From bd6b9950873cea0d3c44a67f317a06c56449ac22 Mon Sep 17 00:00:00 2001 From: Max Bires Date: Tue, 23 Mar 2021 13:55:14 -0700 Subject: [PATCH] Allow remote_prov_app to find app_api_service Due to the nature of RemoteProvisioner being an app, there are many components under the hood of frameworks that make calls out to standard app available services. This change allows remote_prov_app to find any service labeled with app_api_service to avoid the brittleness that has already arisen from generating SELinux denials on boot, and avoid any potential unintended functionality consequences as a result of those. Test: No selinux denials Change-Id: I95fc4d15a196646deb6b9f6040bac88ee00b2a7f --- private/remote_prov_app.te | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/private/remote_prov_app.te b/private/remote_prov_app.te index d53662225..010c9bc3f 100644 --- a/private/remote_prov_app.te +++ b/private/remote_prov_app.te @@ -8,7 +8,6 @@ net_domain(remote_prov_app) get_prop(remote_prov_app, vendor_security_patch_level_prop) allow remote_prov_app { - activity_service + app_api_service remoteprovisioning_service - tethering_service }:service_manager find;