1# Copyright (c) 2024 Huawei Device Co., Ltd. 2# Licensed under the Apache License, Version 2.0 (the "License"); 3# you may not use this file except in compliance with the License. 4# You may obtain a copy of the License at 5# 6# http://www.apache.org/licenses/LICENSE-2.0 7# 8# Unless required by applicable law or agreed to in writing, software 9# distributed under the License is distributed on an "AS IS" BASIS, 10# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 11# See the License for the specific language governing permissions and 12# limitations under the License. 13 14neverallow { domain developer_only(`-uitest -wukong -perftest') debug_only(`-uitest -wukong -perftest') -SP_daemon -sp_daemon_get } sa_test_server:samgr_class { get }; 15developer_only(` 16 allow test_server sa_test_server:samgr_class { add }; 17 allow test_server hilog_param:file { read open }; 18 allow test_server samgr:binder { call }; 19 allow test_server uitest:binder { call }; 20 allow test_server dev_unix_socket:dir { search }; 21 allow test_server aa:binder { call }; 22 allow test_server pasteboard_service:binder { call }; 23 allow test_server sa_pasteboard_service:samgr_class { get }; 24 allow test_server sa_foundation_cesfwk_service:samgr_class { get }; 25 allow test_server foundation:binder {call transfer}; 26 allow test_server SP_daemon:binder { call }; 27 allow test_server sa_resource_schedule_socperf_server:samgr_class { get }; 28 allow test_server resource_schedule_service:binder { call transfer }; 29 allow test_server samgr:binder { transfer }; 30 allow pasteboard_service test_server:fd { use }; 31 allow test_server dev_ashmem_file:chr_file { open }; 32 allow test_server sa_foundation_wms:samgr_class { get }; 33 allow foundation test_server:binder { call transfer }; 34') 35 36debug_only(` 37 allow test_server sa_test_server:samgr_class { add }; 38 allow test_server hilog_param:file { read open }; 39 allow test_server samgr:binder { call }; 40 allow test_server uitest:binder { call }; 41 allow test_server dev_unix_socket:dir { search }; 42 allow test_server aa:binder { call }; 43 allow test_server pasteboard_service:binder { call }; 44 allow test_server sa_pasteboard_service:samgr_class { get }; 45 allow test_server sa_foundation_cesfwk_service:samgr_class { get }; 46 allow test_server foundation:binder {call transfer}; 47 allow test_server SP_daemon:binder { call }; 48 allow test_server sa_resource_schedule_socperf_server:samgr_class { get }; 49 allow test_server resource_schedule_service:binder { call transfer }; 50 allow test_server samgr:binder { transfer }; 51 allow pasteboard_service test_server:fd { use }; 52 allow test_server dev_ashmem_file:chr_file { open }; 53') 54