| Chad Brubaker | a782a81 | 2017-02-06 10:31:45 -0800 | [diff] [blame] | 1 | ### |
| 2 | ### Untrusted v2 sandbox apps. |
| 3 | ### |
| Alex Klyubin | f5446eb | 2017-03-23 14:27:32 -0700 | [diff] [blame] | 4 | |
| 5 | typeattribute untrusted_v2_app coredomain; |
| 6 | |
| Chad Brubaker | a782a81 | 2017-02-06 10:31:45 -0800 | [diff] [blame] | 7 | app_domain(untrusted_v2_app) |
| 8 | net_domain(untrusted_v2_app) |
| 9 | bluetooth_domain(untrusted_v2_app) |
| 10 | |
| 11 | # Read and write system app data files passed over Binder. |
| 12 | # Motivating case was /data/data/com.android.settings/cache/*.jpg for |
| 13 | # cropping or taking user photos. |
| 14 | allow untrusted_v2_app system_app_data_file:file { read write getattr }; |
| 15 | |
| 16 | # Access to /data/media. |
| 17 | allow untrusted_v2_app media_rw_data_file:dir create_dir_perms; |
| 18 | allow untrusted_v2_app media_rw_data_file:file create_file_perms; |
| 19 | |
| 20 | # Traverse into /mnt/media_rw for bypassing FUSE daemon |
| 21 | # TODO: narrow this to just MediaProvider |
| 22 | allow untrusted_v2_app mnt_media_rw_file:dir search; |
| 23 | |
| 24 | # allow cts to query all services |
| 25 | allow untrusted_v2_app servicemanager:service_manager list; |
| 26 | |
| 27 | allow untrusted_v2_app audioserver_service:service_manager find; |
| 28 | allow untrusted_v2_app cameraserver_service:service_manager find; |
| 29 | allow untrusted_v2_app drmserver_service:service_manager find; |
| 30 | allow untrusted_v2_app mediaserver_service:service_manager find; |
| 31 | allow untrusted_v2_app mediaextractor_service:service_manager find; |
| 32 | allow untrusted_v2_app mediacodec_service:service_manager find; |
| 33 | allow untrusted_v2_app mediametrics_service:service_manager find; |
| 34 | allow untrusted_v2_app mediadrmserver_service:service_manager find; |
| Chad Brubaker | a782a81 | 2017-02-06 10:31:45 -0800 | [diff] [blame] | 35 | allow untrusted_v2_app nfc_service:service_manager find; |
| 36 | allow untrusted_v2_app radio_service:service_manager find; |
| Chad Brubaker | a782a81 | 2017-02-06 10:31:45 -0800 | [diff] [blame] | 37 | # TODO: potentially provide a tighter list of services here |
| 38 | allow untrusted_v2_app app_api_service:service_manager find; |
| 39 | |
| 40 | # gdbserver for ndk-gdb ptrace attaches to app process. |
| 41 | allow untrusted_v2_app self:process ptrace; |