1{
2    "global": {
3        "sandbox-root": "/mnt/sandbox/<currentUserId>/app-root",
4        "sandbox-ns-flags": [ "net" ]
5    },
6    "required": {
7        "system-const": {
8            "mount-paths": [{
9                "src-path" : "/config",
10                "sandbox-path" : "/config"
11            }, {
12                "src-path" : "/dev",
13                "sandbox-path" : "/dev"
14            }, {
15                "src-path" : "/proc",
16                "sandbox-path" : "/proc"  
17            }, {
18                "src-path" : "/sys",
19                "sandbox-path" : "/sys"
20            }, {
21                "src-path" : "/sys_prod",
22                "sandbox-path" : "/sys_prod"
23            }, {
24                "src-path" : "/module_update",
25                "sandbox-path" : "/module_update"
26            }, {
27                "src-path" : "/system/app",
28                "sandbox-path" : "/system/app"
29            }, {
30                "src-path" : "/system/fonts",
31                "sandbox-path" : "/system/fonts"
32            }, {
33                "src-path" : "/system/lib",
34                "sandbox-path" : "/system/lib"
35            }, {
36                "src-path" : "/system/lib64",
37                "sandbox-path" : "/system/lib64"
38            }, {
39                "src-path" : "/system/data",
40                "sandbox-path" : "/system/data"
41            }, {
42                "src-path" : "/system/usr",
43                "sandbox-path" : "/system/usr"
44            }, {
45                "src-path" : "/system/profile",
46                "sandbox-path" : "/system/profile"
47            }, {
48                "src-path" : "/system/bin",
49                "sandbox-path" : "/system/bin"
50            }, {
51                "src-path" : "/system/etc",
52                "sandbox-path" : "/system/etc"
53            }, {
54                "src-path" : "/system/resource",
55                "sandbox-path" : "/system/resource"
56            }, {
57                "src-path" : "/vendor/<lib>",
58                "sandbox-path" : "/vendor/<lib>"
59            }, {
60                "src-path" : "/vendor/etc/vulkan",
61                "sandbox-path" : "/vendor/etc/vulkan" 
62            }, {
63                "src-path" : "/vendor/etc/silk",
64                "sandbox-path" : "/vendor/etc/silk" 
65            }, {
66                "src-path" : "/vendor/etc/passthrough",
67                "sandbox-path" : "/vendor/etc/passthrough" 
68            }, {
69                "src-path" : "/vendor/etc/hiai",
70                "sandbox-path" : "/vendor/etc/hiai"
71            }, {
72                "src-path" : "/data/local/shader_cache/cloud/common",
73                "sandbox-path" : "/data/storage/shader_cache/common"
74            }, {
75                "src-path" : "/data/service/el0/public/for-all-app",
76                "sandbox-path" : "/data/service/el0/public/for-all-app"
77            }, {
78                "src-path" : "/data/service/el1/public/for-all-app",
79                "sandbox-path" : "/data/service/el1/public/for-all-app"
80            }, {
81                "src-path" : "/data/data/hiai",
82                "sandbox-path" : "/data/data/hiai"
83            }, {
84                "src-path" : "/chip_prod/lib64/passthrough",
85                "sandbox-path" : "/chip_prod/lib64/passthrough"
86            }, {
87                "src-path" : "/system/app/ohos.global.systemres",
88                "sandbox-path" : "/data/global/systemResources"
89            }, {
90                "src-path" : "/system/app/SystemResources",
91                "sandbox-path" : "/data/global/systemResources"
92            }, {
93                "src-path" : "/data/misc",
94                "sandbox-path" : "/data/storage/el1/bundle/misc"
95            }, {
96                "src-path" : "/data/service/el1/public/cert_manager_service/certificates/user_open",
