blob: bbc3d922b526715874d894f5542be086155bb0b5 [file] [log] [blame]
Stephen Smalley2dd4e512012-01-04 12:33:27 -05001######################################
2# Attribute declarations
3#
4
5# All types used for devices.
6attribute dev_type;
7
8# All types used for processes.
9attribute domain;
10
11# All types used for filesystems.
12attribute fs_type;
13
14# All types used for files that can exist on a labeled fs.
15# Do not use for pseudo file types.
16attribute file_type;
17
18# All types used for domain entry points.
19attribute exec_type;
20
21# All types used for /data files.
22attribute data_file_type;
23
24# All types use for sysfs files.
25attribute sysfs_type;
26
William Robertsc195ec32013-03-06 16:26:36 -080027# Attribute used for all sdcards
28attribute sdcard_type;
29
Stephen Smalley2dd4e512012-01-04 12:33:27 -050030# All types used for nodes/hosts.
31attribute node_type;
32
33# All types used for network interfaces.
34attribute netif_type;
35
36# All types used for network ports.
37attribute port_type;
38
Stephen Smalley124720a2012-04-04 10:11:16 -040039# All types used for property service
40attribute property_type;
41
Stephen Smalley2dd4e512012-01-04 12:33:27 -050042# All domains that can override MLS restrictions.
43# i.e. processes that can read up and write down.
44attribute mlstrustedsubject;
45
46# All types that can override MLS restrictions.
47# i.e. files that can be read by lower and written by higher
48attribute mlstrustedobject;
49
50# Domains that are allowed all permissions ("unconfined").
51attribute unconfineddomain;
52
Stephen Smalley712ca0a2013-10-23 13:25:53 -040053# All domains used for shells.
54attribute shelldomain;
55
Stephen Smalley2dd4e512012-01-04 12:33:27 -050056# All domains used for apps.
57attribute appdomain;
58
59# All domains used for apps with network access.
60attribute netdomain;
61
62# All domains used for apps with bluetooth access.
63attribute bluetoothdomain;
64
65# All domains used for binder service domains.
66attribute binderservicedomain;
Stephen Smalleyb9760aa2012-07-27 11:07:09 -040067
68# Allow domains used for platform (signed by build key) apps.
69attribute platformappdomain;
Nick Kralevich0c9708b2013-07-10 14:46:05 -070070
71# All domains which are allowed the "relabelto" permission
72attribute relabeltodomain;