Skip to content
Snippets Groups Projects
Commit 1c749e07 authored by dcashman's avatar dcashman Committed by android-build-merger
Browse files

Enable permission checking by binderservicedomain. 

am: 32d207e0

* commit '32d207e0':
  Enable permission checking by binderservicedomain.
parents 753148a8 32d207e0
Branches
Tags
No related merge requests found
Hide whitespace changes
Inline Side-by-side
Showing
with 3 additions and 0 deletions
binderservicedomain.te
+ 3
− 0
View file @ 1c749e07
...@@ -13,6 +13,9 @@ allow binderservicedomain console_device:chr_file rw_file_perms; ...@@ -13,6 +13,9 @@ allow binderservicedomain console_device:chr_file rw_file_perms;
allow binderservicedomain appdomain:fd use; allow binderservicedomain appdomain:fd use;
allow binderservicedomain appdomain:fifo_file write; allow binderservicedomain appdomain:fifo_file write;
# allow all services to run permission checks
allow binderservicedomain permission_service:service_manager find;
allow binderservicedomain keystore:keystore_key { get_state get insert delete exist list sign verify }; allow binderservicedomain keystore:keystore_key { get_state get insert delete exist list sign verify };
use_keystore(binderservicedomain) use_keystore(binderservicedomain)
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment