Skip to content
Snippets Groups Projects
  • Riley Spahn's avatar
    Add SELinux rules for service_manager. · f90c41f6
    Riley Spahn authored
    Add a service_mananger class with the verb add.
    Add a type that groups the services for each of the
    processes that is allowed to start services in service.te
    and an attribute for all services controlled by the service
    manager. Add the service_contexts file which maps service
    name to target label.
    
    Bug: 12909011
    Change-Id: I017032a50bc90c57b536e80b972118016d340c7d
    f90c41f6
nfc.te 414 B
# nfc subsystem
type nfc, domain;
app_domain(nfc)
net_domain(nfc)
binder_service(nfc)

# NFC device access.
allow nfc nfc_device:chr_file rw_file_perms;

# Data file accesses.
allow nfc nfc_data_file:dir create_dir_perms;
allow nfc nfc_data_file:notdevfile_class_set create_file_perms;

allow nfc sysfs_nfc_power_writable:file rw_file_perms;
allow nfc sysfs:file write;

allow nfc nfc_service:service_manager add;