Gitiles
Code Review Sign In
gerrit.omnirom.org / android_system_sepolicy / fe55f30397da4f928672e0c39b4dc813b818a010 / . / private / property_contexts
blob: d909dfc894c19196125574604d0ec378e1334896 [file] [log] [blame]
Stephen Smalley124720a2012-04-04 10:11:16 -0400[diff] [blame]1##########################
2# property service keys
3#
4#
Stephen Smalleyfee49152014-06-19 10:27:02 -0400[diff] [blame]5net.rmnet u:object_r:net_radio_prop:s0
6net.gprs u:object_r:net_radio_prop:s0
7net.ppp u:object_r:net_radio_prop:s0
8net.qmi u:object_r:net_radio_prop:s0
9net.lte u:object_r:net_radio_prop:s0
10net.cdma u:object_r:net_radio_prop:s0
Nick Kralevich4e404292017-02-09 16:08:11 -0800[diff] [blame]11net.dns u:object_r:net_dns_prop:s0
Jaekyun Seokf9d27882018-01-12 10:19:48 +0900[diff] [blame]12sys.usb.config u:object_r:system_radio_prop:s0
Stephen Smalleyfee49152014-06-19 10:27:02 -0400[diff] [blame]13ril. u:object_r:radio_prop:s0
Tom Cherryf89847a2016-01-11 13:06:25 -0800[diff] [blame]14ro.ril. u:object_r:radio_prop:s0
Stephen Smalley730957a2012-04-04 16:01:19 -0400[diff] [blame]15gsm. u:object_r:radio_prop:s0
Stephen Smalley124720a2012-04-04 10:11:16 -0400[diff] [blame]16persist.radio u:object_r:radio_prop:s0
Stephen Smalley124720a2012-04-04 10:11:16 -0400[diff] [blame]17
18net. u:object_r:system_prop:s0
19dev. u:object_r:system_prop:s0
Tom Cherryf89847a2016-01-11 13:06:25 -0800[diff] [blame]20ro.runtime. u:object_r:system_prop:s0
Alex Klyubin062236a2016-12-27 14:05:46 -0800[diff] [blame]21ro.runtime.firstboot u:object_r:firstboot_prop:s0
Stephen Smalley124720a2012-04-04 10:11:16 -0400[diff] [blame]22hw. u:object_r:system_prop:s0
Tom Cherryf89847a2016-01-11 13:06:25 -0800[diff] [blame]23ro.hw. u:object_r:system_prop:s0
Stephen Smalley124720a2012-04-04 10:11:16 -0400[diff] [blame]24sys. u:object_r:system_prop:s0
Nikita Ioffe7065e462019-11-14 12:59:15 +0000[diff] [blame]25sys.init.userspace_reboot u:object_r:userspace_reboot_prop:s0
Alex Lightb7ebb322016-06-22 15:47:09 -0700[diff] [blame]26sys.cppreopt u:object_r:cppreopt_prop:s0
Kiyoung Kim82c87ed2019-08-09 14:20:34 +0900[diff] [blame]27sys.linker. u:object_r:linker_prop:s0
Yifan Hong18ade862019-03-14 15:45:03 -0700[diff] [blame]28sys.lpdumpd u:object_r:lpdumpd_prop:s0
Nick Kralevich7914a472013-06-28 20:15:37 -0700[diff] [blame]29sys.powerctl u:object_r:powerctl_prop:s0
Nick Kralevichcaefbd72015-04-23 19:42:25 -0700[diff] [blame]30sys.usb.ffs. u:object_r:ffs_prop:s0
Stephen Smalley124720a2012-04-04 10:11:16 -0400[diff] [blame]31service. u:object_r:system_prop:s0
Stephen Smalleyfee49152014-06-19 10:27:02 -0400[diff] [blame]32dhcp. u:object_r:dhcp_prop:s0
Paul Jensen97a2cfd2014-06-18 09:20:36 -0400[diff] [blame]33dhcp.bt-pan.result u:object_r:pan_result_prop:s0
Alex Klyubin3123b1e2013-05-06 10:18:27 -0700[diff] [blame]34bluetooth. u:object_r:bluetooth_prop:s0
