kernel_samsung_a34x-permissive/security/samsung/defex_lsm/defex_rules.c

/*
 * Copyright (c) 2018 Samsung Electronics Co., Ltd. All Rights Reserved
 *
 * This program is free software; you can redistribute it and/or modify it
 * under the terms of the GNU General Public License version 2
 * as published by the Free Software Foundation.
 */

#if 0
	/* Rules start after this line */

	{feature_ped_exception,"/system/bin/run-as"},	/* DEFAULT */
	{feature_ped_exception,"/system/bin/dumpstate"},	/* DEFAULT */
	{feature_safeplace_path,"/init"},
	{feature_safeplace_path,"/system/bin/init"},
	{feature_safeplace_path,"/system/bin/app_process32"},
	{feature_safeplace_path,"/system/bin/app_process64"},
	{feature_safeplace_path,"/system/bin/blkid"},
	{feature_safeplace_path,"/system/bin/clatd"},
	{feature_safeplace_path,"/system/bin/cmd"},
	{feature_safeplace_path,"/system/bin/corehelper.sh"},
	{feature_safeplace_path,"/system/bin/crash_dump32"},
	{feature_safeplace_path,"/system/bin/crash_dump64"},
	{feature_safeplace_path,"/system/bin/debuggerd"},
	{feature_safeplace_path,"/system/bin/dnsmasq"},
	{feature_safeplace_path,"/system/bin/dsms"},
	{feature_safeplace_path,"/system/bin/dumpstate"},
	{feature_safeplace_path,"/system/bin/fsck.vfat"},
	{feature_safeplace_path,"/system/bin/fsck.exfat"},
	{feature_safeplace_path,"/system/bin/gatekeeperd"},
	{feature_safeplace_path,"/system/bin/healthd"},
	{feature_safeplace_path,"/system/bin/installd"},
	{feature_safeplace_path,"/system/bin/iod"},
	{feature_safeplace_path,"/system/bin/ip"},
	{feature_safeplace_path,"/system/bin/iptables"},
	{feature_safeplace_path,"/system/bin/iptables-restore"},
	{feature_safeplace_path,"/system/bin/ip6tables"},
	{feature_safeplace_path,"/system/bin/ip6tables-restore"},
	{feature_safeplace_path,"/system/bin/lmkd"},
	{feature_safeplace_path,"/system/bin/lshal"},
	{feature_safeplace_path,"/system/bin/mdf_fota"},
	{feature_safeplace_path,"/system/bin/mkfs.vfat"},
	{feature_safeplace_path,"/system/bin/mkfs.exfat"},
	{feature_safeplace_path,"/system/bin/netd"},
	{feature_safeplace_path,"/system/bin/nst"},
	{feature_safeplace_path,"/system/bin/perfmond"},
	{feature_safeplace_path,"/system/bin/perfprofd"},
	{feature_safeplace_path,"/system/bin/sgdisk"},
	{feature_safeplace_path,"/system/bin/sh"},
	{feature_safeplace_path,"/system/bin/ss"},
	{feature_safeplace_path,"/system/bin/storaged"},
	{feature_safeplace_path,"/system/bin/tc"},
	{feature_safeplace_path,"/system/bin/uncrypt"},
	{feature_safeplace_path,"/system/bin/vold"},
	{feature_safeplace_path,"/system/bin/webview_zygote32"},
	{feature_safeplace_path,"/system/bin/grep"},
	{feature_safeplace_path,"/system/bin/e2fsck"},
	{feature_safeplace_path,"/system/bin/scs"},
	{feature_safeplace_path,"/system/bin/vdc"},
	{feature_safeplace_path,"/system/bin/vaultkeeperd"},
	{feature_safeplace_path,"/system/bin/prepare_param.sh"},
	{feature_safeplace_path,"/system/bin/smdexe"},
	{feature_safeplace_path,"/system/bin/diagexe"},
	{feature_safeplace_path,"/system/bin/ddexe"},
	{feature_safeplace_path,"/system/bin/connfwexe"},
	{feature_safeplace_path,"/system/bin/at_distributor"},
