From 2ec0388564af0daaddce793c62492f1c0a554b59 Mon Sep 17 00:00:00 2001
From: Todd Kennedy <toddke@google.com>
Date: Thu, 20 Dec 2018 07:50:53 -0800
Subject: [PATCH] Open permission manager service to the world

There are many permission related APIs currently handled by the
package manager service. These are simply pass throughs from the
package manager service to an internal API defined by the
permission manager service. Instead of this multi-hop, we want
to open the permission manager service directly to apps. For
legacy, we won't be able to remove the APIs from PackageManager,
but, the implementation should go directly to the Permission
Manager Service.

Test: System boots w/o selinux denials
Change-Id: I1d953077b3da18ccf44deb85b9084be68a2179bd
---
 public/service.te | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/public/service.te b/public/service.te
index 606602dba..4a404b38b 100644
--- a/public/service.te
+++ b/public/service.te
@@ -126,7 +126,7 @@ type overlay_service, system_api_service, system_server_service, service_manager
 type package_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
 type package_native_service, system_server_service, service_manager_type;
 type permission_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
-type permissionmgr_service, system_server_service, service_manager_type;
+type permissionmgr_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
 type persistent_data_block_service, system_api_service, system_server_service, service_manager_type;
 type pinner_service, system_server_service, service_manager_type;
 type power_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
-- 
GitLab