blob: 6123d6c1be12a4984cca8dbe05258aa9d81e6a79 [file] [log] [blame]
Stephen Smalley2dd4e512012-01-04 12:33:27 -05001######################################
2# Attribute declarations
3#
4
5# All types used for devices.
6attribute dev_type;
7
8# All types used for processes.
9attribute domain;
10
11# All types used for filesystems.
12attribute fs_type;
13
14# All types used for files that can exist on a labeled fs.
15# Do not use for pseudo file types.
16attribute file_type;
17
18# All types used for domain entry points.
19attribute exec_type;
20
21# All types used for /data files.
22attribute data_file_type;
23
24# All types use for sysfs files.
25attribute sysfs_type;
26
William Robertsc195ec32013-03-06 16:26:36 -080027# Attribute used for all sdcards
28attribute sdcard_type;
29
Stephen Smalley2dd4e512012-01-04 12:33:27 -050030# All types used for nodes/hosts.
31attribute node_type;
32
33# All types used for network interfaces.
34attribute netif_type;
35
36# All types used for network ports.
37attribute port_type;
38
Stephen Smalley124720a2012-04-04 10:11:16 -040039# All types used for property service
40attribute property_type;
41
Stephen Smalley2dd4e512012-01-04 12:33:27 -050042# All domains that can override MLS restrictions.
43# i.e. processes that can read up and write down.
44attribute mlstrustedsubject;
45
46# All types that can override MLS restrictions.
47# i.e. files that can be read by lower and written by higher
48attribute mlstrustedobject;
49
50# Domains that are allowed all permissions ("unconfined").
51attribute unconfineddomain;
52
53# All domains used for apps.
54attribute appdomain;
55
56# All domains used for apps with network access.
57attribute netdomain;
58
59# All domains used for apps with bluetooth access.
60attribute bluetoothdomain;
61
62# All domains used for binder service domains.
63attribute binderservicedomain;
Stephen Smalleyb9760aa2012-07-27 11:07:09 -040064
65# Allow domains used for platform (signed by build key) apps.
66attribute platformappdomain;
Nick Kralevich0c9708b2013-07-10 14:46:05 -070067
68# All domains which are allowed the "relabelto" permission
69attribute relabeltodomain;