1# Copyright (c) 2023 Huawei Device Co., Ltd.
2# Licensed under the Apache License, Version 2.0 (the License);
3# you may not use this file except in compliance with the License.
4# You may obtain a copy of the License at
5#
6#     http://www.apache.org/licenses/LICENSE-2.0
7#
8# Unless required by applicable law or agreed to in writing, software
9# distributed under the License is distributed on an "AS IS" BASIS,
10# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
11# See the License for the specific language governing permissions and
12# limitations under the License.
13
14allow i18n_service sa_i18n_service:samgr_class { get add };
15allow i18n_service debug_param:file { open read map };
16allow i18n_service hilog_param:file { open read map };
17allow i18n_service sa_accesstoken_manager_service:samgr_class { get };
18allow i18n_service dev_unix_socket:dir { search };
19allow i18n_service accesstoken_service:binder { call };
20allow i18n_service i18n_param:parameter_service { set };
21allow i18n_service i18n_param_tz_override:parameter_service { set };
22allow i18n_service system_usr_file:dir { search getattr };
23allow i18n_service system_usr_file:file { getattr read open map };
24allow i18n_service sysfs_devices_system_cpu:file { getattr read open map };
25allow i18n_service tracefs:dir { search };
26allow i18n_service paramservice_socket:sock_file { write };
27allow i18n_service kernel:unix_stream_socket { connectto };
28allow i18n_service sa_foundation_appms:samgr_class { get };
29allow i18n_service sa_foundation_cesfwk_service:samgr_class { get };
30allow i18n_service foundation:binder { call };
31allow i18n_service arkcompiler_param:file { map open read };
32allow i18n_service ark_writeable_param:file { map open read };
33allow i18n_service dev_console_file:chr_file { read write };
34allow i18n_service chip_prod_file:dir { search };
35allow i18n_service data_service_el1_file:dir { search write add_name remove_name };
36allow i18n_service data_service_el1_file:file { getattr open read create ioctl rename setattr unlink write };
37allow i18n_service data_service_file:dir { search };
38allow i18n_service dev_kmsg_file:chr_file { write };
39allow i18n_service i18n_service:unix_dgram_socket { getopt setopt };
40allow i18n_service persist_sys_param:file { map open read };
41allow i18n_service sys_prod_file:dir { search };
42allowxperm i18n_service data_service_el1_file:file ioctl 0x5413;
43allow i18n_service sa_memory_manager_service:samgr_class { get };
44allow i18n_service memmgrservice:binder { call };
45allow i18n_service foundation:binder { transfer };
46allow i18n_service persist_param:file { map open read };
47allow i18n_service data_file:dir { search };
48allow i18n_service accountmgr:binder { call };
49allow i18n_service sa_accountmgr:samgr_class { get };
50allow i18n_service data_service_el1_file:file { ioctl };
51allowxperm i18n_service data_service_el1_file:file ioctl { 0xf546 };
52