xref: /aosp_15_r20/system/sepolicy/prebuilts/api/34.0/private/sdk_sandbox_next.te (revision e4a36f4174b17bbab9dc043f4a65dc8d87377290)
1###
2### SDK Sandbox process.
3###
4### This file defines the security policy for the sdk sandbox processes
5### for targetSdkVersion=34.
6type sdk_sandbox_next, domain, coredomain, sdk_sandbox_all;
7
8net_domain(sdk_sandbox_next)
9app_domain(sdk_sandbox_next)
10
11# Allow finding services. This is different from ephemeral_app policy.
12# Adding services manually to the allowlist is preferred hence app_api_service is not used.
13allow sdk_sandbox_next {
14    activity_service
15    activity_task_service
16    appops_service
17    audio_service
18    audioserver_service
19    batteryproperties_service
20    batterystats_service
21    connectivity_service
22    connmetrics_service
23    deviceidle_service
24    display_service
25    dropbox_service
26    font_service
27    game_service
28    gpu_service
29    graphicsstats_service
30    hardware_properties_service
31    hint_service
32    imms_service
33    input_method_service
34    input_service
35    IProxyService_service
36    ipsec_service
37    launcherapps_service
38    legacy_permission_service
39    light_service
40    locale_service
41    media_communication_service
42    mediaextractor_service
43    mediametrics_service
44    media_projection_service
45    media_router_service
46    mediaserver_service
47    media_session_service
48    memtrackproxy_service
49    midi_service
50    netpolicy_service
51    netstats_service
52    network_management_service
53    notification_service
54    package_service
55    permission_checker_service
56    permission_service
57    permissionmgr_service
58    platform_compat_service
59    power_service
60    procstats_service
61    registry_service
62    restrictions_service
63    rttmanager_service
64    search_service
65    selection_toolbar_service
66    sensor_privacy_service
67    sensorservice_service
68    servicediscovery_service
69    settings_service
70    speech_recognition_service
71    statusbar_service
72    storagestats_service
73    surfaceflinger_service
74    telecom_service
75    tethering_service
76    textclassification_service
77    textservices_service
78    texttospeech_service
79    thermal_service
80    translation_service
81    tv_iapp_service
82    tv_input_service
83    uimode_service
84    vcn_management_service
85    webviewupdate_service
86}:service_manager find;
87
88