Stephen Smalley124720a2012-04-04 10:11:16 -0400[diff] [blame]35
Nick Kralevichdd1ec6d2013-11-01 10:45:03 -0700[diff] [blame]36debug. u:object_r:debug_prop:s0
Nick Kralevich116a20f2014-02-05 16:36:25 -0800[diff] [blame]37debug.db. u:object_r:debuggerd_prop:s0
Felipe Leme83fd8a52015-12-01 18:03:05 -0800[diff] [blame]38dumpstate. u:object_r:dumpstate_prop:s0
Felipe Lemea5a80722016-09-21 10:44:11 -0700[diff] [blame]39dumpstate.options u:object_r:dumpstate_options_prop:s0
Daniel Norman4eca8192019-07-25 11:29:17 -0700[diff] [blame]40init.svc_debug_pid. u:object_r:init_svc_debug_prop:s0
Mark Salyzyn275ea122018-08-07 16:03:47 -0700[diff] [blame]41llk. u:object_r:llkd_prop:s0
42khungtask. u:object_r:llkd_prop:s0
43ro.llk. u:object_r:llkd_prop:s0
44ro.khungtask. u:object_r:llkd_prop:s0
mukesh agrawal84cfde22016-04-15 11:10:06 -0700[diff] [blame]45log. u:object_r:log_prop:s0
Mark Salyzyn44c98bb2016-06-06 12:10:00 -0700[diff] [blame]46log.tag u:object_r:log_tag_prop:s0
mukesh agrawale651f6f2016-04-15 11:10:39 -0700[diff] [blame]47log.tag.WifiHAL u:object_r:wifi_log_prop:s0
Daniel Micay38ac77e2016-05-31 16:01:08 -0400[diff] [blame]48security.perf_harden u:object_r:shell_prop:s0
Stephen Smalley124720a2012-04-04 10:11:16 -0400[diff] [blame]49service.adb.root u:object_r:shell_prop:s0
50service.adb.tcp.port u:object_r:shell_prop:s0
51
William Robertse2ad3182012-11-27 17:34:54 -0800[diff] [blame]52persist.audio. u:object_r:audio_prop:s0
Andre Eisenbacheebdb472016-02-08 15:39:00 -0800[diff] [blame]53persist.bluetooth. u:object_r:bluetooth_prop:s0
Yasuhiro Matsuda3d328172015-06-24 15:24:17 +0900[diff] [blame]54persist.debug. u:object_r:persist_debug_prop:s0
Mark Salyzyn9e7bbf62014-06-12 12:47:22 -0700[diff] [blame]55persist.logd. u:object_r:logd_prop:s0
Jaekyun Seoke4971452017-10-19 16:54:49 +0900[diff] [blame]56ro.logd. u:object_r:logd_prop:s0
Rubin Xu0c8286f2016-01-04 15:20:45 +0000[diff] [blame]57persist.logd.security u:object_r:device_logging_prop:s0
Mark Salyzyn68d67a02016-06-06 12:18:46 -0700[diff] [blame]58persist.logd.logpersistd u:object_r:logpersistd_logging_prop:s0
Mark Salyzyn91e7ac92016-07-08 08:41:08 -0700[diff] [blame]59logd.logpersistd u:object_r:logpersistd_logging_prop:s0
Mark Salyzyn44c98bb2016-06-06 12:10:00 -0700[diff] [blame]60persist.log.tag u:object_r:log_tag_prop:s0
Mark Salyzynd1435602016-02-04 10:55:43 -0800[diff] [blame]61persist.mmc. u:object_r:mmc_prop:s0
Lorenzo Colitti5b3efd32017-07-11 09:43:19 +0900[diff] [blame]62persist.netd.stable_secret u:object_r:netd_stable_secret_prop:s0
Gavin Corkeryb2f34bf2019-10-09 17:09:48 +0100[diff] [blame]63persist.pm.mock-upgrade u:object_r:mock_ota_prop:s0
Stephen Smalley124720a2012-04-04 10:11:16 -0400[diff] [blame]64persist.sys. u:object_r:system_prop:s0
Sami Tolvanen9c168712016-02-05 15:42:32 -0800[diff] [blame]65persist.sys.safemode u:object_r:safemode_prop:s0
