prebuilt_file_contexts 103 KB

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374757677787980818283848586878889909192939495969798991001011021031041051061071081091101111121131141151161171181191201211221231241251261271281291301311321331341351361371381391401411421431441451461471481491501511521531541551561571581591601611621631641651661671681691701711721731741751761771781791801811821831841851861871881891901911921931941951961971981992002012022032042052062072082092102112122132142152162172182192202212222232242252262272282292302312322332342352362372382392402412422432442452462472482492502512522532542552562572582592602612622632642652662672682692702712722732742752762772782792802812822832842852862872882892902912922932942952962972982993003013023033043053063073083093103113123133143153163173183193203213223233243253263273283293303313323333343353363373383393403413423433443453463473483493503513523533543553563573583593603613623633643653663673683693703713723733743753763773783793803813823833843853863873883893903913923933943953963973983994004014024034044054064074084094104114124134144154164174184194204214224234244254264274284294304314324334344354364374384394404414424434444454464474484494504514524534544554564574584594604614624634644654664674684694704714724734744754764774784794804814824834844854864874884894904914924934944954964974984995005015025035045055065075085095105115125135145155165175185195205215225235245255265275285295305315325335345355365375385395405415425435445455465475485495505515525535545555565575585595605615625635645655665675685695705715725735745755765775785795805815825835845855865875885895905915925935945955965975985996006016026036046056066076086096106116126136146156166176186196206216226236246256266276286296306316326336346356366376386396406416426436446456466476486496506516526536546556566576586596606616626636646656666676686696706716726736746756766776786796806816826836846856866876886896906916926936946956966976986997007017027037047057067077087097107117127137147157167177187197207217227237247257267277287297307317327337347357367377387397407417427437447457467477487497507517527537547557567577587597607617627637647657667677687697707717727737747757767777787797807817827837847857867877887897907917927937947957967977987998008018028038048058068078088098108118128138148158168178188198208218228238248258268278288298308318328338348358368378388398408418428438448458468478488498508518528538548558568578588598608618628638648658668678688698708718728738748758768778788798808818828838848858868878888898908918928938948958968978988999009019029039049059069079089099109119129139149159169179189199209219229239249259269279289299309319329339349359369379389399409419429439449459469479489499509519529539549559569579589599609619629639649659669679689699709719729739749759769779789799809819829839849859869879889899909919929939949959969979989991000100110021003100410051006100710081009101010111012101310141015101610171018101910201021102210231024102510261027102810291030103110321033103410351036103710381039104010411042104310441045104610471048104910501051105210531054105510561057105810591060106110621063106410651066106710681069107010711072107310741075107610771078107910801081108210831084108510861087108810891090109110921093109410951096109710981099110011011102110311041105110611071108110911101111111211131114111511161117111811191120112111221123112411251126112711281129113011311132113311341135113611371138113911401141114211431144114511461147114811491150115111521153115411551156115711581159116011611162116311641165116611671168116911701171117211731174117511761177117811791180118111821183118411851186118711881189119011911192119311941195119611971198119912001201120212031204120512061207120812091210121112121213121412151216121712181219122012211222122312241225122612271228122912301231123212331234123512361237123812391240124112421243124412451246124712481249125012511252125312541255125612571258125912601261126212631264126512661267126812691270127112721273127412751276127712781279128012811282128312841285128612871288128912901291129212931294129512961297129812991300130113021303130413051306130713081309131013111312131313141315131613171318131913201321132213231324132513261327132813291330133113321333133413351336133713381339134013411342134313441345134613471348134913501351135213531354135513561357135813591360136113621363136413651366136713681369137013711372137313741375137613771378137913801381138213831384138513861387138813891390139113921393139413951396139713981399140014011402140314041405140614071408140914101411141214131414141514161417141814191420142114221423142414251426142714281429143014311432143314341435143614371438143914401441144214431444144514461447144814491450145114521453145414551456145714581459146014611462146314641465146614671468146914701471147214731474147514761477147814791480148114821483148414851486148714881489149014911492149314941495149614971498149915001501150215031504150515061507150815091510151115121513151415151516151715181519152015211522152315241525152615271528152915301531153215331534153515361537153815391540154115421543154415451546154715481549155015511552155315541555155615571558155915601561156215631564156515661567156815691570157115721573157415751576157715781579158015811582158315841585158615871588158915901591159215931594159515961597159815991600160116021603160416051606160716081609161016111612161316141615161616171618161916201621162216231624162516261627162816291630163116321633163416351636163716381639164016411642164316441645164616471648164916501651165216531654165516561657165816591660166116621663166416651666166716681669167016711672167316741675167616771678167916801681168216831684168516861687168816891690169116921693169416951696169716981699170017011702170317041705170617071708170917101711171217131714171517161717171817191720172117221723172417251726172717281729173017311732173317341735173617371738173917401741174217431744174517461747174817491750175117521753175417551756175717581759176017611762176317641765176617671768176917701771177217731774177517761777177817791780178117821783178417851786178717881789179017911792179317941795179617971798179918001801180218031804180518061807180818091810181118121813181418151816181718181819182018211822182318241825182618271828182918301831183218331834183518361837183818391840184118421843184418451846184718481849185018511852185318541855185618571858185918601861186218631864186518661867186818691870187118721873187418751876187718781879188018811882188318841885188618871888188918901891189218931894189518961897189818991900190119021903190419051906190719081909191019111912191319141915191619171918191919201921192219231924192519261927192819291930193119321933193419351936193719381939194019411942194319441945194619471948194919501951195219531954195519561957195819591960196119621963196419651966196719681969197019711972197319741975197619771978197919801981198219831984198519861987198819891990199119921993199419951996199719981999200020012002200320042005
  1. #line 1 "external/sepolicy/file_contexts"
  2. ###########################################
  3. # Root
  4. / u:object_r:rootfs:s0
  5. # Data files
  6. /adb_keys u:object_r:adb_keys_file:s0
  7. /default\.prop u:object_r:rootfs:s0
  8. /fstab\..* u:object_r:rootfs:s0
  9. /init\..* u:object_r:rootfs:s0
  10. /res(/.*)? u:object_r:rootfs:s0
  11. /ueventd\..* u:object_r:rootfs:s0
  12. # Executables
  13. /charger u:object_r:rootfs:s0
  14. /init u:object_r:init_exec:s0
  15. /sbin(/.*)? u:object_r:rootfs:s0
  16. # Empty directories
  17. /lost\+found u:object_r:rootfs:s0
  18. /proc u:object_r:rootfs:s0
  19. # SELinux policy files
  20. /file_contexts u:object_r:rootfs:s0
  21. /property_contexts u:object_r:rootfs:s0
  22. /seapp_contexts u:object_r:rootfs:s0
  23. /sepolicy u:object_r:rootfs:s0
  24. ##########################
  25. # Devices
  26. #
  27. /dev(/.*)? u:object_r:device:s0
  28. /dev/akm8973.* u:object_r:sensors_device:s0
  29. /dev/accelerometer u:object_r:sensors_device:s0
  30. /dev/adf[0-9]* u:object_r:graphics_device:s0
  31. /dev/adf-interface[0-9]*\.[0-9]* u:object_r:graphics_device:s0
  32. /dev/adf-overlay-engine[0-9]*\.[0-9]* u:object_r:graphics_device:s0
  33. /dev/alarm u:object_r:alarm_device:s0
  34. /dev/android_adb.* u:object_r:adb_device:s0
  35. /dev/ashmem u:object_r:ashmem_device:s0
  36. /dev/audio.* u:object_r:audio_device:s0
  37. /dev/binder u:object_r:binder_device:s0
  38. /dev/block(/.*)? u:object_r:block_device:s0
  39. /dev/block/dm-[0-9]+ u:object_r:dm_device:s0
  40. /dev/block/loop[0-9]* u:object_r:loop_device:s0
  41. /dev/block/vold/.+ u:object_r:vold_device:s0
  42. /dev/block/ram[0-9]* u:object_r:ram_device:s0
  43. /dev/bus/usb(.*)? u:object_r:usb_device:s0
  44. /dev/cam u:object_r:camera_device:s0
  45. /dev/console u:object_r:console_device:s0
  46. /dev/cpuctl(/.*)? u:object_r:cpuctl_device:s0
  47. /dev/device-mapper u:object_r:dm_device:s0
  48. /dev/eac u:object_r:audio_device:s0
  49. /dev/fscklogs(/.*)? u:object_r:fscklogs:s0
  50. /dev/full u:object_r:full_device:s0
  51. /dev/fuse u:object_r:fuse_device:s0
  52. /dev/graphics(/.*)? u:object_r:graphics_device:s0
  53. /dev/hw_random u:object_r:hw_random_device:s0
  54. /dev/input(/.*) u:object_r:input_device:s0
  55. /dev/iio:device[0-9]+ u:object_r:iio_device:s0
  56. /dev/ion u:object_r:ion_device:s0
  57. /dev/kmem u:object_r:kmem_device:s0
  58. /dev/log(/.*)? u:object_r:log_device:s0
  59. /dev/mem u:object_r:kmem_device:s0
  60. /dev/modem.* u:object_r:radio_device:s0
  61. /dev/mpu u:object_r:gps_device:s0
  62. /dev/mpuirq u:object_r:gps_device:s0
  63. /dev/mtd(/.*)? u:object_r:mtd_device:s0
  64. /dev/mtp_usb u:object_r:mtp_device:s0
  65. /dev/pmsg0 u:object_r:pmsg_device:s0
  66. /dev/pn544 u:object_r:nfc_device:s0
  67. /dev/ppp u:object_r:ppp_device:s0
  68. /dev/ptmx u:object_r:ptmx_device:s0
  69. /dev/pvrsrvkm u:object_r:gpu_device:s0
  70. /dev/kmsg u:object_r:kmsg_device:s0
  71. /dev/null u:object_r:null_device:s0
  72. /dev/nvhdcp1 u:object_r:video_device:s0
  73. /dev/random u:object_r:random_device:s0
  74. /dev/rpmsg-omx[0-9] u:object_r:rpmsg_device:s0
  75. /dev/rproc_user u:object_r:rpmsg_device:s0
  76. /dev/rtc[0-9] u:object_r:rtc_device:s0
  77. /dev/snd(/.*)? u:object_r:audio_device:s0
  78. /dev/socket(/.*)? u:object_r:socket_device:s0
  79. /dev/socket/adbd u:object_r:adbd_socket:s0
  80. /dev/socket/sap_uim_socket[0-9] u:object_r:sap_uim_socket:s0
  81. /dev/socket/cryptd u:object_r:vold_socket:s0
  82. /dev/socket/dnsproxyd u:object_r:dnsproxyd_socket:s0
  83. /dev/socket/dumpstate u:object_r:dumpstate_socket:s0
  84. /dev/socket/fwmarkd u:object_r:fwmarkd_socket:s0
  85. /dev/socket/gps u:object_r:gps_socket:s0
  86. /dev/socket/installd u:object_r:installd_socket:s0
  87. /dev/socket/lmkd u:object_r:lmkd_socket:s0
  88. /dev/socket/logd u:object_r:logd_socket:s0
  89. /dev/socket/logdr u:object_r:logdr_socket:s0
  90. /dev/socket/logdw u:object_r:logdw_socket:s0
  91. /dev/socket/mdns u:object_r:mdns_socket:s0
  92. /dev/socket/mdnsd u:object_r:mdnsd_socket:s0
  93. /dev/socket/mtpd u:object_r:mtpd_socket:s0
  94. /dev/socket/netd u:object_r:netd_socket:s0
  95. /dev/socket/property_service u:object_r:property_socket:s0
  96. /dev/socket/racoon u:object_r:racoon_socket:s0
  97. /dev/socket/rild u:object_r:rild_socket:s0
  98. /dev/socket/rild-debug u:object_r:rild_debug_socket:s0
  99. /dev/socket/vold u:object_r:vold_socket:s0
  100. /dev/socket/wpa_eth[0-9] u:object_r:wpa_socket:s0
  101. /dev/socket/wpa_wlan[0-9] u:object_r:wpa_socket:s0
  102. /dev/socket/zygote u:object_r:zygote_socket:s0
  103. /dev/socket/zygote_secondary u:object_r:zygote_socket:s0
  104. /dev/spdif_out.* u:object_r:audio_device:s0
  105. /dev/tegra.* u:object_r:video_device:s0
  106. /dev/tf_driver u:object_r:tee_device:s0
  107. /dev/tty u:object_r:owntty_device:s0
  108. /dev/tty[0-9]* u:object_r:tty_device:s0
  109. /dev/ttyS[0-9]* u:object_r:serial_device:s0
  110. /dev/tun u:object_r:tun_device:s0
  111. /dev/uhid u:object_r:uhid_device:s0
  112. /dev/uinput u:object_r:uhid_device:s0
  113. /dev/uio[0-9]* u:object_r:uio_device:s0
  114. /dev/urandom u:object_r:urandom_device:s0
  115. /dev/usb_accessory u:object_r:usbaccessory_device:s0
  116. /dev/vcs[0-9a-z]* u:object_r:vcs_device:s0
  117. /dev/video[0-9]* u:object_r:video_device:s0
  118. /dev/watchdog u:object_r:watchdog_device:s0
  119. /dev/xt_qtaguid u:object_r:qtaguid_device:s0
  120. /dev/zero u:object_r:zero_device:s0
  121. /dev/__kmsg__ u:object_r:klog_device:s0
  122. /dev/__properties__ u:object_r:properties_device:s0
  123. #############################
  124. # System files
  125. #
  126. /system(/.*)? u:object_r:system_file:s0
  127. /system/bin/e2fsck -- u:object_r:fsck_exec:s0
  128. /system/bin/fsck\.f2fs -- u:object_r:fsck_exec:s0
  129. /system/bin/fsck_msdos -- u:object_r:fsck_exec:s0
  130. /system/bin/toolbox -- u:object_r:toolbox_exec:s0
  131. /system/bin/toybox -- u:object_r:toolbox_exec:s0
  132. /system/bin/logcat -- u:object_r:logcat_exec:s0
  133. /system/bin/sh -- u:object_r:shell_exec:s0
  134. /system/bin/run-as -- u:object_r:runas_exec:s0
  135. /system/bin/bootanimation u:object_r:bootanim_exec:s0
  136. /system/bin/app_process32 u:object_r:zygote_exec:s0
  137. /system/bin/app_process64 u:object_r:zygote_exec:s0
  138. /system/bin/servicemanager u:object_r:servicemanager_exec:s0
  139. /system/bin/surfaceflinger u:object_r:surfaceflinger_exec:s0
  140. /system/bin/drmserver u:object_r:drmserver_exec:s0
  141. /system/bin/dumpstate u:object_r:dumpstate_exec:s0
  142. /system/bin/vold u:object_r:vold_exec:s0
  143. /system/bin/netd u:object_r:netd_exec:s0
  144. /system/bin/rild u:object_r:rild_exec:s0
  145. /system/bin/mediaserver u:object_r:mediaserver_exec:s0
  146. /system/bin/mdnsd u:object_r:mdnsd_exec:s0
  147. /system/bin/installd u:object_r:installd_exec:s0
  148. /system/bin/keystore u:object_r:keystore_exec:s0
  149. /system/bin/fingerprintd u:object_r:fingerprintd_exec:s0
  150. /system/bin/gatekeeperd u:object_r:gatekeeperd_exec:s0
  151. /system/bin/debuggerd u:object_r:debuggerd_exec:s0
  152. /system/bin/debuggerd64 u:object_r:debuggerd_exec:s0
  153. /system/bin/wpa_supplicant u:object_r:wpa_exec:s0
  154. /system/bin/sdcard u:object_r:sdcardd_exec:s0
  155. /system/bin/dhcpcd u:object_r:dhcp_exec:s0
  156. /system/bin/mtpd u:object_r:mtp_exec:s0
  157. /system/bin/pppd u:object_r:ppp_exec:s0
  158. /system/bin/tf_daemon u:object_r:tee_exec:s0
  159. /system/bin/racoon u:object_r:racoon_exec:s0
  160. /system/xbin/su u:object_r:su_exec:s0
  161. /system/xbin/procrank u:object_r:procrank_exec:s0
  162. /system/xbin/perfprofd u:object_r:perfprofd_exec:s0
  163. /system/xbin/simpleperf u:object_r:system_file:s0
  164. /system/vendor/bin/gpsd u:object_r:gpsd_exec:s0
  165. /system/bin/dnsmasq u:object_r:dnsmasq_exec:s0
  166. /system/bin/hostapd u:object_r:hostapd_exec:s0
  167. /system/bin/clatd u:object_r:clatd_exec:s0
  168. /system/bin/lmkd u:object_r:lmkd_exec:s0
  169. /system/bin/inputflinger u:object_r:inputflinger_exec:s0
  170. /system/bin/logd u:object_r:logd_exec:s0
  171. /system/bin/uncrypt u:object_r:uncrypt_exec:s0
  172. /system/bin/logwrapper u:object_r:system_file:s0
  173. /system/bin/vdc u:object_r:vdc_exec:s0
  174. /system/bin/install-recovery.sh u:object_r:install_recovery_exec:s0
  175. /system/bin/dex2oat u:object_r:dex2oat_exec:s0
  176. # patchoat executable has (essentially) the same requirements as dex2oat.
  177. /system/bin/patchoat u:object_r:dex2oat_exec:s0
  178. /system/bin/sgdisk u:object_r:sgdisk_exec:s0
  179. /system/bin/blkid u:object_r:blkid_exec:s0
  180. /system/bin/tzdatacheck u:object_r:tzdatacheck_exec:s0
  181. #############################
  182. # Vendor files
  183. #
  184. /vendor(/.*)? u:object_r:system_file:s0
  185. /vendor/bin/gpsd u:object_r:gpsd_exec:s0
  186. #############################
  187. # OEM and ODM files
  188. #
  189. /odm(/.*)? u:object_r:system_file:s0
  190. /oem(/.*)? u:object_r:oemfs:s0
  191. #############################
  192. # Data files
  193. #
  194. # NOTE: When modifying existing label rules, changes may also need to
  195. # propagate to the "Expanded data files" section.
