platform_system_sepolicy/private/aidl_lazy_test_server.te

userdebug_or_eng(`
  typeattribute aidl_lazy_test_server coredomain;

  init_daemon_domain(aidl_lazy_test_server)

  binder_use(aidl_lazy_test_server)
  binder_call(aidl_lazy_test_server, binderservicedomain)

  add_service(aidl_lazy_test_server, aidl_lazy_test_service)
')
Add aidl_lazy_test_server This is a test service for testing dynamic start/stop of AIDL services. In order to test realistic use cases with SELinux enabled, it requires the same permissions as a regular service. Bug: 147153962 Test: aidl_lazy_test aidl_lazy_test_1 aidl_lazy_test_2 Change-Id: Ifc3b2eaefba9c06c94f9cf24b4474107d4e26563 2020-01-04 01:32:07 +01:00			userdebug_or_eng(`
			`typeattribute aidl_lazy_test_server coredomain;`

			`init_daemon_domain(aidl_lazy_test_server)`
Minimize public policy Ideally, public should only contain APIs (types / attributes) for vendor. The other statements like allow/neverallow/typeattributes are regarded as implementation detail for platform and should be in private. Bug: 232023812 Test: m selinux_policy Test: diff <(git diff --staged \| grep "^-" \| cut -b2- \| sort) \ <(git diff --staged \| grep "^+" \| cut -b2- \| sort) Test: remove comments on plat_sepolicy.cil, replace base_typeattr_* to base_typeattr and then compare old and new plat_sepolicy.cil Change-Id: I5e7d2da4465ab0216de6bacdf03077d37f6ffe12 2024-03-27 09:18:41 +01:00
			`binder_use(aidl_lazy_test_server)`
			`binder_call(aidl_lazy_test_server, binderservicedomain)`

			`add_service(aidl_lazy_test_server, aidl_lazy_test_service)`
Add aidl_lazy_test_server This is a test service for testing dynamic start/stop of AIDL services. In order to test realistic use cases with SELinux enabled, it requires the same permissions as a regular service. Bug: 147153962 Test: aidl_lazy_test aidl_lazy_test_1 aidl_lazy_test_2 Change-Id: Ifc3b2eaefba9c06c94f9cf24b4474107d4e26563 2020-01-04 01:32:07 +01:00			`')`