diff options
author | Zhao Fan <zhaof@codeaurora.org> | 2016-09-30 16:27:27 +0800 |
---|---|---|
committer | Biswajit Paul <biswajitpaul@codeaurora.org> | 2016-10-03 15:13:44 -0700 |
commit | f043009b151c298ba1c90d5a2e4588d61e4ccf6b (patch) | |
tree | ecc807770f0e81b730259f61443a874ea0032665 | |
parent | dcde27f184b6d5222794cf6ba51487324464eb67 (diff) | |
download | android_device_qcom_sepolicy-f043009b151c298ba1c90d5a2e4588d61e4ccf6b.tar.gz android_device_qcom_sepolicy-f043009b151c298ba1c90d5a2e4588d61e4ccf6b.tar.bz2 android_device_qcom_sepolicy-f043009b151c298ba1c90d5a2e4588d61e4ccf6b.zip |
Allow apps to find imscm service
Apps fails to connect to imscm service. Allow it
to find imscm service
Change-Id: I39c7b4b81ce0ebc91abe14fc153088e710d195fa
CRs-Fixed: 1073791
-rw-r--r-- | common/platform_app.te | 2 | ||||
-rw-r--r-- | common/system_app.te | 1 | ||||
-rw-r--r-- | common/untrusted_app.te | 1 |
3 files changed, 3 insertions, 1 deletions
diff --git a/common/platform_app.te b/common/platform_app.te index bc558e90..0dd94ddc 100644 --- a/common/platform_app.te +++ b/common/platform_app.te @@ -10,7 +10,7 @@ binder_call(platform_app, secotad) # Allow platform apps to interact with imscm daemon binder_call(platform_app, imscm) - +allow platform_app imscm_service:service_manager find; allow platform_app color_service:service_manager find; # Allow NFC service to be found diff --git a/common/system_app.te b/common/system_app.te index 255e5664..01d999af 100644 --- a/common/system_app.te +++ b/common/system_app.te @@ -100,6 +100,7 @@ binder_call(system_app, secotad) # allow system_app to interact with imscm daemon binder_call(system_app, imscm) +allow system_app imscm_service:service_manager find; # access to seemp folder allow system_app seemp_file:dir r_dir_perms; diff --git a/common/untrusted_app.te b/common/untrusted_app.te index c2b75d54..8f6d10b7 100644 --- a/common/untrusted_app.te +++ b/common/untrusted_app.te @@ -9,6 +9,7 @@ neverallow untrusted_app diag_device:chr_file rw_file_perms; # using binder call userdebug_or_eng(` binder_call(untrusted_app, imscm) + allow untrusted_app imscm_service:service_manager find; ') # for finding wbc_service |