| /system/sepolicy/prebuilts/api/34.0/private/ |
| D | system_server.te | 2 # System Server aka system_server spawned by zygote.
6 typeattribute system_server coredomain;
7 typeattribute system_server mlstrustedsubject;
8 typeattribute system_server remote_provisioning_service_server;
9 typeattribute system_server scheduler_service_server;
10 typeattribute system_server sensor_service_server;
11 typeattribute system_server stats_service_server;
12 typeattribute system_server bpfdomain;
15 tmpfs_domain(system_server)
17 userfaultfd_use(system_server)
[all …]
|
| D | bug_map | 23 system_server overlayfs_file file b/142390309
24 system_server sdcardfs file b/77856826
25 system_server system_server capability b/228030183
26 system_server zygote process b/77856826
|
| /system/sepolicy/prebuilts/api/33.0/private/ |
| D | system_server.te | 2 # System Server aka system_server spawned by zygote.
6 typeattribute system_server coredomain;
7 typeattribute system_server mlstrustedsubject;
8 typeattribute system_server scheduler_service_server;
9 typeattribute system_server sensor_service_server;
10 typeattribute system_server stats_service_server;
11 typeattribute system_server bpfdomain;
14 tmpfs_domain(system_server)
16 userfaultfd_use(system_server)
19 type_transition system_server system_data_file:sock_file system_ndebug_socket "ndebugsocket";
[all …]
|
| D | network_stack.te | 88 # T+: Only the bpfloader, network_stack and system_server should ever touch 'fs_bpf_net_shared' pro…
89 neverallow { domain -bpfloader -init -network_stack -system_server -vendor_init } fs_bpf_net_shared…
90 neverallow { domain -bpfloader -init -network_stack -system_server -vendor_init } fs_bpf_net_shared…
92 neverallow { domain -bpfloader -network_stack -system_server } fs_bpf_net_shared:dir ~{ getattr ope…
93 neverallow { domain -bpfloader -network_stack -system_server } fs_bpf_net_shared:file ~{ map open r…
95 # T+: Only the bpfloader, netd, network_stack and system_server should ever touch 'fs_bpf_netd_read…
97 neverallow { domain -bpfloader -init -netd -network_stack -system_server -vendor_init } fs_bpf_netd…
98 neverallow { domain -bpfloader -init -netd -network_stack -system_server -vendor_init } fs_bpf_netd…
101 neverallow { domain -bpfloader -netd -network_stack -system_server } fs_bpf_netd_readonly:dir ~{ ge…
102 neverallow { domain -bpfloader -netd -network_stack -system_server } fs_bpf_netd_readonly:file ~{ m…
[all …]
|
| /system/sepolicy/prebuilts/api/202404/private/ |
| D | system_server.te | 2 # System Server aka system_server spawned by zygote.
6 typeattribute system_server coredomain;
7 typeattribute system_server mlstrustedsubject;
8 typeattribute system_server remote_provisioning_service_server;
9 typeattribute system_server scheduler_service_server;
10 typeattribute system_server sensor_service_server;
11 typeattribute system_server stats_service_server;
12 typeattribute system_server bpfdomain;
15 tmpfs_domain(system_server)
17 userfaultfd_use(system_server)
[all …]
|
| D | bug_map | 25 system_server overlayfs_file file b/142390309
26 system_server sdcardfs file b/77856826
27 system_server system_server capability b/228030183
28 system_server zygote process b/77856826
|
| /system/sepolicy/prebuilts/api/30.0/private/ |
| D | system_server.te | 2 # System Server aka system_server spawned by zygote.
