summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorKevin Tang <zhikait@codeaurora.org>2014-12-08 22:31:43 -0800
committerKevin Tang <zhikait@codeaurora.org>2014-12-08 22:31:43 -0800
commitba4eed9d9ae2af776e9f8b0b5105b52b561125e7 (patch)
treed9ec2350da451151cb1d851596c3acb8aa2068d5
parentfbc4f83670ee249790928891461fd85b48a7d7fc (diff)
downloadandroid_device_qcom_sepolicy-ba4eed9d9ae2af776e9f8b0b5105b52b561125e7.tar.gz
android_device_qcom_sepolicy-ba4eed9d9ae2af776e9f8b0b5105b52b561125e7.tar.bz2
android_device_qcom_sepolicy-ba4eed9d9ae2af776e9f8b0b5105b52b561125e7.zip
sepolicy: allow location apps to access sensor services
Added rules for accessing sensor manager services from location applications. CRs-Fixed: 764189 Change-Id: I1e98ed907c70a78198ef35cb70fddfbe48dcb82d
-rw-r--r--common/location.te2
1 files changed, 2 insertions, 0 deletions
diff --git a/common/location.te b/common/location.te
index 5edf1326..1698fd46 100644
--- a/common/location.te
+++ b/common/location.te
@@ -11,6 +11,7 @@ type_transition location location_data_file:sock_file location_socket;
qmux_socket(location)
binder_use(location)
+binder_call(location, system_server)
allow location location_data_file:dir rw_dir_perms;
allow location location_data_file:fifo_file create_file_perms;
@@ -23,6 +24,7 @@ allow location sensors:unix_stream_socket connectto;
allow location sensors_device:chr_file r_file_perms;
allow location sensors_socket:sock_file w_file_perms;
allow location self:netlink_socket create_socket_perms;
+allow location system_server:unix_stream_socket { read write };
dontaudit location domain:dir r_dir_perms;
r_dir_file(location, netmgrd)