Lines Matching refs:allow

11 allow system_server self:process execmem;
12 allow system_server ashmem_device:chr_file execute;
13 allow system_server system_server_tmpfs:file execute;
16 allow system_server dalvikcache_data_file:file execute;
17 allow system_server dalvikcache_data_file:dir r_dir_perms;
20 allow system_server resourcecache_data_file:file r_file_perms;
21 allow system_server resourcecache_data_file:dir r_dir_perms;
24 allow system_server self:process ptrace;
27 allow system_server zygote:fd use;
28 allow system_server zygote:process sigchld;
29 allow system_server zygote_tmpfs:file read;
32 allow system_server zygote:process sigkill;
35 allow system_server zygote_exec:file r_file_perms;
38 allow system_server zygote:unix_stream_socket { getopt getattr };
46 allow system_server self:capability {
65 allow system_server kernel:system module_request;
68 allow system_server self:netlink_kobject_uevent_socket create_socket_perms;
71 allow system_server self:netlink_socket create_socket_perms;
74 allow system_server self:netlink_route_socket nlmsg_write;
77 allow system_server appdomain:process { sigkill signal };
80 allow system_server appdomain:process { getsched setsched };
81 allow system_server mediaserver:process { getsched setsched };
89 allow system_server qtaguid_proc:file rw_file_perms;
90 allow system_server qtaguid_device:chr_file rw_file_perms;
93 allow system_server proc_uid_cputime_showstat:file r_file_perms;
96 allow system_server proc_uid_cputime_removeuid:file { w_file_perms getattr };
99 allow system_server proc_sysrq:file rw_file_perms;
102 allow system_server debugfs:file r_file_perms;
105 allow system_server self:packet_socket create_socket_perms;
109 allow system_server node:rawip_socket node_bind;
112 allow system_server self:tun_socket create_socket_perms;
115 allow system_server init:process sigchld;
129 allow system_server surfaceflinger:unix_stream_socket { read write setopt };
141 allow system_server { mediaserver sdcardd surfaceflinger inputflinger }:debuggerd dump_backtrace;
150 allow system_server mediaserver:tcp_socket rw_socket_perms;
151 allow system_server mediaserver:udp_socket rw_socket_perms;
157 allow system_server sysfs:file rw_file_perms;
158 allow system_server sysfs_nfc_power_writable:file rw_file_perms;
159 allow system_server sysfs_devices_system_cpu:file w_file_perms;
162 allow system_server device:dir r_dir_perms;
163 allow system_server mdns_socket:sock_file rw_file_perms;
164 allow system_server alarm_device:chr_file rw_file_perms;
165 allow system_server gpu_device:chr_file rw_file_perms;
166 allow system_server iio_device:chr_file rw_file_perms;
167 allow system_server input_device:dir r_dir_perms;
168 allow system_server input_device:chr_file rw_file_perms;
169 allow system_server radio_device:chr_file r_file_perms;
170 allow system_server tty_device:chr_file rw_file_perms;
171 allow system_server usbaccessory_device:chr_file rw_file_perms;
172 allow system_server video_device:dir r_dir_perms;
173 allow system_server video_device:chr_file rw_file_perms;
174 allow system_server adbd_socket:sock_file rw_file_perms;
175 allow system_server rtc_device:chr_file rw_file_perms;
176 allow system_server audio_device:dir r_dir_perms;
179 allow system_server audio_device:chr_file rw_file_perms;
182 allow system_server tun_device:chr_file rw_file_perms;
185 allow system_server system_data_file:dir create_dir_perms;
186 allow system_server system_data_file:notdevfile_class_set create_file_perms;
187 allow system_server keychain_data_file:dir create_dir_perms;
188 allow system_server keychain_data_file:file create_file_perms;
191 allow system_server apk_data_file:dir create_dir_perms;
192 allow system_server apk_data_file:file { create_file_perms link };
193 allow system_server apk_tmp_file:dir create_dir_perms;
194 allow system_server apk_tmp_file:file create_file_perms;
197 allow system_server apk_private_data_file:dir create_dir_perms;
198 allow system_server apk_private_data_file:file create_file_perms;
199 allow system_server apk_private_tmp_file:dir create_dir_perms;
200 allow system_server apk_private_tmp_file:file create_file_perms;
203 allow system_server asec_apk_file:dir create_dir_perms;
204 allow system_server asec_apk_file:file create_file_perms;
205 allow system_server asec_public_file:file create_file_perms;
208 allow system_server anr_data_file:dir create_dir_perms;
209 allow system_server anr_data_file:file create_file_perms;
212 allow system_server backup_data_file:dir create_dir_perms;
213 allow system_server backup_data_file:file create_file_perms;
216 allow system_server dalvikcache_profiles_data_file:dir rw_dir_perms;
217 allow system_server dalvikcache_profiles_data_file:file create_file_perms;
220 allow system_server heapdump_data_file:dir rw_dir_perms;
221 allow system_server heapdump_data_file:file create_file_perms;
224 allow system_server adb_keys_file:dir create_dir_perms;
