blob: 64de61a5ea9487f6951e814a9d4484be4a323cff [file] [log] [blame]
Stephen Smalley2dd4e512012-01-04 12:33:27 -05001######################################
2# Attribute declarations
3#
4
5# All types used for devices.
6attribute dev_type;
7
8# All types used for processes.
9attribute domain;
10
11# All types used for filesystems.
12attribute fs_type;
13
14# All types used for files that can exist on a labeled fs.
15# Do not use for pseudo file types.
16attribute file_type;
17
18# All types used for domain entry points.
19attribute exec_type;
20
21# All types used for /data files.
22attribute data_file_type;
23
24# All types use for sysfs files.
25attribute sysfs_type;
26
William Robertsc195ec32013-03-06 16:26:36 -080027# Attribute used for all sdcards
28attribute sdcard_type;
29
Stephen Smalley2dd4e512012-01-04 12:33:27 -050030# All types used for nodes/hosts.
31attribute node_type;
32
33# All types used for network interfaces.
34attribute netif_type;
35
36# All types used for network ports.
37attribute port_type;
38
Stephen Smalley124720a2012-04-04 10:11:16 -040039# All types used for property service
40attribute property_type;
41
Riley Spahnf90c41f2014-06-05 15:52:02 -070042# All types used for services managed by service_manager.
43attribute service_manager_type;
44
Stephen Smalley2dd4e512012-01-04 12:33:27 -050045# All domains that can override MLS restrictions.
46# i.e. processes that can read up and write down.
47attribute mlstrustedsubject;
48
49# All types that can override MLS restrictions.
50# i.e. files that can be read by lower and written by higher
51attribute mlstrustedobject;
52
53# Domains that are allowed all permissions ("unconfined").
54attribute unconfineddomain;
55
56# All domains used for apps.
57attribute appdomain;
58
59# All domains used for apps with network access.
60attribute netdomain;
61
62# All domains used for apps with bluetooth access.
63attribute bluetoothdomain;
64
65# All domains used for binder service domains.
66attribute binderservicedomain;