xref: /base/security/security_guard/sa_profile/security_guard.cfg

{
    "jobs": [
        {
            "name": "services:security_guard",
            "cmds": [
                "mkdir /data/service/el1/public/database 0711 ddms ddms",
                "mkdir /data/service/el1/public/database/security_guard_service 02770 security_guard ddms",
                "mkdir /data/service/el1/public/security_guard 0700 security_guard security_guard",
                "mkdir /data/service/el1/public/security_guard/tmp 0700 security_guard security_guard",
                "chown security_guard security_guard /dev/hkids",
                "chown security_guard security_guard /proc/devhost/root/kernel_sg"
            ]
        }
    ],
    "services": [
        {
            "name": "security_guard",
            "path": [
                "/system/bin/sa_main",
                "/system/profile/security_guard.json"
            ],
            "uid": "security_guard",
            "gid": [
                "security_guard",
                "shell"
            ],
            "apl": "system_basic",
            "secon": "u:r:security_guard:s0",
            "permission": [
                "ohos.permission.securityguard.REPORT_SECURITY_INFO",
                "ohos.permission.READ_DFX_SYSEVENT",
                "ohos.permission.ACCESS_SERVICE_DM",
                "ohos.permission.hsdr.HSDR_ACCESS",
                "ohos.permission.hsdr.REQUEST_HSDR",
                "ohos.permission.INTERACT_ACROSS_LOCAL_ACCOUNTS",
                "ohos.permission.GET_NETWORK_INFO",
                "ohos.permission.ATTEST_KEY",
                "ohos.permission.QUERY_SECURITY_EVENT",
                "ohos.permission.REPORT_SECURITY_EVENT",
                "ohos.permission.QUERY_SECURITY_MODEL_RESULT",
                "ohos.permission.QUERY_SECURITY_POLICY_FROM_CLOUD",
                "ohos.permission.REPORT_SECURITY_EVENT_TO_CLOUD",
                "ohos.permission.COLLECT_SECURITY_EVENT",
                "ohos.permission.MANAGE_SECURITY_GUARD_CONFIG",
                "ohos.permission.PUBLISH_SYSTEM_COMMON_EVENT"
            ],
            "permission_acls": [
                "ohos.permission.COLLECT_SECURITY_EVENT"
            ],
            "jobs": {
                "on-start": "services:security_guard"
            }
        }
    ]
}