diff options
| author | dcashman <dcashman@google.com> | 2015-01-16 00:03:54 +0000 |
|---|---|---|
| committer | Android Git Automerger <android-git-automerger@android.com> | 2015-01-16 00:03:54 +0000 |
| commit | 7dc1417b628d017b79848c62b450078834e7c612 (patch) | |
| tree | f1222325fead111735512a6287a32d873e7eeb7d /system_server.te | |
| parent | e3eb8905b33ae9d2f63a3ec12d5421546a1aa7e7 (diff) | |
| parent | c1142451d9d91fba3f4f3910ecbfd0b2263c445d (diff) | |
| download | android_external_sepolicy-7dc1417b628d017b79848c62b450078834e7c612.tar.gz android_external_sepolicy-7dc1417b628d017b79848c62b450078834e7c612.tar.bz2 android_external_sepolicy-7dc1417b628d017b79848c62b450078834e7c612.zip | |
am c1142451: am 0d16b5ac: Merge "Remove known system_server service accesses from auditing."
* commit 'c1142451d9d91fba3f4f3910ecbfd0b2263c445d':
Remove known system_server service accesses from auditing.
Diffstat (limited to 'system_server.te')
| -rw-r--r-- | system_server.te | 17 |
1 files changed, 15 insertions, 2 deletions
diff --git a/system_server.te b/system_server.te index df9d159..c7c2138 100644 --- a/system_server.te +++ b/system_server.te @@ -387,17 +387,30 @@ auditallow system_server { -radio_service -system_server_service -surfaceflinger_service + -tmp_system_server_service }:service_manager find; # address tmp_system_server_service accesses -allow system_server dreams_service:service_manager find; -allow system_server mount_service:service_manager find; +allow system_server { + account_service + backup_service + dreams_service + mount_service + package_service + wallpaper_service + wifi_service +}:service_manager find; service_manager_local_audit_domain(system_server) auditallow system_server { tmp_system_server_service + -account_service + -backup_service -dreams_service -mount_service + -package_service + -wallpaper_service + -wifi_service }:service_manager find; allow system_server keystore:keystore_key { |