  196. #
  197. /data(/.*)? u:object_r:system_data_file:s0
  198. /data/.layout_version u:object_r:install_data_file:s0
  199. /data/unencrypted(/.*)? u:object_r:unencrypted_data_file:s0
  200. /data/backup(/.*)? u:object_r:backup_data_file:s0
  201. /data/secure/backup(/.*)? u:object_r:backup_data_file:s0
  202. /data/security(/.*)? u:object_r:security_file:s0
  203. /data/system/ndebugsocket u:object_r:system_ndebug_socket:s0
  204. /data/drm(/.*)? u:object_r:drm_data_file:s0
  205. /data/gps(/.*)? u:object_r:gps_data_file:s0
  206. /data/resource-cache(/.*)? u:object_r:resourcecache_data_file:s0
  207. /data/dalvik-cache(/.*)? u:object_r:dalvikcache_data_file:s0
  208. /data/dalvik-cache/profiles(/.*)? u:object_r:dalvikcache_profiles_data_file:s0
  209. /data/adb(/.*)? u:object_r:adb_data_file:s0
  210. /data/anr(/.*)? u:object_r:anr_data_file:s0
  211. /data/app(/.*)? u:object_r:apk_data_file:s0
  212. /data/app/[^/]+/oat(/.*)? u:object_r:dalvikcache_data_file:s0
  213. /data/app/vmdl[^/]+\.tmp(/.*)? u:object_r:apk_tmp_file:s0
  214. /data/app/vmdl[^/]+\.tmp/oat(/.*)? u:object_r:dalvikcache_data_file:s0
  215. /data/app-private(/.*)? u:object_r:apk_private_data_file:s0
  216. /data/app-private/vmdl.*\.tmp(/.*)? u:object_r:apk_private_tmp_file:s0
  217. /data/tombstones(/.*)? u:object_r:tombstone_data_file:s0
  218. /data/local/tmp(/.*)? u:object_r:shell_data_file:s0
  219. /data/media(/.*)? u:object_r:media_rw_data_file:s0
  220. /data/mediadrm(/.*)? u:object_r:media_data_file:s0
  221. /data/property(/.*)? u:object_r:property_data_file:s0
  222. # Misc data
  223. /data/misc/adb(/.*)? u:object_r:adb_keys_file:s0
  224. /data/misc/audio(/.*)? u:object_r:audio_data_file:s0
  225. /data/misc/bluetooth(/.*)? u:object_r:bluetooth_data_file:s0
  226. /data/misc/bluedroid(/.*)? u:object_r:bluetooth_data_file:s0
  227. /data/misc/bluedroid/\.a2dp_ctrl u:object_r:bluetooth_socket:s0
  228. /data/misc/bluedroid/\.a2dp_data u:object_r:bluetooth_socket:s0
  229. /data/misc/camera(/.*)? u:object_r:camera_data_file:s0
  230. /data/misc/dhcp(/.*)? u:object_r:dhcp_data_file:s0
  231. /data/misc/gatekeeper(/.*)? u:object_r:gatekeeper_data_file:s0
  232. /data/misc/keychain(/.*)? u:object_r:keychain_data_file:s0
  233. /data/misc/keystore(/.*)? u:object_r:keystore_data_file:s0
  234. /data/misc/logd(/.*)? u:object_r:misc_logd_file:s0
  235. /data/misc/media(/.*)? u:object_r:media_data_file:s0
  236. /data/misc/net(/.*)? u:object_r:net_data_file:s0
  237. /data/misc/shared_relro(/.*)? u:object_r:shared_relro_file:s0
  238. /data/misc/sms(/.*)? u:object_r:radio_data_file:s0
  239. /data/misc/systemkeys(/.*)? u:object_r:systemkeys_data_file:s0
  240. /data/misc/user(/.*)? u:object_r:misc_user_data_file:s0
  241. /data/misc/vpn(/.*)? u:object_r:vpn_data_file:s0
  242. /data/misc/wifi(/.*)? u:object_r:wifi_data_file:s0
  243. /data/misc/wifi/sockets(/.*)? u:object_r:wpa_socket:s0
  244. /data/misc/wifi/sockets/wpa_ctrl.* u:object_r:system_wpa_socket:s0
  245. /data/misc/wifi/hostapd(/.*)? u:object_r:wpa_socket:s0
  246. /data/misc/zoneinfo(/.*)? u:object_r:zoneinfo_data_file:s0
  247. /data/misc/vold(/.*)? u:object_r:vold_data_file:s0
  248. /data/misc/perfprofd(/.*)? u:object_r:perfprofd_data_file:s0
  249. /data/system/heapdump(/.*)? u:object_r:heapdump_data_file:s0
  250. # Fingerprint data
  251. /data/system/users/[0-9]+/fpdata(/.*)? u:object_r:fingerprintd_data_file:s0
  252. # Bootchart data
  253. /data/bootchart(/.*)? u:object_r:bootchart_data_file:s0
  254. #############################
  255. # Expanded data files
  256. #
  257. /mnt/expand(/.*)? u:object_r:mnt_expand_file:s0
  258. /mnt/expand/[^/]+(/.*)? u:object_r:system_data_file:s0
  259. /mnt/expand/[^/]+/app(/.*)? u:object_r:apk_data_file:s0
  260. /mnt/expand/[^/]+/app/[^/]+/oat(/.*)? u:object_r:dalvikcache_data_file:s0
  261. /mnt/expand/[^/]+/app/vmdl[^/]+\.tmp(/.*)? u:object_r:apk_tmp_file:s0
  262. /mnt/expand/[^/]+/app/vmdl[^/]+\.tmp/oat(/.*)? u:object_r:dalvikcache_data_file:s0
  263. /mnt/expand/[^/]+/local/tmp(/.*)? u:object_r:shell_data_file:s0
  264. /mnt/expand/[^/]+/media(/.*)? u:object_r:media_rw_data_file:s0
  265. /mnt/expand/[^/]+/misc/vold(/.*)? u:object_r:vold_data_file:s0
  266. # coredump directory for userdebug/eng devices
  267. /cores(/.*)? u:object_r:coredump_file:s0
  268. # Wallpaper file for other users
  269. /data/system/users/[0-9]+/wallpaper u:object_r:wallpaper_file:s0
  270. #############################
  271. # efs files
  272. #
  273. /efs(/.*)? u:object_r:efs_file:s0
  274. #############################
  275. # Cache files
  276. #
  277. /cache(/.*)? u:object_r:cache_file:s0
  278. /cache/.*\.data u:object_r:cache_backup_file:s0
  279. /cache/.*\.restore u:object_r:cache_backup_file:s0
  280. # LocalTransport (backup) uses this directory
  281. /cache/backup(/.*)? u:object_r:cache_backup_file:s0
  282. #############################
  283. # sysfs files
  284. #
  285. /sys/devices/platform/nfc-power/nfc_power -- u:object_r:sysfs_nfc_power_writable:s0
  286. /sys/devices/system/cpu(/.*)? u:object_r:sysfs_devices_system_cpu:s0
  287. /sys/power/wake_lock -- u:object_r:sysfs_wake_lock:s0
  288. /sys/power/wake_unlock -- u:object_r:sysfs_wake_lock:s0
  289. /sys/kernel/uevent_helper -- u:object_r:usermodehelper:s0
  290. /sys/module/lowmemorykiller(/.*)? -- u:object_r:sysfs_lowmemorykiller:s0
  291. #############################
  292. # asec containers
  293. /mnt/asec(/.*)? u:object_r:asec_apk_file:s0
  294. /mnt/asec/[^/]+/[^/]+\.zip u:object_r:asec_public_file:s0
  295. /mnt/asec/[^/]+/lib(/.*)? u:object_r:asec_public_file:s0
  296. /data/app-asec(/.*)? u:object_r:asec_image_file:s0
  297. #############################
  298. # external storage
  299. /mnt/media_rw(/.*)? u:object_r:mnt_media_rw_file:s0
  300. /mnt/user(/.*)? u:object_r:mnt_user_file:s0
  301. /mnt/runtime(/.*)? u:object_r:storage_file:s0
  302. /storage(/.*)? u:object_r:storage_file:s0
  303. #############################
  304. # MISC partition file
  305. #
  306. /hidden(/.*)? u:object_r:hidden_file:s0
  307. /persdata(/.*)? u:object_r:persdata_data_file:s0
  308. /persist(/.*)? u:object_r:persist_data_file:s0
  309. /preload(/.*)? u:object_r:hidden_file:s0
  310. /tombstone(/.*)? u:object_r:tombstone_data_file:s0
  311. /tombstones(/.*)? u:object_r:tombstone_data_file:s0
  312. #line 1 "vendor/samsung/common/sepolicy/sec_common/file_contexts"
  313. #ipm service
  314. /system/bin/ipm u:object_r:ipm_exec:s0
  315. /data/system/ipm(/.*)? u:object_r:ipm_data_file:s0
  316. /system/bin/ftt_ctrld u:object_r:ftt_ctrld_exec:s0
  317. #############################
  318. # Device node
  319. #
  320. /dev/ftt_ctrl u:object_r:ftt_ctrl_device:s0
  321. #line 1 "vendor/samsung/common/sepolicy/BSP/bsp_qcom_v2/bsp/common/file_contexts"
  322. ###################################
  323. # Dev nodes
  324. #
  325. /dev/adsprpc-smd u:object_r:qdsp_device:s0
  326. /dev/cpu_dma_latency u:object_r:device_latency:s0
  327. /dev/diag u:object_r:diag_device:s0
  328. /dev/hsicctl.* u:object_r:hsic_device:s0
  329. /dev/kgsl-3d0 u:object_r:gpu_device:s0
  330. /dev/mhi_pipe_.* u:object_r:mhi_device:s0
  331. /dev/bhi u:object_r:bhi_device:s0
  332. /dev/msm_.* u:object_r:audio_device:s0
  333. ##SEC removed dup context : /dev/usf1 u:object_r:usf_device:s0
  334. /dev/msm_dsps u:object_r:sensors_device:s0
  335. /dev/msm_thermal_query u:object_r:thermal_device:s0
  336. /dev/nfc-nci u:object_r:nfc_device:s0
  337. /dev/nq-nci u:object_r:nfc_device:s0
  338. #SEC use qseecom_device, not tee_device. neverallow Google CTS-android-5.0.2_r1 :
  339. /dev/qseecom u:object_r:qseecom_device:s0
  340. /dev/seemplog u:object_r:seemplog_device:s0
  341. /dev/radio0 u:object_r:fm_radio_device:s0
  342. ##SEC removed dup context : /dev/rtc0 u:object_r:rtc_device:s0
  343. /dev/sensors u:object_r:sensors_device:s0
  344. /dev/smd.* u:object_r:smd_device:s0
  345. /dev/smem_log u:object_r:smem_log_device:s0
  346. /dev/ttyHSL0 u:object_r:console_device:s0
  347. /dev/ttyHS[0-9]* u:object_r:serial_device:s0
  348. /dev/ttyGS0 u:object_r:gadget_serial_device:s0
  349. /dev/usb_ext_chg u:object_r:hvdcp_device:s0
  350. /dev/media([0-9])+ u:object_r:camera_device:s0
  351. /dev/jpeg[0-9]* u:object_r:camera_device:s0
  352. /dev/v4l-subdev.* u:object_r:camera_device:s0
  353. /dev/vm_bms u:object_r:vm_bms_device:s0
  354. /dev/battery_data u:object_r:battery_data_device:s0
  355. ##SEC removed dup context : /dev/block/mmcblk1 u:object_r:sd_device:s0
  356. ##SEC removed dup context : /dev/block/mmcblk1p1 u:object_r:sd_device:s0
  357. /dev/ccid_bridge u:object_r:usb_uicc_device:s0
  358. /dev/subsys_.* u:object_r:ssr_device:s0
  359. /dev/ramdump_.* u:object_r:ramdump_device:s0
  360. /dev/esoc.* u:object_r:esoc_device:s0
  361. /dev/ks_hsic_bridge u:object_r:ksbridgehsic_device:s0
  362. /dev/efs_hsic_bridge u:object_r:efsbridgehsic_device:s0
  363. /dev/ipa u:object_r:ipa_dev:s0
  364. /dev/wwan_ioctl u:object_r:ipa_dev:s0
  365. /dev/ipaNatTable u:object_r:ipa_dev:s0
  366. /dev/rmnet_ctrl.* u:object_r:rmnet_device:s0
  367. /dev/dpl_ctrl u:object_r:rmnet_device:s0
  368. /dev/wcnss_ctrl u:object_r:wcnss_device:s0
  369. /dev/wcnss_wlan u:object_r:wcnss_device:s0
  370. ##SEC removed dup context : /dev/pta u:object_r:pta_device:s0
  371. /dev/mdss_rotator u:object_r:graphics_device:s0
  372. /dev/hbtp_input u:object_r:hbtp_device:s0
  373. /dev/hbtp_vm u:object_r:hbtp_device:s0
  374. /dev/jdi-bu21150 u:object_r:bu21150_device:s0
  375. /dev/voice_svc u:object_r:voice_device:s0
  376. /dev/avtimer u:object_r:avtimer_device:s0
  377. ##SEC removed dup context : /dev/coresight-stm u:object_r:qdss_device:s0
  378. ##SEC removed dup context : /dev/coresight-tmc-etf u:object_r:qdss_device:s0
  379. ##SEC removed dup context : /dev/coresight-tmc-etr u:object_r:qdss_device:s0
  380. ##SEC removed dup context : /dev/coresight-tmc-etr-stream u:object_r:qdss_device:s0
  381. /dev/system_health_monitor u:object_r:system_health_monitor_device:s0
  382. /dev/qce u:object_r:qce_device:s0
  383. /dev/msm-rng u:object_r:rng_device:s0
  384. /dev/qbt1000 u:object_r:qbt1000_device:s0
  385. /dev/at_.* u:object_r:at_device:s0
  386. /dev/sg.* u:object_r:sg_device:s0
  387. ###################################
  388. # Dev block nodes
  389. #
  390. /dev/block/bootdevice/by-name/modemst1 u:object_r:modem_efs_partition_device:s0
  391. /dev/block/bootdevice/by-name/modemst2 u:object_r:modem_efs_partition_device:s0
  392. /dev/block/bootdevice/by-name/fsg u:object_r:modem_efs_partition_device:s0
  393. /dev/block/bootdevice/by-name/fsc u:object_r:modem_efs_partition_device:s0
  394. /dev/block/bootdevice/by-name/ssd u:object_r:ssd_device:s0
  395. /dev/block/bootdevice/by-name/misc u:object_r:misc_partition:s0
  396. #/dev/block/mmcblk0p13 u:object_r:bootselect_device:s0
  397. ##SEC removed dup context : /dev/block/zram0 u:object_r:swap_block_device:s0
  398. /dev/block/bootdevice/by-name/dip u:object_r:dip_device:s0
  399. /dev/block/bootdevice/by-name/mdtp u:object_r:mdtp_device:s0
  400. ###################################
  401. # Dev socket nodes
  402. #
  403. /dev/socket/qmux_audio(/.*)? u:object_r:qmuxd_socket:s0
  404. /dev/socket/qmux_bluetooth(/.*)? u:object_r:qmuxd_socket:s0
  405. /dev/socket/qmux_gps(/.*)? u:object_r:qmuxd_socket:s0
  406. /dev/socket/qmux_radio(/.*)? u:object_r:qmuxd_socket:s0
  407. /dev/socket/qmux_nfc(/.*)? u:object_r:qmuxd_socket:s0
  408. /dev/socket/netmgr(/.*)? u:object_r:netmgrd_socket:s0
  409. /dev/socket/sensor_ctl_socket u:object_r:sensors_socket:s0
  410. /dev/socket/cnd u:object_r:cnd_socket:s0
  411. /dev/socket/nims u:object_r:cnd_socket:s0
  412. /dev/socket/thermal-send-client u:object_r:thermal_socket:s0
  413. /dev/socket/thermal-recv-client u:object_r:thermal_socket:s0
  414. /dev/socket/thermal-recv-passive-client u:object_r:thermal_socket:s0
  415. /dev/socket/ims_qmid u:object_r:ims_socket:s0
  416. /dev/socket/ims_datad u:object_r:ims_socket:s0
  417. /dev/socket/ims_rtpd u:object_r:ims_socket:s0
  418. /dev/socket/perfd(/.*)? u:object_r:mpctl_socket:s0
  419. /dev/socket/qlogd u:object_r:qlogd_socket:s0
  420. /dev/socket/ipacm_log_file u:object_r:ipacm_socket:s0
  421. /dev/socket/dpmd u:object_r:dpmd_socket:s0
  422. /dev/socket/dpmwrapper u:object_r:dpmwrapper_socket:s0
  423. /dev/socket/pps u:object_r:pps_socket:s0
  424. /dev/socket/rild2 u:object_r:rild_socket:s0
  425. /dev/socket/rild2-debug u:object_r:rild_debug_socket:s0
  426. /dev/socket/rild-debug2 u:object_r:rild_debug_socket:s0
  427. /dev/socket/rild3 u:object_r:rild_socket:s0
  428. /dev/socket/rild3-debug u:object_r:rild_debug_socket:s0
  429. /dev/socket/rild-debug3 u:object_r:rild_debug_socket:s0
  430. /dev/socket/msm_irqbalance u:object_r:msm_irqbalance_socket:s0
  431. /dev/socket/seempdw u:object_r:seempdw_socket:s0
  432. ###################################
  433. # System files
  434. #
  435. /system/bin/ATFWD-daemon u:object_r:atfwd_exec:s0
  436. /system/bin/PktRspTest u:object_r:diag_exec:s0
  437. /system/bin/audiod u:object_r:audiod_exec:s0
  438. /system/bin/charger_monitor u:object_r:charger_monitor_exec:s0
  439. /system/bin/hvdcp_opti u:object_r:hvdcp_exec:s0
  440. /system/bin/cnd u:object_r:cnd_exec:s0
