[ALPS04897291] SEPolicy: Remove unused SEPolicies in prebuilts/ & private/

[Detail]
SEPolicies in prebuilts/ & private/ are unused.

[Solution]
Remove unused SEPolicies in prebuilts/ & private/

MTK-Commit-Id: b6fc2058aa96db7a6a3cf527da2aa402081e0246

Change-Id: I37373defdb00a4ac65f67e722b9320724e8bf92a
CR-Id: ALPS04897291
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
This commit is contained in:
Shanshan Guo 2020-01-18 10:22:09 +08:00
parent bd213b5098
commit a18280258a
48 changed files with 0 additions and 12958 deletions

File diff suppressed because one or more lines are too long

View File

@ -1,4 +0,0 @@
This directory contains the MTK SELinux policy configuration for platform private.
It extend the domains and types for the AOSP services and apps common to
all devices.

View File

@ -1,126 +0,0 @@
# ==============================================
# Policy File of /system/bin/aee_aed Executable File
# ==============================================
# Type Declaration
# ==============================================
type aee_aed_exec, exec_type, file_type;
typeattribute aee_aed coredomain;
typeattribute aee_aed mlstrustedsubject;
init_daemon_domain(aee_aed)
# ==============================================
# MTK Policy Rule
# ==============================================
# AED start: /dev/block/expdb
allow aee_aed block_device:dir search;
# aee db dir and db files
allow aee_aed sdcard_type:dir create_dir_perms;
allow aee_aed sdcard_type:file create_file_perms;
#data/anr
allow aee_aed anr_data_file:dir create_dir_perms;
allow aee_aed anr_data_file:file create_file_perms;
allow aee_aed domain:process { sigkill getattr getsched};
allow aee_aed domain:lnk_file getattr;
#core-pattern
allow aee_aed usermodehelper:file r_file_perms;
#suid_dumpable. this is neverallow
# allow aee_aed proc_security:file r_file_perms;
#property
allow aee_aed init:unix_stream_socket connectto;
allow aee_aed property_socket:sock_file write;
allow aee_aed system_file:file execute_no_trans;
allow aee_aed init:process getsched;
#allow aee_aed kernel:process getsched;
# Date: W15.34
# Operation: Migration
# Purpose: For pagemap & pageflags information in NE DB
userdebug_or_eng(`allow aee_aed self:capability sys_admin;')
# Date: W16.17
# Operation: N0 Migeration
# Purpose: creat dir "aee_exp" under /data
allow aee_aed system_data_file:dir { write create add_name };
allow aee_aed system_data_file:file r_file_perms;
# Purpose: allow aee_aed to access toolbox
allow aee_aed toolbox_exec:file rx_file_perms;
# purpose: allow aee_aed to access storage on N version
allow aee_aed media_rw_data_file:file { create_file_perms };
allow aee_aed media_rw_data_file:dir { create_dir_perms };
# Purpose: mnt/user/*
allow aee_aed mnt_user_file:dir search;
allow aee_aed mnt_user_file:lnk_file read;
allow aee_aed storage_file:dir search;
allow aee_aed storage_file:lnk_file read;
# Date : WK17.09
# Operation : AEE UT for Android O
# Purpose : for AEE module to dump files
domain_auto_trans(aee_aed, dumpstate_exec, dumpstate)
# Purpose : aee_aed communicate with aee_core_forwarder
# allow aee_aed aee_core_forwarder:dir search;
# allow aee_aed aee_core_forwarder:file { read getattr open };
userdebug_or_eng(`
# allow aee_aed su:dir {search read open };
# allow aee_aed su:file { read getattr open };
')
# /data/tombstone
allow aee_aed tombstone_data_file:dir w_dir_perms;
allow aee_aed tombstone_data_file:file create_file_perms;
# /proc/pid/
allow aee_aed self:capability { fowner chown fsetid sys_nice sys_resource net_admin sys_module};
# system(cmd) aee_dumpstate aee_archive
#allow aee_aed shell_exec:file rx_file_perms;
# PROCESS_FILE_STATE
allow aee_aed dumpstate:unix_stream_socket { read write ioctl };
allow aee_aed dumpstate:dir search;
allow aee_aed dumpstate:file r_file_perms;
allow aee_aed logdr_socket:sock_file write;
allow aee_aed logd:unix_stream_socket connectto;
# allow aee_aed system_ndebug_socket:sock_file write; mask for never allow rule
# vibrator
allow aee_aed sysfs_vibrator:file w_file_perms;
# Data : 2017/03/22
# Operation : add NE flow rule for Android O
# Purpose : make aee_aed can get specific process NE info
allow aee_aed domain:dir r_dir_perms;
allow aee_aed domain:{ file lnk_file } r_file_perms;
allow aee_aed {
domain
-logd
-keystore
-init
}:process ptrace;
allow aee_aed dalvikcache_data_file:dir r_dir_perms;
allow aee_aed zygote_exec:file r_file_perms;
allow aee_aed init_exec:file r_file_perms;
# Data : 2017/04/06
# Operation : add selinux rule for crash_dump notify aee_aed
# Purpose : make aee_aed can get notify from crash_dump
allow aee_aed crash_dump:dir search;
allow aee_aed crash_dump:file r_file_perms;

View File

@ -1,9 +0,0 @@
# =============================================+
# Type Declaration
# ==============================================
type aee_aedv_exec, exec_type, file_type, vendor_file_type;
typeattribute aee_aedv mlstrustedsubject;
init_daemon_domain(aee_aedv)

View File

@ -1,49 +0,0 @@
#===============================================
# Policy File of /system/bin/audiocmdservice_atci Executable File
type audiocmdservice_atci_exec , exec_type, file_type;
# New added for move to /system
typeattribute audiocmdservice_atci coredomain;
# ==============================================
# MTK Policy Rule
# ==============================================
# audiocmdservice_atci - audio-daemon service
init_daemon_domain(audiocmdservice_atci)
# Perform Binder IPC for audio tuning tool and access to mediaserver
binder_use(audiocmdservice_atci)
binder_call(audiocmdservice_atci, mediaserver)
allow audiocmdservice_atci mediaserver:dir w_dir_perms;
allow audiocmdservice_atci mediaserver_service:service_manager find;
# Since Android N, google separates mediaserver to audioserver and cameraserver
binder_call(audiocmdservice_atci, audioserver)
allow audiocmdservice_atci audioserver:dir w_dir_perms;
allow audiocmdservice_atci audioserver_service:service_manager find;
# Access to fuse file system
allow audiocmdservice_atci sdcard_type:file create_file_perms;
allow audiocmdservice_atci sdcard_type:dir w_dir_perms;
# Access to internal storage
allow audiocmdservice_atci media_rw_data_file:dir create_dir_perms;
allow audiocmdservice_atci media_rw_data_file:file create_file_perms;
hal_client_domain(audiocmdservice_atci, hal_audio)
#To access the file at /dev/kmsg
allow audiocmdservice_atci kmsg_device:chr_file w_file_perms;
userdebug_or_eng(`
allow audiocmdservice_atci self:capability { sys_nice fowner chown fsetid setuid ipc_lock net_admin};
')
#audio-daemon needs to controlled from adb shell by AudioTuningTool
allow shell audiocmdservice_atci_exec:file rx_file_perms;
allow radio audiocmdservice_atci_exec:file getattr;
#Android O porting
hwbinder_use(audiocmdservice_atci)
get_prop(audiocmdservice_atci, hwservicemanager_prop);

View File

@ -1,75 +0,0 @@
# ==============================================
# MTK Policy Rule for plat_private
# ==============================================
# Date : WK14.32
# Operation : Migration
# Purpose : For audio dump and log
allow audioserver sdcard_type:dir { w_dir_perms create };
allow audioserver sdcard_type:file create;
allow audioserver sdcard_type:dir remove_name;
allow audioserver sdcard_type:file unlink;
# Date : WK14.34
# Operation : Migration
# Purpose : Smartcard Service
allow audioserver system_data_file:file open;
# Data : WK14.38
# Operation : Migration
# Purpose : for boot animation.
allow audioserver bootanim:binder { transfer call };
# Data : WK14.38
# Operation : Migration
# Purpose : dump for debug
allow audioserver sdcard_type:file append;
# Data : WK14.46
# Operation : Migration
# Purpose : for SMS app
allow audioserver radio_data_file:dir search;
allow audioserver radio_data_file:file open;
# Data : WK14.47
# Operation : Audio playback
# Purpose : Music as ringtone
allow audioserver radio:dir { search read };
allow audioserver radio:file r_file_perms;
# Data : WK14.47
# Operation : CTS
# Purpose : cts search strange app
allow audioserver untrusted_app:dir search;
# Date : WK15.34
# Operation : Migration
# Purpose: for camera middleware dump image buffer to sdcard & audio frameworks dump
allow audioserver system_data_file:dir write;
allow audioserver storage_file:lnk_file {read write};
allow audioserver mnt_user_file:dir {write read search};
allow audioserver mnt_user_file:lnk_file {read write};
# Purpose: Dump debug info
allow audioserver kmsg_device:chr_file { open write };
allow audioserver property_socket:sock_file write;
allow audioserver media_rw_data_file:dir { create_dir_perms };
allow audioserver init:unix_stream_socket connectto;
# Date : WK16.27
# Operation : Migration
# Purpose: tunning tool update parameters
allow audioserver media_rw_data_file:file { create_file_perms };
# Date : WK16.28
# Operation : Migration
# Purpose: Write audio dump files to external SDCard.
allow audioserver sdcard_type:file { create_file_perms };
allow audioserver storage_file:dir { r_dir_perms };
# Date : W18.01
# Add for turn on SElinux in enforcing mode
allow audioserver self:netlink_kobject_uevent_socket { read create };
# Audio Tuning Tool Android O porting
allow audioserver audiocmdservice_atci:binder call;

View File

@ -1,36 +0,0 @@
# ==============================================
# Policy File of /system/binboot_logo_updater Executable File
# New added for move to /system
typeattribute boot_logo_updater coredomain;
type boot_logo_updater_exec , exec_type, file_type;
# ==============================================
# MTK Policy Rule
# ==============================================
init_daemon_domain(boot_logo_updater)
# Date : WK14.32
# Operation : Migration
# Puration : set boot reason
allow boot_logo_updater system_prop:property_service set;
allow boot_logo_updater graphics_device:chr_file rw_file_perms;
# For IPC communication
allow boot_logo_updater init:unix_stream_socket connectto;
allow boot_logo_updater property_socket:sock_file write;
# To access directory /dev/block/mmcblk0 or /dev/block/sdc
allow boot_logo_updater block_device:dir search;
allow boot_logo_updater graphics_device:dir search;
# to access file at /dev/block/mtd
allow boot_logo_updater mtd_device:chr_file r_file_perms;
allow boot_logo_updater mtd_device:dir search;
#To access the file at /dev/kmsg
allow boot_logo_updater device:dir write;
allow boot_logo_updater kmsg_device:chr_file w_file_perms;
#To the access /fstab mount point
allow boot_logo_updater rootfs:file r_file_perms;
#To access linux filesystem
allow boot_logo_updater sysfs:dir read;

View File

@ -1,36 +0,0 @@
# ==============================================
# MTK Policy Rule
# ============
# Date : WK14.32
# Operation : Migration
# Purpose : for playing boot tone
allow bootanim mediaserver:binder {call transfer};
allow bootanim mediaserver_service:service_manager find;
# Purpose : for playing bootanimation audio
allow bootanim audioserver:binder {call transfer};
allow bootanim audioserver_service:service_manager find;
# Date : WK14.37
# Operation : Migration
# Purpose : for opetator
allow bootanim property_socket:sock_file write;
allow bootanim init:unix_stream_socket connectto;
allow bootanim debug_prop:property_service set;
# Date : WK14.46
# Operation : Migration
# /data/resource-cache
allow bootanim resourcecache_data_file:dir search;
# Data : WK16.42
# Operator: Whitney bring up
# Purpose: call surfaceflinger due to powervr
allow bootanim surfaceflinger:fifo_file rw_file_perms;
# Date : W16.42
# Operation : Integration
# Purpose : DRM / DRI GPU driver required
allow bootanim gpu_device:dir search;

