tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Update priv_app selinux policy to allow gmscore to be able to communicate with statsd

Browse source 
am: 31b11d8ef8

Change-Id: I39fd53f56099df371ec9f8ea8938b6aefb131f49
This commit is contained in:
yro 2018-01-09 23:33:23 +00:00 committed by android-build-merger
commit 2722dd4398
2 changed files with 9 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

12
private/priv_app.te
View file

@ -21,22 +21,23 @@ allow priv_app self:process ptrace;
# to their sandbox directory and then dlopen().
allow priv_app app_data_file:file execute;
allow priv_app app_api_service:service_manager find;
allow priv_app audioserver_service:service_manager find;
allow priv_app cameraserver_service:service_manager find;
allow priv_app drmserver_service:service_manager find;
allow priv_app mediacodec_service:service_manager find;
allow priv_app mediametrics_service:service_manager find;
allow priv_app mediadrmserver_service:service_manager find;
allow priv_app mediaextractor_service:service_manager find;
allow priv_app mediametrics_service:service_manager find;
allow priv_app mediaserver_service:service_manager find;
allow priv_app network_watchlist_service:service_manager find;
allow priv_app nfc_service:service_manager find;
allow priv_app oem_lock_service:service_manager find;
allow priv_app radio_service:service_manager find;
allow priv_app app_api_service:service_manager find;
allow priv_app system_api_service:service_manager find;
allow priv_app persistent_data_block_service:service_manager find;
allow priv_app radio_service:service_manager find;
allow priv_app recovery_service:service_manager find;
allow priv_app stats_service:service_manager find;
allow priv_app system_api_service:service_manager find;
# Write to /cache.
allow priv_app { cache_file cache_recovery_file }:dir create_dir_perms;
@ -95,6 +96,9 @@ allow priv_app update_engine_service:service_manager find;
binder_call(priv_app, storaged)
allow priv_app storaged_service:service_manager find;
# Allow GMS core to communicate with statsd.
binder_call(priv_app, statsd)
# Allow Phone to read/write cached ringtones (opened by system).
allow priv_app ringtone_file:file { getattr read write };

1
private/statsd.te
View file

@ -55,6 +55,7 @@ binder_call(statsd, stats)
neverallow {
domain
-dumpstate
-priv_app
-shell
-stats
-statsd