1{
2    "common" : [{
3        "top-sandbox-switch": "ON",
4        "app-base" : [{
5            "sandbox-ns-flags" : [ "net" ],
6            "mount-paths" : [{
7                    "src-path" : "/config",
8                    "sandbox-path" : "/config",
9                    "sandbox-flags" : [ "bind", "rec" ],
10                    "check-action-status": "false"
11                }, {
12                    "src-path" : "/dev",
13                    "sandbox-path" : "/dev",
14                    "sandbox-flags" : [ "bind", "rec" ],
15                    "check-action-status": "false"
16                }, {
17                    "src-path" : "/proc",
18                    "sandbox-path" : "/proc",
19                    "sandbox-flags" : [ "bind", "rec" ],
20                    "check-action-status": "false"
21                }, {
22                    "src-path" : "/sys",
23                    "sandbox-path" : "/sys",
24                    "sandbox-flags" : [ "bind", "rec" ],
25                    "check-action-status": "false"
26                }, {
27                    "src-path" : "/sys_prod",
28                    "sandbox-path" : "/sys_prod",
29                    "sandbox-flags" : [ "bind", "rec" ],
30                    "check-action-status": "false"
31                }, {
32                    "src-path" : "/system/app",
33                    "sandbox-path" : "/system/app",
34                    "sandbox-flags" : [ "bind", "rec" ],
35                    "check-action-status": "false"
36                }, {
37                    "src-path" : "/module_update",
38                    "sandbox-path" : "/module_update",
39                    "sandbox-flags" : [ "bind", "rec" ],
40                    "check-action-status": "false"
41                }, {
42                    "src-path" : "/system/fonts",
43                    "sandbox-path" : "/system/fonts",
44                    "sandbox-flags" : [ "bind", "rec" ],
45                    "check-action-status": "false"
46                }, {
47                    "src-path" : "/system/lib",
48                    "sandbox-path" : "/system/lib",
49                    "sandbox-flags" : [ "bind", "rec" ],
50                    "check-action-status": "false"
51                }, {
52                    "src-path" : "/system/lib/platformsdk",
53                    "sandbox-path" : "/system/lib/platformsdk",
54                    "sandbox-flags" : [ "bind", "rec" ],
55                    "check-action-status": "false"
56                }, {
57                    "src-path" : "/system/lib/ld-musl-arm.so.1",
58                    "sandbox-path" : "/system/lib/ld-musl-arm.so.1",
59                    "sandbox-flags" : [ "bind", "rec" ],
60                    "check-action-status": "false"
61                },{
62                    "src-path" : "/system/lib/ndk",
63                    "sandbox-path" : "/system/lib/ndk",
64                    "sandbox-flags" : [ "bind", "rec" ],
65                    "check-action-status": "false"
66                }, {
67                    "src-path" : "/system/lib/module",
68                    "sandbox-path" : "/system/lib/module",
69                    "sandbox-flags" : [ "bind", "rec" ],
70                    "check-action-status": "false"
71                }, {
72                    "src-path" : "/system/lib/chipset-pub-sdk",
73                    "sandbox-path" : "/system/lib/chipset-pub-sdk",
74                    "sandbox-flags" : [ "bind", "rec" ],
75                    "check-action-status": "false"
76                }, {
77                    "src-path" : "/system/lib/chipset-sdk",
78                    "sandbox-path" : "/system/lib/chipset-sdk",
79                    "sandbox-flags" : [ "bind", "rec" ],
80                    "check-action-status": "false"
81                }, {
82                    "src-path" : "/system/lib/seccomp",
83                    "sandbox-path" : "/system/lib/seccomp",
84                    "sandbox-flags" : [ "bind", "rec" ],
85                    "check-action-status": "false"
86                }, {
87                    "src-path" : "/system/lib/extensionability",
88                    "sandbox-path" : "/system/lib/extensionability",
89                    "sandbox-flags" : [ "bind", "rec" ],
90                    "check-action-status": "false"
91                }, {
92                    "src-path" : "/system/lib/media",
93                    "sandbox-path" : "/system/lib/media",
94                    "sandbox-flags" : [ "bind", "rec" ],
95                    "check-action-status": "false"
96                }, {
97                    "src-path" : "/system/data",
98                    "sandbox-path" : "/system/data",
99                    "sandbox-flags" : [ "bind", "rec" ],
100                    "check-action-status": "false"
101                }, {
102                    "src-path" : "/system/usr",
103                    "sandbox-path" : "/system/usr",
104                    "sandbox-flags" : [ "bind", "rec" ],
105                    "check-action-status": "false"
106                }, {
107                    "src-path" : "/system/profile",
108                    "sandbox-path" : "/system/profile",
