From 45efca84e5b2fe26213d775aa7fb529aa3a4df2e Mon Sep 17 00:00:00 2001 From: Kangping Dong Date: Fri, 28 Oct 2022 15:56:02 +0800 Subject: [PATCH] [Thread] add sepolicy rules for Thread system service Add SEPolicy for the ThreadNetworkService Add Fuzzer exception, thread_network service is java only FR: b/235016403 Test: build and start thread_network service bug: 262683651 Change-Id: Ifa2e9500dd535b0b4f2ad9af006b8dddaea900db --- build/soong/service_fuzzer_bindings.go | 1 + private/compat/34.0/34.0.ignore.cil | 1 + private/service_contexts | 1 + public/service.te | 1 + 4 files changed, 4 insertions(+) diff --git a/build/soong/service_fuzzer_bindings.go b/build/soong/service_fuzzer_bindings.go index 9f91d2c95..345a9d2db 100644 --- a/build/soong/service_fuzzer_bindings.go +++ b/build/soong/service_fuzzer_bindings.go @@ -434,6 +434,7 @@ var ( "textclassification": EXCEPTION_NO_FUZZER, "textservices": EXCEPTION_NO_FUZZER, "texttospeech": EXCEPTION_NO_FUZZER, + "thread_network": EXCEPTION_NO_FUZZER, "time_detector": EXCEPTION_NO_FUZZER, "time_zone_detector": EXCEPTION_NO_FUZZER, "thermalservice": EXCEPTION_NO_FUZZER, diff --git a/private/compat/34.0/34.0.ignore.cil b/private/compat/34.0/34.0.ignore.cil index 36d3aaa0f..e16be8921 100644 --- a/private/compat/34.0/34.0.ignore.cil +++ b/private/compat/34.0/34.0.ignore.cil @@ -13,4 +13,5 @@ virtual_camera_service ot_daemon_service remote_auth_service + threadnetwork_service )) diff --git a/private/service_contexts b/private/service_contexts index 40677410f..71bd7e4af 100644 --- a/private/service_contexts +++ b/private/service_contexts @@ -413,6 +413,7 @@ texttospeech u:object_r:texttospeech_service:s0 time_detector u:object_r:timedetector_service:s0 time_zone_detector u:object_r:timezonedetector_service:s0 thermalservice u:object_r:thermal_service:s0 +thread_network u:object_r:threadnetwork_service:s0 tracing.proxy u:object_r:tracingproxy_service:s0 translation u:object_r:translation_service:s0 transparency u:object_r:transparency_service:s0 diff --git a/public/service.te b/public/service.te index e2e9abc51..d2e6ca399 100644 --- a/public/service.te +++ b/public/service.te @@ -237,6 +237,7 @@ type textservices_service, app_api_service, ephemeral_app_api_service, system_se type texttospeech_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type; type telecom_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type; type thermal_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type; +type threadnetwork_service, app_api_service, system_server_service, service_manager_type; type timedetector_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type; type timezonedetector_service, app_api_service, system_server_service, service_manager_type; type translation_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;