• Home
  • Line#
  • Scopes#
  • Navigate#
  • Raw
  • Download
1{
2    "common" : [{
3        "top-sandbox-switch": "ON",
4        "app-base" : [{
5            "sandbox-ns-flags" : [ "net" ],
6            "mount-paths" : [{
7                    "src-path" : "/config",
8                    "sandbox-path" : "/config",
9                    "sandbox-flags" : [ "bind", "rec" ],
10                    "check-action-status": "false"
11                }, {
12                    "src-path" : "/dev",
13                    "sandbox-path" : "/dev",
14                    "sandbox-flags" : [ "bind", "rec" ],
15                    "check-action-status": "false"
16                }, {
17                    "src-path" : "/proc",
18                    "sandbox-path" : "/proc",
19                    "sandbox-flags" : [ "bind", "rec" ],
20                    "check-action-status": "false"
21                }, {
22                    "src-path" : "/sys",
23                    "sandbox-path" : "/sys",
24                    "sandbox-flags" : [ "bind", "rec" ],
25                    "check-action-status": "false"
26                }, {
27                    "src-path" : "/sys_prod",
28                    "sandbox-path" : "/sys_prod",
29                    "sandbox-flags" : [ "bind", "rec" ],
30                    "check-action-status": "false"
31                }, {
32                    "src-path" : "/system/app",
33                    "sandbox-path" : "/system/app",
34                    "sandbox-flags" : [ "bind", "rec" ],
35                    "check-action-status": "false"
36                }, {
37                    "src-path" : "/module_update",
38                    "sandbox-path" : "/module_update",
39                    "sandbox-flags" : [ "bind", "rec" ],
40                    "check-action-status": "false"
41                }, {
42                    "src-path" : "/system/fonts",
43                    "sandbox-path" : "/system/fonts",
44                    "sandbox-flags" : [ "bind", "rec" ],
45                    "check-action-status": "false"
46                }, {
47                    "src-path" : "/system/lib",
48                    "sandbox-path" : "/system/lib",
49                    "sandbox-flags" : [ "bind", "rec" ],
50                    "check-action-status": "false"
51                }, {
52                    "src-path" : "/system/data",
53                    "sandbox-path" : "/system/data",
54                    "sandbox-flags" : [ "bind", "rec" ],
55                    "check-action-status": "false"
56                }, {
57                    "src-path" : "/system/usr",
58                    "sandbox-path" : "/system/usr",
59                    "sandbox-flags" : [ "bind", "rec" ],
60                    "check-action-status": "false"
61                }, {
62                    "src-path" : "/system/profile",
63                    "sandbox-path" : "/system/profile",
64                    "sandbox-flags" : [ "bind", "rec" ],
65                    "check-action-status": "false"
66                }, {
67                    "src-path" : "/system/bin",
68                    "sandbox-path" : "/system/bin",
69                    "sandbox-flags" : [ "bind", "rec" ],
70                    "check-action-status": "false"
71                }, {
72                    "src-path" : "/system/etc",
73                    "sandbox-path" : "/system/etc",
74                    "sandbox-flags" : [ "bind", "rec" ],
75                    "check-action-status": "false"
76                }, {
77                    "src-path" : "/system/framework",
78                    "sandbox-path" : "/system/framework",
79                    "sandbox-flags" : [ "bind", "rec" ],
80                    "check-action-status": "false"
81                }, {
82                    "src-path" : "/system/etc/hosts",
83                    "sandbox-path" : "/data/service/el1/public/hosts_user/hosts",
84                    "sandbox-flags" : [ "bind", "rec" ],
85                    "check-action-status": "false"
86                }, {
87                    "src-path" : "/system/resource",
88                    "sandbox-path" : "/system/resource",
89                    "sandbox-flags" : [ "bind", "rec" ],
90                    "check-action-status": "false"
91                }, {
92                    "src-path" : "/vendor/lib",
93                    "sandbox-path" : "/vendor/lib",
94                    "sandbox-flags" : [ "bind", "rec" ],
95                    "check-action-status": "false"
96                }, {
97                    "src-path" : "/vendor/etc/hiai",
98                    "sandbox-path" : "/vendor/etc/hiai",
99                    "sandbox-flags" : [ "bind", "rec" ],
100                    "check-action-status": "false"
101                }, {
102                    "src-path" : "/data/data/hiai",
103                    "sandbox-path" : "/data/data/hiai",
104                    "sandbox-flags" : [ "bind", "rec" ],
105                    "check-action-status": "false"
106                }, {
107                    "src-path" : "/mnt/sandbox/<currentUserId>/<PackageName>/data/storage/el2",
108                    "sandbox-path" : "/data/storage/el2",
109                    "sandbox-flags" : [ "bind", "rec" ],
110                    "check-action-status": "false"
111                }, {
112                    "src-path" : "/data/app/el2/<currentUserId>/base/<variablePackageName>",
113                    "sandbox-path" : "/data/storage/el2/base",
114                    "sandbox-flags" : [ "bind", "rec" ],
115                    "check-action-status": "false"
116                }, {
117                    "src-path" : "/data/app/el2/<currentUserId>/log/<variablePackageName>",
118                    "sandbox-path" : "/data/storage/el2/log",
119                    "sandbox-flags" : [ "bind", "rec" ],
120                    "check-action-status": "false"
121                }, {
122                    "src-path" : "/data/app/el1/<currentUserId>/database/<variablePackageName>",
123                    "sandbox-path" : "/data/storage/el1/database",
124                    "sandbox-flags" : [ "bind", "rec" ],
125                    "check-action-status": "true"
126                }, {
127                    "src-path" : "/data/app/el2/<currentUserId>/database/<variablePackageName>",
128                    "sandbox-path" : "/data/storage/el2/database",
129                    "sandbox-flags" : [ "bind", "rec" ],
130                    "check-action-status": "false"
131                }, {
