platform_system_sepolicy/prebuilts/api/34.0/private
Mugdha Lakhani 2d9b9f2b31 Add neverallow rules to protect SDK's private data
SDK's data should not be accessible directly by other domains, including
system server. Added neverallow to ensure that.

Bug: b/279885689
Test: make and boot device
Change-Id: If6a6b4d43f297ec2aa27434dd26f6c88d0d8bcf2
Merged-In:  If6a6b4d43f297ec2aa27434dd26f6c88d0d8bcf2
2023-05-04 16:38:40 +00:00
..
compat UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
access_vectors UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
adbd.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
aidl_lazy_test_server.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
apex_test_prepostinstall.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
apexd.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
apexd_derive_classpath.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
app.te Disallow watch and watch_reads on apk_data_file for apps 2023-04-25 15:20:45 +02:00
app_neverallows.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
app_zygote.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
artd.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
asan_extract.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
atrace.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
attributes UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
audioserver.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
auditctl.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
automotive_display_service.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
binderservicedomain.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
blank_screen.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
blkid.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
blkid_untrusted.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
bluetooth.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
bluetoothdomain.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
bootanim.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
bootstat.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
boringssl_self_test.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
bpfdomain.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
bpfloader.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
bufferhubd.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
bug_map UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
cameraserver.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
canhalconfigurator.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
charger.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
charger_type.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
clatd.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
compos_fd_server.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
compos_verify.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
composd.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
coredomain.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
cppreopts.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
crash_dump.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
credstore.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
crosvm.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
derive_classpath.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
derive_sdk.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
device_as_webcam.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
dex2oat.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
dexoptanalyzer.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
dhcp.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
dmesgd.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
dnsmasq.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
domain.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
drmserver.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
dumpstate.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
ephemeral_app.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
evsmanagerd.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
extra_free_kbytes.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
fastbootd.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
file.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
file_contexts UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
file_contexts_asan UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
file_contexts_overlayfs UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
fingerprintd.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
flags_health_check.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
fs_use UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
fsck.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
fsck_untrusted.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
fsverity_init.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
fuseblkd.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
fuseblkd_untrusted.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
fwk_bufferhub.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
gatekeeperd.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
genfs_contexts UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
gki_apex_prepostinstall.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
gmscore_app.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
gpuservice.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
gsid.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
hal_allocator_default.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
hal_lazy_test.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
halclientdomain.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
halserverdomain.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
healthd.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
heapprofd.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
hidl_lazy_test_server.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
hwservice.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
hwservice_contexts UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
hwservicemanager.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
idmap.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
incident.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
incident_helper.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
incidentd.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
init.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
initial_sid_contexts UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
initial_sids UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
inputflinger.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
installd.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
isolated_app.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
isolated_app_all.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
isolated_compute_app.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
iw.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
kernel.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
keys.conf UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
keystore.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
keystore2_key_contexts UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
keystore_keys.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
linkerconfig.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
llkd.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
lmkd.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
logd.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
logpersist.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
lpdumpd.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
mac_permissions.xml UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
mdnsd.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
mediadrmserver.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
mediaextractor.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
mediametrics.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
mediaprovider.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
mediaprovider_app.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
mediaserver.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
mediaswcodec.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
mediatranscoding.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
mediatuner.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
migrate_legacy_obb_data.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
mls UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
mls_decl UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
mls_macros UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
mlstrustedsubject.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
mm_events.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
modprobe.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
mtectrl.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
mtp.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
net.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
netd.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
netutils_wrapper.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
network_stack.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
nfc.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
odrefresh.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
odsign.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
otapreopt_chroot.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
otapreopt_slot.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
perfetto.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
performanced.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
permissioncontroller_app.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
platform_app.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
policy_capabilities UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
port_contexts UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
postinstall.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
postinstall_dexopt.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
ppp.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
preloads_copy.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
preopt2cachename.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
priv_app.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
prng_seeder.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
profcollectd.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
profman.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
property.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
property_contexts Add SysProp to set the number of threads in Apexd bootstrap 2023-04-25 17:40:39 +00:00
racoon.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
radio.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
recovery.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
recovery_persist.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
recovery_refresh.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
remount.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
rkpd.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
rkpd_app.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
roles_decl UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
rs.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
rss_hwm_reset.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
runas.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
runas_app.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
sdcardd.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
sdk_sandbox.te Add neverallow rules to protect SDK's private data 2023-05-04 16:38:40 +00:00
seapp_contexts UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
secure_element.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
security_classes UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
service.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
service_contexts UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
servicemanager.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
sgdisk.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
shared_relro.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
shell.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
simpleperf.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
simpleperf_app_runner.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
simpleperf_boot.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
slideshow.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
snapshotctl.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
snapuserd.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
stats.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
statsd.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
storaged.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
su.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
surfaceflinger.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
system_app.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
system_server.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
system_server_startup.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
system_suspend.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
technical_debt.cil UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
tombstoned.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
toolbox.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
traced.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
traced_perf.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
traced_probes.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
traceur_app.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
ueventd.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
uncrypt.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
untrusted_app.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
untrusted_app_25.te Disallow watch and watch_reads on apk_data_file for apps 2023-04-25 15:20:45 +02:00
untrusted_app_27.te Disallow watch and watch_reads on apk_data_file for apps 2023-04-25 15:20:45 +02:00
untrusted_app_29.te Disallow watch and watch_reads on apk_data_file for apps 2023-04-25 15:20:45 +02:00
untrusted_app_30.te Disallow watch and watch_reads on apk_data_file for apps 2023-04-25 15:20:45 +02:00
untrusted_app_32.te Disallow watch and watch_reads on apk_data_file for apps 2023-04-25 15:20:45 +02:00
untrusted_app_all.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
update_engine.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
update_engine_common.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
update_verifier.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
usbd.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
users UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
vdc.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
vehicle_binding_util.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
vendor_init.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
viewcompiler.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
virtual_touchpad.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
virtualizationmanager.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
virtualizationservice.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
vold.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
vold_prepare_subdirs.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
vzwomatrigger_app.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
wait_for_keymaster.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
watchdogd.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
webview_zygote.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
wificond.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00
zygote.te UpsideDownCake/34 is now REL 2023-04-21 19:36:02 +00:00