View File

@ -1,2 +0,0 @@
allow cameraserver hal_allocator_default:fd use;

View File

@ -1,36 +0,0 @@
# ==============================================
# MTK Policy Rule
# ==============================================
# New added for move to /system
type cmddumper_exec, exec_type, file_type;
typeattribute cmddumper coredomain;
init_daemon_domain(cmddumper)
# cmddumper access on /data/mdlog
allow cmddumper system_data_file:dir { create_dir_perms relabelfrom relabelto};
# "mdl_serv_fifo" scontext=u:r:cmddumper:s0 tcontext=u:object_r:system_data_file
allow cmddumper system_data_file:fifo_file create_file_perms;
# for modem logging sdcard access
allow cmddumper sdcard_type:dir create_dir_perms;
allow cmddumper sdcard_type:file create_file_perms;
# modem logger socket access
allow cmddumper init:unix_stream_socket connectto;
allow cmddumper property_socket:sock_file { write read };
allow cmddumper platform_app:unix_stream_socket connectto;
allow cmddumper shell_exec:file { rx_file_perms };
allow cmddumper system_file:file x_file_perms;
# purpose: allow cmddumper to access storage in N version
allow cmddumper media_rw_data_file:file { create_file_perms };
allow cmddumper media_rw_data_file:dir { create_dir_perms };
# purpose: access plat_file_contexts
allow cmddumper file_contexts_file:file { read getattr open };

View File

@ -1 +0,0 @@
#allow crash_dump aee_aed:unix_stream_socket connectto;

View File

@ -1,26 +0,0 @@
# ==============================================
# MTK Policy Rule
# ============
# Date :WK14.34
# Operation : Migration
# Purpose: for connecting Wifi
allow dhcp devpts:chr_file rw_file_perms;
# Date :WK14.41
# Operation : ALPS01757300
# Purpose: connect AP, using for wifi connect
allow dhcp kernel:system module_request;
# Date :WK14.44
# Operation : ALPS01798575
# Purpose: Search on Internet using browser, the 3th App use dhcp
#============= netd ==============
allow dhcp platform_app:fd use;
allow dhcp init:fifo_file rw_file_perms;
allow dhcp init:unix_stream_socket { read write };
allow dhcp untrusted_app:fd use;

View File

@ -1,6 +0,0 @@
# ======================
# MTK Policy Rule
# ======================
# =======drmserver======
allow drmserver access_sys_file:file { read open };

View File

@ -1,43 +0,0 @@
# ==============================================
# MTK Policy Rule
# ==============================================
# Purpose: access for SYS_MEMORY_INFO
allow dumpstate fuse:dir { w_dir_perms };
allow dumpstate fuse:file { write create open setattr append };
# Purpose: mnt/user/*
allow dumpstate mnt_user_file:dir search;
allow dumpstate mnt_user_file:lnk_file read;
# Purpose: /storage/*
allow dumpstate storage_file:lnk_file read;
# Purpose: timer_intval. this is neverallow
#allow dumpstate app_data_file:dir search;
allow dumpstate kmsg_device:chr_file r_file_perms;
# Purpose:
# 01-01 18:00:35.600 7723 7723 I ps : type=1400 audit(0.0:63712): avc:
# denied { ioctl } for path="/storage/emulated/0/mtklog/aee_exp/temp/db.PQtNt4/
# SYS_ALL_THREADS" dev="fuse" ino=209 ioctlcmd=5401 scontext=u:r:dumpstate:s0
# tcontext=u:object_r:fuse:s0 tclass=file permissive=1
allow dumpstate fuse:file ioctl;
# Purpose:
# 01-01 17:59:14.440 7664 7664 I aee_dumpstate: type=1400 audit(0.0:63497):
# avc: denied { open } for path="/sys/kernel/debug/tracing/tracing_on" dev=
# "debugfs" ino=2087 scontext=u:r:dumpstate:s0 tcontext=u:object_r:
# tracing_shell_writable:s0 tclass=file permissive=1
allow dumpstate debugfs_tracing:file { write read open };
allow dumpstate tracing_shell_writable:file { write read open };
# Data : WK17.03
# Purpose: Allow to access gpu
allow dumpstate gpu_device:dir search;
# Date: 2017/07/11
# Purpose: 01-01 08:30:57.474 286 286 E SELinux : avc: denied { find } for interface=
# android.hardware.camera.provider::ICameraProvider pid=3133 scontext=u:r:dumpstate:s0 tcontext=
# u:object_r:hal_camera_hwservice:s0 tclass=hwservice_manager
#allow dumpstate hal_camera_hwservice:hwservice_manager find;

View File

@ -1,63 +0,0 @@
# ==============================================
# Policy File of /system/bin/em_svr Executable File
# ==============================================
# Type Declaration
# ==============================================
type em_svr_exec , exec_type, file_type;
typeattribute em_svr coredomain;
# ==============================================
# Android Policy Rule
# ==============================================
# ==============================================
# NSA Policy Rule
# ==============================================
# ==============================================
# MTK Policy Rule
# ==============================================
init_daemon_domain(em_svr)
# Date: WK1812
# Purpose: add for MD log filter
allow em_svr block_device:dir search;
allow em_svr sdcardfs:dir { search write add_name };
allow em_svr sdcardfs:file { write create open };
allow em_svr media_rw_data_file:dir { read write search open add_name };
allow em_svr media_rw_data_file:file { write create open };
# Date: WK1812
# Purpose: add for controlling screen on/off
allow em_svr graphics_device:dir search;
allow em_svr graphics_device:chr_file { open read write ioctl };
allow em_svr surfaceflinger_service:service_manager find;
binder_use(em_svr)
binder_call(em_svr, surfaceflinger)
# Date: WK1812
# Purpose: add for controlling backlight
allow em_svr sysfs_leds:dir search;
# Date: WK1812
# Purpose: add for sensor calibration
allow em_svr self:capability { chown fsetid };
# Date: WK1812
# Purpose: add for shell cmd
allow em_svr shell_exec:file { getattr execute read open execute_no_trans };
# Date: WK1812
# Purpose: add for power battery charge/PMU
allow em_svr toolbox_exec:file { getattr execute read open execute_no_trans };
# Date: WK1812
# Purpose: sys file access
allow em_svr sysfs:dir { open read };

View File

@ -1,62 +0,0 @@
# ==============================================
# MTK Policy Rule
# ==============================================
# New added for move to /system
type emdlogger_exec , exec_type, file_type;
typeattribute emdlogger coredomain;
init_daemon_domain(emdlogger)
binder_use(emdlogger)
binder_service(emdlogger)
# for modem logging sdcard access
allow emdlogger sdcard_type:dir { create_dir_perms };
allow emdlogger sdcard_type:file { create_file_perms };
# modem logger socket access
allow emdlogger property_socket:sock_file write;
allow emdlogger init:unix_stream_socket connectto;
allow emdlogger platform_app:unix_stream_socket connectto;
allow emdlogger shell_exec:file { rx_file_perms };
allow emdlogger system_file:file execute_no_trans;
allow emdlogger zygote_exec:file { rx_file_perms };
#modem logger SD logging in factory mode
allow emdlogger vfat:dir create_dir_perms;
allow emdlogger vfat:file create_file_perms;
#modem logger permission in storage in android M version
allow emdlogger log_device:chr_file { write open };
allow emdlogger mnt_user_file:dir search;
allow emdlogger mnt_user_file:lnk_file read;
allow emdlogger storage_file:lnk_file read;
#permission for storage link access in vzw Project
allow emdlogger mnt_media_rw_file:dir search;
#permission for use SELinux API
#avc: denied { read } for pid=576 comm="emdlogger1" name="selinux_version" dev="rootfs"
allow emdlogger rootfs:file r_file_perms;
#permission for storage access storage
allow emdlogger storage_file:dir { create_dir_perms };
allow emdlogger tmpfs:lnk_file read;
allow emdlogger storage_file:file { create_file_perms };
# Allow read avc: denied { read } for name="mddb" dev="mmcblk0p25" ino=681
# scontext=u:r:emdlogger:s0 tcontext=u:object_r:system_file:s0 tclass=dir permissive=0
allow emdlogger system_file:dir read;
# permission for android N policy
allow emdlogger toolbox_exec:file rx_file_perms;
# purpose: allow emdlogger to access storage in N version
allow emdlogger media_rw_data_file:file { create_file_perms };
allow emdlogger media_rw_data_file:dir { create_dir_perms };
## purpose: avc: denied { read } for name="plat_file_contexts"
allow emdlogger file_contexts_file:file { read getattr open };

View File

@ -1,9 +0,0 @@
# ==============================================
# MTK Policy Rule
# ==============================================
# For drmserver
type access_sys_file, fs_type, sysfs_type;
# For boot type
type sysfs_boot_type, fs_type, sysfs_type;

View File

@ -1,41 +0,0 @@
#############################
# Data files
#
#############################
# debugfs files
#
#############################
# System files
#
/system/bin/mdlogger u:object_r:mdlogger_exec:s0
/system/bin/emdlogger[0-9]+ u:object_r:emdlogger_exec:s0
/system/bin/cmddumper u:object_r:cmddumper_exec:s0
/system/bin/netdiag u:object_r:netdiag_exec:s0
/system/bin/mobile_log_d u:object_r:mobile_log_d_exec:s0
/system/bin/em_svr u:object_r:em_svr_exec:s0
/system/bin/aee_aed u:object_r:aee_aed_exec:s0
/system/bin/aee_aed64 u:object_r:aee_aed_exec:s0
/system/bin/aee_dumpstate u:object_r:dumpstate_exec:s0
/system/bin/audiocmdservice_atci u:object_r:audiocmdservice_atci_exec:s0
/system/bin/boot_logo_updater u:object_r:boot_logo_updater_exec:s0
/system/bin/meta_tst u:object_r:meta_tst_exec:s0
/system/bin/pre_meta u:object_r:pre_meta_exec:s0
/system/bin/factory u:object_r:factory_exec:s0
# google suggest that move aee_aedv_exec to platform @google_issue_id:64130120
/(system\/vendor|vendor)/bin/aee_aedv u:object_r:aee_aedv_exec:s0
/(system\/vendor|vendor)/bin/aee_aedv64 u:object_r:aee_aedv_exec:s0
# storagemanager daemon
# it is used to mount all storages in meta/factory mode
/system/bin/storagemanagerd u:object_r:storagemanagerd_exec:s0
# For drmserver
/sys/block/mmcblk0rpmb/size u:object_r:access_sys_file:s0
# For boot type
/sys/devices/virtual/BOOT/BOOT/boot/boot_type(/.*)? u:object_r:sysfs_boot_type:s0
/dev/socket/netd u:object_r:netd_socket:s0

View File

@ -1,43 +0,0 @@
# ==============================================
# Policy File of /system/bin/fuelgauged_static Executable File
# ==============================================
# Type Declaration
# ==============================================
type fuelgauged_static_exec , exec_type, file_type;
type fuelgauged_static_file, file_type, data_file_type, core_data_file_type;
typeattribute fuelgauged_static coredomain;
# ==============================================
# Android Policy Rule
# ==============================================
# ==============================================
# NSA Policy Rule
# ==============================================
# ==============================================
# MTK Policy Rule
# ==============================================
init_daemon_domain(fuelgauged_static)
# Data : WK14.43
# Operation : Migration
# Purpose : Fuel Gauge daemon for access driver node
allow fuelgauged_static input_device:dir rw_dir_perms;
allow fuelgauged_static input_device:file r_file_perms;
# Data : WK16.21
# Operation : New Feature
# Purpose : For fg daemon can access /data/FG folder
file_type_auto_trans(fuelgauged_static, system_data_file, fuelgauged_static_file);
allow fuelgauged_static fuelgauged_static_file:file rw_file_perms;
allow fuelgauged_static system_data_file:dir rw_dir_perms;
# Data : WK16.25
# Operation : Migration
# Purpose : For fg daemon can work in recovery mode
allow fuelgauged_static rootfs:file entrypoint;
# Data : WK16.39
allow fuelgauged_static self:capability { chown fsetid };