132                    "src-path" : "/data/app/el1/<currentUserId>/base/<variablePackageName>",
133                    "sandbox-path" : "/data/storage/el1/base",
134                    "sandbox-flags" : [ "bind", "rec" ],
135                    "check-action-status": "true"
136                }, {
137                    "src-path" : "/data/app/el1/<currentUserId>/system_optimize/<variablePackageName>",
138                    "sandbox-path" : "/data/storage/system_optimize",
139                    "sandbox-flags" : [ "bind", "rec" ],
140                    "check-action-status": "false"
141                }, {
142                    "src-path" : "/mnt/hmdfs/<currentUserId>",
143                    "sandbox-path" : "/mnt/hmdfs/<currentUserId>",
144                    "sandbox-flags" : [ "bind", "rec" ],
145                    "check-action-status": "false"
146                }, {
147                    "src-path" : "/mnt/hmdfs/<currentUserId>/account/merge_view/data/<PackageName>",
148                    "sandbox-path" : "/data/storage/el2/distributedfiles",
149                    "sandbox-flags" : [ "bind", "rec" ],
150                    "check-action-status": "false"
151                }, {
152                    "src-path" : "/mnt/hmdfs/<currentUserId>/non_account/merge_view/data/",
153                    "sandbox-path" : "/data/storage/el2/auth_groups",
154                    "sandbox-flags" : [ "bind", "rec" ],
155                    "check-action-status": "false"
156                }, {
157                    "src-path" : "/data/app/el1/public/aot_compiler/ark_cache/<PackageName>",
158                    "sandbox-path" : "/data/storage/ark-cache",
159                    "sandbox-flags" : [ "bind", "rec" ],
160                    "check-action-status": "false"
161                }, {
162                    "src-path" : "/data/app/el1/<currentUserId>/aot_compiler/ark_profile/<PackageName>",
163                    "sandbox-path" : "/data/storage/ark-profile",
164                    "sandbox-flags" : [ "bind", "rec" ],
165                    "check-action-status": "false"
166                }, {
167                    "src-path" : "/data/app/el1/public/shader_cache/cloud/<PackageName>",
168                    "sandbox-path" : "/data/storage/shader_cache/cloud",
169                    "sandbox-flags" : [ "bind", "rec" ],
170                    "check-action-status": "false"
171                }, {
172                    "src-path" : "/data/app/el1/public/shader_cache/cloud/common",
173                    "sandbox-path" : "/data/storage/shader_cache/common",
174                    "sandbox-flags" : [ "bind", "rec" ],
175                    "check-action-status": "false"
176                }, {
177                    "src-path" : "/mnt/share/<currentUserId>/<PackageName_index>",
178                    "sandbox-path" : "/data/storage/el2/share",
179                    "sandbox-flags" : [ "bind", "rec" ],
180                    "check-action-status": "false"
181                }, {
182                    "src-path" : "/data/service/el1/public/themes/<currentUserId>/a/app",
183                    "sandbox-path" : "/data/themes/a/app",
184                    "sandbox-flags" : [ "bind", "rec" ],
185                    "check-action-status": "false"
186                }, {
187                    "src-path" : "/data/service/el1/public/themes/<currentUserId>/b/app",
188                    "sandbox-path" : "/data/themes/b/app",
189                    "sandbox-flags" : [ "bind", "rec" ],
190                    "check-action-status": "false"
191                }, {
192                    "src-path" : "/data/service/el0/public/for-all-app",
193                    "sandbox-path" : "/data/service/el0/public/for-all-app",
194                    "sandbox-flags" : [ "bind", "rec" ],
195                    "check-action-status": "false"
196                }, {
197                    "src-path" : "/data/service/el1/public/for-all-app",
198                    "sandbox-path" : "/data/service/el1/public/for-all-app",
199                    "sandbox-flags" : [ "bind", "rec" ],
200                    "check-action-status": "false"
201                }, {
202                    "src-path" : "/data/service/el1/<currentUserId>/utdtypes/utd",
203                    "sandbox-path" : "/data/utd",
204                    "sandbox-flags" : [ "bind", "rec" ],
205                    "check-action-status": "false"
206                }, {
207                    "src-path" : "/data/service/el1/public/cert_manager_service/certificates/user_open",
208                    "sandbox-path" : "/data/certificates/user_cacerts",
209                    "sandbox-flags" : [ "bind", "rec" ],
210                    "check-action-status": "false"
211                }, {
212                    "src-path" : "/data/app/el3/<currentUserId>/base/<variablePackageName>",
213                    "sandbox-path" : "/data/storage/el3/base",
214                    "sandbox-flags" : [ "bind", "rec" ],
215                    "check-action-status": "false"
216                }, {
217                    "src-path" : "/data/app/el3/<currentUserId>/database/<variablePackageName>",
218                    "sandbox-path" : "/data/storage/el3/database",
219                    "sandbox-flags" : [ "bind", "rec" ],
220                    "check-action-status": "false"
221                }, {
222                    "src-path" : "/data/app/el4/<currentUserId>/base/<variablePackageName>",
223                    "sandbox-path" : "/data/storage/el4/base",
224                    "sandbox-flags" : [ "bind", "rec" ],
225                    "check-action-status": "false"
226                }, {
227                    "src-path" : "/data/app/el4/<currentUserId>/database/<variablePackageName>",
228                    "sandbox-path" : "/data/storage/el4/database",
229                    "sandbox-flags" : [ "bind", "rec" ],
230                    "check-action-status": "false"
231                }, {
232                    "src-path" : "/chip_prod/etc/passthrough",
233                    "sandbox-path" : "/chip_prod/etc/passthrough",
234                    "sandbox-flags" : [ "bind", "rec" ],
235                    "check-action-status": "false"
236                }, {
237                    "src-path" : "/mnt/hmdfs/<currentUserId>/cloud/data/<PackageName>",
238                    "sandbox-path" : "/data/storage/el2/cloud",
239                    "sandbox-flags" : [ "bind", "rec" ],
240                    "check-action-status": "false"
241                }, {
242                    "src-path" : "/vendor/etc/vulkan",
