xref: /aosp_15_r20/system/sepolicy/prebuilts/api/33.0/public/service.te (revision e4a36f4174b17bbab9dc043f4a65dc8d87377290) 
1type aidl_lazy_test_service,    service_manager_type;
2type apc_service,               service_manager_type;
3type apex_service,              service_manager_type;
4type artd_service,              service_manager_type;
5type audioserver_service,       service_manager_type;
6type authorization_service,     service_manager_type;
7type batteryproperties_service, app_api_service, ephemeral_app_api_service, service_manager_type;
8type bluetooth_service,         service_manager_type;
9type cameraserver_service,      service_manager_type;
10type default_android_service,   service_manager_type;
11type dice_maintenance_service,  service_manager_type;
12type dice_node_service,         service_manager_type;
13type dnsresolver_service,       service_manager_type;
14type drmserver_service,         service_manager_type;
15type dumpstate_service,         service_manager_type;
16type evsmanagerd_service,       service_manager_type;
17type fingerprintd_service,      service_manager_type;
18type fwk_automotive_display_service, service_manager_type;
19type gatekeeper_service,        app_api_service, service_manager_type;
20type gpu_service,               app_api_service, ephemeral_app_api_service, service_manager_type;
21type idmap_service,             service_manager_type;
22type iorapd_service,            service_manager_type;
23type incident_service,          service_manager_type;
24type installd_service,          service_manager_type;
25type credstore_service,         app_api_service, service_manager_type;
26type keystore_compat_hal_service, service_manager_type;
27type keystore_maintenance_service, service_manager_type;
28type keystore_metrics_service, service_manager_type;
29type keystore_service,          service_manager_type;
30type legacykeystore_service,    service_manager_type;
31type lpdump_service,            service_manager_type;
32type mdns_service,              service_manager_type;
33type mediaserver_service,       service_manager_type;
34type mediametrics_service,      service_manager_type;
35type mediaextractor_service,    service_manager_type;
36type mediadrmserver_service,    service_manager_type;
37type mediatranscoding_service,  app_api_service, service_manager_type;
38type netd_service,              service_manager_type;
39type nfc_service,               service_manager_type;
40type radio_service,             service_manager_type;
41type remotelyprovisionedkeypool_service, service_manager_type;
42type remoteprovisioning_service,   service_manager_type;
43type secure_element_service,    service_manager_type;
44type service_manager_service,   service_manager_type;
45type storaged_service,          service_manager_type;
46type surfaceflinger_service,    app_api_service, ephemeral_app_api_service, service_manager_type;
47type system_app_service,        service_manager_type;
48type system_suspend_control_internal_service, service_manager_type;
49type system_suspend_control_service, service_manager_type;
50type update_engine_service,     service_manager_type;
51type update_engine_stable_service, service_manager_type;
52type virtualization_service,    service_manager_type;
53type virtual_touchpad_service,  service_manager_type;
54type vold_service,              service_manager_type;
55type vr_hwc_service,            service_manager_type;
56type vrflinger_vsync_service,   service_manager_type;
57
58# system_server_services broken down
59type accessibility_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
60type account_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
61type activity_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
62type activity_task_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
63type adb_service, system_api_service, system_server_service, service_manager_type;
64type adservices_manager_service, system_api_service, system_server_service, service_manager_type;
65type alarm_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
66type app_binding_service, system_server_service, service_manager_type;
67type app_hibernation_service, app_api_service, system_api_service, system_server_service, service_manager_type;
68type app_integrity_service, system_api_service, system_server_service, service_manager_type;
69type app_prediction_service, app_api_service, system_server_service, service_manager_type;
70type app_search_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
71type appops_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
72type appwidget_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
73type assetatlas_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
74type attestation_verification_service, app_api_service, system_server_service, service_manager_type;
75type audio_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
76type auth_service, app_api_service, system_server_service, service_manager_type;
77type autofill_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
78type backup_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
79type batterystats_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
80type battery_service, system_server_service, service_manager_type;
81type binder_calls_stats_service, system_server_service, service_manager_type;
82type blob_store_service, app_api_service, system_server_service, service_manager_type;
83type bluetooth_manager_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
84type broadcastradio_service, system_server_service, service_manager_type;
85type cacheinfo_service, system_api_service, system_server_service, service_manager_type;
86type cameraproxy_service, system_server_service, service_manager_type;
87type clipboard_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
88type cloudsearch_service, app_api_service, system_server_service, service_manager_type;
89type contexthub_service, app_api_service,  system_server_service, service_manager_type;
90type crossprofileapps_service, app_api_service, system_server_service, service_manager_type;
91type IProxyService_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
92type companion_device_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
93type connectivity_native_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
94type connectivity_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
95type connmetrics_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
96type consumer_ir_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
97type content_capture_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
98type content_suggestions_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
99type content_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
100type country_detector_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
101# Note: The coverage_service should only be enabled for userdebug / eng builds that were compiled
102# with EMMA_INSTRUMENT=true. We should consider locking this down in the future.
