|
typeattribute recovery_refresh coredomain;
|
|
|
|
init_daemon_domain(recovery_refresh)
|
|
|
|
# recovery_refresh is not allowed to write anywhere
|
|
neverallow recovery_refresh {
|
|
file_type
|
|
userdebug_or_eng(`-coredump_file')
|
|
with_native_coverage(`-method_trace_data_file')
|
|
}:file write;
|