tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Merge "SEPolicy for RemoteProvisioning App"

Browse source
This commit is contained in:
Treehugger Robot 2021-02-10 04:20:52 +00:00 committed by Gerrit Code Review
commit e6654e8bfd
6 changed files with 16 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
private/compat/30.0/30.0.ignore.cil
View file

@ -76,6 +76,8 @@
profcollectd_service
radio_core_data_file
reboot_readiness_service
remote_prov_app
remoteprovisioning_service
resolver_service
search_ui_service
shell_test_data_file

10
private/remote_prov_app.te Normal file
View file

@ -0,0 +1,10 @@
type remote_prov_app, domain;
typeattribute remote_prov_app coredomain;
app_domain(remote_prov_app)
net_domain(remote_prov_app)
allow remote_prov_app {
activity_service
remoteprovisioning_service
}:service_manager find;

1
private/seapp_contexts
View file

@ -143,6 +143,7 @@ neverallow isEphemeralApp=true domain=((?!ephemeral_app).)*
isSystemServer=true domain=system_server_startup
user=_app isPrivApp=true name=com.android.traceur domain=traceur_app type=app_data_file levelFrom=all
user=_app isPrivApp=true name=com.android.remoteprovisioner domain=remote_prov_app type=app_data_file levelFrom=all
user=system seinfo=platform domain=system_app type=system_app_data_file
user=bluetooth seinfo=platform domain=bluetooth type=bluetooth_data_file
user=network_stack seinfo=network_stack domain=network_stack type=radio_data_file

1
private/service_contexts
View file

@ -31,6 +31,7 @@ android.security.authorization u:object_r:authorization_service:s0
android.security.compat u:object_r:keystore_compat_hal_service:s0
android.security.identity u:object_r:credstore_service:s0
android.security.keystore u:object_r:keystore_service:s0
android.security.remoteprovisioning u:object_r:remoteprovisioning_service:s0
android.service.gatekeeper.IGateKeeperService u:object_r:gatekeeper_service:s0
android.system.keystore2 u:object_r:keystore_service:s0
app_binding u:object_r:app_binding_service:s0

1
public/keystore.te
View file

@ -13,6 +13,7 @@ allow keystore keystore_data_file:notdevfile_class_set create_file_perms;
allow keystore keystore_exec:file { getattr };
add_service(keystore, keystore_service)
add_service(keystore, remoteprovisioning_service)
allow keystore sec_key_att_app_id_provider_service:service_manager find;
allow keystore dropbox_service:service_manager find;
add_service(keystore, apc_service)

1
public/service.te
View file

@ -29,6 +29,7 @@ type mediatranscoding_service, app_api_service, service_manager_type;
type netd_service, service_manager_type;
type nfc_service, service_manager_type;
type radio_service, service_manager_type;
type remoteprovisioning_service, service_manager_type;
type secure_element_service, service_manager_type;
type service_manager_service, service_manager_type;
type storaged_service, service_manager_type;