tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

am b075338d: Assign app_api_service attribute to services.

Browse source 
* commit 'b075338d0e335eb2dbd786ae4f8e033e78eeca37':
  Assign app_api_service attribute to services.
This commit is contained in:
dcashman 2015-04-03 22:23:04 +00:00 committed by Android Git Automerger
commit b40dd46a6b
9 changed files with 6 additions and 31 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
bluetooth.te
View file

@ -60,8 +60,6 @@ allow bluetooth system_api_service:service_manager find;
service_manager_local_audit_domain(bluetooth) service_manager_local_audit_domain(bluetooth)
auditallow bluetooth { auditallow bluetooth {
tmp_system_server_service tmp_system_server_service
-activity_service
-appops_service
-audio_service -audio_service
-bluetooth_manager_service -bluetooth_manager_service
-connectivity_service -connectivity_service

4
mediaserver.te
View file

@ -78,6 +78,8 @@ unix_socket_connect(mediaserver, bluetooth, bluetooth)
# Connect to tee service. # Connect to tee service.
allow mediaserver tee:unix_stream_socket connectto; allow mediaserver tee:unix_stream_socket connectto;
allow mediaserver activity_service:service_manager find;
allow mediaserver appops_service:service_manager find;
allow mediaserver drmserver_service:service_manager find; allow mediaserver drmserver_service:service_manager find;
allow mediaserver mediaserver_service:service_manager { add find }; allow mediaserver mediaserver_service:service_manager { add find };
allow mediaserver surfaceflinger_service:service_manager find; allow mediaserver surfaceflinger_service:service_manager find;
@ -86,8 +88,6 @@ allow mediaserver tmp_system_server_service:service_manager find;
service_manager_local_audit_domain(mediaserver) service_manager_local_audit_domain(mediaserver)
auditallow mediaserver { auditallow mediaserver {
tmp_system_server_service tmp_system_server_service
-activity_service
-appops_service
-batterystats_service -batterystats_service
-permission_service -permission_service
-power_service -power_service

3
nfc.te
View file

@ -30,9 +30,6 @@ allow nfc system_api_service:service_manager find;
service_manager_local_audit_domain(nfc) service_manager_local_audit_domain(nfc)
auditallow nfc { auditallow nfc {
tmp_system_server_service tmp_system_server_service
-accessibility_service
-activity_service
-appops_service
-batterystats_service -batterystats_service
-bluetooth_manager_service -bluetooth_manager_service
-connectivity_service -connectivity_service

4
platform_app.te
View file

@ -39,10 +39,6 @@ allow platform_app system_api_service:service_manager find;
service_manager_local_audit_domain(platform_app) service_manager_local_audit_domain(platform_app)
auditallow platform_app { auditallow platform_app {
tmp_system_server_service tmp_system_server_service
-accessibility_service
-account_service
-activity_service
-appops_service
-appwidget_service -appwidget_service
-assetatlas_service -assetatlas_service
-audio_service -audio_service

4
radio.te
View file

@ -41,10 +41,6 @@ allow radio system_api_service:service_manager find;
service_manager_local_audit_domain(radio) service_manager_local_audit_domain(radio)
auditallow radio { auditallow radio {
tmp_system_server_service tmp_system_server_service
-accessibility_service
-account_service
-activity_service
-appops_service
-assetatlas_service -assetatlas_service
-bluetooth_manager_service -bluetooth_manager_service
-connectivity_service -connectivity_service

8
service.te
View file

@ -11,11 +11,11 @@ type surfaceflinger_service, service_manager_type;
type system_app_service, service_manager_type; type system_app_service, service_manager_type;
# system_server_services broken down # system_server_services broken down
type accessibility_service, tmp_system_server_service, service_manager_type; type accessibility_service, app_api_service, system_server_service, service_manager_type;
type account_service, tmp_system_server_service, service_manager_type; type account_service, app_api_service, system_server_service, service_manager_type;
type activity_service, tmp_system_server_service, service_manager_type; type activity_service, app_api_service, system_server_service, service_manager_type;
type alarm_service, tmp_system_server_service, service_manager_type; type alarm_service, tmp_system_server_service, service_manager_type;
type appops_service, tmp_system_server_service, service_manager_type; type appops_service, app_api_service, system_server_service, service_manager_type;
type appwidget_service, tmp_system_server_service, service_manager_type; type appwidget_service, tmp_system_server_service, service_manager_type;
type assetatlas_service, tmp_system_server_service, service_manager_type; type assetatlas_service, tmp_system_server_service, service_manager_type;
type audio_service, tmp_system_server_service, service_manager_type; type audio_service, tmp_system_server_service, service_manager_type;

4
system_app.te
View file

@ -60,10 +60,6 @@ allow system_app system_api_service:service_manager find;
service_manager_local_audit_domain(system_app) service_manager_local_audit_domain(system_app)
auditallow system_app { auditallow system_app {
tmp_system_server_service tmp_system_server_service
-accessibility_service
-account_service
-activity_service
-appops_service
-appwidget_service -appwidget_service
-assetatlas_service -assetatlas_service
-audio_service -audio_service

4
system_server.te
View file

@ -370,11 +370,7 @@ allow system_server tmp_system_server_service:service_manager { add find };
service_manager_local_audit_domain(system_server) service_manager_local_audit_domain(system_server)
auditallow system_server { auditallow system_server {
tmp_system_server_service tmp_system_server_service
-accessibility_service
-account_service
-activity_service
-alarm_service -alarm_service
-appops_service
-assetatlas_service -assetatlas_service
-audio_service -audio_service
-backup_service -backup_service

4
untrusted_app.te
View file

@ -90,10 +90,6 @@ allow untrusted_app system_api_service:service_manager find;
service_manager_local_audit_domain(untrusted_app) service_manager_local_audit_domain(untrusted_app)
auditallow untrusted_app { auditallow untrusted_app {
tmp_system_server_service tmp_system_server_service
-accessibility_service
-account_service
-activity_service
-appops_service
-appwidget_service -appwidget_service
-assetatlas_service -assetatlas_service
-audio_service -audio_service