  441. /system/bin/diag_callback_client u:object_r:diag_exec:s0
  442. /system/bin/diag_dci_sample u:object_r:diag_exec:s0
  443. /system/bin/diag_klog u:object_r:diag_exec:s0
  444. /system/bin/diag_mdlog u:object_r:qlogd_exec:s0
  445. /system/bin/diag_qshrink4_daemon u:object_r:diag_exec:s0
  446. /system/bin/diag_socket_log u:object_r:diag_exec:s0
  447. /system/bin/diag_uart_log u:object_r:diag_exec:s0
  448. /system/bin/diag_buffering_test u:object_r:diag_exec:s0
  449. /system/bin/drmdiagapp u:object_r:diag_exec:s0
  450. /system/bin/irsc_util u:object_r:irsc_util_exec:s0
  451. /system/vendor/bin/mm-pp-daemon u:object_r:mm-pp-daemon_exec:s0
  452. /system/vendor/bin/mm-pp-dpps u:object_r:mm-pp-daemon_exec:s0
  453. /system/bin/mm-pp-daemon u:object_r:mm-pp-daemon_exec:s0
  454. /system/bin/mm-pp-dpps u:object_r:mm-pp-daemon_exec:s0
  455. /system/bin/mmi u:object_r:mmi_exec:s0
  456. /system/bin/mpdecision u:object_r:mpdecision_exec:s0
  457. /system/vendor/bin/perfd u:object_r:perfd_exec:s0
  458. /system/bin/iop u:object_r:dumpstate_exec:s0
  459. /system/bin/msm_irqbalance u:object_r:msm_irqbalanced_exec:s0
  460. /system/bin/imsdatadaemon u:object_r:ims_exec:s0
  461. /system/bin/imsqmidaemon u:object_r:ims_exec:s0
  462. /system/bin/ims_rtp_daemon u:object_r:ims_exec:s0
  463. /system/bin/imscmservice u:object_r:imscm_exec:s0
  464. /system/bin/netmgrd u:object_r:netmgrd_exec:s0
  465. /system/bin/qmuxd u:object_r:qmuxd_exec:s0
  466. /system/bin/port-bridge u:object_r:port-bridge_exec:s0
  467. /system/bin/sensors.qcom u:object_r:sensors_exec:s0
  468. ##SEC removed ambigious contexts:/system/bin/sns.* u:object_r:sensors_test_exec:s0
  469. /system/bin/test_diag u:object_r:diag_exec:s0
  470. /system/vendor/bin/thermal-engine u:object_r:thermal-engine_exec:s0
  471. /system/bin/vm_bms u:object_r:vm_bms_exec:s0
  472. /system/bin/mm-qcamera-daemon u:object_r:mm-qcamerad_exec:s0
  473. /system/bin/qfp-daemon u:object_r:qfp-daemon_exec:s0
  474. /system/rfs.* u:object_r:rfs_system_file:s0
  475. /system/bin/time_daemon u:object_r:time_daemon_exec:s0
  476. /system/bin/rmt_storage u:object_r:rmt_storage_exec:s0
  477. /system/bin/rfs_access u:object_r:rfs_access_exec:s0
  478. /system/bin/tftp_server u:object_r:rfs_access_exec:s0
  479. /system/bin/hvdcp u:object_r:hvdcp_exec:s0
  480. /system/bin/qseecomd u:object_r:tee_exec:s0
  481. /system/bin/hostapd_cli u:object_r:hostapd_exec:s0
  482. /system/bin/adsprpcd u:object_r:adsprpcd_exec:s0
  483. /system/bin/wpa_cli u:object_r:wcnss_service_exec:s0
  484. /system/bin/cnss-daemon u:object_r:wcnss_service_exec:s0
  485. /system/bin/mdm_helper u:object_r:mdm_helper_exec:s0
  486. /system/bin/mdm_helper_proxy u:object_r:mdm_helper_exec:s0
  487. /system/bin/ks u:object_r:mdm_helper_exec:s0
  488. /system/bin/pm-service u:object_r:per_mgr_exec:s0
  489. /system/bin/pm-proxy u:object_r:per_mgr_exec:s0
  490. /system/vendor/bin/pd-mapper u:object_r:pd_mapper_exec:s0
  491. /system/vendor/bin/pd-api-test u:object_r:pd_mapper_exec:s0
  492. /system/bin/usb_uicc_client u:object_r:usb_uicc_daemon_exec:s0
  493. /system/bin/qcom-system-daemon u:object_r:qcomsysd_exec:s0
  494. /system/xbin/qlogd u:object_r:qlogd_exec:s0
  495. /system/bin/ipacm u:object_r:ipacm_exec:s0
  496. /system/bin/ipacm-diag u:object_r:ipacm-diag_exec:s0
  497. /system/bin/dpmd u:object_r:dpmd_exec:s0
  498. /system/bin/ssr_setup u:object_r:ssr_setup_exec:s0
  499. /system/bin/subsystem_ramdump u:object_r:subsystem_ramdump_exec:s0
  500. /system/bin/ssr_diag u:object_r:ssr_diag_exec:s0
  501. /system/bin/loc_launcher u:object_r:location_exec:s0
  502. /system/bin/quipc_main u:object_r:location_exec:s0
  503. /system/bin/ipepb u:object_r:location_exec:s0
  504. /system/bin/quipc_igsn u:object_r:location_exec:s0
  505. /system/bin/lowi-server u:object_r:location_exec:s0
  506. /system/bin/location-mq u:object_r:location_exec:s0
  507. /system/bin/xtwifi-inet-agent u:object_r:location_exec:s0
  508. /system/bin/xtwifi-client u:object_r:location_exec:s0
  509. /system/bin/garden_app u:object_r:location_exec:s0
  510. /system/bin/gpsone_daemon u:object_r:location_exec:s0
  511. /system/vendor/bin/slim_daemon u:object_r:location_exec:s0
  512. ##SEC removed dup context : /system/bin/energy-awareness u:object_r:energyawareness_exec:s0
  513. /system/vendor/bin/fidodaemon u:object_r:fidodaemon_exec:s0
  514. /system/bin/secotad u:object_r:secotad_exec:s0
  515. /system/vendor/bin/qseeproxydaemon u:object_r:qseeproxy_exec:s0
  516. /system/bin/dts_configurator u:object_r:dtsconfigurator_exec:s0
  517. /system/bin/dts_eagle_service u:object_r:dtseagleservice_exec:s0
  518. /system/vendor/bin/qti u:object_r:qti_exec:s0
  519. /system/bin/wcnss_service u:object_r:wcnss_service_exec:s0
  520. /system/vendor/bin/hbtp_daemon u:object_r:hbtp_exec:s0
  521. /system/vendor/bin/touch_fusion u:object_r:touchfusion_exec:s0
  522. /system/vendor/bin/seemp_healthd u:object_r:seemp_health_daemon_exec:s0
  523. # SEC added : cld-fwlog-netlink
  524. /system/bin/cld-fwlog-netlink u:object_r:wcnss_service_exec:s0
  525. /system/bin/seempd u:object_r:seempd_exec:s0
  526. /system/bin/sapd u:object_r:sapd_exec:s0
  527. /system/bin/btnvtool u:object_r:btnvtool_exec:s0
  528. /system/bin/btsnoop u:object_r:btsnoop_exec:s0
  529. /system/bin/dun-server u:object_r:dun-server_exec:s0
  530. /system/bin/wfdservice u:object_r:wfdservice_exec:s0
  531. ## SEC changed exec type due to BT error : /system/bin/wcnss_filter u:object_r:wcnss_filter_exec:s0
  532. /system/bin/wcnss_filter u:object_r:wcnss_service_exec:s0
  533. /system/bin/usf_epos u:object_r:usf_exec:s0
  534. /system/bin/usf_gesture u:object_r:usf_exec:s0
  535. /system/bin/usf_hovering u:object_r:usf_exec:s0
  536. /system/bin/usf_p2p u:object_r:usf_exec:s0
  537. /system/bin/usf_proximity u:object_r:usf_exec:s0
  538. /system/bin/usf_sync_gesture u:object_r:usf_exec:s0
  539. /system/bin/usf_sw_calib u:object_r:usf_exec:s0
  540. /system/bin/usf_pairing u:object_r:usf_exec:s0
  541. /system/bin/usf_tester u:object_r:usf_exec:s0
  542. /system/vendor/bin/RIDLClient.exe u:object_r:RIDL_exec:s0
  543. /system/bin/tbaseLoader u:object_r:tbaseLoader_exec:s0
  544. /system/bin/mcStarter u:object_r:mcStarter_exec:s0
  545. /system/bin/fstman u:object_r:fstman_exec:s0
  546. /system/vendor/bin/mdtp_service u:object_r:mdtpdaemon_exec:s0
  547. /system/vendor/bin/mdtpd u:object_r:mdtpdaemon_exec:s0
  548. /system/bin/tloc_daemon u:object_r:tlocd_exec:s0
  549. ###################################
  550. # sysfs files
  551. #
  552. # SEC Remove dup contexts, /sys/class/graphics/fb0/mdp/caps u:object_r:sysfs_graphics:s0
  553. /sys/class/thermal(/.*)? u:object_r:sysfs_thermal:s0
  554. #/sys/devices/[^/]+bcl[^/]+(/.*)? u:object_r:sysfs_thermal:s0
  555. # this code increase the booting time. so SEC changes from [^/]+bcl[^/]+(/.*)? to qcom,bcl.*(/.*)?
  556. /sys/devices/qcom,bcl.*(/.*)? u:object_r:sysfs_thermal:s0
  557. # SEC Remove to cover class symlink /sys/devices/f9200000.*/power_supply/usb(/.*)? u:object_r:sysfs_usb_supply:s0
  558. # SEC Remove to cover class symlink /sys/devices/msm_dwc3/power_supply/usb(/.*)? u:object_r:sysfs_usb_supply:s0
  559. # SEC Remove to cover class symlink /sys/devices/msm_otg/power_supply/usb(/.*)? u:object_r:sysfs_usb_supply:s0
  560. /sys/devices/platform/battery_current_limit u:object_r:sysfs_thermal:s0
  561. # SEC Remove to cover class symlink /sys/devices/qpnp-charger.*/power_supply/battery(/.*)? u:object_r:sysfs_battery_supply:s0
  562. /sys/devices/system/cpu/cpu0/rq-stats/* u:object_r:sysfs_rqstats:s0
  563. # SEC Remove to cover class symlink /sys/devices/virtual/graphics/fb([0-2])+/idle_time u:object_r:sysfs_graphics:s0
  564. # SEC Remove to cover class symlink /sys/devices/virtual/graphics/fb([0-2])+/dynamic_fps u:object_r:sysfs_graphics:s0
  565. # SEC Remove to cover class symlink /sys/devices/virtual/graphics/fb([0-2])+/product_description u:object_r:sysfs_graphics:s0
  566. # SEC Remove to cover class symlink /sys/devices/virtual/graphics/fb([0-2])+/vendor_name u:object_r:sysfs_graphics:s0
  567. # SEC Remove to cover class symlink /sys/devices/virtual/graphics/fb([0-2])+/hdcp/tp u:object_r:sysfs_graphics:s0
  568. /sys/devices/virtual/hsicctl/hsicctl1[0-9]/modem_wait u:object_r:sysfs_hsic_modem_wait:s0
  569. /sys/devices/virtual/hsicctl/hsicctl[0-9]/modem_wait u:object_r:sysfs_hsic_modem_wait:s0
  570. /sys/devices/virtual/smdpkt/smdcntl1[0-9]/open_timeout u:object_r:sysfs_smd_open_timeout:s0
  571. /sys/devices/virtual/smdpkt/smdcntl[0-9]/open_timeout u:object_r:sysfs_smd_open_timeout:s0
  572. # SEC Remove to cover class symlink /sys/devices/virtual/thermal(/.*)? u:object_r:sysfs_thermal:s0
  573. /sys/module/msm_serial_hs/parameters/debug_mask u:object_r:sysfs_msmuart_file:s0
  574. /sys/module/msm_thermal(/.*)? u:object_r:sysfs_thermal:s0
  575. /sys/module/msm_thermal/core_control/cpus_offlined u:object_r:sysfs_mpdecision:s0
  576. # SEC Remove to cover class symlink /sys/devices/f9a55000.*/power_supply/usb(/.*)? u:object_r:sysfs_usb_supply:s0
  577. # SEC Remove to cover class symlink /sys/devices/virtual/graphics/fb([0-2])+/hpd u:object_r:sysfs_graphics:s0
  578. # SEC Remove to cover class symlink /sys/devices/virtual/graphics/fb([0-2])+/res_info u:object_r:sysfs_graphics:s0
  579. # SEC Remove to cover class symlink /sys/devices/virtual/graphics/fb([0-2])+/s3d_mode u:object_r:sysfs_graphics:s0
  580. # SEC Remove to cover class symlink /sys/class/graphics/fb([0-2])+/mdp/caps u:object_r:sysfs_graphics:s0
  581. # SEC Remove to cover class symlink /sys/class/graphics/fb([0-2])+/ad u:object_r:sysfs_graphics:s0
  582. /sys/bus/platform/drivers/xhci_msm_hsic(/.*)? u:object_r:sysfs_hsic:s0
  583. /sys/devices/msm_hsic_host/host_ready u:object_r:sysfs_hsic_host_rdy:s0
  584. /sys/bus/esoc(/.*)? u:object_r:sysfs_esoc:s0
  585. /sys/bus/msm_subsys(/.*)? u:object_r:sysfs_ssr:s0
  586. /sys/module/ccid_bridge(/.*)? u:object_r:sysfs_usb_uicc:s0
  587. /sys/bus/msm_subsys/devices/subsys0/restart_level u:object_r:sysfs_ssr_toggle:s0
  588. /sys/bus/msm_subsys/devices/subsys1/restart_level u:object_r:sysfs_ssr_toggle:s0
  589. /sys/bus/msm_subsys/devices/subsys2/restart_level u:object_r:sysfs_ssr_toggle:s0
  590. /sys/bus/msm_subsys/devices/subsys3/restart_level u:object_r:sysfs_ssr_toggle:s0
  591. /sys/bus/msm_subsys/devices/subsys4/restart_level u:object_r:sysfs_ssr_toggle:s0
  592. /sys/devices/soc0/.* u:object_r:sysfs_socinfo:s0
  593. ###################################
  594. # data files
  595. #
  596. /data/connectivity(/.*)? u:object_r:cnd_data_file:s0
  597. /data/data_test(/.*)? u:object_r:data_test_data_file:s0
  598. /data/diag_log(/.*)? u:object_r:diag_data_file:s0
  599. /data/misc/qvop(/.*)? u:object_r:qvop_data_file:s0
  600. /data/misc/sensors(/.*)? u:object_r:sensors_data_file:s0
  601. /data/rfs.* u:object_r:rfs_data_file:s0
  602. /data/hlos_rfs(/.*)? u:object_r:rfs_shared_hlos_file:s0
  603. #SEC keepped camera_data_file, not camera_socket
  604. /data/camera(/.*)? u:object_r:camera_data_file:s0
  605. /data/misc/stargate(/.*)? u:object_r:qfp-daemon_data_file:s0
  606. /data/system/sensors(/.*)? u:object_r:sensors_data_file:s0
  607. ##SEC removed dup context : /data/time/* u:object_r:time_data_file:s0
  608. /data/nfc(/.*)? u:object_r:nfc_data_file:s0
  609. /data/system/perfd(/.*)? u:object_r:mpctl_data_file:s0
  610. /data/misc/perfd(/.*)? u:object_r:mpctl_socket:s0
  611. /data/misc/iop(/.*)? u:object_r:iop_data_file:s0
  612. /data/misc/iop/iop u:object_r:iop_socket:s0
  613. # SEC added: typealias display_config
  614. /data/misc/display(/.*)? u:object_r:display_misc_file:s0
  615. /data/misc/ipa(/.*)? u:object_r:ipacm_data_file:s0
  616. /data/dpm(/.*)? u:object_r:dpmd_data_file:s0
  617. /data/misc/qsee(/.*)? u:object_r:data_qsee_file:s0
  618. /data/misc/location(/.*)? u:object_r:location_data_file:s0
  619. /data/misc/location/mq/location-mq-s u:object_r:location_socket:s0
  620. /data/misc/location/mq/alarm_svc u:object_r:location_socket:s0
  621. /data/FTM_AP(/.*)? u:object_r:mmi_data_file:s0
  622. /data/misc/hbtp(/.*)? u:object_r:hbtp_log_file:s0
  623. /data/misc/qlogd(/.*)? u:object_r:qlogd_data_file:s0
  624. /data/usf(/.*)? u:object_r:usf_data_file:s0
  625. /data/misc/dts(/.*)? u:object_r:dts_data_file:s0
  626. /data/misc/seemp(/.*)? u:object_r:seemp_file:s0
  627. /data/misc/SelfHost(/.*)? u:object_r:RIDL_data_file:s0
  628. ##SEC removed dup context : /data/misc/radio(/.*)? u:object_r:radio_data_file:s0
  629. /data/misc/port_bridge(/.*)? u:object_r:port_bridge_data_file:s0
  630. /data/misc/fm(/.*)? u:object_r:fm_data_file:s0
  631. /data/misc/audio_pp(/.*)? u:object_r:audio_pp_data_file:s0
  632. /data/ramdump(/.*)? u:object_r:ssr_ramdump_data_file:s0
  633. /data/misc/SelfHost/socket(/.*)? u:object_r:RIDL_socket:s0
  634. /data/misc/tloc(/.*)? u:object_r:tlocd_data_file:s0
  635. ###################################
  636. # persist files
  637. #
  638. ##SEC removed dup context : /persist(/.*)? u:object_r:persist_file:s0
  639. /persist/bluetooth(/.*)? u:object_r:persist_bluetooth_file:s0
  640. /persist/drm(/.*)? u:object_r:persist_drm_file:s0
  641. /persist/sensors(/.*)? u:object_r:sensors_persist_file:s0
  642. /persist/data(/.*)? u:object_r:persist_drm_file:s0
