tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Allow remote_prov_app to find app_api_service

Browse source 
Due to the nature of RemoteProvisioner being an app, there
are many components under the hood of frameworks that make calls out to
standard app available services. This change allows remote_prov_app to
find any service labeled with app_api_service to avoid the brittleness
that has already arisen from generating SELinux denials on boot, and
avoid any potential unintended functionality consequences as a result of
those.

Test: No selinux denials
Change-Id: I95fc4d15a196646deb6b9f6040bac88ee00b2a7f
This commit is contained in:
Max Bires 2021-03-23 13:55:14 -07:00
parent 158db41e21
commit bd6b995087
1 changed files with 1 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
private/remote_prov_app.te
View file

@ -8,7 +8,6 @@ net_domain(remote_prov_app)
get_prop(remote_prov_app, vendor_security_patch_level_prop)
allow remote_prov_app {
activity_service
app_api_service
remoteprovisioning_service
tethering_service
}:service_manager find;