243                    "sandbox-path" : "/vendor/etc/vulkan",
244                    "sandbox-flags" : [ "bind", "rec" ],
245                    "check-action-status": "false"
246                }, {
247                    "src-path" : "/mnt/data/<currentUserId>/media_fuse",
248                    "sandbox-path" : "/data/storage/el2/media",
249                    "sandbox-flags" : [ "bind", "rec" ],
250                    "check-action-status": "false"
251                }, {
252                    "src-path" : "/vendor/etc/passthrough",
253                    "sandbox-path" : "/vendor/etc/passthrough",
254                    "sandbox-flags" : [ "bind", "rec" ],
255                    "check-action-status": "false"
256                }
257            ],
258            "symbol-links" : [{
259                    "target-name" : "/system/bin",
260                    "link-name" : "/bin",
261                    "check-action-status": "false"
262                }, {
263                    "target-name" : "/system/lib",
264                    "link-name" : "/lib",
265                    "check-action-status": "false"
266                }, {
267                    "target-name" : "/system/etc",
268                    "link-name" : "/etc",
269                    "check-action-status": "false"
270                }, {
271                    "target-name" : "/sys/kernel/debug",
272                    "link-name" : "/d",
273                    "check-action-status": "false"
274                }
275            ]
276        }],
277        "app-resources" : [{
278            "mount-paths" : [{
279                    "src-path" : "/data/app/el1/bundle/public/<arkWebPackageName>",
280                    "sandbox-path" : "/data/storage/el1/bundle/arkwebcore",
281                    "sandbox-flags" : [ "bind", "rec" ],
282                    "check-action-status": "false"
283                }, {
284                    "src-path" : "/system/app/ohos.global.systemres",
285                    "sandbox-path" : "/data/global/systemResources",
286                    "sandbox-flags" : [ "bind", "rec" ],
287                    "check-action-status": "false"
288                }, {
289                    "src-path" : "/system/app/SystemResources",
290                    "sandbox-path" : "/data/global/systemResources",
291                    "sandbox-flags" : [ "bind", "rec" ],
292                    "check-action-status": "false"
293                }, {
294                    "src-path" : "/data/misc",
295                    "sandbox-path" : "/data/storage/el1/bundle/misc",
296                    "sandbox-flags" : [ "bind", "rec" ],
297                    "check-action-status": "false"
298                }
299            ],
300        "flags-point" : [{
301            "flags": "DLP_MANAGER",
302            "mount-paths" : [{
303                    "src-path" : "/data/app/el2/<currentUserId>/base/<PackageName_index>",
304                    "sandbox-path" : "/data/storage/el2/base",
305                    "sandbox-flags" : [ "bind", "rec" ],
306                    "check-action-status": "false"
307                }, {
308                    "src-path" : "/data/app/el1/<currentUserId>/database/<PackageName_index>",
309                    "sandbox-path" : "/data/storage/el1/database",
310                    "sandbox-flags" : [ "bind", "rec" ],
311                    "check-action-status": "false"
312                }, {
313                    "src-path" : "/data/app/el2/<currentUserId>/database/<PackageName_index>",
314                    "sandbox-path" : "/data/storage/el2/database",
315                    "sandbox-flags" : [ "bind", "rec" ],
316                    "check-action-status": "false"
317                }, {
318                    "src-path" : "/data/app/el1/<currentUserId>/base/<PackageName_index>",
319                    "sandbox-path" : "/data/storage/el1/base",
320                    "sandbox-flags" : [ "bind", "rec" ],
321                    "check-action-status": "false"
322                }, {
323                    "src-path" : "/data/app/el2/<currentUserId>/log/<PackageName_index>",
324                    "sandbox-path" : "/data/storage/el2/log",
325                    "sandbox-flags" : [ "bind", "rec" ],
326                    "check-action-status": "false"
327                }, {
328                    "src-path" : "/mnt/share/<currentUserId>/<PackageName_index>",
329                    "sandbox-path" : "/data/storage/el2/share",
330                    "sandbox-flags" : [ "bind", "rec" ],
331                    "check-action-status": "false"
332                }
333            ]}, {
334            "flags": "START_FLAGS_BACKUP",
335            "mount-paths": [{
336                    "src-path": "/data/app/el2/<currentUserId>/base/<PackageName>/.backup",
337                    "sandbox-path": "/data/storage/el2/backup",
338                    "sandbox-flags": [ "bind", "rec" ],
339                    "check-action-status": "false"
340                }, {
341                    "src-path" : "/data/app/el1/<currentUserId>/base/<PackageName>/.backup",
342                    "sandbox-path" : "/data/storage/el1/backup",
343                    "sandbox-flags" : [ "bind", "rec" ],
344                    "check-action-status": "false"
345                }
346            ]}, {
347            "flags": "DEVELOPER_MODE",
348            "mount-paths": [{
349                    "src-path": "/data/app/el1/bundle/<currentUserId>/hnppublic",
350                    "sandbox-path": "/data/service/hnp",
351                    "sandbox-flags": [ "bind", "rec" ],
352                    "check-action-status": "false"
353                }, {
354                    "src-path" : "/data/app/el1/bundle/<currentUserId>/hnp/<PackageName>",
355                    "sandbox-path" : "/data/app",
356                    "sandbox-flags" : [ "bind", "rec" ],
357                    "check-action-status": "false"
358                }
359            ]}, {
360            "flags": "PREINSTALLED_HAP",
361            "mount-paths": [{
362                    "src-path": "/system/app",
363                    "sandbox-path": "/system/app",
364                    "sandbox-flags": [ "bind", "rec" ],
365                    "check-action-status": "false"
366                }
367            ]}, {
368            "flags": "CUSTOM_SANDBOX_HAP",
369            "mount-paths": [{
370                    "src-path": "/tmp",
371                    "sandbox-path": "/tmp",
372                    "sandbox-flags": [ "bind", "rec" ],
