From 0b764ae98a7fe452690616b7d722a63bb7cd5fa8 Mon Sep 17 00:00:00 2001
From: dcashman <dcashman@google.com>
Date: Tue, 8 Sep 2015 18:22:12 -0700
Subject: [PATCH] Allow untrusted_app to list services.

CTS relies on the ability to see all services on the system to make sure
the dump permission is properly enforced on all services.  Allow this.

Bug: 23476772
Change-Id: I144b825c3a637962aaca59565c9f567953a866e8
---
 untrusted_app.te | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/untrusted_app.te b/untrusted_app.te
index 693a13cd6..2aa1495a4 100644
--- a/untrusted_app.te
+++ b/untrusted_app.te
@@ -80,6 +80,9 @@ allow untrusted_app mnt_media_rw_file:dir search;
 allow untrusted_app cache_file:dir create_dir_perms;
 allow untrusted_app cache_file:file create_file_perms;
 
+# allow cts to query all services
+allow untrusted_app servicemanager:service_manager list;
+
 allow untrusted_app drmserver_service:service_manager find;
 allow untrusted_app mediaserver_service:service_manager find;
 allow untrusted_app nfc_service:service_manager find;
-- 
GitLab