Merge "sepolicy:permission for untrusted_app to access"
This commit is contained in:
		
				
					committed by
					
						
						Gerrit - the friendly Code Review server
					
				
			
			
				
	
			
			
			
					commit
					154aac708d
				
			@@ -30,12 +30,9 @@ typeattribute vendor_qesdk_app coredomain;
 | 
			
		||||
app_domain(vendor_qesdk_app)
 | 
			
		||||
#allow vendor_qesdk_app to access vendor_hal_qesdhal
 | 
			
		||||
qesdk_app_access(vendor_qesdk_app);
 | 
			
		||||
allow vendor_qesdk_app activity_service:service_manager find;
 | 
			
		||||
allow vendor_qesdk_app content_capture_service:service_manager find;
 | 
			
		||||
allow vendor_qesdk_app system_data_file:dir search;
 | 
			
		||||
allow vendor_qesdk_app system_app_data_file:dir { getattr search };
 | 
			
		||||
allow vendor_qesdk_app tethering_service:service_manager find;
 | 
			
		||||
allow vendor_qesdk_app user_profile_root_file:dir search;
 | 
			
		||||
allow vendor_qesdk_app vendor_perf_service:service_manager find;
 | 
			
		||||
allow vendor_qesdk_app app_api_service:service_manager find;
 | 
			
		||||
hal_client_domain(vendor_qesdk_app, vendor_hal_perf)
 | 
			
		||||
add_service(vendor_qesdk_app, vendor_qesdk_service);
 | 
			
		||||
 
 | 
			
		||||
@@ -34,3 +34,4 @@ userdebug_or_eng(`
 | 
			
		||||
')
 | 
			
		||||
unix_socket_connect(untrusted_app, vendor_qvrd, vendor_qvrd);
 | 
			
		||||
allow untrusted_app vendor_qvrd:fd use;
 | 
			
		||||
qesdk_app_access(untrusted_app);
 | 
			
		||||
 
 | 
			
		||||
		Reference in New Issue
	
	Block a user