View File

@ -1,5 +0,0 @@
# Date : WK17.13
# Operation : Add sepolicy
# Purpose : Add policy for gralloc HIDL
allow hal_graphics_allocator proc:file { read getattr open ioctl };

View File

@ -1,50 +0,0 @@
# ==============================================
# MTK Policy Rule
# ==============================================
# New added for move to /system
type mdlogger_exec , exec_type, file_type;
typeattribute mdlogger coredomain;
init_daemon_domain(mdlogger)
binder_use(mdlogger)
binder_service(mdlogger)
# modem logger socket access
allow mdlogger init:unix_stream_socket connectto;
allow mdlogger property_socket:sock_file write;
allow mdlogger platform_app:unix_stream_socket connectto;
allow mdlogger shell_exec:file { rx_file_perms };
allow mdlogger system_file:file x_file_perms;
allow mdlogger zygote_exec:file { r_file_perms };
allow mdlogger node:tcp_socket node_bind;
allow mdlogger port:tcp_socket name_bind;
allow mdlogger self:tcp_socket { create_stream_socket_perms };
#modem logger SD logging in factory mode
allow mdlogger vfat:dir create_dir_perms;
allow mdlogger vfat:file create_file_perms;
#mdlogger for read /sdcard
allow mdlogger log_device:chr_file w_file_perms;
allow mdlogger tmpfs:lnk_file read;
allow mdlogger storage_file:lnk_file rw_file_perms;
allow mdlogger mnt_user_file:dir search;
allow mdlogger mnt_user_file:lnk_file rw_file_perms;
allow mdlogger sdcard_type:file create_file_perms;
allow mdlogger sdcard_type:dir { create_dir_perms };
# purpose: allow mdlogger to access storage in new version
allow mdlogger media_rw_data_file:file { create_file_perms };
allow mdlogger media_rw_data_file:dir { create_dir_perms };
allow mdlogger storage_file:dir { create_dir_perms };
allow mdlogger storage_file:file { create_file_perms };
## purpose: avc: denied { read } for name="plat_file_contexts"
allow mdlogger file_contexts_file:file { read getattr open };
# Allow read avc: denied { read } for name="mddb" dev="mmcblk0p25" ino=681
# scontext=u:r:mdlogger:s0 tcontext=u:object_r:system_file:s0 tclass=dir permissive=0
allow mdlogger system_file:dir read;

View File

@ -1,45 +0,0 @@
# ==============================================
# Policy File of /system/bin/meta_tst Executable File
# ==============================================
# Type Declaration
# ==============================================
type meta_tst_exec , exec_type, file_type;
typeattribute meta_tst coredomain;
# ==============================================
# MTK Policy Rule
# ==============================================
init_daemon_domain(meta_tst)
# Date : WK16.12
# Operation : Migration
# Purpose : for meta mode driver module operation
#============= meta_tst =========================
allow meta_tst port:tcp_socket { name_connect name_bind };
allow meta_tst self:capability { net_raw chown fsetid sys_nice net_admin fowner sys_admin };
allow meta_tst self:tcp_socket { create connect setopt bind };
allow meta_tst self:tcp_socket { bind setopt listen accept read write };
allow meta_tst self:udp_socket { create ioctl };
allow meta_tst self:capability { sys_boot ipc_lock };
allow meta_tst sysfs_wake_lock:file rw_file_perms;
allow meta_tst property_socket:sock_file w_file_perms;
allow meta_tst init:unix_stream_socket connectto;
allow meta_tst vold:unix_stream_socket connectto;
allow meta_tst node:tcp_socket node_bind;
allow meta_tst labeledfs:filesystem unmount;
allow meta_tst shell_exec:file execute;
set_prop(meta_tst, powerctl_prop);
# Date: WK16.12
# Operation : Migration
# Purpose : for meta mode file system
allow meta_tst system_data_file:sock_file create_file_perms;
allow meta_tst system_file:file x_file_perms;
allow meta_tst system_data_file:dir w_dir_perms;
allow meta_tst block_device:dir search;
allow meta_tst rootfs:file entrypoint;

View File

@ -1,70 +0,0 @@
# ==============================================
# MTK Policy Rule
# ==============================================
# New added for moving to /system
type mobile_log_d_exec , exec_type, file_type;
typeattribute mobile_log_d coredomain;
init_daemon_domain(mobile_log_d)
#syslog module
allow mobile_log_d kernel:system syslog_mod;
#GMO project
dontaudit mobile_log_d untrusted_app:fd use;
dontaudit mobile_log_d isolated_app:fd use;
#debug property set
set_prop(mobile_log_d, debug_prop)
#socket connect and write
unix_socket_connect(mobile_log_d, logdr, logd);
#capability
allow mobile_log_d self:capability { setuid setgid chown fowner fsetid };
allow mobile_log_d self:capability { setuid chown setgid };
allow mobile_log_d self:capability2 syslog;
#aee mode switch
allow mobile_log_d system_file:file execute_no_trans;
#shell command
allow mobile_log_d shell_exec:file rx_file_perms;
#general storage access
allow mobile_log_d storage_file:dir create_dir_perms;
allow mobile_log_d storage_file:file create_file_perms;
allow mobile_log_d storage_file:lnk_file create_file_perms;
allow mobile_log_d mnt_user_file:dir create_dir_perms;
allow mobile_log_d mnt_user_file:lnk_file create_file_perms;
allow mobile_log_d sdcard_type:dir create_dir_perms;
allow mobile_log_d sdcard_type:file create_file_perms;
#factory mode vfat access
allow mobile_log_d vfat:dir create_dir_perms;
allow mobile_log_d vfat:file create_file_perms;
#chiptest mode storage access
allow mobile_log_d mnt_media_rw_file:dir create_dir_perms;
allow mobile_log_d mnt_media_rw_file:lnk_file create_file_perms;
#system/bin/toybox for using 'sh' command
allow mobile_log_d toolbox_exec:file rx_file_perms;
#selinux_version access
allow mobile_log_d rootfs:file r_file_perms;
#dev/__properties__ access
allow mobile_log_d device_logging_prop:file { getattr open };
allow mobile_log_d mmc_prop:file { getattr open };
allow mobile_log_d safemode_prop:file { getattr open };
# purpose: allow MobileLog to access storage in N version
allow mobile_log_d media_rw_data_file:file create_file_perms;
allow mobile_log_d media_rw_data_file:dir create_dir_perms;
# access debugfs/tracing/instances/
allow mobile_log_d debugfs_tracing:dir create_dir_perms;
allow mobile_log_d debugfs_tracing_instances:dir create_dir_perms;
allow mobile_log_d debugfs_tracing_instances:file create_file_perms;

View File

@ -1,37 +0,0 @@
# ==============================================
# MTK Policy Rule
# ==============================================
# Date : WK14.34
# Operation : Migration
# Purpose : NA
# Owner: Changqing Sun
allow netd kernel:system module_request;
allow netd self:capability sys_module;
allow netd self:capability fsetid;
# Date : WK14.34
# Operation : Migration
# Purpose : APP
allow netd platform_app:fd use;
# Date : WK14.37
# Operation : Migration
# Purpose : PPPOE Test
# Owner : lina wang
allow netd ppp:process sigkill;
# Date : WK14.44
# Operation : Migration
# Purpose : ALPS01789552
#============= netd ==============
allow netd self:capability { setuid setgid };
#============= netd ==============
allow netd untrusted_app:fd use;
# Date : W15.02
# Operation : SQC
# Purpose : CTS for wifi
allow netd untrusted_app:unix_stream_socket { read write getopt setopt};
allow netd isolated_app:fd use;

View File

@ -1,87 +0,0 @@
# ==============================================
# MTK Policy Rule
# ==============================================
# New added for move to /system
type netdiag_exec , exec_type, file_type;
typeattribute netdiag coredomain;
init_daemon_domain(netdiag)
# Purpose : for access storage file
allow netdiag sdcard_type:dir create_dir_perms;
allow netdiag sdcard_type:file create_file_perms;
allow netdiag domain:dir search;
allow netdiag domain:file { read open };
allow netdiag net_data_file:file r_file_perms;
allow netdiag net_data_file:dir search;
allow netdiag storage_file:dir search;
allow netdiag storage_file:lnk_file read;
allow netdiag mnt_user_file:dir search;
allow netdiag mnt_user_file:lnk_file read;
allow netdiag platform_app:dir search;
allow netdiag untrusted_app:dir search;
allow netdiag mnt_media_rw_file:dir search;
allow netdiag vfat:dir create_dir_perms;
allow netdiag vfat:file create_file_perms;
allow netdiag tmpfs:lnk_file read;
allow netdiag system_file:file rx_file_perms;
# Purpose : for shell, set uid and gid
allow netdiag self:capability { net_admin setuid net_raw setgid};
allow netdiag shell_exec:file rx_file_perms;
#/proc/3523/net/xt_qtaguid/ctrl & /proc
allow netdiag qtaguid_proc:file r_file_perms;
#access /proc/318/net/psched
allow netdiag proc_net:file r_file_perms;
# Purpose : for ping
allow netdiag dnsproxyd_socket:sock_file write;
allow netdiag fwmarkd_socket:sock_file write;
allow netdiag netd:unix_stream_socket connectto;
allow netdiag self:udp_socket connect;
# Purpose : for service permission
typeattribute netdiag mlstrustedsubject;
allow netdiag connectivity_service:service_manager find;
allow netdiag netstats_service:service_manager find;
allow netdiag system_server:binder call;
allow system_server netdiag:fd use;
allow netdiag servicemanager:binder call;
binder_use(netdiag)
# Purpose : for dumpsys permission
allow netdiag connmetrics_service:service_manager find;
allow netdiag netpolicy_service:service_manager find;
allow netdiag network_management_service:service_manager find;
allow netdiag settings_service:service_manager find;
# Purpose : for acess /system/bin/toybox, mmc_prop,proc_net and safemode_prop
allow netdiag device_logging_prop:file { getattr open };
allow netdiag mmc_prop:file { getattr open };
allow netdiag proc_net:dir { read open };
allow netdiag safemode_prop:file { getattr open };
allow netdiag toolbox_exec:file rx_file_perms;
# purpose: allow netdiag to access storage in new version
allow netdiag media_rw_data_file:file { create_file_perms };
allow netdiag media_rw_data_file:dir { create_dir_perms };
# Purpose : for ip spec output
allow netdiag self:netlink_xfrm_socket { write getattr setopt read bind create nlmsg_read };
# Purpose: for socket error of tcpdump
allow netdiag self:packet_socket { read getopt create setopt };
allowxperm netdiag self:packet_socket ioctl {SIOCGIFINDEX SIOCGSTAMP};
allow netdiag self:packet_socket { write ioctl };
# Purpose: for ip
allow netdiag self:netlink_route_socket { write getattr setopt read bind create nlmsg_read };
# Purpose: for iptables
allow netdiag kernel:system module_request;
allow netdiag self:rawip_socket { getopt create };
allow netdiag self:udp_socket { ioctl create };

View File

@ -1,13 +0,0 @@
# ==============================================
# MTK Policy Rule
# ==============================================
# SEPolicy Split
allow platform_app system_app_service:service_manager find;
allow platform_app init:unix_stream_socket connectto;
# Date : WK17.29
# Stage: O Migration, SQC
# Purpose: Allow to use selinux for hal_power
hal_client_domain(platform_app, hal_power)

