Lines Matching refs:domain

32 neverallow { domain            } bpffs_type:dir ~{ add_name create getattr mounton remove_name sear…
33 neverallow { domain -bpfloader } bpffs_type:dir { add_name create remove_name write };
35 neverallow { domain            } bpffs_type:file ~{ create getattr map open read rename setattr wri…
36 neverallow { domain -bpfloader } bpffs_type:file { create map open rename setattr };
37 neverallow { domain -bpfloader -gpuservice -lmkd -mediaprovider_app -netd -netutils_wrapper        …
38 neverallow { domain -bpfloader                                                                     …
39 neverallow { domain -bpfloader                                                              -networ…
40 neverallow { domain -bpfloader                                                              -networ…
41 neverallow { domain -bpfloader                                      -netd                   -networ…
42 neverallow { domain -bpfloader                                      -netd -netutils_wrapper -networ…
43 neverallow { domain -bpfloader                                                              -networ…
44 neverallow { domain -bpfloader -gpuservice                          -netd -netutils_wrapper -networ…
46 neverallow { domain -bpfloader } bpffs_type:lnk_file ~read;
47 neverallow { domain -bpfdomain } bpffs_type:lnk_file read;
49 neverallow { domain -bpfloader } *:bpf { map_create prog_load };
52 neverallow { domain -bpfloader } fs_bpf_loader:bpf *;
53 neverallow { domain -bpfloader } fs_bpf_loader:file *;
56   domain
66 neverallow { domain -bpfloader -gpuservice -lmkd -mediaprovider_app -netd -network_stack -system_se…
67 neverallow { domain -bpfloader -init } bpfloader_exec:file { execute execute_no_trans };
73 # No domain should be allowed to ptrace bpfloader
74 neverallow { domain userdebug_or_eng(`-llkd') } bpfloader:process ptrace;
76 neverallow { domain -bpfloader } proc_bpf:file write;