diff --git a/priv_app.te b/priv_app.te index 275020f128dd0bed80dee7f133306ce4c9dcbe36..79e9e96e98646cba4d8eec078f0da9d89836ff7b 100644 --- a/priv_app.te +++ b/priv_app.te @@ -31,6 +31,7 @@ allow priv_app surfaceflinger_service:service_manager find; allow priv_app app_api_service:service_manager find; allow priv_app system_api_service:service_manager find; allow priv_app persistent_data_block_service:service_manager find; +allow priv_app recovery_service:service_manager find; # Traverse into /mnt/media_rw for bypassing FUSE daemon # TODO: narrow this to just MediaProvider diff --git a/service.te b/service.te index 34bd50a954c7fe4db134fa91437406414f2093d1..290c51fa429217b09ed2295fecf96e94db948934 100644 --- a/service.te +++ b/service.te @@ -81,6 +81,7 @@ type power_service, app_api_service, system_server_service, service_manager_type type print_service, app_api_service, system_server_service, service_manager_type; type processinfo_service, system_server_service, service_manager_type; type procstats_service, app_api_service, system_server_service, service_manager_type; +type recovery_service, system_server_service, service_manager_type; type registry_service, app_api_service, system_server_service, service_manager_type; type restrictions_service, app_api_service, system_server_service, service_manager_type; type rttmanager_service, app_api_service, system_server_service, service_manager_type; diff --git a/service_contexts b/service_contexts index 39e004c3a0680594a2093d18e0390cdfa422e4ed..dfd7404088eed5ab4140048f9e8170e7090b6db8 100644 --- a/service_contexts +++ b/service_contexts @@ -101,6 +101,7 @@ procstats u:object_r:procstats_service:s0 radio.phonesubinfo u:object_r:radio_service:s0 radio.phone u:object_r:radio_service:s0 radio.sms u:object_r:radio_service:s0 +recovery u:object_r:recovery_service:s0 restrictions u:object_r:restrictions_service:s0 rttmanager u:object_r:rttmanager_service:s0 samplingprofiler u:object_r:samplingprofiler_service:s0