### | |
### Services with isolatedProcess=true in their manifest. | |
### | |
### This file defines the rules for isolated apps. An "isolated | |
### app" is an APP with UID between AID_ISOLATED_START (99000) | |
### and AID_ISOLATED_END (99999). | |
### | |
type isolated_app, domain; | |
# system/sepolicy/public is for vendor-facing type and attribute definitions. | |
# DO NOT ADD allow, neverallow, or dontaudit statements here. | |
# Instead, add such policy rules to system/sepolicy/private/*.te. |