  643. /persist/data/tz(/.*)? u:object_r:persist_drm_file:s0
  644. /persist/data/sfs(/.*)? u:object_r:persist_drm_file:s0
  645. /persist/usf(/.*)? u:object_r:persist_usf_file:s0
  646. /persist/hlos_rfs(/.*)? u:object_r:rfs_shared_hlos_file:s0
  647. /persist/display(/.*)? u:object_r:persist_display_file:s0
  648. /persist/rfs.* u:object_r:rfs_data_file:s0
  649. ###################################
  650. # etc files
  651. #
  652. /etc/firmware/hbtp/* u:object_r:hbtp_cfg_file:s0
  653. ###################################
  654. # adsp files
  655. #
  656. /dsp(/.*)? u:object_r:adsprpcd_file:s0
  657. ###################################
  658. # cache files
  659. #
  660. /cache/FTM_AP(/.*)? u:object_r:mmi_data_file:s0
  661. #line 1 "vendor/samsung/common/sepolicy/BSP/bsp_qcom_v2/qcom_common/file_contexts"
  662. #############################
  663. # addional label of bsp_qcom_v1
  664. #
  665. /system/bin/cnss_diag u:object_r:wcnss_service_exec:s0
  666. /dev/block/platform/msm_sdcc\.1/by-name/modemst[1-2]* u:object_r:modemstblk_device:s0
  667. /dev/block/platform/msm_sdcc\.1/by-name/ssd u:object_r:ssdblk_device:s0
  668. /dev/efs_bridge u:object_r:efsbridgehsic_device:s0
  669. /dev/ks_bridge u:object_r:ksbridgehsic_device:s0
  670. /dev/rmnet_mux_ctrl u:object_r:rmnet_device:s0
  671. /dev/ttyHSL[0-9]* u:object_r:serial_device:s0
  672. #line 1 "vendor/samsung/common/sepolicy/BSP/bsp_marvell/file_contexts"
  673. # relabel to debug_device
  674. # nvm
  675. /NVM(/.*)? u:object_r:nvm_data_file:s0
  676. /teesst(/.*)? u:object_r:teesst_data_file:s0
  677. # dev
  678. /dev/media[0-9]+ u:object_r:mediaserver_device:s0
  679. /dev/v4l-subdev[0-9]+ u:object_r:mediaserver_device:s0
  680. /dev/cpmem u:object_r:marvelltel_device:s0
  681. #SEC changed : /dev/alarm-poweroff u:object_r:system_app_device:s0
  682. /dev/alarm-poweroff u:object_r:alarm_device:s0
  683. /dev/msocket u:object_r:nvm_device:s0
  684. /dev/ccidatastub u:object_r:atcmdsrv_device:s0
  685. /dev/cctdev[0-9]+ u:object_r:atcmdsrv_device:s0
  686. /dev/ttydiag[0-9]+ u:object_r:diag_device:s0
  687. /dev/cmsockdev[0-9]+ u:object_r:diag_device:s0
  688. /dev/seh u:object_r:eeh_device:s0
  689. /dev/citty[0-9]+ u:object_r:pppmodem_device:s0
  690. /dev/ppprd u:object_r:pppmodem_device:s0
  691. #SEC removed : /dev/ttyGS[0-9]+ u:object_r:pppmodem_device:s0
  692. #SEC removed : /dev/tzdd u:object_r:teecsstdca_device:s0
  693. /dev/mbtchar[0-9]+ u:object_r:bluetooth_device:s0
  694. /dev/mnfcchar[0-9]+ u:object_r:nfc_device:s0
  695. /dev/i2c-[0-9]+ u:object_r:i2c_device:s0
  696. /dev/rfkill u:object_r:wpa_device:s0
  697. /dev/mfmchar[0-9]+ u:object_r:mwireless_device:s0
  698. /dev/geu u:object_r:geu_device:s0
  699. /dev/mxc400x u:object_r:memsic_device:s0
  700. /dev/mmc3524x u:object_r:memsic_device:s0
  701. /dev/ptacc_ctrl u:object_r:memsic_device:s0
  702. /dev/ecompass_ctrl u:object_r:memsic_device:s0
  703. /dev/amipc u:object_r:ipc_device:s0
  704. /dev/acipc u:object_r:ipc_device:s0
  705. /dev/crmdev[0-9]+ u:object_r:gps_device:s0
  706. /dev/vpu_devfreq_max u:object_r:vpu_device:s0
  707. /dev/vpu_devfreq_min u:object_r:vpu_device:s0
  708. /dev/ttymodem[0-9]+ u:object_r:pppmodem_device:s0
  709. /dev/axi_min u:object_r:infor_device:s0
  710. /dev/cci_min u:object_r:infor_device:s0
  711. /dev/cctdatadev[0-9]+ u:object_r:infor_device:s0
  712. /dev/cidatatty[0-9]+ u:object_r:infor_device:s0
  713. /dev/clst_vl_min u:object_r:infor_device:s0
  714. #SEC removed : /dev/cpu_dma_latency u:object_r:infor_device:s0
  715. /dev/cpu_freq_b_max u:object_r:cpuctl_device:s0
  716. /dev/cpu_freq_b_min u:object_r:cpuctl_device:s0
  717. /dev/cpu_freq_l_max u:object_r:cpuctl_device:s0
  718. /dev/cpu_freq_l_min u:object_r:cpuctl_device:s0
  719. /dev/cpu_freq_max u:object_r:cpuctl_device:s0
  720. /dev/cpu_freq_min u:object_r:cpuctl_device:s0
  721. /dev/cpu_num_max u:object_r:cpuctl_device:s0
  722. /dev/cpu_num_min u:object_r:cpuctl_device:s0
  723. /dev/cpuidle_block u:object_r:cpuctl_device:s0
  724. /dev/cuse u:object_r:infor_device:s0
  725. /dev/ddr_devfreq_max u:object_r:infor_device:s0
  726. /dev/ddr_devfreq_min u:object_r:infor_device:s0
  727. /dev/diag_dump u:object_r:diag_device:s0
  728. /dev/gpu_freq_2d_max u:object_r:mrvlgpu_device:s0
  729. /dev/gpu_freq_2d_min u:object_r:mrvlgpu_device:s0
  730. /dev/gpu_freq_3d_max u:object_r:mrvlgpu_device:s0
  731. /dev/gpu_freq_3d_min u:object_r:mrvlgpu_device:s0
  732. /dev/gpu_freq_sh_max u:object_r:mrvlgpu_device:s0
  733. /dev/gpu_freq_sh_min u:object_r:mrvlgpu_device:s0
  734. /dev/hwmap u:object_r:infor_device:s0
  735. /dev/mldev0 u:object_r:infor_device:s0
  736. #SEC removed :/dev/keychord u:object_r:infor_device:s0
  737. /dev/msocket_dump u:object_r:nvm_device:s0
  738. /dev/loop-control u:object_r:infor_device:s0
  739. #SEC removed :/dev/network_latency u:object_r:infor_device:s0
  740. #SEC removed :/dev/network_throughput u:object_r:infor_device:s0
  741. #SEC removed :/dev/psaux u:object_r:infor_device:s0
  742. /dev/ramfile u:object_r:infor_device:s0
  743. #SEC removed :/dev/rtc0 u:object_r:infor_device:s0
  744. #SEC removed :/dev/rtc1 u:object_r:infor_device:s0
  745. /dev/simple_dip u:object_r:infor_device:s0
  746. #SEC removed :/dev/sw_sync u:object_r:infor_device:s0
  747. /dev/imldev[0-9]+ u:object_r:infor_device:s0
  748. /dev/umts_boot[0-9]+ u:object_r:ssipc_device:s0
  749. /dev/umts_ipc[0-9]+ u:object_r:ssipc_device:s0
  750. /dev/umts_attest[0-9]+ u:object_r:ssipc_device:s0
  751. /dev/umts_atdun[0-9]+ u:object_r:ssipc_device:s0
  752. /dev/umts_atprod[0-9]+ u:object_r:ssipc_device:s0
  753. /dev/umts_atsimal[0-9]+ u:object_r:ssipc_device:s0
  754. /dev/umts_atsol[0-9]+ u:object_r:ssipc_device:s0
  755. /dev/umts_atunsol[0-9]+ u:object_r:ssipc_device:s0
  756. /dev/umts_at[0-9]+ u:object_r:ssipc_device:s0
  757. /dev/umts_atgps[0-9]+ u:object_r:ssipc_device:s0
  758. /dev/umts_at[0-9]+_[0-9]+ u:object_r:ssipc_device:s0
  759. # define marvell special gpu label
  760. /dev/galcore u:object_r:mrvlgpu_device:s0
  761. /dev/graphics/galcore u:object_r:mrvlgpu_device:s0
  762. # block dev
  763. #SEC removed : /dev/block/mmcblk0 u:object_r:cploader_block_device:s0
  764. #SEC removed : /dev/block/mmcblk0p1 u:object_r:mrd_block_device:s0
  765. #SEC removed : /dev/block/mmcblk0p2 u:object_r:mrd1_block_device:s0
  766. #SEC removed : /dev/block/mmcblk0p3 u:object_r:mep2_block_device:s0
  767. #SEC removed : /dev/block/mmcblk0p4 u:object_r:dtim_block_device:s0
  768. # pxa1908 and pxa1936 special
  769. # it seperates the bootloader from one to
  770. # rbootloader and pbootloader
  771. #SEC removed : /dev/block/mmcblk0p5 u:object_r:bootloader_block_device:s0
  772. #SEC removed : /dev/block/mmcblk0p6 u:object_r:recovery_block_device:s0
  773. #SEC removed : /dev/block/mmcblk0p7 u:object_r:bootloader_block_device:s0
  774. #SEC removed : /dev/block/mmcblk0p8 u:object_r:boot_block_device:s0
  775. #SEC removed : /dev/block/mmcblk0p9 u:object_r:system_block_device:s0
  776. #SEC removed : /dev/block/mmcblk0p10 u:object_r:misc_block_device:s0
  777. #SEC removed : /dev/block/mmcblk0p11 u:object_r:radio_block_device:s0
  778. #SEC removed : /dev/block/mmcblk0p12 u:object_r:nvm_block_device:s0
  779. #SEC removed : /dev/block/mmcblk0p13 u:object_r:security_block_device:s0
  780. #SEC removed : /dev/block/mmcblk0p14 u:object_r:cache_block_device:s0
  781. #SEC removed : /dev/block/mmcblk0p15 u:object_r:userdata_block_device:s0
  782. # boot device
  783. #SEC removed : /dev/block/mmcblk0boot[0-9]+ u:object_r:boot_block_device:s0
  784. # socket
  785. /dev/socket/rild[0-9]+ u:object_r:rild_socket:s0
  786. /dev/socket/atcmdni[0-9]+ u:object_r:rild_socket:s0
  787. /dev/socket/atil[0-9]* u:object_r:rild_socket:s0
  788. #SEC removed : /dev/socket/imsd u:object_r:imsd_socket:s0
  789. /dev/socket/embmsd u:object_r:embmsd_socket:s0
  790. #SEC removed : conflict, /dev/socket/rild-debug[0-9]+ u:object_r:rild_debug_socket:s0
  791. # system/bin
  792. /system/bin/nvm u:object_r:nvm_exec:s0
  793. /system/bin/setup_fs u:object_r:setup_fs_exec:s0
  794. /system/bin/pppmodem u:object_r:pppmodem_exec:s0
  795. /system/bin/eeh u:object_r:eeh_exec:s0
  796. /system/bin/diag u:object_r:diag_exec:s0
  797. /system/bin/atcmdsrv u:object_r:atcmdsrv_exec:s0
  798. # Attention: these cases have different name between
  799. # exec file name and process name. the name is from
  800. # init.pxa1xxx.tel.rc, init.pxa1xxx.rc, init_bsp.pxa1xxx.tel.rc
  801. /system/bin/tel_launch\.sh u:object_r:marvelltel_exec:s0
  802. /system/bin/tel_launch_no_gui\.sh u:object_r:marvelltel_exec:s0
  803. /system/bin/FMRadioServer u:object_r:FMRadiod_exec:s0
  804. /system/bin/MarvellWirelessDaemon u:object_r:mwirelessd_exec:s0
  805. /system/bin/IMLLog u:object_r:iml_exec:s0
  806. /system/bin/log_on_boot\.sh u:object_r:log_on_boot_exec:s0
  807. #SEC removed : conflict /system/bin/imsd u:object_r:imsc_exec:s0
  808. /system/bin/MarvellNfcExtensionsDaemon u:object_r:mned_exec:s0
  809. /system/bin/update_touch_fw\.sh u:object_r:touch_updater_exec:s0
  810. /system/bin/phservice u:object_r:phservice_exec:s0
  811. /system/bin/kmsg\.sh u:object_r:kmsg_exec:s0
  812. /system/bin/root_detect u:object_r:root_detect_exec:s0
  813. /system/bin/load_calibration_data\.sh u:object_r:load_g_cali_data_exec:s0
  814. /system/bin/memsicd u:object_r:memsicd_exec:s0
  815. /system/bin/memsicp u:object_r:memsicp_exec:s0
  816. /system/bin/codecIPC_server u:object_r:codecIPC_server_exec:s0
  817. /system/bin/mrvl_gpsd u:object_r:mrvl_gpsd_exec:s0
  818. /system/bin/core-compressor u:object_r:core_compressor_exec:s0
  819. /system/bin/at_router u:object_r:at_router_exec:s0
  820. /system/bin/env\.sh u:object_r:env_exec:s0
  821. # nfc data
  822. #SEC removed: conflict, /data/nfc(/.*)? u:object_r:nfc_data_file:s0
  823. /data/misc/wireless(/.*)? u:object_r:wireless_data_file:s0
  824. #SEC removed: conflict, /data/log(/.*)? u:object_r:dump_log_data_file:s0
  825. /data/mrvl_tel_diag\.cfg u:object_r:tel_data_file:s0
  826. /data/mrvl_tel_iml\.cfg u:object_r:tel_data_file:s0
  827. # for tz
  828. /system/bin/teec_sstd_ca u:object_r:teecsstdca_exec:s0
  829. # for hawk
  830. /system/bin/run_hawk_on_boot\.sh u:object_r:run_hawk_on_boot_exec:s0
  831. /system/bin/hawk u:object_r:hawk_exec:s0
  832. #line 1 "vendor/samsung/common/sepolicy/BSP/bsp_sprd/file_contexts"
  833. #############################
  834. # productinfo files
  835. #
  836. /productinfo(/.*)? u:object_r:prod_file:s0
  837. #############################
  838. # systeminfo files
  839. #
  840. /systeminfo(/.*)? u:object_r:prod_file:s0
  841. #############################
  842. # device files
  843. #
  844. #SEC remove: /dev/mali0 u:object_r:gpu_device:s0
  845. /dev/spipe_lte1 u:object_r:spipe_device:s0
  846. /dev/spipe_w4 u:object_r:audio_device:s0
  847. /dev/spipe_w6 u:object_r:audio_device:s0
  848. /dev/spipe_lte8 u:object_r:refnotify_device:s0
  849. #SEC remove: /dev/rtc0 u:object_r:refnotify_device:s0
  850. /dev/spipe_w14 u:object_r:audio_device:s0
  851. /dev/spipe_w8 u:object_r:refnotify_device:s0
  852. /dev/sprd_gsp u:object_r:graphics_device:s0
  853. /dev/lis3dh_acc u:object_r:sensors_device:s0
  854. /dev/ltr_558als u:object_r:sensors_device:s0
  855. /dev/sprd_sensor u:object_r:sensors_device:s0
  856. /dev/sprd_rotation u:object_r:sensors_device:s0
  857. /dev/sprd_isp u:object_r:camera_device:s0
  858. /dev/sprd_scale u:object_r:camera_device:s0
  859. /dev/sprd_image u:object_r:camera_device:s0
  860. /dev/ttyV1 u:object_r:gps_device:s0
  861. /dev/sprd_vsp u:object_r:video_device:s0
  862. /dev/sprd_coda7l u:object_r:video_device:s0
  863. /dev/sprd_vpp u:object_r:video_device:s0
  864. /dev/sprd_jpg u:object_r:graphics_device:s0
  865. /dev/sdiag_lte u:object_r:slog_device:s0
  866. /dev/slog_lte u:object_r:slog_device:s0
  867. /dev/iq_mem u:object_r:slog_device:s0
  868. #SEC remove: /dev/ttyGS[0-9] u:object_r:serial_device:s0
  869. /dev/stty_w0 u:object_r:tty_device:s0
  870. /dev/stty_w[0-9]* u:object_r:radio_device:s0
  871. /dev/vser u:object_r:serial_device:s0
  872. /dev/sttybt0 u:object_r:hci_attach_dev:s0
  873. /dev/autotst u:object_r:autotest_device:s0
  874. #SEC remove: /dev/socket/rild2 u:object_r:rild_socket:s0
  875. #SEC remove: /dev/socket/rild3 u:object_r:rild_socket:s0
  876. /dev/socket/srtserver u:object_r:srt_socket:s0
  877. /dev/stty_td[0-9]* u:object_r:tty_device:s0
  878. /dev/stty_lte[0-9]* u:object_r:tty_device:s0
  879. /dev/Trout_FM u:object_r:audio_device:s0
  880. #SEC remove: /dev/pipe u:object_r:audio_device:s0
  881. #SEC remove: /dev/block/mmcblk0p[0-9]* u:object_r:mmcblk_device:s0
  882. #SEC remove: /dev/block/mmcblk0boot0 u:object_r:mmcblk_device:s0
  883. #SEC remove: /dev/block/mmcblk0boot1 u:object_r:mmcblk_device:s0
  884. #SEC remove: /dev/block/mmcblk0p17 u:object_r:mmcblk_device:s0
  885. #SEC remove: /dev/block/mmcblk0p18 u:object_r:frp_block_device:s0
  886. #SEC remove: /dev/block/mmcblk0p19 u:object_r:mmcblk_device:s0
  887. #SEC remove: /dev/block/mmcblk0p21 u:object_r:mmcblk_device:s0
  888. #SEC remove: /dev/block/mmcblk0p22 u:object_r:mmcblk_device:s0
  889. #SEC remove: /dev/block/mmcblk0p23 u:object_r:mmcblk_device:s0