6 typeattribute system_server coredomain;
7 typeattribute system_server mlstrustedsubject;
8 typeattribute system_server scheduler_service_server;
9 typeattribute system_server sensor_service_server;
10 typeattribute system_server stats_service_server;
13 tmpfs_domain(system_server)
16 type_transition system_server system_data_file:sock_file system_ndebug_socket "ndebugsocket";
19 type_transition system_server system_data_file:sock_file system_unsolzygote_socket "unsolzygotesock…
21 allow system_server zygote_tmpfs:file read;
[all …]
|
| D | coredomain.te | 32 -system_server
49 -system_server
67 -system_server
87 -system_server
128 -system_server
139 -system_server
163 -system_server
170 -system_server
179 -system_server
|
| D | bug_map | 28 system_server crash_dump process b/73128755
29 system_server overlayfs_file file b/142390309
30 system_server sdcardfs file b/77856826
31 system_server storage_stub_file dir b/145267097
32 system_server zygote process b/77856826
|
| /system/sepolicy/prebuilts/api/29.0/private/ |
| D | system_server.te | 2 # System Server aka system_server spawned by zygote.
6 typeattribute system_server coredomain;
7 typeattribute system_server mlstrustedsubject;
8 typeattribute system_server scheduler_service_server;
9 typeattribute system_server sensor_service_server;
12 tmpfs_domain(system_server)
15 type_transition system_server system_data_file:sock_file system_ndebug_socket "ndebugsocket";
17 allow system_server zygote_tmpfs:file read;
18 allow system_server appdomain_tmpfs:file { getattr map read write };
21 allow system_server dalvikcache_data_file:dir r_dir_perms;
[all …]
|
| D | coredomain.te | 32 -system_server
48 -system_server
63 -system_server
80 -system_server
120 -system_server
155 -system_server
162 -system_server
171 -system_server
|
| /system/sepolicy/private/ |
| D | system_server.te | 2 # System Server aka system_server spawned by zygote.
6 typeattribute system_server coredomain;
7 typeattribute system_server mlstrustedsubject;
8 typeattribute system_server remote_provisioning_service_server;
9 typeattribute system_server scheduler_service_server;
10 typeattribute system_server sensor_service_server;
11 typeattribute system_server stats_service_server;
12 typeattribute system_server bpfdomain;
15 tmpfs_domain(system_server)
17 userfaultfd_use(system_server)
[all …]
|
| /system/sepolicy/prebuilts/api/202504/private/ |
| D | system_server.te | 2 # System Server aka system_server spawned by zygote.
6 typeattribute system_server coredomain;
7 typeattribute system_server mlstrustedsubject;
8 typeattribute system_server remote_provisioning_service_server;
9 typeattribute system_server scheduler_service_server;
10 typeattribute system_server sensor_service_server;
11 typeattribute system_server stats_service_server;
12 typeattribute system_server bpfdomain;
15 tmpfs_domain(system_server)
17 userfaultfd_use(system_server)
[all …]
|
| D | bug_map | 27 system_server overlayfs_file file b/142390309
28 system_server sdcardfs file b/77856826
29 system_server system_server capability b/228030183
30 system_server zygote process b/77856826
|
| /system/sepolicy/prebuilts/api/32.0/private/ |
| D | system_server.te | 2 # System Server aka system_server spawned by zygote.
6 typeattribute system_server coredomain;
7 typeattribute system_server mlstrustedsubject;
8 typeattribute system_server scheduler_service_server;
9 typeattribute system_server sensor_service_server;
10 typeattribute system_server stats_service_server;
13 tmpfs_domain(system_server)
15 userfaultfd_use(system_server)
18 type_transition system_server system_data_file:sock_file system_ndebug_socket "ndebugsocket";
21 type_transition system_server system_data_file:sock_file system_unsolzygote_socket "unsolzygotesock…
[all …]
|
| /system/sepolicy/prebuilts/api/31.0/private/ |
| D | system_server.te | 2 # System Server aka system_server spawned by zygote.
