aboutsummaryrefslogtreecommitdiffstats
path: root/untrusted_app.te
diff options
context:
space:
mode:
authordcashman <dcashman@google.com>2015-04-07 15:48:58 -0700
committerdcashman <dcashman@google.com>2015-04-07 15:48:58 -0700
commit91b7c67d1647b2a88b1547cc57b69fc685bbac18 (patch)
tree5a504e57859f9a7d1738f5f8cf776d4619ffba1e /untrusted_app.te
parent3cc6fc5ffbd6e3d647f8c425e5298912d3733e45 (diff)
downloadandroid_external_sepolicy-91b7c67d1647b2a88b1547cc57b69fc685bbac18.tar.gz
android_external_sepolicy-91b7c67d1647b2a88b1547cc57b69fc685bbac18.tar.bz2
android_external_sepolicy-91b7c67d1647b2a88b1547cc57b69fc685bbac18.zip
Enforce more specific service access.
Move the following services from tmp_system_server_service to appropriate attributes: jobscheduler launcherapps location lock_settings media_projection media_router media_session mount netpolicy netstats Bug: 18106000 Change-Id: Ia82d475ec41f658851f945173c968f4abf57e7e1
Diffstat (limited to 'untrusted_app.te')
-rw-r--r--untrusted_app.te11
1 files changed, 0 insertions, 11 deletions
diff --git a/untrusted_app.te b/untrusted_app.te
index a51c6ea..c1135e8 100644
--- a/untrusted_app.te
+++ b/untrusted_app.te
@@ -90,17 +90,6 @@ allow untrusted_app system_api_service:service_manager find;
service_manager_local_audit_domain(untrusted_app)
auditallow untrusted_app {
tmp_system_server_service
- -healthd_service
- -jobscheduler_service
- -launcherapps_service
- -location_service
- -lock_settings_service
- -media_router_service
- -media_session_service
- -meminfo_service
- -mount_service
- -netpolicy_service
- -netstats_service
-network_management_service
-network_score_service
-notification_service