platform_system_sepolicy/apex/com.android.compos-file_contexts at d581bd244d5be1389e97851d41f55406027dece4 - tequilaOS/platform_system_sepolicy - gitownia.eu

tequilaOS/platform_system_sepolicy

Alan Stokes d376e2041f Initial sepolicy for composd

Add what we need to allow composd to run and expose an AIDL service.

Also delete the policy for compsvc; we never access it in the host
now, and the real policy is in microdroid. Retain the compos_exec
type, since it is referenced in the APEX sepolicy.

Bug: 186126194
Test: adb shell cmd -w android.system.composd; no denials.
Change-Id: I5f06b2b01852cdebd2d67009b363ec08b17ce33a

2021-09-13 10:33:53 +01:00

4 lines

216 B

Text

Raw Blame History

 (/.*)?                   u:object_r:system_file:s0
 /bin/compsvc             u:object_r:compos_exec:s0
 /bin/compos_verify_key   u:object_r:compos_verify_key_exec:s0
 /bin/composd             u:object_r:composd_exec:s0