373                    "check-action-status": "false"
374                }
375            ]}, {
376            "flags": "FILE_CROSS_APP",
377            "mount-paths": [{
378                    "src-path": "/mnt/data/external",
379                    "sandbox-path": "/storage/External",
380                    "sandbox-flags": [ "bind", "rec" ]
381                }, {
382                    "src-path": "/mnt/user/<currentUserId>/nosharefs/docs",
383                    "sandbox-path": "/storage/Users",
384                    "sandbox-flags": [ "bind", "rec" ]
385                }, {
386                    "src-path": "/mnt/data/<currentUserId>/userExternal",
387                    "sandbox-path": "/storage/userExternal",
388                    "sandbox-flags": [ "bind", "rec" ],
389                    "check-action-status": "false"
390                }
391            ]}, {
392            "flags": "FILE_ACCESS_COMMON_DIR",
393            "mount-paths": [{
394                    "src-path": "/mnt/user/<currentUserId>/sharefs/docs",
395                    "sandbox-path": "/mnt/storage/Users",
396                    "sandbox-flags": [ "bind", "rec" ]
397                }, {
398                    "src-path": "/mnt/sandbox/<currentUserId>/<clonePackageName>/mnt/storage/Users",
399                    "sandbox-path": "/storage/Users",
400                    "sandbox-flags-customized": [ "MS_NODEV"],
401                    "dac-override-sensitive": "true",
402                    "fs-type": "sharefs",
403                    "options": "override"
404                }
405            ]}],
406            "symbol-links" : []
407        }]
408    }],
409    "individual" : [{
410        "com.ohos.medialibrary.medialibrarydata" : [{
411            "sandbox-switch": "ON",
412            "mount-paths" : [{
413                    "src-path" : "/storage/media/<currentUserId>",
414                    "sandbox-path" : "/storage/media",
415                    "sandbox-flags" : [ "bind", "rec" ],
416                    "check-action-status": "false"
417                }, {
418                    "src-path" : "/data/service/el2/<currentUserId>/hmdfs/cache/account_cache",
419                    "sandbox-path" : "/data/service/el2/<currentUserId>/hmdfs/cache/account_cache",
420                    "sandbox-flags" : [ "bind", "rec" ],
421                    "check-action-status": "false"
422                }, {
423                    "src-path" : "/storage/cloud/<currentUserId>",
424                    "sandbox-path" : "/storage/cloud",
425                    "sandbox-flags" : [ "bind", "rec" ],
426                    "check-action-status": "true"
427                }, {
428                    "src-path" : "none",
429                    "sandbox-path" : "/storage/cloud/epfs",
430                    "sandbox-flags" : [ "MS_NODEV" ],
431                    "fs-type": "epfs",
432                    "check-action-status": "false"
433                }, {
434                    "src-path" : "/mnt/data/<currentUserId>",
435                    "sandbox-path" : "/mnt/data/<currentUserId>",
436                    "sandbox-flags" : [ "bind", "rec" ],
437                    "check-action-status": "false"
438                }
439            ],
440            "symbol-links" : []
441        }],
442        "com.ohos.sceneboard" : [{
443            "sandbox-switch": "ON",
444            "gids": [1065],
445            "mount-paths" : [{
446                    "src-path" : "/data/app/el1/bundle/public/",
447                    "sandbox-path" : "/data/app/el1/bundle/public/",
448                    "sandbox-flags" : [ "bind", "rec" ],
449                    "check-action-status": "true"
450                }
451            ],
452            "symbol-links" : []
453        }],
454        "com.ohos.settingsdata":[{
455            "sandbox-switch": "ON",
456            "gids": [1065],
457            "mount-paths": [],
458            "symbol-links": []
459        }],
460        "com.ohos.permissionmanager" : [{
461            "sandbox-switch": "ON",
462            "mount-paths" : [{
463                    "src-path" : "/data/app/el1/bundle/public/",
464                    "sandbox-path" : "/data/bundles/",
465                    "sandbox-flags" : [ "bind", "rec" ],
466                    "check-action-status": "true"
467                }
468            ],
469            "symbol-links" : []
470        }],
471        "com.ohos.amsdialog" : [{
472            "sandbox-switch": "ON",
473            "mount-paths" : [{
474                    "src-path" : "/data/app/el1/bundle/public/",
475                    "sandbox-path" : "/data/bundles/",
476                    "sandbox-flags" : [ "bind", "rec" ],
477                    "check-action-status": "true"
478                }
479            ],
480            "symbol-links" : []
481        }],
482        "com.ohos.UserFile.ExternalFileManager" : [{
483            "sandbox-switch": "ON",
484            "mount-paths" : [{
485                    "src-path" : "/data/service/el1/public/storage_daemon/share/public",
486                    "sandbox-path" : "/data/storage/el1/bundle/storage_daemon",
487                    "sandbox-flags" : [ "bind", "rec" ],
488                    "check-action-status": "true"
489                },
490                {
491                    "src-path" : "/mnt/data/external",
492                    "sandbox-path" : "/mnt/external",
493                    "sandbox-flags" : [ "bind", "rec" ],
494                    "check-action-status": "true"
495                }
496            ],
497            "symbol-links" : []
498        }],
499        "__internal__.com.ohos.render" : [{
500            "sandbox-root" : "/mnt/sandbox/com.ohos.render/<PackageName>",
501            "sandbox-ns-flags" : [ "pid", "net" ],
502            "mount-paths" : [{
503                    "src-path" : "/dev",
504                    "sandbox-path" : "/dev",
505                    "sandbox-flags" : [ "bind", "rec" ],
506                    "check-action-status": "false"
507                }, {
508                    "src-path" : "/proc",
509                    "sandbox-path" : "/proc",
510                    "sandbox-flags" : [ "bind", "rec" ],
511                    "check-action-status": "false"
512                }, {
513                    "src-path" : "/sys",
514                    "sandbox-path" : "/sys",
515                    "sandbox-flags" : [ "bind", "rec" ],
516                    "check-action-status": "false"
517                }, {
518                    "src-path" : "/system/fonts",