97                "sandbox-path" : "/data/certificates/user_cacerts"
98            }],
99            "mount-files": [{
100                "src-path" : "/system/etc/hosts",
101                "sandbox-path" : "/data/service/el1/network/hosts_user/hosts"
102            }],
103            "symbol-links" : [{
104                "target-name" : "/system/bin",
105                "link-name" : "/bin"
106            }, {
107                "target-name" : "/system/lib",
108                "link-name" : "/lib"
109            }, {
110                "target-name" : "/system/lib64",
111                "link-name" : "/lib64"
112            }, {
113                "target-name" : "/system/etc",
114                "link-name" : "/etc"
115            }, {
116                "target-name" : "/sys/kernel/debug",
117                "link-name" : "/d"
118            }],
119            "mount-groups" : []
120        },
121        "app-variable": {
122            "mount-paths": [{
123                "src-path" : "/data/app/el1/<currentUserId>/base/<variablePackageName>",
124                "sandbox-path" : "/data/storage/el1/base"
125            }, {
126                "src-path" : "/data/app/el1/<currentUserId>/database/<variablePackageName>",
127                "sandbox-path" : "/data/storage/el1/database"
128            }, {
129                "src-path" : "/data/app/el1/bundle/public/<PackageName>",
130                "sandbox-path" : "/data/storage/el1/bundle",
131                "check-action-status": "true"
132            }, {
133                "src-path" : "/data/local/ark-cache/<PackageName>",
134                "sandbox-path" : "/data/storage/ark-cache"
135            }, {
136                "src-path" : "/data/local/ark-profile/<currentUserId>/<PackageName>",
137                "sandbox-path" : "/data/storage/ark-profile"
138            }, {
139                "src-path" : "/data/local/shader_cache/local/<PackageName>",
140                "sandbox-path" : "/data/storage/shader_cache/local"
141            }, {
142                "src-path" : "/data/local/shader_cache/cloud/<PackageName>",
143                "sandbox-path" : "/data/storage/shader_cache/cloud"
144            }, {
145                "src-path" : "/mnt/share/<currentUserId>/<PackageName_index>",
146                "sandbox-path" : "/data/storage/el2/share"
147            }, {
148                "src-path" : "/data/service/el1/public/themes/<currentUserId>/a/app",
149                "sandbox-path" : "/data/themes/a/app"
150            }, {
151                "src-path" : "/data/service/el1/public/themes/<currentUserId>/b/app",
152                "sandbox-path" : "/data/themes/b/app"
153            }, {
154                "src-path" : "/data/service/el1/<currentUserId>/utdtypes/utd",
155                "sandbox-path" : "/data/utd"
156            }, {
157                "src-path" : "/data/app/el1/bundle/public/<arkWebPackageName>",
158                "sandbox-path" : "/mnt/nweb/tmp"
159            }, {
160                "src-path" : "/mnt/hmdfs/<currentUserId>",
161                "sandbox-path" : "/mnt/hmdfs/<currentUserId>"
162            }, {
163                "src-path" : "/mnt/hmdfs/<currentUserId>/cloud/data/<PackageName>",
164                "sandbox-path" : "/data/storage/el2/cloud"
165            }],
166            "symbol-links" : [{
167                "target-name" : "/mnt/nweb/tmp",
168                "link-name" : "/data/storage/el1/bundle/arkwebcore"
169            }],
170            "mount-groups": ["el2", "el3", "el4"]
171        }
172    },
173    "conditional": {
174        "permission": [{
175            "name": "ohos.permission.FILE_ACCESS_MANAGER",
176            "sandbox-switch": "ON",
177            "gids": ["file_manager", "user_data_rw"],
178            "mount-paths": [{
179                "src-path": "/storage/media/<currentUserId>/local/files/Docs",
180                "sandbox-path": "/storage/Users/<currentUserId>"