109                    "sandbox-flags" : [ "bind", "rec" ],
110                    "check-action-status": "false"
111                }, {
112                    "src-path" : "/system/bin",
113                    "sandbox-path" : "/system/bin",
114                    "sandbox-flags" : [ "bind", "rec" ],
115                    "check-action-status": "false"
116                }, {
117                    "src-path" : "/system/etc",
118                    "sandbox-path" : "/system/etc",
119                    "sandbox-flags" : [ "bind", "rec" ],
120                    "check-action-status": "false"
121                }, {
122                    "src-path" : "/system/etc/hosts",
123                    "sandbox-path" : "/data/service/el1/network/hosts_user/hosts",
124                    "sandbox-flags" : [ "bind", "rec" ],
125                    "check-action-status": "false"
126                }, {
127                    "src-path" : "/system/resource",
128                    "sandbox-path" : "/system/resource",
129                    "sandbox-flags" : [ "bind", "rec" ],
130                    "check-action-status": "false"
131                }, {
132                    "src-path" : "/vendor/lib",
133                    "sandbox-path" : "/vendor/lib",
134                    "sandbox-flags" : [ "bind", "rec" ],
135                    "check-action-status": "false"
136                }, {
137                    "src-path" : "/vendor/etc/hiai",
138                    "sandbox-path" : "/vendor/etc/hiai",
139                    "sandbox-flags" : [ "bind", "rec" ],
140                    "check-action-status": "false"
141                }, {
142                    "src-path" : "/data/data/hiai",
143                    "sandbox-path" : "/data/data/hiai",
144                    "sandbox-flags" : [ "bind", "rec" ],
145                    "check-action-status": "false"
146                }, {
147                    "src-path" : "/vendor/etc/vulkan",
148                    "sandbox-path" : "/vendor/etc/vulkan",
149                    "sandbox-flags" : [ "bind", "rec" ],
150                    "check-action-status": "false"
151                }, {
152                    "src-path" : "/mnt/sandbox/<currentUserId>/<PackageName>/data/storage/el2",
153                    "sandbox-path" : "/data/storage/el2",
154                    "sandbox-flags" : [ "bind", "rec" ],
155                    "check-action-status": "false"
156                }, {
157                    "src-path" : "/data/app/el2/<currentUserId>/base/<variablePackageName>",
158                    "sandbox-path" : "/data/storage/el2/base",
159                    "sandbox-flags" : [ "bind", "rec" ],
160                    "check-action-status": "false"
161                }, {
162                    "src-path" : "/data/app/el2/<currentUserId>/log/<variablePackageName>",
163                    "sandbox-path" : "/data/storage/el2/log",
164                    "sandbox-flags" : [ "bind", "rec" ],
165                    "check-action-status": "false"
166                }, {
167                    "src-path" : "/data/app/el1/<currentUserId>/database/<variablePackageName>",
168                    "sandbox-path" : "/data/storage/el1/database",
169                    "sandbox-flags" : [ "bind", "rec" ],
170                    "check-action-status": "true"
171                }, {
172                    "src-path" : "/data/app/el2/<currentUserId>/database/<variablePackageName>",
173                    "sandbox-path" : "/data/storage/el2/database",
174                    "sandbox-flags" : [ "bind", "rec" ],
175                    "check-action-status": "false"
176                }, {
177                    "src-path" : "/data/app/el1/<currentUserId>/base/<variablePackageName>",
178                    "sandbox-path" : "/data/storage/el1/base",
179                    "sandbox-flags" : [ "bind", "rec" ],
180                    "check-action-status": "true"
181                }, {
182                    "src-path" : "/mnt/hmdfs/<currentUserId>",
183                    "sandbox-path" : "/mnt/hmdfs/<currentUserId>",
184                    "sandbox-flags" : [ "bind", "rec" ],
185                    "check-action-status": "false"
186                }, {
187                    "src-path" : "/mnt/hmdfs/<currentUserId>/account/merge_view/data/<PackageName>",
188                    "sandbox-path" : "/data/storage/el2/distributedfiles",
189                    "sandbox-flags" : [ "bind", "rec" ],
190                    "check-action-status": "false"
191                }, {
192                    "src-path" : "/mnt/hmdfs/<currentUserId>/non_account/merge_view/data/",
193                    "sandbox-path" : "/data/storage/el2/auth_groups",
194                    "sandbox-flags" : [ "bind", "rec" ],
195                    "check-action-status": "false"
196                }, {
197                    "src-path" : "/data/local/ark-cache/<PackageName>",
198                    "sandbox-path" : "/data/storage/ark-cache",
199                    "sandbox-flags" : [ "bind", "rec" ],
200                    "check-action-status": "false"
201                }, {
202                    "src-path" : "/data/local/ark-profile/<currentUserId>/<PackageName>",