519                    "sandbox-path" : "/system/fonts",
520                    "sandbox-flags" : [ "bind", "rec" ],
521                    "check-action-status": "false"
522                }, {
523                    "src-path" : "/system/etc",
524                    "sandbox-path" : "/system/etc",
525                    "sandbox-flags" : [ "bind", "rec" ],
526                    "check-action-status": "false"
527                }, {
528                    "src-path" : "/system/framework",
529                    "sandbox-path" : "/system/framework",
530                    "sandbox-flags" : [ "bind", "rec" ],
531                    "check-action-status": "false"
532                }, {
533                    "src-path" : "/system/etc/hosts",
534                    "sandbox-path" : "/data/service/el1/public/hosts_user/hosts",
535                    "sandbox-flags" : [ "bind", "rec" ],
536                    "check-action-status": "false"
537                }, {
538                    "src-path" : "/data/app/el1/bundle/public/<arkWebPackageName>",
539                    "sandbox-path" : "/data/storage/el1/bundle/arkwebcore",
540                    "sandbox-flags" : [ "bind", "rec" ],
541                    "check-action-status": "false"
542                }, {
543                    "src-path" : "/system/bin",
544                    "sandbox-path" : "/system/bin",
545                    "sandbox-flags" : [ "bind", "rec" ],
546                    "check-action-status": "false"
547                }, {
548                    "src-path" : "/system/lib",
549                    "sandbox-path" : "/system/lib",
550                    "sandbox-flags" : [ "bind", "rec" ],
551                    "check-action-status": "false"
552                }, {
553                    "src-path" : "/data/service/el1/public/for-all-app",
554                    "sandbox-path" : "/data/service/el1/public/for-all-app",
555                    "sandbox-flags" : [ "bind", "rec" ],
556                    "check-action-status": "false"
557                }, {
558                    "src-path" : "/system/app/<arkWebPackageName>",
559                    "sandbox-path" : "/system/app/<arkWebPackageName>",
560                    "sandbox-flags" : [ "bind", "rec" ],
561                    "check-action-status": "false"
562                }, {
563                    "src-path" : "/vendor/lib",
564                    "sandbox-path" : "/vendor/lib",
565                    "sandbox-flags" : [ "bind", "rec" ],
566                    "check-action-status": "false"
567                }, {
568                    "src-path" : "/data/app/el1/bundle/public/<arkWebPackageName>",
569                    "sandbox-path" : "/data/app/el1/bundle/public/<arkWebPackageName>",
570                    "sandbox-flags" : [ "bind", "rec" ],
571                    "check-action-status": "false"
572                }, {
573                    "src-path" : "/system/app/NWeb",
574                    "sandbox-path" : "/system/app/NWeb",
575                    "sandbox-flags" : [ "bind", "rec" ],
576                    "check-action-status": "false"
577                }, {
578                    "src-path" : "/module_update/ArkWebCore/app/<arkWebPackageName>",
579                    "sandbox-path" : "/module_update/ArkWebCore/app/<arkWebPackageName>",
580                    "sandbox-flags" : [ "bind", "rec" ],
581                    "check-action-status": "false"
582                }
583            ],
584            "symbol-links" : [{
585                    "target-name" : "/system/etc",
586                    "link-name" : "/etc",
587                    "check-action-status": "false"
588                }, {
589                    "target-name" : "/system/bin",
590                    "link-name" : "/bin",
591                    "check-action-status": "false"
592                }, {
593                    "target-name" : "/system/lib",
594                    "link-name" : "/lib",
595                    "check-action-status": "false"
596                }
597            ]
598        }],
599        "__internal__.com.ohos.gpu" : [{
600            "sandbox-root" : "/mnt/sandbox/com.ohos.render/<PackageName>",
601            "sandbox-ns-flags" : [ "pid", "net" ],
602            "mount-paths" : [{
603                    "src-path" : "/dev",
604                    "sandbox-path" : "/dev",
605                    "sandbox-flags" : [ "bind", "rec" ],
606                    "check-action-status": "false"
607                }, {
608                    "src-path" : "/proc",
609                    "sandbox-path" : "/proc",
610                    "sandbox-flags" : [ "bind", "rec" ],
611                    "check-action-status": "false"
612                }, {
613                    "src-path" : "/sys",
614                    "sandbox-path" : "/sys",
615                    "sandbox-flags" : [ "bind", "rec" ],
616                    "check-action-status": "false"
617                }, {
618                    "src-path" : "/system/fonts",
619                    "sandbox-path" : "/system/fonts",
620                    "sandbox-flags" : [ "bind", "rec" ],
621                    "check-action-status": "false"
622                }, {
623                    "src-path" : "/system/etc",
624                    "sandbox-path" : "/system/etc",
625                    "sandbox-flags" : [ "bind", "rec" ],
626                    "check-action-status": "false"
627                }, {
628                    "src-path" : "/system/etc/hosts",
629                    "sandbox-path" : "/data/service/el1/public/hosts_user/hosts",
630                    "sandbox-flags" : [ "bind", "rec" ],
631                    "check-action-status": "false"
632                }, {
633                    "src-path" : "/data/app/el1/bundle/public/<arkWebPackageName>",
634                    "sandbox-path" : "/data/storage/el1/bundle/arkwebcore",
635                    "sandbox-flags" : [ "bind", "rec" ],
636                    "check-action-status": "false"
637                }, {
638                    "src-path" : "/system/bin",
639                    "sandbox-path" : "/system/bin",
640                    "sandbox-flags" : [ "bind", "rec" ],
641                    "check-action-status": "false"
642                }, {
643                    "src-path" : "/system/lib",
644                    "sandbox-path" : "/system/lib",
645                    "sandbox-flags" : [ "bind", "rec" ],
646                    "check-action-status": "false"
647                }, {
