606a3dca3e
When we serve compressed APEX via OTA, we need to ensure device has enough space to decompress them during boot. In order to do that, update_engine will need to pass metadata about the OTA to apexd so that it can make calculation about space requirments. Update engine in return will display warning to user if the space requirement can't be fulfilled. Bug: 172911822 Test: manual Change-Id: Idff25ac8e5165da70c539edcf6b292e04299a5c6
11 lines
444 B
Text
11 lines
444 B
Text
# apexd -- manager for APEX packages
|
|
type apexd, domain;
|
|
type apexd_exec, exec_type, file_type, system_file_type;
|
|
|
|
binder_use(apexd)
|
|
add_service(apexd, apex_service)
|
|
|
|
neverallow { domain -init -apexd -system_server -update_engine } apex_service:service_manager find;
|
|
neverallow { domain -init -apexd -system_server -servicemanager -update_engine } apexd:binder call;
|
|
|
|
neverallow { domain userdebug_or_eng(`-crash_dump') } apexd:process ptrace;
|