View File

@ -1,39 +0,0 @@
# ==============================================
# MTK Policy Rule
# ==============================================
# Date : WK14.34
# Operation : Migration
# Purpose: for VPN
allow ppp init:unix_stream_socket connectto;
allow ppp property_socket:sock_file write;
# Date : WK14.37
# Operation : Migration
# Purpose: for PPPOE Test
allow ppp devpts:chr_file { read write ioctl open setattr };
allow ppp shell_exec:file { read execute open execute_no_trans };
# Date : WK14.37
# Operation : Migration
# Purpose: for PPPOE Test: Property permission
allow ppp net_radio_prop:property_service set;
allow ppp system_prop:property_service set;
# Date : WK14.38
# Operation : Migration
# Purpose: for PPPOE Test
allow ppp ppp_exec:file execute_no_trans;
# Date : WK14.53
# Operation : check in
# Purpose: for warning kernel API
allow ppp mtp:file read;

View File

@ -1,20 +0,0 @@
# ==============================================
# Type Declaration
# ==============================================
type pre_meta_exec , exec_type, file_type;
typeattribute pre_meta coredomain;
# ==============================================
# MTK Policy Rule
# ==============================================
init_daemon_domain(pre_meta)
# Date : WK16.15
# Operation : For reboot target to meta mode
# Purpose : for pre_meta daemon to access lk_env and reboot target
allow pre_meta block_device:dir search;
allow pre_meta property_socket:sock_file write;
allow pre_meta init:unix_stream_socket connectto;

View File

@ -1,7 +0,0 @@
# Purpose : Nand device policy
allow recovery mtd_device:dir search;
allow recovery mtd_device:chr_file { read write open ioctl getattr };
allow recovery self:capability sys_resource;
# For boot type
allow recovery sysfs_boot_type:file { read open };

View File

@ -1,31 +0,0 @@
# ==============================================
# Policy File of storagemanagerd Executable File
# ==============================================
# Type Declaration
# ==============================================
type storagemanagerd, domain;
type storagemanagerd_exec, exec_type, file_type;
typeattribute storagemanagerd coredomain;
# ==============================================
# MTK Policy Rule
# ==============================================
init_daemon_domain(storagemanagerd)
#unix_socket_connect(storagemanagerd, vold, vold)
# storagemanagerd sends information back to dumpstate when "adb bugreport" is used
allow storagemanagerd dumpstate:fd use;
allow storagemanagerd dumpstate:unix_stream_socket { read write getattr };
# storagemanagerd information is written to shell owned bugreport files
allow storagemanagerd shell_data_file:file { write getattr };
# Why?
allow storagemanagerd dumpstate:unix_dgram_socket { read write };
# storagemanagerd can be invoked with logwrapper, so let it write to pty
allow storagemanagerd devpts:chr_file rw_file_perms;

View File

@ -1,17 +0,0 @@
# ==============================================
# MTK Policy Rule
# ==============================================
# Date : 2016/07/12
# Purpose : Issue submitter need creat folder on SD card
allow system_app vfat:dir create;
# Date: 2017/07/01
# Change to simple policy
allow system_app media_rw_data_file:dir {r_dir_perms w_dir_perms};
allow system_app media_rw_data_file:file {r_file_perms w_file_perms};
#Dat: 2017/07/13
#Purpose: allow system app to read/open system data file
allow system_app system_data_file:dir { read open };

View File

@ -1,34 +0,0 @@
# ==============================================
# MTK Policy Rule
# ==============================================
# Perform Binder IPC.
allow system_server zygote:binder impersonate;
# Property service.
allow system_server ctl_bootanim_prop:property_service set;
# After connected to DHCPv6, enabled 6to4 IPv6 AP to get property.
allow system_server proc_net:file w_file_perms;
# Querying zygote socket.
allow system_server zygote:unix_stream_socket { getopt getattr };
# Date : WK16.36
# Purpose: Allow to set property log.tag.WifiHW to control log level of WifiHW
allow system_server log_tag_prop:property_service set;
# Data : WK16.42
# Operator: Whitney bring up
# Purpose: call surfaceflinger due to powervr
allow system_server surfaceflinger:fifo_file rw_file_perms;
# Date : W16.42
# Operation : Integration
# Purpose : DRM / DRI GPU driver required
allow system_server gpu_device:dir search;
# Date : W18.01
# Add for turn on SElinux in enforcing mode
allow system_server vendor_framework_file:dir r_file_perms;
# Fix bootup violation
allow system_server vendor_framework_file:file getattr;
# Date: W18.32
# Operation : allow writing to timerslack_ns
allow system_server appdomain:file w_file_perms;

View File

@ -1,3 +0,0 @@
This directory contains the MTK SELinux policy configuration for platform public.
It define the domains and types for MTK services running in /system all devices.

View File

@ -1,7 +0,0 @@
# ==============================================
# Policy File of /system/bin/aee_aed Executable File
# ==============================================
# Type Declaration
# ==============================================
type aee_aed, domain;

View File

@ -1,4 +0,0 @@
# ==============================================
# Type Declaration
# ==============================================
type aee_aedv, domain;

View File

@ -1,8 +0,0 @@
# ==============================================
# Policy File of /system/bin/audiocmdservice_atci Executable File
# ==============================================
# Type Declaration
# ==============================================
type audiocmdservice_atci ,domain;

View File

@ -1,9 +0,0 @@
# ==============================================
# Policy File of /system/binboot_logo_updater Executable File
# ==============================================
# Type Declaration
# ==============================================
# New added for move to /system
type boot_logo_updater ,domain;

View File

@ -1,7 +0,0 @@
# ==============================================
# Policy File of /system/bin/cmddumper Executable File
# ==============================================
# Type Declaration
# ==============================================
type cmddumper, domain;

View File

@ -1,11 +0,0 @@
# ==============================================
# Policy File of /system/bin/em_svr Executable File
# ==============================================
# Type Declaration
# ==============================================
type em_svr ,domain;

View File

@ -1,7 +0,0 @@
# ==============================================
# Policy File of /system/bin/emdlogger[x] Executable File
# ==============================================
# Type Declaration
# ==============================================
type emdlogger, domain;

View File

@ -1,7 +0,0 @@
# ==============================================
# Policy File of /system/bin/fuelgauged_static Executable File
# ==============================================
# Type Declaration
# ==============================================
type fuelgauged_static ,domain;

View File

@ -1,7 +0,0 @@
# ==============================================
# Policy File of /system/bin/mdlogger Executable File
# ==============================================
# Type Declaration
# ==============================================
type mdlogger ,domain;

View File

@ -1,11 +0,0 @@
# ==============================================
# Policy File of /system/bin/meta_tst Executable File
# ==============================================
# Type Declaration
# ==============================================
type meta_tst ,domain;

View File

@ -1,7 +0,0 @@
# ==============================================
# Policy File of /system/bin/mobile_log_d Executable File
# ==============================================
# Type Declaration
# ==============================================
type mobile_log_d ,domain;

View File

@ -1,7 +0,0 @@
# ==============================================
# Policy File of /system/bin/netdiag Executable File
# ==============================================
# Type Declaration
# ==============================================
type netdiag ,domain;

View File

@ -1,5 +0,0 @@
# ==============================================
# Policy File of /system/bin/pre_meta Executable File
type pre_meta ,domain;

