xref: /aosp_15_r20/system/sepolicy/private/sdk_sandbox_current.te (revision e4a36f4174b17bbab9dc043f4a65dc8d87377290)
1###
2### SDK Sandbox process.
3###
4### This file defines the security policy for the sdk sandbox processes
5### for the current SDK level.
6
7# Allow finding services. This is different from ephemeral_app policy.
8# Adding services manually to the allowlist is preferred hence app_api_service is not used.
9allow sdk_sandbox_current {
10    activity_service
11    activity_task_service
12    appops_service
13    audio_service
14    audioserver_service
15    batteryproperties_service
16    batterystats_service
17    cameraserver_service
18    connectivity_service
19    connmetrics_service
20    deviceidle_service
21    display_service
22    dropbox_service
23    ephemeral_app_api_service
24    font_service
25    game_service
26    gpu_service
27    graphicsstats_service
28    hardware_properties_service
29    hint_service
30    imms_service
31    input_method_service
32    input_service
33    IProxyService_service
34    ipsec_service
35    launcherapps_service
36    legacy_permission_service
37    light_service
38    locale_service
39    media_communication_service
40    mediadrmserver_service
41    mediaextractor_service
42    mediametrics_service
43    media_projection_service
44    media_router_service
45    mediaserver_service
46    media_session_service
47    memtrackproxy_service
48    midi_service
49    netpolicy_service
50    netstats_service
51    network_management_service
52    notification_service
53    package_service
54    permission_checker_service
55    permission_service
56    permissionmgr_service
57    platform_compat_service
58    power_service
59    procstats_service
60    radio_service
61    registry_service
62    restrictions_service
63    rttmanager_service
64    search_service
65    selection_toolbar_service
66    sensor_privacy_service
67    sensorservice_service
68    servicediscovery_service
69    settings_service
70    speech_recognition_service
71    statusbar_service
72    storagestats_service
73    surfaceflinger_service
74    telecom_service
75    tethering_service
76    textclassification_service
77    textservices_service
78    texttospeech_service
79    thermal_service
80    translation_service
81    tv_iapp_service
82    tv_input_service
83    uimode_service
84    vcn_management_service
85    webviewupdate_service
86}:service_manager find;
87
88