7ad743b7ed
This is used for querying the installed packages, as well as coordinating the installations of packages. Test: ran an app that queries PM, that queries apexd. Bug: 117589375 Change-Id: I38203ffe6d0d312d6cc38e131a29c14ace0ba10c
15 lines
494 B
Text
15 lines
494 B
Text
# apexd -- manager for APEX packages
|
|
type apexd, domain;
|
|
type apexd_exec, exec_type, file_type, system_file_type;
|
|
|
|
binder_use(apexd)
|
|
add_service(apexd, apex_service)
|
|
set_prop(apexd, apexd_prop)
|
|
|
|
neverallow { domain -init -apexd -system_server } apex_service:service_manager find;
|
|
neverallow { domain -init -apexd -system_server } apexd:binder call;
|
|
|
|
neverallow domain apexd:process ptrace;
|
|
|
|
# only apexd can set apexd sysprop
|
|
neverallow { domain -apexd -init } apexd_prop:property_service set;
|