platform_system_sepolicy/public/vndservice.te at 438684b39f03de32fc22aafd6b6fbdf765f6fde1 - tequilaOS/platform_system_sepolicy - gitownia.eu

tequilaOS/platform_system_sepolicy

Jeff Vander Stoep 082eae4e51 Add default label and mapping for vendor services

Adding the default label/mapping is important because:
1.  Lookups of services without an selinux label should generate
    a denial.
2.  In permissive mode, lookups of a service without a label should be
    be allowed, without the default label service manager disallows
    access.
3.  We can neverallow use of the default label.

Bug: 37762790
Test: Build and flash policy onto Marlin with unlabeled vendor services.
    Add/find of unlabeled vendor services generate a denial.

Change-Id: I66531deedc3f9b79616f5d0681c87ed66aca5b80
(cherry picked from commit 639a2b842c)

2017-04-28 14:56:57 -07:00

1 line

58 B

Text

Raw Blame History

type default_android_vndservice, vndservice_manager_type;