  890. #SEC remove: /dev/block/mmcblk1p1 u:object_r:mmcblk_device:s0
  891. /dev/sprd_efuse_otp u:object_r:efuse_device:s0
  892. /dev/sprd_bm u:object_r:bm_device:s0
  893. /dev/fm u:object_r:fm_device:s0
  894. /dev/spipe_lte[0-9]* u:object_r:spipe_device:s0
  895. #SEC duplicated : /dev/power_ctl u:object_r:wcn_device:s0
  896. /dev/download u:object_r:wcn_device:s0
  897. /dev/block/platform/sdio_emmc/by-name/boot u:object_r:boot_block_device:s0
  898. /dev/block/platform/sdio_emmc/by-name/recovery u:object_r:recovery_block_device:s0
  899. /dev/block/platform/sdio_emmc/by-name/persist u:object_r:frp_block_device:s0
  900. /dev/slog_w u:object_r:slog_device:s0
  901. /dev/sdiag_w u:object_r:slog_device:s0
  902. /dev/slog_wcn u:object_r:slog_device:s0
  903. /dev/gnss_download u:object_r:wcn_device:s0
  904. /dev/gnss_dbg u:object_r:wcn_device:s0
  905. /dev/slog_gnss u:object_r:slog_device:s0
  906. /dev/cgxdrv u:object_r:gps_device:s0
  907. /dev/ttyV0 u:object_r:gps_device:s0
  908. #SEC remove: /dev/block/mmcblk0p[3-6] u:object_r:nv_mmcblk_device:s0
  909. /dev/spipe_w[0-9]* u:object_r:spipe_device:s0
  910. /dev/spipe_wcn[0-9]* u:object_r:spipe_device:s0
  911. /dev/spipe_lte2 u:object_r:spipe_device:s0
  912. /dev/spipe_lte9 u:object_r:modemdriver_vpad_device:s0
  913. /dev/spipe_lte10 u:object_r:spipe_device:s0
  914. #############################
  915. # System files
  916. #
  917. /system/bin/data_on.sh u:object_r:data_on_exec:s0
  918. /system/bin/data_off.sh u:object_r:data_off_exec:s0
  919. /system/bin/mplayer u:object_r:mediaserver_exec:s0
  920. /system/bin/wcnd u:object_r:wcnd_exec:s0
  921. /system/bin/engpc u:object_r:engpc_exec:s0
  922. /system/bin/autotest u:object_r:autotest_exec:s0
  923. /system/bin/charge u:object_r:charge_exec:s0
  924. /system/xbin/zram.sh u:object_r:zram_exec:s0
  925. /system/xbin/srtd u:object_r:srtd_exec:s0
  926. /system/bin/refnotify u:object_r:refnotify_exec:s0
  927. /system/bin/modemd u:object_r:rild_exec:s0
  928. /system/bin/phoneserver u:object_r:rild_exec:s0
  929. /system/bin/modem_control u:object_r:modem_control_exec:s0
  930. /system/bin/rild_sp u:object_r:rild_exec:s0
  931. /system/bin/cp_diskserver u:object_r:cp_diskserver_exec:s0
  932. #SEC duplicated : /system/bin/download u:object_r:download_exec:s0
  933. /system/bin/gnss_download u:object_r:gnss_download_exec:s0
  934. /system/bin/slogmodem u:object_r:slogmodem_exec:s0
  935. /system/bin/factorytest u:object_r:factorytest_exec:s0
  936. /system/bin/phasecheckserver u:object_r:phasecheckserver_exec:s0
  937. /system/bin/tune2fs u:object_r:fsck_exec:s0
  938. /system/bin/resize2fs u:object_r:fsck_exec:s0
  939. /system/bin/GPSenseEngine u:object_r:GPSenseEngine_exec:s0
  940. #SEC duplicated : /system/bin/batterysrv u:object_r:batterysrv_exec:s0
  941. #SEC duplicatd : /system/bin/gpsd u:object_r:gpsd_exec:s0
  942. /system/bin/cmd_services u:object_r:cmd_services_exec:s0
  943. /system/bin/modemDriver_vpad_main u:object_r:modemdriver_vpad_exec:s0
  944. /dev/block/zram0 u:object_r:zram_block_device:s0
  945. /system/bin/nvitemd u:object_r:nvitemd_exec:s0
  946. /data/modem_log(/.*)? u:object_r:slogmodem_data:s0
  947. /data/local/englog(/.*)? u:object_r:engpc_data:s0
  948. #SEC duplicated : /system/bin/thermald u:object_r:thermald_exec:s0
  949. ############################
  950. #for sharkl64
  951. #
  952. #/dev/spipe_lte4 u:object_r:pipe_device:s0
  953. #/dev/spipe_lte6 u:object_r:pipe_device:s0
  954. /dev/spipe_lte4 u:object_r:audio_device:s0
  955. /dev/spipe_lte6 u:object_r:audio_device:s0
  956. /dev/epl2182_pls u:object_r:sensors_device:s0
  957. # for core dump
  958. /data/corefile(/.*)? u:object_r:coredump_file:s0
  959. # for hprofiles
  960. #SEC duplicated : /data/misc/hprofs(/.*)? u:object_r:hprofs_file:s0
  961. # CP time synchronization FIFO
  962. /data/w_timesyncfifo u:object_r:ts_fifo:s0
  963. /data/td_timesyncfifo u:object_r:ts_fifo:s0
  964. /data/l_timesyncfifo u:object_r:ts_fifo:s0
  965. #for factorytest
  966. /data/cg(/.*)? u:object_r:cg_file:s0
  967. /data/local/factorytest_log(/.*)? u:object_r:mmitest_file:s0
  968. #for slog
  969. /system/bin/slog u:object_r:slogd_exec:s0
  970. /data/slog(/.*)? u:object_r:slog_file:s0
  971. #add for data/local/media
  972. /data/local/media(/.*)? u:object_r:media_data_file:s0
  973. # apr files
  974. /system/bin/collect_apr u:object_r:aprd_exec:s0
  975. /data/sprdinfo(/.*)? u:object_r:apr_data_file:s0
  976. /data/apr.conf u:object_r:apr_data_file:s0
  977. # for mlog
  978. /data/mlog(/.*)? u:object_r:mlog_file:s0
  979. #charge test file
  980. /data/.battery_nv u:object_r:self_system_data_file:s0
  981. #GNSS
  982. /data/gnss(/.*)? u:object_r:gnss_file:s0
  983. #line 1 "vendor/samsung/common/sepolicy/model/file_contexts"
  984. #############################
  985. # Device node
  986. #
  987. #############################
  988. # DATA file
  989. #
  990. /data/data/\.drm(/.*)? u:object_r:drm_playready_file:s0
  991. #############################
  992. # efs file
  993. #
  994. # com.sec.android.preloadinstaller write currentlyFactoryReset
  995. # path was changed /efs/recovery/currentlyFactoryReset" by recovery team.
  996. #/efs/\.currentlyFactoryReset u:object_r:app_efs_file:s0
  997. /efs/Battery/fg_full_voltage u:object_r:app_efs_file:s0
  998. # com.sec.imsservice write silent_redial
  999. /efs/silent_redial u:object_r:app_efs_file:s0
  1000. # HDCP and Widevine key. support r/w for radio and system app
  1001. /efs/h2k\.dat u:object_r:cpk_efs_file:s0
  1002. /efs/redata\.bin u:object_r:cpk_efs_file:s0
  1003. /efs/wv\.keys u:object_r:cpk_efs_file:s0
  1004. /efs/total_call_time u:object_r:app_efs_file:s0
  1005. #############################
  1006. # System files of sec_common
  1007. #
  1008. /system/bin/ftm_ptt u:object_r:ftm_ptt_exec:s0
  1009. /system/bin/lpm u:object_r:lpm_exec:s0
  1010. /system/bin/rtccd3 u:object_r:rtcc_exec:s0
  1011. #############################
  1012. # Device node of sec_common
  1013. #
  1014. /dev/block/mmcblk[0-9].* u:object_r:emmcblk_device:s0
  1015. /dev/block/zram[0-9] u:object_r:ram_device:s0
  1016. /sys/class/net/wlan0/queues/rx-[0-9]/rps_cpus u:object_r:sysfs_ss_writable:s0
  1017. /sys/class/kgsl/kgsl-3d0/dispatch(/.*)? -- u:object_r:sysfs_ss_writable:s0
  1018. /sys/class/power_supply/battery/camera u:object_r:sysfs_app_writable:s0
  1019. #line 1 "vendor/samsung/common/sepolicy/slsi_common/file_contexts"
  1020. ## CP daemon
  1021. /system/bin/rild_exynos u:object_r:rild_exec:s0
  1022. /system/bin/rild_SIPC u:object_r:rild_exec:s0
  1023. /system/bin/dmd u:object_r:dmd_exec:s0
  1024. #line 1 "vendor/samsung/common/sepolicy/marvell_common/file_contexts"
  1025. ## SEC added ##
  1026. ###########################
  1027. # Marvell Device node
  1028. #
  1029. /dev/accelerometer_sensor u:object_r:sensor_device:s0
  1030. /dev/magnetic_sensor u:object_r:sensor_device:s0
  1031. ##SEC removed: /dev/block/mmcblk0boot[0-9] u:object_r:bootblk_device:s0
  1032. /dev/cmsockdev64 u:object_r:gps_device:s0
  1033. /dev/crmdev[0-9] u:object_r:gps_device:s0
  1034. /dev/proximity_sensor u:object_r:sensor_device:s0
  1035. /dev/tzdd u:object_r:tz_device:s0
  1036. /dev/umts_rfs[0-9]+ u:object_r:ssipc_device:s0
  1037. /system/bin/gpslpm_srv u:object_r:gpslpm_srv_exec:s0
  1038. /data/misc/phone(/.*)? u:object_r:phone_data_file:s0
  1039. #line 1 "vendor/samsung/common/sepolicy/sprd_common/file_contexts"
  1040. #############################
  1041. # System files
  1042. #
  1043. /system/bin/batterysrv u:object_r:batterysrv_exec:s0
  1044. /system/bin/download u:object_r:download_exec:s0
  1045. /system/bin/ext_symlink.sh u:object_r:ext_symlink_exec:s0
  1046. /system/bin/sprd_res_monitor u:object_r:sprd_res_monitor_exec:s0
  1047. /dev/pipe(/.*)? u:object_r:audio_device:s0
  1048. /dev/rpipe(/.*)? u:object_r:audio_device:s0
  1049. /dev/power_ctl u:object_r:power_ctl_device:s0
  1050. /data/misc/hprofs(/.*)? u:object_r:dumplog_data_file:s0
  1051. #line 1 "vendor/samsung/common/sepolicy/3rd/vmware/file_contexts"
  1052. # VMware daemon
  1053. /system/bin/mvpd u:object_r:vmwared_exec:s0
  1054. # Vmware device
  1055. /dev/mvpkm u:object_r:vmware_device:s0
  1056. # VMWare sysfs
  1057. /sys/hypervisor(/.*) u:object_r:sysfs_vmware_writable:s0
  1058. #line 1 "vendor/samsung/common/sepolicy/3rd/mcafee/file_contexts"
  1059. #
  1060. # Copyright 2015 McAfee, Inc. All rights reserved.
  1061. #
  1062. # McAfee scanner daemon
  1063. /dev/socket/mfescand u:object_r:mfescand_socket:s0
  1064. /system/bin/mfescand u:object_r:mfescand_exec:s0
  1065. # McAfee directories/files
  1066. /system/etc/mcafee(/.*)? u:object_r:mcafee_conf_file:s0
  1067. /data/misc/mcafee(/.*)? u:object_r:mcafee_data_file:s0
  1068. /data/misc/mcafee/mcs(/.*)? u:object_r:mcafee_mcs_file:s0
  1069. /data/misc/mcafee/mcs/mcs.fs/xm(/.*)? u:object_r:mcafee_mcsfs_xm_file:s0
  1070. /data/misc/mcafee/mfescand/temp(/.*)? u:object_r:mcafee_temp_file:s0
  1071. #line 1 "vendor/samsung/common/sepolicy/file_contexts"
  1072. #############################
  1073. # block device for all model
  1074. /dev/block/platform/.+/by-name/(boot|BOOT)? u:object_r:boot_block_device:s0
  1075. /dev/block/platform/.+/by-name/(cache|CACHE)? u:object_r:cache_block_device:s0
  1076. /dev/block/platform/.+/by-name/(modem|MODEM)? u:object_r:modem_device:s0
  1077. /dev/block/platform/.+/by-name/(persistent|PERSISTENT)? u:object_r:frp_block_device:s0
  1078. /dev/block/platform/.+/by-name/(recovery|RECOVERY)? u:object_r:recovery_block_device:s0
  1079. /dev/block/platform/.+/by-name/(system|SYSTEM)? u:object_r:system_block_device:s0
  1080. /dev/block/platform/.+/by-name/(userdata|USERDATA)? u:object_r:userdata_block_device:s0
  1081. /dev/block/platform/.+/by-name/(efs|EFS)? u:object_r:efsblk_device:s0
  1082. /dev/block/mmcblk[0-9a-z]* u:object_r:emmcblk_device:s0
  1083. #/dev/block/mmcblk0p[0-9]* u:object_r:emmcblk_device:s0
  1084. #/dev/block/mmcblk1p.* u:object_r:emmcblk_device:s0
  1085. #/dev/block/mmcblk1p1 u:object_r:emmcblk_device:s0
  1086. /dev/block/modem(/.*)? u:object_r:modem_device:s0
  1087. /dev/block/sd[a-z][0-9]* u:object_r:emmcblk_device:s0
  1088. /dev/block/vnswap0 u:object_r:swap_device:s0
  1089. #/dev/block/platform/msm_sdcc\.1/by-name/cache u:object_r:cachechr_device:s0
  1090. #/dev/block/platform/msm_sdcc\.1/by-name/fsg u:object_r:fsg_device:s0
  1091. #/dev/block/platform/msm_sdcc\.1/by-name/m9kefs[0-3]* u:object_r:emmcblk_device:s0
  1092. #/dev/block/platform/msm_sdcc\.1/by-name/modem u:object_r:modem_device:s0
  1093. #/dev/block/platform/msm_sdcc\.1/by-name/param u:object_r:emmcblk_device:s0
  1094. #############################
  1095. # Device node of sec_common
  1096. #
  1097. /dev/\.secure_storage(/.*)? u:object_r:secure_storage_device:s0
  1098. /dev/__kmsg u:object_r:klog_device:s0
  1099. /dev/alps_io u:object_r:input_device:s0
  1100. /dev/android_ssusbcon(/.*)? u:object_r:usb_device:s0
  1101. /dev/batch_io u:object_r:io_device:s0
  1102. /dev/bcm2079x u:object_r:nfc_device:s0
  1103. /dev/bus/usb(/.*)? u:object_r:usb_bus_device:s0
  1104. /dev/cdma_.* u:object_r:radio_device:s0
  1105. /dev/context u:object_r:context_device:s0
  1106. # conflict with Qcom BSP, /dev/diag u:object_r:diag_device:s0
  1107. /dev/esfp[0-9] u:object_r:fp_sensor_device:s0
  1108. /dev/gnss_ipc u:object_r:gps_device:s0
  1109. /dev/i2c.* u:object_r:i2c_device:s0
  1110. /dev/icd u:object_r:icd_device:s0
  1111. /dev/icdr u:object_r:icd_device:s0
  1112. /dev/ionfd2phys u:object_r:ion_device:s0
  1113. /dev/isdbt u:object_r:mmb_device:s0
  1114. # conflict with Qcom BSP, /dev/media[0-3]* u:object_r:camera_device:s0
  1115. /dev/max_hrm u:object_r:hrm_device:s0
  1116. /dev/mobicore u:object_r:mobicore_device:s0
  1117. /dev/mobicore-user u:object_r:mobicore-user_device:s0
  1118. /dev/ovr[0-9]* u:object_r:ovr_device:s0
  1119. /dev/hidraw[0-9]* u:object_r:ovr_device:s0
  1120. /dev/peel_ir u:object_r:ir_device:s0
  1121. /dev/pipes(/.*)? u:object_r:system_fifo:s0
  1122. /dev/p3 u:object_r:sem_device:s0
  1123. /dev/p61 u:object_r:sem_device:s0
  1124. /dev/pn547 u:object_r:nfc_device:s0
  1125. /dev/power_on_alarm u:object_r:alarm_device:s0
  1126. /dev/scsc_h4_0 u:object_r:serial_device:s0
  1127. /dev/sec-nfc u:object_r:nfc_device:s0
  1128. /dev/sec-nfc-fn u:object_r:nfc_device:s0
  1129. /dev/shtc1_sensor u:object_r:sensor_device:s0
  1130. /dev/socket/bluetooth u:object_r:bluetooth_socket:s0
  1131. /dev/socket/charon u:object_r:charon_socket:s0
  1132. /dev/socket/cs_socket u:object_r:cs_socket:s0
  1133. /dev/socket/dir_enc_report u:object_r:vold_socket:s0
  1134. /dev/socket/epm u:object_r:epm_socket:s0
  1135. /dev/socket/eris u:object_r:eris_socket:s0
  1136. /dev/socket/frigate u:object_r:frigate_socket:s0
  1137. /dev/socket/imsd u:object_r:imsd_socket:s0
  1138. /dev/socket/ipsec_socket u:object_r:ipsec_socket:s0
  1139. /dev/socket/jack(/.*)? u:object_r:jack_socket:s0
  1140. /dev/socket/msockets(/.*)? u:object_r:msockets_socket:s0
  1141. /dev/socket/mtp(/.*)? u:object_r:mtp_socket:s0
  1142. /dev/socket/ppm u:object_r:epm_socket:s0
  1143. ## TG request(simiso.kim, CP team) by email, 6.0.1, New socket to get iptables and tc command from rild to netd
