_prop framework_status_prop gesture_prop graphics_config_writable_prop hal_dumpstate_config_prop sota_prop hwservicemanager_prop lmkd_prop locale_prop logd_prop logpersistd_logging_prop log_prop log_tag_prop lowpan_prop media_variant_prop nfc_prop ota_prop permissive_mte_prop powerctl_prop qemu_hw_prop qemu_sf_lcd_density_prop radio_control_prop radio_prop serialno_prop surfaceflinger_color_prop system_prop system_user_mode_emulation_prop telephony_status_prop timezone_prop usb_control_prop vold_post_fs_data_prop wifi_hal_prop wifi_log_prop wifi_prop zram_control_prop default_prop rebootescrow_hal_prop virtual_face_hal_prop virtual_face_prop virtual_fingerprint_hal_prop virtual_fingerprint_prop persist_vendor_debug_wifi_prop apexd_select_prop vendor_default_prop adbd_prop adbd_tradeinmode_prop apexd_payload_metadata_prop apexd_private_prop appsearch_vm_prop bluetooth_lea_prop ctl_snapuserd_prop ctl_prefetch_prop ctl_uprobestats_prop crashrecovery_prop debug_tracing_desktop_mode_visible_tasks_prop device_config_core_experiments_team_internal_prop device_config_lmkd_native_prop device_config_mglru_native_prop device_config_mmd_native_prop device_config_profcollect_native_boot_prop device_config_remote_key_provisioning_native_prop device_config_statsd_native_prop device_config_statsd_native_boot_prop device_config_storage_native_boot_prop device_config_sys_traced_prop device_config_window_manager_native_boot_prop device_config_configuration_prop device_config_connectivity_prop device_config_swcodec_native_prop device_config_tethering_u_or_later_native_prop dmesgd_start_prop fastbootd_protocol_prop gsid_prop hsum_boot_strategy_prop init_mnt_ns_prop init_perf_lsm_hooks_prop init_service_status_private_prop init_storage_prop init_svc_debug_prop kcmdline_prop keystore_diagnostics_prop keystore_listen_prop last_boot_reason_prop localization_prop logd_auditrate_prop lower_kptr_restrict_prop mmd_status_prop net_464xlat_fromvendor_prop net_connectivity_prop netd_stable_secret_prop next_boot_prop odsign_prop misctrl_prop perf_drop_caches_prop pm_prop prefetch_service_prop profcollectd_enabled_prop profcollectd_node_id_prop radio_cdma_ecm_prop remote_prov_cert_prop rollback_test_prop setupwizard_prop snapshotctl_prop snapuserd_prop system_adbd_prop system_audio_config_prop timezone_metadata_prop traced_config_prop traced_perf_enabled_prop traced_relay_relay_port_prop uprobestats_start_with_config_prop tuner_server_ctl_prop userspace_reboot_log_prop userspace_reboot_test_prop verity_status_prop zygote_wrap_prop ctl_mediatranscoding_prop ctl_odsign_prop virtualizationservice_prop ctl_apex_load_prop sensors_config_prop hypervisor_pvmfw_prop hypervisor_virtualizationmanager_prop game_manager_config_prop hidl_memory_prop suspend_debug_prop system_service_enable_prop ctl_artd_pre_reboot_prop trusty_security_vm_sys_prop trusty_widevine_vm_sys_prop hint_manager_config_prop avf_vm_traced_relay_enabled_prop binder_cache_adservices_server_prop bionic_linker_16kb_app_compat_prop device_config_virtualization_framework_native_prop fstype_prop log_file_logger_prop mmd_shared_status_prop native_binder_stats_prop persist_sysui_builder_extras_prop persist_sysui_ranking_update_prop page_size_prop pm_16kb_app_compat_prop remote_prov_prop service_sf_present_timestamp_prop statsd_atoms_list_version_prop trusty_coverage_prop arm64_memtag_bootctl_prop avf_virtualizationservice_prop high_barometer_quality_prop mmd_prop mmd_shared_prop prefetch_boot_prop sensors_hal_prop usb_disable_when_locked_prop userdata_alias_remove_prop wallet_prop setupwizard_feature_prop telephony_ril_prop telephony_modem_prop telephony_modemtype_prop telephony_ntn_demo_mode_prop deprecated_soc_prop repair_mode_init_prop pixelsystemservice_contextualawareness_prop vendor_sysuig_prop ))
(typeattributeset system_property_type (apexd_prop bootloader_boot_reason_prop device_config_activity_manager_native_boot_prop device_config_boot_count_prop device_config_input_native_boot_prop device_config_netd_native_prop device_config_reset_performed_prop firstboot_prop boottime_prop charger_prop cold_boot_done_prop ctl_adbd_prop ctl_apexd_prop ctl_bootanim_prop ctl_bugreport_prop ctl_console_prop ctl_dumpstate_prop ctl_fuse_prop ctl_gsid_prop ctl_interface_restart_prop ctl_interface_stop_prop ctl_mdnsd_prop ctl_restart_prop ctl_rildaemon_prop ctl_sigstop_prop dynamic_system_prop heapprofd_enabled_prop llkd_prop lpdumpd_prop mmc_prop mock_ota_prop net_dns_prop overlay_prop persistent_properties_ready_prop safemode_prop system_lmk_prop system_trace_prop test_boot_reason_prop time_prop traced_enabled_prop traced_lazy_prop aac_drc_prop adaptive_haptics_prop apex_ready_prop arm64_memtag_prop binder_cache_bluetooth_server_prop binder_cache_system_server_prop binder_cache_telephony_server_prop boot_status_prop bootanim_system_prop bootloader_prop boottime_public_prop bq_config_prop build_bootimage_prop build_prop composd_vm_art_prop device_config_aconfig_flags_prop device_config_camera_native_prop device_config_edgetpu_native_prop device_config_media_native_prop device_config_nnapi_native_prop device_config_runtime_native_boot_prop device_config_runtime_native_prop device_config_surface_flinger_native_boot_prop device_config_vendor_system_native_prop device_config_vendor_system_native_boot_prop drm_forcel3_prop enable_16k_pages_prop fingerprint_prop gwp_asan_prop hal_instrumentation_prop userdebug_or_eng_prop init_service_status_prop libc_debug_prop module_sdkextensions_prop nnapi_ext_deny_product_prop persist_wm_debug_prop power_debug_prop profcollectd_etr_prop property_service_version_prop provisioned_prop restorecon_prop retaildemo_prop servicemanager_prop smart_idle_maint_enabled_prop socket_hook_prop sqlite_log_prop surfaceflinger_display_prop system_boot_reason_prop system_jvmti_agent_prop traced_oome_heap_session_count_prop ab_update_gki_prop usb_prop userspace_reboot_exported_prop vold_status_prop vts_status_prop config_prop cppreopt_prop dalvik_prop debuggerd_prop device_logging_prop dhcp_prop dumpstate_prop exported3_system_prop exported_dumpstate_prop exported_secure_prop heapprofd_prop net_radio_prop pan_result_prop persist_debug_prop shell_prop test_harness_prop theme_prop use_memfd_prop vold_prop apexd_config_prop aaudio_config_prop apk_verity_prop audio_config_prop bootanim_config_prop bluetooth_config_prop build_attestation_prop build_config_prop build_odm_prop build_vendor_prop camera_calibration_prop camera_config_prop camera2_extensions_prop camerax_extensions_prop charger_config_prop codec2_config_prop composd_vm_vendor_prop cpu_variant_prop debugfs_restriction_prop drm_config_prop drm_service_config_prop exported_camera_prop exported_config_prop exported_default_prop ffs_config_prop framework_watchdog_config_prop graphics_config_prop hdmi_config_prop hw_timeout_multiplier_prop hypervisor_prop hypervisor_restricted_prop incremental_prop input_device_config_prop keyguard_config_prop keystore_config_prop lmkd_config_prop media_config_prop mediadrm_config_prop mm_events_config_prop oem_unlock_prop ota_build_prop packagemanager_config_prop quick_start_prop recovery_config_prop recovery_usb_config_prop sendbug_config_prop soc_prop storage_config_prop storagemanager_config_prop surfaceflinger_prop suspend_prop systemsound_config_prop telephony_config_prop threadnetwork_config_prop tombstone_config_prop usb_config_prop userspace_reboot_config_prop vehicle_hal_prop vendor_security_patch_level_prop vendor_socket_hook_prop virtual_ab_prop vndk_prop vts_config_prop vold_config_prop wifi_config_prop zram_config_prop zygote_config_prop dck_prop tuner_config_prop usb_uvc_enabled_prop setupwizard_mode_prop pm_archiving_enabled_prop trusty_security_vm_sys_vendor_prop adbd_config_prop audio_prop bluetooth_a2dp_offload_prop bluetooth_audio_hal_prop bluetooth_finder_prop bluetooth_prop bpf_progs_loaded_prop charger_status_prop ctl_default_prop ctl_interface_start_prop ctl_start_prop ctl_stop_prop dalvik_config_prop dalvik_dynamic_config_prop dalvik_runtime_prop debug_prop device_config_memory_safety_native_boot_prop device_config_memory_safety_native_prop dumpstate_options_prop exported_system_prop exported_bluetooth_prop exported_overlay_prop exported_pm_prop future_pm_prop ffs_control_prop framework_status_prop gesture_prop graphics_config_writable_prop hal_dumpstate_config_prop sota_prop hwservicemanager_prop lmkd_prop locale_prop logd_prop logpersistd_logging_prop log_prop log_tag_prop lowpan_prop media_variant_prop nfc_prop ota_prop permissive_mte_prop powerctl_prop qemu_hw_prop qemu_sf_lcd_density_prop radio_control_prop radio_prop serialno_prop surfaceflinger_color_prop system_prop system_user_mode_emulation_prop telephony_status_prop timezone_prop usb_control_prop vold_post_fs_data_prop wifi_hal_prop wifi_log_prop wifi_prop zram_control_prop default_prop virtual_face_prop virtual_fingerprint_prop apexd_select_prop adbd_prop adbd_tradeinmode_prop apexd_payload_metadata_prop apexd_private_prop appsearch_vm_prop bluetooth_lea_prop ctl_snapuserd_prop ctl_prefetch_prop ctl_uprobestats_prop crashrecovery_prop debug_tracing_desktop_mode_visible_tasks_prop device_config_core_experiments_team_internal_prop device_config_lmkd_native_prop device_config_mglru_native_prop device_config_mmd_native_prop device_config_profcollect_native_boot_prop device_config_remote_key_provisioning_native_prop device_config_statsd_native_prop device_config_statsd_native_boot_prop device_config_storage_native_boot_prop device_config_sys_traced_prop device_config_window_manager_native_boot_prop device_config_configuration_prop device_config_connectivity_prop device_config_swcodec_native_prop device_config_tethering_u_or_later_native_prop dmesgd_start_prop fastbootd_protocol_prop gsid_prop hsum_boot_strategy_prop init_mnt_ns_prop init_perf_lsm_hooks_prop init_service_status_private_prop init_storage_prop init_svc_debug_prop kcmdline_prop keystore_diagnostics_prop keystore_listen_prop last_boot_reason_prop localization_prop logd_auditrate_prop lower_kptr_restrict_prop mmd_status_prop net_464xlat_fromvendor_prop net_connectivity_prop netd_stable_secret_prop next_boot_prop odsign_prop misctrl_prop perf_drop_caches_prop pm_prop prefetch_service_prop profcollectd_enabled_prop profcollectd_node_id_prop radio_cdma_ecm_prop remote_prov_cert_prop rollback_test_prop setupwizard_prop snapshotctl_prop snapuserd_prop system_adbd_prop system_audio_config_prop timezone_metadata_prop traced_config_prop traced_perf_enabled_prop traced_relay_relay_port_prop uprobestats_start_with_config_prop tuner_server_ctl_prop userspace_reboot_log_prop userspace_reboot_test_prop verity_status_prop zygote_wrap_prop ctl_mediatranscoding_prop ctl_odsign_prop virtualizationservice_prop ctl_apex_load_prop sensors_config_prop hypervisor_pvmfw_prop hypervisor_virtualizationmanager_prop game_manager_config_prop hidl_memory_prop suspend_debug_prop system_service_enable_prop ctl_artd_pre_reboot_prop trusty_security_vm_sys_prop trusty_widevine_vm_sys_prop hint_manager_config_prop avf_vm_traced_relay_enabled_prop binder_cache_adservices_server_prop bionic_linker_16kb_app_compat_prop device_config_virtualization_framework_native_prop fstype_prop log_file_logger_prop mmd_shared_status_prop native_binder_stats_prop persist_sysui_builder_extras_prop persist_sysui_ranking_update_prop page_size_prop pm_16kb_app_compat_prop remote_prov_prop service_sf_present_timestamp_prop statsd_atoms_list_version_prop trusty_coverage_prop arm64_memtag_bootctl_prop avf_virtualizationservice_prop high_barometer_quality_prop mmd_prop mmd_shared_prop prefetch_boot_prop sensors_hal_prop usb_disable_when_locked_prop userdata_alias_remove_prop wallet_prop setupwizard_feature_prop telephony_ril_prop telephony_modem_prop telephony_modemtype_prop telephony_ntn_demo_mode_prop deprecated_soc_prop repair_mode_init_prop pixelsystemservice_contextualawareness_prop vendor_sysuig_prop ))
(typeattributeset system_internal_property_type (apexd_prop bootloader_boot_reason_prop device_config_activity_manager_native_boot_prop device_config_boot_count_prop device_config_input_native_boot_prop device_config_netd_native_prop device_config_reset_performed_prop firstboot_prop boottime_prop charger_prop cold_boot_done_prop ctl_adbd_prop ctl_apexd_prop ctl_bootanim_prop ctl_bugreport_prop ctl_console_prop ctl_dumpstate_prop ctl_fuse_prop ctl_gsid_prop ctl_interface_restart_prop ctl_interface_stop_prop ctl_mdnsd_prop ctl_restart_prop ctl_rildaemon_prop ctl_sigstop_prop dynamic_system_prop heapprofd_enabled_prop llkd_prop lpdumpd_prop mmc_prop mock_ota_prop net_dns_prop overlay_prop persistent_properties_ready_prop safemode_prop system_lmk_prop system_trace_prop test_boot_reason_prop time_prop traced_enabled_prop traced_lazy_prop default_prop adbd_prop adbd_tradeinmode_prop apexd_payload_metadata_prop apexd_private_prop appsearch_vm_prop bluetooth_lea_prop ctl_snapuserd_prop ctl_prefetch_prop ctl_uprobestats_prop crashrecovery_prop debug_tracing_desktop_mode_visible_tasks_prop device_config_core_experiments_team_internal_prop device_config_lmkd_native_prop device_config_mglru_native_prop device_config_mmd_native_prop device_config_profcollect_native_boot_prop device_config_remote_key_provisioning_native_prop device_config_statsd_native_prop device_config_statsd_native_boot_prop device_config_storage_native_boot_prop device_config_sys_traced_prop device_config_window_manager_native_boot_prop device_config_configuration_prop device_config_connectivity_prop device_config_swcodec_native_prop device_config_tethering_u_or_later_native_prop dmesgd_start_prop fastbootd_protocol_prop gsid_prop hsum_boot_strategy_prop init_mnt_ns_prop init_perf_lsm_hooks_prop init_service_status_private_prop init_storage_prop init_svc_debug_prop kcmdline_prop keystore_diagnostics_prop keystore_listen_prop last_boot_reason_prop localization_prop logd_auditrate_prop lower_kptr_restrict_prop mmd_status_prop net_464xlat_fromvendor_prop net_connectivity_prop netd_stable_secret_prop next_boot_prop odsign_prop misctrl_prop perf_drop_caches_prop pm_prop prefetch_service_prop profcollectd_enabled_prop profcollectd_node_id_prop radio_cdma_ecm_prop remote_prov_cert_prop rollback_test_prop setupwizard_prop snapshotctl_prop snapuserd_prop system_adbd_prop system_audio_config_prop timezone_metadata_prop traced_config_prop traced_perf_enabled_prop traced_relay_relay_port_prop uprobestats_start_with_config_prop tuner_server_ctl_prop userspace_reboot_log_prop userspace_reboot_test_prop verity_status_prop zygote_wrap_prop ctl_mediatranscoding_prop ctl_odsign_prop virtualizationservice_prop ctl_apex_load_prop sensors_config_prop hypervisor_pvmfw_prop hypervisor_virtualizationmanager_prop game_manager_config_prop hidl_memory_prop suspend_debug_prop system_service_enable_prop ctl_artd_pre_reboot_prop trusty_security_vm_sys_prop trusty_widevine_vm_sys_prop hint_manager_config_prop avf_vm_traced_relay_enabled_prop deprecated_soc_prop repair_mode_init_prop pixelsystemservice_contextualawareness_prop vendor_sysuig_prop ))