View File

@ -1,735 +0,0 @@
;; private attributes removed from public types
(typeattributeset domain_deprecated (bluetooth_26_0))
;; attributes removed from current policy
(typeattribute hal_wifi_keystore)
(typeattribute hal_wifi_keystore_client)
(typeattribute hal_wifi_keystore_server)
;; types removed from current policy
(type asan_reboot_prop)
(type log_device)
(type mediacasserver_service)
(type tracing_shell_writable)
(type tracing_shell_writable_debug)
(type netd_socket)
(typeattributeset tracing_shell_writable_debug_26_0 (debugfs_tracing_debug tracing_shell_writable_debug))
(typeattributeset priv_app_26_0 (mediaprovider priv_app))
(typeattributeset service_contexts_file_26_0 (service_contexts_file nonplat_service_contexts_file))
(typeattributeset proc_26_0 (proc proc_uid_time_in_state))
(typeattributeset usermodehelper_26_0 (sysfs_usermodehelper usermodehelper))
(typeattributeset mediadrmserver_service_26_0 (mediadrmserver_service))
(typeattributeset recovery_refresh_26_0 (recovery_refresh))
(typeattributeset pdx_display_dir_26_0 (pdx_display_dir))
(typeattributeset mediacasserver_service_26_0 (mediacasserver_service))
(typeattributeset processinfo_service_26_0 (processinfo_service))
(typeattributeset vdc_26_0 (vdc))
(typeattributeset mediadrmserver_exec_26_0 (mediadrmserver_exec))
(typeattributeset serial_service_26_0 (serial_service))
(typeattributeset system_ndebug_socket_26_0 (system_ndebug_socket))
(typeattributeset fingerprint_service_26_0 (fingerprint_service))
(typeattributeset hal_fingerprint_service_26_0 (hal_fingerprint_service))
(typeattributeset recovery_block_device_26_0 (recovery_block_device))
(typeattributeset drmserver_26_0 (drmserver))
(typeattributeset vr_hwc_service_26_0 (vr_hwc_service))
(typeattributeset hal_sensors_hwservice_26_0 (hal_sensors_hwservice))
(typeattributeset audiohal_data_file_26_0 (audiohal_data_file))
(typeattributeset wifi_service_26_0 (wifi_service))
(typeattributeset system_prop_26_0 (system_prop))
(typeattributeset vfat_26_0 (vfat))
(typeattributeset pdx_bufferhub_client_endpoint_socket_26_0 (pdx_bufferhub_client_endpoint_socket))
(typeattributeset keystore_exec_26_0 (keystore_exec))
(typeattributeset netpolicy_service_26_0 (netpolicy_service))
(typeattributeset video_device_26_0 (video_device))
(typeattributeset serialno_prop_26_0 (serialno_prop))
(typeattributeset midi_service_26_0 (midi_service))
(typeattributeset persistent_properties_ready_prop_26_0 (persistent_properties_ready_prop))
(typeattributeset file_contexts_file_26_0 (file_contexts_file))
(typeattributeset tzdatacheck_26_0 (tzdatacheck))
(typeattributeset property_contexts_file_26_0 (property_contexts_file))
(typeattributeset firstboot_prop_26_0 (firstboot_prop))
(typeattributeset pan_result_prop_26_0 (pan_result_prop))
(typeattributeset ctl_rildaemon_prop_26_0 (ctl_rildaemon_prop))
(typeattributeset asan_reboot_prop_26_0 (asan_reboot_prop))
(typeattributeset bluetooth_logs_data_file_26_0 (bluetooth_logs_data_file))
(typeattributeset hal_light_hwservice_26_0 (hal_light_hwservice))
(typeattributeset print_service_26_0 (print_service))
(typeattributeset same_process_hal_file_26_0 (same_process_hal_file))
(typeattributeset hal_vibrator_hwservice_26_0 (hal_vibrator_hwservice))
(typeattributeset location_service_26_0 (location_service))
(typeattributeset device_policy_service_26_0 (device_policy_service))
(typeattributeset preopt2cachename_26_0 (preopt2cachename))
(typeattributeset autofill_service_26_0 (autofill_service))
(typeattributeset debugfs_26_0 (debugfs))
(typeattributeset configfs_26_0 (configfs))
(typeattributeset config_prop_26_0 (config_prop))
(typeattributeset charger_26_0 (charger))
(typeattributeset mdlogger_26_0 (mdlogger))
(typeattributeset system_block_device_26_0 (system_block_device))
(typeattributeset postinstall_26_0 (postinstall))
(typeattributeset updatelock_service_26_0 (updatelock_service))
(typeattributeset apk_data_file_26_0 (apk_data_file))
(typeattributeset hidl_base_hwservice_26_0 (hidl_base_hwservice))
(typeattributeset system_app_26_0 (system_app))
(typeattributeset emdlogger_26_0 (emdlogger))
(typeattributeset hidl_manager_hwservice_26_0 (hidl_manager_hwservice))
(typeattributeset hidl_memory_hwservice_26_0 (hidl_memory_hwservice))
(typeattributeset preloads_media_file_26_0 (preloads_media_file))
(typeattributeset surfaceflinger_26_0 (surfaceflinger))
(typeattributeset pdx_display_screenshot_channel_socket_26_0 (pdx_display_screenshot_channel_socket))
(typeattributeset debugfs_tracing_instances_26_0 (debugfs_tracing_instances))
(typeattributeset hal_contexthub_hwservice_26_0 (hal_contexthub_hwservice))
(typeattributeset proc_zoneinfo_26_0 (proc_zoneinfo))
(typeattributeset proc_tty_drivers_26_0 (proc_tty_drivers))
(typeattributeset sec_key_att_app_id_provider_service_26_0 (sec_key_att_app_id_provider_service))
(typeattributeset activity_service_26_0 (activity_service))
(typeattributeset mediaextractor_exec_26_0 (mediaextractor_exec))
(typeattributeset watchdog_device_26_0 (watchdog_device))
(typeattributeset fuelgauged_static_26_0 (fuelgauged_static))
(typeattributeset graphics_device_26_0 (graphics_device))
(typeattributeset method_trace_data_file_26_0 (method_trace_data_file))
(typeattributeset vndservicemanager_26_0 (vndservicemanager))
(typeattributeset apk_private_data_file_26_0 (apk_private_data_file))
(typeattributeset hwservicemanager_26_0 (hwservicemanager))
(typeattributeset keychord_device_26_0 (keychord_device))
(typeattributeset hal_graphics_composer_hwservice_26_0 (hal_graphics_composer_hwservice))
(typeattributeset servicemanager_26_0 (servicemanager))
(typeattributeset ashmem_device_26_0 (ashmem_device))
(typeattributeset virtual_touchpad_26_0 (virtual_touchpad))
(typeattributeset hal_telephony_hwservice_26_0 (hal_telephony_hwservice))
(typeattributeset fingerprint_prop_26_0 (fingerprint_prop))
(typeattributeset proc_stat_26_0 (proc_stat))
(typeattributeset rootfs_26_0 (rootfs))
(typeattributeset sdcardfs_26_0 (sdcardfs))
(typeattributeset netd_26_0 (netd))
(typeattributeset pre_meta_26_0 (pre_meta))
(typeattributeset sysfs_usb_26_0 (sysfs_usb))
(typeattributeset proc_perf_26_0 (proc_perf))
(typeattributeset mqueue_26_0 (mqueue))
(typeattributeset tee_26_0 (tee))
(typeattributeset media_session_service_26_0 (media_session_service))
(typeattributeset adbd_26_0 (adbd))
(typeattributeset textclassifier_data_file_26_0 (textclassifier_data_file))
(typeattributeset untrusted_v2_app_26_0 (untrusted_v2_app))
(typeattributeset fuse_26_0 (fuse))
(typeattributeset recovery_26_0 (recovery))
(typeattributeset bootstat_26_0 (bootstat))
(typeattributeset labeledfs_26_0 (labeledfs))
(typeattributeset pdx_bufferhub_dir_26_0 (pdx_bufferhub_dir))
(typeattributeset usermodehelper_26_0 (usermodehelper))
(typeattributeset mediaextractor_service_26_0 (mediaextractor_service))
(typeattributeset debug_prop_26_0 (debug_prop))
(typeattributeset hal_omx_hwservice_26_0 (hal_omx_hwservice))
(typeattributeset update_engine_service_26_0 (update_engine_service))
(typeattributeset lock_settings_service_26_0 (lock_settings_service))
(typeattributeset cameraproxy_service_26_0 (cameraproxy_service))
(typeattributeset audio_prop_26_0 (audio_prop))
(typeattributeset healthd_26_0 (healthd))
(typeattributeset keychain_data_file_26_0 (keychain_data_file))
(typeattributeset kmem_device_26_0 (kmem_device))
(typeattributeset kmsg_device_26_0 (kmsg_device))
(typeattributeset netif_26_0 (netif))
(typeattributeset webview_zygote_exec_26_0 (webview_zygote_exec))
(typeattributeset zoneinfo_data_file_26_0 (zoneinfo_data_file))
(typeattributeset radio_26_0 (radio))
(typeattributeset pipefs_26_0 (pipefs))
(typeattributeset pstorefs_26_0 (pstorefs))
(typeattributeset proc_sysrq_26_0 (proc_sysrq))
(typeattributeset audiocmdservice_atci_26_0 (audiocmdservice_atci))
(typeattributeset gatekeeperd_26_0 (gatekeeperd))
(typeattributeset consumer_ir_service_26_0 (consumer_ir_service))
(typeattributeset aee_aedv_26_0 (aee_aedv))
(typeattributeset sysfs_zram_26_0 (sysfs_zram))
(typeattributeset wifi_data_file_26_0 (wifi_data_file))
(typeattributeset mediametrics_service_26_0 (mediametrics_service))
(typeattributeset meta_tst_26_0 (meta_tst))
(typeattributeset assetatlas_service_26_0 (assetatlas_service))
(typeattributeset backup_service_26_0 (backup_service))
(typeattributeset pdx_display_manager_channel_socket_26_0 (pdx_display_manager_channel_socket))
(typeattributeset zero_device_26_0 (zero_device))
(typeattributeset hwservice_contexts_file_26_0 (hwservice_contexts_file))
(typeattributeset service_contexts_file_26_0 (service_contexts_file))
(typeattributeset sysfs_uio_26_0 (sysfs_uio))
(typeattributeset preopt2cachename_exec_26_0 (preopt2cachename_exec))
(typeattributeset vndservice_contexts_file_26_0 (vndservice_contexts_file))
(typeattributeset incident_26_0 (incident))
(typeattributeset cache_block_device_26_0 (cache_block_device))
(typeattributeset crash_dump_exec_26_0 (crash_dump_exec))
(typeattributeset shell_26_0 (shell))
(typeattributeset network_time_update_service_26_0 (network_time_update_service))
(typeattributeset seapp_contexts_file_26_0 (seapp_contexts_file))
(typeattributeset textclassification_service_26_0 (textclassification_service))
(typeattributeset blkid_untrusted_26_0 (blkid_untrusted))
(typeattributeset dumpstate_prop_26_0 (dumpstate_prop))
(typeattributeset zygote_exec_26_0 (zygote_exec))
(typeattributeset cppreopt_prop_26_0 (cppreopt_prop))
(typeattributeset radio_prop_26_0 (radio_prop))
(typeattributeset postinstall_mnt_dir_26_0 (postinstall_mnt_dir))
(typeattributeset misc_user_data_file_26_0 (misc_user_data_file))
(typeattributeset debugfs_wifi_tracing_26_0 (debugfs_wifi_tracing))
(typeattributeset shell_prop_26_0 (shell_prop))
(typeattributeset isolated_app_26_0 (isolated_app))
(typeattributeset sysfs_vibrator_26_0 (sysfs_vibrator))
(typeattributeset network_management_service_26_0 (network_management_service))
(typeattributeset sysfs_hwrandom_26_0 (sysfs_hwrandom))
(typeattributeset system_server_26_0 (system_server))
(typeattributeset device_identifiers_service_26_0 (device_identifiers_service))
(typeattributeset network_score_service_26_0 (network_score_service))
(typeattributeset em_svr_26_0 (em_svr))
(typeattributeset usbfs_26_0 (usbfs))
(typeattributeset system_wifi_keystore_hwservice_26_0 (system_wifi_keystore_hwservice))
(typeattributeset sdcardd_26_0 (sdcardd))
(typeattributeset logdr_socket_26_0 (logdr_socket))
(typeattributeset logdw_socket_26_0 (logdw_socket))
(typeattributeset vpn_data_file_26_0 (vpn_data_file))
(typeattributeset dalvikcache_data_file_26_0 (dalvikcache_data_file))
(typeattributeset mediaserver_service_26_0 (mediaserver_service))
(typeattributeset property_data_file_26_0 (property_data_file))
(typeattributeset wifi_log_prop_26_0 (wifi_log_prop))
(typeattributeset accessibility_service_26_0 (accessibility_service))
(typeattributeset camera_device_26_0 (camera_device))
