tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Merge "Update documentation on binderservicedomain" into main

Browse source
This commit is contained in:
Thiébaud Weksteen 2023-08-29 23:27:50 +00:00 committed by Gerrit Code Review
commit 69a9189ddf
3 changed files with 5 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
private/binderservicedomain.te
View file

@ -1,4 +1,5 @@
# Rules common to all binder service domains
# Rules common to some specific binder service domains.
# Deprecated. Consider granting the exact permissions required by your service.
# Allow dumpstate and incidentd to collect information from binder services
allow binderservicedomain { dumpstate incidentd }:fd use;

3
public/attributes
View file

@ -221,7 +221,8 @@ attribute netdomain;
# All domains used for apps with bluetooth access.
attribute bluetoothdomain;
# All domains used for binder service domains.
# Specific domains that expose a binder service.
# Deprecated, consider granting the exact permissions required by your service.
attribute binderservicedomain;
# All domains which have BPF access.

3
public/te_macros
View file

@ -440,8 +440,7 @@ allow $1 $2:fd use;
#####################################
# binder_service(domain)
# Mark a domain as being a Binder service domain.
# Used to allow binder IPC to the various system services.
# Deprecated. Consider granting the exact permissions required by your service.
define(`binder_service', `
typeattribute $1 binderservicedomain;
')