file.te revision 3d98620ada80f5ca1d6395f2abe054b0aa82fa59 
1# Filesystem types
2type labeledfs, fs_type;
3type pipefs, fs_type;
4type sockfs, fs_type;
5type rootfs, fs_type;
6type proc, fs_type;
7type qtaguid_proc, fs_type, mlstrustedobject;
8type proc_bluetooth_writable, fs_type;
9type selinuxfs, fs_type;
10type cgroup, fs_type, mlstrustedobject;
11type sysfs, fs_type, mlstrustedobject;
12type sysfs_writable, fs_type, sysfs_type, mlstrustedobject;
13type sysfs_bluetooth_writable, fs_type, sysfs_type, mlstrustedobject;
14type sysfs_nfc_power_writable, fs_type, sysfs_type, mlstrustedobject;
15type inotify, fs_type, mlstrustedobject;
16type devpts, fs_type, mlstrustedobject;
17type tmpfs, fs_type;
18type shm, fs_type;
19type mqueue, fs_type;
20type sdcard_internal, sdcard_type, fs_type, mlstrustedobject;
21type sdcard_external, sdcard_type, fs_type, mlstrustedobject;
22type debugfs, fs_type, mlstrustedobject;
23
24# File types
25type unlabeled, file_type;
26# Default type for anything under /system.
27type system_file, file_type;
28# Default type for anything under /data.
29type system_data_file, file_type, data_file_type;
30# /data/drm - DRM plugin data
31type drm_data_file, file_type, data_file_type;
32# /data/anr - ANR traces
33type anr_data_file, file_type, data_file_type, mlstrustedobject;
34# /data/tombstones - core dumps
35type tombstone_data_file, file_type, data_file_type;
36# /data/app - user-installed apps
37type apk_data_file, file_type, data_file_type;
38type apk_tmp_file, file_type, data_file_type, mlstrustedobject;
39# /data/dalvik-cache
40type dalvikcache_data_file, file_type, data_file_type;
41# /data/local - writable by shell
42type shell_data_file, file_type, data_file_type;
43# /data/gps
44type gps_data_file, file_type, data_file_type;
45# /data/misc subdirectories
46type bluetoothd_data_file, file_type, data_file_type;
47type bluetooth_data_file, file_type, data_file_type;
48type keystore_data_file, file_type, data_file_type;
49type vpn_data_file, file_type, data_file_type;
50type systemkeys_data_file, file_type, data_file_type;
51type wifi_data_file, file_type, data_file_type;
52type radio_data_file, file_type, data_file_type;
53type nfc_data_file, file_type, data_file_type;
54type camera_calibration_file, file_type, data_file_type;
55# /data/data subdirectories - app sandboxes
56type app_data_file, file_type, data_file_type;
57type platform_app_data_file, file_type, data_file_type, mlstrustedobject;
58# Default type for anything under /cache
59type cache_file, file_type, mlstrustedobject;
60# Type for /cache/.*\.{data|restore} and default
61# type for anything under /cache/backup
62type cache_backup_file, file_type, mlstrustedobject;
63# Default type for anything under /efs
64type efs_file, file_type;
65# Type for wallpaper file.
66type wallpaper_file, file_type, mlstrustedobject;
67# /mnt/asec
68type asec_apk_file, file_type, data_file_type;
69# /data/app-asec
70type asec_image_file, file_type, data_file_type;
71# /data/backup and /data/secure/backup
72type backup_data_file, file_type, data_file_type, mlstrustedobject;
73# For /data/security
74type security_file, file_type;
75# All devices have bluetooth efs files. But they
76# vary per device, so this type is used in per
77# device policy
78type bluetooth_efs_file, file_type;
79# Downloaded files
80type download_file, file_type;
81
82# Socket types
83type adbd_socket, file_type;
84type bluetooth_socket, file_type;
85type dbus_socket, file_type;
86type dnsproxyd_socket, file_type, mlstrustedobject;
87type gps_socket, file_type;
88type installd_socket, file_type;
89type keystore_socket, file_type;
90type netd_socket, file_type;
91type property_socket, file_type;
92type qemud_socket, file_type;
93type racoon_socket, file_type;
94type rild_socket, file_type;
95type rild_debug_socket, file_type;
96type system_wpa_socket, file_type;
97type vold_socket, file_type;
98type wpa_socket, file_type;
99type zygote_socket, file_type;
100
101# UART (for GPS) control proc file
102type gps_control, file_type;
103
104# Allow files to be created in their appropriate filesystems.
105allow fs_type self:filesystem associate;
106allow sysfs_type sysfs:filesystem associate;
107allow file_type labeledfs:filesystem associate;
108allow file_type tmpfs:filesystem associate;
109allow dev_type tmpfs:filesystem associate;
110