platform_system_sepolicy/public/vndservice.te at 6c32e0624f46de51f3ae4b3354cd99f16c68f680 - tequilaOS/platform_system_sepolicy - gitownia.eu

tequilaOS/platform_system_sepolicy

Jeff Vander Stoep 639a2b842c Add default label and mapping for vendor services

Adding the default label/mapping is important because:
1.  Lookups of services without an selinux label should generate
    a denial.
2.  In permissive mode, lookups of a service without a label should be
    be allowed, without the default label service manager disallows
    access.
3.  We can neverallow use of the default label.

Bug: 37762790
Test: Build and flash policy onto Marlin with unlabeled vendor services.
    Add/find of unlabeled vendor services generate a denial.

Change-Id: I66531deedc3f9b79616f5d0681c87ed66aca5b80

2017-04-28 14:00:10 -07:00

1 line

58 B

Text

Raw Blame History

type default_android_vndservice, vndservice_manager_type;