Home
last modified time | relevance | path

Searched refs:search (Results 1 – 25 of 405) sorted by relevance

12345678910>>...17

/base/security/selinux_adapter/sepolicy/ohos_policy/test_framework/wukong/system/
Dsh.te24 allow sh accessibility:dir { getattr search };
27 allow sh accountmgr:dir { getattr search };
29 allow sh appspawn:dir { getattr search };
31 allow sh audio_policy:dir { getattr search };
33 allow sh blue_host:dir { getattr search };
35 allow sh bluetooth_service:dir { getattr search };
37 allow sh bootanimation:dir { search };
39 allow sh camera_host:dir { getattr search };
41 allow sh camera_service:dir { getattr search };
43 allow sh codec_host:dir { getattr search };
[all …]
/base/security/selinux_adapter/sepolicy/base/te/
Dsh.te14 allow sh appspawn:dir { getattr search };
17 allow sh bluetooth_service:dir { getattr search };
22 allow sh camera_service:dir { getattr search };
24 allow sh console:dir { getattr search };
36 dontaudit sh data_app_el1_file:dir { add_name create search write };
37 dontaudit sh data_app_el2_file:dir { getattr open read remove_name rmdir search write };
38 dontaudit sh data_app_el3_file:dir { getattr open read remove_name rmdir search write };
39 dontaudit sh data_app_el4_file:dir { getattr open remove_name rmdir search write };
44 allow sh data_appstaging:dir { getattr open read rmdir search };
46 allow sh data_bluetooth:dir { getattr open read remove_name search write };
[all …]
Dinstalls.te25 allow installs data_app_el1_file:dir { add_name create getattr open read relabelfrom rename search
27 allow installs data_app_el2_file:dir { add_name create getattr open read relabelfrom search setattr…
28 allow installs data_app_file:dir { search };
29 allow installs data_file:dir { add_name create getattr open read search setattr write };
30 allow installs data_service_el1_file:dir { add_name create getattr open read remove_name search set…
32 allow installs data_service_el2_file:dir { add_name create open read search setattr write };
33 allow installs data_service_el2_hmdfs:dir { add_name create open read search setattr write };
34 allow installs data_service_file:dir { search };
37 allow installs dev_unix_socket:dir { search };
51 allow installs normal_hap_data_file_attr:dir { open read relabelto search };
[all …]
Dstorage_daemon.te26 allow storage_daemon data_app_el1_file:dir { add_name create getattr open read search setattr write…
27 allow storage_daemon data_app_el2_file:dir { add_name create getattr open read search setattr write…
28 allow storage_daemon data_app_file:dir { search };
29 allow storage_daemon data_chipset_el1_file:dir { add_name create getattr open read search setattr w…
30 allow storage_daemon data_chipset_el2_file:dir { add_name create getattr open read search setattr w…
31 allow storage_daemon data_chipset_file:dir { search };
32 allow storage_daemon data_file:dir { search };
33 allow storage_daemon data_service_el1_file:dir { add_name create getattr open read search setattr w…
34 …n data_service_el2_file:dir { add_name create getattr open read relabelfrom search setattr write };
35 …dfs:dir { add_name create getattr open read read open relabelto relabelfrom search setattr write };
[all …]
/base/security/selinux_adapter/sepolicy/ohos_policy/hiviewdfx/faultloggerd/system/
Dprocessdump.te46 allow processdump domain:dir { getattr open read search };
61 allow processdump processdump:dir { search };
70 allow processdump normal_hap_attr:dir { getattr open read search };
72 allow processdump app_el1_bundle_public:dir search;
73 allow processdump data_app_el1_file:dir search; # remove later
87 allow processdump init:dir { getattr open read search };
94 allow processdump foundation:dir { getattr open read search };
100 allow processdump data_init_agent:dir search;
101 allow processdump data_file:dir search;
104 allow processdump dev_file:dir { search };
[all …]
/base/security/selinux_adapter/sepolicy/ohos_policy/resourceschedule/resource_schedule_service/system/
Dresource_schedule_service.te27 allow resource_schedule_service appspawn:dir { search };
30 allow resource_schedule_service cgroup:dir { add_name write search };
32 allow resource_schedule_service chip_prod_file:dir { search };
33 …ice data_service_el1_file:dir { add_name create getattr open read remove_name rmdir search write };