Tao Baoa999e392019-06-14 17:00:16 -0700[diff] [blame]66persist.sys.theme u:object_r:theme_prop:s0
Hung-ying Tyan565384d2019-04-26 16:14:52 +0800[diff] [blame]67persist.sys.fflag.override.settings_dynamic_system u:object_r:dynamic_system_prop:s0
dcashman3e8d1bf2016-03-02 16:14:17 -0800[diff] [blame]68ro.sys.safemode u:object_r:safemode_prop:s0
Sami Tolvanen9c168712016-02-05 15:42:32 -0800[diff] [blame]69persist.sys.audit_safemode u:object_r:safemode_prop:s0
David Sehrfa67ec42019-11-25 22:03:59 +0000[diff] [blame]70persist.sys.dalvik.jvmtiagent u:object_r:system_jvmti_agent_prop:s0
Stephen Smalley124720a2012-04-04 10:11:16 -0400[diff] [blame]71persist.service. u:object_r:system_prop:s0
Alex Klyubin3123b1e2013-05-06 10:18:27 -0700[diff] [blame]72persist.service.bdroid. u:object_r:bluetooth_prop:s0
Stephen Smalley124720a2012-04-04 10:11:16 -0400[diff] [blame]73persist.security. u:object_r:system_prop:s0
Lalit Maganti673b4db2018-04-20 19:09:45 +0100[diff] [blame]74persist.traced.enable u:object_r:traced_enabled_prop:s0
Florian Mayera769f0f2019-03-13 11:22:23 -0700[diff] [blame]75traced.lazy. u:object_r:traced_lazy_prop:s0
Florian Mayerc32ca902018-12-10 16:20:20 +0000[diff] [blame]76persist.heapprofd.enable u:object_r:heapprofd_enabled_prop:s0
Jason Monk0e1cbf52016-11-09 15:19:05 -0500[diff] [blame]77persist.vendor.overlay. u:object_r:overlay_prop:s0
78ro.boot.vendor.overlay. u:object_r:overlay_prop:s0
Nick Kralevichbb9a3882016-12-13 19:50:36 -0800[diff] [blame]79ro.boottime. u:object_r:boottime_prop:s0
Alex Klyubin20151072016-12-20 15:31:37 -0800[diff] [blame]80ro.serialno u:object_r:serialno_prop:s0
Alex Klyubin6e4508e2016-12-27 18:05:46 -0800[diff] [blame]81ro.boot.btmacaddr u:object_r:bluetooth_prop:s0
Alex Klyubin20151072016-12-20 15:31:37 -0800[diff] [blame]82ro.boot.serialno u:object_r:serialno_prop:s0
Alex Klyubin6e4508e2016-12-27 18:05:46 -0800[diff] [blame]83ro.bt. u:object_r:bluetooth_prop:s0
Mark Salyzyn006c2e92017-08-14 14:25:10 -0700[diff] [blame]84ro.boot.bootreason u:object_r:bootloader_boot_reason_prop:s0
85persist.sys.boot.reason u:object_r:last_boot_reason_prop:s0
86sys.boot.reason u:object_r:system_boot_reason_prop:s0
Mark Salyzyna1bce772018-06-05 09:41:59 -0700[diff] [blame]87sys.boot.reason.last u:object_r:last_boot_reason_prop:s0
Calin Juravle53165482017-11-16 05:28:14 +0000[diff] [blame]88pm. u:object_r:pm_prop:s0
Mark Salyzyn3443caf2015-10-24 16:20:18 -0700[diff] [blame]89test.sys.boot.reason u:object_r:test_boot_reason_prop:s0
Suren Baghdasaryanc8ed8552018-07-24 17:04:18 -0700[diff] [blame]90sys.lmk. u:object_r:system_lmk_prop:s0
Primiano Tucci8da4e4f2019-02-01 22:52:02 +0000[diff] [blame]91sys.trace. u:object_r:system_trace_prop:s0
William Roberts9e70c8b2013-01-23 14:02:43 -0800[diff] [blame]92
Rubin Xu0c8286f2016-01-04 15:20:45 +0000[diff] [blame]93# Boolean property set by system server upon boot indicating
94# if device owner is provisioned.