203                    "sandbox-path" : "/data/storage/ark-profile",
204                    "sandbox-flags" : [ "bind", "rec" ],
205                    "check-action-status": "false"
206                }, {
207                    "src-path" : "/data/local/shader_cache/local/<PackageName>",
208                    "sandbox-path" : "/data/storage/shader_cache/local",
209                    "sandbox-flags" : [ "bind", "rec" ],
210                    "check-action-status": "false"
211                }, {
212                    "src-path" : "/data/local/shader_cache/cloud/<PackageName>",
213                    "sandbox-path" : "/data/storage/shader_cache/cloud",
214                    "sandbox-flags" : [ "bind", "rec" ],
215                    "check-action-status": "false"
216                }, {
217                    "src-path" : "/data/local/shader_cache/cloud/common",
218                    "sandbox-path" : "/data/storage/shader_cache/common",
219                    "sandbox-flags" : [ "bind", "rec" ],
220                    "check-action-status": "false"
221                }, {
222                    "src-path" : "/mnt/share/<currentUserId>/<PackageName_index>",
223                    "sandbox-path" : "/data/storage/el2/share",
224                    "sandbox-flags" : [ "bind", "rec" ],
225                    "check-action-status": "false"
226                }, {
227                    "src-path" : "/data/service/el1/public/themes/<currentUserId>/a/app",
228                    "sandbox-path" : "/data/themes/a/app",
229                    "sandbox-flags" : [ "bind", "rec" ],
230                    "check-action-status": "false"
231                }, {
232                    "src-path" : "/data/service/el1/public/themes/<currentUserId>/b/app",
233                    "sandbox-path" : "/data/themes/b/app",
234                    "sandbox-flags" : [ "bind", "rec" ],
235                    "check-action-status": "false"
236                }, {
237                    "src-path" : "/data/service/el0/public/for-all-app",
238                    "sandbox-path" : "/data/service/el0/public/for-all-app",
239                    "sandbox-flags" : [ "bind", "rec" ],
240                    "check-action-status": "false"
241                }, {
242                    "src-path" : "/data/service/el1/public/for-all-app",
243                    "sandbox-path" : "/data/service/el1/public/for-all-app",
244                    "sandbox-flags" : [ "bind", "rec" ],
245                    "check-action-status": "false"
246                }, {
247                    "src-path" : "/data/service/el1/<currentUserId>/utdtypes/utd",
248                    "sandbox-path" : "/data/utd",
249                    "sandbox-flags" : [ "bind", "rec" ],
250                    "check-action-status": "false"
251                }, {
252                    "src-path" : "/data/service/el1/public/cert_manager_service/certificates/user_open",
253                    "sandbox-path" : "/data/certificates/user_cacerts",
254                    "sandbox-flags" : [ "bind", "rec" ],
255                    "check-action-status": "false"
256                }, {
257                    "src-path" : "/data/app/el3/<currentUserId>/base/<variablePackageName>",
258                    "sandbox-path" : "/data/storage/el3/base",
259                    "sandbox-flags" : [ "bind", "rec" ],
260                    "check-action-status": "false"
261                }, {
262                    "src-path" : "/data/app/el3/<currentUserId>/database/<variablePackageName>",
263                    "sandbox-path" : "/data/storage/el3/database",
264                    "sandbox-flags" : [ "bind", "rec" ],
265                    "check-action-status": "false"
266                }, {
267                    "src-path" : "/data/app/el4/<currentUserId>/base/<variablePackageName>",
268                    "sandbox-path" : "/data/storage/el4/base",
269                    "sandbox-flags" : [ "bind", "rec" ],
270                    "check-action-status": "false"
271                }, {
272                    "src-path" : "/data/app/el4/<currentUserId>/database/<variablePackageName>",
273                    "sandbox-path" : "/data/storage/el4/database",
274                    "sandbox-flags" : [ "bind", "rec" ],
275                    "check-action-status": "false"
276                }, {
277                    "src-path" : "/mnt/hmdfs/<currentUserId>/cloud/data/<PackageName>",
278                    "sandbox-path" : "/data/storage/el2/cloud",
279                    "sandbox-flags" : [ "bind", "rec" ],
280                    "check-action-status": "false"
281                }
282            ],
283            "symbol-links" : [{
284                    "target-name" : "/system/bin",
285                    "link-name" : "/bin",
286                    "check-action-status": "false"
287                }, {
288                    "target-name" : "/system/lib",
289                    "link-name" : "/lib",
290                    "check-action-status": "false"
291                }, {
292                    "target-name" : "/system/etc",
293                    "link-name" : "/etc",
294                    "check-action-status": "false"
295                }, {
