| Chad Brubaker | a782a81 | 2017-02-06 10:31:45 -0800 | [diff] [blame^] | 1 | ### |
| 2 | ### Untrusted v2 sandbox apps. |
| 3 | ### |
| 4 | app_domain(untrusted_v2_app) |
| 5 | net_domain(untrusted_v2_app) |
| 6 | bluetooth_domain(untrusted_v2_app) |
| 7 | |
| 8 | # Read and write system app data files passed over Binder. |
| 9 | # Motivating case was /data/data/com.android.settings/cache/*.jpg for |
| 10 | # cropping or taking user photos. |
| 11 | allow untrusted_v2_app system_app_data_file:file { read write getattr }; |
| 12 | |
| 13 | # Access to /data/media. |
| 14 | allow untrusted_v2_app media_rw_data_file:dir create_dir_perms; |
| 15 | allow untrusted_v2_app media_rw_data_file:file create_file_perms; |
| 16 | |
| 17 | # Traverse into /mnt/media_rw for bypassing FUSE daemon |
| 18 | # TODO: narrow this to just MediaProvider |
| 19 | allow untrusted_v2_app mnt_media_rw_file:dir search; |
| 20 | |
| 21 | # allow cts to query all services |
| 22 | allow untrusted_v2_app servicemanager:service_manager list; |
| 23 | |
| 24 | allow untrusted_v2_app audioserver_service:service_manager find; |
| 25 | allow untrusted_v2_app cameraserver_service:service_manager find; |
| 26 | allow untrusted_v2_app drmserver_service:service_manager find; |
| 27 | allow untrusted_v2_app mediaserver_service:service_manager find; |
| 28 | allow untrusted_v2_app mediaextractor_service:service_manager find; |
| 29 | allow untrusted_v2_app mediacodec_service:service_manager find; |
| 30 | allow untrusted_v2_app mediametrics_service:service_manager find; |
| 31 | allow untrusted_v2_app mediadrmserver_service:service_manager find; |
| 32 | allow untrusted_v2_app nfc_service:service_manager find; |
| 33 | allow untrusted_v2_app radio_service:service_manager find; |
| 34 | allow untrusted_v2_app surfaceflinger_service:service_manager find; |
| 35 | # TODO: potentially provide a tighter list of services here |
| 36 | allow untrusted_v2_app app_api_service:service_manager find; |
| 37 | |
| 38 | # gdbserver for ndk-gdb ptrace attaches to app process. |
| 39 | allow untrusted_v2_app self:process ptrace; |