Merge "Revert "Introducing vm_tethering_service as system_server_service"" into main am: 5aa7ff8369 am: 3c1cd9c05b

Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/3134016

Change-Id: I1900577c1bfecc23d29f9008c7964d66994f0eed
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
This commit is contained in:
Priyanka Advani 2024-06-14 17:58:35 +00:00 committed by Automerger Merge Worker
commit f2d382e533
4 changed files with 1 additions and 5 deletions

View file

@ -190,7 +190,6 @@ var (
"android.system.virtualizationservice_internal.IVfioHandler": EXCEPTION_NO_FUZZER,
"android.system.virtualizationservice_internal.IVmnic": EXCEPTION_NO_FUZZER,
"android.system.virtualizationmaintenance": EXCEPTION_NO_FUZZER,
"android.system.vmtethering.IVmTethering": EXCEPTION_NO_FUZZER,
"ambient_context": EXCEPTION_NO_FUZZER,
"app_binding": EXCEPTION_NO_FUZZER,
"app_hibernation": EXCEPTION_NO_FUZZER,

View file

@ -31,8 +31,7 @@ is_flag_enabled(RELEASE_AVF_ENABLE_LLPVM_CHANGES, `
type virtualization_maintenance_service, service_manager_type;
')
is_flag_enabled(RELEASE_AVF_ENABLE_NETWORK, `
type vm_tethering_service, system_server_service, service_manager_type;
type vmnic_service, service_manager_type;
type vmnic_service, service_manager_type;
')
type uce_service, service_manager_type;

View file

@ -172,7 +172,6 @@ is_flag_enabled(RELEASE_AVF_ENABLE_LLPVM_CHANGES, `
')
is_flag_enabled(RELEASE_AVF_ENABLE_NETWORK, `
android.system.virtualizationservice_internal.IVmnic u:object_r:vmnic_service:s0
android.system.vmtethering.IVmTethering u:object_r:vm_tethering_service:s0
')
ambient_context u:object_r:ambient_context_service:s0
app_binding u:object_r:app_binding_service:s0

View file

@ -28,7 +28,6 @@ is_flag_enabled(RELEASE_AVF_ENABLE_NETWORK, `
# Let virtualizationservice find and communicate with vmnic.
allow virtualizationservice vmnic_service:service_manager find;
binder_call(virtualizationservice, vmnic)
allow virtualizationservice vm_tethering_service:service_manager find;
')
# Allow the virtualizationservice domain to serve a remotely provisioned component for