(typeattributeset system_restricted_property_type (aac_drc_prop adaptive_haptics_prop apex_ready_prop arm64_memtag_prop binder_cache_bluetooth_server_prop binder_cache_system_server_prop binder_cache_telephony_server_prop boot_status_prop bootanim_system_prop bootloader_prop boottime_public_prop bq_config_prop build_bootimage_prop build_prop composd_vm_art_prop device_config_aconfig_flags_prop device_config_camera_native_prop device_config_edgetpu_native_prop device_config_media_native_prop device_config_nnapi_native_prop device_config_runtime_native_boot_prop device_config_runtime_native_prop device_config_surface_flinger_native_boot_prop device_config_vendor_system_native_prop device_config_vendor_system_native_boot_prop drm_forcel3_prop enable_16k_pages_prop fingerprint_prop gwp_asan_prop hal_instrumentation_prop userdebug_or_eng_prop init_service_status_prop libc_debug_prop module_sdkextensions_prop nnapi_ext_deny_product_prop persist_wm_debug_prop power_debug_prop profcollectd_etr_prop property_service_version_prop provisioned_prop restorecon_prop retaildemo_prop servicemanager_prop smart_idle_maint_enabled_prop socket_hook_prop sqlite_log_prop surfaceflinger_display_prop system_boot_reason_prop system_jvmti_agent_prop traced_oome_heap_session_count_prop ab_update_gki_prop usb_prop userspace_reboot_exported_prop vold_status_prop vts_status_prop config_prop cppreopt_prop dalvik_prop debuggerd_prop device_logging_prop dhcp_prop dumpstate_prop exported3_system_prop exported_dumpstate_prop exported_secure_prop heapprofd_prop net_radio_prop pan_result_prop persist_debug_prop shell_prop test_harness_prop theme_prop use_memfd_prop vold_prop binder_cache_adservices_server_prop bionic_linker_16kb_app_compat_prop device_config_virtualization_framework_native_prop fstype_prop log_file_logger_prop mmd_shared_status_prop native_binder_stats_prop persist_sysui_builder_extras_prop persist_sysui_ranking_update_prop page_size_prop pm_16kb_app_compat_prop remote_prov_prop service_sf_present_timestamp_prop statsd_atoms_list_version_prop trusty_coverage_prop telephony_modem_prop telephony_ntn_demo_mode_prop ))
(typeattributeset system_public_property_type (apexd_config_prop aaudio_config_prop apk_verity_prop audio_config_prop bootanim_config_prop bluetooth_config_prop build_attestation_prop build_config_prop build_odm_prop build_vendor_prop camera_calibration_prop camera_config_prop camera2_extensions_prop camerax_extensions_prop charger_config_prop codec2_config_prop composd_vm_vendor_prop cpu_variant_prop debugfs_restriction_prop drm_config_prop drm_service_config_prop exported_camera_prop exported_config_prop exported_default_prop ffs_config_prop framework_watchdog_config_prop graphics_config_prop hdmi_config_prop hw_timeout_multiplier_prop hypervisor_prop hypervisor_restricted_prop incremental_prop input_device_config_prop keyguard_config_prop keystore_config_prop lmkd_config_prop media_config_prop mediadrm_config_prop mm_events_config_prop oem_unlock_prop ota_build_prop packagemanager_config_prop quick_start_prop recovery_config_prop recovery_usb_config_prop sendbug_config_prop soc_prop storage_config_prop storagemanager_config_prop surfaceflinger_prop suspend_prop systemsound_config_prop telephony_config_prop threadnetwork_config_prop tombstone_config_prop usb_config_prop userspace_reboot_config_prop vehicle_hal_prop vendor_security_patch_level_prop vendor_socket_hook_prop virtual_ab_prop vndk_prop vts_config_prop vold_config_prop wifi_config_prop zram_config_prop zygote_config_prop dck_prop tuner_config_prop usb_uvc_enabled_prop setupwizard_mode_prop pm_archiving_enabled_prop trusty_security_vm_sys_vendor_prop adbd_config_prop audio_prop bluetooth_a2dp_offload_prop bluetooth_audio_hal_prop bluetooth_finder_prop bluetooth_prop bpf_progs_loaded_prop charger_status_prop ctl_default_prop ctl_interface_start_prop ctl_start_prop ctl_stop_prop dalvik_config_prop dalvik_dynamic_config_prop dalvik_runtime_prop debug_prop device_config_memory_safety_native_boot_prop device_config_memory_safety_native_prop dumpstate_options_prop exported_system_prop exported_bluetooth_prop exported_overlay_prop exported_pm_prop future_pm_prop ffs_control_prop framework_status_prop gesture_prop graphics_config_writable_prop hal_dumpstate_config_prop sota_prop hwservicemanager_prop lmkd_prop locale_prop logd_prop logpersistd_logging_prop log_prop log_tag_prop lowpan_prop media_variant_prop nfc_prop ota_prop permissive_mte_prop powerctl_prop qemu_hw_prop qemu_sf_lcd_density_prop radio_control_prop radio_prop serialno_prop surfaceflinger_color_prop system_prop system_user_mode_emulation_prop telephony_status_prop timezone_prop usb_control_prop vold_post_fs_data_prop wifi_hal_prop wifi_log_prop wifi_prop zram_control_prop virtual_face_prop virtual_fingerprint_prop apexd_select_prop arm64_memtag_bootctl_prop avf_virtualizationservice_prop high_barometer_quality_prop mmd_prop mmd_shared_prop prefetch_boot_prop sensors_hal_prop usb_disable_when_locked_prop userdata_alias_remove_prop wallet_prop setupwizard_feature_prop telephony_ril_prop telephony_modemtype_prop ))
(typeattributeset app_api_service (batteryproperties_service gatekeeper_service gpu_service credstore_service mediatranscoding_service profiling_service surfaceflinger_service accessibility_service account_service activity_service activity_task_service alarm_service app_function_service app_hibernation_service app_prediction_service app_search_service appops_service appwidget_service archive_service assetatlas_service attestation_verification_service audio_service auth_service autofill_service backup_service batterystats_service blob_store_service bluetooth_manager_service broadcastradio_service clipboard_service cloudsearch_service contexthub_service contextual_search_service crossprofileapps_service IProxyService_service companion_device_service connectivity_native_service connectivity_service connmetrics_service consumer_ir_service content_capture_service content_suggestions_service content_service country_detector_service credential_service device_policy_service device_state_service deviceidle_service device_identifiers_service display_service domain_verification_service color_display_service ecm_enhanced_confirmation_service file_integrity_service font_service devicelock_service dreams_service dropbox_service ethernet_service biometric_service bugreport_service platform_compat_service face_service fingerprint_service fwk_stats_service game_service grammatical_inflection_service graphicsstats_service hardware_properties_service hdmi_control_service healthconnect_service hint_service imms_service input_method_service input_service intrusion_detection_service ipsec_service iris_service jobscheduler_service launcherapps_service legacy_permission_service light_service locale_service location_service lock_settings_service media_communication_service media_metrics_service media_projection_service media_quality_service media_router_service media_session_service memtrackproxy_service midi_service mount_service music_recognition_service nearby_service netpolicy_service netstats_service network_management_service notification_service pac_proxy_service package_service package_native_service people_service permission_service permissionmgr_service permission_checker_service persistent_data_block_service powerstats_service power_service print_service procstats_service reboot_readiness_service registry_service remote_auth_service restrictions_service role_service rollback_service rttmanager_service search_service search_ui_service sec_key_att_app_id_provider_service security_state_service selection_toolbar_service sensitive_content_protection_service sensorservice_service sensor_privacy_service serial_service servicediscovery_service settings_service shortcut_service slice_service smartspace_service statusbar_service storagestats_service sdk_sandbox_service speech_recognition_service tare_service textclassification_service textservices_service texttospeech_service telecom_service thermal_service threadnetwork_service timedetector_service timezonedetector_service translation_service trust_service tv_ad_service tv_iapp_service tv_input_service tv_tuner_resource_mgr_service uimode_service uri_grants_service usagestats_service usb_service user_service uwb_service vcn_management_service vibrator_service vibrator_manager_service virtual_device_service virtual_device_native_service voiceinteraction_service vpn_management_service wallpaper_service wallpaper_effects_generation_service webviewupdate_service wifip2p_service wifiscanner_service wifi_service wifiaware_service wifi_usd_service tethering_service ambient_context_service authentication_policy_service communal_service feature_flags_service incidentcompanion_service mediatuner_service on_device_intelligence_service pcc_sandbox_service protolog_configuration_service safety_center_service supervision_service wearable_sensing_service dynamic_instrumentation_service advanced_protection_service ranging_service edgetpu_app_service ))
(typeattributeset service_manager_type (aidl_lazy_test_service apc_service apex_service artd_service artd_pre_reboot_service audioserver_service authorization_service batteryproperties_service bluetooth_service cameraserver_service fwk_camera_service default_android_service device_config_updatable_service dexopt_chroot_setup_service dnsresolver_service drmserver_service dumpstate_service evsmanagerd_service fingerprintd_service fwk_automotive_display_service fwk_vold_service gatekeeper_service gpu_service idmap_service incident_service installd_service credstore_service keystore_compat_hal_service keystore_maintenance_service keystore_metrics_service keystore_service legacykeystore_service lpdump_service mdns_service mediaserver_service mediametrics_service mediaextractor_service mediadrmserver_service mediatranscoding_service netd_service nfc_service ondevicepersonalization_system_service ot_daemon_service profiling_service radio_service secure_element_service service_manager_service storaged_service surfaceflinger_service system_app_service system_net_netd_service system_suspend_control_internal_service system_suspend_control_service update_engine_service update_engine_stable_service virtualization_service virtual_camera_service virtual_touchpad_service vold_service vr_hwc_service vrflinger_vsync_service accessibility_service account_service activity_service activity_task_service adb_service adservices_manager_service alarm_service app_binding_service app_function_service app_hibernation_service app_integrity_service app_prediction_service app_search_service appops_service appwidget_service archive_service assetatlas_service attestation_verification_service audio_service auth_service autofill_service backup_service batterystats_service battery_service binder_calls_stats_service blob_store_service bluetooth_manager_service broadcastradio_service cacheinfo_service cameraproxy_service clipboard_service cloudsearch_service contexthub_service contextual_search_service crossprofileapps_service IProxyService_service companion_device_service connectivity_native_service connectivity_service connmetrics_service consumer_ir_service content_capture_service content_suggestions_service content_service country_detector_service coverage_service cpuinfo_service cpu_monitor_service credential_service dataloader_manager_service dbinfo_service device_config_service device_policy_service device_state_service deviceidle_service device_identifiers_service devicestoragemonitor_service diskstats_service display_service domain_verification_service color_display_service ecm_enhanced_confirmation_service external_vibrator_service file_integrity_service font_service netd_listener_service network_watchlist_service devicelock_service DockObserver_service dreams_service dropbox_service ethernet_service biometric_service bugreport_service platform_compat_service face_service fingerprint_service fwk_altitude_service fwk_stats_service fwk_sensor_service fwk_vibrator_control_service game_service gfxinfo_service gnss_time_update_service grammatical_inflection_service graphicsstats_service hardware_service hardware_properties_service hdmi_control_service healthconnect_service hint_service imms_service incremental_service input_method_service input_service intrusion_detection_service ipsec_service iris_service jobscheduler_service launcherapps_service legacy_permission_service light_service locale_service location_service location_time_zone_manager_service lock_settings_service looper_stats_service media_communication_service media_metrics_service media_projection_service media_quality_service media_router_service media_session_service meminfo_service memtrackproxy_service midi_service mount_service music_recognition_service nearby_service netpolicy_service netstats_service network_management_service network_score_service network_stack_service network_time_update_service notification_service oem_lock_service otadexopt_service overlay_service pac_proxy_service package_service package_native_service people_service permission_service permissionmgr_service permission_checker_service persistent_data_block_service pinner_service powerstats_service power_service print_service processinfo_service procstats_service reboot_readiness_service recovery_service registry_service remote_auth_service remote_provisioning_service resources_manager_service restrictions_service role_service rollback_service runtime_service rttmanager_service samplingprofiler_service scheduling_policy_service search_service search_ui_service sec_key_att_app_id_provider_service security_state_service selection_toolbar_service sensitive_content_protection_service sensorservice_service sensor_privacy_service serial_service servicediscovery_service settings_service shortcut_service slice_service smartspace_service statusbar_service storagestats_service sdk_sandbox_service