Lines Matching refs:allow

3 # The allow rules are only included in the recovery policy.
28   allow fastbootd node:tcp_socket node_bind;
29   allow fastbootd port:tcp_socket name_bind;
30   allow fastbootd self:tcp_socket { create_socket_perms_no_ioctl listen accept };
36   allow fastbootd snapuserd_socket:sock_file write;
37   allow fastbootd snapuserd:unix_stream_socket connectto;
38   allow fastbootd dm_user_device:dir r_dir_perms;
44   allow fastbootd labeledfs:filesystem { mount unmount };
48   allow fastbootd proc_bootconfig:file r_file_perms;
62   allow fastbootd functionfs:dir search;
63   allow fastbootd functionfs:file rw_file_perms;
67   allow fastbootd kmsg_device:chr_file { open getattr write };
70   allow fastbootd sysfs_batteryinfo:file r_file_perms;
72   allow fastbootd device:dir r_dir_perms;
75   allow fastbootd block_device:dir r_dir_perms;
78   allow fastbootd self:capability sys_admin;
83   allow fastbootd dm_device:chr_file rw_file_perms;
84   allow fastbootd dm_device:blk_file rw_file_perms;
86   allow fastbootd cache_block_device:blk_file rw_file_perms;
87   allow fastbootd super_block_device_type:blk_file rw_file_perms;
88   allow fastbootd {
97   allow fastbootd metadata_block_device:blk_file r_file_perms;
98   allow fastbootd {rootfs tmpfs}:dir mounton;
99   allow fastbootd metadata_file:dir { search getattr mounton };
100   allow fastbootd gsi_metadata_file_type:dir rw_dir_perms;
101   allow fastbootd gsi_metadata_file_type:file create_file_perms;
112   allow fastbootd misc_block_device:blk_file rw_file_perms;
114   allow fastbootd proc_cmdline:file r_file_perms;
115   allow fastbootd rootfs:dir r_dir_perms;
118   allow fastbootd sysfs_dt_firmware_android:file r_file_perms;
119   allow fastbootd sysfs_dt_firmware_android:dir r_dir_perms;
125   allow fastbootd block_device:dir getattr;
129     allow fastbootd self:process setfscreate;
130     allow fastbootd cache_file:dir search;
131     allow fastbootd proc_filesystems:file { getattr open read };
132     allow fastbootd self:capability sys_rawio;
134     allow fastbootd overlayfs_file:dir { create_dir_perms mounton };
135     allow fastbootd {
140     allow fastbootd {
146     allow fastbootd tmpfs:dir rw_dir_perms;
148     allow fastbootd boot_block_device:blk_file r_file_perms;
150     # popen(/system/bin/dmesg) and associated permissions. We only allow this
152     allow fastbootd rootfs:file execute_no_trans;
153     allow fastbootd system_file:file execute_no_trans;
154     allow fastbootd kmsg_device:chr_file read;
155     allow fastbootd kernel:system syslog_read;
159   allow fastbootd gsi_metadata_file_type:dir search;
160   allow fastbootd ota_metadata_file:dir rw_dir_perms;
161   allow fastbootd ota_metadata_file:file create_file_perms;
166 allow fastbootd self:capability ipc_lock;