From d151d63fa0d8f93491e610fcaa917584ba130b4b Mon Sep 17 00:00:00 2001 From: Reema Bajwa Date: Tue, 18 Oct 2022 23:58:01 +0000 Subject: [PATCH] Add app_api_service and ephemeral_app_api to credential_service selinux policy to allow regular apps and instant apps to access credential manager Test: Built & deployed locally Bug: 253155284 Feature Bug: 241268646 Change-Id: I6cf6738858bccfbb07f0cf2e92fcbd472b4c56ce --- public/service.te | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/public/service.te b/public/service.te index 70ddf94f1..62b7acbd1 100644 --- a/public/service.te +++ b/public/service.te @@ -102,7 +102,7 @@ type country_detector_service, app_api_service, ephemeral_app_api_service, syste # with EMMA_INSTRUMENT=true. We should consider locking this down in the future. type coverage_service, system_server_service, service_manager_type; type cpuinfo_service, system_api_service, system_server_service, service_manager_type; -type credential_service, system_api_service, system_server_service, service_manager_type; +type credential_service, app_api_service, ephemeral_app_api_service, system_api_service, system_server_service, service_manager_type; type dataloader_manager_service, system_server_service, service_manager_type; type dbinfo_service, system_api_service, system_server_service, service_manager_type; type device_config_service, system_server_service, service_manager_type;