From 41ab29eeb3b3f680bc9f019034d7c6e31aab1455 Mon Sep 17 00:00:00 2001 From: Kenny Root <kroot@google.com> Date: Mon, 5 Nov 2018 16:05:20 +0900 Subject: [PATCH] Allow SystemUI to talk to ADB service Mark the ADB service as a system_api_service so that SystemUI can tell it that the device is accepted. Refactoring split the AdbService out of the UsbService. UsbService is marked as an app_api_service which SystemUI is allowed to connect to; AdbService must be marked similarly as either system_api_service or app_api_service. However, only system apps should talk to AdbService currently. SELinux : avc: denied { find } for service=adb pid=1737 uid=10041 scontext=u:r:platform_app:s0:c512,c768 tcontext=u:object_r:adb_service:s0 tclass=service_manager permissive=0 Introduced in Change-Id Ibf23964665a115a5bc835820dcff98aaf7ba610f Test: Flash userdebug, accept ADB key, and replug USB Bug: 118999282 Change-Id: I47b5090908ed84d0ba7a9fca100b299011bf8796 --- public/service.te | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/public/service.te b/public/service.te index dd80f92bc..10222ebd6 100644 --- a/public/service.te +++ b/public/service.te @@ -41,7 +41,7 @@ type accessibility_service, app_api_service, ephemeral_app_api_service, system_s type account_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type; type activity_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type; type activity_task_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type; -type adb_service, system_server_service, service_manager_type; +type adb_service, system_api_service, system_server_service, service_manager_type; type alarm_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type; type app_binding_service, system_server_service, service_manager_type; type appops_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type; -- GitLab