<?xml version="1.0" encoding="utf-8"?>
<policy>

<!--

    * A signature is a hex encoded X.509 certificate or a tag defined in
      keys.conf and is required for each signer tag.
    * A signer tag may contain a seinfo tag and multiple package stanzas.
    * A default tag is allowed that can contain policy for all apps not signed with a
      previously listed cert. It may not contain any inner package stanzas.
    * Each signer/default/package tag is allowed to contain one seinfo tag. This tag
      represents additional info that each app can use in setting a SELinux security
      context on the eventual process.
    * When a package is installed the following logic is used to determine what seinfo
      value, if any, is assigned.
      - All signatures used to sign the app are checked first.
      - If a signer stanza has inner package stanzas, those stanza will be checked
        to try and match the package name of the app. If the package name matches
        then that seinfo tag is used. If no inner package matches then the outer
        seinfo tag is assigned.
      - The default tag is consulted last if needed.
-->
    <!-- google apps key -->
    <signer signature="@GOOGLE" >
      <seinfo value="google" />
    </signer>
    <signer signature="@GOOGLEPULSE" >
      <seinfo value="googlepulse" />
    </signer>
    <signer signature="@TANGO" >
      <seinfo value="tango" />
    </signer>
    <signer signature="@TANGO_DEV" >
      <seinfo value="tango" />
    </signer>
    <signer signature="@EASEL" >
      <seinfo value="easel" />
    </signer>
    <signer signature="@ARCORE" >
      <seinfo value="arcore" />
    </signer>
    <signer signature="@ARCORE_DEV" >
      <seinfo value="arcore" />
    </signer>
</policy>