35 allow resource_schedule_service data_service_el2_file:dir { search };
36 allow resource_schedule_service data_service_el2_hmdfs:dir { search };
37 allow resource_schedule_service data_service_file:dir { search };
41 allow resource_schedule_service vendor_bin_file:dir { search };
42 allow resource_schedule_service vendor_lib_file:dir { search };
44 allow resource_schedule_service vendor_file:dir { search };
[all …]
/base/security/selinux_adapter/sepolicy/ohos_policy/ability/ability_runtime/system/
Dsh.te15 allow sh accessibility:dir { getattr search };
17 allow sh accountmgr:dir { getattr search };
21 allow sh bluetooth_service:dir { getattr search };
26 allow sh data_data_file:dir { add_name create read search setattr write };
30 allow sh deviceauth_service:dir { getattr search };
36 allow sh edm_sa:dir { getattr search };
40 allow sh hdf_devmgr:dir { getattr search };
44 allow sh hilogd:dir { getattr search };
47 allow sh huks_service:dir { getattr search };
49 allow sh init:dir { getattr search };
[all …]
/base/security/selinux_adapter/sepolicy/ohos_policy/bundlemanager/bundle_framework/system/
Dinstalls.te16 allow installs data_app_el1_file:dir { add_name getattr open read remove_name rmdir search write };
18 allow installs data_app_el2_file:dir { add_name create getattr open read remove_name search setattr…
19 allow installs data_app_file:dir { search };
21 allow installs data_service_el1_file:dir { remove_name search rmdir };
23 allow installs data_service_el2_file:dir { add_name create open read search setattr write getattr r…
26 allow installs data_service_file:dir { search };
27 allow installs dev_unix_socket:dir { search };
28 …a_file_attr:dir { getattr open read relabelfrom relabelto remove_name rmdir search setattr write };
31 allow installs selinuxfs:dir { search };
34 …p_data_file_attr:dir { open read relabelfrom relabelto remove_name rmdir search getattr setattr wr…
[all …]
/base/security/selinux_adapter/sepolicy/ohos_policy/bundlemanager/distributed_bundle_framework/system/
Dsh.te15 allow sh configfs:dir { add_name create search write };
17 allow sh d-bms:dir { getattr search };
19 allow sh data_app_file:dir { search };
22 allow sh data_service_el1_file:dir { getattr search };
24 allow sh data_service_file:dir { search };
25 allow sh dcamera:dir { getattr search };
27 allow sh dcamera_host:dir { getattr search };
30 allow sh dhardware:dir { getattr search };
34 allow sh dscreen:dir { getattr search };
38 allow sh init:dir { getattr search };
[all …]
/base/security/selinux_adapter/sepolicy/ohos_policy/distributeddatamgr/distributeddatamgr/system/
Ddistributeddata.te16 allow distributeddata accountmgr:dir { search };
19 …ata_app_el1_database_file:dir { add_name create open read remove_name rmdir search setattr write };
21 …ata_app_el2_database_file:dir { add_name create open read remove_name rmdir search setattr write };
23 …ata_app_el3_database_file:dir { add_name create open read remove_name rmdir search setattr write };
25 …ata_app_el4_database_file:dir { add_name create open read remove_name rmdir search setattr write };
27 allow distributeddata data_app_file:dir { search };
28 allow distributeddata data_file:dir { search };
29 allow distributeddata data_service_el0_file:dir { search };
30 …_service_el1_file:dir { add_name create getattr open read remove_name rmdir search setattr write };
32 allow distributeddata data_service_el2_file:dir { search };
[all …]
/base/security/selinux_adapter/sepolicy/ohos_policy/barrierfree/accessibility/system/
Daccessibility.te14 allow accessibility data_app_el1_file:dir { search };
16 allow accessibility data_app_file:dir { search };
17 allow accessibility data_file:dir { search };
18 allow accessibility data_service_el1_file:dir { add_name getattr remove_name search write };
20 allow accessibility data_service_file:dir { search };
21 allow accessibility dev_unix_socket:dir { search };
29 allow accessibility system_bin_file:dir { search };
31 allow accessibility system_usr_file:dir { search };
33 allow accessibility tracefs:dir { search };
35 allow accessibility vendor_lib_file:dir { search };
/base/security/selinux_adapter/sepolicy/ohos_policy/drivers/adapter/vendor/
Dsh.te31 allow sh dev_dri_file:dir { search };
35 allow sh input_user_host:dir { getattr search };
