src/security/policy/subsystems/component_manager_policy_starnix.json5

{
    security_policy: {
        job_policy: {
            create_raw_processes: [
                "/core/starnix_runner/kernels:**",
            ],
        },
        capability_policy: [
            {
                source_moniker: "<component_manager>",
                source: "component",
                source_name: "fuchsia.kernel.VmexResource",
                capability: "protocol",
                target_monikers: [
                    "/core/starnix_runner/kernels:**",
                ],
            },
            {
                source_moniker: "/core/network/netstack",
                source: "component",
                source_name: "fuchsia.posix.socket.raw.Provider",
                capability: "protocol",
                target_monikers: [
                    "/core/starnix_runner",
                    "/core/starnix_runner/kernels:**",
                ],
            },
            {
                source_moniker: "/core/network/netstack",
                source: "component",
                source_name: "fuchsia.net.root.Interfaces",
                capability: "protocol",
                target_monikers: [
                    "/core/starnix_runner",
                    "/core/starnix_runner/kernels:**",
                ],
            },
            {
                source_moniker: "/core/network/netstack",
                source: "component",
                source_name: "fuchsia.posix.socket.packet.Provider",
                capability: "protocol",
                target_monikers: [
                    "/core/starnix_runner",
                    "/core/starnix_runner/kernels:**",
                ],
            },
        ],
    },
}