181            }, {
182                "src-path": "/storage/media/<currentUserId>/local/files/.Recent",
183                "sandbox-path": "/storage/Users/<currentUserId>/.Recent"
184            }],
185            "mount-groups": [ "user-public", "Users" ]
186        }, {
187            "name": "ohos.permission.READ_IMAGEVIDEO",
188            "sandbox-switch": "ON",
189            "gids": ["user_data_r"],
190            "mount-paths": [{
191                "src-path": "/storage/cloud/<currentUserId>/files/.thumbs/Photo",
192                "sandbox-path": "/storage/Share/.thumbs/Photo"
193            }]
194        }, {
195            "name": "ohos.permission.FILE_CROSS_APP",
196            "gids": ["file_manager"],
197            "mount-paths": [{
198                "src-path": "/storage/media/<currentUserId>/local/files/Docs",
199                "sandbox-path": "/storage/Users/<currentUserId>"
200            }, {
201                "src-path": "/data/app/el1/<currentUserId>/base",
202                "sandbox-path": "/storage/Users/<currentUserId>/appdata/el1",
203                "category": "dac_override"
204            }, {
205                "src-path": "/data/app/el2/<currentUserId>/base",
206                "sandbox-path": "/storage/Users/<currentUserId>/appdata/el2",
207                "category": "dac_override"
208            }],
209            "mount-groups": [ "user-public" ]
210        }, {
211            "name": "ohos.permission.ACTIVATE_THEME_PACKAGE",
212            "gids": ["wallpaper"],
213            "mount-paths": [{
214                "src-path": "/data/service/el1/public/themes/<currentUserId>/a/system",
215                "sandbox-path": "/data/themes/a/system"
216            }, {
217                "src-path": "/data/service/el1/public/themes/<currentUserId>/b/system",
218                "sandbox-path": "/data/themes/b/system"
219            }, {
220                "src-path": "/data/service/el1/public/themes/<currentUserId>/fa",
221                "sandbox-path": "/data/themes/f"
222            }, {
223                "src-path": "/data/service/el1/public/themes/<currentUserId>/share",
224                "sandbox-path": "/data/themes/s"
225            }]
226        }, {
227            "name": "ohos.permission.GET_WALLPAPER",
228            "mount-paths": [{
229                "src-path": "/data/service/el1/public/wallpaper/<currentUserId>",
230                "sandbox-path": "/data/wallpaper"
231            }]
232        }, {
233            "name": "ohos.permission.ACCESS_BUNDLE_DIR",
234            "gids": ["wifi"],
235            "mount-paths": [{
236                "src-path": "/data/app/el1/bundle/public",
237                "sandbox-path": "/data/bundles/"
238            }]
239        }, {
240            "name": "ohos.permission.ACCESS_BBOX_DIR",
241            "mount-paths": [{
242                "src-path": "/data/log/bbox/",
243                "sandbox-path": "/data/log/bbox/"
244            }]
245        }, {
246            "name": "ohos.permission.ACCESS_PROTOCOL_DFX_DATA",
247            "gids": ["log"],
248            "mount-paths": [{
249                "src-path": "/data/service/el1/public/chr/protocol",
250                "sandbox-path": "/data/log/protocol"
251            }, {
252                "src-path": "/log/chr",
253                "sandbox-path": "/log/chr"
254            }]
255        }, {
256            "name": "ohos.permission.ACCESS_MEDIALIB_THUMB_DB",
257            "gids": ["media_db_rw"],
258            "mount-paths": [{
259                "src-path": "/data/app/el2/<currentUserId>/database/com.ohos.medialibrary.medialibrarydata",
260                "sandbox-path": "/data/medialibrary/database"
261            }]
262        }, {
263            "name": "ohos.permission.ACCESS_SHADER_CACHE_DIR",
264            "mount-paths": [{
265                "src-path": "/data/local/shader_cache",
266                "sandbox-path": "/data/storage/shader_caches"
