Allow vndservicemanager to self-register.
This is useful for tools like dumpsys, so that they work on all services equally as well. Also, so that there is no difference with the regular service manager. Bug: 150579832 Test: 'adb shell /vendor/bin/dumpsys -l' shows 'manager' Test: denial is no longer present: 03-05 12:23:47.346 221 221 E SELinux : avc: denied { add } for pid=221 uid=1000 name=manager scontext=u:r:vndservicemanager:s0 tcontext=u:object_r:service_manager_vndservice:s0 tclass=service_manager permissive=0 Change-Id: Id6126e8277462a2c4d5f6022ab67a4bacaa3241e
This commit is contained in:
parent
4e47834266
commit
52a96cc7dd
4 changed files with 6 additions and 0 deletions
|
@ -82,6 +82,7 @@
|
|||
art_apex_dir
|
||||
rebootescrow_hal_prop
|
||||
service_manager_service
|
||||
service_manager_vndservice
|
||||
simpleperf
|
||||
snapshotctl_log_data_file
|
||||
socket_hook_prop
|
||||
|
@ -111,4 +112,5 @@
|
|||
vendor_install_recovery
|
||||
vendor_install_recovery_exec
|
||||
vendor_socket_hook_prop
|
||||
vendor_socket_hook_prop
|
||||
virtual_ab_prop))
|
||||
|
|
|
@ -1 +1,2 @@
|
|||
type service_manager_vndservice, vndservice_manager_type;
|
||||
type default_android_vndservice, vndservice_manager_type;
|
||||
|
|
1
vendor/vndservice_contexts
vendored
1
vendor/vndservice_contexts
vendored
|
@ -1 +1,2 @@
|
|||
manager u:object_r:service_manager_vndservice:s0
|
||||
* u:object_r:default_android_vndservice:s0
|
||||
|
|
2
vendor/vndservicemanager.te
vendored
2
vendor/vndservicemanager.te
vendored
|
@ -13,6 +13,8 @@ allow vndservicemanager vndbinder_device:chr_file rw_file_perms;
|
|||
# Read vndservice_contexts
|
||||
allow vndservicemanager vndservice_contexts_file:file r_file_perms;
|
||||
|
||||
add_service(vndservicemanager, service_manager_vndservice)
|
||||
|
||||
# Start lazy services
|
||||
set_prop(vndservicemanager, ctl_interface_start_prop)
|
||||
|
||||
|
|
Loading…
Reference in a new issue