1# Copyright (c) 2022-2023 Huawei Device Co., Ltd. 2# Licensed under the Apache License, Version 2.0 (the "License"); 3# you may not use this file except in compliance with the License. 4# You may obtain a copy of the License at 5# 6# http://www.apache.org/licenses/LICENSE-2.0 7# 8# Unless required by applicable law or agreed to in writing, software 9# distributed under the License is distributed on an "AS IS" BASIS, 10# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 11# See the License for the specific language governing permissions and 12# limitations under the License. 13 14allow samgr bootevent_param:file { map open read }; 15allow samgr bootevent_samgr_param:file { map open read }; 16allow samgr build_version_param:file { map open read }; 17allow samgr const_allow_mock_param:file { map open read }; 18allow samgr const_allow_param:file { map open read }; 19allow samgr const_build_param:file { map open read }; 20allow samgr const_display_brightness_param:file { map open read }; 21allow samgr const_param:file { map open read }; 22allow samgr const_postinstall_fstab_param:file { map open read }; 23allow samgr const_postinstall_param:file { map open read }; 24allow samgr const_product_param:file { map open read }; 25allow samgr debug_param:file { map open read }; 26allow samgr default_param:file { map open read }; 27allow samgr dev_kmsg_file:chr_file { open write }; 28allow samgr dev_unix_socket:sock_file { write }; 29allow samgr distributedsche_param:file { map open read }; 30allow samgr data_samgr:dir { add_name search write remove_name }; 31allow samgr data_samgr:file { create getattr ioctl read write lock map open rename setattr unlink }; 32allow samgr hilog_param:file { map open read }; 33allow samgr hw_sc_build_os_param:file { map open read }; 34allow samgr hw_sc_build_param:file { map open read }; 35allow samgr hw_sc_param:file { map open read }; 36allow samgr init_param:file { map open read }; 37allow samgr init_svc_param:file { map open read }; 38allow samgr input_pointer_device_param:file { map open read }; 39allow samgr net_param:file { map open read }; 40allow samgr net_tcp_param:file { map open read }; 41allow samgr normal_hap_attr:binder { call }; 42allow samgr ohos_boot_param:file { map open read }; 43allow samgr ohos_param:file { map open read }; 44allow samgr ohos_param:parameter_service { set }; 45allow samgr persist_param:file { map open read }; 46allow samgr persist_sys_param:file { map open read }; 47allow samgr processdump:binder { transfer }; 48allow samgr processdump:dir { search }; 49allow samgr processdump:file { open read }; 50allow samgr processdump:process { getattr }; 51allow samgr samgr:unix_dgram_socket { getopt setopt }; 52allow samgr sa_softbus_service:samgr_class { get }; 53allow samgr security_param:file { map open read }; 54allow samgr startup_param:file { map open read }; 55allow samgr sys_param:file { map open read }; 56allow samgr system_basic_hap_attr:binder { call }; 57allow samgr system_core_hap_attr:binder { call }; 58allow samgr sys_usb_param:file { map open read }; 59allow samgr tracefs:dir { search }; 60allow samgr tracefs_trace_marker_file:file { open write }; 61allow samgr vendor_etc_file:dir { search }; 62allow samgr appspawn:process { getattr }; 63allowxperm samgr data_samgr:file ioctl { 0x5413 }; 64