platform_system_sepolicy/private/compat/30.0/30.0.ignore.cil
Nick Moukhine affe2399b5 Add sepolicy for music recognition service.
Denial when not listed in priv_app.te:
E SELinux : avc:  denied  { find } for pid=3213 uid=10170 name=music_recognition scontext=u:r:priv_app:s0:c512,c768 tcontext=u:object_r:music_recognition_service:s0 tclass=service_manager permissive=0


Bug: 158194857
Test: patched and tested on internal master
Change-Id: I30e9ea79a57d9c353b732b629bd5a829c89bbcb0
2020-09-23 10:57:19 +00:00

32 lines
940 B
Text

;; new_objects - a collection of types that have been introduced that have no
;; analogue in older policy. Thus, we do not need to map these types to
;; previous ones. Add here to pass checkapi tests.
(type new_objects)
(typeattribute new_objects)
(typeattributeset new_objects
( new_objects
adbd_config_prop
apex_info_file
cgroup_v2
debugfs_kprobes
gki_apex_prepostinstall
gki_apex_prepostinstall_exec
hal_fingerprint_service
gnss_device
hal_dumpstate_config_prop
hal_power_stats_service
keystore2_key_contexts_file
location_time_zone_manager_service
mediatranscoding_tmpfs
music_recognition_service
people_service
power_stats_service
power_debug_prop
profcollectd
profcollectd_data_file
profcollectd_exec
profcollectd_service
shell_test_data_file
sysfs_devices_cs_etm
update_engine_stable_service
userspace_reboot_metadata_file))