Lines Matching refs:file
11 allow system_server dalvikcache_data_file:file execute;
17 allow system_server user_profile_data_file:file getattr;
19 allow system_server user_profile_foreign_dex_data_file:file { getattr rename unlink };
22 allow system_server resourcecache_data_file:file r_file_perms;
31 allow system_server zygote_tmpfs:file read;
37 allow system_server zygote_exec:file r_file_perms;
100 allow system_server qtaguid_proc:file rw_file_perms;
104 allow system_server proc_uid_cputime_showstat:file r_file_perms;
107 allow system_server proc_uid_cputime_removeuid:file { w_file_perms getattr };
110 allow system_server proc_sysrq:file rw_file_perms;
113 allow system_server debugfs:file r_file_perms;
186 allow system_server sysfs:file rw_file_perms;
187 allow system_server sysfs_nfc_power_writable:file rw_file_perms;
188 allow system_server sysfs_devices_system_cpu:file w_file_perms;
189 allow system_server sysfs_mac_address:file r_file_perms;
191 allow system_server sysfs_thermal:file r_file_perms;
194 allow system_server sysfs_usb:file w_file_perms;
223 allow system_server keychain_data_file:file create_file_perms;
227 allow system_server apk_data_file:file { create_file_perms link };
229 allow system_server apk_tmp_file:file create_file_perms;
233 allow system_server apk_private_data_file:file create_file_perms;
235 allow system_server apk_private_tmp_file:file create_file_perms;
239 allow system_server asec_apk_file:file create_file_perms;
240 allow system_server asec_public_file:file create_file_perms;
244 allow system_server anr_data_file:file create_file_perms;
248 allow system_server backup_data_file:file create_file_perms;
252 allow system_server heapdump_data_file:file create_file_perms;
256 allow system_server adb_keys_file:file create_file_perms;
261 allow system_server radio_data_file:file create_file_perms;
265 allow system_server systemkeys_data_file:file create_file_perms;
269 allow system_server tombstone_data_file:file r_file_perms;
273 allow system_server vpn_data_file:file create_file_perms;
277 allow system_server wifi_data_file:file create_file_perms;
281 allow system_server zoneinfo_data_file:file create_file_perms;
289 # Read pkg.apk file before it has been relabeled by vold.
290 allow system_server unlabeled:file r_file_perms;
294 allow system_server system_app_data_file:file create_file_perms;
298 …h_data_file nfc_data_file radio_data_file shell_data_file app_data_file }:file { getattr read writ…
301 allow system_server media_rw_data_file:file { getattr read write };
307 allow system_server { apk_tmp_file apk_private_tmp_file }:{ dir file } { relabelfrom relabelto };
308 allow system_server { apk_data_file apk_private_data_file }:{ dir file } { relabelfrom relabelto };
311 allow system_server system_data_file:file relabelfrom;
312 allow system_server wallpaper_file:file relabelto;
313 allow system_server wallpaper_file:file { rw_file_perms rename unlink };
316 allow system_server { system_data_file wallpaper_file }:file link;
321 allow system_server shortcut_manager_icons:file create_file_perms;
325 allow system_server ringtone_file:file create_file_perms;
327 # Relabel icon file.
328 allow system_server icon_file:file relabelto;
329 allow system_server icon_file:file { rw_file_perms unlink };
365 allow system_server { cache_file cache_recovery_file }:file { relabelfrom create_file_perms };
369 allow system_server system_file:file x_file_perms;
374 allow system_server gps_control:file rw_file_perms;
385 allow system_server cache_backup_file:file create_file_perms;
388 allow system_server cache_private_backup_file:file create_file_perms;
403 allow system_server fscklogs:file unlink;
415 allow system_server sysfs_lowmemorykiller:file { getattr w_file_perms };
419 # only one file in /sys/fs/pstore
421 allow system_server pstorefs:file r_file_perms;
425 allow system_server sysfs_zram:file r_file_perms;
490 allow system_server fingerprintd_data_file:file { getattr unlink };
493 allow system_server sysfs_mac_address:file r_file_perms;
498 allow system_server method_trace_data_file:file { create w_file_perms };
510 allow system_server configfs:file { getattr open unlink write };
524 allow system_server toolbox_exec:file rx_file_perms;
536 allow system_server preloads_data_file:file { r_file_perms unlink };
547 neverallow system_server sdcard_type:file rw_file_perms;
551 # file descriptor.
554 neverallow system_server { bluetooth_data_file nfc_data_file shell_data_file app_data_file }:file o…
558 # system server to dynamically load a dex file, something we do not
560 neverallow system_server dex2oat_exec:file no_x_file_perms;
566 }:file no_x_file_perms;
576 neverallow system_server system_server_tmpfs:file execute;