95ro.device_owner u:object_r:device_logging_prop:s0
96
William Roberts9e70c8b2013-01-23 14:02:43 -0800[diff] [blame]97# selinux non-persistent properties
Jeff Sharkey7617cd42015-06-09 11:01:04 -0700[diff] [blame]98selinux.restorecon_recursive u:object_r:restorecon_prop:s0
Stephen Smalley124720a2012-04-04 10:11:16 -0400[diff] [blame]99
100# default property context
101* u:object_r:default_prop:s0
102
103# data partition encryption properties
104vold. u:object_r:vold_prop:s0
Tom Cherryf89847a2016-01-11 13:06:25 -0800[diff] [blame]105ro.crypto. u:object_r:vold_prop:s0
Stephen Smalley124720a2012-04-04 10:11:16 -0400[diff] [blame]106
Nick Kralevichc48971f2014-11-18 14:36:23 -0800[diff] [blame]107# ro.build.fingerprint is either set in /system/build.prop, or is
108# set at runtime by system_server.
Tom Cherryf89847a2016-01-11 13:06:25 -0800[diff] [blame]109ro.build.fingerprint u:object_r:fingerprint_prop:s0
Nick Kralevichc48971f2014-11-18 14:36:23 -0800[diff] [blame]110
Keun-young Parkf67c3462017-02-28 19:21:31 -0800[diff] [blame]111ro.persistent_properties.ready u:object_r:persistent_properties_ready_prop:s0
112
Stephen Smalley124720a2012-04-04 10:11:16 -0400[diff] [blame]113# ctl properties
Robert Craig4b3893f2014-02-18 13:24:26 -0500[diff] [blame]114ctl.bootanim u:object_r:ctl_bootanim_prop:s0
Stephen Smalley124720a2012-04-04 10:11:16 -0400[diff] [blame]115ctl.dumpstate u:object_r:ctl_dumpstate_prop:s0
Robert Craig4b3893f2014-02-18 13:24:26 -0500[diff] [blame]116ctl.fuse_ u:object_r:ctl_fuse_prop:s0
117ctl.mdnsd u:object_r:ctl_mdnsd_prop:s0
Stephen Smalley124720a2012-04-04 10:11:16 -0400[diff] [blame]118ctl.ril-daemon u:object_r:ctl_rildaemon_prop:s0
Stephen Smalley1c0c0102014-03-06 14:47:22 -0500[diff] [blame]119ctl.bugreport u:object_r:ctl_bugreport_prop:s0
Jeff Vander Stoep8b015f92015-04-24 14:39:16 -0700[diff] [blame]120ctl.console u:object_r:ctl_console_prop:s0
Stephen Smalley124720a2012-04-04 10:11:16 -0400[diff] [blame]121ctl. u:object_r:ctl_default_prop:s0
Martijn Coenen9ac7df22014-09-25 15:13:41 -0700[diff] [blame]122
Tom Cherry7b8be352018-05-03 17:00:16 -0700[diff] [blame]123# Don't allow blind access to all services
124ctl.sigstop_on$ u:object_r:ctl_sigstop_prop:s0
125ctl.sigstop_off$ u:object_r:ctl_sigstop_prop:s0
126ctl.start$ u:object_r:ctl_start_prop:s0
127ctl.stop$ u:object_r:ctl_stop_prop:s0
128ctl.restart$ u:object_r:ctl_restart_prop:s0
129ctl.interface_start$ u:object_r:ctl_interface_start_prop:s0
130ctl.interface_stop$ u:object_r:ctl_interface_stop_prop:s0
131ctl.interface_restart$ u:object_r:ctl_interface_restart_prop:s0
132
Samuel Ha22f98192018-06-26 19:52:21 +0000[diff] [blame]133 # Restrict access to starting/stopping adbd
134ctl.start$adbd u:object_r:ctl_adbd_prop:s0
135ctl.stop$adbd u:object_r:ctl_adbd_prop:s0
136ctl.restart$adbd u:object_r:ctl_adbd_prop:s0
137
David Anderson64bbf052019-02-27 18:31:11 -0800[diff] [blame]138# Restrict access to starting/stopping gsid.
