Merge "sepolicy:permission for untrusted_app to access"

This commit is contained in:
qctecmdr
2021-07-22 10:56:32 -07:00
committed by Gerrit - the friendly Code Review server
2 changed files with 2 additions and 4 deletions

View File

@@ -30,12 +30,9 @@ typeattribute vendor_qesdk_app coredomain;
app_domain(vendor_qesdk_app)
#allow vendor_qesdk_app to access vendor_hal_qesdhal
qesdk_app_access(vendor_qesdk_app);
allow vendor_qesdk_app activity_service:service_manager find;
allow vendor_qesdk_app content_capture_service:service_manager find;
allow vendor_qesdk_app system_data_file:dir search;
allow vendor_qesdk_app system_app_data_file:dir { getattr search };
allow vendor_qesdk_app tethering_service:service_manager find;
allow vendor_qesdk_app user_profile_root_file:dir search;
allow vendor_qesdk_app vendor_perf_service:service_manager find;
allow vendor_qesdk_app app_api_service:service_manager find;
hal_client_domain(vendor_qesdk_app, vendor_hal_perf)
add_service(vendor_qesdk_app, vendor_qesdk_service);

View File

@@ -34,3 +34,4 @@ userdebug_or_eng(`
')
unix_socket_connect(untrusted_app, vendor_qvrd, vendor_qvrd);
allow untrusted_app vendor_qvrd:fd use;
qesdk_app_access(untrusted_app);