1# Copyright (c) 2021-2023 Huawei Device Co., Ltd.
2# Licensed under the Apache License, Version 2.0 (the "License");
3# you may not use this file except in compliance with the License.
4# You may obtain a copy of the License at
5#
6#     http://www.apache.org/licenses/LICENSE-2.0
7#
8# Unless required by applicable law or agreed to in writing, software
9# distributed under the License is distributed on an "AS IS" BASIS,
10# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
11# See the License for the specific language governing permissions and
12# limitations under the License.
13
14allow param_watcher bootevent_param:parameter_service { set };
15
16allow param_watcher { parameter_attr -usb_setting_param }:file { map open read };
17
18allow param_watcher accessibility:binder { call };
19allow param_watcher accesstoken_service:binder { call };
20allow param_watcher accountmgr:binder { call };
21allow param_watcher bgtaskmgr_service:binder { call };
22allow param_watcher bluetooth_service:binder { call };
23allow param_watcher bootanimation:binder { call };
24allow param_watcher bootevent_param:file { map open read };
25allow param_watcher bootevent_samgr_param:file { map open read };
26allow param_watcher build_version_param:file { map open read };
27allow param_watcher camera_service:binder { call };
28allow param_watcher drm_service:binder { call };
29allow param_watcher const_allow_mock_param:file { map open read };
30allow param_watcher const_allow_param:file { map open read };
31allow param_watcher const_build_param:file { map open read };
32allow param_watcher const_display_brightness_param:file { map open read };
33allow param_watcher const_param:file { map open read };
34allow param_watcher const_postinstall_fstab_param:file { map open read };
35allow param_watcher const_postinstall_param:file { map open read };
36allow param_watcher const_product_param:file { map open read };
37allow param_watcher d-bms:binder { call };
38allow param_watcher dcamera:binder { call };
39allow param_watcher debug_param:file { map open read };
40allow param_watcher default_param:file { map open read };
41allow param_watcher deviceinfoservice:binder { call };
42allow param_watcher device_usage_stats_service:binder { call };
43allow param_watcher dev_unix_socket:dir { search };
44allow param_watcher dhardware:binder { call };
45allow param_watcher distributeddata:binder { call };
46allow param_watcher distributedfiledaemon:binder { call };
47allow param_watcher distributedsche:binder { call };
48allow param_watcher distributedsche_param:file { map open read };
49allow param_watcher download_server:binder { call };
50allow param_watcher dscreen:binder { call };
51allow param_watcher dslm_service:binder { call };
52allow param_watcher edm_sa:binder { call };
53allow param_watcher foundation:binder { call };
54allow param_watcher powermgr:binder { call };
55allow param_watcher hidumper_service:binder { call };
56allow param_watcher hilog_param:file { map open read };
57allow param_watcher hiview:binder { call };
58allow param_watcher huks_service:binder { call };
59allow param_watcher hw_sc_build_os_param:file { map open read };
60allow param_watcher hw_sc_build_param:file { map open read };
61allow param_watcher hw_sc_param:file { map open read };
62allow param_watcher init_param:file { map open read };
63allow param_watcher init_svc_param:file { map open read };
64allow param_watcher inputmethod_service:binder { call };
65allow param_watcher input_pointer_device_param:file { map open read };
66allow param_watcher kernel:unix_stream_socket { connectto };
67allow param_watcher locationhub:binder { call };
68allow param_watcher media_service:binder { call };
69allow param_watcher memmgrservice:binder { call };
70allow param_watcher msdp_sa:binder { call };
71allow param_watcher multimodalinput:binder { call };
72allow param_watcher netmanager:binder { call };
73allow param_watcher net_param:file { map open read };
74allow param_watcher netsysnative:binder { call };
75allow param_watcher net_tcp_param:file { map open read };
76allow param_watcher normal_hap_attr:binder { call };
77allow param_watcher ohos_boot_param:file { map open read };
78allow param_watcher ohos_param:file { map open read };
79allow param_watcher paramservice_socket:sock_file { write };
80allow param_watcher pasteboard_service:binder { call };
81allow param_watcher persist_param:file { map open read };
82allow param_watcher persist_sys_param:file { map open read };
83allow param_watcher pinauth:binder { call };
84allow param_watcher audio_server:binder { call };
85allow param_watcher render_service:binder { call };
86allow param_watcher resource_schedule_service:binder { call };
87allow param_watcher sa_param_watcher:samgr_class { add get };
88allow param_watcher screenlock_server:binder { call };
89allow param_watcher security_param:file { map open read };
90allow param_watcher sensors:binder { call };
91allow param_watcher softbus_server:binder { call };
92allow param_watcher startup_param:file { map open read };
93allow param_watcher storage_manager:binder { call };
94allow param_watcher sys_param:file { map open read };
95allow param_watcher system_basic_hap_attr:binder { call };
96allow param_watcher system_bin_file:dir { search };
97allow param_watcher system_core_hap_attr:binder { call };
98allow param_watcher sys_usb_param:file { map open read };
99allow param_watcher telephony_sa:binder { call };
100allow param_watcher time_service:binder { call };
101allow param_watcher token_sync_service:binder { call };
102allow param_watcher tracefs:dir { search };
103allow param_watcher tracefs_trace_marker_file:file { open write };
104allow param_watcher ui_service:binder { call };
105allow param_watcher updater_sa:binder { call };
106allow param_watcher usb_service:binder { call };
107allow param_watcher useriam:binder { call };
108allow param_watcher wallpaper_service:binder { call };
109allow param_watcher wifi_manager_service:binder { call };
110allow param_watcher composer_host:binder { call };
111
112debug_only(`
113    allow param_watcher console:binder { call };
114    allow param_watcher sh:binder { call };
115')
116