Skip to content
Snippets Groups Projects
Commit 3fa95acb authored by Andreas Gampe's avatar Andreas Gampe
Browse files

Sepolicy: Allow perfprofd to contact dropbox

Give rights to call dropbox via binder.

Test: m
Test: manual
Change-Id: I968c432a27bc8fbe677a2dd03671908d555f9df6
parent 1d2c3f44
No related branches found
No related tags found
No related merge requests found
......@@ -111,7 +111,11 @@ userdebug_or_eng(`
allow perfprofd su:unix_stream_socket { read write getattr sendto };
allow perfprofd su:fifo_file r_file_perms;
# For now, only allow su to communicate with us.
# Allow perfprofd to submit to dropbox.
allow perfprofd dropbox_service:service_manager find;
allow perfprofd system_server:binder call;
# Only servicemanager, su and systemserver can communicate.
neverallow domain perfprofd:binder call;
neverallow perfprofd { domain -servicemanager -su }:binder call;
neverallow perfprofd { domain -servicemanager -su -system_server }:binder call;
')
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment