diff options
author | dcashman <dcashman@google.com> | 2015-03-02 10:59:05 -0800 |
---|---|---|
committer | dcashman <dcashman@google.com> | 2015-03-02 11:31:26 -0800 |
commit | 6a2451b580487a07a7e9919efa3ea5289f3ed696 (patch) | |
tree | 1a053a954488047dea43556a8c7604371bc96f1c /untrusted_app.te | |
parent | e4da594d9db3554621c9818ab2144f71ec9a8dac (diff) | |
download | android_external_sepolicy-6a2451b580487a07a7e9919efa3ea5289f3ed696.tar.gz android_external_sepolicy-6a2451b580487a07a7e9919efa3ea5289f3ed696.tar.bz2 android_external_sepolicy-6a2451b580487a07a7e9919efa3ea5289f3ed696.zip |
Allow platform_app access to keystore.
Encountered when certinstaller tries to talk to keystore:
ComponentInfo{com.android.certinstaller/com.android.certinstaller.CertInstaller}: java.lang.NullPointerException: Attempt to invoke interface method 'int android.security.IKeystoreService.test()' on a null object reference
Address the following denial:
avc: denied { find } for service=android.security.keystore scontext=u:r:platform_app:s0:c512,c768 tcontext=u:object_r:keystore_service:s0 tclass=service_manager
Bug: 19347232
Change-Id: I35b46da3c78b384cf04216be937c6b5bfa86452d
Diffstat (limited to 'untrusted_app.te')
-rw-r--r-- | untrusted_app.te | 1 |
1 files changed, 0 insertions, 1 deletions
diff --git a/untrusted_app.te b/untrusted_app.te index ae65719..bb93526 100644 --- a/untrusted_app.te +++ b/untrusted_app.te @@ -64,7 +64,6 @@ allow untrusted_app cache_file:dir create_dir_perms; allow untrusted_app cache_file:file create_file_perms; allow untrusted_app drmserver_service:service_manager find; -allow untrusted_app keystore_service:service_manager find; allow untrusted_app mediaserver_service:service_manager find; allow untrusted_app nfc_service:service_manager find; allow untrusted_app radio_service:service_manager find; |