aboutsummaryrefslogtreecommitdiffstats
path: root/system_server.te
diff options
context:
space:
mode:
authordcashman <dcashman@google.com>2015-01-16 17:27:25 -0800
committerdcashman <dcashman@google.com>2015-01-16 17:27:25 -0800
commit566e8fe2580ce7d6a8ef76ffce6b457b4e71dd63 (patch)
tree897e5c3e39c8833182298a1bcb96933188784d6a /system_server.te
parent7d1deec4c48a5c15a12249aa841ec5dabab6f814 (diff)
downloadandroid_external_sepolicy-566e8fe2580ce7d6a8ef76ffce6b457b4e71dd63.tar.gz
android_external_sepolicy-566e8fe2580ce7d6a8ef76ffce6b457b4e71dd63.tar.bz2
android_external_sepolicy-566e8fe2580ce7d6a8ef76ffce6b457b4e71dd63.zip
Record service accesses.
Reduce logspam and record further observed service connections. Bug: 18106000 Change-Id: I9a57e4bb8f1c8e066861719fb208c691498842a8
Diffstat (limited to 'system_server.te')
-rw-r--r--system_server.te50
1 files changed, 39 insertions, 11 deletions
diff --git a/system_server.te b/system_server.te
index 73ff33c..aaa0657 100644
--- a/system_server.te
+++ b/system_server.te
@@ -386,27 +386,55 @@ auditallow system_server {
-tmp_system_server_service
}:service_manager find;
-# address tmp_system_server_service accesses
-allow system_server {
- account_service
- backup_service
- dreams_service
- mount_service
- package_service
- wallpaper_service
- wifi_service
-}:service_manager find;
-
service_manager_local_audit_domain(system_server)
auditallow system_server {
tmp_system_server_service
+ -accessibility_service
-account_service
+ -activity_service
+ -alarm_service
+ -appops_service
+ -assetatlas_service
+ -audio_service
-backup_service
+ -batterystats_service
+ -bluetooth_manager_service
+ -connectivity_service
+ -content_service
+ -device_policy_service
+ -display_service
-dreams_service
+ -dropbox_service
+ -ethernet_service
+ -hdmi_control_service
+ -input_method_service
+ -input_service
+ -jobscheduler_service
+ -location_service
+ -lock_settings_service
+ -media_router_service
+ -media_session_service
-mount_service
+ -network_management_service
+ -network_score_service
+ -notification_service
-package_service
+ -power_service
+ -registry_service
+ -sensorservice_service
+ -statusbar_service
+ -textservices_service
+ -trust_service
+ -uimode_service
+ -updatelock_service
+ -usagestats_service
+ -user_service
+ -vibrator_service
-wallpaper_service
+ -webviewupdate_service
-wifi_service
+ -wifip2p_service
+ -window_service
}:service_manager find;
allow system_server keystore:keystore_key {