diff options
| author | dcashman <dcashman@google.com> | 2015-10-29 20:10:25 +0000 |
|---|---|---|
| committer | android-build-merger <android-build-merger@google.com> | 2015-10-29 20:10:25 +0000 |
| commit | 1c749e0769b7d0dbe510b9d77d1b81cd817956d4 (patch) | |
| tree | 2d449158707e995bdba0292823f4b9195305bc17 | |
| parent | 753148a8691b7b5d29ee0ebab400c1eb7b2a7c27 (diff) | |
| parent | 32d207e042c280a1d230e180dc6d49aba3b0248c (diff) | |
| download | android_external_sepolicy-1c749e0769b7d0dbe510b9d77d1b81cd817956d4.tar.gz android_external_sepolicy-1c749e0769b7d0dbe510b9d77d1b81cd817956d4.tar.bz2 android_external_sepolicy-1c749e0769b7d0dbe510b9d77d1b81cd817956d4.zip | |
Enable permission checking by binderservicedomain.
am: 32d207e042
* commit '32d207e042c280a1d230e180dc6d49aba3b0248c':
Enable permission checking by binderservicedomain.
| -rw-r--r-- | binderservicedomain.te | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/binderservicedomain.te b/binderservicedomain.te index 0bfd33a..36993eb 100644 --- a/binderservicedomain.te +++ b/binderservicedomain.te @@ -13,6 +13,9 @@ allow binderservicedomain console_device:chr_file rw_file_perms; allow binderservicedomain appdomain:fd use; allow binderservicedomain appdomain:fifo_file write; +# allow all services to run permission checks +allow binderservicedomain permission_service:service_manager find; + allow binderservicedomain keystore:keystore_key { get_state get insert delete exist list sign verify }; use_keystore(binderservicedomain) |