Lines Matching refs:domain

14 type system_core_hap, domain;
15 type system_basic_hap, domain;
16 type normal_hap, domain;
17 type debug_hap, domain, hap_domain, normal_hap_attr;
22 neverallow normal_hap_attr { domain -normal_hap_attr }:file never_rw_file;
24 neverallow { domain -normal_hap_attr -processdump } normal_hap_attr:process ptrace;
29 neverallow system_core_hap_attr { domain -system_core_hap_attr }:file never_rw_file;
31 neverallow { domain -system_core_hap_attr -processdump } system_core_hap_attr:process ptrace;
36 neverallow system_basic_hap_attr { domain -system_basic_hap_attr }:file never_rw_file;
38 neverallow { domain -system_basic_hap_attr -processdump } system_basic_hap_attr:process ptrace;
79 #haps can't modify files of other domain.
80 neverallow hap_domain { domain -hap_domain }:file never_write_file;
82 neverallow hap_domain { domain -hap_domain }:file never_rw_file;
103 neverallow hap_domain domain:netlink_kobject_uevent_socket { write append };
106 neverallow hap_domain { domain -hap_domain }:process ptrace;
107 neverallow { domain -hap_domain -processdump } hap_domain:process ptrace;
109 #hap don't bother other domain.
110 neverallow hap_domain { domain -hap_domain }:process { sigkill sigstop signal };
136 neverallow { domain -hap_domain -installs debug_only(`-hdcd') -sh -storage_daemon -distributeddata …
141 neverallow { domain -hap_domain -installs -storage_daemon debug_only(`-hdcd')  -distributeddata -hi…
146 neverallow { domain -hap_domain -installs debug_only(`-hdcd') -distributeddata -storage_daemon -hiv…
148 neverallow { domain -hap_domain -installs -appspawn -nwebspawn debug_only(`-hdcd') -distributeddata…
150 neverallow { domain -hap_domain -installs debug_only(`-hdcd') -distributeddata -storage_daemon -hiv…
152 neverallow { domain -installs } normal_hap_data_file_attr:dir_file_class_set { relabelfrom relabelt…
154 neverallow hap_domain { domain -hap_domain -processdump }:process transition;
155 neverallow hap_domain { domain -hap_domain }:process dyntransition;
157 neverallow hap_domain domain:{ netlink_tcpdiag_socket netlink_nflog_socket netlink_xfrm_socket netl…
159 neverallow hap_domain domain:netlink_kobject_uevent_socket { write append };
168 neverallow { domain -hap_domain -nwebspawn } data_file_attr:file { execute execute_no_trans };
176 neverallow { domain -installs } normal_hap_data_file_attr:dir_file_class_set { relabelfrom relabelt…