platform_system_sepolicy/private/permissioncontroller_app.te

###
### A domain for further sandboxing the GooglePermissionController app.
###
type permissioncontroller_app, domain, coredomain;

app_domain(permissioncontroller_app)

allow permissioncontroller_app app_api_service:service_manager find;
allow permissioncontroller_app system_api_service:service_manager find;

# Allow interaction with gpuservice
binder_call(permissioncontroller_app, gpuservice)

allow permissioncontroller_app radio_service:service_manager find;

# Allow the app to request and collect incident reports.
# (Also requires DUMP and PACKAGE_USAGE_STATS permissions)
allow permissioncontroller_app incident_service:service_manager find;
binder_call(permissioncontroller_app, incidentd)
allow permissioncontroller_app incidentd:fifo_file { read write };

allow permissioncontroller_app gpu_device:dir search;
Create a separate domain for permissioncontroller This creates an SELinux domain for permissioncontroller and moves it out of the priv_app SELinux domain. Bug: 142672293 Test: Flashed a device with this build and verified com.google.android.permissioncontroller runs in the permissioncontroller_app domain. Change-Id: Ieb2e4cb806d18aaeb2e5c458e138975d1d5b64fe 2019-10-22 00:28:00 +02:00			`###`
			`### A domain for further sandboxing the GooglePermissionController app.`
			`###`
Update permissioncontroller_app domain rules This adds permissions for content_capture_service, incidentcompanion_service, media_session_service, and telecom_service. These were observed via sedenials on dogfood builds. Bug: 142672293 Bug: 144677148 Test: Green builds, no more denials show up for these services. Change-Id: Ifd93c54fb3ca3f0da781cd2038217a29e812a40f 2019-11-21 21:26:08 +01:00			`type permissioncontroller_app, domain, coredomain;`
Create a separate domain for permissioncontroller This creates an SELinux domain for permissioncontroller and moves it out of the priv_app SELinux domain. Bug: 142672293 Test: Flashed a device with this build and verified com.google.android.permissioncontroller runs in the permissioncontroller_app domain. Change-Id: Ieb2e4cb806d18aaeb2e5c458e138975d1d5b64fe 2019-10-22 00:28:00 +02:00
			`app_domain(permissioncontroller_app)`

Allow PermissonController to find app_api_service and system_api_service. PermissionController is updatable, so we may need to call new APIs in newer versions. Change-Id: I0a6657ad1f27e1e2fdc320184268966009d3a4fc 2020-12-07 20:42:27 +01:00			`allow permissioncontroller_app app_api_service:service_manager find;`
			`allow permissioncontroller_app system_api_service:service_manager find;`

Create a separate domain for permissioncontroller This creates an SELinux domain for permissioncontroller and moves it out of the priv_app SELinux domain. Bug: 142672293 Test: Flashed a device with this build and verified com.google.android.permissioncontroller runs in the permissioncontroller_app domain. Change-Id: Ieb2e4cb806d18aaeb2e5c458e138975d1d5b64fe 2019-10-22 00:28:00 +02:00			`# Allow interaction with gpuservice`
			`binder_call(permissioncontroller_app, gpuservice)`
Add SELinux policy for legacy permission service. The updatable and non-updatable permission manager cannot share one AIDL, so we need to create a new system service for the non-updatable legacy one, and add the SELinux policy for it. Bug: 158736025 Test: presubmit Change-Id: Ief8da6335e5bfb17d915d707cf48f4a43332f6ae 2020-12-04 23:27:12 +01:00
Allow permission controller to use radio service Test: Observe denial go away Bug: 153997991 Change-Id: I9a11e226867a5d68f2490f5143963cc66bd09538 2020-05-05 00:13:34 +02:00			`allow permissioncontroller_app radio_service:service_manager find;`
Allow PermissionController app to to request and collect incident reports This change adds rules related to incidentd and incident_service. Bug: 142672293 Test: TH Change-Id: I578ad5f1d893b9f640983d44eed770d0933ebf60 2019-12-10 00:37:05 +01:00
			`# Allow the app to request and collect incident reports.`
			`# (Also requires DUMP and PACKAGE_USAGE_STATS permissions)`
			`allow permissioncontroller_app incident_service:service_manager find;`
			`binder_call(permissioncontroller_app, incidentd)`
			`allow permissioncontroller_app incidentd:fifo_file { read write };`
Add missing permissions for Cuttlefish to support GSI testing Once b/186727553 is fixed, booting GSI on cuttlefish will no longer load cuttlefish's system_ext sepolicy. These domains are all private and hence the permissions are being added to system/sepolicy to avoid making them public(especially mediatranscoding that was changed from public to private in Android S). Test: build, boot Change-Id: I4a78030015fff147545bb627c9e62afbd0daa9d7 2021-04-29 21:49:30 +02:00
			`allow permissioncontroller_app gpu_device:dir search;`