139ctl.start$gsid u:object_r:ctl_gsid_prop:s0
140ctl.stop$gsid u:object_r:ctl_gsid_prop:s0
141ctl.restart$gsid u:object_r:ctl_gsid_prop:s0
142
Jiyong Park6e823dd2019-06-13 09:45:05 +0900[diff] [blame]143# Restrict access to stopping apexd.
144ctl.stop$apexd u:object_r:ctl_apexd_prop:s0
145
Wei Wang046c5102019-07-17 09:39:33 -0700[diff] [blame]146# Restrict access to restart dumpstate
147ctl.interface_restart$android.hardware.dumpstate u:object_r:ctl_dumpstate_prop:s0
148
Martijn Coenen9ac7df22014-09-25 15:13:41 -0700[diff] [blame]149# NFC properties
150nfc. u:object_r:nfc_prop:s0
Stephen Smalley54e9bc42014-09-04 08:44:49 -0400[diff] [blame]151
152# These properties are not normally set by processes other than init.
153# They are only distinguished here for setting by qemu-props on the
154# emulator/goldfish.
155config. u:object_r:config_prop:s0
Tom Cherryf89847a2016-01-11 13:06:25 -0800[diff] [blame]156ro.config. u:object_r:config_prop:s0
Stephen Smalley54e9bc42014-09-04 08:44:49 -0400[diff] [blame]157dalvik. u:object_r:dalvik_prop:s0
Tom Cherryf89847a2016-01-11 13:06:25 -0800[diff] [blame]158ro.dalvik. u:object_r:dalvik_prop:s0
Christopher Wileybf18eca2016-06-29 11:28:20 -0700[diff] [blame]159
160# Shared between system server and wificond
161wlan. u:object_r:wifi_prop:s0
Iliyan Malchev96031a82016-09-19 15:23:41 -0700[diff] [blame]162
Dan Cashman91d398d2017-09-26 12:58:29 -0700[diff] [blame]163# Lowpan properties
164lowpan. u:object_r:lowpan_prop:s0
165ro.lowpan. u:object_r:lowpan_prop:s0
166
Florian Mayer0f3decf2018-11-08 13:58:13 +0000[diff] [blame]167# heapprofd properties
168heapprofd. u:object_r:heapprofd_prop:s0
169
Iliyan Malchev96031a82016-09-19 15:23:41 -0700[diff] [blame]170# hwservicemanager properties
171hwservicemanager. u:object_r:hwservicemanager_prop:s0
Jaekyun Seoke4971452017-10-19 16:54:49 +0900[diff] [blame]172
Jaekyun Seokafca82a2018-01-18 13:25:28 +0900[diff] [blame]173# Common default properties for vendor and odm.
174init.svc.odm. u:object_r:vendor_default_prop:s0
Jaekyun Seoke4971452017-10-19 16:54:49 +0900[diff] [blame]175init.svc.vendor. u:object_r:vendor_default_prop:s0
176ro.hardware. u:object_r:vendor_default_prop:s0
Jaekyun Seokafca82a2018-01-18 13:25:28 +0900[diff] [blame]177ro.odm. u:object_r:vendor_default_prop:s0
Jaekyun Seoke4971452017-10-19 16:54:49 +0900[diff] [blame]178ro.vendor. u:object_r:vendor_default_prop:s0
Jaekyun Seokafca82a2018-01-18 13:25:28 +0900[diff] [blame]179odm. u:object_r:vendor_default_prop:s0
180persist.odm. u:object_r:vendor_default_prop:s0
Jaekyun Seoke4971452017-10-19 16:54:49 +0900[diff] [blame]181persist.vendor. u:object_r:vendor_default_prop:s0
182vendor. u:object_r:vendor_default_prop:s0
Tom Cherry30dd7112018-10-23 13:25:05 -0700[diff] [blame]183# ro.boot. properties are set based on kernel commandline arguments, which are vendor owned.
184ro.boot. u:object_r:exported2_default_prop:s0
Neil Fullerb794ad02018-06-25 15:36:51 +0100[diff] [blame]185
186# Properties that relate to time / time zone detection behavior.
