tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Merge "Add keystore permission for metrics re-routing." into sc-dev am: 898fc5b39b

Browse source 
Original change: https://googleplex-android-review.googlesource.com/c/platform/system/sepolicy/+/14937250

Change-Id: I5d9871f1c4e3b1e8b7c4cb63ba93661b5035be4b
This commit is contained in:
Hasini Gunasinghe 2021-06-30 13:33:15 +00:00 committed by Automerger Merge Worker
commit 1b7b282b48
12 changed files with 14 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
prebuilts/api/31.0/private/access_vectors
View file

@ -726,6 +726,7 @@ class keystore2
get_state
list
lock
pull_metrics
report_off_body
reset
unlock

1
prebuilts/api/31.0/private/compat/30.0/30.0.ignore.cil
View file

@ -72,6 +72,7 @@
hw_timeout_multiplier_prop
keystore_compat_hal_service
keystore_maintenance_service
keystore_metrics_service
keystore2_key_contexts_file
legacy_permission_service
location_time_zone_manager_service

1
prebuilts/api/31.0/private/service_contexts
View file

@ -38,6 +38,7 @@ android.security.compat u:object_r:keystore_compat_hal_service
android.security.identity u:object_r:credstore_service:s0
android.security.keystore u:object_r:keystore_service:s0
android.security.maintenance u:object_r:keystore_maintenance_service:s0
android.security.metrics u:object_r:keystore_metrics_service:s0
android.security.remoteprovisioning u:object_r:remoteprovisioning_service:s0
android.security.vpnprofilestore u:object_r:vpnprofilestore_service:s0
android.service.gatekeeper.IGateKeeperService u:object_r:gatekeeper_service:s0

2
prebuilts/api/31.0/private/system_server.te
View file

@ -853,6 +853,7 @@ allow system_server incremental_service:service_manager find;
allow system_server installd_service:service_manager find;
allow system_server iorapd_service:service_manager find;
allow system_server keystore_maintenance_service:service_manager find;
allow system_server keystore_metrics_service:service_manager find;
allow system_server keystore_service:service_manager find;
allow system_server mediaserver_service:service_manager find;
allow system_server mediametrics_service:service_manager find;
@ -903,6 +904,7 @@ allow system_server keystore:keystore2 {
clear_uid
get_state
lock
pull_metrics
reset
unlock
};

1
prebuilts/api/31.0/public/keystore.te
View file

@ -20,6 +20,7 @@ add_service(keystore, apc_service)
add_service(keystore, keystore_compat_hal_service)
add_service(keystore, authorization_service)
add_service(keystore, keystore_maintenance_service)
add_service(keystore, keystore_metrics_service)
add_service(keystore, vpnprofilestore_service)
# Check SELinux permissions.

1
prebuilts/api/31.0/public/service.te
View file

@ -20,6 +20,7 @@ type installd_service, service_manager_type;
type credstore_service, app_api_service, service_manager_type;
type keystore_compat_hal_service, service_manager_type;
type keystore_maintenance_service, service_manager_type;
type keystore_metrics_service, service_manager_type;
type keystore_service, service_manager_type;
type lpdump_service, service_manager_type;
type mediaserver_service, service_manager_type;

1
private/access_vectors
View file

@ -726,6 +726,7 @@ class keystore2
get_state
list
lock
pull_metrics
report_off_body
reset
unlock

1
private/compat/30.0/30.0.ignore.cil
View file

@ -72,6 +72,7 @@
hw_timeout_multiplier_prop
keystore_compat_hal_service
keystore_maintenance_service
keystore_metrics_service
keystore2_key_contexts_file
legacy_permission_service
location_time_zone_manager_service

1
private/service_contexts
View file

@ -38,6 +38,7 @@ android.security.compat u:object_r:keystore_compat_hal_service
android.security.identity u:object_r:credstore_service:s0
android.security.keystore u:object_r:keystore_service:s0
android.security.maintenance u:object_r:keystore_maintenance_service:s0
android.security.metrics u:object_r:keystore_metrics_service:s0
android.security.remoteprovisioning u:object_r:remoteprovisioning_service:s0
android.security.vpnprofilestore u:object_r:vpnprofilestore_service:s0
android.service.gatekeeper.IGateKeeperService u:object_r:gatekeeper_service:s0

2
private/system_server.te
View file

@ -853,6 +853,7 @@ allow system_server incremental_service:service_manager find;
allow system_server installd_service:service_manager find;
allow system_server iorapd_service:service_manager find;
allow system_server keystore_maintenance_service:service_manager find;
allow system_server keystore_metrics_service:service_manager find;
allow system_server keystore_service:service_manager find;
allow system_server mediaserver_service:service_manager find;
allow system_server mediametrics_service:service_manager find;
@ -903,6 +904,7 @@ allow system_server keystore:keystore2 {
clear_uid
get_state
lock
pull_metrics
reset
unlock
};

1
public/keystore.te
View file

@ -20,6 +20,7 @@ add_service(keystore, apc_service)
add_service(keystore, keystore_compat_hal_service)
add_service(keystore, authorization_service)
add_service(keystore, keystore_maintenance_service)
add_service(keystore, keystore_metrics_service)
add_service(keystore, vpnprofilestore_service)
# Check SELinux permissions.

1
public/service.te
View file

@ -20,6 +20,7 @@ type installd_service, service_manager_type;
type credstore_service, app_api_service, service_manager_type;
type keystore_compat_hal_service, service_manager_type;
type keystore_maintenance_service, service_manager_type;
type keystore_metrics_service, service_manager_type;
type keystore_service, service_manager_type;
type lpdump_service, service_manager_type;
type mediaserver_service, service_manager_type;