296                    "target-name" : "/sys/kernel/debug",
297                    "link-name" : "/d",
298                    "check-action-status": "false"
299                }
300            ]
301        }],
302        "app-resources" : [{
303            "mount-paths" : [{
304                    "src-path" : "/data/app/el1/bundle/public/<arkWebPackageName>",
305                    "sandbox-path" : "/data/storage/el1/bundle/arkwebcore",
306                    "sandbox-flags" : [ "bind", "rec" ],
307                    "check-action-status": "false"
308                }, {
309                    "src-path" : "/system/app/ohos.global.systemres",
310                    "sandbox-path" : "/data/global/systemResources",
311                    "sandbox-flags" : [ "bind", "rec" ],
312                    "check-action-status": "false"
313                }, {
314                    "src-path" : "/system/app/SystemResources",
315                    "sandbox-path" : "/data/global/systemResources",
316                    "sandbox-flags" : [ "bind", "rec" ],
317                    "check-action-status": "false"
318                }, {
319                    "src-path" : "/data/misc",
320                    "sandbox-path" : "/data/storage/el1/bundle/misc",
321                    "sandbox-flags" : [ "bind", "rec" ],
322                    "check-action-status": "false"
323                }
324            ],
325        "flags-point" : [{
326                    "flags": "DLP_MANAGER",
327                    "mount-paths" : [{
328                        "src-path" : "/data/app/el2/<currentUserId>/base/<PackageName_index>",
329                        "sandbox-path" : "/data/storage/el2/base",
330                        "sandbox-flags" : [ "bind", "rec" ],
331                        "check-action-status": "false"
332                    },{
333                        "src-path" : "/data/app/el1/<currentUserId>/database/<PackageName_index>",
334                        "sandbox-path" : "/data/storage/el1/database",
335                        "sandbox-flags" : [ "bind", "rec" ],
336                        "check-action-status": "false"
337                    }, {
338                        "src-path" : "/data/app/el2/<currentUserId>/database/<PackageName_index>",
339                        "sandbox-path" : "/data/storage/el2/database",
340                        "sandbox-flags" : [ "bind", "rec" ],
341                        "check-action-status": "false"
342                    }, {
343                        "src-path" : "/data/app/el1/<currentUserId>/base/<PackageName_index>",
344                        "sandbox-path" : "/data/storage/el1/base",
345                        "sandbox-flags" : [ "bind", "rec" ],
346                        "check-action-status": "false"
347                    }, {
348                        "src-path" : "/data/app/el2/<currentUserId>/log/<PackageName_index>",
349                        "sandbox-path" : "/data/storage/el2/log",
350                        "sandbox-flags" : [ "bind", "rec" ],
351                        "check-action-status": "false"
352                    }, {
353                        "src-path" : "/mnt/share/<currentUserId>/<PackageName_index>",
354                        "sandbox-path" : "/data/storage/el2/share",
355                        "sandbox-flags" : [ "bind", "rec" ],
356                        "check-action-status": "false"
357                    }
358                    ]}, {
359                        "flags": "START_FLAGS_BACKUP",
360                        "mount-paths": [{
361                            "src-path": "/data/app/el2/<currentUserId>/base/<PackageName>/.backup",
362                            "sandbox-path": "/data/storage/el2/backup",
363                            "sandbox-flags": [ "bind", "rec" ],
364                            "check-action-status": "true"
365                        }, {
366                            "src-path" : "/data/app/el1/<currentUserId>/base/<PackageName>/.backup",
367                            "sandbox-path" : "/data/storage/el1/backup",
368                            "sandbox-flags" : [ "bind", "rec" ],
369                            "check-action-status": "false"
370                        }
371                    ]}, {
372                        "flags": "DEVELOPER_MODE",
373                        "mount-paths": [{
374                            "src-path": "/data/app/el1/bundle/<currentUserId>/hnppublic",
375                            "sandbox-path": "/data/service/hnp",
376                            "sandbox-flags": [ "bind", "rec" ],
377                            "check-action-status": "false"
378                        }, {
379                            "src-path" : "/data/app/el1/bundle/<currentUserId>/hnp/<PackageName>",
380                            "sandbox-path" : "/data/app",
381                            "sandbox-flags" : [ "bind", "rec" ],
382                            "check-action-status": "false"
383                        }
384                    ]}
385            ],
386            "symbol-links" : [
387            ]
388        }]
389    }],
390    "individual" : [{
391        "com.ohos.medialibrary.medialibrarydata" : [{
392            "sandbox-switch": "ON",