  1144. /dev/socket/qosd u:object_r:qosd_socket:s0
  1145. /dev/socket/rild[0-9]* u:object_r:rild_socket:s0
  1146. /dev/socket/rild-debug[0-9]* u:object_r:rild_debug_socket:s0
  1147. /dev/socket/ss_conn_daemon u:object_r:ss_conn_daemon_socket:s0
  1148. /dev/socket/taa u:object_r:tz_socket:s0
  1149. /dev/socket/tunman u:object_r:tunman_socket:s0
  1150. /dev/socket/tz u:object_r:tz_socket:s0
  1151. /dev/socket/uibc(/.*)? u:object_r:uibc_socket:s0
  1152. /dev/socket/vpnclientd u:object_r:vpnclientd_socket:s0
  1153. /dev/socket/vaultkeeper(/.*)? u:object_r:vaultkeeper_socket:s0
  1154. /dev/sound_trigger_boost u:object_r:audio_device:s0
  1155. /dev/ssp_sensorhub u:object_r:input_device:s0
  1156. /dev/ssp_data_injection u:object_r:input_device:s0
  1157. /dev/timerirq u:object_r:timerirq_device:s0
  1158. /dev/ttyGS[0-9]* u:object_r:usb_serial_device:s0
  1159. /dev/ttyUSB[0-9]* u:object_r:usb_device:s0
  1160. # SEA_site_M#92; requested by jh21.hwang
  1161. # the B2B client requests some specific path range such as /dev/ttyUSB0 ~ /dev/ttyUSB30, /dev/ttyACM0 ~ /dev/ttyACM30
  1162. /dev/ttyACM[0-9]* u:object_r:usb_device:s0
  1163. /dev/t-base-tui u:object_r:tui_device:s0
  1164. /dev/tuihw u:object_r:tz_device:s0
  1165. /dev/tzdev u:object_r:tz_device:s0
  1166. /dev/tzic u:object_r:tz_device:s0
  1167. /dev/tzirs u:object_r:tz_device:s0
  1168. /dev/url u:object_r:url_device:s0
  1169. /dev/usb(/.*)? u:object_r:usb_device:s0
  1170. /dev/usb.* u:object_r:usb_device:s0
  1171. /dev/usb/tty.* u:object_r:usb_device:s0
  1172. /dev/usb_mtp_gadget.* u:object_r:mtp_device:s0
  1173. /dev/validity(/.*)? u:object_r:validity_device:s0
  1174. /dev/vfsspi u:object_r:vfsspi_device:s0
  1175. /dev/video26 u:object_r:video_scaler_device:s0
  1176. /dev/video29 u:object_r:video_scaler_device:s0
  1177. /dev/video4[0-9] u:object_r:camera_device:s0
  1178. /dev/video5[0-2] u:object_r:video_scaler_device:s0
  1179. #############################
  1180. # Device node of knox_common
  1181. ## Knox Sensitive data protection, DEK engine driver access
  1182. /dev/dek_evt u:object_r:knox_dar_device:s0
  1183. /dev/dek_kek u:object_r:knox_dar_device:s0
  1184. /dev/dek_log u:object_r:knox_dar_device:s0
  1185. /dev/dek_req u:object_r:knox_dar_shared_device:s0
  1186. /dev/sdp_mm u:object_r:knox_dar_device:s0
  1187. /dev/knox_kap u:object_r:knox_kap_device:s0
  1188. /dev/sdp_dlp u:object_r:knox_dar_device:s0
  1189. #############################
  1190. # Device node of mobile_payments
  1191. /dev/mst_ctrl u:object_r:mst_ctrl_device:s0
  1192. #############################
  1193. # Device node of qcom_common
  1194. #
  1195. /dev/adnc[0-9]* u:object_r:adnc_device:s0
  1196. /dev/dbmdx-1 u:object_r:audio_device:s0
  1197. /dev/android_rndis_qc u:object_r:radio_device:s0
  1198. /dev/audience_a2220 u:object_r:audio_device:s0
  1199. /dev/btlock u:object_r:hci_attach_dev:s0
  1200. #####/dev/btlock u:object_r:bluetooth_device:s0
  1201. #ciq_bridge PLM
  1202. /dev/ciq_bridge u:object_r:ciqbridge_device:s0
  1203. /dev/coresight-.* u:object_r:coresight_device:s0
  1204. /dev/dbd[0-9]* u:object_r:adnc_device:s0
  1205. /dev/dun u:object_r:dun_device:s0
  1206. /dev/dvb(/.*)? u:object_r:dvb_device:s0
  1207. # conflict with Qcom BSP, /dev/efs_bridge u:object_r:radio_device:s0
  1208. # conflict with Qcom BSP, /dev/efs_hsic_bridge u:object_r:radio_device:s0
  1209. # conflict with Qcom BSP, /dev/esoc-[0-9]* u:object_r:esoc_device:s0
  1210. /dev/gemini0 u:object_r:camera_device:s0
  1211. /dev/genlock u:object_r:genlock_device:s0
  1212. /dev/gsm_.* u:object_r:radio_device:s0
  1213. # conflict with Qcom BSP, /dev/hsicctl[0-3]* u:object_r:qmuxd_device:s0
  1214. # conflict with Qcom BSP, /dev/jpeg[0-2]* u:object_r:camera_device:s0
  1215. /dev/kgsl-[0-9a-z]* u:object_r:kgsl_device:s0
  1216. # conflict with Qcom BSP, /dev/ks_bridge u:object_r:radio_device:s0
  1217. # conflict with Qcom BSP, /dev/ks_hsic_bridge u:object_r:radio_device:s0
  1218. /dev/mdm u:object_r:radio_device:s0
  1219. #####/dev/mdm u:object_r:mdm_device:s0
  1220. /dev/msm_aac u:object_r:audio_device:s0
  1221. /dev/msm_aac_in u:object_r:audio_device:s0
  1222. /dev/msm_acdb u:object_r:audio_device:s0
  1223. /dev/msm_amrnb u:object_r:audio_device:s0
  1224. /dev/msm_amrnb_in u:object_r:audio_device:s0
  1225. /dev/msm_amrwb u:object_r:audio_device:s0
  1226. /dev/msm_amrwb_in u:object_r:audio_device:s0
  1227. /dev/msm_amrwbplus u:object_r:audio_device:s0
  1228. /dev/msm_camera(/.*)? u:object_r:camera_device:s0
  1229. /dev/msm_evrc u:object_r:audio_device:s0
  1230. /dev/msm_evrc_in u:object_r:audio_device:s0
  1231. /dev/msm_mp3 u:object_r:audio_device:s0
  1232. /dev/msm_multi_aac u:object_r:audio_device:s0
  1233. /dev/msm_qcelp u:object_r:audio_device:s0
  1234. /dev/msm_qcelp_in u:object_r:audio_device:s0
  1235. /dev/msm_rotator u:object_r:graphics_device:s0
  1236. /dev/msm_rtac u:object_r:audio_device:s0
  1237. /dev/msm_sps u:object_r:input_device:s0
  1238. /dev/msm_vidc_.* u:object_r:audio_device:s0
  1239. /dev/msm_wma u:object_r:audio_device:s0
  1240. /dev/msm_wmapro u:object_r:audio_device:s0
  1241. /dev/msm_wma_pro u:object_r:audio_device:s0
  1242. /dev/network_latency u:object_r:radio_device:s0
  1243. /dev/network_throughput u:object_r:radio_device:s0
  1244. /dev/nmea u:object_r:radio_device:s0
  1245. /dev/pmem_audio u:object_r:audio_device:s0
  1246. /dev/pta u:object_r:pta_device:s0
  1247. /dev/qmi[0-9]* u:object_r:radio_device:s0
  1248. # conflict with Qcom BSP, /dev/rmnet_mux_ctrl u:object_r:radio_device:s0
  1249. /dev/rtc[0-9]* u:object_r:clock_device:s0
  1250. /dev/sg[0-9]* u:object_r:sg_device:s0
  1251. /dev/smd_cxm_qmi u:object_r:smd_cxm_qmi_device:s0
  1252. /dev/smdcntl[0-9]* u:object_r:smd_cntl_device:s0
  1253. /dev/socket/audio u:object_r:audio_socket:s0
  1254. /dev/socket/mpctl u:object_r:mpctl_socket:s0
  1255. /dev/socket/mpdecision(/.*)? u:object_r:mpdecision_socket:s0
  1256. # conflict with Qcom BSP, /dev/socket/pps u:object_r:pps_socket:s0
  1257. /dev/socket/radio u:object_r:radio_socket:s0
  1258. # conflict with Qcom BSP, /dev/subsys_esoc[0-9]* u:object_r:esoc_device:s0
  1259. /dev/tspdrv u:object_r:vibrator_device:s0
  1260. # conflict with Qcom BSP, /dev/ttyHSL[0-9]* u:object_r:radio_device:s0
  1261. /dev/usf1 u:object_r:usf_device:s0
  1262. /dev/umts_ipc0 u:object_r:radio_device:s0
  1263. /dev/v4l-subdev[0-9]* u:object_r:camera_device:s0
  1264. #####/dev/v4l-subdev[0-9]* u:object_r:video_device:s0
  1265. # conflict with Qcom BSP, /dev/wcnss_wlan u:object_r:wifi_device:s0
  1266. #############################
  1267. # Device node of slsi_common
  1268. #
  1269. /dev/akm8963 u:object_r:akm8963_device:s0
  1270. /dev/b\.L_.* u:object_r:ap_device:s0
  1271. /dev/bbd_control u:object_r:bbd_device:s0
  1272. /dev/bbd_packet u:object_r:bbd_device:s0
  1273. /dev/bbd_patch u:object_r:bbd_device:s0
  1274. /dev/bbd_reliable u:object_r:bbd_device:s0
  1275. /dev/bbd_sensor u:object_r:bbd_device:s0
  1276. /dev/bbd_sio u:object_r:bbd_device:s0
  1277. /dev/bL.* u:object_r:ap_device:s0
  1278. /dev/cpu.* u:object_r:ap_device:s0
  1279. /dev/dir_enc_report u:object_r:report_device:s0
  1280. /dev/ecryptfs u:object_r:ecryptfs_device:s0
  1281. /dev/ehci_power u:object_r:mif_device:s0
  1282. /dev/exynos-mem u:object_r:graphics_device:s0
  1283. /dev/fimg2d(/.*)? u:object_r:fimg2d_video_device:s0
  1284. /dev/gps_geofence_wake u:object_r:gps_device:s0
  1285. /dev/invensense u:object_r:sensors_device:s0
  1286. /dev/keychord u:object_r:keychord_device:s0
  1287. /dev/kfc_freq_min u:object_r:ap_device:s0
  1288. /dev/link_pm u:object_r:radio_device:s0
  1289. # exynos5433 libhw1shotjpm1 and libscaler
  1290. /dev/m2m1shot_jpeg u:object_r:m2m1shot_device:s0
  1291. /dev/m2m1shot_scaler.* u:object_r:m2m1shot_device:s0
  1292. /dev/mali u:object_r:gpu_device:s0
  1293. /dev/mali[0-9] u:object_r:gpu_device:s0
  1294. /dev/mbin[0-9] u:object_r:mbin_device:s0
  1295. /dev/mdns u:object_r:mdns_device:s0
  1296. /dev/multipdp u:object_r:multipdp_device:s0
  1297. /dev/psaux u:object_r:psaux_device:s0
  1298. /dev/pts(/.*)? u:object_r:pts_device:s0
  1299. /dev/pvr_sync u:object_r:pvrsync_device:s0
  1300. /dev/s5p-smem u:object_r:s5p_smem_device:s0
  1301. /dev/seiren u:object_r:seiren_device:s0
  1302. /dev/spi_boot_link u:object_r:spi_boot_device:s0
  1303. /dev/srp u:object_r:srp_device:s0
  1304. /dev/sw_sync u:object_r:sync_device:s0
  1305. /dev/ttyBCM[0-9]* u:object_r:bbd_device:s0
  1306. /dev/ttySAC[0-9]* u:object_r:uart_device:s0
  1307. /dev/ump u:object_r:gpu_device:s0
  1308. /dev/umts.* u:object_r:mif_device:s0
  1309. ####################################
  1310. # sysfs files of sec_common
  1311. #
  1312. # no need because of genfscon /sys(/.*)? u:object_r:sysfs:s0
  1313. /sys/class/camera(/.*)? -- u:object_r:sysfs_camera_writable:s0
  1314. /sys/class/devfreq/exynos5-busfreq-mif(/.*)? -- u:object_r:sysfs_exynos_writable:s0
  1315. /sys/class/graphics/fb[0-9](/.*)? -- u:object_r:sysfs_graphics:s0
  1316. /sys/class/lcd(/.*)? -- u:object_r:sysfs_lcd_writable:s0
  1317. /sys/class/leds/moodlight/blink u:object_r:sysfs_led_writable:s0
  1318. /sys/class/leds/smartglow/blink u:object_r:sysfs_led_writable:s0
  1319. /sys/class/mdnie(/.*)? -- u:object_r:sysfs_mdnie_writable:s0
  1320. /sys/class/mst/mst_ftmdrv/transmit u:object_r:sysfs_mst_writable:s0
  1321. /sys/class/mstldo/mst_drv/transmit u:object_r:sysfs_mst_writable:s0
  1322. /sys/class/power_supply/battery(/.*)? -- u:object_r:sysfs_battery_supply:s0
  1323. /sys/class/power_supply/battery/music -- u:object_r:sysfs_music_power_writable:s0
  1324. /sys/class/power_supply/usb(/.*)? -- u:object_r:sysfs_usb_supply:s0
  1325. /sys/class/rfkill/rfkill[0-9]*/state -- u:object_r:sysfs_bluetooth_writable:s0
  1326. /sys/class/rfkill/rfkill[0-9]*/type -- u:object_r:sysfs_bluetooth_writable:s0
  1327. /sys/class/sec(/.*)? -- u:object_r:sysfs_sec:s0
  1328. /sys/class/sensors(/.*)? -- u:object_r:sysfs_sensor_writable:s0
  1329. /sys/class/tcon(/.*)? -- u:object_r:sysfs_tcon_writable:s0
  1330. /sys/devices/virtual/sec/sec_epen(/.*)? -- u:object_r:sysfs_sec:s0
  1331. # Remove because of restorecon_recursive_symlink /sys/devices/virtual/sec(/.*)? -- u:object_r:sysfs_sec:s0
  1332. #/sys/qemu_trace(/.*)? -- u:object_r:sysfs_writable:s0
  1333. /sys/kernel/config(/.*)? u:object_r:configfs:s0
  1334. ### start : supporting Factory app.
  1335. /sys/bus/i2c/drivers/fsa9480/7-0025/syssleep u:object_r:sysfs_ss_writable:s0
  1336. /sys/bus/i2c/drivers/sm5502/7-0025/syssleep u:object_r:sysfs_ss_writable:s0
  1337. /sys/class/android_usb/android0(/.*)? -- u:object_r:sysfs_android_usb:s0
  1338. /sys/class/backlight(/.*)? -- u:object_r:sysfs_ss_writable:s0
  1339. /sys/class/dsm/maxdsm_cal(/.*)? -- u:object_r:sysfs_ss_writable:s0
  1340. /sys/class/earsmart/control/always_stream_fs_on u:object_r:sysfs_ss_writable:s0
  1341. /sys/class/host_notify(/.*)? -- u:object_r:sysfs_ss_writable:s0
  1342. /sys/class/leds/led_[1-4](/.*)? -- u:object_r:sysfs_led_writable:s0
  1343. /sys/class/timed_output/vibrator/enable u:object_r:sysfs_ss_writable:s0
  1344. /sys/class/ultrasonic/ultrasonic/data u:object_r:sysfs_ss_writable:s0
  1345. /sys/class/usb/otg/test u:object_r:sysfs_ss_writable:s0
  1346. /sys/devices/14ac0000\.mali/power_policy u:object_r:sysfs_ss_writable:s0
  1347. /sys/devices/platform/omapdss/display1/sec_timing u:object_r:sysfs_ss_writable:s0
  1348. /sys/devices/virtual/misc/umts_dm0/dm_state u:object_r:sysfs_ss_writable:s0
  1349. # Remove because of restorecon_recursive_symlink /sys/devices/virtual/sec_param/sec_param/power_onoff u:object_r:sysfs_ss_writable:s0
  1350. /sys/class/sec_param/sec_param/power_onoff u:object_r:sysfs_ss_writable:s0
  1351. /sys/kernel/usb_atparser/uart_wakelock u:object_r:sysfs_ss_writable:s0
  1352. /sys/module/cpuidle/parameters/allow_coupled_idle u:object_r:sysfs_ss_writable:s0
  1353. /sys/module/cpuidle/parameters/enable_mask u:object_r:sysfs_ss_writable:s0
  1354. /sys/module/cpuidle_exynos4/parameters/enable_mask u:object_r:sysfs_ss_writable:s0
  1355. /sys/module/cpuidle_exynos4415/parameters/enable_mask u:object_r:sysfs_ss_writable:s0
  1356. /sys/module/cpuidle_exynos5433/parameters/enable_mask u:object_r:sysfs_ss_writable:s0
  1357. /sys/module/cpuidle_exynos64/parameters/enable_mask u:object_r:sysfs_ss_writable:s0
  1358. /sys/module/lpm_levels/parameters/secdebug u:object_r:sysfs_ss_writable:s0
  1359. /sys/module/exynos3470_cpuidle/parameters/enable_mask u:object_r:sysfs_ss_writable:s0
  1360. /sys/module/pm_8x60/modes/cpu0/power_collapse/idle_enabled u:object_r:sysfs_ss_writable:s0
  1361. /sys/module/pm_8x60/modes/cpu0/standalone_power_collapse/idle_enabled u:object_r:sysfs_ss_writable:s0
  1362. /sys/module/pm_8x60/modes/cpu1/standalone_power_collapse/idle_enabled u:object_r:sysfs_ss_writable:s0
  1363. /sys/module/qpnp_power_on/parameters/reset_enabled u:object_r:sysfs_ss_writable:s0
  1364. /sys/module/qpnp_int/parameters/debug_mask u:object_r:sysfs_ss_writable:s0
  1365. /sys/module/qpnp_power_on/parameters/wake_enabled u:object_r:sysfs_ss_writable:s0
  1366. /sys/power/ftm_sleep u:object_r:sysfs_ss_writable:s0
  1367. ### end : supporting Factory app.
