tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Merge "priv_app: Remove rules for update_engine"

Browse source
This commit is contained in:
Treehugger Robot 2020-01-08 23:21:27 +00:00 committed by Gerrit Code Review
commit 4f362b1c68
1 changed files with 0 additions and 11 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

11
private/priv_app.te
View file

@ -122,17 +122,6 @@ userdebug_or_eng(`
# access the mac address
allowxperm priv_app self:udp_socket ioctl SIOCGIFHWADDR;
# Allow GMS core to communicate with update_engine for A/B update.
binder_call(priv_app, update_engine)
allow priv_app update_engine_service:service_manager find;
# b/142672293: No other priv-app should need this allow rule now that GMS core runs in its own domain.
userdebug_or_eng(`
auditallow priv_app update_engine:binder { call transfer };
auditallow update_engine priv_app:binder transfer;
auditallow priv_app update_engine:fd use;
auditallow priv_app update_engine_service:service_manager find;
')
# Allow GMS core to communicate with dumpsys storaged.
binder_call(priv_app, storaged)
allow priv_app storaged_service:service_manager find;