	{feature_safeplace_path,"/system/bin/sdcard"},
	{feature_safeplace_path,"/system/bin/resetreason"},
	{feature_safeplace_path,"/system/bin/lpm"},
	{feature_safeplace_path,"/system/bin/resize2fs"},
	{feature_safeplace_path,"/system/bin/tune2fs"},
	{feature_safeplace_path,"/system/bin/patchoat"},
	{feature_safeplace_path,"/system/bin/knox_changer"},
	{feature_safeplace_path,"/system/bin/knox_changer_recovery"},
	{feature_safeplace_path,"/sbin/sswap"},
	{feature_safeplace_path,"/sbin/cbd"},
	{feature_safeplace_path,"/sbin/adbd"},
	{feature_safeplace_path,"/sbin/recovery"},
	{feature_safeplace_path,"/sbin/mke2fs_static"},
	{feature_safeplace_path,"/vendor/bin/hw/wpa_supplicant"},
	{feature_safeplace_path,"/vendor/bin/hw/macloader"},
	{feature_safeplace_path,"/vendor/bin/hw/mfgloader"},
	{feature_safeplace_path,"/sbin/dm_verity_hash"},
	{feature_safeplace_path,"/sbin/dm_verity_signature_checker"},
	{feature_safeplace_path,"/vendor/bin/qseecomd"},
	{feature_safeplace_path,"/system/bin/vold_prepare_subdirs"},
	{feature_safeplace_path,"/vendor/bin/init.qcom.early_boot.sh"},
	{feature_safeplace_path,"/vendor/bin/toybox_vendor"},
	{feature_safeplace_path,"/vendor/bin/toolbox"},
	{feature_safeplace_path,"/vendor/bin/hw/android.hardware.usb@1.1-service.wahoo"},
	{feature_safeplace_path,"/vendor/bin/hw/vendor.qti.hardware.iop@2.0-service"},
	{feature_safeplace_path,"/vendor/bin/hw/vendor.qti.hardware.perf@1.0-service"},
	{feature_safeplace_path,"/vendor/bin/init.qcom.class_core.sh"},
	{feature_safeplace_path,"/vendor/bin/irsc_util"},
	{feature_safeplace_path,"/vendor/bin/rmt_storage"},
	{feature_safeplace_path,"/system/bin/toybox"},
	{feature_safeplace_path,"/vendor/bin/init.qcom.usb.sh"},
	{feature_safeplace_path,"/vendor/bin/tftp_server"},
	{feature_safeplace_path,"/vendor/bin/init.qcom.sensors.sh"},
	{feature_safeplace_path,"/system/bin/insthk"},
	{feature_safeplace_path,"/vendor/bin/init.class_main.sh"},
	{feature_safeplace_path,"/vendor/bin/time_daemon"},
	{feature_safeplace_path,"/vendor/bin/thermal-engine"},
	{feature_safeplace_path,"/vendor/bin/thermal-engine-v2"},
	{feature_safeplace_path,"/system/bin/sec_diag_uart_log"},
	{feature_safeplace_path,"/vendor/bin/init.qcom.sh"},
	{feature_safeplace_path,"/system/bin/usbd"},
	{feature_safeplace_path,"/vendor/bin/init.qcom.post_boot.sh"},
	{feature_safeplace_path,"/system/bin/adbd"},
	{feature_safeplace_path,"/system/bin/atrace"},
	{feature_safeplace_path,"/system/bin/fsdbg"},
	{feature_safeplace_path,"/system/bin/dumpsys"},
	{feature_safeplace_path,"/system/bin/logcat"},
	{feature_safeplace_path,"/system/bin/toolbox"},
	{feature_safeplace_path,"/system/bin/mke2fs"},
	{feature_safeplace_path,"/vendor/bin/cbd"},
	{feature_safeplace_path,"/vendor/bin/adsprpcd"},
	{feature_safeplace_path,"/sbin/e2fsdroid_static"},
	{feature_safeplace_path,"/system/bin/e2fsdroid"},
	{feature_safeplace_path,"/system/bin/fsck.f2fs"},
	{feature_safeplace_path,"/system/bin/make_f2fs"},
	{feature_safeplace_path,"/system/bin/sload_f2fs"},
	{feature_safeplace_path,"/system/bin/bpfloader"},
	{feature_safeplace_path,"/system/bin/wait_for_keymaster"},
	{feature_safeplace_path,"/system/bin/secdiscard"},