(typeattributeset recovery_data_file_26_0 (recovery_data_file))
(typeattributeset system_app_data_file_26_0 (system_app_data_file))
(typeattributeset sysfs_leds_26_0 (sysfs_leds))
(typeattributeset mediacodec_26_0 (mediacodec))
(typeattributeset restrictions_service_26_0 (restrictions_service))
(typeattributeset ffs_prop_26_0 (ffs_prop))
(typeattributeset log_prop_26_0 (log_prop))
(typeattributeset mmc_prop_26_0 (mmc_prop))
(typeattributeset nfc_prop_26_0 (nfc_prop))
(typeattributeset toolbox_26_0 (toolbox))
(typeattributeset IProxyService_service_26_0 (IProxyService_service))
(typeattributeset mnt_media_rw_stub_file_26_0 (mnt_media_rw_stub_file))
(typeattributeset proc_26_0 (proc))
(typeattributeset bluetooth_socket_26_0 (bluetooth_socket))
(typeattributeset logcat_exec_26_0 (logcat_exec))
(typeattributeset inputflinger_exec_26_0 (inputflinger_exec))
(typeattributeset overlay_prop_26_0 (overlay_prop))
(typeattributeset safemode_prop_26_0 (safemode_prop))
(typeattributeset wallpaper_file_26_0 (wallpaper_file))
(typeattributeset shortcut_manager_icons_26_0 (shortcut_manager_icons))
(typeattributeset dhcp_prop_26_0 (dhcp_prop))
(typeattributeset gps_control_26_0 (gps_control))
(typeattributeset logd_prop_26_0 (logd_prop))
(typeattributeset dumpstate_options_prop_26_0 (dumpstate_options_prop))
(typeattributeset vold_prop_26_0 (vold_prop))
(typeattributeset wifi_prop_26_0 (wifi_prop))
(typeattributeset imms_service_26_0 (imms_service))
(typeattributeset netd_socket_26_0 (netd_socket))
(typeattributeset sysfs_26_0 (sysfs))
(typeattributeset default_android_service_26_0 (default_android_service))
(typeattributeset bufferhubd_26_0 (bufferhubd))
(typeattributeset sysfs_devices_system_cpu_26_0 (sysfs_devices_system_cpu))
(typeattributeset untrusted_app_26_0 (untrusted_app))
(typeattributeset shared_relro_26_0 (shared_relro))
(typeattributeset hal_wifi_hwservice_26_0 (hal_wifi_hwservice))
(typeattributeset alarm_device_26_0 (alarm_device))
(typeattributeset hal_graphics_mapper_hwservice_26_0 (hal_graphics_mapper_hwservice))
(typeattributeset audio_data_file_26_0 (audio_data_file))
(typeattributeset radio_data_file_26_0 (radio_data_file))
(typeattributeset display_service_26_0 (display_service))
(typeattributeset overlay_service_26_0 (overlay_service))
(typeattributeset hal_wifi_supplicant_hwservice_26_0 (hal_wifi_supplicant_hwservice))
(typeattributeset performanced_exec_26_0 (performanced_exec))
(typeattributeset hal_health_hwservice_26_0 (hal_health_hwservice))
(typeattributeset system_wpa_socket_26_0 (system_wpa_socket))
(typeattributeset fsck_26_0 (fsck))
(typeattributeset netd_listener_service_26_0 (netd_listener_service))
(typeattributeset app_fusefs_26_0 (app_fusefs))
(typeattributeset proc_overcommit_memory_26_0 (proc_overcommit_memory))
(typeattributeset ctl_dumpstate_prop_26_0 (ctl_dumpstate_prop))
(typeattributeset connmetrics_service_26_0 (connmetrics_service))
(typeattributeset proc_uid_cputime_removeuid_26_0 (proc_uid_cputime_removeuid))
(typeattributeset boot_block_device_26_0 (boot_block_device))
(typeattributeset powerctl_prop_26_0 (powerctl_prop))
(typeattributeset misc_block_device_26_0 (misc_block_device))
(typeattributeset root_block_device_26_0 (root_block_device))
(typeattributeset swap_block_device_26_0 (swap_block_device))
(typeattributeset block_device_26_0 (block_device))
(typeattributeset kb_block_device_26_0 (kb_block_device))
(typeattributeset dkb_block_device_26_0 (dkb_block_device))
(typeattributeset frp_block_device_26_0 (frp_block_device))
(typeattributeset loop_device_26_0 (loop_device))
(typeattributeset nvram_agent_service_26_0 (nvram_agent_service))
(typeattributeset dnsproxyd_socket_26_0 (dnsproxyd_socket))
(typeattributeset crash_dump_26_0 (crash_dump))
(typeattributeset hal_keymaster_hwservice_26_0 (hal_keymaster_hwservice))
(typeattributeset shm_26_0 (shm))
(typeattributeset installd_service_26_0 (installd_service))
(typeattributeset proc_uid_cputime_showstat_26_0 (proc_uid_cputime_showstat))
(typeattributeset bootstat_exec_26_0 (bootstat_exec))
(typeattributeset mdns_socket_26_0 (mdns_socket))
(typeattributeset oem_lock_service_26_0 (oem_lock_service))
(typeattributeset audioserver_26_0 (audioserver))
(typeattributeset tmpfs_26_0 (tmpfs))
(typeattributeset bootanim_exec_26_0 (bootanim_exec))
(typeattributeset vendor_configs_file_26_0 (vendor_configs_file))
(typeattributeset vendor_shell_exec_26_0 (vendor_shell_exec))
(typeattributeset hwservicemanager_prop_26_0 (hwservicemanager_prop))
(typeattributeset clatd_26_0 (clatd))
(typeattributeset input_device_26_0 (input_device))
(typeattributeset DockObserver_service_26_0 (DockObserver_service))
(typeattributeset shell_data_file_26_0 (shell_data_file))
(typeattributeset bluetooth_manager_service_26_0 (bluetooth_manager_service))
(typeattributeset contexthub_service_26_0 (contexthub_service))
(typeattributeset dnsmasq_26_0 (dnsmasq))
(typeattributeset dumpstate_26_0 (dumpstate))
(typeattributeset cmddumper_26_0 (cmddumper))
(typeattributeset install_data_file_26_0 (install_data_file))
(typeattributeset asec_image_file_26_0 (asec_image_file))
(typeattributeset hardware_properties_service_26_0 (hardware_properties_service))
(typeattributeset owntty_device_26_0 (owntty_device))
(typeattributeset null_device_26_0 (null_device))
(typeattributeset uimode_service_26_0 (uimode_service))
(typeattributeset uncrypt_exec_26_0 (uncrypt_exec))
(typeattributeset priv_app_26_0 (priv_app))
(typeattributeset hal_bluetooth_hwservice_26_0 (hal_bluetooth_hwservice))
(typeattributeset wifiscanner_service_26_0 (wifiscanner_service))
(typeattributeset audio_timer_device_26_0 (audio_timer_device))
(typeattributeset bluetooth_data_file_26_0 (bluetooth_data_file))
(typeattributeset loop_control_device_26_0 (loop_control_device))
(typeattributeset pdx_display_client_endpoint_socket_26_0 (pdx_display_client_endpoint_socket))
(typeattributeset net_dns_prop_26_0 (net_dns_prop))
(typeattributeset fingerprintd_26_0 (fingerprintd))
(typeattributeset bluetooth_prop_26_0 (bluetooth_prop))
(typeattributeset hal_power_hwservice_26_0 (hal_power_hwservice))
(typeattributeset hal_fingerprint_hwservice_26_0 (hal_fingerprint_hwservice))
(typeattributeset font_service_26_0 (font_service))
(typeattributeset wificond_service_26_0 (wificond_service))
(typeattributeset postinstall_file_26_0 (postinstall_file))
(typeattributeset qtaguid_proc_26_0 (qtaguid_proc))
(typeattributeset ctl_bugreport_prop_26_0 (ctl_bugreport_prop))
(typeattributeset hal_tv_input_hwservice_26_0 (hal_tv_input_hwservice))
(typeattributeset dalvik_prop_26_0 (dalvik_prop))
(typeattributeset inputflinger_service_26_0 (inputflinger_service))
(typeattributeset audio_seq_device_26_0 (audio_seq_device))
(typeattributeset mtpd_socket_26_0 (mtpd_socket))
(typeattributeset keystore_service_26_0 (keystore_service))
(typeattributeset bluetooth_service_26_0 (bluetooth_service))
(typeattributeset appops_service_26_0 (appops_service))
(typeattributeset system_data_file_26_0 (system_data_file))
(typeattributeset devpts_26_0 (devpts))
(typeattributeset aee_aed_26_0 (aee_aed))
(typeattributeset drm_data_file_26_0 (drm_data_file))
(typeattributeset su_26_0 (su))
(typeattributeset otadexopt_service_26_0 (otadexopt_service))
(typeattributeset proc_security_26_0 (proc_security))
(typeattributeset nfc_service_26_0 (nfc_service))
(typeattributeset settings_service_26_0 (settings_service))
(typeattributeset cppreopts_26_0 (cppreopts))
(typeattributeset cpuinfo_service_26_0 (cpuinfo_service))
(typeattributeset dbinfo_service_26_0 (dbinfo_service))
(typeattributeset gfxinfo_service_26_0 (gfxinfo_service))
(typeattributeset meminfo_service_26_0 (meminfo_service))
(typeattributeset dnsmasq_exec_26_0 (dnsmasq_exec))
(typeattributeset ppp_26_0 (ppp))
(typeattributeset vndbinder_device_26_0 (vndbinder_device))
(typeattributeset ethernet_service_26_0 (ethernet_service))
(typeattributeset pinner_service_26_0 (pinner_service))
(typeattributeset performanced_26_0 (performanced))
(typeattributeset systemkeys_data_file_26_0 (systemkeys_data_file))
(typeattributeset binder_device_26_0 (binder_device))
(typeattributeset hwbinder_device_26_0 (hwbinder_device))
(typeattributeset hw_random_device_26_0 (hw_random_device))
(typeattributeset random_device_26_0 (random_device))
(typeattributeset ctl_default_prop_26_0 (ctl_default_prop))
(typeattributeset userdata_block_device_26_0 (userdata_block_device))
(typeattributeset default_prop_26_0 (default_prop))
(typeattributeset vndk_sp_file_26_0 (vndk_sp_file))
(typeattributeset cameraserver_26_0 (cameraserver))
(typeattributeset otapreopt_slot_exec_26_0 (otapreopt_slot_exec))
(typeattributeset debuggerd_prop_26_0 (debuggerd_prop))
(typeattributeset vendor_toolbox_exec_26_0 (vendor_toolbox_exec))
(typeattributeset shared_relro_file_26_0 (shared_relro_file))
(typeattributeset lmkd_socket_26_0 (lmkd_socket))
(typeattributeset hal_drm_hwservice_26_0 (hal_drm_hwservice))
(typeattributeset ringtone_file_26_0 (ringtone_file))
(typeattributeset toolbox_exec_26_0 (toolbox_exec))
(typeattributeset permission_service_26_0 (permission_service))
(typeattributeset metadata_block_device_26_0 (metadata_block_device))
(typeattributeset logd_socket_26_0 (logd_socket))
(typeattributeset mac_perms_file_26_0 (mac_perms_file))
(typeattributeset vendor_app_file_26_0 (vendor_app_file))
(typeattributeset vendor_hal_file_26_0 (vendor_hal_file))
(typeattributeset sysfs_wlan_fwpath_26_0 (sysfs_wlan_fwpath))
(typeattributeset nfc_26_0 (nfc))
(typeattributeset default_android_vndservice_26_0 (default_android_vndservice))
(typeattributeset rtc_device_26_0 (rtc_device))
(typeattributeset ram_device_26_0 (ram_device))
(typeattributeset perfprofd_data_file_26_0 (perfprofd_data_file))
(typeattributeset nativetest_data_file_26_0 (nativetest_data_file))
(typeattributeset country_detector_service_26_0 (country_detector_service))
(typeattributeset cgroup_26_0 (cgroup))
(typeattributeset drmserver_socket_26_0 (drmserver_socket))
(typeattributeset ppp_device_26_0 (ppp_device))
(typeattributeset proc_net_26_0 (proc_net))
(typeattributeset zygote_26_0 (zygote))
(typeattributeset untrusted_app_25_26_0 (untrusted_app_25))
(typeattributeset adb_data_file_26_0 (adb_data_file))
(typeattributeset anr_data_file_26_0 (anr_data_file))
(typeattributeset adb_keys_file_26_0 (adb_keys_file))
(typeattributeset kernel_26_0 (kernel))
(typeattributeset servicediscovery_service_26_0 (servicediscovery_service))
(typeattributeset coverage_service_26_0 (coverage_service))
(typeattributeset keystore_26_0 (keystore))
(typeattributeset package_service_26_0 (package_service))
(typeattributeset ephemeral_app_26_0 (ephemeral_app))
(typeattributeset bluetooth_26_0 (bluetooth))
(typeattributeset inputflinger_26_0 (inputflinger))
(typeattributeset vcs_device_26_0 (vcs_device))
(typeattributeset hal_oemlock_hwservice_26_0 (hal_oemlock_hwservice))
(typeattributeset port_26_0 (port))