648                    "src-path" : "/system/app/<arkWebPackageName>",
649                    "sandbox-path" : "/system/app/<arkWebPackageName>",
650                    "sandbox-flags" : [ "bind", "rec" ],
651                    "check-action-status": "false"
652                }, {
653                    "src-path" : "/vendor/lib",
654                    "sandbox-path" : "/vendor/lib",
655                    "sandbox-flags" : [ "bind", "rec" ],
656                    "check-action-status": "false"
657                }, {
658                    "src-path" : "/data/app/el1/bundle/public/<arkWebPackageName>",
659                    "sandbox-path" : "/data/app/el1/bundle/public/<arkWebPackageName>",
660                    "sandbox-flags" : [ "bind", "rec" ],
661                    "check-action-status": "false"
662                }, {
663                    "src-path" : "/system/app/NWeb",
664                    "sandbox-path" : "/system/app/NWeb",
665                    "sandbox-flags" : [ "bind", "rec" ],
666                    "check-action-status": "false"
667                }, {
668                    "src-path" : "/module_update/ArkWebCore/app/<arkWebPackageName>",
669                    "sandbox-path" : "/module_update/ArkWebCore/app/<arkWebPackageName>",
670                    "sandbox-flags" : [ "bind", "rec" ],
671                    "check-action-status": "false"
672                }, {
673                    "src-path" : "/vendor/etc/vulkan/icd.d",
674                    "sandbox-path" : "/vendor/etc/vulkan/icd.d",
675                    "sandbox-flags" : [ "bind", "rec" ],
676                    "check-action-status": "false"
677                }, {
678                    "src-path" : "/data/app/el1/<hostUserId>/system_optimize/<variablePackageName>/shader_cache",
679                    "sandbox-path" : "/data/storage/system_optimize/shader_cache",
680                    "sandbox-flags" : [ "bind", "rec" ],
681                    "check-action-status": "false"
682                }, {
683                    "src-path" : "/data/app/el1/public/shader_cache/cloud/<PackageName>",
684                    "sandbox-path" : "/data/storage/shader_cache/cloud",
685                    "sandbox-flags" : [ "bind", "rec" ],
686                    "check-action-status": "false"
687                }, {
688                    "src-path" : "/data/app/el1/public/shader_cache/cloud/common",
689                    "sandbox-path" : "/data/storage/shader_cache/common",
690                    "sandbox-flags" : [ "bind", "rec" ],
691                    "check-action-status": "false"
692                }
693            ],
694            "symbol-links" : [{
695                    "target-name" : "/system/etc",
696                    "link-name" : "/etc",
697                    "check-action-status": "false"
698                }, {
699                    "target-name" : "/system/bin",
700                    "link-name" : "/bin",
701                    "check-action-status": "false"
702                }, {
703                    "target-name" : "/system/lib",
704                    "link-name" : "/lib",
705                    "check-action-status": "false"
706                }
707            ]
708        }]
709    }],
710    "permission":[{
711        "ohos.permission.FILE_ACCESS_MANAGER":[{
712            "sandbox-switch": "ON",
713            "gids": [1006, 1008],
714            "mount-paths": [{
715                    "src-path": "/mnt/user/<currentUserId>/nosharefs/docs",
716                    "sandbox-path": "/storage/Users",
717                    "sandbox-flags": [ "bind", "rec" ]
718                },{
719                    "src-path": "/data/service/el1/public/storage_daemon/share/public",
720                    "sandbox-path": "/storage/Share",
721                    "sandbox-flags": [ "bind", "rec" ]
722                },
723                {
724                    "src-path": "/mnt/data/external",
725                    "sandbox-path": "/storage/External",
726                    "sandbox-flags": [ "bind", "rec" ]
727                },
728                {
729                    "src-path": "/storage/media/<currentUserId>/local/files/.Recent",
730                    "sandbox-path": "/storage/Users/<currentUserId>/.Recent",
731                    "sandbox-flags": [ "bind", "rec" ]
732                },
733                {
734                    "src-path": "/mnt/data/<currentUserId>/hmdfs",
735                    "sandbox-path": "/storage/hmdfs",
736                    "sandbox-flags": [ "bind", "rec" ]
737                },
738                {
739                    "src-path": "/mnt/data/<currentUserId>/userExternal",
740                    "sandbox-path": "/storage/userExternal",
741                    "sandbox-flags": [ "bind", "rec" ]
742                },
743                {
744                    "src-path": "",
745                    "sandbox-path": "",
746                    "sandbox-flags": [],
747                    "dec-paths": [ "/storage/Users/<currentUserId>/appdata/el2/shareFiles" ]
748                }
749            ]
750        }],
751        "ohos.permission.MANAGE_PRIVATE_PHOTOS":[{
752            "sandbox-switch": "ON",
753            "gids": [1008],
754            "mount-paths": [{
755                    "src-path": "/storage/cloud/<currentUserId>/files/.thumbs/Photo",
756                    "sandbox-path": "/storage/Share/.thumbs/Photo",
757                    "sandbox-flags": [ "bind", "rec" ]
758                }
759            ]
760        }],
761        "ohos.permission.GET_EDM_CONFIG":[{
762            "sandbox-switch": "ON",
763            "mount-paths": [{
764                    "src-path": "/data/service/el1/public/edm/config/system",
765                    "sandbox-path": "/data/ecust/system",
766                    "sandbox-flags": [ "bind", "rec" ]
767                }
768            ]
769        }],
770        "ohos.permission.GET_ENTERPRISE_CONFIG":[{
771            "sandbox-switch": "ON",
772            "mount-paths": [{
773                    "src-path": "/data/service/el1/public/edm/config/application/<PackageName>/all",
774                    "sandbox-path": "/data/ecust/forAll",
775                    "sandbox-flags": [ "bind", "rec" ]
776                },
777                {
778                    "src-path": "/data/service/el1/public/edm/config/application/<PackageName>/<currentUserId>",
779                    "sandbox-path": "/data/ecust/currentUser",
780                    "sandbox-flags": [ "bind", "rec" ]
781                }
782            ]
783        }],
