1# Copyright (c) 2022 Huawei Device Co., Ltd. 2# Licensed under the Apache License, Version 2.0 (the License); 3# you may not use this file except in compliance with the License. 4# You may obtain a copy of the License at 5# 6# http://www.apache.org/licenses/LICENSE-2.0 7# 8# Unless required by applicable law or agreed to in writing, software 9# distributed under the License is distributed on an "AS IS" BASIS, 10# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 11# See the License for the specific language governing permissions and 12# limitations under the License. 13 14type useriam, sadomain, domain; 15type sa_useriam_userauth_service, sa_service_attr; 16type sa_useriam_useridm_service, sa_service_attr; 17type sa_useriam_authexecutormgr_service, sa_service_attr; 18type sa_useriam_faceauth_service, sa_service_attr; 19type sa_useriam_fingerprintauth_service, sa_service_attr; 20 21#avc: denied { add } for service=901 pid=573 scontext=u:r:useriam:s0 tcontext=u:object_r:sa_useriam_useridm_service:s0 tclass=samgr_class permissive=1 22allow useriam sa_useriam_useridm_service:samgr_class { add }; 23 24#avc: denied { add } for service=921 pid=573 scontext=u:r:useriam:s0 tcontext=u:object_r:sa_useriam_userauth_service:s0 tclass=samgr_class permissive=1 25allow useriam sa_useriam_userauth_service:samgr_class { add }; 26 27#avc: denied { add } for service=931 pid=573 scontext=u:r:useriam:s0 tcontext=u:object_r:sa_useriam_authexecutormgr_service:s0 tclass=samgr_class permissive=1 28allow useriam sa_useriam_authexecutormgr_service:samgr_class { add }; 29 30#avc: denied { add } for service=942 pid=515 scontext=u:r:useriam:s0 tcontext=u:object_r:sa_useriam_faceauth_service:s0 tclass=samgr_class permissive=1 31allow useriam sa_useriam_faceauth_service:samgr_class { add }; 32 33#avc: denied { add } for service=943 pid=918 scontext=u:r:fingerprintauth:s0 tcontext=u:object_r:sa_useriam_fingerprintauth_service:s0 tclass=samgr_class permissive=1 34allow useriam sa_useriam_fingerprintauth_service:samgr_class { add }; 35 36#avc: denied { get } for service=931 pid=515 scontext=u:r:useriam:s0 tcontext=u:object_r:sa_useriam_authexecutormgr_service:s0 tclass=samgr_class permissive=1 37allow useriam sa_useriam_authexecutormgr_service:samgr_class { get }; 38 39#avc: denied { get } for service=3503 pid=573 scontext=u:r:useriam:s0 tcontext=u:object_r:sa_accesstoken_manager_service:s0 tclass=samgr_class permissive=1 40allow useriam sa_accesstoken_manager_service:samgr_class { get }; 41 42#avc: denied { get } for service=5100 pid=573 scontext=u:r:useriam:s0 tcontext=u:object_r:sa_device_service_manager:s0 tclass=samgr_class permissive=1 43allow useriam sa_device_service_manager:samgr_class { get }; 44 45#avc: denied { get } for service=200 pid=573 scontext=u:r:useriam:s0 tcontext=u:object_r:sa_accountmgr:s0 tclass=samgr_class permissive=1 46allow useriam sa_accountmgr:samgr_class { get }; 47 48#avc: denied { get } for service=user_auth_interface_service pid=573 scontext=u:r:useriam:s0 tcontext=u:object_r:hdf_user_auth_interface_service:s0 tclass=hdf_devmgr_class permissive=1 49allow useriam hdf_user_auth_interface_service:hdf_devmgr_class { get }; 50 51#avc: denied { get } for service=face_auth_interface_service pid=552 scontext=u:r:useriam:s0 tcontext=u:object_r:hdf_face_auth_interface_service:s0 tclass=hdf_devmgr_class permissive=1 52allow useriam hdf_face_auth_interface_service:hdf_devmgr_class { get }; 53 54#avc: denied { get } for service=fingerprint_auth_interface_service pid=918 scontext=u:r:fingerprintauth:s0 tcontext=u:object_r:hdf_fingerprint_auth_interface_service:s0 tclass=hdf_devmgr_class permissive=1 55allow useriam hdf_fingerprint_auth_interface_service:hdf_devmgr_class { get }; 56 57#avc: denied { get } for service=401 pid=520 scontext=u:r:useriam:s0 tcontext=u:object_r:sa_foundation_bms:s0 tclass=samgr_class permissive=0 58allow useriam sa_foundation_bms:samgr_class { get }; 59 60#avc: denied { call } for pid=509 comm="IPC_1_853" scontext=u:r:useriam:s0 tcontext=u:r:foundation:s0 tclass=binder permissive=0 61allow useriam foundation:binder { call }; 62