225 allow system_server adb_keys_file:file create_file_perms;
229 allow system_server radio_data_file:dir create_dir_perms;
230 allow system_server radio_data_file:file create_file_perms;
233 allow system_server systemkeys_data_file:dir create_dir_perms;
234 allow system_server systemkeys_data_file:file create_file_perms;
237 allow system_server tombstone_data_file:dir r_dir_perms;
238 allow system_server tombstone_data_file:file r_file_perms;
241 allow system_server vpn_data_file:dir create_dir_perms;
242 allow system_server vpn_data_file:file create_file_perms;
245 allow system_server wifi_data_file:dir create_dir_perms;
246 allow system_server wifi_data_file:file create_file_perms;
249 allow system_server zoneinfo_data_file:dir create_dir_perms;
250 allow system_server zoneinfo_data_file:file create_file_perms;
254 allow system_server { system_app_data_file bluetooth_data_file nfc_data_file radio_data_file shell_…
257 allow system_server unlabeled:dir r_dir_perms;
259 allow system_server unlabeled:file r_file_perms;
262 allow system_server system_app_data_file:dir create_dir_perms;
263 allow system_server system_app_data_file:file create_file_perms;
267 allow system_server { system_app_data_file bluetooth_data_file nfc_data_file radio_data_file shell_…
270 allow system_server media_rw_data_file:file { getattr read write };
276 allow system_server { apk_tmp_file apk_private_tmp_file }:{ dir file } { relabelfrom relabelto };
277 allow system_server { apk_data_file apk_private_data_file }:{ dir file } { relabelfrom relabelto };
280 allow system_server system_data_file:file relabelfrom;
281 allow system_server wallpaper_file:file relabelto;
282 allow system_server wallpaper_file:file { rw_file_perms unlink };
285 allow system_server system_data_file:dir relabelfrom;
286 allow system_server anr_data_file:dir relabelto;
305 allow system_server wpa_socket:dir rw_dir_perms;
306 allow system_server system_wpa_socket:sock_file create_file_perms;
309 allow system_server wpa_socket:sock_file unlink;
313 allow system_server system_ndebug_socket:sock_file create_file_perms;
316 allow system_server cache_file:dir { relabelfrom create_dir_perms };
317 allow system_server cache_file:file { relabelfrom create_file_perms };
318 allow system_server cache_file:fifo_file create_file_perms;
321 allow system_server system_file:file x_file_perms;
325 allow system_server gps_device:chr_file rw_file_perms;
326 allow system_server gps_control:file rw_file_perms;
329 allow system_server appdomain:{ tcp_socket udp_socket } { getattr getopt setopt read write shutdown…
330 allow system_server appdomain:{ fifo_file unix_stream_socket } { getattr read write };
333 allow system_server rild:unix_stream_socket connectto;
336 allow system_server cache_backup_file:file create_file_perms;
338 allow system_server backup_data_file:dir { relabelto relabelfrom };
340 allow system_server cache_backup_file:file { relabelto relabelfrom };
342 allow system_server cache_backup_file:dir { relabelto relabelfrom create_dir_perms };
345 allow system_server usb_device:chr_file rw_file_perms;
346 allow system_server usb_device:dir r_dir_perms;
349 allow system_server sensors_device:chr_file rw_file_perms;
352 allow system_server hw_random_device:chr_file r_file_perms;
356 allow system_server fscklogs:dir { write remove_name };
357 allow system_server fscklogs:file unlink;
364 allow system_server zygote:unix_dgram_socket write;
372 allow system_server sysfs_lowmemorykiller:file { getattr w_file_perms };
377 allow system_server pstorefs:dir r_dir_perms;
378 allow system_server pstorefs:file r_file_perms;
380 allow system_server drmserver_service:service_manager find;
381 allow system_server healthd_service:service_manager find;
382 allow system_server keystore_service:service_manager find;
383 allow system_server gatekeeper_service:service_manager find;
384 allow system_server fingerprintd_service:service_manager find;
385 allow system_server mediaserver_service:service_manager find;
386 allow system_server nfc_service:service_manager find;
387 allow system_server radio_service:service_manager find;
388 allow system_server system_server_service:service_manager { add find };
389 allow system_server surfaceflinger_service:service_manager find;
391 allow system_server keystore:keystore_key {
414 allow system_server block_device:dir search;
415 allow system_server frp_block_device:blk_file rw_file_perms;
418 allow system_server cgroup:dir { remove_name rmdir };
424 allow system_server { mnt_user_file storage_file }:dir { getattr search };
425 allow system_server { mnt_user_file storage_file }:lnk_file { getattr read };
429 allow system_server sdcard_type:dir { getattr search };
432 allow system_server mnt_expand_file:dir r_dir_perms;
435 allow system_server fingerprintd_data_file:dir {r_dir_perms relabelto};
442 # Do not allow opening files from external storage as unsafe ejection
457 # want to allow.