diff --git a/private/compat/30.0/30.0.ignore.cil b/private/compat/30.0/30.0.ignore.cil index d38d30c9e..c54c6f940 100644 --- a/private/compat/30.0/30.0.ignore.cil +++ b/private/compat/30.0/30.0.ignore.cil @@ -14,5 +14,6 @@ profcollectd profcollectd_data_file profcollectd_exec - profcollectd_service)) + profcollectd_service + update_engine_stable_service)) diff --git a/private/service_contexts b/private/service_contexts index db0059284..51161c0fa 100644 --- a/private/service_contexts +++ b/private/service_contexts @@ -13,6 +13,7 @@ aidl_lazy_test_1 u:object_r:aidl_lazy_test_service:s0 aidl_lazy_test_2 u:object_r:aidl_lazy_test_service:s0 alarm u:object_r:alarm_service:s0 android.os.UpdateEngineService u:object_r:update_engine_service:s0 +android.os.UpdateEngineStableService u:object_r:update_engine_stable_service:s0 android.security.identity u:object_r:credstore_service:s0 android.security.keystore u:object_r:keystore_service:s0 android.service.gatekeeper.IGateKeeperService u:object_r:gatekeeper_service:s0 diff --git a/public/service.te b/public/service.te index 8a503cb57..8134a18dd 100644 --- a/public/service.te +++ b/public/service.te @@ -34,6 +34,7 @@ type surfaceflinger_service, app_api_service, ephemeral_app_api_service, serv type system_app_service, service_manager_type; type system_suspend_control_service, service_manager_type; type update_engine_service, service_manager_type; +type update_engine_stable_service, service_manager_type; type virtual_touchpad_service, service_manager_type; type vold_service, service_manager_type; type vr_hwc_service, service_manager_type; diff --git a/public/update_engine.te b/public/update_engine.te index ba2f3cf04..b7cf82745 100644 --- a/public/update_engine.te +++ b/public/update_engine.te @@ -35,6 +35,7 @@ dontaudit update_engine kernel:system module_request; # Register the service to perform Binder IPC. binder_use(update_engine) add_service(update_engine, update_engine_service) +add_service(update_engine, update_engine_stable_service) # Allow update_engine to call the callback function provided by priv_app/GMS core. binder_call(update_engine, priv_app)