(typeattributeset factory_26_0 (factory))
(typeattributeset virtual_touchpad_exec_26_0 (virtual_touchpad_exec))
(typeattributeset runas_26_0 (runas))
(typeattributeset tty_device_26_0 (tty_device))
(typeattributeset tun_device_26_0 (tun_device))
(typeattributeset clatd_exec_26_0 (clatd_exec))
(typeattributeset uio_device_26_0 (uio_device))
(typeattributeset usb_device_26_0 (usb_device))
(typeattributeset tv_input_service_26_0 (tv_input_service))
(typeattributeset input_service_26_0 (input_service))
(typeattributeset tee_device_26_0 (tee_device))
(typeattributeset hal_memtrack_hwservice_26_0 (hal_memtrack_hwservice))
(typeattributeset radio_device_26_0 (radio_device))
(typeattributeset bootstat_data_file_26_0 (bootstat_data_file))
(typeattributeset ptmx_device_26_0 (ptmx_device))
(typeattributeset textservices_service_26_0 (textservices_service))
(typeattributeset usbaccessory_device_26_0 (usbaccessory_device))
(typeattributeset asec_public_file_26_0 (asec_public_file))
(typeattributeset hal_usb_hwservice_26_0 (hal_usb_hwservice))
(typeattributeset recovery_refresh_exec_26_0 (recovery_refresh_exec))
(typeattributeset pdx_performance_client_endpoint_socket_26_0 (pdx_performance_client_endpoint_socket))
(typeattributeset user_profile_data_file_26_0 (user_profile_data_file))
(typeattributeset input_method_service_26_0 (input_method_service))
(typeattributeset media_projection_service_26_0 (media_projection_service))
(typeattributeset racoon_socket_26_0 (racoon_socket))
(typeattributeset cameraserver_service_26_0 (cameraserver_service))
(typeattributeset idmap_exec_26_0 (idmap_exec))
(typeattributeset uncrypt_socket_26_0 (uncrypt_socket))
(typeattributeset install_recovery_26_0 (install_recovery))
(typeattributeset logpersistd_logging_prop_26_0 (logpersistd_logging_prop))
(typeattributeset hal_configstore_ISurfaceFlingerConfigs_26_0 (hal_configstore_ISurfaceFlingerConfigs))
(typeattributeset hal_ir_hwservice_26_0 (hal_ir_hwservice))
(typeattributeset hal_vr_hwservice_26_0 (hal_vr_hwservice))
(typeattributeset incident_data_file_26_0 (incident_data_file))
(typeattributeset webview_zygote_26_0 (webview_zygote))
(typeattributeset proc_uid_procstat_set_26_0 (proc_uid_procstat_set))
(typeattributeset connectivity_service_26_0 (connectivity_service))
(typeattributeset notification_service_26_0 (notification_service))
(typeattributeset init_26_0 (init))
(typeattributeset logpersist_26_0 (logpersist))
(typeattributeset dreams_service_26_0 (dreams_service))
(typeattributeset companion_device_service_26_0 (companion_device_service))
(typeattributeset bootanim_26_0 (bootanim))
(typeattributeset ota_package_file_26_0 (ota_package_file))
(typeattributeset diskstats_service_26_0 (diskstats_service))
(typeattributeset wallpaper_service_26_0 (wallpaper_service))
(typeattributeset fscklogs_26_0 (fscklogs))
(typeattributeset task_service_26_0 (task_service))
(typeattributeset hardware_service_26_0 (hardware_service))
(typeattributeset logd_26_0 (logd))
(typeattributeset procstats_service_26_0 (procstats_service))
(typeattributeset dumpstate_service_26_0 (dumpstate_service))
(typeattributeset fingerprintd_exec_26_0 (fingerprintd_exec))
(typeattributeset alarm_service_26_0 (alarm_service))
(typeattributeset rttmanager_service_26_0 (rttmanager_service))
(typeattributeset fwk_sensor_hwservice_26_0 (fwk_sensor_hwservice))
(typeattributeset ueventd_26_0 (ueventd))
(typeattributeset node_26_0 (node))
(typeattributeset nfc_data_file_26_0 (nfc_data_file))
(typeattributeset misc_logd_file_26_0 (misc_logd_file))
(typeattributeset sepolicy_file_26_0 (sepolicy_file))
(typeattributeset audioserver_service_26_0 (audioserver_service))
(typeattributeset sysfs_mac_address_26_0 (sysfs_mac_address))
(typeattributeset modprobe_26_0 (modprobe))
(typeattributeset incidentd_26_0 (incidentd))
(typeattributeset apk_tmp_file_26_0 (apk_tmp_file))
(typeattributeset gpu_device_26_0 (gpu_device))
(typeattributeset mdnsd_26_0 (mdnsd))
(typeattributeset proc_uid_io_stats_26_0 (proc_uid_io_stats))
(typeattributeset sensorservice_service_26_0 (sensorservice_service))
(typeattributeset runas_exec_26_0 (runas_exec))
(typeattributeset dex2oat_26_0 (dex2oat))
(typeattributeset wifiaware_service_26_0 (wifiaware_service))
(typeattributeset netstats_service_26_0 (netstats_service))
(typeattributeset vr_manager_service_26_0 (vr_manager_service))
(typeattributeset watchdogd_26_0 (watchdogd))
(typeattributeset mediacodec_exec_26_0 (mediacodec_exec))
(typeattributeset tzdatacheck_exec_26_0 (tzdatacheck_exec))
(typeattributeset shell_exec_26_0 (shell_exec))
(typeattributeset hdmi_control_service_26_0 (hdmi_control_service))
(typeattributeset clipboard_service_26_0 (clipboard_service))
(typeattributeset dumpstate_exec_26_0 (dumpstate_exec))
(typeattributeset perfprofd_26_0 (perfprofd))
(typeattributeset netutils_wrapper_exec_26_0 (netutils_wrapper_exec))
(typeattributeset tombstoned_intercept_socket_26_0 (tombstoned_intercept_socket))
(typeattributeset wificond_26_0 (wificond))
(typeattributeset debugfs_mmc_26_0 (debugfs_mmc))
(typeattributeset netutils_wrapper_26_0 (netutils_wrapper))
(typeattributeset racoon_26_0 (racoon))
(typeattributeset hal_nfc_hwservice_26_0 (hal_nfc_hwservice))
(typeattributeset vold_26_0 (vold))
(typeattributeset webview_zygote_socket_26_0 (webview_zygote_socket))
(typeattributeset iio_device_26_0 (iio_device))
(typeattributeset pdx_display_manager_endpoint_socket_26_0 (pdx_display_manager_endpoint_socket))
(typeattributeset ion_device_26_0 (ion_device))
(typeattributeset port_device_26_0 (port_device))
(typeattributeset nfc_device_26_0 (nfc_device))
(typeattributeset rild_socket_26_0 (rild_socket))
(typeattributeset keystore_data_file_26_0 (keystore_data_file))
(typeattributeset recovery_persist_exec_26_0 (recovery_persist_exec))
(typeattributeset pmsg_device_26_0 (pmsg_device))
(typeattributeset rpmsg_device_26_0 (rpmsg_device))
(typeattributeset i2c_device_26_0 (i2c_device))
(typeattributeset cache_file_26_0 (cache_file))
(typeattributeset fingerprintd_service_26_0 (fingerprintd_service))
(typeattributeset mtp_device_26_0 (mtp_device))
(typeattributeset mtd_device_26_0 (mtd_device))
(typeattributeset log_device_26_0 (log_device))
(typeattributeset adbd_socket_26_0 (adbd_socket))
(typeattributeset debugfs_trace_marker_26_0 (debugfs_trace_marker))
(typeattributeset otapreopt_chroot_26_0 (otapreopt_chroot))
(typeattributeset hal_renderscript_hwservice_26_0 (hal_renderscript_hwservice))
(typeattributeset cppreopts_exec_26_0 (cppreopts_exec))
(typeattributeset installd_exec_26_0 (installd_exec))
(typeattributeset tombstoned_exec_26_0 (tombstoned_exec))
(typeattributeset runtime_event_log_tags_file_26_0 (runtime_event_log_tags_file))
(typeattributeset wpa_socket_26_0 (wpa_socket))
(typeattributeset mtp_26_0 (mtp))
(typeattributeset backup_data_file_26_0 (backup_data_file))
(typeattributeset app_fuse_file_26_0 (app_fuse_file))
(typeattributeset app_data_file_26_0 (app_data_file))
(typeattributeset dhcp_data_file_26_0 (dhcp_data_file))
(typeattributeset racoon_exec_26_0 (racoon_exec))
(typeattributeset unlabeled_26_0 (unlabeled))
(typeattributeset ipsec_service_26_0 (ipsec_service))
(typeattributeset user_service_26_0 (user_service))
(typeattributeset persistent_data_block_service_26_0 (persistent_data_block_service))
(typeattributeset profman_dump_data_file_26_0 (profman_dump_data_file))
(typeattributeset socket_device_26_0 (socket_device))
(typeattributeset scheduling_policy_service_26_0 (scheduling_policy_service))
(typeattributeset update_engine_exec_26_0 (update_engine_exec))
(typeattributeset installd_26_0 (installd))
(typeattributeset profman_exec_26_0 (profman_exec))
(typeattributeset key_install_data_file_26_0 (key_install_data_file))
(typeattributeset bootchart_data_file_26_0 (bootchart_data_file))
(typeattributeset persist_debug_prop_26_0 (persist_debug_prop))
(typeattributeset telecom_service_26_0 (telecom_service))
(typeattributeset audioserver_data_file_26_0 (audioserver_data_file))
(typeattributeset console_device_26_0 (console_device))
(typeattributeset sensors_device_26_0 (sensors_device))
(typeattributeset samplingprofiler_service_26_0 (samplingprofiler_service))
(typeattributeset hal_graphics_allocator_hwservice_26_0 (hal_graphics_allocator_hwservice))
(typeattributeset search_service_26_0 (search_service))
(typeattributeset mediaserver_26_0 (mediaserver))
(typeattributeset mediaserver_exec_26_0 (mediaserver_exec))
(typeattributeset oemfs_26_0 (oemfs))
(typeattributeset drmserver_exec_26_0 (drmserver_exec))
(typeattributeset sgdisk_exec_26_0 (sgdisk_exec))
(typeattributeset pdx_display_screenshot_endpoint_socket_26_0 (pdx_display_screenshot_endpoint_socket))
(typeattributeset camera_data_file_26_0 (camera_data_file))
(typeattributeset bluetooth_efs_file_26_0 (bluetooth_efs_file))
(typeattributeset media_data_file_26_0 (media_data_file))
(typeattributeset ota_data_file_26_0 (ota_data_file))
(typeattributeset system_file_26_0 (system_file))
(typeattributeset apk_private_tmp_file_26_0 (apk_private_tmp_file))
(typeattributeset hci_attach_dev_26_0 (hci_attach_dev))
(typeattributeset statusbar_service_26_0 (statusbar_service))
(typeattributeset boot_logo_updater_26_0 (boot_logo_updater))
(typeattributeset idmap_26_0 (idmap))
(typeattributeset fwmarkd_socket_26_0 (fwmarkd_socket))
(typeattributeset cameraserver_exec_26_0 (cameraserver_exec))
(typeattributeset shortcut_service_26_0 (shortcut_service))
(typeattributeset profman_26_0 (profman))
(typeattributeset media_rw_data_file_26_0 (media_rw_data_file))
(typeattributeset coredump_file_26_0 (coredump_file))
(typeattributeset serial_device_26_0 (serial_device))
(typeattributeset devicestoragemonitor_service_26_0 (devicestoragemonitor_service))
(typeattributeset boottrace_data_file_26_0 (boottrace_data_file))
(typeattributeset hal_audio_hwservice_26_0 (hal_audio_hwservice))
(typeattributeset cache_backup_file_26_0 (cache_backup_file))
(typeattributeset tracing_shell_writable_26_0 (tracing_shell_writable))
(typeattributeset mediacodec_service_26_0 (mediacodec_service))
(typeattributeset lmkd_26_0 (lmkd))
(typeattributeset deviceidle_service_26_0 (deviceidle_service))
(typeattributeset dropbox_service_26_0 (dropbox_service))
(typeattributeset mobile_log_d_26_0 (mobile_log_d))
(typeattributeset hidl_token_hwservice_26_0 (hidl_token_hwservice))
(typeattributeset storagestats_service_26_0 (storagestats_service))
(typeattributeset wifip2p_service_26_0 (wifip2p_service))
(typeattributeset registry_service_26_0 (registry_service))
(typeattributeset platform_app_26_0 (platform_app))
(typeattributeset cpuctl_device_26_0 (cpuctl_device))
(typeattributeset sysfs_batteryinfo_26_0 (sysfs_batteryinfo))
(typeattributeset recovery_persist_26_0 (recovery_persist))
(typeattributeset jobscheduler_service_26_0 (jobscheduler_service))
(typeattributeset proc_iomem_26_0 (proc_iomem))
(typeattributeset hal_camera_hwservice_26_0 (hal_camera_hwservice))
