aboutsummaryrefslogtreecommitdiffstats
path: root/system_server.te
diff options
context:
space:
mode:
authordcashman <dcashman@google.com>2015-04-07 15:48:58 -0700
committerdcashman <dcashman@google.com>2015-04-07 15:48:58 -0700
commit91b7c67d1647b2a88b1547cc57b69fc685bbac18 (patch)
tree5a504e57859f9a7d1738f5f8cf776d4619ffba1e /system_server.te
parent3cc6fc5ffbd6e3d647f8c425e5298912d3733e45 (diff)
downloadandroid_external_sepolicy-91b7c67d1647b2a88b1547cc57b69fc685bbac18.tar.gz
android_external_sepolicy-91b7c67d1647b2a88b1547cc57b69fc685bbac18.tar.bz2
android_external_sepolicy-91b7c67d1647b2a88b1547cc57b69fc685bbac18.zip
Enforce more specific service access.
Move the following services from tmp_system_server_service to appropriate attributes: jobscheduler launcherapps location lock_settings media_projection media_router media_session mount netpolicy netstats Bug: 18106000 Change-Id: Ia82d475ec41f658851f945173c968f4abf57e7e1
Diffstat (limited to 'system_server.te')
-rw-r--r--system_server.te7
1 files changed, 0 insertions, 7 deletions
diff --git a/system_server.te b/system_server.te
index 80e06e8..895bd44 100644
--- a/system_server.te
+++ b/system_server.te
@@ -372,13 +372,6 @@ allow system_server tmp_system_server_service:service_manager { add find };
service_manager_local_audit_domain(system_server)
auditallow system_server {
tmp_system_server_service
- -jobscheduler_service
- -location_service
- -lock_settings_service
- -media_router_service
- -media_session_service
- -mount_service
- -netpolicy_service
-network_management_service
-network_score_service
-notification_service