Home | History | Annotate | Download | only in sepolicy
      1 ######################################
      2 # Attribute declarations
      3 #
      4 
      5 # All types used for devices.
      6 attribute dev_type;
      7 
      8 # All types used for processes.
      9 attribute domain;
     10 
     11 # All types used for filesystems.
     12 attribute fs_type;
     13 
     14 # All types used for files that can exist on a labeled fs.
     15 # Do not use for pseudo file types.
     16 attribute file_type;
     17 
     18 # All types used for domain entry points.
     19 attribute exec_type;
     20 
     21 # All types used for /data files.
     22 attribute data_file_type;
     23 
     24 # All types use for sysfs files.
     25 attribute sysfs_type;
     26 
     27 # Attribute used for all sdcards
     28 attribute sdcard_type;
     29 
     30 # All types used for nodes/hosts.
     31 attribute node_type;
     32 
     33 # All types used for network interfaces.
     34 attribute netif_type;
     35 
     36 # All types used for network ports.
     37 attribute port_type;
     38 
     39 # All types used for property service
     40 attribute property_type;
     41 
     42 # All domains that can override MLS restrictions.
     43 # i.e. processes that can read up and write down.
     44 attribute mlstrustedsubject;
     45 
     46 # All types that can override MLS restrictions.
     47 # i.e. files that can be read by lower and written by higher
     48 attribute mlstrustedobject;
     49 
     50 # Domains that are allowed all permissions ("unconfined").
     51 attribute unconfineddomain;
     52 
     53 # All domains used for apps.
     54 attribute appdomain;
     55 
     56 # All domains used for apps with network access.
     57 attribute netdomain;
     58 
     59 # All domains used for apps with bluetooth access.
     60 attribute bluetoothdomain;
     61 
     62 # All domains used for binder service domains.
     63 attribute binderservicedomain;
     64 
     65 # Allow domains used for platform (signed by build key) apps.
     66 attribute platformappdomain;
     67 
     68 # All domains which are allowed the "relabelto" permission
     69 attribute relabeltodomain;
     70