(typeattributeset proc_timer_26_0 (proc_timer))
(typeattributeset pdx_performance_client_channel_socket_26_0 (pdx_performance_client_channel_socket))
(typeattributeset sdcardd_exec_26_0 (sdcardd_exec))
(typeattributeset mediametrics_26_0 (mediametrics))
(typeattributeset mediametrics_exec_26_0 (mediametrics_exec))
(typeattributeset audio_device_26_0 (audio_device))
(typeattributeset webviewupdate_service_26_0 (webviewupdate_service))
(typeattributeset bufferhubd_exec_26_0 (bufferhubd_exec))
(typeattributeset dex2oat_exec_26_0 (dex2oat_exec))
(typeattributeset sysfs_lowmemorykiller_26_0 (sysfs_lowmemorykiller))
(typeattributeset hwservicemanager_exec_26_0 (hwservicemanager_exec))
(typeattributeset servicemanager_exec_26_0 (servicemanager_exec))
(typeattributeset pdx_performance_dir_26_0 (pdx_performance_dir))
(typeattributeset proc_cpuinfo_26_0 (proc_cpuinfo))
(typeattributeset proc_meminfo_26_0 (proc_meminfo))
(typeattributeset zygote_socket_26_0 (zygote_socket))
(typeattributeset vendor_framework_file_26_0 (vendor_framework_file))
(typeattributeset boottime_prop_26_0 (boottime_prop))
(typeattributeset system_radio_prop_26_0 (system_radio_prop))
(typeattributeset fsck_untrusted_26_0 (fsck_untrusted))
(typeattributeset uhid_device_26_0 (uhid_device))
(typeattributeset incident_service_26_0 (incident_service))
(typeattributeset ctl_bootanim_prop_26_0 (ctl_bootanim_prop))
(typeattributeset restorecon_prop_26_0 (restorecon_prop))
(typeattributeset account_service_26_0 (account_service))
(typeattributeset content_service_26_0 (content_service))
(typeattributeset mount_service_26_0 (mount_service))
(typeattributeset net_radio_prop_26_0 (net_radio_prop))
(typeattributeset asec_apk_file_26_0 (asec_apk_file))
(typeattributeset heapdump_data_file_26_0 (heapdump_data_file))
(typeattributeset update_verifier_exec_26_0 (update_verifier_exec))
(typeattributeset hal_dumpstate_hwservice_26_0 (hal_dumpstate_hwservice))
(typeattributeset cache_private_backup_file_26_0 (cache_private_backup_file))
(typeattributeset usb_service_26_0 (usb_service))
(typeattributeset battery_service_26_0 (battery_service))
(typeattributeset tracing_shell_writable_debug_26_0 (tracing_shell_writable_debug))
(typeattributeset recovery_service_26_0 (recovery_service))
(typeattributeset ctl_fuse_prop_26_0 (ctl_fuse_prop))
(typeattributeset ctl_console_prop_26_0 (ctl_console_prop))
(typeattributeset gatekeeperd_exec_26_0 (gatekeeperd_exec))
(typeattributeset sockfs_26_0 (sockfs))
(typeattributeset trust_service_26_0 (trust_service))
(typeattributeset binfmt_miscfs_26_0 (binfmt_miscfs))
(typeattributeset storage_file_26_0 (storage_file))
(typeattributeset update_verifier_26_0 (update_verifier))
(typeattributeset ctl_mdnsd_prop_26_0 (ctl_mdnsd_prop))
(typeattributeset mnt_media_rw_file_26_0 (mnt_media_rw_file))
(typeattributeset update_engine_data_file_26_0 (update_engine_data_file))
(typeattributeset healthd_exec_26_0 (healthd_exec))
(typeattributeset mnt_expand_file_26_0 (mnt_expand_file))
(typeattributeset fwk_display_hwservice_26_0 (fwk_display_hwservice))
(typeattributeset postinstall_dexopt_26_0 (postinstall_dexopt))
(typeattributeset tombstoned_crash_socket_26_0 (tombstoned_crash_socket))
(typeattributeset proc_drop_caches_26_0 (proc_drop_caches))
(typeattributeset resourcecache_data_file_26_0 (resourcecache_data_file))
(typeattributeset netd_service_26_0 (netd_service))
(typeattributeset fwk_scheduler_hwservice_26_0 (fwk_scheduler_hwservice))
(typeattributeset log_tag_prop_26_0 (log_tag_prop))
(typeattributeset tombstone_data_file_26_0 (tombstone_data_file))
(typeattributeset audio_service_26_0 (audio_service))
(typeattributeset radio_service_26_0 (radio_service))
(typeattributeset otapreopt_chroot_exec_26_0 (otapreopt_chroot_exec))
(typeattributeset unencrypted_data_file_26_0 (unencrypted_data_file))
(typeattributeset vold_socket_26_0 (vold_socket))
(typeattributeset otapreopt_slot_26_0 (otapreopt_slot))
(typeattributeset properties_device_26_0 (properties_device))
(typeattributeset vibrator_service_26_0 (vibrator_service))
(typeattributeset window_service_26_0 (window_service))
(typeattributeset update_engine_26_0 (update_engine))
(typeattributeset mediaextractor_26_0 (mediaextractor))
(typeattributeset blkid_26_0 (blkid))
(typeattributeset properties_serial_26_0 (properties_serial))
(typeattributeset functionfs_26_0 (functionfs))
(typeattributeset rild_debug_socket_26_0 (rild_debug_socket))
(typeattributeset surfaceflinger_service_26_0 (surfaceflinger_service))
(typeattributeset appwidget_service_26_0 (appwidget_service))
(typeattributeset gatekeeper_data_file_26_0 (gatekeeper_data_file))
(typeattributeset launcherapps_service_26_0 (launcherapps_service))
(typeattributeset proc_misc_26_0 (proc_misc))
(typeattributeset mnt_user_file_26_0 (mnt_user_file))
(typeattributeset reboot_data_file_26_0 (reboot_data_file))
(typeattributeset su_exec_26_0 (su_exec))
(typeattributeset ppp_exec_26_0 (ppp_exec))
(typeattributeset vdc_exec_26_0 (vdc_exec))
(typeattributeset mtp_exec_26_0 (mtp_exec))
(typeattributeset net_data_file_26_0 (net_data_file))
(typeattributeset vold_data_file_26_0 (vold_data_file))
(typeattributeset dhcp_26_0 (dhcp))
(typeattributeset preloads_data_file_26_0 (preloads_data_file))
(typeattributeset vold_exec_26_0 (vold_exec))
(typeattributeset usagestats_service_26_0 (usagestats_service))
(typeattributeset dhcp_exec_26_0 (dhcp_exec))
(typeattributeset fsck_exec_26_0 (fsck_exec))
(typeattributeset hal_tv_cec_hwservice_26_0 (hal_tv_cec_hwservice))
(typeattributeset kisd_26_0 (kisd))
(typeattributeset lmkd_exec_26_0 (lmkd_exec))
(typeattributeset logd_exec_26_0 (logd_exec))
(typeattributeset netd_exec_26_0 (netd_exec))
(typeattributeset sgdisk_26_0 (sgdisk))
(typeattributeset init_exec_26_0 (init_exec))
(typeattributeset media_router_service_26_0 (media_router_service))
(typeattributeset batteryproperties_service_26_0 (batteryproperties_service))
(typeattributeset storaged_service_26_0 (storaged_service))
(typeattributeset selinuxfs_26_0 (selinuxfs))
(typeattributeset sysfs_thermal_26_0 (sysfs_thermal))
(typeattributeset system_app_service_26_0 (system_app_service))
(typeattributeset full_device_26_0 (full_device))
(typeattributeset fuse_device_26_0 (fuse_device))
(typeattributeset power_service_26_0 (power_service))
(typeattributeset uncrypt_26_0 (uncrypt))
(typeattributeset pdx_display_client_channel_socket_26_0 (pdx_display_client_channel_socket))
(typeattributeset debugfs_tracing_26_0 (debugfs_tracing))
(typeattributeset sysfs_zram_uevent_26_0 (sysfs_zram_uevent))
(typeattributeset proc_modules_26_0 (proc_modules))
(typeattributeset virtual_touchpad_service_26_0 (virtual_touchpad_service))
(typeattributeset wificond_exec_26_0 (wificond_exec))
(typeattributeset commontime_management_service_26_0 (commontime_management_service))
(typeattributeset proc_interrupts_26_0 (proc_interrupts))
(typeattributeset pdx_bufferhub_client_channel_socket_26_0 (pdx_bufferhub_client_channel_socket))
(typeattributeset hal_gatekeeper_hwservice_26_0 (hal_gatekeeper_hwservice))
(typeattributeset slideshow_26_0 (slideshow))
(typeattributeset graphicsstats_service_26_0 (graphicsstats_service))
(typeattributeset drmserver_service_26_0 (drmserver_service))
(typeattributeset fingerprintd_data_file_26_0 (fingerprintd_data_file))
(typeattributeset vr_hwc_26_0 (vr_hwc))
(typeattributeset inotify_26_0 (inotify))
(typeattributeset tombstoned_26_0 (tombstoned))
(typeattributeset pdx_display_vsync_channel_socket_26_0 (pdx_display_vsync_channel_socket))
(typeattributeset gpu_service_26_0 (gpu_service))
(typeattributeset hal_gnss_hwservice_26_0 (hal_gnss_hwservice))
(typeattributeset sysfs_bluetooth_writable_26_0 (sysfs_bluetooth_writable))
(typeattributeset proc_bluetooth_writable_26_0 (proc_bluetooth_writable))
(typeattributeset dm_device_26_0 (dm_device))
(typeattributeset tee_data_file_26_0 (tee_data_file))
(typeattributeset default_android_hwservice_26_0 (default_android_hwservice))
(typeattributeset dumpstate_socket_26_0 (dumpstate_socket))
(typeattributeset provision_file_26_0 (provision_file))
(typeattributeset pdx_display_vsync_endpoint_socket_26_0 (pdx_display_vsync_endpoint_socket))
(typeattributeset perfprofd_exec_26_0 (perfprofd_exec))
(typeattributeset hal_thermal_hwservice_26_0 (hal_thermal_hwservice))
(typeattributeset vr_hwc_exec_26_0 (vr_hwc_exec))
(typeattributeset cache_recovery_file_26_0 (cache_recovery_file))
(typeattributeset batterystats_service_26_0 (batterystats_service))
(typeattributeset mediadrmserver_26_0 (mediadrmserver))
(typeattributeset hal_weaver_hwservice_26_0 (hal_weaver_hwservice))
(typeattributeset device_26_0 (device))
(typeattributeset storage_stub_file_26_0 (storage_stub_file))
(typeattributeset sysfs_nfc_power_writable_26_0 (sysfs_nfc_power_writable))
(typeattributeset voiceinteraction_service_26_0 (voiceinteraction_service))
(typeattributeset hal_bootctl_hwservice_26_0 (hal_bootctl_hwservice))
(typeattributeset gatekeeper_service_26_0 (gatekeeper_service))
(typeattributeset hidl_allocator_hwservice_26_0 (hidl_allocator_hwservice))
(typeattributeset qtaguid_device_26_0 (qtaguid_device))
(typeattributeset netdiag_26_0 (netdiag))
(typeattributeset property_socket_26_0 (property_socket))
(typeattributeset install_recovery_exec_26_0 (install_recovery_exec))
(typeattributeset vendor_file_26_0 (vendor_file))
(typeattributeset efs_file_26_0 (efs_file))
(typeattributeset rild_26_0 (rild))
(typeattributeset device_logging_prop_26_0 (device_logging_prop))
(typeattributeset mdnsd_socket_26_0 (mdnsd_socket))
(typeattributeset vendor_overlay_file_26_0 (vendor_overlay_file))
(typeattributeset icon_file_26_0 (icon_file))
(typeattributeset vold_device_26_0 (vold_device))
(typeattributeset sysfs_wake_lock_26_0 (sysfs_wake_lock))

View File

@ -1,40 +0,0 @@
;; new_objects - a collection of types that have been introduced that have no
;; analogue in older policy. Thus, we do not need to map these types to
;; previous ones. Add here to pass checkapi tests.
(typeattribute new_objects)
(typeattributeset new_objects
( adbd_exec
broadcastradio_service
e2fs
e2fs_exec
hal_broadcastradio_hwservice
hal_cas_hwservice
hal_neuralnetworks_hwservice
hal_tetheroffload_hwservice
hal_wifi_offload_hwservice
kmsg_debug_device
mediaprovider_tmpfs
netd_stable_secret_prop
package_native_service
sysfs_fs_ext4_features
system_net_netd_hwservice
thermal_service
thermalcallback_hwservice
thermalserviced
thermalserviced_exec
thermalserviced_tmpfs
timezone_service
tombstoned_java_trace_socket
mtkbootanimation
mtkbootanimation_exec
mtkbootanimation_tmpfs
))
;; private_objects - a collection of types that were labeled differently in
;; older policy, but that should not remain accessible to vendor policy.
;; Thus, these types are also not mapped, but recorded for checkapi tests
(typeattribute priv_objects)
(typeattributeset priv_objects
( adbd_tmpfs
screencap
screencap_exec ))