784        "ohos.permission.ACTIVATE_THEME_PACKAGE":[{
785            "sandbox-switch": "ON",
786            "gids": [3817],
787            "mount-paths": [{
788                    "src-path": "/data/service/el1/public/themes/<currentUserId>/a/system",
789                    "sandbox-path": "/data/themes/a/system",
790                    "sandbox-flags": [ "bind", "rec" ]
791                },
792                {
793                    "src-path": "/data/service/el1/public/themes/<currentUserId>/b/system",
794                    "sandbox-path": "/data/themes/b/system",
795                    "sandbox-flags": [ "bind", "rec" ]
796                },
797                {
798                    "src-path": "/data/service/el1/public/themes/<currentUserId>/fa",
799                    "sandbox-path": "/data/themes/f",
800                    "sandbox-flags": [ "bind", "rec" ]
801                },
802                {
803                    "src-path": "/data/service/el1/public/themes/<currentUserId>/share",
804                    "sandbox-path": "/data/themes/s",
805                    "sandbox-flags": [ "bind", "rec" ]
806                }
807            ]
808        }],
809        "ohos.permission.THEME_SKIN":[{
810            "sandbox-switch": "ON",
811            "mount-paths": [{
812                    "src-path": "/data/service/el1/public/themes/<currentUserId>/a/skin",
813                    "sandbox-path": "/data/themes/a/skin",
814                    "sandbox-flags": [ "bind", "rec" ]
815                },
816                {
817                    "src-path": "/data/service/el1/public/themes/<currentUserId>/b/skin",
818                    "sandbox-path": "/data/themes/b/skin",
819                    "sandbox-flags": [ "bind", "rec" ]
820                }
821            ]
822        }],
823        "ohos.permission.GET_WALLPAPER":[{
824            "sandbox-switch": "ON",
825            "mount-paths": [{
826                    "src-path": "/data/service/el1/public/wallpaper/<currentUserId>",
827                    "sandbox-path": "/data/wallpaper",
828                    "sandbox-flags": [ "bind", "rec" ]
829                }
830            ]
831        }],
832        "ohos.permission.ACCESS_BUNDLE_DIR":[{
833            "sandbox-switch": "ON",
834            "gids": [1010],
835            "mount-paths": [{
836                    "src-path": "/data/app/el1/bundle/public",
837                    "sandbox-path": "/data/bundles/",
838                    "sandbox-flags": [ "bind", "rec" ]
839                }, {
840                    "src-path": "/data/service/el1/public/bms/bundle_manager_service/uninstalled_preload",
841                    "sandbox-path": "/data/bms/uninstalled_preload/",
842                    "sandbox-flags": [ "bind", "rec" ]
843                }
844            ]
845        }],
846        "ohos.permission.ACCESS_APP_INSTALL_DIR":[{
847            "sandbox-switch": "ON",
848            "gids": [2002],
849            "mount-paths": [{
850                    "src-path": "/data/service/el1/public/bms/bundle_manager_service/app_install/<currentUserId>/",
851                    "sandbox-path": "/data/bms_app_install/",
852                    "sandbox-flags": [ "bind", "rec" ]
853                }
854            ]
855        }],
856        "ohos.permission.ACCESS_BBOX_DIR":[{
857            "sandbox-switch": "ON",
858            "mount-paths": [{
859                    "src-path": "/data/log/bbox/",
860                    "sandbox-path": "/data/log/bbox/",
861                    "sandbox-flags": [ "bind", "rec" ]
862                }
863            ]
864        }],
865        "ohos.permission.ACCESS_PROTOCOL_DFX_DATA":[{
866            "sandbox-switch": "ON",
867            "gids": [1007],
868            "mount-paths": [{
869                    "src-path": "/data/service/el1/public/chr/protocol",
870                    "sandbox-path": "/data/log/protocol",
871                    "sandbox-flags": [ "bind", "rec" ]
872                },
873                {
874                    "src-path": "/log/chr",
875                    "sandbox-path": "/log/chr",
876                    "sandbox-flags": [ "bind", "rec" ]
877                }
878            ]
879        }],
880        "ohos.permission.ACCESS_MEDIALIB_THUMB_DB":[{
881            "sandbox-switch": "ON",
882            "gids": [3008],
883            "mount-paths": [{
884                    "src-path": "/data/app/el2/<currentUserId>/database/com.ohos.medialibrary.medialibrarydata",
885                    "sandbox-path": "/data/medialibrary/database",
886                    "sandbox-flags": [ "bind", "rec" ]
887                }
888            ]
889        }],
890        "ohos.permission.ACCESS_SHADER_CACHE_DIR":[{
891            "sandbox-switch": "ON",
892            "mount-paths": [{
893                    "src-path": "/data/service/el1/public/shader_cache/local",
894                    "sandbox-path": "/data/storage/shader_caches/local",
895                    "sandbox-flags": [ "bind", "rec" ]
896                }, {
897                    "src-path": "/data/app/el1/public/shader_cache/cloud",
898                    "sandbox-path": "/data/storage/shader_caches/cloud",
899                    "sandbox-flags": [ "bind", "rec" ]
900                }
901            ]
902        }],
903        "ohos.permission.ACCESS_DLP_FILE" : [{
904            "sandbox-switch": "ON",
905            "sandbox-shared" : "true",
906            "mount-paths" : [{
907                    "src-path" : "/mnt/data/<currentUserId>",
908                    "sandbox-path" : "/mnt/data",
909                    "sandbox-flags" : [ "bind", "rec" ],
910                    "mount-shared-flag" : "true",
911                    "check-action-status": "true"
912                }, {
913                    "src-path" : "/dev/fuse",
914                    "sandbox-path" : "/mnt/data/fuse",
915                    "sandbox-flags" : [ "MS_NOSUID", "MS_NODEV", "MS_NOEXEC", "MS_NOATIME", "MS_LAZYTIME" ],
916                    "dac-override-sensitive": "true",
917                    "fs-type": "fuse",
918                    "check-action-status": "false"
919                }, {
920                    "src-path" : "",
921                    "sandbox-path" : "",
922                    "sandbox-flags" : [],
923                    "dec-paths": [ "/mnt/data/fuse", "/mnt/sandbox/<permissionUserId>/<PackageName>/storage/Users/currentUser" ]
924                }
925            ]
926        }],
927        "ohos.permission.ACCESS_LOCAL_BACKUP":[{
928            "sandbox-switch": "ON",