187persist.time. u:object_r:time_prop:s0
Hongyi Zhanga6f98922018-10-25 20:09:55 -0700[diff] [blame]188
189# Properties that relate to server configurable flags
Hongyi Zhangb965e3c2018-11-08 16:46:19 -0800[diff] [blame]190device_config.reset_performed u:object_r:device_config_reset_performed_prop:s0
Ng Zhi Anc5bf4a32019-01-17 13:30:05 -0800[diff] [blame]191persist.device_config.activity_manager_native_boot. u:object_r:device_config_activity_manager_native_boot_prop:s0
Hongyi Zhanga6f98922018-10-25 20:09:55 -0700[diff] [blame]192persist.device_config.attempted_boot_count u:object_r:device_config_boot_count_prop:s0
Siarhei Vishniakouc0c91552019-01-14 14:18:38 -0800[diff] [blame]193persist.device_config.input_native_boot. u:object_r:device_config_input_native_boot_prop:s0
chenbrucee3d625b2018-12-27 18:01:25 +0800[diff] [blame]194persist.device_config.netd_native. u:object_r:device_config_netd_native_prop:s0
Mathieu Chartier669cef82019-01-29 09:57:11 -0800[diff] [blame]195persist.device_config.runtime_native. u:object_r:device_config_runtime_native_prop:s0
Mathieu Chartier0327d102019-02-01 13:43:11 -0800[diff] [blame]196persist.device_config.runtime_native_boot. u:object_r:device_config_runtime_native_boot_prop:s0
Dongwon Kang523c7462019-01-30 15:28:31 -0800[diff] [blame]197persist.device_config.media_native. u:object_r:device_config_media_native_prop:s0
shafik55a54d32019-09-23 15:14:47 +0100[diff] [blame]198persist.device_config.storage_native_boot. u:object_r:device_config_storage_native_boot_prop:s0
Jiyong Parkb14c1a92018-11-08 11:24:34 +0900[diff] [blame]199
Hector Dearman0756dcc2019-04-05 16:41:30 +0100[diff] [blame]200# Properties that relate to legacy server configurable flags
201persist.device_config.global_settings.sys_traced u:object_r:device_config_sys_traced_prop:s0
202
Jiyong Parkb14c1a92018-11-08 11:24:34 +0900[diff] [blame]203apexd. u:object_r:apexd_prop:s0
Martijn Coenen97650f52019-01-09 12:04:03 +0100[diff] [blame]204persist.apexd. u:object_r:apexd_prop:s0
Joel Fernandesb76a6392019-01-11 08:32:45 -0500[diff] [blame]205
206bpf.progs_loaded u:object_r:bpf_progs_loaded_prop:s0
David Anderson8fe3c742019-02-07 13:14:20 -0800[diff] [blame]207
208gsid. u:object_r:gsid_prop:s0
209ro.gsid. u:object_r:gsid_prop:s0
Przemyslaw Szczepaniak62a22ce2019-04-02 15:34:16 +0100[diff] [blame]210
211# Property for disabling NNAPI vendor extensions on product image (used on GSI /product image,
212# which can't use NNAPI vendor extensions).
213ro.nnapi.extensions.deny_on_product u:object_r:nnapi_ext_deny_product_prop:s0
Tom Cherry2a67e942019-06-18 09:53:51 -0700[diff] [blame]214
215# Property that is set once ueventd finishes cold boot.
216ro.cold_boot_done u:object_r:cold_boot_done_prop:s0
Yifan Hong1145be12019-07-08 10:57:46 -0700[diff] [blame]217
218# Charger properties
219ro.charger. u:object_r:charger_prop:s0
Yifan Hong20010d12019-07-25 13:28:19 -0700[diff] [blame]220
221# Virtual A/B properties
222ro.virtual_ab.enabled u:object_r:virtual_ab_prop:s0
223ro.virtual_ab.retrofit u:object_r:virtual_ab_prop:s0
Tianjie Xuf5ddc042019-11-14 14:18:40 -0800[diff] [blame]224
225# Property to set/clear the warm reset flag after an OTA update.
226ota.warm_reset u:object_r:ota_prop:s0