Lines Matching refs:unconfineddomain
3655 attribute unconfineddomain;
4162 neverallow { appdomain -unconfineddomain -bluetooth } self:capability *;
4163 neverallow { appdomain -unconfineddomain } self:capability2 *;
4166 neverallow { appdomain -unconfineddomain
4169 neverallow { appdomain -unconfineddomain } {
4179 neverallow { untrusted_app isolated_app shell -unconfineddomain }
4182 neverallow { appdomain -nfc -unconfineddomain } nfc_device:chr_file
4184 neverallow { appdomain -bluetooth -unconfineddomain } hci_attach_dev:chr_file
4186 neverallow { appdomain -unconfineddomain } tee_device:chr_file { read write };
4189 neverallow { appdomain -unconfineddomain } kernel:security
4196 neverallow { appdomain -unconfineddomain }
4210 neverallow { appdomain -unconfineddomain } socket_device:sock_file write;
4213 neverallow { appdomain -unconfineddomain } adbd_socket:sock_file write;
4214 neverallow { appdomain -unconfineddomain } installd_socket:sock_file write;
4215 neverallow { appdomain -bluetooth -radio -shell -system_app -unconfineddomain }
4217 neverallow { appdomain -radio -unconfineddomain } rild_socket:sock_file write;
4218 neverallow { appdomain -unconfineddomain } vold_socket:sock_file write;
4219 neverallow { appdomain -unconfineddomain } zygote_socket:sock_file write;
4222 neverallow { appdomain -unconfineddomain } { domain -appdomain }:process ptrace;
4225 neverallow { appdomain -unconfineddomain } { domain -appdomain }:file write;
4231 neverallow { appdomain -unconfineddomain } { domain -appdomain }:process
4236 neverallow { appdomain -shell -unconfineddomain } ~appdomain:process
4241 neverallow { appdomain -unconfineddomain } self:memprotect mmap_zero;
4244 neverallow { appdomain -unconfineddomain } rootfs:{ dir { { chr_file blk_file } { file lnk_file sock_file fifo_file } } }
4248 neverallow { appdomain -unconfineddomain } system_file:{ dir { { chr_file blk_file } { file lnk_file sock_file fifo_file } } }
4252 neverallow { appdomain -unconfineddomain } exec_type:file
4260 neverallow { appdomain -unconfineddomain -system_app }
4265 neverallow { appdomain -system_app -unconfineddomain }
4268 neverallow { appdomain -unconfineddomain } drm_data_file:{ dir { { chr_file blk_file } { file lnk_file sock_file fifo_file } } }
4270 neverallow { appdomain -unconfineddomain } gps_data_file:{ dir { { chr_file blk_file } { file lnk_file sock_file fifo_file } } }
4272 neverallow { appdomain -platform_app -unconfineddomain }
4275 neverallow { appdomain -platform_app -unconfineddomain }
4278 neverallow { appdomain -platform_app -unconfineddomain }
4281 neverallow { appdomain -platform_app -unconfineddomain }
4284 neverallow { appdomain -shell -unconfineddomain }
4287 neverallow { appdomain -bluetooth -unconfineddomain }
4290 neverallow { appdomain -unconfineddomain }
4293 neverallow { appdomain -unconfineddomain }
4296 neverallow { appdomain -unconfineddomain }
4299 neverallow { appdomain -unconfineddomain }
4304 neverallow { appdomain -unconfineddomain }
4308 neverallow { appdomain -bluetooth -nfc -unconfineddomain }
4310 neverallow { appdomain -unconfineddomain }
4314 neverallow { appdomain -system_app -unconfineddomain }
4319 neverallow { appdomain -unconfineddomain } fs_type:filesystem ~getattr;
4322 neverallow { appdomain -system_app -radio -shell -bluetooth -unconfineddomain }
4426 neverallow { bluetooth -unconfineddomain } self:capability ~net_admin;
4517 typeattribute clatd unconfineddomain;
4765 typeattribute dhcp unconfineddomain;
4861 typeattribute dnsmasq unconfineddomain;
5105 neverallow { domain -init -system_server -ueventd -unconfineddomain } hw_random_device:chr_file *;