103type coverage_service, system_server_service, service_manager_type;
104type cpuinfo_service, system_api_service, system_server_service, service_manager_type;
105type dataloader_manager_service, system_server_service, service_manager_type;
106type dbinfo_service, system_api_service, system_server_service, service_manager_type;
107type device_config_service, system_server_service, service_manager_type;
108type device_policy_service, app_api_service, system_server_service, service_manager_type;
109type device_state_service, app_api_service, system_api_service, system_server_service, service_manager_type;
110type deviceidle_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
111type device_identifiers_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
112type devicestoragemonitor_service, system_server_service, service_manager_type;
113type diskstats_service, system_api_service, system_server_service, service_manager_type;
114type display_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
115type domain_verification_service, app_api_service, system_server_service, service_manager_type;
116type color_display_service, system_api_service, system_server_service, service_manager_type;
117type external_vibrator_service, system_server_service, service_manager_type;
118type file_integrity_service, app_api_service, system_server_service, service_manager_type;
119type font_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
120type netd_listener_service, system_server_service, service_manager_type;
121type network_watchlist_service, system_server_service, service_manager_type;
122type DockObserver_service, system_server_service, service_manager_type;
123type dreams_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
124type dropbox_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
125type lowpan_service, system_api_service, system_server_service, service_manager_type;
126type ethernet_service, app_api_service, system_server_service, service_manager_type;
127type biometric_service, app_api_service, system_server_service, service_manager_type;
128type bugreport_service, app_api_service, system_server_service, service_manager_type;
129type platform_compat_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
130type face_service, app_api_service, system_server_service, service_manager_type;
131type fingerprint_service, app_api_service, system_server_service, service_manager_type;
132type fwk_stats_service, app_api_service, system_server_service, service_manager_type;
133type game_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
134type gfxinfo_service, system_api_service, system_server_service, service_manager_type;
135type gnss_time_update_service, system_server_service, service_manager_type;
136type graphicsstats_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
137type hardware_service, system_server_service, service_manager_type;
138type hardware_properties_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
139type hdmi_control_service, app_api_service, system_server_service, service_manager_type;
140type hint_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
141type imms_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
142type incremental_service, system_server_service, service_manager_type;
143type input_method_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
144type input_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
145type ipsec_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
146type iris_service, app_api_service, system_server_service, service_manager_type;
147type jobscheduler_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
148type launcherapps_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
149type legacy_permission_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
150type light_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
151type locale_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
152type location_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
153type location_time_zone_manager_service, system_server_service, service_manager_type;
154type lock_settings_service, app_api_service, system_api_service, system_server_service, service_manager_type;
155type looper_stats_service, system_server_service, service_manager_type;
156type media_communication_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
157type media_metrics_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
158type media_projection_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
159type media_router_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
160type media_session_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
161type meminfo_service, system_api_service, system_server_service, service_manager_type;
162type memtrackproxy_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
163type midi_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
164type mount_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
165type music_recognition_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
166type nearby_service, app_api_service, system_server_service, service_manager_type;
167type netpolicy_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
168type netstats_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
169type network_management_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
170type network_score_service, system_api_service, system_server_service, service_manager_type;
171type network_stack_service, system_server_service, service_manager_type;
172type network_time_update_service, system_server_service, service_manager_type;
173type notification_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
174type oem_lock_service, system_api_service, system_server_service, service_manager_type;
175type otadexopt_service, system_server_service, service_manager_type;
176type overlay_service, system_api_service, system_server_service, service_manager_type;
