1# Domain for shell processes spawned by ADB or console service. 2type shell, domain, mlstrustedsubject; 3type shell_exec, system_file_type, exec_type, file_type; 4 5# system/sepolicy/public is for vendor-facing type and attribute definitions. 6# DO NOT ADD allow, neverallow, or dontaudit statements here. 7# Instead, add such policy rules to system/sepolicy/private/*.te. 8