6 typeattribute system_server coredomain;
7 typeattribute system_server mlstrustedsubject;
8 typeattribute system_server scheduler_service_server;
9 typeattribute system_server sensor_service_server;
10 typeattribute system_server stats_service_server;
13 tmpfs_domain(system_server)
15 userfaultfd_use(system_server)
18 type_transition system_server system_data_file:sock_file system_ndebug_socket "ndebugsocket";
21 type_transition system_server system_data_file:sock_file system_unsolzygote_socket "unsolzygotesock…
[all …]
|
| /system/sepolicy/prebuilts/api/32.0/public/ |
| D | iorapd.te | 20 binder_call(iorapd, system_server)
49 # Allowing system_server to check for the existence and size of files under iorapd
52 allow system_server iorapd_data_file:dir { getattr open read search };
53 allow system_server iorapd_data_file:file getattr;
68 -system_server
83 -system_server
86 # Only system_server and shell (for dumpsys) can interact with iorapd over binder
87 neverallow { domain -dumpstate -system_server -iorapd } iorapd_service:service_manager find;
92 -system_server
|
| D | system_server.te | 2 # System Server aka system_server spawned by zygote.
5 type system_server, domain; type
9 get_prop(system_server, power_debug_prop)
10 set_prop(system_server, power_debug_prop)
16 -system_server
|
| /system/sepolicy/prebuilts/api/30.0/public/ |
| D | iorapd.te | 20 binder_call(iorapd, system_server)
49 # Allowing system_server to check for the existence and size of files under iorapd
52 allow system_server iorapd_data_file:dir { getattr open read search };
53 allow system_server iorapd_data_file:file getattr;
68 -system_server
83 -system_server
86 # Only system_server and shell (for dumpsys) can interact with iorapd over binder
87 neverallow { domain -dumpstate -system_server -iorapd } iorapd_service:service_manager find;
92 -system_server
|
| /system/sepolicy/prebuilts/api/33.0/public/ |
| D | iorapd.te | 20 binder_call(iorapd, system_server)
46 # Allowing system_server to check for the existence and size of files under iorapd
49 allow system_server iorapd_data_file:dir { getattr open read search };
50 allow system_server iorapd_data_file:file getattr;
65 -system_server
80 -system_server
83 # Only system_server and shell (for dumpsys) can interact with iorapd over binder
84 neverallow { domain -dumpstate -system_server -iorapd } iorapd_service:service_manager find;
88 -system_server
|
| D | system_server.te | 2 # System Server aka system_server spawned by zygote.
5 type system_server, domain; type
9 get_prop(system_server, power_debug_prop)
10 set_prop(system_server, power_debug_prop)
16 -system_server
|
| /system/sepolicy/prebuilts/api/31.0/public/ |
| D | iorapd.te | 20 binder_call(iorapd, system_server)
49 # Allowing system_server to check for the existence and size of files under iorapd
52 allow system_server iorapd_data_file:dir { getattr open read search };
53 allow system_server iorapd_data_file:file getattr;
68 -system_server
83 -system_server
86 # Only system_server and shell (for dumpsys) can interact with iorapd over binder
87 neverallow { domain -dumpstate -system_server -iorapd } iorapd_service:service_manager find;
92 -system_server
|
| D | system_server.te | 2 # System Server aka system_server spawned by zygote.
5 type system_server, domain; type
9 get_prop(system_server, power_debug_prop)
10 set_prop(system_server, power_debug_prop)
16 -system_server
|
| /system/sepolicy/prebuilts/api/202404/public/ |
| D | system_server.te | 2 # System Server aka system_server spawned by zygote.
5 type system_server, domain; type
9 get_prop(system_server, power_debug_prop)
10 set_prop(system_server, power_debug_prop)
16 -system_server
|
| /system/sepolicy/prebuilts/api/34.0/public/ |
| D | system_server.te | 2 # System Server aka system_server spawned by zygote.
5 type system_server, domain; type
9 get_prop(system_server, power_debug_prop)
10 set_prop(system_server, power_debug_prop)
16 -system_server
|