system_config_service system_server_dumper_service system_update_service soundtrigger_middleware_service speech_recognition_service tare_service task_service testharness_service textclassification_service textservices_service texttospeech_service telecom_service thermal_service threadnetwork_service timedetector_service timezonedetector_service translation_service trust_service tv_ad_service tv_iapp_service tv_input_service tv_tuner_resource_mgr_service uimode_service updatelock_service uri_grants_service usagestats_service usb_service user_service uwb_service vcn_management_service vibrator_service vibrator_manager_service virtual_device_service virtual_device_native_service voiceinteraction_service vpn_management_service vr_manager_service wallpaper_service wallpaper_effects_generation_service webviewupdate_service wifip2p_service wifiscanner_service wifi_service wifinl80211_service wifiaware_service wifi_usd_service window_service inputflinger_service tethering_service emergency_affordance_service hal_audio_service hal_audiocontrol_service hal_authgraph_service hal_authsecret_service hal_bluetooth_service hal_bootctl_service hal_broadcastradio_service hal_camera_service hal_can_controller_service hal_cas_service hal_codec2_service hal_confirmationui_service hal_contexthub_service hal_drm_service hal_dumpstate_service hal_evs_service hal_face_service hal_fastboot_service hal_fingerprint_service hal_gnss_service hal_graphics_allocator_service hal_graphics_composer_service hal_graphics_mapper_service hal_health_service hal_health_storage_service hal_hwcrypto_service hal_identity_service hal_input_processor_service hal_ir_service hal_ivn_service hal_keymint_service hal_light_service hal_macsec_service hal_mediaquality_service hal_memtrack_service hal_neuralnetworks_service hal_nfc_service hal_oemlock_service hal_power_service hal_power_stats_service hal_radio_service hal_rebootescrow_service hal_remoteaccess_service hal_remotelyprovisionedcomponent_avf_service hal_remotelyprovisionedcomponent_service hal_sensors_service hal_secretkeeper_service hal_secureclock_service hal_secure_element_service hal_sharedsecret_service hal_system_suspend_service hal_tetheroffload_service hal_thermal_service hal_tv_hdmi_cec_service hal_tv_hdmi_connection_service hal_tv_hdmi_earc_service hal_tv_input_service hal_threadnetwork_service hal_tv_tuner_service hal_usb_service hal_usb_gadget_service hal_uwb_service hal_vehicle_service hal_vibrator_service hal_weaver_service hal_nlinterceptor_service hal_wifi_service hal_wifi_hostapd_service hal_wifi_supplicant_service hal_gatekeeper_service hal_vm_capabilities_service activity_structured_service ambient_context_service authentication_policy_service attention_service bg_install_control_service binder_stats_consumer_service compos_service communal_service dynamic_system_service feature_flags_service fwk_devicestate_service gsi_service incidentcompanion_service logcat_service logd_service mediatuner_service mmd_service on_device_intelligence_service omapi_service pcc_sandbox_service profcollectd_service protolog_configuration_service resolver_service rkpd_registrar_service rkpd_refresh_service rkp_cert_processor_service safety_center_service stats_service statsbootstrap_service statscompanion_service statsmanager_service supervision_service task_continuity_service tracingproxy_service tradeinmode_service transparency_service accessor_trusty_keymint_comm_service trusty_keymint_comm_service accessor_trusty_widevine_comm_service trusty_widevine_comm_service vfio_handler_service virtualization_maintenance_service vm_tethering_service vmnic_service uce_service wearable_sensing_service wifi_mainline_supplicant_service dynamic_instrumentation_service uprobestats_service advanced_protection_service ranging_service theme_service hal_bluetooth_lpp_service edgetpu_app_service hal_audio_parameter_parser_service ))
(typeattributeset mlstrustedobject (app_zygote_tmpfs ashmem_device ashmem_libcutils_device binder_device hwbinder_device pmsg_device gpu_device mtp_device ptmx_device kmsg_device null_device random_device serial_device owntty_device zero_device fuse_device ion_device dmabuf_heap_device dmabuf_system_heap_device dmabuf_system_secure_heap_device uhid_device tun_device usbaccessory_device usb_device usb_serial_device proc_qtaguid_ctrl proc_qtaguid_stat proc_pressure_mem selinuxfs cgroup sysfs sysfs_bluetooth_writable sysfs_kernel_notes sysfs_nfc_power_writable inotify devpts fuse fuseblk sdcardfs vfat exfat debugfs_trace_marker debugfs_tracing debugfs_tracing_debug functionfs anr_data_file tombstone_data_file apk_tmp_file apk_private_tmp_file ota_package_file user_profile_data_file shell_data_file heapdump_data_file ringtone_file media_rw_data_file radio_data_file shared_relro_file trace_data_file method_trace_data_file system_app_data_file cache_file cache_backup_file cache_recovery_file wallpaper_file shortcut_manager_icons asec_apk_file backup_data_file app_fuse_file dnsproxyd_socket fwmarkd_socket logd_socket logdr_socket logdw_socket mdnsd_socket property_socket statsdw_socket system_ndebug_socket system_unsolzygote_socket tombstoned_crash_socket tombstoned_java_trace_socket traced_consumer_socket traced_perf_socket traced_producer_socket heapprofd_socket pdx_display_client_endpoint_socket pdx_display_manager_endpoint_socket pdx_display_screenshot_endpoint_socket pdx_display_vsync_endpoint_socket pdx_performance_client_endpoint_socket pdx_bufferhub_client_endpoint_socket system_server_tmpfs traced_tmpfs udmabuf_device wm_trace_data_file virtualizationservice_data_file kvm_device prng_seeder_socket aconfigd_socket aconfigd_mainline_socket ashmem_compat_memfd heapprofd_tmpfs repair_mode_metadata_config_file ))
(typeattributeset appdomain (bluetooth ephemeral_app gmscore_app isolated_app isolated_compute_app mediaprovider network_stack nfc platform_app priv_app radio rkpdapp runas_app secure_element shared_relro shell simpleperf system_app traceur_app untrusted_app untrusted_app_32 untrusted_app_30 untrusted_app_29 untrusted_app_27 untrusted_app_25 adservices device_as_webcam mediaprovider_app permissioncontroller_app sdk_sandbox_34 sdk_sandbox_audit sdk_sandbox_next vmlauncher_app vzwomatrigger_app rilextensionservice_app turbo_adapter pixelsystemservice_app dcservice_app con_monitor_app grilservice_app pixeldisplayservice_app pixelntnservice_app systemui_app vendor_rcs_app vendor_satellite_service factory_ota_app flipendo flag_flipper_app repair_mode_app connectivity_thermal_power_manager vendor_rcs_service_app ))
(typeattributeset isolated_compute_allowed_service (audioserver_service cameraserver_service mediaserver_service content_capture_service device_state_service speech_recognition_service hal_codec2_service on_device_intelligence_service edgetpu_app_service ))
(typeattributeset netdomain (adbd bluetooth dhcp dnsmasq drmserver dumpstate ephemeral_app gmscore_app mdnsd mediadrmserver mediaprovider mediaserver netd network_stack nfc platform_app priv_app radio rkpdapp runas_app shell system_app system_server untrusted_app untrusted_app_32 untrusted_app_30 untrusted_app_29 untrusted_app_27 untrusted_app_25 update_engine adbd_tradeinmode adservices clatd ot_daemon rkp_cert_processor sdk_sandbox_34 sdk_sandbox_audit sdk_sandbox_next vmlauncher_app dcservice_app vendor_rcs_app factory_ota_app ))
(typeattributeset binderservicedomain (audioserver cameraserver credstore drmserver evsmanagerd gatekeeperd idmap inputflinger keystore logd mediadrmserver mediaextractor mediametrics mediaserver mediatranscoding nfc radio secure_element surfaceflinger system_app system_server virtual_touchpad gsid mediatuner omapi rkpd edgetpu_app_server hal_audio_parameter_parser ))
(typeattributeset coredomain (adbd apexd app_zygote artd atrace audioserver blkid blkid_untrusted bluetooth bootanim bootstat bpfloader bufferhubd cameraserver charger crash_dump credstore crosvm dhcp dnsmasq drmserver dumpstate e2fs early_virtmgr ephemeral_app evsmanagerd extra_free_kbytes fastbootd fingerprintd flags_health_check fsck fsck_untrusted gatekeeperd gmscore_app gpuservice healthd heapprofd hwservicemanager idmap incident incident_helper incidentd init inputflinger installd isolated_app isolated_compute_app kernel keystore llkd lmkd logd logpersist mdnsd mediadrmserver mediaextractor mediametrics mediaprovider mediaserver mediaswcodec mediatranscoding modprobe netd netutils_wrapper network_stack nfc perfetto performanced platform_app postinstall priv_app prng_seeder profman radio recovery recovery_persist recovery_refresh rkpdapp rs rss_hwm_reset runas runas_app sdcardd secure_element servicemanager sgdisk shared_relro shell simpleperf simpleperf_app_runner slideshow statsd surfaceflinger system_app system_server tombstoned toolbox traced traced_perf traced_probes traceur_app ueventd uncrypt untrusted_app untrusted_app_32 untrusted_app_30 untrusted_app_29 untrusted_app_27 untrusted_app_25 update_engine update_verifier usbd vdc virtual_camera virtual_touchpad virtualizationmanager vold vold_prepare_subdirs watchdogd webview_zygote wificond zygote aconfigd aconfigd_mainline adbd_tradeinmode adservices apex_test_prepostinstall apexd_derive_classpath art_boot art_exec auditctl automotive_display_service bert_collector blank_screen boringssl_self_test canhalconfigurator clatd compos_fd_server compos_verify composd cppreopts derive_classpath derive_sdk device_as_webcam dex2oat dexopt_chroot_setup dmesgd fuseblkd fuseblkd_untrusted fwk_bufferhub gki_apex_prepostinstall gsid hal_allocator_default hal_keymint_system hal_widevine_system iw kcmdlinectrl linkerconfig linux_vm_setup lpdumpd mediaprovider_app mediatuner memcgv2_activation_depth migrate_legacy_obb_data misctrl mm_events mmd mtectrl odrefresh odsign omapi ot_ctl ot_daemon overlay_remounter permissioncontroller_app prefetch preloads_copy preopt2cachename profcollectd remount rkp_cert_processor rkpd sdk_sandbox_34 sdk_sandbox_audit sdk_sandbox_next simpleperf_boot snapshotctl snapuserd stats storaged system_server_startup system_suspend trace_redactor tradeinmode uprobestats userdata_alias_remove vehicle_binding_util vfio_handler virtual_face virtual_fingerprint virtualizationservice vmlauncher_app vmnic wait_for_keymaster wifi_mainline_supplicant zygote_next brownout_detection_app edgetpu_app_server rilextensionservice_app turbo_adapter pixelsystemservice_app dcservice_app bluetooth_gci con_monitor_app grilservice_app pixeldisplayservice_app pixelntnservice_app systemui_app vendor_rcs_app vendor_satellite_service gs_watchdogd factory_ota_app hal_audio_parameter_parser flipendo flag_flipper_app repair_mode_app connectivity_thermal_power_manager vendor_rcs_service_app ))
(typeattributeset halclientdomain (adbd atrace audioserver bluetooth bootanim bufferhubd cameraserver charger credstore crosvm dumpstate early_virtmgr evsmanagerd gatekeeperd isolated_compute_app keystore mediadrmserver mediaextractor mediaserver mediaswcodec mediatranscoding network_stack nfc platform_app radio rkpdapp secure_element shell statsd surfaceflinger system_app system_server traced_probes traceur_app update_engine update_verifier usbd virtual_camera virtualizationmanager vold wificond automotive_display_service blank_screen canhalconfigurator fwk_bufferhub mediatuner odsign omapi ot_daemon snapshotctl storaged vehicle_binding_util virtualizationservice turbo_adapter flipendo connectivity_thermal_power_manager ))
(typeattributeset hal_fingerprint_client (dumpstate platform_app system_server ))
(typeattributeset hal_power_client (dumpstate statsd surfaceflinger system_server turbo_adapter flipendo ))
(typeattributeset hal_power_stats_client (dumpstate statsd system_server traced_probes turbo_adapter connectivity_thermal_power_manager ))
(typeattributeset hal_thermal_client (dumpstate statsd system_server connectivity_thermal_power_manager ))
(typeattributeset system_suspend_internal_server (system_suspend turbo_adapter connectivity_thermal_power_manager ))
(type brownout_detection_app)
(roletype object_r brownout_detection_app)
(type edgetpu_app_server)
(roletype object_r edgetpu_app_server)
(type edgetpu_app_service)
(roletype object_r edgetpu_app_service)
(type rilextensionservice_app)
(roletype object_r rilextensionservice_app)
(type setupwizard_feature_prop)
(roletype object_r setupwizard_feature_prop)
(type turbo_adapter)
(roletype object_r turbo_adapter)
(type pixelsystemservice_app)
(roletype object_r pixelsystemservice_app)
(type dcservice_app)
(roletype object_r dcservice_app)
(type bluetooth_gci)
(roletype object_r bluetooth_gci)
(type bluetooth_gci_exec)
(roletype object_r bluetooth_gci_exec)
(type con_monitor_app)
(roletype object_r con_monitor_app)
(type grilservice_app)
(roletype object_r grilservice_app)
(type pixeldisplayservice_app)
(roletype object_r pixeldisplayservice_app)
(type pixelntnservice_app)
(roletype object_r pixelntnservice_app)
(type telephony_ril_prop)
(roletype object_r telephony_ril_prop)
(type telephony_modem_prop)
(roletype object_r telephony_modem_prop)
(type telephony_modemtype_prop)
(roletype object_r telephony_modemtype_prop)
(type telephony_ntn_demo_mode_prop)
(roletype object_r telephony_ntn_demo_mode_prop)
(type systemui_app)
(roletype object_r systemui_app)
(type vendor_rcs_app)
(roletype object_r vendor_rcs_app)
(type vendor_satellite_service)
(roletype object_r vendor_satellite_service)
(type gs_watchdogd)
(roletype object_r gs_watchdogd)
(type gs_watchdogd_exec)
(roletype object_r gs_watchdogd_exec)
(type factory_ota_app)
(roletype object_r factory_ota_app)
(type factory_ota_app_userfaultfd)
(roletype object_r factory_ota_app_userfaultfd)
(type hal_audio_parameter_parser)
(roletype object_r hal_audio_parameter_parser)
(type hal_audio_parameter_parser_exec)
(roletype object_r hal_audio_parameter_parser_exec)
(type hal_audio_parameter_parser_service)
(roletype object_r hal_audio_parameter_parser_service)
(type edgetpu_app_server_exec)
(roletype object_r edgetpu_app_server_exec)
(type deprecated_soc_prop)
(roletype object_r deprecated_soc_prop)
(type rilextensionservice_app_userfaultfd)
(roletype object_r rilextensionservice_app_userfaultfd)
(type flipendo)
(roletype object_r flipendo)
(type flipendo_userfaultfd)
(roletype object_r flipendo_userfaultfd)
(type flag_flipper_app)
(roletype object_r flag_flipper_app)
(type flag_flipper_app_userfaultfd)
(roletype object_r flag_flipper_app_userfaultfd)
(type repair_mode_metadata_config_file)