  1368. # VR inflight write
  1369. /sys/power/cpuhotplug/enabled u:object_r:sysfs_ss_writable:s0
  1370. #secure touch
  1371. /sys/class/input/input[0-9]+/secure_touch_enable u:object_r:sysfs_ss_writable:s0
  1372. #############################
  1373. # System files of sec_common
  1374. #
  1375. /sbin/dm_verity_signature_checker u:object_r:dm_verity_signature_checker_exec:s0
  1376. /system/bin/reactived u:object_r:actlmand_exec:s0
  1377. /system/bin/androidshmservice u:object_r:androidshmservice_exec:s0
  1378. /system/bin/apaservice u:object_r:apaservice_exec:s0
  1379. #/system/bin/app_process u:object_r:zygote_exec:s0
  1380. /system/bin/at_distributor u:object_r:at_distributor_exec:s0
  1381. /system/bin/mksh u:object_r:shell_exec:s0
  1382. /system/bin/bauthserver u:object_r:bauthserver_exec:s0
  1383. /system/bin/bintvoutservice u:object_r:bintvoutservice_exec:s0
  1384. /system/bin/bootchecker u:object_r:bootchecker_exec:s0
  1385. /system/bin/bugreport u:object_r:bugreport_exec:s0
  1386. /system/bin/cellgeofenced u:object_r:cellgeofenced_exec:s0
  1387. /system/bin/charon u:object_r:charon_exec:s0
  1388. /system/bin/connfwexe u:object_r:connfwexe_exec:s0
  1389. /system/bin/corehelper\.sh u:object_r:corehelper_sh_file:s0
  1390. /system/bin/createsystemfile u:object_r:createsystemfile_exec:s0
  1391. /system/bin/cs u:object_r:cs_exec:s0
  1392. /system/bin/ddexe u:object_r:ddexe_exec:s0
  1393. /system/bin/dmm_v2 u:object_r:DMM-daemon_exec:s0
  1394. # conflict with Qcom BSP, /system/bin/diag_uart_log u:object_r:diag_uart_log_exec:s0
  1395. /system/bin/dttexe u:object_r:dttexe_exec:s0
  1396. /system/bin/dumpsys u:object_r:dumpsys_exec:s0
  1397. /system/bin/eris u:object_r:eris_exec:s0
  1398. /system/bin/factory\.adsp u:object_r:factory_adsp_exec:s0
  1399. /system/bin/fsck\.exfat -- u:object_r:fsck_exec:s0
  1400. /system/bin/icd u:object_r:icd_exec:s0
  1401. /system/bin/insthk u:object_r:insthk_exec:s0
  1402. /system/bin/imsd u:object_r:imsd_exec:s0
  1403. /system/bin/iod u:object_r:iod_exec:s0
  1404. /system/bin/ipruleset u:object_r:ipruleset_exec:s0
  1405. /system/bin/IPSecService u:object_r:IPSecService_exec:s0
  1406. /system/bin/irisd u:object_r:irisd_exec:s0
  1407. /system/bin/jackservice u:object_r:jackservice_exec:s0
  1408. /system/bin/kiesexe u:object_r:kiesexe_exec:s0
  1409. /system/bin/launcher u:object_r:launcher_exec:s0
  1410. #/system/bin/logwrapper u:object_r:logwrapper_exec:s0
  1411. /system/bin/lptcpController u:object_r:lptcpgc_exec:s0
  1412. #/system/bin/mdnsd u:object_r:mdnsd_exec:s0
  1413. /system/bin/mkfs\.exfat -- u:object_r:fsck_exec:s0
  1414. /system/bin/mobicore-startup\.sh u:object_r:mobicore_sh_file:s0
  1415. #/system/bin/netmgrd u:object_r:netmgrd_exec:s0
  1416. /system/bin/npsmobex u:object_r:mobexdaemon_exec:s0
  1417. /system/bin/nqs u:object_r:nqs_exec:s0
  1418. /system/bin/olsrd u:object_r:olsrd_exec:s0
  1419. /system/bin/p2p_supplicant u:object_r:p2p_supplicant_exec:s0
  1420. /system/bin/pppoewrapper u:object_r:pppoewrapper_exec:s0
  1421. /system/bin/prepare_param\.sh u:object_r:prepare_param_sh_file:s0
  1422. /system/bin/rtc_log\.sh u:object_r:rtc_log_sh_file:s0
  1423. /system/bin/redsocks u:object_r:redsocks_exec:s0
  1424. /system/bin/samsungpowersoundplay u:object_r:samsungpowersoundplay_exec:s0
  1425. /system/bin/scs u:object_r:scs_exec:s0
  1426. /system/bin/sdp_cryptod u:object_r:sdp_cryptod_exec:s0
  1427. /system/bin/sec-ril u:object_r:sec-ril_exec:s0
  1428. /system/bin/secure_storage_daemon u:object_r:secure_storage_exec:s0
  1429. /system/bin/sem_daemon u:object_r:sem_exec:s0
  1430. /system/bin/sensorhubservice u:object_r:sensorhubservice_exec:s0
  1431. /system/bin/selinux-network\.sh u:object_r:selinux_net_exec:s0
  1432. /system/bin/ss_conn_daemon u:object_r:ss_conn_daemon_exec:s0
  1433. /system/bin/ss_kbservice_daemon u:object_r:ss_kbservice_daemon_exec:s0
  1434. /system/bin/smdexe u:object_r:smdexe_exec:s0
  1435. /system/bin/sshd u:object_r:sshd_exec:s0
  1436. /system/bin/taadaemon u:object_r:tzdaemon_exec:s0
  1437. /system/bin/tzdaemon u:object_r:tzdaemon_exec:s0
  1438. /system/bin/sysmon u:object_r:sysmon_exec:s0
  1439. /system/bin/tima_dump_log u:object_r:tima_dump_exec:s0
  1440. # for DDC(Dynamic Domain Change)
  1441. /system/bin/trustonic_tee_proxy u:object_r:trustonic_tee_proxy_exec:s0
  1442. /system/bin/tlc_server u:object_r:tlc_server_exec:s0
  1443. /system/bin/tunman u:object_r:tunman_exec:s0
  1444. /system/bin/otp_server u:object_r:otp_server_exec:s0
  1445. /system/bin/vcsFPService u:object_r:vcsFPService_exec:s0
  1446. /system/bin/vfmService u:object_r:vcsFPService_exec:s0
  1447. /system/bin/vpnclientd u:object_r:vpnclientd_exec:s0
  1448. /system/bin/vaultkeeperd u:object_r:vaultkeeperd_exec:s0
  1449. # conflict with Qcom BSP, /system/bin/wcnss_service u:object_r:wcnss_service_exec:s0
  1450. /system/bin/wldu u:object_r:wldu_exec:s0
  1451. /system/bin/wpa_supplicant_real u:object_r:wpa_exec:s0
  1452. #ISDBT
  1453. /system/bin/broadcastProcessObserver_ltn u:object_r:oneseg_mw_exec:s0
  1454. /system/bin/OneSegControl u:object_r:oneseg_mw_exec:s0
  1455. /system/bin/OneSegDsmcc_ltn u:object_r:oneseg_mw_exec:s0
  1456. /system/bin/OneSegGinga u:object_r:oneseg_mw_exec:s0
  1457. /system/bin/OneSegTsDemux_ltn u:object_r:oneseg_mw_exec:s0
  1458. /system/bin/SMPlayer_fullseg u:object_r:oneseg_mw_exec:s0
  1459. /system/etc/event-log-tags u:object_r:event_log_tags_file:s0
  1460. /system/etc/dhcpcd(/.*)? u:object_r:dhcp_system_file:s0
  1461. /system/etc/init\.sec\.boot\.sh u:object_r:sec-sh_exec:s0
  1462. /system/etc/install-recovery\.sh u:object_r:flash_recovery_sh_file:s0
  1463. /system/etc/ppp(/.*)? u:object_r:ppp_system_file:s0
  1464. /system/lib(/.*)? u:object_r:system_library_file:s0
  1465. #############################
  1466. # System files of knox_common
  1467. #
  1468. /system/bin/auditd u:object_r:auditd_exec:s0
  1469. /system/bin/edmaudit u:object_r:edmaudit_exec:s0
  1470. /system/bin/epmd u:object_r:epmd_exec:s0
  1471. /system/bin/epmlogd u:object_r:epmlogd_exec:s0
  1472. #############################
  1473. # System files of qcom_common
  1474. #
  1475. # conflict with Qcom BSP, /system/bin/adsprpcd u:object_r:adsprpcd_exec:s0
  1476. # conflict with Qcom BSP, /system/bin/charger_monitor u:object_r:charger_monitor_exec:s0
  1477. # conflict with Qcom BSP, /system/bin/dpmd u:object_r:dpmd_exec:s0
  1478. /system/bin/efsks u:object_r:efsks_exec:s0
  1479. /system/bin/energy-awareness u:object_r:energy-awareness_exec:s0
  1480. /system/bin/geomagneticd u:object_r:geomagneticd_exec:s0
  1481. # conflict with Qcom BSP, /system/bin/gpsone_daemon u:object_r:gpsone_daemon_exec:s0
  1482. /system/bin/gpu_snapshotd u:object_r:gpu_snapshotd_exec:s0
  1483. # conflict with Qcom BSP, /system/bin/gsiff_daemon u:object_r:gsiff_daemon_exec:s0
  1484. # conflict with Qcom BSP, /system/bin/imsqmidaemon u:object_r:imsqmidaemon_exec:s0
  1485. # conflict with Qcom BSP, /system/bin/ks u:object_r:ks_exec:s0
  1486. # conflict with Qcom BSP, /system/bin/location-mq u:object_r:location-mq_exec:s0
  1487. # conflict with Qcom BSP, /system/bin/lowi-server u:object_r:lowi-server_exec:s0
  1488. /system/bin/macloader u:object_r:macloader_exec:s0
  1489. /system/bin/mcDriverDaemon u:object_r:mobicoredaemon_exec:s0
  1490. /system/bin/mcDriverDaemonQC u:object_r:mobicoredaemon_exec:s0
  1491. # conflict with Qcom BSP, /system/bin/mdm_helper u:object_r:mdm_helper_exec:s0
  1492. # conflict with Qcom BSP, /system/bin/mdm_helper_proxy u:object_r:mdm_helper_proxy_exec:s0
  1493. /system/bin/mfgloader u:object_r:mfgloader_exec:s0
  1494. # conflict with Qcom BSP, /system/bin/mm-pp-daemon u:object_r:mm-pp-daemon_exec:s0
  1495. # conflict with Qcom BSP, /system/bin/mm-qcamera-daemon u:object_r:mm-qcamera-daemon_exec:s0
  1496. # conflict with Qcom BSP, /system/bin/mpdecision u:object_r:mpdecision_exec:s0
  1497. /system/bin/ptt_socket_app u:object_r:ptt_socket_app_exec:s0
  1498. /system/bin/qcks u:object_r:qcks_exec:s0
  1499. # conflict with Qcom BSP, /system/bin/qcom-system-daemon u:object_r:qcom-system-daemon_exec:s0
  1500. /system/bin/qmiproxy u:object_r:qmiproxy_exec:s0
  1501. /system/bin/qosmgr u:object_r:qosmgr_exec:s0
  1502. /system/bin/qrngd u:object_r:qrngd_exec:s0
  1503. # conflict with Qcom BSP, /system/bin/qseecomd u:object_r:qseecomd_exec:s0
  1504. # conflict with Qcom BSP, /system/bin/quipc_igsn u:object_r:quipc_igsn_exec:s0
  1505. # conflict with Qcom BSP, /system/bin/quipc_main u:object_r:quipc_main_exec:s0
  1506. # conflict with Qcom BSP, /system/bin/rfs_access u:object_r:rfs_access_exec:s0
  1507. # conflict with Qcom BSP, /system/bin/rmt_storage u:object_r:rmt_storage_exec:s0
  1508. /system/bin/scranton_RD u:object_r:playready_exec:s0
  1509. /system/bin/secstarter u:object_r:secstarter_exec:s0
  1510. # conflict with Qcom BSP, /system/bin/ssr_diag u:object_r:ssr_diag_exec:s0
  1511. /system/bin/thermal-engine u:object_r:thermal-engine_exec:s0
  1512. /system/bin/thermald u:object_r:thermald_exec:s0
  1513. # conflict with Qcom BSP, /system/bin/time_daemon u:object_r:time_daemon_exec:s0
  1514. /system/bin/wiperiface u:object_r:wiperiface_exec:s0
  1515. /system/bin/wlandutservice u:object_r:wlandutservice_exec:s0
  1516. #############################
  1517. # System files of slsi_common
  1518. #
  1519. /system/bin/argosd u:object_r:argosd_exec:s0
  1520. /system/bin/brcm_patchram_plus u:object_r:brcm_patchram_plus_exec:s0
  1521. /system/bin/bridge_relay u:object_r:debug_interface_proxy_exec:s0
  1522. /system/bin/debug_interface_proxy u:object_r:debug_interface_proxy_exec:s0
  1523. /system/bin/diagexe u:object_r:diagexe_exec:s0
  1524. /system/bin/exyrngd u:object_r:exyrngd_exec:s0
  1525. /system/bin/gpsd u:object_r:gpsd_exec:s0
  1526. /system/bin/secgpsd u:object_r:gpsd_exec:s0
  1527. /system/bin/lhd u:object_r:lhd_exec:s0
  1528. /system/bin/mld u:object_r:debug_interface_proxy_exec:s0
  1529. /system/bin/mlexe u:object_r:mlexe_exec:s0
  1530. /system/bin/mmd u:object_r:debug_interface_proxy_exec:s0
  1531. /system/bin/rpmbd u:object_r:rpmbd_exec:s0
  1532. /system/etc/security/\.drm u:object_r:drm_security_system_file:s0
  1533. /system/bin/sced u:object_r:sced_exec:s0
  1534. /system/etc/ymc/setup u:object_r:setup_ymc_etc_system_file:s0
  1535. /system/lib/drm u:object_r:drm_lib_system_file:s0
  1536. /system/bin/vcd u:object_r:vcd_exec:s0
  1537. #############################
  1538. # DATA file of sec_common
  1539. #
  1540. /data/app-lib(/.*)? u:object_r:app_library_file:s0
  1541. /data/app/rpmbd u:object_r:rpmbd_socket:s0
  1542. /data/bcmnfc(/.*)? u:object_r:nfc_data_file:s0
  1543. /data/bio/ir(/.*)? u:object_r:iris_data_file:s0
  1544. /data/biometrics(/.*)? u:object_r:biometrics_data_file:s0
  1545. #changeBySEA : /data/data/.* u:object_r:app_data_file:s0
  1546. #/data/data/\.drm(/.*)? u:object_r:drm_data_file:s0
  1547. #/data/data/com\.android\.providers\.downloads/cache u:object_r:download_file:s0
  1548. /data/data/com\.android\.settings/files/wallpaper u:object_r:wallpaper_file:s0
  1549. /data/data/com\.android\.shell(/.*)? u:object_r:shell_data_file:s0
  1550. /data/data/imsqmisocket u:object_r:system_data_file:s0
  1551. /data/data/lptcpSocket u:object_r:lptcp_data_file:s0
  1552. /data/dipconfs(/.*)? u:object_r:debug_interface_data_file:s0
  1553. /data/DownFilters/Lib(/.*)? u:object_r:downfilters_lib_file:s0
  1554. /data/DownFilters/Lib64(/.*)? u:object_r:downfilters_lib_file:s0
  1555. /data/DxDrm(/.*)? u:object_r:drm_playready_file:s0
  1556. /data/firmware(/.*)? u:object_r:mediaserver_data_file:s0
  1557. /data/fota(/.*)? u:object_r:fota_data_file:s0
  1558. /data/fpSnrTest(/.*)? u:object_r:shared_data_file:s0
  1559. /data/KEqvTaYEYkuJr1Mn+t-SwFvbgYo_(/.*)? u:object_r:tima_keystore_file:s0
  1560. /data/knox_tima(/.*)? u:object_r:tima_keystore_file:s0
  1561. /data/log(/.*)? u:object_r:dumplog_data_file:s0
  1562. /data/media\.tmp(/.*)? u:object_r:media_rw_data_file:s0
  1563. /data/media/obb(/.*)? u:object_r:obb_apk_file:s0
  1564. #from nsa
  1565. /data/misc/audit(/.*)? u:object_r:audit_log:s0
  1566. /data/misc/eris(/.*)? u:object_r:eris_data_file:s0
  1567. /data/misc/jack(/.*)? u:object_r:jack_data_file:s0
  1568. /data/misc/multimedia(/.*)? u:object_r:mediaserver_data_file:s0
  1569. /data/misc/radio(/.*)? u:object_r:radio_data_file:s0
  1570. /data/misc/tima(/.*)? u:object_r:tima_log:s0
  1571. /data/misc/tima_keystore(/.*)? u:object_r:tima_keystore_file:s0
  1572. /data/misc/tz_esecomm(/.*)? u:object_r:tima_keystore_file:s0
  1573. /data/misc/vpnclientd(/.*)? u:object_r:vpnclientd_data_file:s0
  1574. /data/otp(/.*)? u:object_r:otp_data_file:s0
  1575. /data/one-seg(/.*)? u:object_r:oneseg_data_file:s0
  1576. # For DCM
  1577. /data/misc/tz_dcm(/.*)? u:object_r:dcm_data_file:s0
  1578. # personalpage path is not used by (hyojin45.son)
  1579. # /data/personalpage(/.*)? u:object_r:personal_page_file:s0
  1580. # new path for personalpage is privatemode.K is first model for personalpage.
