1# Copyright (c) 2022 Huawei Device Co., Ltd. 2# Licensed under the Apache License, Version 2.0 (the "License"); 3# you may not use this file except in compliance with the License. 4# You may obtain a copy of the License at 5# 6# http://www.apache.org/licenses/LICENSE-2.0 7# 8# Unless required by applicable law or agreed to in writing, software 9# distributed under the License is distributed on an "AS IS" BASIS, 10# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 11# See the License for the specific language governing permissions and 12# limitations under the License. 13 14allow foundation accountmgr:binder { call }; 15allow foundation appspawn:unix_stream_socket { connectto }; 16allow foundation appspawn_socket:sock_file { write }; 17allow foundation bgtaskmgr_service:binder { call }; 18allow foundation data_app_el1_file:dir { search }; 19allow foundation data_app_el1_file:file { getattr read }; 20allow foundation data_app_file:dir { search }; 21allow foundation data_service_el1_file:dir { add_name search write }; 22allow foundation data_service_el1_file:file { create getattr ioctl open read write open write }; 23allow foundation data_service_file:dir { search }; 24allow foundation dev_mali:chr_file { ioctl }; 25allow foundation disp_gralloc_host:fd { use }; 26allow foundation distributeddata:binder { call transfer }; 27allow foundation foundation:unix_dgram_socket { getopt setopt }; 28allow foundation hiview:binder { transfer }; 29allow foundation inputmethod_service:binder { call }; 30allow foundation media_service:binder { call transfer }; 31allow foundation power_host:binder { call }; 32allow foundation samgr:binder { call transfer }; 33allow foundation sa_media_service:samgr_class { get }; 34allow foundation system_basic_hap:binder { call }; 35allow foundation system_basic_hap:fd { use }; 36allowxperm foundation data_service_el1_file:file ioctl { 0x5413 }; 37allowxperm foundation dev_mali:chr_file ioctl { 0x801e }; 38 39