	{feature_safeplace_path,"/system/bin/idledefrag"},
	{feature_safeplace_path,"/vendor/bin/init.mdm.sh"},
	{feature_safeplace_path,"/vendor/bin/mdm_helper"},
	{feature_safeplace_path,"/vendor/bin/ks"},
	{feature_safeplace_path,"/vendor/bin/sh"},
	{feature_safeplace_path,"/system/bin/e4defrag"},
	{feature_safeplace_path,"/sbin/dm_verity_tz_cmd"},
	{feature_safeplace_path,"/sbin/mcDriverDaemon_static"},
	{feature_safeplace_path,"/sbin/qseecomfsd"},
	{feature_safeplace_path,"/sbin/tzdaemon_recovery"},
	{feature_safeplace_path,"/vendor/bin/hvdcp_opti"},
	{feature_safeplace_path,"/sbin/mkfs.f2fs"},
	{feature_safeplace_path,"/sbin/sload.f2fs"},
	{feature_safeplace_path,"/system/bin/secilc"},
	{feature_safeplace_path,"/system/bin/apexd"},
	{feature_safeplace_path,"/system/bin/art_apex_boot_integrity"},
	{feature_safeplace_path,"/system/bin/gsid"},
	{feature_safeplace_path,"/system/bin/idmap2"},
	{feature_safeplace_path,"/system/bin/charger"},
	{feature_safeplace_path,"/system/bin/recovery"},
	{feature_safeplace_path,"/system/bin/watchdogd"},
	{feature_safeplace_path,"/vendor/bin/hw/vendor.qti.hardware.perf@2.0-service"},
	{feature_safeplace_path,"/system/bin/netutils-wrapper-1.0"},
	{feature_safeplace_path,"/system/bin/bugreport"},
	{feature_safeplace_path,"/system/bin/minadbd"},
	{feature_safeplace_path,"/system/bin/migrate_legacy_obb_data.sh"},
	{feature_safeplace_path,"/vendor/bin/shsusrd"},
	{feature_safeplace_path,"/system/bin/defrag_f2fs"},
	{feature_safeplace_path,"/system/bin/fastbootd"},
	{feature_safeplace_path,"/system/bin/sbm"},
	{feature_safeplace_path,"/vendor/bin/hw/vendor.qti.hardware.perf@2.1-service"},
	{feature_safeplace_path,"/vendor/bin/hw/vendor.qti.hardware.perf@2.2-service"},
	{feature_safeplace_path,"/vendor/bin/grep"},
	{feature_safeplace_path,"/vendor/bin/memlogd"},
	{feature_safeplace_path,"/vendor/bin/init.insmod.sh"},
	{feature_safeplace_path,"/vendor/bin/hw/android.hardware.usb@1.3-service.coral"},
	{feature_safeplace_path,"/vendor/bin/hw/vendor.qti.hardware.perf-hal-service"},
	{feature_safeplace_path,"/vendor/bin/iod"},
	{feature_safeplace_path,"/vendor/bin/dsmsca"},
	{feature_safeplace_path,"/vendor/bin/hqread"},
	{feature_safeplace_path,"/system/bin/hqcpsnbin"},
	{feature_safeplace_path,"/system/bin/awk"},
	{feature_safeplace_path,"/system/bin/bc"},
	{feature_safeplace_path,"/system/bin/service"},
	{feature_safeplace_path,"/system/bin/rdxd"},
	{feature_safeplace_path,"/system/bin/ztd"},
	{feature_safeplace_path,"/system/system_ext/bin/dpmd"},
	{feature_safeplace_path,"/vendor/bin/init.qti.dcvs.sh"},
	{feature_safeplace_path,"/vendor/bin/vendor_modprobe.sh"},
	{feature_safeplace_path,"/vendor/bin/init.qti.qcv.sh"},
	{feature_safeplace_path,"/vendor/bin/init.qcom.crashdata.sh"},
	{feature_safeplace_path,"/vendor/bin/energy-awareness"},
	{feature_safeplace_path,"/vendor/bin/qcom-system-daemon"},
	{feature_safeplace_path,"/vendor/bin/init.qti.kernel.sh"},
	{feature_safeplace_path,"/vendor/bin/init.kernel.post_boot.sh"},
	{feature_safeplace_path,"/vendor/bin/init.kernel.post_boot-lahaina.sh"},
	{feature_safeplace_path,"/vendor/bin/init.qti.early_init.sh"},
	{feature_safeplace_path,"/vendor/bin/init.qti.keymaster.sh"},
	{feature_safeplace_path,"/vendor/bin/init.qti.write.sh"},
	{feature_safeplace_path,"/vendor/bin/vmmgr"},
	{feature_safeplace_path,"/product/bin/qvirtmgr"},
	{feature_safeplace_path,"/system_ext/bin/qcrosvm"},
	{feature_safeplace_path,"/vendor/bin/ssr_setup"},
	{feature_safeplace_path,"/product/bin/vendor.qti.qvirt-service_rs"},
	{feature_safeplace_path,"/product/bin/vendor.qti.qvirt-service"},
	{feature_safeplace_path,"/vendor/bin/hw/vendor.qti.hardware.debugutils-service"},
	{feature_safeplace_path,"/vendor/bin/hw/vendor.qti.hardware.perf2-hal-service"},
	{feature_safeplace_path,"/vendor/bin/hw/vendor.qti.hardware.limits@1.2-service"},
	{feature_safeplace_path,"/vendor/bin/thermal_manager"},
	{feature_safeplace_path,"/vendor/bin/nvram_daemon"},
	{feature_safeplace_path,"/vendor/bin/hw/vendor.mediatek.hardware.nvram@1.1-service"},
	{feature_safeplace_path,"/vendor/bin/aee_aedv"},
	{feature_safeplace_path,"/vendor/bin/aee_aedv64"},
	{feature_safeplace_path,"/vendor/bin/meta_tst"},
	{feature_safeplace_path,"/vendor/bin/thermal_core"},
	{feature_safeplace_path,"/system/bin/linkerconfig"},
	{feature_safeplace_path,"/system/bin/snapshotctl"},
	{feature_safeplace_path,"/system/bin/boringssl_self_test32"},
	{feature_safeplace_path,"/system/bin/boringssl_self_test64"},
	{feature_safeplace_path,"/vendor/bin/boringssl_self_test32"},
	{feature_safeplace_path,"/vendor/bin/boringssl_self_test64"},
	{feature_safeplace_path,"/apex/com.android.adbd/bin/adbd"},
	{feature_safeplace_path,"/apex/com.android.sdkext/bin/derive_sdk"},
	{feature_safeplace_path,"/apex/com.android.conscrypt/bin/boringssl_self_test32"},
	{feature_safeplace_path,"/apex/com.android.conscrypt/bin/boringssl_self_test64"},
	{feature_safeplace_path,"/system/bin/applypatch"},
	{feature_safeplace_path,"/vendor/bin/applypatch"},
	{feature_safeplace_path,"/system/bin/clean_scratch_files"},
	{feature_safeplace_path,"/system/bin/fsverity"},
	{feature_safeplace_path,"/system/bin/fsverity_init"},
	{feature_safeplace_path,"/system/xbin/librank"},
	{feature_safeplace_path,"/system/xbin/procrank"},
	{feature_safeplace_path,"/system/xbin/showmap"},
	{feature_safeplace_path,"/system/bin/librank"},
	{feature_safeplace_path,"/system/bin/procrank"},
	{feature_safeplace_path,"/system/bin/showmap"},
	{feature_safeplace_path,"/product/bin/dmabuf_dump"},
	{feature_safeplace_path,"/system/bin/dmabuf_dump"},
	{feature_safeplace_path,"/apex/com.android.runtime/bin/spqr"},
	{feature_safeplace_path,"/system/bin/perfetto"},
	{feature_safeplace_path,"/system/bin/update_verifier"},
	{feature_safeplace_path,"/system/bin/bootstrap/linkerconfig"},
	{feature_safeplace_path,"/apex/com.android.runtime/bin/linkerconfig"},
	{feature_safeplace_path,"/system/bin/otapreopt_slot"},
	{feature_safeplace_path,"/apex/com.android.art/bin/dex2oat32"},
	{feature_safeplace_path,"/apex/com.android.art/bin/dex2oat64"},
	{feature_safeplace_path,"/system/bin/incident"},
	{feature_safeplace_path,"/system/bin/odsign"},
	{feature_safeplace_path,"/apex/com.android.art/bin/odrefresh"},
	{feature_safeplace_path,"/apex/com.android.art/bin/artd"},