(roletype object_r repair_mode_metadata_config_file)
(type repair_mode_init_prop)
(roletype object_r repair_mode_init_prop)
(type repair_mode_app)
(roletype object_r repair_mode_app)
(type repair_mode_app_userfaultfd)
(roletype object_r repair_mode_app_userfaultfd)
(type turbo_adapter_userfaultfd)
(roletype object_r turbo_adapter_userfaultfd)
(type connectivity_thermal_power_manager)
(roletype object_r connectivity_thermal_power_manager)
(type connectivity_thermal_power_manager_userfaultfd)
(roletype object_r connectivity_thermal_power_manager_userfaultfd)
(type pixelsystemservice_app_userfaultfd)
(roletype object_r pixelsystemservice_app_userfaultfd)
(type pixelsystemservice_contextualawareness_prop)
(roletype object_r pixelsystemservice_contextualawareness_prop)
(type dcservice_app_userfaultfd)
(roletype object_r dcservice_app_userfaultfd)
(type con_monitor_app_userfaultfd)
(roletype object_r con_monitor_app_userfaultfd)
(type grilservice_app_userfaultfd)
(roletype object_r grilservice_app_userfaultfd)
(type pixeldisplayservice_app_userfaultfd)
(roletype object_r pixeldisplayservice_app_userfaultfd)
(type pixelntnservice_app_userfaultfd)
(roletype object_r pixelntnservice_app_userfaultfd)
(type vendor_sysuig_prop)
(roletype object_r vendor_sysuig_prop)
(type systemui_app_userfaultfd)
(roletype object_r systemui_app_userfaultfd)
(type vendor_rcs_app_userfaultfd)
(roletype object_r vendor_rcs_app_userfaultfd)
(type vendor_rcs_service_app)
(roletype object_r vendor_rcs_service_app)
(type vendor_rcs_service_app_userfaultfd)
(roletype object_r vendor_rcs_service_app_userfaultfd)
(type vendor_satellite_service_userfaultfd)
(roletype object_r vendor_satellite_service_userfaultfd)
;;* lmx 3 device/google/zumapro-sepolicy/system_ext/public/property.te
(neverallow base_typeattr_232 telephony_modem_prop (property_service (set)))
;;* lme
;;* lmx 5 device/google/zumapro-sepolicy/system_ext/public/property.te
(neverallow base_typeattr_232 telephony_ntn_demo_mode_prop (property_service (set)))
;;* lme
;;* lmx 5 device/google/gs-common/gs_watchdogd/sepolicy/gs_watchdogd.te
(allow init gs_watchdogd_exec (file (read getattr map execute open)))
;;* lme
;;* lmx 5 device/google/gs-common/gs_watchdogd/sepolicy/gs_watchdogd.te
(allow init gs_watchdogd (process (transition)))
;;* lme
;;* lmx 5 device/google/gs-common/gs_watchdogd/sepolicy/gs_watchdogd.te
(allow gs_watchdogd gs_watchdogd_exec (file (read getattr map execute open entrypoint)))
;;* lme
(dontaudit init gs_watchdogd (process (noatsecure)))
;;* lmx 5 device/google/gs-common/gs_watchdogd/sepolicy/gs_watchdogd.te
(allow init gs_watchdogd (process (siginh rlimitinh)))
;;* lme
(typetransition init gs_watchdogd_exec process gs_watchdogd)
;;* lmx 7 device/google/gs-common/gs_watchdogd/sepolicy/gs_watchdogd.te
(allow gs_watchdogd watchdog_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme
;;* lmx 8 device/google/gs-common/gs_watchdogd/sepolicy/gs_watchdogd.te
(allow gs_watchdogd kmsg_device (chr_file (ioctl read write getattr lock append map open watch watch_reads)))
;;* lme
;;* lmx 9 device/google/gs-common/gs_watchdogd/sepolicy/gs_watchdogd.te
(allow gs_watchdogd sysfs (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme
(typetransition factory_ota_app tmpfs file appdomain_tmpfs)
;;* lmx 5 device/google/gs-common/sota_app/sepolicy/system_ext/factory_ota_app.te
(allow factory_ota_app factory_ota_app_userfaultfd (anon_inode (ioctl read create)))
;;* lme
(dontaudit su factory_ota_app_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lmx 5 device/google/gs-common/sota_app/sepolicy/system_ext/factory_ota_app.te
(neverallow base_typeattr_1085 factory_ota_app_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme
;;* lmx 5 device/google/gs-common/sota_app/sepolicy/system_ext/factory_ota_app.te
(allow factory_ota_app appdomain_tmpfs (file (ioctl read write getattr relabelfrom map execute)))
;;* lme
;;* lmx 5 device/google/gs-common/sota_app/sepolicy/system_ext/factory_ota_app.te
(allowx factory_ota_app appdomain_tmpfs (ioctl file ((range 0x7701 0x770b))))
;;* lme
;;* lmx 5 device/google/gs-common/sota_app/sepolicy/system_ext/factory_ota_app.te
(neverallow base_typeattr_1086 base_typeattr_1085 (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme
;;* lmx 5 device/google/gs-common/sota_app/sepolicy/system_ext/factory_ota_app.te
(neverallow base_typeattr_1087 factory_ota_app (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme
;;* lmx 5 device/google/gs-common/sota_app/sepolicy/system_ext/factory_ota_app.te
(neverallow base_typeattr_1088 factory_ota_app (process (ptrace)))
;;* lme
;;* lmx 12 device/google/gs-common/sota_app/sepolicy/system_ext/factory_ota_app.te
(allow factory_ota_app ota_package_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
;;* lme
;;* lmx 13 device/google/gs-common/sota_app/sepolicy/system_ext/factory_ota_app.te
(allow factory_ota_app ota_package_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme
;;* lmx 17 device/google/gs-common/sota_app/sepolicy/system_ext/factory_ota_app.te
(allow factory_ota_app property_socket (sock_file (write)))
;;* lme
;;* lmx 17 device/google/gs-common/sota_app/sepolicy/system_ext/factory_ota_app.te
(allow factory_ota_app init (unix_stream_socket (connectto)))
;;* lme
;;* lmx 17 device/google/gs-common/sota_app/sepolicy/system_ext/factory_ota_app.te
(allow factory_ota_app sota_prop (property_service (set)))
;;* lme
;;* lmx 17 device/google/gs-common/sota_app/sepolicy/system_ext/factory_ota_app.te
(allow factory_ota_app sota_prop (file (read getattr map open)))
;;* lme
;;* lmx 19 device/google/gs-common/sota_app/sepolicy/system_ext/factory_ota_app.te
(allow factory_ota_app system_boot_reason_prop (file (read getattr map open)))
;;* lme
;;* lmx 23 device/google/gs-common/sota_app/sepolicy/system_ext/factory_ota_app.te
(allow factory_ota_app app_api_service (service_manager (find)))
;;* lme
;;* lmx 25 device/google/gs-common/sota_app/sepolicy/system_ext/factory_ota_app.te
(allow factory_ota_app update_engine (binder (call transfer)))
;;* lme
;;* lmx 25 device/google/gs-common/sota_app/sepolicy/system_ext/factory_ota_app.te
(allow update_engine factory_ota_app (binder (transfer)))
;;* lme
;;* lmx 25 device/google/gs-common/sota_app/sepolicy/system_ext/factory_ota_app.te
(allow factory_ota_app update_engine (fd (use)))
;;* lme
;;* lmx 27 device/google/gs-common/sota_app/sepolicy/system_ext/factory_ota_app.te
(allow update_engine factory_ota_app (binder (call transfer)))
;;* lme
;;* lmx 27 device/google/gs-common/sota_app/sepolicy/system_ext/factory_ota_app.te
(allow factory_ota_app update_engine (binder (transfer)))
;;* lme
;;* lmx 27 device/google/gs-common/sota_app/sepolicy/system_ext/factory_ota_app.te
(allow update_engine factory_ota_app (fd (use)))
;;* lme
;;* lmx 29 device/google/gs-common/sota_app/sepolicy/system_ext/factory_ota_app.te
(allow factory_ota_app update_engine_service (service_manager (find)))
;;* lme
;;* lmx 31 device/google/gs-common/sota_app/sepolicy/system_ext/factory_ota_app.te
(allow factory_ota_app nfc_service (service_manager (find)))
;;* lme
;;* lmx 33 device/google/gs-common/sota_app/sepolicy/system_ext/factory_ota_app.te
(allow factory_ota_app radio_service (service_manager (find)))
;;* lme
(dontaudit factory_ota_app gpuservice (binder (call)))
;;* lmx 1 device/google/gs-common/sota_app/sepolicy/system_ext/vendor_init.te
(allow vendor_init sota_prop (property_service (set)))
;;* lme
;;* lmx 1 device/google/gs-common/sota_app/sepolicy/system_ext/vendor_init.te
(allow vendor_init sota_prop (file (read getattr map open)))
;;* lme
;;* lmx 4 device/google/gs-common/audio/sepolicy/system_ext/aidl/parser_service.te
(allow init hal_audio_parameter_parser_exec (file (read getattr map execute open)))
;;* lme
;;* lmx 4 device/google/gs-common/audio/sepolicy/system_ext/aidl/parser_service.te
(allow init hal_audio_parameter_parser (process (transition)))
;;* lme
;;* lmx 4 device/google/gs-common/audio/sepolicy/system_ext/aidl/parser_service.te
(allow hal_audio_parameter_parser hal_audio_parameter_parser_exec (file (read getattr map execute open entrypoint)))
;;* lme
(dontaudit init hal_audio_parameter_parser (process (noatsecure)))
;;* lmx 4 device/google/gs-common/audio/sepolicy/system_ext/aidl/parser_service.te
(allow init hal_audio_parameter_parser (process (siginh rlimitinh)))
;;* lme
(typetransition init hal_audio_parameter_parser_exec process hal_audio_parameter_parser)
;;* lmx 9 device/google/gs-common/audio/sepolicy/system_ext/aidl/parser_service.te
(allow hal_audio_parameter_parser hal_audio_parameter_parser_service (service_manager (add find)))
;;* lme
;;* lmx 9 device/google/gs-common/audio/sepolicy/system_ext/aidl/parser_service.te
(neverallow base_typeattr_1089 hal_audio_parameter_parser_service (service_manager (add)))
;;* lme
;;* lmx 11 device/google/gs-common/audio/sepolicy/system_ext/aidl/parser_service.te
(allow audioserver hal_audio_parameter_parser (binder (call transfer)))
;;* lme
;;* lmx 11 device/google/gs-common/audio/sepolicy/system_ext/aidl/parser_service.te
(allow hal_audio_parameter_parser audioserver (binder (transfer)))
;;* lme
;;* lmx 11 device/google/gs-common/audio/sepolicy/system_ext/aidl/parser_service.te
(allow audioserver hal_audio_parameter_parser (fd (use)))
;;* lme
;;* lmx 12 device/google/gs-common/audio/sepolicy/system_ext/aidl/parser_service.te
(allow hal_audio_parameter_parser servicemanager (binder (call transfer)))
;;* lme
;;* lmx 12 device/google/gs-common/audio/sepolicy/system_ext/aidl/parser_service.te
(allow servicemanager hal_audio_parameter_parser (binder (transfer)))
;;* lme
;;* lmx 12 device/google/gs-common/audio/sepolicy/system_ext/aidl/parser_service.te
(allow hal_audio_parameter_parser servicemanager (fd (use)))
;;* lme
;;* lmx 14 device/google/gs-common/audio/sepolicy/system_ext/aidl/parser_service.te
(allow audioserver hal_audio_parameter_parser_service (service_manager (find)))
;;* lme
;;* lmx 3 device/google/gs-common/edgetpu/sepolicy/system_ext/private/edgetpu_app_service.te
(allow init edgetpu_app_server_exec (file (read getattr map execute open)))
;;* lme
;;* lmx 3 device/google/gs-common/edgetpu/sepolicy/system_ext/private/edgetpu_app_service.te
(allow init edgetpu_app_server (process (transition)))
;;* lme
;;* lmx 3 device/google/gs-common/edgetpu/sepolicy/system_ext/private/edgetpu_app_service.te
(allow edgetpu_app_server edgetpu_app_server_exec (file (read getattr map execute open entrypoint)))
;;* lme
(dontaudit init edgetpu_app_server (process (noatsecure)))
;;* lmx 3 device/google/gs-common/edgetpu/sepolicy/system_ext/private/edgetpu_app_service.te
(allow init edgetpu_app_server (process (siginh rlimitinh)))
;;* lme
(typetransition init edgetpu_app_server_exec process edgetpu_app_server)
;;* lmx 6 device/google/gs-common/edgetpu/sepolicy/system_ext/private/edgetpu_app_service.te
(allow edgetpu_app_server servicemanager (binder (call transfer)))
;;* lme
;;* lmx 6 device/google/gs-common/edgetpu/sepolicy/system_ext/private/edgetpu_app_service.te
(allow servicemanager edgetpu_app_server (binder (call transfer)))
;;* lme
;;* lmx 12 device/google/gs-common/edgetpu/sepolicy/system_ext/private/edgetpu_app_service.te
(allow edgetpu_app_server edgetpu_app_service (service_manager (add find)))
;;* lme
;;* lmx 12 device/google/gs-common/edgetpu/sepolicy/system_ext/private/edgetpu_app_service.te
(neverallow base_typeattr_1090 edgetpu_app_service (service_manager (add)))
;;* lme
;;* lmx 15 device/google/gs-common/edgetpu/sepolicy/system_ext/private/edgetpu_app_service.te
(allow edgetpu_app_server package_native_service (service_manager (find)))
;;* lme
;;* lmx 16 device/google/gs-common/edgetpu/sepolicy/system_ext/private/edgetpu_app_service.te
(allow edgetpu_app_server system_server (binder (call transfer)))
;;* lme
;;* lmx 16 device/google/gs-common/edgetpu/sepolicy/system_ext/private/edgetpu_app_service.te
(allow system_server edgetpu_app_server (binder (transfer)))
;;* lme
;;* lmx 16 device/google/gs-common/edgetpu/sepolicy/system_ext/private/edgetpu_app_service.te
(allow edgetpu_app_server system_server (fd (use)))
;;* lme
;;* lmx 19 device/google/gs-common/edgetpu/sepolicy/system_ext/private/edgetpu_app_service.te
(allow edgetpu_app_server traced (fd (use)))
;;* lme
;;* lmx 19 device/google/gs-common/edgetpu/sepolicy/system_ext/private/edgetpu_app_service.te
(allow edgetpu_app_server traced_tmpfs (file (read write getattr map)))
;;* lme
;;* lmx 19 device/google/gs-common/edgetpu/sepolicy/system_ext/private/edgetpu_app_service.te
(allow edgetpu_app_server traced_producer_socket (sock_file (write)))
;;* lme
;;* lmx 19 device/google/gs-common/edgetpu/sepolicy/system_ext/private/edgetpu_app_service.te
(allow edgetpu_app_server traced (unix_stream_socket (connectto)))
;;* lme
;;* lmx 19 device/google/gs-common/edgetpu/sepolicy/system_ext/private/edgetpu_app_service.te
(allow traced edgetpu_app_server (fd (use)))
;;* lme
;;* lmx 22 device/google/gs-common/edgetpu/sepolicy/system_ext/private/edgetpu_app_service.te
(allow edgetpu_app_server fwk_stats_service (service_manager (find)))
;;* lme
;;* lmx 25 device/google/gs-common/edgetpu/sepolicy/system_ext/private/edgetpu_app_service.te
(allow edgetpu_app_server self (capability (ipc_lock)))
;;* lme
;;* lmx 28 device/google/gs-common/edgetpu/sepolicy/system_ext/private/edgetpu_app_service.te
(allow edgetpu_app_server privapp_data_file (file (read map)))
;;* lme
;;* lmx 31 device/google/gs-common/edgetpu/sepolicy/system_ext/private/edgetpu_app_service.te
(allow edgetpu_app_server shell_data_file (file (read map)))
;;* lme
;;* lmx 5 hardware/google/pixel-sepolicy/common/system_ext/property.te
(neverallow base_typeattr_232 deprecated_soc_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme
(dontaudit domain deprecated_soc_prop (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(typetransition rilextensionservice_app tmpfs file appdomain_tmpfs)
;;* lmx 3 device/google/gs-common/pixel_ril/sepolicy/system_ext/private/rilextensionservice_app.te
(allow rilextensionservice_app rilextensionservice_app_userfaultfd (anon_inode (ioctl read create)))
;;* lme
(dontaudit su rilextensionservice_app_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lmx 3 device/google/gs-common/pixel_ril/sepolicy/system_ext/private/rilextensionservice_app.te
(neverallow base_typeattr_1091 rilextensionservice_app_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme
;;* lmx 3 device/google/gs-common/pixel_ril/sepolicy/system_ext/private/rilextensionservice_app.te
