diff options
| author | Linux Build Service Account <lnxbuild@localhost> | 2016-10-03 21:18:36 -0700 |
|---|---|---|
| committer | Gerrit - the friendly Code Review server <code-review@localhost> | 2016-10-03 21:18:36 -0700 |
| commit | 1900d6cad94590864ca6c00c62dd2b9b4bad115e (patch) | |
| tree | 8c16748d02cb6f682602044d512b6d392b8c2614 | |
| parent | 65c6fd600c3ef8e660145e3215097a022632554f (diff) | |
| parent | f043009b151c298ba1c90d5a2e4588d61e4ccf6b (diff) | |
| download | android_device_qcom_sepolicy-1900d6cad94590864ca6c00c62dd2b9b4bad115e.tar.gz android_device_qcom_sepolicy-1900d6cad94590864ca6c00c62dd2b9b4bad115e.tar.bz2 android_device_qcom_sepolicy-1900d6cad94590864ca6c00c62dd2b9b4bad115e.zip | |
Merge "Allow apps to find imscm service"
| -rw-r--r-- | common/platform_app.te | 2 | ||||
| -rw-r--r-- | common/system_app.te | 1 | ||||
| -rw-r--r-- | common/untrusted_app.te | 1 |
3 files changed, 3 insertions, 1 deletions
diff --git a/common/platform_app.te b/common/platform_app.te index bc558e90..0dd94ddc 100644 --- a/common/platform_app.te +++ b/common/platform_app.te @@ -10,7 +10,7 @@ binder_call(platform_app, secotad) # Allow platform apps to interact with imscm daemon binder_call(platform_app, imscm) - +allow platform_app imscm_service:service_manager find; allow platform_app color_service:service_manager find; # Allow NFC service to be found diff --git a/common/system_app.te b/common/system_app.te index 255e5664..01d999af 100644 --- a/common/system_app.te +++ b/common/system_app.te @@ -100,6 +100,7 @@ binder_call(system_app, secotad) # allow system_app to interact with imscm daemon binder_call(system_app, imscm) +allow system_app imscm_service:service_manager find; # access to seemp folder allow system_app seemp_file:dir r_dir_perms; diff --git a/common/untrusted_app.te b/common/untrusted_app.te index c2b75d54..8f6d10b7 100644 --- a/common/untrusted_app.te +++ b/common/untrusted_app.te @@ -9,6 +9,7 @@ neverallow untrusted_app diag_device:chr_file rw_file_perms; # using binder call userdebug_or_eng(` binder_call(untrusted_app, imscm) + allow untrusted_app imscm_service:service_manager find; ') # for finding wbc_service |