blob: 613ed8f35e2bd7c35318a66a22d40da4bd6e7a39 [file] [log] [blame]
Stephen Smalley2dd4e512012-01-04 12:33:27 -05001######################################
2# Attribute declarations
3#
4
5# All types used for devices.
6attribute dev_type;
7
8# All types used for processes.
9attribute domain;
10
11# All types used for filesystems.
12attribute fs_type;
13
Stephen Smalley1699b2a2014-05-30 08:49:51 -040014# All types used for context= mounts.
15attribute contextmount_type;
16
Stephen Smalley2dd4e512012-01-04 12:33:27 -050017# All types used for files that can exist on a labeled fs.
18# Do not use for pseudo file types.
19attribute file_type;
20
21# All types used for domain entry points.
22attribute exec_type;
23
24# All types used for /data files.
25attribute data_file_type;
26
27# All types use for sysfs files.
28attribute sysfs_type;
29
William Robertsc195ec32013-03-06 16:26:36 -080030# Attribute used for all sdcards
31attribute sdcard_type;
32
Stephen Smalley2dd4e512012-01-04 12:33:27 -050033# All types used for nodes/hosts.
34attribute node_type;
35
36# All types used for network interfaces.
37attribute netif_type;
38
39# All types used for network ports.
40attribute port_type;
41
Stephen Smalley124720a2012-04-04 10:11:16 -040042# All types used for property service
43attribute property_type;
44
Riley Spahnf90c41f2014-06-05 15:52:02 -070045# All types used for services managed by service_manager.
46attribute service_manager_type;
47
Stephen Smalley2dd4e512012-01-04 12:33:27 -050048# All domains that can override MLS restrictions.
49# i.e. processes that can read up and write down.
50attribute mlstrustedsubject;
51
52# All types that can override MLS restrictions.
53# i.e. files that can be read by lower and written by higher
54attribute mlstrustedobject;
55
56# Domains that are allowed all permissions ("unconfined").
57attribute unconfineddomain;
58
59# All domains used for apps.
60attribute appdomain;
61
62# All domains used for apps with network access.
63attribute netdomain;
64
65# All domains used for apps with bluetooth access.
66attribute bluetoothdomain;
67
68# All domains used for binder service domains.
69attribute binderservicedomain;