(allow rilextensionservice_app appdomain_tmpfs (file (ioctl read write getattr relabelfrom map execute)))
;;* lme
;;* lmx 3 device/google/gs-common/pixel_ril/sepolicy/system_ext/private/rilextensionservice_app.te
(allowx rilextensionservice_app appdomain_tmpfs (ioctl file ((range 0x7701 0x770b))))
;;* lme
;;* lmx 3 device/google/gs-common/pixel_ril/sepolicy/system_ext/private/rilextensionservice_app.te
(neverallow base_typeattr_1092 base_typeattr_1091 (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme
;;* lmx 3 device/google/gs-common/pixel_ril/sepolicy/system_ext/private/rilextensionservice_app.te
(neverallow base_typeattr_1093 rilextensionservice_app (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme
;;* lmx 3 device/google/gs-common/pixel_ril/sepolicy/system_ext/private/rilextensionservice_app.te
(neverallow base_typeattr_1094 rilextensionservice_app (process (ptrace)))
;;* lme
;;* lmx 5 device/google/gs-common/pixel_ril/sepolicy/system_ext/private/rilextensionservice_app.te
(allow rilextensionservice_app app_api_service (service_manager (find)))
;;* lme
;;* lmx 6 device/google/gs-common/pixel_ril/sepolicy/system_ext/private/rilextensionservice_app.te
(allow rilextensionservice_app radio_service (service_manager (find)))
;;* lme
;;* lmx 8 device/google/gs-common/pixel_ril/sepolicy/system_ext/private/rilextensionservice_app.te
(allow rilextensionservice_app property_socket (sock_file (write)))
;;* lme
;;* lmx 8 device/google/gs-common/pixel_ril/sepolicy/system_ext/private/rilextensionservice_app.te
(allow rilextensionservice_app init (unix_stream_socket (connectto)))
;;* lme
;;* lmx 8 device/google/gs-common/pixel_ril/sepolicy/system_ext/private/rilextensionservice_app.te
(allow rilextensionservice_app radio_prop (property_service (set)))
;;* lme
;;* lmx 8 device/google/gs-common/pixel_ril/sepolicy/system_ext/private/rilextensionservice_app.te
(allow rilextensionservice_app radio_prop (file (read getattr map open)))
;;* lme
;;* lmx 2 device/google/gs-common/esim/sepolicy/system_ext/private/gmscore_app.te
(allow gmscore_app setupwizard_feature_prop (file (read getattr map open)))
;;* lme
;;* lmx 2 device/google/gs-common/esim/sepolicy/system_ext/private/priv_app.te
(allow priv_app setupwizard_feature_prop (file (read getattr map open)))
;;* lme
(typetransition flipendo tmpfs file appdomain_tmpfs)
;;* lmx 3 hardware/google/pixel-sepolicy/flipendo/flipendo.te
(allow flipendo flipendo_userfaultfd (anon_inode (ioctl read create)))
;;* lme
(dontaudit su flipendo_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lmx 3 hardware/google/pixel-sepolicy/flipendo/flipendo.te
(neverallow base_typeattr_1095 flipendo_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme
;;* lmx 3 hardware/google/pixel-sepolicy/flipendo/flipendo.te
(allow flipendo appdomain_tmpfs (file (ioctl read write getattr relabelfrom map execute)))
;;* lme
;;* lmx 3 hardware/google/pixel-sepolicy/flipendo/flipendo.te
(allowx flipendo appdomain_tmpfs (ioctl file ((range 0x7701 0x770b))))
;;* lme
;;* lmx 3 hardware/google/pixel-sepolicy/flipendo/flipendo.te
(neverallow base_typeattr_1096 base_typeattr_1095 (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme
;;* lmx 3 hardware/google/pixel-sepolicy/flipendo/flipendo.te
(neverallow base_typeattr_1097 flipendo (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme
;;* lmx 3 hardware/google/pixel-sepolicy/flipendo/flipendo.te
(neverallow base_typeattr_1098 flipendo (process (ptrace)))
;;* lme
;;* lmx 6 hardware/google/pixel-sepolicy/flipendo/flipendo.te
(allow flipendo fwk_stats_service (service_manager (find)))
;;* lme
;;* lmx 7 hardware/google/pixel-sepolicy/flipendo/flipendo.te
(allow flipendo servicemanager (binder (call transfer)))
;;* lme
;;* lmx 7 hardware/google/pixel-sepolicy/flipendo/flipendo.te
(allow servicemanager flipendo (binder (call transfer)))
;;* lme
;;* lmx 9 hardware/google/pixel-sepolicy/flipendo/flipendo.te
(allow flipendo gpuservice (binder (call transfer)))
;;* lme
;;* lmx 9 hardware/google/pixel-sepolicy/flipendo/flipendo.te
(allow gpuservice flipendo (binder (transfer)))
;;* lme
;;* lmx 9 hardware/google/pixel-sepolicy/flipendo/flipendo.te
(allow flipendo gpuservice (fd (use)))
;;* lme
;;* lmx 11 hardware/google/pixel-sepolicy/flipendo/flipendo.te
(allow flipendo app_api_service (service_manager (find)))
;;* lme
;;* lmx 14 hardware/google/pixel-sepolicy/flipendo/flipendo.te
(allow flipendo color_display_service (service_manager (find)))
;;* lme
(dontaudit flipendo vendor_hwservice_type (hwservice_manager (find)))
(typetransition flag_flipper_app tmpfs file appdomain_tmpfs)
;;* lmx 5 vendor/google_devices/gs-common/proprietary/theflippinapp/sepolicy/private/flag_flipper_app.te
(allow flag_flipper_app flag_flipper_app_userfaultfd (anon_inode (ioctl read create)))
;;* lme
(dontaudit su flag_flipper_app_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lmx 5 vendor/google_devices/gs-common/proprietary/theflippinapp/sepolicy/private/flag_flipper_app.te
(neverallow base_typeattr_1099 flag_flipper_app_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme
;;* lmx 5 vendor/google_devices/gs-common/proprietary/theflippinapp/sepolicy/private/flag_flipper_app.te
(allow flag_flipper_app appdomain_tmpfs (file (ioctl read write getattr relabelfrom map execute)))
;;* lme
;;* lmx 5 vendor/google_devices/gs-common/proprietary/theflippinapp/sepolicy/private/flag_flipper_app.te
(allowx flag_flipper_app appdomain_tmpfs (ioctl file ((range 0x7701 0x770b))))
;;* lme
;;* lmx 5 vendor/google_devices/gs-common/proprietary/theflippinapp/sepolicy/private/flag_flipper_app.te
(neverallow base_typeattr_1100 base_typeattr_1099 (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme
;;* lmx 5 vendor/google_devices/gs-common/proprietary/theflippinapp/sepolicy/private/flag_flipper_app.te
(neverallow base_typeattr_1101 flag_flipper_app (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme
;;* lmx 5 vendor/google_devices/gs-common/proprietary/theflippinapp/sepolicy/private/flag_flipper_app.te
(neverallow base_typeattr_1102 flag_flipper_app (process (ptrace)))
;;* lme
;;* lmx 7 vendor/google_devices/gs-common/proprietary/theflippinapp/sepolicy/private/flag_flipper_app.te
(allow flag_flipper_app aconfigd_socket (sock_file (write)))
;;* lme
;;* lmx 7 vendor/google_devices/gs-common/proprietary/theflippinapp/sepolicy/private/flag_flipper_app.te
(allow flag_flipper_app aconfigd (unix_stream_socket (connectto)))
;;* lme
;;* lmx 9 vendor/google_devices/gs-common/proprietary/theflippinapp/sepolicy/private/flag_flipper_app.te
(allow flag_flipper_app app_api_service (service_manager (find)))
;;* lme
;;* lmx 2 vendor/google_devices/gs-common/proprietary/repair_mode/sepolicy/private/property.te
(neverallow base_typeattr_232 repair_mode_init_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme
(typetransition repair_mode_app tmpfs file appdomain_tmpfs)
;;* lmx 7 vendor/google_devices/gs-common/proprietary/repair_mode/sepolicy/private/repair_mode_app.te
(allow repair_mode_app repair_mode_app_userfaultfd (anon_inode (ioctl read create)))
;;* lme
(dontaudit su repair_mode_app_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lmx 7 vendor/google_devices/gs-common/proprietary/repair_mode/sepolicy/private/repair_mode_app.te
(neverallow base_typeattr_1103 repair_mode_app_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme
;;* lmx 7 vendor/google_devices/gs-common/proprietary/repair_mode/sepolicy/private/repair_mode_app.te
(allow repair_mode_app appdomain_tmpfs (file (ioctl read write getattr relabelfrom map execute)))
;;* lme
;;* lmx 7 vendor/google_devices/gs-common/proprietary/repair_mode/sepolicy/private/repair_mode_app.te
(allowx repair_mode_app appdomain_tmpfs (ioctl file ((range 0x7701 0x770b))))
;;* lme
;;* lmx 7 vendor/google_devices/gs-common/proprietary/repair_mode/sepolicy/private/repair_mode_app.te
(neverallow base_typeattr_1104 base_typeattr_1103 (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme
;;* lmx 7 vendor/google_devices/gs-common/proprietary/repair_mode/sepolicy/private/repair_mode_app.te
(neverallow base_typeattr_1105 repair_mode_app (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme
;;* lmx 7 vendor/google_devices/gs-common/proprietary/repair_mode/sepolicy/private/repair_mode_app.te
(neverallow base_typeattr_1106 repair_mode_app (process (ptrace)))
;;* lme
;;* lmx 10 vendor/google_devices/gs-common/proprietary/repair_mode/sepolicy/private/repair_mode_app.te
(allow repair_mode_app metadata_file (dir (search)))
;;* lme
;;* lmx 11 vendor/google_devices/gs-common/proprietary/repair_mode/sepolicy/private/repair_mode_app.te
(allow repair_mode_app repair_mode_metadata_file (dir (search)))
;;* lme
;;* lmx 12 vendor/google_devices/gs-common/proprietary/repair_mode/sepolicy/private/repair_mode_app.te
(allow repair_mode_app repair_mode_metadata_config_file (dir (ioctl read write getattr lock open watch watch_reads add_name remove_name search)))
;;* lme
;;* lmx 13 vendor/google_devices/gs-common/proprietary/repair_mode/sepolicy/private/repair_mode_app.te
(allow repair_mode_app repair_mode_metadata_config_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme
;;* lmx 16 vendor/google_devices/gs-common/proprietary/repair_mode/sepolicy/private/repair_mode_app.te
(allow repair_mode_app property_socket (sock_file (write)))
;;* lme
;;* lmx 16 vendor/google_devices/gs-common/proprietary/repair_mode/sepolicy/private/repair_mode_app.te
(allow repair_mode_app init (unix_stream_socket (connectto)))
;;* lme
;;* lmx 16 vendor/google_devices/gs-common/proprietary/repair_mode/sepolicy/private/repair_mode_app.te
(allow repair_mode_app repair_mode_init_prop (property_service (set)))
;;* lme
;;* lmx 16 vendor/google_devices/gs-common/proprietary/repair_mode/sepolicy/private/repair_mode_app.te
(allow repair_mode_app repair_mode_init_prop (file (read getattr map open)))
;;* lme
;;* lmx 17 vendor/google_devices/gs-common/proprietary/repair_mode/sepolicy/private/repair_mode_app.te
(allow repair_mode_app gsid_prop (file (read getattr map open)))
;;* lme
;;* lmx 20 vendor/google_devices/gs-common/proprietary/repair_mode/sepolicy/private/repair_mode_app.te
(allow repair_mode_app app_api_service (service_manager (find)))
;;* lme
;;* lmx 21 vendor/google_devices/gs-common/proprietary/repair_mode/sepolicy/private/repair_mode_app.te
(allow repair_mode_app system_api_service (service_manager (find)))
;;* lme
(typetransition turbo_adapter tmpfs file appdomain_tmpfs)
;;* lmx 7 hardware/google/pixel-sepolicy/turbo_adapter/private/turbo_adapter.te
(allow turbo_adapter turbo_adapter_userfaultfd (anon_inode (ioctl read create)))
;;* lme
(dontaudit su turbo_adapter_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lmx 7 hardware/google/pixel-sepolicy/turbo_adapter/private/turbo_adapter.te
(neverallow base_typeattr_1107 turbo_adapter_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme
;;* lmx 7 hardware/google/pixel-sepolicy/turbo_adapter/private/turbo_adapter.te
(allow turbo_adapter appdomain_tmpfs (file (ioctl read write getattr relabelfrom map execute)))
;;* lme
;;* lmx 7 hardware/google/pixel-sepolicy/turbo_adapter/private/turbo_adapter.te
(allowx turbo_adapter appdomain_tmpfs (ioctl file ((range 0x7701 0x770b))))
;;* lme
;;* lmx 7 hardware/google/pixel-sepolicy/turbo_adapter/private/turbo_adapter.te
(neverallow base_typeattr_1108 base_typeattr_1107 (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme
;;* lmx 7 hardware/google/pixel-sepolicy/turbo_adapter/private/turbo_adapter.te
(neverallow base_typeattr_1109 turbo_adapter (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme
;;* lmx 7 hardware/google/pixel-sepolicy/turbo_adapter/private/turbo_adapter.te
(neverallow base_typeattr_1110 turbo_adapter (process (ptrace)))
;;* lme
;;* lmx 10 hardware/google/pixel-sepolicy/turbo_adapter/private/turbo_adapter.te
(allow turbo_adapter app_api_service (service_manager (find)))
;;* lme
;;* lmx 19 hardware/google/pixel-sepolicy/turbo_adapter/private/turbo_adapter.te
(allow turbo_adapter proc_uid_cputime_showstat (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme
;;* lmx 19 hardware/google/pixel-sepolicy/turbo_adapter/private/turbo_adapter.te
(allow turbo_adapter proc_uid_cputime_showstat (file (ioctl read getattr lock map open watch watch_reads)))
(allow turbo_adapter proc_uid_cputime_showstat (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme
;;* lmx 22 hardware/google/pixel-sepolicy/turbo_adapter/private/turbo_adapter.te
(allow turbo_adapter system_suspend_internal_server (binder (call transfer)))
;;* lme
;;* lmx 22 hardware/google/pixel-sepolicy/turbo_adapter/private/turbo_adapter.te
(allow system_suspend_internal_server turbo_adapter (binder (transfer)))
;;* lme
;;* lmx 22 hardware/google/pixel-sepolicy/turbo_adapter/private/turbo_adapter.te
(allow turbo_adapter system_suspend_internal_server (fd (use)))
;;* lme
;;* lmx 23 hardware/google/pixel-sepolicy/turbo_adapter/private/turbo_adapter.te
(allow turbo_adapter suspend_prop (file (read getattr map open)))
;;* lme
;;* lmx 27 hardware/google/pixel-sepolicy/turbo_adapter/private/turbo_adapter.te
(allow turbo_adapter property_socket (sock_file (write)))
;;* lme
;;* lmx 27 hardware/google/pixel-sepolicy/turbo_adapter/private/turbo_adapter.te
(allow turbo_adapter init (unix_stream_socket (connectto)))
;;* lme
;;* lmx 27 hardware/google/pixel-sepolicy/turbo_adapter/private/turbo_adapter.te
(allow turbo_adapter debug_prop (property_service (set)))
;;* lme
;;* lmx 27 hardware/google/pixel-sepolicy/turbo_adapter/private/turbo_adapter.te
(allow turbo_adapter debug_prop (file (read getattr map open)))
;;* lme
(typetransition connectivity_thermal_power_manager tmpfs file appdomain_tmpfs)
;;* lmx 7 vendor/google_devices/gs-common/proprietary/connectivity_thermal_power_manager/sepolicy/connectivity_thermal_power_manager.te
(allow connectivity_thermal_power_manager connectivity_thermal_power_manager_userfaultfd (anon_inode (ioctl read create)))
;;* lme
(dontaudit su connectivity_thermal_power_manager_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lmx 7 vendor/google_devices/gs-common/proprietary/connectivity_thermal_power_manager/sepolicy/connectivity_thermal_power_manager.te
(neverallow base_typeattr_1111 connectivity_thermal_power_manager_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme
;;* lmx 7 vendor/google_devices/gs-common/proprietary/connectivity_thermal_power_manager/sepolicy/connectivity_thermal_power_manager.te
