aboutsummaryrefslogtreecommitdiffstats
path: root/radio.te
diff options
context:
space:
mode:
authordcashman <dcashman@google.com>2015-04-02 16:50:08 -0700
committerdcashman <dcashman@google.com>2015-04-03 11:20:00 -0700
commitd12993f0846744ae8188a299cb1bb135014f626a (patch)
tree63daa4079e494addf58f80c606ec5d12419d58d8 /radio.te
parentb62b2020b33eccdf4984900227a53e1cdc9f59dd (diff)
downloadandroid_external_sepolicy-d12993f0846744ae8188a299cb1bb135014f626a.tar.gz
android_external_sepolicy-d12993f0846744ae8188a299cb1bb135014f626a.tar.bz2
android_external_sepolicy-d12993f0846744ae8188a299cb1bb135014f626a.zip
Add system_api_service and app_api_service attributes.
System services differ in designed access level. Add attributes reflecting this distinction and label services appropriately. Begin moving access to the newly labeled services by removing them from tmp_system_server_service into the newly made system_server_service attribute. Reflect the move of system_server_service from a type to an attribute by removing access to system_server_service where appropriate. Change-Id: I7fd06823328daaea6d6f96e4d6bd00332382230b
Diffstat (limited to 'radio.te')
-rw-r--r--radio.te3
1 files changed, 2 insertions, 1 deletions
diff --git a/radio.te b/radio.te
index 4ecf43c..19a9aec 100644
--- a/radio.te
+++ b/radio.te
@@ -34,8 +34,9 @@ allow radio drmserver_service:service_manager find;
allow radio mediaserver_service:service_manager find;
allow radio radio_service:service_manager { add find };
allow radio surfaceflinger_service:service_manager find;
-allow radio system_server_service:service_manager find;
allow radio tmp_system_server_service:service_manager find;
+allow radio app_api_service:service_manager find;
+allow radio system_api_service:service_manager find;
service_manager_local_audit_domain(radio)
auditallow radio {