summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorZhao Fan <zhaof@codeaurora.org>2016-09-30 16:27:27 +0800
committerBiswajit Paul <biswajitpaul@codeaurora.org>2016-10-03 15:13:44 -0700
commitf043009b151c298ba1c90d5a2e4588d61e4ccf6b (patch)
treeecc807770f0e81b730259f61443a874ea0032665
parentdcde27f184b6d5222794cf6ba51487324464eb67 (diff)
downloadandroid_device_qcom_sepolicy-f043009b151c298ba1c90d5a2e4588d61e4ccf6b.tar.gz
android_device_qcom_sepolicy-f043009b151c298ba1c90d5a2e4588d61e4ccf6b.tar.bz2
android_device_qcom_sepolicy-f043009b151c298ba1c90d5a2e4588d61e4ccf6b.zip
Allow apps to find imscm service
Apps fails to connect to imscm service. Allow it to find imscm service Change-Id: I39c7b4b81ce0ebc91abe14fc153088e710d195fa CRs-Fixed: 1073791
-rw-r--r--common/platform_app.te2
-rw-r--r--common/system_app.te1
-rw-r--r--common/untrusted_app.te1
3 files changed, 3 insertions, 1 deletions
diff --git a/common/platform_app.te b/common/platform_app.te
index bc558e90..0dd94ddc 100644
--- a/common/platform_app.te
+++ b/common/platform_app.te
@@ -10,7 +10,7 @@ binder_call(platform_app, secotad)
# Allow platform apps to interact with imscm daemon
binder_call(platform_app, imscm)
-
+allow platform_app imscm_service:service_manager find;
allow platform_app color_service:service_manager find;
# Allow NFC service to be found
diff --git a/common/system_app.te b/common/system_app.te
index 255e5664..01d999af 100644
--- a/common/system_app.te
+++ b/common/system_app.te
@@ -100,6 +100,7 @@ binder_call(system_app, secotad)
# allow system_app to interact with imscm daemon
binder_call(system_app, imscm)
+allow system_app imscm_service:service_manager find;
# access to seemp folder
allow system_app seemp_file:dir r_dir_perms;
diff --git a/common/untrusted_app.te b/common/untrusted_app.te
index c2b75d54..8f6d10b7 100644
--- a/common/untrusted_app.te
+++ b/common/untrusted_app.te
@@ -9,6 +9,7 @@ neverallow untrusted_app diag_device:chr_file rw_file_perms;
# using binder call
userdebug_or_eng(`
binder_call(untrusted_app, imscm)
+ allow untrusted_app imscm_service:service_manager find;
')
# for finding wbc_service