(allow connectivity_thermal_power_manager appdomain_tmpfs (file (ioctl read write getattr relabelfrom map execute)))
;;* lme
;;* lmx 7 vendor/google_devices/gs-common/proprietary/connectivity_thermal_power_manager/sepolicy/connectivity_thermal_power_manager.te
(allowx connectivity_thermal_power_manager appdomain_tmpfs (ioctl file ((range 0x7701 0x770b))))
;;* lme
;;* lmx 7 vendor/google_devices/gs-common/proprietary/connectivity_thermal_power_manager/sepolicy/connectivity_thermal_power_manager.te
(neverallow base_typeattr_1112 base_typeattr_1111 (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme
;;* lmx 7 vendor/google_devices/gs-common/proprietary/connectivity_thermal_power_manager/sepolicy/connectivity_thermal_power_manager.te
(neverallow base_typeattr_1113 connectivity_thermal_power_manager (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme
;;* lmx 7 vendor/google_devices/gs-common/proprietary/connectivity_thermal_power_manager/sepolicy/connectivity_thermal_power_manager.te
(neverallow base_typeattr_1114 connectivity_thermal_power_manager (process (ptrace)))
;;* lme
;;* lmx 10 vendor/google_devices/gs-common/proprietary/connectivity_thermal_power_manager/sepolicy/connectivity_thermal_power_manager.te
(allow connectivity_thermal_power_manager radio_service (service_manager (find)))
;;* lme
;;* lmx 11 vendor/google_devices/gs-common/proprietary/connectivity_thermal_power_manager/sepolicy/connectivity_thermal_power_manager.te
(allow connectivity_thermal_power_manager app_api_service (service_manager (find)))
;;* lme
;;* lmx 12 vendor/google_devices/gs-common/proprietary/connectivity_thermal_power_manager/sepolicy/connectivity_thermal_power_manager.te
(allow connectivity_thermal_power_manager system_api_service (service_manager (find)))
;;* lme
(typetransition pixelsystemservice_app tmpfs file appdomain_tmpfs)
;;* lmx 3 vendor/google_devices/gs-common/proprietary/pixelsystemservice/sepolicy/private/pixelsystemservice_app.te
(allow pixelsystemservice_app pixelsystemservice_app_userfaultfd (anon_inode (ioctl read create)))
;;* lme
(dontaudit su pixelsystemservice_app_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lmx 3 vendor/google_devices/gs-common/proprietary/pixelsystemservice/sepolicy/private/pixelsystemservice_app.te
(neverallow base_typeattr_1115 pixelsystemservice_app_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme
;;* lmx 3 vendor/google_devices/gs-common/proprietary/pixelsystemservice/sepolicy/private/pixelsystemservice_app.te
(allow pixelsystemservice_app appdomain_tmpfs (file (ioctl read write getattr relabelfrom map execute)))
;;* lme
;;* lmx 3 vendor/google_devices/gs-common/proprietary/pixelsystemservice/sepolicy/private/pixelsystemservice_app.te
(allowx pixelsystemservice_app appdomain_tmpfs (ioctl file ((range 0x7701 0x770b))))
;;* lme
;;* lmx 3 vendor/google_devices/gs-common/proprietary/pixelsystemservice/sepolicy/private/pixelsystemservice_app.te
(neverallow base_typeattr_1116 base_typeattr_1115 (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme
;;* lmx 3 vendor/google_devices/gs-common/proprietary/pixelsystemservice/sepolicy/private/pixelsystemservice_app.te
(neverallow base_typeattr_1117 pixelsystemservice_app (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme
;;* lmx 3 vendor/google_devices/gs-common/proprietary/pixelsystemservice/sepolicy/private/pixelsystemservice_app.te
(neverallow base_typeattr_1118 pixelsystemservice_app (process (ptrace)))
;;* lme
;;* lmx 6 vendor/google_devices/gs-common/proprietary/pixelsystemservice/sepolicy/private/pixelsystemservice_app.te
(allow pixelsystemservice_app app_api_service (service_manager (find)))
;;* lme
;;* lmx 7 vendor/google_devices/gs-common/proprietary/pixelsystemservice/sepolicy/private/pixelsystemservice_app.te
(allow pixelsystemservice_app radio_service (service_manager (find)))
;;* lme
;;* lmx 8 vendor/google_devices/gs-common/proprietary/pixelsystemservice/sepolicy/private/pixelsystemservice_app.te
(allow pixelsystemservice_app statsmanager_service (service_manager (find)))
;;* lme
;;* lmx 2 vendor/google_devices/gs-common/proprietary/pixelsystemservice/sepolicy/contextualawareness/pixelsystemservice_app.te
(allow pixelsystemservice_app property_socket (sock_file (write)))
;;* lme
;;* lmx 2 vendor/google_devices/gs-common/proprietary/pixelsystemservice/sepolicy/contextualawareness/pixelsystemservice_app.te
(allow pixelsystemservice_app init (unix_stream_socket (connectto)))
;;* lme
;;* lmx 2 vendor/google_devices/gs-common/proprietary/pixelsystemservice/sepolicy/contextualawareness/pixelsystemservice_app.te
(allow pixelsystemservice_app pixelsystemservice_contextualawareness_prop (property_service (set)))
;;* lme
;;* lmx 2 vendor/google_devices/gs-common/proprietary/pixelsystemservice/sepolicy/contextualawareness/pixelsystemservice_app.te
(allow pixelsystemservice_app pixelsystemservice_contextualawareness_prop (file (read getattr map open)))
;;* lme
;;* lmx 2 vendor/google_devices/gs-common/proprietary/pixelsystemservice/sepolicy/contextualawareness/property.te
(neverallow base_typeattr_232 pixelsystemservice_contextualawareness_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme
;;* lmx 2 vendor/google_devices/gs-common/proprietary/dcservice/sepolicy/private/bluetooth_gci.te
(allow init bluetooth_gci_exec (file (read getattr map execute open)))
;;* lme
;;* lmx 2 vendor/google_devices/gs-common/proprietary/dcservice/sepolicy/private/bluetooth_gci.te
(allow init bluetooth_gci (process (transition)))
;;* lme
;;* lmx 2 vendor/google_devices/gs-common/proprietary/dcservice/sepolicy/private/bluetooth_gci.te
(allow bluetooth_gci bluetooth_gci_exec (file (read getattr map execute open entrypoint)))
;;* lme
(dontaudit init bluetooth_gci (process (noatsecure)))
;;* lmx 2 vendor/google_devices/gs-common/proprietary/dcservice/sepolicy/private/bluetooth_gci.te
(allow init bluetooth_gci (process (siginh rlimitinh)))
;;* lme
(typetransition init bluetooth_gci_exec process bluetooth_gci)
;;* lmx 5 vendor/google_devices/gs-common/proprietary/dcservice/sepolicy/private/bluetooth_gci.te
(allow bluetooth_gci mnt_user_file (dir (search)))
;;* lme
;;* lmx 6 vendor/google_devices/gs-common/proprietary/dcservice/sepolicy/private/bluetooth_gci.te
(allow bluetooth_gci fuse (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme
;;* lmx 7 vendor/google_devices/gs-common/proprietary/dcservice/sepolicy/private/bluetooth_gci.te
(allow bluetooth_gci fuse (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme
;;* lmx 8 vendor/google_devices/gs-common/proprietary/dcservice/sepolicy/private/bluetooth_gci.te
(allow bluetooth_gci media_rw_data_file (dir (ioctl read write getattr lock open watch watch_reads add_name search)))
;;* lme
;;* lmx 9 vendor/google_devices/gs-common/proprietary/dcservice/sepolicy/private/bluetooth_gci.te
(allow bluetooth_gci media_rw_data_file (file (ioctl read getattr lock map open watch watch_reads)))
;;* lme
;;* lmx 12 vendor/google_devices/gs-common/proprietary/dcservice/sepolicy/private/bluetooth_gci.te
(allow bluetooth_gci bluetooth_data_file (dir (ioctl read write getattr lock open watch watch_reads add_name search)))
;;* lme
;;* lmx 13 vendor/google_devices/gs-common/proprietary/dcservice/sepolicy/private/bluetooth_gci.te
(allow bluetooth_gci bluetooth_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads)))
;;* lme
(typetransition dcservice_app tmpfs file appdomain_tmpfs)
;;* lmx 4 vendor/google_devices/gs-common/proprietary/dcservice/sepolicy/private/dcservice_app.te
(allow dcservice_app dcservice_app_userfaultfd (anon_inode (ioctl read create)))
;;* lme
(dontaudit su dcservice_app_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lmx 4 vendor/google_devices/gs-common/proprietary/dcservice/sepolicy/private/dcservice_app.te
(neverallow base_typeattr_1119 dcservice_app_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme
;;* lmx 4 vendor/google_devices/gs-common/proprietary/dcservice/sepolicy/private/dcservice_app.te
(allow dcservice_app appdomain_tmpfs (file (ioctl read write getattr relabelfrom map execute)))
;;* lme
;;* lmx 4 vendor/google_devices/gs-common/proprietary/dcservice/sepolicy/private/dcservice_app.te
(allowx dcservice_app appdomain_tmpfs (ioctl file ((range 0x7701 0x770b))))
;;* lme
;;* lmx 4 vendor/google_devices/gs-common/proprietary/dcservice/sepolicy/private/dcservice_app.te
(neverallow base_typeattr_1120 base_typeattr_1119 (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme
;;* lmx 4 vendor/google_devices/gs-common/proprietary/dcservice/sepolicy/private/dcservice_app.te
(neverallow base_typeattr_1121 dcservice_app (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme
;;* lmx 4 vendor/google_devices/gs-common/proprietary/dcservice/sepolicy/private/dcservice_app.te
(neverallow base_typeattr_1122 dcservice_app (process (ptrace)))
;;* lme
;;* lmx 12 vendor/google_devices/gs-common/proprietary/dcservice/sepolicy/private/dcservice_app.te
(allow dcservice_app app_api_service (service_manager (find)))
(allow dcservice_app audioserver_service (service_manager (find)))
(allow dcservice_app nfc_service (service_manager (find)))
(allow dcservice_app radio_service (service_manager (find)))
;;* lme
;;* lmx 15 vendor/google_devices/gs-common/proprietary/dcservice/sepolicy/private/dcservice_app.te
(allow dcservice_app privapp_data_file (lnk_file (ioctl read getattr lock map open watch watch_reads)))
;;* lme
;;* lmx 16 vendor/google_devices/gs-common/proprietary/dcservice/sepolicy/private/dcservice_app.te
(allow dcservice_app privapp_data_file (file (execute)))
;;* lme
;;* lmx 19 vendor/google_devices/gs-common/proprietary/dcservice/sepolicy/private/dcservice_app.te
(allow dcservice_app property_socket (sock_file (write)))
;;* lme
;;* lmx 19 vendor/google_devices/gs-common/proprietary/dcservice/sepolicy/private/dcservice_app.te
(allow dcservice_app init (unix_stream_socket (connectto)))
;;* lme
;;* lmx 19 vendor/google_devices/gs-common/proprietary/dcservice/sepolicy/private/dcservice_app.te
(allow dcservice_app ctl_start_prop (property_service (set)))
;;* lme
;;* lmx 19 vendor/google_devices/gs-common/proprietary/dcservice/sepolicy/private/dcservice_app.te
(allow dcservice_app ctl_start_prop (file (read getattr map open)))
;;* lme
;;* lmx 22 vendor/google_devices/gs-common/proprietary/dcservice/sepolicy/private/dcservice_app.te
(allow dcservice_app bluetooth_lea_prop (file (read getattr map open)))
;;* lme
(typetransition con_monitor_app tmpfs file appdomain_tmpfs)
;;* lmx 4 device/google/zumapro-sepolicy/system_ext/private/con_monitor_app.te
(allow con_monitor_app con_monitor_app_userfaultfd (anon_inode (ioctl read create)))
;;* lme
(dontaudit su con_monitor_app_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lmx 4 device/google/zumapro-sepolicy/system_ext/private/con_monitor_app.te
(neverallow base_typeattr_1123 con_monitor_app_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme
;;* lmx 4 device/google/zumapro-sepolicy/system_ext/private/con_monitor_app.te
(allow con_monitor_app appdomain_tmpfs (file (ioctl read write getattr relabelfrom map execute)))
;;* lme
;;* lmx 4 device/google/zumapro-sepolicy/system_ext/private/con_monitor_app.te
(allowx con_monitor_app appdomain_tmpfs (ioctl file ((range 0x7701 0x770b))))
;;* lme
;;* lmx 4 device/google/zumapro-sepolicy/system_ext/private/con_monitor_app.te
(neverallow base_typeattr_1124 base_typeattr_1123 (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme
;;* lmx 4 device/google/zumapro-sepolicy/system_ext/private/con_monitor_app.te
(neverallow base_typeattr_1125 con_monitor_app (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme
;;* lmx 4 device/google/zumapro-sepolicy/system_ext/private/con_monitor_app.te
(neverallow base_typeattr_1126 con_monitor_app (process (ptrace)))
;;* lme
;;* lmx 6 device/google/zumapro-sepolicy/system_ext/private/con_monitor_app.te
(allow con_monitor_app app_api_service (service_manager (find)))
;;* lme
;;* lmx 7 device/google/zumapro-sepolicy/system_ext/private/con_monitor_app.te
(allow con_monitor_app batterystats_service (service_manager (find)))
;;* lme
;;* lmx 8 device/google/zumapro-sepolicy/system_ext/private/con_monitor_app.te
(allow con_monitor_app virtual_device_service (service_manager (find)))
;;* lme
;;* lmx 10 device/google/zumapro-sepolicy/system_ext/private/con_monitor_app.te
(allow con_monitor_app servicemanager (binder (call transfer)))
;;* lme
;;* lmx 10 device/google/zumapro-sepolicy/system_ext/private/con_monitor_app.te
(allow servicemanager con_monitor_app (binder (transfer)))
;;* lme
;;* lmx 10 device/google/zumapro-sepolicy/system_ext/private/con_monitor_app.te
(allow con_monitor_app servicemanager (fd (use)))
;;* lme
;;* lmx 12 device/google/zumapro-sepolicy/system_ext/private/con_monitor_app.te
(allow con_monitor_app property_socket (sock_file (write)))
;;* lme
;;* lmx 12 device/google/zumapro-sepolicy/system_ext/private/con_monitor_app.te
(allow con_monitor_app init (unix_stream_socket (connectto)))
;;* lme
;;* lmx 12 device/google/zumapro-sepolicy/system_ext/private/con_monitor_app.te
(allow con_monitor_app radio_prop (property_service (set)))
;;* lme
;;* lmx 12 device/google/zumapro-sepolicy/system_ext/private/con_monitor_app.te
(allow con_monitor_app radio_prop (file (read getattr map open)))
;;* lme
(typetransition grilservice_app tmpfs file appdomain_tmpfs)
;;* lmx 3 device/google/zumapro-sepolicy/system_ext/private/grilservice_app.te
(allow grilservice_app grilservice_app_userfaultfd (anon_inode (ioctl read create)))
;;* lme
(dontaudit su grilservice_app_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lmx 3 device/google/zumapro-sepolicy/system_ext/private/grilservice_app.te
(neverallow base_typeattr_1127 grilservice_app_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme
;;* lmx 3 device/google/zumapro-sepolicy/system_ext/private/grilservice_app.te
(allow grilservice_app appdomain_tmpfs (file (ioctl read write getattr relabelfrom map execute)))
;;* lme
;;* lmx 3 device/google/zumapro-sepolicy/system_ext/private/grilservice_app.te
(allowx grilservice_app appdomain_tmpfs (ioctl file ((range 0x7701 0x770b))))
;;* lme
;;* lmx 3 device/google/zumapro-sepolicy/system_ext/private/grilservice_app.te
(neverallow base_typeattr_1128 base_typeattr_1127 (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme
;;* lmx 3 device/google/zumapro-sepolicy/system_ext/private/grilservice_app.te
(neverallow base_typeattr_1129 grilservice_app (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme
;;* lmx 3 device/google/zumapro-sepolicy/system_ext/private/grilservice_app.te
(neverallow base_typeattr_1130 grilservice_app (process (ptrace)))
;;* lme
(typetransition pixeldisplayservice_app tmpfs file appdomain_tmpfs)
;;* lmx 3 device/google/zumapro-sepolicy/system_ext/private/pixeldisplayservice_app.te
(allow pixeldisplayservice_app pixeldisplayservice_app_userfaultfd (anon_inode (ioctl read create)))
;;* lme
(dontaudit su pixeldisplayservice_app_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lmx 3 device/google/zumapro-sepolicy/system_ext/private/pixeldisplayservice_app.te
(neverallow base_typeattr_1131 pixeldisplayservice_app_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme
;;* lmx 3 device/google/zumapro-sepolicy/system_ext/private/pixeldisplayservice_app.te
(allow pixeldisplayservice_app appdomain_tmpfs (file (ioctl read write getattr relabelfrom map execute)))
;;* lme
;;* lmx 3 device/google/zumapro-sepolicy/system_ext/private/pixeldisplayservice_app.te
(allowx pixeldisplayservice_app appdomain_tmpfs (ioctl file ((range 0x7701 0x770b))))
;;* lme
;;* lmx 3 device/google/zumapro-sepolicy/system_ext/private/pixeldisplayservice_app.te
(neverallow base_typeattr_1132 base_typeattr_1131 (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme
;;* lmx 3 device/google/zumapro-sepolicy/system_ext/private/pixeldisplayservice_app.te
(neverallow base_typeattr_1133 pixeldisplayservice_app (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme
;;* lmx 3 device/google/zumapro-sepolicy/system_ext/private/pixeldisplayservice_app.te
(neverallow base_typeattr_1134 pixeldisplayservice_app (process (ptrace)))
;;* lme
;;* lmx 5 device/google/zumapro-sepolicy/system_ext/private/pixeldisplayservice_app.te
(allow pixeldisplayservice_app proc_vendor_sched (dir (ioctl read getattr lock open watch watch_reads search)))
;;* lme
;;* lmx 6 device/google/zumapro-sepolicy/system_ext/private/pixeldisplayservice_app.te
(allow pixeldisplayservice_app proc_vendor_sched (file (write lock append map open)))
;;* lme
;;* lmx 9 device/google/zumapro-sepolicy/system_ext/private/pixeldisplayservice_app.te
(allow pixeldisplayservice_app app_api_service (service_manager (find)))
;;* lme
;;* lmx 11 device/google/zumapro-sepolicy/system_ext/private/pixeldisplayservice_app.te
(allow pixeldisplayservice_app cameraserver_service (service_manager (find)))
;;* lme
(typetransition pixelntnservice_app tmpfs file appdomain_tmpfs)
;;* lmx 3 device/google/zumapro-sepolicy/system_ext/private/pixelntnservice_app.te
(allow pixelntnservice_app pixelntnservice_app_userfaultfd (anon_inode (ioctl read create)))
;;* lme
(dontaudit su pixelntnservice_app_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lmx 3 device/google/zumapro-sepolicy/system_ext/private/pixelntnservice_app.te
(neverallow base_typeattr_1135 pixelntnservice_app_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme
;;* lmx 3 device/google/zumapro-sepolicy/system_ext/private/pixelntnservice_app.te
(allow pixelntnservice_app appdomain_tmpfs (file (ioctl read write getattr relabelfrom map execute)))
;;* lme
;;* lmx 3 device/google/zumapro-sepolicy/system_ext/private/pixelntnservice_app.te
(allowx pixelntnservice_app appdomain_tmpfs (ioctl file ((range 0x7701 0x770b))))
;;* lme
;;* lmx 3 device/google/zumapro-sepolicy/system_ext/private/pixelntnservice_app.te
(neverallow base_typeattr_1136 base_typeattr_1135 (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme
;;* lmx 3 device/google/zumapro-sepolicy/system_ext/private/pixelntnservice_app.te
(neverallow base_typeattr_1137 pixelntnservice_app (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme
;;* lmx 3 device/google/zumapro-sepolicy/system_ext/private/pixelntnservice_app.te
(neverallow base_typeattr_1138 pixelntnservice_app (process (ptrace)))
;;* lme
;;* lmx 4 device/google/zumapro-sepolicy/system_ext/private/pixelntnservice_app.te
(allow pixelntnservice_app app_api_service (service_manager (find)))
;;* lme
;;* lmx 5 device/google/zumapro-sepolicy/system_ext/private/pixelntnservice_app.te
(allow pixelntnservice_app radio_service (service_manager (find)))
;;* lme
;;* lmx 6 device/google/zumapro-sepolicy/system_ext/private/pixelntnservice_app.te
(allow pixelntnservice_app property_socket (sock_file (write)))
;;* lme
;;* lmx 6 device/google/zumapro-sepolicy/system_ext/private/pixelntnservice_app.te
(allow pixelntnservice_app init (unix_stream_socket (connectto)))
;;* lme
;;* lmx 6 device/google/zumapro-sepolicy/system_ext/private/pixelntnservice_app.te
(allow pixelntnservice_app telephony_modem_prop (property_service (set)))
;;* lme
;;* lmx 6 device/google/zumapro-sepolicy/system_ext/private/pixelntnservice_app.te
(allow pixelntnservice_app telephony_modem_prop (file (read getattr map open)))
;;* lme
;;* lmx 7 device/google/zumapro-sepolicy/system_ext/private/pixelntnservice_app.te
(allow pixelntnservice_app telephony_modemtype_prop (file (read getattr map open)))
;;* lme
;;* lmx 8 device/google/zumapro-sepolicy/system_ext/private/pixelntnservice_app.te
(allow pixelntnservice_app property_socket (sock_file (write)))
;;* lme
;;* lmx 8 device/google/zumapro-sepolicy/system_ext/private/pixelntnservice_app.te
(allow pixelntnservice_app init (unix_stream_socket (connectto)))
;;* lme
;;* lmx 8 device/google/zumapro-sepolicy/system_ext/private/pixelntnservice_app.te
(allow pixelntnservice_app telephony_ntn_demo_mode_prop (property_service (set)))
;;* lme
;;* lmx 8 device/google/zumapro-sepolicy/system_ext/private/pixelntnservice_app.te
(allow pixelntnservice_app telephony_ntn_demo_mode_prop (file (read getattr map open)))
;;* lme
;;* lmx 2 device/google/zumapro-sepolicy/system_ext/private/property.te
(neverallow base_typeattr_232 vendor_sysuig_prop (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme
(typetransition systemui_app tmpfs file appdomain_tmpfs)
;;* lmx 3 device/google/zumapro-sepolicy/system_ext/private/systemui_app.te
(allow systemui_app systemui_app_userfaultfd (anon_inode (ioctl read create)))
;;* lme
(dontaudit su systemui_app_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lmx 3 device/google/zumapro-sepolicy/system_ext/private/systemui_app.te
(neverallow base_typeattr_1139 systemui_app_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme
;;* lmx 3 device/google/zumapro-sepolicy/system_ext/private/systemui_app.te
(allow systemui_app appdomain_tmpfs (file (ioctl read write getattr relabelfrom map execute)))
;;* lme
;;* lmx 3 device/google/zumapro-sepolicy/system_ext/private/systemui_app.te
(allowx systemui_app appdomain_tmpfs (ioctl file ((range 0x7701 0x770b))))
;;* lme
;;* lmx 3 device/google/zumapro-sepolicy/system_ext/private/systemui_app.te
(neverallow base_typeattr_1140 base_typeattr_1139 (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme
;;* lmx 3 device/google/zumapro-sepolicy/system_ext/private/systemui_app.te
(neverallow base_typeattr_1141 systemui_app (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme
;;* lmx 3 device/google/zumapro-sepolicy/system_ext/private/systemui_app.te
(neverallow base_typeattr_1142 systemui_app (process (ptrace)))
;;* lme
;;* lmx 4 device/google/zumapro-sepolicy/system_ext/private/systemui_app.te
(allow systemui_app app_api_service (service_manager (find)))
;;* lme
;;* lmx 5 device/google/zumapro-sepolicy/system_ext/private/systemui_app.te
(allow systemui_app network_score_service (service_manager (find)))
;;* lme
;;* lmx 6 device/google/zumapro-sepolicy/system_ext/private/systemui_app.te
(allow systemui_app overlay_service (service_manager (find)))
;;* lme
;;* lmx 7 device/google/zumapro-sepolicy/system_ext/private/systemui_app.te
(allow systemui_app color_display_service (service_manager (find)))
;;* lme
;;* lmx 8 device/google/zumapro-sepolicy/system_ext/private/systemui_app.te
(allow systemui_app audioserver_service (service_manager (find)))
;;* lme
;;* lmx 9 device/google/zumapro-sepolicy/system_ext/private/systemui_app.te
(allow systemui_app cameraserver_service (service_manager (find)))
;;* lme
;;* lmx 10 device/google/zumapro-sepolicy/system_ext/private/systemui_app.te
(allow systemui_app mediaserver_service (service_manager (find)))
;;* lme
;;* lmx 11 device/google/zumapro-sepolicy/system_ext/private/systemui_app.te
(allow systemui_app mediaextractor_service (service_manager (find)))
;;* lme
;;* lmx 12 device/google/zumapro-sepolicy/system_ext/private/systemui_app.te
(allow systemui_app mediametrics_service (service_manager (find)))
;;* lme
;;* lmx 13 device/google/zumapro-sepolicy/system_ext/private/systemui_app.te
(allow systemui_app radio_service (service_manager (find)))
;;* lme
;;* lmx 14 device/google/zumapro-sepolicy/system_ext/private/systemui_app.te
(allow systemui_app vr_manager_service (service_manager (find)))
;;* lme
;;* lmx 15 device/google/zumapro-sepolicy/system_ext/private/systemui_app.te
(allow systemui_app statsmanager_service (service_manager (find)))
;;* lme
;;* lmx 16 device/google/zumapro-sepolicy/system_ext/private/systemui_app.te
(allow systemui_app nfc_service (service_manager (find)))
;;* lme
;;* lmx 17 device/google/zumapro-sepolicy/system_ext/private/systemui_app.te
(allow systemui_app adb_service (service_manager (find)))
;;* lme
;;* lmx 19 device/google/zumapro-sepolicy/system_ext/private/systemui_app.te
(allow systemui_app bluetooth_lea_prop (file (read getattr map open)))
;;* lme
;;* lmx 20 device/google/zumapro-sepolicy/system_ext/private/systemui_app.te
(allow systemui_app keyguard_config_prop (file (read getattr map open)))
;;* lme
;;* lmx 21 device/google/zumapro-sepolicy/system_ext/private/systemui_app.te
(allow systemui_app property_socket (sock_file (write)))
;;* lme
;;* lmx 21 device/google/zumapro-sepolicy/system_ext/private/systemui_app.te
(allow systemui_app init (unix_stream_socket (connectto)))
;;* lme
;;* lmx 21 device/google/zumapro-sepolicy/system_ext/private/systemui_app.te
(allow systemui_app bootanim_system_prop (property_service (set)))
;;* lme
;;* lmx 21 device/google/zumapro-sepolicy/system_ext/private/systemui_app.te
(allow systemui_app bootanim_system_prop (file (read getattr map open)))
;;* lme
;;* lmx 22 device/google/zumapro-sepolicy/system_ext/private/systemui_app.te
(allow systemui_app qemu_hw_prop (file (read getattr map open)))
;;* lme
;;* lmx 23 device/google/zumapro-sepolicy/system_ext/private/systemui_app.te
(allow systemui_app property_socket (sock_file (write)))
;;* lme
;;* lmx 23 device/google/zumapro-sepolicy/system_ext/private/systemui_app.te
(allow systemui_app init (unix_stream_socket (connectto)))
;;* lme
;;* lmx 23 device/google/zumapro-sepolicy/system_ext/private/systemui_app.te
(allow systemui_app debug_prop (property_service (set)))
;;* lme
;;* lmx 23 device/google/zumapro-sepolicy/system_ext/private/systemui_app.te
(allow systemui_app debug_prop (file (read getattr map open)))
;;* lme
;;* lmx 24 device/google/zumapro-sepolicy/system_ext/private/systemui_app.te
(allow systemui_app radio_cdma_ecm_prop (file (read getattr map open)))
;;* lme
;;* lmx 25 device/google/zumapro-sepolicy/system_ext/private/systemui_app.te
(allow systemui_app property_socket (sock_file (write)))
;;* lme
;;* lmx 25 device/google/zumapro-sepolicy/system_ext/private/systemui_app.te
(allow systemui_app init (unix_stream_socket (connectto)))
;;* lme
;;* lmx 25 device/google/zumapro-sepolicy/system_ext/private/systemui_app.te
(allow systemui_app vendor_sysuig_prop (property_service (set)))
;;* lme
;;* lmx 25 device/google/zumapro-sepolicy/system_ext/private/systemui_app.te
(allow systemui_app vendor_sysuig_prop (file (read getattr map open)))
;;* lme
;;* lmx 33 device/google/zumapro-sepolicy/system_ext/private/systemui_app.te
(allow systemui_app property_socket (sock_file (write)))
;;* lme
;;* lmx 33 device/google/zumapro-sepolicy/system_ext/private/systemui_app.te
(allow systemui_app init (unix_stream_socket (connectto)))
;;* lme
;;* lmx 33 device/google/zumapro-sepolicy/system_ext/private/systemui_app.te
(allow systemui_app debug_tracing_desktop_mode_visible_tasks_prop (property_service (set)))
;;* lme
;;* lmx 33 device/google/zumapro-sepolicy/system_ext/private/systemui_app.te
(allow systemui_app debug_tracing_desktop_mode_visible_tasks_prop (file (read getattr map open)))
;;* lme
(typetransition vendor_rcs_app tmpfs file appdomain_tmpfs)
;;* lmx 2 device/google/zumapro-sepolicy/system_ext/private/vendor_rcs_app.te
(allow vendor_rcs_app vendor_rcs_app_userfaultfd (anon_inode (ioctl read create)))
;;* lme
(dontaudit su vendor_rcs_app_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lmx 2 device/google/zumapro-sepolicy/system_ext/private/vendor_rcs_app.te
(neverallow base_typeattr_1143 vendor_rcs_app_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme
;;* lmx 2 device/google/zumapro-sepolicy/system_ext/private/vendor_rcs_app.te
(allow vendor_rcs_app appdomain_tmpfs (file (ioctl read write getattr relabelfrom map execute)))
;;* lme
;;* lmx 2 device/google/zumapro-sepolicy/system_ext/private/vendor_rcs_app.te
(allowx vendor_rcs_app appdomain_tmpfs (ioctl file ((range 0x7701 0x770b))))
;;* lme
;;* lmx 2 device/google/zumapro-sepolicy/system_ext/private/vendor_rcs_app.te
(neverallow base_typeattr_1144 base_typeattr_1143 (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme
;;* lmx 2 device/google/zumapro-sepolicy/system_ext/private/vendor_rcs_app.te
(neverallow base_typeattr_1145 vendor_rcs_app (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme
;;* lmx 2 device/google/zumapro-sepolicy/system_ext/private/vendor_rcs_app.te
(neverallow base_typeattr_1146 vendor_rcs_app (process (ptrace)))
;;* lme
;;* lmx 5 device/google/zumapro-sepolicy/system_ext/private/vendor_rcs_app.te
(allow vendor_rcs_app app_api_service (service_manager (find)))
;;* lme
;;* lmx 6 device/google/zumapro-sepolicy/system_ext/private/vendor_rcs_app.te
(allow vendor_rcs_app radio_service (service_manager (find)))
;;* lme
(typetransition vendor_rcs_service_app tmpfs file appdomain_tmpfs)
;;* lmx 2 device/google/zumapro-sepolicy/system_ext/private/vendor_rcs_service_app.te
(allow vendor_rcs_service_app vendor_rcs_service_app_userfaultfd (anon_inode (ioctl read create)))
;;* lme
(dontaudit su vendor_rcs_service_app_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lmx 2 device/google/zumapro-sepolicy/system_ext/private/vendor_rcs_service_app.te
(neverallow base_typeattr_1147 vendor_rcs_service_app_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme
;;* lmx 2 device/google/zumapro-sepolicy/system_ext/private/vendor_rcs_service_app.te