38 allow sh hdf_devmgr:dir { getattr search };
41 allow sh blue_host:dir { getattr search };
43 allow sh camera_host:dir { getattr search };
45 allow sh codec_host:dir { getattr search };
47 allow sh allocator_host:dir { getattr search };
49 allow sh face_auth_host:dir { getattr search };
51 allow sh fingerprint_auth_host:dir { getattr search };
53 allow sh location_host:dir { getattr search };
[all …]
/base/security/selinux_adapter/sepolicy/ohos_policy/hiviewdfx/hiview/system/
Dhidumper_cpu_service.te16 allow hiview appspawn:dir search;
19 allow hiview chipset_init:dir search;
22 allow hiview hdcd:dir search;
25 allow hiview init:dir { getattr open read search };
28 allow hiview kernel:dir { getattr open read search };
38 allow hiview ueventd:dir search;
41 allow hiview udevd:dir search;
44 allow hiview { hdfdomain sadomain }:dir { getattr open read search };
/base/security/selinux_adapter/sepolicy/ohos_policy/developtools/ebpf/system/
Dhiebpf.te14 allow hiebpf data_file:dir search;
19 allow hiebpf hiview_file:dir search;
23 allow hiebpf data_service_file:dir search;
24 allow hiebpf foundation:dir search;
29 allow hiebpf domain:dir { open read getattr search };
32 allow hiebpf system_bin_file:dir search;
37 allow hiebpf data_local_tmp:dir { add_name search write remove_name };
44 allow hiebpf data_local:dir search;
49 allow hiebpf data_service_el1_file:dir search;
54 allow hiebpf system_usr_file:dir search;
[all …]
/base/security/selinux_adapter/sepolicy/ohos_policy/filemanagement/dfs_service/system/
Dcloudfiledaemon.te17 allow cloudfiledaemon dev_unix_socket:dir { search };
23 allow cloudfiledaemon data_service_file:dir { search };
28 allow cloudfiledaemon data_app_file:dir { search open read write };
29 allow cloudfiledaemon data_app_el2_file:dir { search read write open };
32 allow cloudfiledaemon data_service_el2_file:dir { search };
33 allow cloudfiledaemon data_service_el2_hmdfs:dir { create search read open write add_name remove_na…
35 allow cloudfiledaemon hmdfs:dir { search write remove_name add_name create open read rmdir };
46 allow cloudfiledaemon data_service_el1_file:dir { search write add_name create remove_name };
49 allow cloudfiledaemon data_file:dir { search };
52 allow cloudfiledaemon data_user_file:dir { read open search add_name write remove_name create rmdir…
[all …]
/base/security/selinux_adapter/sepolicy/ohos_policy/security/deviceauth/system/
Ddeviceauth.te17 allow deviceauth_service dev_unix_socket:dir { search };
18 allow deviceauth_service data_file:dir { search };
19 allow deviceauth_service system_bin_file:dir { search };
20 allow deviceauth_service data_service_file:dir { search };
21 allow deviceauth_service data_service_el1_file:dir { search };
22 …ublic_deviceauthService_file:dir { add_name create open read remove_name search write rmdir getatt…
/base/security/selinux_adapter/sepolicy/ohos_policy/distributedschedule/samgr/system/
Dfoundation.te16 allow foundation configfs:dir { open read search };
17 allow foundation data_app_el1_file:dir { search };
19 allow foundation data_app_file:dir { search };
20 allow foundation data_service_el1_file:dir { add_name open read search write };
22 allow foundation data_service_file:dir { search };
23 allow foundation data_storage:dir { search };
24 allow foundation data_system_ce:dir { add_name search write };
50 allow foundation system_basic_hap_attr:dir { search };
55 allow foundation tracefs:dir { search };
58 allow foundation vendor_etc_file:dir { search };
/base/security/selinux_adapter/sepolicy/ohos_policy/resourceschedule/device_usage_statistics/system/
Ddevice_usage_stats_service.te14 allow device_usage_stats_service data_file:dir { search };
15 allow device_usage_stats_service data_service_el1_file:dir { open read write search };
17 allow device_usage_stats_service data_service_file:dir { search };
19 allow device_usage_stats_service dev_unix_socket:dir { search };
21 allow device_usage_stats_service system_bin_file:dir { search };
23 allow device_usage_stats_service tracefs:dir { search };
24 allow device_usage_stats_service vendor_bin_file:dir { search };
26 allow hiview device_usage_stats_service:dir { getattr open read search };
/base/security/selinux_adapter/sepolicy/ohos_policy/startup/appspawn/system/
