Skip to content
Snippets Groups Projects
Commit 7d1deec4 authored by dcashman's avatar dcashman
Browse files

Record surfaceflinger power_service access.

Address the following log entry:
SELinux : avc:  granted  { find } for service=power scontext=u:r:surfaceflinger:s0 tcontext=u:object_r:power_service:s0 tclass=service_manager

Change-Id: Id750ba9f99c622351fb3206ad007eae8a713adea
parent d3205254
No related branches found
No related tags found
No related merge requests found
...@@ -64,6 +64,17 @@ allow surfaceflinger surfaceflinger_service:service_manager { add find }; ...@@ -64,6 +64,17 @@ allow surfaceflinger surfaceflinger_service:service_manager { add find };
allow surfaceflinger system_server_service:service_manager find; allow surfaceflinger system_server_service:service_manager find;
allow surfaceflinger tmp_system_server_service:service_manager find; allow surfaceflinger tmp_system_server_service:service_manager find;
# address tmp_system_server_service accesses
allow surfaceflinger {
power_service
}:service_manager find;
service_manager_local_audit_domain(surfaceflinger)
auditallow surfaceflinger {
tmp_system_server_service
-power_service
}:service_manager find;
### ###
### Neverallow rules ### Neverallow rules
### ###
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment