From 0ac3dea71b0d3af25ce2cdbd324b6616f63fb1d3 Mon Sep 17 00:00:00 2001 From: Michael Groover <mpgroover@google.com> Date: Tue, 4 Dec 2018 22:38:01 -0800 Subject: [PATCH] Add selinux policy for new SensorPrivacyService Test: manually verified SensorPrivacyService is accessible Bug: 110842805 Change-Id: Idd215f338f2da0dab4898ea06fa08d9b4a1bcb5f --- private/compat/28.0/28.0.ignore.cil | 1 + private/service_contexts | 1 + public/service.te | 1 + 3 files changed, 3 insertions(+) diff --git a/private/compat/28.0/28.0.ignore.cil b/private/compat/28.0/28.0.ignore.cil index dfb1372bd..36f4d17dd 100644 --- a/private/compat/28.0/28.0.ignore.cil +++ b/private/compat/28.0/28.0.ignore.cil @@ -66,6 +66,7 @@ recovery_socket role_service runtime_service + sensor_privacy_service super_block_device system_lmk_prop system_suspend_hwservice diff --git a/private/service_contexts b/private/service_contexts index 1a9be8cba..8122b4c3b 100644 --- a/private/service_contexts +++ b/private/service_contexts @@ -153,6 +153,7 @@ search u:object_r:search_service:s0 secure_element u:object_r:secure_element_service:s0 sec_key_att_app_id_provider u:object_r:sec_key_att_app_id_provider_service:s0 sensorservice u:object_r:sensorservice_service:s0 +sensor_privacy u:object_r:sensor_privacy_service:s0 serial u:object_r:serial_service:s0 servicediscovery u:object_r:servicediscovery_service:s0 settings u:object_r:settings_service:s0 diff --git a/public/service.te b/public/service.te index 2b5946fc0..f9890c101 100644 --- a/public/service.te +++ b/public/service.te @@ -141,6 +141,7 @@ type scheduling_policy_service, system_server_service, service_manager_type; type search_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type; type sec_key_att_app_id_provider_service, app_api_service, system_server_service, service_manager_type; type sensorservice_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type; +type sensor_privacy_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type; type serial_service, system_api_service, system_server_service, service_manager_type; type servicediscovery_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type; type settings_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type; -- GitLab