393            "mount-paths" : [{
394                    "src-path" : "/storage/media/<currentUserId>",
395                    "sandbox-path" : "/storage/media",
396                    "sandbox-flags" : [ "bind", "rec" ],
397                    "check-action-status": "false"
398                }, {
399                    "src-path" : "/data/service/el2/<currentUserId>/hmdfs/cache/account_cache",
400                    "sandbox-path" : "/data/service/el2/<currentUserId>/hmdfs/cache/account_cache",
401                    "sandbox-flags" : [ "bind", "rec" ],
402                    "check-action-status": "false"
403                }, {
404                    "src-path" : "/storage/cloud/<currentUserId>",
405                    "sandbox-path" : "/storage/cloud",
406                    "sandbox-flags" : [ "bind", "rec" ],
407                    "check-action-status": "false"
408                }, {
409                    "src-path" : "none",
410                    "sandbox-path" : "/storage/cloud/epfs",
411                    "sandbox-flags" : [ "MS_NODEV" ],
412                    "fs-type": "epfs",
413                    "check-action-status": "false"
414                }, {
415                    "src-path" : "/mnt/data/<currentUserId>",
416                    "sandbox-path" : "/mnt/data/<currentUserId>",
417                    "sandbox-flags" : [ "bind", "rec" ],
418                    "check-action-status": "false"
419                }
420            ],
421            "symbol-links" : []
422        }],
423        "com.ohos.sceneboard" : [{
424            "sandbox-switch": "ON",
425            "gids": [1065],
426            "mount-paths" : [{
427                    "src-path" : "/data/app/el1/bundle/public/",
428                    "sandbox-path" : "/data/app/el1/bundle/public/",
429                    "sandbox-flags" : [ "bind", "rec" ],
430                    "check-action-status": "true"
431                }
432            ],
433            "symbol-links" : []
434        }],
435        "com.ohos.settingsdata":[{
436            "sandbox-switch": "ON",
437            "gids": [1065],
438            "mount-paths": [],
439            "symbol-links": []
440        }],
441        "com.ohos.permissionmanager" : [{
442            "sandbox-switch": "ON",
443            "mount-paths" : [{
444                    "src-path" : "/data/app/el1/bundle/public/",
445                    "sandbox-path" : "/data/bundles/",
446                    "sandbox-flags" : [ "bind", "rec" ],
447                    "check-action-status": "true"
448                }
449            ],
450            "symbol-links" : []
451        }],
452        "com.ohos.amsdialog" : [{
453            "sandbox-switch": "ON",
454            "mount-paths" : [{
455                    "src-path" : "/data/app/el1/bundle/public/",
456                    "sandbox-path" : "/data/bundles/",
457                    "sandbox-flags" : [ "bind", "rec" ],
458                    "check-action-status": "true"
459                }
460            ],
461            "symbol-links" : []
462        }],
463        "com.ohos.UserFile.ExternalFileManager" : [{
464            "sandbox-switch": "ON",
465            "mount-paths" : [{
466                    "src-path" : "/data/service/el1/public/storage_daemon/share/public",
467                    "sandbox-path" : "/data/storage/el1/bundle/storage_daemon",
468                    "sandbox-flags" : [ "bind", "rec" ],
469                    "check-action-status": "true"
470                },
471                {
472                    "src-path" : "/mnt/data/external",
473                    "sandbox-path" : "/mnt/external",
474                    "sandbox-flags" : [ "bind", "rec" ],
475                    "check-action-status": "true"
476                }
477            ],
478            "symbol-links" : []
479        }],
480        "__internal__.com.ohos.render" : [{
481            "sandbox-root" : "/mnt/sandbox/com.ohos.render/<PackageName>",
482            "sandbox-ns-flags" : [ "pid", "net" ],
483            "mount-paths" : [{
484                    "src-path" : "/dev",
485                    "sandbox-path" : "/dev",
486                    "sandbox-flags" : [ "bind", "rec" ],
487                    "check-action-status": "false"
488                }, {
489                    "src-path" : "/proc",
490                    "sandbox-path" : "/proc",
491                    "sandbox-flags" : [ "bind", "rec" ],
492                    "check-action-status": "false"
493                }, {
494                    "src-path" : "/sys",
495                    "sandbox-path" : "/sys",
496                    "sandbox-flags" : [ "bind", "rec" ],
497                    "check-action-status": "false"
498                }, {
499                    "src-path" : "/system/fonts",
500                    "sandbox-path" : "/system/fonts",
501                    "sandbox-flags" : [ "bind", "rec" ],
502                    "check-action-status": "false"
503                }, {
504                    "src-path" : "/system/etc",
505                    "sandbox-path" : "/system/etc",
506                    "sandbox-flags" : [ "bind", "rec" ],
507                    "check-action-status": "false"
