platform_system_sepolicy/inputflinger.te
dcashman cd82557d40 Restrict service_manager find and list access.
All domains are currently granted list and find service_manager
permissions, but this is not necessary.  Pare the permissions
which did not trigger any of the auditallow reporting.

Bug: 18106000
Change-Id: Ie0ce8de2af8af2cbe4ce388a2dcf4534694c994a
2014-12-15 10:09:24 -08:00

11 lines
289 B
Text

# inputflinger
type inputflinger, domain;
type inputflinger_exec, exec_type, file_type;
init_daemon_domain(inputflinger)
binder_use(inputflinger)
binder_service(inputflinger)
binder_call(inputflinger, system_server)
allow inputflinger inputflinger_service:service_manager { add find };