platform_system_sepolicy/public/usbd.te

type usbd, domain;
type usbd_exec, system_file_type, exec_type, file_type;

binder_call(usbd, servicemanager)
usbd sepolicy Sepolicy for the usb daemon. (ag/3373886/) Bug: 63669128 Test: Checked for avc denial messages. Change-Id: I6e2a4ccf597750c47e1ea90c4d43581de4afa4af 2017-12-03 23:23:16 +01:00			`type usbd, domain;`
Introduce system_file_type system_file_type is a new attribute used to identify files which exist on the /system partition. It's useful for allow rules in init, which are based off of a blacklist of writable files. Additionally, it's useful for constructing neverallow rules to prevent regressions. Additionally, add commented out tests which enforce that all files on the /system partition have the system_file_type attribute. These tests will be uncommented in a future change after all the device-specific policies are cleaned up. Test: Device boots and no obvious problems. Change-Id: Id9bae6625f042594c8eba74ca712abb09702c1e5 2018-09-27 19:21:37 +02:00			`type usbd_exec, system_file_type, exec_type, file_type;`
Add usbd servicemanager permission [ 46.850950][ T561] type=1400 audit(1670831200.996:262): avc: denied { call } for comm="usbd" scontext=u:r:usbd:s0 tcontext=u:r:servicemanager:s0 tclass=binder permissive=1 Bug: 263070284 Test: error message disappear Signed-off-by: Ricky Niu <rickyniu@google.com> Change-Id: I5d0c309238b0454198b7e24d91bfc57829a8bfc1 2022-12-19 09:16:17 +01:00
			`binder_call(usbd, servicemanager)`