508                }, {
509                    "src-path" : "/system/etc/hosts",
510                    "sandbox-path" : "/data/service/el1/network/hosts_user/hosts",
511                    "sandbox-flags" : [ "bind", "rec" ],
512                    "check-action-status": "false"
513                }, {
514                    "src-path" : "/data/app/el1/bundle/public/<arkWebPackageName>",
515                    "sandbox-path" : "/data/storage/el1/bundle/arkwebcore",
516                    "sandbox-flags" : [ "bind", "rec" ],
517                    "check-action-status": "false"
518                }, {
519                    "src-path" : "/system/bin",
520                    "sandbox-path" : "/system/bin",
521                    "sandbox-flags" : [ "bind", "rec" ],
522                    "check-action-status": "false"
523                }, {
524                    "src-path" : "/system/lib",
525                    "sandbox-path" : "/system/lib",
526                    "sandbox-flags" : [ "bind", "rec" ],
527                    "check-action-status": "false"
528                }, {
529                    "src-path" : "/system/lib/platformsdk",
530                    "sandbox-path" : "/system/lib/platformsdk",
531                    "sandbox-flags" : [ "bind", "rec" ],
532                    "check-action-status": "false"
533                }, {
534                    "src-path" : "/system/lib/ndk",
535                    "sandbox-path" : "/system/lib/ndk",
536                    "sandbox-flags" : [ "bind", "rec" ],
537                    "check-action-status": "false"
538                }, {
539                    "src-path" : "/system/lib/module",
540                    "sandbox-path" : "/system/lib/module",
541                    "sandbox-flags" : [ "bind", "rec" ],
542                    "check-action-status": "false"
543                }, {
544                    "src-path" : "/system/lib/chipset-pub-sdk",
545                    "sandbox-path" : "/system/lib/chipset-pub-sdk",
546                    "sandbox-flags" : [ "bind", "rec" ],
547                    "check-action-status": "false"
548                }, {
549                    "src-path" : "/system/lib/chipset-sdk",
550                    "sandbox-path" : "/system/lib/chipset-sdk",
551                    "sandbox-flags" : [ "bind", "rec" ],
552                    "check-action-status": "false"
553                }, {
554                    "src-path" : "/system/lib/seccomp",
555                    "sandbox-path" : "/system/lib/seccomp",
556                    "sandbox-flags" : [ "bind", "rec" ],
557                    "check-action-status": "false"
558                }, {
559                    "src-path" : "/system/lib/extensionability",
560                    "sandbox-path" : "/system/lib/extensionability",
561                    "sandbox-flags" : [ "bind", "rec" ],
562                    "check-action-status": "false"
563                }, {
564                    "src-path" : "/system/lib/media",
565                    "sandbox-path" : "/system/lib/media",
566                    "sandbox-flags" : [ "bind", "rec" ],
567                    "check-action-status": "false"
568                }, {
569                    "src-path" : "/system/lib/ld-musl-arm.so.1",
570                    "sandbox-path" : "/system/lib/ld-musl-arm.so.1",
571                    "sandbox-flags" : [ "bind", "rec" ],
572                    "check-action-status": "false"
573                }, {
574                    "src-path" : "/system/app/<arkWebPackageName>",
575                    "sandbox-path" : "/system/app/<arkWebPackageName>",
576                    "sandbox-flags" : [ "bind", "rec" ],
577                    "check-action-status": "false"
578                }, {
579                    "src-path" : "/vendor/lib",
580                    "sandbox-path" : "/vendor/lib",
581                    "sandbox-flags" : [ "bind", "rec" ],
582                    "check-action-status": "false"
583                }, {
584                    "src-path" : "/data/app/el1/bundle/public/<arkWebPackageName>",
585                    "sandbox-path" : "/data/app/el1/bundle/public/<arkWebPackageName>",
586                    "sandbox-flags" : [ "bind", "rec" ],
587                    "check-action-status": "false"
588                }, {
589                    "src-path" : "/system/app/NWeb",
590                    "sandbox-path" : "/system/app/NWeb",
591                    "sandbox-flags" : [ "bind", "rec" ],
592                    "check-action-status": "false"
593                }, {
594                    "src-path" : "/module_update/ArkWebCore/app/<arkWebPackageName>",
595                    "sandbox-path" : "/module_update/ArkWebCore/app/<arkWebPackageName>",
596                    "sandbox-flags" : [ "bind", "rec" ],
597                    "check-action-status": "false"
598                }
599            ],
600            "symbol-links" : [{
601                    "target-name" : "/system/etc",
602                    "link-name" : "/etc",
603                    "check-action-status": "false"
604                }, {
605                    "target-name" : "/system/bin",
606                    "link-name" : "/bin",
607                    "check-action-status": "false"
608                }, {
609                    "target-name" : "/system/lib",
610                    "link-name" : "/lib",
611                    "check-action-status": "false"
612                }
613            ],
614            "flags-point" : [{
615                "flags": "DLP_MANAGER",
616                "sandbox-root" : "/mnt/sandbox/com.ohos.render/<PackageName>",
617                "mount-paths" : [],
618                "symbol-links" : [{}]
619            }]
620        }]
621    }],
622    "permission":[{
623        "ohos.permission.FILE_ACCESS_MANAGER":[{
624            "sandbox-switch": "ON",
625            "gids": [1006, 1008],
626            "mount-paths": [{
627                    "src-path": "/data/service/el1/public/storage_daemon/share/public",
628                    "sandbox-path": "/storage/Share",
629                    "sandbox-flags": [ "bind", "rec" ]
630                },
631                {
632                    "src-path": "/mnt/data/external",
633                    "sandbox-path": "/storage/External",
634                    "sandbox-flags": [ "bind", "rec" ]
635                },
636                {
637                    "src-path": "/storage/media/<currentUserId>/local/files/.Recent",
638                    "sandbox-path": "/storage/Users/<currentUserId>/.Recent",
639                    "sandbox-flags": [ "bind", "rec" ]
640                },
641                {
642                    "src-path": "/mnt/data/<currentUserId>/hmdfs",
643                    "sandbox-path": "/storage/hmdfs",
644                    "sandbox-flags": [ "bind", "rec" ]
645                }
646            ]
647        }],
648        "ohos.permission.READ_IMAGEVIDEO":[{
649            "sandbox-switch": "ON",
650            "gids": [2008],
651            "mount-paths": [{
652                    "src-path": "/storage/cloud/<currentUserId>/files/.thumbs/Photo",
653                    "sandbox-path": "/storage/Share/.thumbs/Photo",
654                    "sandbox-flags": [ "bind", "rec" ]
655                }
656            ]
657        }],
658        "ohos.permission.FILE_CROSS_APP":[{
659            "sandbox-switch": "ON",
660            "mount-paths": [{
661                    "src-path": "/mnt/data/external",
662                    "sandbox-path": "/storage/External",
663                    "sandbox-flags": [ "bind", "rec" ]
664                }
665            ]
666        }],
667        "ohos.permission.FILE_ACCESS_COMMON_DIR":[{
668            "sandbox-switch": "ON",
669            "mount-paths": []
670        }],
671        "ohos.permission.ACTIVATE_THEME_PACKAGE":[{
672            "sandbox-switch": "ON",
673            "gids": [3817],
674            "mount-paths": [{
675                    "src-path": "/data/service/el1/public/themes/<currentUserId>/a/system",
676                    "sandbox-path": "/data/themes/a/system",
677                    "sandbox-flags": [ "bind", "rec" ]
678                },
679                {
680                    "src-path": "/data/service/el1/public/themes/<currentUserId>/b/system",
681                    "sandbox-path": "/data/themes/b/system",
682                    "sandbox-flags": [ "bind", "rec" ]
683                },
684                {
685                    "src-path": "/data/service/el1/public/themes/<currentUserId>/fa",
686                    "sandbox-path": "/data/themes/f",
687                    "sandbox-flags": [ "bind", "rec" ]
688                },
689                {
690                    "src-path": "/data/service/el1/public/themes/<currentUserId>/share",
691                    "sandbox-path": "/data/themes/s",
692                    "sandbox-flags": [ "bind", "rec" ]
693                }
694            ]
695        }],
696        "ohos.permission.GET_WALLPAPER":[{
697            "sandbox-switch": "ON",
698            "mount-paths": [{
699                    "src-path": "/data/service/el1/public/wallpaper/<currentUserId>",
700                    "sandbox-path": "/data/wallpaper",
701                    "sandbox-flags": [ "bind", "rec" ]
702                }
703            ]
704        }],
705        "ohos.permission.ACCESS_BUNDLE_DIR":[{
706            "sandbox-switch": "ON",
707            "gids": [1010],
708            "mount-paths": [{
709                    "src-path": "/data/app/el1/bundle/public",
710                    "sandbox-path": "/data/bundles/",
711                    "sandbox-flags": [ "bind", "rec" ]
712                }
713            ]
714        }],
715        "ohos.permission.ACCESS_APP_INSTALL_DIR":[{
716            "sandbox-switch": "ON",
717            "gids": [2002],
718            "mount-paths": [{
719                    "src-path": "/data/service/el1/public/bms/bundle_manager_service/app_install/<currentUserId>/",
720                    "sandbox-path": "/data/bms_app_install/",
721                    "sandbox-flags": [ "bind", "rec" ]
722                }
723            ]
724        }],
725        "ohos.permission.ACCESS_PROTOCOL_DFX_DATA":[{
726            "sandbox-switch": "ON",
727            "gids": [1007],
728            "mount-paths": [{
729                    "src-path": "/data/log/protocol",
