xref: /aosp_15_r20/system/sepolicy/private/service.te (revision e4a36f4174b17bbab9dc043f4a65dc8d87377290)
1type ambient_context_service,        app_api_service, system_server_service, service_manager_type;
2type authentication_policy_service,  system_api_service, system_server_service, service_manager_type;
3
4# These types will be public starting at board api 202504
5until_board_api(202504, `
6    type app_function_service, app_api_service, system_server_service, service_manager_type;
7')
8type attention_service,              system_server_service, service_manager_type;
9type bg_install_control_service,     system_api_service, system_server_service, service_manager_type;
10type compos_service,                 service_manager_type;
11type communal_service,               app_api_service, system_server_service, service_manager_type;
12type dynamic_system_service,         system_api_service, system_server_service, service_manager_type;
13type feature_flags_service,          app_api_service, system_server_service, service_manager_type;
14type fwk_devicestate_service, system_server_service, service_manager_type;
15type gsi_service,                    service_manager_type;
16type incidentcompanion_service,      app_api_service, system_api_service, system_server_service, service_manager_type;
17type logcat_service,                 system_server_service, service_manager_type;
18type logd_service,                   service_manager_type;
19type mediatuner_service,             app_api_service, service_manager_type;
20type mmd_service,                    service_manager_type;
21type on_device_intelligence_service, app_api_service, system_server_service, service_manager_type, isolated_compute_allowed_service;
22type profcollectd_service,           service_manager_type;
23type protolog_configuration_service, app_api_service, system_api_service, system_server_service, service_manager_type;
24type resolver_service,               system_server_service, service_manager_type;
25type rkpd_registrar_service,         service_manager_type;
26type rkpd_refresh_service,           service_manager_type;
27type rkp_cert_processor_service,     service_manager_type;
28type safety_center_service,          app_api_service, system_api_service, system_server_service, service_manager_type;
29type stats_service,                  service_manager_type;
30type statsbootstrap_service,         system_server_service, service_manager_type;
31type statscompanion_service,         system_server_service, service_manager_type;
32type statsmanager_service,           system_api_service, system_server_service, service_manager_type;
33until_board_api(202504, `
34    type media_quality_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
35')
36
37until_board_api(202504, `
38    type hal_mediaquality_service, protected_service, hal_service_type, service_manager_type;
39')
40
41is_flag_enabled(RELEASE_SUPERVISION_SERVICE, `
42    type supervision_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
43')
44type tracingproxy_service,          system_server_service, service_manager_type;
45type tradeinmode_service,           system_server_service, service_manager_type;
46type transparency_service,          system_server_service, service_manager_type;
47
48is_flag_enabled(RELEASE_AVF_ENABLE_DEVICE_ASSIGNMENT, `
49    type vfio_handler_service,          service_manager_type;
50')
51is_flag_enabled(RELEASE_AVF_ENABLE_LLPVM_CHANGES, `
52    type virtualization_maintenance_service, service_manager_type;
53')
54is_flag_enabled(RELEASE_AVF_ENABLE_NETWORK, `
55    type vm_tethering_service, system_server_service, service_manager_type;
56    type vmnic_service,        service_manager_type;
57')
58is_flag_enabled(RELEASE_AVF_ENABLE_MICROFUCHSIA, `
59    type microfuchsia_service,          service_manager_type;
60')
61
62type uce_service,                      service_manager_type;
63type wearable_sensing_service,         app_api_service, system_server_service, service_manager_type;
64type wifi_mainline_supplicant_service, service_manager_type;
65
66###
67### Neverallow rules
68###
69
70# servicemanager handles registering or looking up named services.
71# It does not make sense to register or lookup something which is not a service.
72# Trigger a compile error if this occurs.
73neverallow domain ~{ service_manager_type vndservice_manager_type }:service_manager { add find };
74