929            "gids": [1023],
930            "mount-paths": [{
931                    "src-path": "/data/hwbackup",
932                    "sandbox-path": "/data/hwbackup",
933                    "sandbox-flags": [ "bind", "rec" ],
934                    "check-action-status": "false"
935                }
936            ]
937        }],
938        "ohos.permission.ACCESS_HIVIEWX":[{
939            "sandbox-switch": "ON",
940            "mount-paths": [{
941                    "src-path": "/data/log/UserView",
942                    "sandbox-path": "/data/log/UserView",
943                    "sandbox-flags": [ "bind", "rec" ],
944                    "dec-paths": [ "/data/log/UserView" ]
945                }
946            ]
947        }],
948        "ohos.permission.RECEIVE_UPDATE_MESSAGE":[{
949            "sandbox-switch": "ON",
950            "mount-paths": [{
951                    "src-path": "/data/service/el1/public/update/param_service/install/system/etc/<PackageName>",
952                    "sandbox-path": "/data/service/el1/public/update/param_service/install/system/etc/<PackageName>",
953                    "sandbox-flags": [ "bind", "rec" ],
954                    "check-action-status": "false"
955                }
956            ]
957        }],
958        "ohos.permission.READ_DFX_XPOWER":[{
959            "sandbox-switch": "ON",
960            "mount-paths": [{
961                    "src-path": "/data/log/xpower",
962                    "sandbox-path": "/data/log/xpower",
963                    "sandbox-flags": [ "bind", "rec" ]
964                }
965            ]
966        }],
967        "ohos.permission.PROTECT_SCREEN_LOCK_DATA":[{
968            "sandbox-switch": "ON",
969            "mount-paths": [{
970                    "src-path": "/data/app/el5/<currentUserId>/base/<PackageName>",
971                    "sandbox-path": "/data/storage/el5/base",
972                    "sandbox-flags": [ "bind", "rec" ],
973                    "check-action-status": "false"
974                },
975                {
976                    "src-path": "/data/app/el5/<currentUserId>/database/<PackageName>",
977                    "sandbox-path": "/data/storage/el5/database",
978                    "sandbox-flags": [ "bind", "rec" ],
979                    "check-action-status": "false"
980                }
981            ]
982        }],
983        "ohos.permission.ACCESS_FILE_CONTENT_SHARE":[{
984            "sandbox-switch": "ON",
985            "gids": [1006, 1008],
986            "mount-paths": [{
987                    "src-path": "/data/service/el2/<currentUserId>/file_monitor_service/content_share",
988                    "sandbox-path": "/storage/ContentShare",
989                    "sandbox-flags": [ "bind", "rec" ]
990                }
991            ]
992        }],
993        "ohos.permission.ACCESS_RINGTONE_RESOURCE":[{
994            "sandbox-switch": "ON",
995            "gids": [1008],
996            "mount-paths": [{
997                    "src-path": "/storage/media/<currentUserId>/local/files",
998                    "sandbox-path": "/storage/media/local/files",
999                    "sandbox-flags": [ "bind", "rec" ]
1000                }
1001            ]
1002        }],
1003        "ohos.permission.READ_WRITE_DOWNLOAD_DIRECTORY":[{
1004            "sandbox-switch": "ON",
1005            "mount-paths": [{
1006                    "src-path": "",
1007                    "sandbox-path": "",
1008                    "sandbox-flags": [],
1009                    "dec-paths": [ "/storage/Users/<currentUserId>/Download" ]
1010                }
1011            ]
1012        }],
1013        "ohos.permission.READ_WRITE_DESKTOP_DIRECTORY":[{
1014            "sandbox-switch": "ON",
1015            "mount-paths": [{
1016                    "src-path": "",
1017                    "sandbox-path": "",
1018                    "sandbox-flags": [],
1019                    "dec-paths": [ "/storage/Users/<currentUserId>/Desktop" ]
1020                }
1021            ]
1022        }],
1023        "ohos.permission.READ_WRITE_DOCUMENTS_DIRECTORY":[{
1024            "sandbox-switch": "ON",
1025            "mount-paths": [{
1026                    "src-path": "",
1027                    "sandbox-path": "",
1028                    "sandbox-flags": [],
1029                    "dec-paths": [ "/storage/Users/<currentUserId>/Documents" ]
1030                }
1031            ]
1032        }],
1033        "ohos.permission.ACCESS_FACTORY_OTA_DIR":[{
1034            "sandbox-switch": "ON",
1035            "mount-paths": [{
1036                    "src-path": "/data/update/sd_package",
1037                    "sandbox-path": "/data/update/sd_package",
1038                    "sandbox-flags": [ "bind", "rec" ],
1039                    "check-action-status": "false"
1040                }
1041            ]
1042        }],
1043        "ohos.permission.GET_ALL_PROCESSES":[{
1044            "sandbox-switch": "ON",
1045            "gids": [3009],
1046            "mount-paths": []
1047        }],
1048        "ohos.permission.ACCESS_ANALYTICS":[{
1049            "sandbox-switch": "ON",
1050            "gids": [1007],
1051            "mount-paths": [{
1052                    "src-path": "/data/log/faultlog/faultlogger",
1053                    "sandbox-path": "/data/log/faultlog/faultlogger",
1054                    "sandbox-flags": [ "bind", "rec" ]
1055                }
1056            ]
1057        }],
1058        "ohos.permission.ACCESS_APP_CLONE_DIR":[{
1059            "sandbox-switch": "ON",
1060            "gids":[2002],
1061            "mount-paths": [{
1062                "src-path": "/data/service/el1/public/bms/bundle_manager_service/app_install/<currentUserId>/app_clone",
1063                "sandbox-path": "/data/bms_app_clone/",
1064                "sandbox-flags": ["bind", "rec"]
1065                }
1066            ]
1067        }],
1068        "ohos.permission.ACCESS_MEDIALIB_RESTORE":[{
1069            "sandbox-switch": "ON",
1070            "gids":[1008],
1071            "mount-paths": [{
1072                "src-path": "/storage/media/<currentUserId>/local/files/.backup",
1073                "sandbox-path": "/data/storage/el2/base/files/mediadata/",
1074                "sandbox-flags": ["bind", "rec"]
1075                }
1076            ]
1077        }],
1078        "ohos.permission.ACCESS_DFX_LOG_DIR":[{
1079            "sandbox-switch": "ON",
1080            "gids":[1007],
1081            "mount-paths": []
1082        }]
1083    }]
1084}
1085