730                    "sandbox-path": "/data/log/protocol",
731                    "sandbox-flags": [ "bind", "rec" ]
732                },
733                {
734                    "src-path": "/log/chr",
735                    "sandbox-path": "/log/chr",
736                    "sandbox-flags": [ "bind", "rec" ]
737                }
738            ]
739        }],
740        "ohos.permission.ACCESS_MEDIALIB_THUMB_DB":[{
741            "sandbox-switch": "ON",
742            "gids": [3008],
743            "mount-paths": [{
744                    "src-path": "/data/app/el2/<currentUserId>/database/com.ohos.medialibrary.medialibrarydata",
745                    "sandbox-path": "/data/medialibrary/database",
746                    "sandbox-flags": [ "bind", "rec" ]
747                }
748            ]
749        }],
750        "ohos.permission.ACCESS_SHADER_CACHE_DIR":[{
751            "sandbox-switch": "ON",
752            "mount-paths": [{
753                    "src-path": "/data/local/shader_cache",
754                    "sandbox-path": "/data/storage/shader_caches",
755                    "sandbox-flags": [ "bind", "rec" ]
756                }
757            ]
758        }],
759        "ohos.permission.ACCESS_DLP_FILE" : [{
760            "sandbox-switch": "ON",
761            "sandbox-shared" : "true",
762            "mount-paths" : [{
763                    "src-path" : "/mnt/data/<currentUserId>",
764                    "sandbox-path" : "/mnt/data",
765                    "sandbox-flags" : [ "bind", "rec" ],
766                    "mount-shared-flag" : "true",
767                    "check-action-status": "true"
768                }, {
769                    "src-path" : "/dev/fuse",
770                    "sandbox-path" : "/mnt/data/fuse",
771                    "sandbox-flags" : [ "MS_NOSUID", "MS_NODEV", "MS_NOEXEC", "MS_NOATIME", "MS_LAZYTIME" ],
772                    "dac-override-sensitive": "true",
773                    "fs-type": "fuse",
774                    "check-action-status": "false"
775                }
776            ]
777        }],
778        "ohos.permission.ACCESS_LOCAL_BACKUP":[{
779            "sandbox-switch": "ON",
780            "gids": [1023],
781            "mount-paths": [{
782                    "src-path": "/data/hwbackup",
783                    "sandbox-path": "/data/hwbackup",
784                    "sandbox-flags": [ "bind", "rec" ],
785                    "check-action-status": "false"
786                }
787            ]
788        }],
789        "ohos.permission.ACCESS_HIVIEWX":[{
790            "sandbox-switch": "ON",
791            "mount-paths": [{
792                    "src-path": "/data/log/UserView",
793                    "sandbox-path": "/data/log/UserView",
794                    "sandbox-flags": [ "bind", "rec" ]
795                }
796            ]
797        }],
798        "ohos.permission.PROTECT_SCREEN_LOCK_DATA":[{
799            "sandbox-switch": "ON",
800            "mount-paths": [{
801                    "src-path": "/data/app/el5/<currentUserId>/base/<PackageName>",
802                    "sandbox-path": "/data/storage/el5/base",
803                    "sandbox-flags": [ "bind", "rec" ]
804                },
805                {
806                    "src-path": "/data/app/el5/<currentUserId>/database/<PackageName>",
807                    "sandbox-path": "/data/storage/el5/database",
808                    "sandbox-flags": [ "bind", "rec" ]
809                }
810            ]
811	    }],
812        "ohos.permission.ACCESS_FILE_CONTENT_SHARE":[{
813            "sandbox-switch": "ON",
814            "gids": [1006, 1008],
815            "mount-paths": [{
816                    "src-path": "/data/service/el2/public/file_monitor_service/content_share",
817                    "sandbox-path": "/storage/ContentShare",
818                    "sandbox-flags": [ "bind", "rec" ]
819                }
820            ]
821        }],
822        "ohos.permission.ACCESS_RINGTONE_RESOURCE":[{
823            "sandbox-switch": "ON",
824            "gids": [1008],
825            "mount-paths": [{
826                    "src-path": "/storage/media/<currentUserId>/local/files",
827                    "sandbox-path": "/storage/media/local/files",
828                    "sandbox-flags": [ "bind", "rec" ]
829                },
830                {
831                    "src-path": "/storage/media/<currentUserId>/local/files/Ringtone",
832                    "sandbox-path": "/storage/media/local/files/Ringtone",
833                    "sandbox-flags": [ "bind", "rec" ]
834                }
835            ]
836        }],
837        "ohos.permission.ACCESS_FACTORY_OTA_DIR":[{
838            "sandbox-switch": "ON",
839            "mount-paths": [{
840                    "src-path": "/data/update/sd_package",
841                    "sandbox-path": "/data/update/sd_package",
842                    "sandbox-flags": [ "bind", "rec" ],
843                    "check-action-status": "false"
844                }
845            ]
846        }],
847        "ohos.permission.GET_ALL_PROCESSES":[{
848            "sandbox-switch": "ON",
849            "gids": [3009],
850            "mount-paths": []
851        }]
852    }]
853}
854