summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorLinux Build Service Account <lnxbuild@localhost>2014-12-10 19:25:25 -0800
committerGerrit - the friendly Code Review server <code-review@localhost>2014-12-10 19:25:25 -0800
commite2fbc9047706ee6546aa1d1ef223d02c189e9b31 (patch)
treee2baad36a2a35cd4346040b5beb204f5efbcb186
parent5546800622e06c5088a3bd1632a0b0194d8000d4 (diff)
parentba4eed9d9ae2af776e9f8b0b5105b52b561125e7 (diff)
downloadandroid_device_qcom_sepolicy-e2fbc9047706ee6546aa1d1ef223d02c189e9b31.tar.gz
android_device_qcom_sepolicy-e2fbc9047706ee6546aa1d1ef223d02c189e9b31.tar.bz2
android_device_qcom_sepolicy-e2fbc9047706ee6546aa1d1ef223d02c189e9b31.zip
Merge "sepolicy: allow location apps to access sensor services"
-rw-r--r--common/location.te2
1 files changed, 2 insertions, 0 deletions
diff --git a/common/location.te b/common/location.te
index 5edf1326..1698fd46 100644
--- a/common/location.te
+++ b/common/location.te
@@ -11,6 +11,7 @@ type_transition location location_data_file:sock_file location_socket;
qmux_socket(location)
binder_use(location)
+binder_call(location, system_server)
allow location location_data_file:dir rw_dir_perms;
allow location location_data_file:fifo_file create_file_perms;
@@ -23,6 +24,7 @@ allow location sensors:unix_stream_socket connectto;
allow location sensors_device:chr_file r_file_perms;
allow location sensors_socket:sock_file w_file_perms;
allow location self:netlink_socket create_socket_perms;
+allow location system_server:unix_stream_socket { read write };
dontaudit location domain:dir r_dir_perms;
r_dir_file(location, netmgrd)