Dappspawn.te23 allow appspawn data_service_el2_file:dir { search write add_name create };
24 allow appspawn data_app_el2_file:dir { search mounton write add_name create setattr getattr};
32 allow appspawn chip_prod_file:dir { open read search getattr };
34 allow appspawn sys_prod_file:dir { open read search getattr };
36 allow appspawn vendor_etc_file:dir { open read search getattr };
59 allow appspawn data_app_el1_file:dir { add_name create mounton search write };
60 allow appspawn data_app_el2_file:dir { search mounton };
61 allow appspawn data_app_file:dir { search };
62 allow appspawn data_file:dir { add_name create mounton search write };
63 allow appspawn data_service_el2_file:dir { search };
[all …]
/base/security/selinux_adapter/sepolicy/ohos_policy/multimodalinput/input/system/
Dmultimodalinput.te16 allow multimodalinput data_file:dir { search };
17 allow multimodalinput data_init_agent:dir { search };
19 allow multimodalinput data_log:dir { search write add_name create };
21 …nput data_multimodalinput:dir { add_name create getattr open read remove_name search watch write };
23 allow multimodalinput data_service_file:dir { search };
24 allow multimodalinput data_service_el1_file:dir { search };
28 allow multimodalinput dev_dri_file:dir { search };
32 allow multimodalinput dev_input_file:dir { watch open read search getattr };
33 allow multimodalinput dev_unix_socket:dir { search };
57 allow multimodalinput system_bin_file:dir { search };
[all …]
Dsh.te14 allow init multimodalinput:dir { search };
16 allow sh data_file:dir { search };
17 allow sh data_init_agent:dir { search };
21 allow sh dev_unix_socket:dir { search };
24 allow sh multimodalinput:dir { getattr search };
Dudevd.te16 allow udevd data_file:dir { open search getattr rmdir };
18 allow udevd data_service_el1_file:dir { search write add_name create getattr remove_name read open …
21 allow udevd data_service_file:dir { search };
24 allow udevd dev_char_file:dir { search write remove_name };
27 allow udevd dev_dri_file:dir { add_name search write };
34 allow udevd system_bin_file:dir { search };
41 allow udevd vendor_lib_file:dir { search };
/base/security/selinux_adapter/sepolicy/ohos_policy/security/huks/system/
Dhuks.te18 allow huks_service data_file:dir { search };
19 allow huks_service data_service_file:dir { search };
20 allow huks_service data_service_el1_file:dir { search };
21 …_el1_public_huksService_file:dir { add_name create open read remove_name search write rmdir getatt…
23 allow huks_service data_service_el2_file:dir { search };
24 …_el2_public_huksService_file:dir { add_name create open read remove_name search write rmdir getatt…
27 allow huks_service vendor_lib_file:dir { search };
30 allow huks_service system_profile_file:dir { search };
37 allow huks_service system_bin_file:dir { search };
39 allow huks_service dev_unix_socket:dir { search };
/base/security/selinux_adapter/sepolicy/ohos_policy/developtools/hdc/system/
Dhdcd.te16 allow hdcd data_local:dir { search getattr read write add_name open create };
18 allow hdcd data_local_tmp:dir { add_name remove_name write create setattr search getattr read open …
22 allow hdcd vendor_lib_file:dir { read getattr search };
42 allow hdcd data_file:dir { read write open create getattr search rmdir add_name };
49 allow hdcd system_bin_file:dir { search getattr };
56 allow hdcd dev_unix_socket:dir { search };
59 allow hdcd data_init_agent:dir { search write add_name };
63 allow hdcd dev_pts_file:dir { search };
67 allow hdcd dev_block_file:dir { search };
70 allow hdcd dev_block_volfile:dir { search };
[all …]
/base/security/selinux_adapter/sepolicy/ohos_policy/resourceschedule/background_task_mgr/system/
Dbgtaskmgr_service.te15 allow bgtaskmgr_service app_el1_bundle_public:dir { search };
18 allow bgtaskmgr_service data_app_file:dir { search };
19 allow bgtaskmgr_service data_file:dir { search };
20 allow bgtaskmgr_service data_service_el1_file:dir { add_name write search };
22 allow bgtaskmgr_service data_service_file:dir { search };
24 allow bgtaskmgr_service dev_unix_socket:dir { search };
34 allow bgtaskmgr_service system_bin_file:dir { search };
36 allow bgtaskmgr_service system_usr_file:dir { search };
37 allow bgtaskmgr_service tracefs:dir { search };
49 allow bgtaskmgr_service sys_prod_file:dir { search };

12345678910>>...17