(allow vendor_rcs_service_app appdomain_tmpfs (file (ioctl read write getattr relabelfrom map execute)))
;;* lme
;;* lmx 2 device/google/zumapro-sepolicy/system_ext/private/vendor_rcs_service_app.te
(allowx vendor_rcs_service_app appdomain_tmpfs (ioctl file ((range 0x7701 0x770b))))
;;* lme
;;* lmx 2 device/google/zumapro-sepolicy/system_ext/private/vendor_rcs_service_app.te
(neverallow base_typeattr_1148 base_typeattr_1147 (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme
;;* lmx 2 device/google/zumapro-sepolicy/system_ext/private/vendor_rcs_service_app.te
(neverallow base_typeattr_1149 vendor_rcs_service_app (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme
;;* lmx 2 device/google/zumapro-sepolicy/system_ext/private/vendor_rcs_service_app.te
(neverallow base_typeattr_1150 vendor_rcs_service_app (process (ptrace)))
;;* lme
;;* lmx 4 device/google/zumapro-sepolicy/system_ext/private/vendor_rcs_service_app.te
(allow vendor_rcs_service_app app_api_service (service_manager (find)))
;;* lme
;;* lmx 5 device/google/zumapro-sepolicy/system_ext/private/vendor_rcs_service_app.te
(allow vendor_rcs_service_app radio_service (service_manager (find)))
;;* lme
(typetransition vendor_satellite_service tmpfs file appdomain_tmpfs)
;;* lmx 3 device/google/zumapro-sepolicy/system_ext/private/vendor_satellite_service.te
(allow vendor_satellite_service vendor_satellite_service_userfaultfd (anon_inode (ioctl read create)))
;;* lme
(dontaudit su vendor_satellite_service_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lmx 3 device/google/zumapro-sepolicy/system_ext/private/vendor_satellite_service.te
(neverallow base_typeattr_1151 vendor_satellite_service_userfaultfd (anon_inode (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme
;;* lmx 3 device/google/zumapro-sepolicy/system_ext/private/vendor_satellite_service.te
(allow vendor_satellite_service appdomain_tmpfs (file (ioctl read write getattr relabelfrom map execute)))
;;* lme
;;* lmx 3 device/google/zumapro-sepolicy/system_ext/private/vendor_satellite_service.te
(allowx vendor_satellite_service appdomain_tmpfs (ioctl file ((range 0x7701 0x770b))))
;;* lme
;;* lmx 3 device/google/zumapro-sepolicy/system_ext/private/vendor_satellite_service.te
(neverallow base_typeattr_1152 base_typeattr_1151 (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme
;;* lmx 3 device/google/zumapro-sepolicy/system_ext/private/vendor_satellite_service.te
(neverallow base_typeattr_1153 vendor_satellite_service (file (ioctl read write create setattr lock relabelfrom append unlink link rename open watch watch_mount watch_sb watch_with_perm watch_reads)))
;;* lme
;;* lmx 3 device/google/zumapro-sepolicy/system_ext/private/vendor_satellite_service.te
(neverallow base_typeattr_1154 vendor_satellite_service (process (ptrace)))
;;* lme
;;* lmx 4 device/google/zumapro-sepolicy/system_ext/private/vendor_satellite_service.te
(allow vendor_satellite_service app_api_service (service_manager (find)))
;;* lme
(typetransition vendor_satellite_service vendor_satellite_service anon_inode "[userfaultfd]" vendor_satellite_service_userfaultfd)
(typetransition vendor_rcs_service_app vendor_rcs_service_app anon_inode "[userfaultfd]" vendor_rcs_service_app_userfaultfd)
(typetransition vendor_rcs_app vendor_rcs_app anon_inode "[userfaultfd]" vendor_rcs_app_userfaultfd)
(typetransition systemui_app systemui_app anon_inode "[userfaultfd]" systemui_app_userfaultfd)
(typetransition pixelntnservice_app pixelntnservice_app anon_inode "[userfaultfd]" pixelntnservice_app_userfaultfd)
(typetransition pixeldisplayservice_app pixeldisplayservice_app anon_inode "[userfaultfd]" pixeldisplayservice_app_userfaultfd)
(typetransition grilservice_app grilservice_app anon_inode "[userfaultfd]" grilservice_app_userfaultfd)
(typetransition con_monitor_app con_monitor_app anon_inode "[userfaultfd]" con_monitor_app_userfaultfd)
(typetransition dcservice_app dcservice_app anon_inode "[userfaultfd]" dcservice_app_userfaultfd)
(typetransition pixelsystemservice_app pixelsystemservice_app anon_inode "[userfaultfd]" pixelsystemservice_app_userfaultfd)
(typetransition connectivity_thermal_power_manager connectivity_thermal_power_manager anon_inode "[userfaultfd]" connectivity_thermal_power_manager_userfaultfd)
(typetransition turbo_adapter turbo_adapter anon_inode "[userfaultfd]" turbo_adapter_userfaultfd)
(typetransition repair_mode_app repair_mode_app anon_inode "[userfaultfd]" repair_mode_app_userfaultfd)
(typetransition flag_flipper_app flag_flipper_app anon_inode "[userfaultfd]" flag_flipper_app_userfaultfd)
(typetransition flipendo flipendo anon_inode "[userfaultfd]" flipendo_userfaultfd)
(typetransition rilextensionservice_app rilextensionservice_app anon_inode "[userfaultfd]" rilextensionservice_app_userfaultfd)
(typetransition factory_ota_app factory_ota_app anon_inode "[userfaultfd]" factory_ota_app_userfaultfd)
(typeattribute base_typeattr_1154)
(typeattributeset base_typeattr_1154 (and (domain ) (not (crash_dump runas_app simpleperf vendor_satellite_service ))))
(typeattribute base_typeattr_1153)
(typeattributeset base_typeattr_1153 (and (appdomain ) (not (runas_app shell simpleperf vendor_satellite_service ))))
(typeattribute base_typeattr_1152)
(typeattributeset base_typeattr_1152 (and (vendor_satellite_service ) (not (runas_app shell simpleperf ))))
(typeattribute base_typeattr_1151)
(typeattributeset base_typeattr_1151 (and (domain ) (not (vendor_satellite_service ))))
(typeattribute base_typeattr_1150)
(typeattributeset base_typeattr_1150 (and (domain ) (not (crash_dump runas_app simpleperf vendor_rcs_service_app ))))
(typeattribute base_typeattr_1149)
(typeattributeset base_typeattr_1149 (and (appdomain ) (not (runas_app shell simpleperf vendor_rcs_service_app ))))
(typeattribute base_typeattr_1148)
(typeattributeset base_typeattr_1148 (and (vendor_rcs_service_app ) (not (runas_app shell simpleperf ))))
(typeattribute base_typeattr_1147)
(typeattributeset base_typeattr_1147 (and (domain ) (not (vendor_rcs_service_app ))))
(typeattribute base_typeattr_1146)
(typeattributeset base_typeattr_1146 (and (domain ) (not (crash_dump runas_app simpleperf vendor_rcs_app ))))
(typeattribute base_typeattr_1145)
(typeattributeset base_typeattr_1145 (and (appdomain ) (not (runas_app shell simpleperf vendor_rcs_app ))))
(typeattribute base_typeattr_1144)
(typeattributeset base_typeattr_1144 (and (vendor_rcs_app ) (not (runas_app shell simpleperf ))))
(typeattribute base_typeattr_1143)
(typeattributeset base_typeattr_1143 (and (domain ) (not (vendor_rcs_app ))))
(typeattribute base_typeattr_1142)
(typeattributeset base_typeattr_1142 (and (domain ) (not (crash_dump runas_app simpleperf systemui_app ))))
(typeattribute base_typeattr_1141)
(typeattributeset base_typeattr_1141 (and (appdomain ) (not (runas_app shell simpleperf systemui_app ))))
(typeattribute base_typeattr_1140)
(typeattributeset base_typeattr_1140 (and (systemui_app ) (not (runas_app shell simpleperf ))))
(typeattribute base_typeattr_1139)
(typeattributeset base_typeattr_1139 (and (domain ) (not (systemui_app ))))
(typeattribute base_typeattr_1138)
(typeattributeset base_typeattr_1138 (and (domain ) (not (crash_dump runas_app simpleperf pixelntnservice_app ))))
(typeattribute base_typeattr_1137)
(typeattributeset base_typeattr_1137 (and (appdomain ) (not (runas_app shell simpleperf pixelntnservice_app ))))
(typeattribute base_typeattr_1136)
(typeattributeset base_typeattr_1136 (and (pixelntnservice_app ) (not (runas_app shell simpleperf ))))
(typeattribute base_typeattr_1135)
(typeattributeset base_typeattr_1135 (and (domain ) (not (pixelntnservice_app ))))
(typeattribute base_typeattr_1134)
(typeattributeset base_typeattr_1134 (and (domain ) (not (crash_dump runas_app simpleperf pixeldisplayservice_app ))))
(typeattribute base_typeattr_1133)
(typeattributeset base_typeattr_1133 (and (appdomain ) (not (runas_app shell simpleperf pixeldisplayservice_app ))))
(typeattribute base_typeattr_1132)
(typeattributeset base_typeattr_1132 (and (pixeldisplayservice_app ) (not (runas_app shell simpleperf ))))
(typeattribute base_typeattr_1131)
(typeattributeset base_typeattr_1131 (and (domain ) (not (pixeldisplayservice_app ))))
(typeattribute base_typeattr_1130)
(typeattributeset base_typeattr_1130 (and (domain ) (not (crash_dump runas_app simpleperf grilservice_app ))))
(typeattribute base_typeattr_1129)
(typeattributeset base_typeattr_1129 (and (appdomain ) (not (runas_app shell simpleperf grilservice_app ))))
(typeattribute base_typeattr_1128)
(typeattributeset base_typeattr_1128 (and (grilservice_app ) (not (runas_app shell simpleperf ))))
(typeattribute base_typeattr_1127)
(typeattributeset base_typeattr_1127 (and (domain ) (not (grilservice_app ))))
(typeattribute base_typeattr_1126)
(typeattributeset base_typeattr_1126 (and (domain ) (not (crash_dump runas_app simpleperf con_monitor_app ))))
(typeattribute base_typeattr_1125)
(typeattributeset base_typeattr_1125 (and (appdomain ) (not (runas_app shell simpleperf con_monitor_app ))))
(typeattribute base_typeattr_1124)
(typeattributeset base_typeattr_1124 (and (con_monitor_app ) (not (runas_app shell simpleperf ))))
(typeattribute base_typeattr_1123)
(typeattributeset base_typeattr_1123 (and (domain ) (not (con_monitor_app ))))
(typeattribute base_typeattr_1122)
(typeattributeset base_typeattr_1122 (and (domain ) (not (crash_dump runas_app simpleperf dcservice_app ))))
(typeattribute base_typeattr_1121)
(typeattributeset base_typeattr_1121 (and (appdomain ) (not (runas_app shell simpleperf dcservice_app ))))
(typeattribute base_typeattr_1120)
(typeattributeset base_typeattr_1120 (and (dcservice_app ) (not (runas_app shell simpleperf ))))
(typeattribute base_typeattr_1119)
(typeattributeset base_typeattr_1119 (and (domain ) (not (dcservice_app ))))
(typeattribute base_typeattr_1118)
(typeattributeset base_typeattr_1118 (and (domain ) (not (crash_dump runas_app simpleperf pixelsystemservice_app ))))
(typeattribute base_typeattr_1117)
(typeattributeset base_typeattr_1117 (and (appdomain ) (not (runas_app shell simpleperf pixelsystemservice_app ))))
(typeattribute base_typeattr_1116)
(typeattributeset base_typeattr_1116 (and (pixelsystemservice_app ) (not (runas_app shell simpleperf ))))
(typeattribute base_typeattr_1115)
(typeattributeset base_typeattr_1115 (and (domain ) (not (pixelsystemservice_app ))))
(typeattribute base_typeattr_1114)
(typeattributeset base_typeattr_1114 (and (domain ) (not (crash_dump runas_app simpleperf connectivity_thermal_power_manager ))))
(typeattribute base_typeattr_1113)
(typeattributeset base_typeattr_1113 (and (appdomain ) (not (runas_app shell simpleperf connectivity_thermal_power_manager ))))
(typeattribute base_typeattr_1112)
(typeattributeset base_typeattr_1112 (and (connectivity_thermal_power_manager ) (not (runas_app shell simpleperf ))))
(typeattribute base_typeattr_1111)
(typeattributeset base_typeattr_1111 (and (domain ) (not (connectivity_thermal_power_manager ))))
(typeattribute base_typeattr_1110)
(typeattributeset base_typeattr_1110 (and (domain ) (not (crash_dump runas_app simpleperf turbo_adapter ))))
(typeattribute base_typeattr_1109)
(typeattributeset base_typeattr_1109 (and (appdomain ) (not (runas_app shell simpleperf turbo_adapter ))))
(typeattribute base_typeattr_1108)
(typeattributeset base_typeattr_1108 (and (turbo_adapter ) (not (runas_app shell simpleperf ))))
(typeattribute base_typeattr_1107)
(typeattributeset base_typeattr_1107 (and (domain ) (not (turbo_adapter ))))
(typeattribute base_typeattr_1106)
(typeattributeset base_typeattr_1106 (and (domain ) (not (crash_dump runas_app simpleperf repair_mode_app ))))
(typeattribute base_typeattr_1105)
(typeattributeset base_typeattr_1105 (and (appdomain ) (not (runas_app shell simpleperf repair_mode_app ))))
(typeattribute base_typeattr_1104)
(typeattributeset base_typeattr_1104 (and (repair_mode_app ) (not (runas_app shell simpleperf ))))
(typeattribute base_typeattr_1103)
(typeattributeset base_typeattr_1103 (and (domain ) (not (repair_mode_app ))))
(typeattribute base_typeattr_1102)
(typeattributeset base_typeattr_1102 (and (domain ) (not (crash_dump runas_app simpleperf flag_flipper_app ))))
(typeattribute base_typeattr_1101)
(typeattributeset base_typeattr_1101 (and (appdomain ) (not (runas_app shell simpleperf flag_flipper_app ))))
(typeattribute base_typeattr_1100)
(typeattributeset base_typeattr_1100 (and (flag_flipper_app ) (not (runas_app shell simpleperf ))))
(typeattribute base_typeattr_1099)
(typeattributeset base_typeattr_1099 (and (domain ) (not (flag_flipper_app ))))
(typeattribute base_typeattr_1098)
(typeattributeset base_typeattr_1098 (and (domain ) (not (crash_dump runas_app simpleperf flipendo ))))
(typeattribute base_typeattr_1097)
(typeattributeset base_typeattr_1097 (and (appdomain ) (not (runas_app shell simpleperf flipendo ))))
(typeattribute base_typeattr_1096)
(typeattributeset base_typeattr_1096 (and (flipendo ) (not (runas_app shell simpleperf ))))
(typeattribute base_typeattr_1095)
(typeattributeset base_typeattr_1095 (and (domain ) (not (flipendo ))))
(typeattribute base_typeattr_1094)
(typeattributeset base_typeattr_1094 (and (domain ) (not (crash_dump runas_app simpleperf rilextensionservice_app ))))
(typeattribute base_typeattr_1093)
(typeattributeset base_typeattr_1093 (and (appdomain ) (not (runas_app shell simpleperf rilextensionservice_app ))))
(typeattribute base_typeattr_1092)
(typeattributeset base_typeattr_1092 (and (rilextensionservice_app ) (not (runas_app shell simpleperf ))))
(typeattribute base_typeattr_1091)
(typeattributeset base_typeattr_1091 (and (domain ) (not (rilextensionservice_app ))))
(typeattribute base_typeattr_1090)
(typeattributeset base_typeattr_1090 (and (domain ) (not (edgetpu_app_server ))))
(typeattribute base_typeattr_1089)
(typeattributeset base_typeattr_1089 (and (domain ) (not (hal_audio_parameter_parser ))))
(typeattribute base_typeattr_1088)
(typeattributeset base_typeattr_1088 (and (domain ) (not (crash_dump runas_app simpleperf factory_ota_app ))))
(typeattribute base_typeattr_1087)
(typeattributeset base_typeattr_1087 (and (appdomain ) (not (runas_app shell simpleperf factory_ota_app ))))
(typeattribute base_typeattr_1086)
(typeattributeset base_typeattr_1086 (and (factory_ota_app ) (not (runas_app shell simpleperf ))))
(typeattribute base_typeattr_1085)
(typeattributeset base_typeattr_1085 (and (domain ) (not (factory_ota_app ))))