| ### | |
| ### Apps that run with the system UID, e.g. com.android.system.ui, | |
| ### com.android.settings. These are not as privileged as the system | |
| ### server. | |
| ### | |
| type system_app, domain; | |
| # system/sepolicy/public is for vendor-facing type and attribute definitions. | |
| # DO NOT ADD allow, neverallow, or dontaudit statements here. | |
| # Instead, add such policy rules to system/sepolicy/private/*.te. |