177type pac_proxy_service, app_api_service, system_server_service, service_manager_type;
178type package_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
179type package_native_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
180type people_service, app_api_service, system_server_service, service_manager_type;
181type permission_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
182type permissionmgr_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
183type permission_checker_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
184type persistent_data_block_service, system_api_service, system_server_service, service_manager_type;
185type pinner_service, system_server_service, service_manager_type;
186type powerstats_service, app_api_service, system_server_service, service_manager_type;
187type power_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
188type print_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
189type processinfo_service, system_server_service, service_manager_type;
190type procstats_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
191type reboot_readiness_service, app_api_service, system_server_service, service_manager_type;
192type recovery_service, system_server_service, service_manager_type;
193type registry_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
194type resources_manager_service, system_api_service, system_server_service, service_manager_type;
195type restrictions_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
196type role_service, app_api_service, system_server_service, service_manager_type;
197type rollback_service, app_api_service, system_server_service, service_manager_type;
198type runtime_service, system_server_service, service_manager_type;
199type rttmanager_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
200type samplingprofiler_service, system_server_service, service_manager_type;
201type scheduling_policy_service, system_server_service, service_manager_type;
202type search_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
203type search_ui_service, app_api_service, system_server_service, service_manager_type;
204type sec_key_att_app_id_provider_service, app_api_service, system_server_service, service_manager_type;
205type selection_toolbar_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
206type sensorservice_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
207type sensor_privacy_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
208type serial_service, system_api_service, system_server_service, service_manager_type;
209type servicediscovery_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
210type settings_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
211type shortcut_service, app_api_service, system_server_service, service_manager_type;
212type slice_service, app_api_service, system_server_service, service_manager_type;
213type smartspace_service, app_api_service, system_server_service, service_manager_type;
214type statusbar_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
215type storagestats_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
216type sdk_sandbox_service, app_api_service, system_server_service, service_manager_type;
217type system_config_service, system_api_service, system_server_service, service_manager_type;
218type system_server_dumper_service, system_api_service, system_server_service, service_manager_type;
219type system_update_service, system_server_service, service_manager_type;
220type soundtrigger_middleware_service, system_server_service, service_manager_type;
221type speech_recognition_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
222type tare_service, app_api_service, system_server_service, service_manager_type;
223type task_service, system_server_service, service_manager_type;
224type testharness_service, system_server_service, service_manager_type;
225type textclassification_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
226type textservices_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
227type texttospeech_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
228type telecom_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
229type thermal_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
230type timedetector_service, app_api_service, system_server_service, service_manager_type;
231type timezone_service, system_server_service, service_manager_type;
232type timezonedetector_service, app_api_service, system_server_service, service_manager_type;
233type translation_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
234type trust_service, app_api_service, system_server_service, service_manager_type;
235type tv_iapp_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
236type tv_input_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
237type tv_tuner_resource_mgr_service, app_api_service, system_server_service, service_manager_type;
238type uimode_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
239type updatelock_service, system_api_service, system_server_service, service_manager_type;
240type uri_grants_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
241type usagestats_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
242type usb_service, app_api_service, system_server_service, service_manager_type;
243type user_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
244type uwb_service, app_api_service, system_server_service, service_manager_type;
245type vcn_management_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
246type vibrator_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
247type vibrator_manager_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
248type virtual_device_service, app_api_service, system_server_service, service_manager_type;
249type voiceinteraction_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
250type vpn_management_service, app_api_service, system_server_service, service_manager_type;
251type vr_manager_service, system_server_service, service_manager_type;
252type wallpaper_service, app_api_service, system_server_service, service_manager_type;
253type wallpaper_effects_generation_service, app_api_service, system_server_service, service_manager_type;
254type webviewupdate_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
255type wifip2p_service, app_api_service, system_server_service, service_manager_type;
256type wifiscanner_service, system_api_service, system_server_service, service_manager_type;
257type wifi_service, app_api_service, system_server_service, service_manager_type;
258type wifinl80211_service, service_manager_type;
259type wifiaware_service, app_api_service, system_server_service, service_manager_type;
260type window_service, system_api_service, system_server_service, service_manager_type;
261type inputflinger_service, system_api_service, system_server_service, service_manager_type;
262type wpantund_service, system_api_service, service_manager_type;
263type tethering_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
264type emergency_affordance_service, system_server_service, service_manager_type;
265
266###
267### HAL Services
268###
269
270type hal_audio_service, vendor_service, protected_service, hal_service_type, service_manager_type;
271type hal_audiocontrol_service, vendor_service, hal_service_type, service_manager_type;
272type hal_authsecret_service, vendor_service, protected_service, hal_service_type, service_manager_type;
273type hal_camera_service, vendor_service, protected_service, hal_service_type, service_manager_type;
274type hal_contexthub_service, vendor_service, protected_service, hal_service_type, service_manager_type;
275type hal_dice_service, vendor_service, protected_service, hal_service_type, service_manager_type;
276type hal_drm_service, vendor_service, hal_service_type, service_manager_type;
277type hal_dumpstate_service, vendor_service, protected_service, hal_service_type, service_manager_type;
278type hal_evs_service, vendor_service, protected_service, hal_service_type, service_manager_type;
279type hal_face_service, vendor_service, protected_service, hal_service_type, service_manager_type;
280type hal_fingerprint_service, vendor_service, protected_service, hal_service_type, service_manager_type;
281type hal_gnss_service, vendor_service, protected_service, hal_service_type, service_manager_type;
282type hal_graphics_allocator_service, vendor_service, hal_service_type, service_manager_type;
283type hal_graphics_composer_service, vendor_service, protected_service, hal_service_type, service_manager_type;
284type hal_health_service, vendor_service, protected_service, hal_service_type, service_manager_type;
285type hal_health_storage_service, vendor_service, protected_service, hal_service_type, service_manager_type;
286type hal_identity_service, vendor_service, protected_service, hal_service_type, service_manager_type;
287type hal_input_processor_service, vendor_service, protected_service, hal_service_type, service_manager_type;
288type hal_ir_service, vendor_service, protected_service, hal_service_type, service_manager_type;
289type hal_keymint_service, vendor_service, protected_service, hal_service_type, service_manager_type;
290type hal_light_service, vendor_service, protected_service, hal_service_type, service_manager_type;
291type hal_memtrack_service, vendor_service, protected_service, hal_service_type, service_manager_type;
292type hal_neuralnetworks_service, vendor_service, hal_service_type, service_manager_type;
293type hal_nfc_service, vendor_service, protected_service, hal_service_type, service_manager_type;
294type hal_oemlock_service, vendor_service, protected_service, hal_service_type, service_manager_type;
295type hal_power_service, vendor_service, protected_service, hal_service_type, service_manager_type;
296type hal_power_stats_service, vendor_service, protected_service, hal_service_type, service_manager_type;
297type hal_radio_service, vendor_service, protected_service, hal_service_type, service_manager_type;
298type hal_rebootescrow_service, vendor_service, protected_service, hal_service_type, service_manager_type;
299type hal_remotelyprovisionedcomponent_service, vendor_service, protected_service, hal_service_type, service_manager_type;
300type hal_sensors_service, vendor_service, protected_service, hal_service_type, service_manager_type;
301type hal_secureclock_service, vendor_service, protected_service, hal_service_type, service_manager_type;
302type hal_sharedsecret_service, vendor_service, protected_service, hal_service_type, service_manager_type;
303type hal_system_suspend_service, protected_service, hal_service_type, service_manager_type;
304type hal_tv_tuner_service, vendor_service, protected_service, hal_service_type, service_manager_type;
305type hal_usb_service, vendor_service, protected_service, hal_service_type, service_manager_type;
306type hal_uwb_service, vendor_service, protected_service, hal_service_type, service_manager_type;
307type hal_vehicle_service, vendor_service, protected_service, hal_service_type, service_manager_type;
308type hal_vibrator_service, vendor_service, protected_service, hal_service_type, service_manager_type;
309type hal_weaver_service, vendor_service, protected_service, hal_service_type, service_manager_type;
310type hal_nlinterceptor_service, vendor_service, protected_service, hal_service_type, service_manager_type;
311type hal_wifi_hostapd_service, vendor_service, protected_service, hal_service_type, service_manager_type;
312type hal_wifi_supplicant_service, vendor_service, protected_service, hal_service_type, service_manager_type;
313
314###
315### Neverallow rules
316###
317
318# servicemanager handles registering or looking up named services.
319# It does not make sense to register or lookup something which is not a service.
320# Trigger a compile error if this occurs.
321neverallow domain ~{ service_manager_type vndservice_manager_type }:service_manager { add find };
322