platform_system_sepolicy/private/service.te

type attention_service,             system_server_service, service_manager_type;
type compos_service,                service_manager_type;
type dynamic_system_service,        system_api_service, system_server_service, service_manager_type;
type gsi_service,                   service_manager_type;
type incidentcompanion_service,     system_api_service, system_server_service, service_manager_type;
type mediatuner_service,            app_api_service, service_manager_type;
type profcollectd_service,          service_manager_type;
type resolver_service,              system_server_service, service_manager_type;
type stats_service,                 service_manager_type;
type statscompanion_service,        system_server_service, service_manager_type;
type statsmanager_service,          system_api_service, system_server_service, service_manager_type;
type tracingproxy_service,          system_server_service, service_manager_type;
type uce_service,                   service_manager_type;
Add selinux setting for attention Bug: 126472144 Test: adb shell dumpsys attention Change-Id: Ie421b719c8fc0414ee664055aa5d007c081edf17 2019-03-12 02:40:44 +01:00			`type attention_service, system_server_service, service_manager_type;`
Initial sepolicy for composd Add what we need to allow composd to run and expose an AIDL service. Also delete the policy for compsvc; we never access it in the host now, and the real policy is in microdroid. Retain the compos_exec type, since it is referenced in the APEX sepolicy. Bug: 186126194 Test: adb shell cmd -w android.system.composd; no denials. Change-Id: I5f06b2b01852cdebd2d67009b363ec08b17ce33a 2021-09-09 18:08:15 +02:00			`type compos_service, service_manager_type;`
Rename dynamic_android to dynamic_system Per API review, dynamic_android should be renamed to dynamic_system. Bug: 126613281 Test: run DynamicSystemInstallationService via adb Change-Id: Ia908cdd0c21b3a82f59b30e03a985dc260530230 2019-03-14 05:35:32 +01:00			`type dynamic_system_service, system_api_service, system_server_service, service_manager_type;`
Add incidentcompanion service. It is a side channel for dumpstate and incidentd to communicate status and get user authorization to share bugreports by calling system_server. Test: atest PermissionControllerTest / atest GooglePermissionControllerTest Change-Id: I995a43a25f375e5c97dba1deb92ebe893ca8585d 2018-12-08 02:20:14 +01:00			`type gsi_service, service_manager_type;`
			`type incidentcompanion_service, system_api_service, system_server_service, service_manager_type;`
SE policy for tuner service. Test: make; acloud; tuner sample input Change-Id: I651632ec7f4ba79d94738c11c343f63510e59aa6 2020-09-12 02:50:45 +02:00			`type mediatuner_service, app_api_service, service_manager_type;`
Add sepolicy for profcollectd This does not yet list all the required capabilities for profcollectd, but it at least allows the service to start under permissive mode. Bug: 79161490 Test: start profcollectd Change-Id: I92c6192fa9b31840b2aba26f83a6dc9f9e835030 2020-06-18 06:43:23 +02:00			`type profcollectd_service, service_manager_type;`
Add a new selinux policy for the resolver service Bug: 178151184 Test: manual Change-Id: Ia44c50d24b3b5403b02ccc1b7873c7024b10e023 2021-01-22 01:55:42 +01:00			`type resolver_service, system_server_service, service_manager_type;`
Add incidentcompanion service. It is a side channel for dumpstate and incidentd to communicate status and get user authorization to share bugreports by calling system_server. Test: atest PermissionControllerTest / atest GooglePermissionControllerTest Change-Id: I995a43a25f375e5c97dba1deb92ebe893ca8585d 2018-12-08 02:20:14 +01:00			`type stats_service, service_manager_type;`
			`type statscompanion_service, system_server_service, service_manager_type;`
system_server: create StatsManagerService Refactor to split the logic within statscompanion_service The goal of the refactor is to simplify the binder calls to statsd This service will talk to statsd. At the end of the refactor, this service should be the only service that talks to statsd. Bug: 146074223 Test: Manual by creating the service with empty implementation Change-Id: Ib9c2e10ec195d41062f1001e5a82b374696de939 2019-12-12 19:17:58 +01:00			`type statsmanager_service, system_api_service, system_server_service, service_manager_type;`
Configure sepolicy for TracingServiceProxy Configures sepolicy to allow for the new TracingServiceProxy system services, and to allow Perfetto to access the service. Bug: 175591887 Test: Validated the service started successfullyy, and invoked via CLI Change-Id: Idb6438948a9d96063f8455544b97ef66267cde23 2020-12-11 23:51:32 +01:00			`type tracingproxy_service, system_server_service, service_manager_type;`
Add uce service to core policy. This service is requested by AOSP framework, but there is no context for it defined. Bug: 136023468 Test: N/A Change-Id: Ibc5b048aaa1c9eda7b9180caca92cb876c3f6b28 Merged-In: Ibc5b048aaa1c9eda7b9180caca92cb876c3f6b28 (cherry picked from commit 67cb30fabf50e3ce2f08e9edd4e14214c11571a4) 2019-08-01 23:05:05 +02:00			`type uce_service, service_manager_type;`