1{ 2 "common" : [{ 3 "top-sandbox-switch": "ON", 4 "app-base" : [{ 5 "sandbox-root" : "/mnt/sandbox/<PackageName>", 6 "mount-paths" : [{ 7 "src-path" : "/config", 8 "sandbox-path" : "/config", 9 "sandbox-flags" : [ "bind", "rec" ], 10 "check-action-status": "false" 11 }, { 12 "src-path" : "/dev", 13 "sandbox-path" : "/dev", 14 "sandbox-flags" : [ "bind", "rec" ], 15 "check-action-status": "false" 16 }, { 17 "src-path" : "/proc", 18 "sandbox-path" : "/proc", 19 "sandbox-flags" : [ "bind", "rec" ], 20 "check-action-status": "false" 21 }, { 22 "src-path" : "/sys", 23 "sandbox-path" : "/sys", 24 "sandbox-flags" : [ "bind", "rec" ], 25 "check-action-status": "false" 26 }, { 27 "src-path" : "/sys_prod", 28 "sandbox-path" : "/sys_prod", 29 "sandbox-flags" : [ "bind", "rec" ], 30 "check-action-status": "false" 31 }, { 32 "src-path" : "/system/app", 33 "sandbox-path" : "/system/app", 34 "sandbox-flags" : [ "bind", "rec" ], 35 "check-action-status": "false" 36 }, { 37 "src-path" : "/system/fonts", 38 "sandbox-path" : "/system/fonts", 39 "sandbox-flags" : [ "bind", "rec" ], 40 "check-action-status": "false" 41 }, { 42 "src-path" : "/system/lib", 43 "sandbox-path" : "/system/lib", 44 "sandbox-flags" : [ "bind", "rec" ], 45 "check-action-status": "false" 46 }, { 47 "src-path" : "/system/asan/lib", 48 "sandbox-path" : "/system/asan/lib", 49 "sandbox-flags" : [ "bind", "rec" ], 50 "check-action-status": "false" 51 }, { 52 "src-path" : "/system/lib64", 53 "sandbox-path" : "/system/lib64", 54 "sandbox-flags" : [ "bind", "rec" ], 55 "check-action-status": "false" 56 }, { 57 "src-path" : "/system/asan/lib64", 58 "sandbox-path" : "/system/asan/lib64", 59 "sandbox-flags" : [ "bind", "rec" ], 60 "check-action-status": "false" 61 }, { 62 "src-path" : "/system/data", 63 "sandbox-path" : "/system/data", 64 "sandbox-flags" : [ "bind", "rec" ], 65 "check-action-status": "false" 66 }, { 67 "src-path" : "/system/usr", 68 "sandbox-path" : "/system/usr", 69 "sandbox-flags" : [ "bind", "rec" ], 70 "check-action-status": "false" 71 }, { 72 "src-path" : "/system/profile", 73 "sandbox-path" : "/system/profile", 74 "sandbox-flags" : [ "bind", "rec" ], 75 "check-action-status": "false" 76 }, { 77 "src-path" : "/system/bin", 78 "sandbox-path" : "/system/bin", 79 "sandbox-flags" : [ "bind", "rec" ], 80 "check-action-status": "false" 81 }, { 82 "src-path" : "/system/etc", 83 "sandbox-path" : "/system/etc", 84 "sandbox-flags" : [ "bind", "rec" ], 85 "check-action-status": "false" 86 }, { 87 "src-path" : "/vendor/lib64", 88 "sandbox-path" : "/vendor/lib64", 89 "sandbox-flags" : [ "bind", "rec" ], 90 "check-action-status": "false" 91 }, { 92 "src-path" : "/vendor/asan/lib64", 93 "sandbox-path" : "/vendor/asan/lib64", 94 "sandbox-flags" : [ "bind", "rec" ], 95 "check-action-status": "false" 96 }, { 97 "src-path" : "/data/app/el1/bundle/public/<PackageName>", 98 "sandbox-path" : "/data/storage/el1/bundle", 99 "sandbox-flags" : [ "bind", "rec" ], 100 "check-action-status": "true" 101 }, { 102 "src-path" : "/data/app/el2/<currentUserId>/base/<PackageName>", 103 "sandbox-path" : "/data/storage/el2/base", 104 "sandbox-flags" : [ "bind", "rec" ], 105 "check-action-status": "false" 106 },{ 107 "src-path" : "/data/app/el1/<currentUserId>/database/<PackageName>", 108 "sandbox-path" : "/data/storage/el1/database", 109 "sandbox-flags" : [ "bind", "rec" ], 110 "check-action-status": "true" 111 }, { 112 "src-path" : "/data/app/el2/<currentUserId>/database/<PackageName>", 113 "sandbox-path" : "/data/storage/el2/database", 114 "sandbox-flags" : [ "bind", "rec" ], 115 "check-action-status": "false" 116 }, { 117 "src-path" : "/data/app/el1/<currentUserId>/base/<PackageName>", 118 "sandbox-path" : "/data/storage/el1/base", 119 "sandbox-flags" : [ "bind", "rec" ], 120 "check-action-status": "true" 121 }, { 122 "src-path" : "/mnt/hmdfs/<currentUserId>", 123 "sandbox-path" : "/mnt/hmdfs/<currentUserId>", 124 "sandbox-flags" : [ "bind", "rec" ], 125 "check-action-status": "false" 126 }, { 127 "src-path" : "/mnt/hmdfs/<currentUserId>/account/merge_view/data/<PackageName>", 128 "sandbox-path" : "/data/storage/el2/distributedfiles", 129 "sandbox-flags" : [ "bind", "rec" ], 130 "check-action-status": "false" 131 }, { 132 "src-path" : "/mnt/hmdfs/<currentUserId>/non_account/merge_view/data/", 133 "sandbox-path" : "/data/storage/el2/auth_groups", 134 "sandbox-flags" : [ "bind", "rec" ], 135 "check-action-status": "false" 136 }, { 137 "src-path" : "/data/local/ark-cache/<PackageName>", 138 "sandbox-path" : "/data/storage/ark-cache", 139 "sandbox-flags" : [ "bind", "rec" ], 140 "check-action-status": "false" 141 }, { 142 "src-path" : "/data/local/ark-profile/<currentUserId>/<PackageName>", 143 "sandbox-path" : "/data/storage/ark-profile", 144 "sandbox-flags" : [ "bind", "rec" ], 145 "check-action-status": "false" 146 }, { 147 "src-path" : "/mnt/share/<currentUserId>/<PackageName>", 148 "sandbox-path" : "/data/storage/el2/share", 149 "sandbox-flags" : [ "bind", "rec" ], 150 "check-action-status": "false" 151 } 152 ], 153 "symbol-links" : [{ 154 "target-name" : "/system/bin", 155 "link-name" : "/bin", 156 "check-action-status": "false" 157 }, { 158 "target-name" : "/system/lib64", 159 "link-name" : "/lib64", 160 "check-action-status": "false" 161 }, { 162 "target-name" : "/system/lib", 163 "link-name" : "/lib", 164 "check-action-status": "false" 165 }, { 166 "target-name" : "/system/etc", 167 "link-name" : "/etc", 168 "check-action-status": "false" 169 }, { 170 "target-name" : "/sys/kernel/debug", 171 "link-name" : "/d", 172 "check-action-status": "false" 173 } 174 ] 175 }], 176 "app-resources" : [{ 177 "sandbox-root" : "/mnt/sandbox/<PackageName>", 178 "mount-paths" : [{ 179 "src-path" : "/data/app/el1/bundle/public/com.ohos.nweb", 180 "sandbox-path" : "/data/storage/el1/bundle/nweb", 181 "sandbox-flags" : [ "bind", "rec" ], 182 "check-action-status": "false" 183 }, { 184 "src-path" : "/data/app/el1/bundle/public/ohos.global.systemres", 185 "sandbox-path" : "/data/storage/el1/bundle/ohos.global.systemres", 186 "sandbox-flags" : [ "bind", "rec" ], 187 "check-action-status": "false" 188 }, { 189 "src-path" : "/system/app/ohos.global.systemres", 190 "sandbox-path" : "/data/storage/el1/bundle/systemResources", 191 "sandbox-flags" : [ "bind", "rec" ], 192 "check-action-status": "false" 193 }, { 194 "src-path" : "/data/app/el1/bundle/public/ohos.global.systemres.overlay", 195 "sandbox-path" : "/data/storage/el1/bundle/ohos.global.systemres.overlay", 196 "sandbox-flags" : [ "bind", "rec" ], 197 "check-action-status": "false" 198 }, { 199 "src-path" : "/data/misc", 200 "sandbox-path" : "/data/storage/el1/bundle/misc", 201 "sandbox-flags" : [ "bind", "rec" ], 202 "check-action-status": "false" 203 } 204 ], 205 "flags-point" : [{ 206 "flags": "DLP_MANAGER", 207 "sandbox-root" : "/mnt/sandbox/<PackageName>", 208 "mount-paths" : [{ 209 "src-path" : "/data/app/el2/<currentUserId>/base/<PackageName_index>", 210 "sandbox-path" : "/data/storage/el2/base", 211 "sandbox-flags" : [ "bind", "rec" ], 212 "check-action-status": "false" 213 },{ 214 "src-path" : "/data/app/el1/<currentUserId>/database/<PackageName_index>", 215 "sandbox-path" : "/data/storage/el1/database", 216 "sandbox-flags" : [ "bind", "rec" ], 217 "check-action-status": "false" 218 }, { 219 "src-path" : "/data/app/el2/<currentUserId>/database/<PackageName_index>", 220 "sandbox-path" : "/data/storage/el2/database", 221 "sandbox-flags" : [ "bind", "rec" ], 222 "check-action-status": "false" 223 }, { 224 "src-path" : "/data/app/el1/<currentUserId>/base/<PackageName_index>", 225 "sandbox-path" : "/data/storage/el1/base", 226 "sandbox-flags" : [ "bind", "rec" ], 227 "check-action-status": "false" 228 } 229 ]}, { 230 "flags": "START_FLAGS_BACKUP", 231 "sandbox-root" : "/mnt/sandbox/<PackageName>", 232 "mount-paths": [{ 233 "src-path": "/data/service/el2/<currentUserId>/backup/bundles/<PackageName>", 234 "sandbox-path": "/data/storage/el2/backup", 235 "sandbox-flags": [ "bind", "rec" ], 236 "check-action-status": "false" 237 } 238 ]} 239 ], 240 "symbol-links" : [ 241 ] 242 }] 243 }], 244 "individual" : [{ 245 "com.huawei.ohos.hiviewx" : [{ 246 "sandbox-switch": "ON", 247 "sandbox-root" : "/mnt/sandbox/<PackageName>", 248 "mount-paths" : [{ 249 "src-path" : "/data/log/", 250 "sandbox-path" : "/data/log/", 251 "sandbox-flags" : [ "bind", "rec" ], 252 "check-action-status": "true" 253 } 254 ], 255 "symbol-links" : [] 256 }], 257 "com.huawei.ohos.betaclub" : [{ 258 "sandbox-switch": "ON", 259 "sandbox-root" : "/mnt/sandbox/<PackageName>", 260 "mount-paths" : [{ 261 "src-path" : "/data/log/", 262 "sandbox-path" : "/data/log/", 263 "sandbox-flags" : [ "bind", "rec" ], 264 "check-action-status": "true" 265 } 266 ], 267 "symbol-links" : [] 268 }], 269 "com.ohos.medialibrary.medialibrarydata" : [{ 270 "sandbox-switch": "ON", 271 "sandbox-root" : "/mnt/sandbox/<PackageName>", 272 "mount-paths" : [{ 273 "src-path" : "/storage/media/<currentUserId>", 274 "sandbox-path" : "/storage/media", 275 "sandbox-flags" : [ "bind", "rec" ], 276 "check-action-status": "false" 277 }, { 278 "src-path" : "none", 279 "sandbox-path" : "/storage/media/local/epfs", 280 "sandbox-flags" : [ "MS_NODEV" ], 281 "fs-type": "epfs", 282 "check-action-status": "false" 283 } 284 ], 285 "symbol-links" : [] 286 }], 287 "com.ohos.launcher" : [{ 288 "sandbox-switch": "ON", 289 "sandbox-root" : "/mnt/sandbox/<PackageName>", 290 "mount-paths" : [{ 291 "src-path" : "/data/app/el1/bundle/public/", 292 "sandbox-path" : "/data/bundles/", 293 "sandbox-flags" : [ "bind", "rec" ], 294 "check-action-status": "true" 295 } 296 ], 297 "symbol-links" : [] 298 }], 299 "com.ohos.systemui" : [{ 300 "sandbox-switch": "ON", 301 "sandbox-root" : "/mnt/sandbox/<PackageName>", 302 "mount-paths" : [{ 303 "src-path" : "/data/app/el1/bundle/public/", 304 "sandbox-path" : "/data/app/el1/bundle/public/", 305 "sandbox-flags" : [ "bind", "rec" ], 306 "check-action-status": "true" 307 } 308 ], 309 "symbol-links" : [] 310 }], 311 "com.ohos.permissionmanager" : [{ 312 "sandbox-switch": "ON", 313 "sandbox-root" : "/mnt/sandbox/<PackageName>", 314 "mount-paths" : [{ 315 "src-path" : "/data/app/el1/bundle/public/", 316 "sandbox-path" : "/data/bundles/", 317 "sandbox-flags" : [ "bind", "rec" ], 318 "check-action-status": "true" 319 } 320 ], 321 "symbol-links" : [] 322 }], 323 "ohos.samples.ecg" : [{ 324 "sandbox-switch": "OFF", 325 "sandbox-root" : "/mnt/sandbox/<PackageName>", 326 "mount-paths" : [{ 327 "src-path" : "/data/app/el1/bundle/public/", 328 "sandbox-path" : "/data/bundles/", 329 "sandbox-flags" : [ "bind", "rec" ], 330 "check-action-status": "true" 331 } 332 ], 333 "symbol-links" : [] 334 }], 335 "com.ohos.dlpmanager" : [{ 336 "sandbox-switch": "ON", 337 "sandbox-root" : "/mnt/sandbox/<PackageName>", 338 "mount-paths" : [{ 339 "src-path" : "/dev/fuse", 340 "sandbox-path" : "/data/fuse", 341 "sandbox-flags" : [ "MS_NOSUID", "MS_NODEV", "MS_NOEXEC", "MS_NOATIME", "MS_LAZYTIME" ], 342 "fs-type": "fuse", 343 "check-action-status": "false" 344 } 345 ], 346 "symbol-links" : [] 347 }], 348 "com.ohos.UserFile.ExternalFileManager" : [{ 349 "sandbox-switch": "ON", 350 "sandbox-root" : "/mnt/sandbox/<PackageName>", 351 "mount-paths" : [{ 352 "src-path" : "/data/service/el1/public/storage_daemon/share/public", 353 "sandbox-path" : "/data/storage/el1/bundle/storage_daemon", 354 "sandbox-flags" : [ "bind", "rec" ], 355 "check-action-status": "true" 356 }, 357 { 358 "src-path" : "/mnt/external", 359 "sandbox-path" : "/mnt/external", 360 "sandbox-flags" : [ "bind", "rec" ], 361 "check-action-status": "true" 362 } 363 ], 364 "symbol-links" : [] 365 }], 366 "__internal__.com.ohos.render" : [{ 367 "sandbox-switch": "ON", 368 "sandbox-root" : "/mnt/sandbox/com.ohos.render/<PackageName>", 369 "mount-paths" : [{ 370 "src-path" : "/dev", 371 "sandbox-path" : "/dev", 372 "sandbox-flags" : [ "bind", "rec" ], 373 "check-action-status": "false" 374 }, { 375 "src-path" : "/proc", 376 "sandbox-path" : "/proc", 377 "sandbox-flags" : [ "bind", "rec" ], 378 "check-action-status": "false" 379 }, { 380 "src-path" : "/sys", 381 "sandbox-path" : "/sys", 382 "sandbox-flags" : [ "bind", "rec" ], 383 "check-action-status": "false" 384 }, { 385 "src-path" : "/system/fonts", 386 "sandbox-path" : "/system/fonts", 387 "sandbox-flags" : [ "bind", "rec" ], 388 "check-action-status": "false" 389 }, { 390 "src-path" : "/system/etc", 391 "sandbox-path" : "/system/etc", 392 "sandbox-flags" : [ "bind", "rec" ], 393 "check-action-status": "false" 394 }, { 395 "src-path" : "/data/app/el2/<currentUserId>/base/<PackageName>", 396 "sandbox-path" : "/data/storage/el2/base", 397 "sandbox-flags" : [ "bind", "rec" ], 398 "check-action-status": "true" 399 }, { 400 "src-path" : "/data/app/el1/bundle/public/com.ohos.nweb", 401 "sandbox-path" : "/data/storage/el1/bundle/nweb", 402 "sandbox-flags" : [ "bind", "rec" ], 403 "check-action-status": "false" 404 }, { 405 "src-path" : "/system/bin", 406 "sandbox-path" : "/system/bin", 407 "sandbox-flags" : [ "bind", "rec" ], 408 "check-action-status": "false" 409 }, { 410 "src-path" : "/system/lib", 411 "sandbox-path" : "/system/lib", 412 "sandbox-flags" : [ "bind", "rec" ], 413 "check-action-status": "false" 414 }, { 415 "src-path" : "/system/lib64", 416 "sandbox-path" : "/system/lib64", 417 "sandbox-flags" : [ "bind", "rec" ], 418 "check-action-status": "false" 419 }, { 420 "src-path" : "/system/app/com.ohos.nweb", 421 "sandbox-path" : "/system/app/com.ohos.nweb", 422 "sandbox-flags" : [ "bind", "rec" ], 423 "check-action-status": "false" 424 }, { 425 "src-path" : "/vendor/lib64", 426 "sandbox-path" : "/vendor/lib64", 427 "sandbox-flags" : [ "bind", "rec" ], 428 "check-action-status": "false" 429 }, { 430 "src-path" : "/data/app/el1/bundle/public/com.ohos.nweb", 431 "sandbox-path" : "/data/app/el1/bundle/public/com.ohos.nweb", 432 "sandbox-flags" : [ "bind", "rec" ], 433 "check-action-status": "false" 434 } 435 ], 436 "symbol-links" : [ { 437 "target-name" : "/system/etc", 438 "link-name" : "/etc", 439 "check-action-status": "false" 440 }, { 441 "target-name" : "/system/bin", 442 "link-name" : "/bin", 443 "check-action-status": "false" 444 }, { 445 "target-name" : "/system/lib", 446 "link-name" : "/lib", 447 "check-action-status": "false" 448 }, { 449 "target-name" : "/system/lib64", 450 "link-name" : "/lib64", 451 "check-action-status": "false" 452 } 453 ] 454 }] 455 }] 456} 457