diff options
| author | dcashman <dcashman@google.com> | 2015-04-08 15:12:24 -0700 |
|---|---|---|
| committer | dcashman <dcashman@google.com> | 2015-04-09 09:45:54 -0700 |
| commit | bd7f5803f924b0ca318c1d426b683c3f658754f9 (patch) | |
| tree | 70d7652b2bc80f0e4983cfd928a2db77173f0574 /shared_relro.te | |
| parent | 03a6f64f9568e2c58eb043463a5b4ff1cf10bef6 (diff) | |
| download | android_external_sepolicy-bd7f5803f924b0ca318c1d426b683c3f658754f9.tar.gz android_external_sepolicy-bd7f5803f924b0ca318c1d426b683c3f658754f9.tar.bz2 android_external_sepolicy-bd7f5803f924b0ca318c1d426b683c3f658754f9.zip | |
Enforce more specific service access.
Move the remaining services from tmp_system_server_service to appropriate
attributes and remove tmp_system_server and associated logging:
registry
restrictions
rttmanager
scheduling_policy
search
sensorservice
serial
servicediscovery
statusbar
task
textservices
telecom_service
trust_service
uimode
updatelock
usagestats
usb
user
vibrator
voiceinteraction
wallpaper
webviewupdate
wifip2p
wifi
window
Bug: 18106000
Change-Id: Ia0a6d47099d82c53ba403af394537db6fbc71ca0
Diffstat (limited to 'shared_relro.te')
| -rw-r--r-- | shared_relro.te | 8 |
1 files changed, 1 insertions, 7 deletions
diff --git a/shared_relro.te b/shared_relro.te index c97ab5c..6a1dfd4 100644 --- a/shared_relro.te +++ b/shared_relro.te @@ -10,10 +10,4 @@ allow shared_relro shared_relro_file:dir rw_dir_perms; allow shared_relro shared_relro_file:file create_file_perms; # Needs to contact the "webviewupdate" and "activity" services -allow shared_relro tmp_system_server_service:service_manager find; - -service_manager_local_audit_domain(shared_relro) -auditallow shared_relro { - tmp_system_server_service - -webviewupdate_service -}:service_manager find; +allow shared_relro webviewupdate_service:service_manager find; |