1# TODO: deal with tmpfs_domain pub/priv split properly
2# Read system properties managed by zygote.
3allow appdomain zygote_tmpfs:file read;
4
5neverallow appdomain system_server:udp_socket {
6 accept append bind create ioctl listen lock name_bind
7 relabelfrom relabelto setattr shutdown };
8