	{feature_safeplace_path,"/apex/com.android.runtime/bin/crash_dump32"},
	{feature_safeplace_path,"/apex/com.android.runtime/bin/crash_dump64"},
	{feature_safeplace_path,"/system/bin/lpdump"},
	{feature_safeplace_path,"/system/bin/extra_free_kbytes.sh"},
	{feature_safeplace_path,"/system/bin/bpfloader"},
	{feature_safeplace_path,"/system/bin/btfloader"},
	{feature_safeplace_path,"/vendor/bin/system_dlkm_modprobe.sh"},
	{feature_safeplace_path,"/apex/com.android.art/bin/art_boot"},
	{feature_safeplace_path,"/tmp/update_binary;updater_intermediates/updater;obj/EXECUTABLES"},
	{feature_safeplace_path,"/tmp/update-binary"},
	{feature_safeplace_path,"/system/bin/install-recovery.sh"},	/* DEFAULT */
	{feature_safeplace_path,"/vendor/bin/install-recovery.sh"},	/* DEFAULT */
	{feature_safeplace_path,"/system/bin/bpfloader"},	/* DEFAULT */
	{feature_immutable_path_write,"/system/"},	/* DEFAULT */
	{feature_immutable_path_write,"/vendor/"},	/* DEFAULT */
	{feature_immutable_path_open,"/system/bin/"},	/* DEFAULT */
	{feature_immutable_path_open,"/vendor/bin/"},	/* DEFAULT */
	{feature_immutable_src_exception,"/system/bin/icd"},
	{feature_immutable_src_exception,"/system/bin/iof"},
	{feature_immutable_src_exception,"/system/bin/sh"},
	{feature_immutable_src_exception,"/system/bin/app_process32"},
	{feature_immutable_src_exception,"/system/bin/app_process64"},
	{feature_immutable_src_exception,"/system/bin/crash_dump32"},
	{feature_immutable_src_exception,"/system/bin/crash_dump64"},
	{feature_immutable_src_exception,"/system/bin/mediaextractor"},
	{feature_immutable_src_exception,"/system/bin/surfaceflinger"},
	{feature_immutable_src_exception,"/vendor/bin/sh"},
	{feature_immutable_src_exception,"/vendor/bin/hw/android.hardware.media.omx@1.0-service"},
	{feature_immutable_src_exception,"/vendor/bin/snap_utility_32"},
	{feature_immutable_src_exception,"/vendor/bin/snap_utility_64"},
	{feature_immutable_src_exception,"/vendor/bin/icd_vendor"},
	{feature_immutable_src_exception,"/vendor/bin/iof_vendor"},
	{feature_immutable_src_exception,"/init"},
	{feature_immutable_src_exception,"/system/bin/init"},
	{feature_immutable_src_exception,"/system/bin/lshal"},
	{feature_immutable_src_exception,"/apex/com.android.runtime/bin/crash_dump32"},	/* DEFAULT */
	{feature_immutable_src_exception,"/apex/com.android.runtime/bin/crash_dump64"},	/* DEFAULT */
	{feature_integrity_check,"/vendor/bin/hw/android.hardware.gatekeeper@1.0-service"},
	{feature_integrity_check,"/vendor/bin/hw/android.hardware.keymaster@4.0-service"},
	{feature_integrity_check,"/vendor/bin/hw/android.hardware.security.keymint-service"},
	{feature_integrity_check,"/vendor/bin/hw/vendor.samsung.hardware.tlc.kg@1.0-service"},
	{feature_integrity_check,"/vendor/bin/hw/vendor.samsung.hardware.security.wsm-service"},
	{feature_integrity_check,"/vendor/bin/vendor.samsung.hardware.security.wsm@1.0-service"},
	{feature_integrity_check,"/vendor/bin/vaultkeeperd"},
	{feature_integrity_check,"/vendor/bin/hw/vendor.samsung.hardware.tlc.kg@1.1-service"},
	/* Rules will be added here */
	/* Never modify the above line. Rules will be added for buildtime */
#endif /* if 0 */