Lines Matching refs:read

23 allow appdomain zygote_tmpfs:file read;
57 allow appdomain devpts:chr_file { getattr read write ioctl };
61 allow appdomain system_server:unix_stream_socket { read write setopt getattr getopt shutdown };
62 allow appdomain system_server:tcp_socket { read write getattr getopt shutdown };
68 allow appdomain surfaceflinger:unix_stream_socket { read write setopt getattr getopt shutdown };
96 # Renderscript needs the ability to read directories on /system
103 allow appdomain wallpaper_file:file { getattr read write };
106 allow appdomain ringtone_file:file { getattr read write };
109 allow appdomain shortcut_manager_icons:file { getattr read };
112 allow appdomain icon_file:file { getattr read };
120 allow appdomain dumpstate:unix_stream_socket { read write getopt getattr shutdown };
131 # generating open/read denials. These permissions should not be granted and the
133 dontaudit appdomain user_profile_foreign_dex_data_file:file { open read };
145 # Everybody can read the xt_qtaguid resource tracking misc dev.
146 # So allow all apps to read from /dev/xt_qtaguid.
164 allow appdomain appdomain:unix_stream_socket { getopt getattr read write shutdown };
168 allow appdomain backup_data_file:file { read write getattr };
169 allow appdomain cache_backup_file:file { read write getattr };
174 # Allow read/stat of /data/media files passed by Binder or local socket IPC.
175 allow appdomain media_rw_data_file:file { read getattr };
178 allow appdomain radio_data_file:file { read write getattr };
203 allow appdomain usb_device:chr_file { read write getattr ioctl };
204 allow appdomain usbaccessory_device:chr_file { read write getattr };
210 # Allow any app to read shared RELRO files.
214 # Allow apps to read/execute installed binaries
232 allow appdomain console_device:chr_file { read write };
241 allow appdomain app_fuse_file:file { getattr read append write };
259 allow { appdomain -isolated_app } tun_device:chr_file { read write getattr ioctl append };
265 allow appdomain adbd:unix_stream_socket { getattr getopt ioctl read write shutdown };
281 neverallow appdomain dev_type:blk_file { read write };
292 }:chr_file { read write };
295 neverallow { untrusted_app isolated_app shell } graphics_device:chr_file { read write };
298     { read write };
300     { read write };
301 neverallow appdomain tee_device:chr_file { read write };
411 neverallow { appdomain -shell } efs_file:dir_file_class_set read;
458 neverallow appdomain user_profile_foreign_dex_data_file:dir { open getattr read ioctl remove_name };