5133 neverallow { domain -unconfineddomain -ueventd } device:chr_file { open read write };
5303 typeattribute dumpstate unconfineddomain;
5673 typeattribute gpsd unconfineddomain;
5875 typeattribute hostapd unconfineddomain;
5939 typeattribute init_shell unconfineddomain;
5952 typeattribute init unconfineddomain;
5995 typeattribute inputflinger unconfineddomain;
6229 typeattribute kernel unconfineddomain;
6568 typeattribute mediaserver unconfineddomain;
6777 typeattribute mtp unconfineddomain;
7195 typeattribute platform_app unconfineddomain;
7278 typeattribute ppp unconfineddomain;
7401 typeattribute qemud unconfineddomain;
7409 typeattribute racoon unconfineddomain;
7587 typeattribute recovery unconfineddomain;
7622 typeattribute release_app unconfineddomain;
7676 typeattribute rild unconfineddomain;
8019 typeattribute shared_app unconfineddomain;
8178 typeattribute surfaceflinger unconfineddomain;
8385 typeattribute system_app unconfineddomain;
8485 typeattribute system_server unconfineddomain;
9119 allow unconfineddomain self:capability ~{ sys_ptrace sys_rawio mknod sys_module };
9120 allow unconfineddomain self:capability2 ~{ mac_override mac_admin };
9121 allow unconfineddomain kernel:security ~{ load_policy setenforce setcheckreqprot };
9122 allow unconfineddomain kernel:system *;
9123 allow unconfineddomain domain:process ~{ execmem execstack execheap ptrace transition dyntransition };
9124 allow unconfineddomain domain:fd *;
9125 allow unconfineddomain domain:dir { open getattr read search ioctl };
9126 allow unconfineddomain domain:lnk_file { getattr open read ioctl lock };
9127 allow unconfineddomain domain:{ fifo_file file } { { getattr open read ioctl lock } { open append write } };
9128 allow unconfineddomain domain:{ socket tcp_socket udp_socket rawip_socket netlink_socket packet_socket key_socket unix_stream_socket unix_dgram_socket appletalk_socket netlink_route_socket netlink_firewall_socket netlink_tcpdiag_socket netlink_nflog_socket netlink_xfrm_socket netlink_selinux_socket netlink_audit_socket netlink_ip6fw_socket netlink_dnrt_socket netlink_kobject_uevent_socket tun_socket } *;
9129 allow unconfineddomain domain:{ sem msgq shm ipc } *;
9130 allow unconfineddomain domain:key *;
9131 allow unconfineddomain {fs_type dev_type file_type}:{ dir lnk_file sock_file fifo_file } ~relabelto;
9132 allow unconfineddomain {fs_type -usermodehelper -proc_security}:{ chr_file file } ~{entrypoint execmod execute relabelto};
9133 allow unconfineddomain {dev_type -kmem_device}:{ chr_file file } ~{entrypoint execmod execute relabelto};
9134 allow unconfineddomain file_type:{ chr_file file } ~{entrypoint execmod execute relabelto};
9135 allow unconfineddomain { rootfs system_file exec_type }:file execute;
9136 allow unconfineddomain node_type:node *;
9137 allow unconfineddomain node_type:{ tcp_socket udp_socket rawip_socket } node_bind;
9138 allow unconfineddomain netif_type:netif *;
9139 allow unconfineddomain port_type:{ socket tcp_socket udp_socket rawip_socket netlink_socket packet_socket key_socket unix_stream_socket unix_dgram_socket appletalk_socket netlink_route_socket netlink_firewall_socket netlink_tcpdiag_socket netlink_nflog_socket netlink_xfrm_socket netlink_selinux_socket netlink_audit_socket netlink_ip6fw_socket netlink_dnrt_socket netlink_kobject_uevent_socket tun_socket } name_bind;
9140 allow unconfineddomain port_type:{ tcp_socket dccp_socket } name_connect;
9141 allow unconfineddomain domain:peer recv;
9142 allow unconfineddomain { domain -init }:binder { call transfer set_context_mgr };
9143 allow unconfineddomain property_type:property_service set;
9202 typeattribute uncrypt unconfineddomain;
9256 typeattribute untrusted_app unconfineddomain;
