inputflinger.te · fbaf72ed8f7f7e0e0d53be90354e8d6cd9d18c99 · Werner Sembach / AndroidSystemSEPolicy · GitLab

Snippets Groups Projects

Something went wrong on our end

10 years ago

Restrict service_manager find and list access. · cd82557d

dcashman authored 10 years ago

All domains are currently granted list and find service_manager
permissions, but this is not necessary.  Pare the permissions
which did not trigger any of the auditallow reporting.

Bug: 18106000
Change-Id: Ie0ce8de2af8af2cbe4ce388a2dcf4534694c994a

cd82557d

Restrict service_manager find and list access.

dcashman authored 10 years ago

All domains are currently granted list and find service_manager
permissions, but this is not necessary.  Pare the permissions
which did not trigger any of the auditallow reporting.

Bug: 18106000
Change-Id: Ie0ce8de2af8af2cbe4ce388a2dcf4534694c994a

inputflinger.te 289 B

# inputflinger
type inputflinger, domain;
type inputflinger_exec, exec_type, file_type;

init_daemon_domain(inputflinger)
binder_use(inputflinger)
binder_service(inputflinger)

binder_call(inputflinger, system_server)

allow inputflinger inputflinger_service:service_manager { add find };