267            }]
268        }, {
269            "name": "ohos.permission.ACCESS_HIVIEWX",
270            "mount-paths": [{
271                "src-path": "/data/log/UserView",
272                "sandbox-path": "/data/log/UserView"
273            }]
274        }, {
275            "name": "ohos.permission.READ_DFX_XPOWER",
276            "mount-paths": [{
277                "src-path": "/data/log/xpower",
278                "sandbox-path": "/data/log/xpower"
279            }]
280        }, {
281            "name": "ohos.permission.PROTECT_SCREEN_LOCK_DATA",
282            "sandbox-switch": "ON",
283            "mount-groups": ["el5"]
284        }, {
285            "name": "ohos.permission.ACCESS_FILE_CONTENT_SHARE",
286            "sandbox-switch": "ON",
287            "gids": ["file_manager", "user_data_rw"],
288            "mount-paths": [{
289                "src-path": "/data/service/el2/<currentUserId>/file_monitor_service/content_share",
290                "sandbox-path": "/storage/ContentShare"
291            }]
292        }, {
293            "name": "ohos.permission.ACCESS_LOCAL_BACKUP",
294            "sandbox-switch": "ON",
295            "gids": ["media_rw"],
296            "mount-paths": [{
297                "src-path": "/data/hwbackup",
298                "sandbox-path": "/data/hwbackup"
299            }]
300        }, {
301            "name": "ohos.permission.ACCESS_RINGTONE_RESOURCE",
302            "sandbox-switch": "ON",
303            "gids": ["user_data_rw"],
304            "mount-paths": [{
305                "src-path": "/storage/media/<currentUserId>/local/files",
306                "sandbox-path": "/storage/media/local/files"
307            }]
308        }, {
309            "name": "ohos.permission.ACCESS_FACTORY_OTA_DIR",
310            "sandbox-switch": "ON",
311            "mount-paths": [{
312                "src-path": "/data/update/sd_package",
313                "sandbox-path": "/data/update/sd_package"
314            }]
315        }, {
316            "name": "ohos.permission.ACCESS_DLP_FILE",
317            "sandbox-switch": "ON",
318            "sandbox-shared" : "true",
319            "mount-paths": [{
320                "src-path": "/mnt/data/<currentUserId>",
321                "sandbox-path": "/mnt/data",
322                "category": "shared",
323                "check-action-status": "true"
324            }, {
325                "src-path": "/dev/fuse",
326                "sandbox-path": "/mnt/data/fuse",
327                "category": "dlp_fuse"
328            }],
329            "mount-groups": ["dlpmgr"]
330        }, {
331            "name": "ohos.permission.GET_ALL_PROCESSES",
332            "sandbox-switch": "ON",
333            "gids" : ["readproc"],
334            "mount-paths": []
335        }, {
336            "name": "ohos.permission.ACCESS_ANALYTICS",
337            "sandbox-switch": "ON",
338            "gids" : ["log"],
339            "mount-paths": [{
340                "src-path": "/data/log/faultlog/faultlogger",
341                "sandbox-path": "/data/log/faultlog/faultlogger"
342            }]
343        }, {
344            "name": "ohos.permission.RECEIVE_UPDATE_MESSAGE",
345              "mount-paths": [{
346                "src-path": "/data/service/el1/public/update/param_service/install/system/etc/<PackageName>",
347                "sandbox-path": "/data/service/el1/public/update/param_service/install/system/etc/<PackageName>"
348            }]
349        }],
350        "spawn-flag": [{
351            "name": "START_FLAGS_BACKUP",
352            "mount-paths": [{
353                "src-path": "/data/app/el2/<currentUserId>/base/<variablePackageName>/.backup",
354                "sandbox-path": "/data/storage/el2/backup"
355            }, {
356                "src-path": "/data/app/el1/<currentUserId>/base/<PackageName>/.backup",
357                "sandbox-path": "/data/storage/el1/backup"
358            }],
359            "mount-groups": []
360        }, {
361            "name": "DLP_MANAGER",
362            "mount-paths": [ {
363                "src-path": "/data/app/el1/<currentUserId>/base/<PackageName_index>",
364                "sandbox-path": "/data/storage/el1/base"
365            }, {
366                "src-path": "/data/app/el1/<currentUserId>/database/<PackageName_index>",
367                "sandbox-path": "/data/storage/el1/database"
368            }, {
369                "src-path": "/data/app/el2/<currentUserId>/base/<PackageName_index>",
370                "sandbox-path": "/data/storage/el2/base"
371            }, {
372                "src-path": "/data/app/el2/<currentUserId>/database/<PackageName_index>",
373                "sandbox-path": "/data/storage/el2/database"
374            }, {
375                "src-path": "/data/app/el2/<currentUserId>/log/<PackageName_index>",
376                "sandbox-path": "/data/storage/el2/log"
377            }, {
378                "src-path": "/mnt/share/<currentUserId>/<PackageName_index>",
379                "sandbox-path": "/data/storage/el2/share"
380            }],
381            "mount-groups": []
382        }, {
383            "name": "DEVELOPER_MODE",
384            "mount-paths": [{
385                "src-path": "/data/app/el1/bundle/<currentUserId>/hnppublic",
386                "sandbox-path": "/data/service/hnp"
387            }, {
388                "src-path" : "/data/app/el1/bundle/<currentUserId>/hnp/<PackageName>",
389                "sandbox-path" : "/data/app"
390            }
391        ]}],
392        "package-name": [{
393            "name": "com.ohos.medialibrary.medialibrarydata",
394            "mount-paths" : [{
395                "src-path" : "/storage/media/<currentUserId>",
396                "sandbox-path" : "/storage/media"
397            }, {
398                "src-path" : "/data/service/el2/<currentUserId>/hmdfs/cache/account_cache",
399                "sandbox-path" : "/data/service/el2/<currentUserId>/hmdfs/cache/account_cache"
400            }, {
401                "src-path" : "/storage/cloud/<currentUserId>",
402                "sandbox-path" : "/storage/cloud",
403                "check-action-status": "true"
404            }, {
405                "src-path" : "none",
406                "sandbox-path" : "/storage/cloud/epfs",
407                "category": "epfs"
408            }, {
409                "src-path" : "/mnt/data/<currentUserId>",
410                "sandbox-path" : "/mnt/data/<currentUserId>"
411            }]
412        }, {
413            "name": "com.ohos.sceneboard",
414            "sandbox-switch": "ON",
415            "gids": ["data_reserve"],
416            "mount-paths" : [{
417                "src-path" : "/data/app/el1/bundle/public/",
418                "sandbox-path" : "/data/bundles/"
419            }]
420        }]
421    },
422    "name-groups": [{
423        "name": "user-public",
424        "type": "app-variable",
425        "mount-paths": [{
426            "src-path": "/data/service/el1/public/storage_daemon/share/public",
427            "sandbox-path": "/storage/Share"
428        }, {
429            "src-path": "/mnt/data/external",
430            "sandbox-path": "/storage/External"
431        }]
432    }, {
433        "name": "Users",
434        "type": "app-variable",
435        "deps-mode": "not-exists",
436        "mount-paths-deps": {
437            "src-path": "/mnt/sandbox/<currentUserId>/<PackageName>/storage/Users",
438            "sandbox-path": "/storage/Users",
439            "category": "shared"
440        },
441        "mount-paths": [{
442            "src-path": "/storage/media/<currentUserId>/local/files/Docs",
443            "sandbox-path": "<deps-path>/currentUser"
444        }]
445    }, {
446        "name": "el2",
447        "type": "app-variable",
448        "deps-mode": "not-exists",
449        "mount-paths-deps": {
450            "src-path": "/mnt/sandbox/<currentUserId>/<PackageName>/data/storage/el2",
451            "sandbox-path": "/data/storage/el2",
452            "category": "shared"
453        },
454        "mount-paths": [{
455            "src-path": "/data/app/el2/<currentUserId>/base/<variablePackageName>",
456            "sandbox-path": "<deps-path>/base"
457        }, {
458            "src-path": "/data/app/el2/<currentUserId>/database/<variablePackageName>",
459            "sandbox-path": "<deps-path>/database"
460        }, {
461            "src-path": "/data/app/el2/<currentUserId>/log/<variablePackageName>",
462            "sandbox-path": "<deps-path>/log"
463        }, {
464            "src-path": "/mnt/hmdfs/<currentUserId>/non_account/merge_view/data",
465            "sandbox-path": "<deps-path>/auth_groups"
466        }, {
467            "src-path": "/mnt/hmdfs/<currentUserId>/account/merge_view/data/<PackageName>",
468            "sandbox-path": "<deps-path>/distributedfiles"
469        }, {
470            "src-path": "/mnt/share/<currentUserId>/<PackageName_index>",
471            "sandbox-path": "<deps-path>/share"
472        }]
473    }, {
474        "name": "el3",
475        "type": "app-variable",
476        "deps-mode": "not-exists",
477        "mount-paths-deps": {
478            "src-path": "/mnt/sandbox/<currentUserId>/<PackageName>/data/storage/el3",
479            "sandbox-path": "/data/storage/el3",
480            "category": "shared"
481        },
482        "mount-paths": [{
483            "src-path": "/data/app/el3/<currentUserId>/base/<variablePackageName>",
484            "sandbox-path": "<deps-path>/base"
485        }, {
486            "src-path": "/data/app/el3/<currentUserId>/database/<variablePackageName>",
487            "sandbox-path": "<deps-path>/database"
488        }]
489    }, {
490        "name": "el4",
491        "type": "app-variable",
492        "deps-mode": "not-exists",
493        "mount-paths-deps": {
494            "src-path": "/mnt/sandbox/<currentUserId>/<PackageName>/data/storage/el4",
495            "sandbox-path": "/data/storage/el4",
496            "category": "shared"
497        },
498        "mount-paths": [{
499            "src-path": "/data/app/el4/<currentUserId>/base/<variablePackageName>",
500            "sandbox-path": "<deps-path>/base"
501        }, {
502            "src-path": "/data/app/el4/<currentUserId>/database/<variablePackageName>",
503            "sandbox-path": "<deps-path>/database"
504        }]
505    }, {
506        "name": "el5",
507        "type": "app-variable",
508        "deps-mode": "not-exists",
509        "mount-paths-deps": {
510            "src-path": "/mnt/sandbox/<currentUserId>/<PackageName>/data/storage/el5",
511            "sandbox-path": "/data/storage/el5",
512            "category": "shared"
513        },
514        "mount-paths": [{
515            "src-path": "/data/app/el5/<currentUserId>/base/<variablePackageName>",
516            "sandbox-path": "<deps-path>/base"
517        }, {
518            "src-path": "/data/app/el5/<currentUserId>/database/<variablePackageName>",
519            "sandbox-path": "<deps-path>/database"
520        }]
521    }, {
522        "name": "HspList",
523        "type": "app-variable",
524        "mount-paths": [{
525            "src-path": "/data/app/el1/bundle/public/<bundle-name>/<version>/<module-name>",
526            "sandbox-path": "/data/storage/el2/group/<bundle-name>/<module-name>"
527        }]
528    }, {
529        "name": "DataGroup",
530        "type": "app-variable",
531        "mount-paths": [{
532            "src-path": "<data-dir>",
533            "sandbox-path": "/data/storage/el2/group/<data-uuid>"
534        }]
535    }, {
536        "name": "Overlay",
537        "type": "app-variable",
538        "mount-paths": [{
539            "src-path": "<hap-path>",
540            "sandbox-path": "/data/storage/overlay/<hap-name>",
541            "category": "shared"
542        }]
543    }]
544}