Skip to content
Snippets Groups Projects
Commit 393b96e3 authored by Chad Brubaker's avatar Chad Brubaker Committed by android-build-merger
Browse files

Merge "Allow binder IPC between ephemeral app and appdomain" am: 0046853f 

am: 377e50d7

Change-Id: I405de2d676bf01053bf1e36049edd348675d183a
parents 1b0ec79f 377e50d7
No related branches found
No related tags found
No related merge requests found
Hide whitespace changes
Inline Side-by-side
public/app.te
+ 2
− 0
View file @ 393b96e3
...@@ -154,6 +154,8 @@ binder_use(appdomain) ...@@ -154,6 +154,8 @@ binder_use(appdomain)
binder_call(appdomain, binderservicedomain) binder_call(appdomain, binderservicedomain)
# Perform binder IPC to other apps. # Perform binder IPC to other apps.
binder_call(appdomain, appdomain) binder_call(appdomain, appdomain)
# Perform binder IPC to ephemeral apps.
binder_call(appdomain, ephemeral_app)
# Already connected, unnamed sockets being passed over some other IPC # Already connected, unnamed sockets being passed over some other IPC
# hence no sock_file or connectto permission. This appears to be how # hence no sock_file or connectto permission. This appears to be how
......
public/ephemeral_app.te
+ 2
− 0
View file @ 393b96e3
...@@ -54,6 +54,8 @@ binder_use(ephemeral_app) ...@@ -54,6 +54,8 @@ binder_use(ephemeral_app)
# Perform binder IPC to binder services. # Perform binder IPC to binder services.
binder_call(ephemeral_app, surfaceflinger) binder_call(ephemeral_app, surfaceflinger)
binder_call(ephemeral_app, system_server) binder_call(ephemeral_app, system_server)
# Perform binder IPC to apps.
binder_call(ephemeral_app, appdomain)
# Allow read access to ion memory allocation device # Allow read access to ion memory allocation device
allow ephemeral_app ion_device:chr_file { read open }; allow ephemeral_app ion_device:chr_file { read open };
......
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment