1{ 2 "common" : [{ 3 "top-sandbox-switch": "ON", 4 "app-base" : [{ 5 "sandbox-root" : "/mnt/sandbox/<PackageName>", 6 "mount-paths" : [{ 7 "src-path" : "/config", 8 "sandbox-path" : "/config", 9 "sandbox-flags" : [ "bind", "rec" ], 10 "check-action-status": "false" 11 }, { 12 "src-path" : "/dev", 13 "sandbox-path" : "/dev", 14 "sandbox-flags" : [ "bind", "rec" ], 15 "check-action-status": "false" 16 }, { 17 "src-path" : "/proc", 18 "sandbox-path" : "/proc", 19 "sandbox-flags" : [ "bind", "rec" ], 20 "check-action-status": "false" 21 }, { 22 "src-path" : "/sys", 23 "sandbox-path" : "/sys", 24 "sandbox-flags" : [ "bind", "rec" ], 25 "check-action-status": "false" 26 }, { 27 "src-path" : "/sys_prod", 28 "sandbox-path" : "/sys_prod", 29 "sandbox-flags" : [ "bind", "rec" ], 30 "check-action-status": "false" 31 }, { 32 "src-path" : "/system/app", 33 "sandbox-path" : "/system/app", 34 "sandbox-flags" : [ "bind", "rec" ], 35 "check-action-status": "false" 36 }, { 37 "src-path" : "/system/fonts", 38 "sandbox-path" : "/system/fonts", 39 "sandbox-flags" : [ "bind", "rec" ], 40 "check-action-status": "false" 41 }, { 42 "src-path" : "/system/lib", 43 "sandbox-path" : "/system/lib", 44 "sandbox-flags" : [ "bind", "rec" ], 45 "check-action-status": "false" 46 }, { 47 "src-path" : "/system/data", 48 "sandbox-path" : "/system/data", 49 "sandbox-flags" : [ "bind", "rec" ], 50 "check-action-status": "false" 51 }, { 52 "src-path" : "/system/usr", 53 "sandbox-path" : "/system/usr", 54 "sandbox-flags" : [ "bind", "rec" ], 55 "check-action-status": "false" 56 }, { 57 "src-path" : "/system/profile", 58 "sandbox-path" : "/system/profile", 59 "sandbox-flags" : [ "bind", "rec" ], 60 "check-action-status": "false" 61 }, { 62 "src-path" : "/system/bin", 63 "sandbox-path" : "/system/bin", 64 "sandbox-flags" : [ "bind", "rec" ], 65 "check-action-status": "false" 66 }, { 67 "src-path" : "/system/etc", 68 "sandbox-path" : "/system/etc", 69 "sandbox-flags" : [ "bind", "rec" ], 70 "check-action-status": "false" 71 }, { 72 "src-path" : "/vendor/lib", 73 "sandbox-path" : "/vendor/lib", 74 "sandbox-flags" : [ "bind", "rec" ], 75 "check-action-status": "false" 76 }, { 77 "src-path" : "/vendor/etc/hiai", 78 "sandbox-path" : "/vendor/etc/hiai", 79 "sandbox-flags" : [ "bind", "rec" ], 80 "check-action-status": "false" 81 }, { 82 "src-path" : "/vendor/etc/vulkan", 83 "sandbox-path" : "/vendor/etc/vulkan", 84 "sandbox-flags" : [ "bind", "rec" ], 85 "check-action-status": "false" 86 }, { 87 "src-path" : "/data/app/el1/bundle/public/<PackageName>", 88 "sandbox-path" : "/data/storage/el1/bundle", 89 "sandbox-flags" : [ "bind", "rec" ], 90 "check-action-status": "true" 91 }, { 92 "src-path" : "/data/app/el2/<currentUserId>/base/<PackageName>", 93 "sandbox-path" : "/data/storage/el2/base", 94 "sandbox-flags" : [ "bind", "rec" ], 95 "check-action-status": "false" 96 },{ 97 "src-path" : "/data/app/el1/<currentUserId>/database/<PackageName>", 98 "sandbox-path" : "/data/storage/el1/database", 99 "sandbox-flags" : [ "bind", "rec" ], 100 "check-action-status": "true" 101 }, { 102 "src-path" : "/data/app/el2/<currentUserId>/database/<PackageName>", 103 "sandbox-path" : "/data/storage/el2/database", 104 "sandbox-flags" : [ "bind", "rec" ], 105 "check-action-status": "false" 106 }, { 107 "src-path" : "/data/app/el1/<currentUserId>/base/<PackageName>", 108 "sandbox-path" : "/data/storage/el1/base", 109 "sandbox-flags" : [ "bind", "rec" ], 110 "check-action-status": "true" 111 }, { 112 "src-path" : "/mnt/hmdfs/<currentUserId>", 113 "sandbox-path" : "/mnt/hmdfs/<currentUserId>", 114 "sandbox-flags" : [ "bind", "rec" ], 115 "check-action-status": "false" 116 }, { 117 "src-path" : "/mnt/hmdfs/<currentUserId>/account/merge_view/data/<PackageName>", 118 "sandbox-path" : "/data/storage/el2/distributedfiles", 119 "sandbox-flags" : [ "bind", "rec" ], 120 "check-action-status": "false" 121 }, { 122 "src-path" : "/mnt/hmdfs/<currentUserId>/non_account/merge_view/data/", 123 "sandbox-path" : "/data/storage/el2/auth_groups", 124 "sandbox-flags" : [ "bind", "rec" ], 125 "check-action-status": "false" 126 }, { 127 "src-path" : "/data/local/ark-cache/<PackageName>", 128 "sandbox-path" : "/data/storage/ark-cache", 129 "sandbox-flags" : [ "bind", "rec" ], 130 "check-action-status": "false" 131 }, { 132 "src-path" : "/data/local/ark-profile/<currentUserId>/<PackageName>", 133 "sandbox-path" : "/data/storage/ark-profile", 134 "sandbox-flags" : [ "bind", "rec" ], 135 "check-action-status": "false" 136 }, { 137 "src-path" : "/mnt/share/<currentUserId>/<PackageName>", 138 "sandbox-path" : "/data/storage/el2/share", 139 "sandbox-flags" : [ "bind", "rec" ], 140 "check-action-status": "false" 141 } 142 ], 143 "symbol-links" : [{ 144 "target-name" : "/system/bin", 145 "link-name" : "/bin", 146 "check-action-status": "false" 147 }, { 148 "target-name" : "/system/lib", 149 "link-name" : "/lib", 150 "check-action-status": "false" 151 }, { 152 "target-name" : "/system/etc", 153 "link-name" : "/etc", 154 "check-action-status": "false" 155 }, { 156 "target-name" : "/sys/kernel/debug", 157 "link-name" : "/d", 158 "check-action-status": "false" 159 } 160 ] 161 }], 162 "app-resources" : [{ 163 "sandbox-root" : "/mnt/sandbox/<PackageName>", 164 "mount-paths" : [{ 165 "src-path" : "/data/app/el1/bundle/public/com.ohos.nweb", 166 "sandbox-path" : "/data/storage/el1/bundle/nweb", 167 "sandbox-flags" : [ "bind", "rec" ], 168 "check-action-status": "false" 169 }, { 170 "src-path" : "/data/app/el1/bundle/public/ohos.global.systemres", 171 "sandbox-path" : "/data/storage/el1/bundle/ohos.global.systemres", 172 "sandbox-flags" : [ "bind", "rec" ], 173 "check-action-status": "false" 174 }, { 175 "src-path" : "/system/app/ohos.global.systemres", 176 "sandbox-path" : "/data/storage/el1/bundle/systemResources", 177 "sandbox-flags" : [ "bind", "rec" ], 178 "check-action-status": "false" 179 }, { 180 "src-path" : "/system/app/SystemResources", 181 "sandbox-path" : "/data/storage/el1/bundle/systemResources", 182 "sandbox-flags" : [ "bind", "rec" ], 183 "check-action-status": "false" 184 }, { 185 "src-path" : "/data/app/el1/bundle/public/ohos.global.systemres.overlay", 186 "sandbox-path" : "/data/storage/el1/bundle/ohos.global.systemres.overlay", 187 "sandbox-flags" : [ "bind", "rec" ], 188 "check-action-status": "false" 189 }, { 190 "src-path" : "/data/misc", 191 "sandbox-path" : "/data/storage/el1/bundle/misc", 192 "sandbox-flags" : [ "bind", "rec" ], 193 "check-action-status": "false" 194 } 195 ], 196 "flags-point" : [{ 197 "flags": "DLP_MANAGER", 198 "sandbox-root" : "/mnt/sandbox/<PackageName>", 199 "mount-paths" : [{ 200 "src-path" : "/data/app/el2/<currentUserId>/base/<PackageName_index>", 201 "sandbox-path" : "/data/storage/el2/base", 202 "sandbox-flags" : [ "bind", "rec" ], 203 "check-action-status": "false" 204 },{ 205 "src-path" : "/data/app/el1/<currentUserId>/database/<PackageName_index>", 206 "sandbox-path" : "/data/storage/el1/database", 207 "sandbox-flags" : [ "bind", "rec" ], 208 "check-action-status": "false" 209 }, { 210 "src-path" : "/data/app/el2/<currentUserId>/database/<PackageName_index>", 211 "sandbox-path" : "/data/storage/el2/database", 212 "sandbox-flags" : [ "bind", "rec" ], 213 "check-action-status": "false" 214 }, { 215 "src-path" : "/data/app/el1/<currentUserId>/base/<PackageName_index>", 216 "sandbox-path" : "/data/storage/el1/base", 217 "sandbox-flags" : [ "bind", "rec" ], 218 "check-action-status": "false" 219 }, { 220 "src-path" : "/mnt/share/<currentUserId>/<PackageName_index>", 221 "sandbox-path" : "/data/storage/el2/share", 222 "sandbox-flags" : [ "bind", "rec" ], 223 "check-action-status": "false" 224 } 225 ]}, { 226 "flags": "START_FLAGS_BACKUP", 227 "sandbox-root" : "/mnt/sandbox/<PackageName>", 228 "mount-paths": [{ 229 "src-path": "/data/service/el2/<currentUserId>/backup/bundles/<PackageName>", 230 "sandbox-path": "/data/storage/el2/backup", 231 "sandbox-flags": [ "bind", "rec" ], 232 "check-action-status": "true" 233 } 234 ]} 235 ], 236 "symbol-links" : [ 237 ] 238 }] 239 }], 240 "individual" : [{ 241 "com.huawei.ohos.hiviewx" : [{ 242 "sandbox-switch": "ON", 243 "sandbox-root" : "/mnt/sandbox/<PackageName>", 244 "mount-paths" : [{ 245 "src-path" : "/data/log/", 246 "sandbox-path" : "/data/log/", 247 "sandbox-flags" : [ "bind", "rec" ], 248 "check-action-status": "true" 249 } 250 ], 251 "symbol-links" : [] 252 }], 253 "com.huawei.ohos.betaclub" : [{ 254 "sandbox-switch": "ON", 255 "sandbox-root" : "/mnt/sandbox/<PackageName>", 256 "mount-paths" : [{ 257 "src-path" : "/data/log/", 258 "sandbox-path" : "/data/log/", 259 "sandbox-flags" : [ "bind", "rec" ], 260 "check-action-status": "true" 261 } 262 ], 263 "symbol-links" : [] 264 }], 265 "com.ohos.medialibrary.medialibrarydata" : [{ 266 "sandbox-switch": "ON", 267 "sandbox-root" : "/mnt/sandbox/<PackageName>", 268 "mount-paths" : [{ 269 "src-path" : "/storage/media/<currentUserId>", 270 "sandbox-path" : "/storage/media", 271 "sandbox-flags" : [ "bind", "rec" ], 272 "check-action-status": "false" 273 }, { 274 "src-path" : "/storage/cloud/<currentUserId>", 275 "sandbox-path" : "/storage/cloud", 276 "sandbox-flags" : [ "bind", "rec" ], 277 "check-action-status": "false" 278 }, { 279 "src-path" : "none", 280 "sandbox-path" : "/storage/cloud/epfs", 281 "sandbox-flags" : [ "MS_NODEV" ], 282 "fs-type": "epfs", 283 "check-action-status": "false" 284 } 285 ], 286 "symbol-links" : [] 287 }], 288 "com.ohos.launcher" : [{ 289 "sandbox-switch": "ON", 290 "sandbox-root" : "/mnt/sandbox/<PackageName>", 291 "mount-paths" : [{ 292 "src-path" : "/data/app/el1/bundle/public/", 293 "sandbox-path" : "/data/bundles/", 294 "sandbox-flags" : [ "bind", "rec" ], 295 "check-action-status": "true" 296 } 297 ], 298 "symbol-links" : [] 299 }], 300 "com.ohos.systemui" : [{ 301 "sandbox-switch": "ON", 302 "sandbox-root" : "/mnt/sandbox/<PackageName>", 303 "mount-paths" : [{ 304 "src-path" : "/data/app/el1/bundle/public/", 305 "sandbox-path" : "/data/app/el1/bundle/public/", 306 "sandbox-flags" : [ "bind", "rec" ], 307 "check-action-status": "true" 308 } 309 ], 310 "symbol-links" : [] 311 }], 312 "com.ohos.sceneboard" : [{ 313 "sandbox-switch": "ON", 314 "sandbox-root" : "/mnt/sandbox/<PackageName>", 315 "mount-paths" : [{ 316 "src-path" : "/data/app/el1/bundle/public/", 317 "sandbox-path" : "/data/app/el1/bundle/public/", 318 "sandbox-flags" : [ "bind", "rec" ], 319 "check-action-status": "true" 320 } 321 ], 322 "symbol-links" : [] 323 }], 324 "com.ohos.permissionmanager" : [{ 325 "sandbox-switch": "ON", 326 "sandbox-root" : "/mnt/sandbox/<PackageName>", 327 "mount-paths" : [{ 328 "src-path" : "/data/app/el1/bundle/public/", 329 "sandbox-path" : "/data/bundles/", 330 "sandbox-flags" : [ "bind", "rec" ], 331 "check-action-status": "true" 332 } 333 ], 334 "symbol-links" : [] 335 }], 336 "com.ohos.certmanager" : [{ 337 "sandbox-switch": "ON", 338 "sandbox-root" : "/mnt/sandbox/<PackageName>", 339 "mount-paths" : [{ 340 "src-path" : "/data/app/el1/bundle/public/", 341 "sandbox-path" : "/data/bundles/", 342 "sandbox-flags" : [ "bind", "rec" ], 343 "check-action-status": "true" 344 } 345 ], 346 "symbol-links" : [] 347 }], 348 "com.ohos.amsdialog" : [{ 349 "sandbox-switch": "ON", 350 "sandbox-root" : "/mnt/sandbox/<PackageName>", 351 "mount-paths" : [{ 352 "src-path" : "/data/app/el1/bundle/public/", 353 "sandbox-path" : "/data/bundles/", 354 "sandbox-flags" : [ "bind", "rec" ], 355 "check-action-status": "true" 356 } 357 ], 358 "symbol-links" : [] 359 }], 360 "ohos.samples.ecg" : [{ 361 "sandbox-switch": "ON", 362 "sandbox-root" : "/mnt/sandbox/<PackageName>", 363 "mount-paths" : [], 364 "flags-point" : [{ 365 "flags": "NOT_SUPPORTED", 366 "sandbox-root" : "/mnt/sandbox/<PackageName>", 367 "mount-paths" : [{ 368 "src-path" : "/data/app/el1/bundle/public/", 369 "sandbox-path" : "/data/bundles/", 370 "sandbox-flags" : [ "bind", "rec" ], 371 "check-action-status": "true" 372 } 373 ]}, { 374 "flags": "START_FLAGS_BACKUP", 375 "sandbox-root" : "/mnt/sandbox/<PackageName>", 376 "mount-paths" : [{ 377 "src-path" : "/data/app/el1/bundle/public/", 378 "sandbox-path" : "/data/bundles/", 379 "sandbox-flags" : [ "bind", "rec" ], 380 "check-action-status": "true" 381 } 382 ]} 383 ], 384 "symbol-links" : [] 385 }], 386 "com.ohos.dlpmanager" : [{ 387 "sandbox-switch": "ON", 388 "sandbox-root" : "/mnt/sandbox/<PackageName>", 389 "sandbox-shared" : "true", 390 "mount-paths" : [{ 391 "src-path" : "/mnt/data/<currentUserId>", 392 "sandbox-path" : "/mnt/data", 393 "sandbox-flags" : [ "bind", "rec" ], 394 "mount-shared-flag" : "true", 395 "check-action-status": "true" 396 }, { 397 "src-path" : "/dev/fuse", 398 "sandbox-path" : "/mnt/data/fuse", 399 "sandbox-flags" : [ "MS_NOSUID", "MS_NODEV", "MS_NOEXEC", "MS_NOATIME", "MS_LAZYTIME" ], 400 "fs-type": "fuse", 401 "check-action-status": "false" 402 } 403 ], 404 "symbol-links" : [] 405 }], 406 "com.ohos.UserFile.ExternalFileManager" : [{ 407 "sandbox-switch": "ON", 408 "sandbox-root" : "/mnt/sandbox/<PackageName>", 409 "mount-paths" : [{ 410 "src-path" : "/data/service/el1/public/storage_daemon/share/public", 411 "sandbox-path" : "/data/storage/el1/bundle/storage_daemon", 412 "sandbox-flags" : [ "bind", "rec" ], 413 "check-action-status": "true" 414 }, 415 { 416 "src-path" : "/mnt/data/external", 417 "sandbox-path" : "/mnt/external", 418 "sandbox-flags" : [ "bind", "rec" ], 419 "check-action-status": "true" 420 } 421 ], 422 "symbol-links" : [] 423 }], 424 "__internal__.com.ohos.render" : [{ 425 "sandbox-root" : "/mnt/sandbox/com.ohos.render/<PackageName>", 426 "mount-paths" : [{ 427 "src-path" : "/dev", 428 "sandbox-path" : "/dev", 429 "sandbox-flags" : [ "bind", "rec" ], 430 "check-action-status": "false" 431 }, { 432 "src-path" : "/proc", 433 "sandbox-path" : "/proc", 434 "sandbox-flags" : [ "bind", "rec" ], 435 "check-action-status": "false" 436 }, { 437 "src-path" : "/sys", 438 "sandbox-path" : "/sys", 439 "sandbox-flags" : [ "bind", "rec" ], 440 "check-action-status": "false" 441 }, { 442 "src-path" : "/system/fonts", 443 "sandbox-path" : "/system/fonts", 444 "sandbox-flags" : [ "bind", "rec" ], 445 "check-action-status": "false" 446 }, { 447 "src-path" : "/system/etc", 448 "sandbox-path" : "/system/etc", 449 "sandbox-flags" : [ "bind", "rec" ], 450 "check-action-status": "false" 451 }, { 452 "src-path" : "/data/app/el1/bundle/public/com.ohos.nweb", 453 "sandbox-path" : "/data/storage/el1/bundle/nweb", 454 "sandbox-flags" : [ "bind", "rec" ], 455 "check-action-status": "false" 456 }, { 457 "src-path" : "/system/bin", 458 "sandbox-path" : "/system/bin", 459 "sandbox-flags" : [ "bind", "rec" ], 460 "check-action-status": "false" 461 }, { 462 "src-path" : "/system/lib", 463 "sandbox-path" : "/system/lib", 464 "sandbox-flags" : [ "bind", "rec" ], 465 "check-action-status": "false" 466 }, { 467 "src-path" : "/system/app/com.ohos.nweb", 468 "sandbox-path" : "/system/app/com.ohos.nweb", 469 "sandbox-flags" : [ "bind", "rec" ], 470 "check-action-status": "false" 471 }, { 472 "src-path" : "/vendor/lib", 473 "sandbox-path" : "/vendor/lib", 474 "sandbox-flags" : [ "bind", "rec" ], 475 "check-action-status": "false" 476 }, { 477 "src-path" : "/data/app/el1/bundle/public/com.ohos.nweb", 478 "sandbox-path" : "/data/app/el1/bundle/public/com.ohos.nweb", 479 "sandbox-flags" : [ "bind", "rec" ], 480 "check-action-status": "false" 481 }, { 482 "src-path" : "/system/app/NWeb", 483 "sandbox-path" : "/system/app/NWeb", 484 "sandbox-flags" : [ "bind", "rec" ], 485 "check-action-status": "false" 486 } 487 ], 488 "symbol-links" : [{ 489 "target-name" : "/system/etc", 490 "link-name" : "/etc", 491 "check-action-status": "false" 492 }, { 493 "target-name" : "/system/bin", 494 "link-name" : "/bin", 495 "check-action-status": "false" 496 }, { 497 "target-name" : "/system/lib", 498 "link-name" : "/lib", 499 "check-action-status": "false" 500 } 501 ], 502 "flags-point" : [{ 503 "flags": "DLP_MANAGER", 504 "sandbox-root" : "/mnt/sandbox/com.ohos.render/<PackageName>", 505 "mount-paths" : [], 506 "symbol-links" : [{}] 507 }] 508 }] 509 }], 510 "permission":[{ 511 "ohos.permission.FILE_ACCESS_MANAGER":[{ 512 "sandbox-switch": "ON", 513 "sandbox-root": "/mnt/sandbox/<PackageName>", 514 "gids": [1006, 1008], 515 "mount-paths": [{ 516 "src-path": "/data/service/el1/public/storage_daemon/share/public", 517 "sandbox-path": "/storage/Share", 518 "sandbox-flags": [ "bind", "rec" ] 519 }, 520 { 521 "src-path": "/mnt/data/external", 522 "sandbox-path": "/storage/External", 523 "sandbox-flags": [ "bind", "rec" ] 524 }, 525 { 526 "src-path": "/storage/media/<currentUserId>/local/files/Docs", 527 "sandbox-path": "/storage/Users/currentUser", 528 "sandbox-flags": [ "bind", "rec" ] 529 }, 530 { 531 "src-path": "/storage/media/<currentUserId>/local/files/Download", 532 "sandbox-path": "/storage/Users/currentUser/Download", 533 "sandbox-flags": ["bind", "rec" ] 534 }, 535 { 536 "src-path": "/storage/media/<currentUserId>/local/files/Desktop", 537 "sandbox-path": "/storage/Users/currentUser/Desktop", 538 "sandbox-flags": ["bind", "rec" ] 539 }, 540 { 541 "src-path": "/storage/media/<currentUserId>/local/files/Documents", 542 "sandbox-path": "/storage/Users/currentUser/Documents", 543 "sandbox-flags": ["bind", "rec" ] 544 }, 545 { 546 "src-path": "/storage/media/<currentUserId>/local/files/.Recent", 547 "sandbox-path": "/storage/.Recent/Users/<currentUserId>", 548 "sandbox-flags": [ "bind", "rec" ] 549 }, 550 { 551 "src-path": "/storage/media/<currentUserId>/local/files/.Trash", 552 "sandbox-path": "/storage/.Trash/Users/<currentUserId>", 553 "sandbox-flags": [ "bind", "rec" ] 554 } 555 ] 556 }], 557 "ohos.permission.READ_IMAGEVIDEO":[{ 558 "sandbox-switch": "ON", 559 "sandbox-root": "/mnt/sandbox/<PackageName>", 560 "gids": [1008], 561 "mount-paths": [{ 562 "src-path": "/storage/media/<currentUserId>/local/files/.thumbs/Photo", 563 "sandbox-path": "/storage/Share/.thumbs/Photo", 564 "sandbox-flags": [ "bind", "rec" ] 565 } 566 ] 567 }] 568 }] 569} 570