  1581. /data/privatemode(/.*)? u:object_r:personal_page_file:s0
  1582. /data/sc(/.*)? u:object_r:smartcard_data_file:s0
  1583. /data/snd(/.*)? u:object_r:audio_data_file:s0
  1584. /data/ss_kbservice_daemon u:object_r:ss_kbservice_daemon_socket:s0
  1585. /data/system/gps(/.*)? u:object_r:gps_data_file:s0
  1586. /data/system/hdcp2_1013(/.*)? u:object_r:mediaserver_data_file:s0
  1587. /data/system/kb\.bin u:object_r:drm_data_file:s0
  1588. /data/system/secure_storage(/.*)? u:object_r:secure_storage_data_file:s0
  1589. /data/system/users(/.*)? u:object_r:users_system_data_file:s0
  1590. # Fingerprint data
  1591. /data/system/users/[0-9]*/fpdata(/.*)? u:object_r:fingerprintd_data_file:s0
  1592. /data/system/users(/.*)/wallpaper u:object_r:wallpaper_file:s0
  1593. /data/system/users(/.*)/wallpaper2 u:object_r:wallpaper_file:s0
  1594. /data/validity(/.*)? u:object_r:vcsFPService_data_file:s0
  1595. /data/tee(/.*)? u:object_r:tee_data_file:s0
  1596. # DATA file of slsi_common
  1597. /data/local/log(/._*0-9)? u:object_r:cbd_log_data:s0
  1598. /data/local/slog(/._*0-9)? u:object_r:dmd_log_data:s0
  1599. /data/data/com\.android\.providers\.telephony/opname\.db u:object_r:ril_db_file:s0
  1600. #SEContainer clipboard
  1601. /data/clipboard/secontainer/102(/.*)? u:object_r:good_app_data_file:s0
  1602. # request from CP system(leo.nam)
  1603. /data/\.attipv6(/.*)? u:object_r:rild_data_file:s0
  1604. /data/\.data_usage_rx(/.*)? u:object_r:rild_data_file:s0
  1605. /data/\.data_usage_tx(/.*)? u:object_r:rild_data_file:s0
  1606. /data/\.dcmdrm(/.*)? u:object_r:drm_playready_file:s0
  1607. /data/\.fido(/.*)? u:object_r:fido_data_file:s0
  1608. /data/\.sktdrm(/.*)? u:object_r:drm_playready_file:s0
  1609. /data/\.wifiver\.info u:object_r:wifiver_data_file:s0
  1610. /data/\.otp\.info u:object_r:wifiver_data_file:s0
  1611. /data/EP_save\.bak u:object_r:mediaserver_data_file:s0
  1612. #############################
  1613. # DATA file of knox_common
  1614. #
  1615. /data/\.container_[1-9](/.*)? u:object_r:container_app_data_backend:s0
  1616. /data/clipboard/knox(/.*)? u:object_r:knox_clipboard_file:s0
  1617. /data/clipboard1[0-9][0-9](/.*)? u:object_r:knox_clipboard_file:s0
  1618. /data/container(/.*)? u:object_r:container_app_data_backend:s0
  1619. /data/container2\.0(/.*)? u:object_r:bbccontainer_app_data_backend:s0
  1620. /data/knox_otp(/.*)? u:object_r:otp_data_file:s0
  1621. /data/knox(/.*)? u:object_r:container_app_data_backend:s0
  1622. /data/knox/data/19[5-9](/.*)? u:object_r:bbccontainer_app_data_backend:s0
  1623. /data/knox/sdcard/19[5-9](/.*)? u:object_r:bbccontainer_app_data_backend:s0
  1624. /data/knox/secure_fs/enc_media(/.*)? u:object_r:media_rw_data_file:s0
  1625. #/data/knox/secure_fs/enc_user(/.*)? u:object_r:media_rw_data_file:s0
  1626. /data/security/aasa(/.*)? u:object_r:security_spota_file:s0
  1627. /data/security/spota(/.*)? u:object_r:security_spota_file:s0
  1628. /data/system/container(/.*)? u:object_r:container_system_file:s0
  1629. # KNOX package root
  1630. /data/user/1[0-8][0-9](/.*)? u:object_r:container_app_data_backend:s0
  1631. /data/user/19[0-4](/.*)? u:object_r:container_app_data_backend:s0
  1632. /data/user/19[5-9](/.*)? u:object_r:bbccontainer_app_data_backend:s0
  1633. # /mnt/runtime/
  1634. /mnt/runtime/(default|read|write)/emulated/[0-9](/.*)? u:object_r:media_rw_data_file:s0
  1635. # /storage/emulated/
  1636. /storage/emulated/[0-9](/.*)? u:object_r:media_rw_data_file:s0
  1637. /storage/(emulated|knox-emulated)/1[0-8][0-9](/.*)? u:object_r:container_app_data_backend:s0
  1638. /storage/(emulated|knox-emulated)/19[0-4](/.*)? u:object_r:container_app_data_backend:s0
  1639. /storage/(emulated|knox-emulated)/19[5-9](/.*)? u:object_r:bbccontainer_app_data_backend:s0
  1640. # /mnt/knox/
  1641. /mnt/knox/(default|read|write)/(emulated|knox-emulated)/1[0-8][0-9](/.*)? u:object_r:container_app_data_backend:s0
  1642. /mnt/knox/(default|read|write)/(emulated|knox-emulated)/19[0-4](/.*)? u:object_r:container_app_data_backend:s0
  1643. /mnt/knox/(default|read|write)/(emulated|knox-emulated)/19[5-9](/.*)? u:object_r:bbccontainer_app_data_backend:s0
  1644. /mnt/shell/emulated/([1-9])?[0-9](/.*)? u:object_r:media_rw_data_file:s0
  1645. /mnt/shell/emulated/1[0-8][0-9](/.*)? u:object_r:container_app_data_backend:s0
  1646. /mnt/shell/emulated/19[0-4](/.*)? u:object_r:container_app_data_backend:s0
  1647. /mnt/shell/emulated/19[5-9](/.*)? u:object_r:bbccontainer_app_data_backend:s0
  1648. /mnt/shell/enc_emulated/[0-9](/.*)? u:object_r:media_rw_data_file:s0
  1649. /mnt/shell/enc_media/[0-9](/.*)? u:object_r:media_rw_data_file:s0
  1650. /mnt/shell/knox-emulated/1[0-8][0-9](/.*)? u:object_r:container_app_data_backend:s0
  1651. /mnt/shell/knox-emulated/19[0-4](/.*)? u:object_r:container_app_data_backend:s0
  1652. /mnt/shell/knox-emulated/19[5-9](/.*)? u:object_r:bbccontainer_app_data_backend:s0
  1653. #/mnt/user/1[0-8][0-9](/.*)? u:object_r:container_app_data_backend:s0
  1654. #/mnt/user/19[0-4](/.*)? u:object_r:container_app_data_backend:s0
  1655. #/mnt/user/19[5-9](/.*)? u:object_r:bbccontainer_app_data_backend:s0
  1656. # AfW
  1657. /data/media/[1-9][0-9](/.*)? u:object_r:container_app_data_backend:s0
  1658. /mnt/runtime/(default|read|write)/emulated/[1-9][0-9](/.*)? u:object_r:container_app_data_backend:s0
  1659. /mnt/shell/enc_emulated/[1-9][0-9](/.*)? u:object_r:container_app_data_backend:s0
  1660. /mnt/shell/enc_media/[1-9][0-9](/.*)? u:object_r:container_app_data_backend:s0
  1661. /storage/emulated/[1-9][0-9](/.*)? u:object_r:container_app_data_backend:s0
  1662. #############################
  1663. # DATA file of qcom_common
  1664. #
  1665. /data/misc/gpsone_d(/.*)? u:object_r:gps_data_file:s0
  1666. /data/misc/sshdcpapp(/.*)? u:object_r:data_qsee_file:s0
  1667. # conflict with Qcom BSP, /data/misc/location(/.*)? u:object_r:gps_data_file:s0
  1668. /data/time(/.*)? u:object_r:time_data_file:s0
  1669. #############################
  1670. # EFS file of sec_common
  1671. #
  1672. /cpefs(/.*)? u:object_r:sec_efs_file:s0
  1673. # Add labelling code for /efs/apn-changes.xml it using only for M upgrade model & first released version is Kitkat. ( From L OS using /efs/sec_efs/apn-changes.xml)
  1674. /efs/apn-changes\.xml u:object_r:sec_efs_file:s0
  1675. /efs/bluetooth(/.*)? u:object_r:bluetooth_efs_file:s0
  1676. /efs/carrier(/.*)? u:object_r:carrier_efs_file:s0
  1677. /efs/cirrus(/.*)? u:object_r:sec_efs_file:s0
  1678. /efs/cpk(/.*)? u:object_r:cpk_efs_file:s0
  1679. /efs/drx(/.*)? u:object_r:sec_efs_file:s0
  1680. /efs/FactoryApp(/.*)? u:object_r:app_efs_file:s0
  1681. /efs/imei(/.*)? u:object_r:imei_efs_file:s0
  1682. /efs/ims_setting(/.*)? u:object_r:sec_efs_file:s0
  1683. /efs/iss(/.*)? u:object_r:iss_efs_file:s0
  1684. /efs/logguard(/.*)? u:object_r:iss_efs_file:s0
  1685. /efs/maxim(/.*)? u:object_r:sec_efs_file:s0
  1686. /efs/mc(/.*)? u:object_r:prov_efs_file:s0
  1687. /efs/\.nv_core\.bak(.*) u:object_r:nv_core_efs_file:s0
  1688. /efs/otadm(/.*)? u:object_r:otadm_efs_file:s0
  1689. /efs/otadm_sw_version u:object_r:otadm_efs_file:s0
  1690. /efs/pfw_data(/.*)? u:object_r:pfw_efs_file:s0
  1691. /efs/prov(/.*)? u:object_r:prov_efs_file:s0
  1692. /efs/prov_data(/.*)? u:object_r:prov_efs_file:s0
  1693. /efs/recovery(/.*)? u:object_r:sec_efs_file:s0
  1694. /efs/root(/.*)? u:object_r:app_efs_file:s0
  1695. /efs/sec_efs(/.*)? u:object_r:sec_efs_file:s0
  1696. /efs/sec_efs/retailmode(/.*)? u:object_r:retailmode_efs_file:s0
  1697. /efs/security(/.*)? u:object_r:prov_efs_file:s0
  1698. /efs/sktdm_mem(/.*)? u:object_r:sec_efs_file:s0
  1699. /efs/SMS(/.*)? u:object_r:sec_efs_file:s0
  1700. /efs/SlideCount u:object_r:app_efs_file:s0
  1701. /efs/TEE(/.*)? u:object_r:prov_efs_file:s0
  1702. /efs/vk(/.*)? u:object_r:vaultkeeper_efs_file:s0
  1703. /efs/wifi(/.*)? u:object_r:wifi_efs_file:s0
  1704. /efs_gsm(/.*)? u:object_r:efs_gsm_file:s0
  1705. /efs/calibration_data u:object_r:sec_efs_file:s0
  1706. /efs/grip_cal_data u:object_r:sec_efs_file:s0
  1707. /efs/gyro_cal_data u:object_r:sec_efs_file:s0
  1708. /efs/hw_offset u:object_r:sec_efs_file:s0
  1709. /efs/osc_trim u:object_r:sec_efs_file:s0
  1710. /efs/prox_cal u:object_r:sec_efs_file:s0
  1711. #############################
  1712. # EFS file of qcom_common
  1713. #
  1714. /efs/drm(/.*)? u:object_r:drm_efs_file:s0
  1715. /efs/\.drm(/.*)? u:object_r:drm_efs_file:s0
  1716. #############################
  1717. # EFS file of slsi_common
  1718. #
  1719. /efs/nv_data\.bin(.*) u:object_r:bin_nv_data_efs_file:s0
  1720. /efs/nv_fsm_data\.bin u:object_r:bin_nv_data_efs_file:s0
  1721. /efs/nv\.log u:object_r:cbd_log_data:s0
  1722. #############################
  1723. # MISC partition file of sec_common
  1724. #
  1725. /custom(/.*)? u:object_r:sbfs_file:s0
  1726. /fw(/.*)? u:object_r:device_firmware_file:s0
  1727. #/hidden(/.*)? u:object_r:hidden_file:s0
  1728. #/persdata(/.*)? u:object_r:persdata_data_file:s0
  1729. /persdata/absolute(/.*)? u:object_r:abt_pers_data_file:s0
  1730. # conflict with Qcom BSP, /persist(/.*)? u:object_r:persist_data_file:s0
  1731. #/preload(/.*)? u:object_r:hidden_file:s0
  1732. /sbfs(/.*)? u:object_r:sbfs_file:s0
  1733. #/tombstone(/.*)? u:object_r:tombstone_data_file:s0
  1734. #/tombstones(/.*)? u:object_r:tombstone_data_file:s0
  1735. #############################
  1736. # MNT of sec_common
  1737. #
  1738. /mnt/obb(/.*)? u:object_r:obb_apk_file:s0
  1739. /mnt/secure/asec(/.*)? u:object_r:asec_apk_file:s0
  1740. /mnt/secure/staging(/.*)? u:object_r:asec_image_file:s0
  1741. #############################
  1742. # MNT of bcom_common
  1743. #
  1744. /mnt/modemfsro(/.*)? u:object_r:modem_firmware:s0
  1745. /mnt/modemfsro_fix(/.*)? u:object_r:modem_firmware:s0
  1746. /mnt/modemfsrw(/.*)? u:object_r:modem_firmware:s0
  1747. /mnt/modemfw(/.*)? u:object_r:modem_firmware:s0
  1748. /mnt/modemlog(/.*)? u:object_r:modem_firmware:s0
  1749. /mnt/securityro(/.*)? u:object_r:security_firmware:s0
  1750. /mnt/securityrw(/.*)? u:object_r:security_firmware:s0
  1751. #############################
  1752. # Carrier file of sec_common
  1753. # carrier folder for Sprint(Qualcomm and SLSI)
  1754. /carrier(/.*)? u:object_r:carrier_file:s0
  1755. # OMC_v3(Open Mobile Customization)
  1756. /omr(/.*)? u:object_r:omr_file:s0
  1757. #############################
  1758. # PROC INFO / LOCK FILE
  1759. # for preventing migration issue, this files were created by type_transition rules.
  1760. #
  1761. /data/local/olsrd\.lock u:object_r:proc_info_file:s0
  1762. /data/ss_conn_daemon\.pid u:object_r:proc_info_file:s0
  1763. /data/\.cid\.info u:object_r:proc_info_file:s0
  1764. #line 1 "vendor/samsung/common/sepolicy/carrier/carrier_spr/file_contexts"
  1765. #### Kineto for secsprextension/java/com/oem/smartwifisupport
  1766. /dev/socket/cfiat u:object_r:cfiat_socket:s0
  1767. /dev/socket/kipc u:object_r:kipc_socket:s0
  1768. #############################
  1769. # ItsOn file
  1770. #
  1771. #/system/vendor/itson(/.*)? u:object_r:sprintitson_file:s0
  1772. #/vendor/app(/.*)? u:object_r:sprintitson_file:s0
  1773. /carrier/itson(/.*)? u:object_r:sprintitson_file:s0
  1774. /dev/socket/itson(/.*)? u:object_r:itson_socket:s0
  1775. /data/itson(/.*)? u:object_r:sprintitson_file:s0
  1776. /system/vendor/itson/itson-bootstrapper\.sh u:object_r:itsonbs_exec:s0
  1777. #line 1 "vendor/samsung/common/sepolicy/carrier/carrier_tfntmo/file_contexts"
  1778. /system/bin/tsdaemon u:object_r:tsdaemon_exec:s0
  1779. #line 1 "vendor/samsung/common/sepolicy/carrier/carrier_kor/file_contexts"
  1780. /system/bin/dmbserver u:object_r:dmb_exec:s0
  1781. /dev/tdmb u:object_r:tdmb_device:s0
  1782. /data/\.dmbca(/.*)? u:object_r:dmb_data_file:s0
  1783. /data/playready(/.*)? u:object_r:playready_file:s0
  1784. ############ LGT #############
  1785. /data/LGTContents(/.*)? u:object_r:lgt_contents_file:s0
  1786. /system/bin/diag_knight u:object_r:ss_diagknight_daemon_exec:s0
  1787. /system/bin/mwlan_helper u:object_r:mwlan_helper_exec:s0
  1788. /dev/mwlan_aarp u:object_r:mwlan_aarp_device:s0
  1789. /dev/ipsecdrvtl u:object_r:mwlan_ipsecdrvtl_device:s0
  1790. ############ SKT #############
  1791. /system/bin/iwland u:object_r:iwland_exec:s0
  1792. /dev/iwland(/.*)? u:object_r:skt_socket:s0
  1793. /system/bin/tbased u:object_r:tbased_exec:s0
  1794. #line 1 "vendor/samsung/common/sepolicy/carrier/carrier_jpn/file_contexts"
  1795. #felica start
  1796. # JPN Felica Temporary Workaround
  1797. /dev/ttyHSL2 u:object_r:nfcfelica_device:s0
  1798. #/dev/ttyHSL1 u:object_r:nfcfelica_device:s0
  1799. /dev/snfc_uart u:object_r:nfc_device:s0
  1800. /dev/snfc_pon u:object_r:nfc_device:s0
  1801. /dev/snfc_hsel u:object_r:nfc_device:s0
  1802. /dev/snfc_intu_poll u:object_r:nfc_device:s0
  1803. /dev/snfc_available_poll u:object_r:nfc_device:s0
  1804. /dev/snfc_rfs u:object_r:nfc_device:s0
  1805. /dev/snfc_rfs_poll u:object_r:nfc_device:s0
  1806. /dev/uartcc u:object_r:nfc_device:s0
  1807. /dev/felica_cen u:object_r:nfcfelica_device:s0
  1808. /dev/snfc_cen u:object_r:nfcfelica_device:s0
  1809. /dev/felica u:object_r:felica_device:s0
  1810. /dev/felica_pon u:object_r:felica_device:s0
  1811. /dev/felica_rfs u:object_r:felica_device:s0
  1812. /dev/felica_rws u:object_r:felica_device:s0
  1813. /dev/felica_ant u:object_r:felica_device:s0
  1814. /dev/felica_int_poll u:object_r:felicashell_device:s0
  1815. /dev/felica_uid u:object_r:felica_device:s0
  1816. /dev/felica_uicc u:object_r:felica_device:s0
  1817. #felica end
  1818. #felica start
  1819. /system/bin/fsslcmnd u:object_r:fsslcmnd_exec:s0
  1820. /system/bin/mfdp u:object_r:mfdp_exec:s0
  1821. /system/bin/mfsc u:object_r:mfsc_exec:s0
  1822. #felica end
  1823. #secprov_nexti
  1824. /system/bin/secprov_nexti u:object_r:secprov_nexti_exec:s0
  1825. /data/dxprdy(/.*)? u:object_r:drm_playready_file:s0
  1826. #TMM
  1827. /system/bin/MmbCaCasDrmMw u:object_r:mmb_mw_exec:s0
  1828. /system/bin/MmbFcCtlMw u:object_r:mmb_mw_exec:s0
  1829. /system/bin/MmbStCtlMwService u:object_r:mmb_mw_exec:s0
  1830. /system/bin/MmbFcMp4MwServer u:object_r:mmb_mw_exec:s0
  1831. /system/bin/MmbFcLiceMwServer u:object_r:mmb_mw_exec:s0
  1832. /system/bin/MmbStRecCmMwService u:object_r:mmb_mw_exec:s0
  1833. /data/mmb(/.*)? u:object_r:mmb_data_file:s0
  1834. # for fullseg
  1835. /system/bin/dtvserver u:object_r:dtvserver_exec:s0
  1836. # for oneseg and mmcblk0p16
  1837. /system/bin/nexprocess u:object_r:oneseg_mw_exec:s0
  1838. /system/bin/broadcastProcessObserver u:object_r:oneseg_mw_exec:s0
  1839. /system/bin/BMLEngineServer u:object_r:oneseg_mw_exec:s0
  1840. /system/bin/OneSegDsmcc u:object_r:oneseg_mw_exec:s0
  1841. /system/bin/OneSegTsDemux u:object_r:oneseg_mw_exec:s0
  1842. /system/bin/SDtvService u:object_r:oneseg_mw_exec:s0