• Home
  • Line#
  • Scopes#
  • Navigate#
  • Raw
  • Download
1type audio_prop, property_type, core_property_type;
2type boottime_prop, property_type;
3type boottime_public_prop, property_type;
4type bluetooth_prop, property_type;
5type config_prop, property_type, core_property_type;
6type cppreopt_prop, property_type, core_property_type;
7type ctl_bootanim_prop, property_type;
8type ctl_bugreport_prop, property_type;
9type ctl_console_prop, property_type;
10type ctl_default_prop, property_type;
11type ctl_dumpstate_prop, property_type;
12type ctl_fuse_prop, property_type;
13type ctl_mdnsd_prop, property_type;
14type ctl_rildaemon_prop, property_type;
15type dalvik_prop, property_type, core_property_type;
16type debuggerd_prop, property_type, core_property_type;
17type debug_prop, property_type, core_property_type;
18type default_prop, property_type, core_property_type;
19type device_logging_prop, property_type;
20type dhcp_prop, property_type, core_property_type;
21type dumpstate_options_prop, property_type;
22type dumpstate_prop, property_type, core_property_type;
23type ffs_prop, property_type, core_property_type;
24type fingerprint_prop, property_type, core_property_type;
25type firstboot_prop, property_type;
26type hwservicemanager_prop, property_type;
27type logd_prop, property_type, core_property_type;
28type logpersistd_logging_prop, property_type;
29type log_prop, property_type, log_property_type;
30type log_tag_prop, property_type, log_property_type;
31type mmc_prop, property_type;
32type net_dns_prop, property_type;
33type net_radio_prop, property_type, core_property_type;
34type netd_stable_secret_prop, property_type;
35type nfc_prop, property_type, core_property_type;
36type overlay_prop, property_type;
37type pan_result_prop, property_type, core_property_type;
38type persist_debug_prop, property_type, core_property_type;
39type persistent_properties_ready_prop, property_type;
40type powerctl_prop, property_type, core_property_type;
41type radio_prop, property_type, core_property_type;
42type restorecon_prop, property_type, core_property_type;
43type safemode_prop, property_type;
44type serialno_prop, property_type;
45type shell_prop, property_type, core_property_type;
46type system_prop, property_type, core_property_type;
47type system_radio_prop, property_type, core_property_type;
48type vold_prop, property_type, core_property_type;
49type wifi_log_prop, property_type, log_property_type;
50type wifi_prop, property_type;
51
52allow property_type tmpfs:filesystem associate;
53
54###
55### Neverallow rules
56###
57
58# core_property_type should not be used for new properties or
59# device specific properties. Properties with this attribute
60# are readable to everyone, which is overly broad and should
61# be avoided.
62# New properties should have appropriate read / write access
63# control rules written.
64
65neverallow * {
66  core_property_type
67  -audio_prop
68  -config_prop
69  -cppreopt_prop
70  -dalvik_prop
71  -debuggerd_prop
72  -debug_prop
73  -default_prop
74  -dhcp_prop
75  -dumpstate_prop
76  -ffs_prop
77  -fingerprint_prop
78  -logd_prop
79  -net_radio_prop
80  -nfc_prop
81  -pan_result_prop
82  -persist_debug_prop
83  -powerctl_prop
84  -radio_prop
85  -restorecon_prop
86  -shell_prop
87  -system_prop
88  -system_radio_prop
89  -vold_prop
90}:file no_rw_file_perms;
91