1# Copyright (c) 2022-2023 Huawei Device Co., Ltd. 2# Licensed under the Apache License, Version 2.0 (the "License"); 3# you may not use this file except in compliance with the License. 4# You may obtain a copy of the License at 5# 6# http://www.apache.org/licenses/LICENSE-2.0 7# 8# Unless required by applicable law or agreed to in writing, software 9# distributed under the License is distributed on an "AS IS" BASIS, 10# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 11# See the License for the specific language governing permissions and 12# limitations under the License. 13 14#avc: denied { read } a2dp_host proc_file tclass=file 15#avc: denied { open } a2dp_host proc_file tclass=file 16allow a2dp_host proc_file:file { read open }; 17 18#avc: denied { open } a2dp_host musl_param tclass=file 19#avc: denied { map } a2dp_host musl_param tclass=file 20#avc: denied { read } a2dp_host musl_param tclass=file 21allow a2dp_host musl_param:file { open map read }; 22 23#avc: denied { get } for service=1130 pid=2180 scontext=u:r:a2dp_host:s0 tcontext=u:object_r:sa_bluetooth_server:s0 tclass=samgr_class permissive=1 24allow a2dp_host sa_bluetooth_server:samgr_class { get }; 25 26allow a2dp_host hdf_device_manager:hdf_devmgr_class { get }; 27allow a2dp_host hdf_audio_bluetooth_hdi_service:hdf_devmgr_class { add }; 28allow a2dp_host hdf_bluetooth_audio_session_service:hdf_devmgr_class { add }; 29allow a2dp_host sa_device_service_manager:samgr_class { get }; 30 31allow a2dp_host bootevent_param:file { map open read }; 32allow a2dp_host bootevent_samgr_param:file { map open read }; 33allow a2dp_host build_version_param:file { map open read }; 34allow a2dp_host const_allow_mock_param:file { map open read }; 35allow a2dp_host const_allow_param:file { map open read }; 36allow a2dp_host const_build_param:file { map open read }; 37allow a2dp_host const_display_brightness_param:file { map open read }; 38allow a2dp_host const_param:file { map open read }; 39allow a2dp_host const_postinstall_fstab_param:file { map open read }; 40allow a2dp_host const_postinstall_param:file { map open read }; 41allow a2dp_host const_product_param:file { map open read }; 42allow a2dp_host debug_param:file { map open read }; 43allow a2dp_host default_param:file { map open read }; 44allow a2dp_host dev_hdf_kevent:chr_file { getattr ioctl open read write }; 45allow a2dp_host dev_unix_socket:dir { search }; 46allow a2dp_host distributedsche_param:file { map open read }; 47allow a2dp_host hdf_audio_bluetooth_hdi_service:hdf_devmgr_class { add }; 48allow a2dp_host hdf_device_manager:hdf_devmgr_class { get }; 49allow a2dp_host hdf_devmgr:binder { call transfer }; 50allow a2dp_host hilog_param:file { map open read }; 51allow a2dp_host hw_sc_build_os_param:file { map open read }; 52allow a2dp_host hw_sc_build_param:file { map open read }; 53allow a2dp_host hw_sc_param:file { map open read }; 54allow a2dp_host init_param:file { map open read }; 55allow a2dp_host init_svc_param:file { map open read }; 56allow a2dp_host input_pointer_device_param:file { map open read }; 57allow a2dp_host net_param:file { map open read }; 58allow a2dp_host net_tcp_param:file { map open read }; 59allow a2dp_host ohos_boot_param:file { map open read }; 60allow a2dp_host ohos_param:file { map open read }; 61allow a2dp_host persist_param:file { map open read }; 62allow a2dp_host persist_sys_param:file { map open read }; 63allow a2dp_host sa_device_service_manager:samgr_class { get }; 64allow a2dp_host samgr:binder { call }; 65allow a2dp_host security_param:file { map open read }; 66allow a2dp_host startup_param:file { map open read }; 67allow a2dp_host sys_param:file { map open read }; 68allow a2dp_host system_bin_file:dir { search }; 69allow a2dp_host sys_usb_param:file { map open read }; 70allow a2dp_host vendor_etc_file:dir { search }; 71allow a2dp_host vendor_etc_file:file { getattr open read }; 72allowxperm a2dp_host dev_hdf_kevent:chr_file ioctl { 0x6202 0x6203 }; 73 74#avc: denied { call } for pid=2029 comm="a2dp_host" scontext=u:r:a2dp_host:s0 tcontext=u:r:bluetooth_service:s0 tclass=binder permissive=1 75#avc: denied { transfer } for pid=2029 comm="a2dp_host" scontext=u:r:a2dp_host:s0 tcontext=u:r:bluetooth_service:s0 tclass=binder permissive=1 76allow a2dp_host bluetooth_service:binder { call transfer }; 77 78#avc: denied { open } for a2dp_host dev_ashmem_file tclass=chr_file 79allow a2dp_host dev_ashmem_file:chr_file { open }; 80allow a2dp_host a2dp_host:capability { sys_nice }; 81 82