Skip to content
Snippets Groups Projects
Commit 0780f30c authored by dcashman's avatar dcashman
Browse files

Allow dumpstate and shell to list services.

Addresses the following denials:
avc:  denied  { list } for service=NULL scontext=u:r:shell:s0 tcontext=u:r:servicemanager:s0 tclass=service_manager
avc:  denied  { list } for service=NULL scontext=u:r:dumpstate:s0 tcontext=u:r:servicemanager:s0 tclass=service_manager

Bug: 18864737
Change-Id: I72bd2cd9663f1df9410c2139411038fa997bf1b4
parent 39c339a4
No related branches found
No related tags found
No related merge requests found
...@@ -118,3 +118,5 @@ allow dumpstate { ...@@ -118,3 +118,5 @@ allow dumpstate {
system_app_service system_app_service
system_server_service system_server_service
}:service_manager find; }:service_manager find;
allow dumpstate servicemanager:service_manager list;
...@@ -55,3 +55,6 @@ allow shell debugfs:file r_file_perms; ...@@ -55,3 +55,6 @@ allow shell debugfs:file r_file_perms;
# allow shell to run dmesg # allow shell to run dmesg
allow shell kernel:system syslog_read; allow shell kernel:system syslog_read;
# allow shell to list services
allow shell servicemanager:service_manager list;
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment