sepolicy:permission for untrusted_app to access
permission for untrusted_app with sdk version 30 to access qesdk. Change-Id: I17886936dcdb44b4d824be04dc4e13ae7c9d502c CRs-Fixed: 2985891
This commit is contained in:
		@@ -30,12 +30,9 @@ typeattribute vendor_qesdk_app coredomain;
 | 
			
		||||
app_domain(vendor_qesdk_app)
 | 
			
		||||
#allow vendor_qesdk_app to access vendor_hal_qesdhal
 | 
			
		||||
qesdk_app_access(vendor_qesdk_app);
 | 
			
		||||
allow vendor_qesdk_app activity_service:service_manager find;
 | 
			
		||||
allow vendor_qesdk_app content_capture_service:service_manager find;
 | 
			
		||||
allow vendor_qesdk_app system_data_file:dir search;
 | 
			
		||||
allow vendor_qesdk_app system_app_data_file:dir { getattr search };
 | 
			
		||||
allow vendor_qesdk_app tethering_service:service_manager find;
 | 
			
		||||
allow vendor_qesdk_app user_profile_root_file:dir search;
 | 
			
		||||
allow vendor_qesdk_app vendor_perf_service:service_manager find;
 | 
			
		||||
allow vendor_qesdk_app app_api_service:service_manager find;
 | 
			
		||||
hal_client_domain(vendor_qesdk_app, vendor_hal_perf)
 | 
			
		||||
add_service(vendor_qesdk_app, vendor_qesdk_service);
 | 
			
		||||
 
 | 
			
		||||
@@ -34,3 +34,4 @@ userdebug_or_eng(`
 | 
			
		||||
')
 | 
			
		||||
unix_socket_connect(untrusted_app, vendor_qvrd, vendor_qvrd);
 | 
			
		||||
allow untrusted_app vendor_qvrd:fd use;
 | 
			
		||||
qesdk_app_access(untrusted_app);
 | 
			
		||||
 
 | 
			
		||||
		Reference in New Issue
	
	Block a user