diff options
| author | dcashman <dcashman@google.com> | 2015-04-03 14:24:02 -0700 |
|---|---|---|
| committer | dcashman <dcashman@google.com> | 2015-04-03 14:29:40 -0700 |
| commit | b075338d0e335eb2dbd786ae4f8e033e78eeca37 (patch) | |
| tree | aebb975e1a21f1bacca500f6d50d24335e858bb4 /service.te | |
| parent | a0756d60d8f704ef9402269af4ea3fa71b86c8a5 (diff) | |
| download | android_external_sepolicy-b075338d0e335eb2dbd786ae4f8e033e78eeca37.tar.gz android_external_sepolicy-b075338d0e335eb2dbd786ae4f8e033e78eeca37.tar.bz2 android_external_sepolicy-b075338d0e335eb2dbd786ae4f8e033e78eeca37.zip | |
Assign app_api_service attribute to services.
Move accessibility, account, appops and activity services into enforcing with
app_api_service level of access, with additional grants to mediaserver and
isolated app.
Bug: 18106000
Change-Id: I1d5a79b9223026415f1690e8e9325ec4c270e3dd
Diffstat (limited to 'service.te')
| -rw-r--r-- | service.te | 8 |
1 files changed, 4 insertions, 4 deletions
@@ -11,11 +11,11 @@ type surfaceflinger_service, service_manager_type; type system_app_service, service_manager_type; # system_server_services broken down -type accessibility_service, tmp_system_server_service, service_manager_type; -type account_service, tmp_system_server_service, service_manager_type; -type activity_service, tmp_system_server_service, service_manager_type; +type accessibility_service, app_api_service, system_server_service, service_manager_type; +type account_service, app_api_service, system_server_service, service_manager_type; +type activity_service, app_api_service, system_server_service, service_manager_type; type alarm_service, tmp_system_server_service, service_manager_type; -type appops_service, tmp_system_server_service, service_manager_type; +type appops_service, app_api_service, system_server_service, service_manager_type; type appwidget_service, tmp_system_server_service, service_manager_type; type assetatlas_service, tmp_system_server_service, service_manager_type; type audio_service, tmp_system_server_service, service_manager_type; |